Tcpdump analysis tool

David Gibson david at gibson.dropbear.id.au
Thu Aug 23 10:27:38 EST 2001


On Thu, Aug 23, 2001 at 10:02:23AM +1000, Stephen Granger wrote:
> Hi,
> 
> I've just been asked to find out why a linux box used as a
> diald/internet gateway for a windows network, stays dialed up. Now
> I've done a tcpdump, without options, to ie tcpdump > tcpdump.dat ,
> over a 24 hour period. I've downloaded and installed tcptrace,
> though it keeps telling me that the file isn't in binary format. I
> was wondering if anyone else used any other tools that they would
> recommend to carry out the analysis of a tcpdump file.

You probably want 'tcpdump -s 1514 -w <filename>'  that will produce a
complete capture in binary form that you can then read into tcptrace
or ethereal.

-- 
David Gibson			| Microsoft: Making the easy things hard
david at gibson.dropbear.id.au	| and the hard things buggy
http://www.ozlabs.org/people/dgibson





More information about the linux mailing list