Skip to content

Instantly share code, notes, and snippets.

@JosefJezek

JosefJezek/tcpdump.md

Created November 12, 2013 09:32
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JosefJezek/7428061 to your computer and use it in GitHub Desktop.
Save JosefJezek/7428061 to your computer and use it in GitHub Desktop.
Download ZIP
How to use TCPDump
Raw
tcpdump.md

How to use TCPDump

DHCP debugging with tcpdump

tcpdump filter to match DHCP packets including a specific Client MAC Address:

tcpdump -i br0 -vvv -s 1500 '((port 67 or port 68) and (udp[38:4] = 0x3e0ccf08))'

tcpdump filter to capture packets sent by the client (DISCOVER, REQUEST, INFORM):

tcpdump -i br0 -vvv -s 1500 '((port 67 or port 68) and (udp[8:1] = 0x1))'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment