Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
How to use TCPDump

How to use TCPDump

DHCP debugging with tcpdump

tcpdump filter to match DHCP packets including a specific Client MAC Address:

tcpdump -i br0 -vvv -s 1500 '((port 67 or port 68) and (udp[38:4] = 0x3e0ccf08))'

tcpdump filter to capture packets sent by the client (DISCOVER, REQUEST, INFORM):

tcpdump -i br0 -vvv -s 1500 '((port 67 or port 68) and (udp[8:1] = 0x1))'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment