Skip to content

Instantly share code, notes, and snippets.

@tfmeneses

tfmeneses/tcpdump

Created March 10, 2022 14:00
Show Gist options
  • Save tfmeneses/5076143ebb441c1439306dda5d3dae58 to your computer and use it in GitHub Desktop.
Save tfmeneses/5076143ebb441c1439306dda5d3dae58 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tcpdump
How to capture All incoming HTTP GET traffic (or) requests
tcpdump -i any -s 0 -A 'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420'
How to capture only HTTP POST requests Incoming to port 80 ( Apache/NGINX)
tcpdump -i <INTF> -s 0 -A 'tcp dst port 80 and tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504F5354'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment