tcpdump for People Who Would Rather Use the Browser
You do not need to read packets to get value out of tcpdump. Four flags, three filters and a handful of patterns will settle most arguments about whether…
| Flag | What it does | Why you want it |
|---|---|---|
-n |
No DNS or port name resolution | Resolution is slow and can hang mid capture |
-i any |
All interfaces | You rarely know which one the traffic uses |
-s 0 |
Full packet, no truncation | Default snaplen varies by version and loses TLS details |
-w file |
Write to disk instead of printing | Analyse later, in a proper tool, with no terminal noise |
Related reading: The tcpdump Capture That Showed Who Sent the Reset explores a connected angle.
Published on debugly.dev by Rohit Bhadani | Founder of Krova Cloud
