Main Menu

Search

LINUX: TCPDUMP: How To Capture ARP and ICMP Traffic From Particular IP?

Below tcpdump command can be used.

tcpdump -nnti <interface> arp or icmp and host <IP> -w <output filename>

For e.g. if you want to capture tcpdumps on eth1 interface to capture all ARP & ICMP traffic coming from 10.10.10.10 and save it to /tmp/netcaptures.out file, your command will look as follows:

tcpdump -nnti eth1 arp or icmp and host 10.10.10.10 -w /tmp/netcaptures.out

Products to which Article Applies


All Linux Operating Systems

Additional Reference



http://homepage.smc.edu/morgan_david/cs70/assignments/lab-arpandping.htm



tarun boyella

No comments:

Post a Comment