Comments on: How to monitor packets from a remote interface in real time http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/ or is it? Sat, 05 Jul 2008 08:58:27 +0000 http://wordpress.org/?v=2.5.1 By: admin http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-12116 admin Sun, 06 Apr 2008 13:20:32 +0000 #comment-12116 <blockquote><amitesh> does it mean that i am working on A and hosting C for writing through port 3000. if yes then how we have logged in to that comp i.e. B.</blockquote> Er, using SSH? <blockquote><amitesh> kindly tell me what does it mean as a whole. ssh root@hostC tcpdump -s 0 -U -n -w - -i eth0 tcp port 3000 > capture”"</blockquote> It means, ssh into hostC using ssh to capture with tcpdump all packets no matter how big the are, no address resolution, write to standard output, and make it packet-buffered (write each packet to stdout), capture on eth0 and port 3000 and redirect stdout to the "capture" FIFO on hostA, from which we will read from using wireshark. For more information, <code>man tcpdump</code>.

does it mean that i am working on A and hosting C for writing through port 3000. if yes then how we have logged in to that comp i.e. B.

Er, using SSH?

kindly tell me what does it mean as a whole.
ssh root@hostC tcpdump -s 0 -U -n -w - -i eth0 tcp port 3000 > capture””

It means, ssh into hostC using ssh to capture with tcpdump all packets no matter how big the are, no address resolution, write to standard output, and make it packet-buffered (write each packet to stdout), capture on eth0 and port 3000 and redirect stdout to the “capture” FIFO on hostA, from which we will read from using wireshark. For more information, man tcpdump.

]]> By: amitesh http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-12070 amitesh Sun, 06 Apr 2008 05:40:33 +0000 #comment-12070 kindly tell me what does it mean as a whole. ssh root@hostC tcpdump -s 0 -U -n -w - -i eth0 tcp port 3000 > capture"" kindly tell me what does it mean as a whole.
ssh root@hostC tcpdump -s 0 -U -n -w - -i eth0 tcp port 3000 > capture”"

]]> By: amitesh http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-11943 amitesh Fri, 04 Apr 2008 21:15:07 +0000 #comment-11943 golan@hostC:~$ nc -l -p 3000 hostA: our personal computer, * hostC: a test computer where we are going to send data so we can test everything. does it mean that i am working on A and hosting C for writing through port 3000. if yes then how we have logged in to that comp i.e. B. golan@hostC:~$ nc -l -p 3000
hostA: our personal computer, * hostC: a test computer where we are going to send data so we can test everything.

does it mean that i am working on A and hosting C for writing through port 3000. if yes then how we have logged in to that comp i.e. B.

]]> By: amitesh http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-11942 amitesh Fri, 04 Apr 2008 21:08:51 +0000 #comment-11942 its really nice conceptually. I will be needing your help in future. its really nice conceptually. I will be needing your help in future.

]]> By: bri http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-167 bri Tue, 03 Jul 2007 13:43:47 +0000 #comment-167 > wireshark -k -i > wireshark -k -i

]]> By: Jesus http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-18 Jesus Mon, 29 Jan 2007 18:44:28 +0000 #comment-18 <p>Half of it?</p> Half of it?

]]> By: tripu http://blog.notreally.org/articles/2007/01/24/how-to-monitor-packets-from-a-remote-interface/#comment-17 tripu Mon, 29 Jan 2007 15:56:55 +0000 #comment-17 <p>I think I got half of it.</p> <p>Kinda.</p> I think I got half of it.

Kinda.

]]>