Capture a full packet in TCPDUMP!!!

If you are troubleshooting a network connectivity issue and need a capture a "full packet" using tcpdump. Here is the syntax & example for the same.

The below mentioned command will display the output on the console / terminal, but if you wish to write it to a file use the option "-w" with a file name.


Syntax - To display the packet on the console / terminal
tcpdump -nnvvXXSs 1514 -i [internet_name]

Example - To display the packet on the console / terminal
tcpdump -nnvvXXSs 1514 -i eth0


Syntax - To write a packet on a file
tcpdump -nnvvXXSs 1514 -i [internet_name] -w [file_name]

Example - To write a packet on a file
tcpdump -nnvvXXSs 1514 -i eth0 -w dump_file



nn = don't resolve host names or port names
vv = verbosity level (can be v, vv, or vvv)
XX = Payload. Shows packets contents including its link level header, in HEX and ASCII
S = prints absolute sequence numbers
s = allows you to set snaplen (in this case 1514) so we capture the whole packet.

Leave your comment below