netsec-djw2/hw2/hw2.md

Homework 2 - tcpdump

For each TCP dump below, I will show the command used, and the output of 10 packets

tcpdump to capture only DNS packets

Command

sudo tcpdump -c 10 -tt -XX -v -i any 'tcp port 53 or udp port 53'

Result

t1.md

tcpdump to capture TCP packets destined for either port 443 or 8080, originating from my computer

Command

sudo tcpdump -c 10 -tt -XX -v -i any 'tcp and src host 10.0.2.15 and (dst port 443 or dst port 8080)'

Result

t2.md

tcpdump capture where traffic is either UDP or TCP, inbound to my computer, and destined to a port in range 20000 to 35000

Command

sudo tcpdump -c 10 -tt -XX -v -i any 'dst host 10.0.2.15 and (tcp or udp) and dst portrange 20000-35000'

Result

t3.md