Welcome to Server Circle. It's a friendly site and all levels of experience are welcome. Be aware that we use cookies for your login.
Server Circle - Ask questions about Servers and get answers from experts.
Beta (0.89 sec)
Use tcpdump to only capture SYN packets

I'm trying to sniff just SYN packets and ignore the rest of the traffic on a link. Is there a setting in tcpdump ?

Thanks.
Asked by:
HarryP
1344 points
 Report Abuse
 Share Page - Category: Networking - Tags: Use tcpdump to only capture SYN packets
 Enter your response
Please use Pastie.org to paste lengthy code or to fix formatting issues with code
  • Responses in reverse (1)

Best Answer

Tcpdump -i eth1 'tcp[13] = 2' will match only packets with the SYN flag set.

Source:

http://acs.lbl.gov/~jason/tcpdump_advanced_filters.txt

Response by:
_SteveWilson ...
4290 points


  • Related Questions
About Us : Contact Us : Etiquette : Terms : CDN Failover : ShorterURL : CDN Fallback : © 2013 Server Circle