LFCE 95 🐧 tcpdump — Filters and Advanced Use
The previous chapter covered the fundamentals: the options, the basic filter primitives, and the output formats. This chapter covers the filters and techniques that turn tcpdump from a packet printer into a diagnostic instrument. The BPF filter language can match the specific fields inside the packet—the TCP flags, the ICMP type, the packet length, the…