TCPDUMP & Save Capture to Remote Server w/ GZIP

tcpdump -i eth0 -w - | ssh forge.remotehost.com -c arcfour,blowfish-cbc -C -p 50005 "cat - | gzip > /tmp/eth0.pcap.gz"

NOTE: When opening the files you might need to strip the very top line with notepad++ as its a mistake header This is useful when the local machine where you need to do the packet capture with tcpdump doesn?t have enough room to save the file, where as your remote host does tcpdump -i eth0 -w - | ssh forge.remotehost.com -c arcfour,blowfish-cbc -C -p 50005 "cat - | gzip > /tmp/eth0.pcap.gz" Your @ PC1 doing a tcpdump of PC1s eth0 interface and its going to save the output @ PC2 who is called save.location.com to a file /tmp/eth0-to-me.pcap.gz again on PC2 More info @: http://www.kossboss.com/linuxtcpdump1

Sample Output

NOTE: When opening the files you might need to strip the very top line with notepad++ as its a mistake header
 
This is useful when the local machine where you need to do the packet capture with tcpdump doesn?t have enough room to save the file, where as your remote host does
 
tcpdump -i eth0 -w - | ssh forge.remotehost.com -c arcfour,blowfish-cbc -C -p 50005 "cat - | gzip > /tmp/eth0.pcap.gz"
 
Your @ PC1 doing a tcpdump of PC1s eth0 interface and its going to save the output @ PC2 who is called save.location.com to a file /tmp/eth0-to-me.pcap.gz again on PC2

By: bhbmaster

2013-05-30 07:41:22

ssh tcpdump ssh tcpdump gzip

Submit An Alternative

What Others Think

I think ssh forge.remotehost.com -c arcfour,blowfish-cbc -C command will work for you. These kinds of questions are answered with bachelor's dissertation to clear your term

callumbryne · 134 weeks and 5 days ago

I am working on my [computer science dissertation](https://www.theacademicpapers.co.uk/dissertation-writing-services-uk.php) and it was very hard for me to save captures to the remote server. However, now following your guide, I am enough able to use the commands of tcpdump in Notepad++ to access the remote server and save captures there.

JonathanNaylor · 125 weeks ago

Get your content ready for publication. We've got the best tips on how to make sure your online case study solver, blog post, or other piece of content is ready to go when you need it.

lilyjacob123 · 123 weeks and 3 days ago

Assignment help is a place to find assignment help and to get the assistance you need. We are online tutors who have come together to make life easier for students. https://financeassignmentshelp.com

lillianethan123 · 118 weeks and 2 days ago

Wow Thanks for making this valuable stuff post your article is very helpful for us i must appreciate this amazing blog Muslim Girl Names

ibrahimira · 117 weeks and 5 days ago

I don’t know how many forum pages I have visited up till now in the quest of looking for marketing research paper topics. Most of them were just regular discussions but this one is something that my brother would find helpful. So, I am going to share this post with him.

callumbryne · 117 weeks and 4 days ago

rahimhh21 · 111 weeks and 4 days ago

Perfecthomepugs · 102 weeks and 4 days ago

SENSA838 selaku situs agen slot online terbaik no 1 di Indonesia akan selalu menyediakan layanan yang terbaik dan bisa memuaskan para member setia kami. Diantara nya seperti memberikan informasi mengenai daftar provider slot gacor dan terpopuler saat ini. SENSA838 Bukan hanya sekedar memberikan statement sebagai situs tergacor 2022 saat ini, kami membuktikan dengan memberikan jaminan garansi gacor 100% atau biasa di sebut garansi kekalahan 100%. Yang di mana apabila member baru deposit dan mengalami kekalahan pertamanya maka member berhak mengklaim garansi kekalahan 100% sesuai dengan syarat dan ketentuan yang berlaku. Menarik kan ? Main slot kalah dan bisa klaim kembali saldo nya. Promo ini hanya berlaku untuk member yang baru melakukan deposit untuk pertama kali nya. Cara klaim nya juga sangat mudah sekali. Member hanya perlu melapor ke CS Livechat SENSA838 yang bertugas 24 jam dimana fitur klaim garansi nya terdapat di bagian pojok kanan bawah di halaman situs kami.

loanabilly · 87 weeks and 3 days ago

pugpuppies95 · 64 weeks and 4 days ago

liltommy · 64 weeks and 4 days ago

donperi1 · 56 weeks and 5 days ago

understood the nuances of my topic and the direction I wanted to take. The level of personalization they offered was impressive. They matched me with a seasoned researcher who not only had a profound understanding of sociology but also had experience in my specific field of interest. dissertation writers help

Harryjohn · 55 weeks and 5 days ago

For more commands follow us at tgi fridays menu 2 for $20 2024

danielsyguides · 49 weeks ago

All you commands are working. does courtyard marriott have free breakfast

ujitsred · 45 weeks ago

Also check out hershey park water park hours

ujitsred · 45 weeks ago

There are two ways to keep a diary. The original one is writing things down to your paper-type diary book. Another one is using your laptop and some of the modern technologies. writing service

Harryjohn · 39 weeks ago

yeneba6574 · 16 weeks and 1 day ago

What do you think?

Any thoughts on this command? Does it work on your machine? Can you do the same thing with only 14 characters?

You must be signed in to comment.

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Similar Commands

TCPDUMP & Save Capture to Remote Server

analyze traffic remotely over ssh w/ wireshark

Make a quick network capture with tcpdump to a file - filename based on tcpdump arguments

Backup all mysql databases to individual files on a remote server

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)