TCPDUMP

[Mun]

What is the best TCPDUMP command line for giving users a ton of info if per say you were being attacked and wanted later reference.

(debian)

 

[Zen]

tcpdump -vvv

you are telling it to be seriously verbose

 

[Mun]

@zen is there a way to also put that in a file other then >> file.log

 

[Zen]

quick:

tcpdump -w anyfilename.anyfileextension

to read the file

tcpdump -r anyfilename.anyfileextension

note with -w it wont print anything out, just writes straight to file!

 

[Mun]

Thank you good sir.

 

[EarthVPN]

netstat -an
is also usefull for identifying attacks.