packet capture tutorial using tcpdump

[@mrd2500]

This was awesome. I’m new to cyber security and have been learning tcpdump on hack the box. It was super helpful to have someone explain the commands and what I’m looking at. Thank you

[@BlueMonkey4n6]

Awesome, glad the video was useful!

[@jesseholliday3480]

Love love this video, I am studying for security+ and it's hard to find good study material for the Linux commands. This showed me a little bit of everything, perfect!

[@BlueMonkey4n6]

So glad that you found this useful! Wishing you a successful and happy 2023!

[@jimweasel2088]

“WL blah blah blah” at 02:35 is the best name for a network interface! Hilarious.

[@BlueMonkey4n6]

Yeah, was too lazy to read out the entire name. Thanks for watching and the comment!

[@geoffgold9]

Thank you for the amazing video!!! Quick Question: How do I get socket:permission you dont have permission fixed? I'm the host and each time I use tcpdump it shows an error.

[@BlueMonkey4n6]

hmm, hard to answer that question without knowing more about the setup of your system and what you are trying to do. Can you give more information like what distro you are running, and whether it's a VM or Docker or full machine? (you do have root access via sudo or directly logging in as root, right?)

[@luismayorca90]

hello Sir , thanks for share , I have a wonder for you , I had captured icmp packet in destination whit tcp dump and I had simulated a failure inside de network but I dont see the missed ICMP packets in pcap capture , Do you know how I see that ? thanks in advance.

[@fp1036]

so good

[@BlueMonkey4n6]

Appreciate the comment!

[@IsaacGoytia-i4b]

At 1:00 I have a question, what device is this going out to? If I were to do this at my house where I am connected to the WiFi, would I just open the terminal and type tcpdump and I would be able to check the packets sent from a computer in my home to a printer on my network?

[@BlueMonkey4n6]

If you only have one active interface (wired or wireless) then it would just capture packets on that one. You can use tcpdump -D to see what interfaces you have. Then use tcpdump -i eth0 to capture from a specific interface.

[@IsaacGoytia-i4b]

@@BlueMonkey4n6 thanks man, I really appreciate you exposing that for me, have a good day 🫡

[@remysanth]

How to collect with process id

[@BlueMonkey4n6]

I dont understand your question. Can you clarify?

[@johnybonny8262]

Thanks ❣️ ... Wl bla bla bla😁

[@BlueMonkey4n6]

Ha ha, glad you enjoyed that!

[@johnybonny8262]

@@BlueMonkey4n6 waiting for more content ❣️

[@khalidkhan-tv2qm]

thanks

[@BlueMonkey4n6]

Thank you for watching!