HP StorageWorks Enterprise File Services WAN Accelerator 2.1.7 Command-Line Interface Reference Manual (392361-004, June 2006)

HP STORAGEWORKS EFS WAN ACCELERATOR COMMAND-LINE INTERFACE REFERENCE MANUAL 25
2 - USER-MODE COMMANDS
tcpdump
Description Executes the tcpdump utility. The tcpdump command takes the standard Linux
options. For detailed information, see the Linux manual (man) page.
TIP: You can write tcpdump output to a file using the -w option so that you can analyze it.
Syntax tcpdump [<options>]
Parameters
Example
minna # tcpdump
tcpdump: listening on primary
18:59:13.682568 minna.domain.com.ssh > dhcp-22.domain.com.3277:
P 3290808290:3290808342(52) ack 3412262693 win 5840 (DF) [dscp
<options> The tcpdump command takes the standard Linux options:
-a Attempt to convert network and broadcast addresses to names.
-c Exit after receiving count packets.
-d Dump the compiled packet-matching code in a human readable form to
standard output and stop.
-dd Dump packet-matching code as a C program fragment.
-ddd Dump packet-matching code as decimal numbers (preceded with a
count).
-e Print the link-level header on each dump line.
-E Use algo:secret for decrypting IPsec ESP packets.
-f Print foreign internet addresses numerically rather than symbolically.
-F Use file as input for the filter expression. An additional expression
given on the command line is ignored.
-i Listen on interface. If unspecified, tcpdump searches the system
interface list for the lowest numbered, configured up interface.
-n Do not convert addresses (i.e., host addresses, port numbers, etc.) to
names.
-N Do not print domain name qualification of host names. E.g., if you
give this flag then tcpdump will print ``nic'' instead of ``nic.ddn.mil''.
-m Load SMI MIB module definitions from file module. This option can
be used several times to load several MIB modules into tcpdump.
-q Quick (quiet?) output. Print less protocol information so output lines
are shorter.
-r Read packets from file (which was created with the -w option).
Standard input is used if file is ``-''.
-S Print absolute, rather than relative, TCP sequence numbers.
-v (Slightly more) verbose output. For example, the time to live,
identification, total length and options in an IP packet are printed. Also
enables additional packet integrity checks such as verifying the IP and
ICMP header checksum.
-w Write the raw packets to file rather than parsing and printing them
out. They can later be printed with the -r option. Standard output is used if
file is ``-''.
-x Print each packet (minus its link level header) in hex. The smaller of
the entire packet or snaplen bytes will be printed.
-X When printing hex, print ascii too. Thus if -x is also set, the packet is
printed in hex/ascii. This is very handy for analyzing new protocols.
For detailed information, see the Linux manual (man) page.