|
well we aren't her4e to recite standard documentation for you, that's what a manpage is for, but it depends what you want to achieve as to how you use it. by default just run tcpdump with no options and it will show you all traffic on your first external network adapter. you can then use other options to modify it's behaviour and add an expression to filter the traffic e.g. "tcpdump -vn -i eth1 host 192.168.23.45 and port 25" will connect to eth1 and show verbose (v) output without name resolution (n) of all traffic involving ip address 192.168.23.45 and port 25.
|