tcpdump of a telnet session

Paul McLean · 11-25-2004, 12:36 PM

Hi,

I need to produce a tcpdump of a telnet session (up until the login screen) and need a few pointers in how to set up the filters so that i only get the the telnet session packets and nothing else.

Any help would be apperated,

Thanks

zaphodiv · 11-26-2004, 01:13 PM

You could use ethereal instead and click "follow TCP connection", much easier.

sigsegv · 11-26-2004, 01:33 PM

Just like the man page says:

tcpdump -i <your interface> port 23

or, if you know the source IP:

tcpdump -i <your interface> host <sourceIP> and port 23

Those will only get you headers though. If you want the contents, you can do:

tcpdump -XX -s 0 -i <your interface> host <sourceIP> and port 23