{{parent page="Network"}}

===tcpdump and host header===
-A = ascii
-s0 = entire packet
%%
tcpdump src host 202.168.209.40 and dst port 80 -A -s 0
%%

===tcpdump and http requests===
%%
tcpdump -A -i eth0 -vvv -s 500 'tcp port 80 and ip[2:2] > 40 and tcp[tcpflags] & tcp-push != 0 and dst port 80' -f
%%