Skip to content

Instantly share code, notes, and snippets.

@ferr0

ferr0/tcpdump.md

Forked from pinge/tcpdump.md
Created August 18, 2016 13:49
Show Gist options
  • Save ferr0/1d7abaeffc0eff98e02fc3d26572af49 to your computer and use it in GitHub Desktop.
Save ferr0/1d7abaeffc0eff98e02fc3d26572af49 to your computer and use it in GitHub Desktop.
Download ZIP
tcpdump
Raw
tcpdump.md

dumping request and response headers from tcpdump in a human readable way:

sudo stdbuf -oL -eL /usr/sbin/tcpdump -A -s 10240 "tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)" | egrep -a --line-buffered ".+(GET |HTTP\/|POST )|^[A-Za-z0-9-]+: " | perl -nle 'BEGIN{$|=1} { s/.*?(GET |HTTP\/[0-9.]* |POST )/\n$1/g; print }'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment