infosec-intern · January 22, 2017 05:56
diff --git a/packet-capture.sh b/packet-capture.sh
 tcpdump -i wlan0 -nn -XX -S -s 0 -w /media/data/packets.pcap -vvv host 192.168.1.100

 # -i wlan0 : Only capture packets coming in through interface wlan0
 # -nn: Don't resolve hostnames or port numbers
 # -XX: Capture packet contents in hex, ASCII, and ethernet headers
 # -S: Print sequence numbers
 # -s 0: Collect the entire length of a packet instead of just the first 96 bytes
 # -w <file>: Write data to the specified file
 # -vvv: Get really, really verbose. Show me all the info tcpdump has
 # host 192.168.1.100: Filter incoming packets to only those coming to/from this host

 # More flag details: https://danielmiessler.com/study/tcpdump/#gs.null
 # Rotating output files: http://superuser.com/questions/904786/tcpdump-rotate-capture-files-using-g-w-and-c
	tcpdump -i wlan0 -nn -XX -S -s 0 -w /media/data/packets.pcap -vvv host 192.168.1.100

	# -i wlan0 : Only capture packets coming in through interface wlan0
	# -nn: Don't resolve hostnames or port numbers
	# -XX: Capture packet contents in hex, ASCII, and ethernet headers
	# -S: Print sequence numbers
	# -s 0: Collect the entire length of a packet instead of just the first 96 bytes
	# -w <file>: Write data to the specified file
	# -vvv: Get really, really verbose. Show me all the info tcpdump has
	# host 192.168.1.100: Filter incoming packets to only those coming to/from this host

	# More flag details: https://danielmiessler.com/study/tcpdump/#gs.null
	# Rotating output files: http://superuser.com/questions/904786/tcpdump-rotate-capture-files-using-g-w-and-c