Skip to content

Instantly share code, notes, and snippets.

@reikje
Created February 21, 2018 08:36
Show Gist options
  • Save reikje/bc441768e3ec24a4453a862d6d776f1f to your computer and use it in GitHub Desktop.
Save reikje/bc441768e3ec24a4453a862d6d776f1f to your computer and use it in GitHub Desktop.
tcpdump -A -s 10240 'tcp port 9393 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' | egrep --line-buffered "^........(GET |HTTP\/|POST |HEAD )|^[A-Za-z0-9-]+: " | sed -r 's/^........(GET |HTTP\/|POST |HEAD )/\n\1/g'
@reikje
Copy link
Author

reikje commented Feb 21, 2018

See HTTP headers on the wire using tcpdump

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment