First page Back Continue Last page Overview Graphics
Using tcpdump Filters
Add detect filters
icmp[0] = 0 and (icmp[4:2] = 666 or icmp[4:2] = 667)
Output might appear as follows:
- 01:08:47:500000 replier.com > requester.com: icmp: echo reply
Dump in hexadecimal
- tcpdump -r tcpdumpfile -x
- ‘icmp[0] = 0 and src host replier.com and dst host requester.com’
- 4500 0034 0731 4000 7c01 7f97 0102 0304
- 0101 0202 0000 fed4 029a 974c 0149 6e74
- 6572 4d61 7070 6572 2032 2e31 2e31 2044
- 656d 6f24
Notes: