Capturing TCP Flags with tcpdump. Capture ACK or SYN packets

ABOUT TCP FLAGS They are control bits that indicate different connection states or information about how a packet should be handled. FLAGS CWR – Congestion Window Reduced (CWR) flag is set by the sending host to indicate that it received a TCP segment with the ECE flag set (added to header by RFC 3168). ECE …

tshark – Dump and analyze network traffic

ABOUT tshark TShark is a command-line network traffic analyzer that enables you to capture packet data from a live network or read packets from a previously saved capture file by either printing a decoded form of those packets to the standard output or by writing the packets to a file. Without any options, TShark works …

xwd – dump an image of an X window

A UNIX Command $xwd -out ldump $du -h ldump 1.4M ldump $hexdump -n 1 ldump 0000000 0000 0000001 $hexdump -n 5 ldump 0000000 0000 7600 0000 0000005 $hexdump -n 10 ldump 0000000 0000 7600 0000 0700 0000 000000a $hexdump -n 50 ldump 0000000 0000 7600 0000 0700 0000 0200 0000 1000 0000010 0000 0004 0000 …