execute pcap

Runs a network packet capture with the specified parameters.

Synopsis

Runs a network package capture with the specified parameters, supporting the same filters as those supported by tcpdump. execute pcap --if ens2 --filter "port 443 and host 10.20.20.1" --out port443.pcap this would capture packets on the network interface ens2 and apply filters to match only host 10.20.20.1 and requests to port 443.

execute pcap [flags]

Options

      --filter string   The filter string to apply to the packet capture. This only supports filters supported by tcpdump and a single filter string can be made of a composite filter. Reference: https://www.tcpdump.org/manpages/pcap-filter.7.html
  -h, --help            help for pcap
      --if string       The network interface to monitor. If none is provide, the one detected as main will be used.
      --out string      The name of the output file to save the capture at. If none is provided, the capture will be longed on the console only.

See also

• execute - for executing commands on the host