Search code examples
linuxhttptcpdump

how to capture only http with tcpdump with linux


First I capture all data with : tcpdump -i any -s 0 -w /tmp/http.cap

no I want capture 'only http'

I tried to add : and port http

But it is incorrect.

thanks


Solution

  • Check this:

    tcpdump -i any -s 0 'tcp port http' -w /tmp/http.cap