Monitor TCP traffic between Server and Workstation

Sometime you have the need to see whats happening between the server and a workstation.
You can use the utility tcpdump to capture the tcp data between the server and workstation and analyze this data with Wireshark (a tool that comes with linux).

This is the syntax: tcpdump src workstationip or dst workstationip -i eth0 -s 1500 -w connection.pcap

Start this, do your stuf, end tcpdump with CTRL-C. Dan you can read the connection.pcap file with wireshark.

About Michael
Michael Wilmsen is a VMware training/consultant (no specific order) with more than 15 years in the IT industry. Main focus is VMware vSphere, Horizon View and Site Recovery Manager with a deepdive to performance. Michael is VCDX 210, VCAP 4/5 certified, has been rewarded with the vExpert title from 2011, is a PernixPro, Nutanix Tech Champion and a Nutanix Platform Professional.

RSS feed for comments on this post. TrackBack URI

Leave a Reply

You must be logged in to post a comment.