Ask Your Question
0

I only want to get UDP packets with source port 8000

asked 2021-06-23 08:11:36 +0000

hahaha gravatar image

I used the tshark command "tshark -i eth1 udp dst port 8000", but no data packets were obtained. I want to ask if the command is correct.

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-06-23 08:38:38 +0000

Guy Harris gravatar image

I want to ask if the command is correct.

No, it's not.

You want packets with the source port being 8000, but "dst port 8000" matches packets with the destination port being 8000.

Try

tshark -i eth1 udp src port 8000
edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2021-06-23 08:11:36 +0000

Seen: 170 times

Last updated: Jun 23 '21