Ask Your Question
0

I only want to get UDP packets with source port 8000

asked 2021-06-23 08:11:36 +0000

hahaha gravatar image

I used the tshark command "tshark -i eth1 udp dst port 8000", but no data packets were obtained. I want to ask if the command is correct.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-06-23 08:38:38 +0000

Guy Harris gravatar image

I want to ask if the command is correct.

No, it's not.

You want packets with the source port being 8000, but "dst port 8000" matches packets with the destination port being 8000.

Try

tshark -i eth1 udp src port 8000
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-06-23 08:11:36 +0000

Seen: 50 times

Last updated: Jun 23