tcpdump

Hello,

Can anyone share the tcpdump syntax to
1. capture the tcp packet with content from particular source IP, and write to a particular file?
2. open the file (in #1) to look at the packet content?

We would like to know the HTTP POST content of particular websites (especially being content-spammed) and block it at edge level.

Thank you very much for your kind information.

Regards
George

We would like to know the HTTP POST content of particular websites (especially being content-spammed) and block it at edge level.

Click to expand...

Hello,
In this case you'd better try tshark
http://www.wireshark.org/docs/man-pages/tshark.html