tcpdump

[ccto]

Hello,

Can anyone share the tcpdump syntax to
1. capture the tcp packet with content from particular source IP, and write to a particular file?
2. open the file (in #1) to look at the packet content?

We would like to know the HTTP POST content of particular websites (especially being content-spammed) and block it at edge level.

Thank you very much for your kind information.

Regards
George

 

[zEitEr]

We would like to know the HTTP POST content of particular websites (especially being content-spammed) and block it at edge level.

Hello,
In this case you'd better try tshark
http://www.wireshark.org/docs/man-pages/tshark.html