The latter may cause disk space problems as the size of the resulting capture file can grow depending on the volume of the network traffic. It is worth noting that tcpdump can be used to capture both layer 2 and layer 3 data.
Tcpdump can either be used to do a quick packet capture for troubleshooting or for capturing traffic continuously in large volumes for future analysis. Using tcpdump, we can capture the traffic and store the results in a file that is compatible with tools like Wireshark for further analysis. Tcpdump is a popular command line tool available for capturing and analyzing network traffic primarily on Unix based systems. In this section, let us go through the Network Forensics tools mentioned earlier.
0 kommentar(er)
