Tools Practical By Samson Tanimawo, PhD Published May 4, 2026 4 min read

tcpdump for Network Debugging

tcpdump for incident response.

Capture

tcpdump -i any -w /tmp/cap.pcap captures to file.

tcpdump -i any host 1.2.3.4 captures specific host.

tcpdump -r /tmp/cap.pcap reads back. Wireshark for visual analysis.

Filters narrow down: port 443, src host, etc.

Captures sensitive data. Be mindful of compliance.

Time-bounded captures; clean up files after.