

You may combine these filters to capture only the relevant traffic. The tcpdump tool has many built-in filters for capturing specific types of traffic. Why? Because you may be capturing traffic that is not relevant to the situation.įilters come in handy in these situations. The amount of data can become confusing and may hinder your troubleshooting. Wildly capturing packets is not always the best approach. Adding Filters to the tcpdump Linux Command This information can be helpful when configuring firewall rules or other security measures, especially when building new servers.

Why would you want to capture packets on all interfaces? Here are some common reasons.įor one, capturing traffic on all interfaces allows you to see all the traffic passing through your system, even if it’s not destined for your system.Īlso, you can see what services and protocols pass through your network.
