about tcpdump

Chuck Swiger cswiger at mac.com
Thu Apr 15 21:01:33 UTC 2010


On Apr 15, 2010, at 1:37 PM, Yavuz Maşlak wrote:
> I have a network. I wish to log all incoming and outgoing trafficc using tcpdump on my gateway server. But I don't want to log these traffic's data because of they take up much on disk.
> I only want to log which ports were used, which ip addresses were reached.
> How can I do these using tcpdump ?

"tcpdump -nq" will display a short and sweet summary of packets, without the contents.  You might also find that /usr/ports/net/tcpflow is helpful for coalescing tcpdump data into flows.

Regards,
-- 
-Chuck





More information about the freebsd-questions mailing list