Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 530
  • Last Modified:

TCPDUMP question

Is there any advantage in displaying hex output? ( -x switch)?
Currently I use tcpdump with the -n -e -s 1514 switches.  Does viewing hex have any advantages? Are you viewing the actual encapsulated data when you do this?
Thanks
0
dissolved
Asked:
dissolved
  • 2
2 Solutions
 
ahoffmannCommented:
-x will show you non-printables too

> Are you viewing the actual encapsulated data when you do this?
if you mean encapsulated in IP or TCP or UDP or ARP, yes
0
 
net_sec_guruCommented:
tcpdump –x looks at packages in hex format

tcpdump –X looks at packages in hex and Ascii format

I use the -X option myself... so yes, there is an advantage to using at as I get to see hex & ascii characters...
0
 
dissolvedAuthor Commented:
Thank you. What is the point of viewing the hex and ascii?  Does it give any pertinent information?  
0
 
ahoffmannCommented:
> Does it give any pertinent information?
depends on your definition of that ;-)
simply testit it out
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now