• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1788
  • Last Modified:

viewing hex output in tcpdump

Is there any advantage in displaying hex output? ( -x switch)?
Currently I use tcpdump with the -n -e -s 1514 switches.  Does viewing hex have any advantages? Are you viewing the actual encapsulated data when you do this?

Also, is it true that the ascii interpretation of the hex is also shown? I heard the asci after each line of hex, was the hex in ascii (wow does that make sense?)
Thanks
0
dissolved
Asked:
dissolved
1 Solution
 
PennGwynCommented:
Can't specifically comment on tcpdump, but the conventional form for hex dumps is to show about 16 bytes in hex (2 digits+space each), a spacer column, and then the same 16 bytes in ACSII with "." substituted for any that aren't prinatble.  So any text fields are readable on the right, but you've got the actual bits on the left.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now