Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1747
  • Last Modified:

viewing hex output in tcpdump

Is there any advantage in displaying hex output? ( -x switch)?
Currently I use tcpdump with the -n -e -s 1514 switches.  Does viewing hex have any advantages? Are you viewing the actual encapsulated data when you do this?

Also, is it true that the ascii interpretation of the hex is also shown? I heard the asci after each line of hex, was the hex in ascii (wow does that make sense?)
Thanks
0
dissolved
Asked:
dissolved
1 Solution
 
PennGwynCommented:
Can't specifically comment on tcpdump, but the conventional form for hex dumps is to show about 16 bytes in hex (2 digits+space each), a spacer column, and then the same 16 bytes in ACSII with "." substituted for any that aren't prinatble.  So any text fields are readable on the right, but you've got the actual bits on the left.

0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now