# Monitoring your network - using tcpdump

tcpdump: a public-domain tool to capture and analyze network packets. Network interface must be set to promiscuous mode to capture all network traffic.

07:19:06.969538 arp who-has cup6-gw tell hpcupjf2

07:19:06.996540 arp reply cup6-gw is-at 0:60:3e:81:6:5

07:19:06.996943 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 0 (DF)

07:19:07.058831 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 0 (DF)

07:19:07.058991 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 0 (DF)

07:19:07.059154 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 297 (DF)

07:19:07.132679 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 0 (DF)

07:19:07.185148 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 420 (DF)

07:19:07.226956 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 1460 (DF)

07:19:07.228876 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 25 (DF)

IP-Ethernet address translation

- broadcast ARP request

- router (address 1) returns info

Previous slide | Next slide | Back to first slide | View graphic version