Tcpdump question

Any idea how to force tcpdump to dump ONLY TCP part? It seems to be dumping whole IP packet. I want to suppress IP header Yes, I know about Wireshark. But sometimes I need command-line CLI tool.

It’s been a while, but I believe tcpflow might be what you’re looking for. Have you looked into that yet?

Edit: Found this link that sounds exactly like what you’re asking for: linux - How do I make tcpdump not print the tcp headers? - Server Fault

1 Like

Hi, i generally think this command works. note that you will only protocol dump onto an one interface.

$ tcpdump -i interface tcp

1 Like