← All Kali Commands
🦈 Sniffing & Spoofing TCPDump

Capture on interface

TCPDump command for capture on interface. Copy the command below and use it in your terminal.

tcpdump — terminal
┌──(kali㉿kali)-[~]
└─$ tcpdump -i eth0
Tool
TCPDump
Category
Sniffing & Spoofing
Purpose
Capture on interface

🛡️ Usage Tips

  • Always ensure you have proper authorization before using TCPDump against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with TCPDump installed
  • Combine with other TCPDump commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More TCPDump Commands

tcpdump -i eth0 -w cap.pcap
Write to file
tcpdump -r cap.pcap
Read capture
tcpdump -i eth0 port 80
Filter port 80
tcpdump -i eth0 host 192.168.1.1
Filter by host
tcpdump -i eth0 -A
ASCII output
tcpdump -i eth0 -X
Hex and ASCII
tcpdump -i eth0 -c 100
Capture 100 packets
tcpdump -i eth0 -nn
No DNS/port resolution
tcpdump -i eth0 src 192.168.1.1
Source IP filter
tcpdump -i eth0 dst 192.168.1.1
Destination IP filter
tcpdump -i eth0 "tcp[tcpflags] & (tcp-syn) != 0"
SYN packets
tcpdump -i eth0 -s 0
Full packet capture

🦈 Other Sniffing & Spoofing Tools

Wireshark Ettercap Bettercap Responder Scapy mitmproxy
📚 Learn Kali Linux — Free Course