I normally use
iptrace on our AIX servers to get packet traces but have recently found out that this doesn't work for other 'nix systems - namely Centos.
Does anyone know what the analog would be?
I've tried the following, but none seem to work as I expect:
697 sudo /usr/sbin/tcpdump -w test.pcap -i eth0 1010 sudo /usr/sbin/tcpdump port 80 1012 sudo /usr/sbin/tcpdump port 80 -i eth0 1015 sudo /usr/sbin/tcpdump -A port 80 -i eth0 1017 sudo /usr/sbin/tcpdump -w ~/capture.pcap port 80 -i eth0
I can see the header data in wireshark, but I can't seem to see the actual packet data.