Re: remote capturing using tcpdump

[Richard Huddleston <huddleston.richard () gmail com>]

Like many people here, i've used tcpdump (or libpcap) to write data acquisition gadgets that then report up to some 
higher tier. 

If you wanted to build one without doing all the messy libpcap and socket calls, you could chain tcpdump, a little awk, 
and nc (netcat) together.  It wouldn't be incredibly robust but would fall together very quickly and would be a little 
more what you seem to have in mind. 

Sent from my iPhone - please excuse any typos. 

On Oct 7, 2010, at 1:15, Ankith Agarwal <ankitha () cdac in> wrote:

> On Wed, Oct 6, 2010, Aaron Turner <synfinatic () gmail com> said:
>
> > On Wed, Oct 6, 2010 at 6:19 AM, Ankith Agarwal <ankitha () cdac in> wrote:
> > > Hi
> > > �Is there any solution for reporting the captured packets to a remote
> > > user through the same or another interface. Actually I need to remotely
> > > monitor a machines' incoming and outgoing packets.
> >
> > Typical way is via a SPAN port on a switch.
> >
> > -- 
> > Aaron Turner
> > http://synfin.net/� � � �� Twitter: @synfinatic
> > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
> > Those who would give up essential Liberty, to purchase a little temporary
> > Safety, deserve neither Liberty nor Safety.
> > � � -- Benjamin Franklin
> > "carpe diem quam minimum credula postero"
> > -
> > This is the tcpdump-workers list.
> > Visit https://cod.sandelman.ca/ to unsubscribe.
> -- 
>
> Thanks for your concern, but my requirement is to monitor the QoS
> parameters of a client interface. For this purpose I am capturing all the
> packets in the client using pcap and sending all the header part of the
> packets to the monitoring system for calculating the parameters and
> displaying it. 
>  I just wanted to know if there is any better method of doing this, or
> tcpdump provides any probes for capturing and sending all the information
> to a remote client.
>
> Regards
> Ankith
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.