Is there a quick tcpdump one-liner to print out a TCP stream that matches a particular substring -- or, if that's not easy, how about printing out just the single TCP packet that matches the substring?
views:
679answers:
1
+4
A:
The best option is to use ngrep rather than tcpdump. Ngrep is designed to do exactly what you're after.
Andrew Edgecombe
2008-10-16 01:23:48