views:

679

answers:

1

Is there a quick tcpdump one-liner to print out a TCP stream that matches a particular substring -- or, if that's not easy, how about printing out just the single TCP packet that matches the substring?

+4  A: 

The best option is to use ngrep rather than tcpdump. Ngrep is designed to do exactly what you're after.

Andrew Edgecombe