Study reference:

www.cnblogs.com/ct20150811/…

www.jianshu.com/p/d0ba8979c…

www.cnblogs.com/f-ck-need-u…

www.cnblogs.com/yhcreak/p/5…

My requirement is to grab some port data on some machine

sudo tcpdump -i eth0 -A -s 0 'tcp port 11191' -vvv -w /home/admin/hello.cap
Copy the code

Note:

Eth0 – is the specified network card

11191- is the specified port

Hello. cap- Writes data to this file for the port

Open the hello.cap file in Wireshark,

Right click –> Trace Flow –>TCP flow