tcpdump: How to capture frames with specific source destination mac address
tcpdump: How to capture frames with specific source destination mac address
Tcpdump is a tool we all use and love, we use it in our daily life and, contrary to it's name, it can filter based on layer 2, layer 3 and layer4 headers. It can filter on protocols other than tcp.
Below is how tcpdump filters frames based on their source ethernet (mac) address:Code:
tcpdump -nni eth0 ether src 2c:21:72:c6:c1:88
Below is how tcpdump filters frames based on their destination ethernet (mac) address:Code:
tcpdump -nni eth0 ether dst 2c:21:72:c6:c1:88