Packet Sniffing on the MAC

While I am still trying to get TextMate to work with BlogCFC one of my tasks was 'sniff the packets' of data that TextMate was sending.

This actually turned out to be an easy task to run from the terminal. You just need the command 'tcpdump'. For built-in Ethernet, type:

view plain print about
1sudo tcpdump -i en0 -vvv -n -s 0 -w ~/Desktop/DumpFile.dmp
Note: Both "en0" and "-s 0" include a zero, not the letter O.

For AirPort, type:

view plain print about
1sudo tcpdump -i en1 -vvv -n -s 0 -w ~/Desktop/DumpFile.dmp

As you are using the 'sudo' command you will need to enter your password. Once you've done that though all packet information will be saved to the 'Dumpfile.dmp' on your desktop. Once you've finished all the logging press Control-C from the Terminal.

http://docs.info.apple.com/article.html?artnum=107952

Posted: 28-Mar-2007

View: 2504

Permalink: here

Comments