On 9/21/2011 11:46 AM, Boris wrote:
> How do I pipe the output of tcpdump to a ssh-server in the LAN?
> Something like this...:
> 
> tcpdump -i eth0 > scp user@server

No, something like this, run from your lan-server system:

lan-server$ ssh u...@firewall.net tcpdump -pnvli eth0

This will scroll the traffic from your firewall on the lan-server
machine.  Feel free to pipe to a file, change the tcpdump switches, etc.

Note the -l switch to tcpdump uses line-buffered mode, so you see
traffic as it appears, otherwise, you'll only get buffer-sized packets
once they fill up (which might take a while if your lan isn't noisy).

--
Charles Steinkuehler
char...@steinkuehler.net

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to