2011/3/5 Nigel Taylor <njtay...@asterisk.demon.co.uk>:
> $ sudo tcpdump -qn -w /pathto/xxx.pcap dst net 192.168.1.0/24 &
>
> Also ensure that there is enough space for xxx.pcap on the filesystem.

Also don't forget to set the snaplen properly, if you ever want to "go
deep" with "auditing".

sudo tcpdump -qns 1500 -w ...

-- 
Martin Pelikan

Reply via email to