Packet Analysis and Monitoring

Commands for capturing and analyzing network traffic.

• tcpdump

• Purpose: Captures network packets.

• Example: sudo tcpdump -i eth0 → Captures traffic on eth0 (Ctrl+C to stop).

• wireshark

• Purpose: Launches Wireshark GUI for packet analysis.

• Example: wireshark & → Opens Wireshark in the background.

• arp-scan

• Purpose: Scans local network for devices via ARP.

• Example: sudo arp-scan -l → Lists devices on the network.