Very useful, Phil -- thanks very much !!!
- Scott
On Wed, Feb 22, 2012 at 1:51 PM, Phil Pennock <pdp@???> wrote:
> On 2012-02-22 at 09:56 -0600, Scott Neader wrote:
> > Regarding a packet capture on my side, I have to admit, I have never done
> > it on command-line Linux before (done many on Windoze via
> > Ethereal/WireShark), so I will have to research that.
>
> tcpdump -w foo-$(date +%s).cap -s 1500 -i ethDEVICE port 25
>
> ethDEVICE on Linux systems used to typically be eth0.
>
> The format of the capture dump is portable and you can then open it in
> WireShark on another OS. Hit Ctrl-C when you want to stop the dumping.
>
