ngrep
Filter network traffic packets using regular expressions.
- Capture traffic of all interfaces:
ngrep -d any
- Capture traffic of a specific interface:
ngrep -d {{eth0}}
- Capture traffic crossing port 22 of interface eth0:
ngrep -d {{eth0}} port {{22}}
- Capture traffic from or to a host:
ngrep host {{www.example.com}}
- Filter keyword 'User-Agent:' of interface eth0:
ngrep -d {{eth0}} '{{User-Agent:}}'
