Last Updated: February 25, 2016
·
12.99K
· dyashkir

Looking at HTTP requests using tcpdump

GET

sudo tcpdump -s 0 -A -vv 'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420'

POST

sudo tcpdump -s 0 -A -vv 'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354'

For other verbs convert the verb into hex using ASCII

Example:

P  U  T
50 55 54

0x505554

1 Response
Add your response

thanks for content :)
worked for me but How I block a site in the traffic flow ?

over 1 year ago ·