> For the complete documentation index, see [llms.txt](https://n000b3r.gitbook.io/oscp-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://n000b3r.gitbook.io/oscp-notes/misc/tcpdump.md).

# Tcpdump

```bash
# Determine the network interface name
ifconfig

# Sniff for all traffic
tcpdump -i <network name> -w file.pca

# Sniff for FTP traffic (-s0 captures the entire packet, not just the default first 96 bytes)
tcpdump -s0 -i <network name> port ftp
```