tcpdump

Capture All Network Traffic on a Specific Interface:

sudo tcpdump -i eth0

Capture Traffic to and from a Specific IP Address:

sudo tcpdump host 192.168.1.11

Capture Traffic on a Specific Port:

sudo tcpdump port 80

Save Captured Traffic to a File:

sudo tcpdump -i eth0 -w captured.pcap

Read Captured Traffic from a File:

tcpdump -r captured.pcap

Display Captured Packets in Real-Time:

sudo tcpdump -i eth0 -c 10