From notes by ?? at CPOSC '09 conference ====== tcpdump ===== tcpdump -i -c 25 * -i interface * -c 25 get 25 packets tcpdump host adam and not src eve * host name is adam; sender or receiver has name adam * source of the packet is eve; specifying sender should be eve tcpdump -n host adam or eve and port 80 and vlan 1 * dont know name; shows u IP addresses tcpdump -F filename host adam * open existing file that was exported to and then filter those results use screen to see tcpdump stuff going in on one screen, and out on another screen ====== iproute2 ====== replaces ifconfig, route, iptunnel sudo apt-get install iproute * not installed by default Managing routes ip addr add 10.10.20.254/24 dev eth0 * ?? ip addr add 10.20.0.254/24 label eth0:1 dev eth0 * virtual NIC; allows multiple IP addresses on single network card; network card on top network card ip addr del ip route show ip route sh table main