Learn

Achievements

Capture The Flag

Working with TShark and TcpDump

COURSE LESSON

Continue your learning

Sign in to access your enrolled courses, or view the course details before enrolling.

Sign in View course
TCPDump & Tshark

Dive into real-world usage of TcpDump and TShark. You’ll learn how to capture packets live, apply capture/display filters, and export or convert .pcap data for analysis. Great for CLI-focused workflows or automated analysis scripts.

Key topics:

  • Basic syntax for both tools

  • Capture filters with TcpDump

  • Using TShark for display filters and dissection

  • Saving captures to files (.pcap)

  • Comparing output and use cases of each tool