tcpdump params to find the initial connection packets to a port

‘tcp[tcpflags] & (tcp-syn) != 0 and tcp[tcpflags] & (tcp-ack) == 0 and dst port $PORTNUM’

This entry was posted in Sales. Bookmark the permalink.

Leave a Reply