BestHub
Sign in
Tagged articles

packet capture

94 articles · Page 1 of 1
Ops Community
Ops Community
Jul 18, 2026 · Operations

Using tcpdump to Diagnose Client‑Server Communication Failures

This guide shows how to use tcpdump on Linux to verify whether a client actually sent packets, whether they reached the server, how the server responded, and where a TCP connection was closed, by defining the problem, selecting interfaces, applying narrow BPF filters, capturing key handshake packets, handling TLS, HTTP, UDP, DNS, ICMP, container and Kubernetes environments, and preserving evidence with proper file management.

KubernetesLinuxTCP
0 likes · 19 min read
Using tcpdump to Diagnose Client‑Server Communication Failures
Black & White Path
Black & White Path
Jul 16, 2026 · Information Security

How AI Simplifies Wireshark Packet Analysis for Beginners

The article demonstrates using the Claude AI tool to automatically analyze Wireshark‑captured packets, showing step‑by‑step how the AI identifies devices, protocols, and even extracts HTTP credentials, making traffic analysis accessible to newcomers.

AI analysisClaudeWireshark
0 likes · 2 min read
How AI Simplifies Wireshark Packet Analysis for Beginners
Raymond Ops
Raymond Ops
Jul 14, 2026 · Operations

Network Troubleshooting with tcpdump & Wireshark: Step‑by‑Step Guide and Ready‑to‑Use Scripts

This comprehensive guide walks you through using tcpdump and Wireshark for network fault isolation, covering core concepts, capture filters, detailed analysis techniques, performance tuning, expert information interpretation, automation scripts, and best‑practice recommendations for efficient packet‑level troubleshooting.

LinuxOperationsWireshark
0 likes · 51 min read
Network Troubleshooting with tcpdump & Wireshark: Step‑by‑Step Guide and Ready‑to‑Use Scripts
Raymond Ops
Raymond Ops
Jul 4, 2026 · Operations

Using tcpdump to Pinpoint Online Network Anomalies

This guide explains how tcpdump, built on libpcap and the kernel BPF filter, can capture packets at the network stack, compares it with Wireshark, shows practical filtering syntax, performance considerations, typical use‑cases such as TCP retransmission, DNS timeouts and TLS handshake failures, and provides scripts and best‑practice recommendations for production‑grade troubleshooting.

BPFLinuxWireshark
0 likes · 39 min read
Using tcpdump to Pinpoint Online Network Anomalies
dbaplus Community
dbaplus Community
Jun 4, 2026 · Operations

Why Ops Engineers Still Skip tcpdump? The Command-Line Packet Capture Powerhouse

This hands‑on guide walks you through every practical aspect of using tcpdump—from basic commands and essential filters to saving, reading, advanced flag tricks, performance tuning, security considerations, real‑world case studies, and integration with tools like tshark and Wireshark—so you can capture and analyze network traffic efficiently and safely in production environments.

BPF filtersLinuxnetwork troubleshooting
0 likes · 22 min read
Why Ops Engineers Still Skip tcpdump? The Command-Line Packet Capture Powerhouse
Efficient Ops
Efficient Ops
Jan 6, 2026 · Operations

Mastering tcpdump: Practical Commands for Network Packet Capture and Analysis

This guide introduces tcpdump, a powerful network packet capture tool, explains its filtering options, and provides numerous command-line examples—from basic interface listening to complex filters for hosts, ports, protocols, and saving captures—helping users troubleshoot and analyze network traffic effectively.

Command LineLinuxnetwork monitoring
0 likes · 7 min read
Mastering tcpdump: Practical Commands for Network Packet Capture and Analysis
Raymond Ops
Raymond Ops
Jan 4, 2026 · Operations

10 Real‑World TCPDump Cases That Reveal Hidden Network Issues

This guide walks you through ten authentic production‑level network problems, showing how to capture traffic with TCPDump, interpret packet data, pinpoint root causes such as firewall rules, window scaling, RST packets, DNS glitches, SSL handshake failures, and then apply concrete remediation steps.

Operationscase studiesnetwork troubleshooting
0 likes · 18 min read
10 Real‑World TCPDump Cases That Reveal Hidden Network Issues
Ops Community
Ops Community
Nov 3, 2025 · Information Security

Why Wireshark Is Essential for Network Security Professionals

Wireshark, the open‑source packet analyzer formerly known as Ethereal, captures live network traffic on Windows and UNIX systems and is widely used for network management, security analysis, troubleshooting, and especially penetration testing, offering capabilities such as data capture, unencrypted information detection, attack behavior analysis, vulnerability discovery, and real‑time monitoring.

Penetration TestingWiresharknetwork analysis
0 likes · 2 min read
Why Wireshark Is Essential for Network Security Professionals
Efficient Ops
Efficient Ops
Aug 24, 2025 · Operations

Master tcpdump: Essential Commands for Network Packet Capture

This guide introduces tcpdump, a powerful network packet capture tool, explains its filtering capabilities with logical operators, and provides numerous practical examples—from capturing traffic on specific interfaces and hosts to filtering by ports, protocols, and saving captures—helping users troubleshoot network issues efficiently.

Linuxnetwork monitoringpacket capture
0 likes · 6 min read
Master tcpdump: Essential Commands for Network Packet Capture
Liangxu Linux
Liangxu Linux
Jul 30, 2025 · Operations

8 Essential Network Packet Capture Tools for Faster Debugging and Security

This guide reviews eight network packet‑capture utilities—from lightweight command‑line tools like Tcpdump and Tshark to visual HTTP debuggers such as Charles, mitmproxy, and Fiddler—detailing their core strengths, typical use cases, command examples, and how to choose the right tool for operations or security scenarios.

Operationsmitmproxypacket capture
0 likes · 12 min read
8 Essential Network Packet Capture Tools for Faster Debugging and Security
Linux Ops Smart Journey
Linux Ops Smart Journey
May 30, 2025 · Cloud Native

Capture Live Pod Traffic with kubectl sniff: A Complete Guide

This guide introduces the kubectl sniff plugin for Kubernetes, explains its non‑privileged and privileged modes, walks through installation via krew or offline, and provides step‑by‑step commands to capture pod traffic with tcpdump and view it in Wireshark, enhancing network debugging efficiency.

KubernetesWiresharkksniff
0 likes · 11 min read
Capture Live Pod Traffic with kubectl sniff: A Complete Guide
MaGe Linux Operations
MaGe Linux Operations
May 7, 2025 · Fundamentals

Master Wireshark: From Installation to Advanced Packet Filtering

This comprehensive guide walks you through installing Wireshark, capturing packets, navigating its main interfaces, analyzing TCP handshakes, and mastering both capture and display filter expressions for effective network troubleshooting and protocol inspection.

TCP handshakeTutorialWireshark
0 likes · 14 min read
Master Wireshark: From Installation to Advanced Packet Filtering
MaGe Linux Operations
MaGe Linux Operations
Jan 3, 2025 · Operations

Master tcpdump: Essential Commands for Network Troubleshooting and Security

Learn practical tcpdump examples to boost network troubleshooting and security testing, covering common parameters, ASCII output, protocol and IP filtering, file writing, buffering modes, combined filters, and advanced use cases like extracting HTTP headers, detecting port scans, capturing ICMP, DHCP, SNMP, and more.

Linuxnetwork troubleshootingpacket capture
0 likes · 20 min read
Master tcpdump: Essential Commands for Network Troubleshooting and Security
Python Crawling & Data Mining
Python Crawling & Data Mining
Dec 6, 2024 · Mobile Development

How to Capture Android App Traffic with Charles and Postern

This guide explains why Charles combined with Postern is preferred for Android app packet capture, details the required environment, step‑by‑step configuration of Charles and Postern, SSL proxy setup, certificate installation and migration, and compares the solution with Fiddler.

AndroidCharlesPostern
0 likes · 6 min read
How to Capture Android App Traffic with Charles and Postern
Refining Core Development Skills
Refining Core Development Skills
Oct 22, 2024 · Operations

netcap: An eBPF‑Based Next‑Generation Kernel Network Capture Tool

netcap is an open‑source eBPF‑driven kernel network packet capture tool that extends tcpdump syntax to trace skb‑related functions across the Linux network stack, offering detailed packet tracing, customizable filters, multi‑trace aggregation, and user‑defined output to improve debugging of packet loss and performance issues.

eBPFnetcapnetwork debugging
0 likes · 9 min read
netcap: An eBPF‑Based Next‑Generation Kernel Network Capture Tool
ByteDance SYS Tech
ByteDance SYS Tech
Aug 5, 2024 · Operations

How Netcap Uses eBPF to Trace Kernel Network Packets and Solve Drop Issues

Netcap, an open‑source eBPF‑based kernel network capture tool from ByteDance STE, lets developers trace packets across the entire Linux network stack, filter with tcpdump syntax, and extend functionality with custom filters, dramatically improving the efficiency of diagnosing kernel packet loss problems.

DebuggingLinux kerneleBPF
0 likes · 11 min read
How Netcap Uses eBPF to Trace Kernel Network Packets and Solve Drop Issues
Bilibili Tech
Bilibili Tech
Jul 23, 2024 · Operations

Network Troubleshooting: MTU/MSS Issues and Packet Capture Analysis

The investigation used Wireshark captures to uncover that a new app version sent oversized TCP segments—due to altered MSS and path‑MTU mismatch—causing unacknowledged retransmissions, which were diagnosed with ping‑do‑not‑fragment tests and resolved by trimming the request parameters and confirming via TLS key logging.

MSSMTUWireshark
0 likes · 7 min read
Network Troubleshooting: MTU/MSS Issues and Packet Capture Analysis
Java Tech Enthusiast
Java Tech Enthusiast
Jul 14, 2024 · Information Security

Wireshark Filtering Guide: Display and Capture Filters

Wireshark, the open‑source network protocol analyzer, lets users capture traffic and then refine what they see using two distinct filter types—display filters applied after capture and capture filters applied during capture—each with its own syntax, common examples (IP, port, protocol) and advanced expressions to isolate relevant packets.

Wiresharkcapture filtersdisplay filters
0 likes · 14 min read
Wireshark Filtering Guide: Display and Capture Filters
Open Source Linux
Open Source Linux
May 24, 2024 · Operations

Master Wireshark & Tcpdump: Essential Tools for Network Troubleshooting

This comprehensive guide introduces Wireshark and Tcpdump, explains their installation, core features, common use cases, filter syntax, interface components, and step‑by‑step examples—including TCP three‑handshake analysis—empowering IT professionals to capture and analyze network traffic efficiently.

LinuxWiresharknetwork analysis
0 likes · 25 min read
Master Wireshark & Tcpdump: Essential Tools for Network Troubleshooting
IT Niuke
IT Niuke
Dec 30, 2023 · Operations

Mastering tcpdump: A Complete Guide to Command‑Line Packet Capture

This article provides a thorough walkthrough of tcpdump, covering installation on Ubuntu, essential command‑line options, practical filtering techniques, logical expressions, examples for saving and reading capture files, and how to combine tcpdump with Wireshark for deeper packet analysis.

Command LineLinuxlibpcap
0 likes · 24 min read
Mastering tcpdump: A Complete Guide to Command‑Line Packet Capture
Liangxu Linux
Liangxu Linux
Sep 27, 2023 · Information Security

Mastering tcpdump: Practical Commands for Network Packet Capture and Analysis

This guide explains how to use tcpdump for network packet capture, covering basic usage, interface selection, host and port filtering, logical expressions, saving captures, limiting packet counts, and real‑world troubleshooting of a Node.js service behind Nginx.

Command Linenetwork analysispacket capture
0 likes · 7 min read
Mastering tcpdump: Practical Commands for Network Packet Capture and Analysis
Liangxu Linux
Liangxu Linux
Sep 26, 2023 · Information Security

Top 5 Wireshark Alternatives for Network Analysis and Security

This guide reviews five popular packet‑capture tools—Savvius Omnipeek, Ettercap, Kismet, SmartSniff, and EtherApe—detailing their features, platform support, licensing, and unique capabilities to help network engineers choose the right solution for traffic monitoring and security analysis.

Wireshark alternativesnetwork analysisnetwork security
0 likes · 7 min read
Top 5 Wireshark Alternatives for Network Analysis and Security
Open Source Linux
Open Source Linux
Sep 4, 2023 · Information Security

Top 5 Wireshark Alternatives for Network Packet Capture

This article introduces five powerful packet‑capture tools—Savvius Omnipeek, Ettercap, Kismet, SmartSniff, and EtherApe—detailing their features, platform support, and unique capabilities as alternatives to the popular Wireshark utility.

Wireshark alternativesnetwork monitoringpacket capture
0 likes · 6 min read
Top 5 Wireshark Alternatives for Network Packet Capture
MaGe Linux Operations
MaGe Linux Operations
Sep 2, 2023 · Operations

Master Wireshark: From Basics to Advanced Packet Capture and Filtering

This comprehensive guide walks you through Wireshark fundamentals, common use cases, capture principles, step‑by‑step packet capture examples, interface components, filter configuration, TCP three‑way handshake analysis, and practical tips for effective network troubleshooting and analysis.

FilteringTCP handshakeWireshark
0 likes · 14 min read
Master Wireshark: From Basics to Advanced Packet Capture and Filtering
MaGe Linux Operations
MaGe Linux Operations
Aug 4, 2023 · Information Security

Master tcpdump: Install, Capture, and Analyze Network Packets on Linux

This guide walks you through installing tcpdump on various Linux distributions, explains its core features, and provides step‑by‑step command examples for capturing packets from specific interfaces, limiting packet counts, displaying data in ASCII or hex, saving to files, and filtering by IP, port, or protocol.

Command LineLinuxnetwork analysis
0 likes · 7 min read
Master tcpdump: Install, Capture, and Analyze Network Packets on Linux
21CTO
21CTO
Jul 25, 2023 · Information Security

Master Wireshark: A Step‑by‑Step Guide to Capturing and Analyzing Network Packets

This tutorial introduces Wireshark, walks through its main interface, demonstrates a simple packet‑capture workflow, explains capture and display filter syntax with practical examples, and details how to analyze TCP three‑way handshakes and common UI operations for effective network traffic analysis.

FiltersTCP handshakeWireshark
0 likes · 12 min read
Master Wireshark: A Step‑by‑Step Guide to Capturing and Analyzing Network Packets
Liangxu Linux
Liangxu Linux
Jul 9, 2023 · Information Security

Mastering tcpdump: Essential Commands and Real‑World Examples for Network Analysis

This guide explains how to use tcpdump (and its predecessor ethereal) for capturing and analyzing network traffic, describes key command‑line options, and provides dozens of practical examples ranging from basic packet dumps to complex filtered captures and related networking utilities.

Linuxinformation securitynetwork monitoring
0 likes · 17 min read
Mastering tcpdump: Essential Commands and Real‑World Examples for Network Analysis
Liangxu Linux
Liangxu Linux
Apr 9, 2023 · Operations

Master Wireshark: Advanced Packet Filtering, Timing, and Analysis Techniques

This guide walks through Wireshark's powerful features—including precise packet filtering, time‑display adjustments, absolute sequence numbering, exporting filtered captures, traffic statistics, decoding mixed logs, TCP stream tracing, and MAC‑address vendor lookup—to help engineers troubleshoot and analyze network traffic efficiently.

FilteringTCPWireshark
0 likes · 6 min read
Master Wireshark: Advanced Packet Filtering, Timing, and Analysis Techniques
Liangxu Linux
Liangxu Linux
Jan 15, 2023 · Information Security

How to Capture and Decrypt HTTPS Traffic with tcpdump and Wireshark

This guide walks through why a simple tcpdump of baidu.com shows no HTTP host packets, how to filter TLS Server Name Indication, and step‑by‑step how to export the pre‑master key via SSLKEYLOGFILE so Wireshark can decrypt HTTPS traffic.

HTTPS analysisSSLKEYLOGFILETLS decryption
0 likes · 13 min read
How to Capture and Decrypt HTTPS Traffic with tcpdump and Wireshark
Su San Talks Tech
Su San Talks Tech
Dec 27, 2022 · Information Security

How to Capture and Decrypt HTTPS Traffic with Wireshark and SSLKEYLOGFILE

This guide walks through capturing Baidu.com packets using ping, tcpdump, and Wireshark, explains why HTTPS traffic is invisible to simple filters, and shows how to decrypt it by exporting TLS keys with SSLKEYLOGFILE and configuring Wireshark to reveal the encrypted data.

HTTPSSSLKEYLOGFILETLS decryption
0 likes · 13 min read
How to Capture and Decrypt HTTPS Traffic with Wireshark and SSLKEYLOGFILE
Liangxu Linux
Liangxu Linux
Nov 28, 2022 · Information Security

Master Wireshark: Interface, Capture, and Advanced Filtering Techniques

This guide walks you through Wireshark’s main interface, demonstrates simple packet captures, explains how to use capture and display filters with concrete examples, and details TCP three‑handshake analysis, providing practical tips for network engineers and security analysts.

TCP handshakeWiresharkcapture filters
0 likes · 13 min read
Master Wireshark: Interface, Capture, and Advanced Filtering Techniques
FunTester
FunTester
Nov 20, 2022 · Fundamentals

Decoding Wireshark: How TCP/IP Layers Shape HTTP Traffic

This article explains how Wireshark captures map to the TCP/IP four‑layer model, walks through Ethernet, IP, TCP/UDP, and application layers, and demonstrates detailed HTTP request‑response analysis using Wireshark, HttpWatch, and browser developer tools.

HTTPTCP/IPWireshark
0 likes · 9 min read
Decoding Wireshark: How TCP/IP Layers Shape HTTP Traffic
Sohu Tech Products
Sohu Tech Products
Nov 9, 2022 · Mobile Development

Integrating AndroidMonitor for In‑App Network Packet Capture on Android

This article introduces AndroidMonitor, a lightweight Android packet‑capture library, explains how to add its monitor and monitor‑plugin dependencies, configure ProGuard, customize entry names, ports and logos, and optionally use AndroidLocalService to expose captured data via a local socket for both mobile and PC UI visualization.

AndroidKotlinLocal Service
0 likes · 9 min read
Integrating AndroidMonitor for In‑App Network Packet Capture on Android
ITPUB
ITPUB
Jun 11, 2022 · Databases

How Meituan Optimized a Non‑Intrusive MySQL Packet Capture for Full‑SQL Auditing

This article explains Meituan's non‑intrusive, Go‑based packet‑capture solution for full‑SQL database auditing, details the performance challenges encountered at high QPS, and describes a series of systematic analyses and optimizations—including probe redesign, CPU profiling, data‑masking, scheduling, GC pressure reduction, and packet filtering—that dramatically lowered loss rates and CPU usage.

Database AuditingGoMySQL
0 likes · 12 min read
How Meituan Optimized a Non‑Intrusive MySQL Packet Capture for Full‑SQL Auditing
Open Source Linux
Open Source Linux
Mar 31, 2022 · Operations

Mastering tcpdump: Practical Commands for Network Packet Capture

This guide explains how to use tcpdump for network packet capture, covering basic usage, interface selection, host and port filtering, logical operators, saving captures to files, and real‑world troubleshooting scenarios with clear command examples.

Command LineLinuxnetwork monitoring
0 likes · 7 min read
Mastering tcpdump: Practical Commands for Network Packet Capture
IT Services Circle
IT Services Circle
Feb 12, 2022 · Fundamentals

Computer Network Learning Roadmap (Job‑Search Edition)

This article presents a comprehensive learning roadmap for computer networking, offering curated books, video courses, hands‑on practice tools, and study plans tailored for beginners, non‑CS majors, and experienced developers seeking to strengthen their networking fundamentals for job interviews.

BooksComputer NetworksStudy Plan
0 likes · 9 min read
Computer Network Learning Roadmap (Job‑Search Edition)
Open Source Linux
Open Source Linux
Nov 9, 2021 · Information Security

Master Wireshark: From Interface Basics to Advanced Packet Filtering

This comprehensive guide introduces Wireshark's main interface, demonstrates step‑by‑step packet capture, explains how to use capture and display filters—including protocol, IP, and port filters—and walks through analyzing TCP three‑way handshake packets, providing essential techniques for network troubleshooting and security analysis.

FilteringTCP handshakeWireshark
0 likes · 12 min read
Master Wireshark: From Interface Basics to Advanced Packet Filtering
Qunar Tech Salon
Qunar Tech Salon
Oct 19, 2021 · Databases

Design and Implementation of a MySQL Traffic Sniffer for Full‑stack Access Logging

This article describes the background, functional requirements, architecture, packet‑capture implementation using libpcap, MySQL protocol parsing, result processing, and storage strategy (Kafka + ClickHouse) of a custom MySQL sniffer developed at Qunar to provide complete database access logs for auditing, performance analysis, and operations.

ClickHouseDatabase AuditingMySQL
0 likes · 16 min read
Design and Implementation of a MySQL Traffic Sniffer for Full‑stack Access Logging
Liangxu Linux
Liangxu Linux
Sep 16, 2021 · Operations

How Does tcpdump Capture Packets Inside the Linux Kernel?

This article explains the low‑level mechanisms by which tcpdump intercepts network packets in the Linux kernel, covering both the receive and transmit paths, the interaction with netfilter, and the steps required to implement a custom packet‑sniffing program.

netfilternetwork debuggingpacket capture
0 likes · 12 min read
How Does tcpdump Capture Packets Inside the Linux Kernel?
Efficient Ops
Efficient Ops
Sep 13, 2021 · Operations

Mastering tcpdump: Essential Commands for Network Traffic Analysis

This guide explains how to use tcpdump for capturing and filtering network packets, covering basic and advanced command options, logical filters, saving captures, and a real‑world troubleshooting scenario involving a Node.js server behind Nginx.

network analysispacket capturetcpdump
0 likes · 7 min read
Mastering tcpdump: Essential Commands for Network Traffic Analysis
Refining Core Development Skills
Refining Core Development Skills
Sep 8, 2021 · Fundamentals

How tcpdump Captures Packets Inside the Linux Kernel

This article explains the internal mechanisms of tcpdump, showing how it registers a virtual protocol in the kernel's ptype_all list to intercept packets during both receive and transmit paths, how netfilter interacts with these paths, and provides guidance for building a custom packet‑capture program.

libpcapnetfilternetwork debugging
0 likes · 10 min read
How tcpdump Captures Packets Inside the Linux Kernel
Liangxu Linux
Liangxu Linux
Mar 20, 2021 · Operations

Master Linux Packet Capture: A Hands‑On Guide to Using tcpdump

This tutorial explains the principles behind Linux packet capture, introduces tcpdump, shows how to install it, details its command‑line options, and provides practical examples for capturing, filtering, and saving network traffic for analysis with Wireshark.

Command LineLinuxnetwork analysis
0 likes · 11 min read
Master Linux Packet Capture: A Hands‑On Guide to Using tcpdump
php Courses
php Courses
Dec 11, 2020 · Operations

Using Wireshark Display Filters: Methods and Common Expressions

This article explains Wireshark display filters, covering the dialog and text‑expression methods, and provides common filter examples for protocols, IP addresses, ports, packet size, comparison and logical operators, with code snippets for each case.

Wiresharkdisplay filternetwork analysis
0 likes · 4 min read
Using Wireshark Display Filters: Methods and Common Expressions
360 Tech Engineering
360 Tech Engineering
Nov 30, 2020 · Mobile Development

Comprehensive Guide to Android App Packet Capture Using an Emulator, ADB, Charles, and Fiddler

This tutorial walks through a complete Android app packet‑capture workflow—installing a Wi‑Fi‑proxy‑compatible emulator, deploying the app via UI or ADB, configuring Charles or Fiddler as a debugging proxy, handling HTTPS certificates for Android 7+, and capturing traffic for functional, security, or development testing.

ADBAndroidCharles Proxy
0 likes · 8 min read
Comprehensive Guide to Android App Packet Capture Using an Emulator, ADB, Charles, and Fiddler
ITPUB
ITPUB
Nov 17, 2020 · Fundamentals

Understanding Linux Packet Capture Engines: libpcap, PF_RING, DPDK, and XDP

This article compares four classic Linux packet‑capture engines—libpcap (and its mmap variant), PF_RING, DPDK, and XDP—explaining their data‑flow architectures, copy operations, zero‑copy techniques, and typical use‑cases such as DDoS defense and high‑speed networking.

DPDKLinuxPF_RING
0 likes · 9 min read
Understanding Linux Packet Capture Engines: libpcap, PF_RING, DPDK, and XDP
Liangxu Linux
Liangxu Linux
Nov 15, 2020 · Information Security

Master tcpdump: Essential Commands for Capturing and Analyzing Network Traffic

This guide explains how to use tcpdump on Linux to capture packets, filter by ports, hosts, interfaces or protocols, save output for later analysis, and interpret both human‑readable and hexadecimal dumps, with practical examples and tips for integrating Wireshark.

Linuxnetwork monitoringnetwork troubleshooting
0 likes · 7 min read
Master tcpdump: Essential Commands for Capturing and Analyzing Network Traffic
Liangxu Linux
Liangxu Linux
May 28, 2020 · Fundamentals

Unlock TCP Secrets: Visualizing Handshakes and Retransmissions with Wireshark & tcpdump

This guide walks you through building test environments, capturing packets with tcpdump, visualizing them in Wireshark, and dissecting TCP features such as three‑way handshake, retransmission timers, fast open, flow control, Nagle algorithm and delayed ACKs, while showing the exact Linux kernel parameters that control each behavior.

LinuxRetransmissionTCP
0 likes · 30 min read
Unlock TCP Secrets: Visualizing Handshakes and Retransmissions with Wireshark & tcpdump
iQIYI Technical Product Team
iQIYI Technical Product Team
Nov 15, 2019 · Operations

QTC: A Dynamic Network Simulation and Low‑Interference Packet Capture Solution for Mobile Video App Testing

QTC, iQIYI’s extended ATC tool combining a dual‑NIC workstation, wireless hotspot and Python‑based software, dynamically simulates static and changing network conditions while providing low‑interference automated packet capture, enabling rapid mobile video app testing across diverse scenarios and uncovering numerous bugs.

AutomationMobile TestingQTC
0 likes · 9 min read
QTC: A Dynamic Network Simulation and Low‑Interference Packet Capture Solution for Mobile Video App Testing
Efficient Ops
Efficient Ops
Oct 21, 2019 · Operations

Master tcpdump: Capture, Filter, and Analyze Network Traffic Like a Pro

Learn how to effectively use tcpdump for network packet capture, understand its syntax and expression filters, explore common parameters, and see practical examples of analyzing MySQL traffic and packet details, empowering you to troubleshoot network issues and perform deep packet analysis.

LinuxWiresharknetwork analysis
0 likes · 9 min read
Master tcpdump: Capture, Filter, and Analyze Network Traffic Like a Pro
Efficient Ops
Efficient Ops
Aug 29, 2019 · Fundamentals

Unveiling the Ping Command: How ICMP and ARP Work Together

This article walks through the complete ping process, from setting up a Wireshark capture on two PCs to dissecting ICMP and ARP packets, explaining how ping uses ICMP, how ARP resolves MAC addresses, and why ARP caching affects subsequent ping measurements.

ICMPWiresharkarp
0 likes · 8 min read
Unveiling the Ping Command: How ICMP and ARP Work Together
Youzan Coder
Youzan Coder
Jul 10, 2019 · Mobile Development

Implementation of Local Packet Capture in Youzan Mobile Assistant Using VPNService, tun2socks, and Socket.IO

The article details how the Youzan Mobile Assistant adds a local packet‑capture module that leverages Android VpnService/iOS NetworkExtension and tun2socks to route traffic through a SOCKS5 proxy, then uses Socket.IO to push request and response data in real time to the app’s UI while keeping the app alive in the background.

AndroidSocket.IOTun2socks
0 likes · 12 min read
Implementation of Local Packet Capture in Youzan Mobile Assistant Using VPNService, tun2socks, and Socket.IO
MaGe Linux Operations
MaGe Linux Operations
Jan 23, 2019 · Operations

Mastering tcpdump: Practical Commands for Network Packet Capture

This guide explains how to use tcpdump for network packet capture, covering basic commands, filtering by interface, host, port, protocol, advanced examples, saving captures to files, and a practical troubleshooting scenario involving Nginx and a Node.js server.

Linuxnetwork monitoringpacket capture
0 likes · 8 min read
Mastering tcpdump: Practical Commands for Network Packet Capture
Architecture Talk
Architecture Talk
Oct 23, 2018 · Operations

How tcpcopy Evolved: From Simple Request Copying to Scalable Traffic Replication

This article examines the evolution of tcpcopy’s architecture across three generations, comparing application‑layer and packet‑level request replication, and explains how each design balances testing realism, system impact, and operational complexity for high‑performance traffic replay.

Load Testingpacket capturerequest replication
0 likes · 12 min read
How tcpcopy Evolved: From Simple Request Copying to Scalable Traffic Replication
转转QA
转转QA
Oct 10, 2018 · Information Security

Using Wireshark for Packet Capture, Filtering, and HTTPS Analysis

This article introduces Wireshark as a cross‑platform packet capture tool, explains its installation and basic UI, details capture and display filter syntax with examples, and demonstrates how to decrypt and analyze HTTPS traffic by importing SSL key logs.

FiltersHTTPSSSL/TLS
0 likes · 8 min read
Using Wireshark for Packet Capture, Filtering, and HTTPS Analysis
360 Quality & Efficiency
360 Quality & Efficiency
Sep 28, 2018 · Information Security

Mobile Packet Capture Techniques and Architecture for Android Devices

This article explains various methods for capturing network packets on Android phones—including internal tcpdump, Fiddler via Wi‑Fi hotspot, and VPNService‑based APKs—describes their drawbacks, and presents a scalable architecture that copies Wi‑Fi traffic to a server for analysis using Go's gopacket library.

AndroidFiddlerVPNService
0 likes · 6 min read
Mobile Packet Capture Techniques and Architecture for Android Devices
MaGe Linux Operations
MaGe Linux Operations
Jan 16, 2018 · Fundamentals

Master Network Packet Analysis with Wireshark: From Basics to TCP Handshake

This guide introduces Wireshark, a powerful open‑source packet capture tool, explains what it can and cannot do, compares it with Fiddler, details its interface, filtering options, OSI layer mapping, and walks through a practical TCP three‑way handshake analysis, helping network engineers and testers master protocol inspection.

TCP handshakeWiresharknetwork analysis
0 likes · 10 min read
Master Network Packet Analysis with Wireshark: From Basics to TCP Handshake
Architecture Digest
Architecture Digest
May 1, 2017 · Information Security

Overview and Architecture of the Xplico Network Forensics Tool

Xplico is an open‑source network forensics platform that reconstructs application‑level data from captured traffic, supporting numerous protocols, offering modular decoding, multithreaded processing, and flexible output to databases or files, making it valuable for security analysis and incident response.

Open SourceXplicoinformation security
0 likes · 9 min read
Overview and Architecture of the Xplico Network Forensics Tool
360 Quality & Efficiency
360 Quality & Efficiency
Mar 8, 2017 · Information Security

Wireshark Packet Capture and Filtering Guide

This guide introduces Wireshark’s packet capture process, from selecting network interfaces and configuring capture filters to analyzing captured data with display filters, interpreting protocol layers, and performing detailed TCP flow analysis, providing practical examples and filter expressions for effective network troubleshooting and security investigations.

FilteringTCPWireshark
0 likes · 7 min read
Wireshark Packet Capture and Filtering Guide
ITPUB
ITPUB
Feb 5, 2017 · Operations

Why HAProxy May Drop Requests When a Backend Fails – A Packet‑Capture Study

This article walks through a hands‑on packet‑capture experiment comparing HAProxy and Nginx load‑balancing behavior, showing how HAProxy’s health‑check interval can cause request loss during backend failures while Nginx continues to serve traffic.

HAProxyLoad Balancingbackend failure
0 likes · 7 min read
Why HAProxy May Drop Requests When a Backend Fails – A Packet‑Capture Study
ITPUB
ITPUB
Aug 16, 2016 · Fundamentals

Capture Ethernet Frames with Linux Raw Sockets (PF_PACKET)

This tutorial explains how to use Linux raw sockets (PF_PACKET) to send and receive link‑layer Ethernet frames, covering socket creation, protocol selection, sockaddr_ll structure, interface binding, promiscuous mode, and provides a complete C example that prints MAC and IP information for each captured packet.

LinuxPF_PACKETnetwork programming
0 likes · 12 min read
Capture Ethernet Frames with Linux Raw Sockets (PF_PACKET)
MaGe Linux Operations
MaGe Linux Operations
Sep 24, 2015 · Information Security

Mastering Tcpdump: From Installation to Advanced Packet Capture Commands

Tcpdump is a powerful command‑line packet sniffer for Unix‑like systems; this guide introduces its purpose, installation steps, essential command‑line options, filter expression syntax, and practical examples, enabling users to capture, analyze, and troubleshoot network traffic efficiently.

Linuxnetwork analysispacket capture
0 likes · 29 min read
Mastering Tcpdump: From Installation to Advanced Packet Capture Commands