ngrep

Filter network traffic packets using regular expressions.

• Capture traffic of all interfaces:

ngrep -d any

• Capture traffic of a specific interface:

ngrep -d {eth0}

• Capture traffic crossing port 22 of interface eth0:

ngrep -d {eth0} port {22}

• Capture traffic from or to a host:

ngrep host {www.example.com}

• Filter keyword 'User-Agent:' of interface eth0:

ngrep -d {eth0} '{User-Agent:}'

Copyright © 2014—present the tldr-pages team and contributors.

This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).