[Module] TCPDump

[newbi3]

Description

This module is a web front end for tcpdump. It allows you to easily start packet captures and keep track of historical pcaps.

Features

• Manage dependencies
• Preform pcaps with tcpdump
• Easily apply options to your captures
• View and download capture history

Edited September 18, 2020 by newbi3

[davidb62]

Is it possible to stream the output of tcpdump to a remote host using nc (netcat) from the UI

I tried tcpdump -i br-lan | nc <ip> <port> but I get

tcpdump: can't parse filter expression: syntax error

 

Thanks in advance!

[chrizree]

Tried any of this?

https://technicallysane.blogspot.com/p/using-tcpdump-with-netcat.html

[davidb62]

Thanks.  I got it working via SSH, but the same command does not work with the SSH via the UI.  

It works from normal SSH so that is fine

 

Thanks again!

 

[Jsan]

hi @newbi3

I just got my pineapple and so far haven't had much success doing anything, really. I just factory reset the device and installed TCPDump module. Once installed, I tried to capture traffic on each wlan interface with monitor mode checked, and for each interface I got the same error; "tcpdump: wlanX: That device doesn't support monitor mode"

I have the 5ghz ac module installed. I tired each wlan interface, 0-3. I assume the radios DO support monitor mode, and there is some other issue happening.

Any advice?

I've also tried using the HTTPeek module without any success, but I'll save that for the other thread.

Thanks!

 

[dark_pyrro]

I guess you've gotten some answers on Discord regarding this.