tcpdump - resolve IP and skip resolving ports

Question

How to tell tcpdump to resolve names and leave the port numbers unresolved?

From man:

-n     Don’t convert host addresses to names.  This can be used to avoid DNS lookups.
-nn    Don’t convert protocol and port numbers etc. to names either.

setting tcpdump -nn skips the resolution for both addresses and ports.

score 20 · Answer 1 · edited Dec 05 '19 at 22:38

20

Have you tried -nnvvS (Don't resolve DNS or Port names, be more verbose when printing info, print the absolute sequence numbers)

Src: http://www.ihtb.org/security/tcpdump-explained.txt (archived, original link dead)

edited Dec 05 '19 at 22:38

Community

1
1

answered Nov 06 '13 at 09:44

Latheesan

23,247
32
107
201

1

Just confirming that this doesn't work for me either on a CentOS 6.x system running tcpdump version: 4.1-PRE-CVS_2012_03_26. – slm May 21 '15 at 13:16

tcpdump - resolve IP and skip resolving ports

1 Answers1