sudo tcpdump -i eth0 -w dump.pcap
-i specifies an ENI to capture.
-w specifies a location for saving results.
sz command or any other method.sz dump.pcap
TCP Option.
The Payload field is in hexadecimal format. The last 4 bytes stands for the real client IP.

Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback