snooping on linux

[Gerald Combs]

This should be possible with 'tethereal', the CLI analyzer that comes with
the Ethereal distribution.  It shares many preferences with its GUI
counterpart including the ability to specify the format of each output
line.

You can adjust tethereal's output format indirectly by loading the
Ethereal GUI and selecting Preferences->Columns.  You can also specify the
format directly on the command line with the "-o" option.  Either way, you
should be able produce output similar to snoop.

Tethereal can also read and write snoop-formatted capture files in case
you need that capability.

On Fri, 14 Jun 2002, I am Spartacus wrote:

> there is a tool called "snoop" that i use under solaris which allows me 
> to monitor traffic in real-time between source and destination 
> addresses.  i know tcpdump works well under linux, but i'm not getting 
> exactly what i want out of it.  all i need is something that will give 
> me source and destination ip addresses, port, protocol and packet size. 
>  is tcpdump capable of this or, more preferably, has anyone ever seen a 
> linux build of snoop?
> 
> 
> 
>