A Practical Linux Tcpdump Workflow for Packet Capture
Capture Linux network evidence with tcpdump by choosing the right interface, writing precise filters, saving PCAPs, and validating results with system tools.
Tag: Traffic monitoring tools
Monitor DNS Traffic with eBPF
eBPF for DNS monitoring gives me precise visibility into queries and responses without touching daemon code. I attach small programs at kernel tracepoints, parse headers, and capture latency where packets flow. I write steps you can run now: build with libbpf, attach at socket tracepoints, and export structured events to a UI like NetObserv. The […]