Im trying to save the rawdata that is beeing sent throu our proxy to a specific url. A friend of mine gave me the tip to use tcpdump, so I started reading about it on their page. But for some reason I fail to use it.
I tried 'tcpdump -c10 host my.very.specific.host.com' But I don't get any matches. And yes =) I can see that there is some kind of action from the client in the server.log.
If I use 'tcpdump -c10' I get 10 rows instantly. So I guess I miss understood the concept of 'host'?
I cannot point it towards a IP since the its a webserver that handles way to many different urls.
This is really not my domain(programmer) so, please excuse my simple question :) Thanks in advance.
EDIT 1
Thanks for all the help, and yes.. I should have stated my question more clearly. So here is some 'more' information. What I want to do is to capture the data going from our proxy to a cellphone.
The reason I'm doing this is to make sure that we send exactly what we want before it goes out into the 'mobile operator gateway/proxy wildness' (Yes they tend to modify things more then they should ;))
The information that I'm interested in is the http protocol.
So what I will do now is that I will try to dump the information that goes between our proxy and the mobile operator gateway on the 'public' NIC. Luckily for me the mobile operator only got one public gateway.
Over and out!