With some safe reasons, I need to sniff pptp cleint request packets, then to get dst ip and src ip, for example 10.5.1.100 -> 218.100.211.100 , I want to know the correct rule in tcpdump

link|improve this question

feedback

1 Answer

up vote 0 down vote accepted

tcpdump -i ethN port 1723 -vvv

Assuming that you literally just want to see the connection information and not run a packet cap.

Replacing ethN with the appropriate interface.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.