What are the advantages and benifits of TCP dump and how can this be used and in which environments it can be used
closed as not constructive by Janne Pikkarainen, Khaled, joeqwerty, Ladadadada, Dave M Apr 5 '12 at 12:09
As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.
Packet sniffers are a very valuable tool. When coupled with a protocol decoder such as Wireshark, they can tell you in explicit detail what's actually happening on the network wire. Depending on what you're trying to figure out, they can show you the exact problem, or lead you into the right course of research for the actual problem. Learning to read packet traces is one of the skills most system administrators need at least a little of.
A brief list of things that a packet trace will display in gory detail:
And that's just the easy stuff that the dissectors tell you outright. Once you've learned how things are supposed to look, you'll start to see patterns in the traffic that the dissectors don't reveal.
However, not all problems can be broken by packet sniffing. Problems with SSL/TLS communication are almost by definition invisible. Sometimes the problem is with a higher layer protocol (such as a hand built web-API) and doesn't show any artifacts on the wire.
You can use it
Not to mention that they are extremely useful when starting to study computer networks, because you can see exactly what kind of information is flowing through the network and how this information is represented.