Today I got an enterprise Internet connection together with a Sagemcom router. The first time it is connected to the Internet, it will spend 20 minutes upgrading the firmware.
I would really like to capture all the traffic for this upgrade using a CentOS host with two NIC's, with the purpose to figure how upgrades are authenticated. E.g. with a secret user account and passphrase?
If I want to put the CentOS host between the Internet connection and the router:
- How do I configure CentOS, so all traffic going in at
eth0goes out at
tcpdump -s0 -A -w upgrade.pcap -nni eth0correct, if I want to use Wireshark later on to inspect the packages?