Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to capture packets with ACK flag set using tcpdump including SYN/ACK, data packet and ACK packets thanks

share|improve this question

closed as not a real question by mdpc, Ward, Khaled, Jenny D, Dave M Apr 8 '13 at 12:13

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 2 down vote accepted

With the help of the manual,

tcpdump 'tcp[tcpflags] & (tcp-ack) != 0'

should do the trick

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.