I see that my Amazon EC2 has a lot of traffic coming inbound after I reboot my Linux machine. I would like to find out what is going on right after the servers comes back after reboot.
I thought using tcpdump to capture the traffic. how can I make sure the tcpdump starts right after reboot and write information to a file?
any other tools should I use maybe?