# tcpdump

> Command-line packet capture tool

- Run tcpdump:

`tcpdump -i eth0 -w capture.pcap`

- Run tcpdump:

`tcpdump -r capture.pcap`