To display the HTTP Headers using just tcpdump the following syntax can be used :
You can read – tcpdump_advanced_filters
or http://www.wains.be/pub/networking/tcpdump_advanced_filters.txt
Analyzing:
cat /tmp/tcpdump* | sed -e s/^.*Host:/Host:/ | egrep Host | sort | uniq -c
“How to display HTTP Headers via tcpdump”Continue reading