Return to Answer

grammar edits

Your "issue" while using the TCPDUMP is that it is showing you the content of the header of the package.

If you still want to use TCPDUMP just remove the -A and. Doing this should remove that from the output.

sudo tcpdump 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

Your "issue" while using the TCPDUMP is that is showing you the content of the header of the package.

If you still want to use TCPDUMP just remove the -A and should remove that from the output.

sudo tcpdump 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

Your "issue" while using the TCPDUMP is that it is showing you the content of the header of the package.

If you still want to use TCPDUMP just remove the -A. Doing this should remove that from the output.

sudo tcpdump 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

answered Jan 22, 2020 at 11:41

Your "issue" while using the TCPDUMP is that is showing you the content of the header of the package.

If you still want to use TCPDUMP just remove the -A and should remove that from the output.

sudo tcpdump 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'