Tcpdump: An open-source command-line tool used primarily on Unix and Linux-based systems for network monitoring and data analysis. It allows the user to intercept and display TCP/IP and other packets transmitted or received over a network to which the computer is attached. In terms of security, tcpdump can be used for analyzing network activity, troubleshooting network issues, and detecting network intrusion attempts or other suspicious activity.
Categories: CC D4: Network Security | CCSP D5: Cloud Security Operations | CISM D4: Incident Management | CISSP D4: Communication and Network Security | Security+ D3: Security Architecture | SSCP D6: Network and Communication Security
« Back to Glossary Index