Monitor Network Traffic with Tcpick

Tcpick is a very nice toool to monior network traffic on LAN.

It shows all packets in realtime colorized format. It is easier for the eyes compared to tcpdump.

Install tcpick:

apt-get install tcpick

Look for port 80 HTTP traffic:

tcpick -i br0 -C -yP -h "port 80"

Look for port 25 SMTP traffic:

tcpick -i br0 -C -yP -h "port 25"

Look for MSN Traffic:

tcpick -i br0 -C -yP -h "port 1863"

Filter one specific host to look for and log the output in realtime: (You can also use >> instead of the tee command)

tcpick -i br0 -C -yP -h "port 1863" "host 192.168.10.68" | tee /tmp/messenlog_host_192.168.10.68.txt

Filter one specific host to look for and log the output in background (beware logs can take large space):

tcpick -i br0 -C -yP -h "port 1863" "host 192.168.10.68" | tee /tmp/messenlog_host_192.168.10.68.txt nohup &

To stop:

killall tcpick