monitor TCP communication

Danny Colligan dannycolligan at
Sun Jan 7 17:13:50 UTC 2007

> Message: 5
> Date: Sun, 07 Jan 2007 12:05:08 +0100
> From: Jhair Tocancipa Triana <jhair.tocancipa at>
> Subject: Re: monitor TCP communication
> To: ubuntu-users at
> Message-ID: <87ac0vumfv.fsf at>
> Content-Type: text/plain; charset=us-ascii
> Marco Mandl writes:
> > I can't get evolution to work with my IMAP server. I want to see what's
> > actually happening. So I want to monitor / log the detailed traffic on a
> > certain port - some sort of sniffing.
> You can use ngrep[1]. For example the following shows what is
> happening when I read your message headers from my news server. You
> can adjust host and port to match your IMAP host and port to get the
> information you want.
> # ngrep -d any host and port 119
> interface: any
> filter: (ip or ip6) and ( host and port 119 )
> #

As far as sniffing goes, there are two tools that I know of for the job...
one is Wireshark and the other is tcpdump.  Wireshark is a GUI and tcpdump
is a command line tool.  Look in the repos.  Happy sniffing.

Danny Colligan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the ubuntu-users mailing list