How to know who is pinging me?

Aug 28, 2021#tcpdump #linux #Ubuntu70

AI Translation

This post is translated from Chinese into English through AI.View Original

AI-generated summary

The article discusses the use of tcpdump, a powerful command-line packet sniffer tool, on Linux systems. It provides a command example to monitor ICMP echo packets using tcpdump. The article also includes a reference link for further information.

tcpdump is the most powerful and widely used command-line packet sniffer (packet analyzer) tool available on Linux.

In the terminal application of the computer you want to monitor:

sudo tcpdump -i ethX icmp and icmp[icmptype]=icmp-echo

Options:

-n avoid a (potentially slow) reverse DNS query
−i interface
icmp[icmptype]=icmp-echo    To print all ICMP packets that are echo requests/replies

It will start listening on ethX and wait for incoming packets.

Example: I have 2 PCs, Win7 with IP 192.168.0.8 and Ubuntu with IP 192.168.0.57. It will monitor incoming packets:
On Win7:

ping 192.168.0.57

On Ubuntu:

tcpdump -i eth0 icmp and icmp[icmptype]=icmp-echo -n

Reference: nixCraft[1]