- What is tcpdump?
- tcpdump is a command line packet sniffer (built into Linux) that is used to troubleshoot network problems. Any traffic coming to or from the control plane is visible when running the tcpdump utility on a device. This may not include the data plane traffic, depending on the switch. For capturing data plane traffic, some switches support monitoring ports that copy hardware-forwarded traffic to a sniffer or to other suitable capture devices for analysis.