Skip to content
aptorise

Try “PDF editor”, “bootable USB” or “software for students”. Press Esc to close.

tcpdump

A command-line packet capture tool.

Open SourcemacOSLinux
Visit Official Website

Official source: tcpdump.orgLast verified: awaiting review · How we check softwareDeveloper: The Tcpdump Group

What is tcpdump?

tcpdump captures network packets and prints or saves them for analysis. Captures can be opened later in Wireshark.

Who should use tcpdump?

Supported platforms

Pricing & licence

Open Source Open Source

Open source: the source code is public, so anyone can inspect it, and it's free to use.

Prices change, so check tcpdump.org for current pricing.

Installation

Linux

Linux · APT (Ubuntu and Debian-based)
$ sudo apt install tcpdump

Install tcpdump with the rest of your Linux setup

Package names were checked against each official package registry, and commands install the same software as the official download. Only run commands you understand.

Alternatives to tcpdump

  • Wireshark iconWiresharkNetwork protocol analyser for capturing and inspecting traffic.View Alternative

Comparisons

Related guides

Nmap icon

Nmap

Networking

Network scanner that discovers hosts, ports and services.

Open Source

Available for Windows, macOS, Linux

TShark

Networking

The command-line version of Wireshark.

Open Source

Available for Windows, macOS, Linux

tcpdump FAQ

What can I use instead of tcpdump on Windows?

Wireshark, or its command-line version TShark if you want a tcpdump-style tool. Both are free and can save captures in the same pcap format.

Why does tcpdump need sudo?

Capturing traffic from a network interface needs elevated privileges on most systems, so tcpdump is usually run with sudo or by a user who has been given capture permissions.

How do I open a tcpdump capture in Wireshark?

Save the capture to a file with the -w option (for example, a file ending .pcap), copy it to your own computer, and open it in Wireshark. Both tools use the same pcap file format.

Is tcpdump free?

tcpdump is open source.

Which platforms does tcpdump support?

tcpdump is available for macOS and Linux. It isn't available for Windows, Android and iPhone & iPad.

What are the alternatives to tcpdump?

Common alternatives include Wireshark. See the full list of tcpdump alternatives for how they differ.

How does tcpdump compare with Wireshark?

We compare tcpdump with Wireshark side by side, covering platforms, price, features and which kind of user each suits.

Where can I download tcpdump safely?

From the official website, tcpdump.org. Aptorise links only to official sources and never hosts installers.