I am running 2.4 Debian (Woody Dist) linux box as a router, NAT,
Firewall using iptables. I want to log constant traffic on both eth0
and eth1 on the same box. I have been messing around with tcpdump and
it is not really doing what I want. Maybe it can and I just cant get
it. Help me out!
I want to be able to write all traffic to a file that I can view later
on. But I want simple things like source and destination address from
the same packet. Tcpdump seems to only be able to capture on a per
interface basis which does not let me see the other interfaces
information. I went to tcpdump.org and the man is not helping. Does
anyone know a better solution then this or can I do it with tcpdump.