Here is the scenario.
I have an IP address 1.2.3.4 port 2000 sending udp packets to one unknown IP. I would like to find the unknown IP so I can block it with iptables.
Is there a way to do it with a script? Right now I am doing it manually by using
tshark -i eth1 -f "net 1.2.3.4 and src port 2000"
I'm not sure how to pipe this into a script and automatically find the destination ip.