In Ubuntu 12.04 I can use the tcpdump command to see network packets in real time. A typical invocation could look like this: tcpdump -pni eth0
In Ubuntu 14.04 the exact same command no longer displays packets in real time. When I run the command nothing happens for the first second. After a second it prints out all the packets transferred during the last second and then stops again.
Having packets in the packet capture show up out of order compared to other output I am looking at makes it harder to debug networking problems.
Is there any way I can get tcpdump to behave like it used to and display the packets as soon as they are transferred instead of waiting up to a second each time?
No, I cannot use WireShark as I have to debug machines that are on the Internet, not on the same LAN.
0 Answers