tcpdump

Command-line network traffic analyzer

Matches ATT&CK tactic: Discovery ↗

Platforms: Linux · Last verified September 6, 2026

This program allows you to dump the traffic on a network. tcpdump is able to examine IPv4, ICMPv4, IPv6, ICMPv6, UDP, TCP, SNMP, AFS BGP, RIP, PIM, DVMRP, IGMP, SMB, OSPF, NFS and many other packet types.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

See the official Kali tool page and upstream homepage linked above for installation and usage details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing