Tcpdump

Tcpdump is a command-line utility for capturing and analyzing network traffic on Unix-like systems. It allows users to filter traffic by protocol, host, or port and to save packet captures in pcap format for offline analysis. Tcpdump is widely used for network troubleshooting, forensic investigations, and security monitoring. Its lightweight design makes it suitable for resource-constrained environments or embedded systems. Tcpdump integrates well with other tools like Wireshark for deeper packet analysis.