Academy/Intro to Network Traffic Analysis/Capturing With Tcpdump (Fundamentals Labs)


I have a question on the task #3:
“If i wished to filter out ICMP traffic from out capture, what filter could we use? ( word only, not symbol please.)”

I try:
proto icmp
-l | grep ‘ICMP’
sudo tcpdump -r file.pcap -l /| grep ‘ICMP’

Please some help!!!

1 Like

Did you figure it out?
I am stuck here too, any hint? I tried many like yours but nothing.

Observe the hint of the question. :wink:
“we are saying NOT to capture any ICMP packets…”

I got it :v:

NOT ICMP :grinning:

1 Like

so simple, yet so tricky. SMH thank you