use tcpdump to trace POST data in linux

Last updated on August 23rd, 2014 at 07:48 am

[code lang=”bash”]
tcpdump -s 0 -A ‘tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354)’
[/code]