use tcpdump to trace POST data in linux 2014-08-09 / By juzhax / Linux [code lang=”bash”] tcpdump -s 0 -A ‘tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354)’ [/code]
