DEV Community

Discussion on: Why all developers should learn how to perform basic network troubleshooting

Collapse
 
memattchung profile image
memattchung

Cool, I never heard of tcpflow. However, it appears this tool only handles tcp, not other transport protocols like udp, right?

Also, regarding icmp, although it is often blocked, you can modify the encapsulation so instead of ip->icmp, you can modify it such that it rides on udp.

Collapse
 
aghost7 profile image
Jonathan Boudreau

Cool, I never heard of tcpflow. However, it appears this tool only handles tcp, not other transport protocols like udp, right?

Yea, in that case you should use tcpdump or something else. I just like the colouring.

Also, regarding icmp, although it is often blocked, you can modify the encapsulation so instead of ip->icmp, you can modify it such that it rides on udp.

Only what is absolutely necessary is let through by the firewall in my past experience. This includes disabling inbound UDP if the application does not need it. SYN scans work because you can poke the ports being used by the application.