Signal9Signal9 — home
online
back to labs

Packet Capture

MediumNetworking20-25 min
The brief

You need a repeatable capture for troubleshooting. Write a script at /root/case/capture.sh that runs a bounded packet capture with tcpdump — capture on an interface, bound it with a timeout so it always terminates (a packet count like -c N can be added, but on its own it never returns on an idle interface), and write the packets to the file /root/case/capture.pcap. The script must be executable and exit cleanly (status 0) even if the capture grabs nothing. Grading runs it and inspects it for a bounded tcpdump-to-file.

What you'll do
  • Create an executable script at /root/case/capture.sh
  • Run a bounded tcpdump capture
  • Write the captured packets to /root/case/capture.pcap
  • Exit cleanly

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.