tcpdump vs tcpflow

tcpdump

Network & Admin

tcpdump is a command-line network monitoring and data acquisition tool used to capture packet data flowing over a network. It can intercept and log traffic passing over a digital network or part of a network.

tcpflow

Network & Admin

tcpflow is an open source tool for capturing TCP traffic flows. It works by capturing packets from network interfaces or packet capture files, reassembling TCP streams, and storing application-layer data with relevant TCP metadata.