Snoop vs. Tcpduimp

Jeffrey Pyne plug-discuss@lists.plug.phoenix.az.us
Thu, 12 Jun 2003 15:45:56 -0700


Okay, this has been bugging me for a while now.  I've R'ed the hell out of
TFMs, and I still can't figger this out.  Using Solaris' snoop command, I
can do troubleshooting of layer 7 of the OSI model.  I can view the data of
an SMTP dialog, a DNS query, an HTTP GET etc.  Can I do this with tcpdump on
Linux?  I suspect the answer is "Nope, you can only see the lower layers."
If it isn't possible, is there a common command line tool for Linux that
*will* let me do this?

~Jeff