On Thu, May 26, 2011 at 2:16 PM, Phill Coxon <[email protected]> wrote:
> It appears to be using curl to access the remote ip address.
>
> Any suggestions on how I can track the outgoing curl requests to see
> what url etc it is accessing?

Rough and ready version :-
sudo tcpdump -i eth0 -A host IPADDRESS and port 80

Or if you don't like that ASCII output, install wireshark on your
desktop and give it the data file you get when running "sudo tcpdump
-w DATAFILE -i eth0 host IPADDRESS and port 80". Select one of the
packets, right-click and select "Follow TCP Stream" to get the best
output format.

-jim

_______________________________________________
Linux-users mailing list
[email protected]
http://lists.canterbury.ac.nz/mailman/listinfo/linux-users

Reply via email to