Free Tool
TCPDump & Wireshark Cheatsheet Generator
Select your use case, customize the parameters, and get ready-to-use tcpdump commands and Wireshark filters with step-by-step workflow instructions.
Select a Scenario
Capture Options
Custom Parameters
TCPDump Commands
Wireshark Display Filters
Combined Workflow
Detection Indicators
Related Flowtriq Detection
Why Use a Capture Cheatsheet?
Network packet capture is the foundation of traffic analysis and DDoS forensics. TCPDump and Wireshark are the two most widely used tools for this purpose, but remembering the exact syntax for every scenario can be difficult. This cheatsheet generator gives you accurate, ready-to-use commands tailored to your specific situation, whether you are investigating a SYN flood, analyzing DNS amplification, or tracing TLS handshake issues.
Each generated cheatsheet includes multiple command variations so you can choose between quick terminal analysis with tcpdump and deep packet inspection in Wireshark. The combined workflow section ties both tools together into a practical investigation procedure.
From Manual Capture to Automated Detection
While tcpdump and Wireshark are invaluable for manual investigation and post-incident forensics, they require an engineer to be actively watching. Flowtriq automates the detection side of this equation. Every pattern you would search for manually, such as SYN flood signatures, DNS amplification spikes, and anomalous packet rates, is monitored continuously in real-time across all your nodes with 1-second detection granularity.