windows 10 bash tcpdump: socket: Invalid argument

networking tcpdump windows-subsystem-for-linux network-tools
Al-Alamin picture Al-Alamin · Oct 18, 2017 · Viewed 16.8k times · Source

I am using windows 10 bash to use tcpdump From tutorial i found that to listen to a interface command is:

tcpdump -i eth0 //eth0 is ethernet interface
tcpdump -i any // to listen to any interface

In both cases I am getting tcpdump: socket: Invalid argument error. NOTE: 

tcpdump -D

does not print anything on console.

Answer

user3657298 picture user3657298 · Oct 30, 2017

Based on https://github.com/Microsoft/WSL/issues/69, this is a limitation of the current Windows Subsystem for Linux. The Fall Creators update added a lot of functionality, but tcpdump still does not work.

Related questions

Monitoring multiple ports in tcpdump

I am trying to find a way to read multiple ports using tcpdump. Suppose I have two ports, p1 and p2, and I want to read the traffic moving through both ports simultaneously. Is there any way to do it …

Read More
How can I use TCPDump on Unix to view messages sent to a specific multicast address?

I'm trying to view traffic transmitted to a specific multicast address on a network in order to analyze a protocol we're using. I don't have Wireshark available on the setup (unfortunately). TCPDump is available though. So, can anyone show me …

Read More
Saving the displayed/filtered packets in wireshark

I applied a filter in wireshark to display only the incoming packets to my PC. When I save the filtered/displayed packets to a .csv file, I actually saves all the packets (un-filtered). How can I save only the displayed/…

Read More