traffic-analysis

Capture network packets on a specific port using tcpdump by applying port filters to isolate traffic, such as port 80 for HTTP. This allows you to save the filtered packet capture to a pcap file for historical analysis and troubleshooting connectivity issues.

Monitor bandwidth consumption by process in real-time using command-line utilities like iftop and nethogs. These tools provide live network traffic inspection, allowing you to identify which specific connections or processes are consuming bandwidth and causing performance bottlenecks.

Yes, you can use tshark for deep packet inspection without the Wireshark GUI. Tshark operates as a command-line utility, enabling statistical analysis and detailed examination of network traffic data directly from the terminal for diagnosing performance issues.

Packet capture helps troubleshoot slow website loading by recording HTTP traffic to identify large requests and analyzing DNS resolution times. This process highlights network delays and performance bottlenecks affecting connectivity, allowing targeted diagnosis of the connectivity issue.

Running network traffic analysis tools like ngrep, tcpdump, and tshark typically requires root privileges or elevated permissions. Access to raw network interfaces for packet capture and real-time data inspection is restricted to authorized users for security reasons.