How do I tcpdump to capture only HEAD traffic?

tcpdump -i bond1 'tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x48454144)'

This captures on the bond1 (outside) interface of a CSN for example.

© DataCore Software Corporation. · https://www.datacore.com · All rights reserved.