Write a command to capture TCP/IP packets and send it through network by using appropriate tool to the forensic system. Also, Explain it in detail.
command: tcpdump -i any | nc "forensic system ip addr." "port"
[ tcpdump -i any ] it says that, capture tcp/ip packets that are going through any of the network interfaces that exist in the system
[ | nc "ip addr" "port" ] pipe ( | ) is used to send output of left command as a input to right command.
so output of tcpdump is now sent as an input to the "netcat" session.