I am trying to capture HTTP requests to a specific domain: *.example.com using tcpdump and save it to a pcap file. How can I do that ?Does tcpdump have some kind of syntax: tcpdump -i eth0 -s 0 host *.example.com port 80Refering to RuiFRibeiro suggestion, I tried ngrep by command:sudo ngrep -q -d any -O example.pcap 'example.com' 'port 80'However, It can not save to example.pcap for further processing.
Capture HTTP requests for a domain and its sub-domain by tcpdump
http;tcpdump