Monitor TCP traffic between Server and Workstation

Sometime you have the need to see whats happening between the server and a workstation.
You can use the utility tcpdump to capture the tcp data between the server and workstation and analyze this data with Wireshark (a tool that comes with linux).

This is the syntax: tcpdump src workstationip or dst workstationip -i eth0 -s 1500 -w connection.pcap

Start this, do your stuf, end tcpdump with CTRL-C. Dan you can read the connection.pcap file with wireshark.