Service/Network Footprinting

we will run the ps command every second via the watch utility and grep the results on any occurrence of the word "pass".

watch -n 1 "ps -aux | grep pass"

Tcpdump cannot be run without sudo permissions. That is because it needs to set up raw sockets2 in order to capture traffic, which is a privileged operation.

sudo tcpdump -i lo -A | grep "pass"