View all incoming HTTP requests

Viewing incoming HTTP requests can be using for finding a high amount of requests going to a certain domain on your server.

To view all HTTP GET requests, run the following command as root:

tcpdump -s 0 -A \'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420\'

For HTTP POST requests run the following:

tcpdump -s 0 -A \'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354\'