← All commands
Topic hub Networking
Windows Linux Networking Command guide Packet Capture

Windows pktmon start equivalent in Linux

Captures packets on all interfaces.

Windows pktmon start
→
Linux equivalents
Debian/Ubuntu same command
sudo tcpdump -i any
Fedora same command
sudo tcpdump -i any
Arch same command
sudo tcpdump -i any

Overview

What this command does

On Windows, "pktmon start" is used to capture packets. On Linux, the closest practical mapping shown here is "sudo tcpdump -i any". Captures packets on all interfaces. This reference is grouped under Networking → Packet Capture.

Migration tip: For the Windows task "pktmon start", the Linux workflow on this page uses "sudo tcpdump -i any" across Debian/Ubuntu, Fedora and Arch. Check paths, permissions and installed package versions before copying it into a script.

Windows → Linux context

What changes when you use this on Linux?

Equivalent task, different tool

Windows pktmon start maps to sudo tcpdump -i any for this task. Treat this as a workflow mapping rather than a character-for-character syntax translation.

Portable across the compared distros

The Debian/Ubuntu, Fedora and Arch rows use the same command in this mapping. Package availability or defaults can still vary, so check the installed tool version when an option behaves differently.

Elevated privilege appears in this workflow

At least one example uses sudo. Confirm the target path, device, service or package before running the elevated form; do not add sudo simply to bypass an unexplained permission error.

Practical tasks

Common use cases

Capture packets

Captures packets on all interfaces.

sudo tcpdump -i any

Capture packets

sudo --help

Show command help when supported

man sudo

Open the manual page when installed

Ready to run

Copyable Linux commands

Review paths, device names, package names and permissions before running any command.

sudo tcpdump -i any

Walkthrough

Examples with explanations

# Windows equivalent: pktmon start
sudo tcpdump -i any

Reference

Common options and variations

Command or optionUse
sudo tcpdump -i anyCapture packets
sudo --helpShow command help when supported
man sudoOpen the manual page when installed

Distro differences

Debian/Ubuntu vs Fedora vs Arch

Debian/Ubuntu, Fedora and Arch all use "sudo tcpdump -i any" for this mapping. The command syntax shown here is portable across the three rows, although installed versions and system defaults can still vary.

DistributionPackage manager / baseEquivalent commandDifference to notice
Debian/Ubuntu same command sudo tcpdump -i any Same command on this distribution.
Fedora same command sudo tcpdump -i any Same command on this distribution.
Arch same command sudo tcpdump -i any Same command on this distribution.

Keep learning

Related Networking commands