# tcpdump
Find SNI header sent by connecting client
Filter tcpdump to display the packet containing the SNI header from the connecting client and make it human readable in the terminal output:
tcpdump -i <NETWORK_INTERFACE> -s 1500 '(tcp[((tcp[12:1] & 0xf0) >> 2)+5:1] = 0x01) and (tcp[((tcp[12:1] & 0xf0) >> 2):1] = 0x16)' -nnXSs0 -ttt