3 engineers on Hacker News describe using tcpdump first-hand: 2 endorse it, 0 regret it, 0 are mixed.
“I do tcpdump in prod, and it's quicker and more effective than many of the modern shiny tools”
endorse · production · znpy · 2025-12-17 · source ↗ · wrong label?“Ditto tcpdump. Often it was used specifically to determine the cause of performance issues.”
endorse · production · zwischenzug · 2018-02-12 · source ↗ · wrong label?“From tcpdump, I figured out it was because Linux did not do any sort of NFS caching at the time”
neutral · production · drewg123 · 2019-07-25 · source ↗ · wrong label?