WakeMeOnLAN – Watching for WOL packets with tcpdump

by James McDonald | Jul 27, 2026 | IT Tips | 0 comments

If you want to see WOL traffic on the LAN try this tcpdump snippet

WakeMeOnLAN.exe uses port 40,000 by default so you'll miss it if you just use 9

# on a Unifi UDM
sudo tcpdump -i br99 udp port 9 or udp port 40000

Where -i br99 is the interface on a Linux based host

# on a Debian based computer
tcpdump -i enp5s0 udp port 9 or udp port 40000
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on enp5s0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
17:49:48.034553 IP TGN-MYPC.tgn.home.49433 > 10.11.12.255.40000: UDP, length 102

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.