{"id":7478,"date":"2022-11-07T11:25:57","date_gmt":"2022-11-07T03:25:57","guid":{"rendered":"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478"},"modified":"2023-07-17T17:51:15","modified_gmt":"2023-07-17T09:51:15","slug":"tcpdump-%e6%8a%93%e5%8c%85%e7%a5%9e%e5%99%a8","status":"publish","type":"post","link":"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478","title":{"rendered":"tcpdump-\u6293\u5305\u795e\u5668"},"content":{"rendered":"<p><a href=\"https:\/\/zhuanlan.zhihu.com\/p\/48532128\">https:\/\/zhuanlan.zhihu.com\/p\/48532128<\/a><br \/>\n<a href=\"https:\/\/www.jianshu.com\/p\/d9162722f189\">https:\/\/www.jianshu.com\/p\/d9162722f189<\/a><br \/>\n<a href=\"https:\/\/www.bbsmax.com\/A\/MAzA7kQq59\/\">https:\/\/www.bbsmax.com\/A\/MAzA7kQq59\/<\/a><br \/>\n<a href=\"https:\/\/blog.csdn.net\/wfj_uestc\/article\/details\/89631410\">https:\/\/blog.csdn.net\/wfj_uestc\/article\/details\/89631410<\/a><br \/>\n<a href=\"https:\/\/www.cnblogs.com\/jiujuan\/p\/9017495.html\">https:\/\/www.cnblogs.com\/jiujuan\/p\/9017495.html<\/a><\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_16 counter-hierarchy counter-decimal ez-toc-grey\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\">\u76ee\u5f55<\/p>\n<span class=\"ez-toc-title-toggle\"><a class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" style=\"display: none;\"><i class=\"ez-toc-glyphicon ez-toc-icon-toggle\"><\/i><\/a><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#%E4%B8%80%E3%80%81%E6%98%BE%E7%A4%BA%E9%80%89%E9%A1%B9%E9%85%8D%E7%BD%AE\" title=\"\u4e00\u3001\u663e\u793a\u9009\u9879\u914d\u7f6e\">\u4e00\u3001\u663e\u793a\u9009\u9879\u914d\u7f6e<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#%E4%BA%8C%E3%80%81%E8%BF%87%E6%BB%A4%E9%80%89%E9%A1%B9%E9%85%8D%E7%BD%AE\" title=\"\u4e8c\u3001\u8fc7\u6ee4\u9009\u9879\u914d\u7f6e\">\u4e8c\u3001\u8fc7\u6ee4\u9009\u9879\u914d\u7f6e<\/a><ul class=\"ez-toc-list-level-5\"><li class=\"ez-toc-heading-level-5\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#1ip%E7%9B%B8%E5%85%B3\" title=\"1.ip\u76f8\u5173\">1.ip\u76f8\u5173<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-4\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#%E4%B8%89%E3%80%81%E6%89%93%E5%8D%B0%E6%95%B0%E6%8D%AE%E5%8C%85\" title=\"\u4e09\u3001\u6253\u5370\u6570\u636e\u5305\">\u4e09\u3001\u6253\u5370\u6570\u636e\u5305<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-5\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#%E5%9B%9B%E3%80%81%E4%BF%9D%E5%AD%98%E6%8A%93%E5%8C%85%E6%95%B0%E6%8D%AE\" title=\"\u56db\u3001\u4fdd\u5b58\u6293\u5305\u6570\u636e\">\u56db\u3001\u4fdd\u5b58\u6293\u5305\u6570\u636e<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-6\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=7478\/#%E4%BA%94%E3%80%81%E5%AE%9E%E6%88%98\" title=\"\u4e94\u3001\u5b9e\u6218\">\u4e94\u3001\u5b9e\u6218<\/a><\/li><\/ul><\/nav><\/div>\n<h4><span class=\"ez-toc-section\" id=\"%E4%B8%80%E3%80%81%E6%98%BE%E7%A4%BA%E9%80%89%E9%A1%B9%E9%85%8D%E7%BD%AE\"><\/span>\u4e00\u3001\u663e\u793a\u9009\u9879\u914d\u7f6e<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>\u663e\u793a\u9009\u9879\u5e26-<\/p>\n<ul>\n<li>-i:\u6307\u5b9a\u7f51\u7edc\u63a5\u53e3<\/li>\n<li>-c5:\u6307\u5b9a\u6293\u53d65\u4e2a\u6570\u636e\u5305<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"%E4%BA%8C%E3%80%81%E8%BF%87%E6%BB%A4%E9%80%89%E9%A1%B9%E9%85%8D%E7%BD%AE\"><\/span>\u4e8c\u3001\u8fc7\u6ee4\u9009\u9879\u914d\u7f6e<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<blockquote>\n<p>\u8fc7\u6ee4\u9009\u9879\u4e0d\u5e26-<\/p>\n<p>\u591a\u6761\u4ef6\u7b5b\u9009\u91c7\u7528and\u6216\u8005or\/not(!)\uff0c\u53ef\u4ee5\u91c7\u7528\u62ec\u53f7\u5b9e\u73b0\u590d\u6742\u7684\u8fc7\u6ee4\u89c4\u5219\uff0cshell\u4e2d\u8981\u4f7f\u7528\u5f15\u53f7\u5f15\u4f4f\u8fc7\u6ee4\u89c4\u5219\uff0c\u9632\u6b62\u8bef\u8bc6\u522b\u3002<\/p>\n<\/blockquote>\n<h5><span class=\"ez-toc-section\" id=\"1ip%E7%9B%B8%E5%85%B3\"><\/span>1.ip\u76f8\u5173<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<ul>\n<li>host:\u6293\u53d6\u7279\u5b9aip\u76f8\u5173\u7684\u6570\u636e\u5305<\/li>\n<li>src:\u6e90ip<\/li>\n<li>dst:\u76ee\u6807ip<\/li>\n<li>port:\u6293\u53d6\u7279\u5b9a\u7aef\u53e3\u76f8\u5173\u7684\u6570\u636e\u5305<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"%E4%B8%89%E3%80%81%E6%89%93%E5%8D%B0%E6%95%B0%E6%8D%AE%E5%8C%85\"><\/span>\u4e09\u3001\u6253\u5370\u6570\u636e\u5305<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ul>\n<li>-A:\u6253\u5370\u6570\u636e\u5305\u7684ascii\u7801\u503c<\/li>\n<li>-x:\u6253\u5370\u6570\u636e\u5305\u7684\u5341\u516d\u8fdb\u5236<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"%E5%9B%9B%E3%80%81%E4%BF%9D%E5%AD%98%E6%8A%93%E5%8C%85%E6%95%B0%E6%8D%AE\"><\/span>\u56db\u3001\u4fdd\u5b58\u6293\u5305\u6570\u636e<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ul>\n<li>-w webserver.pcap<br \/>\n\u4f7f\u7528tcpdump -r \u6253\u5f00\uff0c\u6216\u8005\u522b\u7684\u4e8c\u8fdb\u5236\u5de5\u5177\u6253\u5f00\u3002<br \/>\n\u6d41\u91cf\u5206\u6790\u5de5\u5177\uff1awireshark <a href=\"https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html\">https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html<\/a><\/li>\n<\/ul>\n<p>\u6ce8\u610f\u590d\u6742\u6761\u4ef6\u8fc7\u6ee4-w\u5b58\u50a8\u7684\u6587\u4ef6\u53ef\u80fd\u65e0\u6cd5\u4f7f\u7528wireshark\u6253\u5f00\uff0c\u6bd4\u5982\u591aip.<\/p>\n<h4><span class=\"ez-toc-section\" id=\"%E4%BA%94%E3%80%81%E5%AE%9E%E6%88%98\"><\/span>\u4e94\u3001\u5b9e\u6218<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<ul>\n<li>\u591aip\u8fc7\u6ee4<br \/>\n\u5982\u679c\u60f3\u8981\u83b7\u53d6\u4e3b\u673a172.16.0.11\u9664\u4e86\u548c\u4e3b\u673a210.45.123.249\u4e4b\u5916\u6240\u6709\u4e3b\u673a\u901a\u4fe1\u7684ip\u5305\uff0c\u4f7f\u7528\u547d\u4ee4\uff1a<br \/>\n<code>tcpdump ip &#039;host 172.16.0.11 and ! 210.45.123.249&#039;<\/code><br \/>\n\u6ce8\u610f\u5982\u679c\u6709\u591a\u4e2a\u60f3\u6293\u53d6\u7684ip\uff0c<code>\u4e0d\u80fd ip1 and ip2\uff0c\u8981ip1 or ip2<\/code>\uff0c\u4e00\u4e2a\u5305\u4e0d\u53ef\u80fd\u540c\u65f6\u67092\u4e2aip\u3002<\/li>\n<\/ul>\n<button class=\"simplefavorite-button\" data-postid=\"7478\" data-siteid=\"1\" data-groupid=\"1\" data-favoritecount=\"0\" style=\"\">\u6536\u85cf <i class=\"sf-icon-star-empty\"><\/i><\/button>","protected":false},"excerpt":{"rendered":"<p>https:\/\/zhuanlan.zhihu.com\/p\/48532128 https:\/\/www. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[673],"tags":[],"_links":{"self":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/7478"}],"collection":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7478"}],"version-history":[{"count":19,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/7478\/revisions"}],"predecessor-version":[{"id":10033,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/7478\/revisions\/10033"}],"wp:attachment":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7478"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}