{"id":8675,"date":"2023-03-01T09:08:28","date_gmt":"2023-03-01T01:08:28","guid":{"rendered":"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675"},"modified":"2024-12-10T16:32:23","modified_gmt":"2024-12-10T08:32:23","slug":"wireshark","status":"publish","type":"post","link":"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675","title":{"rendered":"wireshark"},"content":{"rendered":"<p><a href=\"https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html\">https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html<\/a><\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_16 counter-hierarchy counter-decimal ez-toc-grey\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\">\u76ee\u5f55<\/p>\n<span class=\"ez-toc-title-toggle\"><a class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" style=\"display: none;\"><i class=\"ez-toc-glyphicon ez-toc-icon-toggle\"><\/i><\/a><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%E4%B8%80%E3%80%81%E5%9F%BA%E6%9C%AC%E4%BB%8B%E7%BB%8D\" title=\"\u4e00\u3001\u57fa\u672c\u4ecb\u7ecd\">\u4e00\u3001\u57fa\u672c\u4ecb\u7ecd<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%E4%BA%8C%E3%80%81%E8%BF%87%E6%BB%A4%E8%A7%84%E5%88%99\" title=\"\u4e8c\u3001\u8fc7\u6ee4\u89c4\u5219\">\u4e8c\u3001\u8fc7\u6ee4\u89c4\u5219<\/a><ul class=\"ez-toc-list-level-5\"><li class=\"ez-toc-heading-level-5\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#1%E5%AD%97%E8%8A%82%E5%81%8F%E7%A7%BB%E8%BF%87%E6%BB%A4%E5%99%A8%EF%BC%88%EF%BC%89\" title=\"1.\u5b57\u8282\u504f\u79fb\u8fc7\u6ee4\u5668\uff08*\uff09\">1.\u5b57\u8282\u504f\u79fb\u8fc7\u6ee4\u5668\uff08*\uff09<\/a><ul class=\"ez-toc-list-level-6\"><li class=\"ez-toc-heading-level-6\"><a class=\"ez-toc-link ez-toc-heading-4\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%EF%BC%81%EF%BC%81%E6%80%8E%E4%B9%88%E5%87%86%E7%A1%AE%E6%89%BE%E5%88%B0%E8%A6%81%E5%81%8F%E7%A7%BB%E7%9A%84%E8%A1%A8%E8%BE%BE%E5%BC%8F%EF%BC%9F%EF%BC%81%EF%BC%81\" title=\"\uff01\uff01\u600e\u4e48\u51c6\u786e\u627e\u5230\u8981\u504f\u79fb\u7684\u8868\u8fbe\u5f0f\uff1f\uff01\uff01\">\uff01\uff01\u600e\u4e48\u51c6\u786e\u627e\u5230\u8981\u504f\u79fb\u7684\u8868\u8fbe\u5f0f\uff1f\uff01\uff01<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-5\"><a class=\"ez-toc-link ez-toc-heading-5\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#2%E8%BF%87%E6%BB%A4%E6%8A%80%E5%B7%A7\" title=\"2.\u8fc7\u6ee4\u6280\u5de7\">2.\u8fc7\u6ee4\u6280\u5de7<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-6\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%E4%B8%89%E3%80%81%E5%AE%89%E8%A3%85%E6%8F%92%E4%BB%B6%E5%AF%BC%E5%87%BAH264%E6%B5%81\" title=\"\u4e09\u3001\u5b89\u88c5\u63d2\u4ef6\u5bfc\u51faH264\u6d41\">\u4e09\u3001\u5b89\u88c5\u63d2\u4ef6\u5bfc\u51faH264\u6d41<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-7\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%E5%9B%9B%E3%80%81%E5%B8%B8%E8%A7%81%E5%8D%8F%E8%AE%AE%E6%8A%93%E5%8C%85\" title=\"\u56db\u3001\u5e38\u89c1\u534f\u8bae\u6293\u5305\">\u56db\u3001\u5e38\u89c1\u534f\u8bae\u6293\u5305<\/a><ul class=\"ez-toc-list-level-5\"><li class=\"ez-toc-heading-level-5\"><a class=\"ez-toc-link ez-toc-heading-8\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#1DNS%E6%8A%93%E5%8C%85\" title=\"1.DNS\u6293\u5305\">1.DNS\u6293\u5305<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-4\"><a class=\"ez-toc-link ez-toc-heading-9\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#%E4%BA%94%E3%80%81%E4%B8%93%E9%A2%98%E5%88%86%E6%9E%90\" title=\"\u4e94\u3001\u4e13\u9898\u5206\u6790\">\u4e94\u3001\u4e13\u9898\u5206\u6790<\/a><ul class=\"ez-toc-list-level-5\"><li class=\"ez-toc-heading-level-5\"><a class=\"ez-toc-link ez-toc-heading-10\" href=\"http:\/\/xinyiworld.top\/wordpress_it\/?p=8675\/#1seqack%E5%9C%A8TCP%E9%80%9A%E4%BF%A1%E4%B8%8D%E5%90%8C%E9%98%B6%E6%AE%B5%E7%9A%84%E6%95%B0%E5%80%BC%E5%85%B3%E7%B3%BB\" title=\"1.seq\/ack\u5728TCP\u901a\u4fe1\u4e0d\u540c\u9636\u6bb5\u7684\u6570\u503c\u5173\u7cfb\">1.seq\/ack\u5728TCP\u901a\u4fe1\u4e0d\u540c\u9636\u6bb5\u7684\u6570\u503c\u5173\u7cfb<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h4><span class=\"ez-toc-section\" id=\"%E4%B8%80%E3%80%81%E5%9F%BA%E6%9C%AC%E4%BB%8B%E7%BB%8D\"><\/span>\u4e00\u3001\u57fa\u672c\u4ecb\u7ecd<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>TCP\/IP\u534f\u8bae\u5206\u5c42\u6a21\u578b<br \/>\n<a href=\"https:\/\/blog.csdn.net\/HNUPCJ\/article\/details\/106179879\">https:\/\/blog.csdn.net\/HNUPCJ\/article\/details\/106179879<\/a><br \/>\n<a href=\"https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html\">https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html<\/a><\/p>\n<p><a href=\"https:\/\/blog.csdn.net\/weixin_59049031\/article\/details\/128333741?utm_medium=distribute.pc_relevant.none-task-blog-2~default~baidujs_baidulandingword~default-0-128333741-blog-140994903.235^v43^pc_blog_bottom_relevance_base6&amp;spm=1001.2101.3001.4242.1&amp;utm_relevant_index=3\">https:\/\/blog.csdn.net\/weixin_59049031\/article\/details\/128333741?utm_medium=distribute.pc_relevant.none-task-blog-2~default~baidujs_baidulandingword~default-0-128333741-blog-140994903.235^v43^pc_blog_bottom_relevance_base6&amp;spm=1001.2101.3001.4242.1&amp;utm_relevant_index=3<\/a>  (\u5b9e\u9a8c)<\/p>\n<h4><span class=\"ez-toc-section\" id=\"%E4%BA%8C%E3%80%81%E8%BF%87%E6%BB%A4%E8%A7%84%E5%88%99\"><\/span>\u4e8c\u3001\u8fc7\u6ee4\u89c4\u5219<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p><a href=\"http:\/\/tech.gxcbt.com\/tech\/2022\/0728\/50772.html\">http:\/\/tech.gxcbt.com\/tech\/2022\/0728\/50772.html<\/a><br \/>\n<a href=\"https:\/\/blog.csdn.net\/CLown5\/article\/details\/126410532\">https:\/\/blog.csdn.net\/CLown5\/article\/details\/126410532<\/a><br \/>\n<a href=\"https:\/\/www.cnblogs.com\/linxmouse\/p\/13409444.html\">https:\/\/www.cnblogs.com\/linxmouse\/p\/13409444.html<\/a><\/p>\n<p>\u6ce8\u610f\u6293\u5305\u8fc7\u6ee4\u5668\u4e0e\u663e\u793a\u8fc7\u6ee4\u5668\u7684\u8bed\u6cd5\u662f\u6709\u533a\u522b\u7684\uff0c\u5982\u6293\u5305\u8fc7\u6ee4\u5668\u4e0d\u80fd\u76f4\u63a5\u8fc7\u6ee4rtsp\u534f\u8bae\uff0c\u5f02\u6216\u8bed\u6cd5\u3002<\/p>\n<p><a href=\"https:\/\/blog.csdn.net\/TskyFree\/article\/details\/41219899\">https:\/\/blog.csdn.net\/TskyFree\/article\/details\/41219899<\/a> (\u5185\u5bb9\u8fc7\u6ee4)<\/p>\n<h5><span class=\"ez-toc-section\" id=\"1%E5%AD%97%E8%8A%82%E5%81%8F%E7%A7%BB%E8%BF%87%E6%BB%A4%E5%99%A8%EF%BC%88%EF%BC%89\"><\/span>1.\u5b57\u8282\u504f\u79fb\u8fc7\u6ee4\u5668\uff08*\uff09<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p><a href=\"https:\/\/blog.51cto.com\/u_15069482\/4715923\">https:\/\/blog.51cto.com\/u_15069482\/4715923<\/a><br \/>\n<a href=\"https:\/\/www.cnblogs.com\/bigben0123\/p\/5019078.html\">https:\/\/www.cnblogs.com\/bigben0123\/p\/5019078.html<\/a><br \/>\n\u9009\u62e9\u4e00\u4e2a\u5e8f\u5217\u7684\u5b50\u5e8f\u5217<\/p>\n<ul>\n<li>\u4e3e\u4f8b\uff1a\u6839\u636etcp\u7684data\u7684\u524d\u4e24\u4e2a\u5b57\u8282<\/li>\n<\/ul>\n<p><img src=\"http:\/\/xinyiworld.top\/wordpress_it\/wp-content\/uploads\/2023\/03\/wireshark.png\" alt=\"\" \/><\/p>\n<p><img src=\"http:\/\/xinyiworld.top\/wordpress_it\/wp-content\/uploads\/2023\/03\/wiresah2.png\" alt=\"\" \/><br \/>\n\u53ef\u4ee5\u770b\u5230tcp\u534f\u8bae\u7684\u603b\u957f\u5ea6\u662f58\u4e2a\u5b57\u8282\uff0c\u9664\u53bbdata\u536032\u4e2a\u5b57\u8282\u3002\u6240\u4ee5data\u7684\u504f\u79fb\u8d77\u59cb\u5730\u5740\u662f32(\u4ece0\u5f00\u59cb\u7b97\u8d77)\uff0c\u53d6\u4e24\u4e2a\u5b57\u8282\u5c31\u662f<code>tcp[32:2]<\/code><\/p>\n<ul>\n<li>\u4e3e\u4f8b\uff1a\u6839\u636etcp\u7684data\u7684\u524d4\u4e2a\u5b57\u8282(\u5efa\u8bae)<br \/>\n\u8fc7\u6ee4\u51faTCP\u8f7d\u8377\u4e2d\u7684\u524d\u56db\u4e2a\u5b57\u8282\u4e3a0x47455420<\/li>\n<\/ul>\n<p><code>tcp.payload[0:4]==0x47455420<\/code>,\u6ce8\u610f\u7d22\u5f15\u4ece0\u5f00\u59cb\uff0c\u4e0d\u5305\u62ec\u7d22\u5f154\uff0c\u548c\u7f16\u7a0b\u8bed\u8a00\u7684\u6570\u7ec4\u5f88\u50cf\u3002<\/p>\n<p><strong>!!!<\/strong>\u4e0d\u540c\u7684\u7248\u672c\u53ef\u80fd\u4f1a\u6709\u5dee\u5f02\uff0c\u5e76\u4e0d\u652f\u6301\u4e0a\u9762\u7684\u65b9\u5f0f\u3002<a href=\"https:\/\/blog.csdn.net\/jasonhongcn\/article\/details\/85199768\">https:\/\/blog.csdn.net\/jasonhongcn\/article\/details\/85199768<\/a><br \/>\n\u4e24\u4e2a\u53ca\u4ee5\u4e0a\u5b57\u8282\u6570\u7684\u5341\u516d\u8fdb\u5236\u8981\u7528\u5192\u53f7\u5206\u9694\u5f00\u6765\uff0c\u5982\uff1a<br \/>\n<img src=\"http:\/\/xinyiworld.top\/wordpress_it\/wp-content\/uploads\/2023\/03\/775C06B3-76CB-4813-9576-9A4DE14C7009.png\" alt=\"\" \/><\/p>\n<h6><span class=\"ez-toc-section\" id=\"%EF%BC%81%EF%BC%81%E6%80%8E%E4%B9%88%E5%87%86%E7%A1%AE%E6%89%BE%E5%88%B0%E8%A6%81%E5%81%8F%E7%A7%BB%E7%9A%84%E8%A1%A8%E8%BE%BE%E5%BC%8F%EF%BC%9F%EF%BC%81%EF%BC%81\"><\/span>\uff01\uff01\u600e\u4e48\u51c6\u786e\u627e\u5230\u8981\u504f\u79fb\u7684\u8868\u8fbe\u5f0f\uff1f\uff01\uff01<span class=\"ez-toc-section-end\"><\/span><\/h6>\n<p><img src=\"http:\/\/xinyiworld.top\/wordpress_it\/wp-content\/uploads\/2023\/03\/\u5c4f\u5e55\u622a\u56fe-2024-11-16-053457.png\" alt=\"\" \/><\/p>\n<h5><span class=\"ez-toc-section\" id=\"2%E8%BF%87%E6%BB%A4%E6%8A%80%E5%B7%A7\"><\/span>2.\u8fc7\u6ee4\u6280\u5de7<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<ul>\n<li>\n<p>ip\u8fc7\u6ee4<br \/>\n\u5b8c\u6574\u8fc7\u6ee4\u4e24\u4e2aip\u4e4b\u95f4\u7684\u901a\u8baf<br \/>\n<code>ip.src==10.0.1.98 &amp;&amp; ip.dst== 10.0.2.61 || (ip.src==10.0.2.61 &amp;&amp; ip.dst== 10.0.1.98)<\/code><\/p>\n<\/li>\n<li>\n<p>\u53ea\u8fc7\u6ee4tcp\u4e2d\u5e26\u6709\u6570\u636e\u7684\u901a\u8baf\u5305<br \/>\ntcp.len&gt;0 \uff08\u6ce8\u610f\u8fd9\u91cc\u7684len\u662f\u6307\u8f7d\u8377\u7684len\uff09<br \/>\n<img src=\"http:\/\/xinyiworld.top\/wordpress_it\/wp-content\/uploads\/2023\/03\/\u641c\u72d7\u622a\u56fe20231216164309.png\" alt=\"\" \/><br \/>\n\u53ef\u4ee5\u6839\u636etcp.len!=X\u8fc7\u6ee4\u7279\u6b8a\u7684\u5305\uff0c\u4f46\u662f\u8981\u6ce8\u610f\u901a\u8fc7tcp.len==X\u67e5\u770b\u6709\u6ca1\u6709\u8fc7\u6ee4\u6389\u4e4b\u5916\u7684\u5305\u3002<\/p>\n<\/li>\n<li>\n<p>\u4e00\u5e27\u7684\u6570\u636e\u957f\u5ea6<br \/>\nframe.len<\/p>\n<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"%E4%B8%89%E3%80%81%E5%AE%89%E8%A3%85%E6%8F%92%E4%BB%B6%E5%AF%BC%E5%87%BAH264%E6%B5%81\"><\/span>\u4e09\u3001\u5b89\u88c5\u63d2\u4ef6\u5bfc\u51faH264\u6d41<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p><a href=\"https:\/\/blog.csdn.net\/water1209\/article\/details\/127927245\">https:\/\/blog.csdn.net\/water1209\/article\/details\/127927245<\/a><\/p>\n<h4><span class=\"ez-toc-section\" id=\"%E5%9B%9B%E3%80%81%E5%B8%B8%E8%A7%81%E5%8D%8F%E8%AE%AE%E6%8A%93%E5%8C%85\"><\/span>\u56db\u3001\u5e38\u89c1\u534f\u8bae\u6293\u5305<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<h5><span class=\"ez-toc-section\" id=\"1DNS%E6%8A%93%E5%8C%85\"><\/span>1.DNS\u6293\u5305<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p><a href=\"https:\/\/cloud.tencent.com\/developer\/article\/1882913\">https:\/\/cloud.tencent.com\/developer\/article\/1882913<\/a><br \/>\n<a href=\"https:\/\/blog.csdn.net\/m0_73576645\/article\/details\/134890351\">https:\/\/blog.csdn.net\/m0_73576645\/article\/details\/134890351<\/a><\/p>\n<h4><span class=\"ez-toc-section\" id=\"%E4%BA%94%E3%80%81%E4%B8%93%E9%A2%98%E5%88%86%E6%9E%90\"><\/span>\u4e94\u3001\u4e13\u9898\u5206\u6790<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<h5><span class=\"ez-toc-section\" id=\"1seqack%E5%9C%A8TCP%E9%80%9A%E4%BF%A1%E4%B8%8D%E5%90%8C%E9%98%B6%E6%AE%B5%E7%9A%84%E6%95%B0%E5%80%BC%E5%85%B3%E7%B3%BB\"><\/span>1.seq\/ack\u5728TCP\u901a\u4fe1\u4e0d\u540c\u9636\u6bb5\u7684\u6570\u503c\u5173\u7cfb<span class=\"ez-toc-section-end\"><\/span><\/h5>\n<p><a href=\"https:\/\/zhuanlan.zhihu.com\/p\/681353322\">https:\/\/zhuanlan.zhihu.com\/p\/681353322<\/a><\/p>\n<button class=\"simplefavorite-button\" data-postid=\"8675\" data-siteid=\"1\" data-groupid=\"1\" data-favoritecount=\"0\" style=\"\">\u6536\u85cf <i class=\"sf-icon-star-empty\"><\/i><\/button>","protected":false},"excerpt":{"rendered":"<p>https:\/\/www.cnblogs.com\/yuanyuzhou\/p\/16308963.html [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[673],"tags":[],"_links":{"self":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/8675"}],"collection":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8675"}],"version-history":[{"count":25,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/8675\/revisions"}],"predecessor-version":[{"id":15158,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=\/wp\/v2\/posts\/8675\/revisions\/15158"}],"wp:attachment":[{"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8675"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/xinyiworld.top\/wordpress_it\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}