Linux 抓包tcpdump

 

 tcpdump -n -i eth2  src 192.168.3.100

 

//这样抓包 wireshark 能分析
tcpdump -i eth0 -w dump.pcap -v

tcpdump -i eth0 -nn -A port 10021

tcpdump src 10.20.80.1 and port 10021

 

ethtool  eth0  查看那个网卡是否连接

 

 

抓包分析之 “TCP Previous segment not captured”
 

https://my.oschina.net/moooofly/blog/804568?utm_medium=referral

关于Tcpdump抓包总结

https://www.cnblogs.com/chenpingzhao/p/9108570.html

 

tcpdump抓包文件分段保存-指定时间或者指定大小

https://blog.csdn.net/x356982611/article/details/82462220

 

 

tcpdump抓包并保存成cap文件

https://blog.csdn.net/zqt520/article/details/13630963
https://www.cnblogs.com/bass6/p/5819928.html

 

tcpdump非常实用的抓包实例

https://blog.csdn.net/nanyun2010/article/details/23445223