ssh 登录 last lastb who users w lastlog ac -d ac -p lsof lsof -i:443 ngrep ngrep port 80 ngrep -q '^GET .* HTTP/1.[01]' ngrep -q -d eth0 -W byline port 80 or port 8089 or port 11211 or port 443 tcpdump sudo /usr/sbin/tcpdump -s 0 -X 'tcp dst port 80' nc nc -vuz 公网IP 11211 netstat netstat -an|more