抓包 及 分析包内容
1. tcpdump -s 0 -x -nn -q -tttt -i [ethx] dst port [port] -w [file name]
eg: tcpdump -s 0 -x -nn -q -tttt -i eth1 dst port 4002 -w raw3.dump
2. [file name] | strings
eg:raw3.dump | strings
找来源IP
tcpdump -s 0 -x -vnn -q -tttt -i [ethx] dst port [port] > [file name]
eg: tcpdump -s 0 -x -vnn -q -tttt -i eth1 dst port 11476 > 1.txt