tcpdump ftp工具 使用，

#! /bin/bash


trap ""  HUP


loop=true;
index=0;
name="654321";
rfindex=0;
rrrindex=0;


while [[ ${loop} == "true" ]]
do




#// kill the last tcpdum cmd first
pid=$(ps -ef | grep "tcpdump" | grep "654321" | awk '{print $2}')


if [[ ${pid} != "" ]]
then


kill -2 ${pid} ;


fi


tcpdump -i eth4 -s  0  host 10.16.2.31 or host 10.16.1.188  or host 10.16.1.96 -w ${name}${index}.cap &


((index++));


if (( index >= 3 ))
then


echo "---------------${index}----------\n"
#busybox tftp -p -r ${name}${rfindex}.cap 10.16.6.67 &
/usr/local/ncftp/bin/ncftpput -uadmin -p123456 -C 10.16.6.67 /root/${name}${rfindex}.cap ${name}${rfindex}.cap &
((rfindex++))
sleep 120 ;


else


sleep 120 ;


fi


if (( index-rrrindex >15 ))
then


rm -f ${name}${rrrindex}.cap;
(( rrrindex++ ))


fi


done