tcpdump实时查看post包和get包

get

tcpdump -s 0 -A 'tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420)' -i eth0

post

tcpdump -s 0 -A 'tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354)' -i eth0

参考文章

https://www.cnblogs.com/ifindu-san/p/12013196.html
https://www.jianshu.com/p/3cc822a082b4