wireshark抓包验证
wireshark抓包工具
wireshark安装
下载地址
https://www.wireshark.org/download.html
wireshark使用
使用流程
过滤器使用方法
比较运算符
eq, == Equal
ne, != Not Equal
gt, > Greater Than
lt, < Less Than
ge, >= Greater than or Equal to
le, <= Less than or Equal to
协议字段
#以太网过滤
eth.dst eq ff:ff:ff:ff:ff:ff
#IP地址过滤
ip.dst eq 192.168.1.10
ip.src == 192.168.1.1
#TCP过滤
tcp.port == 6666
# UDP过滤
udp.port == 6666
# http过滤
http.request.method == "POST"
位域操作
# TCP SYN
tcp.flags & 0x02
逻辑表达式
and, && Logical AND
or, || Logical OR
not, ! Logical NOT
# tcp.port == 80 and ip.src == 192.168.2.1