linux上 协议 抓包

网卡信息：# ifconfig

eth1 Link encap:Ethernet HWaddr 00:0C:29:22:D9:BC
inet addr:192.168.1xx.xxx Bcast:192.168.103.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe22:d9bc/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:143238715 errors:0 dropped:31 overruns:0 frame:0
TX packets:161956323 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:115399917729 (107.4 GiB) TX bytes:80610840471 (75.0 GiB)

#:tcpdump  -i  eth1 -w  xmpp.pcap  //eth1是根据ipconfig中打印的端口来定的

其他linux常用命令
查看端口是否占用 lsof -i:8080
杀死pid的进程 kill -9 xxx
搜索xxx进程是否在运行 ps -ef | grep xxx
netstat -tunlp | grep mongod
netstat -anp |grep xxx
搜索是否安装某个软件 whereis xxx

https://blog.csdn.net/baidu_35692628/article/details/76038713