【CentOS 7笔记41】，监控网络状态1#

最新推荐文章于 2024-03-17 20:30:00 发布
最新推荐文章于 2024-03-17 20:30:00 发布
阅读量210 收藏
点赞数
文章标签： 网络 python 运维
原文链接：https://my.oschina.net/u/3892756/blog/3056538
版权

2019独角兽企业重金招聘Python工程师标准>>> hot3.png

shallow丿ove

查看网络状态netstat

  • netstat -lnp #查看监听端口

  • netstat -an #查看系统的网络连接状况

  • netstat -lntp #只看出tcp的，不包含socket

  • ss -an和netstat异曲同工

  • netstat -an | awk '/^tcp/ {++sta[$NF]} END {for(key in sta) print key,"\t",sta[key]}'

[root@localhost ~]# netstat -lnp
	Active Internet connections (only servers)
	Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
	tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2359/master         
	tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:56877           0.0.0.0:*               LISTEN      2452/rpc.statd      
	tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1/systemd           
	tcp        0      0 0.0.0.0:20048           0.0.0.0:*               LISTEN      2454/rpc.mountd     
	tcp        0      0 0.0.0.0:49009           0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1327/sshd           
	tcp6       0      0 ::1:25                  :::*                    LISTEN      2359/master         
	tcp6       0      0 :::2049                 :::*                    LISTEN      -                   
	tcp6       0      0 :::59304                :::*                    LISTEN      -                   
	tcp6       0      0 :::111                  :::*                    LISTEN      1/systemd           
	tcp6       0      0 :::38128                :::*                    LISTEN      2452/rpc.statd      
	tcp6       0      0 :::20048                :::*                    LISTEN      2454/rpc.mountd     
	tcp6       0      0 :::22                   :::*                    LISTEN      1327/sshd           
	udp        0      0 0.0.0.0:2049            0.0.0.0:*                           -                   
	udp        0      0 0.0.0.0:39964           0.0.0.0:*                           702/avahi-daemon: r 
	udp        0      0 0.0.0.0:111             0.0.0.0:*                           2439/rpcbind        
	udp        0      0 0.0.0.0:5353            0.0.0.0:*                           702/avahi-daemon: r 
	udp        0      0 0.0.0.0:44553           0.0.0.0:*                           2452/rpc.statd      
	udp        0      0 0.0.0.0:20048           0.0.0.0:*                           2454/rpc.mountd     
	udp        0      0 0.0.0.0:47979           0.0.0.0:*                           -                   
	udp        0      0 0.0.0.0:918             0.0.0.0:*                           2439/rpcbind        
	udp        0      0 127.0.0.1:932           0.0.0.0:*                           2452/rpc.statd      
	udp6       0      0 :::2049                 :::*                                -                   
	udp6       0      0 :::111                  :::*                                2439/rpcbind        
	udp6       0      0 :::20048                :::*                                2454/rpc.mountd     
	udp6       0      0 :::53952                :::*                                -                   
	udp6       0      0 :::45920                :::*                                2452/rpc.statd      
	udp6       0      0 :::918                  :::*                                2439/rpcbind        
	raw6       0      0 :::58                   :::*                    7           808/NetworkManager  
	Active UNIX domain sockets (only servers)
	Proto RefCnt Flags       Type       State         I-Node   PID/Program name     Path
	unix  2      [ ACC ]     STREAM     LISTENING     15378    1/systemd            /var/run/avahi-daemon/socket
	unix  2      [ ACC ]     STREAM     LISTENING     7962     1/systemd            /run/systemd/journal/stdout
	unix  2      [ ACC ]     STREAM     LISTENING     15388    1/systemd            /var/run/rpcbind.sock
	unix  2      [ ACC ]     STREAM     LISTENING     21751    2359/master          public/cleanup
	unix  2      [ ACC ]     STREAM     LISTENING     21754    2359/master          public/qmgr
	unix  2      [ ACC ]     STREAM     LISTENING     21776    2359/master          public/flush
	unix  2      [ ACC ]     STREAM     LISTENING     21791    2359/master          public/showq
	unix  2      [ ACC ]     STREAM     LISTENING     15398    1/systemd            /var/run/dbus/system_bus_socket
	unix  2      [ ACC ]     STREAM     LISTENING     12844    1/systemd            /run/systemd/private
	unix  2      [ ACC ]     STREAM     LISTENING     21758    2359/master          private/tlsmgr
	unix  2      [ ACC ]     STREAM     LISTENING     21761    2359/master          private/rewrite
	unix  2      [ ACC ]     STREAM     LISTENING     21764    2359/master          private/bounce
	unix  2      [ ACC ]     STREAM     LISTENING     21767    2359/master          private/defer
	unix  2      [ ACC ]     STREAM     LISTENING     21770    2359/master          private/trace
	unix  2      [ ACC ]     STREAM     LISTENING     21773    2359/master          private/verify
	unix  2      [ ACC ]     STREAM     LISTENING     21779    2359/master          private/proxymap
	unix  2      [ ACC ]     STREAM     LISTENING     21782    2359/master          private/proxywrite
	unix  2      [ ACC ]     STREAM     LISTENING     21785    2359/master          private/smtp
	unix  2      [ ACC ]     STREAM     LISTENING     21788    2359/master          private/relay
	unix  2      [ ACC ]     STREAM     LISTENING     21794    2359/master          private/error
	unix  2      [ ACC ]     STREAM     LISTENING     21797    2359/master          private/retry
	unix  2      [ ACC ]     STREAM     LISTENING     21800    2359/master          private/discard
	unix  2      [ ACC ]     STREAM     LISTENING     21803    2359/master          private/local
	unix  2      [ ACC ]     STREAM     LISTENING     21806    2359/master          private/virtual
	unix  2      [ ACC ]     STREAM     LISTENING     21809    2359/master          private/lmtp
	unix  2      [ ACC ]     STREAM     LISTENING     21812    2359/master          private/anvil
	unix  2      [ ACC ]     STREAM     LISTENING     21815    2359/master          private/scache
	unix  2      [ ACC ]     STREAM     LISTENING     16216    808/NetworkManager   /var/run/NetworkManager/private
	unix  2      [ ACC ]     STREAM     LISTENING     17563    808/NetworkManager   /var/run/NetworkManager/private-dhcp
	unix  2      [ ACC ]     STREAM     LISTENING     21747    2359/master          public/pickup
	unix  2      [ ACC ]     STREAM     LISTENING     15573    719/gssproxy         /var/lib/gssproxy/default.sock
	unix  2      [ ACC ]     STREAM     LISTENING     15574    719/gssproxy         /run/gssproxy.sock
	unix  2      [ ACC ]     STREAM     LISTENING     13018    1/systemd            /run/lvm/lvmpolld.socket
	unix  2      [ ACC ]     SEQPACKET  LISTENING     11512    1/systemd            /run/udev/control
	unix  2      [ ACC ]     STREAM     LISTENING     13052    1/systemd            /run/lvm/lvmetad.socket

[root@localhost ~]# netstat -an
	Active Internet connections (servers and established)
	Proto Recv-Q Send-Q Local Address           Foreign Address         State      
	tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:56877           0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:20048           0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:49009           0.0.0.0:*               LISTEN     
	tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     
	tcp        0      0 192.168.9.134:22        192.168.9.1:7122        ESTABLISHED
	tcp        0     52 192.168.9.134:22        192.168.9.1:2713        ESTABLISHED
	tcp6       0      0 ::1:25                  :::*                    LISTEN     
	tcp6       0      0 :::2049                 :::*                    LISTEN     
	tcp6       0      0 :::59304                :::*                    LISTEN     
	tcp6       0      0 :::111                  :::*                    LISTEN     
	tcp6       0      0 :::38128                :::*                    LISTEN     
	tcp6       0      0 :::20048                :::*                    LISTEN     
	tcp6       0      0 :::22                   :::*                    LISTEN     
	udp        0      0 0.0.0.0:2049            0.0.0.0:*                          
	udp        0      0 0.0.0.0:39964           0.0.0.0:*                          
	udp        0      0 0.0.0.0:111             0.0.0.0:*                          
	udp        0      0 0.0.0.0:5353            0.0.0.0:*                          
	udp        0      0 0.0.0.0:44553           0.0.0.0:*                          
	udp        0      0 0.0.0.0:20048           0.0.0.0:*                          
	udp        0      0 0.0.0.0:47979           0.0.0.0:*                          
	udp        0      0 0.0.0.0:918             0.0.0.0:*                          
	udp        0      0 127.0.0.1:932           0.0.0.0:*                          
	udp6       0      0 :::2049                 :::*                               
	udp6       0      0 :::111                  :::*                               
	udp6       0      0 :::20048                :::*                               
	udp6       0      0 :::53952                :::*                               
	udp6       0      0 :::45920                :::*                               
	udp6       0      0 :::918                  :::*                               
	raw6       0      0 :::58                   :::*                    7          
	Active UNIX domain sockets (servers and established)
	Proto RefCnt Flags       Type       State         I-Node   Path
	unix  2      [ ]         DGRAM                    7948     /run/systemd/notify
	unix  2      [ ]         DGRAM                    7950     /run/systemd/cgroups-agent
	unix  2      [ ACC ]     STREAM     LISTENING     15378    /var/run/avahi-daemon/socket
	unix  2      [ ACC ]     STREAM     LISTENING     7962     /run/systemd/journal/stdout
	unix  2      [ ACC ]     STREAM     LISTENING     15388    /var/run/rpcbind.sock
	unix  5      [ ]         DGRAM                    7965     /run/systemd/journal/socket
	unix  16     [ ]         DGRAM                    7967     /dev/log
	unix  2      [ ACC ]     STREAM     LISTENING     21751    public/cleanup
	unix  2      [ ACC ]     STREAM     LISTENING     21754    public/qmgr
	unix  2      [ ACC ]     STREAM     LISTENING     21776    public/flush
	unix  2      [ ACC ]     STREAM     LISTENING     21791    public/showq
	unix  2      [ ACC ]     STREAM     LISTENING     15398    /var/run/dbus/system_bus_socket
	unix  2      [ ACC ]     STREAM     LISTENING     12844    /run/systemd/private
	unix  2      [ ACC ]     STREAM     LISTENING     21758    private/tlsmgr
	unix  2      [ ACC ]     STREAM     LISTENING     21761    private/rewrite
	unix  2      [ ACC ]     STREAM     LISTENING     21764    private/bounce
	unix  2      [ ACC ]     STREAM     LISTENING     21767    private/defer
	unix  2      [ ACC ]     STREAM     LISTENING     21770    private/trace
	unix  2      [ ACC ]     STREAM     LISTENING     21773    private/verify
	unix  2      [ ACC ]     STREAM     LISTENING     21779    private/proxymap
	unix  2      [ ACC ]     STREAM     LISTENING     21782    private/proxywrite
	unix  2      [ ACC ]     STREAM     LISTENING     21785    private/smtp
	unix  2      [ ACC ]     STREAM     LISTENING     21788    private/relay
	unix  2      [ ACC ]     STREAM     LISTENING     21794    private/error
	unix  2      [ ACC ]     STREAM     LISTENING     21797    private/retry
	unix  2      [ ACC ]     STREAM     LISTENING     21800    private/discard
	unix  2      [ ACC ]     STREAM     LISTENING     21803    private/local
	unix  2      [ ACC ]     STREAM     LISTENING     21806    private/virtual
	unix  2      [ ACC ]     STREAM     LISTENING     21809    private/lmtp
	unix  2      [ ACC ]     STREAM     LISTENING     21812    private/anvil
	unix  2      [ ACC ]     STREAM     LISTENING     21815    private/scache
	unix  2      [ ACC ]     STREAM     LISTENING     16216    /var/run/NetworkManager/private
	unix  2      [ ACC ]     STREAM     LISTENING     17563    /var/run/NetworkManager/private-dhcp
	unix  2      [ ACC ]     STREAM     LISTENING     21747    public/pickup
	unix  2      [ ACC ]     STREAM     LISTENING     15573    /var/lib/gssproxy/default.sock
	unix  2      [ ]         DGRAM                    13011    /run/systemd/shutdownd
	unix  2      [ ACC ]     STREAM     LISTENING     15574    /run/gssproxy.sock
	unix  2      [ ACC ]     STREAM     LISTENING     13018    /run/lvm/lvmpolld.socket
	unix  2      [ ACC ]     SEQPACKET  LISTENING     11512    /run/udev/control
	unix  2      [ ACC ]     STREAM     LISTENING     13052    /run/lvm/lvmetad.socket
	unix  3      [ ]         STREAM     CONNECTED     21795    
	unix  3      [ ]         STREAM     CONNECTED     21749    
	unix  2      [ ]         DGRAM                    21375    
	unix  3      [ ]         STREAM     CONNECTED     21814    
	unix  3      [ ]         STREAM     CONNECTED     15578    
	unix  3      [ ]         STREAM     CONNECTED     21768    
	unix  3      [ ]         STREAM     CONNECTED     16959    
	unix  3      [ ]         STREAM     CONNECTED     16483    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     21799    
	unix  3      [ ]         STREAM     CONNECTED     21789    
	unix  3      [ ]         STREAM     CONNECTED     21772    
	unix  3      [ ]         STREAM     CONNECTED     21752    
	unix  3      [ ]         STREAM     CONNECTED     16221    
	unix  3      [ ]         STREAM     CONNECTED     15565    
	unix  2      [ ]         DGRAM                    17547    
	unix  3      [ ]         STREAM     CONNECTED     16008    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     13434    
	unix  3      [ ]         STREAM     CONNECTED     16346    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     15561    
	unix  3      [ ]         STREAM     CONNECTED     21777    
	unix  3      [ ]         STREAM     CONNECTED     21760    
	unix  3      [ ]         STREAM     CONNECTED     16781    
	unix  3      [ ]         STREAM     CONNECTED     21807    
	unix  3      [ ]         STREAM     CONNECTED     21748    
	unix  3      [ ]         STREAM     CONNECTED     17441    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     15523    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     21781    
	unix  3      [ ]         STREAM     CONNECTED     16007    
	unix  3      [ ]         STREAM     CONNECTED     16752    
	unix  3      [ ]         STREAM     CONNECTED     22797    
	unix  3      [ ]         STREAM     CONNECTED     12003    
	unix  3      [ ]         STREAM     CONNECTED     21811    
	unix  3      [ ]         STREAM     CONNECTED     15586    
	unix  3      [ ]         STREAM     CONNECTED     21769    
	unix  3      [ ]         STREAM     CONNECTED     21756    
	unix  3      [ ]         STREAM     CONNECTED     21792    
	unix  3      [ ]         STREAM     CONNECTED     16218    
	unix  3      [ ]         STREAM     CONNECTED     21798    
	unix  3      [ ]         STREAM     CONNECTED     15560    
	unix  2      [ ]         DGRAM                    38716    
	unix  3      [ ]         STREAM     CONNECTED     16532    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     16482    
	unix  3      [ ]         STREAM     CONNECTED     15594    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     21780    
	unix  2      [ ]         DGRAM                    21832    
	unix  3      [ ]         STREAM     CONNECTED     21802    
	unix  3      [ ]         STREAM     CONNECTED     18325    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     15521    
	unix  3      [ ]         STREAM     CONNECTED     21755    
	unix  3      [ ]         STREAM     CONNECTED     16780    
	unix  2      [ ]         DGRAM                    16209    
	unix  3      [ ]         DGRAM                    13473    
	unix  3      [ ]         STREAM     CONNECTED     21784    
	unix  3      [ ]         STREAM     CONNECTED     21810    
	unix  3      [ ]         STREAM     CONNECTED     21765    
	unix  3      [ ]         STREAM     CONNECTED     21745    
	unix  3      [ ]         STREAM     CONNECTED     13446    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     17446    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     11961    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     21787    
	unix  3      [ ]         STREAM     CONNECTED     21793    
	unix  3      [ ]         STREAM     CONNECTED     16531    
	unix  3      [ ]         STREAM     CONNECTED     21816    
	unix  3      [ ]         STREAM     CONNECTED     21774    
	unix  3      [ ]         STREAM     CONNECTED     21753    
	unix  2      [ ]         DGRAM                    14275    
	unix  3      [ ]         STREAM     CONNECTED     17150    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     21801    
	unix  2      [ ]         DGRAM                    30598    
	unix  3      [ ]         STREAM     CONNECTED     16345    
	unix  3      [ ]         STREAM     CONNECTED     16581    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     22796    
	unix  3      [ ]         STREAM     CONNECTED     21762    
	unix  2      [ ]         DGRAM                    16778    
	unix  3      [ ]         STREAM     CONNECTED     16630    /run/systemd/journal/stdout
	unix  3      [ ]         STREAM     CONNECTED     21805    
	unix  2      [ ]         DGRAM                    43765    
	unix  3      [ ]         STREAM     CONNECTED     21783    
	unix  3      [ ]         STREAM     CONNECTED     21766    
	unix  3      [ ]         STREAM     CONNECTED     15588    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     16729    
	unix  3      [ ]         STREAM     CONNECTED     21746    
	unix  3      [ ]         STREAM     CONNECTED     19003    
	unix  2      [ ]         DGRAM                    15726    
	unix  2      [ ]         DGRAM                    43637    
	unix  3      [ ]         STREAM     CONNECTED     21771    
	unix  3      [ ]         STREAM     CONNECTED     16960    /run/systemd/journal/stdout
	unix  2      [ ]         DGRAM                    15550    
	unix  3      [ ]         STREAM     CONNECTED     21813    
	unix  3      [ ]         STREAM     CONNECTED     21796    
	unix  3      [ ]         STREAM     CONNECTED     21786    
	unix  3      [ ]         STREAM     CONNECTED     21775    
	unix  2      [ ]         DGRAM                    21720    
	unix  3      [ ]         STREAM     CONNECTED     15587    
	unix  2      [ ]         STREAM     CONNECTED     22848    
	unix  3      [ ]         STREAM     CONNECTED     21817    
	unix  3      [ ]         STREAM     CONNECTED     21790    
	unix  3      [ ]         STREAM     CONNECTED     21763    
	unix  2      [ ]         DGRAM                    17447    
	unix  3      [ ]         STREAM     CONNECTED     15591    /var/run/dbus/system_bus_socket
	unix  3      [ ]         STREAM     CONNECTED     21759    
	unix  3      [ ]         STREAM     CONNECTED     15910    
	unix  3      [ ]         STREAM     CONNECTED     15510    
	unix  2      [ ]         DGRAM                    22754    
	unix  3      [ ]         STREAM     CONNECTED     21804    
	unix  3      [ ]         STREAM     CONNECTED     21778    
	unix  2      [ ]         DGRAM                    16741    
	unix  3      [ ]         STREAM     CONNECTED     15580    /run/gssproxy.sock
	unix  3      [ ]         STREAM     CONNECTED     16629    
	unix  2      [ ]         DGRAM                    12015    
	unix  3      [ ]         STREAM     CONNECTED     21808    
	unix  3      [ ]         DGRAM                    13472

tcp

[root@localhost ~]# netstat -ltnp
	Active Internet connections (only servers)
	Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
	tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2359/master         
	tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:56877           0.0.0.0:*               LISTEN      2452/rpc.statd      
	tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1/systemd           
	tcp        0      0 0.0.0.0:20048           0.0.0.0:*               LISTEN      2454/rpc.mountd     
	tcp        0      0 0.0.0.0:49009           0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1327/sshd           
	tcp6       0      0 ::1:25                  :::*                    LISTEN      2359/master         
	tcp6       0      0 :::2049                 :::*                    LISTEN      -                   
	tcp6       0      0 :::59304                :::*                    LISTEN      -                   
	tcp6       0      0 :::111                  :::*                    LISTEN      1/systemd           
	tcp6       0      0 :::38128                :::*                    LISTEN      2452/rpc.statd      
	tcp6       0      0 :::20048                :::*                    LISTEN      2454/rpc.mountd     
	tcp6       0      0 :::22                   :::*                    LISTEN      1327/sshd

tcp和udp

[root@localhost ~]# netstat -ltunp
	Active Internet connections (only servers)
	Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
	tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2359/master         
	tcp        0      0 0.0.0.0:2049            0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:56877           0.0.0.0:*               LISTEN      2452/rpc.statd      
	tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1/systemd           
	tcp        0      0 0.0.0.0:20048           0.0.0.0:*               LISTEN      2454/rpc.mountd     
	tcp        0      0 0.0.0.0:49009           0.0.0.0:*               LISTEN      -                   
	tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1327/sshd           
	tcp6       0      0 ::1:25                  :::*                    LISTEN      2359/master         
	tcp6       0      0 :::2049                 :::*                    LISTEN      -                   
	tcp6       0      0 :::59304                :::*                    LISTEN      -                   
	tcp6       0      0 :::111                  :::*                    LISTEN      1/systemd           
	tcp6       0      0 :::38128                :::*                    LISTEN      2452/rpc.statd      
	tcp6       0      0 :::20048                :::*                    LISTEN      2454/rpc.mountd     
	tcp6       0      0 :::22                   :::*                    LISTEN      1327/sshd           
	udp        0      0 0.0.0.0:2049            0.0.0.0:*                           -                   
	udp        0      0 0.0.0.0:39964           0.0.0.0:*                           702/avahi-daemon: r 
	udp        0      0 0.0.0.0:111             0.0.0.0:*                           2439/rpcbind        
	udp        0      0 0.0.0.0:5353            0.0.0.0:*                           702/avahi-daemon: r 
	udp        0      0 0.0.0.0:44553           0.0.0.0:*                           2452/rpc.statd      
	udp        0      0 0.0.0.0:20048           0.0.0.0:*                           2454/rpc.mountd     
	udp        0      0 0.0.0.0:47979           0.0.0.0:*                           -                   
	udp        0      0 0.0.0.0:918             0.0.0.0:*                           2439/rpcbind        
	udp        0      0 127.0.0.1:932           0.0.0.0:*                           2452/rpc.statd      
	udp6       0      0 :::2049                 :::*                                -                   
	udp6       0      0 :::111                  :::*                                2439/rpcbind        
	udp6       0      0 :::20048                :::*                                2454/rpc.mountd     
	udp6       0      0 :::53952                :::*                                -                   
	udp6       0      0 :::45920                :::*                                2452/rpc.statd      
	udp6       0      0 :::918                  :::*                                2439/rpcbind 

[root@localhost ~]# netstat -an | awk '/^tcp/ {++sta[$NF]} END {for(key in sta) print key,"\t",sta[key]}'
LISTEN 	 14
ESTABLISHED 	 2

[root@localhost ~]# ss -an
	Netid State      Recv-Q Send-Q               Local Address:Port                 Peer Address:Port 
	nl    UNCONN     0      0                                0:702                              *     
	nl    UNCONN     0      0                                0:0                                *     
	nl    UNCONN     0      0                                0:808                              *     
	nl    UNCONN     0      0                                0:4195112                            *     
	nl    UNCONN     4352   0                                4:4829                             *     
	nl    UNCONN     768    0                                4:0                                *     
	nl    UNCONN     0      0                                6:0                                *     
	nl    UNCONN     0      0                                7:704                              *     
	nl    UNCONN     0      0                                7:0                                *     
	nl    UNCONN     0      0                                7:1                                *     
	nl    UNCONN     0      0                                9:650                              *     
	nl    UNCONN     0      0                                9:1                                *     
	nl    UNCONN     0      0                                9:0                                *     
	nl    UNCONN     0      0                               10:0                                *     
	nl    UNCONN     0      0                               11:0                                *     
	nl    UNCONN     0      0                               15:1657                             *     
	nl    UNCONN     0      0                               15:1                                *     
	nl    UNCONN     0      0                               15:699                              *     
	nl    UNCONN     0      0                               15:0                                *     
	nl    UNCONN     0      0                               15:537                              *     
	nl    UNCONN     0      0                               15:-4125                            *     
	nl    UNCONN     0      0                               15:-4123                            *     
	nl    UNCONN     0      0                               15:808                              *     
	nl    UNCONN     0      0                               15:-4122                            *     
	nl    UNCONN     0      0                               15:1658                             *     
	nl    UNCONN     0      0                               15:-4109                            *     
	nl    UNCONN     0      0                               15:698                              *     
	nl    UNCONN     0      0                               15:1732                             *     
	nl    UNCONN     0      0                               15:-4124                            *     
	nl    UNCONN     0      0                               15:-4121                            *     
	nl    UNCONN     0      0                               16:0                                *     
	nl    UNCONN     0      0                               18:0                                *     
	u_dgr UNCONN     0      0              /run/systemd/notify 7948                            * 0    
	u_dgr UNCONN     0      0       /run/systemd/cgroups-agent 7950                            * 0    
	u_str LISTEN     0      128    /var/run/avahi-daemon/socket 15378                           * 0    
	u_str LISTEN     0      128    /run/systemd/journal/stdout 7962                            * 0    
	u_str LISTEN     0      128          /var/run/rpcbind.sock 15388                           * 0    
	u_dgr UNCONN     0      0      /run/systemd/journal/socket 7965                            * 0    
	u_dgr UNCONN     0      0                         /dev/log 7967                            * 0    
	u_str LISTEN     0      100                 public/cleanup 21751                           * 0    
	u_str LISTEN     0      100                    public/qmgr 21754                           * 0    
	u_str LISTEN     0      100                   public/flush 21776                           * 0    
	u_str LISTEN     0      100                   public/showq 21791                           * 0    
	u_str LISTEN     0      128    /var/run/dbus/system_bus_socket 15398                           * 0    
	u_str LISTEN     0      128           /run/systemd/private 12844                           * 0    
	u_str LISTEN     0      100                 private/tlsmgr 21758                           * 0    
	u_str LISTEN     0      100                private/rewrite 21761                           * 0    
	u_str LISTEN     0      100                 private/bounce 21764                           * 0    
	u_str LISTEN     0      100                  private/defer 21767                           * 0    
	u_str LISTEN     0      100                  private/trace 21770                           * 0    
	u_str LISTEN     0      100                 private/verify 21773                           * 0    
	u_str LISTEN     0      100               private/proxymap 21779                           * 0    
	u_str LISTEN     0      100             private/proxywrite 21782                           * 0    
	u_str LISTEN     0      100                   private/smtp 21785                           * 0    
	u_str LISTEN     0      100                  private/relay 21788                           * 0    
	u_str LISTEN     0      100                  private/error 21794                           * 0    
	u_str LISTEN     0      100                  private/retry 21797                           * 0    
	u_str LISTEN     0      100                private/discard 21800                           * 0    
	u_str LISTEN     0      100                  private/local 21803                           * 0    
	u_str LISTEN     0      100                private/virtual 21806                           * 0    
	u_str LISTEN     0      100                   private/lmtp 21809                           * 0    
	u_str LISTEN     0      100                  private/anvil 21812                           * 0    
	u_str LISTEN     0      100                 private/scache 21815                           * 0    
	u_str LISTEN     0      30     /var/run/NetworkManager/private 16216                           * 0    
	u_str LISTEN     0      30     /var/run/NetworkManager/private-dhcp 17563                           * 0    
	u_str LISTEN     0      100                  public/pickup 21747                           * 0    
	u_str LISTEN     0      10     /var/lib/gssproxy/default.sock 15573                           * 0    
	u_dgr UNCONN     0      0           /run/systemd/shutdownd 13011                           * 0    
	u_str LISTEN     0      10              /run/gssproxy.sock 15574                           * 0    
	u_str LISTEN     0      128       /run/lvm/lvmpolld.socket 13018                           * 0    
	u_dgr LISTEN     0      128              /run/udev/control 11512                           * 0    
	u_str LISTEN     0      128        /run/lvm/lvmetad.socket 13052                           * 0    
	u_str ESTAB      0      0                                * 21795                           * 21796
	u_str ESTAB      0      0                                * 21749                           * 21748
	u_dgr UNCONN     0      0                                * 21375                           * 7967 
	u_str ESTAB      0      0                                * 21814                           * 21813
	u_str ESTAB      0      0                                * 15578                           * 15580
	u_str ESTAB      0      0                                * 21768                           * 21769
	u_str ESTAB      0      0                                * 16959                           * 16960
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16483                           * 16482
	u_str ESTAB      0      0                                * 21799                           * 21798
	u_str ESTAB      0      0                                * 21789                           * 21790
	u_str ESTAB      0      0                                * 21772                           * 21771
	u_str ESTAB      0      0                                * 21752                           * 21753
	u_str ESTAB      0      0                                * 16221                           * 17446
	u_str ESTAB      0      0                                * 15565                           * 15594
	u_dgr UNCONN     0      0                                * 17547                           * 7967 
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16008                           * 16007
	u_str ESTAB      0      0                                * 13434                           * 11961
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 16346                           * 16345
	u_str ESTAB      0      0                                * 15561                           * 15560
	u_str ESTAB      0      0                                * 21777                           * 21778
	u_str ESTAB      0      0                                * 21760                           * 21759
	u_str ESTAB      0      0                                * 16781                           * 16780
	u_str ESTAB      0      0                                * 21807                           * 21808
	u_str ESTAB      0      0                                * 21748                           * 21749
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 17441                           * 16218
	u_str ESTAB      0      0      /run/systemd/journal/stdout 15523                           * 16729
	u_str ESTAB      0      0                                * 21781                           * 21780
	u_str ESTAB      0      0                                * 16007                           * 16008
	u_str ESTAB      0      0                                * 16752                           * 15591
	u_str ESTAB      0      0                                * 22797                           * 22796
	u_str ESTAB      0      0                                * 12003                           * 13446
	u_str ESTAB      0      0                                * 21811                           * 21810
	u_str ESTAB      0      0                                * 15586                           * 15587
	u_str ESTAB      0      0                                * 21769                           * 21768
	u_str ESTAB      0      0                                * 21756                           * 21755
	u_str ESTAB      0      0                                * 21792                           * 21793
	u_str ESTAB      0      0                                * 16218                           * 17441
	u_str ESTAB      0      0                                * 21798                           * 21799
	u_str ESTAB      0      0                                * 15560                           * 15561
	u_dgr UNCONN     0      0                                * 38716                           * 7967 
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16532                           * 16531
	u_str ESTAB      0      0                                * 16482                           * 16483
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 15594                           * 15565
	u_str ESTAB      0      0                                * 21780                           * 21781
	u_dgr UNCONN     0      0                                * 21832                           * 7967 
	u_str ESTAB      0      0                                * 21802                           * 21801
	u_str ESTAB      0      0      /run/systemd/journal/stdout 18325                           * 19003
	u_str ESTAB      0      0                                * 15521                           * 15588
	u_str ESTAB      0      0                                * 21755                           * 21756
	u_str ESTAB      0      0                                * 16780                           * 16781
	u_dgr UNCONN     0      0                                * 16209                           * 7967 
	u_dgr UNCONN     0      0                                * 13473                           * 13472
	u_str ESTAB      0      0                                * 21784                           * 21783
	u_str ESTAB      0      0                                * 21810                           * 21811
	u_str ESTAB      0      0                                * 21765                           * 21766
	u_str ESTAB      0      0                                * 21745                           * 21746
	u_str ESTAB      0      0      /run/systemd/journal/stdout 13446                           * 12003
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 17446                           * 16221
	u_str ESTAB      0      0      /run/systemd/journal/stdout 11961                           * 13434
	u_str ESTAB      0      0                                * 21787                           * 21786
	u_str ESTAB      0      0                                * 21793                           * 21792
	u_str ESTAB      0      0                                * 16531                           * 16532
	u_str ESTAB      0      0                                * 21816                           * 21817
	u_str ESTAB      0      0                                * 21774                           * 21775
	u_str ESTAB      0      0                                * 21753                           * 21752
	u_dgr UNCONN     0      0                                * 14275                           * 7967 
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 17150                           * 15910
	u_str ESTAB      0      0                                * 21801                           * 21802
	u_dgr UNCONN     0      0                                * 30598                           * 7965 
	u_str ESTAB      0      0                                * 16345                           * 16346
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16581                           * 15510
	u_str ESTAB      0      0                                * 22796                           * 22797
	u_str ESTAB      0      0                                * 21762                           * 21763
	u_dgr UNCONN     0      0                                * 16778                           * 7967 
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16630                           * 16629
	u_str ESTAB      0      0                                * 21805                           * 21804
	u_dgr UNCONN     0      0                                * 43765                           * 7967 
	u_str ESTAB      0      0                                * 21783                           * 21784
	u_str ESTAB      0      0                                * 21766                           * 21765
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 15588                           * 15521
	u_str ESTAB      0      0                                * 16729                           * 15523
	u_str ESTAB      0      0                                * 21746                           * 21745
	u_str ESTAB      0      0                                * 19003                           * 18325
	u_dgr UNCONN     0      0                                * 15726                           * 7967 
	u_dgr UNCONN     0      0                                * 43637                           * 7967 
	u_str ESTAB      0      0                                * 21771                           * 21772
	u_str ESTAB      0      0      /run/systemd/journal/stdout 16960                           * 16959
	u_dgr UNCONN     0      0                                * 15550                           * 7967 
	u_str ESTAB      0      0                                * 21813                           * 21814
	u_str ESTAB      0      0                                * 21796                           * 21795
	u_str ESTAB      0      0                                * 21786                           * 21787
	u_str ESTAB      0      0                                * 21775                           * 21774
	u_dgr UNCONN     0      0                                * 21720                           * 7967 
	u_str ESTAB      0      0                                * 15587                           * 15586
	u_str ESTAB      0      0                                * 22848                           * 0    
	u_str ESTAB      0      0                                * 21817                           * 21816
	u_str ESTAB      0      0                                * 21790                           * 21789
	u_str ESTAB      0      0                                * 21763                           * 21762
	u_dgr UNCONN     0      0                                * 17447                           * 7967 
	u_str ESTAB      0      0      /var/run/dbus/system_bus_socket 15591                           * 16752
	u_str ESTAB      0      0                                * 21759                           * 21760
	u_str ESTAB      0      0                                * 15910                           * 17150
	u_str ESTAB      0      0                                * 15510                           * 16581
	u_dgr UNCONN     0      0                                * 22754                           * 7967 
	u_str ESTAB      0      0                                * 21804                           * 21805
	u_str ESTAB      0      0                                * 21778                           * 21777
	u_dgr UNCONN     0      0                                * 16741                           * 7965 
	u_str ESTAB      0      0               /run/gssproxy.sock 15580                           * 15578
	u_str ESTAB      0      0                                * 16629                           * 16630
	u_dgr UNCONN     0      0                                * 12015                           * 7965 
	u_str ESTAB      0      0                                * 21808                           * 21807
	u_dgr UNCONN     0      0                                * 13472                           * 13473
	raw   UNCONN     0      0                               :::58                             :::*     
	tcp   UNCONN     0      0                                *:2049                            *:*     
	tcp   UNCONN     0      0                                *:39964                           *:*     
	tcp   UNCONN     0      0                                *:111                             *:*     
	tcp   UNCONN     0      0                                *:5353                            *:*     
	tcp   UNCONN     0      0                                *:44553                           *:*     
	tcp   UNCONN     0      0                                *:20048                           *:*     
	tcp   UNCONN     0      0                                *:47979                           *:*     
	tcp   UNCONN     0      0                                *:918                             *:*     
	tcp   UNCONN     0      0                        127.0.0.1:932                             *:*     
	tcp   UNCONN     0      0                               :::2049                           :::*     
	tcp   UNCONN     0      0                               :::111                            :::*     
	tcp   UNCONN     0      0                               :::20048                          :::*     
	tcp   UNCONN     0      0                               :::53952                          :::*     
	tcp   UNCONN     0      0                               :::45920                          :::*     
	tcp   UNCONN     0      0                               :::918                            :::*     
	tcp   LISTEN     0      100                      127.0.0.1:25                              *:*     
	tcp   LISTEN     0      64                               *:2049                            *:*     
	tcp   LISTEN     0      128                              *:56877                           *:*     
	tcp   LISTEN     0      128                              *:111                             *:*     
	tcp   LISTEN     0      128                              *:20048                           *:*     
	tcp   LISTEN     0      64                               *:49009                           *:*     
	tcp   LISTEN     0      128                              *:22                              *:*     
	tcp   ESTAB      0      0                    192.168.9.134:22                    192.168.9.1:7122  
	tcp   ESTAB      0      2212                 192.168.9.134:22                    192.168.9.1:2713  
	tcp   LISTEN     0      100                            ::1:25                             :::*     
	tcp   LISTEN     0      64                              :::2049                           :::*     
	tcp   LISTEN     0      64                              :::59304                          :::*     
	tcp   LISTEN     0      128                             :::111                            :::*     
	tcp   LISTEN     0      128                             :::38128                          :::*     
	tcp   LISTEN     0      128                             :::20048                          :::*     
	tcp   LISTEN     0      128                             :::22                             :::*  

[root@localhost ~]# ss -an | grep -i listen
	u_str  LISTEN     0      128    /var/run/avahi-daemon/socket 15378                 * 0    
	u_str  LISTEN     0      128    /run/systemd/journal/stdout 7962                  * 0    
	u_str  LISTEN     0      128    /var/run/rpcbind.sock 15388                 * 0    
	u_str  LISTEN     0      100       public/cleanup 21751                 * 0    
	u_str  LISTEN     0      100          public/qmgr 21754                 * 0    
	u_str  LISTEN     0      100         public/flush 21776                 * 0    
	u_str  LISTEN     0      100         public/showq 21791                 * 0    
	u_str  LISTEN     0      128    /var/run/dbus/system_bus_socket 15398                 * 0    
	u_str  LISTEN     0      128    /run/systemd/private 12844                 * 0    
	u_str  LISTEN     0      100       private/tlsmgr 21758                 * 0    
	u_str  LISTEN     0      100      private/rewrite 21761                 * 0    
	u_str  LISTEN     0      100       private/bounce 21764                 * 0    
	u_str  LISTEN     0      100        private/defer 21767                 * 0    
	u_str  LISTEN     0      100        private/trace 21770                 * 0    
	u_str  LISTEN     0      100       private/verify 21773                 * 0    
	u_str  LISTEN     0      100     private/proxymap 21779                 * 0    
	u_str  LISTEN     0      100    private/proxywrite 21782                 * 0    
	u_str  LISTEN     0      100         private/smtp 21785                 * 0    
	u_str  LISTEN     0      100        private/relay 21788                 * 0    
	u_str  LISTEN     0      100        private/error 21794                 * 0    
	u_str  LISTEN     0      100        private/retry 21797                 * 0    
	u_str  LISTEN     0      100      private/discard 21800                 * 0    
	u_str  LISTEN     0      100        private/local 21803                 * 0    
	u_str  LISTEN     0      100      private/virtual 21806                 * 0    
	u_str  LISTEN     0      100         private/lmtp 21809                 * 0    
	u_str  LISTEN     0      100        private/anvil 21812                 * 0    
	u_str  LISTEN     0      100       private/scache 21815                 * 0    
	u_str  LISTEN     0      30     /var/run/NetworkManager/private 16216                 * 0    
	u_str  LISTEN     0      30     /var/run/NetworkManager/private-dhcp 17563                 * 0    
	u_str  LISTEN     0      100        public/pickup 21747                 * 0    
	u_str  LISTEN     0      10     /var/lib/gssproxy/default.sock 15573                 * 0    
	u_str  LISTEN     0      10     /run/gssproxy.sock 15574                 * 0    
	u_str  LISTEN     0      128    /run/lvm/lvmpolld.socket 13018                 * 0    
	u_dgr  LISTEN     0      128    /run/udev/control 11512                 * 0    
	u_str  LISTEN     0      128    /run/lvm/lvmetad.socket 13052                 * 0    
	tcp    LISTEN     0      100            127.0.0.1:25                    *:*     
	tcp    LISTEN     0      64                     *:2049                  *:*     
	tcp    LISTEN     0      128                    *:56877                 *:*     
	tcp    LISTEN     0      128                    *:111                   *:*     
	tcp    LISTEN     0      128                    *:20048                 *:*     
	tcp    LISTEN     0      64                     *:49009                 *:*     
	tcp    LISTEN     0      128                    *:22                    *:*     
	tcp    LISTEN     0      100                  ::1:25                   :::*     
	tcp    LISTEN     0      64                    :::2049                 :::*     
	tcp    LISTEN     0      64                    :::59304                :::*     
	tcp    LISTEN     0      128                   :::111                  :::*     
	tcp    LISTEN     0      128                   :::38128                :::*     
	tcp    LISTEN     0      128                   :::20048                :::*     
	tcp    LISTEN     0      128                   :::22                   :::*

抓包工具tcpdump

  • 用法：tcpdump -nn
  • tcpdump -nn -i ens33
  • tcpdump -nn port 80
  • tcpdump -nn not port 22 and host 192.168.9.233
  • tcpdump -nn -c 100 -w 1.cap
  • tshark -n -t a -R http.request -T fileds -e "frame.time" -e "ip.src" -e "http.host" -e "http.request.method" -e "http.request.uri"
  • yum install -y wireshark

使用tcpdump抓包

[root@localhost ~]# yum install -y tcpdump
	Loaded plugins: fastestmirror
	base                                                                        | 3.6 kB  00:00:00     
	epel/x86_64/metalink                                                        | 5.6 kB  00:00:00     
	epel                                                                        | 4.7 kB  00:00:00     
	extras                                                                      | 3.4 kB  00:00:00     
	updates                                                                     | 3.4 kB  00:00:00     
	(1/3): epel/x86_64/updateinfo                                               | 852 kB  00:00:10     
	(2/3): updates/7/x86_64/primary_db                                          | 3.6 MB  00:00:16     
	(3/3): epel/x86_64/primary_db                                               | 6.1 MB  00:00:26     
	Loading mirror speeds from cached hostfile
	 * epel: mirrors.tongji.edu.cn
	Resolving Dependencies
	--> Running transaction check
	---> Package tcpdump.x86_64 14:4.9.0-5.el7 will be installed
	--> Finished Dependency Resolution

	Dependencies Resolved

	===================================================================================================
	 Package               Arch                 Version                       Repository          Size
	===================================================================================================
	Installing:
	 tcpdump               x86_64               14:4.9.0-5.el7                base               415 k

	Transaction Summary
	===================================================================================================
	Install  1 Package

	Total download size: 415 k
	Installed size: 1.0 M
	Downloading packages:
	tcpdump-4.9.0-5.el7.x86_64.rpm                                              | 415 kB  00:00:00     
	Running transaction check
	Running transaction test
	Transaction test succeeded
	Running transaction
	  Installing : 14:tcpdump-4.9.0-5.el7.x86_64                                                   1/1 
	  Verifying  : 14:tcpdump-4.9.0-5.el7.x86_64                                                   1/1 

	Installed:
	  tcpdump.x86_64 14:4.9.0-5.el7                                                                    

	Complete!


[root@localhost ~]# tcpdump -nn -i eno16777736 
	02:14:00.780945 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [.], ack 480216, win 2048, length 0
	02:14:00.780994 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 480216:480604, ack 105, win 137, length 388
	02:14:00.781067 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 480604:480784, ack 105, win 137, length 180
	02:14:00.781134 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 480784:480964, ack 105, win 137, length 180
	02:14:00.781137 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [P.], seq 105:157, ack 480216, win 2048, length 52
	^Ctcpdump: Unable to write output: Interrupted system call

第一个n表示ip以数字形式显示出来，若不加则显示主机名

[root@localhost ~]# tcpdump -nn -i eno16777736 port 22
	02:22:54.007382 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 9122384:9122564, ack 1249, win 137, length 180
	02:22:54.007444 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 9122564:9122744, ack 1249, win 137, length 180
	02:22:54.007544 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 9122744:9122924, ack 1249, win 137, length 180
	02:22:54.007575 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [.], ack 9122744, win 1986, length 0
	02:22:54.007661 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [P.], seq 1249:1301, ack 9122744, win 1986, length 52
	^C
	55206 packets captured
	55208 packets received by filter
	0 packets dropped by kernel

[root@localhost ~]# tcpdump -nn -i eno16777736 not port 22
	tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
	listening on eno16777736, link-type EN10MB (Ethernet), capture size 262144 bytes
	02:23:47.530835 ARP, Request who-has 169.254.2.251 tell 192.168.9.1, length 46
	02:23:48.030596 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:23:48.708894 ARP, Request who-has 169.254.2.251 tell 192.168.9.1, length 46
	02:23:49.030701 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:23:49.530875 ARP, Request who-has 192.168.9.134 (00:0c:29:0a:e7:fc) tell 192.168.9.1, length 46
	02:23:49.530975 ARP, Reply 192.168.9.134 is-at 00:0c:29:0a:e7:fc, length 28
	02:23:49.531066 ARP, Request who-has 169.254.2.251 tell 192.168.9.1, length 46
	^C
	7 packets captured
	7 packets received by filter
	0 packets dropped by kernel

[root@localhost ~]# tcpdump -nn -i eno16777736 not port 22 and host 192.168.9.2
	tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
	listening on eno16777736, link-type EN10MB (Ethernet), capture size 262144 bytes
	02:25:14.530222 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:17.108219 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:18.029905 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:19.030495 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:20.109017 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:21.029736 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:22.029984 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:23.109644 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:24.029738 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:25.029943 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:26.109697 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:27.029894 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:25:28.029728 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	^C
	13 packets captured
	13 packets received by filter
	0 packets dropped by kernel


[root@localhost ~]# tcpdump -nn -i eno16777736 -c 10
	tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
	listening on eno16777736, link-type EN10MB (Ethernet), capture size 262144 bytes
	02:26:56.087391 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 3908966921:3908967133, ack 3251203662, win 137, length 212
	02:26:56.087570 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [.], ack 212, win 2051, length 0
	02:26:56.087626 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 212:408, ack 1, win 137, length 196
	02:26:56.087700 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 408:668, ack 1, win 137, length 260
	02:26:56.087846 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [.], ack 668, win 2049, length 0
	02:26:56.087901 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 668:832, ack 1, win 137, length 164
	02:26:56.087958 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 832:1092, ack 1, win 137, length 260
	02:26:56.088091 IP 192.168.9.1.2713 > 192.168.9.134.22: Flags [.], ack 1092, win 2048, length 0
	02:26:56.088145 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 1092:1256, ack 1, win 137, length 164
	02:26:56.088316 IP 192.168.9.134.22 > 192.168.9.1.2713: Flags [P.], seq 1256:1516, ack 1, win 137, length 260
	10 packets captured
	11 packets received by filter
	0 packets dropped by kernel

[root@localhost ~]# tcpdump -nn -i eno16777736 -c 10 -w /tmp/1.cap
	tcpdump: listening on eno16777736, link-type EN10MB (Ethernet), capture size 262144 bytes
	10 packets captured
	11 packets received by filter
	0 packets dropped by kernel
[root@localhost ~]# file /tmp/1.cap 
	/tmp/1.cap: tcpdump capture file (little-endian) - version 2.4 (Ethernet, capture length 262144)
[root@localhost ~]# tcpdump -r /tmp/1.cap 
	reading from file /tmp/1.cap, link-type EN10MB (Ethernet)
	02:27:40.488373 IP 192.168.9.134.ssh > 192.168.9.1.raventbs: Flags [P.], seq 3908970045:3908970193, ack 3251204718, win 137, length 148
	02:27:40.488551 IP 192.168.9.1.raventbs > 192.168.9.134.ssh: Flags [.], ack 148, win 2052, length 0
	02:27:41.112327 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:42.030242 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:43.030703 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:44.112381 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:45.029922 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:46.030193 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:47.112426 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46
	02:27:48.030202 ARP, Request who-has 192.168.9.2 tell 192.168.9.1, length 46

-r为读，-w为写

使用wireshark抓包

[root@localhost ~]# yum install -y wireshark
	Loaded plugins: fastestmirror
	Loading mirror speeds from cached hostfile
	 * epel: mirror01.idc.hinet.net
	Resolving Dependencies
	--> Running transaction check
	---> Package wireshark.x86_64 0:1.10.14-14.el7 will be installed
	--> Processing Dependency: libsmi.so.2()(64bit) for package: wireshark-1.10.14-14.el7.x86_64
	--> Processing Dependency: libcares.so.2()(64bit) for package: wireshark-1.10.14-14.el7.x86_64
	--> Running transaction check
	---> Package c-ares.x86_64 0:1.10.0-3.el7 will be installed
	---> Package libsmi.x86_64 0:0.4.8-13.el7 will be installed
	--> Finished Dependency Resolution

	Dependencies Resolved

	===================================================================================================
	 Package                Arch                Version                        Repository         Size
	===================================================================================================
	Installing:
	 wireshark              x86_64              1.10.14-14.el7                 base               13 M
	Installing for dependencies:
	 c-ares                 x86_64              1.10.0-3.el7                   base               78 k
	 libsmi                 x86_64              0.4.8-13.el7                   base              2.3 M

	Transaction Summary
	===================================================================================================
	Install  1 Package (+2 Dependent packages)

	Total download size: 15 M
	Installed size: 83 M
	Downloading packages:
	(1/3): c-ares-1.10.0-3.el7.x86_64.rpm                                       |  78 kB  00:00:01     
	(2/3): libsmi-0.4.8-13.el7.x86_64.rpm                                       | 2.3 MB  00:00:05     
	(3/3): wireshark-1.10.14-14.el7.x86_64.rpm                                  |  13 MB  00:00:29     
	---------------------------------------------------------------------------------------------------
	Total                                                              490 kB/s |  15 MB  00:00:31     
	Running transaction check
	Running transaction test
	Transaction test succeeded
	Running transaction
	  Installing : c-ares-1.10.0-3.el7.x86_64                                                      1/3 
	  Installing : libsmi-0.4.8-13.el7.x86_64                                                      2/3 
	  Installing : wireshark-1.10.14-14.el7.x86_64                                                 3/3 
	  Verifying  : libsmi-0.4.8-13.el7.x86_64                                                      1/3 
	  Verifying  : wireshark-1.10.14-14.el7.x86_64                                                 2/3 
	  Verifying  : c-ares-1.10.0-3.el7.x86_64                                                      3/3 

	Installed:
	  wireshark.x86_64 0:1.10.14-14.el7                                                                

	Dependency Installed:
	  c-ares.x86_64 0:1.10.0-3.el7                     libsmi.x86_64 0:0.4.8-13.el7                    

	Complete!

[root@localhost ~]# tshark -n -t a -R http.request -T fileds -e "frame.time" -e "ip.src" -e "http.host" -e "http.request.method" -e "http.request.uri"

转载于:https://my.oschina.net/u/3892756/blog/3056538

weixin_34168880
关注
centos7学习笔记
weixin_39735780的博客
05-05 1264
提示：文章写完后，目录可以自动生成，如何生成可参考右边的帮助文档 文章目录前言一、linux目录结构1.1 基本介绍1.2 目录说明1.2.1 重点关注目录1.2.2 内核相关目录1.2.3 一般关注目录二、开机、重启和用户登录注销1. 关机、重启命令2. 用户的登录和注销三、 用户管理3.1 基本介绍3.2 创建用户3.3 指定/修改密码3.4 删除用户3.5 查询用户信息3.6 切换用户3.7 用户组3.8 用户和组的相关文件3.8.1 /etc/passwd3.8.2 /etc/group四、使用指
Linux-CentOS 7-学习笔记
H_X_P_的博客
04-20 939
Linux-CentOS 7-学习笔记
【CentOS 7笔记40】，监控网络状态1#171128
weixin_34375251的博客
11-28 173
2019独角兽企业重金招聘Python工程师标准>>> ...
【CentOS 7笔记42】，监控网络状态2#
weixin_33849942的博客
05-31 257
2019独角兽企业重金招聘Python工程师标准>>> ...
CentOS网络故障排查秘笈：实战指南
凡夫编程
03-07 2449
作为一名热爱折腾 Linux 的技术达人，我深知网络故障会让人抓狂！在这篇文章里，我和你分享了我的心得体会，从如何分析问题、识别瓶颈，到利用各种神器解决网络难题。不管你是新手小白还是老鸟大神，这里都有适合你的解决方案。赶紧看一看吧，让网络故障成为你的过去式！ 我平时使用CentOS系统比较多，所以我在写这篇文章的时候所使用的操作系统是CentOS7，如果你使用的是Ubuntu，也没有关系，排除网络故障的过程是一样的，不同的是可能使用命令工具、配置文件会有所不同，希望我的分享给能你带来一些帮助。
CentOS 7.x关闭/开启防火墙出现Unit iptables.service failed to load: No such file or directory问题解决...
weixin_34361881的博客
11-16 228
一直用CentOS 6.x，今天用CentOS7.3版本时，防火墙配置后执行service iptables start出现”Failed to restart iptables.service: Unit iptables.service failed to load: No such file or directory.”错误, 错误信息如下： 在CentOS 7或RHEL 7或Fed...
Linux面试基础问题五
李凯的博客
08-05 337
九、网络通讯命令 1. ifconfig 命令 ifconfig 用于查看和配置 Linux 系统的网络接口。 查看所有网络接口及其状态：ifconfig -a 。 使用 up 和 down 命令启动或停止某个接口：ifconfig eth0 up 和 ifconfig eth0 down 。 2. iptables 命令 iptables ，是一个配置 Linux 内核防火墙的命令行工具。功能非常强大，主要掌握如何开放端口即可。例如： 把来源 IP 为 192.168.1.101 访问本机 80 端口的
Centos7升级openssl-3.2.0和openssh-9.6p1笔记和软件
01-09
CentOS 7是一款广泛使用的Linux发行版，而OpenSSL和OpenSSH是其中两个至关重要的组件。OpenSSL提供了加密、身份验证和安全通信服务，而OpenSSH则提供了安全的远程登录功能。随着技术的发展，保持这些软件的更新至关...
Linux 学习笔记，基于《鸟哥的 Linux 私房菜 第四版（CentOS7）》以及各种的网络资源.zip
最新发布
04-29
在CentOS 7中，网络配置主要通过NetworkManager和systemd工具完成。 shell脚本编程是提升Linux使用效率的有效手段。Bash Shell是最常见的Linux默认shell，学习笔记会讲解变量、条件语句、循环结构、函数等基本概念...
05.CentOS7学习笔记--Linux基本命令
java阳旭的博客
09-11 763
CentOS（Community Enterprise Operating System，中文意思是社区企业操作系统）是Linux发行版之一，它是来自于Red Hat Enterprise Linux依照开放源代码规定释出的源代码所编译而成。由于出自同样的源代码，因此有些要求高度稳定性的服务器以CentOS替代商业版的Red Hat Enterprise Linux使用。两者的不同，在于CentOS完全开源。
【CentOS】Linux CentOS7检查是否联网
qq_25285531的博客
12-11 6696
在“/etc/sysconfig/network-scripts/ifcfg-ens33”里面配置网络，注意ens33中的数字是随机的。ping的通说明可以联网，ping不通说明连不上网，可以根据一下步骤操作。先检查是否可以联网，ping www.baidu.com。1.ifconfig命令 查看网络配置是否有问题。
Linux网络管理命令ss的详细解释，ss的语法、用法和使用场景
weixin_70208651的博客
03-17 5649
Linux下的ss命令是Socket Statistics的缩写，也被称为IPC套接字统计。这是一个强大的网络管理命令，主要用于获取系统中socket的统计信息，可以帮助系统管理员诊断和排查网络问题，包括检查当前网络连接及端口状态、搜索网络问题、统计网络情况、过滤网络数据等等，从而解决网络问题，节省管理工作量，保证网络安全。 在处理大量socket连接时，比netstat更快更高效。这是因为ss命令利用了TCP协议栈中的tcp_diag模块。
docker Error: DBUS_ERROR: Failed to connect to socket /run/dbus/system_bus_socket: No such file or d
qq 117791303
08-19 5853
Error: DBUS_ERROR: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory
K8S部署(Elasticsearch+Kibana+Fluentd)
liuchao666888的博客
10-26 5505
实验环境版本 Kubernetes：v1.14.1 Elasticsearch镜像：docker.elastic.co/elasticsearch/elasticsearch:7.6.2 Kibana 镜像：docker.elastic.co/kibana/kibana:7.6.2 Fluentd 镜像：quay.io/fluentd_elasticsearch/fluentd:v3.0.1 简介 1、Elasticsearch Elasticsearch 是一个实时的、分布式的可扩展的搜索引擎，允许进行
共享存储nfs介绍
u012271055的专栏
12-20 2799
一、实验环境说明 NFS 服务端： [root@localhost ~]# cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) [root@localhost ~]# uname -a Linux localhost.localdomain 3.10.0-514.el7.x86_64 #1 SMP Tue Nov 22 16...
Linux下netstat命令详解
热门推荐
NoFaceNoSkin的博客
02-11 9万+
一、介绍 Netstat是控制台命令,是一个监控TCP/IP网络的非常有用的工具，它可以显示路由表、实际的网络连接以及每一个网络接口设备的状态信息。Netstat用于显示与IP、TCP、UDP和ICMP协议相关的统计数据，一般用于检验本机各端口的网络连接情况。   二、输出信息描述 执行netstat后输出如下： [root@sy-suz-srv51 ~]# netstat Activ...
网络协议之:socket协议详解之Unix domain Socket
程序那些事
04-06 5699
文章目录简介什么是Unix domain Socket使用socat来创建Unix Domain Sockets使用ss命令来查看Unix domain Socket使用nc连接到Unix domain Socket服务总结 简介 之前的文章我们讲到了Socket中的Stream Socket和Datagram Socket，这两种Socket通常分别是基于tcp和udp协议来进行数据的传输。这两种Socket都有一个共同的特点，那就是需要一个IP地址和端口来建立客户端和服务器端的连接。 那么今天我们会来讲
CentOS环境下查看网线连接状态
haiqinma的专栏
10-15 2万+
CentOS环境下查看网线连接状态本文主要介绍在Linux环境（主要是CentOS）如何查看网线是否连接ethtool命令ifconfig -aip anmcli dev status 本文主要介绍在Linux环境（主要是CentOS）如何查看网线是否连接 在CentOS下的网络配置很简单了，在工作中还遇到的一个情况就是：一个服务器有多个同类型的网口，但是只需要配置其中一个设备，这个时候就需要查看...
Linux中查看进程的端口号，查看哪个进程占用了该端口
迷逝
03-22 9700
知道进程，查看进程的端口号 [root@localhost ~]# ps -e |grep ssh 961 ? 00:00:00 sshd 1154 ? 00:00:00 sshd 1156 ? 00:00:00 sshd [root@localhost ~]# netstat -anp|grep 961 tcp 0 ...
CentOS 7下Nginx+PHP+nginx-rrd安装教程
"这是一个关于在Linux系统（可能是CentOS 7）上安装Nginx、PHP和Nginx-rrd工具的步骤记录。主要涵盖了Nginx的配置、PHP的安装与配置、PHP-FPM的设置、Nginx与PHP的集成以及Nginx-rrd的获取和使用。" 在安装Nginx时...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值