tcpdump 安装与使用

最新推荐文章于 2024-07-03 11:16:40 发布
最新推荐文章于 2024-07-03 11:16:40 发布
阅读量3.3k 收藏 1
点赞数
文章标签： tcp tcpdump
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/xu990128638/article/details/121565278
版权

TCPDump 网络封包 端口监控 数据分析 网络通信
关键词由CSDN通过智能技术生成

tcpdump 安装与使用

root@node133:~# apt-get install tcpdump
正在读取软件包列表... 完成
正在分析软件包的依赖关系树       
正在读取状态信息... 完成       
下列软件包是自动安装的并且现在不需要了：
  fbterm imageworsener libc-ares2 libde265-0 libheif1 liblqr-1-0 libmaxminddb0 libqtermwidget5-0 libsbc1 libsmi2ldbl libspandsp2 libutf8proc2 libwireshark-data
  libwireshark11 libwiretap8 libwscodecs2 libwsutil9 qtermwidget5-data squashfs-tools
使用'apt autoremove'来卸载它(它们)。
建议安装：
  apparmor
下列【新】软件包将被安装：
  tcpdump
升级了 0 个软件包，新安装了 1 个软件包，要卸载 0 个软件包，有 234 个软件包未被升级。
需要下载 368 kB 的归档。
解压缩后会消耗 1,252 kB 的额外空间。
获取:1 https://enterprise-packages.chinauos.com/server-enterprise fou/sp3/main mips64el tcpdump mips64el 4.9.3-1~deb10u1 [368 kB]
已下载 368 kB，耗时 1秒 (314 kB/s)
正在选中未选择的软件包 tcpdump。
(正在读取数据库 ... 系统当前共安装有 180530 个文件和目录。)
准备解压 .../tcpdump_4.9.3-1~deb10u1_mips64el.deb  ...
正在解压 tcpdump (4.9.3-1~deb10u1) ...
正在设置 tcpdump (4.9.3-1~deb10u1) ...
正在处理用于 man-db (2.8.5-2) 的触发器 ...
root@node133:~# tcpdump -i any port 8088
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
23:08:38.488072 IP 10.173.203.3.44852 > node133.omniorb: Flags [P.], seq 3363016020:3363016594, ack 588384097, win 501, options [nop,nop,TS val 1311969474 ecr 634138321], 
length 57423:08:38.493703 IP node133.omniorb > 10.173.203.3.44852: Flags [P.], seq 1:946, ack 574, win 501, options [nop,nop,TS val 634175335 ecr 1311969474], length 945
23:08:38.494292 IP 10.173.203.3.44852 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 1311969481 ecr 634175335], length 0
23:08:43.580511 IP 10.173.203.3.55912 > node133.omniorb: Flags [P.], seq 2371186817:2371187407, ack 1386621053, win 501, options [nop,nop,TS val 883847375 ecr 634144412], 
length 59023:08:43.586350 IP node133.omniorb > 10.173.203.3.55912: Flags [P.], seq 1:946, ack 590, win 501, options [nop,nop,TS val 634180428 ecr 883847375], length 945
23:08:43.587352 IP 10.173.203.3.55912 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 883847382 ecr 634180428], length 0
23:08:43.910318 IP 10.173.203.3.56330 > node133.omniorb: Flags [P.], seq 2992360588:2992361178, ack 2894098487, win 501, options [nop,nop,TS val 3480106199 ecr 634145769],
 length 59023:08:43.912983 IP node133.omniorb > 10.173.203.3.56330: Flags [P.], seq 1:946, ack 590, win 501, options [nop,nop,TS val 634180755 ecr 3480106199], length 945
23:08:43.913875 IP 10.173.203.3.56330 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 3480106203 ecr 634180755], length 0
23:08:45.232268 IP 10.173.203.3.51432 > node133.omniorb: Flags [S], seq 3555649822, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.232322 IP node133.omniorb > 10.173.203.3.51432: Flags [S.], seq 651211897, ack 3555649823, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.233356 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.234289 IP 10.173.203.3.51432 > node133.omniorb: Flags [P.], seq 1:845, ack 1, win 16425, length 844
23:08:45.234319 IP node133.omniorb > 10.173.203.3.51432: Flags [.], ack 845, win 501, length 0
23:08:45.385517 IP node133.omniorb > 10.173.203.3.51432: Flags [.], seq 1:7301, ack 845, win 501, length 7300
23:08:45.385573 IP node133.omniorb > 10.173.203.3.51432: Flags [P.], seq 7301:8193, ack 845, win 501, length 892
23:08:45.387582 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 8193, win 16425, length 0
23:08:45.388139 IP node133.omniorb > 10.173.203.3.51432: Flags [P.], seq 8193:9803, ack 845, win 501, length 1610
23:08:45.389507 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 9803, win 16425, length 0
23:08:45.411165 IP 10.173.203.3.51432 > node133.omniorb: Flags [P.], seq 845:1779, ack 9803, win 16425, length 934
23:08:45.411197 IP node133.omniorb > 10.173.203.3.51432: Flags [.], ack 1779, win 501, length 0
23:08:45.745173 IP node133.omniorb > 10.173.203.3.51432: Flags [P.], seq 9803:17095, ack 1779, win 501, length 7292
23:08:45.747183 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 17095, win 16425, length 0
23:08:45.805868 IP 10.173.203.3.51432 > node133.omniorb: Flags [P.], seq 1779:3446, ack 17095, win 16425, length 1667
23:08:45.805903 IP node133.omniorb > 10.173.203.3.51432: Flags [.], ack 3446, win 501, length 0
23:08:45.806416 IP 10.173.203.3.51433 > node133.omniorb: Flags [S], seq 2530717159, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.806489 IP node133.omniorb > 10.173.203.3.51433: Flags [S.], seq 907980723, ack 2530717160, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.807177 IP 10.173.203.3.51434 > node133.omniorb: Flags [S], seq 1613500230, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.807192 IP node133.omniorb > 10.173.203.3.51434: Flags [S.], seq 1383275543, ack 1613500231, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.807196 IP 10.173.203.3.51433 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.808136 IP 10.173.203.3.51434 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.808330 IP 10.173.203.3.51433 > node133.omniorb: Flags [P.], seq 1:1711, ack 1, win 16425, length 1710
23:08:45.808356 IP node133.omniorb > 10.173.203.3.51433: Flags [.], ack 1711, win 501, length 0
23:08:45.808363 IP 10.173.203.3.51435 > node133.omniorb: Flags [S], seq 678398458, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.808385 IP node133.omniorb > 10.173.203.3.51435: Flags [S.], seq 4276354995, ack 678398459, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.809043 IP 10.173.203.3.51435 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.809794 IP 10.173.203.3.51434 > node133.omniorb: Flags [P.], seq 1:1663, ack 1, win 16425, length 1662
23:08:45.809826 IP node133.omniorb > 10.173.203.3.51434: Flags [.], ack 1663, win 501, length 0
23:08:45.810150 IP 10.173.203.3.51436 > node133.omniorb: Flags [S], seq 1092281862, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.810180 IP node133.omniorb > 10.173.203.3.51436: Flags [S.], seq 1335926545, ack 1092281863, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.810698 IP 10.173.203.3.51436 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.811129 IP 10.173.203.3.51437 > node133.omniorb: Flags [S], seq 3653708645, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:45.811146 IP node133.omniorb > 10.173.203.3.51437: Flags [S.], seq 1877671120, ack 3653708646, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:45.811572 IP 10.173.203.3.51437 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:45.812054 IP 10.173.203.3.51435 > node133.omniorb: Flags [P.], seq 1:1659, ack 1, win 16425, length 1658
23:08:45.812079 IP node133.omniorb > 10.173.203.3.51435: Flags [.], ack 1659, win 501, length 0
23:08:45.812672 IP 10.173.203.3.51436 > node133.omniorb: Flags [P.], seq 1:1660, ack 1, win 16425, length 1659
23:08:45.812700 IP node133.omniorb > 10.173.203.3.51436: Flags [.], ack 1660, win 501, length 0
23:08:45.813045 IP 10.173.203.3.51437 > node133.omniorb: Flags [P.], seq 1:1657, ack 1, win 16425, length 1656
23:08:45.813066 IP node133.omniorb > 10.173.203.3.51437: Flags [.], ack 1657, win 501, length 0
23:08:45.813635 IP node133.omniorb > 10.173.203.3.51432: Flags [P.], seq 17095:17296, ack 3446, win 501, length 201
23:08:45.818432 IP 10.173.203.3.51432 > node133.omniorb: Flags [P.], seq 3446:5103, ack 17296, win 16374, length 1657
23:08:45.818462 IP node133.omniorb > 10.173.203.3.51432: Flags [.], ack 5103, win 501, length 0
23:08:45.822374 IP node133.omniorb > 10.173.203.3.51434: Flags [P.], seq 1:202, ack 1663, win 501, length 201
23:08:45.824668 IP 10.173.203.3.51434 > node133.omniorb: Flags [P.], seq 1663:3327, ack 202, win 16374, length 1664
23:08:45.824691 IP node133.omniorb > 10.173.203.3.51434: Flags [.], ack 3327, win 501, length 0
23:08:45.856402 IP node133.omniorb > 10.173.203.3.51434: Flags [P.], seq 202:1653, ack 3327, win 501, length 1451
23:08:45.859218 IP 10.173.203.3.51434 > node133.omniorb: Flags [P.], seq 3327:4997, ack 1653, win 16425, length 1670
23:08:45.859246 IP node133.omniorb > 10.173.203.3.51434: Flags [.], ack 4997, win 501, length 0
23:08:45.884160 IP node133.omniorb > 10.173.203.3.51435: Flags [.], seq 1:7301, ack 1659, win 501, length 7300
23:08:45.884229 IP node133.omniorb > 10.173.203.3.51435: Flags [P.], seq 7301:8193, ack 1659, win 501, length 892
23:08:45.884464 IP node133.omniorb > 10.173.203.3.51435: Flags [P.], seq 8193:9207, ack 1659, win 501, length 1014
23:08:45.885774 IP 10.173.203.3.51435 > node133.omniorb: Flags [.], ack 9207, win 16425, length 0
23:08:45.886329 IP node133.omniorb > 10.173.203.3.51436: Flags [.], seq 1:7301, ack 1660, win 501, length 7300
23:08:45.886346 IP node133.omniorb > 10.173.203.3.51436: Flags [P.], seq 7301:8193, ack 1660, win 501, length 892
23:08:45.886614 IP 10.173.203.3.51435 > node133.omniorb: Flags [P.], seq 1659:3323, ack 9207, win 16425, length 1664
23:08:45.886638 IP node133.omniorb > 10.173.203.3.51435: Flags [.], ack 3323, win 501, length 0
23:08:45.887364 IP 10.173.203.3.51436 > node133.omniorb: Flags [.], ack 5841, win 16425, length 0
23:08:45.887639 IP node133.omniorb > 10.173.203.3.51436: Flags [P.], seq 8193:9138, ack 1660, win 501, length 945
23:08:45.888196 IP 10.173.203.3.51436 > node133.omniorb: Flags [.], ack 9138, win 16425, length 0
23:08:45.895470 IP node133.omniorb > 10.173.203.3.51434: Flags [P.], seq 1653:3096, ack 4997, win 501, length 1443
23:08:45.900273 IP node133.omniorb > 10.173.203.3.51435: Flags [P.], seq 9207:10663, ack 3323, win 501, length 1456
23:08:45.927287 IP node133.omniorb > 10.173.203.3.51432: Flags [P.], seq 17296:18808, ack 5103, win 501, length 1512
23:08:45.928049 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 18808, win 16425, length 0
23:08:45.985702 IP node133.omniorb > 10.173.203.3.51437: Flags [.], seq 1:7301, ack 1657, win 501, length 7300
23:08:45.985748 IP node133.omniorb > 10.173.203.3.51437: Flags [P.], seq 7301:8193, ack 1657, win 501, length 892
23:08:45.987650 IP 10.173.203.3.51437 > node133.omniorb: Flags [.], ack 8193, win 16425, length 0
23:08:45.987721 IP node133.omniorb > 10.173.203.3.51437: Flags [P.], seq 8193:11564, ack 1657, win 501, length 3371
23:08:45.988744 IP 10.173.203.3.51437 > node133.omniorb: Flags [.], ack 11564, win 16312, length 0
23:08:46.094228 IP 10.173.203.3.51434 > node133.omniorb: Flags [.], ack 3096, win 16064, length 0
23:08:46.099161 IP 10.173.203.3.51435 > node133.omniorb: Flags [.], ack 10663, win 16061, length 0
23:08:46.139310 IP node133.omniorb > 10.173.203.3.51433: Flags [P.], seq 1:1617, ack 1711, win 501, length 1616
23:08:46.140368 IP 10.173.203.3.51433 > node133.omniorb: Flags [.], ack 1617, win 16425, length 0
23:08:46.360986 IP 10.173.203.3.49236 > node133.omniorb: Flags [P.], seq 4044692665:4044693240, ack 105778043, win 501, options [nop,nop,TS val 624640658 ecr 634146204], l
ength 57523:08:46.365599 IP node133.omniorb > 10.173.203.3.49236: Flags [P.], seq 1:946, ack 575, win 501, options [nop,nop,TS val 634183207 ecr 624640658], length 945
23:08:46.366642 IP 10.173.203.3.49236 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 624640664 ecr 634183207], length 0
23:08:47.803513 IP 10.173.203.3.44978 > node133.omniorb: Flags [P.], seq 1450619921:1450620511, ack 1575592717, win 501, options [nop,nop,TS val 316091562 ecr 634168647], 
length 59023:08:47.809193 IP node133.omniorb > 10.173.203.3.44978: Flags [P.], seq 1:946, ack 590, win 501, options [nop,nop,TS val 634184651 ecr 316091562], length 945
23:08:47.810145 IP 10.173.203.3.44978 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 316091569 ecr 634184651], length 0
23:08:48.886830 IP 10.173.203.3.2141 > node133.omniorb: Flags [P.], seq 3121947202:3121947789, ack 3837326208, win 64240, options [nop,nop,TS val 58927 ecr 634151746], len
gth 58723:08:48.889806 IP node133.omniorb > 10.173.203.3.2141: Flags [P.], seq 1:255, ack 587, win 501, options [nop,nop,TS val 634185732 ecr 58927], length 254
23:08:49.087964 IP 10.173.203.3.2141 > node133.omniorb: Flags [.], ack 255, win 64176, options [nop,nop,TS val 58929 ecr 634185732], length 0
23:08:55.614264 IP 10.173.203.3.51436 > node133.omniorb: Flags [F.], seq 1660, ack 9138, win 16425, length 0
23:08:55.614436 IP 10.173.203.3.51434 > node133.omniorb: Flags [F.], seq 4997, ack 3096, win 16064, length 0
23:08:55.614556 IP 10.173.203.3.51435 > node133.omniorb: Flags [F.], seq 3323, ack 10663, win 16061, length 0
23:08:55.614726 IP 10.173.203.3.51432 > node133.omniorb: Flags [F.], seq 5103, ack 18808, win 16425, length 0
23:08:55.614852 IP 10.173.203.3.51437 > node133.omniorb: Flags [F.], seq 1657, ack 11564, win 16312, length 0
23:08:55.615029 IP 10.173.203.3.51433 > node133.omniorb: Flags [F.], seq 1711, ack 1617, win 16425, length 0
23:08:55.615461 IP node133.omniorb > 10.173.203.3.51432: Flags [F.], seq 18808, ack 5104, win 501, length 0
23:08:55.615526 IP node133.omniorb > 10.173.203.3.51436: Flags [F.], seq 9138, ack 1661, win 501, length 0
23:08:55.615556 IP node133.omniorb > 10.173.203.3.51434: Flags [F.], seq 3096, ack 4998, win 501, length 0
23:08:55.615560 IP node133.omniorb > 10.173.203.3.51435: Flags [F.], seq 10663, ack 3324, win 501, length 0
23:08:55.616001 IP node133.omniorb > 10.173.203.3.51437: Flags [F.], seq 11564, ack 1658, win 501, length 0
23:08:55.616119 IP node133.omniorb > 10.173.203.3.51433: Flags [F.], seq 1617, ack 1712, win 501, length 0
23:08:55.616368 IP 10.173.203.3.51436 > node133.omniorb: Flags [.], ack 9139, win 16425, length 0
23:08:55.616407 IP 10.173.203.3.51432 > node133.omniorb: Flags [.], ack 18809, win 16425, length 0
23:08:55.616420 IP 10.173.203.3.51435 > node133.omniorb: Flags [.], ack 10664, win 16061, length 0
23:08:55.616613 IP 10.173.203.3.51434 > node133.omniorb: Flags [.], ack 3097, win 16064, length 0
23:08:55.617771 IP 10.173.203.3.51433 > node133.omniorb: Flags [.], ack 1618, win 16425, length 0
23:08:55.617795 IP 10.173.203.3.51437 > node133.omniorb: Flags [.], ack 11565, win 16312, length 0
23:08:58.697390 IP 10.173.203.3.51443 > node133.omniorb: Flags [S], seq 2236192238, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
23:08:58.697449 IP node133.omniorb > 10.173.203.3.51443: Flags [S.], seq 3851154897, ack 2236192239, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
23:08:58.698357 IP 10.173.203.3.51443 > node133.omniorb: Flags [.], ack 1, win 16425, length 0
23:08:58.699206 IP 10.173.203.3.51443 > node133.omniorb: Flags [P.], seq 1:588, ack 1, win 16425, length 587
23:08:58.699234 IP node133.omniorb > 10.173.203.3.51443: Flags [.], ack 588, win 501, length 0
23:08:58.704132 IP node133.omniorb > 10.173.203.3.51443: Flags [P.], seq 1:255, ack 588, win 501, length 254
23:08:58.906923 IP 10.173.203.3.51443 > node133.omniorb: Flags [.], ack 255, win 16361, length 0
23:09:03.319604 IP 10.173.203.3.50473 > node133.omniorb: Flags [P.], seq 1158852910:1158853488, ack 3883049406, win 256, length 578
23:09:03.323800 IP node133.omniorb > 10.173.203.3.50473: Flags [P.], seq 1:946, ack 578, win 501, length 945
23:09:03.518675 IP 10.173.203.3.50473 > node133.omniorb: Flags [.], ack 946, win 252, length 0
23:09:04.322173 IP 10.173.203.3.50473 > node133.omniorb: Flags [P.], seq 578:1157, ack 946, win 252, length 579
23:09:04.326634 IP node133.omniorb > 10.173.203.3.50473: Flags [P.], seq 946:1891, ack 1157, win 501, length 945
23:09:04.531648 IP 10.173.203.3.50473 > node133.omniorb: Flags [.], ack 1891, win 256, length 0
23:09:05.632652 IP 10.173.203.3.51443 > node133.omniorb: Flags [F.], seq 588, ack 255, win 16361, length 0
23:09:05.633648 IP node133.omniorb > 10.173.203.3.51443: Flags [F.], seq 255, ack 589, win 501, length 0
23:09:05.634225 IP 10.173.203.3.51443 > node133.omniorb: Flags [.], ack 256, win 16361, length 0
23:09:10.799713 IP 10.173.203.3.44978 > node133.omniorb: Flags [P.], seq 590:1180, ack 946, win 501, options [nop,nop,TS val 316114558 ecr 634184651], length 590
23:09:10.805458 IP node133.omniorb > 10.173.203.3.44978: Flags [P.], seq 946:1891, ack 1180, win 501, options [nop,nop,TS val 634207648 ecr 316114558], length 945
23:09:10.806433 IP 10.173.203.3.44978 > node133.omniorb: Flags [.], ack 1891, win 501, options [nop,nop,TS val 316114565 ecr 634207648], length 0
23:09:12.501943 IP 10.173.203.3.44852 > node133.omniorb: Flags [P.], seq 574:1148, ack 946, win 501, options [nop,nop,TS val 1312003489 ecr 634175335], length 574
23:09:12.505172 IP node133.omniorb > 10.173.203.3.44852: Flags [P.], seq 946:1891, ack 1148, win 501, options [nop,nop,TS val 634209347 ecr 1312003489], length 945
23:09:12.505755 IP 10.173.203.3.44852 > node133.omniorb: Flags [.], ack 1891, win 501, options [nop,nop,TS val 1312003493 ecr 634209347], length 0
23:09:14.079766 IP 10.173.203.3.57548 > node133.omniorb: Flags [P.], seq 168723808:168724384, ack 4158296230, win 501, options [nop,nop,TS val 1517431158 ecr 634171914], l
ength 57623:09:14.084258 IP node133.omniorb > 10.173.203.3.57548: Flags [P.], seq 1:946, ack 576, win 501, options [nop,nop,TS val 634210926 ecr 1517431158], length 945
23:09:14.084902 IP 10.173.203.3.57548 > node133.omniorb: Flags [.], ack 946, win 501, options [nop,nop,TS val 1517431163 ecr 634210926], length 0
^C
135 packets captured
135 packets received by filter
0 packets dropped by kernel


root@node132:~# tcpdump -i any port 8088 -A
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
23:17:26.646053 IP 10.173.203.3.53680 > node132.omniorb: Flags [P.], seq 2299743041:2299743635, ack 2621846109, win 511, length 594
E..z..@.<...
...
.........KA.F2]P.......GET /seeyon/getAJAXOnlineServlet?V=0.8346865680802558 HTTP/1.1
Host: 172.28.65.176:8088
Connection: keep-alive
RequestType: AJAX
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Accept: */*
Referer: http://172.28.65.176:8088/seeyon/main.do?method=main
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: login_locale=zh_CN; avatarImageUrl=7708614268446657770; loginPageURL=; JSESSIONID=7D6973301E47E5561B65209C70FD0B9B.ins132


23:17:26.649047 IP node132.omniorb > 10.173.203.3.53680: Flags [P.], seq 1:257, ack 594, win 501, length 256
E..(..@.@..(
...
........F2]..M.P.......HTTP/1.1 200 
Pragma: No-cache
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 60
Date: Wed, 24 Nov 2021 15:17:26 GMT

{I:'7708614268446657770',K:'.....................',N:15,C:0}
23:17:26.689328 IP 10.173.203.3.53680 > node132.omniorb: Flags [.], ack 257, win 510, length 0
E..(..@.<...
...
.........M..F3]P...ja........
23:17:33.096974 IP 10.173.203.3.54747 > node132.omniorb: Flags [.], ack 3943327423, win 501, options [nop,nop,TS val 2159114333 ecr 1707385082], length 0
E..4b.@.;.1S
...
........1...
f............
..x]e...
23:17:33.097004 IP node132.omniorb > 10.173.203.3.54747: Flags [.], ack 1, win 501, options [nop,nop,TS val 1707432062 ecr 2159067355], length 0
E..4..@.@...
...
........
f..1.............
e.X~....
23:17:34.560267 IP 10.173.203.3.44562 > node132.omniorb: Flags [P.], seq 2520376679:2520377686, ack 3449857484, win 501, options [nop,nop,TS val 3248801612 ecr 1707416531]
, length 1007E..#!.@.<.ml
...
........9.g........
......
...Le...POST /seeyon/ajax.do?method=ajaxAction&managerName=govdocLockManager&rnd=69913 HTTP/1.1
Host: 172.28.65.176:8088
Connection: keep-alive
Content-Length: 222
RequestType: AJAX
Origin: http://172.28.65.176:8088
User-Agent: Mozilla/5.0 (X11; Linux mips64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Accept: */*
Referer: http://172.28.65.176:8088/seeyon/govdoc/govdoc.do?method=summary&openFrom=listPending&isFromHome=true&affairId=-5760283864924206433&app=4&summaryId=-2696930423770
14579Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: login_locale=zh_CN; avatarImageUrl=5481572798286153992; loginPageURL=; JSESSIONID=77796CE5C6542DCA23A8BCB2F179320A.ins132

managerMethod=activeLockTime&arguments=%5B%7B%22formMasterId%22%3A%22-269693042377014579%22%2C%22processId%22%3A%228470682157104844465%22%2C%22loginPlatform%22%3A%22pc%22%
2C%22affairId%22%3A%22-5760283864924206433%22%7D%5D23:17:34.581609 IP node132.omniorb > 10.173.203.3.44562: Flags [P.], seq 1:207, ack 1007, win 501, options [nop,nop,TS val 1707433547 ecr 3248801612], length 206
E.... @.@._.
...
............9.V...........
e.^K...LHTTP/1.1 200 
Pragma: No-cache
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 4
Date: Wed, 24 Nov 2021 15:17:34 GMT

null
23:17:34.582665 IP 10.173.203.3.44562 > node132.omniorb: Flags [.], ack 207, win 501, options [nop,nop,TS val 3248801634 ecr 1707433547], length 0
E..4!.@.<.qZ
...
........9.V.........W.....
...be.^K
^C
8 packets captured
8 packets received by filter
0 packets dropped by kernel
潇凝子潇
关注
tcpdump安装与基本使用
IncludeBoris的博客
09-05 577
tcpdump安装与基本使用安装tcpdump基本使用常用原语原语组合方式参数案例场景 安装tcpdump yum install tcpdump 基本使用 常用原语 类型：host、net、port、ip proto、protochain等 传输方向：src、dst、dst or src、dst and src等 协议：ip、arp、rarp、tcp、udp、icmp、http等 顺序：协议 ...
tcpdump安装
03-23
tcpdump安装,值得下载收藏，讲解的非常详细，基本做到傻瓜化
tcpdump安装教程
weixin_33834910的博客
11-16 874
最近迷上了linux系统运维，前端的东西应该会很少碰了，自己肯钻研也许什么都可以，培训机构出来的没有时间的沉淀，所以，之后的我决定走向运维这条路。以及linux开发这方面，喜欢linux的同学也可以关注我的博客，一起学习、一起进步。 linux运维，据说重要的东西，就是这个tcpdump了，以前在w7上自己装了一个burp suite抓包用的，但是在linux上我却没有下载成功，也不知道为什么，...
LINUX 抓包工具Tcpdump下载安装(非常详细)，从零基础入门到精通，看完这一篇就够了
最新发布
2401_84215240的博客
07-03 1102
百度网盘地址：提取码：pyck由于tcpdump依赖libpcap因此两个安装包都需要下载。
网络分析工具：tcpdump 安装与使用
Grocery
04-23 1586
tcpdump是一个强大的命令行网络分析工具，广泛用于捕获网络上传输的数据包。是分析网络流量情况，排查网络问题、分析协议的交互以及网络安全监控的常用工具。
ubuntu下安装tcpdump
chen_jianjian的专栏
07-19 1万+
一些ubuntu系统未安装tcpdump，由于需要抓包，故需要安装tcpdump，首先尝试使用： apt-get install tcpdump 无法安装，故尝试使用deb包安装，首先去https://pkgs.org/download/tcpdump网站下载自己对应系统的deb包，本机使用的是tcpdump_4.9.2-0ubuntu0.16.04.1_amd64.deb，在ubuntu...
tcpdump离线安装
03-03
7. **安装完成**：安装完成后，你可以在系统中使用TCPDump命令了。 在标签“tcpdump 测试工具 网络”中，我们了解到TCPDump是一个测试工具，常用于网络相关的任务。它可以帮助我们： - **监控网络流量**：通过捕获...
tcpdump安装、依赖包
06-17
2. **过滤表达式**: 可以使用过滤表达式，例如`tcpdump port 80`将只显示与端口80相关的数据包。 3. **保存输出**: 通过`tcpdump -w file.pcap`可以将捕获的数据包保存为pcap文件，方便后期分析。 4. **协议解析**: ...
linux离线安装tcpdump
11-02
里面附有安装文档(亲测可用)
tcpdump 安装+测试（AFL）
sinat_41213285的博客
09-24 3644
安装libpcap 1.安装tcpdump需要先安装libpcap，先下载libpcap包Index of /release 2.解压文件 tar zxvf libpcap... 3.切换到包目录下 cd libpcap... 4.安装依赖包 sudo apt-get install flex sudo apt-get install bison 安装过程中我遇到 错误，提示apt --fix-broken install，执行sudo apt --fix-..
tcpdump-4.9.3.tar.gz
11-28
比wireshark方便，直接在linux系统里就能实现抓包，操作方便简洁。希望对你有用，亲测有效。
tcpdump 源代码安装包
10-14
抓包软件 example: tcpdump -i eth0 -s 0 -w abc.pcap
ubuntu下安装Tcpdump并使用
热门推荐
fantasy
02-26 1万+
因为要在linux测试一个http协议伪装的需要，使用到了linux下的wireshark抓包软件--Tcpdump。具体的安装过程如下：  1.网上下载获得libpcap和tcpdump      http://www.tcpdump.org/  2.安装c编译所需包：apt-get install build-essential  3.安装 libpcap的前置：apt-get i
TCPDump 使用教程
qq_41661843的博客
02-29 1660
每次服务器网络不通的时候，总会听到一个声音，你去抓包啊，那这里就来介绍下TCPDump，一款强大的网络分析工具，可以捕获网络上的数据包，并进行分析。这款工具在网络管理员和安全专家中非常受欢迎。
tcpdump安装实录
SnowXu01的博客
03-12 882
1. 安装 libpcap wget -c http://www.tcpdump.org/release/libpcap-1.9.1.tar.gz tar -zxvf libpcap-1.9.1.tar.gz cd libpcap-1.9.1 ./configure make && make install 1.1 安装小插曲 在执行./configure 的时候会遇到一个报错报...
tcpdump命令
fang.lovest.yang的博客
03-24 1万+
Centos7 安装 yum install -y tcpdump
tcpdum安装使用说明
qq_19596293的博客
07-13 444
一.tcpdum说明 tcpdum是一款开源的网络抓包工具，主要用于嵌入式设备上的网络数据跟踪，当用tcpdum抓到数据包后需要拿到win上面用wireshark来进行解析并分析 其可在我网盘下载： https://pan.baidu.com/s/1LQjzDKyOi7mkbgs0qinqQA 提取码: fpt6 二.tcpdum下载 1…官网下载： http://www.tcpdump.org/ 2.百度网盘下载 https://pan.baidu.com/s/1GHZb05djIPR3-A7MGMc
Linux下Tcpdump命令的安装与使用详解
5. 执行`make`来编译源代码，然后`sudo make install`将tcpdump安装到系统的默认位置（通常是`sbin`和`man`目录）。 安装完成后，使用`#tcpdump`命令即可启动Tcpdump。命令参数可以用来定义过滤规则，比如只抓取...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

潇凝子潇

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值