将设为首页浏览此站
开启辅助访问 天气与日历 收藏本站联系我们切换到窄版

易陆发现论坛

 找回密码
 开始注册
易陆发现论坛»操作系统区 › 操作系统区 › 应用网络 › Linux操作系统虚拟网络 › tcpdump 抓包
查看: 6225|回复: 7
收起左侧

tcpdump 抓包

[复制链接]
admin
发表于 2018-12-12 20:02:59 | 显示全部楼层 |阅读模式

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要 登录 才可以下载或查看，没有帐号？开始注册

x
sudo tcpdump -i bond1.104 -v -vv -t   2 c, A2 U3 C/ M3 g

/ M, Q  f+ U/ }6 ?( J! U; [5 y6 r+ E1 p+ }
sudo tcpdump -i ens1f0 -vv -w /tmp/ens1f0.cap     抓包写如文件中: h$ C( C1 u  P$ U5 z
点评回复

使用道具 举报

admin
 楼主| 发表于 2018-12-13 15:01:49 | 显示全部楼层
sudo tcpdump -i bond1.104 -vvv -t
- |7 Y8 n! m% h: Q; ?8 ktcpdump: WARNING: bond1.104: no IPv4 address assigned" s% M8 R) k0 ?
tcpdump: listening on bond1.104, link-type EN10MB (Ethernet), capture size 65535 bytes0 P+ a8 K  t+ Q
IP (tos 0x0, ttl 64, id 18437, offset 0, flags [DF], proto ICMP (1), length 84)
* Z* R; @0 x& d9 x; u" L' r2 O/ T    CD--6 > 10.64.35.100: ICMP echo request, id 7024, seq 437, length 64
2 C  v  `7 |! \( p( v+ f" X2 \0 B2 _IP (tos 0x0, ttl 64, id 18437, offset 0, flags [DF], proto ICMP (1), length 84)7 |# h- O9 o/ {% F* _
    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 437, length 64
! }% S8 f- E1 n( v# H! c" {  m+ S  iIP (tos 0x0, ttl 64, id 18696, offset 0, flags [DF], proto ICMP (1), length 84)# A* P' ?9 H/ l, \) x
    CD--6 > 10.4.5.100: ICMP echo request, id 7024, seq 438, length 64
$ m) _6 t, f+ gIP (tos 0x0, ttl 64, id 18696, offset 0, flags [DF], proto ICMP (1), length 84)! ^3 L8 p5 X. k  {; i
    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 438, length 64: A: j) F) V& q: Z
IP (tos 0x0, ttl 64, id 18958, offset 0, flags [DF], proto ICMP (1), length 84)4 _3 D# [/ }% w7 Y  m7 N, i+ v! ]
    CD--6 > 10.4.5.100: ICMP echo request, id 7024, seq 439, length 64' ~! h  n. p; E3 y  d& I
IP (tos 0x0, ttl 64, id 18958, offset 0, flags [DF], proto ICMP (1), length 84)
3 F% z" m& l( G1 r4 Q- P+ p    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 439, length 642 ~! r; Q) r" ^' a
IP (tos 0x0, ttl 64, id 19338, offset 0, flags [DF], proto ICMP (1), length 84)
) \3 X3 t" N( z- d' `! t3 r    CD--6 > 10.64.35.100: ICMP echo request, id 7024, seq 440, length 649 k0 E) ~  H# s% Q$ v" _. W
IP (tos 0x0, ttl 64, id 19338, offset 0, flags [DF], proto ICMP (1), length 84)
9 ]% m% ]* _/ e$ Q" l8 i    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 440, length 64
点评回复 支持 反对

使用道具 举报

admin01
发表于 2018-12-14 18:13:01 | 显示全部楼层
sudo tcpdump -i bond1 -vv -e icmp  抓取ICMP包。
点评回复 支持 反对

使用道具 举报

1320503165
发表于 2018-12-14 18:15:28 | 显示全部楼层
sudo  tcpdump -i vnet7 -vv -e icmp   抓取vnet7子接口地址
点评回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:20:40 | 显示全部楼层
sudo tcpdump -i bond1 -vv icmp  
! @1 u1 C' b  Mtcpdump: WARNING: bond1: no IPv4 address assigned) W2 S+ c8 u5 p- j1 N7 s7 {2 x
tcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes& M$ M# t' I1 ^& u; N/ L7 W9 D
16:16:57.141135 IP (tos 0x0, ttl 62, id 52282, offset 0, flags [DF], proto ICMP (1), length 84)+ Y9 f' b8 f. Q5 H  j
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1157, length 644 n/ V: [  z) d) w, l
16:16:58.141200 IP (tos 0x0, ttl 62, id 52414, offset 0, flags [DF], proto ICMP (1), length 84)
% j+ l6 A  D% h$ P    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1158, length 64
; Z/ o  W/ Z2 S9 P8 @3 |16:16:59.141214 IP (tos 0x0, ttl 62, id 53243, offset 0, flags [DF], proto ICMP (1), length 84)
; r$ [, p/ R6 d  M' k  |    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1159, length 64
  M4 [* H4 n9 [8 j* Y16:17:00.141085 IP (tos 0x0, ttl 62, id 53622, offset 0, flags [DF], proto ICMP (1), length 84)
% B: c/ I7 ]# d- R6 T, {. N    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1160, length 64
点评回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:22:16 | 显示全部楼层
sudo tcpdump -i bond1 -vv -e icmp  
/ f# R, i+ w$ E  V+ d4 J+ wtcpdump: WARNING: bond1: no IPv4 address assigned6 p( j9 x. M0 x
tcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes1 A9 S& Z% V( b
16:21:23.140673 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 47732, offset 0, flags [DF], proto ICMP (1), length 84)3 C5 q# \/ @& T" W4 D
! z2 C3 i1 j& Z# j1 y
- F7 w/ D: @( m; k
8 Y4 o4 A0 ~( h8 d7 {; h, P: ^
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1423, length 64  i; O) f) r$ W: b  e  q) I9 T0 \/ e
16:21:24.140663 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 47779, offset 0, flags [DF], proto ICMP (1), length 84)2 v) }: ^9 u4 ], M2 g! q
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1424, length 64
5 m/ h. O1 ]/ A" R, {" G: K% ~16:21:25.140651 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 48122, offset 0, flags [DF], proto ICMP (1), length 84)
) _4 u6 B. J% h' f; N( Y    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1425, length 64/ [) X- k: [. O" }
16:21:26.140629 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 48938, offset 0, flags [DF], proto ICMP (1), length 84)
/ W5 Z/ L: J" l! h    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1426, length 64
6 F6 x- o: a" S( J. E16:21:27.140613 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 49679, offset 0, flags [DF], proto ICMP (1), length 84)
8 D; Q$ s, Y% L" d    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1427, length 644 q4 Q, T$ O! D! X2 S2 c* M
16:21:28.140616 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 50377, offset 0, flags [DF], proto ICMP (1), length 84)
/ K$ q; [: p3 }    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1428, length 640 l( \9 {. {6 t4 l
16:21:29.140633 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 50603, offset 0, flags [DF], proto ICMP (1), length 84)
: K8 @( i6 P6 Q    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1429, length 64% d. O% x. \3 w( }
16:21:30.140614 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 51285, offset 0, flags [DF], proto ICMP (1), length 84)
点评回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:22:34 | 显示全部楼层
sudo tcpdump -i bond1 -vvv -e icmp  0 G7 t$ W; R( T3 O( P
tcpdump: WARNING: bond1: no IPv4 address assigned
8 N9 s" p% B5 d6 Y# a' |tcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes
3 ~. \1 r4 m7 C5 p16:22:01.140593 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 1576, offset 0, flags [DF], proto ICMP (1), length 84)% r! ?" ?+ ]5 N, P7 l5 S
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1461, length 646 ^% h! S% |3 a1 d
16:22:02.140601 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 1841, offset 0, flags [DF], proto ICMP (1), length 84)
  V! M8 K! B# h# }. W2 G    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1462, length 64) h8 `( q9 Y; B+ \
16:22:03.140606 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 2688, offset 0, flags [DF], proto ICMP (1), length 84). ]/ C* }" P7 e
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1463, length 64
2 D2 Z7 l6 b2 n; Z* u* T. F$ G16:22:04.140584 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3273, offset 0, flags [DF], proto ICMP (1), length 84)
; ]2 I% j# d$ g    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1464, length 64
! S9 `8 x: E$ q5 E16:22:05.140544 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3297, offset 0, flags [DF], proto ICMP (1), length 84)
, i$ Z) z1 [% I    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1465, length 64
- m& o! g  }/ I, E, R2 V' w16:22:06.140605 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3547, offset 0, flags [DF], proto ICMP (1), length 84)
点评回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 18:49:19 | 显示全部楼层
sudo tcpdump  -i  tapa72cc152-ce -w 43.240.248.70.cap
点评回复 支持 反对

使用道具 举报

返回列表 发新帖 回复
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 开始注册

本版积分规则

关闭

站长推荐上一条 /4 下一条

如有购买积分卡请联系497906712

QQ|返回首页|Archiver|手机版|小黑屋|易陆发现 点击这里给我发消息

GMT+8, 2023-2-1 01:07 , Processed in 0.054355 second(s), 21 queries .

Powered by LR.LINUX.cloud bbs168x X3.2 Licensed

© 2012-2022 Comsenz Inc.

快速回复 返回顶部 返回列表