tcpdump 抓包记录

admin

# tcpdump -i any port 80 -A -nnn -vvv
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes
18:50:10.840226 IP (tos 0x0, ttl 64, id 59693, offset 0, flags [DF], proto TCP (6), length 40)
7 E8 Z6 C1 l! \5 t2 C( d" o    38.121.62.70.80 > 123.115.196.239.39061: Flags [F.], cksum 0xd632 (correct), seq 2284155649, ack 276991629, win 355, length 0
E..(.-@.@...&y>F{s...P...%s.....P..c.2..
18:50:11.019545 IP (tos 0x0, ttl 64, id 32324, offset 0, flags [DF], proto TCP (6), length 40)
2 Z6 u: b3 p/ j- b6 w    38.121.62.70.80 > 123.115.196.239.39094: Flags [F.], cksum 0x705a (correct), seq 988967147, ack 1956175783, win 307, length 0
# B- R( S- w6 {9 q1 jE..(~D@.@..j&y>F{s...P..:.p.t...P..3pZ..
18:50:11.028472 IP (tos 0x0, ttl 115, id 33858, offset 0, flags [DF], proto TCP (6), length 40)
    123.115.196.239.39061 > 38.121.62.70.80: Flags [.], cksum 0xd692 (correct), seq 1, ack 1, win 259, length 0
E..(.B@.s..k{s..&y>F...P.....%s.P.............
2 s6 O: S6 E: E5 D18:50:11.204300 IP (tos 0x0, ttl 115, id 33925, offset 0, flags [DF], proto TCP (6), length 40)
    123.115.196.239.39094 > 38.121.62.70.80: Flags [.], cksum 0x708c (correct), seq 1, ack 1, win 257, length 0
6 ?7 _0 U; S+ wE..(..@.s..({s..&y>F...Pt...:.p.P...p.........
( o2 B2 \) L1 J% o/ i  c18:50:11.598242 IP (tos 0x0, ttl 64, id 45756, offset 0, flags [DF], proto TCP (6), length 40)
    38.121.62.70.80 > 123.115.196.239.39093: Flags [F.], cksum 0x8762 (correct), seq 205104619, ack 4147396541, win 307, length 0
  y2 ~! S! V' X# _E..(..@.@...&y>F{s...P...9...4?.P..3.b..
' \8 n% z  o' Z6 }; ~18:50:11.783015 IP (tos 0x0, ttl 115, id 34573, offset 0, flags [DF], proto TCP (6), length 40)
" L3 g- p/ L; _, r$ ^/ P/ ], G    123.115.196.239.39093 > 38.121.62.70.80: Flags [.], cksum 0x8795 (correct), seq 1, ack 1, win 256, length 0
@.s...{s..&y>F...P.4?..9..P.............
^C
$ X' X3 v( E# e6 packets captured
* o, F& t. j4 ?6 packets received by filter
1 T" t& S/ i6 M5 z- X0 packets dropped by kernel