将设为首页浏览此站
收藏本站联系我们相册切换到窄版

易陆发现互联网技术论坛

 找回密码
 开始注册
易陆发现互联网技术论坛»首页 › 操作系统区 › 应用网络 › Linux操作系统虚拟网络 › tcpdump 抓包
返回列表 发新帖
查看: 7658|回复: 7
收起左侧

tcpdump 抓包

[复制链接]
admin
发表于 2018-12-12 20:02:59 | 显示全部楼层 |阅读模式

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要 登录 才可以下载或查看，没有账号？开始注册

x
sudo tcpdump -i bond1.104 -v -vv -t   8 o9 |1 \/ x* G1 L
) x! j* Q/ {# f' E& i

: j8 m. G, n) O4 I! P( e9 tsudo tcpdump -i ens1f0 -vv -w /tmp/ens1f0.cap     抓包写如文件中- \% E' T& B. T4 ~
回复

使用道具 举报

admin
 楼主| 发表于 2018-12-13 15:01:49 | 显示全部楼层
sudo tcpdump -i bond1.104 -vvv -t
6 `) ?& c; v- B  O5 M+ G0 X$ W# Stcpdump: WARNING: bond1.104: no IPv4 address assigned: i& ]' U! t( A: b5 A
tcpdump: listening on bond1.104, link-type EN10MB (Ethernet), capture size 65535 bytes
( r0 [5 k( \1 kIP (tos 0x0, ttl 64, id 18437, offset 0, flags [DF], proto ICMP (1), length 84)
- D* }+ u/ U5 i/ n    CD--6 > 10.64.35.100: ICMP echo request, id 7024, seq 437, length 641 b* E% j6 n: n$ R* y6 p- q
IP (tos 0x0, ttl 64, id 18437, offset 0, flags [DF], proto ICMP (1), length 84)7 c, ~- j  }4 o4 J6 _8 j. W
    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 437, length 64
9 y" N# U* Q* ]( F4 \* w( MIP (tos 0x0, ttl 64, id 18696, offset 0, flags [DF], proto ICMP (1), length 84)5 T: |* l( C0 Q; ^9 X# p
    CD--6 > 10.4.5.100: ICMP echo request, id 7024, seq 438, length 64
/ i, Y$ V7 U, H* c. P% gIP (tos 0x0, ttl 64, id 18696, offset 0, flags [DF], proto ICMP (1), length 84)! `$ ~  m+ ~1 X- _0 j
    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 438, length 64: P+ ~  m; P) J9 O
IP (tos 0x0, ttl 64, id 18958, offset 0, flags [DF], proto ICMP (1), length 84): y; F- f4 X  D
    CD--6 > 10.4.5.100: ICMP echo request, id 7024, seq 439, length 64  b# e5 `8 M: t: }& |/ s: m
IP (tos 0x0, ttl 64, id 18958, offset 0, flags [DF], proto ICMP (1), length 84)
1 {, H9 O1 v/ F    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 439, length 64* F6 ~+ |3 h1 B- b& [" G. o
IP (tos 0x0, ttl 64, id 19338, offset 0, flags [DF], proto ICMP (1), length 84)
2 W& J. N5 N6 ]" d; r    CD--6 > 10.64.35.100: ICMP echo request, id 7024, seq 440, length 64
: c8 S- I! q4 D3 y; EIP (tos 0x0, ttl 64, id 19338, offset 0, flags [DF], proto ICMP (1), length 84)
3 C2 ]1 g& e7 m9 v2 P    10.4.5.100 > CD--6: ICMP echo reply, id 7024, seq 440, length 64
回复 支持 反对

使用道具 举报

admin01
发表于 2018-12-14 18:13:01 | 显示全部楼层
sudo tcpdump -i bond1 -vv -e icmp  抓取ICMP包。
回复 支持 反对

使用道具 举报

1320503165
发表于 2018-12-14 18:15:28 | 显示全部楼层
sudo  tcpdump -i vnet7 -vv -e icmp   抓取vnet7子接口地址
回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:20:40 | 显示全部楼层
sudo tcpdump -i bond1 -vv icmp  
2 i0 W$ q/ W9 u; l$ {6 ?tcpdump: WARNING: bond1: no IPv4 address assigned
$ Q  Y% ?) P$ W4 J: ?6 Itcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes, P+ G3 O- u: ~3 P$ [- M
16:16:57.141135 IP (tos 0x0, ttl 62, id 52282, offset 0, flags [DF], proto ICMP (1), length 84)
& e; i  [  Y2 S, o6 }0 a, l" x    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1157, length 64
. {3 G7 O% Y  v# i; P. t5 c16:16:58.141200 IP (tos 0x0, ttl 62, id 52414, offset 0, flags [DF], proto ICMP (1), length 84)
/ W7 O) P% i9 K    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1158, length 64
7 D- U! \8 ?- C0 e' g) Z16:16:59.141214 IP (tos 0x0, ttl 62, id 53243, offset 0, flags [DF], proto ICMP (1), length 84)6 H/ T7 q& S" B6 E+ j1 R( \/ t: o
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1159, length 64
6 n% s: s' m4 Y% E16:17:00.141085 IP (tos 0x0, ttl 62, id 53622, offset 0, flags [DF], proto ICMP (1), length 84)
7 @$ r: S6 M3 |8 W# a$ ?    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1160, length 64
回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:22:16 | 显示全部楼层
sudo tcpdump -i bond1 -vv -e icmp  % X; X7 q% F5 p, E
tcpdump: WARNING: bond1: no IPv4 address assigned6 \( V/ N% M$ {3 ~' @; q# V
tcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes
7 N* B4 t; w; I- @$ r16:21:23.140673 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 47732, offset 0, flags [DF], proto ICMP (1), length 84)+ V- G  j9 s/ E) }" v
; q8 E/ y! P" l4 A2 [, w+ E" N
$ P+ W* s# e- V' ?
( V; U8 p$ i" ?3 N9 R
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1423, length 64
9 b4 s4 k9 E- b! K16:21:24.140663 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 47779, offset 0, flags [DF], proto ICMP (1), length 84)
9 |! t/ A1 I4 z2 \/ a    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1424, length 642 [  P# A6 N- p- j& t) E
16:21:25.140651 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 48122, offset 0, flags [DF], proto ICMP (1), length 84)' I% p8 H: K% Q$ X+ Q, Q* z) `
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1425, length 64
4 _, O; \+ R! \: A+ R16:21:26.140629 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 48938, offset 0, flags [DF], proto ICMP (1), length 84)
# c8 m6 q, X1 d( z* S2 e% {* ]    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1426, length 644 k$ f% ?, H: k: i9 T8 h# l
16:21:27.140613 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 49679, offset 0, flags [DF], proto ICMP (1), length 84). O9 _% }" ]! i; c3 X
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1427, length 64
+ S  g, y8 i; \4 ^16:21:28.140616 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 50377, offset 0, flags [DF], proto ICMP (1), length 84)
1 ~# L' o+ _. d( D    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1428, length 64- p+ y1 U4 j3 A4 W7 P
16:21:29.140633 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 50603, offset 0, flags [DF], proto ICMP (1), length 84)& S( [6 z. L+ ~/ n
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1429, length 64) d5 ]3 {8 C4 _; P/ {6 W. F: ~
16:21:30.140614 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 51285, offset 0, flags [DF], proto ICMP (1), length 84)
回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 16:22:34 | 显示全部楼层
sudo tcpdump -i bond1 -vvv -e icmp  & f  ]' _' ^/ u2 g$ v
tcpdump: WARNING: bond1: no IPv4 address assigned7 N7 l% D* O4 l4 P1 X
tcpdump: listening on bond1, link-type EN10MB (Ethernet), capture size 65535 bytes
+ V1 _" O$ G' f; Y16:22:01.140593 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 1576, offset 0, flags [DF], proto ICMP (1), length 84)+ G( v3 o8 u: ]* y
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1461, length 64' v3 c: J- x( e) {' T# ]
16:22:02.140601 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 1841, offset 0, flags [DF], proto ICMP (1), length 84)
# d3 A& W* p2 p, |    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1462, length 645 }' U* ?6 O3 U# N* n# Q
16:22:03.140606 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 2688, offset 0, flags [DF], proto ICMP (1), length 84)
1 J) Z& D2 y) c- ^4 k# e    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1463, length 64
- c& p8 l$ S' X  e$ |0 a7 }7 J16:22:04.140584 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3273, offset 0, flags [DF], proto ICMP (1), length 84)' z  P% L) j: M8 d' ?$ ]
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1464, length 64* J# B& ?8 n2 r$ \
16:22:05.140544 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3297, offset 0, flags [DF], proto ICMP (1), length 84)! W+ N$ l! ?. L
    10.32.69.236 > 43.240.248.70: ICMP echo request, id 16362, seq 1465, length 646 W/ t6 D2 S1 \* V  B7 @3 Z5 ]
16:22:06.140605 00:0e:1e:b3:98:20 (oui Unknown) > 00:00:5e:00:01:65 (oui Unknown), ethertype 802.1Q (0x8100), length 102: vlan 205, p 0, ethertype IPv4, (tos 0x0, ttl 62, id 3547, offset 0, flags [DF], proto ICMP (1), length 84)
回复 支持 反对

使用道具 举报

admin
 楼主| 发表于 2018-12-24 18:49:19 | 显示全部楼层
sudo tcpdump  -i  tapa72cc152-ce -w 43.240.248.70.cap
回复 支持 反对

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 开始注册

本版积分规则

关闭

站长推荐上一条 /4 下一条

北京云银创陇科技有限公司以云计算运维，代码开发

QQ|返回首页|Archiver|小黑屋|易陆发现技术论坛 点击这里给我发消息

GMT+8, 2026-4-7 08:25 , Processed in 0.048323 second(s), 21 queries .

Powered by Discuz! X3.4 Licensed

© 2012-2025 Discuz! Team.

快速回复 返回顶部 返回列表