tcpdump抓包

valisweet

已于 2024-11-14 23:10:04 修改

阅读量79

点赞数

分类专栏： Linux 文章标签： 1024程序员节

于 2023-10-24 23:46:14 首次发布

本文链接：https://blog.youkuaiyun.com/javahuazaili/article/details/134024654

版权

Linux 专栏收录该内容

52 篇文章

订阅专栏

tcpdump -i eth0 host onefans.com.cn and tcp port 443 or tcp port 80 -nn -s 0 -w catch.cap

tcpdump -A 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) -((tcp[12]&0xf0)>>2)) != 0)' -nn -s 0 -vvvv -w old.cap

tcpdump -i eth0 host ss.com.cn and tcp port 443 or tcp port 80 -nn -s 0 -vvvv new.cap

tcpdump -i eth0 host cat.com.cn and tcp port 443 or tcp port 80 -nn -s 0 -vvvv new.cap

function e() { set -eu; ns=${2-"default"}; pod=`kubectl -n $ns describe pod $1| grep -A10 "^Containers:" grep -Eo 'docker://.*$' head -n 1 | sed 's/docker:\/\/(.*\)$/\1/'`; pid=`docker inspect -f {{.State.Pid}} $pod`; echo "entering pod netns for $ns/$1"; cmd="nsenter -n --target $pid"; echo $cmd; $cmd; }

function e() {
set -eu
ns=${2-"default"}
pod=`kubectl -n $ns describe pod $1 | grep -A10 "^Containers:" | grep -Eo 'docker://.*$' | head -n 1 | sed 's/docker:\/\/$.*$$/\1/'`
pid=`docker inspect -f {{.State.Pid}} $pod`
echo "entering pod netns for $ns/$1"
cmd="nsenter -n --target $pid"
echo $cmd
$cmd
}