ifconfig -a
ifconfig eth1 down
ifconfig eth1 up
tcpdump -i eth1 host 172.16.11.4 -w ***.pcap
我要抓em1 ipip qinq source_ip=0x0a7f292f http post报文 保存到domain.com 实时显示抓了多少包
tcpdump -iem1 '(ip[9:1]=4 and ip[46:2]=0x8100 and ip[64:4]=0x0a7f292f and ip[104:2]=0x504f)' -w domain.pcap -vv