This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
утилиты_для_тестирования_сети [2020/09/10 10:25] val [ARP ping] |
утилиты_для_тестирования_сети [2025/05/18 16:50] (current) val [tcpdump] |
||
---|---|---|---|
Line 25: | Line 25: | ||
===== tcpdump ===== | ===== tcpdump ===== | ||
<code> | <code> | ||
- | linux# tcpdump -i any -n | + | linux# stdbuf -o0 tcpdump -niany | tee /tmp/log.dmp |
tcpdump -vn | tcpdump -vn | ||
Line 33: | Line 33: | ||
tcpdump -nei em0 ether src 00:0c:29:c5:07:8f | tcpdump -nei em0 ether src 00:0c:29:c5:07:8f | ||
- | tcpdump -w file.dump -s0 "port 21 and host 172.16.1.X" | + | tcpdump -w file.pcap -s0 "port 21 and host 172.16.1.X" |
- | tcpdump -n -r file.dump -s0 -A | + | tcpdump -n -r file.pcap -s0 -A |
tcpdump -n ip and 'ip[8]=127' # ttl | tcpdump -n ip and 'ip[8]=127' # ttl | ||
+ | |||
+ | #https://unix.stackexchange.com/questions/466584/tcpdump-tshark-view-only-outgoing-tcp-connections-requests | ||
+ | server# tcpdump -i any -nn src host 192.168.X.10 and "tcp[tcpflags] == tcp-syn" | ||
</code> | </code> | ||