This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
утилиты_для_тестирования_сети [2020/09/10 10:25] val [ARP ping] |
утилиты_для_тестирования_сети [2022/03/01 15:47] (current) val [tcpdump] |
||
---|---|---|---|
Line 33: | Line 33: | ||
tcpdump -nei em0 ether src 00:0c:29:c5:07:8f | tcpdump -nei em0 ether src 00:0c:29:c5:07:8f | ||
- | tcpdump -w file.dump -s0 "port 21 and host 172.16.1.X" | + | tcpdump -w file.pcap -s0 "port 21 and host 172.16.1.X" |
- | tcpdump -n -r file.dump -s0 -A | + | tcpdump -n -r file.pcap -s0 -A |
tcpdump -n ip and 'ip[8]=127' # ttl | tcpdump -n ip and 'ip[8]=127' # ttl | ||
+ | |||
+ | #https://unix.stackexchange.com/questions/466584/tcpdump-tshark-view-only-outgoing-tcp-connections-requests | ||
+ | server# tcpdump -i any -nn src host 192.168.X.10 and "tcp[tcpflags] == tcp-syn" | ||
</code> | </code> | ||