我一般用 tcpdump 有两种用法,一个是存盘,拿 wireshark 看,那么的话,就这么写
tcpdump -s 0 -i any -p udp and src 10.170.7.40 -w `date +%s`.pcap
或者实时打印到屏幕,就参考这里,http://www.askbjoernhansen.com…,这么写
I always forget the parameters for this and have to look them up in the …… 阅读全文
linux tcpdump
Reply