tcpdump基本用法一例(备忘)--OpenBSD4.2

2008-06-22 22:36

抓取同时符合以下条件的数据包:

抓取5个 rl0(大写为RL0)网络端口的数据包;
主机192.168.252.89接收/发送的数据包;
tcp目的端口是80的数据包;

# tcpdump -n -i rl0 -c 5 host 192.168.252.89 and tcp dst port 80
tcpdump: listening on rl0, link-type EN10MB
22:30:58.661566 192.168.252.89.2923 > 218.60.24.18.80: . ack 9687957 win 65535 (DF)
22:30:58.661691 192.168.252.89.2923 > 218.60.24.18.80: . ack 1461 win 65535 (DF)
22:30:58.903092 192.168.252.89.2923 > 218.60.24.18.80: . ack 4381 win 65535 (DF)
22:30:58.903259 192.168.252.89.2923 > 218.60.24.18.80: . ack 5841 win 65535 (DF)
22:30:59.041248 192.168.252.89.2923 > 218.60.24.18.80: . ack 7301 win 65535 (DF)