使用tcpdump嗅探http请求头

使用tcpdump嗅探http请求头  

2012-10-11 10:53:59|  分类： rhel_apache |  标签： |字号大中小 

抓取到目标主机example.com的http header头信息
tcpdump -i eth0 -s 1024 -l -A dst example.com
说明:
-s 1024 抓取每个包的头1024 bytes (相对于默认的68Bytes)
-l 输出模式line buffer

GET /somepage.php HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.13) Gecko/20101206 Ubuntu/10.04 (lucid) Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: uv=556903; __utma=74760.8756.122723.125824.126018.66; __utma=1.82217.512009.75006.095989.35; __utmz=1.0930.27.8.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=example; PHPSESSIONID=5C26; DWRSESSIONID=G9E5$Y4wdRi; __utmb=1.3.10.129; __utmc=1
Cache-Control: max-age=0