根據(jù)ip net host ?port 過濾數(shù)據(jù)
tcpdump dst host 10.0.110.1
tcpdump src net ?10.0.20.0/24
tcpdump port 22
過濾協(xié)議
tcp ip host 10.0.110.1
過濾網(wǎng)絡(luò)接口數(shù)據(jù)
tcpdump -i eth0
多個條件同時過濾
tcpdump src 10.0.110.1 and dst 10.4.4.1
將數(shù)據(jù)寫入文件
tcpdump ?-w filename
直接顯示數(shù)據(jù)
tcpdump-x
監(jiān)聽telnet 服務(wù)
tcpdump ?tcp port ?23