瀏覽代碼

added new 'tcpdump' one-liner

- signed-off-by: trimstray <trimstray@gmail.com>
pull/110/head
trimstray 5 年之前
父節點
當前提交
c6b6d58f22
共有 1 個檔案被更改,包括 6 行新增0 行删除
  1. +6
    -0
      README.md

+ 6
- 0
README.md 查看文件

@@ -2592,6 +2592,12 @@ tcpdump -ei eth0 -w /tmp/capture-%H.pcap -G 3600 -C 200
tcpdump -ei enp0s25 -nnn -t -c 200 | cut -f 1,2,3,4 -d '.' | sort | uniq -c | sort -nr | head -n 20
```

###### Excludes any RFC 1918 private address

```bash
tcpdump -nei eth0 'not (src net (10 or 172.16/12 or 192.168/16) and dst net (10 or 172.16/12 or 192.168/16))'
```

___

##### Tool: [tcpick](http://tcpick.sourceforge.net/)


Loading…
取消
儲存