Linux under Grab Bag

#yum install-y tcpdump//Installation tcpdump
#tcpdump-nn//-nn The first n is displayed numerically, and if you do not add N, the host name is displayed, plus two n will display the IP address and port number in a digital way

#tcpdump-nn-i ens33//Specify ENS33 NIC

DDoS attack UDP flood is a flood attack of UDP, DDoS maximum attack amount of more than 300 g
#tcpdump-NN Port 80//ports specified
#tcpdump-nn not port and host 192.168.0.100//Do not port 22 and ip192.168.0.100
#tcpdump-nn-i ens33-c 10-w/tmp/1.cap//Specifies a crawl packet length of 10 and stores it under TMP

#file/tmp/1.cap//View the 10 packets just captured, the packet cannot be directly cat

#tcpdump-R/tmp/1.cap//using tcpdump to view packets

#yum Install Wireshark
]# tshark-n-T a-r http.request-t fields-e "Frame.time"-E "ip.src"-E "http.host"-E "Http.request.method"-E "HTTP.R Equest.uri "//web-like access logs

Linux under Grab Bag