TCP, UDP network server grab packet

viewing UDP packet data

sudo tcpdump UDP | grep 18060

Tcpdump-i eth1 ' Port 18060 '

#指定端口打印详情命令 (Eth1 on behalf of the network card number)

Tcpdump-vv-x-x-s 1500-i eth1 ' Port 18060 '

#指定端口抓包 and write files

Tcpdump-i eth0 Port 18070-w dump.pcap

#指定ip抓包 and write files

Tcpdump-i eth0 host 10.30.17.21-w Dump.pcap

#指定ip和端口抓包

Tcpdump-i eth0 host 10.30.17.21 and Port 18070-w dump.pcap

Package parsing

Wireshark Analysis Pcap File

Conditional filtering

Send Source IP filter

IP.SRC = 10.30.17.200

Specify port or multi-condition

udp.port==37000 && ip.dst==10.30.17.200

TCP, UDP network server grab packet