First download iptool from the server. This is a free network packet capture software. [Some servers were unavailable once. The specific reason is unknown. It is estimated that the IDC was blocked]
1. Set filtering rules. Open the software and prompt what the driver is. Select allow. Click the icon.
A. protocol filtering. Select TCP.
B. port filtering. According to the port of the attacked server, for example, port 9991 opened in area 1 as mentioned earlier.
C. Save and confirm
2. Click to start packet capture.
3. When an attack arrives, it finds that the GS has an exception, which is usually caused by a failure of GS or a collective disconnection of the game, and then enters the server to disable packet capture.
4. If you do not analyze the package yourself, you can save the package.
The packet capture process is like this. If you enable packet capture for a long time, you need to clear the packets captured in the list frequently if you do not encounter packet capture, so as not to occupy too much memory. If an attack packet is captured, stop the packet capture and immediately Save the attack packet.
The third layer of the building-wide pride defense Gateway: capture packets using the packet capture software iptool when attacked