디지털생태계

PIOLINK tcpdump 명령어는 파이오링크 스위치에서 출발하여 나가는 패킷만 모니터링 가능
파이오링크를 통하여 지나가는 패킷은 모니터링 불가

모든 패킷 모니터링(vlan1을 통해 송수신되는 모든 패킷)

tcpdump interface vlan1


IP 조건으로 검색

tcpdump interface vlan1 ip 
tcpdump interface vlan1 ip host 10.130.120.10
tcpdump interface vlan1 ip dst host 10.130.120.10
tcpdump interface vlan1 ip src host 10.130.120.10

 

TCP 조건 검색

tcpdump interface vlan1 tcp
tcpdump interface vlan1 tcp dst port 80
tcpdump interface vlan1 tcp src port 80

 

예제

tcpdump interface vlan2 tcp

결과 :

listening on vlan13, link-type EN10MB (Ethernet), capture size 96 bytes
00:15:17:ed:47:d1 > 00:06:c4:76:03:23, ethertype IPv4 (0x0800), length 66: 100.1.3.71.3755 >
 133.115.188.103.445: S 1554706813:1554706813(0) win 65535 <mss 1460,nop,nop,sackOK>
00:15:17:ed:47:d1 > 00:06:c4:76:03:23, ethertype IPv4 (0x0800), length 66: 100.1.3.71.3710 >
 210.111.198.110.445: S 3346811276:3346811276(0) win 65535 <mss 1460,nop,nop,sackOK>
00:15:17:ed:47:d1 > 00:06:c4:76:03:23, ethertype IPv4 (0x0800), length 66: 100.1.3.71.3715 >
 195.93.83.111.445: S 2154567122:2154567122(0) win 65535 <mss 1460,nop,nop,sackOK>
00:15:17:ed:47:d1 > 00:06:c4:76:03:23, ethertype IPv4 (0x0800), length 66: 100.1.3.71.3707 >
 62.30.62.27.445: S 1788392792:1788392792(0) win 65535 <mss 1460,nop,nop,sackOK>
00:15:17:ed:47:d1 > 00:06:c4:76:03:23, ethertype IPv4 (0x0800), length 66: 100.1.3.71.3708 >
 552.83.156.84.445: S 1693753009:1693753009(0) win 65535 <mss 1460,nop,nop,sackOK>

 

반응형

공유하기

facebook twitter kakaoTalk kakaostory naver band