发新话题
打印

如何用tcpdump获取数据?

如何用tcpdump获取数据?

用tcpdump好象只有联结信息,数据包里的内容为何没有显示出来?
我在host1 上运行tcpdump,的语法是
tcpdump src host host2 and dst host1
同时在host2上ftp host1 ,tcpdump的结果如下(去掉ip)

S 745715524:745715524(0) win 32768 <mss 1460,wscale 0,nop>
. ack 2069682327 win 32768
. ack 47 win 32768
P 0:11(11) ack 47 win 32768
. ack 80 win 32768
P 11:23(12) ack 80 win 32768
P 23:29(6) ack 102 win 32768
P 29:37(8) ack 136 win 32768
. ack 156 win 32768
没有数据传输啊?


      

TOP

try ethereal, it can be used to read the content in a tcp segment.
if you use -w <file-name> option in your tcpdump cmd, you can also use ethereal to open the <file-name>.      

TOP

发新话题