tcpdump命令抓包保存pcap文件wireshark分析

tcpdump 的抓包保存到文件的命令参数是-w xxx.cap 抓eth1的包  tcpdump -i eth1 -w /tmp/xxx.cap  抓 192.168.1.123的包  tcpdump -i eth1 host 192.168.1.123 -w /tmp/xxx.cap  抓192.168.1.123的80端口的包  tcpdump -i eth1 host 192.168.1.

>>阅读原文<<