tcpdump

[Petr Stetiar]

Petr Zapadlo <zapadlo na melzer.cz> [2003-08-13 13:25:55]:

> Dobry den
> 
> mam dnes nejake okno, netusite jak tcpdumpu rici aby zobrazoval jen pakety 
> jdouci zvenku (tj prichazejici do pc)?
> 
> Prs tcpdump -i eth0 mi zobrazuje pakety jdouci jak dovnitr tak ven a mam v tom 
> trochu binec.
> Muze byt samoztrejmne i jiny nastroj.
Co takhle man tcpdump nebo pouzit google ci jyxo.cz ?

jinak v manpage se pise:

              type   qualifiers  say  what  kind  of  thing the id name or number refers to.  Possible types are
                     host, net and port.  E.g., `host foo', `net 128.3', `port 20'.  If there is no type  quali-
                     fier, host is assumed.

              dir    qualifiers  specify a particular transfer direction to and/or from id.  Possible directions
                     are src, dst, src or dst and src and dst.  E.g., `src foo', `dst net 128.3',  `src  or  dst
                     port ftp-data'.  If there is no dir qualifier, src or dst is assumed.  For `null' link lay-
                     ers (i.e. point to point protocols such as slip) the inbound and outbound qualifiers can be
                     used to specify a desired direction.

A to co hledate bude asi "tcpdump -i eth0 dst host vase_ip_nebo_hostname"

S pozdravem,

ynezz
-- 
     (__) --------------------------+------------------------------------------`
     (@@)  ynezz[at]hysteria[dot]sk | Customer: "I'm running WindowsXP SP39g"  |
 /----\/  - * - * - * - * - * - * - | Tech: "Yes"                              |
| |  ||    irc://ynezz@ircnet       | Customer: "My computer isn't working now"|
* ||-||    icq: 923432434           | Tech: "Yes, you said that"               |
  ^^ ^^ ----------------------------+------------------------------------------'