{"id":1654,"date":"2021-10-12T16:40:34","date_gmt":"2021-10-12T23:40:34","guid":{"rendered":"https:\/\/www.xh86.me\/?p=1654"},"modified":"2021-10-12T16:40:34","modified_gmt":"2021-10-12T23:40:34","slug":"tcpdump-%e6%8a%93%e5%8c%85%e5%ae%b9%e5%99%a8%e5%86%85%e7%bd%91%e7%bb%9c%e8%af%b7%e6%b1%82","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=1654","title":{"rendered":"tcpdump \u6293\u5305\u5bb9\u5668\u5185\u7f51\u7edc\u8bf7\u6c42"},"content":{"rendered":"

\u4f7f\u7528 tcpdump \u5de5\u5177\u6293\u5305\u5bb9\u5668\u5185\u7f51\u7edc\u6570\u636e\u5305
\n<\/a><\/p><\/blockquote>\n

    \n
  1. \u83b7\u53d6\u5bb9\u5668\u4f7f\u7528\u7f51\u5361
    \n
    \n
    <\/i>shell<\/div>\n
    <\/div>\n<\/figcaption>
    \n\n\n\n
    \n
    1<\/span><\/pre>\n<\/td>\n
    		\n
    #<\/span> PID=$(docker inspect --format {{.State.Pid}} <CONTAINER_NAME>)<\/span><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/figure>\n<\/li>\n
  2. \u627e\u5230\u5f53\u524d\u5bb9\u5668 PID \u4f7f\u7528\u7684\u7f51\u5361
    \n
    \n
    <\/i>shell<\/div>\n
    <\/div>\n<\/figcaption>
    \n\n\n\n
    \n
    1<\/span>\r\n2<\/span>\r\n3<\/span>\r\n4<\/span>\r\n5<\/span>\r\n6<\/span>\r\n7<\/span>\r\n8<\/span>\r\n9<\/span><\/pre>\n<\/td>\n
    		\n
    #<\/span> nsenter -n -t $PID<\/span> ip addr<\/span><\/span>\r\n1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000<\/span>\r\n    link\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<\/span>\r\n    inet 127.0.0.1\/8 scope host lo<\/span>\r\n    valid_lft forever preferred_lft forever<\/span>\r\n192: eth0@if193: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default<\/span>\r\n    link\/ether 02:42:c0:a8:a0:03 brd ff:ff:ff:ff:ff:ff link-netnsid 0<\/span>\r\n    inet 192.168.160.3\/20 brd 192.168.175.255 scope global eth0<\/span>\r\n    valid_lft forever preferred_lft forever<\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/figure>\n<\/li>\n
  3. \u6839\u636e\u4e0a\u9762\u00a0eth0@if193<\/code>\u00a0\u4e2d\u00a0@if193<\/code>\u00a0\u4e3a\u5173\u952e\u4fe1\u606f\uff0c\u627e\u5230\u5bbf\u4e3b\u673a\u4e0a\u00a0@if193<\/code>\u00a0\u5bf9\u5e94\u7684\u7f51\u5361
    \n
    \n
    <\/i>shell<\/div>\n
    <\/div>\n<\/figcaption>
    \n\n\n\n
    \n
    1<\/span>\r\n2<\/span><\/pre>\n<\/td>\n
    		\n
    #<\/span> ip addr | grep 193<\/span><\/span>\r\n193: veth169636c@if192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-a37be7a191f9 state UP group default<\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/figure>\n<\/li>\n
  4. \u6839\u636e\u00a0193:<\/code>\u00a0\u5bf9\u5e94\u7684\u00a0veth169636c<\/code>\u00a0\u5c31\u662f\u6211\u4eec\u5f53\u524d\u5bb9\u5668\u5bf9\u5e94\u7684\u7f51\u5361\uff0c\u6211\u4eec\u6293\u5305\u7684\u65f6\u5019\u5c31\u4f7f\u7528\u8be5\u7f51\u5361\u5373\u53ef
    \n
    \n
    <\/i>shell<\/div>\n
    <\/div>\n<\/figcaption>
    \n\n\n\n
    \n
    1<\/span><\/pre>\n<\/td>\n
    		\n
    #<\/span> tcpdump -i veth169636c -w \/tmp\/<CONTAINER_NAME>.cap<\/span><\/span><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/figure>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
    \u4f7f\u7528 tcpdump \u5de5\u5177\u6293\u5305\u5bb9\u5668\u5185\u7f51\u7edc\u6570\u636e\u5305 \u83b7\u53d6\u5bb9\u5668\u4f7f\u7528\u7f51\u5361 shell 1 # PID=$(docker […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-1654","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/1654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1654"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/1654\/revisions"}],"predecessor-version":[{"id":1655,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/1654\/revisions\/1655"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}