测试积点老人 发表于 2019-1-4 16:03:57

Wireshark鸡毛蒜皮

wireshark的安装安装:sudo apt install
如果在安装过程中不选择允许非root用户抓包,直接运行会显示:couldn't run /usr/bin/dumpcap in child process: Permission Denied.这时需要sudo dpkg-reconfigure wireshark-common
在/etc/gshadow中,一个名为wireshark的用户组会被创建. 将当前用户加入这个组即可sudo gpasswd -a $USER wireshark

过滤条件


过滤tcp连接超时tcp.flags.reset==1 # If you mean an application timeout where it shuts down the socket you'll see a reset packet.



页: [1]
查看完整版本: Wireshark鸡毛蒜皮