Tcpdump和wireshark

yuanqc發表於2012-08-08
TCP
1.Use tcpdump tool to trace tcp communication
 
bash-3.2$ sudo -u root /usr/sbin/tcpdump -s 0 -U -C 5 -w /opt/IBM/.19012.dmp tcp port 19012
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
 
 
2.Import the dump file to wireshark for analyzing.it is https, we also need import the cert into it.
 
[Edit]->[Preferences]
[Protocols]->[SSL]->[PSA keys list]
->[Edit]
 
 
IP address: 10.10.10.10
Port: 19012
Protocol: http
Key File: D:\TEMP\key.p12
Password:WebAS
 

來自 “ ITPUB部落格 ” ，連結：http://blog.itpub.net/10973950/viewspace-740376/，如需轉載，請註明出處，否則將追究法律責任。

相關文章