Tshark: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „=Print a list of the interfaces on which TShark can capture= *tshark -D =Capture all traffic on vmbr1= *tshark -i vmbr1 =Capture icmp traffic on vmbr1= *tshark…“)
 
Zeile 5: Zeile 5:
 
=Capture icmp traffic on vmbr1=
 
=Capture icmp traffic on vmbr1=
 
*tshark -i vmbr1 icmp
 
*tshark -i vmbr1 icmp
 +
=Show only the frame numbers=
 +
*tshark -i vmbr1  -T fields -e frame.number  icmp  and host 10.81.1.1
 +
=Show frame numbers,time_relative, ip src and ip.dst=
 +
*tshark -i vmbr1  -T fields -e frame.number -e frame.time_relative  -e ip.src -e ip.dst    icmp  and host 10.81.1.1

Version vom 24. September 2019, 09:26 Uhr

Print a list of the interfaces on which TShark can capture

  • tshark -D

Capture all traffic on vmbr1

  • tshark -i vmbr1

Capture icmp traffic on vmbr1

  • tshark -i vmbr1 icmp

Show only the frame numbers

  • tshark -i vmbr1 -T fields -e frame.number icmp and host 10.81.1.1

Show frame numbers,time_relative, ip src and ip.dst

  • tshark -i vmbr1 -T fields -e frame.number -e frame.time_relative -e ip.src -e ip.dst icmp and host 10.81.1.1