Browse Source

tcpdump: add tips for sniff all POST query

master
Bruno TATU 1 year ago
parent
commit
5adc353ba9
1 changed files with 6 additions and 0 deletions
  1. +6
    -0
      HowtoTcpdump.md

+ 6
- 0
HowtoTcpdump.md View File

@@ -123,3 +123,9 @@ en temps réel
~~~
# tcpdump -n -ttt -e -i pflog
~~~

* Récuper toutes les trâmes de type POST sur le port 80

~~~
# tcpdump -vv -s 0 -A 'tcp dst port 80 and tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420 or tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504F5354 or tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x48545450 or tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x3C21444F' -w /home/user/capture.pcap
~~~

Loading…
Cancel
Save