📄 fromtcpdump-01.testie
字号:
%require -qfalse# tcpdump format changes make this test unreasonable%require -qclick-buildtool provides FromTcpdump%script# read from tcpdump output file; check headers, emit to a dumpclick -e "FromTcpdump(IN1, STOP true, ZERO true, CHECKSUM true) -> ToDump(OUT1, ENCAP IP);"# use tcpdump to verify dumptcpdump -nn -tt -r OUT1 > OUT2%file IN11.056252 169.232.91.64.1040 > 239.255.255.250.1900: udp 90 [ttl 1]2.898617 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]3.513694 169.232.91.3.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]3.514941 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 495.226619 192.168.1.100.32784 > 192.150.187.37.ssh: P 760650054:760650102(48) ack 300852684 win 32800 <nop,nop,timestamp 531021 399866430> (DF) [tos 0x10]5.246758 192.150.187.37.ssh > 192.168.1.100.32784: P 1:81(80) ack 48 win 57600 <nop,nop,timestamp 399931609 531021> (DF) [tos 0x10]5.246805 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 81 win 32800 <nop,nop,timestamp 531023 399931609> (DF) [tos 0x10]5.259281 192.150.187.37.ssh > 192.168.1.100.32784: P 81:145(64) ack 48 win 57600 <nop,nop,timestamp 399931610 531021> (DF) [tos 0x10]5.259300 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 145 win 32800 <nop,nop,timestamp 531025 399931610> (DF) [tos 0x10]5.272154 192.150.187.37.ssh > 192.168.1.100.32784: P 145:337(192) ack 48 win 57600 <nop,nop,timestamp 399931611 531023> (DF) [tos 0x10]5.272171 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 337 win 32800 <nop,nop,timestamp 531026 399931611> (DF) [tos 0x10]5.273873 192.150.187.37.ssh > 192.168.1.100.32784: P 337:449(112) ack 48 win 57600 <nop,nop,timestamp 399931611 531023> (DF) [tos 0x10]5.273887 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 449 win 32800 <nop,nop,timestamp 531026 399931611> (DF) [tos 0x10]5.356557 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]6.297463 192.168.1.100.32784 > 192.150.187.37.ssh: P 48:96(48) ack 449 win 32800 <nop,nop,timestamp 531128 399931611> (DF) [tos 0x10]6.322221 192.150.187.37.ssh > 192.168.1.100.32784: P 449:913(464) ack 96 win 57600 <nop,nop,timestamp 399931716 531128> (DF) [tos 0x10]6.322267 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 913 win 32800 <nop,nop,timestamp 531131 399931716> (DF) [tos 0x10]6.586007 169.232.91.3.5353 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]7.659617 192.168.1.100.32784 > 192.150.187.37.ssh: P 96:144(48) ack 913 win 32800 <nop,nop,timestamp 531265 399931716> (DF) [tos 0x10]7.685267 192.150.187.37.ssh > 192.168.1.100.32784: P 913:1345(432) ack 144 win 57600 <nop,nop,timestamp 399931853 531265> (DF) [tos 0x10]7.685313 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1345 win 32800 <nop,nop,timestamp 531267 399931853> (DF) [tos 0x10]7.687175 192.150.187.37.ssh > 192.168.1.100.32784: P 1345:1569(224) ack 144 win 57600 <nop,nop,timestamp 399931853 531265> (DF) [tos 0x10]7.687191 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1569 win 32800 <nop,nop,timestamp 531267 399931853> (DF) [tos 0x10]7.688293 192.150.187.37.ssh > 192.168.1.100.32784: P 1569:1905(336) ack 144 win 57600 <nop,nop,timestamp 399931853 531265> (DF) [tos 0x10]7.688307 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 1905 win 32800 <nop,nop,timestamp 531268 399931853> (DF) [tos 0x10]7.690644 192.150.187.37.ssh > 192.168.1.100.32784: P 1905:2033(128) ack 144 win 57600 <nop,nop,timestamp 399931853 531265> (DF) [tos 0x10]7.690676 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2033 win 32800 <nop,nop,timestamp 531268 399931853> (DF) [tos 0x10]8.056751 192.168.1.100.32784 > 192.150.187.37.ssh: P 144:192(48) ack 2033 win 32800 <nop,nop,timestamp 531304 399931853> (DF) [tos 0x10]8.076302 192.150.187.37.ssh > 192.168.1.100.32784: P 2033:2289(256) ack 192 win 57600 <nop,nop,timestamp 399931892 531304> (DF) [tos 0x10]8.076346 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2289 win 32800 <nop,nop,timestamp 531306 399931892> (DF) [tos 0x10]8.493333 192.168.1.100.32784 > 192.150.187.37.ssh: P 192:240(48) ack 2289 win 32800 <nop,nop,timestamp 531348 399931892> (DF) [tos 0x10]8.513129 192.150.187.37.ssh > 192.168.1.100.32784: P 2289:2401(112) ack 240 win 57600 <nop,nop,timestamp 399931935 531348> (DF) [tos 0x10]8.513175 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2401 win 32800 <nop,nop,timestamp 531350 399931935> (DF) [tos 0x10]8.549078 192.150.187.37.ssh > 192.168.1.100.32784: P 2401:2465(64) ack 240 win 57600 <nop,nop,timestamp 399931939 531350> (DF) [tos 0x10]8.549104 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2465 win 32800 <nop,nop,timestamp 531354 399931939> (DF) [tos 0x10]8.550636 192.150.187.37.ssh > 192.168.1.100.32784: P 2465:2545(80) ack 240 win 57600 <nop,nop,timestamp 399931939 531350> (DF) [tos 0x10]8.550648 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2545 win 32800 <nop,nop,timestamp 531354 399931939> (DF) [tos 0x10]8.552659 192.150.187.37.ssh > 192.168.1.100.32784: P 2545:2689(144) ack 240 win 57600 <nop,nop,timestamp 399931939 531350> (DF) [tos 0x10]8.552673 192.168.1.100.32784 > 192.150.187.37.ssh: . ack 2689 win 32800 <nop,nop,timestamp 531354 399931939> (DF) [tos 0x10]9.042851 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 499.350216 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]10.886386 169.232.91.4.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]14.265149 169.232.91.138.49204 > 239.255.255.253.svrloc: udp 4914.879888 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]21.944978 169.232.91.4.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]23.480935 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]26.246187 169.232.91.3.771 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]27.782655 169.232.91.4.1205 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]29.309773 192.168.1.100.32801 > 216.239.53.99.http: SWE 646783667:646783667(0) win 5840 <mss 1460,sackOK,timestamp 533430 0,nop,wscale 0> (DF)29.323590 216.239.53.99.http > 192.168.1.100.32801: S 2865792400:2865792400(0) ack 646783668 win 8190 <mss 1452>29.323640 192.168.1.100.32801 > 216.239.53.99.http: . ack 1 win 5840 (DF)29.324069 192.168.1.100.32801 > 216.239.53.99.http: P 1:512(511) ack 1 win 5840 (DF)29.341914 216.239.53.99.http > 192.168.1.100.32801: . ack 512 win 31460 [tos 0x10]29.352608 216.239.53.99.http > 192.168.1.100.32801: P 1:1375(1374) ack 512 win 31460 [tos 0x10]29.352646 192.168.1.100.32801 > 216.239.53.99.http: . ack 1375 win 8244 (DF)30.854037 169.232.91.4.769 > 224.0.0.2.hsrp: udp 20 [tos 0xc0] [ttl 1]31.012825 192.168.1.100.32801 > 216.239.53.99.http: P 512:979(467) ack 1375 win 8244 (DF)31.035983 216.239.53.99.http > 192.168.1.100.32801: . 1375:2805(1430) ack 979 win 31460 [tos 0x10]31.036030 192.168.1.100.32801 > 216.239.53.99.http: . ack 2805 win 11440 (DF)31.037980 216.239.53.99.http > 192.168.1.100.32801: P 2805:2923(118) ack 979 win 31460 [tos 0x10]31.037997 192.168.1.100.32801 > 216.239.53.99.http: . ack 2923 win 11440 (DF)31.042256 216.239.53.99.http > 192.168.1.100.32801: . 2923:4353(1430) ack 979 win 31460 [tos 0x10]31.042275 192.168.1.100.32801 > 216.239.53.99.http: . ack 4353 win 14300 (DF)31.045641 216.239.53.99.http > 192.168.1.100.32801: . 4353:5783(1430) ack 979 win 31460 [tos 0x10]31.045665 192.168.1.100.32801 > 216.239.53.99.http: . ack 5783 win 17160 (DF)31.047532 216.239.53.99.http > 192.168.1.100.32801: P 5783:7115(1332) ack 979 win 31460 [tos 0x10]31.047547 192.168.1.100.32801 > 216.239.53.99.http: . ack 7115 win 20020 (DF)31.050288 216.239.53.99.http > 192.168.1.100.32801: . 7115:8545(1430) ack 979 win 31460 [tos 0x10]31.050303 192.168.1.100.32801 > 216.239.53.99.http: . ack 8545 win 22880 (DF)31.058116 216.239.53.99.http > 192.168.1.100.32801: . 8545:9975(1430) ack 979 win 31460 [tos 0x10]31.058418 192.168.1.100.32801 > 216.239.53.99.http: . ack 9975 win 25740 (DF)31.058381 216.239.53.99.http > 192.168.1.100.32801: P 9975:10139(164) ack 979 win 31460 [tos 0x10]31.058711 192.168.1.100.32801 > 216.239.53.99.http: . ack 10139 win 28600 (DF)31.383741 192.168.1.100.32801 > 216.239.53.99.http: P 979:1409(430) ack 10139 win 28600 (DF)31.411888 216.239.53.99.http > 192.168.1.100.32801: . 10139:11569(1430) ack 1409 win 31460 [tos 0x10]
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -