« mysql HEAP MEMORY tables 提高行数支持的方法 | Main | [信息] 三险一金 四险一金 五险一金 历年北京市缴费基数上限 (3倍社会平均工资) »
May 30, 2006
tcpflow 类tcpdump的抓包分析工具
|
版权声明：可以任意转载，转载时请务必以超链接形式标明文章原始出处和作者信息及本声明。 https://windtear.net/archives/2006/05/30/000995.html http://windtear.net/archives/2006/05/30/000995.html tcpflow 类tcpdump的抓包分析工具 抓包分析 分析更有用 tcpflow可以帮你分析 IE Firefox 浏览器刷新和强制刷新发送的 HTTP Request Header 就是通过 tcpflow 分析的 http://www.circlemud.org/~jelson/software/tcpflow/ http://www.circlemud.org/pub/jelson/tcpflow/tcpflow-0.21.tar.gz -rw-r--r-- 1 root root 79369 Aug 7 2003 tcpflow-0.21.tar.gz -rw-r--r-- 1 root root 157412 May 9 2005 libpcap-0.7.2-7.E3.5.i386.rpm # tcpflow -c -p dst port 80 tcpflow[30735]: listening on eth0 172.016.202.235.02101-172.016.120.186.00080: GET / HTTP/1.1 Host: 172.16.120.186 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) \ Gecko/20060426 Firefox/1.5.0.3 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,\ text/plain;q=0.8,image/png,*/*;q=0.5 Accept-Language: zh-cn,zh;q=0.8,zh-tw;q=0.6,en-us;q=0.4,en;q=0.2 Accept-Encoding: gzip,deflate Accept-Charset: GB2312,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Cache-Control: max-age=0 172.016.120.180.03633-172.016.120.186.00080: GET /apache_pb.gif HTTP/1.1 Accept: */* Referer: http://172.16.120.186/ Accept-Language: zh-cn Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Host: 172.16.120.186 Connection: Keep-Alive |
Posted by windtear at May 30, 2006 12:03 PM
