Shulou(Shulou.com)06/02 Report--

This article will explain in detail about the use of linux ngrep command packet matching and display tools, the editor feels very practical, so share to you as a reference, I hope you can get something after reading this article.

The ngrep command is the network version of the grep command, which strives for more grep features to search for specified packets. Because the libpcap library is needed to install ngrep, a large number of operating systems and network protocols are supported. Ability to identify TCP, UDP and ICMP packets, and understand the filtering mechanism of bpf.

Syntax format: ngrep [parameters]

Common parameters:

Reference example

Capture the request and response of the amazon:80 port. -d eth0 is used to monitor external network cards:

[root@linuxcool] # ngrep-W byline-d eth0 port 80

Capture all packages:

[root@linuxcool ~] # ngrep'[a-zA-Z]'- t-W byline-d any tcp port 18080 so much about using linux's ngrep command packet matching and display tools. I hope the above can be helpful and learn more. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.