Shulou(Shulou.com)06/02 Report--

1. Capture package script

# cat capturepackages.sh

#!/ usr/bin/sh

#

while [ 1 ]

do

STIME=`date +%F"@"%H%M%S`

DATE_DIR=`date +%F`

if [ ! -d /tnm/capture/$DATE_DIR ];then

mkdir -p /tnm/capture/$DATE_DIR

fi

/usr/local/sbin/tcpdump -w /tnm/capture/$DATE_DIR/$STIME.log -s 5000 -i lan0

done

2. Stop the script of the package

# cat stopscript.sh

#!/ usr/bin/sh

STIME=`date +%F"@"%H%M%S`

zhuabao=`ps -ef|grep tcpdump|awk '/lan0/ { print $2 }'`

jiaoben=`ps -ef|grep capturepackages|awk '/bin/ { print $2 }'`

if [ -n "$zhuabao" ] && [ -n "$jiaoben" ];

then

kill -9 $jiaoben

kill -9 $zhuabao

echo " This $STIME the script is execute success! " >> /tnm/capture/messages

else

echo " The script has problem! "

fi

3. Add these two scripts to crontab timed tasks

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.