리눅스 TCP 데이터 덤프

1. tcpdump

- 예) tcpdump -X -i eth0 host 192.168.1.111

  

11:29:26.464679 IP localhost.localdomain.33112 > 192.168.1.111.newoak: Flags [.], ack 1345, win 265, options [nop,nop,TS val 941886908 ecr 7404959], length 0

        0x0000:  4500 0034 66f7 4000 4006 4fa5 c0a8 0168  E..4f.@.@.O....h

        0x0010:  c0a8 016f 8158 0fa1 db3a b9b6 d972 7f9c  ...o.X...:...r..

        0x0020:  8010 0109 2ea2 0000 0101 080a 3824 0dbc  ............8$..

        0x0030:  0070 fd9f   

[참고사이트]

- 설치: https://zetawiki.com/wiki/%EB%A6%AC%EB%88%85%EC%8A%A4_tcpdump_%EC%84%A4%EC%B9%98 

- https://www.ibm.com/support/knowledgecenter/ko/ssw_aix_71/com.ibm.aix.cmds5/tcpdump.htm

- https://dany-it.tistory.com/100

- https://moyaria.tistory.com/entry/%EB%A6%AC%EB%88%85%EC%8A%A4%EC%97%90%EC%84%9C-tcpdump-%EB%AA%85%EB%A0%B9%EC%96%B4%EC%9D%98-%EC%98%B5%EC%85%98-%EC%A0%95%EB%A6%AC

- http://www.loelab.com/tcpdump-%EC%82%AC%EC%9A%A9%EB%B2%95/

- http://blog.naver.com/PostView.nhn?blogId=romanst&logNo=220628324979&parentCategoryNo=&categoryNo=10&viewDate=&isShowPopularPosts=false&from=section 

- https://idchowto.com/?p=6644