Tcpdump¶

1. 过滤端口
   

   tcpdump -i eth0 dst host 192.168.1.2 and tcp and port 80 and not host 192.168.1.1 -nn
   

2. 抓取本地udp包
   

   tcpdump -i lo udp and dst host 127.0.0.1 -nn