Merge pull request #1652 from GOLinux/master

Translating:20140915 Linux FAQs with Answers--How to capture TCP SYN, ACK and FIN packets with tcpdump.md
This commit is contained in:
joeren 2014-09-19 08:46:26 +08:00
commit 1ae0ea48dd

View File

@ -1,3 +1,4 @@
Translating by GOLinux ...
Linux FAQs with Answers--How to capture TCP SYN, ACK and FIN packets with tcpdump Linux FAQs with Answers--How to capture TCP SYN, ACK and FIN packets with tcpdump
================================================================================ ================================================================================
> **Question**: I want to monitor TCP connection dynamics (e.g., three-way handshake for connection establishment, and four-way handshake for connection tear-down). For that, I need to capture only TCP control packets such as those with SYN, ACK or FIN flag set. How can I use tcpdump to capture TCP SYN, ACK, and/or FYN packets only? > **Question**: I want to monitor TCP connection dynamics (e.g., three-way handshake for connection establishment, and four-way handshake for connection tear-down). For that, I need to capture only TCP control packets such as those with SYN, ACK or FIN flag set. How can I use tcpdump to capture TCP SYN, ACK, and/or FYN packets only?