tcpdump -nn -i eth0 not port 22 and not icmp -c 5tcpdump: verbose output suppressed, use -v or -vv for full protocol decodelistening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes2231
11.196003 IP 58.218.204.225.42658 > 10.105.9.115.808: Flags S, seq 2171219969, win 512, length 02231
12.059396 IP 10.105.9.115.56931 > 10.66.255.253.9966: Flags P., seq 3799566782:3799567090, ack 35724820, win 767, options nop,nop,TS val 544924827 ecr 4069476302, length 3082231
12.059861 IP 10.66.255.253.9966 > 10.105.9.115.56931: Flags ., ack 308, win 12, options nop,nop,TS val 4069499782 ecr 544924827, length 02231
12.060570 IP 10.66.255.253.9966 > 10.105.9.115.56931: Flags P., seq 1:93, ack 308, win 12, options nop,nop,TS val 4069499782 ecr 544924827, length 922231
12.100098 IP 10.105.9.115.56931 > 10.66.255.253.9966: Flags ., ack 93, win 767, options nop,nop,TS val 544924868 ecr 4069499782, length 05 packets captured5 packets received by filter0 packets dropped by kernel上面的这些ip都不是我的服务器ip
相似问题