您好,登錄后才能下訂單哦!
1、抓包腳本
# cat capturepackages.sh
#!/usr/bin/sh
#
while [ 1 ]
do
STIME=`date +%F"@"%H%M%S`
DATE_DIR=`date +%F`
if [ ! -d /tnm/capture/$DATE_DIR ];then
mkdir -p /tnm/capture/$DATE_DIR
fi
/usr/local/sbin/tcpdump -w /tnm/capture/$DATE_DIR/$STIME.log -s 5000 -i lan0
done
2、停抓包的腳本
# cat stopscript.sh
#!/usr/bin/sh
STIME=`date +%F"@"%H%M%S`
zhuabao=`ps -ef|grep tcpdump|awk '/lan0/ { print $2 }'`
jiaoben=`ps -ef|grep capturepackages|awk '/bin/ { print $2 }'`
if [ -n "$zhuabao" ] && [ -n "$jiaoben" ];
then
kill -9 $jiaoben
kill -9 $zhuabao
echo " This $STIME the script is execute success! " >> /tnm/capture/messages
else
echo " The script has problem! "
fi
3、把這兩個腳本加入crontab定時任務
免責聲明:本站發布的內容(圖片、視頻和文字)以原創、轉載和分享為主,文章觀點不代表本網站立場,如果涉及侵權請聯系站長郵箱:is@yisu.com進行舉報,并提供相關證據,一經查實,將立刻刪除涉嫌侵權內容。