针对地址抓包
- 所有网卡
tcpdump -s 0 -i any host 192.168.1.100 -w 1.cap -vv
- 指定网卡
tcpdump -s 0 -i eth0 host 192.168.1.100 -w 1.cap -vv
针对端口抓包
- 所有网卡
tcpdump -s 0 -i any port 5060 -w 1.cap -vv
- 指定网卡
tcpdump -s 0 -i eth0 port 5060 -w 1.cap -vv
tcpdump -s 0 -i any host 192.168.1.100 -w 1.cap -vv
tcpdump -s 0 -i eth0 host 192.168.1.100 -w 1.cap -vv
tcpdump -s 0 -i any port 5060 -w 1.cap -vv
tcpdump -s 0 -i eth0 port 5060 -w 1.cap -vv