tcpdump -nni 0.0 host 1x.xx.xxx41 port 5060 udp
   tcpdump -nni 0.0 host 1x.xx.xxx41 and port 5060 udp
   tcpdump -nni 0.0 host 1x.xx.xxx41 and port 5060 UDP
   tcpdump -nni 0.0 host 1x.xx.xxx41 and port 5060
   tshark -nni 0.0 host 1x.xx.xxx41 and port 5060 -O SIP
   tshark -nni 0.0 host 1x.xx.xxx41 and port 5060 -o sip
   tshark -nni 0.0 host 1x.xx.xxx41 and port 5060 -O sip
   tcpdump -nni 0.0 host 1x.xx.xxx41 and port 5060
   tcpdump -nni 0.0 host 1x.xx.xxx43 and port 5060
   tshark -nni 0.0 host 1x.xx.xxx43 and port 5060 -Y "rtp||sip"
   tshark -nni 0.0 host 1x.xx.xxx43 and port 5060 -Y "rtp || sip"
   tshark -nni Vlan_Internal -f "udp port 5060,sip"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   ping 1x.xx.xxx.245
   tcpdump -nni 0.0:p host 1x.xx.xxx.245
   tcpdump -nni 0.0:p host 10.161.201.245
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tmsh
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tcpdump -nni 0.0:p host 10.161.201.245
   more bigip.conf
   vim bigip.conf
   tcpdump -nni 0.0:p host 1x.xx.xxx41
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal port 6702
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal port 6704
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tcpdump -nni 0.0 rtp
   tshark -i Vlan_Internal 
   tcpdump -nni 0.0
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal  -f "udp port 6676"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -f "udp port 6698"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -f "udp port 6712"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -f "udp port 6716"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -f "udp port 6658"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -f "udp port 6660"
   tcpdump -nni Vlan_Internal port 6660
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tcpdump -nni Vlan_Internal port 6662
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tcpdump -nni Vlan_Internal port 6664
   more /var/log/ltm
   tail -f  /var/log/ltm
   tcpdump -nni Vlan_Internal port 20386
   tcpdump -nni Vlan_Internal port 17832
   tcpdump -nni Vlan_Internal port 21628
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tshark -i Vlan_Internal -O http -f "tcp port 5066"
   tshark -i Vlan_Internal -O wws -f "tcp port 5066"
   tshark -i Vlan_Internal -O sip -f "udp port 5060"
   tcpdump -nni 0.0:nnp -s0 port 5060
   tcpdump -nni 0.0:nnp -s0 port 5066 -w /var/tmp/ws5066.pcap -v
   tcpdump -nni 0.0:nnp -s0 port 5060 -w /var/tmp/ws5060.pcap -v
   cd /var/tmp
   tshark -i Vlan_Internal -O sip -f "udp port 5066"
   tshark -i Vlan_Internal -O sip -f "tcp port 5066"
   tmsh
   tshark -i Vlan_Internal -O sip -f "tcp port 5066"
   tail -f /var/log/ltm
   tshark -i Vlan_Internal -O sip -f "tcp port 5066"

转载请注明：SuperIT » tcpdump 使用方法