# tcpdump **Repository Path**: Ljolan/tcpdump ## Basic Information - **Project Name**: tcpdump - **Description**: No description available - **Primary Language**: Unknown - **License**: Not specified - **Default Branch**: master - **Homepage**: None - **GVP Project**: No ## Statistics - **Stars**: 0 - **Forks**: 0 - **Created**: 2022-01-22 - **Last Updated**: 2022-01-22 ## Categories & Tags **Categories**: Uncategorized **Tags**: None ## README # tcpdump # 使用步骤： > docker build -t dump . // 构建镜像 > docker run -p 80:80 --name dump -i dump // 后台运行, 加 -d 执行处理文件 假设pcap文件为dump.pcap, 则执行如下命令，即可获取到处理的文件dump_pcap_deal.txt # docker执行方式 ## 方式一： `pcapName=dump.pcap;savePcapName=dump_pcap.txt; docker cp $pcapName dump:/usr/src/app/dump/ && docker exec -it dump ./dump -pcap-path=$pcapName -p=true >> $savePcapName ` ## 方式二： `pcapName=dump.pcap; docker cp $pcapName dump:/usr/src/app/dump/ && docker exec -it dump ./dump -pcap-path=$pcapName ` 再执行 `docker cp dump:/usr/src/app/dump/dump_pcap_deal.pcap ./` ## 方式三： `pcapName=dump.pcap; docker cp $pcapName dump:/usr/src/app/dump/ && savePcapName=$(docker exec -it dump ./dump -pcap-path=$pcapName); echo $savePcapName && docker cp dump:/usr/src/app/dump/$savePcapName ./ ` ## 处理后文本 ```bigquery ----------------一次http请求总览--------------- GET / HTTP/1.1 Host: www.baidu.com User-Agent: curl/7.68.0 Accept: */* Postman-Token: 2a8086aa-e830-4026-a369-e08db8ea4df7 cache-control: no-cache ---------- HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Connection: keep-alive Content-Length: 2381 Content-Type: text/html Date: Fri, 21 Jan 2022 09:28:51 GMT Etag: "588604dd-94d" Last-Modified: Mon, 23 Jan 2017 13:27:57 GMT Pragma: no-cache Server: bfe/1.0.8.18 Set-Cookie: BDORZ=27315; max-age=86400; domain=.baidu.com; path=/ 百度一下，你就知道

关于百度 About Baidu

©2017 Baidu 使用百度前必读  意见反馈 京ICP证030173号 

---------- ---------------------------------- ```