1.
src 192.168.0.100 && port 80
capture source ip address is 192.168.0.100 and port is 80 packet.
2.
host 192.168.10.1
capture packet with host 192.168.10.1
3.
[ether host 00:30:ab:2f:7f:ea]
[!ether host 00:30:ab:2f:7f:ea]
4.
ip
IPV4 only.
5.
ip6
IPV6 only.
6.
tcp
TCP only.
7.
udp
UDP only.
8.
ipx
IPX only.
9.
[port 80]
TCP or UDP port 80 (HTTP)
[!port 80]
capture packet except port 80.
10.
tcp port http
HTTP TCP port(80)
11.
not http (error)
not port http (right)
not port 80 (right)
port not http (right)
port not 80 (right)
12.
not arp
NO ARP.
13.
not tcp
NO TCP.
14.
[not arp and port not 54]
NO ARP and no DNS.
15.
[not port 80 and not port 25 and host www.baidu.com]
NON-HTTP and NON-SMTP to/from www.baidu.com
16.
[ether proto 0x0806]
[arp]
Ethernet type 0x0806 (ARP)
17.
src host 172.17.92.110
18.
[dst host 172.17.92.110] is the same with [dst 172.17.92.110]
default use host.
19.
[icmp]
20.
[icmp[0]==3]
capture ICMP packet type is 3, it means destination can't reach.
21.
[icmp[0]==8||icmp[0]==0]
ping echo request and echo reply.
22.
[icmp[0:2]==0x0301]
offset is 0, has 2 bytes
23.
tcp[13]&32==32 URG
tcp[13]&16==16 ACK
tcp[13]&8==8 PSH
tcp[13]&4==4 RST
tcp[13]&2==2 SYN
tcp[13]&1==1 FIN
tcp[13]==18 SYN-ACK
24.
broadcast
25.
not broadcast and not multicast
1.
[!arp]
2.
[ip.addr==192.168.0.1]
3.
[frame.len <= 128]
display the packet len is less than 128 byte.
4.
[ip.addr==192.168.0.1 or ip.addr==192.168.0.2]
5.
[tcp.port==80]
6.
[!tcp.port==3389]
7.
[tcp.flags.syn==1]
8.
[tcp.flags.reset==1]
9.
[http]
10.
[tcp.port==23||tcp.port==21]
11.
[smtp||pop||imap]
When transferring large files(for example mksysb images) using scp through a firewall, the scp connection stalls.
Cause:
The reason for scp to stall, is because scp greedily grabs as much bandwith of the network as possible when it transfers files,any delay caused by the network switch of the firewall can easily make the TCP connection stalled.
Solution:
There’s a solution to this problem: Add “-l 8192″ to the scp command.
Adding the option “-l 8192″ limits the scp session bandwith up to 8192 Kbit/second, which seems to work safe and fast enough (upto 1 MB/second):
scp -l 4096 testfile.txt huangjian@server_ip:~
control panel –> application or functions –> open or close windows function.
netstat -ano | findstr "12581"
ssh root@192.168.92.57
ssh jian@172.17.92.240
ssh root@192.168.1.100 -p 22222
~/.ssh/config 配置文件，如果没有就创建一个
Host t1 这里 t1 就是别名
HostName 110.110.110.110 这个是主机名
Port 22 主机的端口号
User root 用户名
IdentityFile ~/.ssh/id_rsa 这是密钥
ssh-keygen -t rsa 然后一直回车就可以了
会生成 id_rsa 和 id_rsa.pub 两个文件
id_rsa 是私钥
id_rsa.pub 是公钥
要把公钥放到服务器上去
scp id_rsa.pub root@110.110.110.110:~/.ssh
cat id_rsa.pub >> .ssh/authorized_keys
然后重启服务器。
客户端就可以直接使用 ssh t1 连上服务器了。