Wireshark Remote: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
 
(Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt)
Zeile 1: Zeile 1:
=Linux=
+
*[[Wireshark Remote Linux]]
==tcpdump and wireshark offline==
+
*[[Wireshark Remote Bintec]]
*ssh root@worf
 
*tcpdump -s 0 -n -w file-icmp.cap -i ppp0 'icmp'
 
*CTRL+C
 
*exit
 
*scp root@worf:file-icmp.cap .
 
*wireshark  file-icmp.cap
 
==Enables X11 forwarding==
 
*ssh -X root@worf
 
*root@worf:~#  wireshark
 
==In one Command==
 
*ssh -X root@worf wireshark
 
==With tcpdump and a pipe==
 
*ssh  root@worf tcpdump -s 0 -U -n -w - -i ppp0 'icmp' | wireshark -k -i -
 
==With tcpdump and a namedpipe==
 
*mkfifo /tmp/fifo.cap
 
*ssh  root@worf "tcpdump -s 0 -U -n -w - -i ppp0 'icmp'" >  /tmp/fifo.cap &
 
*wireshark -k -i /tmp/fifo.cap
 
=Links=
 
*http://www.commandlinefu.com/commands/view/4373/analyze-traffic-remotely-over-ssh-w-wireshark
 

Aktuelle Version vom 28. Juni 2017, 14:34 Uhr