{"id":96,"date":"2023-06-05T12:53:37","date_gmt":"2023-06-05T04:53:37","guid":{"rendered":"http:\/\/pro369.com\/linux\/?p=96"},"modified":"2019-05-21T08:51:27","modified_gmt":"2019-05-21T08:51:27","slug":"linux-%e5%88%a4%e6%96%b7-cc-%e6%94%bb%e6%93%8a%e6%8c%87%e4%bb%a4%e8%a9%b3%e8%a7%a3","status":"publish","type":"post","link":"https:\/\/por.tw\/linux\/linux-%e5%88%a4%e6%96%b7-cc-%e6%94%bb%e6%93%8a%e6%8c%87%e4%bb%a4%e8%a9%b3%e8%a7%a3\/","title":{"rendered":"Linux \u5224\u65b7 CC \u653b\u64ca\u6307\u4ee4\u8a73\u89e3"},"content":{"rendered":"

Linux \u5224\u65b7 CC \u653b\u64ca\u6307\u4ee4\u8a73\u89e3<\/p>\n

\u6aa2\u8996\u6240\u670980\u9023\u63a5\u57e0\u7684\u9023\u7dda\u6578<\/p>\n

    netstat -nat|grep -i "80"|wc -l<\/p>\n

\u5c0d\u9023\u7dda\u7684IP\u6309\u9023\u7dda\u6578\u91cf\u9032\u884c\u6392\u5e8f<\/p>\n

    netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
<\/strong>


\u6aa2\u8996TCP\u9023\u7dda\u72c0\u614b<\/p>\n

    netstat -nat |awk '{print $6}'|sort|uniq -c|sort -rn
    netstat -n | awk '\/^tcp\/ {++S[$NF]};END {for(a in S) print a, S[a]}'
    netstat -n | awk '\/^tcp\/ {++state[$NF]}; END {for(key in state) print key,"\t",state[key]}'
    netstat -n | awk '\/^tcp\/ {++arr[$NF]};END {for(k in arr) print k,"\t",arr[k]}'
    netstat -n |awk '\/^tcp\/ {print $NF}'|sort|uniq -c|sort -rn
    netstat -ant | awk '{print $NF}' | grep -v '[a-z]' | sort | uniq -c<\/p>\n

\u6aa2\u899680\u9023\u63a5\u57e0\u9023\u7dda\u6578\u6700\u591a\u768420\u500bIP<\/p>\n

    netstat -anlp|grep 80|grep tcp|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|head -n20
    netstat -ant |awk '\/:80\/{split($5,ip,":");++A[ip[1]]}END{for(i in A) print A,i}' |sort -rn|head -n20<\/p>\n

\u7528tcpdump\u55c5\u63a280\u9023\u63a5\u57e0\u7684\u8a2a\u554f\u770b\u770b\u8ab0\u6700\u9ad8<\/p>\n

    tcpdump -i eth0 -tnn dst port 80 -c 1000 | awk -F"." '{print $1"."$2"."$3"."$4}' | sort | uniq -c | sort -nr |head -20<\/p>\n

\u5c0b\u627e\u8f03\u591atime_wait\u9023\u7dda<\/p>\n

    netstat -n|grep TIME_WAIT|awk '{print $5}'|sort|uniq -c|sort -rn|head -n20<\/p>\n

\u5c0b\u627e\u8f03\u591a\u7684SYN\u9023\u7dda<\/p>\n

    netstat -an | grep SYN | awk '{print $5}' | awk -F: '{print $1}' | sort | uniq -c | sort -nr | more<\/p>\n

<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Linux \u5224\u65b7 CC \u653b\u64ca\u6307\u4ee4\u8a73\u89e3 \u6aa2\u8996\u6240\u670980\u9023\u63a5\u57e0\u7684\u9023\u7dda\u6578     net […]<\/p>\n","protected":false},"author":1,"featured_media":523,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[20],"class_list":["post-96","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/96"}],"collection":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/comments?post=96"}],"version-history":[{"count":0,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/96\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media\/523"}],"wp:attachment":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media?parent=96"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/categories?post=96"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/tags?post=96"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}