tcpdump

实战技巧

抓取Get请求url和响应内容

tcpdump -A -s 0 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

参考

抓取Post请求url和响应内容

tcpdump -X -s 0 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

参考

参考链接

• https://www.cnblogs.com/wongbingming/p/13212306.html