IP: Destination address = 192.168.0.188, u10
IP: No options
IP:
TCP: ----- TCP Header -----
TCP:
TCP: Source port = 6000
TCP: Destination port = 32899
为了以文本格式保存的输出,应使用重定向方法,而不是-0或-i参数.可用cat more查看.
bash-2.03# snoop -v > snoop.txt
Using device /dev/hme (promiscuous mode)
4 ndd
该命令用于显示网络驱动的信息。
bash-2.03# ndd /dev/hme \?
? (read only)
transceiver_inuse (read only)
link_status (read only)
link_speed (read only)
link_mode (read only)
ipg1 (read and write)
ipg2 (read and write)
use_int_xcvr (read and write)
pace_size (read and write)
adv_autoneg_cap (read and write)
adv_100T4_cap (read and write)
adv_100fdx_cap (read and write)
......................................
bash-2.03# ndd /dev/udp \?
? (read only)
udp_wroff_extra (read and write)
udp_ipv4_ttl (read and write)
udp_ipv6_hoplimit (read and write)
udp_smallest_nonpriv_port (read and write)
udp_do_checksum (read and write)
udp_smallest_anon_port (read and write)
udp_largest_anon_port (read and write)
udp_xmit_hiwat (read and write)
....................................................
后面的值(read and write)表示可修改,(read only)表示只读不可修改。例如:
bash-2.03# ndd /dev/udp udp_ipv4_ttl
255
表示UDP包的生存期是255,可修改用-set参数。
bash-2.03# ndd -set /dev/udp udp_ipv4_ttl 50
bash-2.03# ndd /dev/udp udp_ipv4_ttl
50
5 ping traceroute 这两个命令就不用说了,地球人都知道。但还有一些常用的用法,可供参考.
ping
1)连续ping
bash-2.03# ping -s 192.168.0.1
PING 192.168.0.1: 56 data bytes
64 bytes from 192.168.0.1: icmp_seq=0. time=1. ms
64 bytes from 192.168.0.1: icmp_seq=1. time=0. ms
64 bytes from 192.168.0.1: icmp_seq=2. time=0. ms
64 bytes from 192.168.0.1: icmp_seq=3. time=0. ms
64 bytes from 192.168.0.1: icmp_seq=4. time=0. ms
64 bytes from 192.168.0.1: icmp_seq=5. time=0. ms
^C
----192.168.0.1 PING Statistics----