爱意满满的作品展示区。
scriptB0y

教程:用 Linux 自带工具实现的一个“tcpdump” (不需要特殊权限)

  •  
  •   scriptB0y ·
    laixintao · Nov 7, 2019 · 4071 views
    This topic created in 2381 days ago, the information mentioned may be changed or developed.

    用 Linux 自带的工具实现了一个可以将 TCP 流量打印出来的中间人代理程序(透明的)。也不完全是 tcpdump,这只是将 TCP 内容简单的打印出来。

    相当于一个反向的透明代理。

    对一些开发任务很有用。

    curl --proxy 127.0.0.1:8800 kawabangga.com -v 测试,效果如下:

    ➜  tmp ./tcp_proxy.sh 8800 kawabangga.com 80
     => GET http://kawabangga.com/ HTTP/1.1
     => Host: kawabangga.com
     => User-Agent: curl/7.66.0
     => Accept: */*
     => Proxy-Connection: Keep-Alive
     =>
    <=  HTTP/1.1 301 Moved Permanently
    <=  Server: wts/1.6.0
    <=  Date: Thu, 07 Nov 2019 12:50:38 GMT
    <=  Content-Type: text/html; charset=iso-8859-1
    <=  Content-Length: 299
    <=  Connection: keep-alive
    <=  Location: https://www.kawabangga.com/
    <=  X-Cache:  from WTS
    <=
    <=  <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <=  <html><head>
    <=  <title>301 Moved Permanently</title>
    <=  </head><body>
    <=  <h1>Moved Permanently</h1>
    <=  <p>The document has moved <a href="https://www.kawabangga.com/">here</a>.</p>
    <=  <hr>
    <=  <address>Apache Server at kawabangga.com Port 80</address>
    <=  </body></html>
    

    原文地址: https://www.kawabangga.com/posts/3723

    8 replies    2019-11-10 12:47:52 +08:00
    hljjhb
        1
    hljjhb  
       Nov 7, 2019 via Android
    赞,写的很有条理

    虽然 nc 也不是标配啦😂
    scriptB0y
        2
    scriptB0y  
    OP
       Nov 7, 2019
    @hljjhb 哦,确实有些发行版没带 😂
    ManjusakaL
        3
    ManjusakaL  
       Nov 7, 2019 via Android
    学习一个
    daiqiangbudainiu
        4
    daiqiangbudainiu  
       Nov 8, 2019   ❤️ 1
    你这个打印的只是 http 的内容,不是 tcp 的包的内容啊
    scriptB0y
        5
    scriptB0y  
    OP
       Nov 8, 2019 via iPhone
    @warcraft1236 准确的说是 tcp data 内容
    myqoo
        6
    myqoo  
       Nov 8, 2019
    说好的 tcp 呢???
    scriptB0y
        7
    scriptB0y  
    OP
       Nov 9, 2019
    @myqoo 这不是 tcp 吗?
    abmin521
        8
    abmin521  
       Nov 10, 2019 via iPhone
    还以为是 bpf
    不过也不错
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   933 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 38ms · UTC 19:41 · PVG 03:41 · LAX 12:41 · JFK 15:41
    ♥ Do have faith in what you're doing.