作弊条:tcpdump的几个flag
- SYN:
'tcp[13] & 2 != 0'
- ACK:
'tcp[13] & 16 !=0'
- URG:
'tcp[13] & 32 !=0'
- PSH:
'tcp[13] & 8 !=0'
- RST:
'tcp[13] & 4 !=0'
- FIN:
'tcp[13] & 1 !=0'
- SYN-ACK:
'tcp[13] = 18'
Ref: A tcpdump Tutorial and Primer
Last modified on 2010-10-13