作弊条:tcpdump的几个flag
  • SYN: 'tcp[13] & 2 != 0'
  • ACK: 'tcp[13] & 16 !=0'
  • URG: 'tcp[13] & 32 !=0'
  • PSH: 'tcp[13] & 8 !=0'
  • RST: 'tcp[13] & 4 !=0'
  • FIN: 'tcp[13] & 1 !=0'
  • SYN-ACK: 'tcp[13] = 18'

Ref: A tcpdump Tutorial and Primer


Last modified on 2010-10-13