tcpdump抓包時IP地址莫名其妙變爲bogon,應該是和DNS或者hostname有一定的關係,但是我的電腦hostname又沒有修改,應該和我修改了虛擬機配置有關係。
找到一種辦法是在tcpdump中加參數-nn,姑且解決一下問題。
加參數前:
root@ubuntu:/home/cling60# tcpdump -vv -i eth3 -c 10
tcpdump: listening on eth3, link-type EN10MB (Ethernet), capture size 262144 bytes
17:32:12.476102 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476111 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476155 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476158 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476161 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476168 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.476170 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.516051 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.516106 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
17:32:12.516109 IP (tos 0x0, ttl 32, id 4, offset 0, flags [none], proto UDP (17), length 46)
bogon.discard > bogon.discard: [no cksum] UDP, length 18
10 packets captured
1126 packets received by filter
837 packets dropped by kernel
加參數後:
root@ubuntu:/home/cling60# tcpdump -nn -vv -i eth3 -c 10
tcpdump: listening on eth3, link-type EN10MB (Ethernet), capture size 262144 bytes
17:35:16.961262 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.961726 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.962658 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.962710 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.962714 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.962723 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.962730 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.984193 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.984222 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
17:35:16.984225 IP (tos 0x0, ttl 32, id 8, offset 0, flags [none], proto UDP (17), length 46)
192.168.19.129.9 > 192.168.19.128.9: [no cksum] UDP, length 18
10 packets captured
422 packets received by filter
139 packets dropped by kernel