Provides the functionality of tcpdump but with a graphical ui and scalable plug-in architecture 提供tcpdump的功能,它具有图形用户界面和可伸缩的插入式架构。
After taking a look at the situation with tcpdump, i determine that this is yet another bob attack, and i figure out what ip addresses he s using to launch it 在查看了tcpdump的情况之后,我确定这还是bob实施的另一次攻击,我推算出他用于发起攻击的ip地址。
This method can be extend to many bsd unix platforms . 2 ) we analyze windump and winpcap, and we test tcpdump and windump with multiple traffic conditions in 1000mbps environment 对bpf的改进虽然是在linux上进行的,但应能较容易地推广到其它bsdunix和由bsd演化而来的许多unix实现中。
Bsd packet filter ( bpf ) lies in the kernel of bsd unix, it is independent of the tcp / ip stack, and gives user mode processes a raw interface to access data link layer, it has been widely used in network monitors and other softwares, such as tcpdump bsd包过滤器(bsdpacketfilter,简称bpf)位于bsdunix的内核中,它独立于tcpip协议栈,为应用程序访问数据链路层提供了一个原始接口,被广泛地运用在网络监控及其它软件中,如tcpdump。
This thesis studies traffic capture techniques of high speed networks . the main contributions include : 1 ) we analyze tcpdump, and bpf, a popular traffic capture tool; and we analyze some problems in bpf programming that induced by bpf in ethernet environment . a method resolves these problems is proposed 主要工作有:1)对目前比较常用的流量捕获和监测工具tcpdump及其核心bpf的工作原理进行了分析,并针对bpf在以太网卡被设置成混杂模式时存在的问题和由此引起的对bpf编程的问题进行了分析,并论述了解决的方法。