命令:user@host> monitor traffic <absolute-sequence> <countnumber> <interfaceinterface-name> <layer2-he
.
命令:
user@host> monitor traffic <absolute-sequence> <countnumber> <interfaceinterface-name> <layer2-headers> <matching "expression"> <no-domain-names> <no-promiscuous> <no-resolve> <no-timestamp> <print-ascii> <print-hex> <sizebytes> <brief | detail | extensive>
退出抓包可以输入：Ctrl-C
命令行选项说明：
<td style="padding-top: 1px; pad
Option | Description |
absolute-sequence | (Optional) Displays the absolute TCP sequence numbers. |
count number | (Optional) Displays the specified number of packet headers. Specify a value from 0 through 100,000. The command quits and exits to the command prompt after this number is reached. |
interface interface-name | (Optional) Displays packet headers for traffic on the specified interface. If an interface is not specified, the lowest numbered interface is monitored. |
layer2-headers | (Optional) Displays the link-layer packet header on each line. |
matching "expression" | (Optional) Displays packet headers that match an expression enclosed in quotation marks (" "). Table 212 through Table 214 list match conditions, logical operators, and arithmetic, binary, and relational operators you can use in the expression. |
no-domain-names | (Optional) Suppresses the display of the domain name portion of the hostname. |
no-promiscuous | (Optional) Specifies not to place the monitored interface in promiscuous mode. In promiscuous mode, the interface reads every packet that reaches it. In nonpromiscuous mode, the interface reads only the packets addressed to it. |
no-resolve | (Optional) Suppresses the display of hostnames. |
no-timestamp | (Optional) Suppresses the display of packet header timestamps. |
print-ascii | (Optional) Displays each packet header in ASCII format. |
print-hex |
