{"id":95,"date":"2010-12-05T07:41:18","date_gmt":"2010-12-05T07:41:18","guid":{"rendered":"http:\/\/www.xiit.cn\/?p=24"},"modified":"2010-12-05T07:41:18","modified_gmt":"2010-12-05T07:41:18","slug":"%e6%94%b6%e4%ba%86%e4%b8%80%e5%a0%86netstat%e5%91%bd%e4%bb%a4%ef%bc%8c%e5%88%a4%e6%96%adcc%e7%94%a8","status":"publish","type":"post","link":"https:\/\/xiit.cn\/index.php\/2010\/12\/05\/%e6%94%b6%e4%ba%86%e4%b8%80%e5%a0%86netstat%e5%91%bd%e4%bb%a4%ef%bc%8c%e5%88%a4%e6%96%adcc%e7%94%a8\/","title":{"rendered":"\u6536\u4e86\u4e00\u5806netstat\u547d\u4ee4\uff0c\u5224\u65adCC\u7528"},"content":{"rendered":"<p>\u67e5\u770b\u6240\u670980\u7aef\u53e3\u7684\u8fde\u63a5\u6570<\/p>\n<blockquote><p><code>netstat -nat|grep -i \"80\"|wc -l<\/code><\/p><\/blockquote>\n<p>\u5bf9\u8fde\u63a5\u7684IP\u6309\u8fde\u63a5\u6570\u91cf\u8fdb\u884c\u6392\u5e8f<\/p>\n<blockquote><p><code>netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n<\/code><\/p><\/blockquote>\n<p>\u67e5\u770b80\u7aef\u53e3\u8fde\u63a5\u6570\u6700\u591a\u768420\u4e2aIP<\/p>\n<blockquote><p><code>netstat -anlp|grep 80|grep tcp|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|head -n20<br \/>\nnetstat -ant |awk '\/:80\/{split($5,ip,\":\");++A[ip[1]]}END{for(i in A) print A,i}' |sort -rn|head -n20<\/code><\/p><\/blockquote>\n<p><!--more--><br \/>\n\u67e5\u770bTCP\u8fde\u63a5\u72b6\u6001<\/p>\n<blockquote><p><code>netstat -nat |awk '{print $6}'|sort|uniq -c|sort -rn<br \/>\nnetstat -n | awk '\/^tcp\/ {++S[$NF]};END {for(a in S) print a, S[a]}'<br \/>\nnetstat -n | awk '\/^tcp\/ {++state[$NF]}; END {for(key in state) print key,\"t\",state[key]}'<br \/>\nnetstat -n | awk '\/^tcp\/ {++arr[$NF]};END {for(k in arr) print k,\"t\",arr[k]}'<br \/>\nnetstat -n |awk '\/^tcp\/ {print $NF}'|sort|uniq -c|sort -rn<br \/>\nnetstat -ant | awk '{print $NF}' | grep -v '[a-z]' | sort | uniq -c<\/code><\/p><\/blockquote>\n<p>\u7528tcpdump\u55c5\u63a280\u7aef\u53e3\u7684\u8bbf\u95ee\u770b\u770b\u8c01\u6700\u9ad8<\/p>\n<blockquote><p><code>tcpdump -i eth0 -tnn dst port 80 -c 1000 | awk -F \".\" '{print $1\".\"$2\".\"$3\".\"$4}' | sort | uniq -c | sort -nr |head -20<\/code><\/p><\/blockquote>\n<p>\u67e5\u627e\u8f83\u591atime_wait\u8fde\u63a5<\/p>\n<blockquote><p><code>netstat -n|grep TIME_WAIT|awk '{print $5}'|sort|uniq -c|sort -rn|head -n20<\/code><\/p><\/blockquote>\n<p>\u627e\u67e5\u8f83\u591a\u7684SYN\u8fde\u63a5<\/p>\n<blockquote><p><code>netstat -an | grep SYN | awk '{print $5}' | awk -F: '{print $1}' | sort | uniq -c | sort -nr | more<\/code><\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>\u67e5\u770b\u6240\u670980\u7aef\u53e3\u7684\u8fde\u63a5\u6570 netstat -nat|grep -i &#8220;80&#8221;|wc -l \u5bf9\u8fde\u63a5\u7684IP\u6309\u8fde\u63a5\u6570 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[26,35],"class_list":["post-95","post","type-post","status-publish","format-standard","hentry","category-linux","tag-cc","tag-netstat"],"_links":{"self":[{"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/posts\/95","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/comments?post=95"}],"version-history":[{"count":0,"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/posts\/95\/revisions"}],"wp:attachment":[{"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/media?parent=95"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/categories?post=95"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiit.cn\/index.php\/wp-json\/wp\/v2\/tags?post=95"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}