请教高手有关tcpdump抓的包

jiang313hua

以下是我用tcpdump抓的包：
16:38:36.898883 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34333: P 1:283(282) ack 105 win 33304 <nop,nop,timestamp 741570 7687514>
16:38:36.898902 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34333: F 283:283(0) ack 105 win 33304 <nop,nop,timestamp 741570 7687514>
16:38:36.900506 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34333: . ack 106 win 33303 <nop,nop,timestamp 741570 7687517>
16:38:41.904853 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34334: S 3515627454:3515627454(0) ack 2924226216 win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 742071 7692522,nop,nop,sackOK>
16:38:41.907476 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34334: P 1:283(282) ack 105 win 33304 <nop,nop,timestamp 742071 7692523>
16:38:41.907494 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34334: F 283:283(0) ack 105 win 33304 <nop,nop,timestamp 742071 7692523>
16:38:41.909225 IP  web-lvs_rs-01. .cn.http > x.x.x.x.34334: . ack 106 win 33303 <nop,nop,timestamp 742071 7692526>

16:39:57.066345 IP x.x.x.x.34349 >  web-lvs_rs-01. .cn.http: . ack 709062987 win 1460 <nop,nop,timestamp 7767695 749588>
16:39:57.066790 IP x.x.x.x.34349 >  web-lvs_rs-01. .cn.http: P 0:104(104) ack 1 win 1460 <nop,nop,timestamp 7767696 749588>
16:39:57.069211 IP x.x.x.x.34349 >  web-lvs_rs-01. .cn.http: . ack 283 win 1728 <nop,nop,timestamp 7767698 749588>
16:39:57.070231 IP x.x.x.x.34349 >  web-lvs_rs-01. .cn.http: F 104:104(0) ack 284 win 1728 <nop,nop,timestamp 7767699 749588>
16:40:02.073642 IP x.x.x.x.34350 >  web-lvs_rs-01. .cn.http: S 2993468700:2993468700(0) win 5840 <mss 1460,sackOK,timestamp 7772703 0,nop,wscale 2>
16:40:02.074562 IP x.x.x.x.34350 >  web-lvs_rs-01. .cn.http: . ack 3754256806 win 1460 <nop,nop,timestamp 7772704 750089>
16:40:02.075062 IP x.x.x.x.34350 >  web-lvs_rs-01. .cn.http: P 0:104(104) ack 1 win 1460 <nop,nop,timestamp 7772705 750089>
16:40:02.077181 IP x.x.x.x.34350 >  web-lvs_rs-01. .cn.http: . ack 283 win 1728 <nop,nop,timestamp 7772707 750089>
16:40:02.078268 IP x.x.x.x.34350 >  web-lvs_rs-01. .cn.http: F 104:104(0) ack 284 win 1728 <nop,nop,timestamp 7772708 750089>

能请教一下其中的意义吗？

platinum

哪里不明白？能看懂哪些？哪些看不懂？

tieren_1000

楼上的我想用tcpdump 抓有恶意的包如何加参数,譬如抓syn+fin标记的包.谢谢指导!!

tieren_1000

请知道的给个回复,谢谢!!