????????????????????????WEB????????????

??????????????￡?????????APPSERV1??APPSERV2????????????????????????IDE????????????wireshark??????й????? ??????????????????????顣

??????????????????????????У?????SERV1??SERV2????????鷳????????????????????????????????д??????????????????й? ????????APPSERV1??????tshark????wireshark????UI????????????X11??x-forwarding???????????????????? ?????????????????????????????????????????

????????????????????????е?Linux distro??????????tcpdump????????????tcpdump?????????????????????????tcpdump????????????????????? ???tcpdump?????е???????????η??

???????о????￡????÷??handy???????????????(APPSERV1)????????????????????APPSERV1??APPSERV2????????

????# tcpdump –A -n -i eth1 –s0 'host 10.20.156.9 and tcp port 9003 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'

??????????????(???man page????У????ò????????????RTFM??)??

????-A ??????????????

????-n ?????DNS????????????????????????????????IP??????(??????????)?????????????????????????(???????????????????????? ?????????????????????GNU????Щ????????ping?? traceroute????????????治?????Щ?????????????)

????-i ???????????????????????????豸????

????-s ???????????????tcpdump???????????????truncate???????????????????????????????汾??tcpdump??????????????????? ???4.1.0??????汾??????????65535???????????????????tcpdump?汾??3.9.4??????????96????????????????????? ?еúú??????????????????????????????????????????????????????tcpdump??????????????????????????????????0????????? truncate??

????host?????APPSERV2?????????????????

????tcp port??????????????????????????antx.properties??

????(((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)??????????????????????????tcpdump?????tcp???е?SYN??FIN???????Я????????????????????ACK????

??????????(?в????????????)??

???????????ù??????????????????

??????????????????tcpdump?????

????1. ????????????????????????????????????????????????????root????????????????SUID????SGID?????

????2. tcpdump?????http??????á??????????????????ASCII????????????????л???hessian??dubbo???????????????????? ???????

???????????????????????URL???????е?????????????????????????????URL???????з???????????????????????????????????÷????????????÷????????÷?????н??????÷????????????????????????÷??????????

???????????????FIDDER????????????÷?????y?????????????????????