Portal Portal Pingviini veeb Forum Index
   |  IRC  |  Search  |  Küsimused ja vastused  |  Profile  |  Log in to check your private messages  | Log in või Register
<empty>
View next topic
View previous topic

Post new topicReply to topic
Author Message
markus
Pingviini kasutaja
Pingviini kasutaja


Age: 40
Joined: 11 Aug 2006
Posts: 43
Location: Tartu
Distributsioon: Gentoo
blank.gif
PostPosted: 25.02.2009, 13:35  Post subject:  tcpdump ja nat  

Tere,

Mul on probleem v6rgust yhe (v6i rohkema) masina identifitseerimisega mis saadavad spami v2lja. Tcpdump n2itab liiklust kyll, aga kuna NAT translatsioon toimub v2ljaspool tcpdumpi siis sisev6rgu IP ja MAC aadresside asemel on ainult gateway aadressid.

Kuidas ma saaks FreeBSD peal muutmata aadressidega pakette sniffida, et n2ha millised masinad spammivad?

_________________
Windows: A 64-bit service pack to a 32-bit extension and GUI shell to a 16-bit patch to an 8-bit operating system originally coded for a 4-bit microprocessor and sold by a 2-bit company that can't stand 1 bit of competition.

illukas
Vana Pingviin
Vana Pingviin


Age: 45
Joined: 24 Oct 2006
Posts: 2036


norway.gif
PostPosted: 25.02.2009, 13:39  Post subject:  (No subject)  

aga monitori sisevõrgu kaarti
tcpdump -i eth0

oli vist mälu järgi

_________________
https://www.inlink.ee

markus
Pingviini kasutaja
Pingviini kasutaja


Age: 40
Joined: 11 Aug 2006
Posts: 43
Location: Tartu
Distributsioon: Gentoo
blank.gif
PostPosted: 25.02.2009, 13:54  Post subject:  (No subject)  

jep. suured t2nud. Smile

_________________
Windows: A 64-bit service pack to a 32-bit extension and GUI shell to a 16-bit patch to an 8-bit operating system originally coded for a 4-bit microprocessor and sold by a 2-bit company that can't stand 1 bit of competition.

illukas
Vana Pingviin
Vana Pingviin


Age: 45
Joined: 24 Oct 2006
Posts: 2036


norway.gif
PostPosted: 25.02.2009, 14:05  Post subject:  (No subject)  

anytime!

kui on suuremad võrgud siis olen mina lasknud tcpdumbil väljundi faili saata ja pärast seda siis nämmutada oma vahenditega tcpdump -i eth0 >> kurifail.txt

_________________
https://www.inlink.ee

Display posts from previous:      
Post new topicReply to topic


View next topic
View previous topic
Powered by phpBB2 Plus based on phpBB © 2001/7 phpBB Group