wireshark分析ICMP包，如图多个请求request后是多个reply，这种情况正常吗？ wireshark如何查看有多少个icmp包？我用虚拟机向物...
\u6c42\u5927\u795e\u5e2e\u5fd9\u5206\u6790\u4e0b\uff0c\u6293\u5305\u51fa\u73b0\u8fd9\u79cd\u60c5\u51b5\u662f\u662f\u600e\u4e48\u56de\u4e8b\u3002\u5927\u91cf\u7684udp\u8bbf\u95ee\u6211\uff0c\u6211\u56deicmp\u5374\u53c8\u4e0d\u901a\uff0c\u770b\u56fe\u3002wireshark1\u3001\u786e\u5b9a\u662f\u5f00\u673a\u6293\u5305\u5c31\u6293\u5230\u8fd9\u4e9b\u4e86\uff1f\u6ca1\u6709\u6253\u5f00\u4efb\u4f55\u6d89\u53ca\u5230UDP\u7684\u5e94\u7528\uff08IP\u7535\u8bdd\u5440\u3001\u5728\u7ebf\u70b9\u64ad\u5440\u3001\u8fc5\u96f7\u4e0b\u8f7d\u5440\u5565\u7684\uff09\uff1b
2\u3001\u8fdc\u7a0b\u63a7\u5236\u662f\u8d70\u7684TCP\uff0c\u522b\u60f3\u591a\u4e86\uff1bUDP\u662f\u975e\u6307\u5411\u6027\u7684\u9ad8\u901f\u8fde\u63a5\u3002
3\u3001\u4f60\u90a3\u4e2a\u516c\u7f51IP\u6211\u641c\u4e86\u4e0b\u662f\u6f6e\u5dde\u7684\u4e00\u4e2a\u7535\u4fe1IP\uff0c\u6211\u8fd9\u8fb9\u8d70ICMP\u662f\u80fdping\u7684\u901a\u7684\u3002
\u60a8\u597d\uff0c\u6211\u8fd9\u8fb9\u7b14\u8bb0\u672c\u7535\u8111\u914d\u7f6e\u592a\u4f4e\uff0c\u505a\u4e0d\u4e86\u5b9e\u9a8c\u622a\u56fe\u3002\u60a8\u5728\u7269\u7406\u673a\u4e0a\u5b89\u88c5wireshark\uff0c\u9009\u62e9\u76f8\u5e94\u7684\u7f51\u5361\u8fdb\u884c\u6293\u5305\uff0c\u5339\u914d\u7b5b\u9009\u6761\u4ef6\u4e00\u5b9a\u8981\u7cbe\u51c6\uff1a \u6e90IP\uff1a\u865a\u62df\u673aIP\uff0c\u76ee\u7684IP\uff0c\u7269\u7406\u673aIP\uff0c\u5305\u534f\u8bae\uff1aICMP\uff0cICMP\u914d\u578b\uff1aecho-request
绛旓細濡傚浘2.1鎵绀猴紝鎴戜滑閫氳繃wireshark鎶撳寘鍚庯紝閫氳繃鍛戒护 杩囨护鍑烘潵涓浜涙姤鏂囷紝杩欎簺鎶ユ枃鍗忚閮芥槸ICMP鍗忚銆俻ing , traceroute 閮芥槸鍩轰簬ICMP鍗忚鏉ュ疄鐜扮殑銆備粠涓婂浘鎴戜滑get鍒帮細鍙IP鍗忚甯ф槸鍖呭惈鍦∕AC浠ュお甯т腑鐨勶紝鑰孖CMP鍗忚甯ф槸鍖呭惈鍦↖P鍗忚甯т腑鐨勩備笅闈㈡垜浠叿浣撲竴灞備竴灞傛娊涓濆墺鑼х殑鍒嗘瀽銆傞氳繃涓婅堪鍒嗘瀽锛屾垜浠娊璞CMP...
绛旓細wireshark杩囨护瑙勫垯锛氫竴銆両P杩囨护锛氬寘鎷潵婧怚P鎴栬呯洰鏍嘔P绛変簬鏌愪釜IP 姣斿锛歩p.src addr==192.168.0.208 or ip.src addr eq 192.168.0.208 鏄剧ず鏉ユ簮IP ip.dst addr==192.168.0.208 or ip.dst addr eq 192.168.0.208 鏄剧ず鐩爣IP 浜屻佺鍙ｈ繃婊わ細姣斿锛歵cp.port eq 80 // 涓嶇绔彛鏄潵婧...
绛旓細涓昏鍘熷洜鏄細浣犲悜DNS鏈嶅姟鍣ㄥ彂璧蜂竴涓姹傦紝浣嗗洜姝ゆ煇绉嶅師鍥狅紝DNS鍥炲缁欎綘鏃讹紝浣犲凡缁忔妸绔彛鍏抽棴浜嗭紝浜庢槸鍙堢粰鏈嶅姟鍣ㄥ彂浜嗕釜ICMP鐨勭鍙ｄ笉鍙揪淇℃伅銆傝繖鏄垜鍋氱殑瀹為獙锛氭湰鏈篒P锛10.184.155.63 DNS锛202.120.2.101 褰撴垜姝ｅ父涓婄綉鏃讹紝鍋跺皵浼氭姄鍒颁笌DNS閫氫俊鐨処CMP鍖咃紝杩欐槸Wireshark鐨鍒嗘瀽锛欼CMP鍖呴櫎浜嗚鏄嶵ype:...
绛旓細鎬ц兘鍒嗘瀽涓夋澘鏂т箣浜: 銆愬垎鏋->涓撳淇℃伅銆 Wireshark ->Analyze -> Expert Infos -> Notes,鏌ョ湅鎶撳寘鐨勭粺璁′俊鎭 鏌ョ湅鏄惁鏈塏otes銆乄arnings銆乪rrors涔嬬被鐨勪俊鎭,鐪嬬湅鏄惁鏈夌浉鍏宠鍛婂拰閿欒,鍒ゆ柇缃戠粶璐ㄩ噺銆侀噸浼犱贡搴忕瓑 [鍥剧墖涓婁紶澶辫触...(image-1e2d8b-1541746330755)] 鎬ц兘鍒嗘瀽涓夋澘鏂т箣涓: 銆愮粺璁->鏈嶅姟鍝嶅簲鏃堕棿銆 stat...
绛旓細浣跨敤浠嬬粛 绠鍗曚娇鐢ㄨ鏄 鎵撳紑wireshark锛岄変腑闇瑕佺洃鍚殑缃戝彛銆傜偣鍑绘崟鑾凤紝鐐瑰嚮寮濮嬨傚湪杩囨护鏍忚缃繃婊ゆ潯浠讹紝濡俰p.addr==10.8.17.56 and icmp锛岃鏉′欢浼氬睍绀烘簮/鐩殑ip涓10.8.17.56骞朵笖鍗忚涓篿cmp鐨勬秷鎭傛暟鎹寘璇︽儏浠嬬粛 鍦ㄦ暟鎹寘鍒楄〃涓夋嫨鎸囧畾鏁版嵁鍖咃紝鍦ㄦ暟鎹寘璇︾粏淇℃伅涓細鏄剧ず鏁版嵁鍖呯殑鎵鏈夎缁嗕俊鎭唴瀹...
绛旓細Wireshark锛堝墠绉癊thereal锛夋槸涓涓綉缁滃皝鍖鍒嗘瀽杞欢銆傜綉缁滃皝鍖呭垎鏋愯蒋浠剁殑鍔熻兘鏄挿鍙栫綉缁滃皝鍖咃紝骞跺敖鍙兘鏄剧ず鍑烘渶涓鸿缁嗙殑缃戠粶灏佸寘璧勬枡銆俉ireshark浣跨敤WinPCAP浣滀负鎺ュ彛锛岀洿鎺ヤ笌缃戝崱杩涜鏁版嵁鎶ユ枃浜ゆ崲銆傚噯澶囧伐浣滐細鎵撳紑Wireshark杞欢锛岀櫥褰晀q銆 閫夋嫨鎶撳寘锛屾墦寮qq涓庣綉鍙嬭亰澶╋紝杩囦竴浼氬仠姝㈡姄鍖呫 鍙互鐪嬪埌Wireshark鐨勪富绐楀彛...
绛旓細5銆佹搷浣滃畬鎴愬悗鐩稿叧鏁版嵁鍖呭氨鎶撳彇鍒颁簡銆備负閬垮厤鍏朵粬鏃犵敤鐨勬暟鎹寘褰卞搷鍒嗘瀽锛屽彲浠ラ氳繃鍦ㄨ繃婊ゆ爮璁剧疆杩囨护鏉′欢杩涜鏁版嵁鍖呭垪琛ㄨ繃婊わ紝鑾峰彇缁撴灉濡備笅銆傝鏄庯細ip.addr == 119.75.217.26 and icmp 琛ㄧず鍙樉绀篒CPM鍗忚涓旀簮涓绘満IP鎴栬呯洰鐨勪富鏈篒P涓119.75.217.26鐨勬暟鎹寘銆傝鏄庯細鍗忚鍚嶇Оicmp瑕佸皬鍐欍5銆wireshark鎶撳寘...
绛旓細鍦Wireshark涓浣曞尯鍒嗚繖涓ょ鎯呭喌鍛?鍙鐪嬪鏂瑰洖澶嶇殑纭(Ack)灏辫浜嗐傚鏋滆纭鍖呭惈浜嗘病鎶撳埌鐨勯偅涓寘,閭ｅ氨鏄姄鍖呭伐鍏锋紡鎺夎屽凡,鍚﹀垯灏辨槸鐪熺殑涓簡銆 椤轰究鍒嗘瀽涓涓嬪浘2杩欎釜缃戠粶鍖,瀹冩槸HTTPS浼犺緭寮傚父鏃跺湪瀹㈡埛绔姄鐨勩傚洜涓衡淟en: 667鈥濈殑灏忓寘(鍗6鍙峰寘)鍙互閫佽揪,浣嗏淟en: 1448鈥濈殑澶у寘鍗翠涪浜,璇存槑璺緞涓婂彲鑳芥湁...
绛旓細鍏蜂綋瀹為獙鍝ヤ滑浣犺嚜宸卞仛鍚э紝灏辩◢寰鐐广傚疄楠1,瀹夎鑷繁寮勶紝ICMP鐨勮瘽ping鍛戒护灏辨槸ICMP鐨勩倃irashark涓婇潰鏈夎繃婊ゆ潯鐩殑锛屽彲浠ラ夋嫨瑕佽繃婊ょ殑鍗忚锛屽洜涓虹綉缁滀俊鎭潪甯稿銆傛敞鎰忓皢wireshak鐨勭綉鍗℃ā寮忚缃垚娣锋潅妯″紡鐨勩傞夋嫨鏌愪釜鍒嗙粍灏卞彲浠ユ煡鐪嬫洿鍏蜂綋鐨勪俊鎭紝闆峰啎鐨勫唴瀹硅嚜宸鍒嗘瀽銆傚疄楠2锛學IN+R缁勫悎閿,杈撳叆cmd鎵撳紑CLI锛...
绛旓細鍦ㄨ繃鍘伙紝缃戠粶灏佸寘鍒嗘瀽杞欢鏄潪甯告槀璐碉紝鎴栨槸涓撻棬灞炰簬钀ュ埄鐢ㄧ殑杞欢銆侲thereal鐨勫嚭鐜版敼鍙樹簡杩欎竴鍒囥傚湪GNUGPL閫氱敤璁稿彲璇佺殑淇濋殰鑼冨洿搴曚笅锛屼娇鐢ㄨ呭彲浠ヤ互鍏嶈垂鐨勪唬浠峰彇寰楄蒋浠朵笌鍏舵簮浠ｇ爜锛屽苟鎷ユ湁閽堝鍏舵簮浠ｇ爜淇敼鍙婂鍒跺寲鐨勬潈鍒┿侲thereal鏄洰鍓嶅叏涓栫晫鏈骞挎硾鐨勭綉缁滃皝鍖呭垎鏋愯蒋浠朵箣涓銆傚伐浣滄祦绋嬶細锛1锛夌‘瀹Wireshark鐨勪綅缃...
