Wireshark 常用命令

1. Linux监听端口抓包

tcpdump -i any -s0 port 9000 -w 9000.pcap -vv tcpdump -i any port 9000 and host 10.10.10.10 -w 9000.pcap 

2. 过滤某URL

http.request.uri.contains "url" 

文章来源: https://blog.csdn.net/weixx3/article/details/92187739