{"id":413,"date":"2025-08-24T16:18:29","date_gmt":"2025-08-24T08:18:29","guid":{"rendered":"http:\/\/yangnanbei.top\/?p=413"},"modified":"2025-09-20T08:30:44","modified_gmt":"2025-09-20T00:30:44","slug":"nbeasytshark-09","status":"publish","type":"post","link":"http:\/\/yangnanbei.top\/index.php\/2025\/08\/24\/nbeasytshark-09\/","title":{"rendered":"nbEasyTshark 09 \u76d1\u63a7\u7f51\u5361\u8d8b\u52bf\u6d41\u91cf\u56fe"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">09 \u76d1\u63a7\u7f51\u5361\u6d41\u91cf\u8d8b\u52bf\u56fe<\/h2>\n\n\n\n<p>wireshark\u7684\u8f6f\u4ef6\u8d77\u59cb\u9875\u80fd\u591f\u5b9e\u73b0\u5b9e\u65f6\u76d1\u63a7\u7f51\u5361\u6570\u636e\uff0c\u8fd9\u80fd\u544a\u8bc9\u7528\u6237\u6bcf\u4e2a\u9002\u914d\u5668\u5f53\u524d\u7684\u6d41\u91cf\u60c5\u51b5\uff0c\u6211\u4eec\u6765\u5b9e\u73b0\u7c7b\u4f3c\u7684\u529f\u80fd\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MTQxZjc1YmI0YmJmMzdlM2FmM2E5ODhmZDNkOGZmZTlfZ2ZkQWUzdm1HQ3RoUkFxMmZhOWlLa3U1OGNyT3JyQlJfVG9rZW46Vm01SmJGUkFZb1lxajh4NkRPOGNTRnJablZnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=MTQxZjc1YmI0YmJmMzdlM2FmM2E5ODhmZDNkOGZmZTlfZ2ZkQWUzdm1HQ3RoUkFxMmZhOWlLa3U1OGNyT3JyQlJfVG9rZW46Vm01SmJGUkFZb1lxajh4NkRPOGNTRnJablZnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p>\u60f3\u8981\u5b9e\u65f6\u8f93\u51fa\u7f51\u5361\u6d41\u91cf\u6570\u636e\uff0c\u90a3\u5c31\u8981\u5b9e\u65f6\u83b7\u53d6\u5f53\u524d\u7684\u6d41\u91cf\u4fe1\u606f\u3002tshark\u662f\u5426\u53ef\u4ee5\u505a\u5230\u5462\uff1f<\/p>\n\n\n\n<p>\u53ef\u4ee5\u7528\u5982\u4e0b\u547d\u4ee4\uff1a<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>tshark -i WLAN -q -z io,stat,1<\/p>\n<\/blockquote>\n\n\n\n<p>\u8fd9\u4e2a\u547d\u4ee4\u7684\u4f5c\u7528\u662f\u4f7f\u7528\u9759\u9ed8\u6a21\u5f0f \u5728\u7ebf\u6293\u53d6\u67d0\u4e2a\u9002\u914d\u5668\u7684\u6d41\u91cf<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>-z io, stat 1\u7528\u6765\u6267\u884c\u7edf\u8ba1\uff0c\u7edf\u8ba1\u6bcf\u79d2\u7684\u6570\u636e\u5305\u6570\u91cf\u3002<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=YTYzY2Y5YjRiYWJkYjVhNTRiMWU4YThjMmQ3NjdhZTNfaFJEdWpxTlZURms1TXlud2dhMmNNTWJ3cEhwNm55NnFfVG9rZW46VVJlUmJwS2ZXb3A1UFB4VzgzZGNQdmtpblVnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=YTYzY2Y5YjRiYWJkYjVhNTRiMWU4YThjMmQ3NjdhZTNfaFJEdWpxTlZURms1TXlud2dhMmNNTWJ3cEhwNm55NnFfVG9rZW46VVJlUmJwS2ZXb3A1UFB4VzgzZGNQdmtpblVnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p>\u4f46\u662f\u8fd9\u4e2a\u65b9\u6cd5\u7684\u95ee\u9898\u662f\u7edf\u8ba1\u662f\u4e8b\u540e\u7edf\u8ba1\u7684\uff0c\u6ca1\u529e\u6cd5\u505a\u5230\u5b9e\u65f6\u7edf\u8ba1\u3002<\/p>\n\n\n\n<p>\u8981\u505a\u5230\u5b9e\u65f6\u7edf\u8ba1\uff0c\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u65b9\u6cd5\uff1a\u548c\u6293\u5305\u7c7b\u4f3c\uff0c\u4f46\u662f\u53ea\u8f93\u51fa\u4e24\u4e2a\u548c\u6d41\u91cf\u7edf\u8ba1\u76f8\u5173\u7684\u6570\u636e<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>tshark -i WLAN -T fields -e frame.time_epoch -e frame.len<\/p>\n<\/blockquote>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=YmEwOTFmMzFiMjJmMWUyZDMyMDE0YTQ2MTM0ZmY0YTZfNDVNcDFxdHNlN2hLUzYwOFNxaGhlMmV4RVdIRE9ua3dfVG9rZW46VnJiUWJ3Z1Z0b1ZnTXV4RE4yRWN4S2R0bkdmXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=YmEwOTFmMzFiMjJmMWUyZDMyMDE0YTQ2MTM0ZmY0YTZfNDVNcDFxdHNlN2hLUzYwOFNxaGhlMmV4RVdIRE9ua3dfVG9rZW46VnJiUWJ3Z1Z0b1ZnTXV4RE4yRWN4S2R0bkdmXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p>\u5982\u6b64\uff0c\u6211\u4eec\u5c06\u4e0a\u8ff0\u7684\u6570\u636e\u6309\u79d2\u805a\u5408\u5373\u53ef\u3002\u5c31\u80fd\u77e5\u9053\u6bcf\u4e00\u79d2\u7684\u6570\u636e\u6d41\u91cf\u5927\u5c0f\u4e86\uff0c\u90a3\u6bcf\u4e00\u4e2aAdapter\u90fd\u5f00\u542f\u4e00\u4e2a\u7ebf\u7a0b\u6765\u7edf\u8ba1\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;--cbp-line-number-color:#f6f6f4;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#282A36\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#f6f6f4;display:none\" aria-label=\"\u590d\u5236\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>class AdapterMonitorInfo\n{\npublic:\n    AdapterMonitorInfo() {\n        monitorTsharkPipe = nullptr;\n        tsharkPid = 0;\n    }\n\n    std::string adapterName;\n    std::map&lt;long, long> flowTrendData;\n    std::shared_ptr&lt;std::thread> monitorThread;\n    FILE* monitorTsharkPipe = nullptr;\n    PID_T tsharkPid;\n};<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M4.5 12.75l6 6 9-13.5\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M16.5 8.25V6a2.25 2.25 0 00-2.25-2.25H6A2.25 2.25 0 003.75 6v8.25A2.25 2.25 0 006 16.5h2.25m8.25-8.25H18a2.25 2.25 0 012.25 2.25V18A2.25 2.25 0 0118 20.25h-7.5A2.25 2.25 0 018.25 18v-1.5m8.25-8.25h-6a2.25 2.25 0 00-2.25 2.25v6\"><\/path><\/svg><\/span><pre class=\"shiki dracula-soft\" style=\"background-color: #282A36\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F286C4\">class<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #97E1F1\">AdapterMonitorInfo<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F286C4\">public:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #62E884\">AdapterMonitorInfo<\/span><span style=\"color: #F6F6F4\">() {<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        monitorTsharkPipe <\/span><span style=\"color: #F286C4\">=<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">nullptr<\/span><span style=\"color: #F6F6F4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        tsharkPid <\/span><span style=\"color: #F286C4\">=<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">0<\/span><span style=\"color: #F6F6F4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    }<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    std<\/span><span style=\"color: #F286C4\">::<\/span><span style=\"color: #F6F6F4\">string adapterName;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    std<\/span><span style=\"color: #F286C4\">::<\/span><span style=\"color: #F6F6F4\">map<\/span><span style=\"color: #F286C4\">&lt;long<\/span><span style=\"color: #F6F6F4\">, <\/span><span style=\"color: #F286C4\">long&gt;<\/span><span style=\"color: #F6F6F4\"> flowTrendData;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    std<\/span><span style=\"color: #F286C4\">::<\/span><span style=\"color: #F6F6F4\">shared_ptr<\/span><span style=\"color: #F286C4\">&lt;<\/span><span style=\"color: #F6F6F4\">std<\/span><span style=\"color: #F286C4\">::<\/span><span style=\"color: #F6F6F4\">thread<\/span><span style=\"color: #F286C4\">&gt;<\/span><span style=\"color: #F6F6F4\"> monitorThread;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    FILE<\/span><span style=\"color: #F286C4\">*<\/span><span style=\"color: #F6F6F4\"> monitorTsharkPipe <\/span><span style=\"color: #F286C4\">=<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">nullptr<\/span><span style=\"color: #F6F6F4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    PID_T tsharkPid;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">};<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u6bcf\u4e00\u4e2a\u7f51\u5361\u90fd\u9700\u8981\u7528<code>AdapterMonitorInfo<\/code>\u6765\u8bb0\u5f55\u5176\u5c5e\u6027\uff0c\u800c\u6240\u6709\u7684<code>AdapterMonitorInfo<\/code>\u5bf9\u8c61\u90fd\u9700\u8981\u518d\u7edf\u4e00\u7684\u4fdd\u5b58\u8d77\u6765\uff0c\u653e\u5230<code>TsharkManager<\/code>\u4e2d\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>    \/* monitor the flow trend *\/\n    std::map&lt;std::string, AdapterMonitorInfo&gt; adapterFlowTrendMonitorMap;\n\n    \/* protect trend map *\/\n    std::recursive_mutex adapterFlowTrendMapLock;<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u76d1\u63a7\u7f51\u5361\u6570\u636e<\/h3>\n\n\n\n<p>\u65e2\u7136\u6bcf\u4e2a\u7f51\u5361\u90fd\u9700\u8981\u542f\u7ebf\u7a0b\u53bbcapture\uff0c\u90a3\u4e48\u62c6\u89e3\u4efb\u52a1\u76ee\u6807\uff1a<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>\u83b7\u53d6\u73b0\u5728\u7684\u7f51\u5361\u9002\u914d\u5668\u5217\u8868<\/li>\n\n\n\n<li>\u6bcf\u4e2a\u7f51\u5361\u542f\u52a8\u4e00\u4e2a\u7ebf\u7a0b\uff0c\u7edf\u8ba1\u5bf9\u5e94\u7f51\u5361\u7684\u6570\u636e\n<ol class=\"wp-block-list\">\n<li>\u7edf\u8ba1\u6bcf\u4e00\u79d2\u79cd\u7684\u5305\u6570\uff0c\u800c\u540e\u6c47\u603b<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>\u5728\u7b49\u5f85\u4e00\u5b9a\u65f6\u95f4\u540e\uff0c\u6740\u6389tshark\u8ba9\u7ba1\u9053\u7834\u88c2\u7ed3\u675f<\/li>\n\n\n\n<li>\u8f93\u51fa\u6570\u636e<\/li>\n<\/ol>\n\n\n\n<p>\u76f8\u5173\u547d\u4ee4:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>tsharkPath + &#8221; -i \\&#8221;&#8221; + adapterName + &#8220;\\&#8221; -T fields -e frame.time_epoch -e frame.len&#8221;<\/p>\n<\/blockquote>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=N2M4NzYxMjRhNTgzNWY4ZTkwZWFhNGU4MzdiYWQxYWVfTUdKZmc3b0s2TlJjcTQxSjhQWVJmZDRyMUZmN0VhSUVfVG9rZW46QTJSTGJpa1VMb0Ftemp4aXlsVmN2SWExbjlnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=N2M4NzYxMjRhNTgzNWY4ZTkwZWFhNGU4MzdiYWQxYWVfTUdKZmc3b0s2TlJjcTQxSjhQWVJmZDRyMUZmN0VhSUVfVG9rZW46QTJSTGJpa1VMb0Ftemp4aXlsVmN2SWExbjlnXzE3NTgzMjgyMDE6MTc1ODMzMTgwMV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10 \u67e5\u770b\u6570\u636e\u5305\u8be6\u60c5\u548c\u534f\u8bae\u6784\u5efa<\/h2>\n\n\n\n<p>wireshark\u4e2d\u53ef\u4ee5\u83b7\u53d6\u6570\u636e\u5305\u7684\u8be6\u7ec6\u534f\u8bae\u6811\u4fe1\u606f\uff0c\u6211\u4eec\u4e5f\u9700\u8981\u505a\u5230\u7c7b\u4f3c\u7684\u529f\u80fd<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=OTA0ODQ3YTczZTYyNDllYTY5MGMzNGIyNmIxMWMyMDhfTTZJVENyNEcwaFBVZmFmUmhPWHpjM085VGZUcmJ4MlVfVG9rZW46UzhHM2JyQ2Nvb2psVnF4NmFtV2NRZFk3blYyXzE3NTgzMjgyMzU6MTc1ODMzMTgzNV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=OTA0ODQ3YTczZTYyNDllYTY5MGMzNGIyNmIxMWMyMDhfTTZJVENyNEcwaFBVZmFmUmhPWHpjM085VGZUcmJ4MlVfVG9rZW46UzhHM2JyQ2Nvb2psVnF4NmFtV2NRZFk3blYyXzE3NTgzMjgyMzU6MTc1ODMzMTgzNV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p>\u5982\u4f55\u5b9e\u73b0\u5462\uff1f\u6211\u4eec\u53ef\u4ee5\u7528<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>tshark -T pdml<\/p>\n\n\n\n<p>tshark -r capture.pcap -Y &#8220;frame.number==1&#8221; -T pdml &gt; packets.xml<\/p>\n<\/blockquote>\n\n\n\n<p>\u547d\u4ee4\u83b7\u53d6\u534f\u8bae\u6811\u7684\u8be6\u7ec6\u4fe1\u606f<\/p>\n\n\n\n<p>packets.xml\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=ZDExOTEzYmMzZDFhM2VmNjEyZjJmNTY3ZWI0MWQzNWFfZGF3bDF0a1A4VUhlUldOMWxkYVo4NmFrVWtKRU9zQnRfVG9rZW46UTN6N2Ixdks5b09oWG54QjQwdWNVaTBTbjlnXzE3NTgzMjgyMzU6MTc1ODMzMTgzNV9WNA'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/syfdjmqori.feishu.cn\/space\/api\/box\/stream\/download\/asynccode\/?code=ZDExOTEzYmMzZDFhM2VmNjEyZjJmNTY3ZWI0MWQzNWFfZGF3bDF0a1A4VUhlUldOMWxkYVo4NmFrVWtKRU9zQnRfVG9rZW46UTN6N2Ixdks5b09oWG54QjQwdWNVaTBTbjlnXzE3NTgzMjgyMzU6MTc1ODMzMTgzNV9WNA\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>09 \u76d1\u63a7\u7f51\u5361\u6d41\u91cf\u8d8b\u52bf\u56fe wireshark\u7684\u8f6f\u4ef6\u8d77\u59cb\u9875\u80fd\u591f\u5b9e\u73b0\u5b9e\u65f6\u76d1\u63a7\u7f51\u5361\u6570\u636e\uff0c\u8fd9\u80fd\u544a\u8bc9\u7528\u6237\u6bcf\u4e2a\u9002\u914d\u5668\u5f53\u524d\u7684 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":395,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,11,7,8],"tags":[40,71,70,49],"class_list":["post-413","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-tools","category-network","category-network_codeing","tag-c","tag-tshark","tag-wireshark","tag-49"],"_links":{"self":[{"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/posts\/413"}],"collection":[{"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/comments?post=413"}],"version-history":[{"count":2,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/posts\/413\/revisions"}],"predecessor-version":[{"id":454,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/posts\/413\/revisions\/454"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/media\/395"}],"wp:attachment":[{"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/media?parent=413"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/categories?post=413"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/yangnanbei.top\/index.php\/wp-json\/wp\/v2\/tags?post=413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}