Здравствуйте.
Увидел в логах левый ip, решил посмотреть что делает, куда подключается.
tcpdump -n| grep 146.185.222.33
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
18:58:39.230137 IP 146.185.222.33.49266 > 176.9.175.194.18281: Flags [ S ], seq 1384617418, win 1024, length 0
18:58:39.281185 IP 146.185.222.33.49266 > 176.9.106.134.9349: Flags [ S ], seq 1063283208, win 1024, length 0
18:58:39.322265 IP 146.185.222.33.49266 > 176.9.175.198.43660: Flags [ S ], seq 1351919529, win 1024, length 0
18:58:39.342113 IP 146.185.222.33.49266 > 176.9.106.121.49126: Flags [ S ], seq 2741941282, win 1024, length 0
18:58:39.345790 IP 146.185.222.33.49266 > 176.9.106.149.21477: Flags [ S ], seq 1554060780, win 1024, length 0
18:58:39.367884 IP 146.185.222.33.49266 > 176.9.106.122.29383: Flags [ S ], seq 3080077154, win 1024, length 0
18:58:39.693976 IP 146.185.222.33.49266 > 176.9.106.151.55971: Flags [ S ], seq 2989893315, win 1024, length 0
18:58:40.022769 IP 146.185.222.33.49266 > 176.9.106.121.41383: Flags [ S ], seq 3310431586, win 1024, length 0
18:58:40.045268 IP 146.185.222.33.49266 > 176.9.106.121.43795: Flags [ S ], seq 429759420, win 1024, length 0
18:58:40.072143 IP 146.185.222.33.49266 > 176.9.132.46.24900: Flags [ S ], seq 322786310, win 1024, length 0
18:58:40.113735 IP 146.185.222.33.49266 > 176.9.106.150.48224: Flags [ S ], seq 3848183852, win 1024, length 0
18:58:40.808491 IP 146.185.222.33.49266 > 176.9.175.194.27712: Flags [ S ], seq 3388793664, win 1024, length 0
18:58:40.880961 IP 146.185.222.33.49266 > 176.9.106.122.42326: Flags [ S ], seq 487089514, win 1024, length 0
18:58:40.905846 IP 146.185.222.33.49266 > 176.9.106.134.21751: Flags [ S ], seq 3574972602, win 1024, length 0
18:58:40.929566 IP 146.185.222.33.49266 > 176.9.106.121.18398: Flags [ S ], seq 2201936775, win 1024, length 0
18:58:41.180237 IP 146.185.222.33.49266 > 176.9.106.107.9394: Flags [ S ], seq 1385018833, win 1024, length 0
18:58:41.247400 IP 146.185.222.33.49266 > 176.9.106.149.33840: Flags [ S ], seq 2226213276, win 1024, length 0
18:58:41.278530 IP 146.185.222.33.49266 > 176.9.132.43.36895: Flags [ S ], seq 2803129431, win 1024, length 0
18:58:41.703809 IP 146.185.222.33.49266 > 176.9.106.145.4201: Flags [ S ], seq 1746833227, win 1024, length 0
18:58:42.014302 IP 146.185.222.33.49266 > 176.9.186.126.43687: Flags [ S ], seq 343827914, win 1024, length 0
18:58:42.035233 IP 146.185.222.33.49266 > 176.9.106.150.25292: Flags [ S ], seq 725698114, win 1024, length 0
18:58:42.060967 IP 146.185.222.33.49266 > 176.9.106.151.24019: Flags [ S ], seq 3363229310, win 1024, length 0
18:58:42.065278 IP 146.185.222.33.49266 > 176.9.175.195.31832: Flags [ S ], seq 3361197338, win 1024, length 0
18:58:42.356268 IP 146.185.222.33.49266 > 176.9.175.195.49827: Flags [ S ], seq 2282364337, win 1024, length 0
18:58:42.403515 IP 146.185.222.33.49266 > 176.9.175.194.14713: Flags [ S ], seq 1763321660, win 1024, length 0
18:58:42.427318 IP 146.185.222.33.49266 > 176.9.106.150.6604: Flags [ S ], seq 4192784802, win 1024, length 0
18:58:42.492874 IP 146.185.222.33.49266 > 176.9.106.107.37076: Flags [ S ], seq 225285902, win 1024, length 0
18:58:42.794977 IP 146.185.222.33.49266 > 176.9.106.146.37677: Flags [ S ], seq 1495243456, win 1024, length 0
18:58:42.823891 IP 146.185.222.33.49266 > 176.9.106.142.46964: Flags [ S ], seq 1359870145, win 1024, length 0
Мой ip 176.9.186.126, но как я могу видеть трафик к другим ip? Обычно, когда попадался подбиральщик была картинка иная, слева подбиральщик и постоянно меняющиеся порта, справа мой ip. А как это истолковать? Порт один и тот же, а ip разные и справа не только мой.
Спасибо.
Тема: Растолкуйте про tcpdump (Прочитано 487 раз)
