« Commandes BASH » : différence entre les versions
| Ligne 652 : | Ligne 652 : | ||
<syntaxhighlight lang="bash" line copy> | <syntaxhighlight lang="bash" line copy> | ||
sudo tshark -i eth0 -Y "ip.addr == 192.168.1.10" | sudo tshark -i eth0 -Y "ip.addr == 192.168.1.10" | ||
</syntaxhighlight> | |||
Analyse DNS ciblée | |||
<syntaxhighlight lang="bash" line copy> | |||
sudo tshark -i eth0 -f "port 53" -Y "dns" -T fields \ | |||
-e frame.time -e ip.src -e ip.dst -e dns.qry.name -e dns.qry.type -e dns.flags.response \ | |||
-E separator=, -E quote=d | |||
</syntaxhighlight> | </syntaxhighlight> | ||