Skip to content

Instantly share code, notes, and snippets.

@barryirwin
Created November 4, 2018 15:49
Show Gist options
  • Save barryirwin/df8447d8abdc97ae496cda9297e630c3 to your computer and use it in GitHub Desktop.
Save barryirwin/df8447d8abdc97ae496cda9297e630c3 to your computer and use it in GitHub Desktop.
#!/bin/sh
# (c) Barry Irwin <bvi@moria.org>
# November 2018
# takes in a tcpdump input as below. prints out a lsit of the source ports.
# format expected (TCp/UDP only)
# 02:57:23.020317 IP A.B.C.D.SPORT > A.B.C.D.dport : Flags [S], seq 1995830557, win 14600, length 0
cat - | awk '{print $3}' | awk -F. '{print $5}'| sed -e 's/://g' |sort | uniq -c | sort -rn
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment