Skip to content

Instantly share code, notes, and snippets.

@teixeira0xfffff

teixeira0xfffff/gist:2ed9152acea792be7dffbf0aa0191b29

Last active July 31, 2019 10:55
Show Gist options
  • Save teixeira0xfffff/2ed9152acea792be7dffbf0aa0191b29 to your computer and use it in GitHub Desktop.
Save teixeira0xfffff/2ed9152acea792be7dffbf0aa0191b29 to your computer and use it in GitHub Desktop.
Download ZIP
Argus/TCPDump/Tshark Date real time
Raw
gistfile1.txt
~ apt install tcpdump
~ apt install argus-client
~tcpdump -nn -s0 -rYourdump.pcap -w - |argus -r - -AZJmR -w - |ra -n -Zb -L10 -r - -s +dur +synack +ackdat +swin +dwin +rate +ĺoad +tcprtt +loss +runtime +retrans +sgap +dgap - tcp |xargs -d$'\n' -L1 sh -c 'date "+%d.%m.%Y %T $0"'
@teixeira0xfffff
Copy link
Author

EAzGbXGW4AAe-ps
#tshark -rsc.cap -Eseparator=, -Tfields -eip.src -etcp.flags.str -eip.dst -etcp.dstport |grep -v ",," |sed 's/"//g;s/[//;s/]//' | sed 's/ /,/g;s/,/:/3' |sed '1i Origen,Flag,Destino,Cant' | ... |jq ' group_by(.Origen)[] | {(.[0].Origen): [.[] | .Destino]}'

@teixeira0xfffff
Copy link
Author

teixeira0xfffff commented Jul 31, 2019 •
edited
Loading

tcpdump/argus printer HEX 'potito mode'

tcpdump -nnrmalspam.pcap -s0 -w - |argus -r - -AZJmRU 1024 -w - |ra -L1 -c' ' -n -Zb -r - -Mprinter="hex" -s +dur +rate +ĺoad +runtime +loss +bytes +sbytes +dbytes +appbytes +suser:750 +duser:750 ..

EAuLHitXoAEGMpy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment