通过tcpdump 观察系统上具体端口的流量

不过在尝试阶段，继续了解。


具体代码：

#!/bin/bash
PATH="/var/PROGRAM/MANAGEMENT/modules/xbash:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:"
LANG=zh_CN
export PATH LANG

usage="-t : which module (perl or bash shell) to be used;"
usage2="-p : which port to be watched;"

if [[ $# -eq 0 ]]
   then
      echo $usage
      echo $usage2
      exit
fi

NUM=100

TYPE=p
PORT=80

while getopts "t:p:" options;do
        case $options in
                t) TYPE="$OPTARG" ;;
                p) PORT="$OPTARG";;
                *) echo  usage
                   echo  usage2;;
        esac
done


if echo $TYPE | grep -q "p"
  then
    for myport in `echo $PORT | sed "s/:/ /g" | xargs`
      do
        tcpdump -c $NUM -v port $myport | perl -ne '$rev=substr($_,index($_, "length: ")); print $rev' | perl -ne '$rev=$rev=substr($_,length("length: "),index($_,")")-index($_,": ")-2); print $rev,"\n"'  | awk 'BEGIN{sum=0}{sum+=$1;}END{print "Total_Network:" sum" bytes"}'
      done
else if echo $TYPE | grep -q "s"
     then
       for myport in `echo $PORT | sed "s/:/ /g" | xargs`
         do
          tcpdump  -c $NUM -v port $myport | grep length:*  | awk '{print $(17)}' | sed "s#)##" | awk 'BEGIN{sum=0}{sum+=$1};END{print "Total_Network:" sum" bytes"}'
         done
     fi

fi