ipftest -
Ǥ?դ????Ϥ??Ф??ƥѥ??åȥե??륿?롼?????ƥ??Ȥ???
ipftest [ -vbdPRSTEHX ] [ -I interface ] -r
<filename> [ -i <filename> ] [ -s <ipaddress>
]
ipftest ?ϡ?
?ե??륿?롼?뽸?????٤????????֤????˥ƥ??ȤǤ????褦?ˤ???
???????????Ƥ??ޤ???
??????ư??ơ??ե??륿?롼???θ??̤??ƥ??Ȥ??ޤ???
?????? IP
?Ķ????????˺ݤ??????????Ǿ??ˤǤ????Ф褤?Ȥ??????ȤǤ???
ipftest ?ϡ?ipf
??ɸ???롼?륻?åȤ????ᤷ??
?????????Ϥ??Ф???Ŭ?Ѥ??????̤Ȥ??ƽ??Ϥ??֤??ޤ???
?????????ե??륿???̲ᤷ???ѥ??åȤ??Ф???
ipftest ???֤??Τϡ? ???? 3
?Ĥ??ͤΤ????? 1 ?ĤǤ?: pass, block,
nomatch?? ?????ϡ?
?ѥ??åȤ??ե??륿?롼?륻?åȤ??̲᤹???ˤ????äƲ???ȯ?????Ƥ????Τ??˴ؤ???
???ڥ졼???????????????뤳?Ȥ??տޤ??Ƥ??ޤ???
-S, -T, -E
?Τ??????Υ??ץ??????????Ѥ??ʤ????硢
ipftest
?ϸ?ͭ?Υƥ????????ϥե????ޥåȤ????Ѥ???
?ֵ?????IP ?ѥ??åȤ????????ޤ???
???Ѥ????ե????ޥåȤϼ??ΤȤ????Ǥ?:
"in"|"out" "on" if ["tcp"|"udp"|"icmp"]
srchost[,srcport] dsthost[,destport] [FSRPAU]
???륤?ե????? (if) ?ˤơ? ????
("in") ?ޤ??ϽФ? ("out")
?ѥ??åȤ??????Ǥ??ޤ???
???ץ??????Ȥ??Ƽ??ץץ??ȥ??? 3
?Ĥ??椫?? 1 ?Ĥ??????Ǥ??ޤ??? TCP
?ޤ??? UDP
?ξ??硢?ݡ??ȥѥ?????λ?????ɬ?פǤ???
TCP ?????줿???硢(???ץ??????Ȥ???)
?Ǹ??? TCP ?ե饰????????ǽ?Ǥ???
?ʲ??????????ļ????ޤ?:
# le0 ?????夹?? UDP ?ѥ??å?
in on le0 udp 10.1.1.1,2210 10.2.1.5,23
# localhost ???? le0 ?????夹?? IP ?ѥ??å? - ?????? :)
in on le0 localhost 10.4.12.1
# SYN ?ե饰?????ꤵ???? le0 ?????ФƹԤ? TCP ?ѥ??å?
out on le0 tcp 10.4.12.1,2245 10.1.1.1,23 S
- -v
- ??Ĺ?⡼?ɡ?
?̲ᤷ???ޤ??Ϥ??ʤ??ä????ϥѥ??åȤ??Ф???
?롼???Τɤ???ʬ???ޥå??????Τ??˴ؤ????????ܤ????????????ޤ???
- -d
- ?ե??륿?롼???ǥХå????ˤ??ޤ???
???ߤϡ?IP
?إå??????å??ˤ????ơ??롼?뤬?ޥå????ʤ??ä???ͳ??ɽ??
?????????Ǥ?
(???ɥ쥹/?ͥåȥޥ????ʤ?)??
- -b
- ?ѥ??åȤ??ե??륿???̤??????̤ν??Ϥ???û???ޤȤ?
(1 ??)?? ???ʤ??? "pass", "block",
"nomatch" ?Τ????줫?ˤ??ޤ???
?ꥰ???å??????ƥ??Ȥκݤ˻??Ѥ??ޤ???
- -I <interface>
- (?롼???Υޥå??˻??Ѥ?????)
???ե?????̾???ꤵ?줿̾???????ꤷ?ޤ???
??????ˡ̵???ˤϥѥ??åȤȥ??ե??????Ȥ???Ϣ?դ??????ʤ???
-P, -S, -T, -E
?γƥ??ץ??????ˤ?????ͭ?ѤǤ???
?̾??Ρ֥ƥ????ȥѥ??åȡפϡ???????????ͥ?褷?ޤ???
- -P
- -i ?ǻ??ꤵ???????ϥե??????ϡ? libcap
(???ʤ??? tcpdump ?С??????? 3)
???????????Х??ʥ??ե??????Ǥ???
???Υե????뤫???ɤޤ줿?ѥ??åȤϡ?(?롼?????Ф???)
???Ϥˤʤ??ޤ??? ???ե???????
-I ?ǻ?????ǽ?Ǥ???
- -R
- ?롼?????????ɤ????ΤǤϤʤ????????ޤ???
???Υ??ץ??????ϥȥ??뤷?ޤ????Τǡ?
???????ꤷ???? -R
???˻??Ѥ??Ƥ??????Ǥ??ޤ?????
- -S
- ???ϥե??????ϡ֥??̡??סץե????ޥå?
(RFC 1761 ????) ?Ǥ???
?ѥ??åȤϤ??Υե????뤫???ɤ????졢
Ǥ?դΥ??ե??????????????ϤȤ??ƻ??Ѥ????ޤ???
?????餯???ߤΤȤ????????줬?Ǥ?ͭ?Ѥ????ϥ????פǤ??礦??
- -T
- ???ϥե??????? tcpdump
?Υƥ????Ƚ??ϤǤ???
???ߥ??ݡ??Ȥ????Ƥ????ƥ????ȥե????ޥåȤϡ?
???? tcpdump
???ץ????????Ȥ߹??碌?ν??ϤǤ?:
tcpdump -n
tcpdump -nq
tcpdump -nqt
tcpdump -nqtt
tcpdump -nqte
- -H
- ???ϥե??????? 16
?ʿ??Ǥ??ꡢ?ѥ??åȤΥХ??ʥ깽¤??ɽ??????ɬ?פ??????ޤ???
IP
?إå???Ĺ???????????ʤ??Ƥ⡢Ĺ?????????????ޤ?????
1 ?ĤΥѥ??åȤ?ʣ???Ԥ? 16
?ʿ??ȥѥ??åȽ?ü??ɽ?????ԤȤ?
ʬ?䤵???Ƥ??Ƥ⤫?ޤ??ޤ?????
???ե?????̾?ȥѥ??åȤ?
(?ե??륿?????Ф???) ?????Ȥ???
[direction,interface]
?Ȥ????????ǻ??ꤹ?뤳?Ȥ??Ǥ??ޤ???
le0 ????ã?????ѥ??åȤ????ꤹ????????
[in,le0] ?Τ褦?˻Ȥ??ޤ?
(?????ǡ?[]
??ʸ????ɬ?פǤ??ꡢ???Ϥ?ʸˡ?ΰ????Ǥ?)??
- -X
- ???ϥե??????? IP
?ѥ??åȤΥƥ????ȵ??Ҥ????ʤ??ޤ???
- -E
- ???ϥե??????? etherfind
?Υƥ????Ƚ??ϤǤ???
???ߥ??ݡ??Ȥ????Ƥ????ƥ????ȥե????ޥåȤϡ?
???? etherfind
???ץ????????Ȥ߹??碌?ν??ϤǤ?:
etherfind -n
etherfind -n -t
- -i <filename>
- ???Ϥ??????ե?????̾?????ꤷ?ޤ????ǥե????Ȥ?ɸ?????ϤǤ???
- -r <filename>
- ?ե??륿?롼?????ɤ????ե?????̾?????ꤷ?ޤ???
- -s <ipaddress>
- ???Ͻ? ipftest
???Ф??ƥѥ??åȤ????????ʤΤ????????ʤΤ???
?????Ǥ??ʤ??????ˤ????ơ????Υ??ץ???????
IP ???ɥ쥹?????ꤹ???ȡ?
???????ɥ쥹?????Υ??ɥ쥹?˥ޥå??????????ˤ??????????????ˤʤꡢ
???????ɥ쥹?????Υ??ɥ쥹?˥ޥå??????????ˤ??????????????ˤʤ??ޤ???
ipf(5), ipf(8), snoop(1m), tcpdump(8), etherfind(8c)
???Ϸ????ˤ??äƤϡ??ƥ??Ȥ?ͭ?Ѥʤ??Ȥ??餹?٤ƤС??Ǥ????ۤ?
??ʬ??¿??¿?ͤʥѥ??åȤ?ɽ???Ǥ??ޤ?????