質問: 0x504f5354)'获取http:tcpdump -a -s 0 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'tcpdump -x -s 0 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)'
回答: 获取get:sudo tcpdump -s 0 -a 'tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420'获取post:sudo tcpdump -s 0 -a 'tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354)'获取http:tc