| /scripts/alcasar-iot_capture.sh |
|---|
| 31,7 → 31,7 |
| function launch |
| { |
| # capture only one @MAC, on $INTIF, max filesize=10M, without flows to PRIVATE_IP except DNS |
| tcpdump "ether host $1 && (host $PRIVATE_IP && port 53) || host not $PRIVATE_IP" -i $INTIF -n -C 10 -W 1 -w /var/Save/iot_captures/$1.pcap |
| sudo tcpdump "ether host $1 and (host not $PRIVATE_IP or port 53)" -i $INTIF -n -C 10 -W 1 -w /var/Save/iot_captures/$1.pcap |
| } |
| function flush |