tcpdump後臺抓包並輸出給wireshark

# 先進到/tmp 目錄執行，方便Filezila 傳輸

# 開啓抓包
nohup tcpdump -i eth0 -s0 -nnA 'port 22' -w dump22.pcap &
[1] 15022

# 查詢pid
ps -ef|grep tcpdump |grep -v 'grep'


# 結束抓包
kill 15022

參考

http://www.javashuo.com/article/p-yhchxcnk-kn.html