Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
SRE Book Club - Linux - ch38 - tcpdump & Wireshark
Search
Rico Chen
September 24, 2020
Programming
0
41
SRE Book Club - Linux - ch38 - tcpdump & Wireshark
tcpdump & Wireshark usage
Rico Chen
September 24, 2020
Tweet
Share
More Decks by Rico Chen
See All by Rico Chen
How to monitor Cosmos validator by Prometheus
ricotoothless
0
470
how-to-choose-cicd-tools.pdf
ricotoothless
0
100
SRE Book Club - Linux - ch45 - Where's socket buffer
ricotoothless
0
95
COSCUP - Dynamic Jenkins Agent on Kubernetes
ricotoothless
0
53
Taiwan CDK Meetup - Rookie operator's CDK journey
ricotoothless
0
160
DevOps Taiwan 2020 Workshop - Jenkins CICD
ricotoothless
0
73
SRE Book Club - Kubernetes - ch32-35 - Network
ricotoothless
0
37
SRE Book Club - Kubernetes - ch22 - Job & CronJob
ricotoothless
0
23
Other Decks in Programming
See All in Programming
PostmanでAPIの動作確認が楽になった話
h455h1
0
180
サイコロで理解する統計的仮説検定の考え方
tatamiya
4
1k
見た目から始める生産性向上
ikumatadokoro
10
1.4k
はてなにおける CSS Modules、及び CSS Modules に足りないもの / CSS Modules in Hatena, and CSS Modules missing parts
mizdra
7
970
Anthropic Cookbook のおすすめレシピ
schroneko
7
1.1k
Milestoner
bkuhlmann
1
410
Deep Dive into React Stream/Serialize
mugi_uno
3
670
デフォルトにして至高、RubyMineの大好きな所
ruzia
0
810
Try creating your own orderedmap
kazamori
1
190
AmperとFleetを使ったAndroidアプリ
yoppie
0
250
Ruby Function Composition
bkuhlmann
1
340
検証も兼ねて個人開発でHonoとかと向き合った話
hanetsuki
1
1.3k
Featured
See All Featured
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
34
8.9k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
13
8.3k
How GitHub (no longer) Works
holman
305
140k
The Art of Programming - Codeland 2020
erikaheidi
43
12k
Build your cross-platform service in a week with App Engine
jlugia
226
17k
Raft: Consensus for Rubyists
vanstee
133
6.3k
Large-scale JavaScript Application Architecture
addyosmani
504
110k
BBQ
matthewcrist
80
8.8k
Docker and Python
trallard
35
2.7k
A Modern Web Designer's Workflow
chriscoyier
689
190k
In The Pink: A Labor of Love
frogandcode
138
21k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
14
1.5k
Transcript
CH38 怎麼使用 tcpdump 與 Wireshark 分析網路流量
Agenda • CH38 overview • tcpdump • Wireshark • How
to analyze network traffic? • Lab • Reference
CH38 overview
• Network analysis tool like tcpdump & Wireshark are common
chose to troubleshoot network issue. • tcpdump only supports command line. On the other hand, Wireshark GUI can handle complex network environment.
• PTR (pointer record) provides the IP address associated with
a domain name. • PTR common uses for reverse DNS include: ◦ Anti-spam ◦ Troubleshooting email delivery issues ◦ Logging • Email service: Gsuite, AWS SES, SendGrid, MailGun
tcpdump
• A powerful command-line packet analyzer • tcpdump group github
• tcpdump relate project • How about other command-line? • Wireshark CLI tools & scripting youtube
Wireshark
• A powerful GUI network protocol analyzer • Over 251000
fields in 3000 protocols can filters • Open source with rich community support • SharkFest'20 at 10/12 ~ 10/16 • Many of tutorial resources
How to analyze network traffic?
• Start with client-side • Capture server and client traffic
• Focus on time • The different environment with different filter • Keep your eye on the ball • (resource)
Lab
NLB EKS control plane traefik kube-op s-view
NLB EKS control plane traefik kube-op s-view 115.43.40.158 10.1.8.23 10.1.11.24
10.1.13.131 10.1.6.103 10.1.48.138 10.1.43.161
• what is 169.254.169.254 • Dynamic Configuration of IPv4 Link-Local
Addresses • EKS architectural overview • Elastic network interfaces
NLB EKS control plane traefik kube-op s-view k-proxy
• Application Load Balancer target type
ALB EKS control plane traefik kube-op s-view k-proxy
Reference
• What is a DNS PTR record? • 鳥哥 DNS
正反解 • tcpdump relate project • Wireshark CLI tools & scripting • tcpdump group github • Top 10 Wireshark Filters • Wireshark Display Filter Reference • Wireshark distribution command line
• what is 169.254.169.254 • Dynamic Configuration of IPv4 Link-Local
Addresses • EKS architectural overview • Elastic network interfaces • Network Load Balancer Support in Kubernetes 1.9 • Application Load Balancer target type