The other type of scanning involves actually looking at the information contained within the raw packets that go past on your network.
其他类型的扫描还包括,实际查看在网络中传输的原始数据包所包含的信息。
Capturing raw packets enables you to see which hosts are communicating with a given host, what information is being exchanged, and which are being used.
捕获原始数据包,使您能够了解哪些主机正在与给定的主机进行通信、正在交换什么信息,以及正在使用哪些信息。
In the above example, verbose mode has also been switched-this ensures that the full contents of the raw packets are recorded, instead of just the summary information that snoop provides by default.
在上面的示例中,已经切换到了详细模式,这将确保记录原始数据包的全部内容,而不仅仅是snoop在缺省情况下所提供的摘要信息。
In addition, much of this information is also sent encoded in binary format, and capturing pure raw packets off of the network requires a significant amount of work to pick out the data that you need.
此外,大部分信息也会经过二进制编码后再发送,从网络捕捉完全原始的数据包需要进行大量的操作才能捕捉您需要的数据。
Note that you have to read the data using sysread because you are reading raw binary packets (not lines).
请注意,您必须使用sysread来读取数据,因为您读取的是原始二进制包(而不是行)。
The window is divided into three main sections: the list of filtered packets, the decoded protocol details, and the raw packet data in hex/ASCII format.
这个窗口分成三个主要部分:过滤的数据包列表、解码的协议明细和HEX/ASCII格式的原始数据包数据。
The window is divided into three main sections: the list of filtered packets, the decoded protocol details, and the raw packet data in hex/ASCII format.
这个窗口分成三个主要部分:过滤的数据包列表、解码的协议明细和HEX/ASCII格式的原始数据包数据。
应用推荐