|
> tcpdump -p -i eth0 -n 'tcp[13] == 2' and dst port 80 and dst
> host 192.168.7.1
>
> Where:
> -p: Turn off promiscuous mode. You shouldn't need promiscous mode
> as the packets are coming into the machine anyway.
> tcp[13] == 2: Match only packets that only have they SYN bit set.
> eth0: The interface that your VIP is on.
> 80: The port for your Virtual Service
> 192.168.7.1: The VIP
>
cool. much better than nothing :)
it filters pretty good, except it doubles each request.. (presumably because
LVS just passes the packets on again?) .. I tried filtering further with
'and outbound' or 'and inbound', but both requests appear to indicate as
outbound :(.
|
