环境:ubuntu. 8.10 + .QEMU + Windows2003 + Window下的上网软件 , .通信方式 tap/tun bridge/vde 模式, eth0 IP地址为:192.168.1.51服务器
通过tcpdump可以发现:虚拟机中的软件正在通过linux系.统与221.239.90.194.8002通讯,但是,为什么linux下的netstat就反映不.出.来呢? 美容
附:测试数据:
================.========================.====================== 婚庆
yanyan@baijia002:~$ sudo ne.tst.at -napltu && sudo tcpdump.
Active Internet c.onne.ctions (servers and established)( 游戏 )
Proto Recv-Q Send.-Q Local Address Foreign Address. State . PID/Program name 美容
tcp 0 0 127.0.0.1:3306 .. 0.0.0.0:* LISTEN 5730/mysqld . 教育
tcp 0 0 0.0.0.0:5911 . 0.0.0.0:* LISTEN . 6662/qemu-system-.x8 健康
tcp . 0 . 0 127.0.0.1:631 0.0.0.0:* . LISTEN 5244/cupsd [成人用品]
tcp . 0 0 0.0..0.0:1021 0.0.0.0:* LISTEN 5800/vsftpd . 学习
tcp 0 . 0 127.0.0.1:36195 127.0..0.1:5911 ESTABLISHED 6704/vncviewe.r ( 游戏 )
tcp 0 0 127.0..0.1:5911 127.0.0.1:3619.5 ESTABLISH.ED 6662/qemu-system-x8学习
tcpdump:. verbose output suppressed, use -v or -vv .for full protocol decode 杀毒
listening on eth0, link-type .EN10MB (Et.hernet), capture size 96 bytes虚拟主机
19:05:49.480076 IP 221.239.90.19.4.8002 > 192.168.1.51.1035: .. 3105.112258:3105113610(1352) ack 195917716 win 64443教育
19:05:49.833621 IP 192.168..1..51.10.35 > 221.239.90.194.8002: . ack 1352 win 65535 电子
19:0.5:49.480633 IP 192.168.1.51.49992 > ns.sccdp.tt.net.cn.d.omain: 51697+ PTR? 51.1.168.192.in-addr.arpa. (43).
19:05:49.492413 .IP 221.239..90.194.8002 > 192.168.1.51.1035.: . 1352:2704(1352) ack 1 win 64443.
19:05:4.9.492673 IP 192.168.1.51.1035 > 221.239.90.194.8002: . a.ck 2704 win 6553.5.
19:05:49.5.04981 IP .221.239.90.194.8002 > 192.168.1.51.1035: . 2704:4056(1352) .ack 1 win 64443 乙肝
19:05:49.517034 .IP 221.239.90.194.8002 .> 192.168.1.51.1035: . 4056:5408(1352) ack 1 win .64443.
19:05:49.517232 IP 192.168.1.51.1035 > 2.21.239.90.194.8002.: . ack 5408 win 655.35
19:05:49.529392 IP 221.239..90.194.8002. > 192.168.1.51.1035: P 5408:66.88(1280) ack 1 win 64443 建材
19:05:49.529601 IP 192.168..1...51.1035 > 221.239.90.194.8002: . ack 6688 win 64255.
19:05:49.530733 IP ns..sccdptt.net.cn.domain > .192.168.1.51.49992: 51697. NXDomain* 0/1/0 (93) 健康
19:05:49.531056 IP 192.168.1.51.50172 > ns.sccd.ptt.net.cn.domain: 53351+ PTR? 1.94.90.2.39.221.in-addr.arpa. (45)--------------彩票
19:05:49.569007 IP 221.239.90.194..8002 > 192.168.1.51..1035: . 6.688:8040(1352) ack 1 win 64443电影
19:05:49.581331 IP 221.239.90.194.800..2 > 192.168.1.51.1035: . 8040:.9392(1352) ack 1 win 64443<性病>
19:05:49.594096 IP 221.239.90.194.8002 > 192..168.1.51.1035: . 9392:10744(1352) ack ..1 win 64443 婚庆
19:05:.49.602447 IP 192.168.1.5.1.1035 > 221.239.90.194.8002: . ack .9392 win 65535 外汇
19:05:49.602485. IP 192.1.68.1.51.1035 >. 221.239.90.194.8002: . ack 10744 win 65535 健康
19:05:49.606.280 IP 221.239.90.194.8002 > 19.2.1.68.1.51.1035: . 10744:12096(1352) ack 1 win 64443 外汇
19:05:49.618538 IP 221.239.90.194.8002 > 192.168.1.5.1.1035: . 12096:13448(135..2) ack 1 win 64443.
19:05:49.618815 IP 19.2.168.1.51.1035 > 221.239.90.194.8002: . .ack 13448 .win 65535( 游戏 )
19:05:49.630622 IP 221.239.9.0.1.94.8002 > 192.168.1.51.1035: P. 13448:14728(1280) ack 1 win 64443.
19:.05:49.630836 .IP 192.168.1.51.1035 > 221.239.90.194.8002: . ack 14728 win. 64255.
19:05:49.670026 IP 221.239.90.194.8002 > 192.168.1.5.1..1035: . 14728:16080(1352) ack 1 win 64.443<性病>
19:05:49.6.82354 IP 221.239.90.19.4.8002 > 192.168.1.51.1035: . 16080:17432(13.52) ack 1 win 64443 健康
19:05:49..682535 IP 192.168.1.51.1035 > 221.239.90.194.8002: . ack 17432 w.in 6553.5健康
19:05:49.694927 IP 221.239.90.194.8002 > .192..168.1.51.1035: . 17432:18784(1352). ack 1 win 64443<性病>
......
......
[ 本帖最后由 mrguo 于 2009-1-.1. 19:18 编辑 ].