Linux下如何对端口流量进行统计

大马小马 發表於 2023-10-2 00:00:00

<p>
在不修改源代码的情况下对程序暴露端口流量进行监控统计，可以利用Linux中自带的Iptable添加简单的规则让其起到端口流量统计的作用。但是需要注意的是在服务器重启、Iptable服务重启的时候统计数据会被重置清零。</p>
<p>
<strong>添加需要统计的端口</strong></p>
<p>
1、输入监控</p>
<p>
下面示例是监控目标端口是8080的输入流量 --dport(destination port 的缩写)</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_745943">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -A INPUT -p tcp --dport 8080</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
2、输出监控</p>
<p>
下面示例是监控来源端口是8080的输出流量 --sport(source port 的缩写)</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_658213">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -A OUTPUT -p tcp --sport 8080</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>查看统计数据</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_864529">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptable -L -</code><code class="bash functions">v</code> <code class="bash plain">-n -x</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
示例结果：</p>
<p>
8080端口接收的流量为2885字节，发送的流量是8240字节</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterplain" id="highlighter_177231">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
<div class="line number9 index8 alt2">
9</div>
<div class="line number10 index9 alt1">
10</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="plain plain">Chain INPUT (policy ACCEPT 202 packets, 25187 bytes)</code>
</div>
<div class="line number2 index1 alt1">
<code class="plain spaces">  </code><code class="plain plain">pkts   bytes target   prot opt in   out   source        destination     </code>
</div>
<div class="line number3 index2 alt2">
<code class="plain spaces">   </code><code class="plain plain">18   2885      tcp -- *   *    0.0.0.0/0      0.0.0.0/0      tcp dpt:8080</code>
</div>
<div class="line number4 index3 alt1">
</div>
<div class="line number5 index4 alt2">
<code class="plain plain">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)</code>
</div>
<div class="line number6 index5 alt1">
<code class="plain spaces">  </code><code class="plain plain">pkts   bytes target   prot opt in   out   source        destination     </code>
</div>
<div class="line number7 index6 alt2">
</div>
<div class="line number8 index7 alt1">
<code class="plain plain">Chain OUTPUT (policy ACCEPT 184 packets, 45774 bytes)</code>
</div>
<div class="line number9 index8 alt2">
<code class="plain spaces">  </code><code class="plain plain">pkts   bytes target   prot opt in   out   source        destination     </code>
</div>
<div class="line number10 index9 alt1">
<code class="plain spaces">   </code><code class="plain plain">12   8240      tcp -- *   *    0.0.0.0/0      0.0.0.0/0      tcp spt:8080</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>重置统计数据</strong></p>
<p>
注意：这里是重置所有端口的统计数据</p>
<p>
1、重置所有输入端口</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_708283">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">Iptable -Z INPUT</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
2、重置所有输出端口</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_912044">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">Iptable -Z OUTPUT</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>移除统计端口</strong></p>
<p>
1、移除输入端口</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_734900">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -D INPUT -p tcp --dport 8080</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
2、移除输出端口</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_987356">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -D OUTPUT -p tcp --sport 8080</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持。</p>
<p>
原文链接：http://www.jianshu.com/p/34e846b8b8ac?utm_source=tuicool&utm_medium=referral</p>

頁: [1]

琼殿技术论坛's Archiver

Linux下如何对端口流量进行统计