Skip to content

Latest commit

 

History

History
15 lines (10 loc) · 514 Bytes

sniff-TCP-and-extract-IPs.md

File metadata and controls

15 lines (10 loc) · 514 Bytes

The below command can extract TCP requests IPs tun0 receiving and write the IPs into the tcp.log file.

The process will keep running till you interrupt it. It will continuously write IPs into the tcp.log file.

sudo tcpick -i tun0 | grep -Eo --line-buffered  '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}:http' \
  | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' --line-buffered >> tcp.log

For remove repeated IPs we can use below command

cat tcp.log | sort |  uniq