|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有帐号?立即注册
x
如果您觉得本篇CentOSLinux教程讲得好,请记得点击右边漂浮的分享程序,把好文章分享给你的好朋友们!CC打击很简单倡议,而且几近不必要本钱,招致如今的CC打击愈来愈多。
年夜局部弄CC打击的人,都是用在网高低载的工具,这些工具很少往假造特性,以是会留下一些陈迹。
利用上面的下令,能够剖析下是不是在被CC打击。
第一条下令:
tcpdump-s0-A-n-iany|grep-o-E(GET|POST|HEAD).*
一般的输入了局相似于如许
POST/ajax/validator.phpHTTP/1.1
POST/api_redirect.phpHTTP/1.1
GET/team/57085.htmlHTTP/1.1
POST/order/pay.phpHTTP/1.1
GET/static/goodsimg/20140324/1_47.jpgHTTP/1.1
GET/static/theme/qq/CSS/index.cssHTTP/1.1
GET/static/js/index.jsHTTP/1.1
GET/static/js/customize.jsHTTP/1.1
GET/ajax/loginjs.php?type=topbar&HTTP/1.1
GET/static/js/jquery.jsHTTP/1.1
GET/ajax/load_team_time.php?team_id=57085HTTP/1.1
GET/static/theme/qq/css/index.cssHTTP/1.1
GET/static/js/lazyload/jquery.lazyload.min.jsHTTP/1.1
GET/static/js/MSIE.PNG.jsHTTP/1.1
GET/static/js/index.jsHTTP/1.1
GET/static/js/customize.jsHTTP/1.1
GET/ajax/loginjs.php?type=topbar&HTTP/1.1
GET/static/theme/qq/css/i/logo.jpgHTTP/1.1
GET/static/theme/qq/css/i/logos.pngHTTP/1.1
GET/static/theme/qq/css/i/hot.gifHTTP/1.1
GET/static/theme/qq/css/i/brand.gifHTTP/1.1
GET/static/theme/qq/css/i/new.gifHTTP/1.1
GET/static/js/jquery.jsHTTP/1.1
GET/static/theme/qq/css/i/logo.jpgHTTP/1.1
一般下令了局以静态文件为主,好比css,js,各类图片。
假如是被打击,会呈现大批流动的地点,好比打击的是首页,会有大批的“GET/HTTP/1.1”,大概有必定特性的地点,好比打击的假如是Discuz服装论坛,那末大概会呈现大批的“/thread-随机数字-1-1.html”如许的地点。
第二条下令:
tcpdump-s0-A-n-iany|grep^User-Agent
输入了局相似于上面:
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.1;Trident/4.0;.NETCLR2.0.50727;360space)
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.1;Trident/4.0;.NETCLR2.0.50727;360space)
User-Agent:Mozilla/5.0(compatible;bingbot/2.0;+http://www.bing.com/bingbot.htm)
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(WindowsNT5.1)AppleWebKit/537.1(KHTML,likeGecko)Chrome/21.0.1180.89Safari/537.1
User-Agent:Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.1;Trident/4.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
User-Agent:Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.1;Trident/4.0;.NETCLR2.0.50727;InfoPath.2)
User-Agent:Mozilla/5.0(compatible;MSIE9.0;WindowsNT6.1;Trident/5.0)
这个是检察客户真个useragent,一般的了局中,是林林总总的useragent。
年夜多半打击利用的是流动的useragent,也就是会看到统一个useragent在刷屏。随机的useragent只见过一次,可是给弄成了相似于如许“axd5m8usy”,仍是能够分辩出来。
第三条下令:
tcpdump-s0-A-n-iany|grep^Host
假如呆板上的网站太多,能够用下面的下令找出是哪一个网站在被大批哀求
输入了局相似于上面如许
Host:www.ckuyun.com
Host:www.ckuyun.com
Host:www.ckuyun.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:www.ckuyun.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:www.ckuyun.com
Host:www.ckuyun.com
Host:upload.server110.com
Host:upload.server110.com
Host:upload.server110.com
Host:www.ckuyun.com
Host:upload.server110.com
Host:upload.server110.com
Host:www.ckuyun.com
一样平常体系不会默许装置tcpdump下令
centos装置***:yuminstall-ytcpdump
debian/ubuntu装置***:apt-getinstall-ytcpdump
良多小白用户不明白怎样设置日记,检察日记,利用下面的下令则复杂的多,复制到下令行上运转便可。
欢迎大家来到仓酷云论坛! |
|