I try to analyze some pcap files that I got in my hands, but I need to sort out the packets that have my IP in them. I don't know what "my" IP is, because the capture didn't take place on my pc. How can I tell which IP is mine?
我尝试分析一些我手中的pcap文件,但是我需要整理出包含IP的数据包。我不知道“我的”IP是什么,因为捕获没有发生在我的电脑上。我怎么知道我的哪个IP?
2 个解决方案
#1
If your IP address hasn't changed since the trace was gathered, just get your IP address using ifconfig (Linux or MacOS) or the networking control panel in Windows.
如果自收集跟踪后您的IP地址未发生更改,请使用ifconfig(Linux或MacOS)或Windows中的网络控制面板获取IP地址。
If your PC's address has changed since the packets were captured, use Wireshark to filter out the non-HTTP packets. Then look for packets that have GET or POST as part of the packet. Those packets are from the client (usually someone's pc or phone) to a server. Look for a request to a server that you access and no one else does (like *). The source IP is the address of your PC.
如果自从捕获数据包后PC的地址发生了变化,请使用Wireshark过滤掉非HTTP数据包。然后查找具有GET或POST作为数据包一部分的数据包。这些数据包来自客户端(通常是某人的电脑或手机)到服务器。查找您访问的服务器的请求,而不是其他任何人(如*)。源IP是PC的地址。
#2
See the some session. You can find this Common point.
参见一些会议。你可以找到这个共同点。
example
192.168.1.10 <-> 192.168.1.9
192.168.1.10 < - > 192.168.1.9
192.168.1.9 <-> 8.8.8.8
192.168.1.9 < - > 8.8.8.8
192.168.1.100 <-> 192.168.1.9
192.168.1.100 < - > 192.168.1.9
192.168.1.123 <-> 192.168.1.9
192.168.1.123 < - > 192.168.1.9
192.168.1.199 <-> 192.168.1.9
192.168.1.199 < - > 192.168.1.9
192.168.1.9 <-> 192.168.1.90
192.168.1.9 < - > 192.168.1.90
...
So, Your IP is 192.168.1.9!
所以,你的IP是192.168.1.9!
#1
If your IP address hasn't changed since the trace was gathered, just get your IP address using ifconfig (Linux or MacOS) or the networking control panel in Windows.
如果自收集跟踪后您的IP地址未发生更改,请使用ifconfig(Linux或MacOS)或Windows中的网络控制面板获取IP地址。
If your PC's address has changed since the packets were captured, use Wireshark to filter out the non-HTTP packets. Then look for packets that have GET or POST as part of the packet. Those packets are from the client (usually someone's pc or phone) to a server. Look for a request to a server that you access and no one else does (like *). The source IP is the address of your PC.
如果自从捕获数据包后PC的地址发生了变化,请使用Wireshark过滤掉非HTTP数据包。然后查找具有GET或POST作为数据包一部分的数据包。这些数据包来自客户端(通常是某人的电脑或手机)到服务器。查找您访问的服务器的请求,而不是其他任何人(如*)。源IP是PC的地址。
#2
See the some session. You can find this Common point.
参见一些会议。你可以找到这个共同点。
example
192.168.1.10 <-> 192.168.1.9
192.168.1.10 < - > 192.168.1.9
192.168.1.9 <-> 8.8.8.8
192.168.1.9 < - > 8.8.8.8
192.168.1.100 <-> 192.168.1.9
192.168.1.100 < - > 192.168.1.9
192.168.1.123 <-> 192.168.1.9
192.168.1.123 < - > 192.168.1.9
192.168.1.199 <-> 192.168.1.9
192.168.1.199 < - > 192.168.1.9
192.168.1.9 <-> 192.168.1.90
192.168.1.9 < - > 192.168.1.90
...
So, Your IP is 192.168.1.9!
所以,你的IP是192.168.1.9!