Netstat命令详解_如何查看nginx的访问流量.pdf

57 阅读 0 评论 38 点赞

我是靠谱客的博主细心煎蛋，最近开发中收集的这篇文章主要介绍Netstat命令详解_如何查看nginx的访问流量.pdf，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

https://github.com/AlloVince/EvaThumber

[root@yyj nginx]# netstat -nat |awk ‘{print $6}’|sort|uniq -c|sort -rn
awk: ‘{print
awk: ^ 表达式中的无效字符“�”
[root@yyj nginx]# netstat -nat |awk ‘{print $6}’|sort|uniq -c|sort -rn
awk: ‘{print
awk: ^ 表达式中的无效字符“�”
[root@yyj nginx]# netstat -nat |awk '{print $6}'|sort|uniq -c|sort -rn
     18 ESTABLISHED
     17 TIME_WAIT
     13 LISTEN
      1 Foreign
      1 FIN_WAIT1
      1 established)
[root@yyj nginx]# netstat -anlp|grep 80|grep tcp|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|head -n20
      1 60.191.227.50
      1 49.116.99.16
      1 125.66.87.138
      1 116.27.70.38
      1 112.90.150.128
      1 106.38.202.176
      1 103.242.14.217
      1 0.0.0.0
[root@yyj nginx]# netstat -ant |awk '/:80/{split($5,ip,":");++A[ip[1]]}END{for(i in A) print A[i],i}' |sort -rn|head -n20
6 223.199.5.38
6 111.37.5.47
1 59.47.9.130
1 223.240.107.247
1 222.216.115.58
1 163.177.69.13
1 123.15.41.230
1 123.150.213.213
1 123.150.183.171
1 123.150.182.172
1 123.150.182.170
1 120.82.193.4
1 120.196.211.151
1 119.48.231.5
1 118.244.255.146
1 113.108.11.52
1 111.180.120.65
1 111.161.46.6
1 0.0.0.0
[root@yyj nginx]# tcpdump -i eth0 -tnn dst port 80 -c 1000 | awk -F”.” ‘{print $1″.”$2″.”$3″.”$4}’ | sort | uniq -c | sort -nr |head
awk: ‘{print
awk: ^ 表达式中的无效字符“�”
tcpdump: eth0: No such device exists
(SIOCGIFHWADDR: No such device)
[root@yyj nginx]# tcpdump -i eth0 -tnn dst port 80 -c 1000 | awk -F"." '{print $1"."$2"."$3"."$4}' | sort | uniq -c | sort -nr |head
tcpdump: eth0: No such device exists
(SIOCGIFHWADDR: No such device)
[root@yyj nginx]# tcpdump -i em1 -tnn dst port 80 -c 1000 | awk -F"." '{print $1"."$2"."$3"."$4}' | sort | uniq -c | sort -nr |head
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em1, link-type EN10MB (Ethernet), capture size 65535 bytes

^C520 packets captured
520 packets received by filter
0 packets dropped by kernel

[root@yyj nginx]# zcat squid_access.log.tar.gz| awk '{print $10,$7}' |awk 'BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
> in trfc){printf "%st%dn",domain,trfc[domain]}}'
awk: 命令行:1: BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
awk: 命令行:1:                                             ^ 未预期的新行或字符串结束
gzip: squid_access.log.tar.gz: No such file or directory
[root@yyj nginx]# zcat squid_access.log.tar.gz| awk '{print $10,$7}' |awk 'BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
in trfc){printf "%st%dn",domain,trfc[domain]}}'
awk: 命令行:1: BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
awk: 命令行:1:                                             ^ 未预期的新行或字符串结束
gzip: squid_access.log.tar.gz: No such file or directory
[root@yyj nginx]# ll
总用量 65336
-rw-r-----. 1 nginx adm 17970705 1月 25 23:43 access.log
-rw-r-----. 1 nginx adm 3792426 1月 21 03:18 access.log-20150120.gz
-rw-r-----. 1 nginx adm 3706747 1月 22 03:16 access.log-20150121.gz
-rw-r-----. 1 nginx adm 3425321 1月 23 03:14 access.log-20150122.gz
-rw-r-----. 1 nginx adm 3309576 1月 24 03:44 access.log-20150123.gz
-rw-r-----. 1 nginx adm 2911332 1月 25 03:06 access.log-20150124.gz
-rw-r-----. 1 nginx adm 30272535 1月 25 03:05 access.log-20150125
-rw-r-----. 1 nginx adm   158609 1月 25 22:55 error.log
-rw-r-----. 1 nginx adm   831547 1月 21 03:18 error.log-20150120.gz
-rw-r-----. 1 nginx adm    43045 1月 22 03:16 error.log-20150121.gz
-rw-r-----. 1 nginx adm    40111 1月 23 03:14 error.log-20150122.gz
-rw-r-----. 1 nginx adm    29184 1月 24 03:44 error.log-20150123.gz
-rw-r-----. 1 nginx adm    24982 1月 25 03:06 error.log-20150124.gz
-rw-r-----. 1 nginx adm   340867 1月 25 02:53 error.log-20150125
-rw-r--r--. 1 nginx adm        0 1月 20 10:43 mysql_access.log
-rw-r--r--. 1 nginx adm        0 1月 20 10:43 mysql_error.log
[root@yyj nginx]# zcat access.log-20150120.gz| awk '{print $10,$7}' |awk 'BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
in trfc){printf "%st%dn",domain,trfc[domain]}}'
awk: 命令行:1: BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domain
awk: 命令行:1:                                             ^ 未预期的新行或字符串结束
[root@yyj nginx]# zcat access.log-20150120.gz| awk '{print $10,$7}' |awk 'BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domainin trfc){printf "%st%dn",domain,trfc[domain]}}'
awk: BEGIN{FS="[ /]"}{trfc[$4]+=$1}END{for(domainin trfc){printf "%st%dn",domain,trfc[domain]}}
awk:                                                    ^ syntax error
[root@yyj nginx]# tcpdump -i eth0 -l -s 0 -w - dst port 80 | strings | grep -i user-agent | grep -i -E
用法: grep [选项]... PATTERN [FILE]...
试用‘grep --help’来获得更多信息。
tcpdump: eth0: No such device exists
(SIOCGIFHWADDR: No such device)
[root@yyj nginx]# tcpdump -i em1 -l -s 0 -w - dst port 80 | strings | grep -i user-agent | grep -i -E

mkdir /mnt/abc
mount -t (补充后面的东西)
mount -t iso9660 /dev/cdrom /mnt/abc

http://www.jb51.net/LINUXjishu/131972.html

http://www.jb51.net/LINUXjishu/236547.html