{"id":7781,"date":"2024-07-06T10:01:01","date_gmt":"2024-07-06T02:01:01","guid":{"rendered":""},"modified":"2024-07-06T10:01:01","modified_gmt":"2024-07-06T02:01:01","slug":"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf","status":"publish","type":"post","link":"https:\/\/mushiming.com\/7781.html","title":{"rendered":"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf"},"content":{"rendered":"<p><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"display: none;\"> \n <path stroke-linecap=\"round\" d=\"M5,0 0,2.5 5,5z\" id=\"raphael-marker-block\" style=\"-webkit-tap-highlight-color: rgba(0, 0, 0, 0);\"><\/path> \n<\/svg> <\/p>\n<p>\u5728\u5f88\u591a\u7684\u573a\u666f\u4e0b\uff0c\u4f1a\u9700\u8981\u6839\u636e\u6570\u636e\u5305\u5224\u65ad\u6570\u636e\u5305\u4e2d\u5b58\u5728\u7684\u5a01\u80c1\u3002\u9488\u5bf9\u5df2\u6709\u7684\u6570\u636e\u5305\uff0c\u5982\u4f55\u5224\u65ad\u6570\u636e\u5305\u662f\u4f55\u79cd\u653b\u51fb\u5462\uff1f<\/p>\n<p>\u65b9\u6cd5\u4e00\u53ef\u4ee5\u6839\u636e\u7ecf\u9a8c\uff0c\u5bf9\u4e8e\u5e38\u89c1\u7684WEB\u7c7b\u578b\u7684\u653b\u51fb\uff0c\u6bd4\u5982SQL\u6ce8\u5165\uff0c\u547d\u4ee4\u6267\u884c\u7b49\u653b\u51fb\uff0c\u662f\u6bd4\u8f83\u5bb9\u6613\u5224\u65ad\u7684\u3002\u4f46\u662f\u5a01\u80c1\u7684\u53d8\u5316\u5343\u53d8\u4e07\u5316\uff0c\u6bd4\u5982\u6316\u77ff\u7684\u6d41\u91cf\u7279\u5f81\uff0c\u7279\u5b9a\u5de5\u5177\u7684\u7279\u5b9a\u7279\u5f81\uff0c\u5f80\u5f80\u6ca1\u6709\u6df1\u5165\u7684\u7814\u7a76\u5bf9\u6bd4\uff0c\u5f88\u96be\u7b2c\u4e00\u65f6\u95f4\u505a\u51fa\u5224\u65ad\u3002<\/p>\n<p>\u65b9\u6cd5\u4e8c\u5c06\u6570\u636e\u5305\u5bfc\u5165\u7279\u5b9a\u7684\u7f51\u7edc\u5b89\u5168\u5382\u5546\u8bbe\u5907\uff0c\u4f46\u662f\u8fd9\u4e9b\u8bbe\u5907\u5f80\u5f80\u662f\u5546\u7528\u8bbe\u5907\uff0c\u4e00\u65b9\u9762\u9700\u8981\u6536\u8d39\uff0c\u53e6\u4e00\u65b9\u9762\u5546\u4e1a\u7684\u8bbe\u522b\u5f80\u5f80\u4f1a\u517c\u987e\u8bef\u62a5\u548c\u544a\u8b66\u7684\u5e73\u8861\uff0c\u6240\u5e94\u5bf9\u7684\u573a\u666f\u8003\u8651\u6bd4\u8f83\u7684\u590d\u6742\uff0c\u4e5f\u96be\u514d\u51fa\u73b0\u6f0f\u4fdd\u3002<\/p>\n<p>\u8fd9\u4e2a\u65f6\u5019\u5b89\u5168\u5206\u6790\u5e08\u5982\u679c\u6784\u5efa\u672c\u5730\u7684\u6d41\u91cf\u5206\u6790\u5de5\u5177\uff0c\u5728\u6b21\u57fa\u7840\u4e0a\u4e0d\u65ad\u7684\u79ef\u7d2f\uff0c\u5219\u80fd\u591f\u6309\u7167\u81ea\u5df1\u7684\u9700\u6c42\u5f62\u6210\u5f97\u5fc3\u5e94\u624b\u7684\u5175\u5668\u3002\u76ee\u524d\u5b89\u5168\u884c\u4e1a\u9488\u5bf9\u6d41\u91cf\u5a01\u80c1\u53d1\u73b0\u4e3b\u8981\u5305\u542b\u4e09\u4e2a\u5f15\u64ce\uff0c\u5206\u522b\u4e3asuricata\uff0csnort\u4ee5\u53cazeek\u3002\u5176\u4e2dsuricata\u548csnort\u504f\u5411\u4e8e\u5df2\u77e5\u5a01\u80c1\u7684\u53d1\u73b0\uff0c\u5305\u62ec\u5df2\u77e5\u6f0f\u6d1e\uff0c\u5df2\u77e5\u7684WEB\u653b\u51fb\u624b\u6bb5\uff0c\u9ed1\u5ba2\u5de5\u5177\uff0c\u6076\u610f\u8f6f\u4ef6\u7b49\u7b49\u3002ZEEK\u901a\u8fc7\u5173\u952e\u884c\u4e3a\u7684\u8bb0\u5f55\uff0c\u504f\u5411\u4e8e\u901a\u8fc7\u5a01\u80c1\u72e9\u730e\u53d1\u73b0\u672a\u77e5\u7684\u5a01\u80c1\u3002<\/p>\n<p>\u9488\u5bf9\u8fd9\u662f\u4e09\u4e2a\u6d41\u91cf\u68c0\u6d4b\u5f15\u64ce\uff0c\u53ef\u4ee5\u5206\u522b\u5230\u5bf9\u5e94\u7684github\u4e0a\u4e0b\u8f7d\uff0c\u5728Linux\u7cfb\u7edf\u8fdb\u884c\u5b89\u88c5\uff0c\u5c06pcap\u5206\u522b\u9001\u5230\u4e09\u4e2a\u5f15\u64ce\u56de\u653e\u9a8c\u8bc1\u5373\u53ef\u3002\u4f46\u662f\u540c\u4e00\u4e2a\u6570\u636e\u5305\u9700\u8981\u5728\u4e09\u4e2a\u5f15\u64ce\u4e2d\u5206\u522b\u64cd\u4f5c\uff0c\u9700\u8981\u4e09\u6b21\u8fd8\u662f\u6bd4\u8f83\u7684\u7e41\u7410\u3002\u6b64\u65f6\u53ef\u4ee5\u501f\u52a9dalton\u5f00\u6e90\u9879\u76ee\uff0cdalton \u901a\u8fc7\u4e00\u4e2a\u63a7\u5236\u5668\u5bf9\u4e8esuricata\uff0csnort\uff0czeek\u4e09\u4e2a\u6d41\u91cf\u63a2\u9488\u5f15\u64ce\u8fdb\u884c\u96c6\u4e2d\u7ba1\u7406\uff0c\u5c06\u7ed3\u679c\u7edf\u4e00\u7684\u5448\u73b0\u3002<\/p>\n<p>dalton\u5f00\u6e90\u7684\u5730\u5740\u89c1\u8fd9\u91cc\uff0c\u7531\u4e8edalton\u4ee5docker\u7684\u5f62\u5f0f\u63d0\u4f9b\u670d\u52a1\uff0c\u4f7f\u7528\u8d77\u6765\u8fd8\u662f\u975e\u5e38\u7684\u65b9\u4fbf\uff0c\u56e0\u6b64\u9700\u8981\u628adocker\u7684\u7248\u672c\u66f4\u65b0\u5230\u6700\u65b0\u3002\u6839\u636edalton\u4e2d\u7684\u8bf4\u660e\uff0c\u5982\u4e0b\uff1a<\/p>\n<pre class=\"language-java prettyprint linenums\"><code class=\"prism language-bash\"><span class=\"token function\">docker<\/span> <span class=\"token function\">service<\/span> <span class=\"token function\">docker<\/span> start .\/start-dalton.sh <\/code><\/pre>\n<p>\u8fd9\u4e2a\u65f6\u5019\u5b89\u88c5\u811a\u672c\u4f1a\u53bb\u4e0b\u8f7d\u591a\u4e2adocker\u5bb9\u5668\uff0c\u5176\u4e2d\u5305\u62ecdalton\u670d\u52a1\u76f8\u5173\u7684\u5bb9\u5668\uff0c\u4f8b\u5982controller\uff0cnginx\uff0credis\uff0csuricata\uff0csnort\uff0czeek\u7b49\u591a\u4e2a\u5bb9\u5668\uff0cdalton \u5b89\u88c5\u6210\u529f\u4e4b\u540e\uff0c\u5982\u4e0b\u56fe1\uff1a<br \/> <img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/e98cccca4a3e4f219ce218361b6a5f24.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c1\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c1\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe1<\/p>\n<p>\u5176\u4e2dsnort\uff0csuricata\uff0czeek\u4e3a\u6d41\u91cf\u4fa7\u7684\u63a2\u9488\u5bb9\u5668\uff0cdalton_controller\u4e3a\u6d41\u91cf\u63a2\u9488\u8c03\u5ea6\u63a7\u5236\u5bb9\u5668\uff0cdalton_web\u4e3aWEB UI\u5bb9\u5668\uff0cdalton_redis\u6d88\u606f\u961f\u5217\u5b58\u50a8\u5bb9\u5668\u3002\u53ef\u4ee5\u770b\u5230UI\u5f00\u653e\u7684\u7aef\u53e3\u4e3a80\u7aef\u53e3\uff0c\u56e0\u6b64\u76f4\u63a5\u8bbf\u95ee\u5bf9\u5e94\u7684IP\u5730\u5740\uff0c\u5982\u4e0b\u56fe2\uff1a<br \/> <img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/c9a3b642367b47dda254809405aa212a.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c2\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c2\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe2<br \/> \u9009\u62e9\u6307\u5b9a\u7684\u5f15\u64ce\u5f15\u64ce\u7248\u672c\uff08\u4e00\u822c\u9009\u62e9\u6559\u65b0\u7684\u7248\u672c\uff09\u548c\u89c4\u5219\u96c6\u56de\u653epcap\uff0c\u4ee5suricata\u4e3a\u4f8b\u5982\u4e0b\u56fe3\uff1a<br \/> <img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/cf1b8647ccfd4659b778d4cc8e5824ef.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c3\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c3\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe3<br \/> \u5982\u4e0a\u56fe3\uff0c\u9009\u62e9\u7684\u4e3a6.0\u7248\u672c\u7684suricata\uff0c\u89c4\u5219\u96c6\u5408\u4e3asuricata\u81ea\u5e26\u7684\u89c4\u5219\u96c6\u5408\uff0c\u8f93\u51fa\u7684\u65e5\u5fd7\u4e3asuricata\u81ea\u5e26\u7684eve\u683c\u5f0f\u7684\u65e5\u5fd7\u3002\u8fd9\u5176\u4e2d\u6bd4\u8f83\u7684\u5173\u952e\u7684\u662f\u89c4\u5219\u96c6\u7684\u9009\u62e9\uff0c\u7531\u4e8esuricata\u81ea\u5e26\u7684\u89c4\u5219\u6bd4\u8f83\u5c11\uff0c\u56e0\u6b64\u5efa\u8bae\u4e30\u5bccsuricata\u7684\u89c4\u5219\u96c6\uff0c\u8fd9\u4e5f\u662f\u5b89\u5168\u5206\u6790\u5e08\u9700\u8981\u79ef\u7d2f\u7684\u65b9\u9762\u3002\u6536\u96c6\u7b26\u5408\u81ea\u8eab\u8981\u6c42\u7684\u89c4\u5219\u96c6\u5408\uff0c\u5bf9\u4e8e\u5b89\u5168\u5206\u6790\u5e08\u7684\u5de5\u4f5c\u975e\u5e38\u7684\u91cd\u8981\uff0c\u5982\u4e0b\u8fde\u63a5\u662fgithub\u4e0a\u5e38\u89c1\u7684\u89c4\u5219\u96c6\u5408<\/p>\n<pre class=\"language-java prettyprint linenums\"><code class=\"prism language-bash\">https:\/\/github.com\/klingerko\/nids-rule-library https:\/\/github.com\/al0ne\/suricata-rules https:\/\/github.com\/travisbgreen\/hunting-rules https:\/\/github.com\/xNymia\/Suricata-Signatures <\/code><\/pre>\n<p>\u5176\u4e2dnids-rule-library\u6d89\u53ca\u7684\u89c4\u5219\u96c6\u5408\u6bd4\u8f83\u7684\u4e30\u5bcc\uff0c\u5982\u4e0b\u56fe4\uff1a<br \/> <img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/70b127a80ac04e1e83bb9f7825f43eb2.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c4\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c4\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe4<br \/> \u53ef\u4ee5\u770b\u5230\u4e00\u4e9b\u5b89\u5168\u5927\u5382\u50cfproofpoint\u63d0\u4f9b\u4e86et open\u7684\u89c4\u5219\u96c6\uff0c\u4ee5\u53caet pro\u4ed8\u8d39\u7684\u89c4\u5219\u96c6\uff08\u6bcf\u5e74\u7684\u8d39\u7528\u57285000\u5143\u4eba\u6c11\u5e01\u5de6\u53f3\uff09\uff0c\u6539\u89c4\u5219\u4e3b\u8981\u503e\u5411\u4e8e\u662f\u548c\u653b\u51fb\u624b\u6bb5\u76f8\u5173\u7684\u89c4\u5219\u3002Talos\u5b9e\u9a8c\u5ba4\u4e5f\u7ed9snort\u7ef4\u62a4\u4e86\u4e00\u4efd\u6f0f\u6d1e\u7684\u89c4\u5219\u96c6\uff08\u6bcf\u5e74\u7684\u8d39\u7528\u5728300\u5143\u4eba\u6c11\u5e01\u5de6\u53f3\uff0c\u76f8\u5bf9\u975e\u5e38\u7684\u4fbf\u5b9c\uff09\uff0c\u6539\u89c4\u5219\u96c6\u4e3b\u8981\u503e\u5411\u4e8e\u77e5\u540d\u6f0f\u6d1e\u76f8\u5173\u7684\u89c4\u5219\u3002\u9664\u6b64\u4e4b\u5916\u8fd8\u6709abuse\uff0cosint\u7b49\u8bf8\u591a\u7684\u5f00\u6e90\u60c5\u62a5\u53ef\u4ee5\uff0c\u5305\u62ec\u6570\u5b57\u8bc1\u4e66\u7684\u60c5\u62a5\uff0c\u6076\u610fIP\u7684\u60c5\u62a5\uff0c\u6076\u610f\u57df\u540d\u7684\u786c\u5305\u3002\u5efa\u8bae\u5c06\u8bb2\u8fd9\u4e9b\u89c4\u5219\u96c6\u8fdb\u884c\u6536\u5f55\uff0c\u4f5c\u4e3a\u4e2a\u4eba\u7684\u5206\u6790\u5206\u6790\u5e93\u4f7f\u7528\u3002\u5c06\u4e0a\u8ff0\u5b9a\u671f\u66f4\u65b0\u7684\u89c4\u5219\u96c6\uff0c\u653e\u5230dalton\u76ee\u5f55\u4e0b\u7684rulesets\u76ee\u5f55\u4e0b\uff0c\u5219\u53ef\u4ee5\u5728\u9875\u9762\u4e0a\u8fdb\u884c\u9009\u62e9\u3002\u5982\u4e0a\u56fe\u76843 rulesets\u4e2d\u3002<\/p>\n<p>dalton\u63d0\u4f9b\u4e86\u591a\u79cd\u5f62\u5f0f\u7684\u544a\u8b66\uff0c\u8fd0\u884c\u7684\u7ed3\u679c\u5982\u4e0b\u56fe5\u6240\u793a\uff1a<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/e946434808884153a117e5d414c48094.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c5\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c5\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe5<br \/> \u901a\u5e38\u6765\u8bf4\u53ea\u8981\u770balert\u4e2d\u7684\u544a\u8b66\u5373\u53ef\uff0c\u5982\u679c\u60f3\u8981\u770b\u66f4\u591a\u7684\u5185\u5bb9\uff0c\u8fdb\u884c\u8bf8\u5982\u5a01\u80c1\u72e9\u730e\u76f8\u5173\u7684\u5de5\u4f5c\uff0c\u5219\u53ef\u4ee5\u770b\u4e00\u4e0beve json\u4e2d\u7684\u5185\u5bb9\uff0c\u5982\u4e0b\u56fe6\uff1a<br \/> <img decoding=\"async\" src=\"https:\/\/img.mushiming.top\/app\/mushiming_com\/b52e7d67289a4667aacf9154a6a5171f.png\" =\"\" =\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" alt=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf (https:\/\/mushiming.com\/)  \u7b2c6\u5f20\" title=\"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf  \u7b2c6\u5f20-\u7a46\u4e16\u660e\u535a\u5ba2\" ><br \/> \u56fe6<br \/> \u53ef\u4ee5\u770b\u5230eve json\u4e2d\u7684\u5185\u5bb9\u9664\u4e86alert\u544a\u8b66\u4e4b\u5916\uff0c\u8fd8\u63d0\u4f9b\u4e86\u50cfanomaly\u5f02\u5e38\u4e8b\u4ef6\uff0c\u591a\u79cd\u534f\u8bae\u4f8b\u5982,smb,decrpc\u7b49\u534f\u8bae\u7684meta\u6e90\u4fe1\u606f\u8bb0\u5f55\u7684\u80fd\u529b\uff0c\u53ef\u4ee5\u4ece\u5f02\u5e38\u884c\u4e3a\u53d1\u73b0\u7684\u89d2\u5ea6\u5206\u6790\u66f4\u591a\u7684\u53ef\u4ee5\u5185\u5bb9\u3002<\/p>\n<p>\u4e0a\u8ff0\u53ea\u662f\u9488\u5bf9dalton\u4e2d\u7684suricata\u90e8\u5206\u505a\u4e86\u4ecb\u7ecd\uff0c\u9488\u5bf9snort\u548czeek\u540c\u7406\u3002\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u65e0\u8bba\u54ea\u4e00\u79cd\u6d41\u91cf\u68c0\u6d4b\u5f15\u64ce\uff0c\u89c4\u5219\u96c6\u90fd\u662f\u6781\u4e3a\u91cd\u8981\u7684\u3002\u7531\u4e8e\u4e2a\u4eba\u5b89\u5168\u5206\u6790\u5e08\u7684\u573a\u666f\u65e0\u9700\u8003\u8651\u6027\u80fd\u7684\u5f71\u54cd\uff0c\u6240\u9762\u5bf9\u7684\u6d41\u91cf\u573a\u666f\u4e5f\u975e\u5e38\u7684\u7b80\u5355\uff0c\u56e0\u6b64\u5efa\u8bae\u53ef\u4ee5\u9488\u5bf9snort\uff0csuricata\uff0czeek\u53ef\u4ee5\u6536\u96c6github\u4e0a\u6240\u6709\u7684\u89c4\u5219\u96c6\u5408\uff0c\u5e76\u5b9a\u671f\u7684\u66f4\u65b0\uff0c\u8ba9\u672c\u5730\u5de5\u5177\u68c0\u6d4b\u80fd\u529b\u8fbe\u5230\u6781\u81f4\u3002\u5728\u540e\u7eed\u7684\u6211\u7684\u4e13\u680f\u4e2d\u5b89\u5168\u5206\u6790\u5e08\u4e2d\uff0c\u8fd9\u91cc\uff0c\u4f1a\u505a\u5982\u4e0b\u5185\u5bb9\u7684\u4ecb\u7ecd\uff1a<\/p>\n<ul>\n<li>\u5982\u4f55\u57fa\u4e8egithub\u6253\u9020\u4e2a\u4eba\u7684\u672c\u5730\u68c0\u6d4b\u89c4\u5219\u96c6\u5408\u3002<\/li>\n<li>\u57fa\u4e8edalton\u7684\u5206\u6790\u65e5\u5fd7\uff0c\u8fdb\u884c\u653b\u51fb\u6280\u672f\u70b9\u7684\u5173\u8054\uff0c\u6253\u9020\u5b89\u5168\u4e8b\u4ef6\u68c0\u6d4b\u5de5\u5177\uff0c\u5b8c\u6210\u89c4\u5219\u544a\u8b66\u5230\u5b89\u5168\u4e8b\u4ef6\u7684\u5347\u7ea7\u3002<\/li>\n<\/ul>\n<p>\u672c\u6587\u4e3aCSDN\u6751\u4e2d\u5c11\u5e74\u539f\u521b\u6587\u7ae0\uff0c\u672a\u7ecf\u5141\u8bb8\u4e0d\u5f97\u8f6c\u8f7d\uff0c\u535a\u4e3b\u94fe\u63a5\u8fd9\u91cc\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"\u6d41\u91cf\u68c0\u6d4b\u5b9e\u4f8b_wireshark\u5206\u6790\u7f51\u7edc\u6d41\u91cf\u7edf\u4e00suricata\uff0csnort\uff0czeek\u7b49\u591a\u79cd\u5f15\u64ce\u6784\u5efa\u672c\u5730\u7684\u6570\u636e\u5305\u5a01\u80c1\u8bc6\u522b\u73af\u5883\uff0c\u6253\u9020\u5b89\u5168\u5206\u6790\u5e08\u7684\u5175...","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"_links":{"self":[{"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/posts\/7781"}],"collection":[{"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/comments?post=7781"}],"version-history":[{"count":0,"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/posts\/7781\/revisions"}],"wp:attachment":[{"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/media?parent=7781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/categories?post=7781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mushiming.com\/wp-json\/wp\/v2\/tags?post=7781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}