captor

## napatech抓包卡 ![image.png](https://cos.easydoc.net/97954506/files/logu28hn.png) ``` #找到更新的机器 拷贝到32 #备份 mv old_captor captor_0727 #解压 cd captor cp *.so* /usr/lib64 #查看旧json替换 "pcapfiledirlist" “localip” rm captor.atp 注意hosts解析 10.1.128.89 kafka.cluster.local ``` ![image.png](https://cos.easydoc.net/97954506/files/l63amkea.png) ![image.png](https://cos.easydoc.net/97954506/files/l63amrrc.png) 这是发离线包用的,现场的话用不到,现场修改成 SMA ![image.png](https://cos.easydoc.net/97954506/files/la6iccpl.png) ``` [root@192-168-144-167 captor]# ll total 33436 -rwxr-xr-x 1 root root 11792672 Nov 18 11:09 captor -rwxr-xr-x 1 root root 7074 Nov 20 18:28 captor.json -rwxr-xr-x 1 root root 7281 Oct 26 09:25 captor.json.bak2 -rwxr-xr-x 1 root root 0 Feb 9 2022 captor.lock -rwxr-xr-x 1 root root 363717 May 12 2022 libhcrypt-1.5.so -rwxr-xr-x 1 root root 10013072 Jul 13 19:04 librdkafka.so.1 -rwxr-xr-x 1 root root 41385 Jan 21 2022 libsmartnic.so -rwxr-xr-x 1 root root 11914976 Nov 18 10:30 libTCPReassembleMT.so drwxr-xr-x 2 root root 35 Nov 20 18:15 logs -rwxr-xr-x 1 root root 75880 Sep 1 14:44 PcapFix -rwxr-xr-x 1 root root 54 Nov 8 09:49 start.sh -rwxr-xr-x 1 root root 124 Nov 8 09:49 stop.sh [root@192-168-144-167 captor]# cp PcapFix ../pcap/jinzheng/ [root@192-168-144-167 captor]# cd ../pcap/jinzheng/ [root@192-168-144-167 jinzheng]# ls PcapFix sjjyzz.pcap [root@192-168-144-167 jinzheng]# ll total 124 -rwxr-xr-x 1 root root 75880 Nov 20 18:56 PcapFix -rw-r--r-- 1 root root 48895 Nov 20 18:45 sjjyzz.pcap [root@192-168-144-167 jinzheng]# mkdir in out [root@192-168-144-167 jinzheng]# ls in out PcapFix sjjyzz.pcap [root@192-168-144-167 jinzheng]# mv sjjyzz.pcap ./in/ [root@192-168-144-167 jinzheng]# ll total 76 drwxr-xr-x 2 root root 33 Nov 20 18:57 in drwxr-xr-x 2 root root 10 Nov 20 18:57 out -rwxr-xr-x 1 root root 75880 Nov 20 18:56 PcapFix [root@192-168-144-167 jinzheng]# tree . ├── in │ └── sjjyzz.pcap ├── out └── PcapFix [root@192-168-144-167 jinzheng]# ./PcapFix in/ out/ 1 files in in/ PcapFileList List files count:1 QueueLength = 4 Trail 0 Header 0QueueLength = 4 Trail 0 Header 0PacketDealWorkThread begin read file 0 filename in//sjjyzz.pcap FileCount 1 FileSize 0 MB read file 0 filename in//sjjyzz.pcap fileSize 0MBreadsize dataLen=0 MB PacketCount 129 time 2022-11-20_18-58-14 : CacheDataSize= 0MB CacheBUffSize 64MB ,AnalysisSpeed:4058.058 MB/s,LineSpeed:0.000 MB/s, 0.000 Mpps Sqr:362, BlockIndex:1 TotalBlock:1 FileName in//sjjyzz.pcap PacketCount=129 1 files in in/ PcapFileList List files count:1 QueueLength = 4 Trail 0 Header 0QueueLength = 4 Trail 0 Header 0PacketDealWorkThread begin read file 0 filename in//sjjyzz.pcap FileCount 1 FileSize 0 MB read file 0 filename in//sjjyzz.pcap fileSize 0MBreadsize dataLen=0 MB PacketCount 129 time 2022-11-20_18-58-14 : CacheDataSize= 0MB CacheBUffSize 64MB ,AnalysisSpeed:255.078 MB/s,LineSpeed:0.000 MB/s, 0.000 Mpps Sqr:362, BlockIndex:1 TotalBlock:1 FileName in//sjjyzz.pcap PacketCount=129 fix finished [root@192-168-144-167 jinzheng]# cd out/ [root@192-168-144-167 out]# ls fixed_pcap.pcap [root@192-168-144-167 out]# mv fixed_pcap.pcap ../ [root@192-168-144-167 out]# ls fixed_pcap.pcap [root@192-168-144-167 out]# mv fixed_pcap.pcap ../ [root@192-168-144-167 out]# ls [root@192-168-144-167 out]# cd .. [root@192-168-144-167 jinzheng]# ll total 124 -rw-r--r-- 1 root root 49035 Nov 20 18:58 fixed_pcap.pcap drwxr-xr-x 2 root root 33 Nov 20 18:57 in drwxr-xr-x 2 root root 10 Nov 20 18:58 out -rwxr-xr-x 1 root root 75880 Nov 20 18:56 PcapFix [root@192-168-144-167 jinzheng]# rm -rf in out/ PcapFix [root@192-168-144-167 jinzheng]# ^C [root@192-168-144-167 jinzheng]# ls fixed_pcap.pcap [root@192-168-144-167 jinzheng]# pwd /mnt/pcap/jinzheng [root@192-168-144-167 jinzheng]# ```