Question

在我公司,一些指挥员获准与弹道站在一起,如 t。否则。

I expect run tcpdump for a while, and then stop it. When I run tcpdump, and I could abort that with Ctrl+C

我写了这样一句话:

#!/bin/sh
sudo tcpdump -ieth1 -w ~/dump.bin
sleep 5
kill -2 $!

它确实没有工作。倾斜过程是根本的,目前的用户是正常的账户。

我的问题是:是否以任何方式在印本上做同样的剪辑?

EDIT:

p.: 作为我的公司的安全政策,我不能把杀人作为根基。

Answer 1

Try the -Z Options to tcpdump。它指示倾斜,放弃根基特权,并按论点中规定的用户操作。

sudo tcpdump -Z $USER -ieth1 -w ~/dump.bin

Now try killing that process.

Answer 2

缩略语此外:

sudo kill -2 $!

这样,<条码>技能/代码>程序将有幸向一个进程发出信号。

Answer 3

对于没有像<代码>-Z等特殊开关的方案,如果您能够改变诉人档案,这是一个解决办法:

sudo myprogram &
sleep 5
sudo pkill myprogram

我必须做的是,允许使用<条码><<>条码>、pric myprogram/code>密码,并添加这一行文:

myuser ALL=(ALL) NOPASSWD:/bin/pkill myprogram

This is less dangerous that lo let sudo kill any program.

Answer 4

The timeout command also terminates a program after so long. sudo timeout 5 tcpdump -ieth1 -w ~/dump.bin should accomplish the same thing as the script.

Answer 5

sudo tcpdump -Z root -w ~/dump.bin -n -i eth0 -G 300 -W 1

G - Timeout Seconds (After timeout period the comman gets killed automatically) Z - drop root and runs as user privilege W - Number files to be saved (as a splitted file)

Answer 6

sudo tcpdump -ieth1 -w ~/dump.bin

您的发言将阻碍你们的发言,你们需要将其放在背景中:

sudo tcpdump -ieth1 -w ~/dump.bin &

.

This and the answer from Blagovest should do it.

友情链接