Import tcpdump-top

Author: jimklimov

common/tcpdump-top

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+# (C) 2008-2012, 2023 by Jim Klimov
+
+### Capture NUM packets and print who makes traffic
+### Senders show as IPs, destinations show with colon ':' in the end
+[ x"$NUM" = x ] && NUM=10000
+#[ x"$INT" = x ] && INT=bge126000
+#[ x"$INT" = x ] && INT=vlan126
+[ x"$INT" = x ] && INT=vioif1
+
+# Collect packet metadata:
+time tcpdump -n -e -i "$INT" | grep IPv4 | head -n "$NUM" > /tmp/x0 || exit
+
+# Pick out IP and PORT (single token), using this as template for numbered fields:
+#   10:27:03.899040 fe:00:00:00:01:01 > 1a:83:3c:db:1c:12, ethertype IPv4 (0x0800),
+#     length 56: 86.49.231.135.5564 > 139.159.158.160.22251:
+#     Flags [.], ack 352, win 1022, length 0
+#OLD#cat /tmp/x0 | awk '{ print $16"\n"$18 }' \
+cat /tmp/x0 | awk '{ print $10"\n"$12 }' \
+| sort -n | uniq -c | sort -n > /tmp/x \
+&& cat /tmp/x
+
+echo "`date`: REMINDER: destinations show with colon ':' in the end" >&2