{"id":679,"date":"2026-03-08T22:36:25","date_gmt":"2026-03-08T22:36:25","guid":{"rendered":"https:\/\/www.nextred.it\/web\/?post_type=knowledgebase&#038;p=679"},"modified":"2026-03-08T22:36:26","modified_gmt":"2026-03-08T22:36:26","slug":"monitoraggio-rete","status":"publish","type":"knowledgebase","link":"https:\/\/www.nextred.it\/web\/doc\/nextredos-ratkit-vers-1\/guide-sicurezza\/monitoraggio-rete\/","title":{"rendered":"Monitoraggio Rete"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>Wireshark<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Wireshark \u00e8 uno strumento grafico per catturare e analizzare il traffico di rete.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo wireshark<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Per usare Wireshark senza root (consigliato):<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo usermod -aG wireshark $USER<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"># Rieffettuare il login dopo questo comando<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Filtri Wireshark Comuni<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>ip.addr == 192.168.1.1<\/strong><\/td><td>Filtra per indirizzo IP<\/td><\/tr><tr><td><strong>tcp.port == 443<\/strong><\/td><td>Filtra per porta HTTPS<\/td><\/tr><tr><td><strong>http<\/strong><\/td><td>Mostra solo traffico HTTP<\/td><\/tr><tr><td><strong>dns<\/strong><\/td><td>Mostra solo query DNS<\/td><\/tr><tr><td><strong>tcp.flags.syn == 1<\/strong><\/td><td>Mostra SYN packets<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>tcpdump \u2014 Cattura da Terminale<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">sudo tcpdump -i eth0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo tcpdump -i any -w \/tmp\/cattura.pcap<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo tcpdump -i eth0 port 80<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo tcpdump -i eth0 host 192.168.1.1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo tcpdump -r \/tmp\/cattura.pcap<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>ss e netstat \u2014 Connessioni Attive<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ss -tulnp<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ss -s<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">netstat -tulnp<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wireshark Wireshark \u00e8 uno strumento grafico per catturare e analizzare il traffico di rete. sudo wireshark Per usare Wireshark senza root (consigliato): sudo usermod -aG wireshark $USER # Rieffettuare il login dopo questo comando Filtri Wireshark Comuni ip.addr == 192.168.1.1 Filtra per indirizzo IP tcp.port == 443 Filtra per porta HTTPS http Mostra solo traffico [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","template":"","knowledgebase_cat":[160],"class_list":["post-679","knowledgebase","type-knowledgebase","status-publish","hentry","knowledgebase_cat-guide-sicurezza"],"_links":{"self":[{"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/knowledgebase\/679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/types\/knowledgebase"}],"author":[{"embeddable":true,"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/comments?post=679"}],"version-history":[{"count":0,"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/knowledgebase\/679\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/media?parent=679"}],"wp:term":[{"taxonomy":"knowledgebase_cat","embeddable":true,"href":"https:\/\/www.nextred.it\/web\/wp-json\/wp\/v2\/knowledgebase_cat?post=679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}