Here is the scenario.
I have an IP address 220.127.116.11 port 2000 sending udp packets to one unknown IP. I would like to find the unknown IP so I can block it with iptables.
Is there a way to do it with a script? Right now I am doing it manually by using
tshark -i eth1 -f "net 18.104.22.168 and src port 2000"
I'm not sure how to pipe this into a script and automatically find the destination ip.