/l3/users/10-09-2007/nt-bsdnet/fbsd3.unix.nt/root :1 :2 :3 :4 :5 :6 :7 :8 :9 :10 :11 :12 :13 :14 :15 :16 :17 :18 :19 :20 :21 :22 :23 :24 :25 :26 :27 :28 :29 :30 :31 :32 :33 :34 :35 :36 |
|
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 4 packets transmitted, 0 packets received, 100% packet loss |
#vim frw.conf
1c1 < allowed="{!192.168.15.242, 192.168.15.243, 192.168.15.180}" --- > allowed="{192.168.15.242, 192.168.15.243, 192.168.15.180}" |
#vim frw.conf
1c1 < allowed="{!192.168.15.242, 192.168.15.243, 192.168.15.180}" --- > allowed="{192.168.15.242, 192.168.15.243, 192.168.15.180}" |
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 2 packets transmitted, 0 packets received, 100% packet loss |
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes ping: sendto: Operation not permitted ping: sendto: Operation not permitted ^C --- 192.168.15.242 ping statistics --- 2 packets transmitted, 0 packets received, 100% packet loss |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#ping 192.168.15.242
11:58:05.250062 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 17, length 64 11:58:05.524778 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 23, length 64 11:58:05.524865 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 23, length 64 11:58:06.250659 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 18, length 64 11:58:06.251073 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 18, length 64 11:58:06.525777 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 24, length 64 11:58:06.525863 IP 192.168.15.237 > 192.168.15.242: ICMP echo reply, id 58650, seq 24, length 64 11:58:07.251637 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 12817, seq 19, length 64 11:58:07.251919 IP 192.168.15.242 > 192.168.15.237: ICMP echo reply, id 12817, seq 19, length 64 11:58:07.526759 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 58650, seq 25, length 64 ... 12:00:22.334889 IP 192.168.15.242 > 192.168.15.237: ICMP echo request, id 6171, seq 62, length 64 12:00:23.270985 IP 192.168.15.237 > 192.168.15.242: ICMP echo request, id 19473, seq 64, length 64 PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.456 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.496 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.505 ms ^C --- 192.168.15.242 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.456/0.486/0.505/0.021 ms |
#vim frw.conf
|
#ps -aux|grep l3
user 940 1.9 0.4 10700 8520 ?? Ss 9:05AM 1:29.02 l3-agent (perl5.8 root 1508 1.9 0.4 9836 8656 ?? Ss 9:37AM 1:09.98 l3-agent (perl5.8 root 2281 1.9 0.4 9816 8632 ?? Ss 10:16AM 0:53.75 l3-agent (perl5.8 root 2477 1.9 0.4 9696 8516 ?? Ss 10:24AM 0:54.17 l3-agent (perl5.8 user 3685 1.9 0.4 10700 8564 ?? Ss 11:14AM 0:49.77 l3-agent (perl5.8 root 4134 1.9 0.4 9728 8540 ?? Ss 11:46AM 0:42.93 l3-agent (perl5.8 user 1832 1.8 0.4 10816 8688 ?? Ss 10:00AM 1:01.56 l3-agent (perl5.8 root 2871 1.8 0.4 9824 8644 ?? Ss 10:46AM 0:50.71 l3-agent (perl5.8 user 3443 1.8 0.4 10636 8500 ?? Ss 11:01AM 0:50.26 l3-agent (perl5.8 root 1253 1.7 0.4 9832 8648 ?? Ss 9:22AM 1:22.12 l3-agent (perl5.8 user 2114 1.6 0.4 10824 8688 ?? Ss 10:08AM 1:06.40 l3-agent (perl5.8 root 2568 1.5 0.4 9824 8644 ?? Ss 10:29AM 0:52.34 l3-agent (perl5.8 user 2954 1.5 0.4 10688 8564 ?? Ss 10:47AM 0:57.45 l3-agent (perl5.8 |
#ps -aux|grep l3|awk '{print $2}'
2871 2114 940 1832 2281 2477 4134 1253 1508 3685 3443 2954 2568 4857 |
#ps -aux|grep l3|awk '{print $2}'
2871 2114 940 1832 2281 2477 4134 1253 1508 3685 3443 2954 2568 4857 |
#kill-9 $(ps -aux|grep l3|awk '{print $2}')
bash: kill-9: command not found |
#kill-9 $(ps -aux|grep l3|awk '{print $2}')
bash: kill-9: command not found |
#kill-9 $(ps -aux|grep l3|awk '{print $2}')
bash: kill-9: command not found |
#kill -9 $(ps -aux|grep l3|awk '{print $2}')
bash: kill: (4889) - No such process |
#ps -aux|grep l3|awk '{print $2}'
|
#man pfctl
|
#vim /etc/myfriends
|
#vim /etc/myfriends
|
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled /root/frw.conf:2: syntax error pfctl: Syntax error in config file: pf rules not loaded |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled /root/frw.conf:2: syntax error pfctl: Syntax error in config file: pf rules not loaded |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled /root/frw.conf:2: syntax error pfctl: Syntax error in config file: pf rules not loaded |
#vim frw.conf
|
#ssh root@192.168.15.242
Enter passphrase for key '/root/.ssh/id_rsa': Last login: Wed Sep 12 11:13:34 2007 from host237.unix.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.2-RELEASE (SMP) #0: Fri Jan 12 11:05:30 UTC 2007 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are [root@fbsd1 ~]# Write failed: Operation not permitted at http://www.FreeBSD.org/releases/ - always consult the ERRATA section ... .gnome/ .recently-used.xbel .gnome2/ .rhosts .gnome2_private/ .shrc .gstreamer-0.10/ .ssh/ .gtkrc-1.2-gnome2 .xinitrc .kde/ .xsession-errors .kderc Desktop/ .l3rc pf-my .lesshst pf-table-my [root@fbsd1 ~]# less /home/user/pf-table-my |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled /root/frw.conf:2: invalid table option '/etc/myfriends' pfctl: Syntax error in config file: pf rules not loaded |
#vim frw.conf
|
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.379 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.392 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.406 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.418 ms 64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.429 ms ^C --- 192.168.15.242 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.379/0.405/0.429/0.018 ms |
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.484 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.382 ms 64 bytes from 192.168.15.242: icmp_seq=2 ttl=64 time=0.397 ms 64 bytes from 192.168.15.242: icmp_seq=3 ttl=64 time=0.410 ms 64 bytes from 192.168.15.242: icmp_seq=4 ttl=64 time=0.424 ms 64 bytes from 192.168.15.242: icmp_seq=5 ttl=64 time=0.430 ms 64 bytes from 192.168.15.242: icmp_seq=6 ttl=64 time=0.443 ms 64 bytes from 192.168.15.242: icmp_seq=7 ttl=64 time=0.452 ms 64 bytes from 192.168.15.242: icmp_seq=8 ttl=64 time=0.341 ms 64 bytes from 192.168.15.242: icmp_seq=9 ttl=64 time=0.351 ms 64 bytes from 192.168.15.242: icmp_seq=10 ttl=64 time=0.361 ms 64 bytes from 192.168.15.242: icmp_seq=11 ttl=64 time=0.500 ms 64 bytes from 192.168.15.242: icmp_seq=12 ttl=64 time=0.382 ms 64 bytes from 192.168.15.242: icmp_seq=13 ttl=64 time=0.397 ms 64 bytes from 192.168.15.242: icmp_seq=14 ttl=64 time=0.407 ms 64 bytes from 192.168.15.242: icmp_seq=15 ttl=64 time=0.421 ms ^C --- 192.168.15.242 ping statistics --- 16 packets transmitted, 16 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.341/0.411/0.500/0.043 ms |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#pfctl
usage: pfctl [-AdeghmNnOoqRrvz] [-a anchor] [-D macro=value] [-F modifier] [-f file] [-i interface] [-k host] [-p device] [-s modifier] [-t table -T command [address ...]] [-x level] |
#/etc/rc.d/p
pccard pf pfsync powerd pppoed pcvt pflog power_profile ppp pwcheck |
#/etc/rc.d/pf stop
No ALTQ support in kernel ALTQ related functions disabled Disabling pf. No ALTQ support in kernel ALTQ related functions disabled pf disabled |
#/etc/rc.d/pf start
Enabling pf. No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled pf enabled |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#pfctl
usage: pfctl [-AdeghmNnOoqRrvz] [-a anchor] [-D macro=value] [-F modifier] [-f file] [-i interface] [-k host] [-p device] [-s modifier] [-t table -T command [address ...]] [-x level] |
#/etc/rc.d/pf stop
No ALTQ support in kernel ALTQ related functions disabled Disabling pf. No ALTQ support in kernel ALTQ related functions disabled pf disabled |
#/etc/rc.d/pf start
Enabling pf. No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled pf enabled |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#host ya.ru
;; connection timed out; no servers could be reached |
#/etc/rc.d/pf start
Enabling pf. No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#host ya.ru
|
#vim frw.conf
|
#/etc/rc.d/pf stop
No ALTQ support in kernel ALTQ related functions disabled Disabling pf. No ALTQ support in kernel ALTQ related functions disabled pf disabled |
#/etc/rc.d/pf start
Enabling pf. No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled No ALTQ support in kernel ALTQ related functions disabled pf enabled |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#host ya.ru
ya.ru has address 213.180.204.8 ya.ru has address 87.250.251.8 ya.ru mail is handled by 0 mx1.yandex.ru. ya.ru mail is handled by 10 mx2.yandex.ru. |
#vim frw.conf
|
#linx ya.ru
bash: linx: command not found |
#lyx ya.ru
bash: lynx: command not found |
#lynx
|
#li
libIDL-config-2 libnetcfg linc-config libart2-config libpng-config linguist libgcrypt-config libpng12-config link libglade-convert libtasn1-config lint libgnutls-config libusb-config list_audio_tracks libgnutls-extra-config licensecheck listres libgtop_daemon2 limits libgtop_server2 linc-cleanup-sockets |
#li
libIDL-config-2 libnetcfg linc-config libart2-config libpng-config linguist libgcrypt-config libpng12-config link libglade-convert libtasn1-config lint libgnutls-config libusb-config list_audio_tracks libgnutls-extra-config licensecheck listres libgtop_daemon2 limits libgtop_server2 linc-cleanup-sockets |
#li
libIDL-config-2 libnetcfg linc-config libart2-config libpng-config linguist libgcrypt-config libpng12-config link libglade-convert libtasn1-config lint libgnutls-config libusb-config list_audio_tracks libgnutls-extra-config licensecheck listres libgtop_daemon2 limits libgtop_server2 linc-cleanup-sockets |
#lin
linc-cleanup-sockets linguist lint linc-config link |
#link ya.ru
usage: ln [-Ffhinsv] source_file [target_file] ln [-Ffhinsv] source_file ... target_dir link source_file target_file |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled /root/frw.conf:9: unknown protocol http pfctl: Syntax error in config file: pf rules not loaded |
#vim frw.conf
|
#less /etc/pro
|
#less /etc/protocols
|
#lynx ya.ru
|
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#vim frw.conf
|
#ssh root@192.168.15.242
ssh: connect to host 192.168.15.242 port 22: Operation not permitted |
#ping 192.168.15.242
PING 192.168.15.242 (192.168.15.242): 56 data bytes 64 bytes from 192.168.15.242: icmp_seq=0 ttl=64 time=0.687 ms 64 bytes from 192.168.15.242: icmp_seq=1 ttl=64 time=0.362 ms ^C --- 192.168.15.242 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.362/0.524/0.687/0.163 ms |
#ssh root@192.168.15.242
ssh: connect to host 192.168.15.242 port 22: Operation not permitted |
#host google.com
google.com has address 64.233.167.99 google.com has address 64.233.187.99 google.com has address 72.14.207.99 google.com mail is handled by 10 smtp4.google.com. google.com mail is handled by 10 smtp1.google.com. google.com mail is handled by 10 smtp2.google.com. google.com mail is handled by 10 smtp3.google.com. |
#vim frw.conf
9c9 < pass in quick on em0 inet proto tcp from any to em0 keep state --- > pass out quick on em0 inet proto tcp from any to em0 keep state |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#vim frw.conf
|
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#????? -??
bash: ?????: command not found |
#ssh root@192.168.15.242
Enter passphrase for key '/root/.ssh/id_rsa': Last login: Wed Sep 12 12:59:50 2007 from host237.unix.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.2-RELEASE (SMP) #0: Fri Jan 12 11:05:30 UTC 2007 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are at http://www.FreeBSD.org/releases/ - always consult the ERRATA section for your release first as it's updated frequently. ... configuration utility. Edit /etc/motd to change this login announcement. Removing stale pidfile Agent pid 9649 Enter passphrase for /root/.ssh/id_rsa: Bad passphrase, try again for /root/.ssh/id_rsa: Bad passphrase, try again for /root/.ssh/id_rsa: Bad passphrase, try again for /root/.ssh/id_rsa: Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa) Identity added: /root/.ssh/id_dsa (/root/.ssh/id_dsa) Identity added: /root/.ssh/identity (root@fbsd1.unix.nt) |
#pfctl -sr
No ALTQ support in kernel ALTQ related functions disabled block drop in all block drop out all pass out quick on em0 proto icmp from any to <allowed> keep state pass in quick on em0 proto icmp from <allowed> to any keep state pass out quick on em0 inet proto udp from 192.168.15.237 to any port = domain keep state pass out quick on em0 inet proto tcp from 192.168.15.237 to any port = http keep state |
#vim frw.conf
|
#vim frw.conf
9a10,11 > pass in quick on em0 inet proto tcp from <allowed> to em0 port 22 keep state > pass out quick on em0 inet proto tcp from em0 to any port 22 keep state |
#pfctl -f ~/frw.conf
No ALTQ support in kernel ALTQ related functions disabled |
#ssh root@192.168.15.242
Last login: Wed Sep 12 13:40:47 2007 from host237.unix.nt Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.2-RELEASE (SMP) #0: Fri Jan 12 11:05:30 UTC 2007 Welcome to FreeBSD! Before seeking technical support, please use the following resources: o Security advisories and updated errata information for all releases are at http://www.FreeBSD.org/releases/ - always consult the ERRATA section for your release first as it's updated frequently. o The Handbook and FAQ documents are at http://www.FreeBSD.org/ and, ... manual page. If you are not familiar with manual pages, type `man man'. You may also use sysinstall(8) to re-enter the installation and configuration utility. Edit /etc/motd to change this login announcement. Removing stale pidfile Agent pid 9852 Enter passphrase for /root/.ssh/id_rsa: Bad passphrase, try again for /root/.ssh/id_rsa: Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa) Identity added: /root/.ssh/id_dsa (/root/.ssh/id_dsa) Identity added: /root/.ssh/identity (root@fbsd1.unix.nt) |
#ping 192.168.15.237
PING 192.168.15.237 (192.168.15.237): 56 data bytes 64 bytes from 192.168.15.237: icmp_seq=0 ttl=64 time=0.503 ms 64 bytes from 192.168.15.237: icmp_seq=1 ttl=64 time=0.319 ms ^C --- 192.168.15.237 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.319/0.411/0.503/0.092 ms |
#ssh 192.168.15.237
Password: Removing stale pidfile Agent pid 5802 |
#exit
Connection to 192.168.15.237 closed. |
#exit
Connection to 192.168.15.242 closed. |
Время первой команды журнала | 12:31:11 2007- 9-12 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Время последней команды журнала | 13:42:47 2007- 9-12 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в журнале | 101 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент команд с ненулевым кодом завершения, % | 18.81 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент синтаксически неверно набранных команд, % | 11.88 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Суммарное время работы с терминалом *, час | 1.19 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в единицу времени, команда/мин | 1.41 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Частота использования команд |
|
В журнал автоматически попадают все команды, данные в любом терминале системы.
Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.
Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
$ l s-l bash: l: command not found |
Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
$ test 5 -lt 4 |
Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
$ find / -name abc find: /home/devi-orig/.gnome2: Keine Berechtigung find: /home/devi-orig/.gnome2_private: Keine Berechtigung find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung find: /home/devi-orig/.metacity: Keine Berechtigung find: /home/devi-orig/.inkscape: Keine Berechtigung ^C |
Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
# id uid=0(root) gid=0(root) Gruppen=0(root) |
Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
$ vi ~/.bashrc
|
Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
$ patch ~/.bashrc |
Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.
Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.
Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.
Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора
Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.
Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.
Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:
$ whoami
user
$ #^ Интересно, кто я?в журнале это будет выглядеть так:
$ whoami
user
Интересно, кто я? |
Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:
$ whoami
user
$ cat > /dev/null #^ Интересно, кто я?
Программа whoami выводит имя пользователя, под которым мы зарегистрировались в системе. - Она не может ответить на вопрос о нашем назначении в этом мире.В журнале это будет выглядеть так:
$ whoami user
|
Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=
1 2 3 4Группы команд, выполненных на разных терминалах, разделяются специальной линией. Под этой линией в правом углу показано имя терминала, на котором выполнялись команды. Для того чтобы посмотреть команды только одного сенса, нужно щёкнуть по этому названию.
LiLaLo (L3) расшифровывается как Live Lab Log.
Программа разработана для повышения эффективности обучения Unix/Linux-системам.
(c) Игорь Чубин, 2004-2008