Журнал лабораторных работ

Содержание

Журнал

Среда (06/13/07)

/dev/ttyp2
10:40:49
#cat ~/.bashr

10:40:49
#cat ~/.bashrc
. /root/.lilalo/l3bashrc && _l3_start
if [ -f /usr/local/etc/bash_completion ]; then
        . /usr/local/etc/bash_completion
    fi
10:40:49
#cat ~/.bashr

10:40:49
#cat ~/.bashr

10:40:49
#cat ~/.bashrc
. /root/.lilalo/l3bashrc && _l3_start
if [ -f /usr/local/etc/bash_completion ]; then
        . /usr/local/etc/bash_completion
    fi
10:40:52
#. ~/.bashrc

10:40:52
#. ~/.bashrc

10:40:57
#ipfw list
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
65535 allow ip from any to any
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
10:40:57
#ipfw list
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
65535 allow ip from any to any
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
10:45:09
#vim /etc/rc.firewall
10:45:09
#vim /etc/rc.firewall
10:45:50
#grep ACCEPT /sys/i386/conf/GENERIC_WITH_IPFW
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
options IPFIREWALL_DEFAULT_TO_ACCEPT
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
10:45:50
#grep ACCEPT /sys/i386/conf/GENERIC_WITH_IPFW
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
options IPFIREWALL_DEFAULT_TO_ACCEPT
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
10:49:11
#lynx ya.ru
10:49:11
#lynx ya.ru
10:49:11
#lynx ya.ru
прошло 26 минут
11:15:22
#[root@fbsd2:bash-completion]# cd

IPFW
11:15:22
#[root@fbsd2:bash-completion]# cd

IPFW
11:15:22
#[root@fbsd2:bash-completion]# cd

IPFW
11:15:38
#grep ACCEPT /sys/i386/conf/GENERIC_WITH_IPFW
options IPFIREWALL_DEFAULT_TO_ACCEPT
11:15:38
#grep ACCEPT /sys/i386/conf/GENERIC_WITH_IPFW
options IPFIREWALL_DEFAULT_TO_ACCEPT
11:15:38
#grep ACCEPT /sys/i386/conf/GENERIC_WITH_IPFW
options IPFIREWALL_DEFAULT_TO_ACCEPT
11:15:43
#ipfw list
65535 allow ip from any to any
11:15:43
#ipfw list
65535 allow ip from any to any
11:15:43
#ipfw list
65535 allow ip from any to any
11:22:15
#kldload ipfw; ipfw add 65000 allow ip from any to any
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldload: can't load ipfw: File exists
65000 allow ip from any to any
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:22:15
#kldload ipfw; ipfw add 65000 allow ip from any to any
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldload: can't load ipfw: File exists
65000 allow ip from any to any
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:23:39
#vim /boot/loader
11:23:39
#vim /boot/loader
11:23:39
#vim /boot/loader.conf
11:23:39
#vim /boot/loader
11:23:39
#vim /boot/loader
11:23:39
#vim /boot/loader.conf
11:24:00
#vim /boot/loader
11:24:00
#vim /boot/loader
11:24:00
#vim /boot/loader.help
11:24:00
#vim /boot/loader.help
11:24:23
#ls -l /boot/
GENERIC/      boot1         frames.4th    loader.conf   pxeboot
beastie.4th   boot2         kernel/       loader.help   screen.4th
boot          cdboot        kernel.old/   loader.rc     support.4th
boot0         defaults/     loader        mbr
boot0sio      device.hints  loader.4th    modules/
11:24:23
#ls -l /boot/kernel
kernel/     kernel.old/
11:24:23
#ls -l /boot/kernel/
Display all 462 possibilities? (y or n)
11:24:23
#ls -l /boot/kernel/ip
ip6fw.ko      ipdivert.ko   ipl.ko        ips.ko
ip_mroute.ko  ipfw.ko       ipmi.ko
11:24:23
#ls -l /boot/kernel/ipfw.ko
-r-xr-xr-x  1 root  wheel  56326 Jun 12 03:04 /boot/kernel/ipfw.ko
11:24:23
#ls -l /boot/
GENERIC/      boot1         frames.4th    loader.conf   pxeboot
beastie.4th   boot2         kernel/       loader.help   screen.4th
boot          cdboot        kernel.old/   loader.rc     support.4th
boot0         defaults/     loader        mbr
boot0sio      device.hints  loader.4th    modules/
11:24:23
#ls -l /boot/kernel
kernel/     kernel.old/
11:24:23
#ls -l /boot/kernel/
Display all 462 possibilities? (y or n)
11:24:23
#ls -l /boot/kernel/ip
ip6fw.ko      ipdivert.ko   ipl.ko        ips.ko
ip_mroute.ko  ipfw.ko       ipmi.ko
11:24:23
#ls -l /boot/kernel/ipfw.ko
-r-xr-xr-x  1 root  wheel  56326 Jun 12 03:04 /boot/kernel/ipfw.ko
11:24:54
#file /boot/kernel/ipfw.ko
/boot/kernel/ipfw.ko: ELF 32-bit LSB shared object, Intel 80386, version 1 (FreeBSD), not stripped
11:24:54
#file /boot/kernel/ipfw.ko
/boot/kernel/ipfw.ko: ELF 32-bit LSB shared object, Intel 80386, version 1 (FreeBSD), not stripped
11:24:57
#man loader.conf
11:24:57
#man loader.conf
11:25:47
#kld
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldconfig  kldload    kldstat    kldunload  kldxref
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:25:47
#kldstat
Id Refs Address    Size     Name
 1    5 0xc0400000 7059ec   kernel
 2    1 0xc0b06000 59f20    acpi.ko
 3    1 0xc378c000 4000     logo_saver.ko
11:25:47
#kld
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldconfig  kldload    kldstat    kldunload  kldxref
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:25:47
#kldstat
Id Refs Address    Size     Name
 1    5 0xc0400000 7059ec   kernel
 2    1 0xc0b06000 59f20    acpi.ko
 3    1 0xc378c000 4000     logo_saver.ko
11:28:55
#ipfw list
65000 allow ip from any to any
65535 allow ip from any to any
11:28:55
#ipfw list
65000 allow ip from any to any
65535 allow ip from any to any
11:29:22
#kldunload ipfw
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldunload: can't find file ipfw: No such file or directory
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:29:22
#kldunload ipfw
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
kldunload: can't find file ipfw: No such file or directory
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:29:29
#kldunload ipfw.ko
kldunload: can't find file ipfw.ko: No such file or directory
11:29:29
#kldunload ipfw.ko
kldunload: can't find file ipfw.ko: No such file or directory
11:29:40
#ipfw listÝÚ
ipfw: bad command `listÝÚ'
11:29:40
#ipfw listÝÚ
ipfw: bad command `listÝÚ'
11:29:49
#top
last pid:  7316;  load averages:  1.37,  1.01,  0.66    up 0+01:25:49  11:29:54
35 processes93.4 running 0.0 sleepin 0.4           6.2              0.0
CPU states:     % user,     % nice,     % system,     % interrupt,     % idle
Mem: 37M Active, 70M Inact, 63M Wired, 16M Cache, 60M Buf, 307M Free
  923                             68K  7476             23 36.62
Sw792 997M Total, 997M F5ee       72K  7460             13 36.47
                                                               5
  PID USERNAME    THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
  792 root          1 115    0  8772K  7460K RUN     11:13 35.74% perl5.8.8
  923 root          1 114    0  8768K  7476K RUN     11:22 35.60% perl5.8.8
...
  848 root          1  96    0  2100K  1772K select   0:01  0.00% screen
  849 root          1  96    0  1340K   920K select   0:01  0.00% script
  790 root          1  96    0  1340K   916K select   0:01  0.00% script
  917 root          1  96    0  1340K   916K select   0:00  0.00% script
  705 root          1  96    0  3504K  2804K select   0:00  0.00% sendmail
  959 root          1   8    0  3240K  2092K wait     0:00  0.00% bash
  828 root          1   8    0  3248K  2080K wait     0:00  0.00% bash
  847 root          1  20    0  1996K  1532K pause    0:00  0.00% screen
  981 root          1  20    0  1996K  1640K pause    0:00  0.00% screen
  715 root          1   8    0  1388K  1100K nanslp   0:00  0.00% cron
11:29:49
#top
last pid:  7316;  load averages:  1.37,  1.01,  0.66    up 0+01:25:49  11:29:54
35 processes93.4 running 0.0 sleepin 0.4           6.2              0.0
CPU states:     % user,     % nice,     % system,     % interrupt,     % idle
Mem: 37M Active, 70M Inact, 63M Wired, 16M Cache, 60M Buf, 307M Free
  923                             68K  7476             23 36.62
Sw792 997M Total, 997M F5ee       72K  7460             13 36.47
                                                               5
  PID USERNAME    THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
  792 root          1 115    0  8772K  7460K RUN     11:13 35.74% perl5.8.8
  923 root          1 114    0  8768K  7476K RUN     11:22 35.60% perl5.8.8
...
  848 root          1  96    0  2100K  1772K select   0:01  0.00% screen
  849 root          1  96    0  1340K   920K select   0:01  0.00% script
  790 root          1  96    0  1340K   916K select   0:01  0.00% script
  917 root          1  96    0  1340K   916K select   0:00  0.00% script
  705 root          1  96    0  3504K  2804K select   0:00  0.00% sendmail
  959 root          1   8    0  3240K  2092K wait     0:00  0.00% bash
  828 root          1   8    0  3248K  2080K wait     0:00  0.00% bash
  847 root          1  20    0  1996K  1532K pause    0:00  0.00% screen
  981 root          1  20    0  1996K  1640K pause    0:00  0.00% screen
  715 root          1   8    0  1388K  1100K nanslp   0:00  0.00% cron
11:29:57
##ipfw add 100 deny icmp from net.nt to me via
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:29:57
##ipfw add 100 deny icmp from net.nt to me via
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:32:03
#ifconfig
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=9<RXCSUM,VLAN_MTU>
        inet 192.168.16.22 netmask 0xffffff00 broadcast 192.168.16.255
        inet 172.16.0.2 netmask 0xffff0000 broadcast 172.16.255.255
        ether 00:51:04:a2:11:f3
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
11:32:03
#ifconfig
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=9<RXCSUM,VLAN_MTU>
        inet 192.168.16.22 netmask 0xffffff00 broadcast 192.168.16.255
        inet 172.16.0.2 netmask 0xffff0000 broadcast 172.16.255.255
        ether 00:51:04:a2:11:f3
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
11:32:06
#ipfw add 100 deny icmp from net.nt to me via xl0
00100 deny icmp from 192.168.16.15 to me via xl0
11:32:06
#ipfw add 100 deny icmp from net.nt to me via xl0
00100 deny icmp from 192.168.16.15 to me via xl0
11:32:15
#ssh clint@192.168.16.15 ping 192.168.16.21 -c 4
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
The authenticity of host '192.168.16.15 (192.168.16.15)' can't be established.
DSA key fingerprint is 3c:01:8f:86:03:04:d7:11:38:74:77:2b:0b:50:cc:18.
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
Are you sure you want to continue connecting (yes/no)? yes
DESCRIPTION
Warning: Permanently added '192.168.16.15' (DSA) to the list of known hosts.
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
clint@192.168.16.15's password:
...
64 bytes from 192.168.16.21: icmp_seq=3 ttl=64 time=0.277 ms
     can be reached through the network; this may not be appropriate on all
64 bytes from 192.168.16.21: icmp_seq=4 ttl=64 time=0.327 ms
     service.  The server should have the user ID with the lowest possible
[r
--- 192.168.16.21 ping statistics ---
-------------------------------------------------------------------------------
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
rtt min/avg/max/mdev = 0.277/0.858/2.511/0.954 ms
11:32:15
#ssh clint@192.168.16.15 ping 192.168.16.21 -c 4
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
The authenticity of host '192.168.16.15 (192.168.16.15)' can't be established.
DSA key fingerprint is 3c:01:8f:86:03:04:d7:11:38:74:77:2b:0b:50:cc:18.
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
Are you sure you want to continue connecting (yes/no)? yes
DESCRIPTION
Warning: Permanently added '192.168.16.15' (DSA) to the list of known hosts.
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
clint@192.168.16.15's password:
...
64 bytes from 192.168.16.21: icmp_seq=3 ttl=64 time=0.277 ms
     can be reached through the network; this may not be appropriate on all
64 bytes from 192.168.16.21: icmp_seq=4 ttl=64 time=0.327 ms
     service.  The server should have the user ID with the lowest possible
[r
--- 192.168.16.21 ping statistics ---
-------------------------------------------------------------------------------
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
rtt min/avg/max/mdev = 0.277/0.858/2.511/0.954 ms
11:32:15
#ssh clint@192.168.16.15 ping 192.168.16.21 -c 4
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
The authenticity of host '192.168.16.15 (192.168.16.15)' can't be established.
DSA key fingerprint is 3c:01:8f:86:03:04:d7:11:38:74:77:2b:0b:50:cc:18.
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
Are you sure you want to continue connecting (yes/no)? yes
DESCRIPTION
Warning: Permanently added '192.168.16.15' (DSA) to the list of known hosts.
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
clint@192.168.16.15's password:
...
64 bytes from 192.168.16.21: icmp_seq=3 ttl=64 time=0.277 ms
     can be reached through the network; this may not be appropriate on all
64 bytes from 192.168.16.21: icmp_seq=4 ttl=64 time=0.327 ms
     service.  The server should have the user ID with the lowest possible
[r
--- 192.168.16.21 ping statistics ---
-------------------------------------------------------------------------------
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
rtt min/avg/max/mdev = 0.277/0.858/2.511/0.954 ms
11:33:19
#host net.nt
net.nt has address 192.168.16.15
11:33:19
#host net.nt
net.nt has address 192.168.16.15
11:33:19
#host net.nt
net.nt has address 192.168.16.15
11:33:26
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:33:26
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:33:26
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:33:33
#ipfw add 200 deny icmp from any to any
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
00200 deny icmp from any to any
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:33:33
#ipfw add 200 deny icmp from any to any
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
00200 deny icmp from any to any
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:34:32
#ssh clint@192.168.16.15 ping 192.168.16.21 -c 4
clint@192.168.16.15's password:
PING 192.168.16.21 (192.168.16.21) 56(84) bytes of data.
64 bytes from 192.168.16.21: icmp_seq=1 ttl=64 time=0.238 ms
64 bytes from 192.168.16.21: icmp_seq=2 ttl=64 time=0.229 ms
64 bytes from 192.168.16.21: icmp_seq=3 ttl=64 time=0.292 ms
64 bytes from 192.168.16.21: icmp_seq=4 ttl=64 time=0.270 ms
--- 192.168.16.21 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3000ms
rtt min/avg/max/mdev = 0.229/0.257/0.292/0.027 ms
11:34:32
#ssh clint@192.168.16.15 ping 192.168.16.21 -c 4
clint@192.168.16.15's password:
PING 192.168.16.21 (192.168.16.21) 56(84) bytes of data.
64 bytes from 192.168.16.21: icmp_seq=1 ttl=64 time=0.238 ms
64 bytes from 192.168.16.21: icmp_seq=2 ttl=64 time=0.229 ms
64 bytes from 192.168.16.21: icmp_seq=3 ttl=64 time=0.292 ms
64 bytes from 192.168.16.21: icmp_seq=4 ttl=64 time=0.270 ms
--- 192.168.16.21 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3000ms
rtt min/avg/max/mdev = 0.229/0.257/0.292/0.027 ms
11:34:41
#ssh clint@192.168.16.15 ping 192.168.16.22 -c 4
clint@192.168.16.15's password:
^CKilled by signal 2.
11:34:41
#ssh clint@192.168.16.15 ping 192.168.16.22 -c 4
clint@192.168.16.15's password:
^CKilled by signal 2.
11:35:09
#ipfw delete 200
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:35:09
#ipfw delete 200
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:35:26
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:35:26
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:35:30
#ssh clint@192.168.16.15 ping 192.168.16.22 -c 4
clint@192.168.16.15's password:
^CKilled by signal 2.
11:35:30
#ssh clint@192.168.16.15 ping 192.168.16.22 -c 4
clint@192.168.16.15's password:
^CKilled by signal 2.
11:35:42
# icmp from net.nt to me via xl0
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:35:42
# icmp from net.nt to me via xl0
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:36:39
#ipfw add 100 reject icmp from net.nt to me via xl0
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
00100 reject icmp from 192.168.16.15 to me via xl0
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:36:39
#ipfw add 100 reject icmp from net.nt to me via xl0
      1 # $FreeBSD: src/etc/inetd.conf,v 1.70.2.2 2006/09/07 20:03:25 obrien Exp
NAME
00100 reject icmp from 192.168.16.15 to me via xl0
SY
     tftpd [-cClnw] [-s directory] [-u user] [-U umask] [directory ...]
DESCRIPTION
     Transfer Protocol (RFC 1350).  The TFTP server operates at the port indi-
     normally started by inetd(8).
     The use of tftp(1) does not require an account or password on the remote
     only publicly readable files to be accessed.  Files containing the string
     only if they already exist and are publicly writable.  Note that this
     can be reached through the network; this may not be appropriate on all
     service.  The server should have the user ID with the lowest possible
[r
-------------------------------------------------------------------------------
     18 #shell  stream  tcp6    nowait  root    /usr/libexec/rshd       rshd
11:36:52
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
00100 reject icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any
11:36:52
#ipfw list
00100 deny icmp from 192.168.16.15 to me via xl0
00100 reject icmp from 192.168.16.15 to me via xl0
65000 allow ip from any to any
65535 allow ip from any to any

Файлы

  • ~/.bashr
  • ~/.bashrc
  • ~/.bashr
    >
    ~/.bashrc
    >
    . /root/.lilalo/l3bashrc && _l3_start
    if [ -f /usr/local/etc/bash_completion ]; then
            . /usr/local/etc/bash_completion
        fi
    

    Статистика

    Время первой команды журнала10:40:49 2007- 6-13
    Время последней команды журнала11:36:52 2007- 6-13
    Количество командных строк в журнале98
    Процент команд с ненулевым кодом завершения, %12.24
    Процент синтаксически неверно набранных команд, % 0.00
    Суммарное время работы с терминалом *, час 0.93
    Количество командных строк в единицу времени, команда/мин 1.75
    Частота использования команд
    ipfw26|=========================| 25.24%
    vim12|===========| 11.65%
    ls10|=========| 9.71%
    ssh9|========| 8.74%
    cat5|====| 4.85%
    grep5|====| 4.85%
    kldunload4|===| 3.88%
    host3|==| 2.91%
    lynx3|==| 2.91%
    #^3|==| 2.91%
    [root@fbsd2:bash-completion]#3|==| 2.91%
    ifconfig2|=| 1.94%
    top2|=| 1.94%
    man2|=| 1.94%
    kldstat2|=| 1.94%
    kldload2|=| 1.94%
    kld2|=| 1.94%
    icmp2|=| 1.94%
    #ipfw2|=| 1.94%
    .2|=| 1.94%
    file2|=| 1.94%
    ____
    *) Интервалы неактивности длительностью 30 минут и более не учитываются

    Справка

    Для того чтобы использовать LiLaLo, не нужно знать ничего особенного: всё происходит само собой. Однако, чтобы ведение и последующее использование журналов было как можно более эффективным, желательно иметь в виду следующее:
    1. В журнал автоматически попадают все команды, данные в любом терминале системы.

    2. Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.

    3. Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
      $ l s-l
      bash: l: command not found
      

    4. Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
      $ test 5 -lt 4
      Обратите внимание на то, что код завершения команды может быть отличен от нуля не только в тех случаях, когда команда была выполнена с ошибкой. Многие команды используют код завершения, например, для того чтобы показать результаты проверки

    5. Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
      $ find / -name abc
      find: /home/devi-orig/.gnome2: Keine Berechtigung
      find: /home/devi-orig/.gnome2_private: Keine Berechtigung
      find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung
      find: /home/devi-orig/.metacity: Keine Berechtigung
      find: /home/devi-orig/.inkscape: Keine Berechtigung
      ^C
      

    6. Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
      # id
      uid=0(root) gid=0(root) Gruppen=0(root)
      

    7. Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
      $ vi ~/.bashrc
      2a3,5
      >    if [ -f /usr/local/etc/bash_completion ]; then
      >         . /usr/local/etc/bash_completion
      >        fi
      

    8. Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
      $ patch ~/.bashrc
      В данном случае изменения применяются к файлу ~/.bashrc

    9. Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.

      Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.

    10. Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.

    11. Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора

    12. Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.

    13. Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.

    14. Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:

      $ whoami
      
      user
      
      $ #^ Интересно, кто я?
      
      в журнале это будет выглядеть так:
      $ whoami
      
      user
      
      Интересно, кто я?

    15. Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:

      $ whoami
      
      user
      
      $ cat > /dev/null #^ Интересно, кто я?
      
      Программа whoami выводит имя пользователя, под которым 
      мы зарегистрировались в системе.
      -
      Она не может ответить на вопрос о нашем назначении 
      в этом мире.
      
      В журнале это будет выглядеть так:
      $ whoami
      user
      
      Интересно, кто я?
      Программа whoami выводит имя пользователя, под которым
      мы зарегистрировались в системе.

      Она не может ответить на вопрос о нашем назначении
      в этом мире.
      Для разделения нескольких абзацев между собой используйте символ "-", один в строке.

    16. Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=

    17. Содержимое файла может быть показано в журнале. Для этого его нужно вывести с помощью программы cat. Если вывод команды отметить симоволами #!, содержимое файла будет показано в журнале в специально отведённой для этого секции.
    18. Для того чтобы вставить скриншот интересующего вас окна в журнал, нужно воспользоваться командой l3shot. После того как команда вызвана, нужно с помощью мыши выбрать окно, которое должно быть в журнале.
    19. Команды в журнале расположены в хронологическом порядке. Если две команды давались одна за другой, но на разных терминалах, в журнале они будут рядом, даже если они не имеют друг к другу никакого отношения.
      1
          2
      3   
          4
      
      Группы команд, выполненных на разных терминалах, разделяются специальной линией. Под этой линией в правом углу показано имя терминала, на котором выполнялись команды. Для того чтобы посмотреть команды только одного сенса, нужно щёкнуть по этому названию.

    О программе

    LiLaLo (L3) расшифровывается как Live Lab Log.
    Программа разработана для повышения эффективности обучения Unix/Linux-системам.
    (c) Игорь Чубин, 2004-2008

    $Id$