Журнал лабораторных работ

Содержание

Журнал

Пятница (07/31/09)

20:21:38
$nc 192.168.16.7 65533

20:21:40
$date
Птн Июл 31 21:21:43 EEST 2009
20:21:43
$nc 192.168.16.7 65533

20:21:53
$sudo less /var/log/debug
20:22:14
$sudo invoke-rc.d xinetd stop
[user@debian7:~]$ sudo netstat -lnp | less
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
PID/Program name
tcp        0      0 0.0.0.0:5900            0.0.0.0:*               LISTEN     1
214/Xvnc
tcp        0      0 0.0.0.0:65533           0.0.0.0:*               LISTEN     3
412/xinetd
tcp6       0      0 :::22                   :::*                    LISTEN     1
188/sshd
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node PID/Program name    Pat
h
unix  2      [ ACC ]     STREAM     LISTENING     3402     1203/gdm            /
tmp/.gdm_socket
unix  2      [ ACC ]     STREAM     LISTENING     3479     1214/Xvnc           /
tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     3556     1286/ssh-agent      /
tmp/ssh-IxlMwe1249/agent.1249
Stopping internet superserver: xinetd.
20:22:24
$sudo invoke-rc.d xinetd start
[user@debian7:~]$ sudo netstat -lnp | less
...skipping...
Active Internet connections (only servers)  Foreign Address         State
Proto Recv-Q Send-Q Local Address           Foreign Address         State
PID/Program name    0.0.0.0:5900            0.0.0.0:*               LISTEN     1
tcp        0      0 0.0.0.0:5900            0.0.0.0:*               LISTEN     1
214/Xvnc            :::22                   :::*                    LISTEN     1
tcp6       0      0 :::22                   :::*                    LISTEN     1
188/sshd           sockets (only servers)
Active UNIX domain sockets (only servers)         I-Node PID/Program name    Pat
...
unix  2      [ ACC ]     STREAM     LISTENING     3556     1286/ssh-agent      /
tmp/ssh-IxlMwe1249/agent.1249
~
~
~
~
~
~
~
Starting internet superserver: xinetd.
20:22:27
$sudo netstat -lnp | less
20:22:28
$nc 192.168.16.7 65533

20:22:31
$ls -lt /var/log |
итого 1460
-rw-r----- 1 root adm   98189 2009-07-31 21:22 auth.log
-rw-r----- 1 root adm   12136 2009-07-31 21:22 daemon.log
-rw-r----- 1 root adm   11543 2009-07-31 21:22 debug
-rw-r----- 1 root adm   87740 2009-07-31 21:22 syslog
-rw-r----- 1 root adm   94790 2009-07-31 21:21 messages
-rw-r----- 1 root adm  160812 2009-07-31 21:15 dpkg.log
-rw-rw-r-- 1 root utmp 351860 2009-07-31 21:03 lastlog
-rw-rw-r-- 1 root utmp 231552 2009-07-31 21:03 wtmp
-rw-r----- 1 root adm   89041 2009-07-31 21:02 kern.log
20:22:40
$less /var/log/daemon.log
20:22:46
$sudo
...skipping...
Jul 31 21:22:27 debian7 xinetd[3578]: Reading included configuration file: /etc/
xinetd.d/chargen [file=/etc/xinetd.d/chargen] [line=11]
Jul 31 21:22:27 debian7 xinetd[3578]: Reading included configuration file: /etc/
xinetd.d/daytime [file=/etc/xinetd.d/daytime] [line=28] 212.90.124.5 offset 0.20
Jul 31 21:22:27 debian7 xinetd[3578]: Reading included configuration file: /etc/
xinetd.d/discard [file=/etc/xinetd.d/discard] [line=26]
Jul 31 21:22:27 debian7 xinetd[3578]: Reading included configuration file: /etc/\217
xinetd.d/echo [file=/etc/xinetd.d/echo] [line=25]dm/.cookie: No space left on device
Jul 31 21:22:27 debian7 xinetd[3578]: Reading included configuration file: /etc/
...
Jul 31 21:22:27 debian7 xinetd[3578]: removing daytime´ в <D1>\201еан<D1>\201 дл
Jul 31 21:22:27 debian7 xinetd[3578]: removing discard¾Ð²Ð°<D1>\202ел<D1>\217 (root) зап
Jul 31 21:22:27 debian7 xinetd[3578]: removing discard
Jul 31 21:22:27 debian7 xinetd[3578]: removing echorting ipv6 (/lib/modules/2.6.
Jul 31 21:22:27 debian7 xinetd[3578]: removing echoormat
Jul 31 21:22:27 debian7 xinetd[3578]: removing timerting ipv6 (/lib/modules/2.6.
Jul 31 21:22:27 debian7 xinetd[3578]: removing timeormat
Jul 31 21:22:27 debian7 xinetd[3578]: xinetd Version 2.3.14 started with libwrap\2
 loadavg options compiled in.217 <D1>\201к<D1>\200ип<D1>\202 XKeepsCrashing
Jul 31 21:22:27 debian7 xinetd[3578]: Started working: 1 available service
20:22:53
$sudo less /var/log/auth.log
20:23:23
$sudo invoke-rc.d xinetd start
        protocol    = tcp
        wait        = no
        user        = root
        server      = /usr/bin/bc
        only_from   = 192.168.16.0/24
        access_times = 21:00-22:00
}
}
~
~
~
~
~
~
~
~
~
~
~
"/etc/xinetd.d/bc" 11L, 200C записано
Starting internet superserver: xinetd.
20:23:26
$nc 192.168.16.7 65533

20:23:39
$sudo invoke-rc.d xinetd start
        protocol    = tcp
        wait        = no
        user        = root
        server      = /usr/bin/bc
#       only_from   = 192.168.16.0/24
        access_times = 21:00-22:00
}
}
~
~
~
~
~
~
~
~
~
~
~
"/etc/xinetd.d/bc" 11L, 201C записано
Starting internet superserver: xinetd.
20:23:42
$sudo invoke-rc.d xinetd re
Stopping internet superserver: xinetd.
Starting internet superserver: xinetd.
20:23:47
$nc 192.168.16.7 65533
[user@debian7:~]$ nc 192.168.16.7 65533
(UNKNOWN) [192.168.16.7] 65533 (bash) : Connection refused
(UNKNOWN) [192.168.16.7] 65533 (bash) : Connection refused
20:23:49
$date
Птн Июл 31 21:23:53 EEST 2009
20:23:53
$sudo less /var/log/debug
20:24:11
$sudo netstat -lnp | less
20:24:21
$sudo invoke-rc.d xinetd resta
Stopping internet superserver: xinetd.
Starting internet superserver: xinetd.
20:24:24
$sudo netstat -lnp | less
20:24:28
$nc 192.168.16.7 65533
2+2
4
20:24:59
$sudo invoke-rc.d xinetd restart
        user        = root
        server      = /usr/bin/bc
#       access_times = 20:00-21:00
}
}
~
~
~
~
~
~
~
~
~
~
~
"/etc/xinetd.d/bc" 11L, 201C записано
Stopping internet superserver: xinetd.
Starting internet superserver: xinetd.
20:25:01
$nc 192.168.16.7 65533
(UNKNOWN) [192.168.16.7] 65533 (bash) : Connection refused
20:25:03
$sudo netstat -lnp | less
20:25:11
$sudo netstat -lnp | less
20:25:13
$nc 192.168.16.7 65533

20:25:15
$nc 192.168.16.7 65533