Журнал лабораторных работ

Содержание

Журнал

Суббота (04/07/07)

/dev/pts/10
15:05:16
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27414 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2342 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1952261 (1.8 MiB)  TX bytes:472278 (461.2 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:122 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:4180 (4.0 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:122 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4180 (4.0 KiB)
15:05:21
#ip link show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
15:05:31
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27624 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2438 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1967819 (1.8 MiB)  TX bytes:518957 (506.7 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:123 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:4212 (4.1 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:123 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4212 (4.1 KiB)
15:05:47
#ifconfig -a | less
15:06:20
#ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27888 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2572 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1989978 (1.8 MiB)  TX bytes:568885 (555.5 KiB)
15:06:24
#tcpdump -i eth1 not dst port 22 and not src port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
15:06:40.702304 arp who-has 10.0.1.21 (Broadcast) tell 10.0.1.21
15:06:40.704611 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  10118+ PTR? 21.1.0.10.in-addr.arpa. (40)
15:06:40.705149 IP 10.0.35.1.domain > xen1.unix.nt.32786:  10118 NXDomain* 0/1/0 (102)
15:06:40.705872 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  26790+ PTR? 1.35.0.10.in-addr.arpa. (40)
15:06:40.707116 IP 10.0.35.1.domain > xen1.unix.nt.32786:  26790 NXDomain* 0/1/0 (102)
15:06:40.707315 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  778+ PTR? 251.15.168.192.in-addr.arpa. (45)
15:06:40.707736 IP 10.0.35.1.domain > xen1.unix.nt.32786:  778* 1/1/1 (107)
15:06:41.184418 arp who-has 10.0.1.5 (Broadcast) tell 10.0.1.5
...
15:06:41.656446 IP 10.0.35.1.domain > xen1.unix.nt.32786:  34120 NXDomain* 0/1/0 (102)
15:06:41.988540 IP 10.0.13.13.4717 > 255.255.255.255.1211: UDP, length 79
15:06:41.988773 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  348+ PTR? 255.255.255.255.in-addr.arpa. (46)
15:06:41.989278 IP 10.0.35.1.domain > xen1.unix.nt.32786:  348 NXDomain* 0/1/0 (96)
15:06:41.989464 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  51208+ PTR? 13.13.0.10.in-addr.arpa. (41)
15:06:41.989841 IP 10.0.35.1.domain > xen1.unix.nt.32786:  51208 NXDomain* 0/1/0 (103)
15:06:42.698276 arp who-has 10.0.1.21 (Broadcast) tell 10.0.1.21
28 packets captured
28 packets received by filter
0 packets dropped by kernel
15:06:42
#man tcpdump
15:10:46
#tcpdump -i eth1 -n not dst port 22 and not src port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
15:11:33.451517 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:33.624736 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:33.644057 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15:11:34.678975 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
15:11:35.175688 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
15:11:35.447021 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:35.625077 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:35.641404 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15:11:35.652879 arp who-has 10.0.1.7 (ff:ff:ff:ff:ff:ff) tell 10.0.1.7
15:11:36.681784 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
15:11:36.935152 IP 10.0.16.1.1221 > 255.255.255.255.1211: UDP, length 75
15:11:37.167733 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
15:11:37.451168 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:37.622064 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:37.641324 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15 packets captured
15 packets received by filter
0 packets dropped by kernel
15:11:38
#ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 00:13:D4:B2:4F:EC
          inet addr:192.168.16.1  Bcast:192.168.16.255  Mask:255.255.255.0
          inet6 addr: fe80::213:d4ff:feb2:4fec/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:29045 errors:0 dropped:0 overruns:0 frame:0
          TX packets:144 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2006611 (1.9 MiB)  TX bytes:4884 (4.7 KiB)
прошло 49 минут
16:00:38
#ls /etc/rc2./
ls: /etc/rc2./: No such file or directory
16:00:41
#ls /etc/rc2.d/
README       S18portmap    S20exim4            S20lpd            S20rsync    S20xend        S21xendomains  S99rc.local
S10sysklogd  S20acpid      S20fglrx-driver     S20makedev        S20ssh      s21gdm         S89atd         S99rmnologin
S11klogd     S20apt-proxy  S20inetutils-inetd  S20openbsd-inetd  S20vbladed  S21nfs-common  S89cron        S99stop-bootlogd
16:00:43
#man vconfig
прошло 109 минут
17:50:23
#vconfig
Expecting argc to be 3-5, inclusive.  Was: 1
Usage: add             [interface-name] [vlan_id]
       rem             [vlan-name]
       set_flag        [interface-name] [flag-num]       [0 | 1]
       set_egress_map  [vlan-name]      [skb_priority]   [vlan_qos]
       set_ingress_map [vlan-name]      [skb_priority]   [vlan_qos]
       set_name_type   [name-type]
* The [interface-name] is the name of the ethernet card that hosts
  the VLAN you are talking about.
* The vlan_id is the identifier (0-4095) of the VLAN you are operating on.
...
              DEV_PLUS_VID (eth0.0005), DEV_PLUS_VID_NO_PAD (eth0.5)
* bind-type:  PER_DEVICE  # Allows vlan 5 on eth0 and eth1 to be unique.
              PER_KERNEL  # Forces vlan 5 to be unique across all devices.
* FLAGS:  1 REORDER_HDR  When this is set, the VLAN device will move the
            ethernet header around to make it look exactly like a real
            ethernet device.  This may help programs such as DHCPd which
            read the raw ethernet packet and make assumptions about the
            location of bytes.  If you don't need it, don't turn it on, because
            there will be at least a small performance degradation.  Default
            is OFF.
17:50:26
#man interfaces
прошло 26 минут
18:17:10
#bcrtl show
bash: bcrtl: command not found
18:17:19
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
18:17:23
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:70225 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3704 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:4927549 (4.6 MiB)  TX bytes:844077 (824.2 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:317 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:10420 (10.1 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:317 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:10420 (10.1 KiB)
18:20:46
#ip link show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
прошло 24 минуты
18:45:24
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
прошло 32 минуты
19:17:53
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
19:18:33
#brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
19:19:09
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
19:19:12
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no               126.11
  4     00:02:44:4c:34:14       no               103.03
  4     00:03:47:32:f9:12       no                 5.22
  4     00:03:47:32:f9:5a       no                 0.12
  4     00:03:47:32:f9:66       no                 1.79
  4     00:03:47:32:f9:fe       no                 1.80
  4     00:03:47:f1:49:58       no                 0.92
  4     00:03:ff:24:f9:fe       no               173.80
  4     00:03:ff:26:f9:fe       no               260.32
...
  4     00:19:aa:10:6a:82       no                48.93
  4     00:19:aa:10:6a:c0       no               287.33
  4     00:19:aa:10:6a:e9       no               109.43
  4     00:19:aa:10:6b:78       no               147.32
  4     00:1a:2f:26:57:8d       no               121.07
  4     00:1a:2f:83:3e:b7       no               107.76
  4     00:20:af:be:10:e4       no               251.13
  4     00:30:48:51:5b:5e       no                88.89
  4     00:60:b0:57:8d:50       no                12.42
  1     fe:ff:ff:ff:ff:ff       yes                0.00
19:19:26
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no                13.96
  4     00:02:44:4c:34:14       no                51.06
  4     00:03:47:32:f9:12       no                 1.13
  4     00:03:47:32:f9:5a       no                 0.02
  4     00:03:47:32:f9:66       no                 1.70
  4     00:03:47:32:f9:fe       no                 1.70
  4     00:03:47:f1:49:58       no                 0.83
  4     00:03:ff:3e:f9:66       no                69.54
  4     00:04:75:99:bf:45       no                 2.14
...
  4     00:19:56:fd:75:0a       no               137.84
  4     00:19:aa:10:6a:82       no               176.83
  4     00:19:aa:10:6a:c0       no                11.80
  4     00:19:aa:10:6a:e9       no               237.33
  4     00:19:aa:10:6b:78       no               275.21
  4     00:1a:2f:26:57:8d       no               248.97
  4     00:1a:2f:83:3e:b7       no               235.66
  4     00:30:48:51:5b:5e       no                96.69
  4     00:60:b0:57:8d:50       no                35.28
  1     fe:ff:ff:ff:ff:ff       yes                0.00
19:21:34
#brctl showmacs xenbr2 | sort
  1     00:16:3e:01:00:c3       no                53.83
  1     fe:ff:ff:ff:ff:ff       yes                0.00
  2     00:16:3e:01:01:c2       no                38.85
  3     00:13:d4:b2:4f:ec       no                56.45
  4     00:02:44:22:a5:b4       no                23.01
  4     00:02:44:4c:34:14       no                60.11
  4     00:03:47:32:f9:12       no                 4.68
  4     00:03:47:32:f9:5a       no                 1.07
  4     00:03:47:32:f9:66       no                 0.75
  4     00:03:47:32:f9:fe       no                 0.76
...
  4     00:19:56:fd:75:0a       no               146.89
  4     00:19:aa:10:6a:82       no               185.88
  4     00:19:aa:10:6a:c0       no                20.85
  4     00:19:aa:10:6a:e9       no               246.38
  4     00:19:aa:10:6b:78       no               284.26
  4     00:1a:2f:26:57:8d       no               258.02
  4     00:1a:2f:83:3e:b7       no               244.71
  4     00:30:48:51:5b:5e       no               105.74
  4     00:60:b0:57:8d:50       no                44.33
port no mac addr                is local?       ageing timer
19:27:15
#ip link show xenbr2
15: xenbr2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
19:27:29
#tcpdump -i -n xenbr2
tcpdump: SIOCGIFHWADDR: No such device
19:27:33
#tcpdump -n -i xenbr2
        0x0010:  0000 0101 0101 0101 0101 0101 0101 0101  ................
        0x0020:  0101 0101 0101 0101 0101 0101 0101       ..............
19:28:16.972264 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:28:17.209617 IP 10.0.24.1.137 > 10.255.255.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
19:28:17.610137 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:28:18.423657 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:28:18.506627 IP 10.0.16.1.1221 > 255.255.255.255.1211: UDP, length 75
19:28:18.749610 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:28:18.753634 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:28:18.971253 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
...
19:28:49.139128 IP 10.0.1.2.137 > 10.255.255.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
19:28:49.608082 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:28:50.428766 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:28:50.749863 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:28:50.750945 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:28:50.969961 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:28:51.608245 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
288 packets captured
288 packets received by filter
0 packets dropped by kernel
19:28:52
#ip
Usage: ip [ OPTIONS ] OBJECT { COMMAND | help }
       ip [ -force ] [-batch filename
where  OBJECT := { link | addr | route | rule | neigh | ntable | tunnel |
                   maddr | mroute | monitor | xfrm | moo }
       OPTIONS := { -V[ersion] | -s[tatistics] | -r[esolve] |
                    -f[amily] { inet | inet6 | ipx | dnet | link } |
                    -o[neline] | -t[imestamp] }
19:28:56
#ip link
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
19:29:08
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
19:29:14
#ifconfig vif2.2 promisc

19:29:26
#ifconfig vif3.1 promisc

19:29:33
#ifconfig vif0.2 promisc

19:29:37
#ifconfig peth0 promisc

19:29:43
#tcpdump -n -i peth0
tcpdump: WARNING: peth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on peth0, link-type EN10MB (Ethernet), capture size 96 bytes
19:31:30.416500 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:31:30.475979 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
19:31:30.741598 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:31:30.744094 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:31:30.963027 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:31:31.301584 802.1d config 8001.00:18:ba:c8:08:00.8018 root 8001.00:18:ba:c8:08:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
19:31:31.476048 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
...
19:31:36.962746 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:31:37.322083 802.1d config 8001.00:18:ba:c8:08:00.8018 root 8001.00:18:ba:c8:08:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
19:31:37.532426 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
19:31:37.592558 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:31:38.311826 arp who-has 10.0.1.7 (ff:ff:ff:ff:ff:ff) tell 10.0.1.7
19:31:38.413516 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:31:38.532479 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
37 packets captured
37 packets received by filter
0 packets dropped by kernel
19:31:38
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:108321 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5901 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:7616229 (7.2 MiB)  TX bytes:1405505 (1.3 MiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:481 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:15668 (15.3 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:481 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:15668 (15.3 KiB)
прошло 93 минуты
21:04:46