Журнал лабораторных работ

Содержание

Журнал

Суббота (04/07/07)

/dev/pts/10
15:05:16
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27414 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2342 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1952261 (1.8 MiB)  TX bytes:472278 (461.2 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:122 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:4180 (4.0 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:122 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4180 (4.0 KiB)
15:05:21
#ip link show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
15:05:31
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27624 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2438 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1967819 (1.8 MiB)  TX bytes:518957 (506.7 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:123 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:4212 (4.1 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:123 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4212 (4.1 KiB)
15:05:47
#ifconfig -a | less
15:06:20
#ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27888 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2572 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1989978 (1.8 MiB)  TX bytes:568885 (555.5 KiB)
15:06:24
#tcpdump -i eth1 not dst port 22 and not src port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
15:06:40.702304 arp who-has 10.0.1.21 (Broadcast) tell 10.0.1.21
15:06:40.704611 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  10118+ PTR? 21.1.0.10.in-addr.arpa. (40)
15:06:40.705149 IP 10.0.35.1.domain > xen1.unix.nt.32786:  10118 NXDomain* 0/1/0 (102)
15:06:40.705872 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  26790+ PTR? 1.35.0.10.in-addr.arpa. (40)
15:06:40.707116 IP 10.0.35.1.domain > xen1.unix.nt.32786:  26790 NXDomain* 0/1/0 (102)
15:06:40.707315 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  778+ PTR? 251.15.168.192.in-addr.arpa. (45)
15:06:40.707736 IP 10.0.35.1.domain > xen1.unix.nt.32786:  778* 1/1/1 (107)
15:06:41.184418 arp who-has 10.0.1.5 (Broadcast) tell 10.0.1.5
...
15:06:41.656446 IP 10.0.35.1.domain > xen1.unix.nt.32786:  34120 NXDomain* 0/1/0 (102)
15:06:41.988540 IP 10.0.13.13.4717 > 255.255.255.255.1211: UDP, length 79
15:06:41.988773 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  348+ PTR? 255.255.255.255.in-addr.arpa. (46)
15:06:41.989278 IP 10.0.35.1.domain > xen1.unix.nt.32786:  348 NXDomain* 0/1/0 (96)
15:06:41.989464 IP xen1.unix.nt.32786 > 10.0.35.1.domain:  51208+ PTR? 13.13.0.10.in-addr.arpa. (41)
15:06:41.989841 IP 10.0.35.1.domain > xen1.unix.nt.32786:  51208 NXDomain* 0/1/0 (103)
15:06:42.698276 arp who-has 10.0.1.21 (Broadcast) tell 10.0.1.21
28 packets captured
28 packets received by filter
0 packets dropped by kernel
15:06:42
#man tcpdump
15:10:46
#tcpdump -i eth1 -n not dst port 22 and not src port 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
15:11:33.451517 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:33.624736 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:33.644057 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15:11:34.678975 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
15:11:35.175688 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
15:11:35.447021 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:35.625077 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:35.641404 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15:11:35.652879 arp who-has 10.0.1.7 (ff:ff:ff:ff:ff:ff) tell 10.0.1.7
15:11:36.681784 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
15:11:36.935152 IP 10.0.16.1.1221 > 255.255.255.255.1211: UDP, length 75
15:11:37.167733 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
15:11:37.451168 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
15:11:37.622064 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
15:11:37.641324 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
15 packets captured
15 packets received by filter
0 packets dropped by kernel
15:11:38
#ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 00:13:D4:B2:4F:EC
          inet addr:192.168.16.1  Bcast:192.168.16.255  Mask:255.255.255.0
          inet6 addr: fe80::213:d4ff:feb2:4fec/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:29045 errors:0 dropped:0 overruns:0 frame:0
          TX packets:144 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2006611 (1.9 MiB)  TX bytes:4884 (4.7 KiB)
прошло 49 минут
16:00:38
#ls /etc/rc2./
ls: /etc/rc2./: No such file or directory
16:00:41
#ls /etc/rc2.d/
README       S18portmap    S20exim4            S20lpd            S20rsync    S20xend        S21xendomains  S99rc.local
S10sysklogd  S20acpid      S20fglrx-driver     S20makedev        S20ssh      s21gdm         S89atd         S99rmnologin
S11klogd     S20apt-proxy  S20inetutils-inetd  S20openbsd-inetd  S20vbladed  S21nfs-common  S89cron        S99stop-bootlogd
16:00:43
#man vconfig
прошло 109 минут
17:50:23
#vconfig
Expecting argc to be 3-5, inclusive.  Was: 1
Usage: add             [interface-name] [vlan_id]
       rem             [vlan-name]
       set_flag        [interface-name] [flag-num]       [0 | 1]
       set_egress_map  [vlan-name]      [skb_priority]   [vlan_qos]
       set_ingress_map [vlan-name]      [skb_priority]   [vlan_qos]
       set_name_type   [name-type]
* The [interface-name] is the name of the ethernet card that hosts
  the VLAN you are talking about.
* The vlan_id is the identifier (0-4095) of the VLAN you are operating on.
...
              DEV_PLUS_VID (eth0.0005), DEV_PLUS_VID_NO_PAD (eth0.5)
* bind-type:  PER_DEVICE  # Allows vlan 5 on eth0 and eth1 to be unique.
              PER_KERNEL  # Forces vlan 5 to be unique across all devices.
* FLAGS:  1 REORDER_HDR  When this is set, the VLAN device will move the
            ethernet header around to make it look exactly like a real
            ethernet device.  This may help programs such as DHCPd which
            read the raw ethernet packet and make assumptions about the
            location of bytes.  If you don't need it, don't turn it on, because
            there will be at least a small performance degradation.  Default
            is OFF.
17:50:26
#man interfaces
прошло 26 минут
18:17:10
#bcrtl show
bash: bcrtl: command not found
18:17:19
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
18:17:23
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:70225 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3704 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:4927549 (4.6 MiB)  TX bytes:844077 (824.2 KiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:317 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:10420 (10.1 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:317 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:10420 (10.1 KiB)
18:20:46
#ip link show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
прошло 24 минуты
18:45:24
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
прошло 32 минуты
19:17:53
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
19:18:33
#brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
19:19:09
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
19:19:12
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no               126.11
  4     00:02:44:4c:34:14       no               103.03
  4     00:03:47:32:f9:12       no                 5.22
  4     00:03:47:32:f9:5a       no                 0.12
  4     00:03:47:32:f9:66       no                 1.79
  4     00:03:47:32:f9:fe       no                 1.80
  4     00:03:47:f1:49:58       no                 0.92
  4     00:03:ff:24:f9:fe       no               173.80
  4     00:03:ff:26:f9:fe       no               260.32
...
  4     00:19:aa:10:6a:82       no                48.93
  4     00:19:aa:10:6a:c0       no               287.33
  4     00:19:aa:10:6a:e9       no               109.43
  4     00:19:aa:10:6b:78       no               147.32
  4     00:1a:2f:26:57:8d       no               121.07
  4     00:1a:2f:83:3e:b7       no               107.76
  4     00:20:af:be:10:e4       no               251.13
  4     00:30:48:51:5b:5e       no                88.89
  4     00:60:b0:57:8d:50       no                12.42
  1     fe:ff:ff:ff:ff:ff       yes                0.00
19:19:26
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no                13.96
  4     00:02:44:4c:34:14       no                51.06
  4     00:03:47:32:f9:12       no                 1.13
  4     00:03:47:32:f9:5a       no                 0.02
  4     00:03:47:32:f9:66       no                 1.70
  4     00:03:47:32:f9:fe       no                 1.70
  4     00:03:47:f1:49:58       no                 0.83
  4     00:03:ff:3e:f9:66       no                69.54
  4     00:04:75:99:bf:45       no                 2.14
...
  4     00:19:56:fd:75:0a       no               137.84
  4     00:19:aa:10:6a:82       no               176.83
  4     00:19:aa:10:6a:c0       no                11.80
  4     00:19:aa:10:6a:e9       no               237.33
  4     00:19:aa:10:6b:78       no               275.21
  4     00:1a:2f:26:57:8d       no               248.97
  4     00:1a:2f:83:3e:b7       no               235.66
  4     00:30:48:51:5b:5e       no                96.69
  4     00:60:b0:57:8d:50       no                35.28
  1     fe:ff:ff:ff:ff:ff       yes                0.00
19:21:34
#brctl showmacs xenbr2 | sort
  1     00:16:3e:01:00:c3       no                53.83
  1     fe:ff:ff:ff:ff:ff       yes                0.00
  2     00:16:3e:01:01:c2       no                38.85
  3     00:13:d4:b2:4f:ec       no                56.45
  4     00:02:44:22:a5:b4       no                23.01
  4     00:02:44:4c:34:14       no                60.11
  4     00:03:47:32:f9:12       no                 4.68
  4     00:03:47:32:f9:5a       no                 1.07
  4     00:03:47:32:f9:66       no                 0.75
  4     00:03:47:32:f9:fe       no                 0.76
...
  4     00:19:56:fd:75:0a       no               146.89
  4     00:19:aa:10:6a:82       no               185.88
  4     00:19:aa:10:6a:c0       no                20.85
  4     00:19:aa:10:6a:e9       no               246.38
  4     00:19:aa:10:6b:78       no               284.26
  4     00:1a:2f:26:57:8d       no               258.02
  4     00:1a:2f:83:3e:b7       no               244.71
  4     00:30:48:51:5b:5e       no               105.74
  4     00:60:b0:57:8d:50       no                44.33
port no mac addr                is local?       ageing timer
19:27:15
#ip link show xenbr2
15: xenbr2: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
19:27:29
#tcpdump -i -n xenbr2
tcpdump: SIOCGIFHWADDR: No such device
19:27:33
#tcpdump -n -i xenbr2
        0x0010:  0000 0101 0101 0101 0101 0101 0101 0101  ................
        0x0020:  0101 0101 0101 0101 0101 0101 0101       ..............
19:28:16.972264 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:28:17.209617 IP 10.0.24.1.137 > 10.255.255.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
19:28:17.610137 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:28:18.423657 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:28:18.506627 IP 10.0.16.1.1221 > 255.255.255.255.1211: UDP, length 75
19:28:18.749610 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:28:18.753634 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:28:18.971253 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
...
19:28:49.139128 IP 10.0.1.2.137 > 10.255.255.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
19:28:49.608082 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:28:50.428766 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:28:50.749863 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:28:50.750945 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:28:50.969961 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:28:51.608245 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
288 packets captured
288 packets received by filter
0 packets dropped by kernel
19:28:52
#ip
Usage: ip [ OPTIONS ] OBJECT { COMMAND | help }
       ip [ -force ] [-batch filename
where  OBJECT := { link | addr | route | rule | neigh | ntable | tunnel |
                   maddr | mroute | monitor | xfrm | moo }
       OPTIONS := { -V[ersion] | -s[tatistics] | -r[esolve] |
                    -f[amily] { inet | inet6 | ipx | dnet | link } |
                    -o[neline] | -t[imestamp] }
19:28:56
#ip link
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: peth0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
3: peth1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
5: vif0.0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
...
21: vif2.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
22: vif2.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
23: vif3.0: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
24: vif3.1: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
25: vif3.2: <BROADCAST,NOARP,UP,10000> mtu 1500 qdisc noqueue
    link/ether fe:ff:ff:ff:ff:ff brd ff:ff:ff:ff:ff:ff
19:29:08
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
19:29:14
#ifconfig vif2.2 promisc

19:29:26
#ifconfig vif3.1 promisc

19:29:33
#ifconfig vif0.2 promisc

19:29:37
#ifconfig peth0 promisc

19:29:43
#tcpdump -n -i peth0
tcpdump: WARNING: peth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on peth0, link-type EN10MB (Ethernet), capture size 96 bytes
19:31:30.416500 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:31:30.475979 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
19:31:30.741598 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
19:31:30.744094 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
19:31:30.963027 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:31:31.301584 802.1d config 8001.00:18:ba:c8:08:00.8018 root 8001.00:18:ba:c8:08:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
19:31:31.476048 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
...
19:31:36.962746 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
19:31:37.322083 802.1d config 8001.00:18:ba:c8:08:00.8018 root 8001.00:18:ba:c8:08:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
19:31:37.532426 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
19:31:37.592558 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
19:31:38.311826 arp who-has 10.0.1.7 (ff:ff:ff:ff:ff:ff) tell 10.0.1.7
19:31:38.413516 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
19:31:38.532479 vlan 3, p 0, arp who-has 192.168.3.3 tell 192.168.3.4
37 packets captured
37 packets received by filter
0 packets dropped by kernel
19:31:38
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:108321 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5901 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:7616229 (7.2 MiB)  TX bytes:1405505 (1.3 MiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:481 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:15668 (15.3 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:481 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:15668 (15.3 KiB)
прошло 93 минуты
21:04:46
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
21:04:50
#xm list
Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      957     1 r-----    273.2
ltsp0                                      1      256     1 -b----      9.7
xenomips0                                  2      400     1 -b----      9.1
xenomips1                                  3      400     1 -b----      9.4
21:06:52
#xm list
Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      957     1 r-----    286.7
ltsp0                                      1      256     1 -b----      9.8
xenomips0                                  2      400     1 -b----      9.1
xenomips1                                  3      400     1 -b----      9.5
21:07:35
#tcpdump -n -i xenbr2
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
21:07:46.418248 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
21:07:46.482775 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
21:07:46.488789 arp who-has 192.168.2.3 tell 192.168.2.2
21:07:46.640804 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:07:46.732057 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
21:07:47.201463 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
21:07:47.492117 arp who-has 10.0.1.7 (ff:ff:ff:ff:ff:ff) tell 10.0.1.7
...
21:08:01.686909 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:08:02.125824 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
21:08:02.417464 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
21:08:02.483015 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
21:08:02.687079 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:08:02.732759 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
21:08:03.197044 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
78 packets captured
78 packets received by filter
0 packets dropped by kernel
21:08:03
#tcpdump -n -i xenbr2
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
21:09:28.125049 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
21:09:28.409657 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
21:09:28.476656 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
21:09:28.727702 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
21:09:29.185833 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
21:09:29.887238 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:09:30.119790 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
21:09:30.148346 arp who-has 10.0.61.199 tell 10.0.13.1
8 packets captured
8 packets received by filter
0 packets dropped by kernel
21:09:30
#tcpdump -n -i xenbr2 host 192.168.4.3
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
0 packets captured
0 packets received by filter
0 packets dropped by kernel
21:09:52
#tcpdump -n -i xenbr2 host 192.168.4.4
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
0 packets captured
0 packets received by filter
0 packets dropped by kernel
21:10:17
#tcpdump -n -i xenbr2 host 192.168.4.4
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
0 packets captured
0 packets received by filter
0 packets dropped by kernel
21:11:20
#brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
21:11:26
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
21:11:34
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no                17.26
  4     00:02:44:24:c6:2a       no                22.39
  4     00:02:44:4c:34:14       no               245.48
  4     00:03:47:32:f9:12       no                 4.39
  4     00:03:47:32:f9:5a       no                 1.26
  4     00:03:47:32:f9:66       no                 0.97
  4     00:03:47:32:f9:fe       no                 0.90
  4     00:03:47:f1:49:58       no                 0.19
  4     00:03:ff:24:f9:fe       no                 7.94
...
  4     00:19:56:fd:75:0a       no               218.05
  4     00:19:aa:10:6a:2d       no                89.32
  4     00:19:aa:10:6a:82       no               285.24
  4     00:19:aa:10:6a:c0       no               114.23
  4     00:19:aa:10:6a:e9       no               286.06
  4     00:20:af:be:10:e4       no               239.20
  4     00:30:48:51:5b:5e       no                81.79
  4     00:50:04:af:07:3d       no                48.49
  4     00:60:b0:57:8d:50       no                35.83
  1     fe:ff:ff:ff:ff:ff       yes                0.00
21:11:37
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     fe:ff:ff:ff:ff:ff       yes                0.00
  2     00:16:3e:01:01:c2       no                78.04
  3     00:13:d4:b2:4f:ec       no                58.12
  4     00:02:44:22:a5:b4       no                25.56
  4     00:02:44:24:c6:2a       no                30.69
  4     00:02:44:4c:34:14       no               253.78
  4     00:03:47:32:f9:12       no                 1.69
  4     00:03:47:32:f9:5a       no                 1.56
  4     00:03:47:32:f9:66       no                 1.28
...
  4     00:19:56:fd:74:89       no               221.54
  4     00:19:56:fd:75:0a       no               226.35
  4     00:19:aa:10:6a:2d       no                97.63
  4     00:19:aa:10:6a:82       no               293.54
  4     00:19:aa:10:6a:c0       no               122.53
  4     00:19:aa:10:6a:e9       no               294.36
  4     00:20:af:be:10:e4       no               247.50
  4     00:30:48:51:5b:5e       no                90.09
  4     00:50:04:af:07:3d       no                56.79
  4     00:60:b0:57:8d:50       no                44.13
21:11:45
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:110870 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6806 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:7804667 (7.4 MiB)  TX bytes:1671325 (1.5 MiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:489 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:15924 (15.5 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:489 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:15924 (15.5 KiB)
21:12:01
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     fe:ff:ff:ff:ff:ff       yes                0.00
  2     00:16:3e:01:01:c2       no                95.84
  3     00:13:d4:b2:4f:ec       no                15.92
  4     00:02:44:22:a5:b4       no                43.36
  4     00:02:44:24:c6:2a       no                13.03
  4     00:02:44:4c:34:14       no               271.58
  4     00:03:47:32:f9:12       no                 2.99
  4     00:03:47:32:f9:5a       no                 1.36
  4     00:03:47:32:f9:66       no                 1.07
...
  4     00:18:ba:c8:08:18       no                 1.08
  4     00:19:56:fd:74:89       no               239.34
  4     00:19:56:fd:75:0a       no               244.15
  4     00:19:aa:10:6a:2d       no               115.42
  4     00:19:aa:10:6a:c0       no               140.33
  4     00:1a:2f:26:57:8d       no                12.50
  4     00:20:af:be:10:e4       no               265.30
  4     00:30:48:51:5b:5e       no               107.89
  4     00:50:04:af:07:3d       no                74.58
  4     00:60:b0:57:8d:50       no                16.90
21:12:03
#tcpdump -i eth2
tcpdump: SIOCGIFHWADDR: No such device
21:12:44
#ifconfig
eth1      Link encap:Ethernet  HWaddr 00:04:76:A1:F0:5D
          inet addr:192.168.15.251  Bcast:192.168.15.255  Mask:255.255.255.0
          inet6 addr: fe80::204:76ff:fea1:f05d/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:111203 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6948 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:7829353 (7.4 MiB)  TX bytes:1729484 (1.6 MiB)
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
...
          TX packets:490 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:384 (384.0 b)  TX bytes:15956 (15.5 KiB)
xenbr4    Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:490 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:15956 (15.5 KiB)
21:12:48
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
21:12:53
#tcpdump -i -n peth0
tcpdump: SIOCGIFHWADDR: No such device
21:13:03
#tcpdump -n -i peth0
tcpdump: WARNING: peth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on peth0, link-type EN10MB (Ethernet), capture size 96 bytes
21:13:08.108665 arp who-has 10.0.1.5 (ff:ff:ff:ff:ff:ff) tell 10.0.1.5
21:13:08.353733 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:08.393884 arp who-has 10.0.13.1 (ff:ff:ff:ff:ff:ff) tell 10.0.13.1
21:13:08.469129 arp who-has 10.0.1.9 (ff:ff:ff:ff:ff:ff) tell 10.0.1.9
21:13:08.567052 802.1d config 8001.00:18:ba:c8:08:00.8018 root 8001.00:18:ba:c8:08:00 pathcost 0 age 0 max 20 hello 2 fdelay 15
21:13:08.718487 arp who-has 10.0.13.2 (ff:ff:ff:ff:ff:ff) tell 10.0.13.2
21:13:09.179925 arp who-has 10.0.1.21 (ff:ff:ff:ff:ff:ff) tell 10.0.1.21
...
        0x0010:  0000 0000 0000 ffff ffff ffff ffff ffff  ................
        0x0020:  ffff ffff ffff ffff ffff ffff ffff ffff  ................
        0x0030:  ffff                                     ..
21:13:17.663053 00:0a:01:d4:d1:4d > ff:ff:ff:ff:ff:ff, ethertype Unknown (0x88a2), length 60:
        0x0000:  1000 ffff ff01 0000 0000 0000 0000 0000  ................
        0x0010:  0000 d6d6 d6d6 d6d6 d6d6 d6d6 d6d6 d6d6  ................
        0x0020:  d6d6 d6d6 d6d6 d6d6 d6d6 d6d6 d6d6       ..............
52 packets captured
52 packets received by filter
0 packets dropped by kernel
21:13:17
#tcpdump -n -i peth0 vlan 4
tcpdump: WARNING: peth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on peth0, link-type EN10MB (Ethernet), capture size 96 bytes
21:13:20.379473 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:21.387547 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:22.387697 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:23.387838 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:24.395964 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:25.396124 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:26.396241 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
...
21:13:29.404680 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:30.412815 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:31.412956 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:32.413089 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:33.421231 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:34.421377 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:35.421521 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
16 packets captured
16 packets received by filter
0 packets dropped by kernel
21:13:36
#tcpdump -n -i xenbr2 vlan 4
tcpdump: WARNING: xenbr2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xenbr2, link-type EN10MB (Ethernet), capture size 96 bytes
21:13:41.438426 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:42.450497 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:43.450648 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:44.450781 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:45.458916 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:46.459057 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
6 packets captured
6 packets received by filter
0 packets dropped by kernel
21:13:47
#tcpdump -n -i eth0 vlan 4
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
21:13:52.479957 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:53.480031 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:55.480314 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:56.480464 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:57.480594 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:13:59.480876 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:00.481013 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:01.481159 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
...
21:14:07.494008 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:08.494142 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:09.506284 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:10.506426 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:11.506567 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:12.514695 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:13.514853 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
19 packets captured
19 packets received by filter
0 packets dropped by kernel
21:14:13
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif2.0
                                                        vif3.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif2.1
xenbr2          8000.feffffffffff       no              vif2.2
                                                        vif3.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif3.2
xenbr4          8000.000000000000       no
21:14:20
#tcpdump -n -i vif0.2 vlan 4
tcpdump: WARNING: vif0.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif0.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:14:38.582394 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:39.590497 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:40.590631 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:41.590765 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
4 packets captured
4 packets received by filter
0 packets dropped by kernel
21:14:41
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:14:49.619871 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:50.620044 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:14:51.628189 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
3 packets captured
3 packets received by filter
0 packets dropped by kernel
21:14:52
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:16:17.688263 vlan 4, p 0, 00:0a:01:d4:d1:39 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64:
        0x0000:  0004 88a2 1000 ffff ff01 0000 0000 0000  ................
        0x0010:  0000 0000 0000 ffff ffff ffff ffff ffff  ................
        0x0020:  ffff ffff ffff ffff ffff ffff ffff ffff  ................
        0x0030:  ffff                                     ..
21:16:17.816217 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:16:18.824362 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:16:19.824516 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:16:20.824650 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:16:21.832780 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:16:22.832924 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
7 packets captured
7 packets received by filter
0 packets dropped by kernel
21:16:22
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:17:10.895707 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:11.895780 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:12.895932 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:14.896205 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:15.896344 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:16.896495 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:17.696601 vlan 4, p 0, 00:0a:01:d4:d1:39 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 64:
...
21:17:26.909895 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:27.926021 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:28.926069 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:29.926285 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:31.926598 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:32.926727 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:33.926873 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
22 packets captured
22 packets received by filter
0 packets dropped by kernel
21:17:34
#xm list
Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      957     1 r-----    341.8
ltsp0                                      1      256     1 ------      9.8
xenomips0                                  2      400     1 -b----      9.2
xenomips1                                  3      400     1 -b----      9.6
21:17:36
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:17:45.960589 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:17:47.960827 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
2 packets captured
2 packets received by filter
0 packets dropped by kernel
21:17:48
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:18:09.999914 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:11.004068 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:12.004205 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:13.004347 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:14.012405 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:15.012611 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:16.012751 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
...
        0x0020:  ffff ffff ffff ffff ffff ffff ffff ffff  ................
        0x0030:  ffff                                     ..
21:18:18.021027 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:19.021112 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:20.029293 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:21.029451 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:22.029596 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
14 packets captured
14 packets received by filter
0 packets dropped by kernel
21:18:22
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:18:25.038054 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:26.046153 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
2 packets captured
2 packets received by filter
0 packets dropped by kernel
21:18:26
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:18:34.071228 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:36.071545 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:37.071688 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:38.071828 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
4 packets captured
4 packets received by filter
0 packets dropped by kernel
21:18:39
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:18:44.076706 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:45.076837 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:18:46.076950 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
3 packets captured
3 packets received by filter
0 packets dropped by kernel
21:18:46
#tcpdump -n -i vif2.2 vlan 4
tcpdump: WARNING: vif2.2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vif2.2, link-type EN10MB (Ethernet), capture size 96 bytes
21:19:05.147650 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:19:06.147735 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
21:19:07.147870 vlan 4, p 0, arp who-has 192.168.4.4 tell 192.168.4.254
3 packets captured
3 packets received by filter
0 packets dropped by kernel
21:19:07
#xm list
Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      957     1 r-----    349.1
ltsp0                                      1      256     1 -b----      9.8
xenomips0                                  2      400     1 -b----      9.2
xenomips1                                  3      400     1 -b----      9.6
21:19:17
#xm
Usage: xm <subcommand> [args]
Control, list, and manipulate Xen guest instances.
Common 'xm' commands:
 console              Attach to <Domain>'s console.
 create               Create a domain based on <ConfigFile>.
 destroy              Terminate a domain immediately.
 dump-core            Dump core for a specific domain.
 help                 Display this message.
 list                 List information about all/some domains.
 mem-set              Set the current memory usage for a domain.
...
 shutdown             Shutdown a domain.
 top                  Monitor a host and the domains in real time.
 unpause              Unpause a paused domain.
 uptime               Print uptime for a domain.
 vcpu-set             Set the number of active VCPUs for allowed for
                      the domain.
<Domain> can either be the Domain Name or Id.
For more help on 'xm' see the xm(1) man page.
For more help on 'xm create' see the xmdomain.cfg(5)  man page.
For a complete list of subcommands run 'xm help'.
21:19:19
#xm help
Usage: xm <subcommand> [args]
Control, list, and manipulate Xen guest instances.
xm full list of subcommands:
 console              Attach to <Domain>'s console.
 create               Create a domain based on <ConfigFile>.
 destroy              Terminate a domain immediately.
 domid                Convert a domain name to domain id.
 domname              Convert a domain id to domain name.
 dump-core            Dump core for a specific domain.
 list                 List information about all/some domains.
...
 getlabel             Show security label for domain or resource.
 dry-run              Test if a domain can access its resources.
 resources            Show info for each labeled resource.
 makepolicy           Build policy and create .bin/.map files.
 loadpolicy           Load binary policy into hypervisor.
 cfgbootpolicy        Add policy to boot configuration.
 dumppolicy           Print hypervisor ACM state information.
<Domain> can either be the Domain Name or Id.
For more help on 'xm' see the xm(1) man page.
For more help on 'xm create' see the xmdomain.cfg(5)  man page.
21:19:30
#xm network-list
No domain parameter given
Usage: xm network-list <Domain> [--long]
List virtual network interfaces for a domain.
  -l, --long                     List resources as SXP
21:19:39
#xm network-list xenomips0
Idx BE     MAC Addr.     handle state evt-ch tx-/rx-ring-ref BE-path
0   0  00:16:3e:01:0:c1     0     4      9     1547 /1548    /local/domain/0/backend/vif/2/0
1   0  00:16:3e:01:0:c2     1     4      10    1549 /1550    /local/domain/0/backend/vif/2/1
2   0  00:16:3e:01:0:c3     2     4      11    1551 /1552    /local/domain/0/backend/vif/2/2
21:19:43
#xm network-list xenomips1
Idx BE     MAC Addr.     handle state evt-ch tx-/rx-ring-ref BE-path
0   0  00:16:3e:01:1:c1     0     4      9     1547 /1548    /local/domain/0/backend/vif/3/0
1   0  00:16:3e:01:1:c2     1     4      10    1549 /1550    /local/domain/0/backend/vif/3/1
2   0  00:16:3e:01:1:c3     2     4      11    1551 /1552    /local/domain/0/backend/vif/3/2
21:20:25
#xm network-list 0

21:20:32
#xm network-list
No domain parameter given
Usage: xm network-list <Domain> [--long]
List virtual network interfaces for a domain.
  -l, --long                     List resources as SXP
21:20:33
#xm list
Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      957     1 r-----    355.7
ltsp0                                      1      256     1 -b----      9.9
xenomips0                                  2      400     1 -b----      9.2
xenomips1                                  3      400     1 -b----      9.6
21:20:37
#xm network-list Domain-0

21:20:42
#brctl show
bridge name     bridge id               STP enabled     interfaces
service0                8000.feffffffffff       no              vif4.0
                                                        vif5.0
xenbr0          8000.feffffffffff       no              vif0.1
                                                        peth1
                                                        vif1.0
xenbr1          8000.feffffffffff       no              vif4.1
xenbr2          8000.feffffffffff       no              vif4.2
                                                        vif5.1
                                                        vif0.2
                                                        peth0
xenbr3          8000.feffffffffff       no              vif5.2
xenbr4          8000.000000000000       no

Воскресенье (04/08/07)

09:55:42
#brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
09:56:22
#brctl showmacs
Incorrect number of arguments for command
Usage: brctl showmacs <bridge>          show a list of mac addrs
09:56:34
#brctl showmacs xenbr2
port no mac addr                is local?       ageing timer
  4     00:02:44:22:a5:b4       no                 0.33
  4     00:02:44:24:c6:2a       no                73.06
  4     00:03:47:32:f9:12       no                 4.42
  4     00:03:47:32:f9:5a       no                 0.06
  4     00:03:47:32:f9:66       no                 0.13
  4     00:03:47:32:f9:fe       no                 1.49
  4     00:03:47:f1:49:58       no                 1.90
  4     00:03:ff:24:f9:fe       no                37.29
  4     00:03:ff:3e:f9:66       no                30.95
...
  4     00:19:aa:10:6a:82       no               173.48
  4     00:19:aa:10:6a:c0       no                 7.30
  4     00:19:aa:10:6a:e9       no               245.43
  4     00:19:aa:10:6b:78       no               247.74
  4     00:1a:2f:26:57:8d       no               172.69
  4     00:1a:2f:83:3e:b7       no                62.77
  4     00:20:af:be:10:e4       no               112.17
  4     00:50:04:af:07:3d       no                50.83
  4     00:60:b0:57:8d:50       no                 4.84
  4     fe:ff:ff:ff:ff:ff       yes                0.00
09:56:37
#brctl showmacs xenbr2 | sort -
  1     00:16:3e:01:00:c3       no                29.43
  2     00:16:3e:01:01:c2       no                31.23
  3     00:13:d4:b2:4f:ec       no                54.49
  4     00:02:44:22:a5:b4       no                 7.43
  4     00:02:44:24:c6:2a       no                80.16
  4     00:03:47:32:f9:12       no                 0.53
  4     00:03:47:32:f9:5a       no                 1.16
  4     00:03:47:32:f9:66       no                 1.22
  4     00:03:47:32:f9:fe       no                 0.59
  4     00:03:47:f1:49:58       no                 1.00
...
  4     00:19:aa:10:6a:c0       no                14.40
  4     00:19:aa:10:6a:e9       no               252.53
  4     00:19:aa:10:6b:78       no               254.84
  4     00:1a:2f:26:57:8d       no               179.79
  4     00:1a:2f:83:3e:b7       no                69.87
  4     00:20:af:be:10:e4       no               119.27
  4     00:50:04:af:07:3d       no                 1.54
  4     00:60:b0:57:8d:50       no                11.94
  4     fe:ff:ff:ff:ff:ff       yes                0.00
port no mac addr                is local?       ageing timer
09:56:45
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no                30.29
  2     00:16:3e:01:01:c2       no                32.09
  3     00:13:d4:b2:4f:ec       no                55.35
  4     00:02:44:22:a5:b4       no                 8.29
  4     00:02:44:24:c6:2a       no                81.02
  4     00:03:47:32:f9:12       no                 1.39
  4     00:03:47:32:f9:5a       no                 0.02
  4     00:03:47:32:f9:66       no                 0.09
  4     00:03:47:32:f9:fe       no                 1.45
...
  4     00:19:aa:10:6a:82       no               181.44
  4     00:19:aa:10:6a:c0       no                15.26
  4     00:19:aa:10:6a:e9       no               253.39
  4     00:19:aa:10:6b:78       no               255.70
  4     00:1a:2f:26:57:8d       no               180.65
  4     00:1a:2f:83:3e:b7       no                70.73
  4     00:20:af:be:10:e4       no               120.13
  4     00:50:04:af:07:3d       no                 2.40
  4     00:60:b0:57:8d:50       no                12.80
  4     fe:ff:ff:ff:ff:ff       yes                0.00
09:56:45
#brctl showmacs xenbr2 | sort -n | grep 00:16:3e:01:00:c3
  1     00:16:3e:01:00:c3       no                45.49
09:57:01
#brctl showmacs xenbr2 | sort -n | awk '{print $2}'
no
00:16:3e:01:00:c3
00:16:3e:01:01:c2
00:13:d4:b2:4f:ec
00:02:44:22:a5:b4
00:02:44:24:c6:2a
00:03:47:32:f9:12
00:03:47:32:f9:5a
00:03:47:32:f9:66
00:03:47:32:f9:fe
...
00:19:aa:10:6a:c0
00:19:aa:10:6a:e9
00:19:aa:10:6b:78
00:1a:2f:26:57:8d
00:1a:2f:83:3e:b7
00:20:af:be:10:e4
00:30:48:51:5b:5e
00:50:04:af:07:3d
00:60:b0:57:8d:50
fe:ff:ff:ff:ff:ff
09:57:19
#brctl showmacs xenbr2 | sort -n | awk '{print $2}' | sort -u
00:02:44:22:a5:b4
00:02:44:24:c6:2a
00:03:47:32:f9:12
00:03:47:32:f9:5a
00:03:47:32:f9:66
00:03:47:32:f9:fe
00:03:47:f1:49:58
00:03:ff:24:f9:fe
00:03:ff:3e:f9:66
00:04:75:99:bf:45
...
00:19:aa:10:6a:e9
00:19:aa:10:6b:78
00:1a:2f:26:57:8d
00:1a:2f:83:3e:b7
00:20:af:be:10:e4
00:30:48:51:5b:5e
00:50:04:af:07:3d
00:60:b0:57:8d:50
fe:ff:ff:ff:ff:ff
no
09:57:22
#brctl showmacs xenbr2 | sort -n | awk '{print $2}' | sort -u | wc -l
51
09:57:25
#brctl showmacs xenbr2 | sort -n | awk '{print $2}' | sort | wc -l
51
09:57:27
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no                76.78
  2     00:16:3e:01:01:c2       no                78.58
  3     00:13:d4:b2:4f:ec       no                41.85
  4     00:02:44:22:a5:b4       no                15.18
  4     00:02:44:24:c6:2a       no                38.67
  4     00:03:47:32:f9:12       no                 3.89
  4     00:03:47:32:f9:5a       no                 0.51
  4     00:03:47:32:f9:66       no                 0.58
  4     00:03:47:32:f9:fe       no                 1.95
...
  4     00:19:aa:10:6a:82       no               227.93
  4     00:19:aa:10:6a:c0       no                61.75
  4     00:19:aa:10:6a:e9       no               299.89
  4     00:1a:2f:26:57:8d       no               227.14
  4     00:1a:2f:83:3e:b7       no               117.23
  4     00:20:af:be:10:e4       no               166.62
  4     00:30:48:51:5b:5e       no                22.80
  4     00:50:04:af:07:3d       no                48.90
  4     00:60:b0:57:8d:50       no                14.27
  4     fe:ff:ff:ff:ff:ff       yes                0.00
09:57:32
#brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off
09:58:00
#brctl showstp xenbr2
xenbr2
 bridge id              8000.feffffffffff
 designated root        8000.feffffffffff
 root port                 0                    path cost                  0
 max age                  20.00                 bridge max age            20.00
 hello time                2.00                 bridge hello time          2.00
 forward delay            15.00                 bridge forward delay      15.00
 ageing time             300.01
 hello timer               0.19                 tcn timer                  0.00
 topology change timer     0.00                 gc timer                   0.10
...
 designated port        8003                    forward delay timer        0.00
 designated cost           0                    hold timer                 0.00
 flags
peth0 (0)
 port id                0000                    state                forwarding
 designated root        8000.feffffffffff       path cost                  4
 designated bridge      8000.feffffffffff       message age timer          0.00
 designated port        8004                    forward delay timer        0.00
 designated cost           0                    hold timer                 0.00
 flags
09:58:31
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               270.39
  2     00:16:3e:01:01:c2       no               270.39
  3     00:13:d4:b2:4f:ec       no                41.04
  4     00:02:44:22:a5:b4       no                74.46
  4     00:02:44:24:c6:2a       no                48.01
  4     00:02:44:4c:34:14       no                 5.12
  4     00:03:47:32:f9:12       no                 0.61
  4     00:03:47:32:f9:5a       no                 1.74
  4     00:03:47:32:f9:66       no                 1.82
...
  4     00:19:aa:10:6a:82       no               124.70
  4     00:19:aa:10:6a:e9       no               195.76
  4     00:19:aa:10:6b:78       no               197.95
  4     00:1a:2f:26:57:8d       no               123.93
  4     00:1a:2f:83:3e:b7       no                 5.26
  4     00:20:af:be:10:e4       no                22.65
  4     00:30:48:51:5b:5e       no               252.23
  4     00:50:04:af:07:3d       no               218.03
  4     00:60:b0:57:8d:50       no               103.41
  4     fe:ff:ff:ff:ff:ff       yes                0.00
10:02:31
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               276.21
  2     00:16:3e:01:01:c2       no               276.21
  3     00:13:d4:b2:4f:ec       no                46.86
  4     00:02:44:22:a5:b4       no                80.28
  4     00:02:44:24:c6:2a       no                53.83
  4     00:02:44:4c:34:14       no                10.94
  4     00:03:47:32:f9:12       no                 0.93
  4     00:03:47:32:f9:5a       no                 1.56
  4     00:03:47:32:f9:66       no                 1.64
...
  4     00:19:aa:10:6a:82       no               130.52
  4     00:19:aa:10:6a:e9       no               201.58
  4     00:19:aa:10:6b:78       no               203.77
  4     00:1a:2f:26:57:8d       no               129.75
  4     00:1a:2f:83:3e:b7       no                11.08
  4     00:20:af:be:10:e4       no                28.47
  4     00:30:48:51:5b:5e       no               258.05
  4     00:50:04:af:07:3d       no               223.85
  4     00:60:b0:57:8d:50       no                 4.20
  4     fe:ff:ff:ff:ff:ff       yes                0.00
10:02:37
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               281.02
  2     00:16:3e:01:01:c2       no               281.02
  3     00:13:d4:b2:4f:ec       no                51.67
  4     00:02:44:22:a5:b4       no                85.09
  4     00:02:44:24:c6:2a       no                58.64
  4     00:02:44:4c:34:14       no                15.74
  4     00:03:47:32:f9:12       no                 0.24
  4     00:03:47:32:f9:5a       no                 0.37
  4     00:03:47:32:f9:66       no                 0.44
...
  4     00:19:aa:10:6a:82       no               135.33
  4     00:19:aa:10:6a:e9       no               206.38
  4     00:19:aa:10:6b:78       no               208.58
  4     00:1a:2f:26:57:8d       no               134.55
  4     00:1a:2f:83:3e:b7       no                15.88
  4     00:20:af:be:10:e4       no                33.27
  4     00:30:48:51:5b:5e       no               262.85
  4     00:50:04:af:07:3d       no               228.66
  4     00:60:b0:57:8d:50       no                 9.00
  4     fe:ff:ff:ff:ff:ff       yes                0.00
10:02:42
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               284.26
  2     00:16:3e:01:01:c2       no               284.26
  3     00:13:d4:b2:4f:ec       no                54.91
  4     00:02:44:22:a5:b4       no                88.34
  4     00:02:44:24:c6:2a       no                61.89
  4     00:02:44:4c:34:14       no                18.99
  4     00:03:47:32:f9:12       no                 3.48
  4     00:03:47:32:f9:5a       no                 1.62
  4     00:03:47:32:f9:66       no                 1.69
...
  4     00:19:aa:10:6a:82       no               138.58
  4     00:19:aa:10:6a:e9       no               209.63
  4     00:19:aa:10:6b:78       no               211.82
  4     00:1a:2f:26:57:8d       no               137.80
  4     00:1a:2f:83:3e:b7       no                19.13
  4     00:20:af:be:10:e4       no                36.52
  4     00:30:48:51:5b:5e       no               266.10
  4     00:50:04:af:07:3d       no               231.91
  4     00:60:b0:57:8d:50       no                12.25
  4     fe:ff:ff:ff:ff:ff       yes                0.00
10:02:45
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               290.97
  2     00:16:3e:01:01:c2       no               290.97
  3     00:13:d4:b2:4f:ec       no                 1.62
  4     00:02:44:22:a5:b4       no                95.04
  4     00:02:44:24:c6:2a       no                68.60
  4     00:02:44:4c:34:14       no                25.70
  4     00:03:47:32:f9:12       no                 4.70
  4     00:03:47:32:f9:5a       no                 0.33
  4     00:03:47:32:f9:66       no                 0.00
...
  4     00:19:aa:10:6a:82       no               145.28
  4     00:19:aa:10:6a:e9       no               216.34
  4     00:19:aa:10:6b:78       no               218.53
  4     00:1a:2f:26:57:8d       no               144.51
  4     00:1a:2f:83:3e:b7       no                25.84
  4     00:20:af:be:10:e4       no                43.23
  4     00:30:48:51:5b:5e       no               272.81
  4     00:50:04:af:07:3d       no               238.61
  4     00:60:b0:57:8d:50       no                 3.95
  4     fe:ff:ff:ff:ff:ff       yes                0.00
10:02:52
#brctl showmacs xenbr2 | sort -n
port no mac addr                is local?       ageing timer
  1     00:16:3e:01:00:c3       no               292.08
  2     00:16:3e:01:01:c2       no               292.08
  3     00:13:d4:b2:4f:ec       no                 2.72
  4     00:02:44:22:a5:b4       no                96.15
  4     00:02:44:24:c6:2a       no                69.70
  4     00:02:44:4c:34:14       no                26.80
  4     00:03:47:32:f9:12       no                 0.30
  4     00:03:47:32:f9:5a       no                 1.43
  4     00:03:47:32:f9:66       no                 1.10
...
  4     00:19:aa:10:6a:82       no               146.39
  4     00:19:aa:10:6a:e9       no               217.44
  4     00:19:aa:10:6b:78       no               219.64
  4     00:1a:2f:26:57:8d       no               145.61
  4     00:1a:2f:83:3e:b7       no                26.94
  4     00:20:af:be:10:e4       no                44.33
  4     00:30:48:51:5b:5e       no               273.91
  4     00:50:04:af:07:3d       no               239.72
  4     00:60:b0:57:8d:50       no                 5.06
  4     fe:ff:ff:ff:ff:ff       yes                0.00

Статистика

Время первой команды журнала15:05:16 2007- 4- 7
Время последней команды журнала10:02:52 2007- 4- 8
Количество командных строк в журнале101
Процент команд с ненулевым кодом завершения, %16.83
Процент синтаксически неверно набранных команд, % 0.99
Суммарное время работы с терминалом *, час 1.64
Количество командных строк в единицу времени, команда/мин 1.03
Частота использования команд
brctl37|=============================| 29.37%
tcpdump26|====================| 20.63%
sort17|=============| 13.49%
xm13|==========| 10.32%
ifconfig13|==========| 10.32%
ip5|===| 3.97%
awk4|===| 3.17%
man3|==| 2.38%
wc2|=| 1.59%
ls2|=| 1.59%
vconfig1|| 0.79%
less1|| 0.79%
bcrtl1|| 0.79%
grep1|| 0.79%
____
*) Интервалы неактивности длительностью 30 минут и более не учитываются

Справка

Для того чтобы использовать LiLaLo, не нужно знать ничего особенного: всё происходит само собой. Однако, чтобы ведение и последующее использование журналов было как можно более эффективным, желательно иметь в виду следующее:
  1. В журнал автоматически попадают все команды, данные в любом терминале системы.

  2. Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.

  3. Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
    $ l s-l
    bash: l: command not found
    

  4. Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
    $ test 5 -lt 4
    Обратите внимание на то, что код завершения команды может быть отличен от нуля не только в тех случаях, когда команда была выполнена с ошибкой. Многие команды используют код завершения, например, для того чтобы показать результаты проверки

  5. Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
    $ find / -name abc
    find: /home/devi-orig/.gnome2: Keine Berechtigung
    find: /home/devi-orig/.gnome2_private: Keine Berechtigung
    find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung
    find: /home/devi-orig/.metacity: Keine Berechtigung
    find: /home/devi-orig/.inkscape: Keine Berechtigung
    ^C
    

  6. Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
    # id
    uid=0(root) gid=0(root) Gruppen=0(root)
    

  7. Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
    $ vi ~/.bashrc
    2a3,5
    >    if [ -f /usr/local/etc/bash_completion ]; then
    >         . /usr/local/etc/bash_completion
    >        fi
    

  8. Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
    $ patch ~/.bashrc
    В данном случае изменения применяются к файлу ~/.bashrc

  9. Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.

    Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.

  10. Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.

  11. Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора

  12. Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.

  13. Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.

  14. Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:

    $ whoami
    
    user
    
    $ #^ Интересно, кто я?
    
    в журнале это будет выглядеть так:
    $ whoami
    
    user
    
    Интересно, кто я?

  15. Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:

    $ whoami
    
    user
    
    $ cat > /dev/null #^ Интересно, кто я?
    
    Программа whoami выводит имя пользователя, под которым 
    мы зарегистрировались в системе.
    -
    Она не может ответить на вопрос о нашем назначении 
    в этом мире.
    
    В журнале это будет выглядеть так:
    $ whoami
    user
    
    Интересно, кто я?
    Программа whoami выводит имя пользователя, под которым
    мы зарегистрировались в системе.

    Она не может ответить на вопрос о нашем назначении
    в этом мире.
    Для разделения нескольких абзацев между собой используйте символ "-", один в строке.

  16. Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=

  17. Содержимое файла может быть показано в журнале. Для этого его нужно вывести с помощью программы cat. Если вывод команды отметить симоволами #!, содержимое файла будет показано в журнале в специально отведённой для этого секции.
  18. Для того чтобы вставить скриншот интересующего вас окна в журнал, нужно воспользоваться командой l3shot. После того как команда вызвана, нужно с помощью мыши выбрать окно, которое должно быть в журнале.
  19. Команды в журнале расположены в хронологическом порядке. Если две команды давались одна за другой, но на разных терминалах, в журнале они будут рядом, даже если они не имеют друг к другу никакого отношения.
    1
        2
    3   
        4
    
    Группы команд, выполненных на разных терминалах, разделяются специальной линией. Под этой линией в правом углу показано имя терминала, на котором выполнялись команды. Для того чтобы посмотреть команды только одного сенса, нужно щёкнуть по этому названию.

О программе

LiLaLo (L3) расшифровывается как Live Lab Log.
Программа разработана для повышения эффективности обучения Unix/Linux-системам.
(c) Игорь Чубин, 2004-2008

$Id$