/l3/users/eb/2009/linux13/root :1 :2 :3 :4 :5 :6 :7 :8 :9 :10 :11 :12 :13 :14 :15 :16 :17 :18 :19 :20 :21 :22 :23 :24 :25 :26 :27 :28 :29 :30 :31 :32 :33 :34 :35 :36 :37 :38 :39 :40 :41 :42 :43 :44 :45 :46 :47 :48 :49 :50 :51 :52 :53 :54 :55 :56 :57 :58 :59 :60 :61 :62 :63 :64 :65 :66 :67 :68 :69 :70 :71 :72 :73 :74 :75 :76 (local_session_id::1228231641648228348-1243947111)
[ править ]

Журнал лабораторных работ

Содержание

Журнал

Вторник (06/02/09)

/dev/tty4
17:44:01
#iptables -F










17:45:13




#iptables-save


# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:45:16 2009
*filter
:INPUT ACCEPT [1347:198396]
:FORWARD ACCEPT [3057:1378613]
:OUTPUT ACCEPT [1153:133483]
COMMIT
# Completed on Tue Jun  2 17:45:16 2009
# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:45:16 2009
*nat
:PREROUTING ACCEPT [69:6101]
:POSTROUTING ACCEPT [93:6011]
:OUTPUT ACCEPT [87:5659]
-A PREROUTING -d 192.168.107.1/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.107.2:80
-A POSTROUTING -s 192.168.107.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Tue Jun  2 17:45:16 2009











17:45:16




#iptables-save


# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:45:23 2009
*filter
:INPUT ACCEPT [1353:199001]
:FORWARD ACCEPT [3057:1378613]
:OUTPUT ACCEPT [1160:135543]
COMMIT
# Completed on Tue Jun  2 17:45:23 2009
# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:45:23 2009
*nat
:PREROUTING ACCEPT [70:6344]
:POSTROUTING ACCEPT [95:6123]
:OUTPUT ACCEPT [89:5771]
-A PREROUTING -d 192.168.107.1/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.107.2:80
-A POSTROUTING -s 192.168.107.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Tue Jun  2 17:45:23 2009











17:45:23




#ssh quiz@192.168.15.13





quiz@192.168.15.13's password:











17:46:00




#ssh quiz@10.0.35.100


-----------------------------------------------------------------[40/40]-----
 Как получить полный список файлов, которые процесс 1234 открывает в ходе своей работы
 (не только, которые открыты сейчас).
 1. strace -p 1234 -o /tmp/1234.strace; grep open /tmp/1234.strace
 2. lsof -p 1234
 3. strings `which 1234`
 4. strings 'which 1234'
---------------------------------------------------------------------------
2
Your score: 29
Connection to 10.0.35.100 closed.











/dev/tty3
17:50:43




#kill -9 3739












17:50:53




#su user












17:51:02




$echo messss|logger












17:51:29




$cat /var/log/messages





cat: /var/log/messages: Permission denied











17:51:35




$exit


exit











17:51:38




#cat /var/log/messages


Jun  1 09:53:16 linux13 kernel: [    2.910571] ata3: SATA max UDMA/133 cmd 0xd000 ctl 0xcc00 bmdma 0xc480 irq 18
Jun  1 09:53:16 linux13 kernel: [    2.910624] ata4: SATA max UDMA/133 cmd 0xc880 ctl 0xc800 bmdma 0xc488 irq 18
Jun  1 09:53:16 linux13 kernel: [    3.384094] ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
Jun  1 09:53:16 linux13 kernel: [    3.393649] ata3.00: ATA-7: Maxtor 6L080M0, BANC1G10, max UDMA/133
Jun  1 09:53:16 linux13 kernel: [    3.393702] ata3.00: 160086528 sectors, multi 0: LBA NCQ (not used)
Jun  1 09:53:16 linux13 kernel: [    3.396085] ide0 at 0xec00-0xec07,0xe882 on irq 17
Jun  1 09:53:16 linux13 kernel: [    3.400225] ide1 at 0xe800-0xe807,0xe482 on irq 17
Jun  1 09:53:16 linux13 kernel: [    3.409157] ata3.00: configured for UDMA/133
Jun  1 09:53:16 linux13 kernel: [    3.409289] scsi 2:0:0:0: Direct-Access     ATA      Maxtor 6L080M0   BANC PQ: 0 ANSI: 5
Jun  1 09:53:16 linux13 kernel: [    3.884054] ata4: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
...
Jun  1 10:31:14 linux13 kernel: [    0.000000] BIOS-provided physical RAM map:
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000000e4000 - 0000000000100000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 0000000000100000 - 00000000bf790000 (usable)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf790000 - 00000000bf79e000 (ACPI data)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf79e000 - 00000000bf7e0000 (ACPI NVS)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf7e0000 - 00000000bf800000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000fee00000 - 00000000fee01000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)











17:51:44




#su user










прошло 15 минут




18:07:34




$cd












18:07:42




$vim tab













18:08:00




$crontab tab





/var/spool/cron/crontabs/tmp.pFzyeE: Permission denied











18:08:05




$exit


exit











18:09:23




#crontab reload





reload: No such file or directory











18:09:27




#crontab restart





restart: No such file or directory











18:09:30




#vim tab





--- /tmp/l3-saved-3944.14848.22632	2009-06-02 18:11:53.000000000 +0300
+++ /etc/crontab	2009-06-02 18:12:10.000000000 +0300
@@ -12,5 +12,5 @@
 25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
 47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
 52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
-# * * * * * root date | sendxmpp f_e_a_r@jabber.kiev.ua
+* * * * * * root date | sendxmpp f_e_a_r@jabber.kiev.ua
 









18:11:47




#~   :


  2 # Unlike any other crontab you don't have to run the `crontab'
  3 # command to install the new version when you edit this file
  4 # and files in /etc/cron.d. These files also have username fields,
  5 # that none of the other crontabs do.
  6
    eport /etc/cron.daily )
    eport /etc/cron.weekly )test -x /usr/sbin/anacron || ( cd / && run-parts --r
    eport /etc/cron.monthly )est -x /usr/sbin/anacron || ( cd / && run-parts --r
    * * * * * * root date | sendxmpp f_e_a_r@jabber.kiev.ua
 15 # * * * * * root date | sendxmpp f_e_a_r@jabber.kiev.ua
~
~
~
~
~
~
~
"/etc/crontab" 16L, 777C written











18:12:10




#crontab /etc/crontab


"/etc/crontab":14: bad command
errors in crontab file, can't install.











18:12:27




#crontab /etc/crontab












18:13:43




#man at










18:14:16




#ech he | at now + 60 minutes


bash: ech: command not found
warning: commands will be executed using /bin/sh
job 2 at Tue Jun  2 19:14:00 2009











18:14:47




#lsof | grep /dir















18:21:16




#lsof | grep /bin


syslog2ja 3276        root  txt       REG        8,1   725100    2052297 /bin/bash
syslog2ja 3276        root  255r      REG        8,1      100    1353039 /usr/local/bin/syslog2jabber
dbus-daem 3287  messagebus  txt       REG        8,1   292604    1354946 /usr/bin/dbus-daemon
login     3728        root  txt       REG        8,1    36132    2052324 /bin/login
runsvdir  3729        root  txt       REG        8,1    12704    1352903 /usr/bin/runsvdir
script    3735        root  txt       REG        8,1     9852    1352352 /usr/bin/script
script    3770        root  txt       REG        8,1     9852    1352352 /usr/bin/script
bash      3771        root  txt       REG        8,1   725100    2052297 /bin/bash
script    3806        root  txt       REG        8,1     9852    1352352 /usr/bin/script
script    3857        root  txt       REG        8,1     9852    1352352 /usr/bin/script
...
bash      4030        root  txt       REG        8,1   725100    2052297 /bin/bash
script    4037        root  txt       REG        8,1     9852    1352352 /usr/bin/script
script    4115        root  txt       REG        8,1     9852    1352352 /usr/bin/script
bash      4116        root  txt       REG        8,1   725100    2052297 /bin/bash
ssh       4365        root  txt       REG        8,1   332928    1352473 /usr/bin/ssh
finch     5955        root  txt       REG        8,1   231304    1352608 /usr/bin/finch
ssh       7027        root  txt       REG        8,1   332928    1352473 /usr/bin/ssh
lsof      7673        root  txt       REG        8,1   121412    1353047 /usr/bin/lsof
grep      7674        root  txt       REG        8,1   100500    2052316 /bin/grep
lsof      7675        root  txt       REG        8,1   121412    1353047 /usr/bin/lsof











18:21:20




#lsof | grep /sbin


init         1        root  txt       REG        8,1    31296     651562 /sbin/init
udevd     1251        root  txt       REG        8,1   103288     651616 /sbin/udevd
syslog-ng 3277        root  txt       REG        8,1   114492    1353036 /usr/sbin/syslog-ng
exim4     3565 Debian-exim  txt       REG        8,1   695968    1355999 /usr/sbin/exim4
lpd       3582          lp  txt       REG        8,1    68032    1355313 /usr/sbin/lpd
inetd     3592        root  txt       REG        8,1    29492    1355975 /usr/sbin/inetd
mdadm     3621        root  txt       REG        8,1   192064     651699 /sbin/mdadm
atd       3648      daemon  txt       REG        8,1    15716    1356017 /usr/sbin/atd
cron      3680        root  txt       REG        8,1    32572    1353084 /usr/sbin/cron
monit     3707        root  txt       REG        8,1   336568    1353038 /usr/sbin/monit
sshd      6310        root  txt       REG        8,1   438756    1353120 /usr/sbin/sshd











18:21:25




#lsof /dir





lsof: status error on /dir: No such file or directory
lsof 4.81
 latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/
 latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ
 latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man
 usage: [-?abhlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-f[gG]]
 [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]
[+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]
Use the ``-h'' option to get more help information.











18:21:30




#env -p cron





env: invalid option -- 'p'
Try `env --help' for more information.











18:21:57




#strace -p cron | grep env





strace: Invalid process id: cron
usage: strace [-dffhiqrtttTvVxx] [-a column] [-e expr] ... [-o file]
              [-p pid] ... [-s strsize] [-u username] [-E var=val] ...
              [command [arg ...]]
   or: strace -c [-e expr] ... [-O overhead] [-S sortby] [-E var=val] ...
              [command [arg ...]]
-c -- count time, calls, and errors for each syscall and report summary
-f -- follow forks, -ff -- with output into separate files
-F -- attempt to follow vforks, -h -- print help message
-i -- print instruction pointer at time of syscall
...
-e expr -- a qualifying expression: option=[!]all or option=[!]val1[,val2]...
   options: trace, abbrev, verbose, raw, signal, read, or write
-o file -- send trace output to FILE instead of stderr
-O overhead -- set overhead for tracing syscalls to OVERHEAD usecs
-p pid -- trace process with process id PID, may be repeated
-s strsize -- limit length of print strings to STRSIZE chars (default 32)
-S sortby -- sort syscall counts by: time, calls, name, nothing (default time)
-u username -- run command as username handling setuid and/or setgid
-E var=val -- put var=val in the environment for command
-E var -- remove var from the environment for command











18:22:35




#strings `which cron`


|ouK
[^_]
syst
em_u
[^_]
[^_]
[^_]
[^_]
[^_]
t"9X
...
/var/spool/cron
%s: created
%s:
mkdir
can't lock %s, otherpid may be %d: %s
'%s' is not a directory, bailing out.
cannot chdir(%s), bailing out.
this program was compiled without debugging enabled
%[^ =] = %[^
popen: setuid(%lu) failed: %s











18:23:58




#lsof -p cron





lsof: illegal process ID: cron
lsof 4.81
 latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/
 latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ
 latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man
 usage: [-?abhlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-f[gG]]
 [-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]
[+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]
Use the ``-h'' option to get more help information.











18:24:12




#pgrep cron


3680











18:24:22




#lsof -p 3680


COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF    NODE NAME
cron    3680 root  cwd    DIR    8,1     4096 1905777 /var/spool/cron
cron    3680 root  rtd    DIR    8,1     4096       2 /
cron    3680 root  txt    REG    8,1    32572 1353084 /usr/sbin/cron
cron    3680 root  mem    REG    8,1    42504 2020022 /lib/i686/cmov/libnss_files-2.9.so
cron    3680 root  mem    REG    8,1    38444 2020031 /lib/i686/cmov/libnss_nis-2.9.so
cron    3680 root  mem    REG    8,1    87804 2020024 /lib/i686/cmov/libnsl-2.9.so
cron    3680 root  mem    REG    8,1    30436 2020010 /lib/i686/cmov/libnss_compat-2.9.so
cron    3680 root  mem    REG    8,1    26048 1352266 /usr/lib/gconv/gconv-modules.cache
cron    3680 root  mem    REG    8,1  3462848 1499598 /usr/lib/locale/locale-archive
cron    3680 root  mem    REG    8,1     9676 2020042 /lib/i686/cmov/libdl-2.9.so
cron    3680 root  mem    REG    8,1  1433988 2019995 /lib/i686/cmov/libc-2.9.so
cron    3680 root  mem    REG    8,1    95976 2020038 /lib/libselinux.so.1
cron    3680 root  mem    REG    8,1    40472 2020028 /lib/libpam.so.0.81.12
cron    3680 root  mem    REG    8,1   117348 2022719 /lib/ld-2.9.so
cron    3680 root    0r   CHR    1,3      0t0     756 /dev/null
cron    3680 root    1w   CHR    1,3      0t0     756 /dev/null
cron    3680 root    2w   CHR    1,3      0t0     756 /dev/null
cron    3680 root    3u   REG    8,1        5 1906289 /var/run/crond.pid











/dev/tty4
18:25:00




#init 6












/dev/tty1
18:25:55




#openvt












18:26:01




#openvt












18:26:01




#openvt












18:26:01




#openvt










Среда (06/03/09)


/dev/tty1
09:06:10




#vim /etc/apt/













09:06:10




#vim /etc/apt/sources.list


--- /tmp/l3-saved-3768.11056.31488	2009-06-03 09:06:23.000000000 +0300
+++ /etc/apt/sources.list	2009-06-03 09:06:44.000000000 +0300
@@ -1,2 +1,2 @@
-deb http://192.168.15.13:9999/debian sid main contrib non-free
+deb http://192.168.15.13:9999/debian  lenny main contrib non-free
 # deb http://www.debian-multimedia.org sid main









09:06:44




#apt-get update


Get:1 http://192.168.15.13 lenny Release.gpg [1032B]
Ign http://192.168.15.13 lenny/main Translation-en_US
Ign http://192.168.15.13 lenny/contrib Translation-en_US
Ign http://192.168.15.13 lenny/non-free Translation-en_US
Get:2 http://192.168.15.13 lenny Release [73.6kB]
Ign http://192.168.15.13 lenny/main Packages
Ign http://192.168.15.13 lenny/contrib Packages
Ign http://192.168.15.13 lenny/non-free Packages
Get:3 http://192.168.15.13 lenny/main Packages [6924kB]
Get:4 http://192.168.15.13 lenny/contrib Packages [93.4kB]
Get:5 http://192.168.15.13 lenny/non-free Packages [125kB]
Fetched 7217kB in 2s (2644kB/s)
Reading package lists... Done











09:07:01




#apt-get install hald





Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package hald











09:07:15




#apt-cache search hald


wesnoth-trow - The Rise of Wesnoth official campaign for Wesnoth











09:07:26




#apt-cache search hal


libroxen-deepleap - Deepleap database registry module for the Roxen Challenger web server
libroxen-diary - Diary module for the Roxen Challenger web server
libroxen-dirlist - Directory listing module for the Roxen Challenger web server
libroxen-disclaimer - Disclaimer module for the Roxen Challenger web server
libroxen-discussit - Discussion module for the Roxen Challenger web server
libroxen-errormessage - Error message generator module for the Roxen Challenger web server
libroxen-expires - Page expiration module for the Roxen Challenger web server
libroxen-explaindir - Directory listing module for the Roxen Challenger web server
libroxen-faq - FAQ module for the Roxen Challenger web server
libroxen-finder - Select box module for the Roxen Challenger web server
...
libjboss-xml-binding-java - JBoss XML Binding
rutebook - Linux: Rute User's Tutorial and Exposition, an online book
policykit - framework for managing administrative policies and privileges
ettercap - Multipurpose sniffer/interceptor/logger for switched LAN
hal-info - Hardware Abstraction Layer - fdi files
libhal-storage1 - Hardware Abstraction Layer - shared library for storage devices
hal - Hardware Abstraction Layer
rar - Archiver for .rar files
libhal1 - Hardware Abstraction Layer - shared library
cron - process scheduling daemon











09:07:29




#apt-cache search hal|less










09:08:58




#apt-get install hal





Reading package lists... Done
Building dependency tree
Reading state information... Done
hal is already the newest version.
hal set to manually installed.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0B of additional disk space will be used.
Setting up ed (1.3-3) ...
update-alternatives: error: alternative path /bin/ed doesn't exist.
dpkg: error processing ed (--configure):
 subprocess installed post-installation script returned error exit status 2
Errors were encountered while processing:
 ed
E: Sub-process /usr/bin/dpkg returned an error code (1)











09:09:04




#which ed


/usr/bin/ed











09:09:29




#find / -name update-alternatives


/usr/bin/update-alternatives
/usr/sbin/update-alternatives











/dev/tty1
09:14:37




#openvt












09:15:02




#openvt












09:15:02




#openvt












09:15:03




#openvt












09:15:03




#gdm start












/dev/pts/5
09:17:45




#init 6












/dev/tty1
09:20:19




#dmesg


[    1.547155] uhci_hcd 0000:00:1d.0: PCI INT A -> GSI 23 (level, low) -> IRQ 23
[    1.547212] uhci_hcd 0000:00:1d.0: setting latency timer to 64
[    1.547215] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[    1.547285] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 5
[    1.547373] uhci_hcd 0000:00:1d.0: irq 23, io base 0x0000d080
[    1.547450] usb usb5: New USB device found, idVendor=1d6b, idProduct=0001
[    1.547505] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.547576] usb usb5: Product: UHCI Host Controller
[    1.547625] usb usb5: Manufacturer: Linux 2.6.29-2-686 uhci_hcd
[    1.547674] usb usb5: SerialNumber: 0000:00:1d.0
...
[    6.861911] HDA Intel 0000:00:1b.0: setting latency timer to 64
[    6.894375] Error: Driver 'pcspkr' is already registered, aborting...
[    7.349444] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4
[    7.410443] EXT3-fs warning: mounting fs with errors, running e2fsck is recommended
[    7.410644] EXT3 FS on sda1, internal journal
[    9.653592] atl1 0000:02:00.0: irq 26 for MSI/MSI-X
[    9.653655] atl1 0000:02:00.0: eth0 link is up 1000 Mbps full duplex
[   10.039578] NET: Registered protocol family 10
[   10.040188] lo: Disabled Privacy Extensions
[   20.964026] eth0: no IPv6 routers present











09:20:31




#cd /var/log












09:20:50




#ls -l


total 4504
drwxr-xr-x 2 root        root    4096 2009-06-02 16:45 apache2
drwxr-xr-x 2 root        root    4096 2009-06-01 09:23 apt
-rw-r----- 1 root        adm    45987 2009-06-03 09:20 auth.log
-rw-r----- 1 root        adm    40628 2009-06-01 09:21 auth.log.1.gz
-rw-r----- 1 root        adm       31 2009-05-24 13:16 boot
-rw-r--r-- 1 root        root   33565 2009-05-24 13:16 bootstrap.log
-rw-rw---- 1 root        utmp       0 2009-06-01 09:23 btmp
-rw-rw-r-- 1 root        utmp    1920 2009-05-30 09:24 btmp.1
drwxr-xr-x 2 root        root    4096 2009-05-25 03:20 ConsoleKit
...
-rw-r----- 1 root        adm    26688 2009-06-01 09:23 syslog.3.gz
-rw-r----- 1 root        adm    43349 2009-05-30 09:29 syslog.4.gz
-rw-r----- 1 root        adm    33611 2009-05-29 09:21 syslog.5.gz
-rw-r----- 1 sys         user   74896 2009-05-28 06:25 syslog.6.gz
-rw-r----- 1 root        adm      403 2009-06-02 17:51 user.log
-rw-r----- 1 root        adm      955 2009-06-01 09:21 user.log.1.gz
-rw-rw-r-- 1 root        utmp  119424 2009-06-03 09:20 wtmp
-rw-rw-r-- 1 root        utmp  272256 2009-06-01 09:21 wtmp.1
-rw-r--r-- 1 root        root   22315 2009-06-03 09:17 Xorg.0.log
-rw-r--r-- 1 root        root   22090 2009-06-03 09:13 Xorg.0.log.old











09:20:54




#less messages










09:24:22




#who


root     tty1         2009-06-03 09:20











09:25:17




#openvt












09:26:40




#openvt












09:26:40




#openvt












/dev/tty2
09:26:40




#cd












/dev/tty1
09:26:41




#openvt












09:26:41




#openvt












/dev/tty5
09:26:41




#cd












/dev/tty4
09:26:41




#cd












/dev/tty3
09:26:41




#cd












/dev/tty1
09:26:42




#cd












/dev/tty5
09:26:44




#finch


 - FriBuddy List      now White (291670823 -- ICQ)
 - General           │            l├─┐     616554├────────┐€â”
    ⊖ C_r_a_$_h     ”‚                           616554├────────┐
│   ⊖ C_r_a_$_h â│                           1038417├─────────┐
â   ◯ ex3mer        Nickname: ex3mer           ”‚──┘          ▒│
│   ◯ Vadik_M   ■                          ”‚                   ▒│
│   ◯ Zek       ââStatus: Available         │─────────────────┘
│- Work           â└──────────────────────────┘
│   ⊖ AlEX       │                           ─────────────────┘
â   ⊖ Ivan СтрÐâ│                           ─────────────────┘
...
│   ◯ Vano      â–: здаров!!!!!!!!!!!! ”‚                   ▒│
    ◯ grey          : здаров!!!!!!!!!!!!              5537├──────────┐
 - Friends            уличк…²!!!!!!!!!!!!          ”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”˜
â   ◯ grey          : здаров!!!!!!!!!!!! ”‚€â ”‚”€â”â”‚_______                                                                                                             ▒│
    â—Snow White      : здаров!!!!!!!!!!!!        €â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”˜
 - Girls            ââ: здаров!!!!!!!!!!!!________€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”˜                                                                ▒│
      Дуська
B└â”Kupets ───────────────┘│-- ICQ)
 ____________________│
Buddy List                             │Snow White (291670823 -- ICQ)











/dev/tty1
09:27:07




#ls


1             ip_forward~  ip_forwarz~    passswd1    screen.png
11            ip_forwarw~  iptables-save  samba.dot   shtdown
file          ip_forwarx~  lv-table       samba.png   usaddscript
harddisk.img  ip_forwary~  passswd        screen.dot  vol1











09:27:08




#cat 1


# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:13:40 2009
*filter
:INPUT ACCEPT [73:7809]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [51:6739]
COMMIT
# Completed on Tue Jun  2 17:13:40 2009
# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:13:40 2009
*nat
:PREROUTING ACCEPT [162:13230]
:POSTROUTING ACCEPT [54:3255]
:OUTPUT ACCEPT [53:3077]
-A PREROUTING -d 192.168.107.1/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.107.2:80
-A POSTROUTING -s 192.168.107.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Tue Jun  2 17:13:40 2009











09:27:16




#cat 11





cat: 11: Is a directory











09:27:19




#cd 11












09:27:22




#ls












09:27:23




#ls .*


.:
..:
1             ip_forward~  ip_forwarz~    passswd1    screen.png
11            ip_forwarw~  iptables-save  samba.dot   shtdown
file          ip_forwarx~  lv-table       samba.png   usaddscript
harddisk.img  ip_forwary~  passswd        screen.dot  vol1











09:27:28




#cd ..












09:27:43




#cd vol1












09:27:46




#ls












09:27:47




#cd












09:29:29




#whois





bash: whois: command not found











/dev/tty2
09:29:34




#su user












/dev/tty4
09:29:38




#ssh 10.0.35.100


[root@linux0:~]#
                  creen -ls
[root@linux0:~]# s
There is10463.pts-13.linux0     (03.06.2009 10:03:27)   (Attached)
1 Socket in /var/run/screen/S-root.
--------------------------------------------------------------------------------









прошло 18 минут




/dev/tty1
09:48:26




#apt-get install whois


Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  whois
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
Need to get 54.6kB of archives.
After this operation, 332kB of additional disk space will be used.
Get:1 http://192.168.15.13 lenny/main whois 4.7.30 [54.6kB]
...
Unpacking whois (from .../archives/whois_4.7.30_i386.deb) ...
Processing triggers for man-db ...
Setting up ed (1.3-3) ...
update-alternatives: error: alternative path /bin/ed doesn't exist.
dpkg: error processing ed (--configure):
 subprocess installed post-installation script returned error exit status 2
Setting up whois (4.7.30) ...
Errors were encountered while processing:
 ed
E: Sub-process /usr/bin/dpkg returned an error code (1)











09:49:03




#whois|less










09:50:50




#cat /var/log/auth.log


Jun  2 18:24:01 linux13 CRON[7830]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:24:03 linux13 CRON[7830]: pam_unix(cron:session): session closed for user root
Jun  2 18:25:01 linux13 CRON[7874]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:25:02 linux13 CRON[7874]: pam_unix(cron:session): session closed for user root
Jun  2 18:25:46 linux13 sshd[3195]: Server listening on 0.0.0.0 port 22.
Jun  2 18:25:46 linux13 sshd[3195]: Server listening on :: port 22.
Jun  2 18:25:53 linux13 login[3696]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  2 18:25:54 linux13 login[3701]: ROOT LOGIN  on '/dev/tty1'
Jun  2 18:26:01 linux13 CRON[3768]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:26:02 linux13 CRON[3768]: pam_unix(cron:session): session closed for user root
...
Jun  3 09:34:01 linux13 CRON[4579]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:34:03 linux13 CRON[4579]: pam_unix(cron:session): session closed for user root
Jun  3 09:35:01 linux13 CRON[4591]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:35:02 linux13 CRON[4591]: pam_unix(cron:session): session closed for user root
Jun  3 09:36:01 linux13 CRON[4603]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:36:03 linux13 CRON[4603]: pam_unix(cron:session): session closed for user root
Jun  3 09:37:01 linux13 CRON[4615]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:37:02 linux13 CRON[4615]: pam_unix(cron:session): session closed for user root
Jun  3 09:38:01 linux13 CRON[4627]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:38:03 linux13 CRON[4627]: pam_unix(cron:session): session closed for user root











09:51:31




#whois 129.17.15.1


OrgName:    Honeywell International, Inc.
OrgID:      HONEYW
Address:    101 Columbia Road
City:       Morristown
StateProv:  NJ
PostalCode: 07962
Country:    US
NetRange:   129.17.0.0 - 129.17.255.255
CIDR:       129.17.0.0/16
NetName:    HONEYWELL2
...
OrgNOCHandle: CERF-HM-ARIN
OrgNOCName:   AT&T Enhanced Network Services
OrgNOCPhone:  +1-858-812-5000
OrgNOCEmail:  notify@attens.com
OrgTechHandle: CV136-ARIN
OrgTechName:   Vaughan, Cliff
OrgTechPhone:  +1-480-592-5125
OrgTechEmail:  clifford.vaughan@honeywell.com
# ARIN WHOIS database, last updated 2009-06-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.











09:52:38




#host ukrtelecom.ua


ukrtelecom.ua           A       195.5.46.19











09:55:11




#whois 195.5.46.19


% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.
% Information related to '195.5.46.0 - 195.5.46.255'
inetnum:        195.5.46.0 - 195.5.46.255
netname:        UKRTELNET
...
phone:          +380 (44) 230-9024
nic-hdl:        ARM42-RIPE
mnt-by:         AS6849-MNT
source:         RIPE # Filtered
% Information related to '195.5.32.0/19AS6849'
route:        195.5.32.0/19
descr:        AGGREGATE BLOCK FOR UKRTELECOM.
origin:       AS6849
mnt-by:       AS6849-MNT
source:       RIPE # Filtered











09:55:26




#route_to()





> whois 195.5.46.19 | grep route | awk 'print $2'
bash: syntax error near unexpected token `whois'











09:56:34




#route_to() whois 195.5.46.19 | grep route | awk '{print $2}'





bash: syntax error near unexpected token `whois'











09:58:25




#route_to 195.5.15.12


195.5.0.0/19











09:59:17




#ssh-keygen -l -f /etc/ssh/ssh_





ssh_config            ssh_host_dsa_key.pub  ssh_host_rsa_key.pub
ssh_host_dsa_key      ssh_host_rsa_key











09:59:17




#ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key


1024 fa:0a:dd:c2:37:53:40:c3:1a:64:cf:fb:7a:78:18:ac /etc/ssh/ssh_host_dsa_key.pub (DSA)











10:01:27




#ping mail.ru


PING mail.ru (10.0.35.1) 56(84) bytes of data.
64 bytes from 10.0.35.1: icmp_seq=1 ttl=63 time=0.297 ms
64 bytes from 10.0.35.1: icmp_seq=2 ttl=63 time=0.218 ms
64 bytes from 10.0.35.1: icmp_seq=3 ttl=63 time=2.53 ms
64 bytes from 10.0.35.1: icmp_seq=4 ttl=63 time=0.219 ms
^C
--- mail.ru ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
rtt min/avg/max/mdev = 0.218/0.817/2.535/0.992 ms











10:02:22




#ping mail.ru


PING mail.ru (194.67.57.26) 56(84) bytes of data.
64 bytes from mail.ru (194.67.57.26): icmp_seq=1 ttl=109 time=74.9 ms
64 bytes from mail.ru (194.67.57.26): icmp_seq=2 ttl=109 time=74.1 ms
64 bytes from mail.ru (194.67.57.26): icmp_seq=3 ttl=109 time=74.4 ms
^C
--- mail.ru ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 74.100/74.491/74.961/0.475 ms











10:03:01




#> ~/.ssh/known_hosts












10:10:24




#ssh 127.0.0.1


The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
RSA key fingerprint is 34:6c:c2:da:38:7c:d7:17:e9:cd:17:8d:e7:cf:f1:a6.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '127.0.0.1' (RSA) to the list of known hosts.
root@127.0.0.1's password:
Linux linux13 2.6.29-2-686 #1 SMP Sun May 17 17:56:29 UTC 2009 i686
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Wed Jun  3 09:20:18 2009
l3-agent is already running: pid=3728; pidfile=/root/.lilalo/l3-agent.pid











10:10:48




#exit


exit
Connection to 127.0.0.1 closed.











10:10:50




#vim ~/.ssh/config





--- /dev/null	2009-06-03 09:19:57.504195778 +0300
+++ /root/.ssh/config	2009-06-03 10:14:29.000000000 +0300
@@ -0,0 +1,3 @@
+HOST *
+	VisualHostKey Yes
+







Файлы
  • /var/log/auth.log
  • /var/log/messages
  • 1
    • /var/log/auth.log
    

    >
    Jun  2 18:24:01 linux13 CRON[7830]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:24:03 linux13 CRON[7830]: pam_unix(cron:session): session closed for user root
Jun  2 18:25:01 linux13 CRON[7874]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:25:02 linux13 CRON[7874]: pam_unix(cron:session): session closed for user root
Jun  2 18:25:46 linux13 sshd[3195]: Server listening on 0.0.0.0 port 22.
Jun  2 18:25:46 linux13 sshd[3195]: Server listening on :: port 22.
Jun  2 18:25:53 linux13 login[3696]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  2 18:25:54 linux13 login[3701]: ROOT LOGIN  on '/dev/tty1'
Jun  2 18:26:01 linux13 CRON[3768]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:26:02 linux13 CRON[3768]: pam_unix(cron:session): session closed for user root
Jun  2 18:27:01 linux13 CRON[4124]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:27:03 linux13 CRON[4124]: pam_unix(cron:session): session closed for user root
Jun  2 18:28:01 linux13 CRON[4136]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:28:02 linux13 CRON[4136]: pam_unix(cron:session): session closed for user root
Jun  2 18:29:01 linux13 CRON[4148]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:29:03 linux13 CRON[4148]: pam_unix(cron:session): session closed for user root
Jun  2 18:30:01 linux13 CRON[4160]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:30:02 linux13 CRON[4160]: pam_unix(cron:session): session closed for user root
Jun  2 18:31:01 linux13 CRON[4172]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:31:03 linux13 CRON[4172]: pam_unix(cron:session): session closed for user root
Jun  2 18:32:01 linux13 CRON[4184]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:32:02 linux13 CRON[4184]: pam_unix(cron:session): session closed for user root
Jun  2 18:33:01 linux13 CRON[4196]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:33:03 linux13 CRON[4196]: pam_unix(cron:session): session closed for user root
Jun  2 18:34:01 linux13 CRON[4208]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:34:02 linux13 CRON[4208]: pam_unix(cron:session): session closed for user root
Jun  2 18:35:01 linux13 CRON[4220]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:35:03 linux13 CRON[4220]: pam_unix(cron:session): session closed for user root
Jun  2 18:36:01 linux13 CRON[4232]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:36:02 linux13 CRON[4232]: pam_unix(cron:session): session closed for user root
Jun  2 18:37:01 linux13 CRON[4244]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:37:03 linux13 CRON[4244]: pam_unix(cron:session): session closed for user root
Jun  2 18:38:01 linux13 CRON[4256]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:38:02 linux13 CRON[4256]: pam_unix(cron:session): session closed for user root
Jun  2 18:39:01 linux13 CRON[4268]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:39:03 linux13 CRON[4268]: pam_unix(cron:session): session closed for user root
Jun  2 18:40:01 linux13 CRON[4280]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:40:02 linux13 CRON[4280]: pam_unix(cron:session): session closed for user root
Jun  2 18:41:01 linux13 CRON[4292]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:41:03 linux13 CRON[4292]: pam_unix(cron:session): session closed for user root
Jun  2 18:42:01 linux13 CRON[4304]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:42:02 linux13 CRON[4304]: pam_unix(cron:session): session closed for user root
Jun  2 18:43:01 linux13 CRON[4316]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:43:02 linux13 CRON[4316]: pam_unix(cron:session): session closed for user root
Jun  2 18:44:01 linux13 CRON[4328]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:44:03 linux13 CRON[4328]: pam_unix(cron:session): session closed for user root
Jun  2 18:45:01 linux13 CRON[4340]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:45:02 linux13 CRON[4340]: pam_unix(cron:session): session closed for user root
Jun  2 18:46:01 linux13 CRON[4352]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:46:03 linux13 CRON[4352]: pam_unix(cron:session): session closed for user root
Jun  2 18:47:01 linux13 CRON[4364]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:47:02 linux13 CRON[4364]: pam_unix(cron:session): session closed for user root
Jun  2 18:48:01 linux13 CRON[4376]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:48:03 linux13 CRON[4376]: pam_unix(cron:session): session closed for user root
Jun  2 18:49:01 linux13 CRON[4388]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:49:02 linux13 CRON[4388]: pam_unix(cron:session): session closed for user root
Jun  2 18:50:01 linux13 CRON[4400]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:50:03 linux13 CRON[4400]: pam_unix(cron:session): session closed for user root
Jun  2 18:51:01 linux13 CRON[4412]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:51:02 linux13 CRON[4412]: pam_unix(cron:session): session closed for user root
Jun  2 18:52:01 linux13 CRON[4424]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:52:03 linux13 CRON[4424]: pam_unix(cron:session): session closed for user root
Jun  2 18:53:01 linux13 CRON[4436]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:53:02 linux13 CRON[4436]: pam_unix(cron:session): session closed for user root
Jun  2 18:54:01 linux13 CRON[4448]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:54:03 linux13 CRON[4448]: pam_unix(cron:session): session closed for user root
Jun  2 18:55:01 linux13 CRON[4460]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:55:02 linux13 CRON[4460]: pam_unix(cron:session): session closed for user root
Jun  2 18:56:01 linux13 CRON[4534]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  2 18:56:03 linux13 CRON[4534]: pam_unix(cron:session): session closed for user root
Jun  3 09:06:02 linux13 sshd[3222]: Server listening on 0.0.0.0 port 22.
Jun  3 09:06:02 linux13 sshd[3222]: Server listening on :: port 22.
Jun  3 09:06:03 linux13 atd[3577]: pam_unix(atd:session): session opened for user root by (uid=1)
Jun  3 09:06:03 linux13 atd[3577]: pam_ck_connector(atd:session): cannot determine display-device
Jun  3 09:06:03 linux13 atd[3577]: pam_unix(atd:session): session closed for user root
Jun  3 09:06:09 linux13 login[3725]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  3 09:06:09 linux13 login[3730]: ROOT LOGIN  on '/dev/tty1'
Jun  3 09:07:00 linux13 CRON[3876]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:07:03 linux13 CRON[3876]: pam_unix(cron:session): session closed for user root
Jun  3 09:08:01 linux13 CRON[3925]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:08:02 linux13 CRON[3925]: pam_unix(cron:session): session closed for user root
Jun  3 09:09:01 linux13 CRON[3945]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:09:03 linux13 CRON[3945]: pam_unix(cron:session): session closed for user root
Jun  3 09:10:01 linux13 CRON[4006]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:10:03 linux13 CRON[4006]: pam_unix(cron:session): session closed for user root
Jun  3 09:11:01 linux13 CRON[4032]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:11:03 linux13 CRON[4032]: pam_unix(cron:session): session closed for user root
Jun  3 09:12:01 linux13 CRON[4157]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:12:02 linux13 CRON[4157]: pam_unix(cron:session): session closed for user root
Jun  3 09:13:21 linux13 sshd[3204]: Server listening on 0.0.0.0 port 22.
Jun  3 09:13:21 linux13 sshd[3204]: Server listening on :: port 22.
Jun  3 09:13:30 linux13 login[3705]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  3 09:13:30 linux13 login[3710]: ROOT LOGIN  on '/dev/tty1'
Jun  3 09:14:30 linux13 sshd[3203]: Server listening on 0.0.0.0 port 22.
Jun  3 09:14:30 linux13 sshd[3203]: Server listening on :: port 22.
Jun  3 09:14:36 linux13 login[3704]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  3 09:14:36 linux13 login[3708]: ROOT LOGIN  on '/dev/tty1'
Jun  3 09:15:01 linux13 CRON[3776]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:15:03 linux13 CRON[3776]: pam_unix(cron:session): session closed for user root
Jun  3 09:16:01 linux13 CRON[4135]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:16:03 linux13 CRON[4135]: pam_unix(cron:session): session closed for user root
Jun  3 09:17:01 linux13 CRON[4147]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:17:01 linux13 CRON[4148]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:17:01 linux13 CRON[4151]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:17:01 linux13 CRON[4147]: pam_unix(cron:session): session closed for user root
Jun  3 09:17:01 linux13 CRON[4151]: pam_unix(cron:session): session closed for user root
Jun  3 09:17:02 linux13 CRON[4148]: pam_unix(cron:session): session closed for user root
Jun  3 09:17:44 linux13 sshd[4208]: Accepted password for root from 192.168.15.14 port 44539 ssh2
Jun  3 09:17:44 linux13 sshd[4208]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jun  3 09:20:07 linux13 sshd[3218]: Server listening on 0.0.0.0 port 22.
Jun  3 09:20:07 linux13 sshd[3218]: Server listening on :: port 22.
Jun  3 09:20:18 linux13 login[3719]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jun  3 09:20:18 linux13 login[3724]: ROOT LOGIN  on '/dev/tty1'
Jun  3 09:21:01 linux13 CRON[3814]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:21:03 linux13 CRON[3814]: pam_unix(cron:session): session closed for user root
Jun  3 09:22:01 linux13 CRON[3834]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:22:02 linux13 CRON[3834]: pam_unix(cron:session): session closed for user root
Jun  3 09:23:01 linux13 CRON[3847]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:23:03 linux13 CRON[3847]: pam_unix(cron:session): session closed for user root
Jun  3 09:24:01 linux13 CRON[3859]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:24:02 linux13 CRON[3859]: pam_unix(cron:session): session closed for user root
Jun  3 09:25:01 linux13 CRON[3878]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:25:03 linux13 CRON[3878]: pam_unix(cron:session): session closed for user root
Jun  3 09:26:01 linux13 CRON[3898]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:26:02 linux13 CRON[3898]: pam_unix(cron:session): session closed for user root
Jun  3 09:27:01 linux13 CRON[4344]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:27:03 linux13 CRON[4344]: pam_unix(cron:session): session closed for user root
Jun  3 09:28:01 linux13 CRON[4439]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:28:02 linux13 CRON[4439]: pam_unix(cron:session): session closed for user root
Jun  3 09:29:01 linux13 CRON[4451]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:29:03 linux13 CRON[4451]: pam_unix(cron:session): session closed for user root
Jun  3 09:30:01 linux13 CRON[4491]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:30:02 linux13 CRON[4491]: pam_unix(cron:session): session closed for user root
Jun  3 09:31:01 linux13 CRON[4543]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:31:02 linux13 CRON[4543]: pam_unix(cron:session): session closed for user root
Jun  3 09:32:01 linux13 CRON[4555]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:32:03 linux13 CRON[4555]: pam_unix(cron:session): session closed for user root
Jun  3 09:33:01 linux13 CRON[4567]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:33:02 linux13 CRON[4567]: pam_unix(cron:session): session closed for user root
Jun  3 09:34:01 linux13 CRON[4579]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:34:03 linux13 CRON[4579]: pam_unix(cron:session): session closed for user root
Jun  3 09:35:01 linux13 CRON[4591]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:35:02 linux13 CRON[4591]: pam_unix(cron:session): session closed for user root
Jun  3 09:36:01 linux13 CRON[4603]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:36:03 linux13 CRON[4603]: pam_unix(cron:session): session closed for user root
Jun  3 09:37:01 linux13 CRON[4615]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:37:02 linux13 CRON[4615]: pam_unix(cron:session): session closed for user root
Jun  3 09:38:01 linux13 CRON[4627]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun  3 09:38:03 linux13 CRON[4627]: pam_unix(cron:session): session closed for user root

    /var/log/messages
    

    >
    Jun  1 09:53:16 linux13 kernel: [    2.910571] ata3: SATA max UDMA/133 cmd 0xd000 ctl 0xcc00 bmdma 0xc480 irq 18
Jun  1 09:53:16 linux13 kernel: [    2.910624] ata4: SATA max UDMA/133 cmd 0xc880 ctl 0xc800 bmdma 0xc488 irq 18
Jun  1 09:53:16 linux13 kernel: [    3.384094] ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
Jun  1 09:53:16 linux13 kernel: [    3.393649] ata3.00: ATA-7: Maxtor 6L080M0, BANC1G10, max UDMA/133
Jun  1 09:53:16 linux13 kernel: [    3.393702] ata3.00: 160086528 sectors, multi 0: LBA NCQ (not used)
Jun  1 09:53:16 linux13 kernel: [    3.396085] ide0 at 0xec00-0xec07,0xe882 on irq 17
Jun  1 09:53:16 linux13 kernel: [    3.400225] ide1 at 0xe800-0xe807,0xe482 on irq 17
Jun  1 09:53:16 linux13 kernel: [    3.409157] ata3.00: configured for UDMA/133
Jun  1 09:53:16 linux13 kernel: [    3.409289] scsi 2:0:0:0: Direct-Access     ATA      Maxtor 6L080M0   BANC PQ: 0 ANSI: 5
Jun  1 09:53:16 linux13 kernel: [    3.884054] ata4: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
Jun  1 09:53:16 linux13 kernel: [    3.892197] ata4.00: ATA-7: Hitachi HDS721680PLA380, P21OABDA, max UDMA/100
Jun  1 09:53:16 linux13 kernel: [    3.892258] ata4.00: 156301488 sectors, multi 16: LBA48 NCQ (depth 0/32)
Jun  1 09:53:16 linux13 kernel: [    3.924224] ata4.00: configured for UDMA/100
Jun  1 09:53:16 linux13 kernel: [    3.924337] scsi 3:0:0:0: Direct-Access     ATA      Hitachi HDS72168 P21O PQ: 0 ANSI: 5
Jun  1 09:53:16 linux13 kernel: [    3.924495] uhci_hcd 0000:00:1a.1: PCI INT B -> GSI 21 (level, low) -> IRQ 21
Jun  1 09:53:16 linux13 kernel: [    3.924558] uhci_hcd 0000:00:1a.1: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.924630] uhci_hcd 0000:00:1a.1: new USB bus registered, assigned bus number 4
Jun  1 09:53:16 linux13 kernel: [    3.924723] uhci_hcd 0000:00:1a.1: irq 21, io base 0x0000d880
Jun  1 09:53:16 linux13 kernel: [    3.924800] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001
Jun  1 09:53:16 linux13 kernel: [    3.924851] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Jun  1 09:53:16 linux13 kernel: [    3.924917] usb usb4: Product: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.924962] usb usb4: Manufacturer: Linux 2.6.29-2-686 uhci_hcd
Jun  1 09:53:16 linux13 kernel: [    3.925010] usb usb4: SerialNumber: 0000:00:1a.1
Jun  1 09:53:16 linux13 kernel: [    3.925101] usb usb4: configuration #1 chosen from 1 choice
Jun  1 09:53:16 linux13 kernel: [    3.925172] hub 4-0:1.0: USB hub found
Jun  1 09:53:16 linux13 kernel: [    3.925219] hub 4-0:1.0: 2 ports detected
Jun  1 09:53:16 linux13 kernel: [    3.925358] uhci_hcd 0000:00:1d.0: PCI INT A -> GSI 23 (level, low) -> IRQ 23
Jun  1 09:53:16 linux13 kernel: [    3.925416] uhci_hcd 0000:00:1d.0: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.925481] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 5
Jun  1 09:53:16 linux13 kernel: [    3.925566] uhci_hcd 0000:00:1d.0: irq 23, io base 0x0000d080
Jun  1 09:53:16 linux13 kernel: [    3.925641] usb usb5: New USB device found, idVendor=1d6b, idProduct=0001
Jun  1 09:53:16 linux13 kernel: [    3.925691] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Jun  1 09:53:16 linux13 kernel: [    3.925758] usb usb5: Product: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.925803] usb usb5: Manufacturer: Linux 2.6.29-2-686 uhci_hcd
Jun  1 09:53:16 linux13 kernel: [    3.925851] usb usb5: SerialNumber: 0000:00:1d.0
Jun  1 09:53:16 linux13 kernel: [    3.925938] usb usb5: configuration #1 chosen from 1 choice
Jun  1 09:53:16 linux13 kernel: [    3.926011] hub 5-0:1.0: USB hub found
Jun  1 09:53:16 linux13 kernel: [    3.926058] hub 5-0:1.0: 2 ports detected
Jun  1 09:53:16 linux13 kernel: [    3.926344] uhci_hcd 0000:00:1d.1: PCI INT B -> GSI 20 (level, low) -> IRQ 20
Jun  1 09:53:16 linux13 kernel: [    3.926402] uhci_hcd 0000:00:1d.1: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.926469] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 6
Jun  1 09:53:16 linux13 kernel: [    3.926561] uhci_hcd 0000:00:1d.1: irq 20, io base 0x0000d400
Jun  1 09:53:16 linux13 kernel: [    3.926636] usb usb6: New USB device found, idVendor=1d6b, idProduct=0001
Jun  1 09:53:16 linux13 kernel: [    3.926687] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Jun  1 09:53:16 linux13 kernel: [    3.926753] usb usb6: Product: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.926798] usb usb6: Manufacturer: Linux 2.6.29-2-686 uhci_hcd
Jun  1 09:53:16 linux13 kernel: [    3.926846] usb usb6: SerialNumber: 0000:00:1d.1
Jun  1 09:53:16 linux13 kernel: [    3.926938] usb usb6: configuration #1 chosen from 1 choice
Jun  1 09:53:16 linux13 kernel: [    3.927009] hub 6-0:1.0: USB hub found
Jun  1 09:53:16 linux13 kernel: [    3.927058] hub 6-0:1.0: 2 ports detected
Jun  1 09:53:16 linux13 kernel: [    3.927195] uhci_hcd 0000:00:1d.2: PCI INT C -> GSI 21 (level, low) -> IRQ 21
Jun  1 09:53:16 linux13 kernel: [    3.927253] uhci_hcd 0000:00:1d.2: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.927321] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 7
Jun  1 09:53:16 linux13 kernel: [    3.927406] uhci_hcd 0000:00:1d.2: irq 21, io base 0x0000d480
Jun  1 09:53:16 linux13 kernel: [    3.927482] usb usb7: New USB device found, idVendor=1d6b, idProduct=0001
Jun  1 09:53:16 linux13 kernel: [    3.927532] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Jun  1 09:53:16 linux13 kernel: [    3.927598] usb usb7: Product: UHCI Host Controller
Jun  1 09:53:16 linux13 kernel: [    3.927644] usb usb7: Manufacturer: Linux 2.6.29-2-686 uhci_hcd
Jun  1 09:53:16 linux13 kernel: [    3.927692] usb usb7: SerialNumber: 0000:00:1d.2
Jun  1 09:53:16 linux13 kernel: [    3.927779] usb usb7: configuration #1 chosen from 1 choice
Jun  1 09:53:16 linux13 kernel: [    3.927850] hub 7-0:1.0: USB hub found
Jun  1 09:53:16 linux13 kernel: [    3.927897] hub 7-0:1.0: 2 ports detected
Jun  1 09:53:16 linux13 kernel: [    3.934918] ide-cd driver 5.00
Jun  1 09:53:16 linux13 kernel: [    3.971257] ide-cd: hda: ATAPI 48X DVD-ROM drive, 198kB Cache
Jun  1 09:53:16 linux13 kernel: [    3.971389] Uniform CD-ROM driver Revision: 3.20
Jun  1 09:53:16 linux13 kernel: [    4.030714] Driver 'sd' needs updating - please use bus_type methods
Jun  1 09:53:16 linux13 kernel: [    4.030840] sd 2:0:0:0: [sda] 160086528 512-byte hardware sectors: (81.9 GB/76.3 GiB)
Jun  1 09:53:16 linux13 kernel: [    4.030920] sd 2:0:0:0: [sda] Write Protect is off
Jun  1 09:53:16 linux13 kernel: [    4.030988] sd 2:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:53:16 linux13 kernel: [    4.031113] sd 2:0:0:0: [sda] 160086528 512-byte hardware sectors: (81.9 GB/76.3 GiB)
Jun  1 09:53:16 linux13 kernel: [    4.031193] sd 2:0:0:0: [sda] Write Protect is off
Jun  1 09:53:16 linux13 kernel: [    4.031259] sd 2:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:53:16 linux13 kernel: [    4.031333]  sda: sda1 sda2 < >
Jun  1 09:53:16 linux13 kernel: [    4.068867] sd 2:0:0:0: [sda] Attached SCSI disk
Jun  1 09:53:16 linux13 kernel: [    4.068980] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 09:53:16 linux13 kernel: [    4.069059] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 09:53:16 linux13 kernel: [    4.069126] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:53:16 linux13 kernel: [    4.069241] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 09:53:16 linux13 kernel: [    4.069319] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 09:53:16 linux13 kernel: [    4.069386] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:53:16 linux13 kernel: [    4.069457]  sdb: sdb1 sdb2 < >
Jun  1 09:53:16 linux13 kernel: [    4.101716] sd 3:0:0:0: [sdb] Attached SCSI disk
Jun  1 09:53:16 linux13 kernel: [    4.304804] kjournald starting.  Commit interval 5 seconds
Jun  1 09:53:16 linux13 kernel: [    4.304812] EXT3-fs: mounted filesystem with ordered data mode.
Jun  1 09:53:16 linux13 kernel: [    5.243967] udev: starting version 141
Jun  1 09:53:16 linux13 kernel: [    5.443126] input: Power Button (FF) as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
Jun  1 09:53:16 linux13 kernel: [    5.457014] ACPI: Power Button (FF) [PWRF]
Jun  1 09:53:16 linux13 kernel: [    5.457152] input: Power Button (CM) as /devices/LNXSYSTM:00/device:00/PNP0C0C:00/input/input2
Jun  1 09:53:16 linux13 kernel: [    5.476680] ACPI: Power Button (CM) [PWRB]
Jun  1 09:53:16 linux13 kernel: [    5.555450] parport_pc 00:07: reported by Plug and Play ACPI
Jun  1 09:53:16 linux13 kernel: [    5.555611] parport0: PC-style at 0x378 (0x778), irq 7 [PCSPP,TRISTATE,EPP]
Jun  1 09:53:16 linux13 kernel: [    5.767289] i801_smbus 0000:00:1f.3: PCI INT C -> GSI 18 (level, low) -> IRQ 18
Jun  1 09:53:16 linux13 kernel: [    5.810333] input: PC Speaker as /devices/platform/pcspkr/input/input3
Jun  1 09:53:16 linux13 kernel: [    5.831573] HDA Intel 0000:00:1b.0: PCI INT A -> GSI 22 (level, low) -> IRQ 22
Jun  1 09:53:16 linux13 kernel: [    6.246804] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4
Jun  1 09:53:16 linux13 kernel: [    6.446943] EXT3-fs warning: mounting fs with errors, running e2fsck is recommended
Jun  1 09:53:16 linux13 kernel: [    6.447140] EXT3 FS on sda1, internal journal
Jun  1 09:53:16 linux13 kernel: [    7.460212] device-mapper: uevent: version 1.0.3
Jun  1 09:53:16 linux13 kernel: [    7.460324] device-mapper: ioctl: 4.14.0-ioctl (2008-04-23) initialised: dm-devel@redhat.com
Jun  1 09:53:16 linux13 kernel: [    8.378623] atl1 0000:02:00.0: eth0 link is up 1000 Mbps full duplex
Jun  1 09:53:16 linux13 kernel: [    8.825974] NET: Registered protocol family 10
Jun  1 09:53:16 linux13 kernel: [    8.826528] lo: Disabled Privacy Extensions
Jun  1 09:53:17 linux13 lpd[3335]: restarted
Jun  1 09:53:15 linux13 kernel: [   14.898076] [drm] Initialized drm 1.1.0 20060810
Jun  1 09:53:15 linux13 kernel: [   14.906672] pci 0000:00:02.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
Jun  1 09:53:15 linux13 kernel: [   14.908843] [drm] Initialized i915 1.6.0 20080730 on minor 0
Jun  1 09:58:20 linux13 kernel: [  319.325907] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 09:58:20 linux13 kernel: [  319.325925] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 09:58:20 linux13 kernel: [  319.325953] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:58:20 linux13 kernel: [  319.325957]  sdb: sdb1 sdb2 < >
Jun  1 09:58:22 linux13 kernel: [  321.330110] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 09:58:22 linux13 kernel: [  321.330135] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 09:58:22 linux13 kernel: [  321.330158] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 09:58:22 linux13 kernel: [  321.330163]  sdb: sdb1 sdb2 < >
Jun  1 10:25:51 linux13 kernel: [ 1970.459648] loop: module loaded
Jun  1 10:29:01 linux13 kernel: [ 2160.552360] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 10:29:01 linux13 kernel: [ 2160.552375] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 10:29:01 linux13 kernel: [ 2160.552400] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 10:29:01 linux13 kernel: [ 2160.552404]  sdb: sdb1 sdb2 < sdb5 >
Jun  1 10:29:03 linux13 kernel: [ 2162.556656] sd 3:0:0:0: [sdb] 156301488 512-byte hardware sectors: (80.0 GB/74.5 GiB)
Jun  1 10:29:03 linux13 kernel: [ 2162.556674] sd 3:0:0:0: [sdb] Write Protect is off
Jun  1 10:29:03 linux13 kernel: [ 2162.556701] sd 3:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Jun  1 10:29:03 linux13 kernel: [ 2162.556706]  sdb: sdb1 sdb2 < sdb5 >
Jun  1 10:30:30 linux13 shutdown[9570]: shutting down for system reboot
Jun  1 10:30:33 linux13 syslog-ng[3030]: Termination requested via signal, terminating;
Jun  1 10:30:33 linux13 syslog-ng[3030]: syslog-ng shutting down; version='2.0.9'
Jun  1 10:31:14 linux13 syslog-ng[3120]: syslog-ng starting up; version='2.0.9'
Jun  1 10:31:14 linux13 kernel: [    0.000000] Initializing cgroup subsys cpuset
Jun  1 10:31:14 linux13 kernel: [    0.000000] Initializing cgroup subsys cpu
Jun  1 10:31:14 linux13 kernel: [    0.000000] Linux version 2.6.29-2-686 (Debian 2.6.29-5) (waldi@debian.org) (gcc version 4.3.3 (Debian 4.3.3-10) ) #1 SMP Sun May 17 17:56:29 UTC 2009
Jun  1 10:31:14 linux13 kernel: [    0.000000] KERNEL supported cpus:
Jun  1 10:31:14 linux13 kernel: [    0.000000]   Intel GenuineIntel
Jun  1 10:31:14 linux13 kernel: [    0.000000]   AMD AuthenticAMD
Jun  1 10:31:14 linux13 kernel: [    0.000000]   NSC Geode by NSC
Jun  1 10:31:14 linux13 kernel: [    0.000000]   Cyrix CyrixInstead
Jun  1 10:31:14 linux13 kernel: [    0.000000]   Centaur CentaurHauls
Jun  1 10:31:14 linux13 kernel: [    0.000000]   Transmeta GenuineTMx86
Jun  1 10:31:14 linux13 kernel: [    0.000000]   Transmeta TransmetaCPU
Jun  1 10:31:14 linux13 kernel: [    0.000000]   UMC UMC UMC UMC
Jun  1 10:31:14 linux13 kernel: [    0.000000] BIOS-provided physical RAM map:
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000000e4000 - 0000000000100000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 0000000000100000 - 00000000bf790000 (usable)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf790000 - 00000000bf79e000 (ACPI data)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf79e000 - 00000000bf7e0000 (ACPI NVS)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000bf7e0000 - 00000000bf800000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000fee00000 - 00000000fee01000 (reserved)
Jun  1 10:31:14 linux13 kernel: [    0.000000]  BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)

    1
    

    >
    # Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:13:40 2009
*filter
:INPUT ACCEPT [73:7809]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [51:6739]
COMMIT
# Completed on Tue Jun  2 17:13:40 2009
# Generated by iptables-save v1.4.3.2 on Tue Jun  2 17:13:40 2009
*nat
:PREROUTING ACCEPT [162:13230]
:POSTROUTING ACCEPT [54:3255]
:OUTPUT ACCEPT [53:3077]
-A PREROUTING -d 192.168.107.1/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.107.2:80
-A POSTROUTING -s 192.168.107.0/24 -o eth0 -j MASQUERADE
COMMIT
# Completed on Tue Jun  2 17:13:40 2009

    Статистика
    Время первой команды журнала17:44:01 2009- 6- 2
    Время последней команды журнала10:10:50 2009- 6- 3
    Количество командных строк в журнале101
    Процент команд с ненулевым кодом завершения, %16.83
    Процент синтаксически неверно набранных команд, % 0.99
    Суммарное время работы с терминалом *, час 1.78
    Количество командных строк в единицу времени, команда/мин 0.95
    Частота использования команд
    openvt13|===========| 11.61%
    cd11|=========|  9.82%
    lsof6|=====|  5.36%
    cat5|====|  4.46%
    ls5|====|  4.46%
    crontab5|====|  4.46%
    vim5|====|  4.46%
    grep5|====|  4.46%
    apt-get4|===|  3.57%
    ssh4|===|  3.57%
    whois4|===|  3.57%
    less3|==|  2.68%
    exit3|==|  2.68%
    apt-cache3|==|  2.68%
    su3|==|  2.68%
    route_to()2|=|  1.79%
    iptables-save2|=|  1.79%
    ping2|=|  1.79%
    ssh-keygen2|=|  1.79%
    init2|=|  1.79%
    awk1||  0.89%
    man1||  0.89%
    host1||  0.89%
    strings1||  0.89%
    env1||  0.89%
    dmesg1||  0.89%
    echo1||  0.89%
    logger1||  0.89%
    route_to1||  0.89%
    at1||  0.89%
    ~1||  0.89%
    find1||  0.89%
    strace1||  0.89%
    ech1||  0.89%
    pgrep1||  0.89%
    finch1||  0.89%
    iptables1||  0.89%
    >1||  0.89%
    who1||  0.89%
    gdm1||  0.89%
    kill1||  0.89%
    which1||  0.89%
    known_hosts1||  0.89%
    ____
    *) Интервалы неактивности длительностью 30 минут и более не учитываются
    Справка
        Для того чтобы использовать LiLaLo, не нужно знать ничего особенного:
    всё происходит само собой.
    Однако, чтобы ведение и последующее использование журналов
    было как можно более эффективным, желательно иметь в виду следующее:
    
      
    
    1.  
    В журнал автоматически попадают все команды, данные в любом терминале системы.
    
      2. 
    
    2. 
    Для того чтобы убедиться, что журнал на текущем терминале ведётся, 
    и команды записываются, дайте команду w.
    В поле WHAT, соответствующем текущему терминалу, 
    должна быть указана программа script.
    
      3. 
    
    3. 
    Команды, при наборе которых были допущены синтаксические ошибки, 
    выводятся перечёркнутым текстом:

      

      


      $ l s-l
      

      bash: l: command not found

      
      		

      

      

      
    
      4. 
    
    4. 
    Если код завершения команды равен нулю, 
    команда была выполнена без ошибок.
    Команды, код завершения которых отличен от нуля, выделяются цветом.

      

      


      $ test 5 -lt 4
      

      		

      

      
    Обратите внимание на то, что код завершения команды может быть отличен от нуля
    не только в тех случаях, когда команда была выполнена с ошибкой.
    Многие команды используют код завершения, например, для того чтобы показать результаты проверки

      
    
      5. 
    
    5. 
    Команды, ход выполнения которых был прерван пользователем, выделяются цветом.

      

      


      $ find / -name abc
      

      find: /home/devi-orig/.gnome2: Keine Berechtigung
find: /home/devi-orig/.gnome2_private: Keine Berechtigung
find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung
find: /home/devi-orig/.metacity: Keine Berechtigung
find: /home/devi-orig/.inkscape: Keine Berechtigung
^C

      
      		

      

      

      
    
      6. 
    
    6. 
    Команды, выполненные с привилегиями суперпользователя,
    выделяются слева красной чертой.

      

      


      # id
      

      uid=0(root) gid=0(root) Gruppen=0(root)

      
      		

      

      
    
      
    
      7. 
    
    7. 
    Изменения, внесённые в текстовый файл с помощью редактора, 
    запоминаются и показываются в журнале в формате ed.
    Строки, начинающиеся символом "<", удалены, а строки,
    начинающиеся символом ">" -- добавлены.

      

      


      $ vi ~/.bashrc
      

      2a3,5
>    if [ -f /usr/local/etc/bash_completion ]; then
>         . /usr/local/etc/bash_completion
>        fi

      		

      

      
    
      
    
      8. 
    
    8. 
    Для того чтобы изменить файл в соответствии с показанными в диффшоте
    изменениями, можно воспользоваться командой patch.
    Нужно скопировать изменения, запустить программу patch, указав в
    качестве её аргумента файл, к которому применяются изменения,
    и всавить скопированный текст:

      

      


      $ patch ~/.bashrc
      
      		

      

      
    В данном случае изменения применяются к файлу ~/.bashrc
    
      9. 
    
    9. 
    Для того чтобы получить краткую справочную информацию о команде, 
    нужно подвести к ней мышь. Во всплывающей подсказке появится краткое
    описание команды.
    
      
    
      
    Если справочная информация о команде есть, 
    команда выделяется голубым фоном, например: vi.
    Если справочная информация отсутствует,
    команда выделяется розовым фоном, например: notepad.exe.
    Справочная информация может отсутствовать в том случае, 
    если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно;
    (3) если информация о команде неизвестна LiLaLo.
    Последнее возможно для редких команд.
    
      10. 
    
    10. 
    Большие, в особенности многострочные, всплывающие подсказки лучше 
    всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer.
    В браузерах Mozilla и Firefox они отображаются не полностью, 
    а вместо перевода строки выводится специальный символ.
    
      11. 
    
    11. 
    Время ввода команды, показанное в журнале, соответствует времени 
    начала ввода командной строки, которое равно тому моменту, 
    когда на терминале появилось приглашение интерпретатора
    
      12. 
    
    12. 
    Имя терминала, на котором была введена команда, показано в специальном блоке.
    Этот блок показывается только в том случае, если терминал
    текущей команды отличается от терминала предыдущей.
    
      13. 
    
    13. 
    Вывод не интересующих вас в настоящий момент элементов журнала,
    таких как время, имя терминала и других, можно отключить.
    Для этого нужно воспользоваться формой управления журналом
    вверху страницы.
    
      14. 
    
    14. 
    Небольшие комментарии к командам можно вставлять прямо из командной строки.
    Комментарий вводится прямо в командную строку, после символов #^ или #v.
    Символы ^ и v показывают направление выбора команды, к которой относится комментарий:
    ^ - к предыдущей, v - к следующей.
    Например, если в командной строке было введено:

      $ whoami

      

      user

      

      $ #^ Интересно, кто я?

      
    в журнале это будет выглядеть так:
    

      $ whoami

      

      user

      

      

        Интересно, кто я?
       
       
    
      15. 
    
    15. 
    Если комментарий содержит несколько строк,
    его можно вставить в журнал следующим образом:

      $ whoami

      

      user

      

      $ cat > /dev/null #^ Интересно, кто я?

      

      Программа whoami выводит имя пользователя, под которым 
мы зарегистрировались в системе.
-
Она не может ответить на вопрос о нашем назначении 
в этом мире.

      
    В журнале это будет выглядеть так:

      

      


      $ whoami
      

      user

      

      Интересно, кто я?
      
Программа whoami выводит имя пользователя, под которым
      
мы зарегистрировались в системе.
      

      
Она не может ответить на вопрос о нашем назначении
      
в этом мире.
      

      
      		

      

      
    Для разделения нескольких абзацев между собой
    используйте символ "-", один в строке.
    
      

      16. 
    
    16. 
    Комментарии, не относящиеся непосредственно ни к какой из команд, 
    добавляются точно таким же способом, только вместо симолов #^ или #v 
    нужно использовать символы #=
    
      17. 

    
    17. 
    Содержимое файла может быть показано в журнале.
    Для этого его нужно вывести с помощью программы cat.
    Если вывод команды отметить симоволами #!, 
    содержимое файла будет показано в журнале
    в специально отведённой для этого секции.
    
      18. 

    
      
    
    18. 
    Для того чтобы вставить скриншот интересующего вас окна в журнал,
    нужно воспользоваться командой l3shot.
    После того как команда вызвана, нужно с помощью мыши выбрать окно, которое
    должно быть в журнале.
    
      19. 
    
      

    
      
    
    19. 
    Команды в журнале расположены в хронологическом порядке.
    Если две команды давались одна за другой, но на разных терминалах,
    в журнале они будут рядом, даже если они не имеют друг к другу никакого отношения.

      1
    2
3   
    4

      
    Группы команд, выполненных на разных терминалах, разделяются специальной линией.
    Под этой линией в правом углу показано имя терминала, на котором выполнялись команды.
    Для того чтобы посмотреть команды только одного сенса, 
    нужно щёкнуть по этому названию.
    
      20. 
    
      

    

    О программе
        
    
    LiLaLo (L3) расшифровывается как Live Lab Log.
    
    Программа разработана для повышения эффективности обучения Unix/Linux-системам.
    
    (c) Игорь Чубин, 2004-2008
    
    
    
$Id$