/l3/users/igor/samba-ldap-setup/samba.liag.org.ua/root :1 :2 :3 :4 :5 :6 :7 :8 :9 :10 :11 :12 :13 :14 :15 :16 :17 :18 :19 :20 :21 :22 :23 :24 :25 :26 :27 :28 :29 :30 :31 :32 :33 :34 :35 :36 :37 :38 :39 |
|
#umount /mnt
|
#smbstatus
doing parameter security = user doing parameter encrypt passwords = true doing parameter obey pam restrictions = yes doing parameter invalid users = root doing parameter passwd program = /usr/bin/passwd %u doing parameter passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* . doing parameter domain logons = yes doing parameter socket options = TCP_NODELAY doing parameter passdb backend = ldapsam:ldap://194.150.93.85 doing parameter add user script = /usr/sbin/smbldap-useradd -m %u ... doing parameter directory mask = 2770 doing parameter path = /home doing parameter valid users = @home pm_process() returned Yes Samba version 3.0.24 PID Username Group Machine ------------------------------------------------------------------- Service pid machine Connected at ------------------------------------------------------- No locked files |
#vi /etc/samba/smb.conf
|
#less infected-files
|
#grep FOUND infected-files | sed s/:.*// | less
|
#rm infected-files2
|
#host samba.liag.org.ua
samba.liag.org.ua A 194.150.93.88 |
#less infected-files
|
#vi /etc/samba/smb.conf
|
#/etc/init.d/samba restart
Stopping Samba daemons: nmbd smbd. Starting Samba daemons: nmbd smbd. |
#ls /var/log/samba/ -t
log.220.143.32.5 log.79.0.52.44 log.80.46.123.78 log.200.207.86.97 log.office log.76.160.70.144 log.200.207.168.216 log.office.old log.194.6.220.219 log.220.108.12.247 log.200.208.241.38 log.84.158.75.140 log.87.179.85.28 log.122.134.119.208 log.201.69.212.144 log.200.100.179.246 log.219.65.18.93 log.88.249.99.43 log.200.42.175.204 log.194.150.93.13.old log.600e_image log.190.48.240.34 log.nwg0056 log.12.208.233.107 log.194.111.161.42 log.194.150.207.12 log.tekila-78486565 log.nmbd.7.gz log.194.150.207.45 log.66.104.72.43 ... log.admin log.203.122.241.50 log.ecopy-e40856ef5 log.68.145.113.160 log.194.8.195.121 log.125.225.129.168 log.87.194.105.3 log.68.248.103.130 log.122.162.215.173 log.gans-server log.68.124.250.70 log.24.68.153.97 log.gans-server.old log.76.204.52.94 log.70.225.162.25 log.admin.old log.200.206.139.91 log.201.79.163.250 log.200.161.141.69 log.87.122.91.239 log.194.121.79.179 log.194.246.107.12 log.201.63.165.58 cores log.70.248.255.185 log.maciej log.fany-dhsi7eg25n log.86.122.132.21 |
#ls /var/log/samba/ -t | less
|
#ls /var/log/samba/ -t | less
|
#less /var/log/samba/log.violator
|
#tail -f /var/log/samba/log.violator
![]() Created internal pipe srvsvc (pipes_open=0) [2008/07/02 16:14:14, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) Opened pipe srvsvc with handle 760c (pipes_open=1) [2008/07/02 16:14:14, 3] smbd/process.c:process_smb(1110) Transaction 1780 of length 140 [2008/07/02 16:14:14, 3] smbd/process.c:switch_message(914) switch message SMBwriteX (pid 23746) conn 0x843bd90 [2008/07/02 16:14:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 513) - sec_ctx_stack_ndx = 0 [2008/07/02 16:14:14, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1264) ... [2008/07/02 16:14:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529) free_pipe_context: destroying talloc pool of size 142 [2008/07/02 16:14:14, 3] smbd/process.c:process_smb(1110) Transaction 1788 of length 132 [2008/07/02 16:14:14, 3] smbd/process.c:switch_message(914) switch message SMBtrans (pid 23746) conn 0x843bd90 [2008/07/02 16:14:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 513) - sec_ctx_stack_ndx = 0 [2008/07/02 16:14:14, 3] smbd/ipc.c:handle_trans(373) trans <\PIPE\> data=44 params=0 setup=2 |
#less /var/log/samba/log.violator
|
#less /etc/samba/smb.conf
|
#vi /etc/samba/vscan-clamav.conf
|
#ls /var/log/clamav/
![]() clamav.log clamav.log.1 freshclam.log freshclam.log.1 |
#ls /var/log/clamav/clamav.log
/var/log/clamav/clamav.log |
#less /var/log/clamav/clamav.log
|
#tail -f /var/log/clamav/clamav.log
![]() Wed Jul 2 12:30:20 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip.exe: Worm.Tenga.A FOUND Wed Jul 2 12:30:20 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip8070.exe: Worm.Tenga.A FOUND Wed Jul 2 12:30:26 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip8070.exe: Worm.Tenga.A FOUND Wed Jul 2 12:30:29 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip.exe: Worm.Tenga.A FOUND Wed Jul 2 12:30:31 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/unqip.exe: Worm.Tenga.A FOUND Wed Jul 2 12:30:44 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip8070.exe: Worm.Tenga.A FOUND Wed Jul 2 13:24:42 2008 -> SelfCheck: Database status OK. Wed Jul 2 14:27:23 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:02 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:10 2008 -> /home/samba/pub/chernjaev/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:42 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:50 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND |
#vi /etc/samba/vscan-clamav.conf
41c41 < quarantine directory = /tmp --- > quarantine directory = /home/samba/viruses |
#mkdir /home/samba/viruses
|
#/etc/init.d/samba
Stopping Samba daemons: nmbd smbd. Starting Samba daemons: nmbd smbd. |
#tail -f /var/log/clamav/clamav.log
![]() Wed Jul 2 12:30:44 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip8070.exe: Worm.Tenga.A FOUND Wed Jul 2 13:24:42 2008 -> SelfCheck: Database status OK. Wed Jul 2 14:27:23 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:02 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:10 2008 -> /home/samba/pub/chernjaev/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:42 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:50 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:38 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:39 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:39 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND |
#vi /etc/samba/vscan-clamav.conf
38c38 < infected file action = nothing --- > infected file action = quarantine |
#/etc/init.d/samba restart
Stopping Samba daemons: nmbd smbd. Starting Samba daemons: nmbd smbd. |
#tail -f /var/log/clamav/clamav.log
![]() Wed Jul 2 12:30:44 2008 -> /home/samba/pub/Kataev/5_Предложения/QIP/qip8070.exe: Worm.Tenga.A FOUND Wed Jul 2 13:24:42 2008 -> SelfCheck: Database status OK. Wed Jul 2 14:27:23 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:02 2008 -> SelfCheck: Database status OK. Wed Jul 2 16:06:10 2008 -> /home/samba/pub/chernjaev/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:42 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:18:50 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:38 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:39 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:21:39 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:22:38 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND Wed Jul 2 16:23:39 2008 -> /home/samba/pub/spywaredetector.exe: Worm.Tenga.A FOUND |
#ls /home/samba/viruses/
vir-V72gnD vir-wQdJfp |
#ls -l /home/samba/viruses/
итого 128 -rw-rw-rw- 1 root home 57856 2008-07-02 16:21 vir-V72gnD -rw-rw-rw- 1 root home 57856 2008-07-02 16:21 vir-wQdJfp |
#date
Срд Июл 2 16:24:22 UTC 2008 |
#tail -f /var/log/clamav/clamav.log
![]() Thu Jul 3 04:55:57 2008 -> /home/samba/pub/Kovtun/CD/Eckold/Dateien/Programme/PowerPoint97/VIEWER/PPVIEW32.EXE: Worm.Tenga.A FOUND Thu Jul 3 04:55:57 2008 -> /home/samba/pub/Kovtun/CD/Eckold/Dateien/Programme/PowerPoint97/SETUP/ACMSETUP.EXE: Worm.Tenga.A FOUND Thu Jul 3 04:55:58 2008 -> /home/samba/pub/Kovtun/CD/Eckold/Dateien/Programme/reader 4.0/Reader/AcroRd32.exe: Worm.Tenga.A FOUND Thu Jul 3 04:55:58 2008 -> /home/samba/pub/Kovtun/CD/Eckold/Dateien/Programme/Acrobat Reader 40/ar40deu.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:05 2008 -> /home/samba/pub/katya/server/Ðои докÑменÑÑ/ep428x21.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:05 2008 -> /home/samba/pub/katya/server/Ðои докÑменÑÑ/fe2000.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:06 2008 -> /home/samba/pub/katya/server/Ðои докÑменÑÑ/pcmcia100.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:06 2008 -> /home/samba/pub/katya/server/Ðои докÑменÑÑ/ep428x.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:06 2008 -> /home/samba/pub/katya/server/Ðои докÑменÑÑ/wg3059x.exe: Worm.Tenga.A FOUND Thu Jul 3 04:56:07 2008 -> /home/samba/pub/Ð tupDataAB.exe: Worm.Tenga.A FOUND Thu Jul 3 05:51:41 2008 -> SelfCheck: Database status OK. Thu Jul 3 06:23:04 2008 -> /home/samba/pub/Ð tupDataAB.exe: Worm.Tenga.A FOUND Thu Jul 3 06:52:01 2008 -> SelfCheck: Database status OK. Thu Jul 3 08:04:59 2008 -> SelfCheck: Database status OK. |
#ls /mnt/
![]() |
#apt-get install smbfs
![]() |
#ls /mnt/
![]() |
#apt-get install smbfs
![]() |
#smbclient -U admin -L 192.168.4.250
|
#tail -f /var/log/clamav/clamav.log
|
#tail -f /var/log/clamav/clamav.log
|
#tail -f /var/log/clamav/clamav.log
![]() Thu Jul 3 08:04:59 2008 -> SelfCheck: Database status OK. Thu Jul 3 09:08:24 2008 -> SelfCheck: Database status OK. Thu Jul 3 10:09:02 2008 -> SelfCheck: Database status OK. Thu Jul 3 11:20:14 2008 -> SelfCheck: Database status OK. Thu Jul 3 12:20:26 2008 -> SelfCheck: Database status OK. Thu Jul 3 13:27:02 2008 -> SelfCheck: Database status OK. Thu Jul 3 13:52:37 2008 -> /home/samba/pub/chernjaev/Станки/LiagTech_KatalogStanki_2007_Collect/LiagTech_stanki 2007.part01.exe: Worm.Tenga.A FOUND Thu Jul 3 13:52:38 2008 -> /home/samba/pub/chernjaev/лиаг вся продукцыя/GF/Start.exe: Worm.Tenga.A FOUND Thu Jul 3 13:52:38 2008 -> /home/samba/pub/chernjaev/лиаг вся продукцыя/RVT/start/AdbeRdr60_deu_full.exe: Worm.Tenga.A FOUND Thu Jul 3 13:52:45 2008 -> /home/samba/pub/Kovtun/CD/Станки и инструмент/Prinzing/DocStart.Exe: Worm.Tenga.A FOUND |
#arp -a
gw.liag.org.ua (194.150.93.83) at 00:16:3E:01:02:C2 [ether] on eth0 ? (192.168.4.129) at 00:1D:60:79:E4:CE [ether] on eth1.4092 ldap.liag.org.ua (194.150.93.85) at 00:16:3E:01:04:C1 [ether] on eth0 ? (192.168.4.36) at 00:18:F3:18:B8:0A [ether] on eth1.4092 ? (192.168.3.2) at 00:16:3E:01:01:C1 [ether] on eth0 |
#telnet 192.168.4.36 25
![]() Trying 192.168.4.36... telnet: Unable to connect to remote host: Connection refused |
#telnet 192.168.4.36 80
![]() Trying 192.168.4.36... telnet: Unable to connect to remote host: Connection refused |
#telnet 192.168.4.36 139
![]() Trying 192.168.4.36... Connected to 192.168.4.36. Escape character is '^]'. ls Connection closed by foreign host. |
#telnet 192.168.4.36 139
![]() Trying 192.168.4.36... Connected to 192.168.4.36. Escape character is '^]'. dir Connection closed by foreign host. |
#telnet 192.168.4.36 139
![]() Trying 192.168.4.36... Connected to 192.168.4.36. Escape character is '^]'. help Connection closed by foreign host. |
#clamscan -r -i --include='.*exe$' /home | tee infected-file
â â â /sbin â 4096âÐÑл 2 2008 17 2008 â LibClamAV Warning: *** Please update it as soon as possible. ***âââââââââââââââââ¼ââââââââââââââââââââââââââââââââââââââââ¼ â/.. âhome â LibClamAV Warning: **************************************************âââââââââââââââââââââââââââââââââââââââââââââââââââââââââ СовеÑ: ÐÑли Ð²Ð°Ñ ÑеÑминал без ÑÑнкÑ. клавиÑ, вам Ð¿Ð¾Ð¼Ð¾Ð¶ÐµÑ ESC + ÑиÑÑа. # [^] 1ÐомоÑÑ 2ÐÐµÐ½Ñ 3ÐÑоÑмоÑ4ÐÑавка 5ÐÐ¾Ð¿Ð¸Ñ 6ÐеÑемеÑ7ÐвÐÑлог8УдалиÑÑ9ÐенÑMC 10ÐÑÑ Ð¾Ð´ ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5665 Scanned files: 45 Infected files: 0 Data scanned: 208.15 MB Time: 92.782 sec (1 m 32 s) |
#clamscan -r -i --include='.*exe$' /home | tee infected-files2
LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5665 Scanned files: 45 Infected files: 0 Data scanned: 208.15 MB Time: 90.587 sec (1 m 30 s) |
#ping 192.168.129.2
![]() Left File Command Options Right PING 192.168.129.2 (192.168.129.2) 56(84) bytes of data. --- 192.168.129.2 ping statistics --- 8 packets transmitted, 0 received, 100% packet loss, time 7009ms Hint: Want to do complex searches? Use the External Panelize command. |
#ping 192.168.129.2
![]() PING 192.168.129.2 (192.168.129.2) 56(84) bytes of data. From 194.150.93.89 icmp_seq=88 Time to live exceeded --- 192.168.129.2 ping statistics --- 143 packets transmitted, 0 received, +1 errors, 100% packet loss, time 142016ms |
#ping 192.168.129.2
![]() |
#tail -f /var/log/clamav/
![]() clamav.log clamav.log.2.gz freshclam.log.1 clamav.log.1 freshclam.log freshclam.log.2.gz |
#tail -f /var/log/clamav/clamav.log
![]() Tue Jul 8 05:33:56 2008 -> /home/samba/pub/БУХ/Pandion/Pandion.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Pandion/Uninstall.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/frame.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/Tools/scr56en.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:58 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/UNWISE.EXE: Worm.Tenga.A FOUND Tue Jul 8 05:33:59 2008 -> /home/samba/pub/Kovtun/CD/Станки и инструмент/Prinzing/DocStart.Exe: Worm.Tenga.A FOUND Tue Jul 8 05:49:12 2008 -> SelfCheck: Database status OK. Tue Jul 8 06:49:41 2008 -> SelfCheck: Database status OK. Tue Jul 8 07:53:51 2008 -> SelfCheck: Database status OK. Tue Jul 8 08:58:39 2008 -> SelfCheck: Database status OK. |
#ping 192.168.129.2
PING 192.168.129.2 (192.168.129.2) 56(84) bytes of data. 64 bytes from 192.168.129.2: icmp_seq=1 ttl=126 time=133 ms 64 bytes from 192.168.129.2: icmp_seq=2 ttl=126 time=153 ms --- 192.168.129.2 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 133.903/143.694/153.485/9.791 ms |
#tail -f /var/log/clamav/clamav.log
Tue Jul 8 05:33:56 2008 -> /home/samba/pub/БУХ/Pandion/Pandion.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Pandion/Uninstall.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/frame.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:57 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/Tools/scr56en.exe: Worm.Tenga.A FOUND Tue Jul 8 05:33:58 2008 -> /home/samba/pub/БУХ/Infodisk/Laws/BUH/UNWISE.EXE: Worm.Tenga.A FOUND Tue Jul 8 05:33:59 2008 -> /home/samba/pub/Kovtun/CD/Станки и инструмент/Prinzing/DocStart.Exe: Worm.Tenga.A FOUND Tue Jul 8 05:49:12 2008 -> SelfCheck: Database status OK. Tue Jul 8 06:49:41 2008 -> SelfCheck: Database status OK. Tue Jul 8 07:53:51 2008 -> SelfCheck: Database status OK. Tue Jul 8 08:58:39 2008 -> SelfCheck: Database status OK. |
#mc
|
#clamscan -r -i --include='.*exe$' /home/ | tee infected-files
exit LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5694 Scanned files: 47 Infected files: 0 Data scanned: 209.37 MB Time: 98.830 sec (1 m 38 s) |
#tail -f /var/log/clamav/clamav.log
![]() Tue Jul 8 05:33:59 2008 -> /home/samba/pub/Kovtun/CD/Станки и инструмент/Prinzing/DocStart.Exe: Worm.Tenga.A FOUND Tue Jul 8 05:49:12 2008 -> SelfCheck: Database status OK. Tue Jul 8 06:49:41 2008 -> SelfCheck: Database status OK. Tue Jul 8 07:53:51 2008 -> SelfCheck: Database status OK. Tue Jul 8 08:58:39 2008 -> SelfCheck: Database status OK. Tue Jul 8 10:10:12 2008 -> SelfCheck: Database status OK. Tue Jul 8 11:14:46 2008 -> SelfCheck: Database status OK. Tue Jul 8 12:29:02 2008 -> SelfCheck: Database status OK. Tue Jul 8 13:31:09 2008 -> SelfCheck: Database status OK. Wed Jul 9 04:47:11 2008 -> SelfCheck: Database status OK. |
#clamscan -r -i --include='.*exe$' /home/ | tee infected-files
LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5688 Scanned files: 47 Infected files: 0 Data scanned: 209.37 MB Time: 100.742 sec (1 m 40 s) |
#clamscan -r -i --include='.*exe$' /home/ | tee infected-files
LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5691 Scanned files: 47 Infected files: 0 Data scanned: 209.37 MB Time: 94.226 sec (1 m 34 s) |
#tail -f /var/log/clamav/clamav.log
![]() # ââââââââââââââââ â 1ÐWed Jul 9 05:50:46 2008 -> SelfCheck: Database status OK.еÑемÐеÑемеÑ7ÐвÐÑлог8УдалиÑÑ9ÐенÑMC 10ÐÑÑ Ð¾Ð´ Wed Jul 9 06:50:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 07:56:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 08:57:08 2008 -> SelfCheck: Database status OK. Wed Jul 9 09:57:14 2008 -> SelfCheck: Database status OK. Wed Jul 9 11:02:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 12:04:22 2008 -> SelfCheck: Database status OK. Wed Jul 9 13:04:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 14:09:39 2008 -> SelfCheck: Database status OK. Wed Jul 9 15:25:42 2008 -> SelfCheck: Database status OK. |
#clamscan -r -i --include='.*exe$' /home/ | tee infected-files
LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: ************************************************** ----------- SCAN SUMMARY ----------- Known viruses: 306247 Engine version: 0.93.1 Scanned directories: 5691 Scanned files: 47 Infected files: 0 Data scanned: 209.37 MB Time: 91.444 sec (1 m 31 s) |
#tail -f /var/log/clamav/clamav.log
![]() Wed Jul 9 05:50:46 2008 -> SelfCheck: Database status OK. Wed Jul 9 06:50:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 07:56:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 08:57:08 2008 -> SelfCheck: Database status OK. Wed Jul 9 09:57:14 2008 -> SelfCheck: Database status OK. Wed Jul 9 11:02:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 12:04:22 2008 -> SelfCheck: Database status OK. Wed Jul 9 13:04:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 14:09:39 2008 -> SelfCheck: Database status OK. Wed Jul 9 15:25:42 2008 -> SelfCheck: Database status OK. |
#tail -f /var/log/clamav/clamav.log
![]() Wed Jul 9 06:50:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 07:56:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 08:57:08 2008 -> SelfCheck: Database status OK. Wed Jul 9 09:57:14 2008 -> SelfCheck: Database status OK. Wed Jul 9 11:02:58 2008 -> SelfCheck: Database status OK. Wed Jul 9 12:04:22 2008 -> SelfCheck: Database status OK. Wed Jul 9 13:04:47 2008 -> SelfCheck: Database status OK. Wed Jul 9 14:09:39 2008 -> SelfCheck: Database status OK. Wed Jul 9 15:25:42 2008 -> SelfCheck: Database status OK. Thu Jul 10 04:43:48 2008 -> SelfCheck: Database status OK. |
#vim /var/log/clamav/clamav.log
|
#ping 192.168.129.2
64 bytes from 192.168.129.2: icmp_seq=97 ttl=126 time=41417 ms 64 bytes from 192.168.129.2: icmp_seq=98 ttl=126 time=40416 ms 64 bytes from 192.168.129.2: icmp_seq=99 ttl=126 time=39416 ms 64 bytes from 192.168.129.2: icmp_seq=100 ttl=126 time=38416 ms 64 bytes from 192.168.129.2: icmp_seq=101 ttl=126 time=37416 ms 64 bytes from 192.168.129.2: icmp_seq=102 ttl=126 time=36416 ms 64 bytes from 192.168.129.2: icmp_seq=103 ttl=126 time=35416 ms 64 bytes from 192.168.129.2: icmp_seq=104 ttl=126 time=34416 ms 64 bytes from 192.168.129.2: icmp_seq=105 ttl=126 time=33456 ms 64 bytes from 192.168.129.2: icmp_seq=106 ttl=126 time=32456 ms ... 64 bytes from 192.168.129.2: icmp_seq=235 ttl=126 time=119 ms 64 bytes from 192.168.129.2: icmp_seq=236 ttl=126 time=117 ms 64 bytes from 192.168.129.2: icmp_seq=237 ttl=126 time=118 ms 64 bytes from 192.168.129.2: icmp_seq=238 ttl=126 time=118 ms 64 bytes from 192.168.129.2: icmp_seq=239 ttl=126 time=177 ms 64 bytes from 192.168.129.2: icmp_seq=240 ttl=126 time=117 ms 64 bytes from 192.168.129.2: icmp_seq=241 ttl=126 time=117 ms --- 192.168.129.2 ping statistics --- 241 packets transmitted, 174 received, +1 errors, 27% packet loss, time 240029ms rtt min/avg/max/mdev = 114.188/14528.567/70216.094/21691.019 ms, pipe 71 |
#fsck -a
![]() fsck 1.40-WIP (14-Nov-2006) /dev/hda1 is mounted. WARNING!!! Running e2fsck on a mounted filesystem may cause SEVERE filesystem damage. Do you really want to continue (y/n)? no check aborted. fsck.ext3: No such file or directory while trying to open /dev/hda2 /dev/hda2: The superblock could not be read or does not describe a correct ext2 filesystem. If the device is valid and it really contains an ext2 filesystem (and not swap or ufs or something else), then the superblock is corrupt, and you might try running e2fsck with an alternate superblock: e2fsck -b 8193 <device> |
#fsck /dev/hda2
![]() fsck 1.40-WIP (14-Nov-2006) e2fsck 1.40-WIP (14-Nov-2006) fsck.ext3: No such file or directory while trying to open /dev/hda2 The superblock could not be read or does not describe a correct ext2 filesystem. If the device is valid and it really contains an ext2 filesystem (and not swap or ufs or something else), then the superblock is corrupt, and you might try running e2fsck with an alternate superblock: e2fsck -b 8193 <device> |
#uptime
11:31:40 up 27 min, 0 users, load average: 0.00, 0.00, 0.00 |
#reboot
|
#ifconfig eth1.4092
eth1.4092 Link encap:Ethernet HWaddr 00:16:3E:01:07:C2 inet addr:192.168.4.253 Bcast:192.168.4.255 Mask:255.255.255.0 inet6 addr: fe80::216:3eff:fe01:7c2/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:8376495 errors:0 dropped:0 overruns:0 frame:0 TX packets:16660 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:876267354 (835.6 MiB) TX bytes:1244543 (1.1 MiB) |
#a
![]() bash: a: command not found |
#top
![]() top - 11:46:44 up 14 min, 1 user, load average: 0.91, 0.75, 0.45 Tasks: 37 total, 2 running, 35 sleeping, 0 stopped, 0 zombie Cpu(s): 45.3%us, 33.0%sy, 0.0%ni, 4.7%id, 2.0%wa, 0.3%hi, 13.0%si, 1.7%st Mem: 262292k total, 119284k used, 143008k free, 7768k buffers PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND Swap: 0k total, 0k used, 0k free, 47276k cached 1511 root 25 0 18116 13m 12m R 91.0 5.2 7:27.46 nmbd 1 root 15 0 2160 716 612 S 0.0 0.3 0:00.07 init 2 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/0 3 root 34 19 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0 ... 7 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 xenwatch 8 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 xenbus 16 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 kblockd/0 18 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 kseriod 59 root 25 0 0 0 0 S 0.0 0.0 0:00.00 pdflush 60 root 15 0 0 0 0 S 0.0 0.0 0:00.01 pdflush 61 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 kswapd0 62 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 aio/0 702 root 10 -5 0 0 0 S 0.0 0.0 0:00.10 kjournald 957 root 13 -5 0 0 0 S 0.0 0.0 0:00.00 kmirrord |
#apt-get install arping
![]() Чтение списков пакетов... Готово Построение дерева зависимостей... Готово Будут установлены следующие дополнительные пакеты: libnet1 НОВЫЕ пакеты, которые будут установлены: arping libnet1 обновлено 0, установлено 2 новых пакетов, для удаления отмечено 0 пакетов, и 25 пакетов не обновлено. Необходимо скачать 71,1kБ архивов. После распаковки объем занятого дискового пространства возрастёт на 217kB. Хотите продолжить [Д/н]? y Err http://debian.org.ua etch/main libnet1 1.1.2.1-2 Временная ошибка при попытке получить IP адрес 'debian.org.ua' Err http://debian.org.ua etch/main arping 2.05-2 Временная ошибка при попытке получить IP адрес 'debian.org.ua' Не удалось загрузить http://debian.org.ua/debian/pool/main/libn/libnet/libnet1_1.1.2.1-2_i386.deb Временная ошибка при попытке получить IP адрес 'debian.org.ua' Не удалось загрузить http://debian.org.ua/debian/pool/main/a/arping/arping_2.05-2_i386.deb Временная ошибка при попытке получить IP адрес 'debian.org.ua' E: Невозможно загрузить некоторые архивы, вероятно надо запустить apt-get update или попытаться повторить запуск с ключом --fix-missing |
#]~
![]() bash: ]~: command not found |
#ps aux | grep l3
root 1584 0.1 2.4 9624 6372 ? Ss 11:34 0:01 l3-agent root 1856 0.0 0.3 3156 788 ttyp0 S+ 11:53 0:00 grep l3 |
#/etc/init.d/samba stop
Stopping Samba daemons: nmbd smbd. |
#top
![]() top - 11:56:13 up 24 min, 1 user, load average: 0.08, 0.35, 0.41 Tasks: 34 total, 1 running, 33 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.0%sy, 0.0%ni, 94.0%id, 0.0%wa, 0.0%hi, 0.0%si, 6.0%st Mem: 262292k total, 136872k used, 125420k free, 11340k buffers PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND Swap: 0k total, 0k used, 0k free, 63000k cached 1 root 15 0 2160 716 612 S 0.0 0.3 0:00.07 init 2 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/0 3 root 39 19 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0 4 root 10 -5 0 0 0 S 0.0 0.0 0:00.03 events/0 ... 8 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 xenbus 16 root 18 -5 0 0 0 S 0.0 0.0 0:00.00 kblockd/0 18 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 kseriod 59 root 25 0 0 0 0 S 0.0 0.0 0:00.00 pdflush 60 root 15 0 0 0 0 S 0.0 0.0 0:00.01 pdflush 61 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 kswapd0 62 root 20 -5 0 0 0 S 0.0 0.0 0:00.00 aio/0 702 root 10 -5 0 0 0 S 0.0 0.0 0:00.12 kjournald 957 root 13 -5 0 0 0 S 0.0 0.0 0:00.00 kmirrord 983 root 11 -5 0 0 0 S 0.0 0.0 0:00.00 kjournald |
#tail /var/log/samba/
![]() Display all 1456 possibilities? (y or n) cores/ log.222.236.47.11 log. log.222.253.255.98 log.Ã_Ã_Ã_Ã_Ã_ log.222.89.103.155 log.Ð_Ð_Ð_Ð_Ð_ log.24.207.7.119 log.Ã_Ã_Ã_Ã_Ã_Ã_Ã_Ã_Ã_ log.24.233.130.193 log.Ð_Ð_Ð_Ð_Ð_Ð_Ð_Ð_Ð_ log.24.66.63.244 log.0.0.0.0 log.24.67.109.231 log.0.0.0.0.old log.24.68.153.97 log.116.45.46.57 log.24.70.104.202 ... log.122.125.141.207 log.59.115.153.99 log.122.134.119.208 log.59.115.195.75 log.122.160.1.28 log.59.116.14.170 log.122.160.21.206 log.59.116.7.65 log.122.16.118.30 log.59.117.142.154 log.122.162.171.14 log.59.125.250.167 log.122.162.213.37 log.59.125.6.241 log.122.162.215.173 log.59.162.187.118 log.122.162.249.72 log.59.162.209.197 log.122.162.99.212 log.59.35.168.156 |
#tail /var/log/daemon.log
Jul 11 14:38:22 samba last message repeated 3 times Jul 11 14:39:22 samba last message repeated 3 times Jul 11 14:40:22 samba last message repeated 3 times Jul 11 14:41:22 samba last message repeated 3 times Jul 11 14:42:22 samba last message repeated 3 times Jul 11 14:43:22 samba last message repeated 3 times Jul 11 14:44:22 samba last message repeated 3 times Jul 11 14:45:22 samba last message repeated 3 times Jul 11 14:46:22 samba last message repeated 3 times Jul 11 14:47:22 samba last message repeated 3 times |
#tail /var/og/da
![]() tail: невозможно открыть `/var/og/da' для чтения: Нет такого файла или каталога |
#t
![]() bash: t: command not found |
#ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:3E:01:07:C1 inet addr:194.150.93.88 Bcast:194.150.93.95 Mask:255.255.255.240 inet6 addr: fe80::216:3eff:fe01:7c1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:374 errors:0 dropped:0 overruns:0 frame:0 TX packets:313 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:30554 (29.8 KiB) TX bytes:56321 (55.0 KiB) eth0:0 Link encap:Ethernet HWaddr 00:16:3E:01:07:C1 inet addr:192.168.3.8 Bcast:192.168.3.255 Mask:255.255.255.0 ... collisions:0 txqueuelen:0 RX bytes:8655 (8.4 KiB) TX bytes:5016 (4.8 KiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:37 errors:0 dropped:0 overruns:0 frame:0 TX packets:37 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:3440 (3.3 KiB) TX bytes:3440 (3.3 KiB) |
#route -n
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 194.150.93.80 0.0.0.0 255.255.255.240 U 0 0 0 eth0 192.168.6.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1.4090 192.168.5.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1.4091 192.168.4.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1.4092 192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 0.0.0.0 194.150.93.83 0.0.0.0 UG 0 0 0 eth0 |
#ping 194.150.93.83
PING 194.150.93.83 (194.150.93.83) 56(84) bytes of data. 64 bytes from 194.150.93.83: icmp_seq=1 ttl=64 time=0.269 ms 64 bytes from 194.150.93.83: icmp_seq=2 ttl=64 time=0.230 ms --- 194.150.93.83 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 999ms rtt min/avg/max/mdev = 0.230/0.249/0.269/0.025 ms |
#ping 192.168.4.129
PING 192.168.4.129 (192.168.4.129) 56(84) bytes of data. 64 bytes from 192.168.4.129: icmp_seq=1 ttl=64 time=2.79 ms 64 bytes from 192.168.4.129: icmp_seq=2 ttl=64 time=0.262 ms --- 192.168.4.129 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms rtt min/avg/max/mdev = 0.262/1.530/2.799/1.269 ms |
#tail -f /var/log/daemon.log
![]() Jul 11 14:38:22 samba last message repeated 3 times Jul 11 14:39:22 samba last message repeated 3 times Jul 11 14:40:22 samba last message repeated 3 times Jul 11 14:41:22 samba last message repeated 3 times Jul 11 14:42:22 samba last message repeated 3 times Jul 11 14:43:22 samba last message repeated 3 times Jul 11 14:44:22 samba last message repeated 3 times Jul 11 14:45:22 samba last message repeated 3 times Jul 11 14:46:22 samba last message repeated 3 times Jul 11 14:47:22 samba last message repeated 3 times |
#less /var/log/daemon.log
|
#cat /var/log/daemon.log
Jul 6 20:00:45 samba last message repeated 3 times Jul 6 20:01:45 samba last message repeated 3 times Jul 6 20:02:45 samba last message repeated 3 times Jul 6 20:03:45 samba last message repeated 3 times Jul 6 20:04:45 samba last message repeated 3 times Jul 6 20:05:45 samba last message repeated 3 times Jul 6 20:06:45 samba last message repeated 3 times Jul 6 20:07:45 samba last message repeated 3 times Jul 6 20:08:45 samba last message repeated 3 times Jul 6 20:09:45 samba last message repeated 3 times ... Jul 6 22:19:46 samba last message repeated 3 times Jul 6 22:20:46 samba last message repeated 3 times Jul 6 22:21:46 samba last message repeated 3 times Jul 6 22:22:46 samba last message repeated 3 times Jul 6 22:23:46 samba last message repeated 3 times Jul 6 22:24:46 samba last message repeated 3 times Jul 6 22:25:46 samba last message repeated 3 times Jul 6 22:26:46 samba last message repeated 3 times Jul 6 22:27:46 samba last message repeated 3 times Jul 6 22:28:46 samba last message repeated 3 times |
#/etc/init.d/snmpd stop
Stopping network management services: snmpd snmptrapd. |
#host google.ru
![]() Nameserver not responding google.ru A record not found, try again |
#host ya.ru
ya.ru A 213.180.204.8 |
#host google.kz
![]() Nameserver not responding google.kz A record not found, try again |
#ps aux | grep smbd
root 1513 0.0 1.2 10292 3264 ? Ss 11:40 0:00 /usr/sbin/smbd -D root 1578 0.0 0.5 10292 1528 ? S 11:42 0:00 /usr/sbin/smbd -D root 1761 0.0 0.2 3156 784 ttyp0 S+ 11:54 0:00 grep smbd |
#tail -f /var/log/daemon.log
![]() Jul 11 14:38:22 samba last message repeated 3 times Jul 11 14:39:22 samba last message repeated 3 times Jul 11 14:40:22 samba last message repeated 3 times Jul 11 14:41:22 samba last message repeated 3 times Jul 11 14:42:22 samba last message repeated 3 times Jul 11 14:43:22 samba last message repeated 3 times Jul 11 14:44:22 samba last message repeated 3 times Jul 11 14:45:22 samba last message repeated 3 times Jul 11 14:46:22 samba last message repeated 3 times Jul 11 14:47:22 samba last message repeated 3 times |
#tail -f /var/log/samba/log.sm
![]() log.smart1 log.smbd.1.gz log.smbd.4.gz log.smbd.7.gz log.smart1.old log.smbd.2.gz log.smbd.5.gz log.smbd.old log.smbd log.smbd.3.gz log.smbd.6.gz log.smbmount |
#tail -f /var/log/samba/log.sm
![]() log.smart1 log.smbd.1.gz log.smbd.4.gz log.smbd.7.gz log.smart1.old log.smbd.2.gz log.smbd.5.gz log.smbd.old log.smbd log.smbd.3.gz log.smbd.6.gz log.smbmount |
Jul 6 20:00:45 samba last message repeated 3 times Jul 6 20:01:45 samba last message repeated 3 times Jul 6 20:02:45 samba last message repeated 3 times Jul 6 20:03:45 samba last message repeated 3 times Jul 6 20:04:45 samba last message repeated 3 times Jul 6 20:05:45 samba last message repeated 3 times Jul 6 20:06:45 samba last message repeated 3 times Jul 6 20:07:45 samba last message repeated 3 times Jul 6 20:08:45 samba last message repeated 3 times Jul 6 20:09:45 samba last message repeated 3 times Jul 6 20:10:45 samba last message repeated 3 times Jul 6 20:11:45 samba last message repeated 3 times Jul 6 20:12:45 samba last message repeated 3 times Jul 6 20:13:45 samba last message repeated 3 times Jul 6 20:14:45 samba last message repeated 3 times Jul 6 20:15:45 samba last message repeated 3 times Jul 6 20:16:46 samba last message repeated 3 times Jul 6 20:17:46 samba last message repeated 3 times Jul 6 20:18:46 samba last message repeated 3 times Jul 6 20:19:46 samba last message repeated 3 times Jul 6 20:20:46 samba last message repeated 3 times Jul 6 20:21:46 samba last message repeated 3 times Jul 6 20:22:46 samba last message repeated 3 times Jul 6 20:23:46 samba last message repeated 3 times Jul 6 20:24:46 samba last message repeated 3 times Jul 6 20:25:46 samba last message repeated 3 times Jul 6 20:26:46 samba last message repeated 3 times Jul 6 20:27:46 samba last message repeated 3 times Jul 6 20:28:46 samba last message repeated 3 times Jul 6 20:29:46 samba last message repeated 3 times Jul 6 20:30:46 samba last message repeated 3 times Jul 6 20:31:46 samba last message repeated 3 times Jul 6 20:32:46 samba last message repeated 3 times Jul 6 20:33:46 samba last message repeated 3 times Jul 6 20:34:46 samba last message repeated 3 times Jul 6 20:35:46 samba last message repeated 3 times Jul 6 20:36:46 samba last message repeated 3 times Jul 6 20:37:46 samba last message repeated 3 times Jul 6 20:38:46 samba last message repeated 3 times Jul 6 20:39:46 samba last message repeated 3 times Jul 6 20:40:46 samba last message repeated 3 times Jul 6 20:41:46 samba last message repeated 3 times Jul 6 20:42:46 samba last message repeated 3 times Jul 6 20:43:46 samba last message repeated 3 times Jul 6 20:44:46 samba last message repeated 3 times Jul 6 20:45:46 samba last message repeated 3 times Jul 6 20:46:46 samba last message repeated 3 times Jul 6 20:47:46 samba last message repeated 3 times Jul 6 20:48:46 samba last message repeated 3 times Jul 6 20:49:46 samba last message repeated 3 times Jul 6 20:50:46 samba last message repeated 3 times Jul 6 20:51:46 samba last message repeated 3 times Jul 6 20:52:46 samba last message repeated 3 times Jul 6 20:53:46 samba last message repeated 3 times Jul 6 20:54:46 samba last message repeated 3 times Jul 6 20:55:46 samba last message repeated 3 times Jul 6 20:56:46 samba last message repeated 3 times Jul 6 20:57:46 samba last message repeated 3 times Jul 6 20:58:46 samba last message repeated 3 times Jul 6 20:59:46 samba last message repeated 3 times Jul 6 21:00:46 samba last message repeated 3 times Jul 6 21:01:46 samba last message repeated 3 times Jul 6 21:02:46 samba last message repeated 3 times Jul 6 21:03:46 samba last message repeated 3 times Jul 6 21:04:46 samba last message repeated 3 times Jul 6 21:05:46 samba last message repeated 3 times Jul 6 21:06:46 samba last message repeated 3 times Jul 6 21:07:46 samba last message repeated 3 times Jul 6 21:08:46 samba last message repeated 3 times Jul 6 21:09:46 samba last message repeated 3 times Jul 6 21:10:46 samba last message repeated 3 times Jul 6 21:11:46 samba last message repeated 3 times Jul 6 21:12:46 samba last message repeated 3 times Jul 6 21:13:46 samba last message repeated 3 times Jul 6 21:14:46 samba last message repeated 3 times Jul 6 21:15:46 samba last message repeated 3 times Jul 6 21:16:46 samba last message repeated 3 times Jul 6 21:17:46 samba last message repeated 3 times Jul 6 21:18:46 samba last message repeated 3 times Jul 6 21:19:46 samba last message repeated 3 times Jul 6 21:20:46 samba last message repeated 3 times Jul 6 21:21:46 samba last message repeated 3 times Jul 6 21:22:46 samba last message repeated 3 times Jul 6 21:23:46 samba last message repeated 3 times Jul 6 21:24:46 samba last message repeated 3 times Jul 6 21:25:46 samba last message repeated 3 times Jul 6 21:26:46 samba last message repeated 3 times Jul 6 21:27:46 samba last message repeated 3 times Jul 6 21:28:46 samba last message repeated 3 times Jul 6 21:29:46 samba last message repeated 3 times Jul 6 21:30:46 samba last message repeated 3 times Jul 6 21:31:46 samba last message repeated 3 times Jul 6 21:32:46 samba last message repeated 3 times Jul 6 21:33:46 samba last message repeated 3 times Jul 6 21:34:46 samba last message repeated 3 times Jul 6 21:35:46 samba last message repeated 3 times Jul 6 21:36:46 samba last message repeated 3 times Jul 6 21:37:46 samba last message repeated 3 times Jul 6 21:38:46 samba last message repeated 3 times Jul 6 21:39:46 samba last message repeated 3 times Jul 6 21:40:46 samba last message repeated 3 times Jul 6 21:41:46 samba last message repeated 3 times Jul 6 21:42:46 samba last message repeated 3 times Jul 6 21:43:46 samba last message repeated 3 times Jul 6 21:44:46 samba last message repeated 3 times Jul 6 21:45:46 samba last message repeated 3 times Jul 6 21:46:46 samba last message repeated 3 times Jul 6 21:47:46 samba last message repeated 3 times Jul 6 21:48:46 samba last message repeated 3 times Jul 6 21:49:46 samba last message repeated 3 times Jul 6 21:50:46 samba last message repeated 3 times Jul 6 21:51:46 samba last message repeated 3 times Jul 6 21:52:46 samba last message repeated 3 times Jul 6 21:53:46 samba last message repeated 3 times Jul 6 21:54:46 samba last message repeated 3 times Jul 6 21:55:46 samba last message repeated 3 times Jul 6 21:56:46 samba last message repeated 3 times Jul 6 21:57:46 samba last message repeated 3 times Jul 6 21:58:46 samba last message repeated 3 times Jul 6 21:59:46 samba last message repeated 3 times Jul 6 22:00:46 samba last message repeated 3 times Jul 6 22:01:46 samba last message repeated 3 times Jul 6 22:02:46 samba last message repeated 3 times Jul 6 22:03:46 samba last message repeated 3 times Jul 6 22:04:46 samba last message repeated 3 times Jul 6 22:05:46 samba last message repeated 3 times Jul 6 22:06:46 samba last message repeated 3 times Jul 6 22:07:46 samba last message repeated 3 times Jul 6 22:08:46 samba last message repeated 3 times Jul 6 22:09:46 samba last message repeated 3 times Jul 6 22:10:46 samba last message repeated 3 times Jul 6 22:11:46 samba last message repeated 3 times Jul 6 22:12:46 samba last message repeated 3 times Jul 6 22:13:46 samba last message repeated 3 times Jul 6 22:14:46 samba last message repeated 3 times Jul 6 22:15:46 samba last message repeated 3 times Jul 6 22:16:46 samba last message repeated 3 times Jul 6 22:17:46 samba last message repeated 3 times Jul 6 22:18:46 samba last message repeated 3 times Jul 6 22:19:46 samba last message repeated 3 times Jul 6 22:20:46 samba last message repeated 3 times Jul 6 22:21:46 samba last message repeated 3 times Jul 6 22:22:46 samba last message repeated 3 times Jul 6 22:23:46 samba last message repeated 3 times Jul 6 22:24:46 samba last message repeated 3 times Jul 6 22:25:46 samba last message repeated 3 times Jul 6 22:26:46 samba last message repeated 3 times Jul 6 22:27:46 samba last message repeated 3 times Jul 6 22:28:46 samba last message repeated 3 times
Время первой команды журнала | 18:56:27 2008- 7- 2 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Время последней команды журнала | 14:54:17 2008- 7-16 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в журнале | 101 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент команд с ненулевым кодом завершения, % | 17.82 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Процент синтаксически неверно набранных команд, % | 2.97 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Суммарное время работы с терминалом *, час | 2.24 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Количество командных строк в единицу времени, команда/мин | 0.75 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Частота использования команд |
|
В журнал автоматически попадают все команды, данные в любом терминале системы.
Для того чтобы убедиться, что журнал на текущем терминале ведётся, и команды записываются, дайте команду w. В поле WHAT, соответствующем текущему терминалу, должна быть указана программа script.
Команды, при наборе которых были допущены синтаксические ошибки, выводятся перечёркнутым текстом:
$ l s-l bash: l: command not found |
Если код завершения команды равен нулю, команда была выполнена без ошибок. Команды, код завершения которых отличен от нуля, выделяются цветом.
$ test 5 -lt 4 |
Команды, ход выполнения которых был прерван пользователем, выделяются цветом.
$ find / -name abc find: /home/devi-orig/.gnome2: Keine Berechtigung find: /home/devi-orig/.gnome2_private: Keine Berechtigung find: /home/devi-orig/.nautilus/metafiles: Keine Berechtigung find: /home/devi-orig/.metacity: Keine Berechtigung find: /home/devi-orig/.inkscape: Keine Berechtigung ^C |
Команды, выполненные с привилегиями суперпользователя, выделяются слева красной чертой.
# id uid=0(root) gid=0(root) Gruppen=0(root) |
Изменения, внесённые в текстовый файл с помощью редактора, запоминаются и показываются в журнале в формате ed. Строки, начинающиеся символом "<", удалены, а строки, начинающиеся символом ">" -- добавлены.
$ vi ~/.bashrc
|
Для того чтобы изменить файл в соответствии с показанными в диффшоте изменениями, можно воспользоваться командой patch. Нужно скопировать изменения, запустить программу patch, указав в качестве её аргумента файл, к которому применяются изменения, и всавить скопированный текст:
$ patch ~/.bashrc |
Для того чтобы получить краткую справочную информацию о команде, нужно подвести к ней мышь. Во всплывающей подсказке появится краткое описание команды.
Если справочная информация о команде есть, команда выделяется голубым фоном, например: vi. Если справочная информация отсутствует, команда выделяется розовым фоном, например: notepad.exe. Справочная информация может отсутствовать в том случае, если (1) команда введена неверно; (2) если распознавание команды LiLaLo выполнено неверно; (3) если информация о команде неизвестна LiLaLo. Последнее возможно для редких команд.
Большие, в особенности многострочные, всплывающие подсказки лучше всего показываются браузерами KDE Konqueror, Apple Safari и Microsoft Internet Explorer. В браузерах Mozilla и Firefox они отображаются не полностью, а вместо перевода строки выводится специальный символ.
Время ввода команды, показанное в журнале, соответствует времени начала ввода командной строки, которое равно тому моменту, когда на терминале появилось приглашение интерпретатора
Имя терминала, на котором была введена команда, показано в специальном блоке. Этот блок показывается только в том случае, если терминал текущей команды отличается от терминала предыдущей.
Вывод не интересующих вас в настоящий момент элементов журнала, таких как время, имя терминала и других, можно отключить. Для этого нужно воспользоваться формой управления журналом вверху страницы.
Небольшие комментарии к командам можно вставлять прямо из командной строки. Комментарий вводится прямо в командную строку, после символов #^ или #v. Символы ^ и v показывают направление выбора команды, к которой относится комментарий: ^ - к предыдущей, v - к следующей. Например, если в командной строке было введено:
$ whoami
user
$ #^ Интересно, кто я?в журнале это будет выглядеть так:
$ whoami
user
Интересно, кто я? |
Если комментарий содержит несколько строк, его можно вставить в журнал следующим образом:
$ whoami
user
$ cat > /dev/null #^ Интересно, кто я?
Программа whoami выводит имя пользователя, под которым мы зарегистрировались в системе. - Она не может ответить на вопрос о нашем назначении в этом мире.В журнале это будет выглядеть так:
$ whoami user
|
Комментарии, не относящиеся непосредственно ни к какой из команд, добавляются точно таким же способом, только вместо симолов #^ или #v нужно использовать символы #=
1 2 3 4Группы команд, выполненных на разных терминалах, разделяются специальной линией. Под этой линией в правом углу показано имя терминала, на котором выполнялись команды. Для того чтобы посмотреть команды только одного сенса, нужно щёкнуть по этому названию.
LiLaLo (L3) расшифровывается как Live Lab Log.
Программа разработана для повышения эффективности обучения Unix/Linux-системам.
(c) Игорь Чубин, 2004-2008