| 1062 | === Results of Step 2 from 2012-08-15 === |
| 1063 | |
| 1064 | A list of processes that are listening: |
| 1065 | |
| 1066 | {{{ |
| 1067 | [11:20:57] jbs@bbn-w1:/home/jbs |
| 1068 | +$ sudo netstat -anp | egrep ':\*.+LISTEN' | egrep -v '(127.0.0.1|192.168.103.10|10.100.0.1|10.103.0.1)' > netstat-raw.txt |
| 1069 | |
| 1070 | [11:21:22] jbs@bbn-w1:/home/jbs |
| 1071 | +$ cat netstat-raw.txt |
| 1072 | tcp 0 0 0.0.0.0:8139 0.0.0.0:* LISTEN 2572/ruby |
| 1073 | tcp 0 0 0.0.0.0:5900 0.0.0.0:* LISTEN 18815/qemu-kvm |
| 1074 | tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1983/rpcbind |
| 1075 | tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2272/sshd |
| 1076 | tcp 0 0 0.0.0.0:33762 0.0.0.0:* LISTEN 2001/rpc.statd |
| 1077 | tcp 0 0 :::111 :::* LISTEN 1983/rpcbind |
| 1078 | tcp 0 0 :::22 :::* LISTEN 2272/sshd |
| 1079 | tcp 0 0 ::1:25 :::* LISTEN 2374/master |
| 1080 | tcp 0 0 :::6556 :::* LISTEN 2280/xinetd |
| 1081 | tcp 0 0 :::48004 :::* LISTEN 2001/rpc.statd |
| 1082 | }}} |
| 1083 | |
| 1084 | Stripping that into a list of PIDs: |
| 1085 | |
| 1086 | {{{ |
| 1087 | [11:21:36] jbs@bbn-w1:/home/jbs |
| 1088 | +$ awk '{print $NF}' netstat-raw.txt | sed -r -e 's|/.*||' | sort -n | uniq > netstat-pids.txt |
| 1089 | |
| 1090 | [11:22:03] jbs@bbn-w1:/home/jbs |
| 1091 | +$ cat netstat-pids.txt |
| 1092 | 1983 |
| 1093 | 2001 |
| 1094 | 2272 |
| 1095 | 2280 |
| 1096 | 2374 |
| 1097 | 2572 |
| 1098 | 18815 |
| 1099 | }}} |
| 1100 | |
| 1101 | Here are the commands: |
| 1102 | |
| 1103 | {{{ |
| 1104 | [11:22:38] jbs@bbn-w1:/home/jbs |
| 1105 | +$ for pid in $(cat netstat-pids.txt) ; do ps -efwww | egrep "^[^ ]+ +$pid" ; done >& netstat-commands.txt |
| 1106 | |
| 1107 | [11:23:47] jbs@bbn-w1:/home/jbs |
| 1108 | +$ cat netstat-commands.txt |
| 1109 | rpc 1983 1 0 Jul17 ? 00:00:01 rpcbind |
| 1110 | rpcuser 2001 1 0 Jul17 ? 00:00:00 rpc.statd |
| 1111 | root 2272 1 0 Jul17 ? 00:00:00 /usr/sbin/sshd |
| 1112 | root 2280 1 0 Jul17 ? 00:00:05 xinetd -stayalive -pidfile /var/run/xinetd.pid |
| 1113 | root 2374 1 0 Jul17 ? 00:00:10 /usr/libexec/postfix/master |
| 1114 | root 2572 1 0 Jul17 ? 01:55:23 /usr/bin/ruby /usr/sbin/puppetd |
| 1115 | qemu 18815 1 0 Aug14 ? 00:01:20 /usr/libexec/qemu-kvm -S -M pc-0.14 -enable-kvm -m 128 -smp 1,sockets=1,cores=1,threads=1 -name instance-00000d78 -uuid efb7e543-0ed8-9dac-76dd-12345b4be3a9 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance-00000d78.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -kernel /var/lib/nova/instances/instance-00000d78/kernel -initrd /var/lib/nova/instances/instance-00000d78/ramdisk -append root=/dev/vda console=ttyS0 selinux=0 -drive file=/var/lib/nova/instances/instance-00000d78/disk,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -drive file=/var/lib/nova/instances/instance-00000d78/disk.local,if=none,id=drive-virtio-disk1,format=qcow2 -device virtio-blk-pci,bus=pci.0,addr=0x6,drive=drive-virtio-disk1,id=virtio-disk1 -netdev tap,fd=22,id=hostnet0 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=02:16:3e:69:b0:db,bus=pci.0,addr=0x3 -netdev tap,fd=23,id=hostnet1 -device virtio-net-pci,netdev=hostnet1,id=net1,mac=52:54:00:e6:5e:1a,bus=pci.0,addr=0x4 -chardev file,id=charserial0,path=/var/lib/nova/instances/instance-00000d78/console.log -device isa-serial,chardev=charserial0,id=serial0 -chardev pty,id=charserial1 -device isa-serial,chardev=charserial1,id=serial1 -usb -vnc 0.0.0.0:0 -k en-us -vga cirrus -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 |
| 1116 | }}} |
| 1117 | |
| 1118 | Just to sanity check that we haven't missed anything: |
| 1119 | |
| 1120 | {{{ |
| 1121 | [11:23:51] jbs@bbn-w1:/home/jbs |
| 1122 | +$ wc -l netstat-* |
| 1123 | 7 netstat-commands.txt |
| 1124 | 7 netstat-pids.txt |
| 1125 | 10 netstat-raw.txt |
| 1126 | 24 total |
| 1127 | }}} |
| 1128 | |
| 1129 | The change from raw to pids is because of duplicates: Two for 1983, two for 2001, and two for 2272. |
| 1130 | |
| 1131 | Let's plow through each of those. |
| 1132 | |
| 1133 | This is from an RPM: |
| 1134 | |
| 1135 | {{{ |
| 1136 | rpc 1983 1 0 Jul17 ? 00:00:01 rpcbind |
| 1137 | |
| 1138 | [11:27:39] jbs@bbn-w1:/home/jbs |
| 1139 | +$ which rpcbind |
| 1140 | rpcbind is /sbin/rpcbind |
| 1141 | |
| 1142 | [11:27:41] jbs@bbn-w1:/home/jbs |
| 1143 | +$ rpm -qf /sbin/rpcbind |
| 1144 | rpcbind-0.2.0-8.el6.x86_64 |
| 1145 | }}} |
| 1146 | |
| 1147 | This is from an RPM: |
| 1148 | |
| 1149 | {{{ |
| 1150 | rpcuser 2001 1 0 Jul17 ? 00:00:00 rpc.statd |
| 1151 | |
| 1152 | [11:27:45] jbs@bbn-w1:/home/jbs |
| 1153 | +$ which rpc.statd |
| 1154 | rpc.statd is /sbin/rpc.statd |
| 1155 | |
| 1156 | [11:28:02] jbs@bbn-w1:/home/jbs |
| 1157 | +$ rpm -qf /sbin/rpc.statd |
| 1158 | nfs-utils-1.2.3-15.el6.x86_64 |
| 1159 | }}} |
| 1160 | |
| 1161 | This is from an RPM: |
| 1162 | |
| 1163 | {{{ |
| 1164 | root 2272 1 0 Jul17 ? 00:00:00 /usr/sbin/sshd |
| 1165 | |
| 1166 | [11:28:35] jbs@bbn-w1:/home/jbs |
| 1167 | +$ rpm -qf /usr/sbin/sshd |
| 1168 | openssh-server-5.3p1-70.el6_2.2.x86_64 |
| 1169 | }}} |
| 1170 | |
| 1171 | This is from an RPM: |
| 1172 | |
| 1173 | {{{ |
| 1174 | root 2280 1 0 Jul17 ? 00:00:05 xinetd -stayalive -pidfile /var/run/xinetd.pid |
| 1175 | |
| 1176 | [11:28:50] jbs@bbn-w1:/home/jbs |
| 1177 | +$ which xinetd |
| 1178 | xinetd is /usr/sbin/xinetd |
| 1179 | |
| 1180 | [11:28:52] jbs@bbn-w1:/home/jbs |
| 1181 | +$ rpm -qf /usr/sbin/xinetd |
| 1182 | xinetd-2.3.14-33.el6.x86_64 |
| 1183 | }}} |
| 1184 | |
| 1185 | This is from an RPM: |
| 1186 | |
| 1187 | {{{ |
| 1188 | root 2374 1 0 Jul17 ? 00:00:10 /usr/libexec/postfix/master |
| 1189 | |
| 1190 | [11:28:56] jbs@bbn-w1:/home/jbs |
| 1191 | +$ rpm -qf /usr/libexec/postfix/master |
| 1192 | postfix-2.6.6-2.2.el6_1.x86_64 |
| 1193 | }}} |
| 1194 | |
| 1195 | These are from RPMs: |
| 1196 | |
| 1197 | {{{ |
| 1198 | root 2572 1 0 Jul17 ? 01:55:23 /usr/bin/ruby /usr/sbin/puppetd |
| 1199 | |
| 1200 | [11:29:12] jbs@bbn-w1:/home/jbs |
| 1201 | +$ rpm -qf /usr/bin/ruby |
| 1202 | ruby-1.8.7.352-4.el6_2.x86_64 |
| 1203 | |
| 1204 | [11:29:29] jbs@bbn-w1:/home/jbs |
| 1205 | +$ rpm -qf /usr/sbin/puppetd |
| 1206 | puppet-2.6.14-1.el6.noarch |
| 1207 | }}} |
| 1208 | |
| 1209 | This is not from an RPM; but there seems to be a qemu-kvm RPM; but it doesn't contain any files: |
| 1210 | |
| 1211 | {{{ |
| 1212 | qemu 18815 1 0 Aug14 ? 00:01:20 /usr/libexec/qemu-kvm -S -M pc-0.14 -enable-kvm -m 128 -smp 1,sockets=1,cores=1,threads=1 -name instance-00000d78 -uuid efb7e543-0ed8-9dac-76dd-12345b4be3a9 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance-00000d78.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -kernel /var/lib/nova/instances/instance-00000d78/kernel -initrd /var/lib/nova/instances/instance-00000d78/ramdisk -append root=/dev/vda console=ttyS0 selinux=0 -drive file=/var/lib/nova/instances/instance-00000d78/disk,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0 -drive file=/var/lib/nova/instances/instance-00000d78/disk.local,if=none,id=drive-virtio-disk1,format=qcow2 -device virtio-blk-pci,bus=pci.0,addr=0x6,drive=drive-virtio-disk1,id=virtio-disk1 -netdev tap,fd=22,id=hostnet0 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=02:16:3e:69:b0:db,bus=pci.0,addr=0x3 -netdev tap,fd=23,id=hostnet1 -device virtio-net-pci,netdev=hostnet1,id=net1,mac=52:54:00:e6:5e:1a,bus=pci.0,addr=0x4 -chardev file,id=charserial0,path=/var/lib/nova/instances/instance-00000d78/console.log -device isa-serial,chardev=charserial0,id=serial0 -chardev pty,id=charserial1 -device isa-serial,chardev=charserial1,id=serial1 -usb -vnc 0.0.0.0:0 -k en-us -vga cirrus -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 |
| 1213 | |
| 1214 | [11:29:34] jbs@bbn-w1:/home/jbs |
| 1215 | +$ rpm -qf /usr/libexec/qemu-kvm |
| 1216 | file /usr/libexec/qemu-kvm is not owned by any package |
| 1217 | |
| 1218 | [11:30:58] jbs@bbn-w1:/home/jbs |
| 1219 | +$ rpm -q qemu-kvm |
| 1220 | qemu-kvm-0.15.0-3.el6.x86_64 |
| 1221 | |
| 1222 | [11:31:15] jbs@bbn-w1:/home/jbs |
| 1223 | +$ rpm -ql qemu-kvm |
| 1224 | (contains no files) |
| 1225 | }}} |
| 1226 | |
| 1227 | Ah: |
| 1228 | |
| 1229 | {{{ |
| 1230 | [11:31:17] jbs@bbn-w1:/home/jbs |
| 1231 | +$ rpm -qi qemu-kvm |
| 1232 | Name : qemu-kvm Relocations: (not relocatable) |
| 1233 | Version : 0.15.0 Vendor: (none) |
| 1234 | Release : 3.el6 Build Date: Thu Nov 24 12:24:20 2011 |
| 1235 | Install Date: Fri Feb 24 08:56:13 2012 Build Host: osc-build.vm.griddynamics.net |
| 1236 | Group : Development/Tools Source RPM: qemu-0.15.0-3.el6.src.rpm |
| 1237 | Size : 0 License: GPLv2+ and LGPLv2+ and BSD |
| 1238 | Signature : RSA/SHA1, Thu Nov 24 12:25:34 2011, Key ID 499590cc596f1e88 |
| 1239 | URL : http://www.qemu.org/ |
| 1240 | Summary : QEMU metapackage for KVM support |
| 1241 | Description : |
| 1242 | This is a meta-package that provides a qemu-system-<arch> package for native |
| 1243 | architectures where kvm can be enabled. For example, in an x86 system, this |
| 1244 | will install qemu-system-x86 |
| 1245 | }}} |
| 1246 | |
| 1247 | And ah, /usr/libexec/qemu-kvm is just a symlink, to an executable which *is* from an RPM: |
| 1248 | |
| 1249 | {{{ |
| 1250 | [11:31:47] jbs@bbn-w1:/home/jbs |
| 1251 | +$ file /usr/libexec/qemu-kvm |
| 1252 | /usr/libexec/qemu-kvm: symbolic link to `/usr/bin/qemu-kvm' |
| 1253 | |
| 1254 | [11:32:17] jbs@bbn-w1:/home/jbs |
| 1255 | +$ rpm -qf /usr/bin/qemu-kvm |
| 1256 | qemu-system-x86-0.15.0-3.el6.x86_64 |
| 1257 | }}} |
| 1258 | |
| 1259 | Ok then. |
| 1260 | |
| 1261 | So, that's these RPMs: |
| 1262 | |
| 1263 | {{{ |
| 1264 | rpcbind-0.2.0-8.el6.x86_64 |
| 1265 | nfs-utils-1.2.3-15.el6.x86_64 |
| 1266 | openssh-server-5.3p1-70.el6_2.2.x86_64 |
| 1267 | xinetd-2.3.14-33.el6.x86_64 |
| 1268 | postfix-2.6.6-2.2.el6_1.x86_64 |
| 1269 | ruby-1.8.7.352-4.el6_2.x86_64 |
| 1270 | puppet-2.6.14-1.el6.noarch |
| 1271 | qemu-system-x86-0.15.0-3.el6.x86_64 |
| 1272 | }}} |
| 1273 | |
| 1274 | Those all look like standard CentOS things: |
| 1275 | |
| 1276 | {{{ |
| 1277 | [11:39:19] jbs@bbn-w1:/home/jbs |
| 1278 | +$ yum -C list installed rpcbind-0.2.0-8.el6.x86_64 nfs-utils-1.2.3-15.el6.x86_64 openssh-server-5.3p1-70.el6_2.2.x86_64 xinetd-2.3.14-33.el6.x86_64 postfix-2.6.6-2.2.el6_1.x86_64 ruby-1.8.7.352-4.el6_2.x86_64 puppet-2.6.14-1.el6.noarch qemu-system-x86-0.15.0-3.el6.x86_64 |
| 1279 | Loaded plugins: fastestmirror, priorities, refresh-packagekit, security |
| 1280 | 190 packages excluded due to repository priority protections |
| 1281 | Installed Packages |
| 1282 | nfs-utils.x86_64 1:1.2.3-15.el6 @anaconda-CentOS-201112091719.x86_64/6.2 |
| 1283 | openssh-server.x86_64 5.3p1-70.el6_2.2 @CentOS Updates/6.2 |
| 1284 | postfix.x86_64 2:2.6.6-2.2.el6_1 @anaconda-CentOS-201112091719.x86_64/6.2 |
| 1285 | puppet.noarch 2.6.14-1.el6 @epel |
| 1286 | qemu-system-x86.x86_64 |
| 1287 | 2:0.15.0-3.el6 @ExoGENI/6.2 |
| 1288 | rpcbind.x86_64 0.2.0-8.el6 @anaconda-CentOS-201112091719.x86_64/6.2 |
| 1289 | ruby.x86_64 1.8.7.352-4.el6_2 @updates |
| 1290 | xinetd.x86_64 2:2.3.14-33.el6 @anaconda-CentOS-201112091719.x86_64/6.2 |
| 1291 | }}} |
| 1292 | |
| 1293 | ('yum -C' to use cached info only, because these bbn-w1 can't do DNS right now.) |
| 1294 | |
| 1295 | So, that identifies the source of each network-listening file, and since they're all standard CentOS RPMs, source RPMs for them can be found in standard CentOS places. |
| 1296 | |
| 1297 | I've created ExoGENI ticket [exoticket:104] for the DNS issue, but it's not a blocker for this test. |
| 1298 | |