[[PageOutline]] = Detailed test plan for EG-MON-1: Control Network Software and VLAN Inspection Test = ''This page is GPO's working page for performing EG-MON-1. It is public for informational purposes, but it is not an official status report. See [wiki:GENIRacksHome/ExogeniRacks/AcceptanceTestStatus] for the current status of ExoGENI acceptance tests.'' ''Last substantive edit of this page: 2012-08-08'' == Page format == * The status chart summarizes the state of this test * The high-level description from test plan contains text copied exactly from the public test plan and acceptance criteria pages. * The steps contain things i will actually do/verify: * Steps may be composed of related substeps where i find this useful for clarity * Each step is either a preparatory step (identified by "(prep)") or a verification step (the default): * Preparatory steps are just things we have to do. They're not tests of the rack, but are prerequisites for subsequent verification steps * Verification steps are steps in which we will actually look at rack output and make sure it is as expected. They contain a '''Using:''' block, which lists the steps to run the verification, and an '''Expect:''' block which lists what outcome is expected for the test to pass. == Status of test == Meaning of states: * [[Color(green,Pass)]]: Step is completed and passed (for a verification step), or is completed (for a prep step) * [[Color(red,Fail)]]: Step is completed and failed, and is not being revisited * in progress: We are currently testing or iterating on this step * [[Color(orange,Blocked)]]: Step is blocked by some other step or activity || '''Step''' || '''State''' || '''Date completed''' || '''Open Tickets''' || '''Closed Tickets/Comments''' || || 1 || [[Color(orange,Blocked)]] || || exoticket:93 [[BR]] exoticket:95 [[BR]] exoticket:96 || complete except for issues in open tickets || || 2 || || || || ready to test || || 3 || || || || (exoticket:10) [[BR]] ready to test || || 4 || || || || (exoticket:10) [[BR]] ready to test || == High-level description from test plan == This test inspects the state of the rack control network, infrastructure nodes, and system software. === Procedure === * A site administrator enumerates processes on each of the head node and an !OpenStack worker node which listen for network connections from other nodes, identifies what version of what software package is in use for each, and verifies that we know the source of each piece of software and could get access to its source code. * A site administrator reviews the configuration of the rack management switch and verifies that each worker node's control interfaces are on the expected VLANs for that worker node's function (!OpenStack or bare metal). * A site administrator reviews the MAC address table on the management switch, and verifies that all entries are identifiable and expected. === Criteria to verify as part of this test === * VI.09. A public document explains how to identify the software versions and system file configurations running on the rack, and how to get information about recent changes to the rack software and configuration. (F.5) * VI.11. A public document describes the GENI software running on the rack, and explains how to get access to the source code of each piece of GENI software. (F.6) * VII.03. Site administrators can understand the expected control and dataplane network behavior of their rack. (F.2) * VII.04. Site administrators can view and investigate current system and network activity on their rack. (F.2) * VII.06. A site administrator can verify the control software and configurations on the rack at some point in time. (F.5) * VII.08. A site administrator can get access to source code for the version of each piece of GENI code installed on their site rack at some point in time. (F.6) * VII.09. A site administrator can determine the MAC addresses of all physical host interfaces, all network device interfaces, all active experimental VMs, and all recently-terminated experimental VMs. (C.3.f) * VII.10. A site administrator can locate current and recent CPU and memory utilization for each rack network device, and can find recent changes or errors in a log. (D.6.a) * VII.12. For each infrastructure and experimental host, a site administrator can locate current and recent uptime, CPU, disk, and memory utilization, interface traffic counters, process counts, and active user counts. (D.6.b) * VII.13. A site administrator can locate recent syslogs for all infrastructure and experimental hosts. (D.6.b) == Step 1: identify network-listening software on the head node == === Overview of Step 1 === '''Using:''' * Using netstat, enumerate processes on bbn-hn which listen for network connections from outside the node * For each process found: * Use the command-line or `/proc` to determine what executable file is running * Use RPM tools to determine whether the executable file is part of an RPM * Otherwise, use documentation or iterate with the ExoGENI team to determine the origin of the software * For each RPM found, identify a location from which a source RPM for that package can be obtained * For each non-RPM software source found, identify a location from which the source code for that version can be obtained. '''Verify:''' * The source of each network-listening file can be identified * RPM source packages can be found for each RPM-sourced package * The source code and identifiable version (e.g. a git tag) can be found for each non-RPM software source === Results of Step 1 from 2012-08-03 === A list of processes that are listening: {{{ [11:11:51] jbs@bbn-hn:/home/jbs +$ sudo netstat -anp | egrep ':\*.+LISTEN' | egrep -v '(127.0.0.1|192.168.103.10|10.100.0.1|10.103.0.1)' > netstat-raw.txt [11:17:13] jbs@bbn-hn:/home/jbs +$ cat netstat-raw.txt tcp 0 0 0.0.0.0:8811 0.0.0.0:* LISTEN 29140/python tcp 0 0 192.1.242.3:8139 0.0.0.0:* LISTEN 724/ruby tcp 0 0 0.0.0.0:36843 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:875 0.0.0.0:* LISTEN 3258/rpc.rquotad tcp 0 0 0.0.0.0:8812 0.0.0.0:* LISTEN 29162/python tcp 0 0 0.0.0.0:9292 0.0.0.0:* LISTEN 28780/python tcp 0 0 0.0.0.0:47308 0.0.0.0:* LISTEN 2806/rpc.statd tcp 0 0 0.0.0.0:8813 0.0.0.0:* LISTEN 29185/python tcp 0 0 0.0.0.0:8781 0.0.0.0:* LISTEN 28606/python tcp 0 0 0.0.0.0:8814 0.0.0.0:* LISTEN 29205/python tcp 0 0 0.0.0.0:8782 0.0.0.0:* LISTEN 28701/python tcp 0 0 0.0.0.0:8815 0.0.0.0:* LISTEN 29205/python tcp 0 0 0.0.0.0:8783 0.0.0.0:* LISTEN 28814/python tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2780/rpcbind tcp 0 0 0.0.0.0:8816 0.0.0.0:* LISTEN 29185/python tcp 0 0 0.0.0.0:8784 0.0.0.0:* LISTEN 28878/python tcp 0 0 0.0.0.0:14000 0.0.0.0:* LISTEN 19259/java tcp 0 0 0.0.0.0:8817 0.0.0.0:* LISTEN 29162/python tcp 0 0 0.0.0.0:8785 0.0.0.0:* LISTEN 28878/python tcp 0 0 0.0.0.0:4369 0.0.0.0:* LISTEN 4123/epmd tcp 0 0 0.0.0.0:10514 0.0.0.0:* LISTEN 2717/rsyslogd tcp 0 0 0.0.0.0:8818 0.0.0.0:* LISTEN 29140/python tcp 0 0 0.0.0.0:8786 0.0.0.0:* LISTEN 28814/python tcp 0 0 0.0.0.0:8787 0.0.0.0:* LISTEN 28701/python tcp 0 0 0.0.0.0:8788 0.0.0.0:* LISTEN 28606/python tcp 0 0 0.0.0.0:54004 0.0.0.0:* LISTEN 3274/rpc.mountd tcp 0 0 0.0.0.0:51413 0.0.0.0:* LISTEN 2378/java tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 23122/vsftpd tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 3634/sshd tcp 0 0 0.0.0.0:8791 0.0.0.0:* LISTEN 28903/python tcp 0 0 0.0.0.0:11000 0.0.0.0:* LISTEN 29224/java tcp 0 0 0.0.0.0:8792 0.0.0.0:* LISTEN 28923/python tcp 0 0 0.0.0.0:49784 0.0.0.0:* LISTEN 3274/rpc.mountd tcp 0 0 0.0.0.0:8793 0.0.0.0:* LISTEN 28943/python tcp 0 0 0.0.0.0:3001 0.0.0.0:* LISTEN 23124/xcatd tcp 0 0 0.0.0.0:8794 0.0.0.0:* LISTEN 28965/python tcp 0 0 0.0.0.0:3002 0.0.0.0:* LISTEN 23127/xcatd tcp 0 0 0.0.0.0:8795 0.0.0.0:* LISTEN 28965/python tcp 0 0 0.0.0.0:8796 0.0.0.0:* LISTEN 28943/python tcp 0 0 192.1.242.3:636 0.0.0.0:* LISTEN 3199/slapd tcp 0 0 0.0.0.0:8797 0.0.0.0:* LISTEN 28923/python tcp 0 0 0.0.0.0:8798 0.0.0.0:* LISTEN 28903/python tcp 0 0 0.0.0.0:3551 0.0.0.0:* LISTEN 3660/apcupsd tcp 0 0 0.0.0.0:12000 0.0.0.0:* LISTEN 19470/java tcp 0 0 0.0.0.0:53504 0.0.0.0:* LISTEN 3274/rpc.mountd tcp 0 0 0.0.0.0:8801 0.0.0.0:* LISTEN 28987/python tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:8802 0.0.0.0:* LISTEN 29016/python tcp 0 0 0.0.0.0:8803 0.0.0.0:* LISTEN 29042/python tcp 0 0 0.0.0.0:8804 0.0.0.0:* LISTEN 29084/python tcp 0 0 0.0.0.0:43972 0.0.0.0:* LISTEN 4163/beam.smp tcp 0 0 0.0.0.0:8805 0.0.0.0:* LISTEN 29084/python tcp 0 0 192.1.242.3:3333 0.0.0.0:* LISTEN 28639/python tcp 0 0 0.0.0.0:8773 0.0.0.0:* LISTEN 27286/nginx tcp 0 0 192.1.242.3:389 0.0.0.0:* LISTEN 3199/slapd tcp 0 0 0.0.0.0:8806 0.0.0.0:* LISTEN 29042/python tcp 0 0 0.0.0.0:8807 0.0.0.0:* LISTEN 29016/python tcp 0 0 0.0.0.0:9191 0.0.0.0:* LISTEN 28826/python tcp 0 0 0.0.0.0:7911 0.0.0.0:* LISTEN 27903/dhcpd tcp 0 0 0.0.0.0:8808 0.0.0.0:* LISTEN 28987/python tcp 0 0 0.0.0.0:3626 0.0.0.0:* LISTEN 27286/nginx tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 3948/mysqld tcp 0 0 :::14443 :::* LISTEN 19259/java tcp 0 0 :::51339 :::* LISTEN 3274/rpc.mountd tcp 0 0 :::46254 :::* LISTEN - tcp 0 0 :::111 :::* LISTEN 2780/rpcbind tcp 0 0 :::50000 :::* LISTEN 24491/java tcp 0 0 :::12080 :::* LISTEN 19470/java tcp 0 0 :::8080 :::* LISTEN 9114/java tcp 0 0 :::80 :::* LISTEN 8477/httpd tcp 0 0 :::50001 :::* LISTEN 1380/java tcp 0 0 :::13009 :::* LISTEN 19625/java tcp 0 0 :::10514 :::* LISTEN 2717/rsyslogd tcp 0 0 :::11443 :::* LISTEN 29224/java tcp 0 0 :::50004 :::* LISTEN 9566/java tcp 0 0 :::51413 :::* LISTEN 2378/java tcp 0 0 ::1:53 :::* LISTEN 13783/named tcp 0 0 :::22 :::* LISTEN 3634/sshd tcp 0 0 :::45430 :::* LISTEN 2806/rpc.statd tcp 0 0 :::55000 :::* LISTEN 24491/java tcp 0 0 :::13080 :::* LISTEN 19625/java tcp 0 0 :::55001 :::* LISTEN 1380/java tcp 0 0 :::14009 :::* LISTEN 19259/java tcp 0 0 ::1:25 :::* LISTEN 4095/master tcp 0 0 ::1:6010 :::* LISTEN 16835/sshd tcp 0 0 ::1:6011 :::* LISTEN 32641/sshd tcp 0 0 :::12443 :::* LISTEN 19470/java tcp 0 0 :::443 :::* LISTEN 8477/httpd tcp 0 0 :::33595 :::* LISTEN 3274/rpc.mountd tcp 0 0 :::55004 :::* LISTEN 9566/java tcp 0 0 :::55740 :::* LISTEN 9114/java tcp 0 0 :::6556 :::* LISTEN 3642/xinetd tcp 0 0 :::6557 :::* LISTEN 22989/xinetd tcp 0 0 :::14080 :::* LISTEN 19259/java tcp 0 0 :::11009 :::* LISTEN 29224/java tcp 0 0 :::2049 :::* LISTEN - tcp 0 0 :::13443 :::* LISTEN 19625/java tcp 0 0 :::58949 :::* LISTEN 3274/rpc.mountd tcp 0 0 :::11080 :::* LISTEN 29224/java tcp 0 0 :::5672 :::* LISTEN 4163/beam.smp tcp 0 0 :::12009 :::* LISTEN 19470/java tcp 0 0 :::11081 :::* LISTEN 2378/java tcp 0 0 :::6633 :::* LISTEN 9114/java }}} That's 103 things, which seems like a lot, but I gather that this is normal. Ah, and there's some duplication in there. Stripping that into a list of PIDs: {{{ [11:22:25] jbs@bbn-hn:/home/jbs +$ awk '{print $NF}' netstat-raw.txt | sed -r -e 's|/.*||' | sort -n | uniq > netstat-pids.txt [11:23:04] jbs@bbn-hn:/home/jbs +$ cat netstat-pids.txt - 724 1380 2378 2717 2780 2806 3199 3258 3274 3634 3642 3660 3948 4095 4123 4163 8477 9114 9566 13783 16835 19259 19470 19625 22989 23122 23124 23127 24491 27286 27903 28606 28639 28701 28780 28814 28826 28878 28903 28923 28943 28965 28987 29016 29042 29084 29140 29162 29185 29205 29224 32641 }}} }}} For some of those, the PID is '-': {{{ [11:25:15] jbs@bbn-hn:/home/jbs +$ egrep -- - netstat-raw.txt tcp 0 0 0.0.0.0:36843 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN - tcp 0 0 :::46254 :::* LISTEN - tcp 0 0 :::2049 :::* LISTEN - }}} lsof doesn't know what they are either: {{{ [11:26:32] jbs@bbn-hn:/home/jbs +$ sudo lsof -i | grep 2049 [11:27:15] jbs@bbn-hn:/home/jbs +$ sudo lsof -i | grep 46254 [11:27:26] jbs@bbn-hn:/home/jbs +$ sudo lsof -i | grep 36843 }}} We think those are probably NFS-related things, which perhaps are listening from a kernel module rather than a process. Leaving those aside, here are the others: {{{ [11:40:08] jbs@bbn-hn:/home/jbs +$ for pid in $(cat netstat-pids.txt) ; do ps -efwww | egrep "^[^ ]+ +$pid" ; done >& netstat-commands.txt [11:40:11] jbs@bbn-hn:/home/jbs +$ cat netstat-commands.txt root 724 1 0 Jul03 ? 02:44:09 /usr/bin/ruby /usr/sbin/puppetd 2006 1380 1 0 Jul26 ? 00:06:48 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-2601- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55001 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50001 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar 2006 2378 2372 0 Jul20 ? 00:08:06 java -classpath /opt/imageproxy/axis2:/opt/imageproxy/axis2/conf:/usr/java/latest/lib/tools.jar::/opt/imageproxy/axis2/lib/activation-1.1.jar:/opt/imageproxy/axis2/lib/antlr-2.7.7.jar:/opt/imageproxy/axis2/lib/apache-mime4j-core-0.7.2.jar:/opt/imageproxy/axis2/lib/axiom-api-1.2.13.jar:/opt/imageproxy/axis2/lib/axiom-dom-1.2.13.jar:/opt/imageproxy/axis2/lib/axiom-impl-1.2.13.jar:/opt/imageproxy/axis2/lib/axis2-adb-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-adb-codegen-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-ant-plugin-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-clustering-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-codegen-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-corba-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-fastinfoset-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-java2wsdl-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jaxbri-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jaxws-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jibx-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-json-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-kernel-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-metadata-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-mtompolicy-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-saaj-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-soapmonitor-servlet-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-spring-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-transport-http-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-transport-local-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-xmlbeans-1.6.2.jar:/opt/imageproxy/axis2/lib/bcel-5.1.jar:/opt/imageproxy/axis2/lib/commons-cli-1.2.jar:/opt/imageproxy/axis2/lib/commons-codec-1.3.jar:/opt/imageproxy/axis2/lib/commons-fileupload-1.2.jar:/opt/imageproxy/axis2/lib/commons-httpclient-3.1.jar:/opt/imageproxy/axis2/lib/commons-io-1.4.jar:/opt/imageproxy/axis2/lib/commons-logging-1.1.1.jar:/opt/imageproxy/axis2/lib/geronimo-annotation_1.0_spec-1.1.jar:/opt/imageproxy/axis2/lib/geronimo-jaxws_2.2_spec-1.0.jar:/opt/imageproxy/axis2/lib/geronimo-jta_1.1_spec-1.1.jar:/opt/imageproxy/axis2/lib/geronimo-saaj_1.3_spec-1.0.1.jar:/opt/imageproxy/axis2/lib/geronimo-stax-api_1.0_spec-1.0.1.jar:/opt/imageproxy/axis2/lib/geronimo-ws-metadata_2.0_spec-1.1.2.jar:/opt/imageproxy/axis2/lib/httpcore-4.0.jar:/opt/imageproxy/axis2/lib/jalopy-1.5rc3.jar:/opt/imageproxy/axis2/lib/jaxb-api-2.1.jar:/opt/imageproxy/axis2/lib/jaxb-impl-2.1.7.jar:/opt/imageproxy/axis2/lib/jaxb-xjc-2.1.7.jar:/opt/imageproxy/axis2/lib/jaxen-1.1.1.jar:/opt/imageproxy/axis2/lib/jaxws-tools-2.1.3.jar:/opt/imageproxy/axis2/lib/jettison-1.0-RC2.jar:/opt/imageproxy/axis2/lib/jibx-bind-1.2.jar:/opt/imageproxy/axis2/lib/jibx-run-1.2.jar:/opt/imageproxy/axis2/lib/jsr311-api-1.0.jar:/opt/imageproxy/axis2/lib/juli-6.0.16.jar:/opt/imageproxy/axis2/lib/log4j-1.2.15.jar:/opt/imageproxy/axis2/lib/mail-1.4.jar:/opt/imageproxy/axis2/lib/mex-1.6.2-impl.jar:/opt/imageproxy/axis2/lib/neethi-3.0.2.jar:/opt/imageproxy/axis2/lib/regexp-1.2.jar:/opt/imageproxy/axis2/lib/tribes-6.0.16.jar:/opt/imageproxy/axis2/lib/woden-api-1.0M9.jar:/opt/imageproxy/axis2/lib/woden-impl-commons-1.0M9.jar:/opt/imageproxy/axis2/lib/woden-impl-dom-1.0M9.jar:/opt/imageproxy/axis2/lib/wsdl4j-1.6.2.jar:/opt/imageproxy/axis2/lib/wstx-asl-3.2.9.jar:/opt/imageproxy/axis2/lib/xalan-2.7.0.jar:/opt/imageproxy/axis2/lib/xmlbeans-2.3.0.jar:/opt/imageproxy/axis2/lib/xml-resolver-1.2.jar:/opt/imageproxy/axis2/lib/XmlSchema-1.4.7.jar: -Djava.endorsed.dirs=/opt/imageproxy/axis2/lib/endorsed:/usr/java/latest/jre/lib/endorsed:/usr/java/latest/lib/endorsed org.apache.axis2.transport.SimpleAxis2Server -repo /opt/imageproxy/axis2/repository -conf /opt/imageproxy/axis2/conf/axis2.xml root 2717 1 0 Jun13 ? 00:09:00 /sbin/rsyslogd -i /var/run/syslogd.pid -c 4 rpc 2780 1 0 Jun13 ? 00:00:02 rpcbind rpcuser 2806 1 0 Jun13 ? 00:00:00 rpc.statd ldap 3199 1 0 Jun13 ? 00:10:20 /usr/sbin/slapd -h ldap://192.1.242.3 ldaps://192.1.242.3 ldap://192.168.103.10 ldaps://192.168.103.10 ldap://10.100.0.1 ldaps://10.100.0.1 -u ldap -f /etc/openldap/slapd.conf root 3258 1 0 Jun13 ? 00:00:00 rpc.rquotad root 3274 1 0 Jun13 ? 00:00:00 rpc.mountd root 3634 1 0 Jun13 ? 00:01:34 /usr/sbin/sshd root 3642 1 0 Jun13 ? 00:00:18 xinetd -stayalive -pidfile /var/run/xinetd.pid root 3660 1 0 Jun13 ? 00:04:13 /sbin/apcupsd -f /etc/apcupsd/ups06.conf -P /var/run/apcupsd-ups06.pid mysql 3948 3706 0 Jun13 ? 02:05:09 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --log-error=/var/log/mysqld.log --open-files-limit=8192 --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock --port=3306 root 4095 1 0 Jun13 ? 00:00:28 /usr/libexec/postfix/master rabbitmq 4123 1 0 Jun13 ? 00:00:16 /usr/lib64/erlang/erts-5.8.5/bin/epmd -daemon rabbitmq 4163 4162 0 Jun13 ? 00:18:00 /usr/lib64/erlang/erts-5.8.5/bin/beam.smp -W w -K true -A30 -P 1048576 -- -root /usr/lib64/erlang -progname erl -- -home /var/lib/rabbitmq -- -noshell -noinput -sname rabbit@bbn-hn -boot /var/lib/rabbitmq/mnesia/rabbit@bbn-hn-plugins-expand/rabbit -kernel inet_default_connect_options [{nodelay,true}] -sasl errlog_type error -kernel error_logger {file,"/var/log/rabbitmq/rabbit@bbn-hn.log"} -sasl sasl_error_logger {file,"/var/log/rabbitmq/rabbit@bbn-hn-sasl.log"} -os_mon start_cpu_sup true -os_mon start_disksup false -os_mon start_memsup false -mnesia dir "/var/lib/rabbitmq/mnesia/rabbit@bbn-hn" root 8477 1 0 Jun22 ? 00:00:42 /usr/sbin/httpd 491 9114 1 3 Jun27 ? 1-10:41:10 java -server -Xms256M -Xmx1500M -XX:OnError=flowvisor-crash-logger -XX:+UseConcMarkSweepGC -Dorg.flowvisor.config_dir=/opt/flowvisor/etc/flowvisor -Dorg.flowvisor.install_dir=/opt/flowvisor/libexec/flowvisor -Djavax.net.ssl.keyStore=/opt/flowvisor/etc/flowvisor/mySSLKeyStore -Djavax.net.ssl.keyStorePassword=CHANGEME_PASSWD -cp /opt/flowvisor/libexec/flowvisor/openflow.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-client-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-common-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-server-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/commons-logging-1.1.jar:/opt/flowvisor/libexec/flowvisor/ws-commons-util-1.0.2.jar:/opt/flowvisor/libexec/flowvisor/jsse.jar:/opt/flowvisor/libexec/flowvisor/asm-3.0.jar:/opt/flowvisor/libexec/flowvisor/cglib-2.2.jar:/opt/flowvisor/libexec/flowvisor/commons-codec-1.4.jar:/opt/flowvisor/libexec/flowvisor/gson-1.7.1.jar:/opt/flowvisor/libexec/flowvisor/jetty-continuation-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-http-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-io-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-security-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-server-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-util-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/servlet-api-2.5.jar:/opt/flowvisor/libexec/flowvisor/flowvisor.jar org.flowvisor.FlowVisor /opt/flowvisor/etc/flowvisor/config.xml 2006 9566 1 0 Aug01 ? 00:01:35 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-5- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55004 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50004 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar named 13783 1 0 Jun22 ? 00:01:04 /usr/sbin/named -u named jonmills 16835 16833 0 00:09 ? 00:00:00 sshd: jonmills@pts/2 2006 19259 1 0 Jul05 ? 00:24:49 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-aux/tomcat-7/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -XX:+CMSClassUnloadingEnabled -XX:+CMSPermGenSweepingEnabled -XX:MaxPermSize=128m -Xmx1024m -Djavax.net.ssl.trustStore=/opt/orca-aux/tomcat-7/ssl/trusted.jks -Djavax.net.ssl.trustStorePassword=orcaorca -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=14000 -Djava.endorsed.dirs=/opt/orca-aux/tomcat-7/endorsed -classpath /opt/orca-aux/tomcat-7/bin/bootstrap.jar:/opt/orca-aux/tomcat-7/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-aux/tomcat-7 -Dcatalina.home=/opt/orca-aux/tomcat-7 -Djava.io.tmpdir=/opt/orca-aux/tomcat-7/temp org.apache.catalina.startup.Bootstrap start 2006 19470 1 0 Jul20 ? 01:02:40 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-12080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xmx1024m -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=12000 -Djava.endorsed.dirs=/opt/orca-12080/tomcat/endorsed -classpath /opt/orca-12080/tomcat/bin/bootstrap.jar:/opt/orca-12080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-12080/tomcat -Dcatalina.home=/opt/orca-12080/tomcat -Djava.io.tmpdir=/opt/orca-12080/tomcat/temp org.apache.catalina.startup.Bootstrap start 2006 19625 1 0 Jul20 ? 00:29:16 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-13080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/opt/orca-13080/tomcat/endorsed -classpath /opt/orca-13080/tomcat/bin/bootstrap.jar:/opt/orca-13080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-13080/tomcat -Dcatalina.home=/opt/orca-13080/tomcat -Djava.io.tmpdir=/opt/orca-13080/tomcat/temp org.apache.catalina.startup.Bootstrap start rack_bbn 22989 1 0 Jun18 ? 00:00:24 /omd/sites/rack_bbn/var/tmp/xinetd -pidfile /omd/sites/rack_bbn/tmp/run/xinetd.pid -filelog /omd/sites/rack_bbn/var/log/xinetd.log -f /omd/sites/rack_bbn/etc/xinetd.conf root 23122 1 0 Jun22 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf root 23124 1 0 Jun22 ? 00:00:06 xcatd: SSL listener root 23127 23124 0 Jun22 ? 00:00:01 xcatd: install monitor 2006 24491 1 0 Aug01 ? 00:01:25 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-2- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55000 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50000 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar root 27286 1 0 Jun18 ? 00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf dhcpd 27903 1 0 Jun22 ? 00:02:12 /usr/sbin/dhcpd -user dhcpd -group dhcpd bond2.1007 bond2.1006 nova 28606 28603 0 Jul06 ? 00:06:51 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8781.log --ec2_listen_port=8781 --osapi_listen_port=8788 nova 28639 1 0 Jul06 ? 00:00:07 /usr/bin/python /usr/bin/nova-objectstore --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-objectstore.log --pidfile=/var/run/nova/nova-objectstore.pid nova 28701 28699 0 Jul06 ? 00:06:46 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8782.log --ec2_listen_port=8782 --osapi_listen_port=8787 glance 28780 1 0 Jul06 ? 00:00:54 /usr/bin/python /usr/bin/glance-api --config-file=/etc/glance/glance-api.conf --log-config=/etc/glance/logging-api.conf nova 28814 28812 0 Jul06 ? 00:06:32 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8783.log --ec2_listen_port=8783 --osapi_listen_port=8786 glance 28826 1 0 Jul06 ? 00:00:50 /usr/bin/python /usr/bin/glance-registry --config-file=/etc/glance/glance-registry.conf -v --log-config=/etc/glance/logging-registry.conf nova 28878 28876 0 Jul06 ? 00:06:09 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8784.log --ec2_listen_port=8784 --osapi_listen_port=8785 nova 28903 28901 0 Jul06 ? 00:06:12 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8791.log --ec2_listen_port=8791 --osapi_listen_port=8798 nova 28923 28921 0 Jul06 ? 00:06:49 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8792.log --ec2_listen_port=8792 --osapi_listen_port=8797 nova 28943 28941 0 Jul06 ? 00:06:28 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8793.log --ec2_listen_port=8793 --osapi_listen_port=8796 nova 28965 28963 0 Jul06 ? 00:07:28 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8794.log --ec2_listen_port=8794 --osapi_listen_port=8795 nova 28987 28985 0 Jul06 ? 00:06:01 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8801.log --ec2_listen_port=8801 --osapi_listen_port=8808 nova 29016 29014 0 Jul06 ? 00:06:33 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8802.log --ec2_listen_port=8802 --osapi_listen_port=8807 nova 29042 29040 0 Jul06 ? 00:09:05 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8803.log --ec2_listen_port=8803 --osapi_listen_port=8806 nova 29084 29080 0 Jul06 ? 00:06:34 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8804.log --ec2_listen_port=8804 --osapi_listen_port=8805 nova 29140 29138 0 Jul06 ? 00:06:11 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8811.log --ec2_listen_port=8811 --osapi_listen_port=8818 nova 29162 29160 0 Jul06 ? 00:06:29 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8812.log --ec2_listen_port=8812 --osapi_listen_port=8817 nova 29185 29183 0 Jul06 ? 00:06:42 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8813.log --ec2_listen_port=8813 --osapi_listen_port=8816 nova 29205 29203 0 Jul06 ? 00:06:47 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8814.log --ec2_listen_port=8814 --osapi_listen_port=8815 2006 29224 1 0 Jul20 ? 00:29:38 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-11080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xmx1024m -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=11000 -Djava.endorsed.dirs=/opt/orca-11080/tomcat/endorsed -classpath /opt/orca-11080/tomcat/bin/bootstrap.jar:/opt/orca-11080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-11080/tomcat -Dcatalina.home=/opt/orca-11080/tomcat -Djava.io.tmpdir=/opt/orca-11080/tomcat/temp org.apache.catalina.startup.Bootstrap start jonmills 32641 32639 0 10:09 ? 00:00:00 sshd: jonmills@pts/1 }}} Just to sanity check that we haven't missed anything: {{{ [11:40:14] jbs@bbn-hn:/home/jbs +$ wc -l netstat-* 52 netstat-commands.txt 53 netstat-pids.txt 103 netstat-raw.txt 208 total }}} The change from raw to pids is because of duplicates, and from pids to commands is because of the '-' PID dropping out. So, let's start plowing through those. This is from an RPM: {{{ root 724 1 0 Jul03 ? 02:44:09 /usr/bin/ruby /usr/sbin/puppetd [11:41:39] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/puppetd puppet-2.7.18-1.el6.noarch }}} Lumping these Floodlight things together, Java is from an RPM, but floodlight.jar isn't: {{{ 2006 1380 1 0 Jul26 ? 00:06:48 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-2601- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55001 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50001 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar 2006 9566 1 0 Aug01 ? 00:01:35 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-5- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55004 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50004 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar 2006 24491 1 0 Aug01 ? 00:01:25 java -server -d64 -Xmx2g -Xms2g -Xmn800m -XX:+UseParallelGC -XX:+AggressiveOpts -XX:+UseFastAccessorMethods -XX:InlineSmallCode=8192 -XX:MaxInlineSize=8192 -XX:FreqInlineSize=8192 -XX:CompileThreshold=1500 -XX:PreBlockSpin=8 -Dnet.orca.vlan=vlan-2- -Dnet.floodlightcontroller.restserver.RestApiServer.port=55000 -Dnet.floodlightcontroller.core.FloodlightProvider.openflowport=50000 -Dfloodlight.modules=net.floodlightcontroller.learningswitch.LearningSwitch,net.floodlightcontroller.counter.NullCounterStore,net.floodlightcontroller.perfmon.NullPktInProcessingTime -jar /opt/floodlight/floodlight.jar [15:56:51] jbs@bbn-hn:/home/jbs +$ which java java is /usr/java/default/bin/java [15:56:52] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/java/default/bin/java jdk-1.6.0_30-fcs.x86_64 [15:56:56] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/floodlight/floodlight.jar file /opt/floodlight/floodlight.jar is not owned by any package }}} Java is from an RPM (see above), imageproxy isn't: {{{ 2006 2378 2372 0 Jul20 ? 00:08:06 java -classpath /opt/imageproxy/axis2:/opt/imageproxy/axis2/conf:/usr/java/latest/lib/tools.jar::/opt/imageproxy/axis2/lib/activation-1.1.jar:/opt/imageproxy/axis2/lib/antlr-2.7.7.jar:/opt/imageproxy/axis2/lib/apache-mime4j-core-0.7.2.jar:/opt/imageproxy/axis2/lib/axiom-api-1.2.13.jar:/opt/imageproxy/axis2/lib/axiom-dom-1.2.13.jar:/opt/imageproxy/axis2/lib/axiom-impl-1.2.13.jar:/opt/imageproxy/axis2/lib/axis2-adb-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-adb-codegen-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-ant-plugin-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-clustering-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-codegen-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-corba-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-fastinfoset-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-java2wsdl-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jaxbri-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jaxws-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-jibx-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-json-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-kernel-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-metadata-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-mtompolicy-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-saaj-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-soapmonitor-servlet-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-spring-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-transport-http-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-transport-local-1.6.2.jar:/opt/imageproxy/axis2/lib/axis2-xmlbeans-1.6.2.jar:/opt/imageproxy/axis2/lib/bcel-5.1.jar:/opt/imageproxy/axis2/lib/commons-cli-1.2.jar:/opt/imageproxy/axis2/lib/commons-codec-1.3.jar:/opt/imageproxy/axis2/lib/commons-fileupload-1.2.jar:/opt/imageproxy/axis2/lib/commons-httpclient-3.1.jar:/opt/imageproxy/axis2/lib/commons-io-1.4.jar:/opt/imageproxy/axis2/lib/commons-logging-1.1.1.jar:/opt/imageproxy/axis2/lib/geronimo-annotation_1.0_spec-1.1.jar:/opt/imageproxy/axis2/lib/geronimo-jaxws_2.2_spec-1.0.jar:/opt/imageproxy/axis2/lib/geronimo-jta_1.1_spec-1.1.jar:/opt/imageproxy/axis2/lib/geronimo-saaj_1.3_spec-1.0.1.jar:/opt/imageproxy/axis2/lib/geronimo-stax-api_1.0_spec-1.0.1.jar:/opt/imageproxy/axis2/lib/geronimo-ws-metadata_2.0_spec-1.1.2.jar:/opt/imageproxy/axis2/lib/httpcore-4.0.jar:/opt/imageproxy/axis2/lib/jalopy-1.5rc3.jar:/opt/imageproxy/axis2/lib/jaxb-api-2.1.jar:/opt/imageproxy/axis2/lib/jaxb-impl-2.1.7.jar:/opt/imageproxy/axis2/lib/jaxb-xjc-2.1.7.jar:/opt/imageproxy/axis2/lib/jaxen-1.1.1.jar:/opt/imageproxy/axis2/lib/jaxws-tools-2.1.3.jar:/opt/imageproxy/axis2/lib/jettison-1.0-RC2.jar:/opt/imageproxy/axis2/lib/jibx-bind-1.2.jar:/opt/imageproxy/axis2/lib/jibx-run-1.2.jar:/opt/imageproxy/axis2/lib/jsr311-api-1.0.jar:/opt/imageproxy/axis2/lib/juli-6.0.16.jar:/opt/imageproxy/axis2/lib/log4j-1.2.15.jar:/opt/imageproxy/axis2/lib/mail-1.4.jar:/opt/imageproxy/axis2/lib/mex-1.6.2-impl.jar:/opt/imageproxy/axis2/lib/neethi-3.0.2.jar:/opt/imageproxy/axis2/lib/regexp-1.2.jar:/opt/imageproxy/axis2/lib/tribes-6.0.16.jar:/opt/imageproxy/axis2/lib/woden-api-1.0M9.jar:/opt/imageproxy/axis2/lib/woden-impl-commons-1.0M9.jar:/opt/imageproxy/axis2/lib/woden-impl-dom-1.0M9.jar:/opt/imageproxy/axis2/lib/wsdl4j-1.6.2.jar:/opt/imageproxy/axis2/lib/wstx-asl-3.2.9.jar:/opt/imageproxy/axis2/lib/xalan-2.7.0.jar:/opt/imageproxy/axis2/lib/xmlbeans-2.3.0.jar:/opt/imageproxy/axis2/lib/xml-resolver-1.2.jar:/opt/imageproxy/axis2/lib/XmlSchema-1.4.7.jar: -Djava.endorsed.dirs=/opt/imageproxy/axis2/lib/endorsed:/usr/java/latest/jre/lib/endorsed:/usr/java/latest/lib/endorsed org.apache.axis2.transport.SimpleAxis2Server -repo /opt/imageproxy/axis2/repository -conf /opt/imageproxy/axis2/conf/axis2.xml [15:57:00] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/imageproxy file /opt/imageproxy is not owned by any package }}} This is from an RPM: {{{ root 2717 1 0 Jun13 ? 00:09:00 /sbin/rsyslogd -i /var/run/syslogd.pid -c 4 [15:59:03] jbs@bbn-hn:/home/jbs +$ rpm -qf /sbin/rsyslogd rsyslog-4.6.2-12.el6.x86_64 }}} This is from an RPM: {{{ rpc 2780 1 0 Jun13 ? 00:00:02 rpcbind [16:00:13] jbs@bbn-hn:/home/jbs +$ which rpcbind rpcbind is /sbin/rpcbind [16:00:28] jbs@bbn-hn:/home/jbs +$ rpm -qf /sbin/rpcbind rpcbind-0.2.0-8.el6.x86_64 }}} This is from an RPM: {{{ rpcuser 2806 1 0 Jun13 ? 00:00:00 rpc.statd [16:00:32] jbs@bbn-hn:/home/jbs +$ which rpc.statd rpc.statd is /sbin/rpc.statd [16:00:52] jbs@bbn-hn:/home/jbs +$ rpm -qf /sbin/rpc.statd nfs-utils-1.2.3-15.el6.x86_64 }}} This is from an RPM: {{{ ldap 3199 1 0 Jun13 ? 00:10:20 /usr/sbin/slapd -h ldap://192.1.242.3 ldaps://192.1.242.3 ldap://192.168.103.10 ldaps://192.168.103.10 ldap://10.100.0.1 ldaps://10.100.0.1 -u ldap -f /etc/openldap/slapd.conf [16:00:58] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/slapd openldap-servers-2.4.23-20.el6.x86_64 }}} This is from an RPM: {{{ root 3258 1 0 Jun13 ? 00:00:00 rpc.rquotad [16:01:28] jbs@bbn-hn:/home/jbs +$ which rpc.rquotad rpc.rquotad is /usr/sbin/rpc.rquotad [16:01:34] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/rpc.rquotad quota-3.17-16.el6.x86_64 }}} This is from an RPM: {{{ root 3274 1 0 Jun13 ? 00:00:00 rpc.mountd [16:01:40] jbs@bbn-hn:/home/jbs +$ which rpc.mountd rpc.mountd is /usr/sbin/rpc.mountd [16:02:24] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/rpc.mountd nfs-utils-1.2.3-15.el6.x86_64 }}} This is from an RPM: {{{ root 3634 1 0 Jun13 ? 00:01:34 /usr/sbin/sshd [16:06:46] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/sshd openssh-server-5.3p1-70.el6_2.2.x86_64 }}} This is from an RPM: {{{ root 3642 1 0 Jun13 ? 00:00:18 xinetd -stayalive -pidfile /var/run/xinetd.pid [16:07:15] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/xinetd xinetd-2.3.14-33.el6.x86_64 }}} This is from an RPM: {{{ root 3660 1 0 Jun13 ? 00:04:13 /sbin/apcupsd -f /etc/apcupsd/ups06.conf -P /var/run/apcupsd-ups06.pid [16:07:45] jbs@bbn-hn:/home/jbs +$ rpm -qf /sbin/apcupsd apcupsd-3.14.8-4.el6.x86_64 }}} This is from an RPM: {{{ mysql 3948 3706 0 Jun13 ? 02:05:09 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --log-error=/var/log/mysqld.log --open-files-limit=8192 --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock --port=3306 [16:08:22] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/libexec/mysqld mysql-server-5.1.61-1.el6_2.1.x86_64 }}} This is from an RPM: {{{ root 4095 1 0 Jun13 ? 00:00:28 /usr/libexec/postfix/master [16:08:28] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/libexec/postfix/master postfix-2.6.6-2.2.el6_1.x86_64 }}} This is from an RPM: {{{ rabbitmq 4123 1 0 Jun13 ? 00:00:16 /usr/lib64/erlang/erts-5.8.5/bin/epmd -daemon [16:09:09] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/lib64/erlang/erts-5.8.5/bin/epmd erlang-erts-R14B-04.1.el6.x86_64 }}} This is from an RPM: {{{ rabbitmq 4163 4162 0 Jun13 ? 00:18:00 /usr/lib64/erlang/erts-5.8.5/bin/beam.smp -W w -K true -A30 -P 1048576 -- -root /usr/lib64/erlang -progname erl -- -home /var/lib/rabbitmq -- -noshell -noinput -sname rabbit@bbn-hn -boot /var/lib/rabbitmq/mnesia/rabbit@bbn-hn-plugins-expand/rabbit -kernel inet_default_connect_options [{nodelay,true}] -sasl errlog_type error -kernel error_logger {file,"/var/log/rabbitmq/rabbit@bbn-hn.log"} -sasl sasl_error_logger {file,"/var/log/rabbitmq/rabbit@bbn-hn-sasl.log"} -os_mon start_cpu_sup true -os_mon start_disksup false -os_mon start_memsup false -mnesia dir "/var/lib/rabbitmq/mnesia/rabbit@bbn-hn" [16:09:46] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/lib64/erlang/erts-5.8.5/bin/beam.smp erlang-erts-R14B-04.1.el6.x86_64 [16:10:42] jbs@bbn-hn:/home/jbs +$ rpm -qf /var/lib/rabbitmq rabbitmq-server-2.6.1-1.el6.noarch }}} (I don't really know what that is; I didn't check every path or file on that commandline, but I'm optimistic that they're all from RPMs.) This is from an RPM: {{{ root 8477 1 0 Jun22 ? 00:00:42 /usr/sbin/httpd [16:13:19] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/httpd httpd-2.2.15-15.el6.centos.1.x86_64 }}} Java is from an RPM (see above), and so is FlowVisor: {{{ 491 9114 1 3 Jun27 ? 1-10:41:10 java -server -Xms256M -Xmx1500M -XX:OnError=flowvisor-crash-logger -XX:+UseConcMarkSweepGC -Dorg.flowvisor.config_dir=/opt/flowvisor/etc/flowvisor -Dorg.flowvisor.install_dir=/opt/flowvisor/libexec/flowvisor -Djavax.net.ssl.keyStore=/opt/flowvisor/etc/flowvisor/mySSLKeyStore -Djavax.net.ssl.keyStorePassword=CHANGEME_PASSWD -cp /opt/flowvisor/libexec/flowvisor/openflow.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-client-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-common-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/xmlrpc-server-3.1.3.jar:/opt/flowvisor/libexec/flowvisor/commons-logging-1.1.jar:/opt/flowvisor/libexec/flowvisor/ws-commons-util-1.0.2.jar:/opt/flowvisor/libexec/flowvisor/jsse.jar:/opt/flowvisor/libexec/flowvisor/asm-3.0.jar:/opt/flowvisor/libexec/flowvisor/cglib-2.2.jar:/opt/flowvisor/libexec/flowvisor/commons-codec-1.4.jar:/opt/flowvisor/libexec/flowvisor/gson-1.7.1.jar:/opt/flowvisor/libexec/flowvisor/jetty-continuation-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-http-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-io-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-security-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-server-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/jetty-util-7.0.2.v20100331.jar:/opt/flowvisor/libexec/flowvisor/servlet-api-2.5.jar:/opt/flowvisor/libexec/flowvisor/flowvisor.jar org.flowvisor.FlowVisor /opt/flowvisor/etc/flowvisor/config.xml [16:14:02] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/flowvisor/libexec/flowvisor/flowvisor.jar flowvisor-0.8.2-1.x86_64 }}} This is from an RPM: {{{ named 13783 1 0 Jun22 ? 00:01:04 /usr/sbin/named -u named [16:15:45] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/named bind-9.7.3-8.P3.el6_2.2.x86_64 }}} This is from an RPM: {{{ jonmills 16835 16833 0 00:09 ? 00:00:00 sshd: jonmills@pts/2 [16:16:07] jbs@bbn-hn:/home/jbs +$ which sshd sshd is /usr/sbin/sshd [16:16:12] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/sshd openssh-server-5.3p1-70.el6_2.2.x86_64 }}} Java is from an RPM (see above), I don't think the other stuff here is: {{{ 2006 19259 1 0 Jul05 ? 00:24:49 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-aux/tomcat-7/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -XX:+CMSClassUnloadingEnabled -XX:+CMSPermGenSweepingEnabled -XX:MaxPermSize=128m -Xmx1024m -Djavax.net.ssl.trustStore=/opt/orca-aux/tomcat-7/ssl/trusted.jks -Djavax.net.ssl.trustStorePassword=orcaorca -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=14000 -Djava.endorsed.dirs=/opt/orca-aux/tomcat-7/endorsed -classpath /opt/orca-aux/tomcat-7/bin/bootstrap.jar:/opt/orca-aux/tomcat-7/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-aux/tomcat-7 -Dcatalina.home=/opt/orca-aux/tomcat-7 -Djava.io.tmpdir=/opt/orca-aux/tomcat-7/temp org.apache.catalina.startup.Bootstrap start [16:16:15] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-aux/tomcat-7/bin/tomcat-juli.jar file /opt/orca-aux/tomcat-7/bin/tomcat-juli.jar is not owned by any package [16:17:07] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-aux/tomcat-7/bin file /opt/orca-aux/tomcat-7/bin is not owned by any package [16:17:10] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-aux/tomcat-7 file /opt/orca-aux/tomcat-7 is not owned by any package [16:17:11] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-aux file /opt/orca-aux is not owned by any package [16:18:40] jbs@bbn-hn:/home/jbs +$ rpm -qa | grep -i orca || echo no match no match }}} Java is from an RPM (see above), I don't think the other stuff here is: {{{ 2006 19470 1 0 Jul20 ? 01:02:40 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-12080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xmx1024m -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=12000 -Djava.endorsed.dirs=/opt/orca-12080/tomcat/endorsed -classpath /opt/orca-12080/tomcat/bin/bootstrap.jar:/opt/orca-12080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-12080/tomcat -Dcatalina.home=/opt/orca-12080/tomcat -Djava.io.tmpdir=/opt/orca-12080/tomcat/temp org.apache.catalina.startup.Bootstrap start [16:19:43] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-12080/tomcat/bin/tomcat-juli.jar file /opt/orca-12080/tomcat/bin/tomcat-juli.jar is not owned by any package [16:19:47] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-12080/tomcat/bin file /opt/orca-12080/tomcat/bin is not owned by any package [16:19:49] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-12080 file /opt/orca-12080 is not owned by any package [16:19:51] jbs@bbn-hn:/home/jbs +$ rpm -qa | grep -i orca || echo no match no match }}} Java is from an RPM (see above), I don't think the other stuff here is: {{{ 2006 19625 1 0 Jul20 ? 00:29:16 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-13080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/opt/orca-13080/tomcat/endorsed -classpath /opt/orca-13080/tomcat/bin/bootstrap.jar:/opt/orca-13080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-13080/tomcat -Dcatalina.home=/opt/orca-13080/tomcat -Djava.io.tmpdir=/opt/orca-13080/tomcat/temp org.apache.catalina.startup.Bootstrap start [16:21:25] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-13080/tomcat/bin/tomcat-juli.jar file /opt/orca-13080/tomcat/bin/tomcat-juli.jar is not owned by any package [16:21:38] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-13080/tomcat/bin file /opt/orca-13080/tomcat/bin is not owned by any package [16:21:40] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-13080/tomcat file /opt/orca-13080/tomcat is not owned by any package [16:21:42] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-13080 file /opt/orca-13080 is not owned by any package }}} This is not from an RPM: {{{ rack_bbn 22989 1 0 Jun18 ? 00:00:24 /omd/sites/rack_bbn/var/tmp/xinetd -pidfile /omd/sites/rack_bbn/tmp/run/xinetd.pid -filelog /omd/sites/rack_bbn/var/log/xinetd.log -f /omd/sites/rack_bbn/etc/xinetd.conf [16:21:43] jbs@bbn-hn:/home/jbs +$ rpm -qf /omd/sites/rack_bbn/var/tmp/xinetd file /omd/sites/rack_bbn/var/tmp/xinetd is not owned by any package }}} This is from an RPM: {{{ root 23122 1 0 Jun22 ? 00:00:00 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf [16:23:13] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/vsftpd vsftpd-2.2.2-6.el6_2.1.x86_64 }}} This is from an RPM: {{{ root 23124 1 0 Jun22 ? 00:00:06 xcatd: SSL listener [16:23:32] jbs@bbn-hn:/home/jbs +$ which xcatd xcatd is /opt/xcat/sbin/xcatd [16:23:35] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/xcat/sbin/xcatd xCAT-server-2.6.9-snap201111090305.noarch }}} This is from an RPM: {{{ root 23127 23124 0 Jun22 ? 00:00:01 xcatd: install monitor [16:23:32] jbs@bbn-hn:/home/jbs +$ which xcatd xcatd is /opt/xcat/sbin/xcatd [16:23:35] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/xcat/sbin/xcatd xCAT-server-2.6.9-snap201111090305.noarch }}} This is from an RPM: {{{ root 27286 1 0 Jun18 ? 00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf [16:23:40] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/nginx nginx-0.8.54-1.el6.x86_64 }}} This is from an RPM: {{{ dhcpd 27903 1 0 Jun22 ? 00:02:12 /usr/sbin/dhcpd -user dhcpd -group dhcpd bond2.1007 bond2.1006 [16:24:50] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/dhcpd dhcp-4.1.1-25.P1.el6_2.1.x86_64 }}} Lumping these nova things together, Python is from an RPM, as are nova-api and nova-objectstore: {{{ nova 28606 28603 0 Jul06 ? 00:06:51 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8781.log --ec2_listen_port=8781 --osapi_listen_port=8788 nova 28639 1 0 Jul06 ? 00:00:07 /usr/bin/python /usr/bin/nova-objectstore --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-objectstore.log --pidfile=/var/run/nova/nova-objectstore.pid nova 28701 28699 0 Jul06 ? 00:06:46 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8782.log --ec2_listen_port=8782 --osapi_listen_port=8787 nova 28814 28812 0 Jul06 ? 00:06:32 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8783.log --ec2_listen_port=8783 --osapi_listen_port=8786 nova 28878 28876 0 Jul06 ? 00:06:09 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8784.log --ec2_listen_port=8784 --osapi_listen_port=8785 nova 28903 28901 0 Jul06 ? 00:06:12 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8791.log --ec2_listen_port=8791 --osapi_listen_port=8798 nova 28923 28921 0 Jul06 ? 00:06:49 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8792.log --ec2_listen_port=8792 --osapi_listen_port=8797 nova 28943 28941 0 Jul06 ? 00:06:28 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8793.log --ec2_listen_port=8793 --osapi_listen_port=8796 nova 28965 28963 0 Jul06 ? 00:07:28 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8794.log --ec2_listen_port=8794 --osapi_listen_port=8795 nova 28987 28985 0 Jul06 ? 00:06:01 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8801.log --ec2_listen_port=8801 --osapi_listen_port=8808 nova 29016 29014 0 Jul06 ? 00:06:33 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8802.log --ec2_listen_port=8802 --osapi_listen_port=8807 nova 29042 29040 0 Jul06 ? 00:09:05 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8803.log --ec2_listen_port=8803 --osapi_listen_port=8806 nova 29084 29080 0 Jul06 ? 00:06:34 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8804.log --ec2_listen_port=8804 --osapi_listen_port=8805 nova 29140 29138 0 Jul06 ? 00:06:11 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8811.log --ec2_listen_port=8811 --osapi_listen_port=8818 nova 29162 29160 0 Jul06 ? 00:06:29 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8812.log --ec2_listen_port=8812 --osapi_listen_port=8817 nova 29185 29183 0 Jul06 ? 00:06:42 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8813.log --ec2_listen_port=8813 --osapi_listen_port=8816 nova 29205 29203 0 Jul06 ? 00:06:47 /usr/bin/python /usr/bin/nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-8814.log --ec2_listen_port=8814 --osapi_listen_port=8815 [16:27:28] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/python python-2.6.6-29.el6.x86_64 [16:27:31] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/nova-api openstack-nova-api-2011.3-b1281neuca2.noarch [16:27:34] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/nova-objectstore openstack-nova-objectstore-2011.3-b1281neuca2.noarch }}} Lumping these glance things together, all of these are from RPMs: {{{ glance 28780 1 0 Jul06 ? 00:00:54 /usr/bin/python /usr/bin/glance-api --config-file=/etc/glance/glance-api.conf --log-config=/etc/glance/logging-api.conf glance 28826 1 0 Jul06 ? 00:00:50 /usr/bin/python /usr/bin/glance-registry --config-file=/etc/glance/glance-registry.conf -v --log-config=/etc/glance/logging-registry.conf [16:28:17] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/python python-2.6.6-29.el6.x86_64 [16:28:18] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/glance-api openstack-glance-2011.3-b1277.noarch [16:28:20] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/bin/glance-registry openstack-glance-2011.3-b1277.noarch }}} Java is from an RPM (see above), I don't think the other stuff here is: {{{ 2006 29224 1 0 Jul20 ? 00:29:38 /usr/java/latest/bin/java -Djava.util.logging.config.file=/opt/orca-11080/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xmx1024m -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=11000 -Djava.endorsed.dirs=/opt/orca-11080/tomcat/endorsed -classpath /opt/orca-11080/tomcat/bin/bootstrap.jar:/opt/orca-11080/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/orca-11080/tomcat -Dcatalina.home=/opt/orca-11080/tomcat -Djava.io.tmpdir=/opt/orca-11080/tomcat/temp org.apache.catalina.startup.Bootstrap start [16:29:14] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-11080/tomcat/bin/tomcat-juli.jar file /opt/orca-11080/tomcat/bin/tomcat-juli.jar is not owned by any package [16:29:15] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-11080/tomcat/bin file /opt/orca-11080/tomcat/bin is not owned by any package [16:29:17] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-11080/tomcat file /opt/orca-11080/tomcat is not owned by any package [16:29:18] jbs@bbn-hn:/home/jbs +$ rpm -qf /opt/orca-11080 file /opt/orca-11080 is not owned by any package [16:29:19] jbs@bbn-hn:/home/jbs +$ rpm -qa | grep -i orca || echo no match no match }}} This is from an RPM: {{{ jonmills 32641 32639 0 10:09 ? 00:00:00 sshd: jonmills@pts/1 [16:29:51] jbs@bbn-hn:/home/jbs +$ which sshd sshd is /usr/sbin/sshd [16:29:52] jbs@bbn-hn:/home/jbs +$ rpm -qf /usr/sbin/sshd openssh-server-5.3p1-70.el6_2.2.x86_64 }}} So, that's these RPMs: {{{ puppet-2.7.18-1.el6.noarch jdk-1.6.0_30-fcs.x86_64 rsyslog-4.6.2-12.el6.x86_64 rpcbind-0.2.0-8.el6.x86_64 nfs-utils-1.2.3-15.el6.x86_64 openldap-servers-2.4.23-20.el6.x86_64 quota-3.17-16.el6.x86_64 nfs-utils-1.2.3-15.el6.x86_64 openssh-server-5.3p1-70.el6_2.2.x86_64 xinetd-2.3.14-33.el6.x86_64 apcupsd-3.14.8-4.el6.x86_64 mysql-server-5.1.61-1.el6_2.1.x86_64 postfix-2.6.6-2.2.el6_1.x86_64 erlang-erts-R14B-04.1.el6.x86_64 erlang-erts-R14B-04.1.el6.x86_64 rabbitmq-server-2.6.1-1.el6.noarch httpd-2.2.15-15.el6.centos.1.x86_64 flowvisor-0.8.2-1.x86_64 bind-9.7.3-8.P3.el6_2.2.x86_64 openssh-server-5.3p1-70.el6_2.2.x86_64 vsftpd-2.2.2-6.el6_2.1.x86_64 xCAT-server-2.6.9-snap201111090305.noarch xCAT-server-2.6.9-snap201111090305.noarch nginx-0.8.54-1.el6.x86_64 dhcp-4.1.1-25.P1.el6_2.1.x86_64 python-2.6.6-29.el6.x86_64 openstack-nova-api-2011.3-b1281neuca2.noarch openstack-nova-objectstore-2011.3-b1281neuca2.noarch python-2.6.6-29.el6.x86_64 openstack-glance-2011.3-b1277.noarch openstack-glance-2011.3-b1277.noarch openssh-server-5.3p1-70.el6_2.2.x86_64 }}} Sorted and uniq-ed: {{{ apcupsd-3.14.8-4.el6.x86_64 bind-9.7.3-8.P3.el6_2.2.x86_64 dhcp-4.1.1-25.P1.el6_2.1.x86_64 erlang-erts-R14B-04.1.el6.x86_64 flowvisor-0.8.2-1.x86_64 httpd-2.2.15-15.el6.centos.1.x86_64 jdk-1.6.0_30-fcs.x86_64 mysql-server-5.1.61-1.el6_2.1.x86_64 nfs-utils-1.2.3-15.el6.x86_64 nginx-0.8.54-1.el6.x86_64 openldap-servers-2.4.23-20.el6.x86_64 openssh-server-5.3p1-70.el6_2.2.x86_64 openstack-glance-2011.3-b1277.noarch openstack-nova-api-2011.3-b1281neuca2.noarch openstack-nova-objectstore-2011.3-b1281neuca2.noarch postfix-2.6.6-2.2.el6_1.x86_64 puppet-2.7.18-1.el6.noarch python-2.6.6-29.el6.x86_64 quota-3.17-16.el6.x86_64 rabbitmq-server-2.6.1-1.el6.noarch rpcbind-0.2.0-8.el6.x86_64 rsyslog-4.6.2-12.el6.x86_64 vsftpd-2.2.2-6.el6_2.1.x86_64 xCAT-server-2.6.9-snap201111090305.noarch xinetd-2.3.14-33.el6.x86_64 }}} And these things which aren't from RPMs: {{{ /opt/floodlight/floodlight.jar is not owned by any package /opt/imageproxy is not owned by any package /opt/orca-aux/tomcat-7/bin/tomcat-juli.jar is not owned by any package /opt/orca-aux/tomcat-7/bin is not owned by any package /opt/orca-aux/tomcat-7 is not owned by any package /opt/orca-aux is not owned by any package /opt/orca-12080/tomcat/bin/tomcat-juli.jar is not owned by any package /opt/orca-12080/tomcat/bin is not owned by any package /opt/orca-12080 is not owned by any package /opt/orca-13080/tomcat/bin/tomcat-juli.jar is not owned by any package /opt/orca-13080/tomcat/bin is not owned by any package /opt/orca-13080/tomcat is not owned by any package /opt/orca-13080 is not owned by any package /omd/sites/rack_bbn/var/tmp/xinetd is not owned by any package /opt/orca-11080/tomcat/bin/tomcat-juli.jar is not owned by any package /opt/orca-11080/tomcat/bin is not owned by any package /opt/orca-11080/tomcat is not owned by any package /opt/orca-11080 is not owned by any package }}} The xinetd in /omd is a copy of the stock xinetd: {{{ [12:27:40] jbs@bbn-hn:/home/jbs +$ md5sum /omd/sites/rack_bbn/var/tmp/xinetd /usr/sbin/xinetd 1c0ef402cd3ad81e01cda637a6c02104 /omd/sites/rack_bbn/var/tmp/xinetd 1c0ef402cd3ad81e01cda637a6c02104 /usr/sbin/xinetd }}} So that essentialy is from an RPM. ExoGENI ticket exoticket:93 is tracking the task of identifying the versions and sources of the others. As to the RPMs, these look like standard CentOS: {{{ [11:58:34] jbs@bbn-hn:/home/jbs +$ yum list installed apcupsd-3.14.8-4.el6.x86_64 bind-9.7.3-8.P3.el6_2.2.x86_64 dhcp-4.1.1-25.P1.el6_2.1.x86_64 erlang-erts-R14B-04.1.el6.x86_64 httpd-2.2.15-15.el6.centos.1.x86_64 mysql-server-5.1.61-1.el6_2.1.x86_64 nfs-utils-1.2.3-15.el6.x86_64 nginx-0.8.54-1.el6.x86_64 openldap-servers-2.4.23-20.el6.x86_64 openssh-server-5.3p1-70.el6_2.2.x86_64 postfix-2.6.6-2.2.el6_1.x86_64 python-2.6.6-29.el6.x86_64 quota-3.17-16.el6.x86_64 rabbitmq-server-2.6.1-1.el6.noarch rpcbind-0.2.0-8.el6.x86_64 rsyslog-4.6.2-12.el6.x86_64 vsftpd-2.2.2-6.el6_2.1.x86_64 xinetd-2.3.14-33.el6.x86_64 Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile * base: mirror.dattobackup.com * epel: mirror.metrocast.net * extras: mirror.dattobackup.com * updates: mirror.metrocast.net Installed Packages apcupsd.x86_64 3.14.8-4.el6 @epel dhcp.x86_64 12:4.1.1-25.P1.el6_2.1 @CentOS Updates/6.2 erlang-erts.x86_64 R14B-04.1.el6 @UIedited_1/6.2 httpd.x86_64 2.2.15-15.el6.centos.1 @CentOS Updates/6.2 mysql-server.x86_64 5.1.61-1.el6_2.1 @CentOS Updates/6.2 nfs-utils.x86_64 1:1.2.3-15.el6 @anaconda-CentOS-201112091719.x86_64/6.2 nginx.x86_64 0.8.54-1.el6 @UIedited_1/6.2 openldap-servers.x86_64 2.4.23-20.el6 @base openssh-server.x86_64 5.3p1-70.el6_2.2 @CentOS Updates/6.2 postfix.x86_64 2:2.6.6-2.2.el6_1 @anaconda-CentOS-201112091719.x86_64/6.2 python.x86_64 2.6.6-29.el6 @anaconda-CentOS-201112091719.x86_64/6.2 quota.x86_64 1:3.17-16.el6 @anaconda-CentOS-201112091719.x86_64/6.2 rabbitmq-server.noarch 2.6.1-1.el6 @UIedited_1/6.2 rpcbind.x86_64 0.2.0-8.el6 @anaconda-CentOS-201112091719.x86_64/6.2 rsyslog.x86_64 4.6.2-12.el6 @anaconda-CentOS-201112091719.x86_64/6.2 vsftpd.x86_64 2.2.2-6.el6_2.1 @CentOS Updates/6.2 xinetd.x86_64 2:2.3.14-33.el6 @anaconda-CentOS-201112091719.x86_64/6.2 }}} These look like not: {{{ [11:58:38] jbs@bbn-hn:/home/jbs +$ yum list installed flowvisor-0.8.2-1.x86_64 jdk-1.6.0_30-fcs.x86_64 openstack-glance-2011.3-b1277.noarch openstack-nova-api-2011.3-b1281neuca2.noarch openstack-nova-objectstore-2011.3-b1281neuca2.noarch puppet-2.7.18-1.el6.noarch xCAT-server-2.6.9-snap201111090305.noarch Loaded plugins: fastestmirror, refresh-packagekit, security Loading mirror speeds from cached hostfile * base: mirror.dattobackup.com * epel: mirror.metrocast.net * extras: mirror.dattobackup.com * updates: mirror.metrocast.net Installed Packages flowvisor.x86_64 0.8.2-1 @exogeni jdk.x86_64 2000:1.6.0_30-fcs @ExoGENI/6.2 openstack-glance.noarch 1:2011.3-b1277 @ExoGENI-noarch/6.2 openstack-nova-api.noarch 1:2011.3-b1281neuca2 @exogeni-noarch openstack-nova-objectstore.noarch 1:2011.3-b1281neuca2 @exogeni-noarch puppet.noarch 2.7.18-1.el6 @puppetlabs-products xCAT-server.noarch 4:2.6.9-snap201111090305 @xCAT/6.2 }}} I can find the name of a source RPM for each of those: {{{ [12:12:44] jbs@bbn-hn:/home/jbs +$ for package in flowvisor-0.8.2-1.x86_64 jdk-1.6.0_30-fcs.x86_64 openstack-glance-2011.3-b1277.noarch openstack-nova-api-2011.3-b1281neuca2.noarch openstack-nova-objectstore-2011.3-b1281neuca2.noarch puppet-2.7.18-1.el6.noarch xCAT-server-2.6.9-snap201111090305.noarch ; do rpm -q $package --qf 'Name : %{NAME}\nSource RPM : %{SOURCERPM}\n\n' ; done Name : flowvisor Source RPM : flowvisor-0.8.2-1.src.rpm Name : jdk Source RPM : jdk-1.6.0_30-fcs.src.rpm Name : openstack-glance Source RPM : openstack-glance-2011.3-b1277.src.rpm Name : openstack-nova-api Source RPM : openstack-nova-2011.3-b1281neuca2.src.rpm Name : openstack-nova-objectstore Source RPM : openstack-nova-2011.3-b1281neuca2.src.rpm Name : puppet Source RPM : puppet-2.7.18-1.el6.src.rpm Name : xCAT-server Source RPM : xCAT-server-2.6.9-snap201111090305.src.rpm }}} So, now to connect that with the repo URLs... That's a somewhat manual process, as you need to fish the repo URL out of the relevant file in /etc/yum.repos.d, but those seem to be: {{{ [14:19:44] jbs@bbn-hn:/home/jbs +$ grep baseurl /etc/yum.repos.d/exogeni.repo baseurl=http://software.exogeni.net/repo/exogeni/6/current/$basearch baseurl=http://software.exogeni.net/repo/exogeni/6/current/noarch [14:19:55] jbs@bbn-hn:/home/jbs +$ grep baseurl /etc/yum.repos.d/puppetlabs.repo baseurl=http://yum.puppetlabs.com/el/6/products/$basearch baseurl=http://yum.puppetlabs.com/el/6/dependencies/$basearch baseurl=http://yum.puppetlabs.com/el/6/products/SRPMS baseurl=http://yum.puppetlabs.com/el/6/dependencies/SRPMS }}} Hmm, I don't see a repo for xCAT anywhere: {{{ [14:20:23] jbs@bbn-hn:/home/jbs +$ grep -i xcat /etc/yum.repos.d/* || echo no match no match }}} I've asked on exogeni-design about that. Meanwhile, http://software.exogeni.net/repo/exogeni doesn't seem to have an obvious SRPM location, so I've created exoticket:96 for that. Puppet does have SRPMs, as the baseurl listings above imply, and http://yum.puppetlabs.com/el/6/products/SRPMS/puppet-2.7.18-1.el6.src.rpm has one for Puppet 2.7.18, so that seems good. Aside from the open tickets (and the one question to exogeni-design), I think this step is now complete. == Step 2: identify network-listening software on an !OpenStack worker node == '''Using:''' * Using netstat, enumerate processes on bbn-w1 which listen for network connections from outside the node * For each process found: * Use the command-line or `/proc` to determine what executable file is running * Use RPM tools to determine whether the executable file is part of an RPM * Otherwise, use documentation or iterate with the ExoGENI team to determine the origin of the software * For each RPM found, identify a location from which a source RPM for that package can be obtained * For each non-RPM software source found, identify a location from which the source code for that version can be obtained. '''Verify:''' * The source of each network-listening file can be identified * RPM source packages can be found for each RPM-sourced package * The source code and identifiable version (e.g. a git tag) can be found for each non-RPM software source == Step 3: verify VLANs on the rack management switch == '''Using:''' * Establish a privileged login to the 8052 (management) switch * Obtain the list of all VLAN mappings for all interfaces * Determine which interfaces connect to worker nodes * Create a listing of worker node control interfaces to VLANs by interface type '''Verify:''' * All worker node IMM interfaces are access ports on VLAN 1006 * All worker node iSCSI interfaces are access ports on VLAN 1009 * Control interfaces for all workers in !OpenStack mode are access ports on VLAN 1007 * Control interfaces for all workers in bare metal mode are access ports on VLAN 1008 == Step 4: verify MAC addresses on the rack management switch == '''Using:''' * Establish a privileged login to the 8052 (management) switch * Obtain a list of the full MAC address table of the switch * Use interface listings on hosts and devices to determine the identities of all MAC addresses '''Verify:''' * It is possible to identify and classify every MAC address visible on the switch