鸟哥学习笔记---网络基本管理

原创

s910501 2013-03-20 17:16:52 ©著作权

文章标签 Linux 文章分类 运维

©著作权归作者所有：来自51CTO博客作者s910501的原创作品，请联系作者获取转载授权，否则将追究法律责任

[root@szm ~]# netstat -tulnp

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:51695 0.0.0.0:* LISTEN 1987/rpc.statd

tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1912/rpcbind

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2224/sshd

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2300/master

tcp 0 0 :::46592 :::* LISTEN 1987/rpc.statd

tcp 0 0 :::111 :::* LISTEN 1912/rpcbind

tcp 0 0 :::22 :::* LISTEN 2224/sshd

udp 0 0 0.0.0.0:38783 0.0.0.0:* 1956/avahi-daemon:

udp 0 0 0.0.0.0:815 0.0.0.0:* 1912/rpcbind

udp 0 0 0.0.0.0:53296 0.0.0.0:* 1987/rpc.statd

udp 0 0 0.0.0.0:68 0.0.0.0:* 1972/dhclient

udp 0 0 0.0.0.0:68 0.0.0.0:* 1975/dhclient

udp 0 0 0.0.0.0:5353 0.0.0.0:* 1956/avahi-daemon:

udp 0 0 0.0.0.0:111 0.0.0.0:* 1912/rpcbind

udp 0 0 0.0.0.0:891 0.0.0.0:* 1987/rpc.statd

udp 0 0 :::52525 :::* 1987/rpc.statd

udp 0 0 :::815 :::* 1912/rpcbind

udp 0 0 :::111 :::* 1912/rpcbind

[root@szm ~]# /etc/init.d/avahi-daemon stop

Shutting down Avahi daemon: [ OK ]

[root@szm ~]# chkconfig avahi-daemon off

[root@szm ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE="eth0"

HWADDR="00:0C:29:24:C2:A5"

BOOTPROTO=dhcp

NM_CONTROLLED="yes"-----------网络控制

ONBOOT="yes"

[root@szm ~]# cat /etc/sysconfig/network

NETWORKING=yes

HOSTNAME=szm.test.com

[root@szm ~]# cat /etc/resolv.conf

# Generated by NetworkManager

domain localdomain

search localdomain test.com

nameserver 192.168.179.2

nameserver 172.16.2.1

nameserver 172.16.2.6

[root@szm ~]# cat /etc/hosts

192.168.179.139 szm.test.com szm # Added by NetworkManager

127.0.0.1 localhost.localdomain localhost

::1 szm.test.com szm localhost6.localdomain6 localhost6

[root@szm ~]# dig www.baidu.com

; <<>> DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6 <<>> www.baidu.com

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22349

;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:

;www.baidu.com. IN A

;; ANSWER SECTION:

www.baidu.com. 5 IN CNAME www.a.shifen.com.

www.a.shifen.com. 5 IN A 61.135.169.105

www.a.shifen.com. 5 IN A 61.135.169.125

;; AUTHORITY SECTION:

a.shifen.com. 5 IN NS ns5.a.shifen.com.

a.shifen.com. 5 IN NS ns7.a.shifen.com.

a.shifen.com. 5 IN NS ns9.a.shifen.com.

a.shifen.com. 5 IN NS ns4.a.shifen.com.

;; ADDITIONAL SECTION:

ns4.a.shifen.com. 5 IN A 123.125.113.67

ns5.a.shifen.com. 5 IN A 220.181.3.178

ns7.a.shifen.com. 5 IN A 220.181.38.47

ns9.a.shifen.com. 5 IN A 61.135.166.226

;; Query time: 11 msec

;; SERVER: 192.168.179.2#53(192.168.179.2)

;; WHEN: Wed Mar 20 22:43:59 2013

;; MSG SIZE rcvd: 226

[root@szm ~]# iwconfig

lo no wireless extensions.

eth0 no wireless extensions.

eth1 no wireless extensions.

[root@szm ~]# iwlist --help

Usage: iwlist [interface] scanning [essid NNN] [last]

[interface] frequency

[interface] channel

[interface] bitrate

[interface] rate

[interface] encryption

[interface] keys

[interface] power

[interface] txpower

[interface] retry

[interface] ap

[interface] accesspoints

[interface] peers

[interface] event

[interface] auth

[interface] wpakeys

[interface] genie

[interface] modulation

Flags Possible flags include

U (route is up)

H (target is a host)

G (use gateway)

R (reinstate route for dynamic routing)

D (dynamically installed by daemon or redirect)

M (modified from routing daemon or redirect)

A (installed by addrconf)

C (cache entry)

! (reject route)

[root@szm ~]# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

172.16.128.0 0.0.0.0 255.255.255.0 U 1 0 0 eth1

0.0.0.0 172.16.128.254 0.0.0.0 UG 0 0 0 eth1

[root@szm ~]# route add -net 192.168.179.0 netmask 255.255.255.0 dev eth1

[root@szm ~]# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

192.168.179.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1

172.16.128.0 0.0.0.0 255.255.255.0 U 1 0 0 eth1

0.0.0.0 172.16.128.254 0.0.0.0 UG 0 0 0 eth1

[root@szm ~]# route del -net 192.168.179.0 netmask 255.255.255.0 dev eth1

[root@szm ~]# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

172.16.128.0 0.0.0.0 255.255.255.0 U 1 0 0 eth1

0.0.0.0 172.16.128.254 0.0.0.0 UG 0 0 0 eth1

[root@szm ~]# route add default gw 192.168.1.254-------不同子网，不行

SIOCADDRT: No such process

[root@szm ~]# route add default gw 172.16.128.154

[root@szm ~]# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

172.16.128.0 0.0.0.0 255.255.255.0 U 1 0 0 eth1

0.0.0.0 172.16.128.154 0.0.0.0 UG 0 0 0 eth1

0.0.0.0 172.16.128.254 0.0.0.0 UG 0 0 0 eth1

[root@szm ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:24:c2:a5 brd ff:ff:ff:ff:ff:ff

3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000

link/ether 00:0c:29:24:c2:af brd ff:ff:ff:ff:ff:ff

[root@szm ~]# ip link show eth1

3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000

link/ether 00:0c:29:24:c2:af brd ff:ff:ff:ff:ff:ff

[root@szm ~]# ip -s link show eth0

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:24:c2:a5 brd ff:ff:ff:ff:ff:ff

RX: bytes packets errors dropped overrun mcast

415598 3291 0 0 0 0

TX: bytes packets errors dropped carrier collsns

442311 2835 0 0 0 0

[root@szm ~]# ip link set eth1 down

[root@szm ~]# ip link set eth1 up

[root@szm ~]# ip link set eth1 mtu 1000

修改名字之前要Down网卡：

[root@szm ~]# ip link set eth1 name vbird

RTNETLINK answers: Device or resource busy

[root@szm ~]# ip link set eth1 down

[root@szm ~]# ip link set eth1 name vbird

设置网卡的MAC地址：

[root@szm ~]# ip link set vbird address 00:0c:29:23:c2:c1

[root@szm ~]# ip link show vbird

3: vbird: <BROADCAST,MULTICAST> mtu 1000 qdisc pfifo_fast state DOWN qlen 1000

link/ether 00:0c:29:23:c2:c1 brd ff:ff:ff:ff:ff:ff

设置Ip地址：

[root@szm ~]# ip address show eth1

3: eth1: <BROADCAST,MULTICAST> mtu 1000 qdisc pfifo_fast state DOWN qlen 1000

link/ether 00:0c:29:23:c2:c1 brd ff:ff:ff:ff:ff:ff

inet 172.16.128.211/24 brd 172.16.128.255 scope global eth1

[root@szm ~]# ip address add 172.16.128.99/24 broadcast + dev eth1 label eth1:vbird

[root@szm ~]# ifconfig eth1

eth1 Link encap:Ethernet HWaddr 00:0C:29:23:C2:C1

inet addr:172.16.128.211 Bcast:172.16.128.255 Mask:255.255.255.0

BROADCAST MULTICAST MTU:1000 Metric:1

RX packets:125594 errors:0 dropped:0 overruns:0 frame:0

TX packets:3863 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:12181175 (11.6 MiB) TX bytes:492270 (480.7 KiB)

Interrupt:19 Base address:0x20a4

[root@szm ~]# ip address show eth1

3: eth1: <BROADCAST,MULTICAST> mtu 1000 qdisc pfifo_fast state DOWN qlen 1000

link/ether 00:0c:29:23:c2:c1 brd ff:ff:ff:ff:ff:ff

inet 172.16.128.211/24 brd 172.16.128.255 scope global eth1

inet 172.16.128.99/24 brd 172.16.128.255 scope global secondary eth1:vbird

[root@szm ~]# ip address del 172.16.128.99/24 dev eth1

[root@szm ~]# ip address show eth1

3: eth1: <BROADCAST,MULTICAST> mtu 1000 qdisc pfifo_fast state DOWN qlen 1000

link/ether 00:0c:29:23:c2:c1 brd ff:ff:ff:ff:ff:ff

inet 172.16.128.211/24 brd 172.16.128.255 scope global eth1

添加路由：

[root@szm ~]# ip route show

192.168.179.0/24 dev eth0 proto kernel scope link src 192.168.179.139 metric 1

default via 192.168.179.2 dev eth0 proto static

[root@szm ~]# ip route add 192.168.180.0/24 dev eth0

[root@szm ~]# ip route show

192.168.179.0/24 dev eth0 proto kernel scope link src 192.168.179.139 metric 1

192.168.180.0/24 dev eth0 scope link

default via 192.168.179.2 dev eth0 proto static

[root@szm ~]# ip route add 192.168.190.0/24 via 192.168.179.2 dev eth0

[root@szm ~]# ip route show

192.168.179.0/24 dev eth0 proto kernel scope link src 192.168.179.139 metric 1

192.168.180.0/24 dev eth0 scope link

192.168.190.0/24 via 192.168.179.2 dev eth0

default via 192.168.179.2 dev eth0 proto static

[root@szm ~]# ip route del 192.168.180.0/24

[root@szm ~]# ip route del 192.168.190.0/24

[root@szm ~]# ip route show

192.168.179.0/24 dev eth0 proto kernel scope link src 192.168.179.139 metric 1

default via 192.168.179.2 dev eth0 proto static

DHCP获得IP地址：

[root@szm ~]# dhclient eth0

扫描地址主机：

[root@szm bin]# cat ping.sh

#!/bin/bash

for siteip in $(seq 1 254)

site="172.16.128.${siteip}"

ping -W1 -c1 $site &> /dev/null

if [ "$?" == "0" ]; then

echo "$site is up"

else

echo "$site is down"

done

如果你的主机与待检测主机并不在同一个网络内，那么TTL默认使用255，如果是同一个网络内，那么TTL则默认使用64

[root@szm bin]# ping -c2 -s1000 -M do 172.16.128.254（MTU有do和dont两个参数）

PING 172.16.128.254 (172.16.128.254) 1000(1028) bytes of data.

From 172.16.128.211 icmp_seq=1 Frag needed and DF set (mtu = 1000)

--- 172.16.128.254 ping statistics ---

0 packets transmitted, 0 received, +2 errors

[root@szm bin]# traceroute -n tw.yahoo.com

traceroute to tw.yahoo.com (206.190.37.187), 30 hops max, 60 byte packets

1 192.168.179.2 2.034 ms 1.819 ms 1.792 ms

2 192.168.105.9 6.715 ms !N 6.630 ms !N 7.352 ms !N

traceroute默认使用的是UDP的超时等待，默认为5秒。对每个节点检测三次。

改用TCP做超时等待

[root@szm bin]# traceroute -n -T -w 1 tw.yahoo.com

traceroute to tw.yahoo.com (206.190.37.187), 30 hops max, 60 byte packets

1 192.168.179.2 2.161 ms 1.396 ms 1.145 ms

2 206.190.37.187 186.995 ms 187.765 ms 175.882 ms

[root@szm bin]# netstat -rn

Kernel IP routing table

Destination Gateway Genmask Flags MSS Window irtt Iface

192.168.179.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

172.16.128.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1

0.0.0.0 192.168.179.2 0.0.0.0 UG 0 0 0 eth0

[root@szm bin]# netstat -an

[root@szm bin]# netstat -tln

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State

tcp 0 0 0.0.0.0:43373 0.0.0.0:* LISTEN

tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN

tcp 0 0 :::139 :::* LISTEN

tcp 0 0 :::111 :::* LISTEN

tcp 0 0 :::51412 :::* LISTEN

tcp 0 0 :::22 :::* LISTEN

tcp 0 0 :::445 :::* LISTEN

Recv-Q:由非用户程序连接所复制而来的总bytes数

Send-Q:由远程主机发送而来的，但不具有ACK标志的总Bytes数，亦指主动连接SYN或其它标志的数据包所占的bytes数。

stat状态：

1.ESTABLISED：已经建立连接

2.SYN_SENT：发出主动连接（SYN标志）的连接数据包

3.SYN_RECV：接收到一个要求连接的主动连接数据包

4.FIN_WAIT1：该套接字服务（Socket）已中断，该连接正在断线当中

5.FIN_WAIT2：该连接已经挂断，但正在等待对方主机响应断线确认的数据包

6.TIME_WAIT：该连接已经挂断，但socket还在网络上等待结束

7.监听

[root@szm bin]# netstat -lutnp

[root@szm bin]# netstat -autnp

Client端是随机开放一个大于1024的Port进行连接，此外中有Root可以启动大于1024的Port

[root@szm bin]# cat /etc/services-----------存放Port与服务对应关系。

[root@szm bin]# host www.yahoo.com

www.yahoo.com is an alias for fd-fp3.wg1.b.yahoo.com.

fd-fp3.wg1.b.yahoo.com is an alias for ds-fp3.wg1.b.yahoo.com.

ds-fp3.wg1.b.yahoo.com is an alias for ds-fo-tw-sg.wg1.b.yahoo.com.

ds-fo-tw-sg.wg1.b.yahoo.com is an alias for ds-tw-fp3.wg1.b.yahoo.com.

ds-tw-fp3.wg1.b.yahoo.com has address 203.84.197.9

ds-tw-fp3.wg1.b.yahoo.com has address 203.84.197.25

ds-tw-fp3.wg1.b.yahoo.com has IPv6 address 2406:2000:f016:1fe::3000

ds-tw-fp3.wg1.b.yahoo.com has IPv6 address 2406:2000:f016:1fe::3001

指定服务器解析：

[root@szm bin]# host www.yahoo.com 172.16.2.1

Using domain server:

Name: 172.16.2.1

Address: 172.16.2.1#53

Aliases:

www.yahoo.com is an alias for fd-fp3.wg1.b.yahoo.com.

fd-fp3.wg1.b.yahoo.com is an alias for ds-fp3.wg1.b.yahoo.com.

ds-fp3.wg1.b.yahoo.com is an alias for ds-fo-tw-sg.wg1.b.yahoo.com.

ds-fo-tw-sg.wg1.b.yahoo.com is an alias for ds-tw-fp3.wg1.b.yahoo.com.

ds-tw-fp3.wg1.b.yahoo.com has address 203.84.197.25

ds-tw-fp3.wg1.b.yahoo.com has address 203.84.197.9

ds-tw-fp3.wg1.b.yahoo.com has IPv6 address 2406:2000:f016:1fe::3000

ds-tw-fp3.wg1.b.yahoo.com has IPv6 address 2406:2000:f016:1fe::3001

[root@szm bin]# nslookup -a www.yahoo.com

*** Invalid option: a

Server: 192.168.179.2

Address: 192.168.179.2#53

Non-authoritative answer:

www.yahoo.com canonical name = fd-fp3.wg1.b.yahoo.com.

fd-fp3.wg1.b.yahoo.com canonical name = ds-fp3.wg1.b.yahoo.com.

ds-fp3.wg1.b.yahoo.com canonical name = ds-fo-tw-sg.wg1.b.yahoo.com.

ds-fo-tw-sg.wg1.b.yahoo.com canonical name = ds-tw-fp3.wg1.b.yahoo.com.

Name: ds-tw-fp3.wg1.b.yahoo.com

Address: 203.84.197.25

Name: ds-tw-fp3.wg1.b.yahoo.com

Address: 203.84.197.9

[root@szm bin]# telnet localhost 110检测本地主机110这个Port是否正确启动

Trying 127.0.0.1...

telnet: connect to address 127.0.0.1: Connection refused

[root@szm bin]# telnet localhost 25检测

Trying 127.0.0.1...

Connected to localhost.

Escape character is '^]'.

220 szm.test.com ESMTP Postfix

ehlo localhost

250-szm.test.com

250-PIPELINING

250-SIZE 10240000

250-VRFY

250-ETRN

250-ENHANCEDSTATUSCODES

250-8BITMIME

250 DSN

quit

221 2.0.0 Bye

Connection closed by foreign host.

图形界面ftp:gftp

ftp常用命令:help,dir,cd,get file,mget file*,put file,delete file,mkdir,lcd /home,passive,binary,bye

[root@szm bin]# ftp 172.16.3.240 21

[root@szm bin]# lftp 172.16.3.240 -u kjdown,kjdown

[root@szm ~]# cat ./bin/lftp

open ftp.ksu.edu.tw

cd /pub/CentOS/

mget -c -d RPM-GPG*

bye

[root@szm ~]# lftp -f ./bin/lftp

[root@szm ~]# cat ./bin/lftp.sh

lftp -c "open ftp.ksu.edu.tw

cd /pub/CentOS/

mget -c -d RPM-GPG*

bye"

[root@szm ~]# sh ./bin/lftp.sh

[root@szm ~]# links /usr/share/doc/HTML/index.html

[root@szm ~]# links http://www.kernel.org

h:history

g:gotoURL

d:downloadPage

q:quit

o:option,/.elinks/elinks.conf

下载网页：

[root@szm ~]# links -dump http://www.yahoo.com > yahoo.html

[root@szm ~]# tcpdump --help

tcpdump version 4.1-PRE-CVS_2010_08_20

libpcap version 1.0.0

Usage: tcpdump [-aAdDefIKlLnNOpqRStuUvxX] [ -B size ] [ -c count ]

[ -C file_size ] [ -E algo:secret ] [ -F file ] [ -G seconds ]

[ -i interface ] [ -M secret ] [ -r file ]

[ -s snaplen ] [ -T type ] [ -w file ] [ -W filecount ]

[ -y datalinktype ] [ -z command ] [ -Z user ]

[ expression ]

-A:ASCII显示

-e:找二层包

-nn:不解析

-q：精简内容

-X：列出ASCII与hex内容对应

-i:接口

-w:保存包

-r:读包

-c:包数

[root@szm ~]# tcpdump -i eth0 -nn

[root@szm ~]# tcpdump -i eth0 -nn port 21

1：[root@szm ~]# tcpdump -i lo -nn

2：[root@szm ~]# ssh localhost

1：[root@szm ~]# tcpdump -i lo port 21

[root@szm ~]# tcpdump -i lo -nn 'port 22 and src host 192.168.1.1'

开启20000端口监听：

[root@szm ~]# nc -l localhost 20000 &

连接2000端口：

[root@szm ~]# nc localhost 20000

kkk

dkfakd

eqreijkajfd^C

[1]+ Stopped nc -l localhost 20000

[root@szm ~]# fg

nc -l localhost 20000

kkk

dkfakd

上一篇：鸟哥学习笔记---网络服务

下一篇：鸟哥学习笔记---samba

提问和评论都可以，用心的回复会被更多人看到评论

发布评论

相关文章

官方博客	全部文章	热门标签	班级博客
了解我们	网站地图	意见反馈

鸿蒙开发者社区	51CTO学堂
51CTO	软考资讯