tcpdump + rpcinfo

Link to this paste: http://bugs.dragonflybsd.org/pastes/394

Added by tuxillo over 1 year ago.
Syntax: Plain Text 

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

TCPDUMP (all traffic from vkernel to NFS server)
-------------------------------------------------------


[root@openfiler ~]# tcpdump -vvvv -s 4096 -r /tmp/openfiler.pcap
reading from file /tmp/openfiler.pcap, link-type EN10MB (Ethernet)
01:07:15.877731 arp who-has 192.168.1.254 tell 192.168.1.254
01:07:15.878752 arp who-has 192.168.1.76 tell 192.168.1.254
01:07:15.878845 arp reply 192.168.1.76 is-at 00:0c:29:2d:89:93 (oui Unknown)
01:07:15.879068 IP (tos 0x0, ttl  64, id 47642, offset 0, flags [none], proto: UDP (17), length: 104) 192.168.1.254.1023 > 192.168.1.76.sunrpc: [udp sum ok] UDP, length 76
01:07:15.879443 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto: UDP (17), length: 56) 192.168.1.76.sunrpc > 192.168.1.254.1023: [bad udp cksum d26a!] UDP, length 28
01:07:15.880164 IP (tos 0x0, ttl  64, id 46681, offset 0, flags [none], proto: UDP (17), length: 120) 192.168.1.254.1023 > 192.168.1.76.34808: [udp sum ok] UDP, length 92
01:07:15.881692 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto: UDP (17), length: 92) 192.168.1.76.34808 > 192.168.1.254.1023: [bad udp cksum ed90!] UDP, length 64


RPCINFO
----------------------------------------------------------------

[cocaine] /home/source/dfbsd> rpcinfo -p 192.168.1.76
   program vers proto   port  service
    100000    2   tcp    111  rpcbind
    100000    2   udp    111  rpcbind
    100024    1   udp  34613  status
    100024    1   tcp  53162  status
    100011    1   udp    857  rquotad
    100011    2   udp    857  rquotad
    100011    1   tcp    860  rquotad
    100011    2   tcp    860  rquotad
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    4   udp   2049  nfs
    100227    2   udp   2049  nfs_acl
    100227    3   udp   2049  nfs_acl
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100003    4   tcp   2049  nfs
    100227    2   tcp   2049  nfs_acl
    100227    3   tcp   2049  nfs_acl
    100021    1   udp  57127  nlockmgr
    100021    3   udp  57127  nlockmgr
    100021    4   udp  57127  nlockmgr
    100021    1   tcp  37145  nlockmgr
    100021    3   tcp  37145  nlockmgr
    100021    4   tcp  37145  nlockmgr
    100005    1   udp  34808  mountd
    100005    1   tcp  55693  mountd
    100005    2   udp  34808  mountd
    100005    2   tcp  55693  mountd
    100005    3   udp  34808  mountd
    100005    3   tcp  55693  mountd