|
Seva
|
 |
« : 18 Февраля 2014, 00:44:21 » |
|
Доброго времени суток.
Добрые люди помогите!
Есть основной Нодени сервер, где установлено ядро и база, так же есть пять штук сателлит, и на всех сателлитах не считает входящую статистику, при том на всех сателлитах одна и та же проблема, вот пример получение трафа с одной из сателлит по ipcad;
[root@stat ~]# rsh ХХХ.ХХХ.ХХХ.ХХХ stat
Interface 2: received ??, 5 m average 0 bytes/sec, 0 pkts/sec, dropped ??
Interface 1: received ??, 5 m average 1281191 bytes/sec, 3009 pkts/sec, dropped ??
Flow entries made: 803
Memory usage: 0% (89936 from 52428800)
Free slots for rsh clients: 9
IPCAD uptime is 24 minutes
domain.com uptime is 59 minutes
я сразу обротил внимание на : Interface 2: received ??, 5 m average 0 bytes/sec, 0 pkts/sec, dropped ??
получается что с Interface 2: не снимет стату,
только вот где копать?
Помогите пожалуйста.
ifconfig одной из сателлит
[root@levik /usr/local/nodeny]# ifconfig
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
ether 00:1d:92:02:16:72
inet хх.хх.хх.хх netmask 0xffffff00 broadcast хх.хх.хх.хх
media: Ethernet autoselect (1000baseT <full-duplex,master>)
status: active
re1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
ether 00:13:46:28:22:e5
inet хх.хх.хх.хх netmask 0xffffffe0 broadcast хх.хх.хх.хх
inet 192.168.113.1 netmask 0xffffff00 broadcast 192.168.113.255
inet 10.10.0.1 netmask 0xffffffe0 broadcast 10.10.0.31
inet 10.10.10.1 netmask 0xffffffe0 broadcast 10.10.10.31
inet 192.168.151.1 netmask 0xffffff00 broadcast 192.168.151.255
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=3<RXCSUM,TXCSUM>
inet 127.0.0.1 netmask 0xff000000
[root@levik /usr/local/nodeny]#
ipfw show из этой же сателлиты
[root@levik /usr/local/nodeny]# ipfw show
00010 0 0 allow tcp from any to хх.хх.хх.хх dst-port 80
00011 14091 8772226 allow tcp from хх.хх.хх.хх to any
00020 0 0 allow tcp from any to table(37) dst-port 80,443
00020 0 0 allow tcp from table(37) to any
00050 1406 155280 allow tcp from any to me dst-port 1027
00050 1561 801427 allow tcp from me 1027 to any
00051 0 0 allow tcp from any to me dst-port 30583
00051 0 0 allow tcp from me 30583 to any
00051 0 0 allow udp from any to me dst-port 30583
00051 0 0 allow udp from me 30583 to any
00052 14024 3923684 allow ip from хх.хх.хх.хх to any
00052 14408 883464 allow ip from any to хх.хх.хх.хх
00053 156 11310 allow udp from хх.хх.хх.хх to me dst-port 161,1161
00054 156 11771 allow udp from me 161,1161 to хх.хх.хх.хх
00057 0 0 allow ip from any to any via tun0
00058 0 0 allow udp from me to any dst-port 1194
00059 0 0 allow udp from any to me dst-port 1194
00060 14594596 6936345136 allow ip from any to any via re1
00061 0 0 allow tcp from хх.хх.хх.хх to me dst-port 514
00062 10476 12908634 allow tcp from me 514 to хх.хх.хх.хх
00110 0 0 allow ip from any to any via lo0
00120 7702 601520 skipto 1000 ip from me to any
00130 10 560 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 268311 117077497 skipto 2000 ip from any to me
00200 14585849 6969155563 skipto 500 ip from any to any via re0
00270 0 0 deny tcp from not table(0) to хх.хх.хх.хх/24
00280 0 0 fwd 127.0.0.1,8081 tcp from table(35) to not me dst-port 80 in
00290 0 0 fwd 127.0.0.1,8082 tcp from not table(0) to not me dst-port 80 in
00300 0 0 skipto 4500 ip from any to any in
00400 0 0 skipto 450 ip from any to any recv re0
00420 0 0 divert 1 ip from any to any
00450 0 0 divert 2 ip from any to any
00490 0 0 allow ip from any to any
00500 1897367 1458577053 skipto 32500 ip from any to any in
00510 12688532 5510598104 divert 1 ip from any to any
00540 12685534 5509367050 allow ip from any to any
01000 0 0 allow udp from any 53,7723 to any
01010 7447 577331 allow tcp from any to any setup keep-state
01020 0 0 allow udp from any to any keep-state
01100 255 24189 allow ip from any to any
02000 0 0 check-state
02010 245 19790 allow icmp from any to any
02020 87 6145 allow tcp from any to any dst-port 80,443
02050 267979 117051562 deny ip from any to any via re0
02060 0 0 allow udp from any to any dst-port 53,7723
02100 0 0 deny ip from any to any
05000 0 0 deny ip from not table(0) to any
05001 0 0 skipto 5010 ip from table(127) to table(126)
05002 0 0 skipto 5030 ip from any to not table(2)
05003 0 0 deny ip from any to not table(1)
05004 0 0 pipe tablearg ip from table(21) to any
05005 0 0 deny ip from any to any
05010 0 0 pipe tablearg ip from table(127) to any
05030 0 0 deny tcp from table(15) to any dst-port 25
05140 0 0 allow ip from table(41) to table(40)
05226 0 0 allow ip from table(127) to table(126)
05400 0 0 pipe tablearg ip from table(11) to any
32000 0 0 deny ip from any to any
32490 0 0 deny ip from any to any
33000 344291 199905143 pipe tablearg ip from table(126) to table(127)
33001 1308040 1043479851 skipto 33010 ip from not table(2) to any
33002 0 0 pipe tablearg ip from any to table(20)
33003 0 0 deny ip from any to any
33140 0 0 allow ip from table(40) to table(41)
33226 0 0 allow ip from table(126) to table(127)
33400 1307119 1043295499 pipe tablearg ip from any to table(10)
65535 1272 213940 deny ip from any to any
[root@levik /usr/local/nodeny]#
Настройки ipcad из этой же сателлиты
capture-ports enable;
interface divert port 1 netflow-disable;
interface divert port 2 netflow-disable;
rsh enable at ip_satellit;
rsh root@ip_nodeny admin;
rsh ttl = 10;
rsh timeout = 30;
dumpfile = ipcad.dump;
chroot = /tmp;
memory_limit = 50m;
Что не так не могу понять, главное что всё нормально работало и в один прекрасный момент стало вот так, при том на всех сателлитах.
За ранее спасибо!
|
