netstat -tulpn
lsof -Pnl +M -i4
Network restart
service network restartSockstat
netstat -na | grep -v DGRAM | grep -v STREAM | grep -v ffff | grep -v 127.0.0.1 | grep -v ::: | grep -v UNIX | grep -v NodeSpeedtest
wget -O /zzz/speedtest/tmp http://mia.voxility.net/10GB.bin
Restart all services without reboot
init 1
init 5
Init 1 - will bring your computer to single user mode, where minimal services are running
init 5 - will being the system back to GUI mode, by restarting all the services
When Clonning Centos VM , delete
rm -rf /etc/udev/rules.d/70-persistent-net.rules
ln -s /dev/null /etc/udev/rules.d/70-persistent-net.rules
RESTART
Centos Version
# cat /etc/redhat-release
CentOS release 6.5 (Final)
Centos 66 Startup services
# chkconfig | egrep 'pdn|zabbix|mysql|bird|iptables'
bird 0:off 1:off 2:on 3:on 4:on 5:on 6:off
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off
mysqld 0:off 1:off 2:on 3:on 4:on 5:on 6:off
pdns 0:off 1:off 2:on 3:on 4:on 5:on 6:off
pdns-recursor 0:off 1:off 2:on 3:on 4:on 5:on 6:off
zabbix-agent 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Centos installed soft
rpm -qa --qf "%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\n" | grep pdn
SE-Linux Check
sestatus | grep modeRoute-show
getsebool -a
echo '------IP ROUTE SETTINGS------'
ip route
echo '------IP ADDR SETTINGS-------'
ip addr show
echo '------ END CONFIG-------'
ip -6 route show
Usefull commands
/etc/init.d/network restartifstat
wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
rpm -Uvh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
wget http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt
rpm --import RPM-GPG-KEY.dag.txt
yum --enablerepo=rpmforge install ifstat
Atop
wget http://www.atoptool.nl/download/atop-2.0.2-1.x86_64.rpm
yum install atop-2.0.2-1.x86_64.rpm
# 1 second interval
# -F dont sort
# -f show all, even inactive
atop -f 1 -n -F
conntrack -L
conntrack -L | grep dport=53
tcpdump -i eth1 -nn ip src 8.8.8.8
tcpdump -i eth1 -nn host 8.8.8.8
IPTables
iptables -L -v -n --line-numbers
iptables -L -v -n -t nat -x --line-numbers
ip6tables -L -v -n --line-numbers
IPTABLES Restart
service iptables restartIPTABLES STOP
service ip6tables restart
echo '===ipv4==========='
iptables -L -n
echo '===ipv6==========='
ip6tables -L -n
service iptables stop
chkconfig iptables off
1) Install 64bit version (x86_64) - "minimal"
2) Install VMware Tools
ESXi 5.1 (v. 1065491) @ CentOS 6.3 64bits
yum install make gcc kernel-devel kernel-headers glibc-headers perl
! mount VMWareTools CD in VM
mkdir /mnt/cdrom
mount /dev/cdrom /mnt/cdrom
cp /mnt/cdrom/VMwareTools-9.0.5-1065307.tar.gz /tmp/
cd /tmp/
tar xvfz VMwareTools-9.0.5-1065307.tar.gz
/tmp/vmware-tools-distrib/vmware-install.pl -d
! add -d to auto accept defaults
OR
echo "mount /dev/cdrom /mnt/cdrom ; cp /mnt/cdrom/VMwareTools-9* /tmp/; cd /tmp/ ; tar xvfz VMwareTools-9.0.16* ; /tmp/vmware-tools-distrib/vmware-install.pl -d " > /tmp/vmtools-update ; chmod a+x /tmp/vmtools-update; time /tmp/vmtools-update
3) Network Setup
Interface config
/etc/sysconfig/network-scripts/ifcfg-eth0DNS
BOOTPROTO=static
DEVICE=eth0
IPADDR=10.20.1.20
NETMASK=255.255.255.0
NETWORK=10.20.1.0
ONBOOT=yes
TYPE=Ethernet
Default route
/etc/sysconfig/network
GATEWAY=10.20.1.1
cat /etc/resolv.conf
nameserver 8.8.8.8
Modify routes
route add default gw 1.1.1.1
route delete default gw 1.1.1.1
netstat -nr
ip route
Static routes
cat /etc/sysconfig/network-scripts/route-eth1Restart network
default 192.168.2.254 dev eth1
10.0.0.0/8 via 10.10.29.65 dev eth1
service network restartRestart Firewall (for tests)
service network stop
service network start
service iptables stop
chkconfig iptables off
3) Setup time
yum install ntp ntpdate ntp-doc4) Secure SSH
chkconfig ntpd on
ntpdate pool.ntp.org
/etc/init.d/ntpd start
vi /etc/ssh/sshd_config
ListenAddress 10.1.1.151
Port 1253
UseDNS no
service sshd restart
[root@centos63 /]# netstat -an | grep 1253
tcp 0 0 10.1.1.151:1253 0.0.0.0:* LISTEN
5) Update pkgs
yum updateIf something went wrong
yum clean all
yum clean metadata
yum clean dbcache
yum makecache
yum update -y
mv /var/lib/rpm/__db* /tmp
rpm --rebuilddb
6) Install soft
! Install basic tools
yum install mc net-snmp net-snmp-utils mysql mysql-server httpd php php-cli php-mysql perl-MailTools perl-DBD-MySQL perl-Net-Telnet quagga libart_lgpl php-snmp wget which tcpdump ruby gettext php-ldap cairo pango wireshark tcpdump openssl rrdtool rrdtool-perl ntp
! Install Linux Kernel headers and Compiler7) Add addiotional DISK to VM (VMware)
yum install gcc gcc-c++ kernel-devel
yum groupinstall "Development Tools" -y && sudo yum install kernel-devel -y
! Go to: http://ftp.gnu.org/gnu/autoconf/
download binary and install
To create a new virtual disk for an existing Linux virtual machine: (info from VMWARE)
1) Create the virtual disk.
2) Log in as root on your Linux virtual machine.
Unless you are not running level 3, open a terminal session.
Run the df command to examine the current disks that are mounted and accessible.
3) Create an ext3 file system on the new disk:
Rescan Disks
ls /sys/class/scsi_host/Create partition
host0 host1 host2
echo "- - -" > /sys/class/scsi_host/host1/scan
echo "- - -" > /sys/class/scsi_host/host1/scan
echo "- - -" > /sys/class/scsi_host/host1/scan
echo "- - -" > /sys/class/scsi_host/host2/scan
fdisk -l
# mkfs -t ext3 /dev/sdbNote: b in /dev/sdb is the second SCSI disk.
It warns that you are performing this operation on an entire device, not a partition. That is correct, as you created a single virtual disk of the intended size. This is assuming you have specified the correct device.
Caution: Ensure you have selected the right device, there is no undo.
Run the fdisk command to verify the existence of the disk you created:
# fdisk -l4) Run the following command to create a mount point for the new disk:
Disk /dev/sdb: 3221 MB, 3221225472 bytes
255 heads, 63 sectors/track, 391 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x00000000
# mkdir /<NewDirectoryName>5) Run the following command to display the current /etc/fstab :
# cat /etc/fstab
Run the following command to add the disk to /etc/fstab so that it is available across reboots:
/dev/sdb /<NewDirectoryName> ext3 defaults 1 3Note: Use a Linux text editor of your choice.
6) Reboot the Linux virtual machine and the new disk is now available.
8) Zabbix agent 2.2
rpm -ivh http://repo.zabbix.com/zabbix/2.2/rhel/6/x86_64/zabbix-release-2.2-1.el6.noarch.rpm9) Install codecs
yum install zabbix-agent
chkconfig zabbix-agent on
service zabbix-agent start
iptables -I INPUT 1 -p tcp -s ZABBIX_SERVER_IP –dport 10050 -j ACCEPT
iptables -I OUTPUT 1 -p tcp -s ZABBIX_SERVER_IP –dport 10051 -j ACCEPT
yum localinstall --nogpgcheck http://download1.rpmfusion.org/free/el/updates/6/i386/rpmfusion-free-release-6-1.noarch.rpm http://download1.rpmfusion.org/nonfree/el/updates/6/i386/rpmfusion-nonfree-release-6-1.noarch.rpm
yum install gstreamer-ffmpeg x264
10) ethx_pps
#!/bin/bash
.
INTERVAL="1" # update interval in seconds
.
if [ -z "$1" ]; then
echo
echo usage: $0 [network-interface]
echo
echo e.g. $0 eth4
echo
echo shows packets-per-second
exit
fi
.
IF=$1
.
while true
do
R1=`cat /sys/class/net/$1/statistics/rx_packets`
T1=`cat /sys/class/net/$1/statistics/tx_packets`
sleep $INTERVAL
R2=`cat /sys/class/net/$1/statistics/rx_packets`
T2=`cat /sys/class/net/$1/statistics/tx_packets`
TXPPS=`expr $T2 - $T1`
RXPPS=`expr $R2 - $R1`
echo "TX $1: $TXPPS pkts/s RX $1: $RXPPS pkts/s"
done
Usage:
./ethx_pps eth4
12) IPTABLES
FTP Passive/Active
# Generated by iptables-save v1.3.5 on Thu Oct 3 22:25:54 2013
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [824:72492]
-A INPUT -p tcp -m tcp --dport 21 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 20 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --sport 1024:65535 --dport 20:65535 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -p tcp -m tcp --dport 21 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 20 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m tcp --sport 1024:65535 --dport 20:65535 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Thu Oct 3 22:25:54 2013