On Wednesday 06 June 2001 21:47, Olivier Nicole wrote:
> >WARNING: admin2.airscorp.com: selfcheck request failed: timeout waiting
> > for ACK
>
> Would it have to be allowed in TCP wrapper?
>
> On the client you could send a tcpdump (or whatever the command is
> called under Linudx) and check if you see the packets going back and
> forth between client and server.
>
> Olivier

No, i don't believe it uses tcp wrappers.  

I used a network sniffer to look at the network packets being sent when I run 
amcheck and here's what I found:

Tape-server host - 10.0.4.91(admin1) (amcheck is being run on this machine)
Client - 10.0.4.101(admin2) (trying to connect to this client)

------------------------------------------------------
Source: 10.0.4.91 ;  Dest: 10.0.4.101 ;  Protocol: UDP ;  Source Port: 847 ;  
Dest Port: amanda (10080)
   0  416d 616e 6461 2032 2e35 2052 4551 2048           Amanda 2.5 REQ H
  10  414e 444c 4520 3120 5345 5120 300a 5345           ANDLE 1 SEQ 0.SE
  20  4355 5249 5459 2055 5345 5220 6f70 6572           CURITY USER oper
  30  6174 6f72 0a53 4552 5649 4345 2073 656c           ator.SERVICE sel
  40  6663 6865 636b 0a4f 5054 494f 4e53 203b           fcheck.OPTIONS ;
  50  0a47 4e55 5441 5220 2f68 6f6d 652f 6e62           .GNUTAR /home/nb
  60  7572 746f 6e20 3020 4f50 5449 4f4e 5320           urton 0 OPTIONS
  70  7c3b 6175 7468 3d42 5344 3b63 6f6d 7072           |;auth=BSD;compr
  80  6573 732d 6265 7374 3b69 6e64 6578 3b65           ess-best;index;e
  90  7863 6c75 6465 2d6c 6973 743d 2f75 7372           xclude-list=/usr
  a0  2f6c 6f63 616c 2f6c 6962 2f61 6d61 6e64           /local/lib/amand
  b0  612f 6578 636c 7564 652e 6774 6172 3b0a           a/exclude.gtar;.

But then 10.0.4.101(admin2) does not seem to send anything back in return.  
There are two more UDP packets sent identical to the one above and then 
amcheck timesout.


amadad is listening to port 10080 on 10.0.4.101.  Here's the output of nmap:
-------------------------------------------------------
>sudo nmap -sU -O 10.0.4.101 -p 10080  
Starting nmap V. 2.54BETA7 ( www.insecure.org/nmap/ )
Warning:  OS detection will be MUCH less reliable because we did not find at 
least 1 open and 1 closed TCP port
Interesting ports on  (10.0.4.101):
Port       State       Service
10080/udp  open        amanda                  

Remote OS guesses: Linux 2.3.49 x86, Linux 2.3.47 - 2.3.99-pre2 x86

Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
-------------------------------------------------------

And as I said in a previous post, the /tmp/amandad*.debug file is being 
created, but not with much in it.

I'm really stumped!

--Nathanael Burton

Reply via email to