On Sat, Apr 14, 2007 at 11:52:22AM +0200, Thorsten Büker wrote:
> Hi Herbert,
> 
>>>>> Btw, in the meantime I noticed that "netstat -pantu" neither outputs 
>>>>> any listening daemons nor any connections -- independent of the version 
>>>>> of used util-vserver. With the old 2.6.17.14 kernel, this command 
>>>>> worked fine. Did anyone struggle about the same behaviour?
>>>> inside a guest or where?
>>> Inside the guest, yes.
>>
>> could you try with vs2.2.0 without grsec?

> Unfortunately (well, indeed not unfortunately ;-)) the concerned 
> machines run in productive state, so I'm not eager rebooting them using 
> another kernel. Is there any other way to produce a helpful hint on the 
> netstat issue?

you can try to do strace -fF -o netstat.trace netstat -pantu
and check/upload the resulting netstat.trace file somewhere
maybe it gives some clue to the folks combining Linux-VServer
with grsec ...

> If not, I might build a kernel without grsec and test it in the late 
> evening.

if it happens with vs2.2.0 (without any other patches) then
it is considered a Linux-VServer issue/bug and will be fixed

here on a test server with vs2.2.0, I get the following:
 
# netstat -pantu
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             
State       PID/Program name   
tcp        0      0 10.0.0.1:10026              0.0.0.0:*                   
LISTEN      32480/master        
tcp        0      0 10.0.0.1:80                 0.0.0.0:*                   
LISTEN      32467/httpd         
tcp        0      0 10.0.0.1:5432               0.0.0.0:*                   
LISTEN      32146/postmaster    
tcp        0      0 10.0.0.1:25                 0.0.0.0:*                   
LISTEN      32480/master        
udp        0      0 10.0.0.1:34300              10.0.0.1:34300              
ESTABLISHED 32146/postmaster    

HTH,
Herbert

> kind regards,
>   Thorsten
> _______________________________________________
> Vserver mailing list
> [EMAIL PROTECTED]
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to