how_to_admin_2017

Содержание

1. how_to_admin_2017
2. ADMIN |
3. ADMIN |
4. ADMIN |
5. ADMIN |
6. ADMIN |
7. ADMIN | application – get service status
8. Слайд 8
9. service.tgzservice_folderservice.tgzservice.tgzsome hostvulnboxservice.tgzthat slide
10. Слайд 10
11. –linux containerscontainer_name – list existing containers (use
12. –MODER LXC HYPERVISORcontainer – list existing containers
13. container \ – to launch or kill
14. Слайд 14
15. I need some : Listen on the eth0
16. I need some : Listen on the eth0
17. FutureOpenSSHA tcpdump Primer with ExamplesHow to Use Wireshark to Capture, Filter and Inspect Packets
18. Слайд 18
19. Слайд 19
20. dhclient eth0, provides a means for configuring
21. ./network.sh eth0 77https://transfer.sh/3Irqv/network.sh
22. apt-get install openssh-server is a cryptographic(encrypted) network protocol to allow
23. or is a means of securely transferring computer files between
24. Слайд 24
25. search for files which names matches
26. ss displays information about a selection of the active processes.
27. is a free (LGPL) cross-platform curses-based monitoring
28. Слайд 28
29. head - output the last part of files
30. awk sed - substitute old_word to new_word
31. kill
32. Слайд 32
33. Скачать презентанцию

ADMIN |

Слайды и текст этой презентации

Слайд 7ADMIN |
application

– get service status and latest logs

– show service config file \ properties
\ – to

launch or kill the service
\ – (reload = get new config without restart)
\ – make service start on system startup

can be omitted
/etc/systemd/* /etc/systemd/system/*

$ADMIN | application – get service status and latest logs – show service config file \ properties$

Слайд 9
service.tgzservice_folder
service.tgz
service.tgz
some host
vulnbox
service.tgz

that slide

Слайд 11–linux containers
container_name

– list existing containers (use --fancy for nice

out)
\ – to launch or kill the container
– attach

to the existing console
– exec the command inside (use lxc-execute -n name /bin/bash for new shell)

/var/lib/lxc/containers/*

$–linux containerscontainer_name – list existing containers (use --fancy for nice out) \ – to launch or kill$

Слайд 12–MODER LXC HYPERVISOR
container

– list existing containers (already fancy)
\

– to launch or kill the container
– attach to the

existing console
– exec the command inside (use lxc exec name -- /bin/bash for new shell)
/ – get / put file from / to container (use lxc pull name/home . and u r awesome)
– edit file inside container
/ - dump and restore from snapshot

/var/lib/lxd/containers/*

$–MODER LXC HYPERVISORcontainer – list existing containers (already fancy) \ – to launch or kill the container–$

Слайд 13
container

\ – to launch or kill the container
–

list running containers ( for all existing)
– attach to the

existing console
– exec the command inside (use lxc exec name -- /bin/bash for new shell)

-it -d -p inside:outside

$container \ – to launch or kill the container – list running containers ( for all existing)–$

Слайд 14

Слайд 15I need some
: Listen on the eth0 interface.
: Be less

verbose (more quiet) with your output.
: Define the snaplength (size) of the

capture in bytes. Use -s0 to get everything, unless you are intentionally capturing less.
: Save the result to file
: Only mbytes in one capture
:New file name every (use %H for hour, %M for minute and so on)

389 : capture only on specified port
another expression example

I need some : Listen on the eth0 interface. : Be less verbose (more quiet) with your output. : Define

Слайд 16I need some
: Listen on the eth0 interface.
: Set capture

filter (WireShark syntax!)
: Save the result to file
:
-

switch to the next file after value seconds have elapsed, even if the current file is not completely filled up.
-switch to the next file after it reaches a size of value kB.

I need some : Listen on the eth0 interface. : Set capture filter (WireShark syntax!) : Save the result to

Слайд 17Future
OpenSSH
A tcpdump Primer with Examples
How to Use Wireshark to Capture,

Filter and Inspect Packets

Слайд 18

Слайд 19

Слайд 20
dhclient eth0
, provides a means for configuring one or more

network interfaces using the Dynamic Host Configuration Protocol

ip a add

dev

– interface currently connected to the network, usually
– IP address and mask in a CIDR form, e.g. 10.13.203.77/24

ip r add via

– subnet address in CIDR form, e.g. 10.13.0.0/16
– gateway that will be used to access that subnet, e.g. 10.13.203.1

dhclient eth0, provides a means for configuring one or more network interfaces using the Dynamic Host Configuration

Слайд 21
./network.sh eth0 77

https://transfer.sh/3Irqv/network.sh

Слайд 22
apt-get install openssh-server

is a cryptographic(encrypted) network protocol to allow remote login and other network

services to operate securely over an insecure network.
vim /etc/ssh/sshd_config

ssh root@10.13.203.77

apt-get install openssh-server is a cryptographic(encrypted) network protocol to allow remote login and other network services to operate securely over an insecure

Слайд 23
or is a means of securely transferring computer files between a local host

and a remote host or between two remote hosts. It is based

on the Secure Shell (SSH) protocol.

scp some_file user2@any_host:/some/path

or is a means of securely transferring computer files between a local host and a remote host or between two remote hosts.

Слайд 24

Слайд 25
search for files which names matches the in

a directory hierarchy starting from

searches the named input s

(or standard input if no files are named) match to the given . By default, grep prints the matching lines.

search for files which names matches the in a directory hierarchy starting from searches the named

Слайд 26
ss

displays information about a selection of the active processes.

Слайд 27

is a free (LGPL) cross-platform curses-based monitoring tool which aims

to present a maximum of information in a minimum of

space, ideally to fit in a classical 80x24 terminal or higher to have additionnal information. Glances can adapt dynamically the displayed information depending on the terminal size. It can also work in a client/server mode for remote monitoring.