similar to: DomU''s cannot see network packets on eth0 using TShark

On Sat, 12 May 2018 19:45:10 +0200 Lapin Blanc <fabien.toune at lapin-blanc.com> wrote: > I'm studying samba related protocols for a work I have to present at > the university, > and for me to really understand how it works, I try to put in in > practice. So I was reading > http://www.kerberos.org/software/tutorial.html and tried to track > packets... I was hoping this

Hi, i'm trying to analyze kerberos traffic using tshark (Samba 4.8.1 on Centos 7). I can't figure out how to extract keytab with password/keys. I follow precisely the instructions at https://wiki.samba.org/index.php/Keytab_Extraction But it seems like I only get slot, kvno and principal, can't find a way to get passwords or keys. Any idea someone ? ktutil: rkt decode.keytab ktutil:

So I might have been misinterpreting things here and might be way off base. I think you can ignore this thread and I'll follow up if I get anything concrete down the road =) The retranmissions I'm seeing and reproducing are probably within normal allowances and can't reproduce the issue that originally lead me down this path. - Nathan > -----Original Message----- > From:

Hi All, Some more data on this, I've reproduced this on another host that's a completely stock centos/xen deployment with a centos 6.6 domU. Since I?m seeing the retransmissions on the VIF, I don't think it's related to the network stack but just in case.. Each host is connected via LACP with vlan tagging to a pair of stacked cisco 3750's. Host networking config is here:

Hi All, I've tracked this down... We do rate limiting of our vms with a mix of ebtables/tc. Running these commands (replace vif1.0 with the correct vif for your VM) will reproduce this: ebtables -A FORWARD -i vif1.0 -j mark --set-mark 990 --mark-target CONTINUE tc qdisc add dev bond0 root handle 1: htb default 2 tc class add dev bond0 parent 1: classid 1:0 htb rate 10000mbit tc class

Hi Michal, Thank you for your suggestion. My apologies that I took sometime to get back on further confirmation. Regrettably, my tshark is still unable to find libvirt payload inside packet capture, though it lists libvirt as a possible filter. # rpm -ql libvirt-wireshark-1.2.9.3-2.fc21.x86_64 /usr/lib64/wireshark/plugins/1.12.5/libvirt.so As I used wireshark 1.12.6 version, I

On 07.01.2016 08:05, gowrishankar wrote: > Hi Michal, > Thank you for your suggestion. My apologies that I took sometime to get > back > on further confirmation. Regrettably, my tshark is still unable to find > libvirt payload > inside packet capture, though it lists libvirt as a possible filter. > > # rpm -ql libvirt-wireshark-1.2.9.3-2.fc21.x86_64 >

Hi Michal, By the way, I noticed ipv6 loopback IP addresses in your pcap. As I normally try to capture on nic where migration carried out, I thought of checking with you if your wireshark could dissect libvirt RPC in such pcap too (captured on a nic) ?. During migration, I do not see any traffic on loopback and I think it is expected, but thinking how you get those captured ?. Any

Thank you Michal. With your pcap, I could confirm that, libvirt dissector worked in my environment as well. Yes, it could be that, my pcap do not have libvirt rpc packets correctly though I would have expected. I am checking on it. Regards, Gowrishankar On Thursday 07 January 2016 03:51 PM, Michal Privoznik wrote: > On 07.01.2016 08:05, gowrishankar wrote: >> Hi Michal, >>

Hi All, Was troubleshooting some odd VM network issues and discovered that we're seeing dropped packets + retransmissions across multiple domU OS's and dom0 hardware platforms. xendev01 ~ # tshark -R "tcp.analysis.retransmission " -i vif7.0 Running as user "root" and group "root". This could be dangerous. Capturing on vif7.0 3.054257

Hi, I am trying libvirt plugin in wireshark to dissect RPC payload in TCP, but finding dissector code not really working. My env is Fedora core 21 (x86_64) and installed packages are as follow: wireshark-1.12.6-1.fc21.x86_64 libvirt-wireshark-1.2.9.3-2.fc21.x86_64 Earlier, just after installation, I noticed libvirt.so available only in /usr/lib64/wireshark/plugins/1.12.5/ . Wireshark

I'm getting ready to test Accelerated Reader version 6.12 with Wine version 1.0 for a private school. The school uses Accelerated Reader setup using a Windows share. I'm assuming it doesn't matter which verson of Windows... but the server is 2003 server with a 2003 Active Directory version. For the setup using Windows, Accelerated Reader uses a mapped drive as it won't work with

Antony, It is correct. Noone connects to Asterisk box/server from outside.Callcentric SIP trunk configured and Asterisk maintains connection to it itself. No special ports opened, nothing. Connection happens from us to Callcentric and all calls routed in from CallcentricI don't know exactly how it's doing it by it works. Again, keep in mind it is working for many years for most / 90+% of

Hi All, I have been using Samba 4.15 on CentOS 6.3 64 bit for last 3 months with no issues but suddenly there i am facing below issues. 1. Windows 7 Pro/Ultimate cannot join the domain, but can telnet all the port. 2. Shared resources on Server 2003 which is added to domain is available some time and some time not. For isolating the issue I have temporary removed the server from Domain the

Laine I made the change and I can now ping across both bridges: br1 (192.168.0.0/24) and br1600 (192.168.1.0/24): br1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500         inet 192.168.0.110  netmask 255.255.255.0  broadcast 192.168.0.255         inet6 fe80::1e98:ecff:fe1b:276d  prefixlen 64  scopeid 0x20<link>         ether 1c:98:ec:1b:27:6d  txqueuelen 1000  (Ethernet)

On Fri, 2017-02-17 at 11:11 +1300, Gary Lockyer wrote: > Script to provide an anonymous summary from tshark > > The tshark command needs to output a PDML XML stream, which this > command > will read. The summary is intended not to expose private or customer > data while allowing a good view on the range and frequency of the > network traffic. The script Gary posted, which is

We've been running ipv6 for a year or so now, but some of our newer instances (all on an ESX cluster) are not working. It looks like it's all of our Centos 6 instances. I'm hoping someone can point me in the right direction... tshark indicates that it's neighbor discovery that's failing: <centos666.peak.org> [26] # cat ../network NETWORKING=yes

Even more puzzling, I reverted back to the old configuration to confirm what I had seen and found that it works in one direction but not the other: i.e. from 192.168.0.110 to 192.168.0.120, but not the other way around. Must be something with my configuration....which I can follow up on. So, thanks again for your help. Richard On 12/3/19 11:36 AM, Richard Achmatowicz wrote: > Laine >

Hi, I'm trying this setup where an stunnel4 (listening for clients on port 16514) connects to an unencrypted libvirt backend (on port 16509). When I point the virsh client to stunnel4 it hangs. Looking via tshark: 1. virsh completes ssl handshake with stunnel4 2. stunnel4 completes tcp handshake with libvirt. and that's all. When connecting virsh client directly to libvirt (this time

hello ------------------ Original ------------------ From: "centos-docs-request"<centos-docs-request at centos.org>; Date: Fri, Sep 11, 2009 00:00 AM To: "centos-docs"<centos-docs at centos.org>; Subject: CentOS-docs Digest, Vol 37, Issue 10 Send CentOS-docs mailing list submissions to centos-docs at centos.org To subscribe or