Linux 網絡屬性管理（二）
ip命令
ip - show / manipulate routing, devices, policy routing and tunnels
ip [ OPTIONS ] OBJECT { COMMAND | help }
OBJECT := { link | addr | route }
link OBJECT:
ip link – network device configuration
set dev IFACE 可設置屬性： up and down：激活或禁用指定接口； show [dev IFACE]：指定接口 [up]：僅顯示處于激活狀態的接口
顯示當前的ip鏈接
[root@Daniel ~]# ip link show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:2c:81:4d brd ff:ff:ff:ff:ff:ff
ip address – protocol address management
ip addr { add | del } IPADDR dev STRING
[label LABEL]：添加地址時指明網卡別名
[scope {global|link|host}]：指明作用域
global: 全局可用；
link: 僅鏈接可用；
host: 本機可用；
[broadcast ADDRESS]：指明廣播地址
顯示ip地址
[root@Daniel ~]# ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:2c:81:4d brd ff:ff:ff:ff:ff:ff inet 192.168.98.140/24 brd 192.168.98.255 scope global eth0 inet6 fe80::20c:29ff:fe2c:814d/64 scope link valid_lft forever preferred_lft forever
為eth0這塊兒網卡添加一個地址并賦予別名eth0:0
[root@Daniel ~]# ip addr add 192.168.98.141/24 dev eth0 label eth0:0 [root@Daniel ~]# ip add show eth0 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:2c:81:4d brd ff:ff:ff:ff:ff:ff inet 192.168.98.140/24 brd 192.168.98.255 scope global eth0 inet 192.168.98.141/24 scope global secondary eth0:0 inet6 fe80::20c:29ff:fe2c:814d/64 scope link valid_lft forever preferred_lft forever
刪除剛才添加的地址
[root@Daniel ~]# ip addr del 192.168.98.141/24 dev eth0 [root@Daniel ~]# ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:2c:81:4d brd ff:ff:ff:ff:ff:ff inet 192.168.98.140/24 brd 192.168.98.255 scope global eth0 inet6 fe80::20c:29ff:fe2c:814d/64 scope link valid_lft forever preferred_lft forever
ip address show – look at protocol addresses
[dev DEVICE] [label PATTERN] [primary and secondary] [root@Daniel ~]# ip address show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:2c:81:4d brd ff:ff:ff:ff:ff:ff inet 192.168.98.140/24 brd 192.168.98.255 scope global eth0 inet 192.168.98.141/24 scope global secondary eth0:0 inet6 fe80::20c:29ff:fe2c:814d/64 scope link valid_lft forever preferred_lft forever [root@Daniel ~]# ip address show label eth0:0 inet 192.168.98.141/24 scope global secondary eth0:0
ip address flush – flush protocol addresses
使用格式同show
ip route – routing table management
ip route add 添加路由：ip route add TARGET via GW dev IFACE src SOURCE_IP TARGET: 主機路由：IP 網絡路由：NETWORK/MASK [root@Daniel ~]# ip route add 192.168.1.3 via 192.168.98.2 dev eth0 [root@Daniel ~]# [root@Daniel ~]# ip route show 192.168.1.3 via 192.168.98.2 dev eth0 192.168.98.0/24 dev eth0 proto kernel scope link src 192.168.98.140 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.98.2 dev eth0 [root@Daniel ~]# ip route add 192.168.0.0/24 via 192.168.98.2 [root@Daniel ~]# [root@Daniel ~]# ip route show 192.168.1.3 via 192.168.98.2 dev eth0 192.168.98.0/24 dev eth0 proto kernel scope link src 192.168.98.140 192.168.0.0/24 via 192.168.98.2 dev eth0 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.98.2 dev eth0 添加網關：ip route add defalt via GW dev IFACE ip route delete 刪除路由：ip route del TARGET [root@Daniel ~]# ip route del 192.168.1.3 [root@Daniel ~]# [root@Daniel ~]# ip route show 192.168.98.0/24 dev eth0 proto kernel scope link src 192.168.98.140 192.168.0.0/24 via 192.168.98.2 dev eth0 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.98.2 dev eth0 [root@Daniel ~]# ip route del 192.168.0.0/24 [root@Daniel ~]# ip route show 192.168.98.0/24 dev eth0 proto kernel scope link src 192.168.98.140 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.98.2 dev eth0 ip route show [root@Daniel ~]# ip route show 192.168.98.0/24 dev eth0 proto kernel scope link src 192.168.98.140 169.254.0.0/16 dev eth0 scope link metric 1002 default via 192.168.98.2 dev eth0 ip route flush 清空路由表 [dev IFACE] [via PREFIX]
ss命令
ss命令：
格式：ss [OPTION]... [FILTER] 選項： -t: tcp協議相關 -u: udp協議相關 -w: 裸套接字相關 -x：unix sock相關 -l: listen狀態的連接 -a: 所有 -n: 數字格式 -p: 相關的程序及PID -e: 擴展的信息 -m：內存用量 -o：計時器信息 FILTER := [ state TCP-STATE ] [ EXPRESSION ]
TCP的常見狀態：
tcp finite state machine: LISTEN: 監聽 ESTABLISHED：已建立的連接 FIN_WAIT_1 FIN_WAIT_2 SYN_SENT SYN_RECV CLOSED EXPRESSION: dport = sport = 示例：’( dport = :ssh or sport = :ssh )’ 常用組合： -tan, -tanl, -tanlp, -uan [root@Daniel ~]# ss -tan State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 :::22 :::* LISTEN 0 128 *:22 *:* LISTEN 0 100 ::1:25 :::* LISTEN 0 100 127.0.0.1:25 *:* ESTAB 0 0 192.168.98.140:22 192.168.98.1:64234 ESTAB 0 0 192.168.98.140:22 192.168.98.1:55255 [root@Daniel ~]# [root@Daniel ~]# ss -tanl State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 :::22 :::* LISTEN 0 128 *:22 *:* LISTEN 0 100 ::1:25 :::* LISTEN 0 100 127.0.0.1:25 *:* [root@Daniel ~]#
原創文章，作者：Daniel-W，如若轉載，請注明出處：http://www.www58058.com/22987
