nsenter 进程空间操作

nsenter命令是一个可以在指定进程的命令空间下运行指定程序的命令。它位于util-linux包中。

 

tcpdmp -D

 

tcpdump -i any icmp6 -nnv

 

 

主库宿主机

docker 

登录VM网络:

       docker inspect --format '{{.State.Pid}}'  fea832cd-3acb-4c72-82bb-351b40184543

       nsenter -t 4650 -n

抓包:

tcpdump -i eth0 icmp -nnv 

 

备库宿主机

docker

ping vip(ipv4)

主库宿主机  可以抓到ipv4的包

 

监控机

ping6 vip(ipv6)

主库宿主机 可以抓到ipv4的包

 

nsenter

OPTIONS
       -t, --target pid
              Specify a target process to get contexts from.  The paths to the contexts specified by pid are:

              /proc/pid/ns/mnt    the mount namespace
              /proc/pid/ns/uts    the UTS namespace
              /proc/pid/ns/ipc    the IPC namespace
              /proc/pid/ns/net    the network namespace
              /proc/pid/ns/pid    the PID namespace
              /proc/pid/root      the root directory
              /proc/pid/cwd       the working directory respectively

       -m, --mount[=file]
              Enter the mount namespace.  If no file is specified, enter the mount namespace of the target process.  If file is specified, enter the mount namespace specified by file.

       -u, --uts[=file]
              Enter the UTS namespace.  If no file is specified, enter the UTS namespace of the target process.  If file is specified, enter the UTS namespace specified by file.

       -i, --ipc[=file]
              Enter the IPC namespace.  If no file is specified, enter the IPC namespace of the target process.  If file is specified, enter the IPC namespace specified by file.

       -n, --net[=file]
              Enter the network namespace.  If no file is specified, enter the network namespace of the target process.  If file is specified, enter the network namespace specified by file.

       -p, --pid[=file]
              Enter the PID namespace.  If no file is specified, enter the PID namespace of the target process.  If file is specified, enter the PID namespace specified by file.

       -r, --root[=directory]
              Set  the  root  directory.   If  no directory is specified, set the root directory to the root directory of the target process.  If directory is specified, set the root directory to the
              specified directory.

       -w, --wd[=directory]
              Set the working directory.  If no directory is specified, set the working directory to the working directory of the target process.  If directory is specified, set the working directory
              to the specified directory.

       -F, --no-fork
              Do  not  fork  before  exec’ing  the specified program.  By default, when entering a PID namespace, nsenter calls fork before calling exec so that any children will also be in the newly
              entered PID namespace.

       -V, --version
              Display version information and exit.

       -h, --help
              Display help text and exit.