#netstat-显示网络连接,路由表,接口分析netstat[address_family_options][--tcp|-t][--udp|-u][--udplite|-U][--sctp|-S][--raw|-w][--listening|-l][--all|-a][--numeric|-n][--numeric-hosts][--numeric-ports][--numeric-users][--symbolic|-N][--extend|-e[--extend|-e]][--timers|-o][--pro‐
gram|-p][--verbose|-v][--continuous|-c][--wide|-W][delay]# -l:处于监听状态的连接# -t:TCP协议相关连接# -u:UDP协议相关连接# -w: raw socket相关# -a:所有状态# -n:以数字形式显示IP和端口# -e: 扩展格式显示信息# -p:显示相关进程及PID# 常用组合 -tan,-uan,-tnl,-unl# netstat-显示路由表netstat{--route|-r}[--numeric|-n]# -r:显示内核路由表# -n:数字格式显示# netstat-显示接口统计信息netstat{--interfaces|-I|-i}[--all|-a][--extend|-e][--verbose|-v][--program|-p][--numeric|-n]# 显示指定接口的统计信息[root@nginx01 ~]# netstat -Iens33
Kernel Interface table
Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
ens33 1500466000368000 BMRU
#显示所有接口统计数据[root@nginx01 ~]# netstat -i
Kernel Interface table
Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
ens33 1500489000381000 BMRU
lo 6553600000000 LRU
#显示已建立的TCP连接[root@nginx01 ~]# netstat -tn
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 052192.168.88.101:22 192.168.88.1:50688 ESTABLISHED
#显示已建立的UDP连接[root@nginx01 ~]# netstat -un
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
#显示所有TCP连接[root@nginx01 ~]# netstat -tan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 000.0.0.0:22 0.0.0.0:* LISTEN
tcp 00127.0.0.1:25 0.0.0.0:* LISTEN
tcp 052192.168.88.101:22 192.168.88.1:50688 ESTABLISHED
tcp6 00 :::22 :::* LISTEN
tcp6 00 ::1:25 :::* LISTEN
#显示所有UDP连接[root@nginx01 ~]# netstat -uan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
udp 00127.0.0.1:323 0.0.0.0:*
udp6 00 ::1:323 :::*
#查看路由连接[root@nginx01 ~]# netstat --route
ip命令
ip[options] object {command|help}
object :={link|addr|route}# link-管理网络设备# ---ip link show 显示网络设备信息[root@nginx01 ~]# ip link show1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
link/ether 00:0c:29:fe:89:39 brd ff:ff:ff:ff:ff:ff
# ---ip link show dev ens3 显示ens33接口的信息[root@nginx01 ~]# ip link show dev ens332: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
link/ether 00:0c:29:fe:89:39 brd ff:ff:ff:ff:ff:ff
# ---ip link show up 显示处于启用状态的接口[root@nginx01 ~]# ip link show up# ---ip link set 改变设备属性#---------停用ens33设备[root@nginx01 ~]# ip link set dev ens33 down#---------启用ens33设备[root@nginx01 ~]# ip link set dev ens33 up# addr-管理网络地址# ---ip addr show显示接口地址[root@nginx01 ~]# ip addr show dev ens332: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:fe:89:39 brd ff:ff:ff:ff:ff:ff
inet 192.168.88.101/24 brd 192.168.88.255 scope global noprefixroute ens33
valid_lft forever preferred_lft forever
inet6 fe80::b28c:edf9:5114:7241/64 scope link noprefixroute
valid_lft forever preferred_lft forever
# --- ip addr add 添加地址[root@nginx01 ~]# ip addr add 192.168.88.102 dev ens33[root@nginx01 ~]# ip addr show dev ens332: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:fe:89:39 brd ff:ff:ff:ff:ff:ff
inet 192.168.88.101/24 brd 192.168.88.255 scope global noprefixroute ens33
valid_lft forever preferred_lft forever
inet 192.168.88.102/32 scope global ens33
valid_lft forever preferred_lft forever
inet6 fe80::b28c:edf9:5114:7241/64 scope link noprefixroute
valid_lft forever preferred_lft forever
# ----添加地址时添加标签[root@nginx01 ~]# ip addr add 192.168.88.103/24 dev ens33 label 'ens33:0'# --- ip addr replace替换地址(不指定替换地址则直接添加)[root@nginx01 ~]# ip addr replace 192.168.88.103/24 dev ens33[root@nginx01 ~]# ip addr show1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:fe:89:39 brd ff:ff:ff:ff:ff:ff
inet 192.168.88.101/24 brd 192.168.88.255 scope global noprefixroute ens33
valid_lft forever preferred_lft forever
inet 192.168.88.102/32 scope global ens33
valid_lft forever preferred_lft forever
inet 192.168.88.103/24 scope global secondary ens33
valid_lft forever preferred_lft forever
inet6 fe80::b28c:edf9:5114:7241/64 scope link noprefixroute
valid_lft forever preferred_lft forever
# --- ip addr del 删除地址(带上掩码)[root@nginx01 ~]# ip addr del 192.168.88.102/24 dev ens33# scope{global|link|host}指明作用域
global:地址全局有效
link:仅链接有效
host:地址只能在本机使用
# --- ip addr add IFADDR dev STRING broadcast ADDRESS添加广播地址[root@nginx01 ~]# ip addr add 192.168.88.102/24 dev ens33 broadcast 192.168.88.255# ---仅显示指定作用域的设备信息ip address show [dev DEVICE][label PATTERN][primary and secondary][root@nginx01 ~]# ip addr show scope host# ---清空地址ip address flush
[root@nginx01 ~]# ip addr flush dev ens33 label ens33:0# route-管理网络路由ip route add--添加路由
ip route show--显示路由
ip route delete--删除路由
ip route flush--清空路由表
#--------------------------------#添加路由ip route add TARGET via GW dev IFACE src SOURCE_IP
TARGET:主机路由IP,网络路由:NETWORK/MASK
#------添加主机路由[root@nginx01 ~]# ip route add 192.168.88.1 via 192.168.88.102#------添加网络路由[root@nginx01 ~]# ip route add 172.16.0.0/16 via 192.168.88.102#删除路由ip route del TARGET
#-----删除主机路由[root@nginx01 ~]# ip route del 192.168.88.1#-----删除网络路由[root@nginx01 ~]# ip route del 172.16.0.0/16#-----删除默认网关[root@nginx01 ~]# ip route del default#显示路由列表[root@nginx01 ~]# ip route list#添加默认网关[root@nginx01 ~]# ip route add default via 192.168.88.2#--------清空路由表ip route flush [dev IFACE][via PREFIX][root@nginx01 ~]# ip route flush dev ens33#-----添加本地连接的路由配置ip route add192.168.88.0/24 via 0.0.0.0 dev ens33 scope link src 192.168.88.101
#---------------------------------#--ss
-o 只显示状态为established的连接
-t TCP协议相关
-u UDP协议相关
-w 裸套接字相关
-x unix socket相关
-l listen状态的连接
-a 所有
-n 数字格式
-p 相关程序及PID
-e 扩展信息
-m 内存用量
-o 计时器信息
FILTER :=[state TCP-STATE][EXPRESSION]# 常用组合:-tan,-tanl,-tanlp,uan#显示源端口为ssh服务且状态为established的网络连接[root@nginx01 ~]# ss -o state established '( sport = :ssh )'#显示状态为established的TCP连接[root@nginx01 ~]# ss -tan state established#-------------------------------------------------------------#修改网络配置文件(IP,NETMASK,DNS,GW)[root@nginx01 ~]# vim /etc/sysconfig/network-scripts/ifcfg-IFACE#接口类型,常见Ethernet,BridgeTYPE=Ethernet
#激活此设备时使用的地址配置协议(static|dhcp|none)BOOTPROTO=static
#此配置文件应用到的设备DEVICE=ens33
#MAC地址HWADDR=#NM为NetworkManager的简写,此网卡是否接受NM控制,Centos6建议为"no"NM_CONTROLLED=#系统引导时是否激活此设备ONBOOT=yes
#IP地址IPADDR=192.168.88.101
#网关GATEWAY=192.168.88.2
#子网掩码NETMASK=255.255.255.0
#第一个DNS服务器指向(优先级高于/etc/resolv.conf中的nameserver)DNS1=8.8.8.8
#普通用户是否可控制此设备USERCTL=#如果BOOTPROTO设置为dhcp,是否允许dhcp server分配的DNS服务器信息直接覆盖至/etc/resolv.conf文件PEERDNS=PROXY_METHOD=none
BROWSER_ONLY=no
PREFIX=24#设备惟一标识UUID=c96bc909-188e-ec64-3a96-6a90982b08ad
#路由相关配置文件[root@nginx01 ~]# vim /etc/sysconfig/network-scripts/route-IFACE
两种风格:
(1) TARGET via GW
(2) 每三行定义一条路由
ADDRESS#=TARGET
NETMASK#=mask
GATEWAY#=GW#第一种风格192.168.0.0/16 via 192.168.88.2
[root@nginx01 network-scripts]# systemctl restart network[root@nginx01 network-scripts]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.88.2 0.0.0.0 UG 10000 ens33
192.168.0.0 192.168.88.2 255.255.0.0 UG 10000 ens33
192.168.88.0 0.0.0.0 255.255.255.0 U 10000 ens33
#第二种风格ADDRESS0=192.168.11.0
NETMSAK0=255.255.255.0
GATEWAY0=192.168.88.2
ADDRESS1=192.168.22.0
NETMSAK1=255.255.255.0
GATEWAY1=192.168.88.2
#------------------------------------------------------#给网卡配置多地址ifconfigifconfig IFACE_ALIAS IP
ipip addr add
配置文件:ifcfg-IFACE_ALIAS
DEVICE=IFACE_ALIAS
#添加多地址ifconfig[root@nginx01 network-scripts]# ifconfig ens33:0 192.168.88.102/24 up
注:网卡别名不能使用DHCP协议引导
#------------------------------------------------------#tui(text user interface)#主机名配置(centos6)[root@nginx01 network-scripts]# vim /etc/sysconfig/networkHOSTNAME=#主机名配置(centos7)
hostnamectl set-hostname hostname