Re: [xcat-user] [External] Re: pping not work on a special groups

Tue, 08 May 2018 19:22:23 -0700

Thanks Peter,
 
Would you like to append some information in the ticket? .
 
 And '-Pn' cannot be used as it will ignore the `host discovery` and assume it is online for further scan type, such port, OS etc. 
 That means if you use `-Pn` do `host discovery` only, it will report an inaccessible IP as online.
 
 Now we don't know if "--unprivileged" is special and mandatory for some security concerns, so we asked Jarrod for it.
 
 
 
Regards,
 
Bin Xu
HPC Software Development
Software Defined Infrastructure, IBM Systems
Phone: 86-010-82454067
 
 
----- Original message -----
From: peter CZ1 Peng <peng...@lenovo.com>
To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net>
Cc:
Subject: Re: [xcat-user] [External] Re: pping not work on a special groups
Date: Tue, May 8, 2018 11:39 PM
 

Hi ,all

     So now  ,2 solution can work

 

 

1 :  changed --unprivileged to --disable-arp-ping

2 :   add the –Pn to the preview code

 

open(FPING, "nmap -PE --system-dns --unprivileged -Pn --send-ip -sP $more_options " . join(' ', @$nodes) . " 2> /dev/null|") or die("Cannot open nmap pipe: $!");

or

    open(FPING, "nmap -PE --system-dns --disable-arp-ping --send-ip -sP $more_options " . join(' ', @$nodes) . " 2> /dev/null|") or die("Cannot open nmap pipe: $!");

 

But stop the firewalld is not work (rhels 7.4 )

 

 

[root@mgt ~]# systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon

   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)

   Active: inactive (dead)

     Docs: man:firewalld(1)

 

[root@mgt ~]# getenforce

Disabled

 

[root@mgt ~]# iptables -L

Chain INPUT (policy ACCEPT)

target     prot opt source               destination

 

Chain FORWARD (policy ACCEPT)

target     prot opt source               destination

 

Chain OUTPUT (policy ACCEPT)

target     prot opt source               destination

[root@mgt ~]#

 

Peter CZ peng
Department :Complex Solution Rack TE
Address:ISH3 Shenzhen

Lenovo China

Phone+86 86361590
Email+86 18129979128
VOIP609 1590
Emailpeng...@lenovo.com

 

  

Lenovo.com /www.lenovo.com 
Twitter | Facebook | Instagram | Blogs | Forums

Lenovo_2015
 

 

 

From: peter CZ1 Peng <peng...@lenovo.com>
Sent: Tuesday, May 8, 2018 11:30 PM
To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net>
Subject: Re: [xcat-user] [External] Re: pping not work on a special groups

 

Hi, Casandra

This case may cause by the switch ,and here are the temp solution from  Jarrod  to update the pping code

 

had to change pping

    open(FPING, "nmap -PE --system-dns --disable-arp-ping --send-ip -sP $more_options " . join(' ', @$nodes) . " 2> /dev/null|") or die("Cannot open nmap pipe: $!");

I changed --unprivileged to --disable-arp-ping

that seemed to work

 

 

 

[root@mgt ~]# nmap -PE --system-dns   --unprivileged  --send-ip -sP switch1

Warning:  You are not root -- using TCP pingscan rather than ICMP

 

Starting Nmap 6.40 ( http://nmap.org ) at 2018-05-09 07:24 CST

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Nmap done: 1 IP address (0 hosts up) scanned in 2.00 seconds

[root@mgt ~]# nmap -PE --system-dns   --unprivileged  --send-ip -Pn -sP switch1

 

Starting Nmap 6.40 ( http://nmap.org ) at 2018-05-09 07:24 CST

Nmap scan report for switch1 (172.30.50.1)

Host is up.

Nmap done: 1 IP address (1 host up) scanned in 0.00 seconds

[root@mgt ~]#

 

 

it may be cause by this type of switch ("Arista Networks EOS version 4.20.1F running on an Arista Networks DCS-7260CX3-64 “ )

 

 

 

Peter CZ peng
Department :Complex Solution Rack TE
Address:ISH3 Shenzhen

Lenovo China

Phone+86 86361590
Email+86 18129979128
VOIP609 1590
Emailpeng...@lenovo.com

 

  

Lenovo.com /www.lenovo.com 
Twitter | Facebook | Instagram | Blogs | Forums

Lenovo_2015
 

 

 

From: Casandra H Qiu <cxh...@us.ibm.com>
Sent: Tuesday, May 8, 2018 11:15 PM
To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net>
Subject: [External] Re: [xcat-user] pping not work on a special groups

 

Hi, peter:

Can u check the firewall on your system?

https://github.com/xcat2/xcat-core/issues/4324


Thanks,
Casandra

...................................................................
Casandra Hong Qiu
Phone: (845) 433-9291, t/l 293-9291
Office: Building 8, 3-B-04
cxh...@us.ibm.com



Inactive hide details for peter CZ1 Peng ---05/08/2018 10:23:56 AM---Hi ,all I have an odd issue with ppingpeter CZ1 Peng ---05/08/2018 10:23:56 AM---Hi ,all I have an odd issue with pping

From: peter CZ1 Peng <peng...@lenovo.com>
To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net>
Date: 05/08/2018 10:23 AM
Subject: [xcat-user] pping not work on a special groups




Hi ,all
I have an odd issue with pping

Pping switch not work ,pping node-groups ok
Ping switch name ok
DNS ok
Ping node ok
PPing other group like node groups OK
/etc/resolv.conf OK
Want to know what else to check ,thanks

[root@mgt ~]# pping c1| xcoll
====================================
c1
====================================
ping

[root@mgt ~]#
[root@mgt ~]# cat /etc/hosts | grep switch
172.30.50.1 switch1 switch1.cluster
172.30.50.2 switch2 switch2.cluster
172.30.50.3 switch3 switch3.cluster

[root@mgt ~]#
[root@mgt ~]# lsdef switch
Object name: switch1
groups=switch
ip=172.30.50.1
postbootscripts=otherpkgs
postscripts=syslog,remoteshell,syncfiles
Object name: switch2
groups=switch
ip=172.30.50.2
postbootscripts=otherpkgs
postscripts=syslog,remoteshell,syncfiles
Object name: switch3
groups=switch
ip=172.30.50.3
postbootscripts=otherpkgs
postscripts=syslog,remoteshell,syncfiles

[root@mgt ~]# pping switch
switch1: noping
switch2: noping
switch3: noping

[root@mgt ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eno1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000
link/ether 08:94:ef:5d:11:b4 brd ff:ff:ff:ff:ff:ff
3: eno2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
link/ether 08:94:ef:5d:11:b5 brd ff:ff:ff:ff:ff:ff
inet 172.16.1.254/16 brd 172.16.255.255 scope global eno2
valid_lft forever preferred_lft forever
inet6 fe80::a94:efff:fe5d:11b5/64 scope link
valid_lft forever preferred_lft forever
4: eno3: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000
link/ether 08:94:ef:5d:11:b6 brd ff:ff:ff:ff:ff:ff
5: eno4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000
link/ether 08:94:ef:5d:11:b7 brd ff:ff:ff:ff:ff:ff
6: ens2f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
link/ether 90:e2:ba:f7:9e:54 brd ff:ff:ff:ff:ff:ff
inet 172.20.0.1/16 brd 172.20.255.255 scope global ens2f0
valid_lft forever preferred_lft forever
inet 192.168.11.254/16 scope global ens2f0
valid_lft forever preferred_lft forever
inet 172.30.0.1/16 scope global ens2f0
valid_lft forever preferred_lft forever
inet6 fe80::ddd2:23d8:b3ae:ad12/64 scope link
valid_lft forever preferred_lft forever

[root@mgt ~]# nslookup switch1
Server: 172.20.0.1
Address: 172.20.0.1#53

Name: switch1.cluster
Address: 172.30.50.1

[root@mgt ~]# nslookup switch2
Server: 172.20.0.1
Address: 172.20.0.1#53

Name: switch2.cluster
Address: 172.30.50.2

[root@mgt ~]# nslookup switch3
Server: 172.20.0.1
Address: 172.20.0.1#53

Name: switch3.cluster
Address: 172.30.50.3

[root@mgt ~]# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
search cluster.
nameserver 172.20.0.1
[root@mgt ~]#

[root@mgt ~]# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
search cluster.
nameserver 172.20.0.1
[root@mgt ~]# ping -c2 switch1
PING switch1 (172.30.50.1) 56(84) bytes of data.
64 bytes from switch1 (172.30.50.1): icmp_seq=1 ttl=64 time=0.174 ms
64 bytes from switch1 (172.30.50.1): icmp_seq=2 ttl=64 time=0.150 ms

--- switch1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.150/0.162/0.174/0.012 ms
[root@mgt ~]# ping -c2 switch2
PING switch2 (172.30.50.2) 56(84) bytes of data.
64 bytes from switch2 (172.30.50.2): icmp_seq=1 ttl=64 time=0.132 ms
64 bytes from switch2 (172.30.50.2): icmp_seq=2 ttl=64 time=0.168 ms

--- switch2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.132/0.150/0.168/0.018 ms
[root@mgt ~]# ping -c2 switch3
PING switch3 (172.30.50.3) 56(84) bytes of data.
64 bytes from switch3 (172.30.50.3): icmp_seq=1 ttl=64 time=0.226 ms
64 bytes from switch3 (172.30.50.3): icmp_seq=2 ttl=64 time=0.206 ms

--- switch3 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.206/0.216/0.226/0.010 ms
[root@mgt ~]#

Peter CZ peng
Department :Complex Solution Rack TE
Address:ISH3 Shenzhen
Lenovo China

Phone+86 86361590
Email+86 18129979128
VOIP609 1590
Emailpeng...@lenovo.com
 

Lenovo.com /www.lenovo.com
Twitter | Facebook | Instagram | Blogs | Forums

Lenovo_2015



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=n1LR_Py9TQX0dVqfGTbLHUMGx25-C8VtBDS0nCzyNXY&m=2rnmEIo0LjIVZ_mK9O-f6KFFt7q_gEi3C93z8synExc&s=zObtk_9alzPg2dWgkGlkY_kbeTSh4sVOApIkbPc4MOA&e=
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
 

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

Reply via email to