Skip to content

Instantly share code, notes, and snippets.

@jesboat

jesboat/gist:2728469

Created May 19, 2012 01:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jesboat/2728469 to your computer and use it in GitHub Desktop.
Save jesboat/2728469 to your computer and use it in GitHub Desktop.
Download ZIP
Packet trace for ServerFault question http://serverfault.com/questions/390558
Raw
gistfile1.txt
No. Time Source Destination Protocol Length Info
1 0.000000 10.116.254.17 10.116.254.1 NFS 172 V3 GETATTR Call (Reply In 2), FH:0xbec98b1c
Frame 1: 172 bytes on wire (1376 bits), 172 bytes captured (1376 bits)
Internet Protocol Version 4, Src: 10.116.254.17 (10.116.254.17), Dst: 10.116.254.1 (10.116.254.1)
Transmission Control Protocol, Src Port: 798 (798), Dst Port: nfs (2049), Seq: 1, Ack: 1, Len: 120
Remote Procedure Call, Type:Call XID:0x2f8a18a9
Fragment header: Last fragment, 116 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 0111 0100 = Fragment Length: 116
XID: 0x2f8a18a9 (797579433)
Message Type: Call (0)
RPC Version: 2
Program: NFS (100003)
Program Version: 3
Procedure: GETATTR (1)
[The reply to this request is in frame 2]
Credentials
Flavor: AUTH_UNIX (1)
Length: 36
Stamp: 0x010f37c6
Machine Name: wwwtest1
length: 8
contents: wwwtest1
UID: 3005
GID: 3005
Auxiliary GIDs
GID: 3005
GID: 3999
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Network File System, GETATTR Call FH:0xbec98b1c
[Program Version: 3]
[V3 Procedure: GETATTR (1)]
object
length: 36
[hash (CRC-32): 0xbec98b1c]
decode type as: unknown
filehandle: 010007010300020000000000735879840f5546f9a45b35f0...
No. Time Source Destination Protocol Length Info
2 0.001763 10.116.254.1 10.116.254.17 NFS 168 V3 GETATTR Reply (Call In 1) Regular File mode:0444 uid:3001 gid:3999
Frame 2: 168 bytes on wire (1344 bits), 168 bytes captured (1344 bits)
Internet Protocol Version 4, Src: 10.116.254.1 (10.116.254.1), Dst: 10.116.254.17 (10.116.254.17)
Transmission Control Protocol, Src Port: nfs (2049), Dst Port: 798 (798), Seq: 1, Ack: 121, Len: 116
Remote Procedure Call, Type:Reply XID:0x2f8a18a9
Fragment header: Last fragment, 112 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 0111 0000 = Fragment Length: 112
XID: 0x2f8a18a9 (797579433)
Message Type: Reply (1)
[Program: NFS (100003)]
[Program Version: 3]
[Procedure: GETATTR (1)]
Reply State: accepted (0)
[This is a reply to a request in frame 1]
[Time from request: 0.001763000 seconds]
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Accept State: RPC executed successfully (0)
Network File System, GETATTR Reply Regular File mode:0444 uid:3001 gid:3999
[Program Version: 3]
[V3 Procedure: GETATTR (1)]
Status: NFS3_OK (0)
obj_attributes Regular File mode:0444 uid:3001 gid:3999
Type: Regular File (1)
Mode: 0100444, S_IRUSR, S_IRGRP, S_IROTH
.... .... .... .... .... 0... .... .... = S_ISUID: No
.... .... .... .... .... .0.. .... .... = S_ISGID: No
.... .... .... .... .... ..0. .... .... = S_ISVTX: No
.... .... .... .... .... ...1 .... .... = S_IRUSR: Yes
.... .... .... .... .... .... 0... .... = S_IWUSR: No
.... .... .... .... .... .... .0.. .... = S_IXUSR: No
.... .... .... .... .... .... ..1. .... = S_IRGRP: Yes
.... .... .... .... .... .... ...0 .... = S_IWGRP: No
.... .... .... .... .... .... .... 0... = S_IXGRP: No
.... .... .... .... .... .... .... .1.. = S_IROTH: Yes
.... .... .... .... .... .... .... ..0. = S_IWOTH: No
.... .... .... .... .... .... .... ...0 = S_IXOTH: No
nlink: 1
uid: 3001
gid: 3999
size: 1407
used: 4096
rdev: 0,0
specdata1: 0
specdata2: 0
fsid: 0x58c5cc78744c03d7 (6396743663468938199)
fileid: 188431
atime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
mtime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
ctime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
No. Time Source Destination Protocol Length Info
3 0.001783 10.116.254.17 10.116.254.1 TCP 52 798 > nfs [ACK] Seq=121 Ack=117 Win=4153 Len=0 TSval=148666265 TSecr=519554360
Frame 3: 52 bytes on wire (416 bits), 52 bytes captured (416 bits)
Internet Protocol Version 4, Src: 10.116.254.17 (10.116.254.17), Dst: 10.116.254.1 (10.116.254.1)
Transmission Control Protocol, Src Port: 798 (798), Dst Port: nfs (2049), Seq: 121, Ack: 117, Len: 0
No. Time Source Destination Protocol Length Info
4 0.001849 10.116.254.17 10.116.254.1 NFS 176 V3 ACCESS Call (Reply In 5), FH:0xbec98b1c, [Check: RD MD XT XE]
Frame 4: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits)
Internet Protocol Version 4, Src: 10.116.254.17 (10.116.254.17), Dst: 10.116.254.1 (10.116.254.1)
Transmission Control Protocol, Src Port: 798 (798), Dst Port: nfs (2049), Seq: 121, Ack: 117, Len: 124
Remote Procedure Call, Type:Call XID:0x308a18a9
Fragment header: Last fragment, 120 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 0111 1000 = Fragment Length: 120
XID: 0x308a18a9 (814356649)
Message Type: Call (0)
RPC Version: 2
Program: NFS (100003)
Program Version: 3
Procedure: ACCESS (4)
[The reply to this request is in frame 5]
Credentials
Flavor: AUTH_UNIX (1)
Length: 36
Stamp: 0x010f37c6
Machine Name: wwwtest1
length: 8
contents: wwwtest1
UID: 3005
GID: 3005
Auxiliary GIDs
GID: 3005
GID: 3999
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Network File System, ACCESS Call, FH:0xbec98b1c, [Check: RD MD XT XE]
[Program Version: 3]
[V3 Procedure: ACCESS (4)]
object
length: 36
[hash (CRC-32): 0xbec98b1c]
decode type as: unknown
filehandle: 010007010300020000000000735879840f5546f9a45b35f0...
Check access: 0x2d
.... ...1 = 0x01 READ: allowed?
.... .1.. = 0x04 MODIFY: allowed?
.... 1... = 0x08 EXTEND: allowed?
..1. .... = 0x20 EXECUTE: allowed?
No. Time Source Destination Protocol Length Info
5 0.002688 10.116.254.1 10.116.254.17 NFS 176 V3 ACCESS Reply (Call In 4), [Access Denied: MD XT XE], [Allowed: RD]
Frame 5: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits)
Internet Protocol Version 4, Src: 10.116.254.1 (10.116.254.1), Dst: 10.116.254.17 (10.116.254.17)
Transmission Control Protocol, Src Port: nfs (2049), Dst Port: 798 (798), Seq: 117, Ack: 245, Len: 124
Remote Procedure Call, Type:Reply XID:0x308a18a9
Fragment header: Last fragment, 120 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 0111 1000 = Fragment Length: 120
XID: 0x308a18a9 (814356649)
Message Type: Reply (1)
[Program: NFS (100003)]
[Program Version: 3]
[Procedure: ACCESS (4)]
Reply State: accepted (0)
[This is a reply to a request in frame 4]
[Time from request: 0.000839000 seconds]
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Accept State: RPC executed successfully (0)
Network File System, ACCESS Reply, [Access Denied: MD XT XE], [Allowed: RD]
[Program Version: 3]
[V3 Procedure: ACCESS (4)]
Status: NFS3_OK (0)
obj_attributes Regular File mode:0444 uid:3001 gid:3999
attributes_follow: value follows (1)
attributes Regular File mode:0444 uid:3001 gid:3999
Type: Regular File (1)
Mode: 0100444, S_IRUSR, S_IRGRP, S_IROTH
.... .... .... .... .... 0... .... .... = S_ISUID: No
.... .... .... .... .... .0.. .... .... = S_ISGID: No
.... .... .... .... .... ..0. .... .... = S_ISVTX: No
.... .... .... .... .... ...1 .... .... = S_IRUSR: Yes
.... .... .... .... .... .... 0... .... = S_IWUSR: No
.... .... .... .... .... .... .0.. .... = S_IXUSR: No
.... .... .... .... .... .... ..1. .... = S_IRGRP: Yes
.... .... .... .... .... .... ...0 .... = S_IWGRP: No
.... .... .... .... .... .... .... 0... = S_IXGRP: No
.... .... .... .... .... .... .... .1.. = S_IROTH: Yes
.... .... .... .... .... .... .... ..0. = S_IWOTH: No
.... .... .... .... .... .... .... ...0 = S_IXOTH: No
nlink: 1
uid: 3001
gid: 3999
size: 1407
used: 4096
rdev: 0,0
specdata1: 0
specdata2: 0
fsid: 0x58c5cc78744c03d7 (6396743663468938199)
fileid: 188431
atime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
mtime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
ctime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
Access rights (of requested): 0x01
.... ...1 = 0x01 READ: allowed
.... .0.. = 0x04 MODIFY: *Access Denied*
.... 0... = 0x08 EXTEND: *Access Denied*
..0. .... = 0x20 EXECUTE: *Access Denied*
[Access Denied: True]
No. Time Source Destination Protocol Length Info
6 0.002813 10.116.254.17 10.116.254.1 NFS 192 V3 CREATE Call (Reply In 7), DH:0x7680bcef/lock Mode:EXCLUSIVE
Frame 6: 192 bytes on wire (1536 bits), 192 bytes captured (1536 bits)
Internet Protocol Version 4, Src: 10.116.254.17 (10.116.254.17), Dst: 10.116.254.1 (10.116.254.1)
Transmission Control Protocol, Src Port: 798 (798), Dst Port: nfs (2049), Seq: 245, Ack: 241, Len: 140
Remote Procedure Call, Type:Call XID:0x318a18a9
Fragment header: Last fragment, 136 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 1000 1000 = Fragment Length: 136
XID: 0x318a18a9 (831133865)
Message Type: Call (0)
RPC Version: 2
Program: NFS (100003)
Program Version: 3
Procedure: CREATE (8)
[The reply to this request is in frame 7]
Credentials
Flavor: AUTH_UNIX (1)
Length: 36
Stamp: 0x010f37c6
Machine Name: wwwtest1
length: 8
contents: wwwtest1
UID: 3005
GID: 3005
Auxiliary GIDs
GID: 3005
GID: 3999
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Network File System, CREATE Call DH:0x7680bcef/lock Mode:EXCLUSIVE
[Program Version: 3]
[V3 Procedure: CREATE (8)]
where
dir
length: 36
[hash (CRC-32): 0x7680bcef]
decode type as: unknown
filehandle: 010007010300020000000000735879840f5546f9a45b35f0...
Name: lock
length: 4
contents: lock
Create Mode: EXCLUSIVE (2)
Verifier: Opaque Data
No. Time Source Destination Protocol Length Info
7 0.003555 10.116.254.1 10.116.254.17 NFS 176 V3 CREATE Reply (Call In 6) Error:NFS3ERR_ACCES
Frame 7: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits)
Internet Protocol Version 4, Src: 10.116.254.1 (10.116.254.1), Dst: 10.116.254.17 (10.116.254.17)
Transmission Control Protocol, Src Port: nfs (2049), Dst Port: 798 (798), Seq: 241, Ack: 385, Len: 124
Remote Procedure Call, Type:Reply XID:0x318a18a9
Fragment header: Last fragment, 120 bytes
1... .... .... .... .... .... .... .... = Last Fragment: Yes
.000 0000 0000 0000 0000 0000 0111 1000 = Fragment Length: 120
XID: 0x318a18a9 (831133865)
Message Type: Reply (1)
[Program: NFS (100003)]
[Program Version: 3]
[Procedure: CREATE (8)]
Reply State: accepted (0)
[This is a reply to a request in frame 6]
[Time from request: 0.000742000 seconds]
Verifier
Flavor: AUTH_NULL (0)
Length: 0
Accept State: RPC executed successfully (0)
Network File System, CREATE Reply Error:NFS3ERR_ACCES
[Program Version: 3]
[V3 Procedure: CREATE (8)]
Status: NFS3ERR_ACCES (13)
dir_wcc
before
attributes_follow: no value (0)
after Directory mode:2775 uid:3000 gid:3999
attributes_follow: value follows (1)
attributes Directory mode:2775 uid:3000 gid:3999
Type: Directory (2)
Mode: 042775, S_ISGID, S_IRUSR, S_IWUSR, S_IXUSR, S_IRGRP, S_IWGRP, S_IXGRP, S_IROTH, S_IXOTH
.... .... .... .... .... 0... .... .... = S_ISUID: No
.... .... .... .... .... .1.. .... .... = S_ISGID: Yes
.... .... .... .... .... ..0. .... .... = S_ISVTX: No
.... .... .... .... .... ...1 .... .... = S_IRUSR: Yes
.... .... .... .... .... .... 1... .... = S_IWUSR: Yes
.... .... .... .... .... .... .1.. .... = S_IXUSR: Yes
.... .... .... .... .... .... ..1. .... = S_IRGRP: Yes
.... .... .... .... .... .... ...1 .... = S_IWGRP: Yes
.... .... .... .... .... .... .... 1... = S_IXGRP: Yes
.... .... .... .... .... .... .... .1.. = S_IROTH: Yes
.... .... .... .... .... .... .... ..0. = S_IWOTH: No
.... .... .... .... .... .... .... ...1 = S_IXOTH: Yes
nlink: 6
uid: 3000
gid: 3999
size: 4096
used: 4096
rdev: 0,0
specdata1: 0
specdata2: 0
fsid: 0x58c5cc78744c03d7 (6396743663468938199)
fileid: 173318
atime: Apr 24, 2012 00:11:08.000000000 EDT
seconds: 1335240668
nano seconds: 0
mtime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
ctime: May 18, 2012 19:00:32.000000000 EDT
seconds: 1337382032
nano seconds: 0
No. Time Source Destination Protocol Length Info
8 0.039735 10.116.254.17 10.116.254.1 TCP 52 798 > nfs [ACK] Seq=385 Ack=365 Win=4153 Len=0 TSval=148666275 TSecr=519554360
Frame 8: 52 bytes on wire (416 bits), 52 bytes captured (416 bits)
Internet Protocol Version 4, Src: 10.116.254.17 (10.116.254.17), Dst: 10.116.254.1 (10.116.254.1)
Transmission Control Protocol, Src Port: 798 (798), Dst Port: nfs (2049), Seq: 385, Ack: 365, Len: 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment