| grep task sunrpc:rpc_task_begin [Tracepoint event] sunrpc:rpc_task_complete event] sunrpc:rpc_task_sleep [Tracepoint event] sunrpc:rpc_task_wakeup :rpc_task_run_action -e sunrpc:rpc_task_complete -e sunrpc:rpc_task_wakeup -e sunrpc:rpc_task_begin - _64/kernel/net/sunrpc/sunrpc.ko.xz) ffffffff87cb9ebf process_one_work+0x17f ([kernel.kallsyms .el7.x86_64/kernel/net/sunrpc/sunrpc.ko.xz) ffffffffc03cd5a2 rpc_wake_up_queued_task+0x22 (/lib
USER FD TYPE DEVICE SIZE/OFF NODE NAME rpcbind 1203 rpc 6u IPv4 11326 0t0 UDP *:sunrpc rpc 7u IPv4 11330 0t0 UDP *:954 rpcbind 1203 rpc 8u IPv4 11331 0t0 TCP *:sunrpc USER FD TYPE DEVICE SIZE/OFF NODE NAME rpcbind 1203 rpc 9u IPv6 11333 0t0 UDP *:sunrpc rpc 10u IPv6 11335 0t0 UDP *:954 rpcbind 1203 rpc 11u IPv6 11336 0t0 TCP *:sunrpc (LISTEN) rpcbind 1203 rpc 9u IPv6 11333 0t0 UDP *:sunrpc rpcbind 1203 rpc 10u
(LISTEN) systemd 1 root 47u IPv4 15647 0t0 TCP *:sunrpc (LISTEN) chronyd 558 chrony (LISTEN) rpcbind 3578 rpc 5u IPv4 15647 0t0 TCP *:sunrpc (LISTEN) rpcbind 3578 rpc 8u IPv4 33103 0t0 UDP *:sunrpc rpcbind 3578 rpc 9u IPv4 33104 0t0 UDP *:785 rpcbind 3578 rpc 10u IPv6 33105 0t0 UDP *:sunrpc rpcbind 3578 rpc 11u (LISTEN) rpcbind 3578 rpc 10u IPv6 33105 0t0 UDP *:sunrpc rpcbind 3578 rpc 11u
/0x1d0 [sunrpc] [] rpc_execute+0x43/0x50 [sunrpc] [] rpc_run_task+0x75/0x90 [sunrpc] [] rpc_call_sync +0x42/0x70 [sunrpc] [] nfs3_rpc_wrapper.clone.0+0x35/0x80 [nfs] [] nfs3_proc_getattr+0x47/0x90 [nfs] ] [] xs_sendpages+0x173/0x220 [sunrpc] [] xs_tcp_send_request+0x5d/0x160 [sunrpc] [] xprt_transmit+0x83 /0x2e0 [sunrpc] [] call_transmit+0xa8/0x130 [sunrpc] [] __rpc_execute+0x66/0x1d0 [sunrpc] [] rpc_async_schedule +0x15/0x20 [sunrpc] [] process_one_work+0x13e/0x460 [] worker_thread+0x17c/0x3b0 [] kthread+0x96/0xa0
Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc 0 0 *:mysql *:* LISTEN tcp 0 0 *:sunrpc openvpn *:* udp 0 0 *:mdns *:* udp 0 0 *:sunrpc # netstat -ac 5 | grep tcp tcp 0 0 *:sunrpc *:*
0 0 0.0.0.0:hostmon 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:sunrpc 0 0 [::]:hostmon [::]:* LISTEN tcp6 0 0 [::]:sunrpc 0 0 0.0.0.0:60485 0.0.0.0:* 10 udp 0 0 0.0.0.0:sunrpc 0 0 [::]:950 [::]:* 14 udp6 0 0 [::]:sunrpc
update && sudo apt-get install nfs-common sudo chmod 777 -R /etc/modprobe.d sudo echo "options sunrpc tcp_slot_table_entries=128" >> /etc/modprobe.d/sunrpc.conf sudo echo "options sunrpc tcp_max_slot_table_entries =128" >> /etc/modprobe.d/sunrpc.conf sudo mkdir /sftp sudo mount -t nfs -o vers=4,minorversion=0,rsize
3346/xinetd udp 0 0 *:999 *:* 3366/rpc.rquotad udp 0 0 *:sunrpc :* LISTEN tcp 0 0 *:netbios-ssn *:* LISTEN tcp 0 0 *:sunrpc *:* udp 0 0 *:999 *:* udp 0 0 *:sunrpc
ewomail /ewomail_bak mkdir /ewomail yum -y install nfs-utils 执行以下命令,提高同时发起的NFS请求数量: echo "options sunrpc tcp_slot_table_entries=128" >> /etc/modprobe.d/sunrpc.conf echo "options sunrpc tcp_max_slot_table_entries =128" >> /etc/modprobe.d/sunrpc.conf # mkdir /aliyun_nfs # chown 777 -R /aliyun_nfs # mount -t nfs
ewomail /ewomail_bak mkdir /ewomail yum -y install nfs-utils 执行以下命令,提高同时发起的NFS请求数量: echo "options sunrpc tcp_slot_table_entries=128" >> /etc/modprobe.d/sunrpc.conf echo "options sunrpc tcp_max_slot_table_entries =128" >> /etc/modprobe.d/sunrpc.conf # mkdir /aliyun_nfs # chown 777 -R /aliyun_nfs # mount -t nfs
PID USER FD TYPE DEVICE SIZE/OFF NODE NAME rpcbind 968 rpc 6u IPv4 11275 0t0 UDP *:sunrpc rpcbind 968 rpc 8u IPv4 11278 0t0 TCP *:sunrpc (LISTEN) rpcbind 968 rpc 9u IPv6 11280 0t0 UDP *:sunrpc rpcbind 968 rpc 11u IPv6 11283 0t0 TCP *:sunrpc (LISTEN) signal列表
192.168.1.106 三、nmap脚本探测信息 nmap -p 111 --script=rpcbind 192.168.1.106 四、msf探测漏洞 use auxiliary/scanner/misc/sunrpc_portmapper
hostriame 102, // iso-tsap 103, // gppitnp 104, // acr-nema 109, // pop2 110, // pop3 111, // sunrpc
0 0 localhost:ipp 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:sunrpc 0 0 localhost:ipp [::]:* LISTEN tcp6 0 0 [::]:sunrpc 0 0 0.0.0.0:bootps 0.0.0.0:* udp 0 0 0.0.0.0:sunrpc 0 0 0.0.0.0:37396 0.0.0.0:* udp6 0 0 [::]:sunrpc
hostriame 102 --- iso-tsap 103 --- gppitnp 104 --- acr-nema 109 --- pop2 110 --- pop3 111 --- sunrpc
ss -lRecv-Q Send-Q Local Address:Port Peer Address:Port 0 10 :::5989 :::* 0 5 *:rsync *:* 0 128 :::sunrpc :::* 0 128 *:sunrpc *:* 0 511 *:http *:* 0 128 :::ssh :::* 0 128 *:ssh *:* 0 128 :::35766 :::* 0 128
ss -lRecv-Q Send-Q Local Address:Port Peer Address:Port 0 10 :::5989 :::* 0 5 *:rsync *:* 0 128 :::sunrpc :::* 0 128 *:sunrpc *:* 0 511 *:http *:* 0 128 :::ssh :::* 0 128 *:ssh *:* 0 128 :::35766 :::* 0 128
102, // iso-tsap 103, // gppitnp 104, // acr-nema 109, // pop2 110, // pop3 111, // sunrpc
102, // iso-tsap 103, // gppitnp 104, // acr-nema 109, // pop2 110, // pop3 111, // sunrpc
例如: file svcsock.c, file /usr/src/packages/BUILD/sgi-enhancednfs-1.4/default/net/sunrpc/svcsock.c module 例如,module sunrpc format:给定的字符串会在动态调试格式字符串里查找。注意这字符串不需要匹配这个格式。空格和其他特殊字符能够用八进制字符语法来转义,例如空字符是\040。