Re: [Vserver] arping inside guest

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Wed 25 Oct 2006 - 15:01:23 BST
Message-ID: <20061025140123.GF27386@MAIL.13thfloor.at>

On Tue, Oct 24, 2006 at 10:46:06AM -0400, Chuck wrote:
> i am trying to use the arping utility inside a guest. i have a ccap of
> raw_icmp already for something else in the guest. i keep getting this
> error"
>
> arping: socket: Operation not permitted

not unexpected, arp is not icmp :)

> i looked through the caps listing but can't find anything obvious that
> I should use..

you need the 'evil' CAP_NET_RAW (bcaps) for this to
work, as the arp ping utility generates raw packets
on a raw socket ...

> any suggestions?
>
> this is for a nagios monitoring setup where we cannot ping certain ip
> addresses because of their firewall settings, so i thought we could
> still monitor those using arping.

makes it insecure, why not use a tcp or udp type
ping to a known good port?

best,
Herbert

> --
>
> Chuck
>
>
> _______________________________________________
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Wed Oct 25 15:02:57 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 25 Oct 2006 - 15:03:05 BST by hypermail 2.1.8