OpenVZ Forum - RDF feed
type: channel
items: Netstat show all (HN and VEs) opened ports
items: Re: Netstat show all (HN and VEs) opened ports

Netstat show all (HN and VEs) opened ports
type: item
description: Hi IT crowd, I have installed OpenVZ on the Debian 7.0. Did all by this post download.openvz.org/debian/ Seems all is fine but when I execute 'netstat -tupln' I see all opened ports on HN and all VEs: # netstat -tupln Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 12448/sshd tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 10706/sshd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2342/exim4 tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 10854/sendmail: MTA tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 11779/mysqld tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 11550/apache2 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 11610/sshd tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 12385/apache2 tcp 0 0 127.0.0.1:587 0.0.0.0:* LISTEN 10854/sendmail: MTA tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 11835/exim4 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2317/sshd tcp6 0 0 :::22 :::* LISTEN 12448/sshd tcp6 0 0 :::22 :::* LISTEN 10706/sshd tcp6 0 0 :::80 :::* LISTEN 10958/apache2 Info: # uname -a Linux local.localhost 2.6.32-openvz-042stab083.2-amd64 #1 SMP Fri Nov 8 17:59:25 MSK 2013 x86_64 GNU/Linux linux-image-2.6.32-openvz-042stab083.2-amd64 1 amd64 linux-image-openvz-amd64 042stab083.2-1 amd64 vzctl 4.6-1 amd64 vzquota 3.0.12-3 amd64 vzstats 0.5.2-1 all libploop1:amd64 1.9-10 amd64 ploop 1.9-10 amd64 Is it a bug or feature? How is it possibly to fix it? Alex
creator: maidmantis
date: 2013-12-06T12:35:51-00:00

Re: Netstat show all (HN and VEs) opened ports
type: item
description: It seems normal to see all that info in the HN. But if you run netstat in one of the VEs, you should only see information about that VE.
creator: dipps
date: 2013-12-08T00:08:57-00:00

Re: Netstat show all (HN and VEs) opened ports
type: item
description: dipps wrote on Sat, 07 December 2013 19:08 It seems normal to see all that info in the HN. But if you run netstat in one of the VEs, you should only see information about that VE. Thanks but I can't agree with you because Debian 6.0 has no such problem. If I run netstat on the HN it shows only opened ports on this one. I just want to see netstat only for HN without VEs. Any more ideas? Alex
creator: maidmantis
date: 2013-12-08T00:18:19-00:00

Re: Netstat show all (HN and VEs) opened ports
type: item
description: Well, I don't agree back but I no longer have a debian 6 HN to look at. For sure, netstat in HN shows all connections in a Centos 6 HN. I thought the kernel in the HN can "see" every process in every VE. There's only one kernel running on the box. Not sure why you think this is a problem. If you need to, you can work out which connections belong to which VE by looking up the PIDs with vzpid.
creator: dipps
date: 2013-12-08T01:02:52-00:00