On Tue, Oct 24, 2006 at 10:46:06AM -0400, Chuck wrote:
> i am trying to use the arping utility inside a guest. i have a ccap of
> raw_icmp already for something else in the guest. i keep getting this
> arping: socket: Operation not permitted
not unexpected, arp is not icmp :)
> i looked through the caps listing but can't find anything obvious that
> I should use..
you need the 'evil' CAP_NET_RAW (bcaps) for this to
work, as the arp ping utility generates raw packets
on a raw socket ...
> any suggestions?
> this is for a nagios monitoring setup where we cannot ping certain ip
> addresses because of their firewall settings, so i thought we could
> still monitor those using arping.
makes it insecure, why not use a tcp or udp type
ping to a known good port?
> Vserver mailing list
Vserver mailing list
Received on Wed Oct 25 15:02:57 2006