netdev - Re: [iproute2] regression in ss output

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Mon, 16 Oct 2017 09:20:58 -0700
From:   Stephen Hemminger <stephen@...workplumber.org>
To:     Humberto Alves <hjalves@...e.com>
Cc:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: [iproute2] regression in ss output

On Fri, 13 Oct 2017 09:57:37 +0000
Humberto Alves <hjalves@...e.com> wrote:

> Hi! With the last iproute2 release, ss command output does not 
> differentiate between any-address IPv4 sockets from the IPv6 ones.
> I don't know if this is an expected behaviour, but the old output looks 
> more useful. Below I pasted the difference between the old behaviour and 
> the new one.
> I am happy to send a patch if you want. Thanks
> 
> 
> iproute2-4.12
> -------------
> 
> $ ss --version
> ss utility, iproute2-ss170705
> 
> $ ss -ntl
> State       Recv-Q Send-Q Local Address:Port               Peer 
> Address:Port
> LISTEN      0      100            *:587                        *:* 
> 
> LISTEN      0      100            *:110                        *:* 
> 
> LISTEN      0      100            *:143                        *:* 
> 
> LISTEN      0      128            *:80                         *:* 
> 
> LISTEN      0      128            *:2225                       *:* 
> 
> LISTEN      0      10     127.0.0.1:5010                       *:* 
> 
> LISTEN      0      128            *:20                         *:* 
> 
> LISTEN      0      128    127.0.0.1:20150                      *:* 
> 
> LISTEN      0      128            *:61719                      *:* 
> 
> LISTEN      0      100            *:25                         *:* 
> 
> LISTEN      0      3              *:1723                       *:* 
> 
> LISTEN      0      128            *:17500                      *:* 
> 
> LISTEN      0      128    127.0.0.1:17600                      *:* 
> 
> LISTEN      0      128            *:8000                       *:* 
> 
> LISTEN      0      100            *:993                        *:* 
> 
> LISTEN      0      128    127.0.0.1:17603                      *:* 
> 
> LISTEN      0      100            *:995                        *:* 
> 
> LISTEN      0      100           :::587                       :::* 
> 
> LISTEN      0      100           :::110                       :::* 
> 
> LISTEN      0      100           :::143                       :::* 
> 
> LISTEN      0      128           :::22000                     :::* 
> 
> LISTEN      0      128           :::80                        :::* 
> 
> LISTEN      0      128           :::2225                      :::* 
> 
> LISTEN      0      128           :::20                        :::* 
> 
> LISTEN      0      128          ::1:20150                     :::* 
> 
> LISTEN      0      100           :::25                        :::* 
> 
> LISTEN      0      128           :::17500                     :::* 
> 
> LISTEN      0      128           :::8384                      :::* 
> 
> LISTEN      0      100           :::993                       :::* 
> 
> LISTEN      0      100           :::995                       :::*
> 
> iproute2-4.13
> -------------
> 
> $ ss --version
> ss utility, iproute2-ss170905
> 
> $ ss -ntl
> State       Recv-Q Send-Q Local Address:Port               Peer 
> Address:Port
> LISTEN      0      100            *:587                        *:* 
> 
> LISTEN      0      100            *:110                        *:* 
> 
> LISTEN      0      100            *:143                        *:* 
> 
> LISTEN      0      128            *:80                         *:* 
> 
> LISTEN      0      128            *:2225                       *:* 
> 
> LISTEN      0      10     127.0.0.1:5010                       *:* 
> 
> LISTEN      0      128            *:20                         *:* 
> 
> LISTEN      0      128    127.0.0.1:20150                      *:* 
> 
> LISTEN      0      128            *:61719                      *:* 
> 
> LISTEN      0      100            *:25                         *:* 
> 
> LISTEN      0      3              *:1723                       *:* 
> 
> LISTEN      0      128            *:17500                      *:* 
> 
> LISTEN      0      128    127.0.0.1:17600                      *:* 
> 
> LISTEN      0      128            *:8000                       *:* 
> 
> LISTEN      0      100            *:993                        *:* 
> 
> LISTEN      0      128    127.0.0.1:17603                      *:* 
> 
> LISTEN      0      100            *:995                        *:* 
> 
> LISTEN      0      100            *:587                        *:* 
> 
> LISTEN      0      100            *:110                        *:* 
> 
> LISTEN      0      100            *:143                        *:* 
> 
> LISTEN      0      128            *:22000                      *:* 
> 
> LISTEN      0      128            *:80                         *:* 
> 
> LISTEN      0      128            *:2225                       *:* 
> 
> LISTEN      0      128            *:20                         *:* 
> 
> LISTEN      0      128        [::1]:20150                      *:* 
> 
> LISTEN      0      100            *:25                         *:* 
> 
> LISTEN      0      128            *:17500                      *:* 
> 
> LISTEN      0      128            *:8384                       *:* 
> 
> LISTEN      0      100            *:993                        *:* 
> 
> LISTEN      0      100            *:995                        *:*

All changes are not regressions.

Yes it was intentional because the outputing  [::]:20 looked ugly and using * makes IPv4 and IPv6
look the same.