This system is the property of Known Element Enterprises LLC.

Authorized uses only. All activity may be monitored and reported.

All activities subject to monitoring/recording/review in real time and/or at a later time.##### AUDIT START 2026-07-28T02:41:34Z #####
Audit host: pfv-netboot.knel.net
Audit user: localuser
Script:     audit-netboot.sh (READ-ONLY)

========================================================================
SECTION: 1. SYSTEM BASICS
========================================================================
-- uname --
Linux pfv-netboot 6.1.0-44-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64 GNU/Linux
-- /etc/os-release --
PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
NAME="Debian GNU/Linux"
VERSION_ID="12"
VERSION="12 (bookworm)"
VERSION_CODENAME=bookworm
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
-- uptime --
 21:41:34 up 113 days, 15:32,  2 users,  load average: 0.07, 0.07, 0.06
-- timezone --
               Local time: Mon 2026-07-27 21:41:34 CDT
           Universal time: Tue 2026-07-28 02:41:34 UTC
                 RTC time: Tue 2026-07-28 02:41:34
                Time zone: US/Central (CDT, -0500)
System clock synchronized: yes
              NTP service: n/a
          RTC in local TZ: no
-- arch --
amd64
-- memory --
               total        used        free      shared  buff/cache   available
Mem:           1.9Gi       940Mi        66Mi        65Mi       1.1Gi       961Mi
Swap:          974Mi       315Mi       659Mi
-- disk --
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda1       491G   18G  448G   4% /
-- cpu count --
2

========================================================================
SECTION: 2. NETWORK
========================================================================
-- hostname --
pfv-netboot
pfv-netboot.knel.net
192.168.3.250 172.24.0.1 172.18.0.1 172.19.0.1 172.23.0.1 172.17.0.1 172.20.0.1 172.22.0.1 100.103.64.82 2600:1700:1d1:eb00:215:5dff:fe64:e81e fd7a:115c:a1e0::2901:4052 
-- ip addr --
lo               UNKNOWN        127.0.0.1/8 ::1/128 
eth0             UP             192.168.3.250/22 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 fe80::215:5dff:fe64:e81e/64 
eth1             UP             
br-3d55385c5e7d  UP             172.24.0.1/16 fe80::d883:2ff:fef8:79cd/64 
br-50e2988e78eb  DOWN           172.18.0.1/16 
br-748fea589ab8  DOWN           172.19.0.1/16 
br-b52d11330b20  DOWN           172.23.0.1/16 
docker0          DOWN           172.17.0.1/16 
br-f91c61cdba28  DOWN           172.20.0.1/16 
br-25187260f675  DOWN           172.22.0.1/16 
tailscale0       UNKNOWN        100.103.64.82/32 fd7a:115c:a1e0::2901:4052/128 fe80::42db:e6ff:fe57:431c/64 
veth9ecb986@if2  UP             fe80::c45b:62ff:fe19:6258/64 

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:15:5d:64:e8:1e brd ff:ff:ff:ff:ff:ff
    inet 192.168.3.250/22 brd 192.168.3.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 scope global dynamic mngtmpaddr 
       valid_lft 3391sec preferred_lft 3391sec
    inet6 fe80::215:5dff:fe64:e81e/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:15:5d:64:e8:2a brd ff:ff:ff:ff:ff:ff
5: br-3d55385c5e7d: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether da:83:02:f8:79:cd brd ff:ff:ff:ff:ff:ff
    inet 172.24.0.1/16 brd 172.24.255.255 scope global br-3d55385c5e7d
       valid_lft forever preferred_lft forever
    inet6 fe80::d883:2ff:fef8:79cd/64 scope link 
       valid_lft forever preferred_lft forever
6: br-50e2988e78eb: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether ca:f9:33:b2:b6:bb brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global br-50e2988e78eb
       valid_lft forever preferred_lft forever
7: br-748fea589ab8: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 82:e8:2b:47:1e:91 brd ff:ff:ff:ff:ff:ff
    inet 172.19.0.1/16 brd 172.19.255.255 scope global br-748fea589ab8
       valid_lft forever preferred_lft forever
8: br-b52d11330b20: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether de:6e:f1:ec:24:64 brd ff:ff:ff:ff:ff:ff
    inet 172.23.0.1/16 brd 172.23.255.255 scope global br-b52d11330b20
       valid_lft forever preferred_lft forever
9: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 56:f9:55:99:fa:af brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
10: br-f91c61cdba28: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 8e:ed:24:fa:4b:4a brd ff:ff:ff:ff:ff:ff
    inet 172.20.0.1/16 brd 172.20.255.255 scope global br-f91c61cdba28
       valid_lft forever preferred_lft forever
11: br-25187260f675: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 82:af:8a:0a:64:01 brd ff:ff:ff:ff:ff:ff
    inet 172.22.0.1/16 brd 172.22.255.255 scope global br-25187260f675
       valid_lft forever preferred_lft forever
18: tailscale0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1280 qdisc fq_codel state UNKNOWN group default qlen 500
    link/none 
    inet 100.103.64.82/32 scope global tailscale0
       valid_lft forever preferred_lft forever
    inet6 fd7a:115c:a1e0::2901:4052/128 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::42db:e6ff:fe57:431c/64 scope link stable-privacy 
       valid_lft forever preferred_lft forever
24: veth9ecb986@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-3d55385c5e7d state UP group default 
    link/ether c6:5b:62:19:62:58 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::c45b:62ff:fe19:6258/64 scope link 
       valid_lft forever preferred_lft forever
-- default route --
default via 192.168.3.254 dev eth0 onlink 
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 
172.18.0.0/16 dev br-50e2988e78eb proto kernel scope link src 172.18.0.1 linkdown 
172.19.0.0/16 dev br-748fea589ab8 proto kernel scope link src 172.19.0.1 linkdown 
172.20.0.0/16 dev br-f91c61cdba28 proto kernel scope link src 172.20.0.1 linkdown 
172.22.0.0/16 dev br-25187260f675 proto kernel scope link src 172.22.0.1 linkdown 
172.23.0.0/16 dev br-b52d11330b20 proto kernel scope link src 172.23.0.1 linkdown 
172.24.0.0/16 dev br-3d55385c5e7d proto kernel scope link src 172.24.0.1 
192.168.0.0/22 dev eth0 proto kernel scope link src 192.168.3.250 
-- /etc/resolv.conf --
# resolv.conf(5) file generated by tailscale
# For more info, see https://tailscale.com/s/resolvconf-overwrite
# DO NOT EDIT THIS FILE BY HAND -- CHANGES WILL BE OVERWRITTEN

nameserver 100.100.100.100
nameserver fd7a:115c:a1e0::53
search knel.net
-- /etc/hosts --
127.0.0.1	localhost
127.0.1.1	pfv-netboot.knel.net	pfv-netboot

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
-- listening TCP/UDP sockets --
Netid State  Recv-Q Send-Q                              Local Address:Port  Peer Address:PortProcess
udp   UNCONN 0      0                                         0.0.0.0:38908      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:53         0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:67         0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:46164      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:111        0.0.0.0:*          
udp   UNCONN 0      0                                   100.103.64.82:123        0.0.0.0:*          
udp   UNCONN 0      0                                      172.24.0.1:123        0.0.0.0:*          
udp   UNCONN 0      0                                   192.168.3.250:123        0.0.0.0:*          
udp   UNCONN 0      0                                       127.0.0.1:123        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:123        0.0.0.0:*          
udp   UNCONN 0      0                                  172.17.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.17.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.18.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.18.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.19.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.19.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.20.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.20.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.22.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.22.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.23.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.23.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.24.255.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                      172.24.0.1:137        0.0.0.0:*          
udp   UNCONN 0      0                                   192.168.3.255:137        0.0.0.0:*          
udp   UNCONN 0      0                                   192.168.3.250:137        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:137        0.0.0.0:*          
udp   UNCONN 0      0                                  172.17.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.17.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.18.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.18.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.19.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.19.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.20.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.20.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.22.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.22.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.23.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.23.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                  172.24.255.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                      172.24.0.1:138        0.0.0.0:*          
udp   UNCONN 0      0                                   192.168.3.255:138        0.0.0.0:*          
udp   UNCONN 0      0                                   192.168.3.250:138        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:138        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:161        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:41257      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:20000      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:41641      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:59092      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:10000      0.0.0.0:*          
udp   UNCONN 0      0                                       127.0.0.1:786        0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:40725      0.0.0.0:*          
udp   UNCONN 0      0                                         0.0.0.0:37749      0.0.0.0:*          
udp   UNCONN 0      0                                            [::]:53            [::]:*          
udp   UNCONN 0      0                                            [::]:34901         [::]:*          
udp   UNCONN 0      0                                            [::]:111           [::]:*          
udp   UNCONN 0      0         [fe80::c45b:62ff:fe19:6258]%veth9ecb986:123           [::]:*          
udp   UNCONN 0      0          [fe80::42db:e6ff:fe57:431c]%tailscale0:123           [::]:*          
udp   UNCONN 0      0                     [fd7a:115c:a1e0::2901:4052]:123           [::]:*          
udp   UNCONN 0      0      [fe80::d883:2ff:fef8:79cd]%br-3d55385c5e7d:123           [::]:*          
udp   UNCONN 0      0                 [fe80::215:5dff:fe64:e81e]%eth0:123           [::]:*          
udp   UNCONN 0      0         [2600:1700:1d1:eb00:215:5dff:fe64:e81e]:123           [::]:*          
udp   UNCONN 0      0                                           [::1]:123           [::]:*          
udp   UNCONN 0      0                                            [::]:123           [::]:*          
udp   UNCONN 0      0                                            [::]:43257         [::]:*          
udp   UNCONN 0      0                                            [::]:44469         [::]:*          
udp   UNCONN 0      0                                            [::]:41641         [::]:*          
udp   UNCONN 0      0                                            [::]:55132         [::]:*          
udp   UNCONN 0      0                                            [::]:34667         [::]:*          
tcp   LISTEN 0      4096                                      0.0.0.0:38435      0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:20000      0.0.0.0:*          
tcp   LISTEN 0      5                                       127.0.0.1:555        0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:10002      0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:10003      0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:10000      0.0.0.0:*          
tcp   LISTEN 0      4096                                100.103.64.82:64362      0.0.0.0:*          
tcp   LISTEN 0      5                                       127.0.0.1:61209      0.0.0.0:*          
tcp   LISTEN 0      50                                        0.0.0.0:139        0.0.0.0:*          
tcp   LISTEN 0      64                                        0.0.0.0:36079      0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:45295      0.0.0.0:*          
tcp   LISTEN 0      5                                         0.0.0.0:4330       0.0.0.0:*          
tcp   LISTEN 0      100                                       0.0.0.0:25         0.0.0.0:*          
tcp   LISTEN 0      128                                       0.0.0.0:22         0.0.0.0:*          
tcp   LISTEN 0      64                                        0.0.0.0:2049       0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:53         0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:40029      0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:111        0.0.0.0:*          
tcp   LISTEN 0      50                                        0.0.0.0:445        0.0.0.0:*          
tcp   LISTEN 0      4096                                      0.0.0.0:58853      0.0.0.0:*          
tcp   LISTEN 0      128                                       0.0.0.0:44322      0.0.0.0:*          
tcp   LISTEN 0      128                                       0.0.0.0:44323      0.0.0.0:*          
tcp   LISTEN 0      5                                         0.0.0.0:44321      0.0.0.0:*          
tcp   LISTEN 0      4096                  [fd7a:115c:a1e0::2901:4052]:52472         [::]:*          
tcp   LISTEN 0      4096                                         [::]:45755         [::]:*          
tcp   LISTEN 0      4096                                         [::]:60951         [::]:*          
tcp   LISTEN 0      4096                                            *:9090             *:*          
tcp   LISTEN 0      64                                           [::]:37813         [::]:*          
tcp   LISTEN 0      4096                                         [::]:10002         [::]:*          
tcp   LISTEN 0      4096                                         [::]:10003         [::]:*          
tcp   LISTEN 0      4096                                         [::]:10000         [::]:*          
tcp   LISTEN 0      4096                                            *:45876            *:*          
tcp   LISTEN 0      50                                           [::]:139           [::]:*          
tcp   LISTEN 0      4096                                         [::]:44271         [::]:*          
tcp   LISTEN 0      5                                            [::]:4330          [::]:*          
tcp   LISTEN 0      128                                          [::]:22            [::]:*          
tcp   LISTEN 0      64                                           [::]:2049          [::]:*          
tcp   LISTEN 0      4096                                         [::]:53            [::]:*          
tcp   LISTEN 0      4096                                         [::]:111           [::]:*          
tcp   LISTEN 0      4096                                            *:6556             *:*          
tcp   LISTEN 0      50                                           [::]:445           [::]:*          
tcp   LISTEN 0      4096                                         [::]:60725         [::]:*          
tcp   LISTEN 0      128                                          [::]:44322         [::]:*          
tcp   LISTEN 0      128                                          [::]:44323         [::]:*          
tcp   LISTEN 0      5                                            [::]:44321         [::]:*          
-- /etc/network/interfaces --
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
	address 192.168.3.250
	netmask 255.255.252.0
	gateway 192.168.3.254

#allow-hotplug eth1
#iface eth1 inet static
#	address 10.100.100.4
#	netmask 255.255.255.0
-- netplan --
-- systemd-networkd --
total 8
drwxr-xr-x 2 root root 4096 Mar  6  2025 .
drwxr-xr-x 5 root root 4096 Jul 20 17:55 ..
●        State: n/a
  Online state: unknown
       Address: 192.168.3.250 on eth0
                172.24.0.1 on br-3d55385c5e7d
                172.18.0.1 on br-50e2988e78eb
                172.19.0.1 on br-748fea589ab8
                172.23.0.1 on br-b52d11330b20
                172.17.0.1 on docker0
                172.20.0.1 on br-f91c61cdba28
                172.22.0.1 on br-25187260f675
                100.103.64.82 on tailscale0
                2600:1700:1d1:eb00:215:5dff:fe64:e81e on eth0
                fd7a:115c:a1e0::2901:4052 on tailscale0
                fe80::215:5dff:fe64:e81e on eth0
                fe80::d883:2ff:fef8:79cd on br-3d55385c5e7d
                fe80::42db:e6ff:fe57:431c on tailscale0
                fe80::c45b:62ff:fe19:6258 on veth9ecb986
       Gateway: 192.168.3.254 on eth0
                fe80::6e4b:b4ff:fe10:4061 on eth0

========================================================================
SECTION: 3. RELEVANT SYSTEMD UNITS
========================================================================
-- all units matching dns|pihole|dnsmasq|technitium|ftl|ntp|chrony|timesync --
  initrd-parse-etc.service             loaded    inactive dead    Mountpoints Configured in the Real Root
  ntpsec-rotate-stats.service          loaded    inactive dead    Rotate ntpd stats
  ntpsec-systemd-netif.service         loaded    inactive dead    ntpsec-systemd-netif.service
  ntpsec.service                       loaded    active   running Network Time Service
● systemd-resolved.service             not-found inactive dead    systemd-resolved.service
● systemd-timesyncd.service            not-found inactive dead    systemd-timesyncd.service
-- unit files (enabled state) --
ntpsec-systemd-netif.path                                                     enabled         enabled
postfix-resolvconf.path                                                       disabled        enabled
ntp.service                                                                   alias           -
ntpd.service                                                                  alias           -
ntpsec-rotate-stats.service                                                   static          -
ntpsec-systemd-netif.service                                                  static          -
ntpsec-wait.service                                                           disabled        enabled
ntpsec.service                                                                enabled         enabled
postfix-resolvconf.service                                                    disabled        enabled
ntpsec-rotate-stats.timer                                                     enabled         enabled
ntpsec.timer                                                                  masked          enabled
-- installed packages of interest --
ii  dnsmasq-base                      2.90-4~deb12u2                       amd64        Small caching DNS proxy and DHCP/TFTP server - executable
ii  ntpsec                            1.2.2+dfsg1-1+deb12u1                amd64        Network Time Protocol daemon and utility programs
ii  ntpsec-ntpdate                    1.2.2+dfsg1-1+deb12u1                amd64        client for setting system time from NTP servers
ii  ntpsec-ntpdig                     1.2.2+dfsg1-1+deb12u1                amd64        ntpdig SNTP client
ii  python3-ntp                       1.2.2+dfsg1-1+deb12u1                amd64        Python 3 NTP Helper Classes

========================================================================
SECTION: 4. NTP
========================================================================
-- chrony --

-- chronyc sources/stats (if available) --
main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
-- ntpsec / ntp classic --
● ntpsec.service - Network Time Service
     Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled)
     Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago
       Docs: man:ntpd(8)
    Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS)
   Main PID: 2124690 (ntpd)
      Tasks: 1 (limit: 2219)
     Memory: 10.7M
        CPU: 34.324s
     CGroup: /system.slice/ntpsec.service
             └─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec
● ntpsec.service - Network Time Service
     Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled)
     Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago
       Docs: man:ntpd(8)
    Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS)
   Main PID: 2124690 (ntpd)
      Tasks: 1 (limit: 2219)
     Memory: 10.7M
        CPU: 34.324s
     CGroup: /system.slice/ntpsec.service
             └─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
main: line 37: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
driftfile /var/lib/ntp/ntp.drift
leapfile /usr/share/zoneinfo/leap-seconds.list
server pfvsvrpi.knel.net
restrict 127.0.0.1
restrict ::1

-- systemd-timesyncd --

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
-- openntpd --

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

========================================================================
SECTION: 5. DOCKER
========================================================================
-- docker version --
Client: Docker Engine - Community
 Version:           29.6.2
 API version:       1.55
 Go version:        go1.26.5
 Git commit:        dfc4efb
 Built:             Thu Jul 16 16:12:20 2026
 OS/Arch:           linux/amd64
 Context:           default
Client: Docker Engine - Community
 Version:           29.6.2
 API version:       1.55
 Go version:        go1.26.5
 Git commit:        dfc4efb
 Built:             Thu Jul 16 16:12:20 2026
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          29.6.2
  API version:      1.55 (minimum version 1.40)
  Go version:       go1.26.5
  Git commit:       3d80467
  Built:            Thu Jul 16 16:12:20 2026
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          v2.2.6
  GitCommit:        11ce9d5f3c68c941867e82890e93e815c1304f1b
 runc:
  Version:          1.3.6
  GitCommit:        v1.3.6-0-g491b69ba
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0
-- containers (running) --
CONTAINER ID   IMAGE                  COMMAND          CREATED         STATUS                    PORTS                                                                                                                                                                               NAMES
1d09249f01b0   pihole/pihole:latest   "start.sh"       5 months ago    Up 44 minutes (healthy)   67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp   pihole
c33ced53142e   dockurr/chrony         "/bin/startup"   13 months ago   Up 7 days (healthy)                                                                                                                                                                                           tsys-ntp
-- containers (all) --
CONTAINER ID   IMAGE                  COMMAND          CREATED         STATUS                    PORTS                                                                                                                                                                               NAMES
1d09249f01b0   pihole/pihole:latest   "start.sh"       5 months ago    Up 44 minutes (healthy)   67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp   pihole
c33ced53142e   dockurr/chrony         "/bin/startup"   13 months ago   Up 7 days (healthy)                                                                                                                                                                                           tsys-ntp
-- images --
IMAGE                   ID             DISK USAGE   CONTENT SIZE   EXTRA
busybox:latest          6d3e4188a38a       4.28MB             0B        
dockurr/chrony:latest   3b656f2feb55       15.4MB             0B   U    
pihole/pihole:latest    81365952d1f8       92.7MB             0B   U    
-- volumes --
DRIVER    VOLUME NAME
local     0cb24520936997d233409ea07681920fdb03d92967856e849474cf90446dc426
local     0ccc1140e4b86442167f65d7caf43d8a3bc04fff2bef461f112d8b7c8e4bd4c8
local     1d7f70d65f5d739f737c3bc0d1b0b2b5cf4f192477dcbbdb95bca344310bff84
local     2a1726279d1d382ab0a2bcb2079f60e65fc0fd0d40880074038e0c678b2a7f56
local     3d207dff87da7dc7d11b70f1e595cc5cce001392cb663ac4d664f5710b9879b8
local     4f8894b9f0206c743be26e6b644e3bf017c5b6e190ac7da31e7ffb7132a1ca2f
local     7c210964fd48cd91c8e37543d562569ec523208b5ea421f8fb47dc73a6d724ee
local     8ccc4c07bf45d05bc922d4f619780f60cac0149b4dd7de5be7720f72f47e6c10
local     71c98aa3d5fb266ef291ac4fc95b11fc83475b9bb0f70999e77095249ad18bf5
local     83f977471ac2f4ad6521ad50f0311ee36547701d00d9a869903f0ba667c2000d
local     87eced0295c12870220fc746ef685530cb5b8e20c4afafbfd573ff773459cd9f
local     95eb8a7b389b9a04bd90f4cee485bd015b7c3fd311c1750c7596a2b2fde1605d
local     562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41
local     8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b
local     201278554f24a7af6284b9564c45656e6d2dc7b9daea24fe52707d7825cb5385
local     b24c0bd3e25987537a92078d6f521f5f155e7379295d21e43c500cbabc8a02e0
local     bb353f885d620d98dbb147f0ff51f38a87725669b1a14390fb825509878a7e0b
local     bc96d56b965f1e238afd47e483b93f1ec9ed59e8458e8e851ffc9710582a5475
local     c329a5b999999c074bf767bc1f7b3647cf5d4d0624b7d45d63658cbb723e5d46
local     cf03c8ea64823ac8db5c6df1093b2d9f5146838dd8dc2986bdc485e8b59d0d24
local     d9500add842368a6d637090569e5c13cb9f068cbfeb14e02c597ae82f2807e47
local     da3164486ea59aaa9fd14113faa9104411c61ad36a9487e3ce780e86a96dac1f
local     dae4bbdcbb634b817b47558df3908906fe7635ad57377389616189bd0f2d7b64
local     dddeee12833ed02185e00732ddb8c12ef6a6b88c49e7df4e48f7a27b71182bf5
local     dns_tsys-dns-config
local     dns_tyss-dns-config
local     e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629
local     eda6668262ccd43f0e3c0b9e3c42711cc516f372b46ef174bca34d96d17740b8
local     f53cb9833442fd9499260fa8073a04a15f5c96a5576aa96d781bc24441906942
local     f142ec0c6150618365447908d5753ff5ff7defcbf27c210702a17ad205dc4aba
local     f350de2e220f4983bca2e7ca96374a597a075779224b036ccd76deb280ba8922
-- networks --
NETWORK ID     NAME               DRIVER    SCOPE
0f56376f4515   bridge             bridge    local
f91c61cdba28   dns_default        bridge    local
b24303598fa1   host               host      local
25187260f675   msmtpd_default     bridge    local
748fea589ab8   netdisco_default   bridge    local
bd40993bc47f   none               null      local
b52d11330b20   ntp_default        bridge    local
3d55385c5e7d   pihole_default     bridge    local
50e2988e78eb   root_default       bridge    local
-- compose files in common locations --
### /opt ###
total 16
drwxr-xr-x  4 root   root   4096 Dec 29  2025 .
drwxr-xr-x 20 root   root   4096 Jul 20 17:55 ..
drwxr-xr-x  2 beszel beszel 4096 Apr  6 01:08 beszel-agent
drwx--x--x  4 root   root   4096 Jun 10  2025 containerd

========================================================================
SECTION: 6. PI-HOLE
========================================================================
(pihole command not on PATH)
-- /etc/pihole listing --
main: line 54: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
(cannot list /etc/pihole)


main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]

-- /etc/pihole/*.conf (all) --
-- /etc/dnsmasq.d listing --
main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
main: line 54: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
(cannot list /etc/dnsmasq.d)

-- /etc/dnsmasq.conf (if present) --

-- gravity.db schema + row counts (Pi-hole v5+) --
main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
(no gravity.db found)
-- lighttpd / pihole web admin --

main: line 44: printf: --: invalid option
printf: usage: printf [-v var] format [arguments]
alias.url += ("/javascript" => "/usr/share/javascript")

-- pihole-FTL service --

========================================================================
SECTION: 7. TECHNITIUM DNS
========================================================================
-- technitium systemd unit --
-- any unit containing technitium --
-- unit file path --
### checking /etc/technitium ###
### checking /etc/technitium/dns ###
### checking /opt/technitium ###
### checking /opt/technitium/dns ###
### checking /var/lib/technitium ###
### checking /usr/local/technitium ###
-- technitium config.xml / dnsServer.conf (search) --

========================================================================
SECTION: 8. FIREWALL & MISC
========================================================================
-- nftables --
table ip raw {
	chain PREROUTING {
		type filter hook prerouting priority raw; policy accept;
		iifname != "br-b52d11330b20" ip daddr 172.23.0.2 counter packets 0 bytes 0 drop
		iifname != "br-3d55385c5e7d" ip daddr 172.24.0.2 counter packets 0 bytes 0 drop
	}

	chain OUTPUT {
		type filter hook output priority raw; policy accept;
	}
}
table ip filter {
	chain INPUT {
		type filter hook input priority filter; policy accept;
		counter packets 8461563 bytes 1841523123 jump ts-input
	}

	chain FORWARD {
		type filter hook forward priority filter; policy drop;
		counter packets 20387709 bytes 3821595842 jump DOCKER-USER
		counter packets 20387709 bytes 3821595842 jump DOCKER-FORWARD
		counter packets 1064 bytes 88643 jump ts-forward
	}

	chain OUTPUT {
		type filter hook output priority filter; policy accept;
	}

	chain DOCKER-FORWARD {
		counter packets 20387709 bytes 3821595842 jump DOCKER-CT
		counter packets 14776132 bytes 2075147539 jump DOCKER-INTERNAL
		counter packets 14776132 bytes 2075147539 jump DOCKER-BRIDGE
		iifname "br-748fea589ab8" counter packets 0 bytes 0 accept
		iifname "br-b52d11330b20" counter packets 0 bytes 0 accept
		iifname "br-f91c61cdba28" counter packets 0 bytes 0 accept
		iifname "br-25187260f675" counter packets 0 bytes 0 accept
		iifname "br-3d55385c5e7d" counter packets 10132822 bytes 1741327665 accept
		iifname "br-50e2988e78eb" counter packets 0 bytes 0 accept
		iifname "docker0" counter packets 0 bytes 0 accept
	}

	chain DOCKER-USER {
	}

	chain ts-input {
		iifname "lo" ip saddr 100.103.64.82 counter packets 0 bytes 0 accept
		iifname "tailscale0" counter packets 512217 bytes 46924098 accept
		udp dport 41641 counter packets 3360373 bytes 516737750 accept
		iifname != "tailscale0" ip saddr 100.115.92.0/23 counter packets 0 bytes 0 return
		iifname != "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop
	}

	chain ts-forward {
		iifname "tailscale0" counter packets 28 bytes 2578 meta mark set mark and 0xff00ffff xor 0x40000
		meta mark & 0x00ff0000 == 0x00040000 counter packets 28 bytes 2578 accept
		oifname "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop
		oifname "tailscale0" counter packets 15 bytes 1554 accept
	}

	chain DOCKER {
		iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 443 counter packets 0 bytes 0 accept
		iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 80 counter packets 0 bytes 0 accept
		iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 udp dport 53 counter packets 32283 bytes 2368019 accept
		iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 53 counter packets 638 bytes 34248 accept
		iifname != "br-748fea589ab8" oifname "br-748fea589ab8" counter packets 0 bytes 0 drop
		iifname != "br-b52d11330b20" oifname "br-b52d11330b20" counter packets 0 bytes 0 drop
		iifname != "br-f91c61cdba28" oifname "br-f91c61cdba28" counter packets 0 bytes 0 drop
		iifname != "br-25187260f675" oifname "br-25187260f675" counter packets 0 bytes 0 drop
		iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" counter packets 0 bytes 0 drop
		iifname != "br-50e2988e78eb" oifname "br-50e2988e78eb" counter packets 0 bytes 0 drop
		iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
	}

	chain DOCKER-BRIDGE {
		oifname "br-748fea589ab8" counter packets 0 bytes 0 jump DOCKER
		oifname "br-b52d11330b20" counter packets 0 bytes 0 jump DOCKER
		oifname "br-f91c61cdba28" counter packets 0 bytes 0 jump DOCKER
		oifname "br-25187260f675" counter packets 0 bytes 0 jump DOCKER
		oifname "br-3d55385c5e7d" counter packets 4643310 bytes 333819874 jump DOCKER
		oifname "br-50e2988e78eb" counter packets 0 bytes 0 jump DOCKER
-- iptables --
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-BRIDGE
-N DOCKER-CT
-N DOCKER-FORWARD
-N DOCKER-INTERNAL
-N DOCKER-USER
-N ts-forward
-N ts-input
-A INPUT -j ts-input
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-FORWARD
-A FORWARD -j ts-forward
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 443 -j ACCEPT
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 80 -j ACCEPT
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p udp -m udp --dport 53 -j ACCEPT
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 53 -j ACCEPT
-A DOCKER ! -i br-748fea589ab8 -o br-748fea589ab8 -j DROP
-A DOCKER ! -i br-b52d11330b20 -o br-b52d11330b20 -j DROP
-A DOCKER ! -i br-f91c61cdba28 -o br-f91c61cdba28 -j DROP
-A DOCKER ! -i br-25187260f675 -o br-25187260f675 -j DROP
-A DOCKER ! -i br-3d55385c5e7d -o br-3d55385c5e7d -j DROP
-A DOCKER ! -i br-50e2988e78eb -o br-50e2988e78eb -j DROP
-A DOCKER ! -i docker0 -o docker0 -j DROP
-A DOCKER-BRIDGE -o br-748fea589ab8 -j DOCKER
-A DOCKER-BRIDGE -o br-b52d11330b20 -j DOCKER
-A DOCKER-BRIDGE -o br-f91c61cdba28 -j DOCKER
-A DOCKER-BRIDGE -o br-25187260f675 -j DOCKER
-A DOCKER-BRIDGE -o br-3d55385c5e7d -j DOCKER
-A DOCKER-BRIDGE -o br-50e2988e78eb -j DOCKER
-A DOCKER-BRIDGE -o docker0 -j DOCKER
-A DOCKER-CT -o br-748fea589ab8 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-b52d11330b20 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-f91c61cdba28 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-25187260f675 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-3d55385c5e7d -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-50e2988e78eb -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-- ufw --
-- firewalld --
-- selinux/apparmor --
(SELinux not present)

========================================================================
SECTION: 9. CRON & TIMERS
========================================================================
-- root crontab --
(n/a)
-- localuser crontab --
(none)
-- /etc/cron.d --
-- pihole timer --

##### AUDIT END 2026-07-28T02:41:34Z #####
