Linux-Misc Digest #670, Volume #26 Sun, 31 Dec 00 04:13:02 EST
Contents:
Re: ELF Error on NetWinder . . . (jwk)
Re: New Year's DDOS Advisory (Michael Erskine)
Re: Linux version of Dos's debug (Rod Haper)
Re: Any fix for Java in Netscape? (Michel Catudal)
Re: Linux version of Dos's debug (Jack Kaufmann)
Re: Linux version of Dos's debug (Bob Hauck)
Problem installing WindowMaker in Mdk 7.2... (Guy Parry)
Re: Linux version of Dos's debug (Jack Kaufmann)
sendmail (Henning Pedersen)
Re: How to get CPU usage (Brad Bailey)
DBD::MySQL on NetWinder . . . (jwk)
Re: powerpoint, linux and wine?? (Henry)
Perl mail header module? (Neil Cherry)
Re: How to chmod so many files? (Joseph Guerrant)
Re: Perl mail header module? (Michael Heiming)
Re: Redhat 7.1 release ! (John Hanson)
Re: sendmail (Michael Heiming)
----------------------------------------------------------------------------
From: jwk <[EMAIL PROTECTED]>
Subject: Re: ELF Error on NetWinder . . .
Date: Sun, 31 Dec 2000 03:08:39 GMT
It turns out that the "use mysql;" statement is the one that's producing
the error. But I am still puzzled. I am going to try to install
another version of DBD::mysql and see if that clears things up.I
n article <92jnse$ipv$[EMAIL PROTECTED]>,
jwk <[EMAIL PROTECTED]> wrote:
> I am trying to run a perl script that connects to a MySQL database.
> Both the script and the MySQL database are running on a NetWinder (ARM
> platform) and I get the following error at the DBI->connect statement:
>
> perl: ../sysdeps/arm/dl-machine.h:449: elf_machine_rel: Assertion `!
> "unexpected dynamic reloc type"' failed.
>
> I have no idea what that error means and this same script runs fine on
> my SuSE i386 box. Can anyone shed a little light?
>
> Thanks,
> jwk
>
> --
> _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
> j o h n . k e l l y
> j k e l l y @ q n e t . c o m
>
> Sent via Deja.com
> http://www.deja.com/
>
--
_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
j o h n . k e l l y
j k e l l y @ q n e t . c o m
Sent via Deja.com
http://www.deja.com/
------------------------------
From: Michael Erskine <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux,comp.os.linux.setup,comp.os.linux.security
Subject: Re: New Year's DDOS Advisory
Date: Sat, 30 Dec 2000 21:20:28 -0500
Reply-To: [EMAIL PROTECTED]
Jem Berkes wrote:
>
> > > Based on FBI investigations and other information, the NIPC advises
> > > taking some extra precautions in computer security over the holiday
> > > period to reduce the possibility of, or damage from, Distributed
> > > Denial-of-Service (DDOS) and other cyber attacks which could occur.
> >
> > nah ... extra precautions? ... bit late now!
>
> It boggles my mind: there must be *so many* compromised systems out
> there.
Indeed.
> I get 4 - 5 scans a day for windows netbios ports, and maybe 2 a
> day for portmapper. And to think how much cable and ADSL subscribers
> there are...
Mail worms... damnable mail worms... (and the entrenched base of
a hundred million microsoft desktops operated by clueless users).
>
> I'm curious: let's say a government system wants to just deny all access
> from (e.g.) the entire 24. netblock.
Interesting proposition. I expect the government would just go
to the owner of the block and say... "This here ATM link, and that
one there, are down till further notice." That of course only in
a "national emergency".
> What is the lowest level they can
> do this at?
Any router. It would depend upon where one wanted the net broken,
which routers would be required to be overloaded. Even if the
router were not overloaded, there is a finite amount of traffic
which can flow into and out of any router due to bandwidth
limitations on the "pipes". Because IP and IP routing "tries"
to find a path, and there are usually multiple paths to a
destination, isolating a destination, would require a careful
study of the network routes available before the isolation could
be established via such an attack. Planning of which compromised
hosts would be tasked and the tasking for each host would also
be a prerequsite.
Think of the network like a spider web, not like a tree, there will
be "choke points" in the web which if cut, isolate a portion of the
web. There will be "shortest" routes to those points and there
will be "highest volume" routes to those points. In a sophisticated
attack, all that information would need to be known prior to the
actual attack.
Now it happens that the attacker (even though he is distribuited
in his attack infrastructure) is vulnerable to precisely the same
sort of attack. His access can be turned off either physically (the
ideal solution) or "logically" with a CDDOS (Counter Distribuited
Denial Of Service).
Taken to the logical conclusion, one envisions these armies of
systems being dynamically tasked in a battle designed to control
access to the infrastructure. Are we nearing that level of
sophistication? I don't think so, but I'll bet people have been
thinking along these lines for atleast a few years.
All that aside, the problem remains that the vast majority of these
attacks depend upon someone, somewhere spoofing his IP address to
(at least) get the ball rolling. If routers were ALL configured
correctly, the initial spoofing would never be able to leave the
network upon which it relied and the attack would be vastly more
difficult to launch. We identified this problem long ago and
"Ma n' Pop ISP" have not addressed it in their own houses. As far
as that goes, it is not an insurmountable problem for Cisco and
the other router vendors to build "anti-spoofing" into their
products.
> Could even the telco's routers become overwhelmed by a DDOS
> attack?
Yes even the telco's routers can become overwhelmed by a DDOS.
The trick is to decide which routers would break the net in the
places where it needs to be broken. DDOS as practiced by amatures
is a childs game. DDOS as practiced by a government in time of
hostility, is an art form, albiet a "black" one.
-m-
--
There is nothing so constant as change. - Chris Z. "Transactor Magazine"
The more things change, the more they remain the same. Anon
------------------------------
From: Rod Haper <[EMAIL PROTECTED]>
Subject: Re: Linux version of Dos's debug
Date: Sun, 31 Dec 2000 03:17:19 GMT
Jack Kaufmann wrote:
>
> [EMAIL PROTECTED] wrote:
> >
> > In article <IWu36.1285$[EMAIL PROTECTED]>,
> > "Jack Kaufmann" <[EMAIL PROTECTED]> writes:
> > > Is there a Linux equivalent to Dos's debug which allows viewing of binary
> > > files in hex format?
> > >
> > Good old emacs will work.
>
> How? All I get is text-mode gibberish.
Try the od utility like this:
od -t xz <filename> | more
------------------------------
From: Michel Catudal <[EMAIL PROTECTED]>
Subject: Re: Any fix for Java in Netscape?
Date: 30 Dec 2000 21:34:16 -0600
Harmon Seaver a �crit :
>
> If I have them enabled, going to a site with java (javascript is the
> worst offender) will crash netscape. It locks up, turns grey and won't respond
> to either mouse or keyboard. I have to go to an xterm window and kill it.
> Sometimes it just crashes and disappears, but usually it does the above.
> If I disable just javascript and leave java enabled, some sites with
> java work, some don't. I've seen this problem with Netscape and java for some
> time now, can't remember how many releases back.
> I'm using Mandrake 7 at the moment, about to upgrade to RH 7.0, however,
> so I'll see if that makes a difference.
>
Upgrade to SuSE 7.0 Professional and install
ftp://ftp.twoguys.org/suse/update/7.0/xap1/netscape-4.76.glibc21.i386.rpm
It is the same that is on SuSE's site, for some reason the SuSE ftp site has been
dead for the past few days.
This netscape has never crashed on me like it used to do on Mandrake. Most netscape
version that I have downloaded from Netscape do crash as you describe.
This version of netscape seems to have been fixed by SuSE and is the US 128 bit
encription version.
--
Tired of Microsoft's rebootive multitasking?
then it's time to upgrade to Linux.
http://www.netonecom.net/~bbcat
We have all kinds of links
and many SuSE 7.0 Linux RPM packages
------------------------------
From: Jack Kaufmann <[EMAIL PROTECTED]>
Subject: Re: Linux version of Dos's debug
Date: Sun, 31 Dec 2000 03:35:24 GMT
Rod Haper wrote:
>
> Jack Kaufmann wrote:
> >
> > Is there a Linux equivalent to Dos's debug which allows viewing of binary
> > files in hex format?
>
> Have a look at the standard Unix od utility.
Thanks; that did it.
------------------------------
From: [EMAIL PROTECTED] (Bob Hauck)
Subject: Re: Linux version of Dos's debug
Reply-To: bobh{at}haucks{dot}org
Date: Sun, 31 Dec 2000 03:43:44 GMT
On Sun, 31 Dec 2000 01:37:28 -0000, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
>> Is there a Linux equivalent to Dos's debug which allows viewing of binary
>> files in hex format?
>>
> Good old emacs will work.
Maybe he'll need the command: M-x hexl-mode
--
-| Bob Hauck
-| To Whom You Are Speaking
-| http://www.haucks.org/
------------------------------
From: Guy Parry <[EMAIL PROTECTED]>
Subject: Problem installing WindowMaker in Mdk 7.2...
Date: Sun, 31 Dec 2000 15:15:07 +1100
I've installed - or thought I had - WM, but 'switchdesk' tells me
"WindowMaker not installed!".
The WindowMaker rpm is DEFINATELY there. Is there anything I'm
missing? Is 'wmakerconfig' actually a part of WindowMaker? I
installed that as well, after satisfying a dependency by installing
'lynx' as well, but still the same message. This one's got me
scratching my head. Should I re-install switchdesk?
TIA...
------------------------------
From: Jack Kaufmann <[EMAIL PROTECTED]>
Subject: Re: Linux version of Dos's debug
Date: Sun, 31 Dec 2000 04:18:40 GMT
Bob Hauck wrote:
>
> On Sun, 31 Dec 2000 01:37:28 -0000, [EMAIL PROTECTED]
> <[EMAIL PROTECTED]> wrote:
>
> >> Is there a Linux equivalent to Dos's debug which allows viewing of binary
> >> files in hex format?
> >>
> > Good old emacs will work.
>
> Maybe he'll need the command: M-x hexl-mode
>
> --
> -| Bob Hauck
> -| To Whom You Are Speaking
> -| http://www.haucks.org/
Thanks. That [emacs in hexl-mode] is the best solution.
------------------------------
From: Henning Pedersen <[EMAIL PROTECTED]>
Subject: sendmail
Date: Sat, 30 Dec 2000 23:13:21 -0500
Hi, I am trying to make my server work with cgi scripts and it actually
seems to work now, but now I have to configure sendmail. Can someone please
show me an example of their sendmail configuration file so I can compare
with what I have now.
Thanks in advance
Henning Pedersen.
------------------------------
From: [EMAIL PROTECTED] (Brad Bailey)
Subject: Re: How to get CPU usage
Reply-To: [EMAIL PROTECTED]
Date: Sun, 31 Dec 2000 05:44:16 GMT
On Sat, 30 Dec 2000 14:39:39 -0800, Warren Bell <[EMAIL PROTECTED]> wrote:
->Michael Heiming wrote:
->I wasn't running it at superuser level. I'm pretty sure it's giving a
->false reading because for one, if it takes 100% CPU to run top then
->someone needs to take that program back to the drawing board.
Some say "top" was named because it shows the top resource-consuming
processes, others say it's called that because it *is* the top
resource-consuming process. I say it's quite capable of being both. :-)
-> And Two,
->if you run top to output twice then exit, one's completely different
->than the other.
>From the "NOTES" section of the top(1) manpage:
[...]
%CPU shows the cputime/realtime percentage in the period
of time between updates. For the first update, a short
delay is used, and top itself dominates the CPU usage.
After that, top will drop back, and a more reliable esti�
mate of CPU usage is available.
You seemed to actually be getting a lower usage from the first report
than subsequent ones, but the above should indicate that you are
probably better off discarding the first report altogether anyway.
Personally, I liked the approach of piping ps aux through awk to
add up all the %CPU columns.
And if you ever deal with other command-line resource monitoring
utilities, be aware that vmstat and iostat also give a different
output on their first report.
Regards
--
Brad Bailey __/) <[EMAIL PROTECTED]>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"You know, it's easy to be happy if your one concern in life is figuring
out how much saliva to dribble." --Woody Allen
------------------------------
From: jwk <[EMAIL PROTECTED]>
Subject: DBD::MySQL on NetWinder . . .
Date: Sun, 31 Dec 2000 06:39:36 GMT
Has anyone successfully installed the mysql driver for Perl on a
NetWinder?? I try to create the driver from the source and I get the
following error:
[root@xxxxxxxxxx Msql-Mysql-modules-1.2215]# perl Makefile.PL
perl: ../sysdeps/arm/dl-machine.h:449: elf_machine_rel: Assertion `!
"unexpected dynamic reloc type"' failed.
Aborted
I am less interested in getting the compile to work than I am to just
get my hands on a working mysql.pm for the NetWinder. Can anyone help?
_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
j o h n . k e l l y
j k e l l y @ q n e t . c o m
--
_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/
j o h n . k e l l y
j k e l l y @ q n e t . c o m
Sent via Deja.com
http://www.deja.com/
------------------------------
From: Henry <[EMAIL PROTECTED]>
Subject: Re: powerpoint, linux and wine??
Date: Sun, 31 Dec 2000 01:50:08 -0500
==============740E87B08CF2063C1DE1DE80
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
>
> So, is there something I'm doing wrong with this install business...or
> better, is there a linux program I can use to view the files.
>
Go to sun.com and download free StarOffice. It is quite user-friendly. It
takes a lot of disk space though. Somewhere in the 300MB range. Download
is less than 100MB.
H
==============740E87B08CF2063C1DE1DE80
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
<blockquote TYPE=CITE>
<br>So, is there something I'm doing wrong with this install business...or
<br>better, is there a linux program I can use to view the files.
<br><a href="http://users.uniserve.com/~bvdpoel"></a> </blockquote>
<p><br>Go to sun.com and download free StarOffice. It is quite
user-friendly.
It takes a lot of disk space though. Somewhere in the 300MB range.
Download is less than 100MB.
<p>H
<br> </html>
==============740E87B08CF2063C1DE1DE80==
------------------------------
From: [EMAIL PROTECTED] (Neil Cherry)
Subject: Perl mail header module?
Reply-To: [EMAIL PROTECTED]
Date: Sun, 31 Dec 2000 06:58:17 GMT
Is there a Perl mail header filter? Of course I'm tired of SPAM and I
wish to add my 2 cents against it. Since it seems so easy to generate
why not make it easier to trace. The headers always follow the rules
and were the rules break the previous header tends to be correct.
--
Linux Home Automation Neil Cherry [EMAIL PROTECTED]
http://members.home.net/ncherry (Text only)
http://meltingpot.fortunecity.com/lightsey/52 (Graphics)
http://linuxha.sourceforge.net/ (SourceForge)
------------------------------
From: [EMAIL PROTECTED] (Joseph Guerrant)
Subject: Re: How to chmod so many files?
Date: 31 Dec 2000 07:07:56 GMT
In comp.os.linux.misc, you wrote:
>For some reason,I have to do chmod on many files in different
>directorys.I don't want to changes to every directory to do chmod.Does
>anyone know some tips?
>
>Thank You!
>
>Please mail to [EMAIL PROTECTED]
>
What I'd do is get the list in a file, maybe call it x1 or
something. Then, create a shell script in another file, like
this:
##########
for a in `cat x1` #note, these are backtics, not forward, see
#top left of keyboard typically
do
what you want to do here,
maybe echoing the results to the screen to see progress, like
using ls -l if you're chmod'ing.
done
##########
Then, just run the scriptfile like this:
sh scriptfile
or
bash scriptfile
etc.
I have my own command group, dodo, dodog, dodoe, dodoo, dodooe
that are for the generic purpose of running command scripts upon
lists, typically of files. Just like this example, but made
easier yet. The programs are just a few lines of code each,
mainly. dodo creates the do done stuff in a command file named
dodoo, with the $1 arg as the filename. dodog does it using
filename globbing to make the list of files to work on, if
desired. dodoe first lets me edit the list of files, whereas dodo
just uses less to show it (quicker). dodoo is the command to run,
the created shell script. dodooe lets me re-edit that at anytime.
Ideally, one might want to have the dodoo scripts saved in a
history, and a command to reimport them, etc. I don't bother with
that.
Anyway, easy to implement with a little shell scripting
knowledge, and this technique saves me a lot of time. Perhaps
other good ways of accomplishing the same thing, or even better I
don't know about offhand. Of course, if you don't do stuff on
lists of things often, easy to just manually create a do.done
list script each time.
Of course, the xargs command is another alternative, but AFAIK no
way to put more than simple stuff there on the command line for
it. I may be wrong. Of course, one could use xargs in a scheme
like I have with the dodo* stuff, with a scriptname as the arg.
Anyway, xargs is great for quick simple stuff, and probably could
be used for this job too.
xargs works like, if you had a list of files to ls -l,
cat filenamelist | xargs ls -l
------------------------------
Date: Sun, 31 Dec 2000 09:50:41 +0100
From: Michael Heiming <[EMAIL PROTECTED]>
Subject: Re: Perl mail header module?
Neil Cherry wrote:
> Is there a Perl mail header filter? Of course I'm tired of SPAM and I
> wish to add my 2 cents against it. Since it seems so easy to generate
> why not make it easier to trace. The headers always follow the rules
> and were the rules break the previous header tends to be correct.
>
> --
> Linux Home Automation Neil Cherry [EMAIL PROTECTED]
> http://members.home.net/ncherry (Text only)
> http://meltingpot.fortunecity.com/lightsey/52 (Graphics)
> http://linuxha.sourceforge.net/ (SourceForge)
Hello,
of course it can be done with perl, however there is procmail which could
do it easy for you...:-)
apropos procmail
procmailsc (5) - procmail weighted scoring techique
procmailex (5) - procmail rcfile examples
procmail (1) - autonomous mail processor
procmailrc (5) - procmail rcfile
Or pic here some ideas for your .procmailrc:
http://members.nbci.com/procmail/best-of-procmail-list/
Good luck
Michael Heiming
------------------------------
From: John Hanson <[EMAIL PROTECTED]>
Subject: Re: Redhat 7.1 release !
Date: Sun, 31 Dec 2000 09:03:19 GMT
On Sat, 30 Dec 2000 18:25:43 GMT, E J <[EMAIL PROTECTED]> said:
>>I think Redhat 7.1 is dependent on when kernel 2.4 is release.
>>Kernel 2.4 should have shown up in December, 2000, but it look like it
>>will be showing up in the beginning of 2001.
>>
I think it not ought to be. 7.0 is such a pile that they had better
fix it before their stock goes completely to sh*t. Unless Linus is
telling them that 2.4 will be out any second now, they should release
a better distro tomorrow.
I've run RH since 4.1. I upgraded that to 5.0 and then switched
machines with 5.1. That machine was upgraded to 6.0 > 6.1 and then to
6.2 which operated beautifully. I hestitated with 7.0 but did
upgrade. What a pile of sh*t. 7.0 is RH's worst of all time in
MNSHO. I'm still kicking myself. At least it motivated me to check
out FreeBSD.
------------------------------
Date: Sun, 31 Dec 2000 09:57:32 +0100
From: Michael Heiming <[EMAIL PROTECTED]>
Subject: Re: sendmail
Henning Pedersen wrote:
> Hi, I am trying to make my server work with cgi scripts and it actually
> seems to work now, but now I have to configure sendmail. Can someone please
> show me an example of their sendmail configuration file so I can compare
> with what I have now.
>
> Thanks in advance
>
> Henning Pedersen.
Hello,
sendmail is a quite complicated package, but if you want it only to relay to
your real mail server you can
set SmartRelayhost (DS) in sendmail.cf, reload/restart sendmail and you're
done.
Someones sendmail.cf won't help you much, sendmail.cf is built out of m4
macros, and most/some times direct hacked...
Provide some more infos, what you want to do, in order for others to help
you...
Good luck
Michael Heiming
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list by posting to comp.os.linux.misc.
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Misc Digest
******************************
