Re: [SLUG] script to analyse syslog in realtime

2013-02-14 Thread Matthew Hannigan
If you want something light for ad-hoc checks I use a bit of perl like this
that uses a dumb match of part of the date-time string as a key into a hash
of counts:

  #!/usr/bin/perl
  #
  #
  use strict;
  use warnings;

  my %events_per_minute;
  while()
  {
  chomp;
  if (m,to svrdmz:NTP/123 \(NTP/123\),) {
  $events_per_minute{substr $_, 0, 12}++;
  }
  }

  my $key;
  foreach $key (keys %events_per_minute) {
  print minute: $key count: $events_per_minute{$key}\n;
  }

Of course you can improve this e.g. pass the event to match as an arg.
Pipe to the usual sort -rn | head to get the top minutes by number of
events.
Preceded it with the tool since to only apply to events since the last
time you checked.

For fancier setups, use the tools mentioned by others or the venerable
swatch

Regards,
Matt



On Thu, Feb 14, 2013 at 11:48 AM, Chris Barnes chris.p.bar...@gmail.comwrote:

 Hi everyone,

 my firewall logs everything to a syslog server - new connections,
 terminated connections, etc

 basically what im trying to do is analyse the syslog in realtime looking
 for a specific string which indicates a new connection has been
 established, and to count the number of occurrences of that string to get
 an idea of how many connections per minute im getting for a particular
 internet service so that I can graph it.

 An example of the significant line in syslog im looking for is:

 Feb 14 11:42:52 10.1.1.1 : Feb 14 11:19:47 EDT: %PIX-session-6-302015:
 Built inbound UDP connection 3523357 for Outside:124.178.41.91/123 (
 124.178.41.91/123) to svrdmz:NTP/123 (NTP/123)

 I can use the following to watch the log for the specific event

 tail -f /var/log/syslog | grep to svrdmz:NTP/123 (NTP/123)


 But I cant figure out a way to programatically count how many of these
 events occur per minute.

 any suggestions?

 --
 Kind Regards,

 Christopher Barnes

 e. chris.p.bar...@gmail.com
 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html




-- 
m a t t h e w   l i n u s   h a n n i g a n
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] updated kernel causing problems

2012-05-21 Thread Matthew Hannigan
On Mon, May 21, 2012 at 08:02:14PM +1000, Rick Phillips wrote:
 
  
   Hi Thanks all. Much appreciated.
  
   For future reference in the archives I did the following...
  
   rpm -qa | grep kernel

Fwiw (not much :-) this lists the kernels a bit less typing and a more accurate 
result:

  rpm -qa kernel

grepping might get you kernel-firmware, kernel-devel, kernel-blahblah

 
 I would think it was a bad download originally so I would retry the
 [...]

Pretty unlikely; Centos rpms are hashed and signed.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Linux drivers for Inno3D GF GTX 570

2012-03-12 Thread Matthew Hannigan
On Tue, Mar 13, 2012 at 08:17:44AM +1100, Ben Donohue wrote:
 Thanks Dion,

 ok now where is download drivers? I've searched everywhere... looks  
 like a Gnome desktop so perhaps I don't have the download drivers  
 package installed? I've gone through all the menu's.

 Is there a command line instruction or a yum package for this?

Yes, though it's a long time I've used it.
It worked pretty well for me when I did.
It might lag a little behind the nvidia.com downloads.

See http://rpmfusion.org/Howto/nVidia

You'll probably have to enable rpmfusion first:
http://rpmfusion.org/Configuration

PS. If you see references to livna when searching for nvidia rpms,
then take that to mean rpmfusion these days -- they fused.

Matt


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Traffic control

2012-02-26 Thread Matthew Hannigan

On Fri, Feb 24, 2012 at 02:29:48PM +1100, Jim Donovan wrote:
 Recently my ISP discontinued the ADSL plan I was on and put me on another 
 plan with three times the bandwidth. This is fine however one of the kids 
 likes watching YouTube and can now chew up a month's data in a few days.
[ .. ]

Jim,
I suggest using a caching proxy like squid.  They're very effective because 
kids tend to watch
the same vids over and over again. 

You can set all sorts of limits within squid, too like time of day restrictions.

Matt


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] mkdir

2012-02-16 Thread Matthew Hannigan

Grant Street gra...@al.com.au gave the answer previously,
chmod 2755 topdir

which sets the setgid (the 2) and relaxed perms (the 755)
But this didnt fix the existing dirs group ownership.
Also you might want 775 instead of 755.

See below for my take.

On Wed, Feb 15, 2012 at 08:44:41PM +1030, Glen Turner wrote:
[ .. ]
 directory -- search for sticky bit on directory. Even that might not

not sticky bit, setgid bit (common mistake)

 give the group access, it depends on the user's umask.

The better couple of  invocations are:

chmod g+s topdir # set topdir setgid bit so group ownership is preserved

chgrp -hR SOMEGRP topdir# repair group of existing files and 
dirs
chmod -R g+rwX,o+rX topdir  # to repair permissions for existing 
files and dirs

I tend to use symbolic rather than octal,
tends to be easier to remember and more precise/accurate.

PS. exercise for the reader , find out what the -h and the capital X do
(they're important!)

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Wiki software

2011-11-24 Thread Matthew Hannigan


If you're considering a git backed wiki like others have suggested you
could do worse than use the one that github uses; gollum. 
 
 https://github.com/github/gollum

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Was 'kernel panic', now '/usr/sbin/: Not found.'

2011-08-28 Thread Matthew Hannigan
On Mon, Aug 29, 2011 at 10:10:45AM +1200, adam.bogacki wrote:

 I mount dev, proc, sys, and usr on /dev/sda (aka w1), and

What does df or mount show at this point 

 guest@guest:~$ sudo chroot /mnt/w1 /bin/bash

and this point 

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do I add a file (zip) to a package without compressing it

2011-07-28 Thread Matthew Hannigan
On Fri, Jul 29, 2011 at 09:11:20AM +1000, Marghanita da Cruz wrote:
 Marghanita da Cruz wrote:
 pe...@chubb.wattle.id.au wrote:
 snip
 zip -0 file.epub mimetype
 
 -0 says don't compress.  It's a zero, not an `oh'.
 
 snip
 
 Thanks - looks like the command I was looking for.
 
 
 Any suggestions of how to fix this problem?
 
 ERROR: test6.epub: extra field length for first filename must be 0, but
 was 21 
 
 The requirements for the mimetype file are
 a)no LF or LF/CR at the end of the line in the file
 b)it must be the first file in the package
 
 I can't figure out how to check either of these or specify them, or whether
 they are relevent to the above error.

Goog search reveals:
http://www.methods.co.nz/asciidoc/epub-notes.html

The Linux zip(1) command
If you use the Linux zip(1) command to update or create EPUB
files you must use the -X, --no-extra command-line option,
if you do not the platform dependent extra fields will confuse
epubcheck(1) which will emit errors like “extra field length
for first filename must be 0, but was 28”.


BTW, have you considered using http://calibre-ebook.com/
I think it's in most distros and on windows.



Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Hacked email

2011-07-02 Thread Matthew Hannigan
On Sun, Jul 03, 2011 at 09:23:14AM +1000, david wrote:
[ .. ]
 I'm on Darren's address book, so I got the scam request for cash
 from his account. It looked perfectly genuine at first although the
 return address was dagibbs@Ymail instead of gmail.

This is the thing.  Surely all a gmail users correspondents 
can vouch for the user.  This should be enough for them.
Particularly gmail correspondents who have archived mail.
That can't be faked.  Or would be very hard to fake.

Matt, who knows someone similarly affected.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Tape Backups and Scripting

2011-06-08 Thread Matthew Hannigan
On Mon, Jun 06, 2011 at 06:25:29PM +1000, Rick Phillips wrote:
  [ .. ]
 I have looked at Bacula (a pain to install on CentOS 5.6) and had a

amanda and bacula are available for centos -- bacula is in EPEL

I would strongly suggest you use an existing backup system rather than roll 
your own

If you use tar, at least set the blocking high to increase performance.
There's a probably a million other details that are builtin knowledge to 
existing backup systems.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Linux in Australia in 2012 - trends..

2011-05-26 Thread Matthew Hannigan
On Wed, May 25, 2011 at 08:50:47AM +1000, David Lyon wrote:
 [ .. ] 
 Yes Ubuntu is nice, but Android is surely set to be a competitor ?

ChromeOS is the more direct competitor.  The big selling point is 
no admin necessary and safer browsing (probably) and more virus resistant. 
(possibly)

Of course, TANSTAAFL.  You pay in reduced privacy.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Android ssh, nix.tools?

2011-04-21 Thread Matthew Hannigan

Yep connect bot is what I use.  Read the docs though,
keys like control and meta are a hassle.  And differ a little
depending on your device.

I like Netcounter for data usage; free and open source.
http://www.jaqpot.net/netcounter/ by Cyril Jaquier
but of course available on the Market.

VNC I think is available but way too small a screen for me.

There are various remote control apps, (e.g. gmote) they might be
customisable for sysadmin type stuff.



On Fri, Apr 22, 2011 at 10:23:38AM +1000, Mark Walkom wrote:
 ConnectBot seems to be the one to use.
 
 If you haven't already, root your phone!
 
 On 22 April 2011 07:00, Voytek Eymont voy...@sbt.net.au wrote:
 
  (Is Android slug or chat?)
 
  What's a good ssh client  ?
 
  what other good tools are there (so I can pretend to be a sysop)?
 
  IMAP client?
  Data traffic logger?
 
  Voytek
  ___
  Sent from my  iPalm/A with SnapperMail ™®
  www.snappermail.com
  --
  SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
  Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
 
 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Help with files that have identical filenames

2011-04-12 Thread Matthew Hannigan
On Wed, Apr 13, 2011 at 07:50:37AM +1000, Scott Finneran wrote:
[ .. ]
 this shouldn't be possible, so I'm assumed that there are some non-printable
 characters in the filename. ls -d doesn't show any however.

You want ls -b

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] solr jetty on ubuntu

2011-02-23 Thread Matthew Hannigan
On Wed, Feb 23, 2011 at 10:16:35PM +1100, Ken Foskey wrote:
 
 I have installed solr Jetty on Ubuntu and when it starts in jetty with
 'java -jar start.jar   it responds and has a solr directory.  Does not
 work cleanly because it cannot find javac.

Do you have the jdk installed?

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] solr jetty on ubuntu

2011-02-23 Thread Matthew Hannigan
On Thu, Feb 24, 2011 at 11:44:02AM +1100, Matthew Hannigan wrote:
 On Wed, Feb 23, 2011 at 10:16:35PM +1100, Ken Foskey wrote:
  
  I have installed solr Jetty on Ubuntu and when it starts in jetty with
  'java -jar start.jar   it responds and has a solr directory.  Does not
  work cleanly because it cannot find javac.
 
 Do you have the jdk installed?

To elaborate, do you have openjdk-6-jdk installed, not just openjdk-6-jre
or other jre.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Sun Ultra II dual 400MHz, SGI Indy

2011-01-10 Thread Matthew Hannigan

Hi,
I have two oldish ^W classic bits of Sun and SGI hardware to give away.


1. an SGI Indy

http://en.wikipedia.org/wiki/SGI_Indy

This is a bit of internet and computing history, as it's the type of machine 
that
Mosaic was written on (forerunner of Internet Explorer and Netscape Navigator 
then Firefox)
See http://www.jwz.org/gruntle/nscpdorm.html 
I have an Indycam and everything!

2. Sun Ultra Enterprise 1
3. Sun Ultra Enterprise 2

http://en.wikipedia.org/wiki/Sun_Enterprise#Ultra_workstation-derived_servers

The 2 has dual 400 MHz cpus and I think 512 ram (maybe 1gb)
The 1 has ... I dunno!

There are also a bunch of Sun multipacks with some unknown number of 4gb
and 9gb scsi disk inside. Plus appropriate scsi cables and whatnot.

These are entirely as is but free -- if they don't work you get to keep
them anyway. :-)

They did work last time they were turned on, which is about 7 years ago in
the case of the Indy and 5 years in the case of the Sun machines.

I'd rather you picked them up but can deliver in Sydney metro area if bribed.

Also, I'd like to get rid of them by the end of the weekend otherwise there's
a chance they'll end up in a skip.


Regards,
Matt

ps.  Kuroneko has dibs as I think I mentioned these to him before and he
expressed an interest.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do I create same IP address in Local Address and Foreign Address in netstat ?

2011-01-01 Thread Matthew Hannigan
On Sat, Jan 01, 2011 at 05:26:24PM +1100, Minh Van Le wrote:
 How do I establish a connection where the localhost IP are both in the
 Local Address and Foreign Address columns of netstat ?

You might try the -b flag to telnet or the -s flag to nc (netcat).
Haven't tried this, myself :-o
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: XecureBrowser - looks like snake oil to me. (was Re: [SLUG] Browsers for banking)

2010-11-11 Thread Matthew Hannigan

You might even want to as far as creating another user to run the bancking 
browser as.
I'd trust OS enforced separation a little more than application level 
separation.

You can use other levels of isolation as well -- e.g. selinux sandbox, VMs 
(virtualbox or other)
etc.

Sometimes it's all to nought though as the weakist link in the chain is people.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Long lines in /var/log/httpd/access_log

2010-10-28 Thread Matthew Hannigan
On Fri, Oct 29, 2010 at 06:25:34AM +1000, Rick Welykochy wrote:
 Jim Donovan wrote:
 
 GET /documents/url(data:image
 
 At a glance, this is a request for a data: URI
 http://en.wikipedia.org/wiki/Data_URI_scheme
 
 There are exploits involving this rarely used URI scheme.
 http://www.google.com.au/search?q=data+uri+exploit
 
 Do you recognise the requesting IP address?
 

Jim, the ip belongs to Bell Canada -- their ISP business I guess.

HTH

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] On buying a laptop.

2010-10-17 Thread Matthew Hannigan
On Sat, Oct 16, 2010 at 12:49:51PM +1100, elliott-brennan wrote:
  Matthew Hannigan m...@zip.com.au
  Fri, 15 Oct 2010 17:56:36 +1100
  Fun fact: it has a tiny embedded linux on it just for
  playing dvds so you don't have to boot into Windows
  to play dvds.
  
 
 Hi Matthew,
 
 My HP has exactly the same thing. The laptop even
 has buttons exclusively for this. Starts in about
 6 seconds. Brilliant idea. I don't know why more
 laptops don't have it.

Nice, what model is that?

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] On buying a laptop.

2010-10-17 Thread Matthew Hannigan

Here's a CNET discussion which identifies the Linux (sidux - debian sid variant)
and a source download link!

http://forums.cnet.com/7723-7587_102-236544.html

source code:
http://h10025.www1.hp.com/ewfrf/wc/genericSoftwareDownloadIndex?lc=encc=ussoftwareitem=ob-29445-1

It's not clear whether this is the same as Samsung's or Dell's equivalent, but 
I guess it is (or was)
Samsung used to make Dell or HP laptops under contract.

Apparently later laptops started using Windows based software for this non-boot 
dvd feature.




On Mon, Oct 18, 2010 at 12:06:22PM +1100, elliott-brennan wrote:
 Hi Matthew,
 
 It's a HP DV14AP - it's not in front of me at the moment but I'm
 pretty sure that's the correct model etc.
 
 I bought it a few years ago, but I'd be surprised if the newer HPs
 didn't have the same function and keys.
 
 My kids used to use it to watch DVDs until we got a TV from through
 Freecycle.
 
 Regards,
 
 Patrick
 
 -- 
 www.techfriend.com.au
 Home computer software training and hardware assistance
 
 www.mercuryvideos.com.au
 Stylishly edited DVDs of your photos and videos
 
 On 18/10/10 10:48, Matthew Hannigan wrote:
 
 Hi Matthew,
 
 My HP has exactly the same thing. The laptop even
 has buttons exclusively for this. Starts in about
 6 seconds. Brilliant idea. I don't know why more
 laptops don't have it.
 
 Nice, what model is that?
 
 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] On buying a laptop.

2010-10-15 Thread Matthew Hannigan

Here's my feeble contribution; an item on hackernews,
(since it's recent)

Ask HN: Best Developer Linux Laptop?
http://news.ycombinator.com/item?id=1786930

Laptops generally, you might consider Samsung as well
as the usual IBM/Lenovo, Dell, HP.

I'm quite happy with my oldish R50 even though I don't
usually run Linux on it.
Fun fact: it has a tiny embedded linux on it just for
playing dvds so you don't have to boot into Windows
to play dvds.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: Subject: [SLUG] change to linux and google chrome

2010-10-10 Thread Matthew Hannigan
On Sun, Oct 10, 2010 at 08:40:06PM +1100, Daniel Pittman wrote:
 Martin Visser martinvisse...@gmail.com writes:
  On Sat, Oct 9, 2010 at 6:30 PM, Brett Mahar brett.ma...@gmail.com wrote:
 
  You might like to check out SW Iron instead of Chrome, it is the same
  thing but without the many Google tracking devices built-in:
 
  http://www.srware.net/en/software_srware_iron_chrome_vs_iron.php
 
  You just gotta love that SRware are obviously down on Google tracking yet
  are quite willing to take their money by offering Google Ads on both the
  side and bottom of their page.
 
 Yeah.  FWIW, once you start to poke at that the whole thing ... aw, heck.
 Let me just add to this an excerpt from the Debian mailing lists when this
 same thing came up:
 
 http://forums.debian.net/viewtopic.php?f=20t=50358
 
 At the time SRWare also used a service provider that used pop-under
 advertising to make money.
 
 So, yeah.  As far as I can see this is, in essence, an implementation of the
 principal that if you pander to paranoia then you can make money from ... the
 folks who care enough to worry about privacy, but not enough to actually do
 the research themselves.

Ditto, when I tried it it had some annoying things about it.

A better option these days would be the daily builds.
Doesn't come with the update service though, so I turn flash and
all the other crapola in it - if it has it.

Tools-Preferences-Under the Hood-Content Settings-Disable Individual 
Plug-ins



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] live distro for Acer netbook

2010-10-05 Thread Matthew Hannigan

I'd just get the latest Fedora or Ubuntu
Maybe wait till Ubuntu 10.10 or Fedora 14 are released (real soon now)

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Learning Linux

2010-09-22 Thread Matthew Hannigan
On Wed, Sep 22, 2010 at 05:27:07PM +1000, Michael Chesterton wrote:
 
 On 22/09/2010, at 4:53 PM, Lee Isaacson wrote:
 
  Hi all,
  
  What would be the best Distro to learn linux.
  
  Fedora or Ubuntu.
 
 yes.

Agreed, the more the merrier.  Start with Ubuntu or Fedora; they're
fine if you want something moderately stable yet up to date.
Then start running other distros in VMs or by double,triple,
... booting.

Run Centos to get a feel for Redhat which is I think the
most popular 'enterprise' linux.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Accounting and business software

2010-09-19 Thread Matthew Hannigan
On Mon, Sep 20, 2010 at 10:41:49AM +1000, david wrote:
 
 Ben Donohue wrote:
  Hi,
 
 do you have a URL for LSMB?
 
 http://www.ledgersmb.org/

Domain has expired :-(

In the meantime: http://en.wikipedia.org/wiki/LedgerSMB

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] A distro which recognises Wi-fi on Asus eee 1005p?

2010-08-04 Thread Matthew Hannigan


It is supposed to work with more recent kernels.
The eeebuntu and fedora info says it works -- now.

And this 
https://bugs.launchpad.net/ubuntu/+source/linux-backports-modules-2.6.32/+bug/521967
suggests it works for more recent ubuntu or one of the PPA kernels mentioned 
there.

Maybe you just need an update?
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-29 Thread Matthew Hannigan
On Thu, Jul 29, 2010 at 04:28:23PM +1000, Daniel Pittman wrote:
 dave b db.pub.m...@gmail.com writes:
  soon. /me mutters something about OH MY THEY ESCAPED FROM THE JVM.
 
  Do you have a reference for that?
 
  Here is a recent example :)
  http://blog.cr0.org/2009/05/write-once-own-everyone.html
  You can finder older examples as well :)
 
 Thanks.  That saves me searching around to try and find the same information
 myself. :)

I like this one that Dave gave me on irc:
 http://www.securiteam.com/securitynews/5YP381520Y.html
It's not a breakout, but it's a way of compromising a server jvm,
which then (at least potentially) lets you use the breakout techniques
on that jvm.

So yeah everything suggested here is incremental security and only
gives brittle shells of isolation.  

Here's another measure: mod_security (http://www.modsecurity.org/)
You should also follow recommendations such as give at the
Open Web Application Security Project (http://www.owasp.org/)

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-27 Thread Matthew Hannigan
On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote:
[  ]
 How about a DNS, squid and web server with multiple name based
 virtual domains on the same box?

 Is doing the above really dangerous on a fully patched and up to
 date system?

As others have said it's inadvisable.
Even fully patched servers can be are susceptible (so called zero day
vulns might actually be months old) and the reality is you
don't often have the time to fully patch every day anyway.

*IF* you wanted to pursue this you can mitigate it with some
sort of isolation be it chrooting, selinux, containers, vms.
Or all of the above.

The level of risk also depends on the webapp.
I'd be more comfortable with java (especially with security
manager on) which is after all another form of vm.

With php (wordpress, drupal, moodle, or home grown) definitely not confortable.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] today's scary thought

2010-07-14 Thread Matthew Hannigan
On Wed, Jul 14, 2010 at 04:06:17PM +1000, Peter Chubb wrote:
 
 You could do this with inotify, with `just a few' scripts around it.

Related: http://code.google.com/p/lsyncd/ drives rsyncing with inotify.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Parametric EQ to silence the vuvuzela

2010-06-16 Thread Matthew Hannigan
On Wed, Jun 16, 2010 at 10:30:41AM +0800, james wrote:
 On Wednesday 16 June 2010 10:00:04 slug-requ...@slug.org.au wrote:
  So I watch telly through MythTV and apparently you can silence the terrible
  drone on the World Cup broadcasts with some simple parametric EQ filters.
   Any ideas how I'd do that on my Mythbuntu machine?  Ideally without
   delving into Linux audio config file hell.  (I've had enough of learning a
   completely new way to configure audio every 1.5 years.  I think I've done
   that at least four times now.)
  
  http://lifehacker.com/5564085/how-to-silence-vuvuzela-horns-with-an-eq-filt
  er?skyline=trueamp;s=i
 
 All lightheared jests aside, I've got a vuvuzela, it is a plastic trumpet and 
 the noise it makes is pretty white (broadband) so any attempt to equ it out 
 is 
 going to fail, more, or less, depending on the mic location for that TV 
 session and hence the spectrum of noise broadcast. 
 Of course you could equ out 20Hz to 10kHz smile

The link above and other various links says that fiddling with EQ actually 
works quite
well.

A simple plastic horn can't have (that) many frequencies.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] LVM

2010-06-14 Thread Matthew Hannigan
On Mon, Jun 14, 2010 at 06:14:15PM +1000, Gerald C.Catling wrote:
 Hi Guy's,
 I am a PCLinuxos user and I have seen references to LVM here ( at SLUG)
 I have 3 drives LVM'd to give me 1.3TB of storage space on my server.
 The first drive of this set has died.
 I was wondering if any of you Guru's could suggest a method of getting any 
 remaing data from the LVM drives, that is drive 2 and 3, that are left.
 I have tried rebuilding the set, wg0, but the system want to reformat the 
 drive wg0, just created. Is this formatting going to format the real drives 
 and rather that just the LVM component?
 Your help will be much appreciated.
 Gerald
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

lvscan might get you started.  I've not done much recovery work with lvm
under linux, so I'm not really willing to suggest things that might make it
worse!

You might want to do a dd level backup of the drives just in case.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Net send for linux

2010-04-05 Thread Matthew Hannigan
On Mon, Apr 05, 2010 at 11:37:18PM +1000, Daryl Thompson wrote:
 Is there a Linux equivalent network messaging command like 'NET SEND' in
 windows
 That is i want to be able to send messages to all and individual
 computers on the local network.

I'm sure smbclient with the apprirate options has worked for me in the past.
But last time I tried would have been years ago so who knows.

FWIW, 'net' is a command under linux too; part of the samba suite.

But 'net send' doesn't seem to be one of the commands supported.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] A little script help

2010-03-18 Thread Matthew Hannigan
On Tue, Mar 16, 2010 at 06:56:54PM +1100, Peter Chubb wrote:
 I find password generated like that to be too hard to remember.

Yeah, same


I like http://www.multicians.org/thvv/gpw-js.html

The source is available also, in C and java versions.

So with a bit of coding you can adjust the length and
throw in numbers and punctuation if you like.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] RAID and LVM

2010-02-21 Thread Matthew Hannigan
On Thu, Feb 18, 2010 at 03:18:24PM +1100, Nigel Allen wrote:  
 Greetings
 
 I want to set up a pair of 1 TB drives on an HP DL145 G3 and I'm
 looking for suggestions as to the best way to partition them.
 
 Would I be best using software RAID and LVM? Given that it's a
 fairly busy machine (mail server for 40+ users) I'd like to achieve:
 
 1) Speed
 2) Reliability
 3) Ease of maintenance.
 
 Anyone care to take a punt at a layout?

G3 has hardware RAID doesn't it?  That has one big advantage over software
RAID.  Ease of maintenance if one fails - you just pull it out, stick in
a same drive and it does recovery.  Linux need not know anything has happened.
So for 2 and 3 I'd go hardware RAID.

For 1. (speed) software RAID might have a slight advantage.  You also get
greatly improve flexibility - you don't have to mirror everything, right now.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Ldd report from rkhunter - Update

2010-01-21 Thread Matthew Hannigan
On Fri, Jan 22, 2010 at 09:20:46AM +1100, Alan L Tyree wrote:
 On Thu, 21 Jan 2010 15:54:01 -0600
 Rodolfo Martínez rmt...@gmail.com wrote:
 
  Hi Alan,
  
  You can find what package provides the ldd program, and then verify
  the integrity of the package. If it really changed I think you should
  look for any suspicious activity in your server.
  
  I think you can find the package with dpkg -S $(which ldd) and you can
  check its integrity with debsum.
  
  ldd shouldn't change, unless you have updated your system.
 
 Just checking the Debian Security site
 ( http://www.debian.org/security/) I see that it was updated for the
 amd64 architecture.
 
 Thanks for the lesson on how to check out this sort of thing.
 
 Cheers,
 Alan


So everything looks fine.  I wonder why rkhunter complained.  Doesn't
coordinate with the packaging system?

Anyway, this reminded me of an interesting article on ldd I read the other day:

http://www.catonmat.net/blog/ldd-arbitrary-code-execution/

Fun

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Send EOF to Browser from LAMP stack.

2010-01-21 Thread Matthew Hannigan
On Thu, Jan 21, 2010 at 04:28:30PM +0100, justin randell wrote:
 hi,
 
 2010/1/21 Peter Rundle pe...@aerodonetix.com.au:
  I said it might take a few seconds, I didn't say it was computationally
  heavy.
 
 fair enough, but still worth questioning, i think. for a typical app,
 i'd be concerned if a fat apache child process was spending more than
 a quarter to a third of a second servicing a single request.
 

We have a similar issue here at work, and for us it just creeped up on us.
The code was written to deal with uploads and parse them / process them / stick
bits into the database.

As time goes by the uploads grow from kb to Mb and change from simple format to
vast swathes of @#...@^ xml.   The same job which used to take less than a few 
seconds
now causes timeouts in apache which we've had to raise and/or the browser. 
Which 
we can't do much about.

This is all in java  so it's not too difficult to make it asynch wrt to the 
original
http request.  And leave the use perhaps with an ajaxy update page.

I know next to nothing about PHP, but can't you spawn another thread unrelated 
to a
client http request?  Then you can finish this page, redirect them to another 
page
which just waits for the result to come back - checking now and then via the db 
or
some file on disk.

Other respondents of cron fail (AFAICS) to satisfy the responsiveness that the 
original
poster wants.


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Ldd report from rkhunter - Update

2010-01-21 Thread Matthew Hannigan
On Thu, Jan 21, 2010 at 05:37:53PM -0600, Rodolfo Martínez wrote:
 Hi Matt,
 
 rkhunter creates a database (MD5SUM's) of some files, if they change
 for any reason, like a system upgrade/update, it will complain about
 it. rkhunter should be run again to get the new MD5SUM's. This applies
 for any Host Intruder Detection System (HIDS) (i.e. tripwire, AIDE,
 etc...).

Ah, thought so, thanks.I think it would be worthwhile thing
for systems like AIDE to remove dpkg/rpm checkable files from its checks.
Perhaps as an option.

  Anyway, this reminded me of an interesting article on ldd I read the other 
  day:
 
 I did read that article too, but who runs ldd as root? :P

Well, me, until recently :-).  But only with 'trusted' but bizarrely behaving
apps on solaris.

But running as root doesn't really matter.

A malicious app could just stick an alias for say sudo in your .bashrc
or any number of similar things - it's just the start of a possible penetration.


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Copying HDD

2010-01-19 Thread Matthew Hannigan

 Use rysnc -a  or cp -a

 dd just brings in issues you don't need to deal with.


On Wed, Jan 20, 2010 at 02:00:49PM +1100, Mike Andy wrote:
 I've been thus far unable to do to - maybe you can explain how.
 
 for example, if i do a dd from a 120Gb to a 150Gb and then enter into
 something like gparted or fdisk there seems to be no way i can simply
 expand the disk beyond the original 120Gb boundaries. If there was
 unformatted/unpartitioned space within that 120Gb then things can be
 moved around there but not outside the original disk boundaries.
 
 On Tue, Jan 19, 2010 at 10:38 AM, Jake Anderson ya...@vapourforge.com wrote:
  Mike Andy wrote:
 
  from my experience when you use dd you cannot resize after that
  because it's made an exact bit by bit clone of that hard drive
 
 
  which you then can resize with the numerous partition resizing tools out
  there.
 
  if you're concerned about how much you're downloading use parted
  magic, much smaller than ubuntu and includes both gparted and
  clonezilla all in one
 
 
 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Google Chrome for Linux !!!

2009-12-14 Thread Matthew Hannigan
On Mon, Dec 14, 2009 at 10:39:32PM +1100, Mike Andy wrote:
 this is completely off topic but you'd know if you used facebook that
 when those changes went through the users were prompted upon login
 that security settings were changed. For the users that clicked
 through those prompts without reading or customizing anything, they
 got the defaults.
 
 it's not as if Facebook changed the settings without telling the users.
 
 I wouldn't normally side with Facebook but this isolated incident was
 totally pebkac


Partly but not totally pebkac.  

You would expect that your settings not be changed - i.e
the 'defaults' should have been the ones closest to your existing
settings.

It was pretty underhanded or at least lazy of facebook in my not
so humble opinion.

The facebook founder himself buggered it up and his profile was
public for a while, which was ... nice :-)
The details are all over the net.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Google Chrome for Linux !!!

2009-12-13 Thread Matthew Hannigan
On Sun, Dec 13, 2009 at 11:29:20PM +1100, Dmitry Smirnov wrote:
 Thanks for the news.
 
 It's in repository for Debian:
 
 deb http://dl.google.com/linux/deb/ stable non-free main
 
 Dmitry.

For Fedora-ists, you can install Chrome from yum (see the official
download page) or install it's open source cousin chromium by
putting the following in a file /etc/yum.repos.d/chromium.repo

[chromium]
name=Chromium Test Packages
baseurl=http://spot.fedorapeople.org/chromium/F$releasever/
enabled=1
gpgcheck=0


and running 
yum install chromium


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Wanted : Cisco Router for CCNA

2009-10-19 Thread Matthew Hannigan
On Tue, Oct 20, 2009 at 01:38:57PM +1100, Bernie Pannell wrote:
  On Tue, Oct 20, 2009 at 1:07 PM, Tony H.G Candito 
  blindra...@gmail.comwrote:
   I'm after a Cisco (1600/2500?) etc model for my recent Cisco study
 
 Hi tony, have you tried using a simulator?
 http://www.google.com.au/search?q=cisco+simulator

I was going to suggest the same thing.

A popular one seems to be 
http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator
with front-ends dynagen and/or dynamips.

I'm curious to know how good it is.

Caveat - requires genuine Cisco IOS 


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] quiet computer

2009-10-06 Thread Matthew Hannigan


If it's mostly the 2am noise that bothers you,
the first thing you might try is turn off whatever
is scheduled at that time.  Popular offenders are
prelinking and manpage indexing but there are many
other possibilities.  Turn them off or move them to
say 10am in the morning when no one is around.

You can also try out powertop (from intel) which
is intended to find things that use a lot of power.
Those things also of course tend to make the cpu
run hotter and start up the fans as well.

If you do enough plus some power settings, you can even get
to the point where the machine goes to sleep when not used.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] attaching lots of disks to PowerEdge 860?

2009-09-29 Thread Matthew Hannigan
On Mon, Sep 28, 2009 at 09:46:01PM +1000, Amos Shapira wrote:
 Hello,
 
 We have a few PowerEdge 860's which I mostly converted from our
 previous-generation Windows based system to Xen hosts for development
 on top of CentOS 5 (the production system is now mostly hosted
 abroad).
 
 These servers have space for only two internal disks and I'd like to
 try to convert a couple of them into servers of shared storage.
 I'm thinking of just setting them up to sync their disks using DRBD
 and providing access to the rest of the network via iSCSI.
 
 I'm looking for a way to attach lots of disks to them. So far the only
 options I found are MD1000/3000 from Dell, which are a bit too
 expensive for such a side-project.
 
 Is there another economical (and sane, speed-wise) way to get lots of
 disks on these system's bus?
 
 Thanks,

How sane does the speed have to be exactly? :-)  If the answer is not
completely insanse then you could add a lot of esata/usb disks externally.
If you run out of sata or usb, add more via pci cards.

You might not get sata speeds as you might saturate the pci bus
well before hitting the sata limit.

If you want a little more speed (well, lower latency perhaps) at
the cost of reliability you could raid0 them.

BTW, an alternative to iSCSI might be ATA over ethernet.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] web based firewall config tool wanted

2009-09-23 Thread Matthew Hannigan
On Wed, Sep 23, 2009 at 03:38:07PM +1000, Grant Parnell wrote:
 I'm finding it difficult to believe there's no simple web based firewall
 configuration tool. I'm going to be running a cut-down Ubuntu-Hardy off

...

It's killing me because I came across something like this just recently
but it had a distinctly non evocative name so it's lost to my brain.

I'll let you know in case it pops back in.

It was something hydrid open source; gpl for iptables and pf but 'pro'
/commercial version had cisco etc support.

Not fwbuilder, something else, not listed in the usual wikipedia,
delicious, dmoz etc lists.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] web based firewall config tool wanted

2009-09-23 Thread Matthew Hannigan
On Wed, Sep 23, 2009 at 06:21:27PM +1000, Matthew Hannigan wrote:
 On Wed, Sep 23, 2009 at 03:38:07PM +1000, Grant Parnell wrote:
  I'm finding it difficult to believe there's no simple web based firewall
  configuration tool. I'm going to be running a cut-down Ubuntu-Hardy off
 
 ...
 
 It's killing me because I came across something like this just recently
 but it had a distinctly non evocative name so it's lost to my brain.
 
 I'll let you know in case it pops back in.
 
 It was something hydrid open source; gpl for iptables and pf but 'pro'
 /commercial version had cisco etc support.
 
 Not fwbuilder, something else, not listed in the usual wikipedia,
 delicious, dmoz etc lists.
 

Woohoo found it.   However, it's not open source; it merely supports
open source firewalls.  Minimum price US$4000!

http://runplaybook.com/

(I told you it wasn't evocative)

Courtesy of the firewall-wizards mailing list archive.
http://seclists.org/firewall-wizards/2009/Jun/0034.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] upgrading php to 5.2 or 5.3 latest version so as to use phpmyadmin

2009-09-21 Thread Matthew Hannigan

I see that you've fixed your problem but my info might be useful

On Mon, Sep 21, 2009 at 03:13:45PM +1000, Ben Donohue wrote:
 Hi all,

 Im trying to install phpmydmin but going into it, it says it requires  
 php 5.3+

I'd just install from EPEL - it's in there!
(phpMyAdmin-2.11.9.5)

 problems there. And it's an old version.

 So I'm now trying to upgrade php with yum.
 I've removed php and the other dependencies and updated the repositories  
 to point to remi-release-5.rpm and epel-release-5-3.noarch.rpm
 I've installed it all to 5.3 however I get the error below when trying  
 to upgrade php-mysql.

[ ... ]

 (error below...)

 yum install php-mysql
 Loaded plugins: fastestmirror
 Loading mirror speeds from cached hostfile
 * epel: ga13.files.bigpond.com:4040
 * remi: iut-info.univ-reims.fr
 * epel-debuginfo: ga14.files.bigpond.com:4040
 * updates: mirror.files.bigpond.com
 * base: mirror.files.bigpond.com
 * epel-source: ga13.files.bigpond.com:4040
 * centosplus: mirror.files.bigpond.com
 * addons: mirror.files.bigpond.com
 * extras: mirror.files.bigpond.com


I wouldn't touch remi, centosplus, addons, extras, if what you have is in epel;
it just invites the sort of dependency problems you seem to be getting.


 Setting up Install Process
 Parsing package install arguments
 Resolving Dependencies
 -- Running transaction check
 --- Package php-mysql.i386 0:5.3.1-0.2.RC1.el5.remi set to be updated
 -- Processing Dependency: libmysqlclient.so.16 for package: php-mysql
 -- Processing Dependency: libmysqlclient.so.16(libmysqlclient_16) for  
 package: php-mysql
 -- Running transaction check
 --- Package mysql-libs.i386 0:5.1.39-1.el5.remi set to be updated
 -- Finished Dependency Resolution

 Dependencies Resolved

 
 Package Arch  Version 
 Repository  Size
 
 Installing:
 php-mysql   i386  5.3.1-0.2.RC1.el5.remi  
 remi-test   81 k
 Installing for dependencies:
 mysql-libs  i386  5.1.39-1.el5.remi   
 remi   2.1 M

 Transaction Summary
 
 Install  2 Package(s)
 Update   0 Package(s)
 Remove   0 Package(s)

 Total size: 2.2 M
 Is this ok [y/N]: y
 Downloading Packages:
 Running rpm_check_debug
 Running Transaction Test
 Finished Transaction Test


 Transaction Check Error:
  file /etc/my.cnf from install of mysql-libs-5.1.39-1.el5.remi.i386  
 conflicts with file from package mysql-5.0.77-3.el5.i386
[ ... ]

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: 40 Years of Unix

2009-08-27 Thread Matthew Hannigan


Shell is a generic term for user interface, as well as a
specific term, for e.g. unix cmomand line shells or the
http://en.wikipedia.org/wiki/Windows_Shell

Speaking of shells has anyone used rc or es for any length
of time on a non-plan9 machine?

(http://en.wikipedia.org/wiki/Rc_shell)




-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: [coders] Query about Kurobox or similar

2009-08-27 Thread Matthew Hannigan

You might try one of the NASs that can be debianized.

cc'd to slug not coders



On Fri, Aug 28, 2009 at 01:01:05AM +1000, db wrote:
 If you really want a kurobox then you can order one online. Otherwise
 you may still be able to pick up an linkstation pro (basically a
 kurobox minus a few things). The linkstation pro is essentially a
 kurobox, but with a hard drive -- $200ish i think you can get one in
 australia from ht.com.au
 
 
 
 However, you may want to buy something more powerful like a plugpc
 http://www.plugcomputer.org/  ($99USD) / get a atom :)
 
 
 
 
 
 
 
 
 http://www.nas-central.org/
 
 
 
 
 2009/8/22 高远 wolf0...@hotmail.com:
 
  Thank you Matthew.
 
  I'm looking at Kuro for its slim and fanless design. Do you have any 
  recommondation for x86 alternatives with these pros available too?
 
  Also for the mailing list, would it be appropriate to cc this post to the 
  main list or better for me to re-post the question over there? I am new to 
  this so please bear with me on this.
 
  Thanks,
  Ryan
 
 
  Date: Fri, 21 Aug 2009 14:05:48 +1000
  From: m...@zip.com.au
  To: wolf0...@hotmail.com
  CC: cod...@slug.org.au
  Subject: Re: [coders] Query about Kurobox or similar
 
  On Fri, Aug 21, 2009 at 10:28:34AM +0800, 高远 wrote:
 
  Hi all,
 
  Sorry if my last mail was corrupted. I will try send again with plain 
  text format.
 
  I am new to this list and please tell me if I am going off topic here.
  I am considering getting a small box for Linux hacking. Considering 
  revogear Kuro box because it's a fanless, small stuff and doesn't cost 
  too much. Reference page 
  http://www.revogear.com/ProductDetails.asp?ProductCode=KURO%2DBOX%2FHG%2DWRShow=TechSpecs
 
  Question is, is this stuff available anywhere in Sydney? And, is there a 
  better choice with similar price tags (preferable w/ Atom CPU).
 
  Sorry if I send the wrong question here.
 
  This is more suitable for the main slug list. Many people who might be 
  able to
  help you won't see it here.
 
  It doesn't seem a bad price. But what are you looking for? Does it have to 
  be small?
  Because otherwise you might be better off getting a second hand x86 
  machine.
  _
  与任何您希望的人分享您的回忆。
  http://www.microsoft.com/china/windows/windowslive/products/photos-share.aspx?tab=1
  ___
  coders mailing list
  cod...@slug.org.au
  http://lists.slug.org.au/listinfo/coders
 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ftp client recomendations ?

2009-08-20 Thread Matthew Hannigan
On Thu, Aug 20, 2009 at 11:03:25AM +1000, Voytek Eymont wrote:
 
 On Thu, August 20, 2009 10:37 am, Matthew Hannigan wrote:
  On Wed, Aug 19, 2009 at 11:18:48AM +1000, Daniel Pittman wrote:
 
  /etc/sysconfig/iptables
 
 
  H.  Does it have the nf_nat_ftp and nf_conntrack_ftp modules
  loaded, too?
 
  Look in /etc/sysconfig/iptables-config for that.
 
 Matt,
 thanks, no modules specfied
 
 so I should add IPTABLES_MODULES=nf_nat_ftp nf_conntrack_ftp

yes, I think so, but if you use the gui and tick ftp it will do
the needful for you.

 
  Bottom line, ftp is a pretty firewall un-friendly protocol.
  I'd recommend sftp (i.e. the module/feature of ssh) instead.
 
 but, if command line ftp client works with no issues, doesn't that exclude
 firewall on the server ?

Maybe.  Is the command line client ftp being done from the same
machine?   It also depends on whether it's using passive or not.
The default might change from gui to cli - and even version to
version each other.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ftp client recomendations ?

2009-08-19 Thread Matthew Hannigan
On Wed, Aug 19, 2009 at 11:18:48AM +1000, Daniel Pittman wrote:
.
.
.
  /etc/sysconfig/iptables
 
 H.  Does it have the nf_nat_ftp and nf_conntrack_ftp modules loaded, too?

Voytek,

Look in /etc/sysconfig/iptables-config for that.

 [...]
 
  Command:PASV
  Response:227 Entering Passive Mode (116,197,145,51,175,75).
 
 
  At this point the server *should* be expecting a connection from the
  client, on TCP/44875, but I bet the firewall isn't letting that through.
 
  Check your firewall logs first, to see if you have a record of blocking
  that connection or not.
 
  what log to look at?
 
 I don't know, on RedHat.  I think they had /var/log/firewall or something?

They'll be in /var/log/messages


Bottom line, ftp is a pretty firewall un-friendly protocol.
I'd recommend sftp (i.e. the module/feature of ssh) instead.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Chinese intruder yesterday

2009-08-16 Thread Matthew Hannigan
On Fri, Aug 14, 2009 at 07:05:15AM +1000, Erik de Castro Lopo wrote:
 Jim Donovan wrote:
 
  I had port 22 open for a few hours yesterday but closed it when I
  noticed the following.
 
 An open port 22 can be made safe. There are numerous articles available
 on the net like the following:
 
 http://www.linuxjournal.com/article/8759
 http://www.debian-administration.org/articles/573
 
 For the particular issue you had, probably the best option is to use
 the AllowGroups option in sshd_config to restrict ssh access to users
 of a specific group. On my machine I have
 
  AllowGroups sshlogin
 
 and then add any specific users to that group.
 
 Running SSH on a non standard port also helps.

These are both good suggestions.  If you like, you can do a similar thing
for many services (not just ssh) with pam_access.

BTW, I know where 'thx1138' comes from - it's one of George Lucas's first
movies.  Probably a fave amongst computer people.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Taxes on sending servers to the US

2009-08-11 Thread Matthew Hannigan
On Mon, Aug 10, 2009 at 07:08:43PM +1000, Amos Shapira wrote:
 Hello,
 
 Does anyone here has experience sending servers (e.g. Dell PowerEdge
 860 rack-mounted) TO the US?
 
 I'm going to visit our office overseas soon and we were wondering how
 much would it cost (tax-wise) to just pack a couple of them as a
 checked-in luggage.
 
 The sale closes soon so I need a quick answer.

I'd be surprised if the cost and hassle of exporting + buying here
exceeds the cost of just buying one there.  Also, what about e.g. warranty?
Sometimes they care where you bought it.

I brought a simeple 3 year old desktop from Europe into Aus when I moved
back here some time ago and (from memory) had to pay sales tax on it!
Bloody stupid.

BTW, more of a question for slug-chat.

Matt



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] GPS data logger

2009-08-09 Thread Matthew Hannigan
On Sat, Aug 08, 2009 at 05:22:08PM +1000, Simon Males wrote:
  I use cotoGPS on the Palm which does all that, logging at user defined
  frequency, it also has a java desktop component that allows to do various
  stuff with the data, including KMLs
 
 I actually have a Android phone and ran with that. There are a quite a
 few GPS logging/mapping applications in the Android Marketplace. They
 are all a lot of fun and its where I got the interest from.

Yes, I guess it's 'non-free' answer, but the 'My Tracks' app on android is 
great.
You can upload your track to good spreadsheets or your own map collection ('My 
Maps')
 
 Though I don't like running with my/a phone.

Yes, it's a bit of a beast.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Music player opinion

2009-08-02 Thread Matthew Hannigan
On Mon, Aug 03, 2009 at 10:22:19AM +1000, Simon Rumble wrote:
 [ ... ]
 Yep, I want something that mimics the old WinAmp.  Dumb, just plays the
 bloody music files I point it at.  No bells, no whistles.

If you want winamp-ish, then perhaps Zinf is for you (Zinf is not freeamp, 
freeamp is not winamp)

vlc might also fit the bill.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] HTTPD Authenticated User extraction

2009-07-16 Thread Matthew Hannigan
[ passing on REMOTE_USER or other user var to tomcat from apache ]

On Mon, Jul 13, 2009 at 09:32:00AM +1000, Kyle wrote:
 Big thanks to John  Daniel,

 I'll give that a go.

Be aware that you'll need to isolate tomcat so that
no-one can go to it directly.  Otherwise people can
'fake' their own USER vars to get in.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Did anybody notice this?

2009-07-15 Thread Matthew Hannigan
On Wed, Jul 15, 2009 at 11:15:30AM +1000, wbenn...@turing.une.edu.au wrote:
 Was sent this article from the Wall Street Journal.
 
 Has there been any comment on it?

Crikey, a .pdf within a outlook? .msg.

Here's the article at the source:
http://online.wsj.com/article/SB124346723960760371.html

Amusingly, your attachment has the name:

Laptops with Linus have compatibility issues.pdf

Anyway, the content is neither surprising or alarming.  I also
had problems with my powershot camera with linux the other day.
Then a few kernels, and a distro upgrade later it started working.

Indeed people should do the homework before they commit to linux as
their main machine.  Then again it can be argued that 'doing the
homework' is an unreasonable imposition on a buyer and you should
be able to assume things just work.

Matt
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] detach attachements from cli, how ?

2009-06-03 Thread Matthew Hannigan
mutt does nicely if you don't mind interactive curses type 'console'

v to show attachments
s to save

(from memory)



On Wed, Jun 03, 2009 at 02:35:37PM +1000, Voytek Eymont wrote:
 I can't recall how to detach email attachements from prompt...
 
 is it metamail ? mencode ?
 don't seem to have either...
 
 googling hasent succeeded yet
 
 
 -- 
 Voytek
 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Synchronizing from Windows to Linux

2009-05-26 Thread Matthew Hannigan
On Tue, May 26, 2009 at 11:24:43AM +1000, Andre Kolodochka wrote:
 Is there something not necessarily based on rsync? ftp, for example?
 
 Andre.

Well, do you want just to do backups or are you looking for something
fancier?

Your original mail mentioned only backups in the body (as I recall)
but you use the synchronising in the subject line.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] security monitor with webcam

2009-05-19 Thread Matthew Hannigan
On Tue, May 19, 2009 at 10:46:15PM +1000, Phil Manuel wrote:
 [ ... ]
 use this package at work, it is not an easy install with some USB  
 camera's although it has improved with later releases and kernels.

Indeed; my camera (logitech sphere af) has only become painless with
very recent versions of kernel and motion.

Here's some dmesg lines for it:

Linux video capture interface: v2.00
uvcvideo: Found UVC 1.00 device unnamed (046d:0994)
uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling 
workaround.
input: UVC Camera (046d:0994) as 
/devices/pci:00/:00:1d.7/usb1/1-1/1-1:1.0/input/input5


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] security monitor with webcam

2009-05-18 Thread Matthew Hannigan

I run 'motion'.  It's in Fedora and I am sure Ubuntu and/or Debian.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: XBitHack

2009-05-08 Thread Matthew Hannigan
On Fri, May 08, 2009 at 02:25:13PM +1000, david wrote:


 Matthew Hannigan wrote:
 On Fri, May 08, 2009 at 01:13:39PM +1000, Rob Weir wrote:
 On  8 May 2009, da...@kenpro.com.au wrote:
 I've got this snippet in apache config:

 Directory /var/www/test/
 Options +Includes XBitHack full  IncludesNOEXEC
 /Directory

 da...@david:/etc/apache2$ sudo /etc/init.d/apache2 reload
 Syntax error on line 17 of /etc/apache2/sites-enabled/000-default:
 Illegal option XBitHack
 ...fail!
 da...@david:/etc/apache2$

 mod-include is enabled
 Are you /sure/?

 Innit mod_ssi ?



 I'm not sure what this should do.. I'm using Ubuntu/Debian which uses 
 a2enmod to set up modules, followed by apache2 reload. Am I missing 
 something?

 thanks...

I was pointing out that XBitHack is part of mod_ssi, not mod_include.

As for what it does; well what do you want it do do?

I'd take it out if you're not sure.  SSI (server side includes) can
make the security of apache a little more fragile.

Matt



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: XBitHack

2009-05-08 Thread Matthew Hannigan
On Fri, May 08, 2009 at 06:28:26PM +1000, david wrote:

 I was pointing out that XBitHack is part of mod_ssi, not mod_include.

 Is it???
 http://httpd.apache.org/docs/2.0/mod/mod_include.html
 seems to suggest mod_include ... although I'm often wrong and I might be this 
 time.

Ah you're right and I suck,


 As for what it does; well what do you want it do do?

 What I want to do is server side includes. I have another production site 
 where this works perfectly, but uses the .shtml suffix and 
 AddOutputFilter. It would be nicer if I could use XBitHack but for some 
 reason the apache2 parser doesn't like it.

 By putting this line:

 AddOutputFilter INCLUDES .html

 on my test site's /etc/apache2/mods-enabled/mime.conf the includes 
 magically work as advertised, but that's not really what I want. The 
 whole idea is to only parse for includes when required instead of every 
 html page.

 I'd take it out if you're not sure. 

 I'm sure what I want to do.. see above.

  SSI (server side includes) can
 make the security of apache a little more fragile.


 because??? Perhaps there is a good reason not to do it. I've got the  
 IncludesNOEXEC option happening.

because you're trusting (to a certain extent) client supplied data.
But if you want it, you want it.  No question.

As for the answer, well without seeing your entire apache config, I'd _guess_
that it's disable in the build or something like that.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: XBitHack

2009-05-07 Thread Matthew Hannigan
On Fri, May 08, 2009 at 01:13:39PM +1000, Rob Weir wrote:
 On  8 May 2009, da...@kenpro.com.au wrote:
  I've got this snippet in apache config:
 
  Directory /var/www/test/
  Options +Includes XBitHack full  IncludesNOEXEC
  /Directory
 
  da...@david:/etc/apache2$ sudo /etc/init.d/apache2 reload
  Syntax error on line 17 of /etc/apache2/sites-enabled/000-default:
  Illegal option XBitHack
  ...fail!
  da...@david:/etc/apache2$
 
  mod-include is enabled
 
 Are you /sure/?

Innit mod_ssi ?


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Apache reverse proxying with MS

2009-03-09 Thread Matthew Hannigan

You might try ProxyPreserveHost

http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypreservehost

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How to get files off hard drive?

2009-02-18 Thread Matthew Hannigan
On Fri, Feb 13, 2009 at 08:52:38PM +1100, Bruce wrote:
 You might like to try a live distro, such as PCLINUXOS, with which I have no 
 problems mounting foreign drives.  Basically, the live distro runs from the 
 CD and you muck around with mount arguments (someone else may have a more 
 structured approach here) until it can read the drives.  Once you have that 
 its pretty easy to copy precious stuff to a USB drive or etc.
 
 I have used this several times to do exactly that.  It seems that the live 
 distros are better placed to do this than installed systems.

If you're going to use a live cd he might as well use the fedora
live/rescue disk.

Re lvm well I've found it it be pretty useful.  It's not that complicated,
and you can selectively mirror more fine-grainedly which I like.

The issue here is lack of backups, not so much anything else.

Sorry to be blunt, but I've had the same (actually worse) situation
(lost about 8 months worth of baby photos) and have been cursing myself
ever since.

EVERYBODY BACK UP NOW. -- (but read Mary's note/presentation too)



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html



Re: [SLUG] MySQL

2009-02-18 Thread Matthew Hannigan

Yeah but ... is there any reason it wouldn't show up in the gui?


On Wed, Feb 18, 2009 at 09:45:03PM +1100, Dean Hamstead wrote:
 apt-get install mysql-server


 Dean

 Chris Allen wrote:
 I am running Ubuntu 8.04 and want to teach myself MySQL.

 I thought it would be simple enough to select it from the options  
 Add/Remove Applications
 I can see option to install an administrator and a browser but not the  
 server itself.
 Have I missed something or should I go elsewhere for that?

 Chris Allen
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] NAS device for home?

2009-01-13 Thread Matthew Hannigan
On Wed, Jan 14, 2009 at 08:33:48AM +0900, jam wrote:
 Seagate published this 
 http://www.seagate.com/content/docs/pdf/whitepaper/D2c_More_than_Interface_ATA_vs_SCSI_042003.pdf
 
 It says multiple drives in close mechanical proximity WILL fail !
 
 Like This: 
 Drive1 seeks to track
 That movement shakes Drive2 off track, so it corrects
 THAT movement shakes Drive1 off track so it corrects
 ...

Here's a nice article and video on how vibration (in this case mere shouting)
can affect disk performance.

http://blogs.sun.com/brendan/entry/unusual_disk_latency

Nice demo of Sun's dtrace and fishworks too :-)

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] AU Online Bookstores

2008-12-25 Thread Matthew Hannigan
On Wed, Dec 24, 2008 at 06:39:35PM +1100, Kelvin Nicholson wrote:
 Howdy Slug:
 
 Being from out of the country, I'm  not familiar with the best AU-based
 places to buy (hopefully used) IT books.  Besides shipping books from
 Amazon, does anybody have any place (online or brick) they would
 recommend?
 

http://www.bookware.com.au/ do online and shopfront.

I do tend to use amazon or http://www.bookpool.com/ or O'Reilly direct though.

In the past bookpool has been cheaper than amazon for some titles.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Netbook experiences?

2008-12-21 Thread Matthew Hannigan

Not done yet!
Firmly on my todo list though.

On Fri, Dec 19, 2008 at 09:02:48PM +1100, elliott-brennan wrote:
 How'd you go with it Matt?
 
 Matthew Hannigan wrote:
  On Fri, Dec 12, 2008 at 08:42:35PM +1100, elliott-brennan wrote:
  I have a 701 (well, the wife has it :)) on which I
  installed eeebuntu which works a treat. The screen
  is small, and the keyboard is small, but it is
  also very light and quick to start/shut-down. It
  certainly does the job we got it for. A larger
  keyboard and screen would be nice, but at the
  price it's hard to complain.
  
  I also have a 701.  My only criticism is the battery
  which is too small and discharges even when the machine
  is off.  The latter problem cannot be fixed with different
  battery.  Maybe I need to do some hardware hacking.
  
  I'm also going to put eeebuntu or possibly the eee fedora
  distro on it.  (downloading eeebuntu 8.10 right now in fact)
  
  Matt
  
  
  
  
 
 -- 
 Registered GNU/Linux User 368634
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Just sharing a gotcha with rsync that caused me big trouble ...extra

2008-12-16 Thread Matthew Hannigan
On Tue, Dec 16, 2008 at 07:34:10PM +1100, Patrick Lesslie wrote:
 On Sun, Dec 14, 2008 at 11:38:10PM +1100, R.G.Salisbury wrote:
  Like the deal with the trailing slash . which can cause issues ---
  (often put there by bashs tab completion).
  I like putting a * after a trailing slash as i find it more intuitive.
 
 The trailing slash or not option is handy once you know about it, but
 confusing until you do.
 
 It also makes a difference whether you put a * after the trailing slash
 or not, since the shell interpolates the * and doesn't include hidden
 files, which may be important for a home directory backup for example.

Here's an idiom which has saved me thinking too hard; use . as the source:

cd /whatever/source/  rsync -a . /some/destination/directory

It will work the same whether source is just source or source/
It will fail nicely if /some/destination/directory doesn't exist
It will work the same with the same sort of errors if you use cp -a
instead of rsync -a.
It picks up .files in source as well which rsync source/* /some/dest/ doesn't.


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Netbook experiences?

2008-12-16 Thread Matthew Hannigan
On Fri, Dec 12, 2008 at 08:42:35PM +1100, elliott-brennan wrote:
 I have a 701 (well, the wife has it :)) on which I
 installed eeebuntu which works a treat. The screen
 is small, and the keyboard is small, but it is
 also very light and quick to start/shut-down. It
 certainly does the job we got it for. A larger
 keyboard and screen would be nice, but at the
 price it's hard to complain.

I also have a 701.  My only criticism is the battery
which is too small and discharges even when the machine
is off.  The latter problem cannot be fixed with different
battery.  Maybe I need to do some hardware hacking.

I'm also going to put eeebuntu or possibly the eee fedora
distro on it.  (downloading eeebuntu 8.10 right now in fact)

Matt



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] windows drivers

2008-11-25 Thread Matthew Hannigan
On Wed, Nov 26, 2008 at 08:33:29AM +1100, Ashley Maher wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 I am faced with the fun job of rebuilding several Generic WindowsXP
 computers.
 
 Does anybody know of a FOSS tool I can put onto each computer to give me
 a report on all the drivers used by each computer? I have admin access
 to the Windows domain.
 
 If this tool could also give a report on all loaded applications then
 that would be a bonus.
 
 Thanks in advance to anybody with any help and - or suggestions.
 
 Regards,

You might try
http://www.ocsinventory-ng.org

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] set the PKG_CONFIG_PATH variable

2008-11-14 Thread Matthew Hannigan
On Tue, Nov 11, 2008 at 12:59:45PM +1100, Erik de Castro Lopo wrote:
 jam wrote:
 
   Regardless of which distro or distro version you are using, replacing
   the distro installed package with something you compile yourself is
   almost always a bad idea, especially when you are downgrading
  
  Do qualify your assertion (eg if you are utterly clueless then ...) because 
  otherwise the advice is. well um, um, not useful
 
 The original poster has a very long history of asking questions
 on this mailing list. From that history I have been able to 
 gauge his level of expertise and I adjusted my answer accordingly.
 

Erik, your response WAS qualified and really could not be improved.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Logical Volume Management.

2008-11-11 Thread Matthew Hannigan
On Wed, Nov 12, 2008 at 08:02:07AM +1100, Chris Allen wrote:
 For me, this is a new although I gather it has been around for a few years.

 I recently upgraded Ubuntu 6.06 to 8.04.
 Before the upgrade I kept getting messages that there was not enough space
 (much to my surprise).  I deleted old junk and did the upgrade.

 NOW, I see the ALL my data is on just one partition of only 4GB.  There  
 are are 2 more (unused and empty) partitions of 4 and 57 GB that I would  
 like to use. 

 As I read up on the best way to bring them on board, I stumbled on the  
 new concept of Logical Volume Management.  Sounds very interesting.   
 However every thing I have read about using it, assumes you are start  
 with a fresh install.  I have seen nothing about converting a current  
 system to LVM.

 Can any one offer some advise or recommend good reading material?

The redhat admin guides are pretty good
You could also try http://tldp.org/HOWTO/LVM-HOWTO/index.html but
that looks a little out of date to me.

I can give you a quick overview:

A volume group is made of one or more physical volumes.
A volume group can be divided up into logical volumes.
You create filesystems on these logical volumes.

So:

pvcreate /dev/the-partition-or-disk
vgcreate some-volume-group /dev/the-partition-or-disk
lvcreate --size 10g  some-volume-group
mkfs.ext3 /dev/some-volume-group/some-logical-volume

then add that to /etc/fstab as well. 

Use lvdisplay and vgdisplay to show the config.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Uptime logging

2008-11-07 Thread Matthew Hannigan
On Fri, Nov 07, 2008 at 08:14:24PM +1000, Rick Phillips wrote:
  Jeff Waugh wrote:
   Even better, install collectd and use its ping plugin -- now you can do 
   the
   same thing, but with beautiful (and *SIMPLE*) graph output. :-)
  
 
  Or you could use Nagios and have the alert notification send a form 
  letter to the person concerned every time it went down.(probably not a 
  great idea!). But seriously, it also comes with handy availability 
  graphs, so you quote uptime/downtime figures in percentage terms easily. 
  on ubuntu, apt-get install nagios will monitor your default gateway with 
  ping out of the box.
  
 
 Thanks guys for the suggestions.  I had forgotten about nagios and I
 have discovered two new options for me to use.  I have modified Peter's
 simple script to output a tidy continuous report and have already
 identified a near 30 minute outage this evening.  I will have a tinker
 with collectd and smokeping over the weekend.
 
 Thanks again,
 
 Rick

Nagios, collectd, zenoss, and a bunch of others are all good for what you
want.

Matt, who is still trying (not very hard) to get nice graphs from collectd
I installed collectd rrdtool plugin from fedora extras but I presume I have
to fiddle with the collectd.conf.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Microsoft and Email Protocols

2008-09-17 Thread Matthew Hannigan


Did you CC or BCC all your friends?

If you CC a lot of people, that can be taken
as an indicator of spam.

As for standards, well email-wise we're living in 
a swamp, and the recommended practice in many
instances is to ignore the standard (e.g. not bouncing
mis-addressed mail) or exploring the more interpretable
edges of the standard (e.g. greylisting)

The cure is to charge for sending email, but
for most that cure is worse than the disease.

Lastly, get your friends to dump hotmail and
get gmail.  They won't regret it.


Matt



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Microsoft and Email Protocols

2008-09-17 Thread Matthew Hannigan
On Thu, Sep 18, 2008 at 01:27:21PM +1000, Robert Thorsby wrote:
 [ .. ]
  The cure is to charge for sending email, but
  for most that cure is worse than the disease.
 
 No, no, no! You may as well say, Let it be under the control and 

It's not that clear what you're saying no to here. 

 administration of a government department. The only real cure is for 

Government control is the opposite end of the spectrum to a market
solution, not the same end.

 those who administer MX servers to do so properly, which includes 

So how do you get 'those who administer MX servers to do so properly' ?

You're begging the question (In the original meaning of that phrase)

 preventing spam from originating out of boxen under their 
 administration. However, whilever the largest ISPs benefit from the 
 sending of spam that will not occur.
 

Followups - please feel free to change to slug-chat


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Performance Tuning

2008-09-07 Thread Matthew Hannigan
On Sat, Sep 06, 2008 at 09:54:13AM +1000, Kyle wrote:
 Can somebody recommend a reasonably comprehensive but straightforward  
 performance tuning article/HowTo/PDF/site I could read pls?

 Specifically, I am looking to perf-tune a dual-CPU RAID5 box used as a  
 backup server.

Are you backing up to disk or tape?


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Adobe Illustrator program for Linux

2008-08-18 Thread Matthew Hannigan
On Tue, Aug 19, 2008 at 01:01:31PM +1000, Daryl Thompson wrote:
 Hi all
 
 I am looking fro an similar to Adobe Illustrator program for Linux.
 That is one with similar features and be able to save / export to an
 ai format.
 Has any one got some ideas please

Try inkscape, its FAQ says it can.  Inkscape is awesome regardless.

http://wiki.inkscape.org/wiki/index.php/FAQ#What_formats_can_Inkscape_import.2Fexport.3F

The export seems to be imperfect though.

You may be able to export in another format that AI could import (e.g. SVG)


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Missing Dependency

2008-07-31 Thread Matthew Hannigan
On Wed, Jul 30, 2008 at 03:44:27PM +1000, Daryl Thompson wrote:
 [ .. ]
 gstreamer-plugins-bad-0.10.7-2.fc9.i386 from installed has depsolving
 problems [ .. ]

gstreamer-plugins-bad is not from the standard repos AFAIK.
You're always chancing when you include non standard yum repos.

That said, it could be just a case of waiting for it to sort
itself out.  That can even happen with standard repos.




-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] mutt Reply-To:

2008-05-01 Thread Matthew Hannigan
On Fri, May 02, 2008 at 02:01:25PM +1000, david wrote:
 On Thu, 2008-05-01 at 13:16 +1000, John Clarke wrote:
  On Thu, May 01, 2008 at 01:07:50 +1000, david wrote:
  
   I'm using mutt in a script to send out emails. 
   
   $ mutt -s subject -a file [EMAIL PROTECTED]  /dev/null
   
   Is there any way to add a Reply-To: header? I can't find it in google or
  
  This might work:
  
  mutt -s subject -a file -e 'my_hdr Reply-To [EMAIL PROTECTED]'  
  /dev/null
  
 
 Thanks for the replies. This works fine. It also works if you drop the
 quoted -e argument into .muttrc
 
 
 $ mutt -e my_hdr Reply-To: [EMAIL PROTECTED] -s subject line -a 
 file
 [EMAIL PROTECTED]  /dev/null
 
 David.

It's good you got a fix but I thought it must be possible to
give the entire message like giving it to sendmail - because
you can 'E' on a draft and see / edit the entire message inclding
headers.

The man page mentions:

   -H draft
Specify a draft file which contains header
and body to use to send a message.


So that should work - if you know how to prepare a complete,
sensible header and body.

Matt






-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Outputing progress counters with PHP/HTML

2008-04-30 Thread Matthew Hannigan
  
  You do a select before every insert?!  Is the table indexed?
  If not that might explain the slowdown; a select WILL take
  longer the bigger the table.
 
 Perhaps better to put a unique index on the appropriate column(s), then
 just do an insert and throw away the error if the data is already there.

Yes, even better!  I was going to ask Howard whether it mattered
whether the data was different or whether it just had to be one of them.



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Outputing progress counters with PHP/HTML

2008-04-29 Thread Matthew Hannigan
On Wed, Apr 30, 2008 at 12:08:50PM +1000, Howard Lowndes wrote:
 I'm sorry, I should have been more specific on  this.
 
 It's PHP5 and the input is a text file from a data logger which means that
 I have to find the data records then decompose each into the individual
 data elements to insert into the database, so it's not just a case of a
 simple .SQL file as input.
 
 The process is:
 Read a line from the file.
 Decompose the line into the data elements.
 For each data element, do a select on the database to see whether it
 ^^^
 already exists, if not then do an insert into the database.
 Rinse and repeat...
 
 It certainly has the smell of being a PHP memory leak, but how I can work
 around it I am just not sure.

You do a select before every insert?!  Is the table indexed?
If not that might explain the slowdown; a select WILL take
longer the bigger the table.


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SIM cards as cheap data storage?

2008-04-15 Thread Matthew Hannigan


How about storing the data on
normal paper as barcodes.


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] restricting ssh private key to access sftp only

2008-04-14 Thread Matthew Hannigan
On Mon, Apr 14, 2008 at 03:12:49PM +1000, Amos Shapira wrote:
  [ ... ]
 I should probably also chroot that user to prevent it from being able
 to snoop around but for now I'll stop here (no time).

Have a look at rssh: http://rssh.sourceforge.net/


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Network Real-Time Hot Filesystem Replication?

2008-04-08 Thread Matthew Hannigan


I don't know whether it would suit you at all, but
I'll mention

http://allmydata.org/trac/tahoe

for the simple reason it looks interesting and
it only just announced version 1.0

RC's mention of Ceph jogged my memory on this.

Matt


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] managing .bashrc in subversion?

2008-04-07 Thread Matthew Hannigan
On Tue, Apr 08, 2008 at 03:04:59PM +1000, Sonia Hamilton wrote:
 A process rather than technical question about subversion.
 
 My personal subversion repo is setup, works ok, etc. But I notice that
 subversion only lets you checkout a directory, not a file.
 
 I want to manage (for example) my .bashrc file in subversion - how to do
 it? I could check in all of /home/sonia, but I'd have to setup heaps of
 exclusions - nasty. I could put .bashrc in /home/sonia/bin (for example)
 and link to it cd; ln -s bin/.bashrc .bashrc) - a hack.
 
 Any other suggestions?

Some people put there entire home dir into version control.
Seems excessive to me.  Your hack is a popular hack and sounds
pretty reasonable to me.  I'd use, say, a dir called checkout or
tree or svn rather than bin though.  


Matt
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Perl Question

2008-04-02 Thread Matthew Hannigan
On Wed, Apr 02, 2008 at 03:09:44PM +1100, Peter Abbott wrote:
 Can anyone with greater knowledge than myself explain this regex
 behaviour.
  [ ... ]
 if ( $_ =~ m/^Box(\d) ([A-Z]+(\. | ?)[A-Z]* ?[A-Z]*).*?(\d).*?(\d\d\.\d
 \d).*?(\d*\.\d\d)L/) {
   $box = $1;
   $name = $2;
   $name =~ s/\.//;
   $place = $4;
   $time = $5;
   $margin = $6;
   }
 Undoubtedly something simple that a self taught dummy has failed to
 grasp.

Doing s/// for $name there resets the $1, $2, .. counters

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Tricky ssh question

2008-03-28 Thread Matthew Hannigan
On Fri, Mar 28, 2008 at 02:59:23PM +1100, [EMAIL PROTECTED] wrote:
  jam == jam  [EMAIL PROTECTED] writes:
 
 jam Hi Somewhere on the internet is my father-in-law
 
 jam and get the dreaded ssh_exchange_identification: Connection
 jam closed by remote host
 
 So if you start sshd with -d -d -d and then try to connect, what
 happens?

And what does his logs say?  I've seen this message
with tcp_wrappers denial.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ADSL modem recommendations (with bridging)

2008-03-06 Thread Matthew Hannigan
On Thu, Mar 06, 2008 at 05:43:56PM +1100, Peter Hardy wrote:
 I call shenanigans!
 
 On Thu, 2008-03-06 at 16:22 +1100, Matthew Hannigan wrote:
  Don't stop there!
  
  You probably mean bits not b(ytes) and mebi not mega,
  so it's
  108 Mibit/s
 
 1) It's mibi not mebi.

I don't think so Mister!  
Your url disagrees with you! So there

and also:
http://physics.nist.gov/cuu/Units/binary.html

 2) The same standard that defines mibi- as a prefix (IEEE 1541 [1])
 specifies that b is the symbol for bits, and B should be used for bytes.
 In practical use, though, I tend to see either bits or B.
 
 -- 
 Pete, who measures his traffic in gross nybbles to reduce confusion.
 

per ..?  fortnight?

Who actually uses these prefixes in real actual speech?
Not me, I'd feel a right wally.

 [1] - http://en.wikipedia.org/wiki/IEEE_1541



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ADSL modem recommendations (with bridging)

2008-03-05 Thread Matthew Hannigan
Don't stop there!

You probably mean bits not b(ytes) and mebi not mega,
so it's
108 Mibit/s


See http://en.wikipedia.org/wiki/Data_rate_units


On Thu, Mar 06, 2008 at 12:50:54PM +1100, xorprime wrote:
 Oh well, make it Mb/s then ;-)
 
 On Thu, Mar 6, 2008 at 12:21 PM, Peter Miller [EMAIL PROTECTED]
 wrote:
 
  On Thu, 2008-03-06 at 09:52 +1100, xorprime wrote:
   108mb wifi
 
  units-pedant-mode
  Wow, 0.108 bits per second, isn't that a bit slow?  I thought only
  military submarines used that?  Perhaps you meant 108Mb/s.
  /units-pedant-mode
 
 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] hard drive failure, back-up, and other unhappiness

2008-03-05 Thread Matthew Hannigan
On Thu, Mar 06, 2008 at 02:05:49PM +1100, Amos Shapira wrote:
 On Thu, Mar 6, 2008 at 1:27 PM, Alex Samad [EMAIL PROTECTED] wrote:
   Its a case of horse for courses.  My setup. I have 3 server, 2 at my
   place. 1 primary file server, files copied over to the second server.
   The second server copies its files over to the third server which is
   offsite. All disk space is raid1 (or better - used to use raid5)
 
 While discussing backup (and off-site backup) strategies, here is
 something that sounds like just what I'd like to suggest my workplace
 to use to keep the comapny's jewels at an even safer place:
 http://www.mail-archive.com/[EMAIL PROTECTED]/msg51032.html
 
 (Summary - use a simple script to store encypted incremental daily
 backups on Amazon's S3).

Here's blog article listing a bunch of s3 backup tools.

A List of Amazon S3 Backup Tools
http://jeremy.zawodny.com/blog/archives/007641.html

You can even do it with linux fuse.

In the comments there are some links to dedicated non-s3
backup services.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] hard drive failure, back-up, and other unhappiness

2008-03-05 Thread Matthew Hannigan
On Thu, Mar 06, 2008 at 12:57:13PM +1100, Craig Dibble wrote:
 Quoting david [EMAIL PROTECTED]:

 I've had a back-up hard drive fail today (just the backup drive, not the
 original)

 Worse still, my son's hard drive failed and then his back-up drive also
 failed, so he is in deep doo-doo.

 Fail = clicking noises, won't mount or mounts then won't read/write,
 etc.

 Whilst not an answer to your question, if you're fairly sure the drive is 
 terminal it might be time to try a bit of percussive maintenance. I 
 remember having similar problems with a drive many years ago and a sharp 
 smack off the side of the desk did actually fix it. Whether the drive heads 
 were stuck or what I don't know, but it was supremely satisfying 
 nonetheless...

 File that under the Please don't try this at home category ;-)
 Craig


FWIW, before you try percussive maintenance, I've had the clicking
thing and sometimes  it has been due to dodgy usb cable or cable
insertion and once even rebooting linux fixed it - the usb driver
had got into a funny state and was erroring no every connect.
Rebooting fixed it.


Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Oracle 9i database and samba

2008-02-29 Thread Matthew Hannigan
On Fri, Feb 29, 2008 at 11:03:22AM +1100, Jeremy Portzer wrote:
 Joel Heenan wrote:
 Network
 filesystems are not normally used for database files.


 I work for an ASP that has all of its Oracle databases (hundreds of them) 
 mounted via NFS.  It works just fine.  The database servers are running Red 
 Hat Enterprise Linux 4 and 5, and the NFS mount points are NetApp filers.
 
I believe NetApps are specifically supported by Oracle but not NFS
generally. (which you touch on later in this message)

Even so this is just a convenience, it does nothing to 'share' the database
unless you mean clustering.

Access to the database is always by an Oracle protocol e.g. bequeath, sqlnet
or something like jdbc, never by direct access to the files.

Matt
PS getting seriously off-topic here, I suggest following up to -chat
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] EEE-PC and Eeedora where Ferora meets the Eee-PC

2008-02-29 Thread Matthew Hannigan
On Sat, Mar 01, 2008 at 01:02:36AM +1100, Daryl Thompson wrote:
 Hi all 
 EEE-PC users new old and thing
 
 I got home tonight and had a email from Red Hat that says
 
SNAP!

I d/l'd it yesterday and mean to install this w/e.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do I relocate /home ?

2008-02-10 Thread Matthew Hannigan
On Sun, Feb 10, 2008 at 09:54:11PM +1100, Jamie Wilkinson wrote:
 This one time, at band camp, Matthew Hannigan wrote:
 So just
 rsync -av /home.orig/ /home/
 is good
 
 
 Note for rsync newbs; 
 rsync -av /home.orig /home/
 is different from
 rsync -av /home.orig/ /home/
 The first will do what you want, the
 second will create /home/home.orig/
 
 The other way around; ending with a trailing slash on both directories, as
 you said the first time, will always make the second directory mirror the
 first.

Ooops, that was a typo; I should have stopped
at the is good line.

Thanks for the correction and sorry 
for the noise



Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do I relocate /home ?

2008-02-09 Thread Matthew Hannigan
On Sat, Feb 09, 2008 at 09:57:30PM +1100, Alex Samad wrote:
 
 rysnc -av /home.orig/* /home/ 

Using a * here will skip dotfiles in /home.orig.
There's probably none there but you never know.
Secondarily, anytime you use * you make it possible
to exceed to command line length.

It's sufficient to use a trailing / to get
everything in /home.orig.

So just
rsync -av /home.orig/ /home/
is good


Note for rsync newbs; 
rsync -av /home.orig /home/
is different from
rsync -av /home.orig/ /home/
The first will do what you want, the
second will create /home/home.orig/

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-02-01 Thread Matthew Hannigan
On Wed, Jan 30, 2008 at 06:27:17PM +1100, Bruce Bruen wrote:
 
 but what I want to know is this
 
 
 Has anyone interest in VirtualBox?  I have so much fun with it today that - 
 oh 
 damn I've run out of ex-whatitsnames, its' so good!
 
 But then again there's always questions. Has anyone surgically played with 
 this?

Thanks for the intro Bruce!  To answer your question, no, since
I bought vmware a while ago and it's very good too.  But I'm looking
forward to playing with VirtualBox.

Regards,

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] BWOI: Hi

2008-01-31 Thread Matthew Hannigan
On Wed, Jan 30, 2008 at 08:27:38AM +, Rev Simon Rumble wrote:
 Good grief!  Is this output from some spam engine's scanning of the list 
 or is it the effect of writing COBOL on a human being's brain?

Not satisfied with being either rude or whiny,
today you've gone both!



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


  1   2   3   4   5   6   >