KCLUG November 2004

kclug@kclug.org

54 participants
130 discussions

Today's Dr. Fun
by Gerald Combs 02 Nov '04

02 Nov '04

I though this was appropriate, since it's often a topic on the list: http://www.ibiblio.org/Dave/Dr-Fun/df200411/df20041102.jpg

1 0

Fwd: FW: Requirement : Perl Developer
by Steven Hildreth 02 Nov '04

02 Nov '04

This can in my mailbox this morning, thought maybe someone on the list might be a good fit. Regards, Steven (Tallen) ---------- Forwarded message ---------- From: Steven Hildreth <s_p_hildreth(a)yahoo.com> Date: Tue, 2 Nov 2004 15:49:16 -0600 Subject: FW: Requirement : Perl Developer To: sphildreth(a)gmail.com ________________________________ From: Vijay_Ittc [mailto:vijay@ittblazers.com] Sent: Tuesday, November 02, 2004 2:05 PM To: s_p_hildreth(a)yahoo.com Subject: Requirement : Perl Developer Hi , We need Perl Developer for a project located in Overland park, Kansas. The project is for 6 months (Extendable) and Our Client requirements are, Job Duties: Perl, PHP, SQL, HTML, Kornshell, Unix, AIX,Solaris expert. Perl is the primary requirement. Familiarity with the DBI, Net::FTP & Expect modules will be After that, basic SQL skills on any database. Ksh scripting is a plus, scripting on AIX & Solaris is also a plus. The candidate will spend the bulk of their time taking high level direction, doing their own analysis, then designing and building solutions in coordination with the client. Please reply with resume/ rate per hour/ Contact details ASAP Thanks and Regards, Vijay PH: 732 875 1591 Fax: 732 875 0096 IT Trailblazers New Brunswick Technology Center Mail Box B-10 100 Jersey Avenue Suite B201 New Brunswick, NJ 08901 vijay_s(a)ittblazers.com www.ittblazers.com

1 0

HOWTO: install cheap RTL8180 wireless PCMCIA card in Linux
by Leo Mauler 02 Nov '04

02 Nov '04

Using ndiswrapper to make a RealTek 8180 wireless card work properly. Rather than bother with the proprietary drivers for Linux, use this one instead. Both URLs are the same link. http://tinyurl.com/657j5 http://www.linuxquestions.org/questions/showthread.php?postid=877345#post87… __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

7 12

Re: Tier 3 Support Shirts
by Brian Kelsay 02 Nov '04

02 Nov '04

Cool, but can you center the wording? How about this centered: I'm not Ignoring you, I'm TIER 3 Is that too many lines? Brian Kelsay >>> Bill Cavalieri <> 11/02/04 01:48PM >>> Last meeting after the meeting, we talked about needing Tier 3 shirts. No markup on price. Front left pocket area says: "TIER 3" Back centered says: "I'm not ignoring you, I'm TIER 3" Long Sleeve Tee-shirt $18.99 http://www.cafepress.com/lumensoftware.14176963 Sweatshirt $20.99 http://www.cafepress.com/lumensoftware.14177111

1 0

Tier 3 Support Shirts
by Bill Cavalieri 02 Nov '04

02 Nov '04

Last meeting after the meeting, we talked about needing Tier 3 shirts. No markup on price. Front left pocket area says: "TIER 3" Back centered says: "I'm not ingnoring you, I'm TIER 3" Long Sleeve Tee-shirt $18.99 http://www.cafepress.com/lumensoftware.14176963 Sweatshirt $20.99 http://www.cafepress.com/lumensoftware.14177111

1 0

"lsof -o" under Linux
by Gerald Combs 02 Nov '04

02 Nov '04

Does anyone know if it's possible to make lsof (or any other utility) print file descriptor offsets under Linux? It seems like this ought to work, it being 2004 and all.

3 3

RE: Cron
by Brian Densmore 02 Nov '04

02 Nov '04

Thanks all for the suggestions. Here's my latest update. Cron is not running the script in the cron.daily directory. I'm using Vixie cron. Cron is running the root crontab I created for it, but I really wanted it to be part of the system cron jobs. So, now I have the script working and running, but I would like to figure out why the system cron job is not running. Anyone?

1 0

re: ndiswrapper
by Jonathan Hutchins 02 Nov '04

02 Nov '04

As I understand it, there is the potential for 802.11g cards to disrupt, or at least use, frequencies that are used by the military. Manufactureres have, according to rumor, been pressured not to release information that would allow users to select these frequencies. Open Source software does not provide any means for manufacturers to do this, and aparantly locking down the available frequencies in the hardware is impractical. This is just rumor - I have seen no confirmation that there has been any pressure on the manufacturers, nor can I confirm that this potential is anythnig more than an excuse to stick to a propietary model. That said, http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Linux.Wireless.drivers… Lists two 802.11g device driver projects, the Prism54 driver at http://prism54.org/ and the Intell IPW2200 at http://ipw2200.sourceforge.net/. A little searching finds the prism-based Tekram TM-802G available from pcbay.com at $22.98 shipped. This article says that Intel is releasing Linux drivers for it's Centrino platform: http://news.zdnet.co.uk/software/linuxunix/0,39020390,39156340,00.htm Here's an article from someone who picked up a prism based Netgear WG511 for $35 a year ago - gotta be cheaper now: http://toys.lerdorf.com/archives/15-802.11g-Netgear-WG511-and-Linux.html So it's just a matter of putting in the effort to find one that works, even if you really want 11g speed for $25.

3 2

newly arrived on list
by Bailey, Michael L [NTK] 01 Nov '04

01 Nov '04

Hello, I just joined the list. Hoping to attend some meetings. The downtown KC library is a beautiful place. Linux has been good to me. I had worked my way through customer service positions in Sprint in Florida (operator, repair clerk, various kinds of service rep) Got interested in Linux in 1996 and spent a few hundred dollars on books for this free software, learning a lot about computers. Sprint in 96-97 paid for me to take a Unix class (SCO!) and I got a CCNA through self-study with no hands-on. Partly on the strength of those credentials I got a promotion in 2000 into the ATAC testing trouble tickets here in Kansas. Not a 1-to-1 mapping of skills, but the UNIX and Linux pay off in many ways. This past February I got into PCS translations, and am currently on loan to Physical Layer Provisioning working on dial-ip disconnects. I consider my interest in Linux the main factor in migrating from customer service to more technical positions. It's nice to read Paul Taylor's notification of a job opening up in Security - though I can't do a normal job bid till February. I'd make the leap in a minute, though, especially if I could get a night shift...maybe something will come up later. (If one were thinking of that move, would free time be better invested in re-certifying the CCNA which ran out in 2003 or in other lines of study?) Currently only have a Knoppix live CD and have been doing only some minor playing on a low-end PC. Have installed over the years and fooled with Red Hat, Slackware, FreeBSD, Debian. Getting geared up to try Linux from Scratch but keep getting distracted by home improvement projects (my wife and I live with our 2 cats and 3-legged black Lab in a little 1920's vintage home with numerous opportunities for that) Sorry to ramble on like this. All of the people I've met through Linux have been really nice, so I hope you'll pardon my verbosity. I'm looking forward to contributing something to the group, if I can. Despite having played with GNU/Linux since 1997, I can't claim that my skills are world-class, but I'd like to learn more. Have a nice day, Michael Bailey

3 2

RE: Crackers and correlations
by Brian Densmore 01 Nov '04

01 Nov '04

I get this type of attack also. The latest one is different in both the length of time spent on it and the distinct characteristic of only attempting to gain root access. By all indications, this was a scripted attack. The port numbers used seemed to follow a general upward trend with a pseudo-random reset to a lower port. I'm sure there are multiple scripts for running brute force attacks of this kind. I expect the scripted attacks to grow ever more sophisticated over time, as there is definitely a professional bent to system cracking these days. I do have a question for y'all. Is there some non-crippling thing I can do to my system to detect an attack and : 1) send me an email (optionally), 2) log the conversation for xxx seconds, 3) automatically update the firewall to block the offending user/script. Keep in mind I'm running on an antique here: Pentium Pro 200 MHz @ 40MB RAM w/ ~8 GB of disk. P.S. - I have an email and phone call in to the good people at the USDA and will update you all on anything I may find out. Assuming they will ever admit that one of their PCs has been compromised. > -----Original Message----- > From: Dustin Decker . > > I've been seeing a lot of traffic that behaves in similar > fashion, across > sensors deployed on various ISP's for which the only common > link is being a > client of mine, and the attacks. I (and more importantly my > clients) stay > off the radar pretty well, so I am inclined to think this is > a scripted > process, executed after a root-kit is installed etc. to further the > conquest. > > If you watch the behavior, and the ascending port numbers, it > looks more and > more like I am correct. What I find interesting is the > sources change over > time, and then we see the script trying an even larger number > of user names. > > Another reference point - I see this a lot more on roadrunner > clients than > any others. Someone is ramping up for something, looking for launch > platforms is my guess. Anyone interested in seeing the > entire conversations > (rather than the logged info below) can drop me an e-mail and I will > obfuscate things and offer 'em up. Due to confidentiality > clauses in my > contracts, I will have to munge the IPs that I am protecting, > and make a > mess of the checksums etc. >

6 10

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG November 2004