- main - earth.li

don't panic...
by Neill Newman 06 Jun '01

06 Jun '01

below is a conversation I just had with a friend.. /some/ people might find this interesting. It certainly fooled me ;).. (btw, this was a production web server!)... Neill > > > > > > Neill Newman <neill(a)entora.co.uk> on 06/06/2001 16:50:38 > > > > Subject: wrapping uptimes ?? > > > > okies, I've experienced something weird... > > > > just checked my web server, was up for just under 500 days a few weeks > > ago, checked today, uptime = 9 days "oh no I've been hacked" I > > thought... I looked all through the logs, nothing is strange, no > > discontigious log entries (although it seems), no reboot messages in the > > logs.. I realise that this could be the work of a clever hacker, but the > > file modificatin times on /etc/passwd and the like are months old... > > > > it looks as if the machine hasn't been rebooted, but uptime says that it > > was rebooted 9 days ago ?? > > is it possible that I've experienced a magic uptime wrap ?? please tell > > me so, I don't fancy rebuilding this box ;)... > > > > Sz > > > > > Linux messures uptime in hundredth of a second in a 32bit interger. > > 2^32 = 4,294,967,296 > 86,400 seconds in one day = 8,640,000 hundredths of a secon > Therefore, 4,294,967,296 / 8,640,000 = 497.1 days > > You have just encountered the end of the uptime interger!! > > Andi > > p.s. The shell may confused on file dates et cetera -- Open Source Specialists http://www.entora.co.uk/ Tel: +44 (0)701 0723686 Fax: +44 (0)870 3214368

1 0

RE: [Alug] Re: A Couple of responses in one :
by Earl Brannigan 06 Jun '01

06 Jun '01

On 06 June 2001 10:44, Neill Newman [SMTP:neill@entora.co.uk] wrote: > > yes, a friend uses cobalt and he hates them with a passion, are these > the old non intel ones ?? or the newer i386 ones ? Its a 386 Raq4 Actually a good machine in general. I beleive the OS is based on Red-Hat 6.2 from what I can tell. RPM is installed but only for addit stuff. Patches etc must be via the pkg program. I haven't used it directly, there is a page in the admin interface from where you can install via an ftp URL. This is a bit of a pain because I have to run the Admin Interface via SSL which slows things a little. I'll have a mooch around the scripts and see what is actually happening and try to get you some better detail. > > > Actually I fully agree with you. I have an little script which daily checks > > the update site. (though I only have it advising me if there is a change, I > > haven't worked out how to get the updates automatically by script...if > > anyone has played with a cobalt you'll know that there is only one route > > for applying patches. > > I have to admit, I haven't pulled apart a cobalt, from what I can gleam > from their website they are running some form of redhat, is this right > ?? if so it will be very easy to intergrate auto updating into your > scripts, if it dosen't use rpms and you can point me towards the package > management docs I can soon convert any script to do what you want... I'm > in the process of converting the scripts to use the pkg program in > solaris. > > be warned when doing this though, I usually setup a seperate test > machine which the updates get applied to first (and tested!)... don't > just update directly from the update site.. this is considered a bad > thing (tm).... (remember tcp_wrappers!)... > > > If you're a bit of a wiz with scripts though I'd be glad to get some info > > off you. > > sure no probs... let me know what's on ya mind ;) Oh lots.... Will talk some more at the next meet. > > > Cheers > > Earl > > Cheers > Neill > > > -- > Open Source Specialists http://www.entora.co.uk/ > Tel: +44 (0)701 0723686 Fax: +44 (0)870 3214368

2 1

Deadrat name config
by David Freeman 06 Jun '01

06 Jun '01

Quick question: How do I configure the DNS on a deadrat box? The syntax seams different from what I'm used to. Thanks D __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail - only $35 a year! http://personal.mail.yahoo.com/

3 3

Re: A Couple of responses in one :
by Earl Brannigan 06 Jun '01

06 Jun '01

> Message: 1 > Date: Tue, 05 Jun 2001 15:40:45 +0100 > From: Neill Newman <neill(a)entora.co.uk> > Organization: Entora Ltd > To: "'alug(a)stu.uea.ac.uk'" <alug(a)stu.uea.ac.uk> > Subject: Re: [Alug] A Couple of responses in one : > > Earl Brannigan wrote: > > > > MJR Wrote : > > > I'd certainly still be interested. It would also be nice to be on the > > > sending end of one of these attacks for a change...! > > > > For a change!?!?!......been on the receiving end then? > > I have. > > Recently had to completely rebuild a webserver because it had been rooted, > > trojaned, backdoored etc. There was no way to undo the mess that had been > > caused. > > I beleieve it was hacked via a bind overflow. > > aarrgghhh how many times.. apply the updates and this is less likely to > happen..(not impossible mind you) > If you want I can do a 10 minute demo at the barbeque on how to make a > machine install updates automatically if it will encourage people to do > this... I currently have 30 or so machines doing automatic updates, and > I have to do about 5 minutes a week to make it work smoothly, all it > took was a little time upfront... > > I'm sure Earl will now verify, doing 5 minutes admin a week is worth it > when compared to a machine rebuild... especially when it is a production > machine.... Argggggggh to you too ! ;o) The Machine in question is a cobalt and unfortunately they're slightly later than most with updates. Actually I fully agree with you. I have an little script which daily checks the update site. (though I only have it advising me if there is a change, I haven't worked out how to get the updates automatically by script...if anyone has played with a cobalt you'll know that there is only one route for applying patches. If you're a bit of a wiz with scripts though I'd be glad to get some info off you. Cheers Earl

3 2

Re: [Alug] A Couple of responses in one :
by MJ Ray 06 Jun '01

06 Jun '01

Neill Newman <neill(a)entora.co.uk> writes: > does Debian (apt) check for changes before it upgrades ?? Yes, and it offers you choices including replace, keep and diff. > download the ISO's, insert CD, and select upgrade ;)... there have been Is there any "smarter" way than downloading ISOs? I hate doing that as it ties a machine up for hours by saturating its network connection. -- MJR

2 1

Re: [Alug] Every Sperm is Sacred: Misc thread mark 2
by Earl Brannigan 06 Jun '01

06 Jun '01

Hi David >David Freeman <david_freeman(a)rocketmail.com> wrote : > Message: 8 > Date: Tue, 5 Jun 2001 08:48:03 -0700 (PDT) > From: > Reply-To: David_freeman(a)rocketmail.com > To: alug(a)stu.uea.ac.uk > Subject: [Alug] Every Sperm is Sacred: Misc thread mark 2 > > OK first of yes I am listening to Montey pythons CD Montey Python > Sings. Enjoy... > > 5) Are there any SQL experts out there who would mind helping me with > some college work? Shoot. Cheers Earl

1 0

Re: [Alug] A Couple of responses in one :
by MJ Ray 06 Jun '01

06 Jun '01

David Freeman <david_freeman(a)rocketmail.com> writes: > > That's all well and good, but what do you do when the vendor's > > updates > > break core functionality required by your users? One thing Debian [...] > So true. I have a simple technique. MASSIVE firewall and a > discontinuous network connection. simple it works. I can't get local admins to agree to that, as it involves doing it at the network rack because the machines need to talk 100Mbps to each other. Sad, but true. Maybe after the next hack... -- MJR

1 0

Re: Red hair and black leather: Re: [Alug] Every Sperm is Sacred: Misc thread mark 2
by MJ Ray 06 Jun '01

06 Jun '01

David Freeman <david_freeman(a)rocketmail.com> writes: > > > 0) does anyone out there use LaTeX in anger? > How would I get my name to show up in the header? Look at the fancyhdr package. More options than you'll ever want! Suitable for a university thesis! Safe for children! Non-toxic! Sorry, that's from the "Invisible Jim" box again... -- MJR

1 0

Re: [Alug] Every Sperm is Sacred: Misc thread mark 2
by MJ Ray 06 Jun '01

06 Jun '01

In the spirit of the thread, I shall only answer even numbers. David Freeman <david_freeman(a)rocketmail.com> writes: > 0) does anyone out there use LaTeX in anger? Yes. Often furious. > 2) Contrary to what may seam I do know Coax and have used it. #bdsm > 4) Would people like a demo of 802.11b i.e. wireless lan equipment at > the next meet? Yes. > 6) NOOO question six Yes there is. See other thread. -- MJR

1 0

Re: [Alug] ALUG meeting 17 June
by MJ Ray 06 Jun '01

06 Jun '01

David Freeman <david_freeman(a)rocketmail.com> writes: > > lpr, lprng, pdq, CUPS, ... ? > er what? [...] > I want to set it up a simply as possible. Many different print systems. We can outline them on the day, but remember "simple" is in the eye of the beholder... -- MJR

1 0