Talk to a human

Here is a cool site that list what to do when calling companies with long menus and you want to speak to someone. It does not say what to do when the person you talk to wants transfer you to another person who said hold while I transfer you.. nice idea here.


http://www.gethuman.com/us/

Tunneling / port knocking / etc

It has been a while since I learned and tried tunneling over ssh adn looked at the port knocking docs. Listening to binrev (162) I learned that you can tunnel over dns. I googled for this and saw quite a while ago it was story on slashdot.

I just read another article that said people are also using ICMP messages as a tunnel. I thought this was pretty cool. Here is the link to the story:

http://blogs.zdnet.com/Ou/?p=261

date command with unix and utils

date.exe +%Y%m%d%H%M%S

C:\>c:\unxutils\usr\local\wbin\date.exe +%Y%m%d%H%M%S
20060307134035

I use this often in scripts and wanted to put it here so I can always find it.

Active Directory and Group Policy

Group Policy Tips:

1) The Microsoft Group Policy Management Console (GPMC) is the best method to manage group policy without purchasing additional tools.

Some 3rd party vendors had tools like this for Windows 2000, but finally Microsoft simplified management of group policy through native tools.

to read more and download look at:
Where can I download the GPMC console for Windows Server 2003/XP?
http://www.petri.co.il/download_gpmc.htm


2) Specifying a Domain Controller for Editing Group Policy
http://technet2.microsoft.com/WindowsServer/en/Library/0e05bfcf-786c-4ada-9601-616f8da401ee1033.mspx

This goes into detail the way the tool at times uses the DC which holds the PDC emulator role, espically when performing an edit on a GPO.


3) When creating a policy be sure to select templates and remove all unneeded templates.
Group Policy can process fast and you can have some levels, the real thing that takes time to process is the ADM files. Removing unneeded template will cut down the ADM files.

Virtual Envirohttp://www.blogger.com/img/gl.spell.gifments - VMware and Microsoft's

I often use Vmware Player and/or Microsoft's Virtual PC. A project for work now involves getting a PXE Network Boot Server Setup, to do so I wanted to see if either VMware of Microsoft virtual enviroments support PXE network boot.

Virtual PC virtualized Network Card
Intel 21140 also sometime labeled DEC
http://blogs.msdn.com/virtual_pc_guy/archive/2005/01/26/361361.aspx


Vmware Player
Vmware ADM 79c970 PCNet32
http://www.etherboot.org/db/nics.php?show=tech_data&vendor=VMware+Inc.

Have a Linksys WRT54g?

I have a Linksys WRT54g and have been running DD-WRT for a few months. I am very happy with it. It allows me to ssh to the router and also use ssh tunnels.

Next steps for me are to setup mrtg and snmp for monitor stats + setup a method to send a WOL Magic packet to workstations inside.

DD-WRT Home Page

DD-WRT Wiki

DD-WRT Forums

Some tips:
From Web Administration->Status->Lan->DHCP Clients Table
wl assoclist - shows all wireless client macs.
cat /proc/net/arp - shows all active clients in your network with IP and mac
dumpleases - gives you all DHCP-Client leases.

cat /proc/net/ip_conntrack - shows all incoming and outgoing connections

Working with SNMP

Net-SNMP - Unix and CGU/ Linux SNMP tools and Agent. Has Windows Agent to offer an option other then the MS version. The cygwin utilities work very well.

GetIF
Windows GUI, lets you query adn browse mibs - a great Windows tool.

Here is a great site, they sell pro versions of SNMP
Search for and download Mibs
http://www.oidview.com/mibs/detail.html

Graphically view and download mibs, this link is for the F5 BigIP
http://www.oidview.com/mibs/3375/LOAD-BAL-SYSTEM-MIB.html

Usage notes, I found that Windows XP and cygwin Net-SNMP utilities share Windows enviroment variables which detail where mibs are stored. I found this when working with a specific SNMP tool and not seeing all mibs being processed, to get both tools to use the mibs I changed the Windows enviroment values.

MIBDIRS=C:\mibs

MIBS=all

Ubuntu Breezy 5.10 with MS VPC

Works will, default install defaults to a 24 bit color depth which is an issue for VPC. To change ti you must reboot the guest, hit 'esc' at the grub menu (you do not have a lot of time so be ready.) select the recovery mode, at the console login then use vi to fix the defaultdepth line in /etc/X11/xorg.conf from 24 to 16.

Working with Awk

Here are some links to info about Awk, as one of the pages states Perl can doo 100 times what awk can, however awk is on standard unix systems where perl may not be.

I used awk to make some custom adds to the SSL cert check script which I blogged about.

CLI Magic: Learn to talk awk


awk(1) - Linux man page


Awk Introduction - Explained by examples rather than by definitons


Getting started with awk

Where to look to understand DNS

A lot of MCSE types do not get DNS, if they do they only understand the basics and can not handle looking up a MX record with nslookup. Here is a link to some good articles about DNS.

DNS Subject Index at Setup32.com

List of my most used programs

Here are a list of programs that I install on most Windows systems I use:
Firefox
winscp
putty
ethereal
winpcap
filezilla
HTTrack
nmap
7zip
unxutils
tightvnc
vnccon / gencontrol ?

truecrypt

SSL Cert Checker

Found this cool tool with is a solution to a problem I have been searching for - checking SSL Certificates for expiration dates by passing the server and port.

This is great because I happen to manage several sites / services which use a combo of third party and self signed certificates. Also I can monitor when Active Directory Server certificates expire, they do renew automatically, however I believe a reboot is needed for the newly automatically requested certificate to be used? Not sure.


http://daemons.net/~matty/articles/checkcertificate.html

Google Advanced stuff

http://www.cyberwyre.com/data-mining-using-google/


also I should sign up on digg and have digg start tracking thing I like, why not better then book marking, relaying on history , etc.

Getting Security Logs From Windows 2003/2000 Servers

Need to get a script together to get security logs from multiple Windows 2000/2003 servers. Want the files compressed locally then xfered to centeral spot.


files:
GetAllLogs.cmd - gets date and time into enviroment variable and launches getsrvlog.cmd.





*********************************************************************************
GetAllLogs.cmd
for /f "Tokens=1-4 Delims=/ " %%i in ('date /t') do set dt=%%i_%%j_%%k_%%l
for /f "Tokens=1" %%i in ('time /t') do set tm=_%%i
set tm=%tm::=_%
set da=%dt%%tm%


echo %tm%
echo %da%



start cmd /c psexec \\server1 -c getsrvlog.cmd %da%
start cmd /c psexec \\server2 -c getsrvlog.cmd %da%
start cmd /c psexec \\server3 -c getsrvog.cmd %da%



*********************************************************************************

Devon with a fever

Devon has had a fever for the past day, no school today or yesterday. He had hit 102.x, he was pretty calm and sleepy last night when I got home from work. He was also realy lovey, saying "I Love You" to both Jen and I, giving us kisses multiple times.

We are going to see if he starts feeling better today.

My legs are starting to feel ok, on Tuesday they were more sore then Monday. Watch Biggest Loser 2 opener last night, I am going to attempt to watch this season without eating Ice Cream while watching.

First run in a while

I don't recall running since before june, I think near the time change even.

This past weekend was the neighborhood blockparty. John and Brain talked about running together once in a while. Last night I ran for a string 35 minutes, up to the tennis courts at the high school and back.

Still debating about getting a new TV, and if so what type. Ed’s Tv has 18 month no payments, no interest, however their prices seem to be higher.

Jen is talking about having just a few kids over for Devon’s birthday party. I never did the fence in the back yard so that is a problem.

Got to figure out what to put down in the back yard - fertilizer or grass seed, or patch master stuff plus start watering it, front too maybe.

Saw the Xmas SnowGlobe at Walmart $128, I think pretty cool, not sure if it comes with any lights?

Also need to get a tow hitch for the van. PepBoys wanted $189 plus 5 days to get it in.

Xen 2.0 Demo CD

I downloaded the Xen 2.0 Demo CD Beta 2 and tested it. Looks pretty cool, however for the GUI it needs to run on a system with 512MB RAM, only my laptop has that much. I also tried it on a Pentium II Dual CPU Dell PowerEdge server and it wouldn't run. I think the CD-Rom in the PowerEdge may have not been up to snuff.

I am trying to copy out the Xen kernel and boot files + root file systems over to my laptop's Debian install. I think it would save me some time.

I have in the past worked some with coLinux and User-Mode-Linux however never got to where I would have liked. coLinux worked great under Windows, thats a simple download and install, however I had issues each time I tried to build a custom Linux kernel which would be the host kernel for coLinux.

I would like to be able to have virtual machines under Linux for testing different items where I can easily backup machine before adding something new, and keep things seperate from each other. Nagios 2.0 is one of the applications I would like to run in a virtual Debian system.