Re: off subject - ip & bandwidth management

2004-02-25 Thread Rich Puhek
Gregory Wood wrote:

Problem 1: I have a couple of sites, one with 30 users, another with 500
users. The switches are unmanaged. Occasionally, someone won't be able to
log in or they will loose a network printer. I suspect one or more PCs are
soaking up the bandwidth.
Problem 2: I work with a local ISP. He has his system subnetted BUT there
are still folks who find a 'free' IP and use it. When the owner of the IP
fires up his system, he can't connect. Also, as above, he has seen the
'steady state' bandwidth increase but can't identify the users. He has CISCO
switches and I would have though they would have the tools to identify the
user consumption. Apparently not.
Is there a tool for monitoring who is using the bandwidth and with what MAC?
I've used Ethereal but it generates way too much detail. I would like to
load up a notebook and a hub and stick it between the server and the rest of
the network or between the Internet firewall and the network.
Ideas? Thoughts?

If the Ciscos are managed switches, try using MRTG to graph port usage. 
You should also be able to log on and show port info, check the docs for 
the switches CLI. Haven't used Cisco switches here, but something along 
the lines of "show int" should get what you need.

For individual bandwidth usage on a local subnet, iptraf provides a neat 
glance at "real-time" usage. If you're on a switched network, you'll 
need some way to see all the traffic on the network. For 3com switches, 
it's called something like the "roving analysis port" (better than using 
a hub near the firewall, just analyze the firewall's port). Iptraf will 
give a nice display of traffic in and traffic out, listed by MAC. Then 
it's just a matter of tracing down the MAC's location, and going to said 
location with a big stick in hand :-)

You might also want to nmap your network periodically. Look for 
surprising IP addresses.

You'll probably find misbehaving KaZaa servers to blame. They're very 
bad about playing well on a network, and will happily saturate your 
bandwidth.

--Rich



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


off subject - ip & bandwidth management

2004-02-25 Thread Gregory Wood
Problem 1: I have a couple of sites, one with 30 users, another with 500
users. The switches are unmanaged. Occasionally, someone won't be able to
log in or they will loose a network printer. I suspect one or more PCs are
soaking up the bandwidth.

Problem 2: I work with a local ISP. He has his system subnetted BUT there
are still folks who find a 'free' IP and use it. When the owner of the IP
fires up his system, he can't connect. Also, as above, he has seen the
'steady state' bandwidth increase but can't identify the users. He has CISCO
switches and I would have though they would have the tools to identify the
user consumption. Apparently not.

Is there a tool for monitoring who is using the bandwidth and with what MAC?
I've used Ethereal but it generates way too much detail. I would like to
load up a notebook and a hub and stick it between the server and the rest of
the network or between the Internet firewall and the network.

Ideas? Thoughts?


Thanks in advance.

Gregory Wood
Farsight Voice Data Solutions
1219 W University Blvd.
Odessa TX 79764
Voice: 432-335-0879 x234
BEGIN:VCARD
VERSION:2.1
N:Wood;Gregory
FN:Wood, Gregory
NICKNAME:ChaosID:0234342934
ORG:Farsight Voice Data Solutions
TITLE:Owner
ADR;WORK:;;1219 W University Blvd.;Odessa;Texas;79764-7119;USA
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:1219 W University Blvd.=0D=0AOdessa, Texas 79764-7119=0D=0AUSA
ADR;HOME;ENCODING=QUOTED-PRINTABLE:;;=0D=0A
LABEL;HOME;ENCODING=QUOTED-PRINTABLE:=0D=0A
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20030818T135319Z
END:VCARD


Re: a trojan is on your computer!

2004-02-25 Thread Marty Landman
At 12:57 PM 2/25/2004, [EMAIL PROTECTED] wrote:

And I have found your pc. Your pc is open on the internet for everybody!
Because the lsass.exe trojan is running on your system.
http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/

Check this, open the task manager and try to stop that!
From what the page above says, if you can still run with lsass stopped 
your computer //will be open.

Sorry for my bad english!
Bad English is no problem... bad research (at minimum) is

Marty Landman   Face 2 Interface Inc 845-679-9387
Free Formmailer: http://face2interface.com/Products/Formal.shtml
FormATable  DB: http://face2interface.com/Products/FormATable.shtml
Make a Website: http://face2interface.com/Home/Demo.shtml
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


a trojan is on your computer!

2004-02-25 Thread gaeta . stage8
hello, I am from Switzerland and you'll don't believe me,
but a trojan horse in on your computer.
I've scanned the network-ports on the internet. (I know, that's illegal)
And I have found your pc. Your pc is open on the internet for everybody!
Because the lsass.exe trojan is running on your system.
Check this, open the task manager and try to stop that!
You'll see, you can't stop this trojan.
When you use win98/me you can't see the trojan!!

On my system was this trojan, too!
And I've found a tool to kill that bad thing.
I hope that I've helped you!

Sorry for my bad english!

greets

Norton AntiVirus eliminato1.txt
Description: plain/text


Re: fake

2004-02-25 Thread Shawn Wells
I will be out of the office from Monday, Feb. 23 returning on Monday, March 1.  I will 
be checking email periodically and will make every effort to respond to you in a 
timely manner.  If your request is of an urgent nature, please contact Kallie Chandler 
at [EMAIL PROTECTED] or 1-902-835-3320 x230 and she will assist you.

Regards,

Shawn Wells
Important: This e-mail and any files transmitted with it are private and confidential 
and are solely for the use of the addressee. It may contain material which is legally 
privileged. If you are not the addressee or the person responsible for delivering to 
the addressee, be advised that you have received this e-mail in error and that any use 
of it is strictly prohibited.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: fake

2004-02-25 Thread Jensen McClean
I will be away from the office from Feb.23 - Feb.29.  I will be responding to e-mails 
upon my return to the office.

If you are currently advertising with Covers.com and you require any immediate 
assistance with your current campaign (Banners, Articles, Press Releases, etc.) please 
contact Anne Girouard at [EMAIL PROTECTED]

Thanks.
Jensen
Important: This e-mail and any files transmitted with it are private and confidential 
and are solely for the use of the addressee. It may contain material which is legally 
privileged. If you are not the addressee or the person responsible for delivering to 
the addressee, be advised that you have received this e-mail in error and that any use 
of it is strictly prohibited.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: why to reinvent the glue? [Re: Starting isp and going to use Debian]

2004-02-25 Thread Emmanuel Halbwachs
Adam ENDRODI a écrit :
-apache
What information could Apache read from LDAP?
Authentication ?

Cheers,
--
Emmanuel HalbwachsLaboratoire de Photonique et Nanostructures
tel : (+33)1 69 63 61 34  CNRS UPR 20
fax : (+33)1 69 63 60 06   Route de Nozay
mailto:[EMAIL PROTECTED] 91460 Marcoussis France
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: why to reinvent the glue? [Re: Starting isp and going to use Debian]

2004-02-25 Thread Adam ENDRODI
On Wed, Feb 25, 2004 at 01:57:40PM +0100, David Zejda wrote:
> > > 3. User management
> > 
> > LDAP (with a lot of "glue" we've coded up in php and python)
> 
> is there any project, that provides The Glue?

There are a number of projects that try to help maintaining
the directory and to migrate from /etc/passwd.  Browse
freshmeat, it will show several hits.

> ldap/sqldb->config files for
> -postfix

Has built in support.

> -courier
> -nsd

Don't know.

> -apache

What information could Apache read from LDAP?

> -ssh

It works, thanks to libnss-ldap.

We, too, had to code up some utilities to replace useradd,
passwd, etc.  because we found no suitable solutions.
In fact, we've concluded that LDAP a pain to administer.
But it has its own benefits.

bit,
adam

-- 
Am I a cleric? | 1024D/37B8D989
Or maybe a sinner? | 954B 998A E5F5 BA2A 3622
Unbeliever?| 82DD 54C2 843D 37B8 D989
Renegade?  | http://sks.dnsalias.net


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Thank you for your interest in The Breakwaters.

2004-02-25 Thread Gramjrs999

send info re prices, availability 4/5,6,7, ocean front room, and other features of The Breakwaters.


why to reinvent the glue? [Re: Starting isp and going to use Debian]

2004-02-25 Thread David Zejda
> > 3. User management
> 
> LDAP (with a lot of "glue" we've coded up in php and python)

is there any project, that provides The Glue?

ldap/sqldb->config files for
-postfix
-courier
-nsd
-apache
-ssh
-...
(modular design preffered)

thanks
Dvid


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: squid-wccp-kernel-2.6

2004-02-25 Thread Arkadiusz Miskiewicz
Dnia Saturday 21 of February 2004 14:31, Konstantin Kostadinov napisał:
> hi folks,
>
> a week ago i try to switch our company web-cache on 2.6.2 kernel, we use
> some "cisco stuff" and ip_wccp module [ at now on 2.4 kernel ] for
> squid<->cisco router communication.
>
> i read "rtfm" ;) in cicso-squid.org for ip_wccp module compile for 2.6
> kernels but the case that i heave is that i can't compile the module
> because 2.6 kernels schema i different from 2.4 kernels.
>
> i found one cisco module modified for 2.6 kernels too.
> in two words, i fight one day with it but .. ;)
>
> if someone run ip_wccp on 2.6 kernel i'll be very grateful for some
> know-how
I'm not running it but...

http://ftp.yars.free.net/pub/software/unix/platforms/linux/kernel/drivers/ip_wccp-for2.6.0.c

echo 'obj-m := ip_wccp-for2.6.0.o' > Makefile
make -C /usr/src/linux SUBDIRS=$PWD O=$PWD V=1 modules

> tanks
> Konstantin Kostadinov

-- 
Arkadiusz Miśkiewicz CS at FoE, Wroclaw University of Technology
arekm.pld-linux.org, 1024/3DB19BBD, JID: arekm.jabber.org, PLD/Linux


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



RE: How do you deploy a new system ?

2004-02-25 Thread Marcel Hicking
--Monday, February 23, 2004 12:56:16 +0100 "Kaiser, Michael (ZIBP)"
<[EMAIL PROTECTED]>:

> 
> Hi
> 
>> We just boot our new machines remotely and are done within seconds.
>> It's not too flexible compared with FAI, but installation and 
>> maintenance
>> is _much_  simpler. 
> 
> as long as m23 is not capable of detecting and using hardware raid devices,
> it is far from being adopted as a viable alternative to fai or even 
> systemimager. m23's webbased gui is neat and a step towards enterprise
> adoption but as long as it lacks enterprise hardware support, it won't get too
> much attention. Don't get me wrong, I really LIKE m23, but systemimager and 
> especially FAI are far more advanced. At least technically.

Admitted, FAI is far more advanced & flexible but for our needs it's
unfortunatly in the same amount too complex to handle.
We have no problems with m23 and RAID hradware (at least with 3ware) but you
have to build your own kernel.

Cheers, Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: How do you deploy a new system ?

2004-02-25 Thread Richard Zuidhof
Lucas Albers wrote:
I would deploy debian on more desktops, but the hardware detections is
just not up to par compared to fedora 1.
only 1 in 4 does it successfuly detects and configures x.
I do not know what tricks Knoppix does to detect hardware but I think it 
detects better than normal Debian setup. I think a Knoppix install can 
be a nice start for a Debian desktop. I am running one as my primary 
workstation since almost three months now.

Richard

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]