Re: [Leaf-user] dachstein rooted
On 11/27/01 at 11:35 PM, guitarlynn <[EMAIL PROTECTED]> wrote: > I put a dachsrein beta firewall up last week at the house, > it works great. My wife got into an apparent ongoing > battle in which several people in a yahoo chat room were > hit with a buffer over- flow (affecting windows client) in > the chat program. The room was actually being monitored by > a level 2 government employee that was assigned to the > room to monitor for script-kiddies, and she got one of > them. Unfortunately, the kiddie got my ip addy and DDoS'ed > it (from what I dug out of the logs before they filled). > This was fine (lol), except I cannot find any info in > auth.log and user.log. I am assuming the box has been > cracked, probably root kitted and they erased the two log > files. The box is still up and the gov official (and maybe > Charles or someone else) would like an image of the Ram > disk to analyzeparticularly for a foot- print of the > attacker. > > My question, how do I make an image of the RAM disk??? Can > I simply back up the entire disk and send it, or is there > another way??? The simplest way to make an image of a disk is (assuming the relevant applications are present): dd if=/dev/ of=- | gzip -9 -c - | nc \ some.other.machine.somewhere 18714 ...and on some.other.machine.somewhere: nc -l -p 18714 | gunzip -c - > disk.image ...I'm not sure about the parameters for gunzip, but you get the idea. Of course, if you've rebooted, your RAM disk is lost - but you knew that, certainly. Remember that everything you do will change your environment. Also remember - if you are "rootkitted", then all of your usually useful applications are now reporting what the attacker wants you to see - and not the real thing. Of course, you may not be rootkitted at all. You don't have a compiler on this box, so root kits can't be compiled. You are running glibc 2.0.7, so any precompiled root kit binary compiled on a recent distribution will segfault. You are also not running all of the glibc libraries, so a root kit binary is more likely than most to require a missing library. Also, the action of most root kit binaries is likely to be identical to their larger counterparts. Lastly, you'll probably find your disk free space to have shrunk drastically. Finally - some of what the rootkit may replace may actually be shell scripts - or even, multipurpose shell scripts. In such situations, if other programs related to the shared script start acting like one single binary, then it's been overwritten - for example, if cut & grep & who & whoami & ... all start acting like who, then someone must have replaced your shared script with a who binary. All in all, I think a root kit of Dachstein (or any LEAF) will be rather noticeable -- David Douthitt UNIX Systems Administrator HP-UX, Unixware, Linux [EMAIL PROTECTED] ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] dachstein rooted
I put a dachsrein beta firewall up last week at the house, it works great. My wife got into an apparent ongoing battle in which several people in a yahoo chat room were hit with a buffer over- flow (affecting windows client) in the chat program. The room was actually being monitored by a level 2 government employee that was assigned to the room to monitor for script-kiddies, and she got one of them. Unfortunately, the kiddie got my ip addy and DDoS'ed it (from what I dug out of the logs before they filled). This was fine (lol), except I cannot find any info in auth.log and user.log. I am assuming the box has been cracked, probably root kitted and they erased the two log files. The box is still up and the gov official (and maybe Charles or someone else) would like an image of the Ram disk to analyzeparticularly for a foot- print of the attacker. My question, how do I make an image of the RAM disk??? Can I simply back up the entire disk and send it, or is there another way??? Thanks in advance, ~Guitarlynn Lynn Avants -- if linux isn't the answer, you've got the wrong question ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Dhclient Release
Sorry but I'm linux newbie. Where I can get file ifdown that would work with Dachstein. I need this file to release ip from nic on lrp box. Andrey Simon Bolduc wrote: > As I mentioned in the email you are responding to.. :) > > "As far as I can tell Dhclient 2.x doesn't have the ability to force an IP > release.." > > but Dhclient 3.x does. Which was why I was asking if anyone knows if such a > package exists > ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Default editor for lrcfg in Dachstein-CD 1.0.1
Hi, How do I change the default editor to vi in DS-CD 1.0.1? Thanks, Stephen ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Loading Net Drivers in DS 1.0.1
Bob Smith wrote: > Hi, > > I have been testing DS on a new box (floppy boot), I have been working = > with LRP for about 1.5 years.=20 > > I edited the Modules file, did a partial backup of the modules package. = > I know the edits are working, since the masq drivers that I selected are = > all working.=20 > > When I mount the CD, copy the file locally (/lib/modules/2.2.19 - which = > seems to be the path it wants the files in) , and try to manually load = > the modules, I get: > INSMOD: not an ELF file > INSMOD: Could not load the module: No such file or directory > > dmesg does not show any errors, and the only network interface that I = > see loaded is brg0.=20 > > What command is used to display my adapter settings, as ifconfig tells = > me the file is not found? > lsmod is the command to show what modules have been loaded to support the kernel. insmod, rmmod and lsmod are your module commands. > The drivers that I am trying to load are 8930, ne, pci-scan, and = > rtl8139. I check the modules.conf file, and the default paths and = > loadlines are there to load the cd and change directories, I have even = > tried to specify the path to the drivers eg. /net/ne hmmm I once tried to setup an esb2 box with two different adapters. I presume that is what you are doing here with the list of modules that you provided. After being cheap I bought another card to match one of the two so that they were both the same kind. Finally the modules loaded for the Ethernet adapters. I am on rc3. I tried lsmoding the modules you listed and they worked ok--not that it counts because of the different images. If you can load two different ethernet cards ok, I really think the hint may be in the order your /etc/modules loads the drivers. If you look on your cd in /lib/modules for modules.dep it lists the module dependencies. 8390.o has to be loaded before ne.o and pci-scan.o must be loaded before rtl8139.o. You may want to list the eth0 modules before the eth1 modules in the /etc/modules file since it looks like you are trying to use two dissimilar cards. A program reads /etc/modules and loads the modules in the order that you have them listed in the file. Backup and reboot. > > ! mount iso9660 /dev/hda > > ! dir /lib/modules/net I think these are just directives to the module loader program. They won't work at the command prompt. > > These do not seem to working. Any help would be appreciated. > > Cheers > I hoped this helped, Greg ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] lynx error loading shared libncurses.so.4 -- Dachstein CD 1.0.1
Charles Steinkuehler wrote: > > # lynx [any.or.no.web.address] > > lynx: error in loading shared libraries > > libncurses.so.4: cannot open shared object file: No such file or directory > > The first thing to try is loading the ncurses lib (lncurses.lrp), and see if > that get's you going... > Thanks, Charles. That was the ticket. Did I miss that lncurses.lrp requirement in the currently available docs, or is knowing where to look for missing libs just a common knowledge item for the people who are most likely to be installing these additional packages? For other casual users, the same logic applies when loading Jacques Nilo's sshd.lrp; libz.lrp needs to be loaded first. As you continue your effort of reaching out to the broader audience, and as the General Use Docs get written, details like this will be very important to the novice, imho. Over the past 2 years I've used Materhorn, Eigerstein, ES2b, both at home and as my company firewall and primary dns. I consider the contributions of the LRP/ LEAF developers to be of immense value. I am grateful that you all do what you do. _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Wanted for Dachstein : IPSec with X.509 patch
> Charles - You have a lab rat! I've been trying to get x.509 to work with > 2.2.19. I've compiled the utils seperately, but pluto doesn't seem to > execute correctly unless it's used with the kernel for which it was > compiled. I've compiled the 2.2.19 kernel using your 2.2.19-2-source > distribution in redhat 7.1 with rpm's installed for backward compatibility. > Fine. But when I add in freeswan-1.91, the compile barfs in so many ways > (even when using kgcc) - never mind the x.509 patches. the x.509 patches > are easy enough to apply . . . > Then just build as normal. > > I'd also consider installing the distribution you're using to build the > kernel to do this myself if you tell me what it is. See the latest Dachstein-CD. The x.509 patched versions of the userspace utilities required are included. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Wanted for Dachstein : IPSec with X.509 patch
Charles - You have a lab rat! I've been trying to get x.509 to work with 2.2.19. I've compiled the utils seperately, but pluto doesn't seem to execute correctly unless it's used with the kernel for which it was compiled. I've compiled the 2.2.19 kernel using your 2.2.19-2-source distribution in redhat 7.1 with rpm's installed for backward compatibility. Fine. But when I add in freeswan-1.91, the compile barfs in so many ways (even when using kgcc) - never mind the x.509 patches. the x.509 patches are easy enough to apply . . . cd /usr/src tar xfz x509patch-0.9.4-freeswan-1.91.tar.gz cd x509 . . . cp pluto.diff ../freeswan-1.91/pluto cp auto.diff ../freeswan-1.91/utils/ cd fswcert cp _confread.patch ../../freeswan-1.91/utils cd ../../pluto ; patch -p1 < pluto.diff cd ../utils ; patch auto auto.diff ; patch _confread _confread.patch Then just build as normal. I'd also consider installing the distribution you're using to build the kernel to do this myself if you tell me what it is. Thanks! jk FROM: Charles SteinkuehlerDATE: 11/08/2001 10:49:23SUBJECT: RE: [Leaf-user] Wanted for Dachstein : IPSec with X.509 patch I believe someone has already posted a request for FreeSwan 1.91 with the > X.509 patch applied. I was wondering if this could be made available in the > DachStein CDrom image. Is this possible Charles? The added functionality > would be greatly appreciated. > The reason I ask is that I need to support both subnet to subnet road > warrior (freeswan to freeswan) and subset to host road warrior (freeswan to > windows 2000). The difficulty is that windows 2000 only supports PSK and > X.509 certificates. Freeswan , to support subnet to subnet and subnet to > host in road warrior, requires 2 different connection entries. Since > windows 2000 forces me to use PSK, freeswan cannot differenciate between > the 2 connection types. > Using X.509 certificates for all would allow a connection entry for each > individual, regardless of type( subnet to subnet or subnet to host). > Sorry to be so long winded. If anyone can point out a solution not > requiring X.509 certificates, I would appreciate the suggestion!. The main reason I haven't applied the x.509 patch is twofold: I don't need it, and I have no way of testing it. If someone is willing to play lab rat and test an IPSec package with the patches applied, I'll compile the user-mode code with the patches applied (no mods required to the kernel space code, AFAIK). Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] [n00b] Mad packet loss on Dachstein Firewall
OK, so I've got my dachstein firewall up and running (hooray!), no DHCP since I already have a Windows 2000 Domain controller handling such duties, and the DSL is business DSL so the external IP is assigned. NOW, my problem is that when I try to ping the firewall itself or anything beyond it, I suffer at least 50% packet loss. When I used DHCP on my home set up, I didn't have this kind of problem, so I'm assuming I messed a setting up somewhere, but I have no clue where to start. Any suggestions would be helpful. Thanks! ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Announce: updated keyboard.lrp
I have updated KP Kirchdörfer keyboard.lrp package.
1/ Now provides 45 keymaps: japanese, portuguese, you name it... I have
only tested the French one :-) and KPK the German one.
2/ The remove option ("/etc/init.d/keyboard remove") automatically
remove unused keymaps in /usr/share/keymaps: this reduce the size of the
package from 11K to 1K :-)
3/ The dumpkmap program (statically compiled against uClibc) can be
downloaded from my web page. If you like your main box current keymap
just run "./dumpkmap > mykey.map" and you are done. UNTESTED: please
report success/failure
4/ Finally documentation is now online at
http://leaf.sourceforge.net/devel/jnilo/keybd.html
Cheers
Jacques
___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Announce keyboard.lrp
Am Dienstag, 27. November 2001 16:25 schrieb Luis.F.Correia: > Hi! > > I thought I let all of you know this: > > I downloaded one of the Dachstein floppy versions and tried the > keyboard.lrp that Kirchdörfer sent me. > > All of the 'regular' Portuguese specific keys work except the 'famous' > dead keys. This means that it's more than enough if you don't need to > write stuff using 'perfect' Portuguese. > > As you might not know, Portuguese uses a LOT of accented words. > If you need to wirte them, use the un-accented version. Plenty of room for improvements to get the "dead-keys" available... But there is more: J.Nilo not just added the lrp and a small doku to his webpage, he also added another 40 maps to keyboard.lrp. You'll find version 0.3 at: http://leaf.sourceforge.net/devel/jnilo kp ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] dachstein floppy rc2 package compatibility
> Hello, > I'm hoping to move from e2b to Dachstein RC2 tomorrow and wanted to ask: > > - Will Jacques Nilo's dnscache, tinydns, axfdns and the daemontl.lrp > work ok with rc2 floppy ? rc2 is not readily compatible with those packages. rc3 should and the latest CD version is OK. Charles has not released the latest floppy image with the changes that were introduced in the CD version. > - Surfing through the archives I saw that there was an intention to > release Dachstein-floppy soonish (past RC2). But I can't see any > indication in the archives or on the LEAF/steinkuehler sites that this > occured. Should I wait? :-) > > - I can see from the archives there has been a lot of past discussion > about ssh (daemon, keygen, client) packages and which to use. For e2b, I > once again used Jacques' openssh packages. Is this a good idea for > Dachstein floppy ? The latest version of openssh is available on my web page. Also on Charles dachstein CD. Works without any pb on dachstein. Jacques ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Dachstein on HD
Too fast with my fingers!!! Charles is there some package like hdsupp.lrp for reserfs??? I found reiserfs.o on but none "mkreiser"?? Where can i look for them?? Thanks Sergio -Mensaje original- De: Sergio Morilla Enviado el: Tuesday, November 27, 2001 16:23 Para: 'Charles Steinkuehler' Asunto: RE: [Leaf-user] Dachstein on HD reiserfs? Sounds interesting!! Any tips on setting up a Dachstein + IDE reiserfs I was using (and feeling quite confortable) with ext2 on some non firewall servers. Is reiserfs stable (on LRP)?? Sergio -Mensaje original- De: Charles Steinkuehler [mailto:[EMAIL PROTECTED]] Enviado el: Tuesday, November 27, 2001 16:19 Para: Sergio Morilla; Leaf-user@lists. sourceforge. net (E-mail) Asunto: Re: [Leaf-user] Dachstein on HD > # insmod ext2.o > Using ext2.o > insmod: unresolved symbol link_lookup_dentry > > Any clues?? I got reports about nfs.o doing the same thing. Could be a problem with the kernel or modules...I haven't personally tested any filesystems other than isofs (which works), and some early experiments with rieserfs. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Dachstein on HD
> # insmod ext2.o > Using ext2.o > insmod: unresolved symbol link_lookup_dentry > > Any clues?? I got reports about nfs.o doing the same thing. Could be a problem with the kernel or modules...I haven't personally tested any filesystems other than isofs (which works), and some early experiments with rieserfs. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] dachstein floppy rc2 package compatibility
> I'm hoping to move from e2b to Dachstein RC2 tomorrow and wanted to ask: > > - Will Jacques Nilo's dnscache, tinydns, axfdns and the daemontl.lrp > work ok with rc2 floppy ? > > [I have seen that Charles has included a dnscache in rc2 but Jacques' > lrp seems to integrate better with tinydns (?). From lurking, I > understand that Dachstein-CD eventually used these ? Is it sensible to > grab packages from the CD world and hammer them into an RC2 floppy?] This makes perfect sense, and is part of what I need to do to turn the RC2 floppy into V1.0 > - Surfing through the archives I saw that there was an intention to > release Dachstein-floppy soonish (past RC2). But I can't see any > indication in the archives or on the LEAF/steinkuehler sites that this > occured. Should I wait? :-) It depends on your patience level. I wanted to get the floppy release posted before thanksgiving, but somehow, the real-world just keeps messing up my plans... > - I can see from the archives there has been a lot of past discussion > about ssh (daemon, keygen, client) packages and which to use. For e2b, I > once again used Jacques' openssh packages. Is this a good idea for > Dachstein floppy ? Yes...Jaques' openssh packages are what I now use on the CD version of Dachstein, and what I would recommend using if you need ssh. Charles Steinkuehler [EMAIL PROTECTED] ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Dachstein on HD
Hi, I´m trying to set up Dachstein RC2 on a hard disk. So far I got my DRC2 (it remembers me R2D2), but when it tries to mount the device i got a message: mount: Mounting /dev/hda2 on /storage failed: Operation not supported by device I have ext2.o in my /etc/modules After checking for some error on the configuration files I tryed lsmod # lsmod Module PagesUsed by ip_masq_vdolive 1180 0 (unused) ip_masq_user3708 0 (unused) ip_masq_raudio 2980 0 (unused) ip_masq_portfw 2416 0 (unused) ip_masq_mfw 3196 0 (unused) ip_masq_irc 1924 0 (unused) ip_masq_ftp 3576 0 (unused) ip_masq_cuseeme 964 0 (unused) ip_masq_autofw 2476 0 (unused) smc-ultra 4192 1 83906236 0 [smc-ultra] So when I did insmod I get this message # insmod ext2.o Using ext2.o insmod: unresolved symbol link_lookup_dentry Any clues?? Thanks Sergio D. Morilla [EMAIL PROTECTED]Sán Martín 647 Piso 2 SistemasC1004AAM - Buenos Aires Tipoiti SATIC Argentina ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] dachstein floppy rc2 package compatibility
> [I have seen that Charles has included a dnscache in rc2 but Jacques' > lrp seems to integrate better with tinydns (?). From lurking, I > understand that Dachstein-CD eventually used these ? Is it sensible to > grab packages from the CD world and hammer them into an RC2 floppy?] There a several CD releases after RC2. I believe v1.0.1 is the latest. I think the CD includes tinydns. > - I can see from the archives there has been a lot of past discussion > about ssh (daemon, keygen, client) packages and which to use. For e2b, I > once again used Jacques' openssh packages. Is this a good idea for > Dachstein floppy ? v1.0.1 uses OpenSSH ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Announce keyboard.lrp
Hi! I thought I let all of you know this: I downloaded one of the Dachstein floppy versions and tried the keyboard.lrp that Kirchdörfer sent me. All of the 'regular' Portuguese specific keys work except the 'famous' dead keys. This means that it's more than enough if you don't need to write stuff using 'perfect' Portuguese. As you might not know, Portuguese uses a LOT of accented words. If you need to wirte them, use the un-accented version. Good work KP, it's a very helpfull package! p.s. Charles, could you think of including such a package as optional on Dachstein floppy/CD versions? Thanks! >Attached a new keyboard.lrp with pt-latin1.kmap - looks that strange, it >might be an portuguese layout :) > >Let me know if it works as expected - otherwise, there might other issues, >which should be investigated (font-support in kernel???). > > >Add the lrp to your disk, edit syslinux.cfg as usual and then edit > >/etc/init.d/keyboard > >Should be self-explaining. > >regards kp ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] dachstein floppy rc2 package compatibility
Hello, I'm hoping to move from e2b to Dachstein RC2 tomorrow and wanted to ask: - Will Jacques Nilo's dnscache, tinydns, axfdns and the daemontl.lrp work ok with rc2 floppy ? [I have seen that Charles has included a dnscache in rc2 but Jacques' lrp seems to integrate better with tinydns (?). From lurking, I understand that Dachstein-CD eventually used these ? Is it sensible to grab packages from the CD world and hammer them into an RC2 floppy?] - Surfing through the archives I saw that there was an intention to release Dachstein-floppy soonish (past RC2). But I can't see any indication in the archives or on the LEAF/steinkuehler sites that this occured. Should I wait? :-) - I can see from the archives there has been a lot of past discussion about ssh (daemon, keygen, client) packages and which to use. For e2b, I once again used Jacques' openssh packages. Is this a good idea for Dachstein floppy ? Apologies if these items have been thrashed to death already. Thanks, matt ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Loading Net Drivers in DS 1.0.1
Hi, I have been testing DS on a new box (floppy boot), I have been working with LRP for about 1.5 years. I edited the Modules file, did a partial backup of the modules package. I know the edits are working, since the masq drivers that I selected are all working. When I mount the CD, copy the file locally (/lib/modules/2.2.19 - which seems to be the path it wants the files in) , and try to manually load the modules, I get: INSMOD: not an ELF file INSMOD: Could not load the module: No such file or directory dmesg does not show any errors, and the only network interface that I see loaded is brg0. What command is used to display my adapter settings, as ifconfig tells me the file is not found? The drivers that I am trying to load are 8930, ne, pci-scan, and rtl8139. I check the modules.conf file, and the default paths and loadlines are there to load the cd and change directories, I have even tried to specify the path to the drivers eg. /net/ne ! mount iso9660 /dev/hda ! dir /lib/modules/net These do not seem to working. Any help would be appreciated. Cheers
[Leaf-user] IPSec 1.9
I've got the Dachstein RC5 up and running and I copied over the configs for IPSec 1.5. I just copied over all the previous configs from 1.5 and everything connects (ipsec manual connection) without any errors that I can see, even poking thru all the debug output shows everything as 'success'. I have left and right firewall = yes and when I type 'route' I can see the routes built for ipsec0. Same with 'Ipsec eroute' shows the correct tunnel routing. But I can't ping any hosts on the remote network. (10.72.104.xx) There is traffic coming to me, but none from me to the remote sitecan any one suggest something that I might have missed? Thanks Inter-| Receive| Transmit face |bytespackets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed lo: 72 1000 0 0 0 72 1000 0 0 0 ipsec0: 205 11060 0 0 00 00 120 0 0 0 ipsec1: 0 0000 0 0 00 0000 0 0 0 ipsec2: 0 0000 0 0 00 0000 0 0 0 ipsec3: 0 0000 0 0 00 0000 0 0 0 brg0: 0 0000 0 0 00 0000 0 0 0 eth0: 9570177 14261000 0 0 0 1523368 13295000 0 0 0 eth1: 1854131 17992000 0 0 0 11674810 18695000 279 0 0 eth2: 143889 957000 0 0 0 111525 1036000 3 0 0 ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
