Re: Drawing network diagrams?

2012-07-02 Thread Andy Bair
I have used Dia quite a bit in the past and I would recommend it for diagrams that you build "manually". If you have some scripting knowledge and want to generate your graph in "automatically" you should consider graphviz. It takes some getting used to but can produce powerful graphs. (For examp

Re: ssh reverse tunnel issue

2011-04-05 Thread Andy Bair
It doesn't seem like you're dropping connections but I generally setup ssh stanzas in my .ssh/config file and use ServerAliveInterval. Maybe that will help keep things active. Host some_host Port Hostname ServerAliveInterval 240 Hope that helps. Andy On Tue, Apr 05, 2

Re: Looking for a tool for spreadsheet manipulation.

2011-01-19 Thread Andy Bair
On Wed, Jan 19, 2011 at 02:13:58PM -0500, David Berube wrote: > On 01/19/2011 01:51 PM, Brian St. Pierre wrote: > > Google provides an API for Google Spreadsheets: > > http://code.google.com/apis/spreadsheets/data/3.0/developers_guide.html > > > > and a python client library: > > > > http

Re: Server for sale...

2009-12-07 Thread Andy Bair
I'll take it if it's not already claimed. I need an excuse to try out opensolaris and test FTimes and WebJob. http://ftimes.sf.net http://webjob.sf.net Andy KoreLogic Security 603.465.3236 (Office) 603.340.2498 (Mobile) http://www.korelogic.com GnuPG Fingerprint: 688A 79EC B1E5 5748 CE87 1F20

Re: searching/grepping for words "near" each other

2009-04-30 Thread Andy Bair
One way to do what you want is to use hipdig.pl which is a utility in the FTimes suite. You can download FTimes and read more information at the following URL. http://ftimes.sourceforge.net/FTimes/index.shtml The hipdig utility is a Perl script that "digs" (searches) for hosts, IPs, passwords,

I need it fast: Wireless Laptop Antenna

2008-10-08 Thread Andy Bair
Hello everyone. Does anyone know where I can purchase a wireless laptop antenna at a store in the Nashua area or south of Nashua into Mass? I have an (proxim) ORiNOCO 11b/g "gold" card model 8470-FC and I believe the card has an "MC" connector. I'm looking an antenna just like the one shown at t

Re: Lan + DMZ + LargeNumOfFiles = headaches AKA: plz halp and donate ur brain!!

2008-09-05 Thread Andy Bair
On Thu, Sep 04, 2008 at 08:17:02PM -0400, Andy Bair wrote: > Have you looked into rsync vs. ftp? I've used rsync in many situations > to move files and it has many great options and handles interrupted > transfers, etc. > > You can find it here: > > http://samba.anu.ed

Re: Lan + DMZ + LargeNumOfFiles = headaches AKA: plz halp and donate ur brain!!

2008-09-04 Thread Andy Bair
Have you looked into rsync vs. ftp? I've used rsync in many situations to move files and it has many great options and handles interrupted transfers, etc. You can find it here: http://samba.anu.edu.au/rsync/ Sincerely, Andy KoreLogic Security 603.465.3236 (Office) 603.340.2498 (Mobile) http://

Re: Undelete from MS-DOS/VFAT from Linux?

2008-07-18 Thread Andy Bair
Ben, You should look into the sleuthkit which has a bunch of tools that can help you examine a disk image or file system. http://www.sleuthkit.org/sleuthkit/ Also, there's an older article below which describes using fls and icat to pull out deleted files. http://www.sleuthkit.org/informer/

Re: signal handling with trap

2008-02-17 Thread Andy Bair
> Runlevles are collections of services. Each runlevel gets a number. > Debian systems use runlevel 2 almost exclusively. Other > distributions use different runlevels. Red Hat and derivatives, in > particular, use runlevel 3 for normal operation without an XDM > (graphical login), and runlev

Re: Quick hack to print images with ImageMagick

2007-12-11 Thread Andy Bair
On Tue, Dec 11, 2007 at 12:23:25PM -0500, [EMAIL PROTECTED] wrote: > > Have you ever had an image and said "I want to print that." As a > Linux user, you know there's about a billion different ways to do > *anything*, so you ask yourself "How easiest to do that?" > > "Do I open up firefox, print

Re: Network Monitoring

2007-07-10 Thread Andy Bair
You might consider using Argus, aka the poor-person's Cisco Netflow collector. It captures all networks flows and you can do things like identify top talkers as well as the things you mentioned. http://qosient.com/argus/ I can definitely help you out if you need it. Andy KoreLogic Security 6

Re: Recovering file attributes from snapshot

2007-07-03 Thread Andy Bair
You are correct. The FTimes project does not have a script to do the conversion you are describing, but this script should do the trick. Let me know if this is what you are looking for, or not. --- ftimes2chown.sh --- #!/bin/sh ftimes --mapauto none+uid+gid -l 6 /etc | tail +2 | \ while read LI

Re: Recovering file attributes from snapshot

2007-07-03 Thread Andy Bair
Michael, What attributes do you want to restore exactly? UID, GID, permissions? Can you show me some sample data? Thanks, Andy On Tue, Jul 03, 2007 at 02:55:02PM -0400, Michael ODonnell wrote: > > > Andy Bair wrote: > > FTimes can do what you want. > > It can apparently

Re: Recovering file attributes from snapshot

2007-07-03 Thread Andy Bair
FTimes can do what you want. It allows you to collect file attributes before and after an event via the map mode then compare the results using the compare mode. FTimes uses a field mask for collecting file attributes and for the comparison. To collect all file attributes before and after an eve

SourceForge Discontinued the Compile Farm -- Request for Help

2007-02-23 Thread Andy Bair
GNHLUG'ers, For some unknown reason, SourceForge announced that it is discontinuing the Compile Farm this week. This news is very sad to me because the projects I support depend on the compile farm to validate compilation on many different OS's and architectures. My friend started a thread respo

Re: Request for a Good Intro to Linux / UNIX

2007-01-29 Thread Andy Bair
On Mon, 2007-01-29 at 10:59 -0500, Kent Johnson wrote: > Andy Bair wrote: > Does anyone know of a good paper or website > > focused on getting people started with Linux/UNIX? You can assume that > > the students have a fair amount of Windows background and (may be) some > >

Re: Request for a Good Intro to Linux / UNIX

2007-01-29 Thread Andy Bair
On Mon, 2007-01-29 at 10:51 -0500, [EMAIL PROTECTED] wrote: > > From: Andy Bair <[EMAIL PROTECTED]> > > Date: Mon, 29 Jan 2007 09:37:32 -0500 > > > This Thursday I will begin teaching a Linux/UNIX module as part of a > > class titled, "Introductio

Re: Request for a Good Intro to Linux / UNIX

2007-01-29 Thread Andy Bair
Also, I was briefly looking at this to satify my requirements: http://tldp.org/LDP/intro-linux/html/ Andy On Mon, 2007-01-29 at 09:54 -0500, Michael ODonnell wrote: > > Does the term "forensics" imply after-the-fact analysis > when something bad has happened to the computer, or is > some other

Re: Request for a Good Intro to Linux / UNIX

2007-01-29 Thread Andy Bair
It means both: (1) Understanding the forensic elements to look for on a Linux machine, and (2) understanding how to use Linux as an analysis platform. But, mostly #2. Later on in the semester I cover things like the coronorer's tool kit, autopsy, etc. Right now, I want to give them some good han

Request for a Good Intro to Linux / UNIX

2007-01-29 Thread Andy Bair
All -- This Thursday I will begin teaching a Linux/UNIX module as part of a class titled, "Introduction to Computer Forensics". I have some materials that I will cover and will probably focus on simple commands like cd, ls, dd, etc, etc. Does anyone know of a good paper or website focused on ge

Re: SATA Cables Needed

2006-11-07 Thread Andy Bair
I just called Apex Computer in Nashua, and the sales guy said he did have cables that were around 2 feet. Not sure if I trust his "estimate" of about 2 feet, but you could call and have him measure: http://www.apexnh.com/contact.asp Andy On Tue, 2006-11-07 at 13:21 -0500, Andrew W. Gaunt wrote:

Re: good distro/instructions for soekris box?

2006-11-06 Thread Andy Bair
On Mon, 2006-11-06 at 10:14 -0500, Kevin D. Clark wrote: > Does anybody here have a favorite distro or a pointer to a favorite > set of directions for installing Linux/BSD onto a Soekris box? > > I plan on using a 1MB CF card for my storage (no moving parts). I'll > probably end up running HTTP/S

DFRWS File Carving Challenge Slides Available

2006-10-13 Thread Andy Bair
All, You can download and view the updated slides for the DFRWS file carving challenge located in the Presentations section at the link below. http://www.korelogic.com/Resources/Projects/dfrws_challenge_2006/ You can also download the slides directly via the link below: http://www.korelo