Re: Prism continued

2013-06-15 Thread Randy
...yes indeed given smella-vision ;-) ./Randy --- On Sat, 6/15/13, Mark Gauvin wrote: > From: Mark Gauvin > Subject: Re: Prism continued > To: "Matthew Petach" > Cc: "nanog@nanog.org" > Date: Saturday, June 15, 2013, 2:28 PM > Only victim in all of thi

Re: Prism continued

2013-06-15 Thread Mark Gauvin
Only victim in all of this is the poor NSA contractor who had to sift thru my browser history Sent from my iPhone On 2013-06-15, at 4:24 PM, "Matthew Petach" wrote: > On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis wrote: > >> On Wed, 12 Jun 2013 goe...@anime.net wrote: >> >> cellphones with cam

Re: Prism continued

2013-06-15 Thread Matthew Petach
On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis wrote: > On Wed, 12 Jun 2013 goe...@anime.net wrote: > > cellphones with cameras are probably better for the purposes of covert >> mass surveillance, especially ones with front facing cameras. far more of >> them out there, and wireless to boot. >> >> s

Re: Prism continued

2013-06-15 Thread Måns Nilsson
Subject: Re: Prism continued Date: Wed, Jun 12, 2013 at 05:13:45PM -0700 Quoting Scott Weeks (sur...@mauigateway.com): > or "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Surely you mean egrep -v 'term1|term2|term3' /var/log/router.log | le

Re: Prism continued

2013-06-13 Thread Andrew Carey
On Jun 13, 2013, at 3:52, Rich Kulawiec wrote: > On Wed, Jun 12, 2013 at 09:30:53PM -0400, valdis.kletni...@vt.edu wrote: >> Ask the ex-CEO of Qwest what happens if you try to turn down an >> offer the NSA makes you. :) > > Ah, yes. This: > >https://mailman.stanford.edu/pipermail/liberatio

Re: Prism continued

2013-06-13 Thread Jon Lewis
On Wed, 12 Jun 2013 goe...@anime.net wrote: cellphones with cameras are probably better for the purposes of covert mass surveillance, especially ones with front facing cameras. far more of them out there, and wireless to boot. suprised everyone gets their panties in a bunch over presumed game

Re: Prism continued

2013-06-13 Thread Rich Kulawiec
On Wed, Jun 12, 2013 at 09:30:53PM -0400, valdis.kletni...@vt.edu wrote: > Ask the ex-CEO of Qwest what happens if you try to turn down an > offer the NSA makes you. :) Ah, yes. This: https://mailman.stanford.edu/pipermail/liberationtech/2013-June/008815.html ---rsk

Re: Prism continued

2013-06-13 Thread Noon Silk
On Thu, Jun 13, 2013 at 11:35 AM, Jonathan Lassoff wrote: > > In the PRISM context, I highly doubt their using Splunk for any kind > of analysis beyond systems and network management. It's not good at > indexing non-texty-things. > What if you need to search for events that were geographically > p

Re: Prism continued

2013-06-12 Thread goemon
cellphones with cameras are probably better for the purposes of covert mass surveillance, especially ones with front facing cameras. far more of them out there, and wireless to boot. suprised everyone gets their panties in a bunch over presumed games console monitoring, what about all your iph

Re: Prism continued

2013-06-12 Thread Eugen Leitl
On Wed, Jun 12, 2013 at 06:35:35PM -0700, Jonathan Lassoff wrote: > In the PRISM context, I highly doubt their using Splunk for any kind > of analysis beyond systems and network management. It's not good at > indexing non-texty-things. > What if you need to search for events that were geographical

Re: Prism continued

2013-06-12 Thread Charles Wyble
Also checkout kibana.org for a rather splunk like experience. Chip Marshall wrote: >On 2013-06-12, Phil Fagan sent: >> Speaking of Splunk; is that really the tool of choice? > >I've been hearing a lot of good things about logstash these days >too, if you prefer the open source route. > >http:/

Re: Prism continued

2013-06-12 Thread Charles Wyble
Decent frontend... hmm... grep --color Monies please! Phil Fagan wrote: >And a basic front-end and your in business!! >On Jun 12, 2013 6:15 PM, "Scott Weeks" wrote: > >> >> >> --- eyeronic.des...@gmail.com wrote: >> From: Mike Hale >> >> >> Splunk >> >> It would make sense. It's a friggin'

Re: Prism continued

2013-06-12 Thread Jonathan Lassoff
Logstash and Splunk are both wonderful, in my experience. What sets them apart from just a plain grep(1) is that they build an index that points keywords to to logging events (lines). What if you're looking for events related to a specific interface or LSP? Not a problem with a modest log volume,

Re: Prism continued

2013-06-12 Thread Paul Ferguson
On Wed, Jun 12, 2013 at 6:30 PM, wrote: > > Ask the ex-CEO of Qwest what happens if you try to turn down an > offer the NSA makes you. :) +1 - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Prism continued

2013-06-12 Thread Valdis . Kletnieks
On Thu, 13 Jun 2013 00:46:27 +0100, Bacon Zombie said: > There is no way they could of paid for all the Splunk licencing costs > which the budget quoted before That's assuming they paid full list price. Ask the ex-CEO of Qwest what happens if you try to turn down an offer the NSA makes you. :

Re: Prism continued

2013-06-12 Thread Chip Marshall
On 2013-06-12, Phil Fagan sent: > Speaking of Splunk; is that really the tool of choice? I've been hearing a lot of good things about logstash these days too, if you prefer the open source route. http://logstash.net/ -- Chip Marshall http://2bithacker.net/ pgpSopEO5YDs6.pgp Description: PGP

Re: Prism continued

2013-06-12 Thread Scott Weeks
On Jun 12, 2013, at 9:01 PM, "Scott Weeks" wrote: > --- do...@dougbarton.us wrote: > From: Doug Barton > > On 06/12/2013 05:13 PM, Scott Weeks wrote: >> "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" > > Prototypical "useless use of cat" :) >

Re: Prism continued

2013-06-12 Thread Scott Weeks
--- do...@dougbarton.us wrote: From: Doug Barton On 06/12/2013 05:13 PM, Scott Weeks wrote: > "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Prototypical "useless use of cat" :) - What would you use and what's wrong with co

Re: Prism continued

2013-06-12 Thread Doug Barton
On 06/12/2013 05:13 PM, Scott Weeks wrote: "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Prototypical "useless use of cat" :)

Re: Prism continued

2013-06-12 Thread Phil Fagan
And a basic front-end and your in business!! On Jun 12, 2013 6:15 PM, "Scott Weeks" wrote: > > > --- eyeronic.des...@gmail.com wrote: > From: Mike Hale > > >> Splunk > > It would make sense. It's a friggin' sick syslog analyzer. Expensive > as hell, but awesome. > -

Re: Prism continued

2013-06-12 Thread Scott Weeks
--- eyeronic.des...@gmail.com wrote: From: Mike Hale >> Splunk It would make sense. It's a friggin' sick syslog analyzer. Expensive as hell, but awesome. -- So is "tail -f /var/log/router.log | egrep -v 'term1|term2|term3'" or "cat /var/l

Re: Prism continued

2013-06-12 Thread Jeff Kell
On 6/12/2013 7:59 PM, Mike Hale wrote: > It would make sense. It's a friggin' sick syslog analyzer. Expensive > as hell, but awesome. Compare it to most any other SIEM (ArcSight?) and it's a bargain. But still, yeah. Jeff

Re: Prism continued

2013-06-12 Thread Mike Hale
It would make sense. It's a friggin' sick syslog analyzer. Expensive as hell, but awesome. On Wed, Jun 12, 2013 at 4:55 PM, Phil Fagan wrote: > Speaking of Splunk; is that really the tool of choice? > > > On Wed, Jun 12, 2013 at 5:46 PM, Bacon Zombie wrote: > >> There is no way they could of p

Re: Prism continued

2013-06-12 Thread Phil Fagan
Speaking of Splunk; is that really the tool of choice? On Wed, Jun 12, 2013 at 5:46 PM, Bacon Zombie wrote: > There is no way they could of paid for all the Splunk licencing costs > which the budget quoted before > > On 9 June 2013 18:42, Daniel Rohan wrote: > > Anyone else notice that the

Re: Prism continued

2013-06-12 Thread Bacon Zombie
There is no way they could of paid for all the Splunk licencing costs which the budget quoted before On 9 June 2013 18:42, Daniel Rohan wrote: > Anyone else notice that the Boundless Informant GUI looks suspiciously like > the Splunk GUI? > > And according to the article, it sounds like it do

Re: Prism continued

2013-06-12 Thread John Lightfoot
Let's see: Requires "always-on" internet connection Only available with Kinect Includes infrared sensor Manufactured by Microsoft, the first company to sign up for Prism When can I get my Xbox One?? http://www.nbcnews.com/technology/new-kinect-can-track-you-so-well-you-may- not-6C10287970 O

Re: Prism continued

2013-06-09 Thread Daniel Rohan
Anyone else notice that the Boundless Informant GUI looks suspiciously like the Splunk GUI? And according to the article, it sounds like it does exactly what Splunk is capable of, albeit on a grander scale than I thought possible. dgr On Jun 9, 2013 9:29 AM, "Warren Bailey" < wbai...@satelliteint