May 2002 - WLUG - wlug.mailman3.com

Re: [Wlug] Bad NIC?

by John Stoffel

Andy> I have a network interface on my firewall that is throwing Andy> receive errors at me. They are in the overrun and frame columns Andy> of the ifconfig printout for that interface. I tried to restart Andy> the interface and reload the kernel module to no avail. I also Andy> power cycled the Linksys switch and cabled to a different switch Andy> port. A different cable didn't help, either. I'd rather not Andy> reboot the machine with 135 days of uptime. You've done alot of checks, but you may just have to do a reboot. Andy> I noticed that on a 100 Mbit ethernet segment, I'm getting a Andy> failure rate on approx. 25% of the packets. Reducing the MTU Andy> from 1500 to 768 helps the transfer rate but doesn't solve the Andy> problem. How about if you drop it down to 10mb/s instead and see how it works? It's not like you're going to get anything like that speed through a cable modem/DSL link anyway. This might slow down the traffic enough for the card to be able to deal with it better. Andy> This is the only machine on my home network that shows any Andy> errors.

May 6, 2002

Re: [Wlug] PowerMac CD-ROM

by doug waud

Hi Jeremy wrote: > > Does anyone have a SCSI cdrom that I can borrow/buy for an old 7500? > My linux box is such a hackjob of software that I want to reinstall it with > YDL. I can beat you on that "old". I have a Plextor PX-65CS which I bought Dec 8, 1995 :-). Seriously, if it would be any use to you, you are welcome to try it. It has a two fifty pin centronics connectors (and I have a cable from that to a twenty five pin connector). It uses a caddy but I suspect that is no problem. I assume it will be about as slow as you can get given its birth date. If you cannot do better, feel free to try it. > Low and behold I try it last week and the damn CDROM drive doesnt seem to work! > Some files copy, some dont... I will just assume its the drive due to age/heat. > So I was hoping someone (near WPI) I am out in Shrewsbury but my son-in-law is in at Worcester Academy (Steve Daukas, WLUG too) so he might serve as a go-between but I'll not do anything re scheduling there until I hear from you. > had a CDROM drive i could borrow (external would be good). That the Plextor can do. > The drive i think would have to work in MacOS too (to install > BOOTX files). Not being a MAC prevert, I cannot comment knowledgeably on that. > Such a PITA some times. All our hearts go out to MAC users :-) doug -- Douglas R Waud 17 Lantern Lane, Shrewsbury, MA 01545-2006 508 845 1718

May 6, 2002

Re: [Wlug] PowerMac CD-ROM

by Skip Gaede

On Sunday 05 May 2002 09:30 pm, Jeremy wrote: > Does anyone have a SCSI cdrom that I can borrow/buy for an old 7500? > Beside CDROM, what other PPC install options still exisit? The boot > floppies over network from linuxppc.org use to work but i am not sure they > are still around. YDL seemed like a good choice for now. > > -Jeremy Hi Jeremy, I think you're right, getting an external SCSI CD might be the easiest solution. However, since you asked, there are other solutions! You can setup netatalk on another Linux box and can download any Mac files you need, first to your Mac and then copy them to the other Mac volume on the other machine. The 7.5.3 system folder on the Network Access Disk and the MkLinux Booter will allow you to load a Linux kernel and initRD to install YDL. I now have an installer with the MkLinux booter, a 2.4.6-pre3 kernel and initRD into a small (20 MB) HFS partition. The kernel uses the onboard NIC and can then do a network install of YDL 1.2. The newer releases, though, can only be installed from a local CD or DVD. --Skip

May 6, 2002

Bad NIC?

by Andy Stewart

HI gang, I have a network interface on my firewall that is throwing receive errors at me. They are in the overrun and frame columns of the ifconfig printout for that interface. I tried to restart the interface and reload the kernel module to no avail. I also power cycled the Linksys switch and cabled to a different switch port. A different cable didn't help, either. I'd rather not reboot the machine with 135 days of uptime. I noticed that on a 100 Mbit ethernet segment, I'm getting a failure rate on approx. 25% of the packets. Reducing the MTU from 1500 to 768 helps the transfer rate but doesn't solve the problem. This is the only machine on my home network that shows any errors. Any thoughts? Is it a bad NIC or something I've missed? Thanks, Andy -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

May 6, 2002

PowerMac CD-ROM

by Jeremy

Does anyone have a SCSI cdrom that I can borrow/buy for an old 7500? My linux box is such a hackjob of software that I want to reinstall it with YDL. Low and behold I try it last week and the damn CDROM drive doesnt seem to work! Some files copy, some dont... I will just assume its the drive due to age/heat. So I was hoping someone (near WPI) had a CDROM drive i could borrow (external would be good). The drive i think would have to work in MacOS too (to install BOOTX files). Such a PITA some times. Beside CDROM, what other PPC install options still exisit? The boot floppies over network from linuxppc.org use to work but i am not sure they are still around. YDL seemed like a good choice for now. -Jeremy ===== - __________________________________________________ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com

May 6, 2002

Re: [Wlug] Advise Needed

by Frank Sweetser

On Wed, May 01, 2002 at 03:55:11PM -0400, Michael Long wrote: > It appears that my computer has been hacked into. The following > services are run periodically throughout the day. How do I go about > finding out what is starting and stopping them and more importantly > prevent them from being run. > > I have a hardware firewall between the computer and isp. > > 17762 root sh -c (safe_finger -l @64.213.97.247 > 2>&1| /bin/mail -s "in.ftpd-64.213.97.247 unknown" root) > & > 17763 nobody safe_finger -l @64.213.97.247 > 17764 root /bin/mail -s in.ftpd-64.213.97.247 unknown root > 17765 nobody finger -l 64.213.97.247 > 17768 root /usr/sbin/sshd > 17770 root sh -c (safe_finger -l @::ffff:64.213.97.247 > 2>&1| /bin/mail -s "sshd-::ffff:64.213.97.247 unknown" > root) & > 17771 nobody safe_finger -l @::ffff:64.213.97.247 > 17772 root /bin/mail -s sshd-::ffff:64.213.97.247 unknown root > 17773 nobody finger -l ::ffff:64.213.97.247 These look like commands generated by tcpwrappers. Check your /etc/hosts.allow and /etc/hosts.deny files. -- Frank Sweetser fs at wpi.edu, fs at suave.net | $ x 18 Full-time WPI Network Engineer, Part time Linux/Perl guy | Woody: What's the latest, Mr. Peterson? Norm: Zsa-Zsa marries a millionaire, Peterson drinks a beer. Film at eleven. -- Cheers, Knights of the Scimitar

May 2, 2002

Re: [Wlug] Advise Needed

by Scott Venier

If your machien has been broken into, the only way to clean it up is to reformat and reinstall. They cannot trust any binary left on the system (including the kernel) so you won't truely know when you've cleaned it up. Scott On Wed, 1 May 2002, Michael Long wrote: > It appears that my computer has been hacked into. The following > services are run periodically throughout the day. How do I go about > finding out what is starting and stopping them and more importantly > prevent them from being run. > > I have a hardware firewall between the computer and isp. > > 17762 root sh -c (safe_finger -l @64.213.97.247 > 2>&1| /bin/mail -s "in.ftpd-64.213.97.247 unknown" root) > & > 17763 nobody safe_finger -l @64.213.97.247 > 17764 root /bin/mail -s in.ftpd-64.213.97.247 unknown root > 17765 nobody finger -l 64.213.97.247 > 17768 root /usr/sbin/sshd > 17770 root sh -c (safe_finger -l @::ffff:64.213.97.247 > 2>&1| /bin/mail -s "sshd-::ffff:64.213.97.247 unknown" > root) & > 17771 nobody safe_finger -l @::ffff:64.213.97.247 > 17772 root /bin/mail -s sshd-::ffff:64.213.97.247 unknown root > 17773 nobody finger -l ::ffff:64.213.97.247 > > Thanks, > Mike > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

May 2, 2002

Advise Needed

by Michael Long

It appears that my computer has been hacked into. The following services are run periodically throughout the day. How do I go about finding out what is starting and stopping them and more importantly prevent them from being run. I have a hardware firewall between the computer and isp. 17762 root sh -c (safe_finger -l @64.213.97.247 2>&1| /bin/mail -s "in.ftpd-64.213.97.247 unknown" root) & 17763 nobody safe_finger -l @64.213.97.247 17764 root /bin/mail -s in.ftpd-64.213.97.247 unknown root 17765 nobody finger -l 64.213.97.247 17768 root /usr/sbin/sshd 17770 root sh -c (safe_finger -l @::ffff:64.213.97.247 2>&1| /bin/mail -s "sshd-::ffff:64.213.97.247 unknown" root) & 17771 nobody safe_finger -l @::ffff:64.213.97.247 17772 root /bin/mail -s sshd-::ffff:64.213.97.247 unknown root 17773 nobody finger -l ::ffff:64.213.97.247 Thanks, Mike

May 1, 2002

Advise Needed

by Michael Long

It appears that my computer has been hacked into. The following services are run periodically throughout the day. How do I go about finding out what is starting and stopping them and more importantly prevent them from being run. I have a hardware firewall between the computer and isp. 17762 root sh -c (safe_finger -l @64.213.97.247 2>&1| /bin/mail -s "in.ftpd-64.213.97.247 unknown" root) & 17763 nobody safe_finger -l @64.213.97.247 17764 root /bin/mail -s in.ftpd-64.213.97.247 unknown root 17765 nobody finger -l 64.213.97.247 17768 root /usr/sbin/sshd 17770 root sh -c (safe_finger -l @::ffff:64.213.97.247 2>&1| /bin/mail -s "sshd-::ffff:64.213.97.247 unknown" root) & 17771 nobody safe_finger -l @::ffff:64.213.97.247 17772 root /bin/mail -s sshd-::ffff:64.213.97.247 unknown root 17773 nobody finger -l ::ffff:64.213.97.247 Thanks, Mike

May 1, 2002