- WLUG - wlug.mailman3.com

Speaking of bad things happening to file systems...

by Stephen C. Daukas

This is a story about a ZIP drive, Windows 2000 Pro, and how I think Linux might save the day. So, if you have any good ideas before I go down this path, please let me know! So, this all started when I tried to install a Zip drive on my wife's laptop (IBM A20m) running Win2k Pro. I was doing this so she could back-up her important files (e.g., Quicken) before we began installing additional software and RedHat Linux. The Zip drive screwed the OS - couldn't boot after the install program said to reboot. Windows! Next, I tried the various Windows mechanisms for trying to recover and repair the OS. No luck - things got a bit worse (but I won't bore you with the details). I even went so far as to call IBM's support center to see if they had a way of restoring to defaults in a non-destructive way. No Luck. In fact, the support engineer I spoke with told me he tried to get a ZIP drive going on his system running Win2k Pro and after working with Iomega for 3 hours - he gave up. My wife says its OK to wipe the disk and start over, but I know better (esp. after 16 years of marriage)! So I had a bright idea (well, an idea anyway). If I had partition magic, I could partition the disk, install Windows 2000 on the new partition, get all of her important files across the network to one of my other PCs, then wipe the disk and start over. BUT, I don't have partition magic (sigh). Then it hit me - why couldn't I do this with Linux? I want to have Linux and Win2k on the laptop when I'm done anyway, so why not partition the hard drive and then go from there? So, because I don't want to take any chances with my wife's files, here are some overly cautious questions: 1. During the install of RedHat 7.1, I assume I can re-partition non-destructively and end up with a bad Win2k and a good RedHat when I'm done. Does the RedHat install try to test to see if there is another OS or does it just let me re-partition at will? (Never installed Linux with Windows before.) 2. If I install RedHat 7.1 in the second newly created partition, can I read the files from the 2000 partition? IBM tells me they always go FAT16 with their distributions, but its a large disk so it might be FAT32. 3. If there is a problem with reading the Win2k file system, or if you think going this route is a bad idea, is there a way to run just the partitioning portion of the RedHat install to make a partition that I can install Win2k into? The goal here is to get files off of the existing Win2k file system and then to wipe the machine and start over... Thanks in Advance! Steve Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

Oct. 25, 2001

Re: [Wlug] oh crud, ext3 has screwed my /home directory!

by Scott Venier

I think the question that have have to ask is WHICH wrong command ended up getting run that borked your filesystem? Scott On Wed, 24 Oct 2001, Wesley Allen wrote: > OK, I'm an idiot. I should have realized the the "no fault > possible" upgrade to ext3 was too good to be true. Perhaps I read a bit > too much this time and figured, "Hey, it's only adding a journaling > file, right? What can possibly go wrong.?" > Well, I followed the directions, but I'm tired and I ran the wrong > command. I erased my /home directory! Oh excrement, I was just working > on a web site for a client, it looked really nice, and now it's ALL GONE. > Well, I haven't written to the partition yet, so the inodes are > still there, right? How do I recover data? Most of it is not a > problem, but I had 2 projects that I really want to get back. > From now on I will do two things: > > 1. NEVER attempt that "cool thing I've been wanting to check out" > when I'm exhausted and haven't slept in a while. > 2. BACK-UP! > > Just please help! > >

Oct. 25, 2001

oh crud, ext3 has screwed my /home directory!

by Wesley Allen

OK, I'm an idiot. I should have realized the the "no fault possible" upgrade to ext3 was too good to be true. Perhaps I read a bit too much this time and figured, "Hey, it's only adding a journaling file, right? What can possibly go wrong.?" Well, I followed the directions, but I'm tired and I ran the wrong command. I erased my /home directory! Oh excrement, I was just working on a web site for a client, it looked really nice, and now it's ALL GONE. Well, I haven't written to the partition yet, so the inodes are still there, right? How do I recover data? Most of it is not a problem, but I had 2 projects that I really want to get back. From now on I will do two things: 1. NEVER attempt that "cool thing I've been wanting to check out" when I'm exhausted and haven't slept in a while. 2. BACK-UP! Just please help!

Oct. 25, 2001

Re: [Wlug] Volunteers sought for Lancaster, MA project

by Aljerin L. Butler, Jr.

Andy Stewart wrote: > HI gang, > > I am seeking a couple of volunteers to help out with our Linux project in > Lancaster, MA. I have one confirmed volunteer plus myself. I think 2-3 > more people would probably be enough. > > Here's what we'll be doing as far as I know: > > 1) Installing CUPS > 2) Installing 2(?) printers > 2.5) possibly a scanner plus SANE > 3) Insuring this all works from all Linux machines > 4) Installing SAMBA > 5) Insuring access to printers from 1(?) Windows machine > 6) Possibly tweaking an old ISA NIC > > The date is this Saturday, October 27th, around 11 AM - 3 PM (if it takes > that long). Let's see how many of those bullet items we can accomplish. > > Please RSVP to me so that a) I know who's coming, and b) I can insure we > don't have too many people. The physical space at the Lancaster location > isn't conducive to a large crowd. I'll send you directions after you RSVP. > > Thanks in advance! > > -- > Andy Stewart > Founder > Worcester Linux Users' Group > Worcester, MA, USA > http://www.wlug.org > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug Andy, Count me in. I just need directions in how to get there from Marlboro (Rt. 495). Al Butler

Oct. 23, 2001

Volunteers sought for Lancaster, MA project

by Andy Stewart

HI gang, I am seeking a couple of volunteers to help out with our Linux project in Lancaster, MA. I have one confirmed volunteer plus myself. I think 2-3 more people would probably be enough. Here's what we'll be doing as far as I know: 1) Installing CUPS 2) Installing 2(?) printers 2.5) possibly a scanner plus SANE 3) Insuring this all works from all Linux machines 4) Installing SAMBA 5) Insuring access to printers from 1(?) Windows machine 6) Possibly tweaking an old ISA NIC The date is this Saturday, October 27th, around 11 AM - 3 PM (if it takes that long). Let's see how many of those bullet items we can accomplish. Please RSVP to me so that a) I know who's coming, and b) I can insure we don't have too many people. The physical space at the Lancaster location isn't conducive to a large crowd. I'll send you directions after you RSVP. Thanks in advance! -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 23, 2001

Re: [Wlug] suse rpms

by Andy Stewart

On Sunday 21 October 2001 02:00 pm, you wrote: > hi all, > > I am trying to install php module for suse 7.2 (personal ed.) > but rpm shows that there are libraries to install before mod_php4-core > and mod_php4. > > I ask two things: > 1 - is there an easy way to determine which suse package includes, for > example, libpdf.so.0 Not that I know about. I would search the ls-lR.gz file or the INDEX.gz for pdf and see what comes up. In fact, I have SuSE 7.2 PRO and the RPM package that you want is pdflib.rpm. For me, its on CD #4, but your mileage may vary. > > 2 - is there an easy way to determine which path at ftp.suse.com > includes that suse package? Once you know where it is on the CDs, you can peruse their ftp site and find that same directory under the updates directory to see if there is a more current package. > > thanks, > baris Anytime! > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 21, 2001

suse rpms

by Baris Hasdemir

hi all, I am trying to install php module for suse 7.2 (personal ed.) but rpm shows that there are libraries to install before mod_php4-core and mod_php4. I ask two things: 1 - is there an easy way to determine which suse package includes, for example, libpdf.so.0 2 - is there an easy way to determine which path at ftp.suse.com includes that suse package? thanks, baris

Oct. 21, 2001

Re: [Wlug] ATAPI (internal) ZIP drive

by Skip Gaede

On Monday 08 October 2001 10:51 am, Skip Gaede wrote: > I need help! > > I upgraded my system to a new MLB and a faster CPU. With the new board, I > can't read or write to my ZIP drive (under Linux). I have a SCSI system, > with an Adaptec 78xx controller, an Adaptec RW CDROM (also ATAPI), and the > ZIP drive. > > Kernel: 2.4.10 > More progress! The drive is best handled by the ide-floppy driver, and it works best when the BIOS is setup to present the drive as a mini-hard drive, as opposed to a big floppy. The driver, at least as far as formatting goes, stinks. doing a mke2fs -b 1024 -v /dev/hdc1 took a paltry 2 hours to complete, as compared with about 2 minutes for a complete format under WinNT. or 10 minutes using the Iomega software. During the two hour format, I got over 100 lost interrupts, which were interpreted as bad blocks. The driver is being worked on, and this one is at rev 0.97.sv. It uses packet writing technology. There are a number of settings I can tweak under /proc/ide/hdc/settings, but I've not found documentation on the params: name value min max mode ---- ----- --- --- ---- bios_cyl 96 0 1023 rw bios_head 64 0 255 rw bios_sect 32 0 63 rw breada_readahead 4 0 127 rw current_speed 8 0 69 rw file_readahead 0 0 2097151 rw ide_scsi 0 0 1 rw init_speed 8 0 69 rw io_32bit 1 0 3 rw keepsettings 0 0 1 rw max_kb_per_request 127 1 127 rw nice1 1 0 1 rw number 2 0 3 rw pio_mode write-only 0 255 w slow 0 0 1 rw unmaskirq 1 0 1 rw using_dma 0 0 1 rw Clearly the driver and the current settings leave something to be desired. I'm now investigating leaving the drive formatted vfat and creating a rescue disk using the loopback device to mount a couple of files on the drive. Does anyone know of any up-to-date references on making a loopback root filesystem under the 2.4 kernel? The most recent document I've found on Linuxdoc is by Andrew Bishop dated Sept 24, 1999. Thanks, Skip

Oct. 16, 2001

Re: [Wlug] Kevin Sullivan presentation

by Keith Wright

> From: Andy Stewart <andystewart(a)mediaone.net> > Read more about it in the forwarded message below. If you have questions, > please send them to Brad Dinerman, who's e-mail appears below. > > ---------- Forwarded Message ---------- > > Kevin writes: > (and we will break the silence surrounding MIME) This must be a joke, right? There's more noise surrounding MIME than surrounding Logan airport or a Pittsburgh steel mill. Clearly this talk will fill a much needed gap. (read that twice) > MIME-Version: 1.0 > Content-Type: Multipart/Mixed; > boundary="------------Boundary-00=_SSX9Z3JZIDZ1MY1L06VN" > SPECIAL NOVEMBER MEETING > > This is a *must-attend* event, = > and will be publicized to a large number > > of user groups.  Kevin = > Sullivan, president and security specialist > > extraordinaire of C3 Group, will = > present on a topic that is probably > > near and dear to most of our = > hearts: "E-Mail: The Backdoor To Your Damn that's ugly. But I guess they have to do that so that the blank lines are in the default font.

Oct. 16, 2001

Kevin Sullivan presentation

by Andy Stewart

HI everybody, As part of our cooperation with other user's groups (especially those that are part of Boston User Groups, as are we), I'm forwarding this to you. Kevin Sullivan, president of C3 group, will be giving a talk entitled "E-Mail: The Backdoor to your Network". This talk is not e-mail system specific, but about e-mail systems and vulnerabilities in general. Read more about it in the forwarded message below. If you have questions, please send them to Brad Dinerman, who's e-mail appears below. ---------- Forwarded Message ---------- Subject: User group chairs: request for announcement Date: Mon, 15 Oct 2001 13:39:24 -0400 From: "Bradley J. Dinerman" <BDinerman(a)BostonUserGroups.com> To: <Members(a)BostonUserGroups.com> To all user group chairs: I'd like to ask your assistance. My group, the Boston Area Exchange Server User Group, is planning a special presentation at our November meeting (11/29). The topic will be "E-Mail: The Backdoor To Your Network," and will be given by Kevin Sullivan, president of C3 Group. [Some of you may remember that Kevin gave a key security presentation to the October TechNet expo last year. It was extremely well received.] Please note that this presentation is not Exchange Server specific. It addresses e-mail systems and vulnerabilities in general, regardless of platform! I am declaring this meeting "special" because of the importance of the topic, as well as the fact that I am promoting it to multiple user groups. In particular, I'd like to ask if you could announce this meeting to your user groups, either by e-mail or at your upcoming meeting. The details that I provided in my own group's October newsletter are below my signature. You can feel free to copy the content, or to summarize accordingly. Please let me know if you are willing to announce this to your group (or not). Thank you, Brad Dinerman Chair, Boston Area Exchange Server User Group Director and Webmaster, BostonUserGroups, Inc. __________________________________________________________________ SPECIAL NOVEMBER MEETING This is a *must-attend* event, and will be publicized to a large number of user groups. Kevin Sullivan, president and security specialist extraordinaire of C3 Group, will present on a topic that is probably near and dear to most of our hearts: "E-Mail: The Backdoor To Your Network." The presentation will be interesting for both the non-technical as well as the overly-technical. Kevin writes: "Recent experience with the rapidly spreading and highly destructive Nimda and SirCam worms has demonstrated the ease with which a harmful "payload" can slip in to many otherwise secure networks via Email. I will open by having a sacrificial laptop with IE 5.5 SP1 and Outlook 2K SP1. I will connect to a server and receive my e-mail messages, then watch as my poor computer becomes infected with as many different viruses and worms as I can cram in before it dies. Then we will follow the process (on another system) of how the attack got from the (possibly) clueless sender to the clueless recipient. We will review how the mail travels from your desktop to the recipient - through local, corporate, and Internet servers. We will pay particular attention to attachments - how they are attached, transmitted, and delivered (and we will break the silence surrounding MIME). Finally, we will look at some specific examples of vulnerabilities and how they can be reduced." OK, so in addition to being an incredibly timely and popular topic, what else is different? Because it will be highly publicized to the user group community and we will be expecting a higher than usual turnout, registration will be required for this meeting. You can pre-register at http://www.ExchangeServerBoston.com/Registration. In addition, I will be asking for the first time ever, for a nominal fee for the meeting. It is only a paltry $2, but will help to cover some of the base operating expenses for this and other meetings, including our membership to Boston User Groups, Inc. [Those who register at the door will have to shell out a whopping 50% more, $3] I've already asked a number of vendors for raffle contributions for this meeting, and many of them have happily obliged. As usual, pizza/beverages will be free of charge, and will be sponsored this month by SilverSword Solutions (http://www.SilverSword.com) ------------------------------------------------------- -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 16, 2001

Re: [Wlug] Router question...

by Josh Huber

Andy Stewart <andystewart(a)mediaone.net> writes: > As far as making a modem dial on demand, check out the diald > software.. This is actually included as part of Coyote Linux. Ah, you might want to actually not use diald, since it's essentially a _really_ bad hack. pppd has demand dialing built in, and it works much better than diald in my experience... look for the "demand" option in the pppd man page. ttyl, -- Josh Huber

Oct. 14, 2001

Re: [Wlug] Router question...

by Andy Stewart

Instead of LRP, I'd like to suggest that you look at Coyote Linux. It is a project which has leveraged the work of LRP and added to it. It is more up to date than LRP, and I though, easier to configure. http://www.coyotelinux.com As far as making a modem dial on demand, check out the diald software.. This is actually included as part of Coyote Linux. Hope this helps, Andy On Friday 12 October 2001 10:40 pm, William Smith wrote: > Hi all... > > I have a "headless" laptop that works fine, except that it hasn't got > the LCD screen (hence the "headless" part). I'd like to rig it as a > firewall between a home LAN and the 'Net. > > I would LIKE to have it basically sit there and watch the LAN and > connect to the 'Net only when someone on the LAN needs to get to the > Outside World (for surfing, mailruns, etc), then disconnect after a > respectable (configurable?) amount of idle time. > > I've been looking into modem-sharing, but that doesn't seem to be what I > want, exactly. I have a pretty-good idea that I'll be playing with the > LRP stuff, but I really would like to utilize the 2.4 kernel (LRP is > only at 2.0/2.2 as far as I can see). > > Has anyone been doing something like this already? > Hints/tips/suggestions would be greatly appreciated. -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 13, 2001

Router question...

by William Smith

Hi all... I have a "headless" laptop that works fine, except that it hasn't got the LCD screen (hence the "headless" part). I'd like to rig it as a firewall between a home LAN and the 'Net. I would LIKE to have it basically sit there and watch the LAN and connect to the 'Net only when someone on the LAN needs to get to the Outside World (for surfing, mailruns, etc), then disconnect after a respectable (configurable?) amount of idle time. I've been looking into modem-sharing, but that doesn't seem to be what I want, exactly. I have a pretty-good idea that I'll be playing with the LRP stuff, but I really would like to utilize the 2.4 kernel (LRP is only at 2.0/2.2 as far as I can see). Has anyone been doing something like this already? Hints/tips/suggestions would be greatly appreciated. -- William Smith wsmith(a)chezsmith.com Fall River, MA http://www.chezsmith.com

Oct. 13, 2001

Free Registration to Annual Linux Conference: November 5-10, 2001

by Theo Van Dinter

I got this from the USENIX group (http://www.usenix.org/) thought you folks might be interested. :) ----- Forwarded message ----- Dear USENIX members and past conference attendees: We know that many of you may be reluctant to travel because of the recent turn in world events and the economic downturn. To encourage your attendance at ALS '01, USENIX and the Atlanta Linux Showcase, Inc. are now offering FREE technical session registrations to those wishing to attend. The 5th Annual Linux Showcase and Conference November 5-10, 2001 Oakland Marriott City Center - Oakland, California http://www.linuxshowcase.org We are making this extraordinary offer because we believe the networking opportunities and high-caliber technical content at ALS '01 provide an important service to the general open source community and to our membership. This year's ALS program features invited talks by: - Thomas Sterling, CalTech & NASA JPL on Petaflops Computing with Linux - Don Becker, Scyld Computing, Inc. on Home Beowulf Systems - Tony Iams, D.H. Brown Associates on A competitive assessment of Linux in the Enterprise - Helen Greiner, i-Robot on the state of Robotic Today - Don Marti, on Embedded Linux Success Stories The invited talks track also reflects several political issues currently facing the open source community such as DMCA, SSSCA, copyrights, and software patents. These are important issues which we feel should not be put off for discussion at a later time. In addition to the above, ALS '01 also provides practical, professional-level education through over 12 TUTORIALS (which will charge a fee) including: -Inside the Linux Kernel -Exploring the Potential of LDAP -Configuring and Administering Samba Servers -Linux Systems Administration -Unix/Linux Network Administration -Building and Using a Personal Beowulf We also offer workshops on: KDE Applications, GTK+/GNOME Development and XFree86 CONFERENCE HIGHLIGHTS Thursday, November 8 Join USENIX as we celebrate the 10th Birthday Party for Linux! The reception will be followed by the famous Linux BOF with Linus Torvalds, Jon "maddog" Hall, Ted Ts'o, Bryan Andregg, and a few hundred of your peers. The Open Source Development Lab (OSDL) is hosting a hothouse. OSDL's new Scalable Test Platform (STP) will be open to developers for testing kernel patches on OSDL's 1-way to 16-way servers. Members of the lab's expert staff will be on hand to discuss datacenter Linux requirements such as scaling, clustering and hardening. Bring your patches to see if they can take the heat of some serious testing! With exceptional content, speakers and tutorials, ALS '01 remains the only truly technical conference for the open source community, providing an important forum for discussion, both political and technical - - and bringing the community together to have some fun! For the complete conference schedule and to register visit: http://www.linuxshowcase.org We look forward to seeing you in Oakland next month. - The USENIX Association Staff =============================================================== 5th Annual Linux Showcase & Conference (ALS 2001) is sponsored by USENIX, the Advanced Computing Systems Association, and the Atlanta Linux Showcase, in cooperation with Linux International. =============================================================== ----- End forwarded message ----- -- Randomly Generated Tagline: Two-hundred-thirty-nine pounds?! I'm a blimp! Why are all the good things so tasty? -- Homer Simpson Brush With Greatness

Oct. 13, 2001

Scanner

by John Murphy

Looking for suggestion on a scanner for Suse. One with at least 42 bit or higher in the $100 to $200 dollar range. Have gone through the hardware databases but most home/office mid-range scanners listed are pretty old. Possible the listing hasn't been updated in a while. I've gone through the Sane site and Suse. If you have good 42bit or higher scanner working through Sane and Gimp love to hear about it. Trying to save myself from buying the wrong one making me move back to windows, save me!! John -- Contentment is not the fulfillment of what you want, but the realization of how much you already have.

Oct. 12, 2001

Re: [Wlug] more on event correlation...

by Mike Peckar

Whoops, didn't mean to send to the entire list - I guess I had too many mini oreo cookies last night... ----- Original Message ----- From: Mike Peckar <ov(a)fognet.com> To: <wlug(a)mail.wlug.org> Sent: Thursday, October 11, 2001 11:27 PM Subject: [Wlug] more on event correlation... > Nice meeting you tonight, Chuck, and THANKS for the redhat cd's... > > sec was the freeware event correlation tool I spoke of tonight: It is a > straightforward perl script and doesn't implement a full state machine, but > it nevertheless provides some inklings of what more complciated event > correlators do. Check it at http://kodu.neti.ee/~risto/sec/ > > The best commercial event corellation tools IMHO are Nervecenter, Taave, > Smarts, and Netcool. Each has its niche where it's best in class, and > there are others, like HP's ECS, Logec, G2, etc. > > My friend Doug Stevenson is a specialist in event correlation and wrote the > Maji spec: the open source event correlation engine being developed under > the umbrella of OpenNMS (yeah, so, it'll be java - but it will also be very > feature rich). He masterfully defines some of the layers of granularity that > one might see amongst the different offerings in the Event Correlation > space. Types we talked about tonight include event correlation (reducing > traps) and device correlation (mapping switch states to events). His > definitions are listed below... > > Mike > > > > <snipped message> > OK... > > Here goes... > § Event Correlation > > § Alarm Correlation > > § Device Correlation > > § System Correlation > > § Service Correlation > > § Performance Correlation > > § Security Correlation > > Event Correlation - This is a correlation where multiple events are filtered > and processed, thereby reducing the number of events presented. This is > primarily done with event tally counts and trap problem verification. > > Alarm Correlation - This is a correlation of alarms and alerts depicting > true problems or root causes and their current status. Side effect alarms or > alarms occurring as a result of a root cause alarm are suppressed or become > subordinate to the root cause alarm. > > Device Correlation - This is a correlation of devices, their specific > internal components (both hardware and software), and the device's behavior > with other devices. Additionally, device correlation lends itself toward > configuration management as it is a dynamic inventory of devices, > subsystems, components, and behaviors. > > System Correlation - This is a correlation of devices and managed objects as > they pertain to an overall system. This level of correlation enables one to > manage and classify a conglomeration of managed objects as a manageable > entity. > > Service Correlation - This correlation is used to determine the devices and > systems that make up an IT service. In essence, this is the correlation of > managed objects and systems to business rules; similar to a translation of > terms from computers and systems to business services. The Service > Correlation can be extended to customer impact analysis, business > profitability impact analysis, etc. > > Performance Correlation - This correlation is used to determine the effects > performance has with regards to a fault. It is unique in that performance > correlation can be applied to enhance the correlation of all of the other > categories. > > Security Correlation - This correlation is used to determine the degree of > threats caused by security incidents. It is unique in that security > correlation is embedded among all the other six categories described above. > > HTH, > > Doug... > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Oct. 12, 2001

more on event correlation...

by Mike Peckar

Nice meeting you tonight, Chuck, and THANKS for the redhat cd's... sec was the freeware event correlation tool I spoke of tonight: It is a straightforward perl script and doesn't implement a full state machine, but it nevertheless provides some inklings of what more complciated event correlators do. Check it at http://kodu.neti.ee/~risto/sec/ The best commercial event corellation tools IMHO are Nervecenter, Taave, Smarts, and Netcool. Each has its niche where it's best in class, and there are others, like HP's ECS, Logec, G2, etc. My friend Doug Stevenson is a specialist in event correlation and wrote the Maji spec: the open source event correlation engine being developed under the umbrella of OpenNMS (yeah, so, it'll be java - but it will also be very feature rich). He masterfully defines some of the layers of granularity that one might see amongst the different offerings in the Event Correlation space. Types we talked about tonight include event correlation (reducing traps) and device correlation (mapping switch states to events). His definitions are listed below... Mike <snipped message> OK... Here goes... § Event Correlation § Alarm Correlation § Device Correlation § System Correlation § Service Correlation § Performance Correlation § Security Correlation Event Correlation - This is a correlation where multiple events are filtered and processed, thereby reducing the number of events presented. This is primarily done with event tally counts and trap problem verification. Alarm Correlation - This is a correlation of alarms and alerts depicting true problems or root causes and their current status. Side effect alarms or alarms occurring as a result of a root cause alarm are suppressed or become subordinate to the root cause alarm. Device Correlation - This is a correlation of devices, their specific internal components (both hardware and software), and the device's behavior with other devices. Additionally, device correlation lends itself toward configuration management as it is a dynamic inventory of devices, subsystems, components, and behaviors. System Correlation - This is a correlation of devices and managed objects as they pertain to an overall system. This level of correlation enables one to manage and classify a conglomeration of managed objects as a manageable entity. Service Correlation - This correlation is used to determine the devices and systems that make up an IT service. In essence, this is the correlation of managed objects and systems to business rules; similar to a translation of terms from computers and systems to business services. The Service Correlation can be extended to customer impact analysis, business profitability impact analysis, etc. Performance Correlation - This correlation is used to determine the effects performance has with regards to a fault. It is unique in that performance correlation can be applied to enhance the correlation of all of the other categories. Security Correlation - This correlation is used to determine the degree of threats caused by security incidents. It is unique in that security correlation is embedded among all the other six categories described above. HTH, Doug...

Oct. 12, 2001

Re: [Wlug] REMINDER: WLUG Meeting Thursday October 11th

by Aljerin L. Butler, Jr.

Andy Stewart wrote: > HI everybody, > > This is a reminder about the upcoming WLUG meeting to be held in Kinnicutt > Hall at WPI on Thursday, October 11th at 7:00 PM. > > On the agenda: > > 1) A discussion of whether or not WLUG should join the Boston User Groups > organization. Check out http://www.bostonusergroups.com for more > information. These folks have legally incorporated as an organization to > act as an umbrella group for all sorts of computer user groups in / around > Boston, southern NH, northern RI, and as far west as Worcester. We have > been invited to join, and I recommend that we do so. The initial cost to > the group would be $50, which we can easily afford. More on this at the > meeting...... > > 2) Outcome of the most recently held install fest at WPI last week > > 3) Technical Q/A > > 4) I'll have 6 or 8 copies of StarOffice 6.0 beta available on CD > > 5) The last of the giveaways! (I'll get more at the Annual Linux Showcase > in Oakland next month). > > 6) Other topics of interest? If you have a burning desire to address the > group, let me know. > > 7) Update on Lancaster and plan our next trip to that site. > > FYI: As many of you know, I have been contributing to an open source > project called gimp-print. My contribution is as the writer of the users > guide. Well, the users guide has been officially released for the first > time! Check out http://sourceforge.net/projects/gimp-print for a really > great set of printer drivers (my stuff is in version 4.1.99-b3). Feel > free to fire documentation barbs my way. :-) > > Afterwards, I'm sure we'll take our monthly pilgrimage to the Boynton > Restaurant for pizza and beers. All are invited! > > -- > Andy Stewart > Founder > Worcester Linux Users' Group > Worcester, MA, USA > http://www.wlug.org > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug Andy, I won't be able to make the meeting, but you got my vote on joining with Boston. Save a StarOffice CD for me. Al Butler

Oct. 11, 2001

Re: [Wlug] apache question

by Theo Van Dinter

On Thu, Oct 11, 2001 at 12:09:40PM -0400, Brad Noyes wrote: > "GET /phpnuke/ HTTP/1.1" 200 19586 "-" "Mozilla/5.0 (compatible; Konqueror/2.2.1-0.rh71.1.cups)" > Here's an unsessful attempt > "GET /phpnuke/ HTTP/1.1" 200 5 "-" "Mozilla/5.0 (compatible; Konqueror/2.2.1-0.rh71.1.cups)" > > Anyone have any idea why this might i might be only getting > such a small object returned to the client, resulting in a > blank page? This isn't going to help you, but the problem is with phpnuke -- Apache just reports what the PHP generates, so if it sends 5 bytes, that's why it's a blank page. (ie: there's nothing from this log file that would help pinpoint your problem beyond "it's phpnuke" ...) I'd look around for bugs with the version of phpnuke that you're running. Does it have any logs that you can go through, or a debug mode or something? -- Randomly Generated Tagline: "We all know Linux is great...it does infinite loops in 5 seconds." (Linus Torvalds about the superiority of Linux on the Amterdam Linux Symposium)

Oct. 11, 2001

apache question

by Brad Noyes

Hi all, i have a question about apache. I've loaded a php program called phpnuke (simaler to slashcode). But sometimes when i try to load the main page i get a blank page. I looked though the logs, and the php code. The only thing that i could find that was of interest was the access_log file. Here's a successful attempt "GET /phpnuke/ HTTP/1.1" 200 19586 "-" "Mozilla/5.0 (compatible; Konqueror/2.2.1-0.rh71.1.cups)" Here's an unsessful attempt "GET /phpnuke/ HTTP/1.1" 200 5 "-" "Mozilla/5.0 (compatible; Konqueror/2.2.1-0.rh71.1.cups)" The difference is the field following '200'. I looked on the net and i found that the numbers '19586' and '5' are the size of the object being returned to the client. Anyone have any idea why this might i might be only getting such a small object returned to the client, resulting in a blank page? Thanks, --Brad

Oct. 11, 2001

Re: [Wlug] next week's installfest

by doug waud

Mike Peckar wrote: > > Hey Andy, > > I read with interest about your installfest on the listserve (I pile up > emails and pour through infrequently) and I'm sorry I missed it - I find > myself in need of an upgrade on one of my boxes. Hi I was at the installfest but, since we had an excess of installers, I decided to sit next to Chuck and suck up expertise by osmosis. The bottom line is that, back home the next morning, I was able to do a full network install of Red Hat 7.1 --- not bad for an amateur/newbie. The bottom line is that, if you have broadband access (I have a cable connection with the town cable company in Shrewsbury) you can suck the whole works off Chuck's mirror at WPI. You can get more details tomorrow night at the WLUG meeting or, if you are in a hurry, first ftp to 130.215.24.5 and move to /pub/mirrors/redhat/linux/7.1/os/i386/images and do a directory listing. You will see a file bootnet.img; download it. Then copy it to a good floppy. Specifically, dd if=/home/bootnet.img of=/dev/fd0 bs=1440 (but, if you, like I, do not trust floppies, precede this with /sbin/badblocks -v /dev/fd0 1440 to make sure floppy disk is ok) At this point you boot from that floppy and a Red Hat install screen comes up and you just follow the instructions for an upgrade. Just press enter at the initial boot prompt to get the option at the top of that first screen -- install/upgrade. When asked for installation method pick FTP. If your box normally uses DHCP pick that on the next screen, otherwise (my case) enter its IP dotted quad etc. When asked for the source, again use 130.215.24.5 and use /pub/mirrors/redhat/linux/7.1/os/i386 for the directory. (do not check use non-anonymous FTP) The Red Hat process will take over from there. You will see lots of activity on the ethernet card lights as the ramdisk stuff is downloaded. This tells you that you got things right up to this point! :-) A couple of screens later you get to pick the class of install. You would want Upgrade. The rest is downhill and pretty obvious, even to me. doug -- Douglas R Waud, Professor Emeritus -- Pharmacology University of Massachusetts Medical School Mailing address: 17 Lantern Lane, Shrewsbury, MA 01545-2006

Oct. 10, 2001

REMINDER: WLUG Meeting Thursday October 11th

by Andy Stewart

HI everybody, This is a reminder about the upcoming WLUG meeting to be held in Kinnicutt Hall at WPI on Thursday, October 11th at 7:00 PM. On the agenda: 1) A discussion of whether or not WLUG should join the Boston User Groups organization. Check out http://www.bostonusergroups.com for more information. These folks have legally incorporated as an organization to act as an umbrella group for all sorts of computer user groups in / around Boston, southern NH, northern RI, and as far west as Worcester. We have been invited to join, and I recommend that we do so. The initial cost to the group would be $50, which we can easily afford. More on this at the meeting...... 2) Outcome of the most recently held install fest at WPI last week 3) Technical Q/A 4) I'll have 6 or 8 copies of StarOffice 6.0 beta available on CD 5) The last of the giveaways! (I'll get more at the Annual Linux Showcase in Oakland next month). 6) Other topics of interest? If you have a burning desire to address the group, let me know. 7) Update on Lancaster and plan our next trip to that site. FYI: As many of you know, I have been contributing to an open source project called gimp-print. My contribution is as the writer of the users guide. Well, the users guide has been officially released for the first time! Check out http://sourceforge.net/projects/gimp-print for a really great set of printer drivers (my stuff is in version 4.1.99-b3). Feel free to fire documentation barbs my way. :-) Afterwards, I'm sure we'll take our monthly pilgrimage to the Boynton Restaurant for pizza and beers. All are invited! -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 10, 2001

Re: [Wlug] ATAPI (internal) ZIP drive

by Keith Wright

> From: Skip Gaede <sgaede(a)mediaone.net> > > I still haven't gotten the disk formatted with ext2. I suspect it has to do > with the fact that mke2fs wants to see a partition table. I don't have the > support compiled for formatting a umsdos filesystem. Iomegaware has a smal > program "iw" that's supposed to allow you to make an ext2 fs on the disk, but man fdisk -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

Oct. 10, 2001

Re: [Wlug] next week's installfest

by Andy Stewart

Hi Mike, I don't personally have RedHat 7.1 in my possession (I'm a SuSE kinda guy) but I'm sure there are folks in the group who have copies. I suspect that people will bring these to the next meeting, so if you make it, you could probably grab a copy that way. Andy On Tuesday 09 October 2001 10:12 pm, you wrote: > Hey Andy, > > I read with interest about your installfest on the listserve (I pile up > emails and pour through infrequently) and I'm sorry I missed it - I find > myself in need of an upgrade on one of my boxes. > > I saw you have many copies of several recent distributions - I am > looking to get a copy of redhat 7.1 - got any left over from last week? > I'd love get a set... > > TIA, and one of these days I'd love to actually catch a meeting.. > > Mike > ----- Original Message ----- > From: Andy Stewart <andystewart(a)mediaone.net> > To: <wlug(a)mail.wlug.org> > Sent: Monday, October 01, 2001 6:45 PM > Subject: Re: [Wlug] next week's installfest > > > HI Tim, > > > > This sounds really great - thanks! If you can get the KDE 2.2.1 rpms, > > that might be something to put onthe "others" CD. > > > > Andy > > > > On Monday 01 October 2001 08:39 am, you wrote: > > > This is what I plan on bringing. > > > > > > 1. 5 sets of Redhat 7.1 > > > 2. 5 sets of Debian 2.2rev3 > > > 3. 10 cd's with the following.. > > > a. latest kernel/modtools (2.4.10) > > > b. StarOffice > > > c. latest mozilla benchmark (0.9.4) > > > > > > If anybody has some input on what else I should put on the "others" > > > cd, let me know. > > > > > > Tim. > > > > > > -----Original Message----- > > > From: David Lee Ludwig [mailto:davidl@WPI.EDU] > > > Sent: Saturday, September 29, 2001 1:05 AM > > > To: 'wlug(a)mail.wlug.org' > > > Subject: RE: [Wlug] next week's installfest > > > > > > On Fri, 28 Sep 2001, Keller, Tim wrote: > > > > What you might want todo is just grab everything; debs, rpms and > > > > tarballs. > > > > > > > > That way, not matter what distribution we load, we'd be able to > > > > install. > > > > > > I was planning on grabbing as much as I can, however each > > > version of each distribution has a different set of Ximian Gnome > > > packages that run around 225MB a piece. > > > > > > What CDs do people plan on bringing? > > > > -- > > Andy Stewart > > Founder > > Worcester Linux Users' Group > > Worcester, MA, USA > > http://www.wlug.org > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 10, 2001

Re: [Wlug] next week's installfest

by Mike Peckar

Hey Andy, I read with interest about your installfest on the listserve (I pile up emails and pour through infrequently) and I'm sorry I missed it - I find myself in need of an upgrade on one of my boxes. I saw you have many copies of several recent distributions - I am looking to get a copy of redhat 7.1 - got any left over from last week? I'd love get a set... TIA, and one of these days I'd love to actually catch a meeting.. Mike ----- Original Message ----- From: Andy Stewart <andystewart(a)mediaone.net> To: <wlug(a)mail.wlug.org> Sent: Monday, October 01, 2001 6:45 PM Subject: Re: [Wlug] next week's installfest > > HI Tim, > > This sounds really great - thanks! If you can get the KDE 2.2.1 rpms, > that might be something to put onthe "others" CD. > > Andy > > > On Monday 01 October 2001 08:39 am, you wrote: > > This is what I plan on bringing. > > > > 1. 5 sets of Redhat 7.1 > > 2. 5 sets of Debian 2.2rev3 > > 3. 10 cd's with the following.. > > a. latest kernel/modtools (2.4.10) > > b. StarOffice > > c. latest mozilla benchmark (0.9.4) > > > > If anybody has some input on what else I should put on the "others" cd, > > let me know. > > > > Tim. > > > > -----Original Message----- > > From: David Lee Ludwig [mailto:davidl@WPI.EDU] > > Sent: Saturday, September 29, 2001 1:05 AM > > To: 'wlug(a)mail.wlug.org' > > Subject: RE: [Wlug] next week's installfest > > > > On Fri, 28 Sep 2001, Keller, Tim wrote: > > > What you might want todo is just grab everything; debs, rpms and > > > tarballs. > > > > > > That way, not matter what distribution we load, we'd be able to > > > install. > > > > I was planning on grabbing as much as I can, however each > > version of each distribution has a different set of Ximian Gnome > > packages that run around 225MB a piece. > > > > What CDs do people plan on bringing? > > -- > Andy Stewart > Founder > Worcester Linux Users' Group > Worcester, MA, USA > http://www.wlug.org > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Oct. 10, 2001