Slashdot Mirror

In the '60 electric freight trains were used a lot. like this rail in Turin, used only by FIAT freight trains, and still used in the '80s (note the Fiat Ritmo that were carried).
In the '50 in Italy were used electric lorries using overhead wires powered by an hydroelectric central that was an hack made because the road was steep for the engines of the time and for the electric company, electricity was cheap.
For public transportation the problem of electric vehicles was solved more than 100 years ago with trams. Start to put back tramways and overhead wires for the trolleybuses, this could be done now, with proven technologies. It's not hip for a millenial, maybe.

You could send a hash over your data + your name to a publicly available time stamp server *before* you disclose it anonymously. For a list of available servers see this link: http://security.polito.it/ts/

At my university http://www.polito.it/ are beta-testing a system that - automatically turns off the PC at a given time - automatically turns it on using WOL features at a given time - allows user to turn on/off their PC using a web page. - allows IT to manage on/off time in case patches or updates must be deployed Once finished, we plan to release it as GPL.

I crossed paths with Michael many times, most recently at a resort in Southern California in the early 90s.

Earlier than that when I ran a TRS-80 software project at Programma International and we released a product named Pencil Point which added inline formatting (similar to what later became HTML) based on codes I'd used on earlier Alphatype and CompuGraphic typesetting systems.

Before then, Electric Pencil was strictly wysiwyg. I started development on Pencil Point before merging my Practical Applications company with Programma International, after meeting with Arthur Schawlow (yes, that Arthur Shawlow: http://en.wikipedia.org/wiki/Arthur_Schawlow) who was working towards getting Stanford University to switch from expensive Wang word processing systems to using the TRS-80 Model One with a hardware hack to enable lower case.

While that project never caught on (probably because of the required hardware hack), Shawlow was definitely ahead of his day, as was Michael Shrayer.

Michael was a cameraman (I don't remember whether for television or film) when he wrote Electric Pencil. Based on conversations with him, I believe he never really earned that much money from the project. I don't believe he was ever a millionaire.

Right, so I've been searching and the FSF Europe has been using live streams more than the FSF. They reference "...the Free Software activists of the Politecnic University of Torino, though, who volunteered to use their Free Software video streaming software to stream the entire sessions live, and who will be offering recordings of the sessions online..." in all the places streaming is referenced.

This seems to be a reference to Feng, a "... multimedia streaming server compliant with the IETF's standards for real-time streaming of multimedia contents over Internet. Feng implements RTSP - Real-Time Streaming Protocol (rfc2326) and RTP/RTCP - Real-Time Transport Protocol/RTP Control Protocol (rfc3550) supporting the RTP Profile for Audio and Video Conferences with Minimal Control (rfc3551)." Maybe the FSF will use the same.

Then again, maybe they'll stream it in RealPlayer :)

let me also share this record (announced also 24 may in in this Italian newspaper): the Ixem team of "Politecnico" in Torino has set up a 20megabit connection from "Capanna Margherita" (Mount Blanc, 4556m of altitude) with "Pian Cavallaro" (a point on the mountain range that divides Tuscany from Emilia-Romagna); the two points were 295km apart; the hw used was a 386 CPU running Linux; the network is Hiperlan type 2 and Wi-Max 802.16 (EIRP regulatory requirements limited to 30 dBm is satisfied). They have also set a webcam in Capanna Margherita, that is accessed thru the link

let me also share this record (announced also 24 may in in this Italian newspaper): the Ixem team of "Politecnico" in Torino has set up a 20megabit connection from "Capanna Margherita" (Mount Blanc, 4556m of altitude) with "Pian Cavallaro" (a point on the mountain range that divides Tuscany from Emilia-Romagna); the two points were 295km apart; the hw used was a 386 CPU running Linux; the network is Hiperlan type 2 and Wi-Max 802.16 (EIRP regulatory requirements limited to 30 dBm is satisfied). They have also set a webcam in Capanna Margherita, that is accessed thru the link

let me also share this record (announced also 24 may in in this Italian newspaper): the Ixem team of "Politecnico" in Torino has set up a 20megabit connection from "Capanna Margherita" (Mount Blanc, 4556m of altitude) with "Pian Cavallaro" (a point on the mountain range that divides Tuscany from Emilia-Romagna); the two points were 295km apart; the hw used was a 386 CPU running Linux; the network is Hiperlan type 2 and Wi-Max 802.16 (EIRP regulatory requirements limited to 30 dBm is satisfied). They have also set a webcam in Capanna Margherita, that is accessed thru the link

...but to login on the wi-fi network of my university (http://www.polito.it/ SSL 2.0 is required. The fun part is that we HAVE a IT department, and they TEACH us that SSL 2.0 is deprecated... but obviously the brilliant minds of our teachers are better employed elsewhere... (and we buy rubbish from third parts)

Its all well and good M$ locking the front door, but they left all the windows open.

Power users and worm writers can just install Windows PCAP libraries.

I haven't done or seen testing of both, but I have heard FreeBSD is a bit faster. Of course, that is not based on the crap Opperman says.

Oppermann said Linux can't do much more than 100Kpps. He didn't even qualify that statement with the type of hardware, he flat out said Linux couldn't do much more than 100Kpps.

The poster said he had Linux doing 1.3Mpps.

here is one showing Linux doing about 500Kpps on practically identical hardware. So I wouldn't trust anything that troll Oppermann says about Linux.

By the way, there is a patch for Linux floating around that implements packet prefetching for the e1000 driver (something that BSD does) which allows it to push 60B packets at wire speed and would surely help with routing. Unfortunately it also exposes some hardware bugs, but FreeBSD typically trades off speed for stability. Linux doesn't have that luxury, unfortunately.

Oh, another thing, FreeBSD is only faster when doing fast forwarding between interfaces (Linux doesn't do that). If the host CPU actually has to examine the packet, then you can't do fast forwarding... and FreeBSD is slower then. On a real world router, you usually can't do fast forwarding.

Were the links in the headline not enough???

"Using psSDK (instead of WinPCAP) and a new MAC caching subsystem allows them to become the fastest frame tunnel available. "

Just in case his site gets /.'ed, here is his impressive list of links. - Jonah Hex in non-karma whore mode.
Downloads
Linux Wipe Tools: Three shell scripts for securely wiping all data from the swap partition, wiping unused disk space on the root partition, or wiping an entire disk, by Thomas C. Greene.

No Messenger: A batch file that eliminates Windows Messenger and fixes the problem of Outlook Express loading slowly when Messenger is absent, by an anonymous friend of The Register.

FileCheck MD5: A free, simple, lightweight MD5 utility for Windows, courtesy of Brandon Staggs.

Errata: A text file containing my various blunders and ommissions in the book (right-click and "save as," or view as HTML). Last updated 6 June 2004.

Links to Other Goodies
Mozilla: A free, open source Web browser and e-mail client for Linux and Windows, feature rich and far more secure than Internet Explorer and Outlook Express. Recommended for novices.

Firefox: A free, open source, stand-alone Web browser for Linux and Windows. Very light and fast. Recommended for intermediate users.

Thunderbird: A free, open source e-mail and news client for Linux and Windows. Recommended for intermediate users.

GnuPG: Gnu Privacy Guard; a free, open source replacement for PGP, for Windows and Linux.

WinPT: Windows Privacy Tools; a free, open source GUI frontend to GnuPG for Windows.

Anonymizer: Various services for anonymous Web surfing, e-mail, chat, etc.

OpenSSH: A free, open source SSH (Secure Shell) client and server for Windows and Linux.

PuTTY: A free, open source GUI frontend to OpenSSH for Windows.

Ethereal: A free, open source network traffic analyzer for Windows and Linux. Windows users will need to install WinPcap before installing Ethereal.

Ad-Aware: A free, closed source adware/spyware scanner for Windows.

SpyBot Search & Destroy: A free, closed source adware/spyware scanner for Windows.

Sam Spade: CGI gateways to numerous online tools, such as whois, traceroute, etc.

SourceForge: A vast repository of open-source software for Windows and Linux. The site can be overwhelming, but it has a search engine to help users locate packages.

GNU Project: The home base of the open source movement. A repository of open source products, chiefly for UNIX-compatible systems.

Security Information
About Internet/Network Security: An informative and useful site dealing with computer and Internet security, with reviews of security products and books, practical howtos and tips, and links to numerous tools and information resources, geared toward beginners and intermediate users.

SANS Institute: An educational and research organization with a vast archive of security research documents, news, and advisories, geared toward intermediate and advanced users.

CERT/CC: Computer Emergency Response Team Coordination Cente

Some programs to help you:

Ardour - A program designed to record edit and mix multi-track audio. Now my use of audio recording/editing experience is strictly armature but this seems to be a pretty good Cool Edit/Adobe Audition like program when comparing feature lists of both(excluding the new additions by Adobe that allow you to work with video).

K3B - this is one of the best CD/DVD burning programs Iv seen on any platform.

Freeamp - a program similar to winamp and XMMS in look and feel.

amaroK - Another audio player, although this player does not shrink to a compact size that can be place out of the way. It does, however, shrink to an icon in your utility bar in KDE.

• Aida32, hardware display and diagnotics
• CoolTaskBar to sort out the mess (particularly in Windows 2000)
• FreshUI, tweaking utility
• TweakUI, same as FreshUi, but different options, these two combined give you a lot of different options.
• PowerToys, tweaking utilities. In particular the [Send file name to clipboard] and other options which I cannot work on Windows without.
• Get everything from SysInternals, a ton of wonderful stuff here, too much to mention, but will let you track every file access, every registry write, every debugging message. Tons of great command line tools too. For instance, ever wanted to delete a file only to get a "There has been a sharing violation. The source or destination file may be in use" message ? Where Windows doesn't even know for sure if the file is in use or not. Get Process Explorer from SysInternals.com and type the file name in its [Find][Find Handle] menu. Close or kill the appropriate process if necessary.
• Desktop Manager or FlashDesktops, gives you 4 desktops just like on Linux.
• Alt-Tab Replacement, Gives a screenshot of window Alt-Tabbing, useful when you have multiple unsaved docs open, etc...
• OpenCommandWindowHere, right-click on folder option to open command prompt window at that folder, useful for deep or complicated folder names
• Memstat XP, lets you monitor memory usage in tray, small and simple but not that useful.
• NetMeter, lets you monitor network usage in the tray, small and simple but does not seem to work on all types of network interfaces. Online Eye Pro works better and has lots more options, it's based on WinPCap just like Ethereal (see below).
• TrayMeter, lets you monitor cpu usage in the tray, small and simple.
• WinRAR, unzip anything you want, supports tar.gz, zip, rar, arc, and much more.

Network Utilities

• Xmanager, excellent X-windows manager.
• FreshDownload, Download Manager
• ssh, scp, wget, rsync... comes on CYGWIN
• Putty (and friends), ssh client and other utils (but ssh is part of cygwin and works just as well)
• WinSCP, a wonderful SCP/SFTP client for windows (scp is part of Cygwin but this is easier to use)
• NetScanTools a GUI interface for most command line tools also found in cygwin
• WebDrive, mount various types of network protocols (ftp, http, ssh) as local drives, buggy but useful (RiverFront)
• POPfile the best spam remover I've found so far (works with outlook express and any app)

I've ran into issues with WinPcap 3.0 and Windows. Not specifically with ethereal but when i use Snort. WinPcap 2.2 & 2.3 have been the most stable in my book. You can find all the older versions here. WinPcap 3.1 is now available would try that first. Haven't used it personally though.

I've ran into issues with WinPcap 3.0 and Windows. Not specifically with ethereal but when i use Snort. WinPcap 2.2 & 2.3 have been the most stable in my book. You can find all the older versions here. WinPcap 3.1 is now available would try that first. Haven't used it personally though.

Give credit here but this is how I got it working on 2000:

[quote] For windows get winpcap [polito.it]
then get ethereal for windows [ethereal.com]
and get windump [polito.it]

SANS.org has all the info: Packet capture apps [sans.org][/quote]

Give credit here but this is how I got it working on 2000:

[quote] For windows get winpcap [polito.it]
then get ethereal for windows [ethereal.com]
and get windump [polito.it]

SANS.org has all the info: Packet capture apps [sans.org][/quote]

Actually according to the coLinux installation page, it uses cygwin1.dll which is the CygWin api library that translates linux function calls to windows function calls.

It also uses the WinPCap kernel level packet library to directly access the network hardware layer in windows.

while tcpdump is afaik a Linux-only tool

No, it works on many other UN*Xes (on at least some of which it ran before it ever ran on Linux), just as Ethereal does, and it even works on Windows, as long as you replace "tcp" with "win" :-) - WinDump is a port of tcpdump to Windows, done by the WinPcap developers.

Yes yes, your statement is more accurate. I just usually think of the filter string as being part of tcpdump, and you can use that within ethereal. But yes, even that is really handled by libpcap (or winpcap or other variants, if we're getting super-specific... not that we should be, because I've certainly made some mistake in this post that someone would want to knee-jerk respond to).

For windows get winpcap
then get ethereal for windows
and get windump

SANS.org has all the info: Packet capture apps

For windows get winpcap
then get ethereal for windows
and get windump

SANS.org has all the info: Packet capture apps

analyzer is a native win32 app that is directly associated with winpcap, the packet capture architecture on which most win32 sniffing-type freeware depends.

analyzer is a native win32 app that is directly associated with winpcap, the packet capture architecture on which most win32 sniffing-type freeware depends.

I use tcpdump UNIX-side, and Ethereal Windows-side. Personally? I find Ethereal hard to use, but it gets the job done. I've traced down bugs in OpenBSD TCP stacks with it on my production servers. I've tried half a dozen other packages but they didn't add enough value to make them worth trying to hit my boss up for cash.

To install Ethereal, you will need to download and install the low-level WinPcap driver.

And you may find the Ethereal packet analysis plug-in Packetyzer helpful; sometimes reading raw logs gets a bit annoying.

--LP

Analyzer: a public domain protocol analyzer

does a good job under Windows.

Well there's always web accelerating in squid and ProxyPass in Apache. Which, I agree, are hacks. But they work.

Download winpcap. Unlike Unix libpcap, it includes both functions to create packets as well as capture them. It does not use winsock but rather installs an NDIS driver that sits lower in the TCP stack. You can then write a simple program that listens for packets and then manually constructs packets with UDP/TCP headers and sends them out. Completely bypasses Kerio.

If you'd like, I can post the code. I tested this about a month ago and it worked against the latest version of Kerio Personal Firewall. Took about an hour of work for a proof-of-concept program. You could get really crazy and implement a TCP stack in userspace and then write all kinds of trojans that would bypass TPF. Only works with privileged accounts since you need permissions to install an NDIS driver, but outside of controlled corporate environments, all Windows users use the Administrator account anyway.

Sygate and ZoneAlarm both install low-level NDIS drivers and are not susceptible to this attack. (At least I couldn't figure out how to bypass them - it may be possible to install a TDI hook which sits below NDIS, but this looks like months of work.)

Other than that, TPF really is much nicer than Sygate or ZoneAlarm, but this is a pretty gaping hole. I'd recommend Sygate over ZoneAlarm.

No, the whole development process involves lots of randomly-generated code being run, after which the best-performing chunks are gathered together, randomly modified umpteen different ways, ALL of which are re-run. After some number of iterations, the result is distributed as the latest driver. It is already known that genetic algorithm development can lead to things that work great, but nobody can understand how (especially with respect to hardware device development). Here is a link to a whole bunch of papers on the topic.

http://analyzer.polito.it/

Try it yourself -- use windump (tcpdump for Windows) to capture the packet trace.

Report back, share the news. I don't think there is a real "request" packet as mentioned in the blog article, but would sure like to see it. If there is such a packet, perhaps it's Transactional TCP (RFC1644).

Not too familiar with strace, but there is an strace for NT (Alpha build, don't use on production servers according to the notes). Also, Sysinternals makes some good utilities for debugging...which, once again, I don't get into. I'm not sure why having the source code would allow me (a non programmer) to see what the application is doing internally any more than I can deduce what Windows is doing internally by looking at external events. Oh, and tcpdump is also available for Windows as WinDump (bonus points for being BSD licensed).

I've never reinstalled a Windows Server because it couldn't be fixed. I've reinstalled because of hardware failures, misconfigurations or upgrades, but that's about it. I have, however, reinstalled Windows desktops because I didn't want to take the time to fix them. Like I said, though, if I can fix it about 2 hours with a reinstall, it's a better proposition than spending 4 fixing it.

Windows the OS is very stable...it will run on decent hardware for just shy of forever. Windows apps and assorted device drivers, however, are all over the place in terms of stability and are the cause of virtually every BSOD or crash I have ever seen. I do wish Windows had a better model between device drivers and the kernel, but then I don't run flaky drivers on servers...that's more a desktop concern. Flaky apps should be fixed by the vendor or changed to a competing app.

Binaries for windump and analyser here (Analyser is a very nice gui for Windows packet capture).

Binaries for windump and analyser here (Analyser is a very nice gui for Windows packet capture).

I would recommend running a program such as Linux TCPDump, or WinDump, the Windows port and see what the traffic is. If it's NetBIOS or something of that ilk and you are running Windows, then not only are you inconvenienced, you are at risk of other folks exploring your network neighborhood, etc.

Analyzer is the way to go. Free, open sourced, and really nice UI.

If you're using Windows, at least.

You'll need winpcap to get it to work right.

You'll need WinPcap to get it to capture packets at all - but you'll need WinPcap to get Ethereal to capture packets on Win32 as well.

The Politecnico di Torino folk also have WinDump, a port of tcpdump to Win32, also using WinPcap.

Search for it on packetstorm.

Or just go to the Analyzer site (I'm assuming from the reference to WinPcap that you're talking about the Politecnico di Torino Analyzer). If the site isn't up, try again later.

Analyzer is the way to go. Free, open sourced, and really nice UI.

If you're using Windows, at least.

You'll need winpcap to get it to work right.

You'll need WinPcap to get it to capture packets at all - but you'll need WinPcap to get Ethereal to capture packets on Win32 as well.

The Politecnico di Torino folk also have WinDump, a port of tcpdump to Win32, also using WinPcap.

Search for it on packetstorm.

Or just go to the Analyzer site (I'm assuming from the reference to WinPcap that you're talking about the Politecnico di Torino Analyzer). If the site isn't up, try again later.

Analyzer is the way to go. Free, open sourced, and really nice UI.

If you're using Windows, at least.

You'll need winpcap to get it to work right.

You'll need WinPcap to get it to capture packets at all - but you'll need WinPcap to get Ethereal to capture packets on Win32 as well.

The Politecnico di Torino folk also have WinDump, a port of tcpdump to Win32, also using WinPcap.

Search for it on packetstorm.

Or just go to the Analyzer site (I'm assuming from the reference to WinPcap that you're talking about the Politecnico di Torino Analyzer). If the site isn't up, try again later.

Try Analyzer for windows. free, open sourced, impressive.

Try giving a URL for it.

I'll assume that you're referring to Analyzer from the folks at the Politecnico di Torino, the folks who also bring you WinDump, a port of tcpdump to Win32 systems, and WinPcap, a port of libpcap to Win32 systems (including drivers for Windows 9x and Windows NT, including NT 5.0^H^H^H^H^H^HWindows 2000), which is the library that Ethereal on Win32, Analyzer, and WinDump all use.

(The Politecnico di Torino site appears not to be responding at the time that I'm posting this; be patient - we sometimes get folks posting to the ethereal-users mailing list asking "that site is down, how do I get WinPcap?", for which the answer is "it's probably just temporarily down, try again later".)

Try Analyzer for windows. free, open sourced, impressive.

Try giving a URL for it.

I'll assume that you're referring to Analyzer from the folks at the Politecnico di Torino, the folks who also bring you WinDump, a port of tcpdump to Win32 systems, and WinPcap, a port of libpcap to Win32 systems (including drivers for Windows 9x and Windows NT, including NT 5.0^H^H^H^H^H^HWindows 2000), which is the library that Ethereal on Win32, Analyzer, and WinDump all use.

(The Politecnico di Torino site appears not to be responding at the time that I'm posting this; be patient - we sometimes get folks posting to the ethereal-users mailing list asking "that site is down, how do I get WinPcap?", for which the answer is "it's probably just temporarily down, try again later".)

Try Analyzer for windows. free, open sourced, impressive.

Try giving a URL for it.

I'll assume that you're referring to Analyzer from the folks at the Politecnico di Torino, the folks who also bring you WinDump, a port of tcpdump to Win32 systems, and WinPcap, a port of libpcap to Win32 systems (including drivers for Windows 9x and Windows NT, including NT 5.0^H^H^H^H^H^HWindows 2000), which is the library that Ethereal on Win32, Analyzer, and WinDump all use.

(The Politecnico di Torino site appears not to be responding at the time that I'm posting this; be patient - we sometimes get folks posting to the ethereal-users mailing list asking "that site is down, how do I get WinPcap?", for which the answer is "it's probably just temporarily down, try again later".)

Currently the freeware version of Optout only can detect and remove Aureate/Radiate/Binary Bliss (advert.dll) spyware. However, this type of spyware is embedded in hundreds of freeware products.

If you're looking for a utility to detect all Spyware, you will have to do it yourself using a program such as tcpdump or windump.