In my experience, ntop is only useful for diagnosing problems, as you cannot leave it running for too long without it killing your CPU.
ntop brought our 4 core intel machine to a standstill after a few days, it's ment for quick diagnosis but not long term monitoring.
On a side note - I like trafshow much better than ntop, I wish they would have continued developing trafshow instead of converting it into the web-based, memory sucking nightmare that is ntop.
Just MHO. Have you had success running ntop for longer than a few days?
While this won't track URL's, we use Argus for tracking bandwidth/host usage.
It's got a nice client interface to insert data into MySQL, damn near real-time, I can pull accurate reports within 30 seconds. Unfortunately the MySQL feature is kinda new & there's no really good web interfaces.
Not really an out of the box solution either, but it's free & if you're familiar with MySQL and web development, you can make a nice reporting interface fairly easily. I whipped one up with jQuery and flot for charting over a weekend, and tied it into our inventory database. It'll show network utilization grouped by the local source, with a count for bytes sent/recv for each remote host. But it's layer 2-4 only, so no URL's are reported.
One of these days I might release my web interface for Argus, but the code needs cleanup and commenting so eh...I wouldn't expect it any time soon.
and even one more difference, from TFA: Organizers said the trio was caught when they took their purloined password prizes to Wall of Sheep workers and asked them to post the information. The workers refused.
Interesting read...it specifically says:
'Don't choose a name after a project unique to that machine.'
I agree with the reasoning, but on large scale DNS deployments, I can also see this being a nightmare...
I just use arbitrary names, nothing too hard to spell.
I don't like this idea, and the article summary is somewhat misleading.
The software keeps track of friend's favorite youtube videos & myspace updates and yada yada -- but these sites already offer this functionality, why do we need an extension to do it for us?
What would be really cool, and what I mistakenly took the summary for, is a slash-style comment system for the Web. The ENTIRE web. Any page could potentially have a slashdot-style discussion attached to it...imagine the time-killing possibilities...
I've never actually used it because I'm too cheap to buy another 802.11 adapter, but from what I've read airpwn can do this, although I'm not sure how scriptable it is.
I know it did some fun things with goatse injection at defcon
I saw a TiVo commercial on real TV once, it was one of the funniest commercials ever and I've never seen it again.
This was probably five years ago or so, but here's a recap:
(Three men on golf course, 1 of them T'ing off, we see his back)
Man A: (Swings and misses shot, shuffles at crotch)
Man B: What's the matter, Bill?... Masculine Itch?
Man A: YES! How did you know??
Man B (Advertiser voice): Well, let me tell you about men's masculine itch cream!
(Scene cuts to 'flu-style' graph of man's crotch with lots of 'dots' focused on the crotch area)
Man B: You can see the affected area here... (blah blah)
Man B then whips out a bottle of 'Masculine Itch Cream' and bends down towards Man A's crotch
Man B: And you just apply to the affected area!...
(Scene cuts to a "There a some things on TV you don't want to see" style-ad w/ TiVo logo)
Everyone think's I'm some kinda of pervert when I try to explain that commercial...but it was hilarious.
Microsoft seems to make it a habit to offer no compatibility, sometimes even between their own products. Another example is that godforsaken winmail.dat file I'm always getting when newbies send me attachments in Outlook 97/2000. Gmail and yahoo transparently convert these for me, but good ole MS's hotmail.com doesn't. With hotmail, you need to download your own winmail.dat decoder and extract the files if you don't have access to Outlook.
Why doesn't MS offer compatibility between their own formats??? The world may never know...
I found CGI Programming with Perl really useful when I was learning, it goes over URL encoding and the acutal HTTP request/response. But after learning some perl, I prefer PHP. The syntax is clearer and the online manual is great...infact if you have any real programming experience (not html), you could just read the PHP manual and pick it up.
But, if you really wanna learn, you should buy a cheap box, and install some form of LAMP.
Having a machine overwrite the original copy of the file opened seems like a really bad idea. MS Office and I believe OpenOffice have features like this, but it does not overwrite the original. I prefer to manage multiple backups of data myself rather than let a machine do it, plus it keeps me in good practice.
But honestly, I don't see how the concept of 'files in folders' seems to elude so many people.
"A lot of people we were arresting had drug conviction backgrounds. Actually, what they said was, 'This is the new drug on the street,'" said Supik, an MPAA field investigator who assists local law enforcement in anti-piracy raids.
Where's the physical addiction?! If I stop watching or playing will I go into convulsions?
What I'd like to see is a minature HD-DVD/BluRay/whatever medium that comes in a tiny case. Something that's maybe 1in X 1in or so, enough to hold audio (video?) but be protected from being scratched.
Now I know people bitch about how a case would be "too clunky" and "I can't use a spindel!" But I'd much rather have the media protected...I always thought it was stupid to have the sensitive part out in the air like that.
Why don't we just make it a crime to withhold passwords from the police
And what happens when they give you the wrong password? Lie detectors? Torture?
Better yet, why don't we make it illegal to withhold any info from the police, at any time, for any reason?
Examination and investigation can fail to yield the expected result, but making it a crime to withhold something as personal as a password, which you may not even know, completely violates the word freedom.
Your wife divorcing you to marry some jerk she met on the internet
or
Your wife divorcing you to marry your best friend.
Point being that, sometimes it's *better* to be fucked over by the man in the black hat, instead of a reputable software company that provides contact information and is only legal because of one sentence burried deep in an EULA...at least thats MHO.
Interesting thought, I've felt the effects before but never done any research...
According to this article, lung collapse can be a effect of freqencies in this range, and that " The lungs may essentially start to vibrate in the same frequency as the bass, which could cause a lung to rupture."
I vaguly remember hearing about experimentation into using this as a weapon (No, not the Brown note), but more of a lung-collapsing, vomit inducing weapon.
I wonder how this will work for non-Windows machines trying to gain access?
Somebody mentioned the Cisco Clean Access Agent in a previous post, googling around a bit shows that only Windows is supported for the AV/Patch scan, and this is easily bypassed by changing the User-Agent on the HTTP login page. Details here
Cisco's canned response is to use Nessus to determine the real OS, or write your own plugin. Although windows boxen are probably the most common, and the biggest threat, non-Windows products need some sort of working by-pass that doesn't involve simply spoofing the UA.
Slashdot Mirror
In my experience, ntop is only useful for diagnosing problems, as you cannot leave it running for too long without it killing your CPU.
ntop brought our 4 core intel machine to a standstill after a few days, it's ment for quick diagnosis but not long term monitoring.
On a side note - I like trafshow much better than ntop, I wish they would have continued developing trafshow instead of converting it into the web-based, memory sucking nightmare that is ntop.
Just MHO. Have you had success running ntop for longer than a few days?
While this won't track URL's, we use Argus for tracking bandwidth/host usage.
It's got a nice client interface to insert data into MySQL, damn near real-time, I can pull accurate reports within 30 seconds. Unfortunately the MySQL feature is kinda new & there's no really good web interfaces.
Not really an out of the box solution either, but it's free & if you're familiar with MySQL and web development, you can make a nice reporting interface fairly easily. I whipped one up with jQuery and flot for charting over a weekend, and tied it into our inventory database. It'll show network utilization grouped by the local source, with a count for bytes sent/recv for each remote host. But it's layer 2-4 only, so no URL's are reported.
One of these days I might release my web interface for Argus, but the code needs cleanup and commenting so eh...I wouldn't expect it any time soon.
http://www.qosient.com/argus/
and even one more difference, from TFA:
Organizers said the trio was caught when they took their purloined password prizes to Wall of Sheep workers and asked them to post the information. The workers refused.
So...they turned themselves in.
TCP/IP over bongo drums
There's a whole RFC on this:
http://www.faqs.org/rfcs/rfc1178.html
Interesting read...it specifically says:
'Don't choose a name after a project unique to that machine.'
I agree with the reasoning, but on large scale DNS deployments, I can also see this being a nightmare... I just use arbitrary names, nothing too hard to spell.
I don't like this idea, and the article summary is somewhat misleading.
The software keeps track of friend's favorite youtube videos & myspace updates and yada yada -- but these sites already offer this functionality, why do we need an extension to do it for us?
What would be really cool, and what I mistakenly took the summary for, is a slash-style comment system for the Web. The ENTIRE web. Any page could potentially have a slashdot-style discussion attached to it...imagine the time-killing possibilities...
Goggles was flying on google maps months ago!
and I hated this movie, but I still paid my $8 dollars to watch it on opening night because of all the hype.
Can I get a retroactive refund?
I've never actually used it because I'm too cheap to buy another 802.11 adapter, but from what I've read airpwn can do this, although I'm not sure how scriptable it is.
I know it did some fun things with goatse injection at defcon
it has not been clear what system requirements you need to actually be able to play HD-DVD and Blu-Ray discs.
Yes it has, 64-bits and a DRM-ridden OS
I thought we already discussed this?
I saw a TiVo commercial on real TV once, it was one of the funniest commercials ever and I've never seen it again.
... Masculine Itch? ... (blah blah) ...
This was probably five years ago or so, but here's a recap:
(Three men on golf course, 1 of them T'ing off, we see his back)
Man A: (Swings and misses shot, shuffles at crotch)
Man B: What's the matter, Bill?
Man A: YES! How did you know??
Man B (Advertiser voice): Well, let me tell you about men's masculine itch cream!
(Scene cuts to 'flu-style' graph of man's crotch with lots of 'dots' focused on the crotch area)
Man B: You can see the affected area here
Man B then whips out a bottle of 'Masculine Itch Cream' and bends down towards Man A's crotch
Man B: And you just apply to the affected area!
(Scene cuts to a "There a some things on TV you don't want to see" style-ad w/ TiVo logo)
Everyone think's I'm some kinda of pervert when I try to explain that commercial...but it was hilarious.
Did anyone else ever see that?
Microsoft seems to make it a habit to offer no compatibility, sometimes even between their own products. Another example is that godforsaken winmail.dat file I'm always getting when newbies send me attachments in Outlook 97/2000. Gmail and yahoo transparently convert these for me, but good ole MS's hotmail.com doesn't. With hotmail, you need to download your own winmail.dat decoder and extract the files if you don't have access to Outlook.
Why doesn't MS offer compatibility between their own formats??? The world may never know...
So, summarizing the article:
Nothing happened
Case dropped
Suprnova still gone
I found CGI Programming with Perl really useful when I was learning, it goes over URL encoding and the acutal HTTP request/response. But after learning some perl, I prefer PHP. The syntax is clearer and the online manual is great...infact if you have any real programming experience (not html), you could just read the PHP manual and pick it up.
But, if you really wanna learn, you should buy a cheap box, and install some form of LAMP.
Having a machine overwrite the original copy of the file opened seems like a really bad idea. MS Office and I believe OpenOffice have features like this, but it does not overwrite the original. I prefer to manage multiple backups of data myself rather than let a machine do it, plus it keeps me in good practice.
But honestly, I don't see how the concept of 'files in folders' seems to elude so many people.
Imagine hordes of these running fearless into machinegun fire... Very effective, I presume....
Operation Human Shield!
addict3d is running a story titled MPAA: pirated DVDs are "New Drug On The Street"
"A lot of people we were arresting had drug conviction backgrounds. Actually, what they said was, 'This is the new drug on the street,'" said Supik, an MPAA field investigator who assists local law enforcement in anti-piracy raids.
Where's the physical addiction?! If I stop watching or playing will I go into convulsions?
Great, so now our top results are going to be clutered with samples of the info we're really looking for
Thanks, google
What I'd like to see is a minature HD-DVD/BluRay/whatever medium that comes in a tiny case. Something that's maybe 1in X 1in or so, enough to hold audio (video?) but be protected from being scratched.
Now I know people bitch about how a case would be "too clunky" and "I can't use a spindel!" But I'd much rather have the media protected...I always thought it was stupid to have the sensitive part out in the air like that.
But given Sony's EULA, this will never happen.
The CSR's use the CRM for CSAT
So...it's a very, very boring night at work...
:
Here's the tally, this doesn't include any special features, commentaries, or otherwise useless filler:
ST TOS:
47 mins, 79 eps, 22 discs, 3,713min = 2days 13hrs 53mins
ST TNG:
45 mins, 178 eps, 48 discs, 8,010min = 5days 13hrs 30mins
ST DS9:
45 mins, 176 eps, 48 discs, 7,920min = 5days 12hrs
ST Voyager:
45 mins, 172 eps, 47 discs, 7,740min = 5days 9hrs
ST Enterprise:
42 mins, 98 eps, 27 discs, 4,116min = 2days 20hrs 36mins
The Motion Picture (Directors Cut): 136mins 2 discs
The Wrath of Kahn (Directors Cut): 116mins 2 discs
III: The search for spock: 105mins 2 discs
IV: The Voyage Home: 119mins 2 discs
V: The Final Frontier: 107mins 2 discs
VI: The Undiscovered Contry: 113mins 2 discs
Generations: 118mins 2 discs
First Contact: 106mins 2 discs
Insurrection: 103mins 2 discs
Nemesis: 116mins 2 discs
Grand Total (Minus Commentaries, deleted scenes, additional features)
212 Discs
32,638 minutes
3wks 1day 15hrs 58mins
References:
Amazon.com product info
IMDB Star Trek search
Why don't we just make it a crime to withhold passwords from the police
And what happens when they give you the wrong password? Lie detectors? Torture?
Better yet, why don't we make it illegal to withhold any info from the police, at any time, for any reason?
Examination and investigation can fail to yield the expected result, but making it a crime to withhold something as personal as a password, which you may not even know, completely violates the word freedom.
Not necessarily...consider this, what's worse:
Your wife divorcing you to marry some jerk she met on the internet
or
Your wife divorcing you to marry your best friend.
Point being that, sometimes it's *better* to be fucked over by the man in the black hat, instead of a reputable software company that provides contact information and is only legal because of one sentence burried deep in an EULA...at least thats MHO.
Interesting thought, I've felt the effects before but never done any research...
According to this article, lung collapse can be a effect of freqencies in this range, and that " The lungs may essentially start to vibrate in the same frequency as the bass, which could cause a lung to rupture."
I vaguly remember hearing about experimentation into using this as a weapon (No, not the Brown note), but more of a lung-collapsing, vomit inducing weapon.
I wonder how this will work for non-Windows machines trying to gain access?
Somebody mentioned the Cisco Clean Access Agent in a previous post, googling around a bit shows that only Windows is supported for the AV/Patch scan, and this is easily bypassed by changing the User-Agent on the HTTP login page. Details here
Cisco's canned response is to use Nessus to determine the real OS, or write your own plugin. Although windows boxen are probably the most common, and the biggest threat, non-Windows products need some sort of working by-pass that doesn't involve simply spoofing the UA.