User login

Use OpenDNS
Valid XHTML 1.0 Strict
Valid CSS!

Cold and flu season

Ah, it's once again virus season here in Canada. It appears that Conficker has been making the rounds again too. From February, we saw a pretty good mix of Conficker and Bredolab variants here at the LW mothership:

147 Conficker.gen (Worm)
 58 Bredolab.BZ (Trojan)
 55 UPX packed executable file
 33 Bredolab.QR_2 (Trojan)
 29 Bredolab.CE_2 (Trojan)
 12 EggDrop.AAM (Trojan)
  9 Bredolab.SMF (Trojan)
  5 Pif.VF (Trojan)
  4 Merond.AA_2 (Worm)
  4 Bredolab.AG (Trojan)
  4 Banker.NA (Phish)
  2 Suspicious#fakeav_2 (Trojan)
  2 Pay-23 (Phishing)
  2 Bank-87 (HTML.Phishing)

Meh, it was only a weekend

At midnight on Sunday night, the boss and I headed out to hit the datacenter in time for the maintenance window. 8 hours later, the network latency went from 60-100ms down to <1ms. And that's without bringing in any new equipment.

The main lesson learned here is that even though the ProCurve 3400cl switch does support layer-3 routing, under no circumstances should you ever use it. It sucks and it's slow. If you have anything beyond the most infinitesimal amount of routed traffic, you will make that unit sweat like R. Kelly at a Girl Scout troop meeting.

Books and eBooks

I bought a Sony Reader Touch a month or so ago and it's pretty much going to revolutionize how I decorate my apartment. So now my #1 concern isn't "where do I put another bookshelf?", it's more "why do I live in such a terrible apartment?" But that's a problem for another day.

Right now, I'm kind of baffled by something. One of the things I thought would be a perk of this device is that I could hop online and download books (depending on availability) right at moment's notice. And while this is true, it's not exactly a bargain. For example: I thought it would be fun to grab a copy of that Pride and Prejudice and Zombies book I've heard about. So I jumped into the Sony Book Store and discovered it was 10 bucks. This is not terribly expensive but it's more than I would have guessed for something that has no new production costs now that it's gone to print. Jumping over to Amazon.com to compare was illuminating:

Remotely enabling VNC

A good exercise in futility is trying to enable Vino remotely and attach it to your locally logged-in session. There's basically no documentation for this stupid program and even when I could get it running (on the wrong display) it had caused dozens of brand new SELinux violation alerts. I have no idea why this is the default VNC server in Fedora.

So, note to future John, save yourself the headache and do this instead:

[john@home]$ x11vnc -display :0 -usepw &

It will even terminate itself automagically once I disconnect. That can be remedied by adding the '-forever' flag if I plan to disconnect/reconnect several times over the day.

Log Parser

I wonder if there's a better way to accomplish this:

C:\Program Files\Log Parser 2.2>logparser "SELECT [#Fields: date-time],session-id,remote-endpoint,data FROM RECV200912*.log WHERE session-id = (SELECT DISTINCT session-id FROM RECV200912*.log WHERE data LIKE '%MAIL FROM%someguy@domain.com%')" -i:CSV -nSkipLines:4 -o:DATAGRID -q

My SQL experience amounts to the above text and two chapters of example problems from Learning SQL so I'm a bit on the novice side, to put it lightly.