Day: July 2, 2009

Tracking down a Malware or Virus

Useful Tool is Netstat netstat -a -n -o Example C:\WINDOWS>netstat -a -n -o | grep 6060 TCP 0.0.0.0:6060 0.0.0.0:0 LISTENING 2752 Relate to service tasklist /svc /FI “PID eq pid” Example: C:\WINDOWS>tasklist /svc /FI “PID eq 2752M Image Name PID Services ========================= ====== ===================== Apache.exe 2752 StoreGrid_WebServer

GroupWise 8 Abend

3-16-09 Removed address space because memory protection violation Address Space: POA Reason: Page fault, Attempt to read from non-present page The Dark Times http://www.thedarktimes.us/wordpress/ 1 of 4 7/1/2009 3:38 PM Running Thread: GWTCP-VOL-Handler-21 EIP: OxF455C333 (GWENN5.NLM +Ox81C33) Access Location: OxAf2C6158 Resolve: Load MTA & POA into Protected Memory

Syslog-NG

Remote Logging On the client, put the following in /etc/syslog-ng/syslog-ng.conf.in: destination tologhost { udp(10.0.0.254 port(514)); }; log { source(src); destination(tologhost); }; Next run SuSEconfig –module syslog-ng to activate the changes On the Log server, add the following: source network { udp(ip(”10.0.0.254F) port(514));}; destination digitalair { file(”/var/log/$HOST”); }; log { source(network); destination(digitalair); }; run SuSEconfig –module […]

Global Umask

If you want to set the umask for all users, you must make sure the umask setting is entered in the configuration file /etc/profile.local. The configuration file /etc/profile is a generic configuration file that is processed by all users logging in to the system. Since, however, YaST doesn’t like modifications to be made directly to […]

Next Page »