[lug] Re: LUG digest, Vol 1 #1665 - 23 msgs

Yuko Jonah yuko_j at yahoo.com
Tue Apr 23 17:00:53 MDT 2002


 Thanks to all those that help me. I order the oss from 4front and my sound works fine now. Also just wanted to find out if 
anyone in this group has any knowledge on Lindows. It suppose to be coming out some time this year. I understand it can run windows program.
  lug-request at lug.boulder.co.us wrote: Send LUG mailing list submissions to
lug at lug.boulder.co.us

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.lug.boulder.co.us/mailman/listinfo/lug
or, via email, send a message with subject or body 'help' to
lug-request at lug.boulder.co.us

You can reach the person managing the list at
lug-admin at lug.boulder.co.us

When replying, please edit your Subject line so it is more specific
than "Re: Contents of LUG digest..."


Today's Topics:

1. cgi/perl question (j davis)
2. Attempted hack from 202.185.243.121 (Paul Bille)
3. Re: Attempted hack from 202.185.243.121 (Timothy C. Klein)
4. rpm (Yuko Jonah)
5. Re: rpm (Ken Weinert)
6. Re: rpm (Calvin Dodge)
7. Sound problem (Yuko Jonah)
8. Re: Attempted hack from 202.185.243.121 (D. Stimits)
9. Re: Sound problem (D. Stimits)
10. RE: Attempted hack from 202.185.243.121 (Paul Bille)
11. Another petition against the CBDTPA (John Starkey)
12. Re: [Way OT] English Grammar (Daniel Webb)
13. Another petition against the CBDTPA (hirsch at zapmedia.com)
14. Re: Serial Line Direct Connection (Daniel Webb)
15. Re: Attempted hack from 202.185.243.121 (Daniel Webb)
16. Re: cgi/perl question (Tkil)
17. Re: C code quality tools (Chris Riddoch)
18. Re: C code quality tools (Chris Riddoch)
19. Re: Virus software for Linux (rm at fabula.de)
20. Re: Lunching appt (rm at fabula.de)
21. Re: C code quality tools (rm at fabula.de)
22. Re: Perl 101 (rm at fabula.de)
23. Re: [Way OT] English Grammar (rm at fabula.de)

--__--__--

Message: 1
From: "j davis" 
To: lug at lug.boulder.co.us
Date: Sun, 21 Apr 2002 18:57:38 +0000
Subject: [lug] cgi/perl question
Reply-To: lug at lug.boulder.co.us


hi,

Im trying out cgi...when i put this in a page


favorite color:  [input] 
 [input] 

and lets say i type in blue..what do i need to do on the perl
side to accept this value...i.e. the value get sent to the script
like $var=blue then for my perl scrp can i just use $var to
equal blue or do i need to tell perl to get the value like..
$var = <> ....thanks

thanks
jd


_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com


--__--__--

Message: 2
Date: Sun, 21 Apr 2002 12:55:09 -0600
From: Paul Bille 

To: Lug at lug.boulder.co.us
Subject: [lug] Attempted hack from 202.185.243.121
Reply-To: lug at lug.boulder.co.us

Did anyone else detect an attempted hack from 202.185.243.121 Saturday
night / Sunday morning? I'm wondering if this is a generalized probe or
if it's a targeted attack?

I'll include some log files below. I traced it back to jaring.my in
Malaysia where the trail went cold. They were on another system back on
March 5 but I don't have the log files necessary to trace their
activity.

I reported the attack to abouse at jaring.my and the nccs-sf at fbi.gov

Pertinent log entries:

Apr 21 02:21:27 liz in.fingerd[20399]: connect from 202.185.243.121
Apr 21 02:47:11 liz in.fingerd[20414]: connect from 202.185.243.121
Apr 21 02:47:20 liz in.telnetd[20415]: connect from 202.185.243.121

Apr 21 02:47:34 liz login[20416]: FAILED LOGIN 1 FROM 202.185.243.121
FOR root, Authentication failure
Apr 21 02:47:41 liz login[20416]: FAILED LOGIN 2 FROM 202.185.243.121
FOR rpcuser, Authentication failure
Apr 21 02:47:49 liz login[20416]: FAILED LOGIN 3 FROM 202.185.243.121
FOR test, Authentication failure

]$ nslookup 202.185.243.121
Server: bille.cudenver.edu
*** bille.cudenver.edu can't find 202.185.243.121: Non-existent
host/domain

traceroute to 202.185.243.121 (202.185.243.121), 30 hops max, 38 byte
packets
8 gar2-p370.sffca.ip.att.net (12.123.13.153) 43.609 ms 43.266 ms
43.551 ms
9 t1a5.us-sfo.concert.net (12.124.35.14) 43.579 ms 65.963 ms 44.133
ms
10 t1a2-ge8-0-0.us-sfo.concert.net (166.49.228.40) 43.493 ms 43.383
ms 43.531 ms
11 166-49-254-138.concert.net (166.49.254.138) 414.061 ms 420.257 ms
423.923 ms
12 161.142.100.3 (161.142.100.3) 230.314 ms 229.878 ms 230.996 ms
13 s6.bng.jaring.my (161.142.0.102) 235.064 ms 233.702 ms 233.033 ms

14 e0.bng1.jaring.my (161.142.237.2) 233.769 ms 234.390 ms 233.713
ms
15 161.142.6.234 (161.142.6.234) 239.055 ms 238.599 ms 239.626 ms
16 * * *

Thanks,
--
Paul http://bille.cudenver.edu/author


--__--__--

Message: 3
Date: Sun, 21 Apr 2002 13:18:12 -0600
From: "Timothy C. Klein" 
To: lug at lug.boulder.co.us
Subject: Re: [lug] Attempted hack from 202.185.243.121
Reply-To: lug at lug.boulder.co.us

* Paul Bille (Paul at ebille.cudenver.edu) wrote:
> Did anyone else detect an attempted hack from 202.185.243.121 Saturday
> night / Sunday morning? I'm wondering if this is a generalized probe or
> if it's a targeted attack?
> 

I don't seem to find it any of my logs. So no over here. But I am on a
pretty quiet little part of the 'net, not a heck of a lot of people come
knocking around here (208.203.138.*)

Tim
--
==============================================
== Timothy Klein || teece at silverklein.net ==
== ---------------------------------------- ==
== "Hello, World" 17 Errors, 31 Warnings... ==
==============================================

--__--__--

Message: 4
Date: Sun, 21 Apr 2002 13:10:46 -0700 (PDT)
From: Yuko Jonah 
To: lug at lug.boulder.co.us
Subject: [lug] rpm
Reply-To: lug at lug.boulder.co.us

I'm running RH7.2 Got a game Icebreaker from the web
for RH7.1. Trying to install it comes with these
errors
rpm -i icebreaker-1.2.1-1.i386.rpm
error: cannot get exclusive lock on
/var/lib/rpm/Packages
error: cannot open Packages indes using db3 -Operation
not permitted.
error: cannot open Packages database in /var/lib/rpm
any idea what is going on here. What i'm i doing
wroing or can i run this on RH7.2

thanks

=====
" Those who perpertrate evil on their fellow men shall
be visited by evil."
---Kenule Saro-wiwa

Yuko Jonah
yuko_j at yahoo.com

__________________________________________________
Do You Yahoo!?
Yahoo! Games - play chess, backgammon, pool and more
http://games.yahoo.com/

--__--__--

Message: 5
Date: Sun, 21 Apr 2002 14:16:02 -0600
From: Ken Weinert 
To: lug at lug.boulder.co.us
Subject: Re: [lug] rpm
Reply-To: lug at lug.boulder.co.us

Are you running as root? That would be the first thing you'd need to
do. Other than that, it implies that some other RPM command is running
(RedCarpet, up2date, krud2date, etc.)

* Yuko Jonah (yuko_j at yahoo.com) [020421 14:14]:
> I'm running RH7.2 Got a game Icebreaker from the web
> for RH7.1. Trying to install it comes with these
> errors
> rpm -i icebreaker-1.2.1-1.i386.rpm
> error: cannot get exclusive lock on
> /var/lib/rpm/Packages
> error: cannot open Packages indes using db3 -Operation
> not permitted.
> error: cannot open Packages database in /var/lib/rpm
> any idea what is going on here. What i'm i doing
> wroing or can i run this on RH7.2
> 
> thanks
> 
> =====
> " Those who perpertrate evil on their fellow men shall
> be visited by evil."
> ---Kenule Saro-wiwa
> 
> Yuko Jonah
> yuko_j at yahoo.com
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Games - play chess, backgammon, pool and more
> http://games.yahoo.com/
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug

-- 
/~\ The ASCII Ken Weinert Ken.Weinert at ihs.com 
\ / Ribbon Campaign 303-858-6956 (V) 303-705-4258 (F)
X Against HTML GnuPG: 9274F1CE GnuPG available at http://www.gnupg.org/
/ \ Email! 1D87 3720 BB77 4489 A928 79D6 F8EC DD76 9274 F1CE
Murder is a crime. Describing murder is not. Sex is not a
crime. Describing sex is. Gershon Legman (b. 1917) American writer


--__--__--

Message: 6
Date: Sun, 21 Apr 2002 14:17:49 -0600
From: Calvin Dodge 
To: lug at lug.boulder.co.us
Subject: Re: [lug] rpm
Reply-To: lug at lug.boulder.co.us

On Sun, Apr 21, 2002 at 01:10:46PM -0700, Yuko Jonah wrote:
> I'm running RH7.2 Got a game Icebreaker from the web
> for RH7.1. Trying to install it comes with these
> errors
> rpm -i icebreaker-1.2.1-1.i386.rpm
> error: cannot get exclusive lock on
> /var/lib/rpm/Packages
> error: cannot open Packages indes using db3 -Operation
> not permitted.

Are you logged in as root? You need to do that, at least.

Make sure you don't have another instance of rpm running, too.

Calvin

-- 
Calvin Dodge
Certified Linux Bigot (tm)
http://www.caldodge.fpcc.net

--__--__--

Message: 7
Date: Sun, 21 Apr 2002 13:40:18 -0700 (PDT)
From: Yuko Jonah 
To: lug at lug.boulder.co.us
Subject: [lug] Sound problem
Reply-To: lug at lug.boulder.co.us


I'm Running RH7.2 Motherboard Elements A67AS. kernel
2.4.7-10
sndconfig seems to find the sound card by VIA
Technologies| AC97 Audio Controller is not supported
curerently; however, the ALSA project has a driver for
this card. I have downloaded the drivers, still the
same problem. Upon booting up here are the errors
Modprobe: modprobe: can't locate module sound-slot-0
Modprobe: modprobe: can't locate module
sound-service-0-0
I have recompiled the kernel, but still running into
the same problem.

Thanks,
yuko

=====
" Those who perpertrate evil on their fellow men shall
be visited by evil."
---Kenule Saro-wiwa

Yuko Jonah
yuko_j at yahoo.com

__________________________________________________
Do You Yahoo!?
Yahoo! Games - play chess, backgammon, pool and more
http://games.yahoo.com/

--__--__--

Message: 8
Date: Sun, 21 Apr 2002 14:40:50 -0600
From: "D. Stimits" 
To: lug at lug.boulder.co.us
Subject: Re: [lug] Attempted hack from 202.185.243.121
Reply-To: lug at lug.boulder.co.us

Paul Bille wrote:
> 
> Did anyone else detect an attempted hack from 202.185.243.121 Saturday
> night / Sunday morning? I'm wondering if this is a generalized probe or
> if it's a targeted attack?
> 
> I'll include some log files below. I traced it back to jaring.my in
> Malaysia where the trail went cold. They were on another system back on
> March 5 but I don't have the log files necessary to trace their
> activity.
> 
> I reported the attack to abouse at jaring.my and the nccs-sf at fbi.gov
> 
> Pertinent log entries:
> 
> Apr 21 02:21:27 liz in.fingerd[20399]: connect from 202.185.243.121
> Apr 21 02:47:11 liz in.fingerd[20414]: connect from 202.185.243.121
> Apr 21 02:47:20 liz in.telnetd[20415]: connect from 202.185.243.121
> 
> Apr 21 02:47:34 liz login[20416]: FAILED LOGIN 1 FROM 202.185.243.121
> FOR root, Authentication failure
> Apr 21 02:47:41 liz login[20416]: FAILED LOGIN 2 FROM 202.185.243.121
> FOR rpcuser, Authentication failure
> Apr 21 02:47:49 liz login[20416]: FAILED LOGIN 3 FROM 202.185.243.121
> FOR test, Authentication failure

Nothing here.

D. Stimits, stimits at idcomm.com

--__--__--

Message: 9
Date: Sun, 21 Apr 2002 16:04:26 -0600
From: "D. Stimits" 
To: lug at lug.boulder.co.us
Subject: Re: [lug] Sound problem
Reply-To: lug at lug.boulder.co.us

Yuko Jonah wrote:
> 
> I'm Running RH7.2 Motherboard Elements A67AS. kernel
> 2.4.7-10
> sndconfig seems to find the sound card by VIA
> Technologies| AC97 Audio Controller is not supported
> curerently; however, the ALSA project has a driver for
> this card. I have downloaded the drivers, still the
> same problem. Upon booting up here are the errors
> Modprobe: modprobe: can't locate module sound-slot-0
> Modprobe: modprobe: can't locate module
> sound-service-0-0
> I have recompiled the kernel, but still running into
> the same problem.

This is where the /etc/modules.conf comes in handy. You will find the
kernel likes modules named after the actual driver, e.g., if it wants
one "sound-slot-0", then it expects this to be the name of the module.
You can instead assign a module alias (a special alias is "off" to tell
it not to bother). So if your module name that fills this service
requirement is "foo":
alias sound-slot-0 foo

So you need to know the name of the sound module. You might wish to find
out the exact file name of the kernel module you built to support sound,
and then name it in modules.conf (replace "foo" with your module name,
less any ".o" extension), then run "depmod -a" or "insmod modulename".

D. Stimits, stimits at idcomm.com

--__--__--

Message: 10
From: "Paul Bille" 

To: 
Subject: RE: [lug] Attempted hack from 202.185.243.121
Date: Sun, 21 Apr 2002 16:27:46 -0600
Reply-To: lug at lug.boulder.co.us

> Nothing here.

So far it appears to be targeted.

Thanks,
Paul
http://bille.cudenver.edu/author


--__--__--

Message: 11
From: John Starkey 
To: "\"lug at lug.boulder.co.us\"
<\"lug at lug.boulder.co.us\"" ,
>
Date: 21 Apr 2002 17:05:52 -0600
Subject: [lug] Another petition against the CBDTPA
Reply-To: lug at lug.boulder.co.us

I saw the SSSCA petition passed around the list, but not the CBDTPA. If
it's a dupe, my apologies.

http://www.stoppoliceware.com/

John

--__--__--

Message: 12
Date: Sun, 21 Apr 2002 19:30:06 -0600 (MDT)
From: Daniel Webb 
To: lug at lug.boulder.co.us
Subject: Re: [lug] [Way OT] English Grammar
Reply-To: lug at lug.boulder.co.us

> > BTW, I have BCCed your grade school English teacher. I thought she'd like to
> > know you are running around starting sentences with "And."
>
> I know this was meant in jest. And I generally don't mind grammar nazis
> if they get it right. The world needs more geeks that can write
> coherently in human readable languages. But the last time that the rule
> above applied *was* in grammar school. That rule exists because simple
> minds need simple rules. The sentence in question was, in this respect,
> grammatically correct.
>
> I think you are old enough now that we can let you in on the secret of
> starting sentences with conjuntions.
>
> http://www.getitwriteonline.com/archive/032601.htm
>
> And thus ends the grammar lesson for the day, kids! ;-)

I have noticed that this construction is being used more and more. In
general, I think it leads to weaker paragraph structure. But I'm no
linguist.

Yes, I did that on purpose.



--__--__--

Message: 13
From: 
Date: Sun, 21 Apr 2002 21:29:44 -0400
To: lug at lug.boulder.co.us
Subject: [lug] Another petition against the CBDTPA
Reply-To: lug at lug.boulder.co.us


I just figured out how to pronouce CBDTPA--it the sound made by
clearing your throat and spitting.

--Michael

John Starkey writes:
> I saw the SSSCA petition passed around the list, but not the CBDTPA. If
> it's a dupe, my apologies.
> 
> http://www.stoppoliceware.com/
> 
> John
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug




--__--__--

Message: 14
Date: Sun, 21 Apr 2002 19:47:27 -0600 (MDT)
From: Daniel Webb 
To: lug at lug.boulder.co.us
Subject: Re: [lug] Serial Line Direct Connection
Reply-To: lug at lug.boulder.co.us

I have had an old (1997 or so) laptop running PPP over serial at around 10
KB/s, and I think it was more like 30 KB/s using PLIP. I loaded Debian
over PLIP using a special PLIP installer. I don't recommend it unless
there's no other choice. It will probably take a little (or a lot) time
to get working. I have been much happier since I bought an SMC PCMCIA
ethernet card for $80 or so.

By the way, I had no problem running RS232 100 ft at full port speed (115
kb/s?), despite everyone saying that can't be done. I was running it over
cat5 cable, using only 3 wires.

These are the notes I wrote to myself about setting up PLIP, but I seem to
have misplaced the serial port notes:


Connecting to a laptop via parallel port:
parallel port stuff must be compiled in the kernel as modules
plip driver must be in the kernel as a module
BIOS must set up parallel port
echo 7 > /proc/parport/0/irq
... if the parallel port irq is 7
modprobe plip
add laptop IP to /etc/hosts
/etc/hosts.allow should have lines:
portmap: 192.168.1.1
... replace with your IP, but IP MUST be a number!
set /etc/exports to the directory you want. Also, be sure
and use the no_root_squash and no_subtree_check options.
make sure NFS is running:
rpcinfo -p
Bring up plip interace:
ifconfig plip0 robust pointopoint laptop netmask 255.255.255.0 up
Turn on IP forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward
Starting ipchains for masquerading on the host (unsecure way)
ipchains -P forward MASQ



On Sat, 20 Apr 2002, John Karns wrote:

> On 19 Apr 2002, Nate Duehr said:
>
> > What's the maximum speed the high speed parallel ports can run?
>
> Theoretical, I can't say - it depends on your particular harware and
> configuration: ECP, and the two or three others that exist. Although I
> seem to recall having to fiddle a bit with my port setup, as the PLIP
> driver didn't seem to like all cfg's. In particular, IIRC it didn't like
> ECP. It's been about a year since I used it, so I'm a bit fuzzy on the
> details.
>
> Practically, I was getting between 3 and 4 kB / sec.
>
> ----------------------------------------------------------------
> John Karns jkarns at csd.net
>
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>


--__--__--

Message: 15
Date: Sun, 21 Apr 2002 19:50:35 -0600 (MDT)
From: Daniel Webb 
To: lug at lug.boulder.co.us
Subject: Re: [lug] Attempted hack from 202.185.243.121
Reply-To: lug at lug.boulder.co.us

I get stuff like this all day long (every few hours). I don't have time
to deal with it anymore. Luckily, since I switched from Redhat to Debian,
it is easier to keep up with security updates and I don't get hacked out
of the box anymore.


On Sun, 21 Apr 2002, Paul Bille wrote:

> Did anyone else detect an attempted hack from 202.185.243.121 Saturday
> night / Sunday morning? I'm wondering if this is a generalized probe or
> if it's a targeted attack?
>
> I'll include some log files below. I traced it back to jaring.my in
> Malaysia where the trail went cold. They were on another system back on
> March 5 but I don't have the log files necessary to trace their
> activity.
>
> I reported the attack to abouse at jaring.my and the nccs-sf at fbi.gov
>
> Pertinent log entries:
>
> Apr 21 02:21:27 liz in.fingerd[20399]: connect from 202.185.243.121
> Apr 21 02:47:11 liz in.fingerd[20414]: connect from 202.185.243.121
> Apr 21 02:47:20 liz in.telnetd[20415]: connect from 202.185.243.121
>
> Apr 21 02:47:34 liz login[20416]: FAILED LOGIN 1 FROM 202.185.243.121
> FOR root, Authentication failure
> Apr 21 02:47:41 liz login[20416]: FAILED LOGIN 2 FROM 202.185.243.121
> FOR rpcuser, Authentication failure
> Apr 21 02:47:49 liz login[20416]: FAILED LOGIN 3 FROM 202.185.243.121
> FOR test, Authentication failure
>
> ]$ nslookup 202.185.243.121
> Server: bille.cudenver.edu
> *** bille.cudenver.edu can't find 202.185.243.121: Non-existent
> host/domain
>
> traceroute to 202.185.243.121 (202.185.243.121), 30 hops max, 38 byte
> packets
> 8 gar2-p370.sffca.ip.att.net (12.123.13.153) 43.609 ms 43.266 ms
> 43.551 ms
> 9 t1a5.us-sfo.concert.net (12.124.35.14) 43.579 ms 65.963 ms 44.133
> ms
> 10 t1a2-ge8-0-0.us-sfo.concert.net (166.49.228.40) 43.493 ms 43.383
> ms 43.531 ms
> 11 166-49-254-138.concert.net (166.49.254.138) 414.061 ms 420.257 ms
> 423.923 ms
> 12 161.142.100.3 (161.142.100.3) 230.314 ms 229.878 ms 230.996 ms
> 13 s6.bng.jaring.my (161.142.0.102) 235.064 ms 233.702 ms 233.033 ms
>
> 14 e0.bng1.jaring.my (161.142.237.2) 233.769 ms 234.390 ms 233.713
> ms
> 15 161.142.6.234 (161.142.6.234) 239.055 ms 238.599 ms 239.626 ms
> 16 * * *
>
> Thanks,
> --
> Paul http://bille.cudenver.edu/author
>
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>


--__--__--

Message: 16
To: lug at lug.boulder.co.us
Subject: Re: [lug] cgi/perl question
From: Tkil 
Date: 21 Apr 2002 19:58:54 -0600
Reply-To: lug at lug.boulder.co.us

>>>>> "jd" == j davis writes:

jd> and lets say i type in blue..what do i need to do on the perl

=== message truncated ===

" Those who perpertrate evil on their fellow men shall
  be visited by evil."
      ---Kenule Saro-wiwa

Yuko Jonah
yuko_j at yahoo.com


---------------------------------
Do You Yahoo!?
Yahoo! Games - play chess, backgammon, pool and more
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20020423/c5319e1c/attachment.html>


More information about the LUG mailing list