511 reputation
27
bio website adric.net
location Atlanta, GA
age 37
visits member for 5 years, 2 months
seen May 19 at 15:29

Ben S. Knowles, BBST, CISSP, GSEC, GCIH, GCIA, LPIC-1 (adric) is a technologist and researcher in the Atlanta, Georgia, USA area. In high school, he competed at the national level in Constitutional Law. He has been a professional computer security consultant, technical trainer, and system integrator and is currently certified as a black box software tester, internet security professional, incident handler and analyst, and Linux system administrator.

Ben has lectured lower division Mass Communications, Political Science, and Computer Technology classes on Digital Media and Intellectual Property Law and has taught basic computer repair, networking, and information security classes. Currently he is a security system administrator on the incident response team at the Atlanta office of a global IT services firm.

from http://adric.net


Aug
28
comment sed inline replacement and without having to create a file
There is very little difference with one sed expression (man page says -e "add the script to the commands to be executed") but if you want to use more than one you need -e for each sed command in the command line.
Aug
14
comment how to set any browser to no keep alive in apache httpd.conf
You should be able to do that in the server global or VirtualHost configuration, no?
Aug
12
comment Mysql with upstart not starting
+1 for trying to get some visibility on this annoyance which I've tripped over in SecurityOnion (Ubuntu based).
Jul
26
comment What is msrpc needed for on a Windows 7 workstation
This link has some good info about how Windows uses a portmapper for RPC: etutorials.org/Networking/network+security+assessment/…
Jul
25
answered Ubuntu - utilities ask about each file?
Jul
18
comment I deleted libssl.so.10
Yep. netcat (the old simpleminded one) is one way to win here. EG on SU: superuser.com/questions/98089/sending-file-via-netcat
Jul
18
comment I deleted libssl.so.10
Depending on how you installed the file you need is likely findable on your install media, in cached packages, or on a rpm mirror on the network. If you can get yum / rpm to tell you which package the file was in and get that file you should be able to make repairs.
Jul
18
comment I deleted libssl.so.10
Rather than sneakernet you can probably use simple tools to do this over the network (without security) once you have the file, such as netcat or possibly ftp.
Jul
3
comment FTK Image to VMDK
+1 FTK Imager can write a raw (dd) image and you should be okay from there.
Jul
2
comment How to install ia32-libs on Wheezy?
Ah okay. Thanks for the extra console output. Did you look in your apt configs to see what you might have pinned or held? This error is still pretty troubling: "E: Unable to correct problems, you have held broken packages.". And what package are you trying to install that needs 32 bit libs, if you can share that?
Jul
1
answered How to install ia32-libs on Wheezy?
Jul
1
comment How to install ia32-libs on Wheezy?
I suspect you may find your answer in wiki.debian.org/Multiarch/HOWTO
May
30
comment Automatic configure permission of file to 777 after uploaded
Do your users really need the files to be 777 to make use of them? Perhaps a chown or chgrp would be a saner alternative than turning off the file systems permissions security system for all of those files?
May
20
comment VMWare ESXi 4 not manageble from LOCAL subnet
@rsoft Done and thanks for the reminder!
May
17
answered VMWare ESXi 4 not manageble from LOCAL subnet
May
16
comment VMWare ESXi 4 not manageble from LOCAL subnet
Do the arp tables make sense? Are there any routes on any of the systems? Are there firewall rules active? Can you verify which interface the management tools (web) are binding to?
May
16
comment Alternatives to wireshark?
Perhaps you could clarify your question. Are you looking for techniques to troubleshoot HTTP applications without sniffing the network / recording packets? There are debugging environments built into all modern browsers that may help trace or you could use an intercepting proxy like ZAP.
Apr
23
comment Is it possible to transfer files using RDP?
Copy and paste works fine over an RDP session though performance is much better if you remotely mount a share and copy there instead. This is particularly noticable with heavy IO contention or across an ocean I have found.
Apr
22
comment Ruby/Mongrel installation broken after CentOS upgrade, server won't start
The top message in your error is unable to find "mongrel_rails" library. You should check to make sure that library is installed. Often I've seen this because I am using the wrong version of ruby/gems on a system (that has a few) or haven't installed enough gems yet. See if the rpms or gems for mongrel (and all of rails) are installed and doublecheck your ruby / gems versions?
Oct
30
comment Can IP fragments be overwritten?
Oh sorry I misunderstood you. The techniques all work with any IP protocol (ICMP, TCP, UDP, etc) and I've removed the line about UDP for clarity.