Reputation
6,406
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 47 89
Newest
 Proofreader
Impact
~590k people reached

Mar
15
comment Configure VPN on ASA to log accounting via NPS
I'd be interested to know if the accounting function will tell you any more than who logged on when...
Mar
15
comment Can a single computer running two virtual machines be operated simultaneously by two users, each sandboxed in one of the virtual machines?
10 kids, 1 computer. You could teach them Extreme Programming in five groups of two :-)
Mar
15
answered Can a single computer running two virtual machines be operated simultaneously by two users, each sandboxed in one of the virtual machines?
Mar
15
comment How secure is limiting site access by IP?
Are those voting to close suggesting this is better on IT Security (security.stackexchange.com)?
Mar
15
answered How secure is limiting site access by IP?
Mar
15
revised How to setup postfix for multiple domains
added 229 characters in body
Mar
15
answered How to setup postfix for multiple domains
Mar
14
answered View unknown IPsec pre-shared key
Mar
14
comment How to test fail over VPN between ASAs without disabling the main connection?
+1 for Terry Pratchett quotation.
Mar
14
revised dhcp relay through VPN
added 242 characters in body
Mar
14
answered dhcp relay through VPN
Mar
14
revised sshd running but no PID file
Update with more info
Mar
14
comment Spanning Tree required/desired for Port-Channel?
Ended up doing this. We had all kinds of problems because we had MSTP set up on our Cisco switches, and this was not noticed by the consultants who installed the Dell switches, which didn't have MSTP set up. Dell switches at core, so unless everything stopped working we weren't in a position to experiment. I got promoted and it is no longer in my sphere of interest...
Mar
14
accepted Spanning Tree required/desired for Port-Channel?
Mar
13
answered Allow access to one directory when all others require authorisation
Mar
13
comment Should email system be virtualized?
Virtualisation may be quickest way to balance your risk (although not your load). Strongly recommend that you don't consider Physical to Virtual (p2v) conversion if you do virtualise.
Mar
13
comment sshd running but no PID file
@ChrisS - yes. As stated above, the PID file exists after a reboot. After killing the sshd process that was running, and then starting it with service sshd start the PID file exists again. Haven't seen it disappear again yet.
Mar
7
revised sshd running but no PID file
added 2997 characters in body
Mar
7
comment sshd running but no PID file
Ok - with sshd_config using default AddressFamily (any) I only get the output showing bind to IPv6 addresses. With AddressFamily set to inet I see 0.0.0.0:22 in the netstat output. Anyway, that isn't really the problem I'm trying to resolve. I've edited your script so it captures the info you want, but I don't think it indicates any compromise of sshd.
Mar
7
comment sshd running but no PID file
Your grep expression is not returning any results. netstat -lptun | grep ":22" outputs the lines relating to port 22. It's not listening on any other ports that begin with 22.