From pmui at groundworkopensource.com  Tue May  1 14:58:48 2007
From: pmui at groundworkopensource.com (Peter Mui)
Date: Tue, 1 May 2007 14:58:48 -0700
Subject: You're Invited: Monitoring SIG, Weds May 9 7PM
Message-ID: <B7C74624-C5CE-46F1-98D8-38088F4E3BD9@groundworkopensource.com>

(Hi: You're invited to the BayLISA Monitoring SIG, Weds May 9, 7PM.  
See the meeting announcement below: feel free to post it and/or  
forward it along to anyone else who might be interested. See you  
there! -Peter))

=================================================

May '07 BayLISA Monitoring SIG: Mini- to Mega-Monitoring


Between the two presenters at the next Monitoring SIG we'll span the  
breadth and complexity of monitoring sites:

1) Bob will outline the modest needs of his "two servers at the colo"  
configuration: he doesn't have any monitoring in place yet, so we'll  
brainstorm about what he should deploy and how.

2) Charity from Linden Labs will discuss the current challenges and  
future plans for the three-and-a-half sys admins managing and  
monitoring the 4000+ servers(!) that sustain Second Life.

We'll use these two examples to frame how to approach setting up and  
maintaining a monitoring setup.  Newbies: bring your thorniest (or  
most basic) monitoring questions and issues.  Not-So-Newbies: come  
prepared to share your experiences re. successful deployment,  
knowledge of specific tools and techniques, etc.

What: BayLISA Monitoring SIG VII: Mini- to Mega-Monitoring
Who: Anyone interested in IT monitoring issues and tools (newbies  
particularly welcome!)
When: Wednesday, May 9 2007, 7PM
Where: GroundWork Open Source, 139 Townsend St., San Francisco
How: 139 Townsend St. is very near AT&T Park. It is two blocks from  
the CalTrain Depot. Take the MUNI T (or J) trolley to 2nd and King  
(ballpark stop) or take the 30 or 45 bus (among others) crosstown.  
Free evening street parking can probably be found because the Giants  
are playing an afternoon game (vs. Mets, 12:35 start) and it should  
be over by the time the SIG starts.
Cost: Free!!

Pizza pizza pizza, drinks drinks drinks, and snacks snacks snacks  
will be provided by GroundWork. We'll open up the doors at 6:30 or so  
and start the formal part of the meeting promptly at 7PM.

RSVP (not necessary, but helpful): Peter Mui,  
pmui at groundworkopensource.com, 415 992 4573

=================================================
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.baylisa.org/pipermail/baylisa/attachments/20070501/7ab885ae/attachment.html>

From cerise at armory.com  Tue May  8 12:50:41 2007
From: cerise at armory.com (cerise at armory.com)
Date: Tue, 8 May 2007 12:50:41 -0700
Subject: Hard drive recovery
Message-ID: <20070508195041.GA29962@boogeyman>

Any recommendations for a place that'll recover data from a drive suffering
click death?  It's a drive from an LVM, so I'm really looking for a place
that'll do a sector-by-sector recovery and transfer to a good drive.

I've been looking around and sales droids seem to fixate on trying to recover
data from the filesystem which is exactly what I don't need.

-Phil/CERisE


From mark at marksportal.net  Fri May 11 11:23:24 2007
From: mark at marksportal.net (Mark Stenstadvold)
Date: Fri, 11 May 2007 11:23:24 -0700
Subject: Label Makers
Message-ID: <4644B49C.6030009@marksportal.net>


I believe several of you own the P-Touch PT-1650 Label Maker.  I 
recently purchased one, hoping to utilize the ROT-REP feature, however I 
discovered that the naming convention I use is too long to fit in that 
mode.  So I've opted to try another label standard.  I use the NORMAL 
setting and print two lines on one label:

NEAR:  <switch name>-port
FAR:  <system name>-eth0

Then I reverse it for the other end of the cable

NEAR:<system name>-eth0
FAR: <switch name>-port

The issue I'm having is that at times I have 10(x2)+ labels that I have 
to make and it's very slow going using the small interface.  What I'd 
like to do is enter in everything in Excel, upload it to the P-Touch and 
then print it out, however I am unable to figure out how to print out a 
label with two lines using the provided S/W.

Any suggestions?  Maybe I'm using the wrong tool for the job?
Thanks!

--Mark.


From david at catwhisker.org  Mon May 14 05:20:54 2007
From: david at catwhisker.org (David Wolfskill)
Date: Mon, 14 May 2007 05:20:54 -0700
Subject: What does a responsible admin do if ...
Message-ID: <20070514122054.GF64542@bunrab.catwhisker.org>

... undesirable behavior is seen from a netblock for which there is no
email contact information?

Granted, this isn't likely a scenario where "one size (approach)
fits all," but the prospect of reading log entries -- and this was
for over 3800 attempts to logiin to my SSH server over a 5-hour
interval -- over the phone would appear to be daunting under the
best of circumstances, and for one with as strong an antipathy for
telephones as I have, it would be torture.  Oh, yeah:  I have 2 log
entries per attempt (one from the packet filter; the other from the SSH
daemon).

And since the hypothetical phone call would be to a different country,
that decreases the appeal significantly.  Well, that, as well as me not
being conversant in the dominant languages in the country in question
(though I admit I have a friend who is conversant in at least one of
those).

(The IP address in question was 213.176.96.5.  I expect that folks with
sufficient interest can find out more about it.)

I've taken a certain degree of evasive action, but I'll not disclose its
nature just yet, so as to avoid skewing responses.  :-}

Peace,
david
-- 
David H. Wolfskill				david at catwhisker.org
Believe SORBS at your own risk: 63.193.123.122 has been static since Aug 1999.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://www.baylisa.org/pipermail/baylisa/attachments/20070514/ff9612da/attachment.bin>

From asheesh at asheesh.org  Mon May 14 07:03:20 2007
From: asheesh at asheesh.org (Asheesh Laroia)
Date: Mon, 14 May 2007 10:03:20 -0400 (EDT)
Subject: What does a responsible admin do if ...
In-Reply-To: <20070514122054.GF64542@bunrab.catwhisker.org>
References: <20070514122054.GF64542@bunrab.catwhisker.org>
Message-ID: <alpine.DEB.0.98.0705140955250.14359@alchemy.localdomain>

On Mon, 14 May 2007, David Wolfskill wrote:

> ... undesirable behavior is seen from a netblock for which there is no
> email contact information?

In my opinion, you do the same thing you would normally do: Use a system 
like fail2ban <http://www.fail2ban.org> to automatically block IPs that 
repeatedly fail to authenticate.  When the attempts stop for a short 
while, the ban will lift, but repeated attempts again will restart the 
ban.

After all, if they're failing to authenticate, what's the problem? (-;

You could try Googling the RIPE WHOIS info results; the domain seems to be 
mut.ac.ir which has an email address listed, at least.

-- Asheesh.

-- 
Nobody knows the trouble I've been.


From ahorn at deorth.org  Mon May 14 07:20:22 2007
From: ahorn at deorth.org (Alan Horn)
Date: Mon, 14 May 2007 07:20:22 -0700 (PDT)
Subject: What does a responsible admin do if ...
In-Reply-To: <20070514122054.GF64542@bunrab.catwhisker.org>
References: <20070514122054.GF64542@bunrab.catwhisker.org>
Message-ID: <20070514071955.P63359@slick.sigje.org>


On Mon, 14 May 2007, David Wolfskill wrote:

> ... undesirable behavior is seen from a netblock for which there is no
> email contact information?
>
> Granted, this isn't likely a scenario where "one size (approach)
> fits all," but the prospect of reading log entries -- and this was
> for over 3800 attempts to logiin to my SSH server over a 5-hour

... personally, I get this every day and ignore it.

Cheers,

Al



From cottrell at slac.stanford.edu  Mon May 14 07:57:23 2007
From: cottrell at slac.stanford.edu (Cottrell, Les)
Date: Mon, 14 May 2007 07:57:23 -0700
Subject: What does a responsible admin do if ...
In-Reply-To: <alpine.DEB.0.98.0705140955250.14359@alchemy.localdomain>
References: <20070514122054.GF64542@bunrab.catwhisker.org> <alpine.DEB.0.98.0705140955250.14359@alchemy.localdomain>
Message-ID: <35C208A168A04B4EB99D1E13F2A4DB01025EAA88@exch-mail1.win.slac.stanford.edu>

Also http://www.geoiptool.com/en/?IP=213.176.96.5 shows it as being in Iran/Tehran.  However pinging 213.176.96.5 from Vancouver shows min-RTT (5 pings)  of 27ms, Ottawa 94ms, Oak Ridge 67ms, Long Island 94ms, ~140ms from UK. Thus it would appear to be in N. America.  It is also not pingable (times out with no echoes) from many sites (e.g. SLAC.Stanford.EDU). On the other hand traceroute from SLAC shows the route with router names in Tehran and RTTs consistent with Iran and 213.176.96.5 identifies itself at the end hop as mail.cressnet.ir.   Also mut.ac.ir shows up (from SLAC) as an unknown host and does not ping from any of 50 sites worldwide nor does mail.cressnet.ir.


-----Original Message-----
From: owner-baylisa at baylisa.org [mailto:owner-baylisa at baylisa.org] On Behalf Of Asheesh Laroia
Sent: Monday, May 14, 2007 7:03 AM
To: David Wolfskill
Cc: baylisa at baylisa.org
Subject: Re: What does a responsible admin do if ...

On Mon, 14 May 2007, David Wolfskill wrote:

> ... undesirable behavior is seen from a netblock for which there is no 
> email contact information?

In my opinion, you do the same thing you would normally do: Use a system like fail2ban <http://www.fail2ban.org> to automatically block IPs that repeatedly fail to authenticate.  When the attempts stop for a short while, the ban will lift, but repeated attempts again will restart the ban.

After all, if they're failing to authenticate, what's the problem? (-;

You could try Googling the RIPE WHOIS info results; the domain seems to be mut.ac.ir which has an email address listed, at least.

-- Asheesh.

--
Nobody knows the trouble I've been.



From cottrell at slac.stanford.edu  Mon May 14 08:07:00 2007
From: cottrell at slac.stanford.edu (Cottrell, Les)
Date: Mon, 14 May 2007 08:07:00 -0700
Subject: What does a responsible admin do if ...
References: <20070514122054.GF64542@bunrab.catwhisker.org> <alpine.DEB.0.98.0705140955250.14359@alchemy.localdomain> 
Message-ID: <35C208A168A04B4EB99D1E13F2A4DB01025EAA89@exch-mail1.win.slac.stanford.edu>

BTW although it does not respond to ping, mail.cressnet.ir does repond to port 80 (www, try http://mail.cressnet.ir/src/login.php) with an RTT of ~500ms from SLAC, port 25 (SMTP), port 22 (ssh) but not ports 37, 79, 53, 7. 

-----Original Message-----
From: Cottrell, Les 
Sent: Monday, May 14, 2007 7:57 AM
To: 'Asheesh Laroia'; David Wolfskill
Cc: baylisa at baylisa.org; Faran Javed
Subject: RE: What does a responsible admin do if ...

Also http://www.geoiptool.com/en/?IP=213.176.96.5 shows it as being in Iran/Tehran.  However pinging 213.176.96.5 from Vancouver shows min-RTT (5 pings)  of 27ms, Ottawa 94ms, Oak Ridge 67ms, Long Island 94ms, ~140ms from UK. Thus it would appear to be in N. America.  It is also not pingable (times out with no echoes) from many sites (e.g. SLAC.Stanford.EDU). On the other hand traceroute from SLAC shows the route with router names in Tehran and RTTs consistent with Iran and 213.176.96.5 identifies itself at the end hop as mail.cressnet.ir.   Also mut.ac.ir shows up (from SLAC) as an unknown host and does not ping from any of 50 sites worldwide nor does mail.cressnet.ir.


-----Original Message-----
From: owner-baylisa at baylisa.org [mailto:owner-baylisa at baylisa.org] On Behalf Of Asheesh Laroia
Sent: Monday, May 14, 2007 7:03 AM
To: David Wolfskill
Cc: baylisa at baylisa.org
Subject: Re: What does a responsible admin do if ...

On Mon, 14 May 2007, David Wolfskill wrote:

> ... undesirable behavior is seen from a netblock for which there is no 
> email contact information?

In my opinion, you do the same thing you would normally do: Use a system like fail2ban <http://www.fail2ban.org> to automatically block IPs that repeatedly fail to authenticate.  When the attempts stop for a short while, the ban will lift, but repeated attempts again will restart the ban.

After all, if they're failing to authenticate, what's the problem? (-;

You could try Googling the RIPE WHOIS info results; the domain seems to be mut.ac.ir which has an email address listed, at least.

-- Asheesh.

--
Nobody knows the trouble I've been.



From bill at wards.net  Tue May 15 10:57:44 2007
From: bill at wards.net (Bill Ward)
Date: Tue, 15 May 2007 10:57:44 -0700
Subject: PenLUG next week (NEW LOCATION): Building Scalable, Reliable Web Services using Open Source Technologies
Message-ID: <3d2fe1780705151057s463f250dxadb603632280b543@mail.gmail.com>

Join us on Thursday, May 24 for a presentation by Brett Thomas on
"Building Scalable, Reliable Web Services using Open Source
Technologies."

Date: 	Thursday, May 24th, 2007
Time: 	meeting 7:00 - 9:00 PM, social/networking until 10 PM
Location:
Bayshore Technology Park
1300 Island Drive
Redwood City, CA 94065
Suite 106 - Training Room (two doors down from the room we met in last time)
Meeting room and food/drinks (FREE PIZZA!) courtesy of Qualys.  Thanks, Qualys!!

See www.penlug.org for more information, including directions (both
driving and public transit).  If you can, please RSVP by mailing
rsvp at penlug.org to indicate you are coming and how many people you're
bringing with you.  It's not required but it helps us plan the right
amount of food/drinks etc.

We encourage you to take public transit (best bet: bicycle via
Caltrain) or carpool to this meeting.  Send mail to carpool at penlug.org
for help finding a carpool buddy.  Indicate where you are coming from
/ returning to, and whether you are willing/able to drive or not.


About this month's presentation:

Using real-world examples, learn how to design a complex, scalable web
services system using open source technologies such as Linux, Apache,
Perl, SOAP and Postgres. Discover the unexpected challenges as well as
the rich opportunities available. Overall approach will be adaptable
to any similar open source platforms.

Before Vindicia, Mr. Thomas was Executive Vice President of Technology
for EMusic, joining Mr. Hoffman shortly after the company was founded.
While at EMusic, Mr. Thomas led a team of sixty-five employees and
oversaw the technical integration of several geographically diverse
enterprises utilizing multiple platforms.

Mr. Thomas has been a professional software developer since 1989, and
has management, contract and technical experience through roles at
Network Associates, PGP, NCR, MCI and IBM. Mr. Thomas has particular
expertise in the design and implementation of high transaction volume
e-commerce systems, large-payload download infrastructures, conversion
of paper documents to electronic formats, encryption and security.

Note: The meeting will be in Bayshore Technology Park, Suite 106 -
Training Room (same building, two doors down from the room where we
met in April). The meeting is hosted by Qualys, whose offices are
located in the Bayshore Technology Park. The meeting room is not,
however, in the Qualys office itself.


From guy at extragalactic.net  Wed May 16 09:33:43 2007
From: guy at extragalactic.net (Guy B. Purcell)
Date: Wed, 16 May 2007 09:33:43 -0700
Subject: Hard drive recovery
In-Reply-To: <20070508195041.GA29962@boogeyman>
References: <20070508195041.GA29962@boogeyman>
Message-ID: <E0DC653A-EB49-4700-8CA6-6BB837CFC1BB@extragalactic.net>


On May 8, 2007, at 12:50 PM, cerise at armory.com wrote:

> Any recommendations for a place that'll recover data from a drive  
> suffering
> click death?  It's a drive from an LVM, so I'm really looking for a  
> place
> that'll do a sector-by-sector recovery and transfer to a good drive.
>
> I've been looking around and sales droids seem to fixate on trying  
> to recover
> data from the filesystem which is exactly what I don't need.

Best I've heard of at recovery *in general* is DriveSavers[0],  
although I've never had to use 'em myself.  They seem to take  
personal pride in meeting difficult challenges (like good sysadmins :^)

I just took a quick tour through their website and see that they do  
offer RAID recovery nowadays.

-Guy


[0] <http://www.drivesavers.com/>




From ahorn at deorth.org  Wed May 16 23:19:29 2007
From: ahorn at deorth.org (Alan Horn)
Date: Wed, 16 May 2007 23:19:29 -0700 (PDT)
Subject: May general meeting details (TOMORROW NIGHT!)
In-Reply-To: <20070327114733.T63359@slick.sigje.org>
References: <20070327114733.T63359@slick.sigje.org>
Message-ID: <20070516220232.S63359@slick.sigje.org>


Bah, once again the world conspires to prevent me sending out adequate 
notices ahead of time about our meetings. We do actually have a person
assigned to mutually poke board members to get this stuff out, so we're
trying to work on a self-correcting system here :)


The May General meeting will be held at our usual location at Yahoo Sunnyvale

Location: Yahoo
Classroom 9, Building E
701 First Avenue
Sunnyvale, CA
94089

Date: Thursday May 17th 2007 (Yes, tomorrow night)
Time: 7:00-10:00pm

Daylight savings time upgrades in a huge environment - Jan Schaumann
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This month will be *really* good (and I'm not just saying that to drum up
last minute attendance). Jan Schaumann will be presenting an overview of
the work he did at Yahoo to ensure 120,000 servers were ready to deal with
the altered daylight savings date. The methods used have relevance to any
large-scale upgrades and should be applicable to lots of situations you
encounter regularly.

Jan is one of the sharpest sysadmins I know, so expect the talk to be very
well-informed.

Thanks,

Alan

Details also available at http://www.baylisa.org

Directions to Yahoo are available at 
http://yhoo.client.shareholder.com/press/address.cfm
(turn left into Bldg E, not right into Bldg D.)



From lgj at usenix.org  Fri May 18 14:55:54 2007
From: lgj at usenix.org (Lionel Garth Jones)
Date: Fri, 18 May 2007 14:55:54 -0700
Subject: Top 5 Reasons to Attend USENIX '07
Message-ID: <464E20EA.9050208@usenix.org>

----------------------------------------------
Top 5 Reasons to Attend the 2007 USENIX Annual Technical Conference
June 17-22, 2007, Santa Clara, CA
http://www.usenix.org/usenix07/progb
----------------------------------------------

USENIX '07 offers a cost-effective, one-stop shop for the latest in IT
training, break-throughs, and systems research. Check out the top 5
reasons to join us in Santa Clara, CA, June 17-22, 2007:

1. Top-notch training: Highly respected experts provide you with new
information and skills you can take back to work tomorrow. Topics
include:

-- Richard Bejtlich on TCP/IP Weapons School, Layers 2-3

-- Peter Baer Galvin on Solaris 10 Security Features

-- AEleen Frisch on Administering Linux in Production Environments

-- Steve VanDevender on High-Capacity Email System Design

To view the entire training program, see:
http://www.usenix.org/events/usenix07/training

2. Invited Talks that feature industry luminaries discussing timely
and important topics, such as:

-- Keynote Address by Mendel Rosenblum of Stanford University,
"The Impact of Virtualization on Computing Systems,"

-- Plenary Closing by Mary Lou Jepsen, One Laptop per Child, "Crossing
the Digital Divide: The Latest Efforts from One Laptop per Child"

-- Rob Lanphier, Linden Lab, "Second Life"

-- And more!

http://www.usenix.org/usenix07/ITs

3. You'll see it here first:

-- The latest developments in cutting-edge systems research in the
Refereed Papers track.

http://www.usenix.org/events/usenix07/tech

-- An introduction to interesting new or ongoing work at the Poster
Session.

http://www.usenix.org/events/usenix07/activities.html#poster

4. Answers to your toughest questions:

-- Guru Is In sessions feature experts who come prepared to respond to
your most burning technical questions on hot topics. The full list of
topics will be announced soon!

http://www.usenix.org/events/usenix07/tech

5. The chance to mingle with industry leaders:

-- Evening events such as the Birds-of-a-Feather (BoF) sessions offer
additional opportunities to network with peers to gain that
all-important "insider" IT knowledge.

http://www.usenix.org/events/usenix07/bofs.html

And that's just the beginning. Visit
http://www.usenix.org/usenix06/progb
to see the full list of offerings.

Don't forget:

-- Register at the headquarters hotel by May 29, 2007, to receive the
discounted hotel room rate:

http://www.usenix.org/events/usenix07/hotel.html

-- Register by June 1 and save up to $300!

http://www.usenix.org/events/usenix07/registration

-- Take advantage of the multiple employee discount for groups sending 5
or more:

http://www.usenix.org/events/usenix07/registration/#multi

----------------------------------------------
2007 USENIX Annual Technical Conference
June 17-22, 2007, Santa Clara, CA
http://www.usenix.org/usenix07/progb
Early Bird Registration Deadline: June 1, 2007
-----------------------------------------------



From bill at wards.net  Thu May 24 07:08:17 2007
From: bill at wards.net (Bill Ward)
Date: Thu, 24 May 2007 07:08:17 -0700
Subject: PenLUG tonight (NEW LOCATION): Building Scalable, Reliable Web Services using Open Source Technologies
Message-ID: <3d2fe1780705240708t42c75846h8f1a964e244ba57d@mail.gmail.com>

Join us TONIGHT, Thursday, May 24 for a presentation by Brett Thomas on
"Building Scalable, Reliable Web Services using Open Source Technologies."

Date:   Thursday, May 24th, 2007
Time:   meeting 7:00 - 9:00 PM, social/networking until 10 PM
Location:
Bayshore Technology Park
1300 Island Drive
Redwood City, CA 94065
Suite 106 - Training Room (two doors down from the room we met in last time)
Meeting room and food/drinks (FREE PIZZA!) courtesy of Qualys.  Thanks,
Qualys!!

See www.penlug.org for more information, including directions (both
driving and public transit).  If you can, please RSVP by mailing
rsvp at penlug.org to indicate you are coming and how many people you're
bringing with you.  It's not required but it helps us plan the right
amount of food/drinks etc.

We encourage you to take public transit (best bet: bicycle via
Caltrain) or carpool to this meeting.  Send mail to carpool at penlug.org
for help finding a carpool buddy.  Indicate where you are coming from
/ returning to, and whether you are willing/able to drive or not.


About this month's presentation:

Using real-world examples, learn how to design a complex, scalable web
services system using open source technologies such as Linux, Apache,
Perl, SOAP and Postgres. Discover the unexpected challenges as well as
the rich opportunities available. Overall approach will be adaptable
to any similar open source platforms.

Before Vindicia, Mr. Thomas was Executive Vice President of Technology
for EMusic, joining Mr. Hoffman shortly after the company was founded.
While at EMusic, Mr. Thomas led a team of sixty-five employees and
oversaw the technical integration of several geographically diverse
enterprises utilizing multiple platforms.

Mr. Thomas has been a professional software developer since 1989, and
has management, contract and technical experience through roles at
Network Associates, PGP, NCR, MCI and IBM. Mr. Thomas has particular
expertise in the design and implementation of high transaction volume
e-commerce systems, large-payload download infrastructures, conversion
of paper documents to electronic formats, encryption and security.

Note: The meeting will be in Bayshore Technology Park, Suite 106 -
Training Room (same building, two doors down from the room where we
met in April). The meeting is hosted by Qualys, whose offices are
located in the Bayshore Technology Park. The meeting room is not,
however, in the Qualys office itself.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.baylisa.org/pipermail/baylisa/attachments/20070524/4da5bfa6/attachment.html>

From ulf at Alameda.net  Mon May 28 23:05:54 2007
From: ulf at Alameda.net (Ulf Zimmermann)
Date: Mon, 28 May 2007 23:05:54 -0700
Subject: Restore/Recovery or OS CD for Toshiba Satellite 1415-S173?
Message-ID: <20070529060554.GZ90777@evil.alameda.net>

Does anyone have by chance the restore/recovery cd or the Windows XP
Home cd which came with a Toshiba Satellite 1415-S173 (about 4 years
old)? Trying to wipe the system before sending it for someone in 
Indonisia. Would prefer not spending extra money on a OS license.

-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
You can find my resume at: http://www.Alameda.net/~ulf/resume.html


From david at catwhisker.org  Tue May 29 04:57:39 2007
From: david at catwhisker.org (David Wolfskill)
Date: Tue, 29 May 2007 04:57:39 -0700
Subject: Amusing httpd log entry
Message-ID: <20070529115739.GP5698@bunrab.catwhisker.org>

I'm in the habit of checking the logs on my home systems each morning;
occasionally, something of interest turns up.

This morning, among that category I find:

68.13.83.198 - - [28/May/2007:11:54:22 -0700] "GET /~david/Canyon/wireless.html HTTP/1.1" 200 8002 "http://www.google.com/search?q=how+can+I+get+around+my+neighbors+firewall%3F&hl=en&start=10&sa=N" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; ESB{E94DC8CF-C900-4D13-B14C-C7D40C52F6BF}; .NET CLR 1.0.3705)"

Right. :-}

Well, I'm rather relieved that I'm highly confident that there was
nothing on my Web server that was likely to actually help satisfy the
stated request.  (I know; I'm no fun.  Eh.)

Peace,
david
-- 
David H. Wolfskill				david at catwhisker.org
Anything and everything is a (potential) cat toy.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://www.baylisa.org/pipermail/baylisa/attachments/20070529/b8cb7147/attachment.bin>

From guy at extragalactic.net  Tue May 29 20:59:35 2007
From: guy at extragalactic.net (Guy B. Purcell)
Date: Tue, 29 May 2007 20:59:35 -0700
Subject: Amusing httpd log entry
In-Reply-To: <20070529115739.GP5698@bunrab.catwhisker.org>
References: <20070529115739.GP5698@bunrab.catwhisker.org>
Message-ID: <DCD00CC8-E6E3-4900-B798-6C2E2C169ED8@extragalactic.net>


On May 29, 2007, at 4:57 AM, David Wolfskill wrote:

> 68.13.83.198 - - [28/May/2007:11:54:22 -0700] "GET /~david/Canyon/ 
> wireless.html HTTP/1.1" 200 8002 "http://www.google.com/search?q=how 
> +can+I+get+around+my+neighbors+firewall%3F&hl=en&start=10&sa=N"  
> "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; ESB{E94DC8CF- 
> C900-4D13-B14C-C7D40C52F6BF}; .NET CLR 1.0.3705)"

Heh--pretty funny, indeed.  S/he must have been persistent:  your  
page isn't in the first three pages of links returned.

-Guy