(ℹ) Join us now at the IRC channel | ䷉ Find the plain text version at this address.
*randomgry (~test@unaffiliated/gryllida) has joined #boycottnovell | Feb 27 00:26 | |
*gry has quit (Ping timeout: 272 seconds) | Feb 27 00:26 | |
*randomgry is now known as gry | Feb 27 00:30 | |
*liberty_box has quit (Ping timeout: 256 seconds) | Feb 27 01:40 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 01:56 | |
*liberty_box has quit (Ping timeout: 272 seconds) | Feb 27 03:57 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 04:00 | |
*liberty_box has quit (Ping timeout: 276 seconds) | Feb 27 05:06 | |
*gry has quit (Ping timeout: 276 seconds) | Feb 27 05:48 | |
*gry (~test@unaffiliated/gryllida) has joined #boycottnovell | Feb 27 06:14 | |
*gry has quit (Ping timeout: 265 seconds) | Feb 27 06:36 | |
*gry (~test@unaffiliated/gryllida) has joined #boycottnovell | Feb 27 06:41 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 06:56 | |
*rianne_ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 07:31 | |
schestowitz__ | > Hi :-) and thank so much for the lovely article I've just seen! Very | Feb 27 07:35 |
---|---|---|
schestowitz__ | > kind, and great about cyling them round; glad you like them, and many | Feb 27 07:35 |
schestowitz__ | > thanks again. | Feb 27 07:35 |
schestowitz__ | > Greetings, | Feb 27 07:45 |
schestowitz__ | > Sorry for the delayed response. I took a look at the capsule and it | Feb 27 07:45 |
schestowitz__ | > looks like you have a lot of great content. It is unfortunately not well | Feb 27 07:45 |
schestowitz__ | > structured for how spacewalk works (but is undoubtedly a good and | Feb 27 07:45 |
schestowitz__ | > functional structure in general). | Feb 27 07:45 |
schestowitz__ | > | Feb 27 07:45 |
schestowitz__ | > Spacewalk works based on page hash comparrison. Since your capsule moves | Feb 27 07:45 |
schestowitz__ | > things into pages based on month/year, spacewalk would only see an | Feb 27 07:45 |
schestowitz__ | > update every month or year... rather than every time you add a new | Feb 27 07:45 |
schestowitz__ | > article. I am unfortunately, and with regrets, not able to update a link | Feb 27 07:45 |
schestowitz__ | > to the current month folder every time the month changes. | Feb 27 07:45 |
schestowitz__ | > | Feb 27 07:45 |
schestowitz__ | > I definitely support what y'all are doing and if you end up with a page | Feb 27 07:46 |
schestowitz__ | > that shows maybe the top 10 or 20 most recent posts sorted by date or | Feb 27 07:46 |
schestowitz__ | > hte like I'd be happy to include it as a part of the spacewalk feed. I | Feb 27 07:46 |
schestowitz__ | > know making something extra just for this feed is probably out of scope | Feb 27 07:46 |
schestowitz__ | > for you, but wanted to offer just in case you were interested. | Feb 27 07:46 |
schestowitz__ | > | Feb 27 07:46 |
schestowitz__ | > Be in touch and let me know how you'd like to proceed. If more | Feb 27 07:46 |
schestowitz__ | > information on how spacewalk works would be helpful I can provide that | Feb 27 07:46 |
schestowitz__ | > as well. | Feb 27 07:46 |
schestowitz__ | > | Feb 27 07:46 |
schestowitz__ | > Best wishes, | Feb 27 07:46 |
schestowitz__ | Hi, | Feb 27 07:46 |
schestowitz__ | How about | Feb 27 07:46 |
schestowitz__ | gemini://gemini.techrights.org/daily-feed | Feb 27 07:46 |
schestowitz__ | and also | Feb 27 07:46 |
schestowitz__ | gemini://gemini.techrights.org/feed | Feb 27 07:46 |
schestowitz__ | Let me know if that works better or needs further work. | Feb 27 07:46 |
schestowitz__ | Regards, | Feb 27 07:46 |
*liberty_box has quit (Ping timeout: 264 seconds) | Feb 27 08:04 | |
*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 08:04 | |
*rianne_ has quit (Read error: Connection reset by peer) | Feb 27 08:04 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 08:04 | |
schestowitz__ | > Former media advisor Brittany Higgins[1] went public about 2 weeks ago, | Feb 27 08:50 |
schestowitz__ | > claiming | Feb 27 08:50 |
schestowitz__ | > | Feb 27 08:50 |
schestowitz__ | > a) rape on the sofa of female defense minister, | Feb 27 08:50 |
schestowitz__ | > | Feb 27 08:50 |
schestowitz__ | > b) she didn't specify the suspect's name (Lehrmann), reports suggest her | Feb 27 08:50 |
schestowitz__ | > gripe is with the Government for helping suspect make a clean getaway, | Feb 27 08:50 |
schestowitz__ | > officials even steam cleaned the sofa before the police could check it | Feb 27 08:50 |
schestowitz__ | > | Feb 27 08:50 |
schestowitz__ | > Even though she never told anybody the name of the suspect, three other | Feb 27 08:50 |
schestowitz__ | > women immediately made complaints about the same suspect | Feb 27 08:50 |
schestowitz__ | > | Feb 27 08:50 |
schestowitz__ | > I can't help wondering, if this guy had the same profile as Appelbaum, | Feb 27 08:50 |
schestowitz__ | > would there be even more women with the same concerns as the first four? | Feb 27 08:50 |
schestowitz__ | > | Feb 27 08:50 |
schestowitz__ | > The cover up is a story in itself, it involves the most senior officials | Feb 27 08:50 |
schestowitz__ | > in a G20 government, that potentially makes it a lot bigger than the | Feb 27 08:50 |
schestowitz__ | > Alex Salmond stuff. Australia also seems to have much more intense | Feb 27 08:51 |
schestowitz__ | > injunctions such as the Securency super-injunction and the injunction | Feb 27 08:51 |
schestowitz__ | > that concealed the case against Cardinal George Pell. | Feb 27 08:51 |
schestowitz__ | > | Feb 27 08:51 |
schestowitz__ | > https://www.theguardian.com/commentisfree/2014/jul/30/wikileaks-gag-order-open-justice-is-threatened-by-super-injuctions | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-www.theguardian.com | WikiLeaks gag order: open justice is threatened by super-injunctions | Australia news | The Guardian | Feb 27 08:51 | |
schestowitz__ | > | Feb 27 08:51 |
schestowitz__ | > It seems that both techrighs and kangaroocourtofaustralia.com have been | Feb 27 08:51 |
schestowitz__ | > shadow banned by Twitter and Facebook, so you have something in common | Feb 27 08:51 |
schestowitz__ | > | Feb 27 08:51 |
schestowitz__ | > The media are having a field day with it because there are so many | Feb 27 08:51 |
schestowitz__ | > pictures of the victim alongside powerful figures: | Feb 27 08:51 |
schestowitz__ | > | Feb 27 08:51 |
schestowitz__ | > https://www.qt.com.au/news/what-speaker-knew-about-rape-claims/4199321/ | Feb 27 08:51 |
schestowitz__ | > | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-www.qt.com.au | ‘ACCESS TO SUITE’: List of staffers who knew of ‘incident’ | Queensland Times | Feb 27 08:51 | |
schestowitz__ | > and also because everybody is obviously lying, even a junior journalist | Feb 27 08:51 |
schestowitz__ | > might get lucky exposing a lie with the right question | Feb 27 08:51 |
schestowitz__ | > | Feb 27 08:51 |
schestowitz__ | > I might write something comparing the way Lehrmann's name has been | Feb 27 08:51 |
schestowitz__ | > protected against the way Appelbaum and Assange where deliberately shamed. | Feb 27 08:51 |
schestowitz__ | I generally know so little about these Aussie affairs that I'd rather not touch it myself, for fear I might write something wrong. | Feb 27 08:51 |
schestowitz__ | Twitter went further than shadow-banning. | Feb 27 08:51 |
schestowitz__ | Compare | Feb 27 08:51 |
schestowitz__ | http://techrights.org/2021/01/28/twitter-censorship-regime/ (January) | Feb 27 08:51 |
schestowitz__ | to | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-techrights.org | Twitter is Hiding Techrights and Partly Shadowbans Yours Truly | Techrights | Feb 27 08:51 | |
schestowitz__ | http://techrights.org/2021/02/04/twitter-berserk/ (Feb) | Feb 27 08:51 |
schestowitz__ | and one day later: | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-techrights.org | Twitter: We Suspend Your Account For Quoting the Media About Bill Gates | Techrights | Feb 27 08:51 | |
schestowitz__ | http://techrights.org/2021/02/05/twitter-censorship-bingo/ | Feb 27 08:51 |
schestowitz__ | Afterthought (an hour ago): | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-techrights.org | Twitter Has Just Suspended the President of FFII for Naming Bill Gates Patent Profiteering and Factual Information About Twitter Censorship (Updated) | Techrights | Feb 27 08:51 | |
schestowitz__ | Another example for the mix is RMS. | Feb 27 08:51 |
schestowitz__ | The whole thing "started" with a mailing list post, which was almost understandably controversial. | Feb 27 08:51 |
schestowitz__ | But he was cancelled for many women online then saying things about him, about things he's alleged to have "thought" ages ago. Or even outright fabrications (never corrected), e.g.: | Feb 27 08:51 |
schestowitz__ | http://techrights.org/2020/09/10/the-fake-door-sign/ | Feb 27 08:51 |
schestowitz__ | The damage is done: | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-techrights.org | The Fake ‘Door Sign’ Used to Frame Richard Stallman and Misrepresent Him One Year Ago (the Media Never Corrected This Slanderous Allegation) | Techrights | Feb 27 08:51 | |
schestowitz__ | http://techrights.org/2020/09/10/sjvn-senior-moment/ | Feb 27 08:51 |
schestowitz__ | https://joindiaspora.com/posts/20164558#e8ff1410598e0139c9a122bfe022ffdd | Feb 27 08:51 |
-TechrightsBN/#boycottnovell-techrights.org | One Year Later Steven J. Vaughan-Nichols’ Libel Against Richard Stallman Remains Online and Uncorrected at ZDNet | Techrights | Feb 27 08:51 | |
-TechrightsBN/#boycottnovell-@linux@joindiaspora.com: Can Linux Run Video Games? • 𝕿𝖚𝖝 𝕸𝖆𝖈𝖍𝖎𝖓𝖊𝖘 ⇨ http://www.tuxmachines.org/node/148125 | Feb 27 08:51 | |
schestowitz__ | "dude, it depends on the hardware, come on... are you trolling?" | Feb 27 08:51 |
-TechrightsBN/#boycottnovell--> www.tuxmachines.org | Can Linux Run Video Games? | Tux Machines | Feb 27 08:51 | |
schestowitz__ | "it can’t sorry, you need to switch to windows" | Feb 27 08:52 |
*rianne__ has quit (Ping timeout: 264 seconds) | Feb 27 08:52 | |
*liberty_box has quit (Ping timeout: 276 seconds) | Feb 27 08:53 | |
*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 08:54 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 08:55 | |
schestowitz__ | <li> | Feb 27 09:35 |
schestowitz__ | <h5><a href="https://betanews.com/2021/02/26/mageia-8-linux-download/">Mageia 8 Linux distro ready for download</a></h5> | Feb 27 09:35 |
schestowitz__ | <blockquote> | Feb 27 09:35 |
-TechrightsBN/#boycottnovell-betanews.com | Mageia 6 Linux distribution now available for download | Feb 27 09:35 | |
schestowitz__ | <p>"ARM support has continued to develop, with both AArch64 and ARMv7 now having all packages built and being close to primary architectures now. Support for Wi-Fi installation in the classical installer using WPA2 encryption has been added, as well as improved support for newer filesystems allowing installations on F2FS. Support for NILFS, XFS, exFAT and Windows 10 NTFS has been improved to allow for better | Feb 27 09:35 |
schestowitz__ | partition management," says Donald Stewart, Mageia developer. </p></blockquote></li> | Feb 27 09:35 |
schestowitz__ | <li> | Feb 27 09:37 |
schestowitz__ | <h5><a href="https://blog.documentfoundation.org/blog/2021/02/23/getting-started-with-libreoffice-7-0-guide-just-arrived/">Getting Started with LibreOffice 7.0 Guide Just Arrived!</a></h5> | Feb 27 09:37 |
schestowitz__ | <blockquote> | Feb 27 09:37 |
schestowitz__ | <p>The Documentation Team is happy to announce the immediate availability of the LibreOffice 7.0 Getting Started Guide, updated to include all LibreOffice 7.0 features. </p> | Feb 27 09:37 |
-TechrightsBN/#boycottnovell-blog.documentfoundation.org | Getting Close to LibreOffice 4.1 - The Document Foundation Blog | Feb 27 09:37 | |
schestowitz__ | <p> The guide is written for anyone who wants to get up to speed quickly with LibreOffice. Readers may be new to office software, or may be familiar with another office suite. This guide is a valuable asset for all users. </p></blockquote></li> | Feb 27 09:37 |
*liberty_box has quit (Ping timeout: 240 seconds) | Feb 27 10:14 | |
*rianne__ has quit (Ping timeout: 276 seconds) | Feb 27 10:15 | |
schestowitz__ | I have put DB login details in my personal notes. I was going to send a more complete formula over ssh, but I see you got it anyway | Feb 27 10:15 |
schestowitz__ | BTW, I still toggle logging on and off for Gemini, so the file is never complete. Over the past 2 days, however, due to growing strain from spiders, I left it on for longer periods of time. It helps to know how much it affects our connection and what the limits/bottlenecks are. Gemini is small, so I think a million requests per day can be barely noticeable. To us in the house anyway... | Feb 27 10:39 |
schestowitz__ | IOW, for something compact like gem text I don't foresee a need to host from outside one's premises | Feb 27 10:39 |
schestowitz__ | In the days of gophers you'd assume modem connections, so no 10MB per page midset | Feb 27 10:40 |
schestowitz__ | In the days of gophers you'd assume modem connections, so no 10MB per page mindset | Feb 27 10:40 |
Techrights-sec | Yeah. Though I am wondering specifically which parts the one bot was | Feb 27 10:40 |
Techrights-sec | looping through the other day. | Feb 27 10:40 |
schestowitz__ | I keep an eye on the gemini mailing lists now but have not subscribed as there it too much and lots of OT stuff | Feb 27 10:41 |
Techrights-sec | gopher and wearly web were concurrent. | Feb 27 10:42 |
Techrights-sec | LOTS of off topic stuff there, too bad. | Feb 27 10:42 |
Techrights-sec | There are also a lot of people | Feb 27 10:44 |
Techrights-sec | that don'tr / won't understand what document metadata is. Where it is useful | Feb 27 10:44 |
Techrights-sec | and whether there should be some in Gemini text is another matter, but | Feb 27 10:44 |
Techrights-sec | it's hard to discuss when many don't grasp the topic. Which is a major puzzle | Feb 27 10:44 |
Techrights-sec | since many claim to be in ICT yet lack core knowledge and some major concepts. | Feb 27 10:44 |
Techrights-sec | The TR browsing structure is only possible because there was a way to | Feb 27 10:44 |
Techrights-sec | smuggle date and title of documents through the workflow to the end stage. | Feb 27 10:44 |
Techrights-sec | At the end of the day it is about ke-value pairs. Fighting over the semantic | Feb 27 10:45 |
Techrights-sec | contents is pointless. Perhaps that this their goal, to bog it down | Feb 27 10:45 |
Techrights-sec | with concern trolling and fake misunderstanding. | Feb 27 10:45 |
Techrights-sec | I'm not sure adding metadat to gemini files is good, I am not sure it is bad. | Feb 27 10:51 |
Techrights-sec | But it is frustrating that while some clearly understand, and that is good, | Feb 27 10:51 |
Techrights-sec | many appear to refuse to understand the concepts. | Feb 27 10:51 |
Techrights-sec | Anyway, with direct access to the MariDB database through SQL, it will b | Feb 27 10:51 |
Techrights-sec | e possible to streamline and simplify the generation of pages. | Feb 27 10:51 |
Techrights-sec | It's more of an exercise in principle now, but doing it that way | Feb 27 10:51 |
Techrights-sec | is more likely to be reusable by other projects. | Feb 27 10:51 |
schestowitz__ | ime, what's lacking is documenting (project's generic name isn't helping), so we need to document, cover, advocate, just spread gemini:// links etc. | Feb 27 10:51 |
schestowitz__ | For a large site focused on tech news we can become an early show case >on a large scale< and I think this gives us some influence over the direction taken as nothing is yet set in stone or standardised | Feb 27 10:52 |
Techrights-sec | ts would come from pacakging | Feb 27 10:53 |
Techrights-sec | some clients for various distros. | Feb 27 10:53 |
schestowitz__ | I can poke some DDs, but not sure of the procedures followed | Feb 27 10:53 |
Techrights-sec | Agreed, but one of the biggest advancements would come from pacakging | Feb 27 10:54 |
Techrights-sec | some clients for various distros. | Feb 27 10:54 |
Techrights-sec | It's more of a few skill levels below DD | Feb 27 10:56 |
Techrights-sec | even I could probably package, if I had a dedicated system and ensured that | Feb 27 10:56 |
Techrights-sec | I could commit to setting time aside for a cycle or two. | Feb 27 10:56 |
schestowitz__ | it might be best for the original s/w devs to do/propose, then pass to a DD/DM with keyring access | Feb 27 10:57 |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 10:57 | |
*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 10:57 | |
schestowitz__ | iow, I think it's well outside our scope and priority. Some of the main tools rely on the BLOAT of rust cargo cult, which having explored on arm the other day, I now regard to be as bad as Electron | Feb 27 10:57 |
schestowitz__ | frameworks and bloat are now seen as benign and simple tools as malicious and dangerous | Feb 27 10:58 |
schestowitz__ | I always feel a bit guilty about logging gemini, knowing what this project is inherently against, but I'm sure others too pursue some sort of diagnostics, which makes sense when one address can make half a million reqs in several hours. Should we package something up to that effect? Maybe as means of DDOS protection? Surely it'll become a real issue in coming months/years. | Feb 27 11:02 |
schestowitz__ | I added gawk as a dependency for dates in the logs | Feb 27 11:03 |
schestowitz__ | iftop -i wlan0 -P -t -L 1000 | grep -B 0 -A 1 :1965 | grep -v :1965 | gawk '{ print strftime("[%Y-%m-%d %H:%M:]"), $0 }' >> /home/gemini/log.txt | Feb 27 11:04 |
Techrights-sec | sudo tcpdump --direction=in -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,"",$2); sub | Feb 27 12:30 |
Techrights-sec | (/\.[0-9]+$/,"",$4); print $1, $2, $4;}' | Feb 27 12:30 |
Techrights-sec | more accurate than iftop | Feb 27 12:30 |
schestowitz__ | let's try that... | Feb 27 12:30 |
schestowitz__ | it seems to work ok so far, and with more real-time-like traits | Feb 27 12:33 |
Techrights-sec | tcpdump may have to be added, but it is the mainstay of network toolboxes every- | Feb 27 12:34 |
Techrights-sec | where | Feb 27 12:34 |
Techrights-sec | also throw in a -p there in the tcpdump part | Feb 27 12:34 |
schestowitz__ | cat log_gemini_new.sh | Feb 27 12:36 |
schestowitz__ | tcpdump -p --direction=in -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,,); sub(/\.[0-9]+$/,,); print , , ;}' >> /home/gemini/log.txt | Feb 27 12:36 |
schestowitz__ | corrected now, lost some bits | Feb 27 12:38 |
schestowitz__ | show-new-visitors.sh may now need amending. I kept the old version of the logger aside (old filename). | Feb 27 12:40 |
Techrights-sec | yes and it won't miss connections | Feb 27 12:41 |
Techrights-sec | it is precise since the gemini protocol has one-one for connections and request | Feb 27 12:41 |
Techrights-sec | ^ tario | Feb 27 12:41 |
Techrights-sec | ratio | Feb 27 12:41 |
Techrights-sec | ok I'll check the script | Feb 27 12:41 |
*rianne__ has quit (Ping timeout: 240 seconds) | Feb 27 12:46 | |
*liberty_box has quit (Ping timeout: 240 seconds) | Feb 27 12:46 | |
Techrights-sec | the show-new-visitors.sh can be simplified to just contain tail | Feb 27 12:49 |
Techrights-sec | all set | Feb 27 12:49 |
Techrights-sec | remember the >> append redirect? | Feb 27 12:49 |
*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 12:54 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 12:56 | |
schestowitz__ | did the port change or something? I've been struggling here, can't figure out why it's not writing anything with either network tool | Feb 27 13:17 |
Techrights-sec | sudo tcpdump --direction=in -p -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,"",$2); | Feb 27 13:19 |
Techrights-sec | sub(/\.[0-9]+$/,"",$4); print $1, $2, $4;}' >> /home/gemini/log.txt | Feb 27 13:19 |
Techrights-sec | it has to write to expected location | Feb 27 13:19 |
schestowitz__ | either the new or the old one-liner would not write to that file anymore and it does not seem to be a permissions issue (I checked loads of things) | Feb 27 13:19 |
Techrights-sec | ok. on the RPi it must be:\ | Feb 27 13:23 |
Techrights-sec | sudo tcpdump --direction=in -p -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,"",$2); | Feb 27 13:23 |
Techrights-sec | sub(/\.[0-9]+$/,"",$4); print $1, $2, $4;fflush();}' >> /home/gemini/log2.txt | Feb 27 13:23 |
Techrights-sec | adjust the log name as needed | Feb 27 13:23 |
schestowitz__ | now=`date +"-%Y-%m-%d"` | Feb 27 13:33 |
schestowitz__ | echo '----------------------------------------------------------------------------' >> /home/gemini/gemini-log${now}.txt | Feb 27 13:33 |
schestowitz__ | echo -n 'Restarting logging at ' >> /home/gemini/gemini-log${now}.txt | Feb 27 13:33 |
schestowitz__ | date >> /home/gemini/gemini-log${now}.txt | Feb 27 13:33 |
schestowitz__ | echo '' >> /home/gemini/gemini-log${now}.txt | Feb 27 13:33 |
schestowitz__ | # tcpdump -p --direction=in -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,"",$2); sub(/\.[0-9]+$/,"",$4); print $1, $2, $4;}' >> /home/gemini/log.txt | Feb 27 13:33 |
schestowitz__ | sudo tcpdump --direction=in -p -l -tttt -i wlan0 'tcp[tcpflags] & (tcp-syn) != 0 and port 1965' | awk '{sub(/\.[0-9]+$/,"",$2);sub(/\.[0-9]+$/,"",$4); print $1, $2, $4;fflush();}' >> /home/gemini/gemini-log${now}.txt | Feb 27 13:33 |
schestowitz__ | The viewer may need to be adapted somewhat for this, I think having a separate directory like ~/log is worthwhile too | Feb 27 13:34 |
Techrights-sec | a separate directory is probably a good idea | Feb 27 13:36 |
schestowitz__ | you have just made one | Feb 27 13:37 |
schestowitz__ | ok, it's now running and writing correctly to the right file/s | Feb 27 13:39 |
schestowitz__ | just tidied up ~ a little with subdirs | Feb 27 13:46 |
Techrights-sec | yes, see also ~?bin/tcpdump-logger.sh | Feb 27 13:47 |
Techrights-sec | much improved | Feb 27 13:47 |
schestowitz__ | checking.. | Feb 27 13:47 |
schestowitz__ | imported to "pi" the more elegant script (bash) and reran with files set afresh (binned the older files in /tmp ) | Feb 27 13:53 |
schestowitz__ | do you want to modify show-new-visitors.sh or should I? File location changed (dynamic) and maybe the format too needs adapting to (awk) | Feb 27 13:56 |
Techrights-sec | I'll get it | Feb 27 13:57 |
schestowitz__ | excellent, thanks. I was reluctant to run my old hack with cli mode top because it was too cpu-intensive to be worth it, except when diagnosing. The current implementation is a lot better and doesn't have high i/o in the mix | Feb 27 13:58 |
Techrights-sec | ok I have ~/bin/tcpdump-logger.sh and ~~/bin/show-new-visitors.sh matching | Feb 27 14:04 |
schestowitz__ | I have just diff'ed ~/bin/tcpdump-logger.sh and what's running. It seems not to have changed since I fused that in. | Feb 27 14:04 |
schestowitz__ | except indentation? I see file change 5 mins ago. | Feb 27 14:05 |
schestowitz__ | to avoid conflicts I've just put RO log_gemini_new.sh in ~gemini/bin | Feb 27 14:07 |
Techrights-sec | yes tweaking, a bad habit of always changing | Feb 27 14:08 |
schestowitz__ | I know my lazy quick and dirty hacks can be factorised there | Feb 27 14:08 |
schestowitz__ | to make it less like spying and more like DDOS prevention is might be worth extending to give something like count of reqs per host, periodically, to highlight bw hogs | Feb 27 14:09 |
Techrights-sec | then it will have to escalate in complexity | Feb 27 14:10 |
schestowitz__ | that can be a separate script e.g. flag_hoarder.sh | Feb 27 14:10 |
Techrights-sec | that can be in awk or perl then | Feb 27 14:12 |
schestowitz__ | host in space-separated line feed is always 3rd element | Feb 27 14:13 |
schestowitz__ | I typically process that with 'cut' and you could reuse some online hacks for counting and sorting by number the hostnames | Feb 27 14:14 |
schestowitz__ | for multi-day 'cat' can help (aggregating files) | Feb 27 14:14 |
schestowitz__ | something like cat log* | cut SOMETHING | sort THEN CRUNCH/Count | Feb 27 14:15 |
Techrights-sec | $ awk '$3 {a[$3]++} END{ for (b in a) {print a[b],b}}' OFS="\t" /home/gemini/logs/gemini-log-$(date +"%F").log | Feb 27 14:16 |
Techrights-sec | | sort -k1,1nr -k2,2 | Feb 27 14:16 |
Techrights-sec | awk ... /home/gemini/logs/*.log | Feb 27 14:16 |
schestowitz__ | this works! gee, that was fast! | Feb 27 14:17 |
schestowitz__ | can be periodically run with 'clear' and maybe two-pane tmux for ~/bin/show-new-visitors.sh | Feb 27 14:18 |
schestowitz__ | would decrease the number of command we need to run rather than monitoring pane to observe | Feb 27 14:18 |
Techrights-sec | it's awk, so low overhead | Feb 27 14:19 |
Techrights-sec | watch will do that. | Feb 27 14:19 |
Techrights-sec | watch awk ... | Feb 27 14:19 |
schestowitz__ | maybe wrap it in a shell script on ~/bin? | Feb 27 14:19 |
Techrights-sec | see the -n or --interval option | Feb 27 14:20 |
schestowitz__ | I see you edit the file (.swap) | Feb 27 14:21 |
Techrights-sec | lock release, sorry I forgot it was open | Feb 27 14:22 |
schestowitz__ | now it is run with watch | Feb 27 14:22 |
Techrights-sec | show-new-visitors-count.sh is the wrapper for the above awk | Feb 27 14:22 |
Techrights-sec | It's not so efficient in that it will re-read the whole file, so the interval | Feb 27 14:23 |
Techrights-sec | ought to be nice and long | Feb 27 14:23 |
schestowitz__ | watch-for-heavy-users.sh is in place | Feb 27 14:25 |
schestowitz__ | chmod set | Feb 27 14:25 |
Techrights-sec | ok, 755 might be better permissions or 555 or 550 | Feb 27 14:26 |
schestowitz__ | I think one script with fail -f was modified a bit to accomplish something different and then exit | Feb 27 14:29 |
schestowitz__ | I've modified 3 lines, commented out two and brought another up to date with the filename format | Feb 27 14:32 |
schestowitz__ | ./show-new-visitors-count.sh is locked, I was going to make a rule for edge case of date being added for logger shutdown/startup (something to exclude "at") | Feb 27 14:34 |
Techrights-sec | see also /lib/systemd/system/gemini-tcpdump-logger.service | Feb 27 14:35 |
Techrights-sec | /usr/local/sbin/tcpdump-logger.sh | Feb 27 14:35 |
Techrights-sec | Oh, it is just read only | Feb 27 14:36 |
Techrights-sec | now it is writable again | Feb 27 14:36 |
schestowitz__ | With the daemon running the "at" thing will no longer be an issue | Feb 27 14:37 |
schestowitz__ | we'll just need a policy for flushing out rotated logs or whatnot to respect privacy | Feb 27 14:37 |
*rianne__ has quit (Ping timeout: 240 seconds) | Feb 27 14:38 | |
Techrights-sec | logrotate can do that | Feb 27 14:38 |
schestowitz__ | should I just turn off the logging from pi account? Assuming the daemon can do the same already? | Feb 27 14:38 |
*liberty_box has quit (Ping timeout: 264 seconds) | Feb 27 14:38 | |
Techrights-sec | yes the 'pi' account does not need to do logging now, the (ugh) systemd | Feb 27 14:40 |
Techrights-sec | service does that now | Feb 27 14:40 |
schestowitz__ | coming soon: Task Manager :-) OK, disabling that at the pi account now | Feb 27 14:41 |
schestowitz__ | Active: active (running) since Sat 2021-02-27 14:32:24 GMT; 10min ago | Feb 27 14:43 |
schestowitz__ | there are two files on logs, maybe one is from an old script that was not updated | Feb 27 14:44 |
schestowitz__ | Oh, there is a missing "-log" | Feb 27 14:45 |
schestowitz__ | I will override the service, comment out the current | Feb 27 14:46 |
schestowitz__ | I've changed the file in /usr and restarted/reloaded the service, though it still writes logs to the old location | Feb 27 14:53 |
Techrights-sec | $ sudo crontab -l | grep -Ev '^$|^#' | Feb 27 14:53 |
Techrights-sec | 0 0 * * * /bin/systemctl restart gemini-tcpdump-logger.service | Feb 27 14:53 |
*rianne__ (~rianne@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 14:55 | |
*liberty_box (~liberty@host81-154-169-167.range81-154.btcentralplus.com) has joined #boycottnovell | Feb 27 14:55 | |
Techrights-sec | /home/gemini/logs/gemini-2021-02-27.log is getting the input for now | Feb 27 14:57 |
schestowitz__ | yes, it has gotten split into two files | Feb 27 14:57 |
schestowitz__ | and I worry that the other peripheral scripts probably anticipate the form with "-log" in it | Feb 27 14:57 |
schestowitz__ | show-new-visitors-count.sh for example anticipates the newer form (filename) | Feb 27 15:00 |
Techrights-sec | show-new-visitors-count.sh and show-new-visitors.sh in ~/bin now | Feb 27 15:05 |
Techrights-sec | look for the new file name | Feb 27 15:05 |
schestowitz__ | I made some changes to location, but I cannot get my head around the fact it's still writing to the older location, no matter if I restart the service | Feb 27 15:06 |
Techrights-sec | those were the only two ther looking for the old one | Feb 27 15:06 |
Techrights-sec | which old location? | Feb 27 15:08 |
schestowitz__ | I think that the "newer" one has "log-" or "-log" in the filename | Feb 27 15:08 |
schestowitz__ | Oh, I think my commenting style in the middle broke it | Feb 27 15:15 |
schestowitz__ | I also see you've just edited that out | Feb 27 15:15 |
schestowitz__ | the file structure we want is /home/gemini/logs/gemini-log-$(date +"%F").log | Feb 27 15:19 |
schestowitz__ | I think it boils down to inconsistent in what we thought would be the target file | Feb 27 15:20 |
schestowitz__ | I think it boils down to inconsistent thinking or confusion/lack of understanding in what we thought would be the target file | Feb 27 15:20 |
Techrights-sec | fixed, I think | Feb 27 15:20 |
Techrights-sec | there was some weird stuff in the service script | Feb 27 15:20 |
schestowitz__ | It was my fault for putting a comment in a multi-line bit | Feb 27 15:21 |
Techrights-sec | There were also some invalid filters in tcpdump | Feb 27 15:21 |
Techrights-sec | I'll set all the scripts to /home/gemini/logs/gemini-log-$(date +"%F").log | Feb 27 15:21 |
schestowitz__ | Yes, we keep changing our stuff back and forth due to unintended lack of understanding | Feb 27 15:22 |
schestowitz__ | imagine what it's like when two devs get confused over what "master" turns to, "main" or "leader" | Feb 27 15:22 |
Techrights-sec | yes | Feb 27 15:24 |
Techrights-sec | ok the system script is fixed, I'll copy a backup to ~/bin | Feb 27 15:24 |
schestowitz__ | Cheers, I'll test what existing scripts we have. I see that logging still goes into gemini-2021-02-27.log in ADDITION to the other file? Maybe two service running at the same time? Have not checked..... | Feb 27 15:25 |
Techrights-sec | Hmm. That means a bug in the systemd file, I'll get it | Feb 27 15:28 |
schestowitz__ | the rest all seems to work now, I'll make it easier for me to monitor now, esp. as we tend to attract some crazy bots (two of them yesterday) | Feb 27 15:29 |
Techrights-sec | KillMode=process | Feb 27 15:34 |
Techrights-sec | needed to be | Feb 27 15:34 |
Techrights-sec | KillMode=control-group | Feb 27 15:34 |
Techrights-sec | or | Feb 27 15:34 |
Techrights-sec | KillMode=mixed | Feb 27 15:34 |
schestowitz__ | The IBM way of doing think. IBM is not mast... I mean, leader in Linux | Feb 27 15:34 |
schestowitz__ | The IBM way of doing things. IBM is not mast... I mean, leader in Linux | Feb 27 15:34 |
Techrights-sec | systemd is not about making things easier or more efficent, one look | Feb 27 15:35 |
Techrights-sec | at the code belies that. What systemd appears to be about is IBM | Feb 27 15:35 |
Techrights-sec | carrying through on M$ old goals of decommodifying Linux | Feb 27 15:35 |
Techrights-sec | It's getting too complex for any amateur or part-timer | Feb 27 15:35 |
schestowitz__ | I had to learn because all the server distros now have it | Feb 27 15:36 |
Techrights-sec | IBM probably read the Halloween Documents years ago, and figured theu | Feb 27 17:49 |
Techrights-sec | could beat M$ at its own game and attack Linux by wrapping it in | Feb 27 17:49 |
Techrights-sec | PID1 and being the bottleneck between the kernel and GNU space | Feb 27 17:49 |
schestowitz__ | might we also joke that 'Microsoft came from IBM' (in some weird sense)? | Feb 27 17:49 |
Techrights-sec | Maybhe but more that IBM saw what M$ was trying to do and decided to beat them | Feb 27 17:54 |
Techrights-sec | at it: docommoditization | Feb 27 17:54 |
schestowitz__ | Maybe I can think of an article to do about it, but that would require os/2 research and I know too little | Feb 27 17:54 |
Techrights-sec | It'd be hard to dig up the material but there was a lot at the time. M$ | Feb 27 17:57 |
Techrights-sec | backstabbed IBM badly over NT vs OS/2. They led IBM into thinking that | Feb 27 17:57 |
Techrights-sec | there would be applications for OS/2, at the same time M$ was acquiring | Feb 27 17:57 |
Techrights-sec | partial copyright over OS/2. So later on down the road, IBM could do nothing with OS/2 because M$ shared copyright. | Feb 27 17:57 |
schestowitz__ | When lawyers (of law school drop-outs) dominate companies and not techs... we all lose | Feb 27 17:57 |
Techrights-sec | and MBAs. I am sure there is an inversre relationship between the | Feb 27 17:58 |
Techrights-sec | number of MBAs in a company to its viability. The only problem is that | Feb 27 17:58 |
Techrights-sec | the research would be in the area of "business" and so the MBAs would | Feb 27 17:58 |
Techrights-sec | be the ones to decide about the research grant. | Feb 27 17:58 |
Techrights-sec | THey'd block it. | Feb 27 17:58 |
Techrights-sec | \ | Feb 27 17:58 |
schestowitz__ | ./watch-for-heavy-users.sh now has further improvements, which will be noticed immediately if you run it. That helps me run things in one terminal instead of two. | Feb 27 21:48 |
Generated by irclog2html.py
2.6 | ䷉ find the plain text version at this address.