<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Simon Žekar — unix, communications, stupidities</title><link>https://simon.zekar.com/</link><description>Recent content on Simon Žekar — unix, communications, stupidities</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 22 Aug 2026 09:00:00 +0000</lastBuildDate><atom:link href="https://simon.zekar.com/index.xml" rel="self" type="application/rss+xml"/><item><title>Still here — just not writing anymore</title><link>https://simon.zekar.com/2026/08/22/still-here/</link><pubDate>Sat, 22 Aug 2026 09:00:00 +0000</pubDate><guid>https://simon.zekar.com/2026/08/22/still-here/</guid><description>&lt;p>If you&amp;rsquo;re reading this, you found the blog again — or you never left.&lt;/p>
&lt;p>This site started back in 2007 as a place to dump whatever I was fighting with that day.
It&amp;rsquo;s not going anywhere, but it&amp;rsquo;s not growing either. What&amp;rsquo;s here stays here — for nostalgia.&lt;/p>
&lt;p>Fighting with new networking tech now&amp;hellip;&lt;/p></description></item><item><title>gstat !! FreeBSD disk overview</title><link>https://simon.zekar.com/2013/10/26/gstat-freebsd-disk-overview/</link><pubDate>Sat, 26 Oct 2013 21:30:57 +0000</pubDate><guid>https://simon.zekar.com/2013/10/26/gstat-freebsd-disk-overview/</guid><description>&lt;p>Call me stupid but I accidentally found the &lt;a href="http://www.freebsd.org/cgi/man.cgi?query=gstat&amp;amp;manpath=FreeBSD+9.2-RELEASE">gstat&lt;/a> utility.&lt;/p>
&lt;p>It gives you a super-cool overview of what your disks are doing.&lt;/p>
&lt;p>Very useful in multiple disk ZFS…&lt;br>
was using &lt;a href="http://www.freebsd.org/cgi/man.cgi?query=iostat&amp;amp;manpath=FreeBSD+9.2-RELEASE">iostat&lt;/a> beforehand.&lt;/p>
&lt;pre tabindex="0">&lt;code>dT: 1.001s w: 1.000s
L(q) ops/s r/s kBps ms/r w/s kBps ms/w %busy Name
1 17 12 14 14.0 4 4 0.2 28.0| da0
1 17 12 22 14.8 4 4 0.2 26.7| da1
1 13 8 6 16.8 4 4 0.2 26.2| da2
1 17 12 22 11.9 4 4 0.2 20.3| da3
1 18 13 15 11.8 4 4 0.2 20.9| da4
1 18 13 15 12.0 4 4 0.2 21.8| da5
1 19 14 32 12.6 4 4 0.2 24.0| da6
1 24 17 31 12.2 5 4 0.2 138.3| da7
1 18 12 20 13.1 5 4 0.2 21.4| da8
1 15 9 18 15.0 5 4 0.2 25.1| da9
1 7 2 2 160.7 4 4 0.2 48.9| da10
1 16 10 21 12.3 5 4 0.2 19.6| da11
0 0 0 0 0.0 0 0 0.0 0.0| da12
0 0 0 0 0.0 0 0 0.0 0.0| da13
0 0 0 0 0.0 0 0 0.0 0.0| da14
0 0 0 0 0.0 0 0 0.0 0.0| da15
0 0 0 0 0.0 0 0 0.0 0.0| da16
0 0 0 0 0.0 0 0 0.0 0.0| da17
0 0 0 0 0.0 0 0 0.0 0.0| da18
0 0 0 0 0.0 0 0 0.0 0.0| da19
0 0 0 0 0.0 0 0 0.0 0.0| da20
0 0 0 0 0.0 0 0 0.0 0.0| da21
0 0 0 0 0.0 0 0 0.0 0.0| da22
0 0 0 0 0.0 0 0 0.0 0.0| da23
0 0 0 0 0.0 0 0 0.0 0.0| da24
0 0 0 0 0.0 0 0 0.0 0.0| da25
0 0 0 0 0.0 0 0 0.0 0.0| da26
0 0 0 0 0.0 0 0 0.0 0.0| da27
0 0 0 0 0.0 0 0 0.0 0.0| da28
0 0 0 0 0.0 0 0 0.0 0.0| da29
0 0 0 0 0.0 0 0 0.0 0.0| da30
0 0 0 0 0.0 0 0 0.0 0.0| da31
0 0 0 0 0.0 0 0 0.0 0.0| da32
0 0 0 0 0.0 0 0 0.0 0.0| da33
0 0 0 0 0.0 0 0 0.0 0.0| da34
0 0 0 0 0.0 0 0 0.0 0.0| da35
0 0 0 0 0.0 0 0 0.0 0.0| da36
0 0 0 0 0.0 0 0 0.0 0.0| da37
0 0 0 0 0.0 0 0 0.0 0.0| da38
0 0 0 0 0.0 0 0 0.0 0.0| cd0
0 0 0 0 0.0 0 0 0.0 0.0| da38p1
0 0 0 0 0.0 0 0 0.0 0.0| da38p2
0 0 0 0 0.0 0 0 0.0 0.0| da38p3
0 0 0 0 0.0 0 0 0.0 0.0| label/root
0 0 0 0 0.0 0 0 0.0 0.0| gptid/00e3191c-5b83-11e2-a6e9-00215acea494
0 0 0 0 0.0 0 0 0.0 0.0| label/rootfs
0 0 0 0 0.0 0 0 0.0 0.0| label/swap
&lt;/code>&lt;/pre></description></item><item><title>FreeBSD disk labeling</title><link>https://simon.zekar.com/2013/10/22/freebsd-disk-labeling/</link><pubDate>Tue, 22 Oct 2013 18:15:28 +0000</pubDate><guid>https://simon.zekar.com/2013/10/22/freebsd-disk-labeling/</guid><description>&lt;p>I noticed that I’m a big user of my blog, simply because I forget things. So it is becoming “Note to self” blog 🙂&lt;/p>
&lt;p>Recently I came to a stupid problem when the first controller in the server – the boot one – came numbered last on FreeBSD.&lt;/p>
&lt;p>So the boot disk came to a /dev/da24.&lt;/p>
&lt;p>The problem was that this server is changing the number of disk, so the boot device would always change, leaving a non bootable OS because of the /etc/fstab mount file.&lt;/p>
&lt;p>So the tool for the action is Disk labeling: (old stuff)&lt;br>
&lt;a href="http://www.freebsd.org/doc/handbook/geom-glabel.html">FreeBSD disk labeling&lt;/a>&lt;/p>
&lt;p>Simply, boot into the single user mode and do a:&lt;/p>
&lt;pre tabindex="0">&lt;code>glabel label root /dev/da24a (root device or whatever is with you)
glabel label swap /dev/da24b (swap device number)
&lt;/code>&lt;/pre>&lt;p>and change /etc/fstab devices to boot from &lt;strong>/dev/label/root&lt;/strong> and /dev/label/swap for swap.&lt;/p>
&lt;p>for example:&lt;/p>
&lt;pre tabindex="0">&lt;code># cat /etc/fstab
# Device Mountpoint FStype Options Dump Pass#
/dev/label/root / ufs rw 1 1
/dev/label/swap none swap sw 0 0
&lt;/code>&lt;/pre></description></item><item><title>FreeBSD view bandwidth and total bytes transferred for interface</title><link>https://simon.zekar.com/2013/03/08/freebsd-view-bandwidth-transferred/</link><pubDate>Fri, 08 Mar 2013 21:58:46 +0000</pubDate><guid>https://simon.zekar.com/2013/03/08/freebsd-view-bandwidth-transferred/</guid><description>&lt;p>Always installed &lt;a href="http://sourceforge.net/projects/nload/">nload&lt;/a> on the server for which I wanted to view the bandwidth usage on.&lt;/p>
&lt;p>But there’s preinstalled not-so-fancy-but-usable utility for FreeBSD:&lt;/p>
&lt;p>&lt;code>systat -ifstat 1&lt;/code>&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>SSH bouncing update – getting rid of Killed by signal 1</title><link>https://simon.zekar.com/2013/03/07/ssh-bouncing-update-killed-by-signal-1/</link><pubDate>Thu, 07 Mar 2013 01:02:16 +0000</pubDate><guid>https://simon.zekar.com/2013/03/07/ssh-bouncing-update-killed-by-signal-1/</guid><description>&lt;p>If you read my &lt;a href="https://simon.zekar.com/2008/09/01/ssh-bouncing/">article on ssh bouncing&lt;/a>, you surely use it.&lt;/p>
&lt;p>One annoying thing is “Killed by signal 1” when exiting the bounced session.&lt;/p>
&lt;pre tabindex="0">&lt;code>dolfi:~ simon$ ssh supercoolserver
Permission denied (publickey,keyboard-interactive).
Killed by signal 1.
&lt;/code>&lt;/pre>&lt;p>So the solution is to change the ~/.ssh/config file and add the “2&amp;gt;/dev/null” to the very end of the ProxyCommand line.&lt;/p>
&lt;pre tabindex="0">&lt;code>Host hostalias
User root
ProxyCommand ssh bouncer.server -p 2222 &amp;#39;nc destination.server 2222&amp;#39; 2&amp;gt;/dev/null
&lt;/code>&lt;/pre>&lt;p>Found the solution &lt;a href="http://www.undeadly.org/cgi?action=article&amp;amp;sid=20070925181947">here&lt;/a>. Thanks to &lt;a href="http://www.erdelynet.com/">merdely&lt;/a>.&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>FreeBSD disk/partition resize – grow on version 8.2 and newer under vmware vSphere / ESXi</title><link>https://simon.zekar.com/2013/03/01/freebsd-disk-partition-resize-grow-on-version-8-x-and-newer-under-vmware-vsphere-esxi/</link><pubDate>Fri, 01 Mar 2013 21:47:15 +0000</pubDate><guid>https://simon.zekar.com/2013/03/01/freebsd-disk-partition-resize-grow-on-version-8-x-and-newer-under-vmware-vsphere-esxi/</guid><description>&lt;p>This one is easier than &lt;a href="https://simon.zekar.com/2012/05/18/freebsd-grow-partition-disk-vmware-esxi/">previous&lt;/a> (FreeBSD 7.x or older).&lt;/p>
&lt;p>It may be possible to do it all live but you need to find a way for FreeBSD to see the growed disk size.&lt;/p>
&lt;ul>
&lt;li>Shut down the server&lt;/li>
&lt;li>Grow the disk size&lt;/li>
&lt;li>Boot FreeBSD in single user mode (number 4 at boot)&lt;/li>
&lt;/ul>
&lt;p>Check the partitions layout:&lt;/p>
&lt;p>&lt;code>gpart show&lt;/code>&lt;/p>
&lt;p>Set the system in evil mode that will allow gpart to change live filesystem:&lt;/p>
&lt;p>&lt;code>sysctl kern.geom.debugflags=16&lt;/code>&lt;/p>
&lt;p>Grow the whole disk – consumer. Number 1 is the consumer index shown with gpart show&lt;/p>
&lt;p>&lt;code>gpart resize -i 1 da0&lt;/code>&lt;/p>
&lt;p>Grow desired provider – partition. Number 6 is the provider index shown with gpart show&lt;/p>
&lt;p>&lt;code>gpart resize -i 6 da0s1&lt;/code>&lt;/p>
&lt;p>Now with partition resized you can growfs&lt;/p>
&lt;p>&lt;code>growfs /dev/da0s1f&lt;/code>&lt;/p>
&lt;p>Reboot for a clean feeling and you’re done.&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>FreeBSD disk/partition resize – grow on version 7.x or older under vmware ESXi</title><link>https://simon.zekar.com/2012/05/18/freebsd-grow-partition-disk-vmware-esxi/</link><pubDate>Fri, 18 May 2012 22:00:26 +0000</pubDate><guid>https://simon.zekar.com/2012/05/18/freebsd-grow-partition-disk-vmware-esxi/</guid><description>&lt;p>I’ve tried this on vmware ESXi4.1.&lt;/p>
&lt;p>First, shut down the server and enlarge the disk size in the VM config.&lt;/p>
&lt;p>Boot into single user mode (press 4 and boot).&lt;/p>
&lt;p>Check the block count of the new disk (seen at boot – dmesg) – in our case 419430400.&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2012/05/resize-single.png">&lt;img loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2012/05/resize-single-300x81.png">&lt;/a>&lt;/p>
&lt;p>Update the partition size with &lt;code>fdisk -u /dev/da0&lt;/code>&lt;/p>
&lt;p>when asked, the start of the updated partition stays the default but the end of the partition you can write the block count of the new disk (419430400). Actual end is less that this size, but fdisk sees that and it suggests the correct number which you can agree on.&lt;/p>
&lt;p>you can check if all went well with &lt;code>fdisk -s&lt;/code>. It should be the new block size (little less that the block cound of the disk) – &lt;strong>write down this number&lt;/strong>.&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2012/05/resize-fdisk-s.png">&lt;img alt="fdisk -s" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2012/05/resize-fdisk-s-300x142.png">&lt;/a>&lt;/p>
&lt;p>time to update the slice table. This is done by:&lt;/p>
&lt;p>&lt;code>bsdlabel -e da0s1&lt;/code>&lt;/p>
&lt;p>There you edit the number under “# “raw” part, don’t edit”. Funny 🙂 You must change the number here to the block count seen with “fdisk -s” after updating partition.&lt;/p>
&lt;p>And then change last line – usually entry “f” which is by default “/usr”. Remember that you can only grow the last partition !!.&lt;/p>
&lt;p>Change the first number of the “f” entry with the &lt;strong>number which is number of blocks&lt;/strong> seen via “fdisk -s” &lt;strong>minus&lt;/strong> the &lt;strong>offset&lt;/strong> of the f entry (next number in line).&lt;/p>
&lt;p>Save this config.&lt;/p>
&lt;p>Now the partition is bigger but the filesystem doesn’t know about it. This is where growfs comes in (was surprised to see that it has been introduced in BSD 3.x).&lt;/p>
&lt;p>&lt;code>growfs /dev/da0s1f&lt;/code>&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2012/05/resize-growfs.png">&lt;img alt="resize growfs" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2012/05/resize-growfs-300x167.png">&lt;/a>&lt;/p>
&lt;p>and there, you have resized partition.&lt;/p>
&lt;p>type CTRL+D to boot into the new – grown partition.&lt;/p>
&lt;p>I noticed that this procedure works only for version smaller than FreeBSD 8.&lt;br>
It should work on higher versions but I’ve seen very unstable behaviour – kernel crashes… after using fdisk/diskabel.&lt;/p>
&lt;p>For versions FreeBSD 8+ the utility gpart (don’t confuse with gparted !!!t) is used which will be described in next post.&lt;/p></description></item><item><title>shell output history in screen(1)</title><link>https://simon.zekar.com/2012/05/14/shell-output-history-in-screen1/</link><pubDate>Mon, 14 May 2012 20:45:04 +0000</pubDate><guid>https://simon.zekar.com/2012/05/14/shell-output-history-in-screen1/</guid><description>&lt;p>We all know the great things &lt;a href="http://www.gnu.org/software/screen/">screen&lt;/a> can do for a sysadmin – you can detach running process and come back to see it anytime.&lt;/p>
&lt;p>But if you want to see what was happening while you were gone, you need to browse the history of the shell process.&lt;/p>
&lt;p>It’s simple, CTRL+A [. That means CTRL+A to enter command mode, then release it and press character “[“.&lt;/p>
&lt;p>More in detail &lt;a href="http://www.samsarin.com/blog/2007/03/11/gnu-screen-working-with-the-scrollback-buffer/">here&lt;/a>.&lt;/p></description></item><item><title>syncing FreeBSD server with NTP is simpler than you may think</title><link>https://simon.zekar.com/2011/03/25/syncing-freebsd-server-with-the-ntp-clock/</link><pubDate>Fri, 25 Mar 2011 22:55:24 +0000</pubDate><guid>https://simon.zekar.com/2011/03/25/syncing-freebsd-server-with-the-ntp-clock/</guid><description>&lt;p>After setting up a config file for the &lt;a href="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ntp.html">NTP on every server&lt;/a>, i figured out that a stock settings just work.&lt;/p>
&lt;p>so adding:&lt;/p>
&lt;pre tabindex="0">&lt;code>ntpd_enable=&amp;#34;YES&amp;#34;
ntpdate_enable=&amp;#34;YES&amp;#34;
&lt;/code>&lt;/pre>&lt;p>to the /etc/rc.conf just does the trick (and starting services if not rebooting the server).&lt;/p>
&lt;p>After some moments of running the ntp client you can check it with:&lt;/p>
&lt;pre tabindex="0">&lt;code># ntpq -c peers
remote refid st t when poll reach delay offset jitter
==============================================================================
*ntp2.Housing.Be 128.32.206.55 2 u 16 64 377 189.371 -14.785 5.513
mighty.poclabs. 169.229.70.64 3 u 28 64 377 132.913 -14.411 5.034
+vps1.cobryce.co 64.235.98.66 3 u 16 64 377 180.600 -22.410 5.258
&lt;/code>&lt;/pre>&lt;p>where servers marked with * are the selected server and + are the candidates for ntp sync.&lt;/p></description></item><item><title>blocking certain MAC addresses from joining your Cisco AP</title><link>https://simon.zekar.com/2010/10/18/blocking-mac-addresses-cisco-ap/</link><pubDate>Mon, 18 Oct 2010 19:34:05 +0000</pubDate><guid>https://simon.zekar.com/2010/10/18/blocking-mac-addresses-cisco-ap/</guid><description>&lt;p>In hope for an energy to revive this blog, a quick post.&lt;/p>
&lt;p>If you need to block an abuser flood-trying to connect to your AP, resulting in multiple radius connections and error messages, you can make ACL on AP like this:&lt;/p>
&lt;pre tabindex="0">&lt;code># access-list 760 deny 0002.725f.93c3 0000.0000.0000
# dot11 association mac-list 760
&lt;/code>&lt;/pre>&lt;p>where 0002.725f.93c3 is the abusers mac address.&lt;/p>
&lt;p>Happy banning,&lt;br>
S.&lt;/p></description></item><item><title>FreeBSD and shared iLo 2 port on HP servers</title><link>https://simon.zekar.com/2010/04/24/freebsd-and-shared-ilo-2-port-on-hp-servers/</link><pubDate>Sat, 24 Apr 2010 00:10:53 +0000</pubDate><guid>https://simon.zekar.com/2010/04/24/freebsd-and-shared-ilo-2-port-on-hp-servers/</guid><description>&lt;p>In order for &lt;a href="http://h18000.www1.hp.com/products/servers/management/remotemgmt.html">HP iLo 2 management interface&lt;/a> to continue working on a shared ethernet port after &lt;a href="http://www.freebsd.org/">FreeBSD&lt;/a> kernel loads the bge drivers, you must add following line to /boot/loader.conf&lt;/p>
&lt;p>&lt;code>hw.bge.allow_asf=&amp;quot;1&amp;quot;&lt;/code>&lt;/p>
&lt;p>And reboot.&lt;/p>
&lt;p>Hope it will save you some minutes figuring it out…&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>automatic login to Cisco routers / firewalls</title><link>https://simon.zekar.com/2010/02/28/automatic-login-to-cisco-routers-firewalls/</link><pubDate>Sun, 28 Feb 2010 01:37:34 +0000</pubDate><guid>https://simon.zekar.com/2010/02/28/automatic-login-to-cisco-routers-firewalls/</guid><description>&lt;p>Since many of you are still connecting to your Cisco boxes with the plain ssh/telnet command (typing password every time) and since Cisco boxes don’t have SSH public key authentication, the tool to use comes from &lt;a href="http://www.shrubbery.net/rancid/">Rancid&lt;/a> (Really Awesome New Cisco confIg Differ) package.&lt;/p>
&lt;p>It’s called “&lt;strong>clogin&lt;/strong> ” as &lt;a href="http://www.shrubbery.net/rancid/man/clogin.1.html">Cisco login script&lt;/a>.&lt;/p>
&lt;p>It requires all the credentials in ~/.cloginrc file (protocol / password / enable).&lt;/p>
&lt;p>Syntax of .cloginrc file can be found &lt;a href="http://www.shrubbery.net/rancid/man/cloginrc.5.html">here&lt;/a>.&lt;/p>
&lt;p>and usage is simple, just &lt;code>clogin hostname&lt;/code>&lt;/p>
&lt;p>And besides loging it’s very usefull for multiple box configuration. Let’s say you just need to write configs of your 5 routers.&lt;/p>
&lt;p>&lt;code>clogin -c &amp;quot;write;exit&amp;quot; router1 router2 router3 router4 router5&lt;/code>&lt;/p>
&lt;p>and Voila !&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>Mikrotik simple bandwidth control</title><link>https://simon.zekar.com/2009/10/14/mikrotik-simple-bandwidth-control/</link><pubDate>Wed, 14 Oct 2009 21:59:30 +0000</pubDate><guid>https://simon.zekar.com/2009/10/14/mikrotik-simple-bandwidth-control/</guid><description>&lt;p>There’s a really easy way of controlling bandwidth of an interface (e.g. guest interface).&lt;/p>
&lt;p>It’s done via queues:&lt;br>
&lt;code>/queue simple add interface=guest max-limit=2M/2M disabled=no&lt;/code>&lt;/p>
&lt;p>Where “guest” is the interface name and 2M is the down/uplink speed in bps you want to shape it to.&lt;/p>
&lt;p>More about this on &lt;a href="http://wiki.mikrotik.com/wiki/Bandwidth_Managment_and_Queues">Mikrotik Wiki&lt;/a>&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>HP-UX ssh X11 forwarding not working for certain applications</title><link>https://simon.zekar.com/2009/10/08/hp-ux-ssh-x11-forwarding-not-working-for-certain-applications/</link><pubDate>Thu, 08 Oct 2009 22:51:30 +0000</pubDate><guid>https://simon.zekar.com/2009/10/08/hp-ux-ssh-x11-forwarding-not-working-for-certain-applications/</guid><description>&lt;p>I had a strange issue with &lt;a href="http://www.hp.com/products1/unix/">hp-ux&lt;/a> &lt;a href="http://www.ssh.com/support/documentation/online/ssh/adminguide/32/X11_Forwarding.html">x11 forwarding over ssh&lt;/a>. xclock, xterm ran fine but hpterm and some other x11 programs didn’t start, claiming error:&lt;/p>
&lt;p>&lt;code>X11 connection rejected because of wrong authentication.&lt;/code>&lt;/p>
&lt;p>after some searching I found following fixed the issue:&lt;/p>
&lt;pre tabindex="0">&lt;code>/opt/ssh/etc/sshd_config:
X11UseLocalhost no
(must be set to no, default is yes)
&lt;/code>&lt;/pre>&lt;p>S.&lt;/p></description></item><item><title>Cisco ASA failover fail if IPv6 enabled</title><link>https://simon.zekar.com/2009/10/02/cisco-asa-failover-fail-if-ipv6-enabled/</link><pubDate>Fri, 02 Oct 2009 11:14:05 +0000</pubDate><guid>https://simon.zekar.com/2009/10/02/cisco-asa-failover-fail-if-ipv6-enabled/</guid><description>&lt;p>I can’t believe it…&lt;/p>
&lt;p>&lt;a href="http://rogierm.redbee.nl/blog/2009/07/24/cisco-asa-ipv6-failover-not-supported/">Failover on Cisco ASA silently stops working after you enable ipv6 configuration.&lt;/a>&lt;/p>
&lt;p>We’re used of stupid Cisco bugs, but this wins it all !&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>IPv6 over IPv4 tunnel with Mikrotik &amp; Cisco router</title><link>https://simon.zekar.com/2009/09/27/ipv6-over-ipv4-tunnel-with-mikrotik-cisco-router/</link><pubDate>Sun, 27 Sep 2009 22:44:15 +0000</pubDate><guid>https://simon.zekar.com/2009/09/27/ipv6-over-ipv4-tunnel-with-mikrotik-cisco-router/</guid><description>&lt;p>Time when native &lt;a href="http://en.wikipedia.org/wiki/IPv6">IPv6 network&lt;/a> will come right to your home is still far away. So &lt;a href="http://en.wikipedia.org/wiki/6to4">tunneling IPv6 network over IPv4&lt;/a> to some IPv6 enabled site is a way to go.&lt;/p>
&lt;p>Configuration is easier than expected and it worked right away. In my case &lt;a href="http://www.cisco.com/en/US/products/hw/routers/ps368/">Cisco 7600&lt;/a> series is at the data center where native IPv6 is established and &lt;a href="http://www.routerboard.com/">Mikrotik RB450&lt;/a> ( a choice for home router – really powerful and really cheap).&lt;/p>
&lt;p>One /64 subnet is assigned for the tunnel (point-to-point) and /48 is then routed to it. Yes. In IPv6 /64 subnet of 18446744073709551616 IPs is used for point-to-point tunnel (2 IPs).&lt;/p>
&lt;p>On Cisco 7600 – interface (99.. is a 7600 public IP as 22.. is my home public IP):&lt;/p>
&lt;pre tabindex="0">&lt;code>interface Tunnel0
description --- test ipv6 in ipv4 tunnel ---
no ip address
ipv6 address 2AAA:BABA:101:1::1/64
tunnel source 99.99.99.99
tunnel destination 22.22.22.22
tunnel mode ipv6ip
&lt;/code>&lt;/pre>&lt;p>and route:&lt;br>
&lt;code>ipv6 route 2AAA:BABA:BEEF::/48 2AAA:BABA:101:1::2&lt;/code>&lt;/p>
&lt;p>and on Mikrotik:&lt;/p>
&lt;pre tabindex="0">&lt;code>/interface 6to4 add disabled=no local-address=22.22.22.22 mtu=1280 name=ipv6tunnel remote-address=99.99.99.99
/ipv6 address add address=2AAA:BABA:101:1::2/64 interface=ipv6tunnel
/ipv6 route add disabled=no dst-address=::/0 gateway=ipv6tunnel
&lt;/code>&lt;/pre>&lt;p>And that’s it. You can configure local interface on Mikrotik, like this:&lt;br>
&lt;code>/ipv6 add address=2AAA:BABA:BEEF:DEAD:1/64 advertise=yes interface=ether2&lt;/code>&lt;/p>
&lt;p>Local machines, if properly configured should receive &lt;a href="http://www.faqs.org/rfcs/rfc2461.html">advertised IPv6 prefix&lt;/a> and configure itself for IPv6.&lt;/p>
&lt;p>That’s for now, more about IPv6 soon ! HaveAnice !!&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>FreeBSD massive port forwarding</title><link>https://simon.zekar.com/2009/02/07/freebsd-massive-port-forwarding/</link><pubDate>Sat, 07 Feb 2009 22:15:08 +0000</pubDate><guid>https://simon.zekar.com/2009/02/07/freebsd-massive-port-forwarding/</guid><description>&lt;p>&lt;a href="http://portfwd.sourceforge.net/">Portfwd&lt;/a> was the choice of software when I ever needed to forward a port from the server to another server – multiple hops away (not NAT port mapping).&lt;/p>
&lt;p>It uses configuration like this (193.2.1.66 is the local ip, 193.2.1.80 is destination server IP):&lt;/p>
&lt;pre tabindex="0">&lt;code>bind-address 193.2.1.66
tcp { 55443 { =&amp;gt; 193.2.1.80:443 } }
tcp { 55022 { =&amp;gt; 193.2.1.80:22 } }
&lt;/code>&lt;/pre>&lt;p>But it fails doing its job right when you use this on a really busy port/service (500 or more simultaneous established TCP connections).&lt;/p>
&lt;p>&lt;a href="http://www.openbsd.org/faq/pf/">pf&lt;/a> does the forwarding well even over 1000 TCP connections. Example:&lt;/p>
&lt;pre tabindex="0">&lt;code>rdr on em0 proto tcp from any to 193.2.1.66 port 55443 -&amp;gt; 193.2.1.80 port 443
rdr on em0 proto tcp from any to 193.2.1.66 port 55022 -&amp;gt; 193.2.1.80 port 22
nat on em0 from any to 193.2.1.80 -&amp;gt; 193.2.1.66
&lt;/code>&lt;/pre>&lt;p>– the em0 is the name of the outside interface. Without the nat rule, destination server would see a packet with source ip of the client so it would send a packet back directly to the client which causes asymmetric routing and very possible problems. The nat rule changes the source IP to the port forwarders one.&lt;/p>
&lt;p>Happy forwarding,&lt;br>
S.&lt;/p></description></item><item><title>swatch – alerting you of certain log entries</title><link>https://simon.zekar.com/2009/02/04/swatch-log-monitor/</link><pubDate>Wed, 04 Feb 2009 22:53:24 +0000</pubDate><guid>https://simon.zekar.com/2009/02/04/swatch-log-monitor/</guid><description>&lt;p>A few minutes before coding my own &lt;a href="http://www.perl.org/">perl&lt;/a> script, which would alert me on certain log entries, I’ve found a software which does it’s job very well.&lt;/p>
&lt;p>It’s called &lt;a href="http://swatch.sourceforge.net/">swatch&lt;/a> – yes, really impressing web site and lack of documentation, examples is tipical for a geek’s tool.&lt;/p>
&lt;p>example config – very simple:&lt;/p>
&lt;pre tabindex="0">&lt;code>watchfor /Security violation occurred/
mail addresses=ninja@level13.org,subject=&amp;#34;SWATCH warning - switch_name&amp;#34;
&lt;/code>&lt;/pre>&lt;p>and the command line invocation:&lt;br>
&lt;code># /usr/local/bin/swatch -c /usr/local/etc/swatch/switch_name.conf -t /var/log/syslog/switch_name.log --daemon --use-cpan-file-tail&lt;/code>&lt;/p>
&lt;p>&lt;strong>–daemon&lt;/strong> for forking it in the background&lt;/p>
&lt;p>&lt;strong>–use-cpan-file-tail&lt;/strong> is needed so that the swatch will tail file even after it’s rotated by the rotating script, but make sure that the perl module &lt;a href="http://search.cpan.org/perldoc?File::Tail">File::Tail&lt;/a> is installed&lt;/p>
&lt;p>It can of course match multiple patterns (multiple watchfor sections) on the same log file, but you must run multiple instances of the software for tailing multiple log files.&lt;/p>
&lt;p>Make sure to read &lt;a href="http://linux.die.net/man/1/swatch">swatch man page&lt;/a>.&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>understanding freebsd memory usage</title><link>https://simon.zekar.com/2009/01/30/understanding-freebsd-memory-usage/</link><pubDate>Fri, 30 Jan 2009 22:07:17 +0000</pubDate><guid>https://simon.zekar.com/2009/01/30/understanding-freebsd-memory-usage/</guid><description>&lt;p>I think it is better to write in english, since I’m often googling around about some problem and land on a site in chinese with some configuration pasted in the site.&lt;/p>
&lt;p>The problem is I don’t know what poor chinese boy wrote: “This configuration is working for me:” or “This configuration is not working at all, can someone help me:”. So I try it. Never worked.&lt;/p>
&lt;p>Recently I found a &lt;a href="http://lists.freebsd.org/pipermail/freebsd-questions/2005-February/075925.html">post&lt;/a> which nicely describes statuses of FreeBSD memory allocation.&lt;/p>
&lt;p>Top shows:&lt;/p>
&lt;p>&lt;code>Mem: 4589M Active, 13G Inact, 489M Wired, 733M Cache, 214M Buf, 886M Free&lt;/code>&lt;/p>
&lt;p>And the snip from the post:&lt;/p>
&lt;p>Memory normally moves along the following path:&lt;/p>
&lt;p>Wired -&amp;gt; Active -&amp;gt; Inactive -&amp;gt; Cached -&amp;gt; Free&lt;/p>
&lt;p>and then when it gets allocated and used it moves back to Wired.&lt;/p>
&lt;p>The difference between the categories is mainly that “Inactive” and&lt;br>
“Cached” memory still contains data that the system might be able to&lt;br>
reuse, while “Free” memory is completely free and unused.&lt;br>
In order to use Cached or Inactive memory it might need to be flushed&lt;br>
first, with Inactive probably being dirty and Cached probably not.&lt;br>
(“Active” memory is almost certainly dirty and is therefore somewhat&lt;br>
more expensive to reuse.&lt;/p></description></item><item><title>samouničenje FreeBSD-ja</title><link>https://simon.zekar.com/2009/01/30/freebsd-self-destruct/</link><pubDate>Fri, 30 Jan 2009 21:44:45 +0000</pubDate><guid>https://simon.zekar.com/2009/01/30/freebsd-self-destruct/</guid><description>&lt;p>Ker je jutri &lt;a href="http://www.tamara.si/2009/01/29/v-soboto-se-vidimo/">srečanje blogerjev&lt;/a>, jaz pa že skoraj pol leta nisem nič napisal, imam slabo vest in pišem…&lt;/p>
&lt;p>Po svetu imam kar nekaj strežnikov in pride čas, da strežnik zamenjam za novega, ob tem pa nočem da podatki pridejo v roke “nasledniku” strežnika. Poleg &lt;a href="http://sourceforge.net/projects/srm">varnega brisanja datotek&lt;/a> sem si vedno želel pognati kakšen destruktiven ukaz, ki bi strežnik zares pokončal.&lt;/p>
&lt;p>Takoj pride ideja, &lt;a href="http://en.wikipedia.org/wiki/Dd_(Unix)">dd&lt;/a> !! Vendar je FreeBSD malo zaščitniški glede pisanja po raw diskih:&lt;/p>
&lt;pre tabindex="0">&lt;code>[root@dolfi ~]# dd if=/dev/zero of=/dev/da0
dd: /dev/da0: Operation not permitted
&lt;/code>&lt;/pre>&lt;p>Rešitev se skriva v sysctl zastavici. Hvala, &lt;a href="http://default.co.yu/default/">bc&lt;/a> !&lt;/p>
&lt;p>&lt;code>[root@dolfi ~]# sysctl kern.geom.debugflags=16&lt;/code>&lt;/p>
&lt;p>po spremembi zastavice, bo dd deloval. Uničujoče. Poskusite v službi.&lt;/p></description></item><item><title>Je že pospeševalec delcev uničil svet ?</title><link>https://simon.zekar.com/2008/10/17/je-ze-pospesevalec-delcev-unicil-svet/</link><pubDate>Fri, 17 Oct 2008 21:27:42 +0000</pubDate><guid>https://simon.zekar.com/2008/10/17/je-ze-pospesevalec-delcev-unicil-svet/</guid><description>&lt;p>&lt;a href="http://www.hasthelargehadroncolliderdestroyedtheworldyet.com/">http://www.hasthelargehadroncolliderdestroyedtheworldyet.com/&lt;/a>&lt;/p>
&lt;p>Lahko se tudi naročite na RSS feed…&lt;/p></description></item><item><title>openssh as SOCKS proxy</title><link>https://simon.zekar.com/2008/10/17/openssh-as-socks-proxy/</link><pubDate>Fri, 17 Oct 2008 21:22:17 +0000</pubDate><guid>https://simon.zekar.com/2008/10/17/openssh-as-socks-proxy/</guid><description>&lt;p>Tokrat ne bom pametoval ampak vas usmeril na dober opis openssh-jeve SOCKS funkcionalnosti.&lt;/p>
&lt;p>Hvala, Miha ! 🙂&lt;/p>
&lt;p>&lt;a href="http://myha.blog.siol.net/2008/09/10/openssh-socks-proxy-secure-browsing/">OpenSSH Socks proxy | secure browsing&lt;/a>&lt;/p></description></item><item><title>ssh bouncing</title><link>https://simon.zekar.com/2008/09/01/ssh-bouncing/</link><pubDate>Mon, 01 Sep 2008 16:55:30 +0000</pubDate><guid>https://simon.zekar.com/2008/09/01/ssh-bouncing/</guid><description>&lt;p>Ojla,&lt;/p>
&lt;p>danes mi je bilo dovolj skakanja po serverjih, da dosežem server, ki je za tem serverjem. Po malo raziskovanja je tukaj način, kako “bouncnat” na strežnik preko drugega strežnika. spet ~/.ssh/config:&lt;/p>
&lt;pre tabindex="0">&lt;code>Host secret
ProxyCommand ssh bounce.server.net &amp;#39;nc secret.siel.si 22&amp;#39;
&lt;/code>&lt;/pre>&lt;p>in potem samo “ssh secret”. Seveda pa imate postavljenega &lt;a href="https://simon.zekar.com/2007/06/12/sveti-peter-oz-kljucar-za-ssh/" title="ssh agent">ssh agent&lt;/a>, tako da proces steče brez vpisovanja gesla.&lt;/p>
&lt;p>Na bounce serverju mora biti instaliran netcat.&lt;/p></description></item><item><title>FreeBSD mount_smbfs .nsmbrc</title><link>https://simon.zekar.com/2008/08/28/freebsd-mount_smbfs-nsmbrc/</link><pubDate>Thu, 28 Aug 2008 22:39:24 +0000</pubDate><guid>https://simon.zekar.com/2008/08/28/freebsd-mount_smbfs-nsmbrc/</guid><description>&lt;p>Tale je za v arhiv, ker naslednjič bom vedel, da sem stvar že rešil, ampak ne kako…&lt;/p>
&lt;p>Torej za avtomatski mount windows share-a iz /etc/fstab je konfiguracija sledeča…&lt;/p>
&lt;pre tabindex="0">&lt;code>/etc/fstab:
//BACKUP_USER@BACKUP_SERVER/BACKUP_SHARE /back/ar4 smbfs rw,-N 0 0
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code>~/.nsmbrc:
[default]
workgroup=WORKGROUP
[BACKUP_SERVER]
addr=10.10.10.10
[BACKUP_SERVER:BACKUP_USER]
password=geslo
&lt;/code>&lt;/pre></description></item><item><title>tcpdump – syn paketi</title><link>https://simon.zekar.com/2008/08/28/tcpdump-syn-paketi/</link><pubDate>Thu, 28 Aug 2008 20:24:00 +0000</pubDate><guid>https://simon.zekar.com/2008/08/28/tcpdump-syn-paketi/</guid><description>&lt;p>Kar bi rekel, da bo sila enostavno, se izkaže da niti ni. Če želite da tcpdump kaže samo &lt;a href="http://en.wikipedia.org/wiki/Transmission_Control_Protocol">SYN pakete&lt;/a>:&lt;/p>
&lt;p>&lt;code>tcpdump -i ime_vmesnika -n 'tcp[tcpflags] &amp;amp; tcp-syn != 0'&lt;/code>&lt;/p>
&lt;p>Konec počitnic… s.&lt;/p></description></item><item><title>hitrejsi ssh !</title><link>https://simon.zekar.com/2008/07/28/hitrejsi-ssh/</link><pubDate>Mon, 28 Jul 2008 14:30:59 +0000</pubDate><guid>https://simon.zekar.com/2008/07/28/hitrejsi-ssh/</guid><description>&lt;p>v ~/.ssh/config vpišete:&lt;/p>
&lt;pre tabindex="0">&lt;code>ControlMaster auto
Host *
ControlPath ~/.ssh/master-%r@%h:%p
&lt;/code>&lt;/pre>&lt;p>in druga seja do istega strežnika se bo zgodila v trenutku !&lt;/p>
&lt;p>Happy ssh !&lt;/p></description></item><item><title>komentiranje v vi-ju</title><link>https://simon.zekar.com/2008/05/30/komentiranje-v-vi-ju/</link><pubDate>Fri, 30 May 2008 12:26:13 +0000</pubDate><guid>https://simon.zekar.com/2008/05/30/komentiranje-v-vi-ju/</guid><description>&lt;p>Jap, vi je se uporabljen editor 🙂&lt;/p>
&lt;p>&lt;code>:.,+N s/^/#/&lt;/code>&lt;br>
kjer je N število vrstic, ki jih želite zakomentirat&lt;/p>
&lt;p>&lt;code>:.,+N s/^#//&lt;/code>&lt;br>
kjer je N število vrstic, ki jih želite odkomentirat&lt;/p>
&lt;p>10x, &lt;a href="http://dalibor.krejic.net/">Dalee&lt;/a>&lt;/p></description></item><item><title>OS X – peka CD-ja iz Terminala</title><link>https://simon.zekar.com/2008/05/01/os-x-peka-cd-ja-iz-terminala/</link><pubDate>Thu, 01 May 2008 14:52:49 +0000</pubDate><guid>https://simon.zekar.com/2008/05/01/os-x-peka-cd-ja-iz-terminala/</guid><description>&lt;p>S tem ukazom lahko iz terminala zapečete CD “image”.&lt;/p>
&lt;p>&lt;code>drutil -drive internal burn -noverify -eject file.cue&lt;/code>&lt;/p>
&lt;p>Hvala, &lt;a href="http://www.facebook.com/people/Ales_Farcnik/766609450">Aleš&lt;/a> 🙂&lt;/p></description></item><item><title>Kam tiscimo svoje bancne kartice…</title><link>https://simon.zekar.com/2007/11/22/kam-tiscimo-svoje-bancne-kartice/</link><pubDate>Thu, 22 Nov 2007 17:03:01 +0000</pubDate><guid>https://simon.zekar.com/2007/11/22/kam-tiscimo-svoje-bancne-kartice/</guid><description>&lt;p>Jst bom nehu uporablat te skatle…&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/11/photo.jpg" title="windows xp bankomat">&lt;img alt="windows xp bankomat" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/11/photo.jpg">&lt;/a>&lt;/p></description></item><item><title>iPhone – telefon ki dela za operaterje…</title><link>https://simon.zekar.com/2007/11/17/iphone-telefon-ki-dela-za-operaterje/</link><pubDate>Sat, 17 Nov 2007 14:52:08 +0000</pubDate><guid>https://simon.zekar.com/2007/11/17/iphone-telefon-ki-dela-za-operaterje/</guid><description>&lt;p>Izsek iz telefonskega računa in “before/after” primerjava.&lt;/p>
&lt;p>BEFORE iPhone:&lt;br>
&lt;code>Vrednost brez DDV za telefonsko številko: 80,88&lt;/code>&lt;/p>
&lt;p>AFTER iPhone:&lt;br>
&lt;code>Vrednost brez DDV za telefonsko številko: 167,05&lt;/code>&lt;/p>
&lt;p>To se zgodi ko ti telefon ne pove za koliko sporočil si napisal SMS, ko te ne sprašuje, če se želiš res povezat na GPRS ipd.&lt;/p>
&lt;p>Tako da veselje tudi za operaterje…&lt;/p>
&lt;p>več postov kmalu… namreč zunaj, v veliki modri sobi, je mrzlo…&lt;/p></description></item><item><title>nikoli si nisem mislil, da se bom kdaj SSH-jal na telefon</title><link>https://simon.zekar.com/2007/10/05/nikoli-si-nisem-mislil-da-se-bom-kdaj-ssh-jal-na-telefon/</link><pubDate>Fri, 05 Oct 2007 10:55:25 +0000</pubDate><guid>https://simon.zekar.com/2007/10/05/nikoli-si-nisem-mislil-da-se-bom-kdaj-ssh-jal-na-telefon/</guid><description>&lt;p>ssh na iPhone… da o Apachu, BitchX-u in ostalih stvareh ki jih mogoce nisem pripisoval telefonu ne govorim…&lt;/p>
&lt;pre tabindex="0">&lt;code>tdolg:~ simon$ ssh root@10.254.254.100
root@10.254.254.100&amp;#39;s password:
Last login: Fri Oct 5 10:53:02 2007 from 10.254.254.254
# ps aux
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 49 0.7 0.0 274168 1072 p0 Ss 10:53AM 0:00.07 -sh
root 1 0.0 0.0 272956 432 ?? Ss 9:23AM 0:00.53 /sbin/launchd
root 12 0.0 0.0 285564 1488 ?? Ss 9:23AM 0:00.47 /usr/sbin/BTServer
root 13 0.0 0.0 277956 1392 ?? Ss 9:23AM 0:02.92 /System/Library/Frameworks/CoreTelephony.f
root 15 0.0 0.0 325192 21148 ?? Ss 9:23AM 0:51.93 /System/Library/CoreServices/SpringBoard.a
root 16 0.0 0.0 275084 1456 ?? Ss 9:23AM 0:36.49 /usr/sbin/configd
root 17 0.0 0.0 273396 568 ?? Ss 9:23AM 0:00.07 /usr/libexec/crashreporterd
root 18 0.0 0.0 272968 496 ?? Ss 9:23AM 0:00.04 /usr/sbin/cron
root 19 0.0 0.0 284136 1556 ?? Ss 9:23AM 0:01.01 /System/Library/Frameworks/IAP.framework/S
root 20 0.0 0.0 273696 784 ?? Ss 9:23AM 0:01.01 /usr/sbin/mDNSResponder -launchd
root 21 0.0 0.0 275144 1072 ?? Ss 9:23AM 0:01.17 /usr/libexec/lockdownd
root 22 0.0 0.0 274000 436 ?? Ss 9:23AM 0:03.34 /usr/sbin/syslogd
root 23 0.0 0.0 274168 788 ?? Ss 9:23AM 0:00.07 /bin/sh /etc/hackinit.sh
root 24 0.0 0.0 273576 780 ?? Ss 9:23AM 0:00.09 /usr/libexec/ptpd -t usb
root 25 0.0 0.0 289932 2304 ?? Ss 9:23AM 0:06.40 /usr/sbin/mediaserverd
root 26 0.0 0.0 273456 408 ?? Ss 9:23AM 0:00.33 /usr/sbin/notifyd
root 29 0.0 0.0 272904 364 ?? S 9:23AM 0:00.09 /usr/sbin/PXLdaemon
root 30 0.0 0.0 264644 276 ?? S 9:23AM 0:00.25 /usr/sbin/update
root 34 0.0 0.0 302268 5372 ?? S 9:23AM 0:05.06 /Applications/MobilePhone.app/MobilePhone
root 48 0.0 0.0 273276 760 ?? S 10:53AM 0:00.73 /usr/sbin/sshd -i
root 50 0.0 0.0 272872 332 p0 R+ 10:53AM 0:00.02 ps aux
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># df
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/disk0s1 307200 195192 108936 65% /
devfs 18 18 0 100% /dev
/dev/disk0s2 3657400 2809748 847652 77% /private/var
&lt;/code>&lt;/pre></description></item><item><title>Tole so mi neki prnesl, mnda je telefon</title><link>https://simon.zekar.com/2007/10/04/tole-so-mi-neki-prnesl-mnda-je-telefon/</link><pubDate>Thu, 04 Oct 2007 22:46:45 +0000</pubDate><guid>https://simon.zekar.com/2007/10/04/tole-so-mi-neki-prnesl-mnda-je-telefon/</guid><description>&lt;p>Za klicat bo…&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/10/04102007.jpg" title="iPhone">&lt;img alt="iPhone" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/10/iphone.jpeg">&lt;/a>&lt;/p></description></item><item><title>takle se mamo… delamo !</title><link>https://simon.zekar.com/2007/09/17/takle-se-mamo-delamo/</link><pubDate>Mon, 17 Sep 2007 22:11:20 +0000</pubDate><guid>https://simon.zekar.com/2007/09/17/takle-se-mamo-delamo/</guid><description>&lt;p>Ucimo se ruby ! Vedno manj…&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/09/takle_se_mamo-2.jpg" title="takle_se_mamo-2.jpg">&lt;img alt="takle_se_mamo-2.jpg" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/09/takle_se_mamo-2.jpg">&lt;/a>&lt;/p></description></item><item><title>koledar terminalsko</title><link>https://simon.zekar.com/2007/09/08/koledar-terminalsko/</link><pubDate>Sat, 08 Sep 2007 12:24:09 +0000</pubDate><guid>https://simon.zekar.com/2007/09/08/koledar-terminalsko/</guid><description>&lt;p>ena hitra, preden odbrzimo na &lt;a href="http://www.wicked.si/kar-tako/webmaster-piknik-2007-countdown.html">piknik&lt;/a>.&lt;/p>
&lt;pre tabindex="0">&lt;code># cal
September 2007
S M Tu W Th F S
1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30
&lt;/code>&lt;/pre>&lt;p>poskusite tudi&lt;/p>
&lt;p>&lt;code># cal 2007&lt;/code>&lt;/p>
&lt;p>in&lt;/p>
&lt;p>&lt;code># cal 1 2007&lt;/code>&lt;/p></description></item><item><title>404 ? table not found</title><link>https://simon.zekar.com/2007/08/28/404-table-not-found/</link><pubDate>Tue, 28 Aug 2007 18:07:37 +0000</pubDate><guid>https://simon.zekar.com/2007/08/28/404-table-not-found/</guid><description>&lt;p>Miza, ki jo natakarji kar predolgo niso našli…&lt;/p>
&lt;p>&lt;img alt="404 argentinc" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/08/404_argentinc.jpg">&lt;/p></description></item><item><title>trda povezava ? hardlink !</title><link>https://simon.zekar.com/2007/08/21/trda-povezava-hardlink/</link><pubDate>Tue, 21 Aug 2007 00:35:16 +0000</pubDate><guid>https://simon.zekar.com/2007/08/21/trda-povezava-hardlink/</guid><description>&lt;p>Počitnice… pa malo lenobe, pa malo gužve, pa je nastala takšna luknja med objavami…&lt;/p>
&lt;p>Je &lt;a href="http://wicked.si/">Vini&lt;/a>, medtem ko sva reševala svet s hardlinki navrgel pobudo za današnji post.&lt;/p>
&lt;p>Torej hardlink na unix datotečnih sistemih, veliko uporabljen, malo poznan, veliko manj kot njegov primitivni sorodnik symlink.&lt;/p>
&lt;p>Nekako takole gre: na datotečnem sistemu ima vsaka datoteka svoj unikatni id, reče se mu “inode”.&lt;/p>
&lt;p>Direktorijska struktura datotek je tabela, ki ima vnose (imena datotek), ki so kazalci na id-je datotek, torej inode. Ko se mi sprehajamo po tej strukturi datotek in zahtevamo datoteko, sistem preveri v tabeli kateri inode je pod datotečnim imenom, ga poišče po tej številki in servira.&lt;/p>
&lt;p>Hardlink je možnost, da v direktorijski strukturi kažeta dve imeni datotek na isti id datoteke / inode.&lt;/p>
&lt;p>V praksi:&lt;/p>
&lt;pre tabindex="0">&lt;code># vpišemo vrstico &amp;#34;vsebina&amp;#34; v novo datoteko
:~/test simon$ echo vsebina &amp;gt;datoteka
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># pregledamo vsebino datoteke
:~/test simon$ cat datoteka
vsebina
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># pregledamo vsebino direktorija
:~/test simon$ ls -al
total 8
drwxr-xr-x 3 simon simon 102 Aug 20 23:53 .
drwxr-xr-x 44 simon simon 1496 Aug 20 23:52 ..
-rw-r--r-- 1 simon simon 8 Aug 20 23:53 datoteka
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># naredimo hardlink datoteke &amp;#34;datoteka&amp;#34; v novo ime &amp;#34;hardlink&amp;#34;
:~/test simon$ ln datoteka hardlink
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># pregledamo vsebino direktorija
:~/test simon$ ls -al
total 16
drwxr-xr-x 4 simon simon 136 Aug 20 23:53 .
drwxr-xr-x 44 simon simon 1496 Aug 20 23:52 ..
-rw-r--r-- 2 simon simon 8 Aug 20 23:53 datoteka
-rw-r--r-- 2 simon simon 8 Aug 20 23:53 hardlink
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># pregledamo vsebino datoteke hardlink
:~/test simon$ cat hardlink
vsebina
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># zapišemo vrtico &amp;#34;novavsebina&amp;#34; v datoteko hardlink
:~/test simon$ echo novavsebina &amp;gt;hardlink
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># jasno se s tem spremeni vsebina druge
:~/test simon$ cat datoteka
novavsebina
&lt;/code>&lt;/pre>&lt;pre tabindex="0">&lt;code># pa še način, da vidimo da datotečna imena kažeta na isti &amp;#34;id datoteke / inode&amp;#34; - prva kolona
:~/test simon$ ls -li
1082466 -rw-r--r-- 2 simon simon 12 Aug 21 00:01 datoteka
1082466 -rw-r--r-- 2 simon simon 12 Aug 21 00:01 hardlink
&lt;/code>&lt;/pre>&lt;p>Zakonitosti hardlinkov:&lt;/p>
&lt;ul>
&lt;li>hardlink-ate lahko samo datoteke,&lt;/li>
&lt;li>hardlink do datoteke lahko postavite samo na isti datotečni sistem (na enak mountpoint), linkanje med diski torej ni mogoče,&lt;/li>
&lt;li>vsebina datoteke bo iz diska izbrisana takrat, ko nanjo ne bo kazal več nobeden link. Torej ko zbrišete kateregakoli izmed dveh datotek, bo vsebina še vedno v drugi datoteki,&lt;/li>
&lt;li>število hardlinkov datoteke lahko vidite v drugi koloni ukaza ls (bodite pozorni na primer zgoraj, ko je bila ena datoteka je bilo število hardlinkov 1, nato 2).&lt;/li>
&lt;/ul>
&lt;p>Uporabnost ? povsod kjer se enake datoteke pojavljajo v različnih direktorijih&lt;/p>
&lt;ul>
&lt;li>pri sistemskih datotekah virtualnih okolij “jail na FreeBSD”, kjer ima vsak jail kopijo celotnega sistema,&lt;/li>
&lt;li>varnostnih kopijah, pri čemer imamo lahko za vsak dan celotno direktorijsko strukturo strežnika, zares pa bo ena datoteka zasedla samo enkratno velikost.&lt;/li>
&lt;li>blackbox programi, programi ki znajo opravljati već funkcij, glede na to kakšno ime smo jim dali. (primer /rescue na FreeBSD)&lt;/li>
&lt;li>razno 🙂&lt;/li>
&lt;/ul>
&lt;p>Pa primitivni bratec symlink ?&lt;/p>
&lt;p>Symlink pa pod datotečno ime zapiše pot do datoteke, na katero kaže, torej samo tekstovni opis kje najdemo datoteko.&lt;/p>
&lt;p>Zakonitosti symlinka:&lt;/p>
&lt;ul>
&lt;li>symlink-ate lahko direktorije in datoteke,&lt;/li>
&lt;li>symlink lahko uporabljate med večimi diski / mount pointi,&lt;/li>
&lt;li>symlink se ne ozira na to, če datoteka na katero kaze obstaja ali ne,&lt;/li>
&lt;li>datoteka bo iz diska odstranjena, ko odstranimo original, torej datoteko na katero kažejo ostali symlinki.&lt;/li>
&lt;/ul>
&lt;p>Kaj uporabiti ? Seveda odvisno od primera, če želite samo malo organizirati datotečno strukturo in imeti ene stvari “pri roki”, bližje, potem symlink.&lt;/p>
&lt;p>So pa stvari ki jih symlink ne zna, kot recimo če želite datoteko ki se nahaja v direktoriju do katerega uporabnik načeloma nima dostopa, deliti z njim, potem narediti hardlink v uporabniku viden prostor.&lt;/p>
&lt;p>Ko želite, da se dodoteke obnašajo kot datoteke, ko jih želite sinhronizirat z rsyncom itd.&lt;/p>
&lt;p>Z Vinijem sva namreč imela primer, pri katerem sva imela organizacijo datotečnih imen po nekem svojem ključu, ki pa, jasno, naročniku ni bil povšeči 🙂 Rešil je hardlinking, dve popolnoma drugačni ureditvi datotečnih imen, pod njima pa enake datoteke.&lt;/p>
&lt;p>Toliko da prelomim ta molk,&lt;br>
kmalu več, noč,&lt;br>
s.&lt;/p></description></item><item><title>screen – virtualni terminal</title><link>https://simon.zekar.com/2007/07/14/screen-virtualni-terminal/</link><pubDate>Sat, 14 Jul 2007 23:29:14 +0000</pubDate><guid>https://simon.zekar.com/2007/07/14/screen-virtualni-terminal/</guid><description>&lt;p>Verjetno se vam je že zgodilo, da ja kakšen ukaz dlje časa trajal in niste imeli časa / možnosti, da imate za čas trajanja ukaza odprto terminalsko povezavo do strežnika.&lt;/p>
&lt;p>Programček &lt;strong>screen&lt;/strong> rešuje ta problem.&lt;/p>
&lt;p>Zaženete screen z ukazom &lt;code>screen&lt;/code>, potrdite z entrom disclaimer in znajdete se v ukazni lupini, ki se zdaj nahaja “znotraj” screena. Začenete ukaz ki ga želite in ko se izvaja, pritisnete tipke CTRL+A Z, torej stisnete CTRL, ko ga držite pritisnete še A, spustite obedve tipki in pritisnete Z.&lt;/p>
&lt;p>dobili boste sporočilo v stilu:&lt;/p>
&lt;p>&lt;code>[1]+ Stopped screen&lt;/code>&lt;/p>
&lt;p>in mirno se lahko odjavite iz sistema.&lt;/p>
&lt;p>Ko se kasneje ponovno prijavite v sistem, napišite ukaz: &lt;code>screen -r&lt;/code> in screen bo nadaljeval terminalsko sejo, v kateri ste prej zagnali ukaz. Videli boste tudi izpis programa za nazaj.&lt;/p>
&lt;p>Še ena luštna… če se tudi prijatelj prijavi v isti sistem z enakim uporabnikom in ste vi v screen-u, lahko izvede &lt;code>screen -x&lt;/code>, pri čemer se bo vključil v vašo sejo in gledal kaj počenjate, lahko tudi kaj napisal… Mogoče tudi primerno za kaj komu pokazati…&lt;/p>
&lt;p>Če bo interes bom napisal o screenu še kaj več, je namreč tudi odlično orodje za vsakodnevno terminalsko delo, ker nam omogoča preko ene terminalske seje več odprtin lupin v stilu “tab”-ov.&lt;/p>
&lt;p>s.&lt;/p></description></item><item><title>TušMobil – dobrodošel…</title><link>https://simon.zekar.com/2007/07/11/tusmobil-dobrodosel/</link><pubDate>Wed, 11 Jul 2007 15:16:51 +0000</pubDate><guid>https://simon.zekar.com/2007/07/11/tusmobil-dobrodosel/</guid><description>&lt;p>&lt;img alt="tusmobil" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/07/tusmobil.jpg">&lt;/p>
&lt;p>Pa je med nami, tretji slovenski mobilni operater, TušMobil.&lt;/p>
&lt;p>Sliši se dobro 🙂&lt;/p>
&lt;p>Več kmalu, slikica je čudna, telefon ne zna auto-focusa…&lt;/p>
&lt;p>Bo danes &lt;a href="http://ma.tija.cc/" title="ma.tija.cc">ma.tija.cc&lt;/a> nardil profi fotko s tapravo mašino.&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>PowerBook, pasme G4, išče novega lastnika</title><link>https://simon.zekar.com/2007/06/24/powerbook-pasme-g4-isce-novega-lastnika/</link><pubDate>Sun, 24 Jun 2007 11:51:58 +0000</pubDate><guid>https://simon.zekar.com/2007/06/24/powerbook-pasme-g4-isce-novega-lastnika/</guid><description>&lt;p>Prišel je čas slovesa, dobro si služil…&lt;/p>
&lt;p>Torej, &lt;em>smrk&lt;/em>,&lt;/p>
&lt;p>Prodam, PowerBook, G4, 1.5 GHz PowerPC, 768M RAM, CD-RW, 60G disk, bluetooth, AirPort Extreme… International razpored tipk, dodatna slovenska USB tipkovnica. Baterija je nova (stare so bile nevarne in jih je Apple vploklical nazaj), a je malo poskodovana, sem ga malo ruknil… malo 🙂&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/library-6539.jpg" title="powerbook 1">&lt;img alt="powerbook 1" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/library-6539.thumbnail.jpg">&lt;/a> &lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/library-6540.jpg" title="powerbook 2">&lt;img alt="powerbook 2" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/library-6540.thumbnail.jpg">&lt;/a>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/library-6541.jpg" title="powerbook 3">&lt;br>
&lt;img alt="powerbook 3" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/library-6541.thumbnail.jpg"> &lt;/a>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/library-6542.jpg" title="powerbook 4">&lt;img alt="powerbook 4" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/library-6542.thumbnail.jpg">&lt;/a>&lt;/p>
&lt;p>Cena: 700 €&lt;/p>
&lt;p>kontakt @ &lt;a href="mailto:simon@zekar.com">simon@zekar.com&lt;/a>&lt;/p></description></item><item><title>skriptna pomoč pri konfiguraciji Cisco opreme</title><link>https://simon.zekar.com/2007/06/24/skriptna-pomoc-pri-konfiguraciji-cisco-opreme/</link><pubDate>Sun, 24 Jun 2007 02:05:19 +0000</pubDate><guid>https://simon.zekar.com/2007/06/24/skriptna-pomoc-pri-konfiguraciji-cisco-opreme/</guid><description>&lt;p>Žal starejše verzije Ciscotovega IOS sistema ne poznajo “interface range” ukaza, ki omogoča da več portov konfigurirate naenkrat, zato si je potrebno pomagati drugače.&lt;/p>
&lt;p>da bi vsak port konfigurirali ročno, je prezamudno, še posebaj, če imate switch z 48-imi porti.&lt;/p>
&lt;p>Pomagate si lahko z enovrstičnico (bash), kot je recimo tale:&lt;/p>
&lt;p>&lt;code>i=1; while [ $i -lt 49 ]; do echo &amp;quot;int fast0/$i&amp;quot;; echo &amp;quot;**span portfast&amp;quot;** ; echo &amp;quot;**switchport mode access&amp;quot;** ; echo **&amp;quot;switchport access vlan 934&amp;quot;** ; let i+=1; done;&lt;/code>&lt;/p>
&lt;p>koda zgoraj bo za vsak port izpisala konfiguracijo, izpis lahko copy-paste-ate v cisco switch in marsikatera minuta vam bo prihranjena. Seveda si kodo preuredite za željeno število portov in seveda za željene ukaze.&lt;/p>
&lt;p>Kakorkoli, gre samo za prikaz zanke – štetja v ukazni lupini, kar lahko s pridom uporabljate za veliko stvari.&lt;/p>
&lt;p>Ponedeljek je dela prost dan ! 😉&lt;/p></description></item><item><title>ibm x3950 bučka</title><link>https://simon.zekar.com/2007/06/20/25/</link><pubDate>Wed, 20 Jun 2007 18:04:32 +0000</pubDate><guid>https://simon.zekar.com/2007/06/20/25/</guid><description>&lt;p>Spet ena iz družine bučk.&lt;/p>
&lt;p>Spet IBM.&lt;/p>
&lt;p>Novejši strežnik, IBM x3950.&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/18062007.jpg" title="ibm x3950 bucka">&lt;img alt="ibm x3950 bucka" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/18062007.thumbnail.jpg">&lt;/a>&lt;/p>
&lt;p>WTF ! se mi zdi da sem enako sliko videl IBM-ovih 286-kah, zdaj jih pa vidim na večjih strežnikih. Tile IBM fantje so malo rusty…&lt;/p>
&lt;p>Aja, server seveda nima floppy-ja 🙂&lt;/p>
&lt;p>Slikam ga pa raj ne, grd..&lt;/p></description></item><item><title>Ugotovite kdo se pretirano pogovarja z vašim spletnim strežnikom</title><link>https://simon.zekar.com/2007/06/14/ugotovite-kdo-se-pretirano-pogovarja-z-vasim-spletnim-streznikom/</link><pubDate>Thu, 14 Jun 2007 22:36:33 +0000</pubDate><guid>https://simon.zekar.com/2007/06/14/ugotovite-kdo-se-pretirano-pogovarja-z-vasim-spletnim-streznikom/</guid><description>&lt;p>Če sumite, da vaše spletne strani pretirano berejo roboti ali kakšni nepridipravi in vam pri tem upočasnjujejo strežnik, vam serviram eno enovrstičnico, ki iz apache loga prešteje zahtevke za vsak IP naslov. Prikaže vam IP naslov in število zahtevkov, ki jih je ta IP sprožil.&lt;/p>
&lt;p>S spremembo vrednosti spremenljivke $limit lahko določite kje bo meja številka zahtevkov, da se bo IP pokazal v izpisu.&lt;/p>
&lt;p>&lt;strong>cat /var/log/apache/access | perl -e ‘$limit=100; while( &amp;lt;&amp;gt;){ if(/(d{1,3}.d{1,3}.d{1,3}.d{1,3})/) { $ips-&amp;gt;{$1}++;}} for(keys %$ips){ print “$&lt;em>: $ips-&amp;gt;{$&lt;/em>}n” if $ips-&amp;gt;{$_} &amp;gt;= $limit; } ‘ |sort -k 2 -n&lt;/strong>&lt;/p>
&lt;p>s.&lt;/p></description></item><item><title>sveti peter oz. ključar za SSH</title><link>https://simon.zekar.com/2007/06/12/sveti-peter-oz-kljucar-za-ssh/</link><pubDate>Tue, 12 Jun 2007 22:54:40 +0000</pubDate><guid>https://simon.zekar.com/2007/06/12/sveti-peter-oz-kljucar-za-ssh/</guid><description>&lt;p>spet ena ssh-jeva…&lt;img alt="sshkeychain" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/sshkeychain.png">&lt;/p>
&lt;p>Sistemci po x letih še vedno pišejo gesla, ko se prijavljajo na svoje strežnike. Takšen sistemc vpiše svoje geslo x-krat (where x &amp;gt; 50) na dan in je po možnosti enako za vseh svojih 120 strežnikov. Takšno eno za vse geslo uporablja že 5 let, ker se je nanj pač navadil.&lt;/p>
&lt;p>Da ne govorim o izgubi časa, varnosti ki pade na vseh točkah, pa še kaj.&lt;/p>
&lt;p>ssh je že zelo lep čas nazaj nudil rešitev. SSH ključi.&lt;/p>
&lt;p>Sistem deluje na principu privatnega in javnega ključa. Javni ključ izpostavljaš po strežnikih do katerih želiš dostopati, privatnega držiš samo na svoji delovni postaji. Privatni ključ ima svoje geslo.&lt;/p>
&lt;p>Tako lahko do strežnikov dostopaš samo, če imaš privatni ključ in seveda geslo zanj.&lt;/p>
&lt;p>V tej fazi torej niste naredili veliko, uvedli ste nov nivo varnosti (poleg gesla še ključ, še vedno pa je potrebno pisati geslo, tokrat za ključ).&lt;/p>
&lt;p>Rešitvi tudi tega se imenuje ssh-agent. Ideja ssh-agenta je, da si ob prijavi v delovno postajo, “registriraš” tudi ssh ključ (vpišeš geslo), za tem pa je prijava v sisteme brez spraševanja za geslo.&lt;/p>
&lt;p>Še več, agent se “vleče” za vami, kar pomeni, da lahko ustvarite SSH povezavo do strežnika A, iz strežnika A pa naprej na strežnik B. Če imate na obeh strežnikih postavljen vaš javni ssh ključ, vas tudi pri povezavi iz A do B strežnika sistem ne bo vprašal za geslo, ker je sistem B preko sistema A dostopal do vašega ssh agenta in vas autenticiral.&lt;/p>
&lt;p>Na kratko, ne potrebujete pisati več gesel sploh.&lt;/p>
&lt;p>Jaz sem gesla po strežnikih celo odstranil, do mojih uporabniških računov se z geslom sploh ne da dostopati. Kolikokrat pa se vam zgodi, da potrebujete do konzole strežnika dostopati s svojim uporabniškim imenom in geslom. Meni nikoli.&lt;/p>
&lt;p>Pa praksa:&lt;/p>
&lt;p>Najprej si morate ustvariti ključ:&lt;br>
unix &amp;amp; unix like (tud OS X) sistemi:&lt;/p>
&lt;h1 id="ssh-keygen">ssh-keygen&lt;/h1>
&lt;p>winblows: puttygen @ &lt;a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html">http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html&lt;/a>&lt;/p>
&lt;p>Na *nix sistemih se bo ključ naredil v ~/.ssh/id_dsa &amp;lt;– privatni in ~/.ssh/id_dsa.pub &amp;lt;– javni&lt;/p>
&lt;p>Zatem je potrebno postaviti ssh agenta:&lt;/p>
&lt;p>OS X: recimo &lt;a href="http://www.phil.uu.nl/~xges/ssh/">http://www.phil.uu.nl/~xges/ssh/&lt;/a>&lt;br>
*nix: # ssh-agent&lt;br>
winblows: pageant @ &lt;a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.htm">http://www.chiark.greenend.org.uk/~sgtatham/putty/download.htm&lt;/a>&lt;/p>
&lt;p>agentom pokažite pot do ključev in jih nastavite tako, da se bodo zagnali ob logiranju v delovno postajo.&lt;/p>
&lt;p>Javni del ssh ključa skopirajte po strežnikih do katerih želite dostop. To storite tako da v mapi .ssh na strežniku ustvarite, če še ni datoteko authorized_keys in vanjo skopirate svoj javni del ključa.&lt;/p>
&lt;p>PAZITE ! Javni del ključa je vedno samo ena vrstica, ogromnokrat se sistemcem zgodi da jo razbijejo na več.&lt;/p>
&lt;p>Eto, če ste vse naredili prav, se poskusite povezati do svojega strežnika, tokrat brez gesla.&lt;/p>
&lt;p>Ob uporabi tega sistema je potrebno pomisliti malo na varnost same delovne postaje oz. dostopa do nje, zatorej zaklepajte delovno postajo ko greste od mize, nastavite “screen saver” na malo časa in zaščitenega z geslom.&lt;/p>
&lt;p>Toliko zaenkrat, nisem šel v detajle, ker bi se zgubili, upam da se že niste. Ideja je predstaviti, raziskujte pa sami !&lt;/p>
&lt;p>Še par 100 tipk na dan manj !&lt;/p>
&lt;p>s.&lt;/p></description></item><item><title>konec zlobnega dne…</title><link>https://simon.zekar.com/2007/06/11/konec-zlobnega-dne/</link><pubDate>Mon, 11 Jun 2007 23:29:22 +0000</pubDate><guid>https://simon.zekar.com/2007/06/11/konec-zlobnega-dne/</guid><description>&lt;p>Danes je bil eden tistih dni, ko gre pa res, res vse narobe.&lt;/p>
&lt;p>Crknila optika SiOL (ok teh dni je mnogo), problemi pri prikljucitvi optike pri stranki, medtem je tam crknil UPS, en disk backup serverja, zvečer še ADSL doma, tako da zdaj kot bi z lučko ko ni elektrike, browsam preko UMTS-ja. Pa še druga presenečenja, ki pa niso ravno za tle…&lt;/p>
&lt;p>Skratka hvala bogu da je preživeto.&lt;/p>
&lt;p>Upam da že jutri pišem kaj o SSH ključih, lažji / varnejši avtentikacij, “ključnih” agentih itd.&lt;/p>
&lt;p>Ostanite naštelani,&lt;br>
s.&lt;/p></description></item><item><title>routing po SiOL-ovo</title><link>https://simon.zekar.com/2007/06/11/routing-po-siol-ovo/</link><pubDate>Mon, 11 Jun 2007 20:42:10 +0000</pubDate><guid>https://simon.zekar.com/2007/06/11/routing-po-siol-ovo/</guid><description>&lt;p>Takole delajo usmerjevalniki na SiOL-u,&lt;/p>
&lt;p>ping-pong…&lt;/p>
&lt;p>pa mal obelix, pa mal ljubljanica, dela pa nic…&lt;/p>
&lt;p>8 obelix-2-0-0.siol.net (89.143.1.25) 36.596 ms 24.269 ms 21.338 ms&lt;br>
9 ljubljanica1-2-0-0.siol.net (89.143.1.26) 28.703 ms 23.760 ms 22.593 ms&lt;br>
10 * * *&lt;br>
11 ljubljanica1-2-0-0.siol.net (89.143.1.26) 26.319 ms 24.276 ms 21.602 ms&lt;br>
12 * * *&lt;br>
13 ljubljanica1-2-0-0.siol.net (89.143.1.26) 28.652 ms 23.751 ms 22.126 ms&lt;br>
14 * * *&lt;br>
15 ljubljanica1-2-0-0.siol.net (89.143.1.26) 26.552 ms 23.541 ms 21.348 ms&lt;br>
16 * * *&lt;br>
17 ljubljanica1-2-0-0.siol.net (89.143.1.26) 29.017 ms 24.495 ms 23.939 ms&lt;br>
18 * * *&lt;br>
19 ljubljanica1-2-0-0.siol.net (89.143.1.26) 27.509 ms 24.292 ms 22.093 ms&lt;br>
20 * * obelix-2-0-0.siol.net (89.143.1.25) 23.805 ms&lt;br>
21 ljubljanica1-2-0-0.siol.net (89.143.1.26) 29.112 ms 23.784 ms 22.083 ms&lt;br>
22 obelix-2-0-0.siol.net (89.143.1.25) 27.724 ms * *&lt;br>
23 ljubljanica1-2-0-0.siol.net (89.143.1.26) 27.298 ms 25.996 ms 23.084 ms&lt;br>
24 * obelix-2-0-0.siol.net (89.143.1.25) 22.317 ms 24.056 ms&lt;br>
25 ljubljanica1-2-0-0.siol.net (89.143.1.26) 26.412 ms 24.497 ms 22.623 ms&lt;/p></description></item><item><title>sistemska obutev…</title><link>https://simon.zekar.com/2007/06/10/16/</link><pubDate>Sun, 10 Jun 2007 21:09:34 +0000</pubDate><guid>https://simon.zekar.com/2007/06/10/16/</guid><description>&lt;p>Ne morš bit dober planinc s slabimi čevlji…&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/21052007.jpg" title="macbookpro1">&lt;img alt="macbookpro1" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/21052007.thumbnail.jpg">&lt;/a>&lt;/p>
&lt;p>&lt;a href="https://simon.zekar.com/wp-content/uploads/2007/06/210520070011.jpg" title="macbook pro baby">&lt;img alt="macbook pro baby" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/210520070011.thumbnail.jpg">&lt;/a>&lt;/p>
&lt;p>Zdaj pa pot pod noge…&lt;/p></description></item><item><title>zamenjava neke besede v vseh datotekah imenika</title><link>https://simon.zekar.com/2007/06/10/zamenjava-neke-besede-v-vseh-datotekah-imenika/</link><pubDate>Sun, 10 Jun 2007 12:49:07 +0000</pubDate><guid>https://simon.zekar.com/2007/06/10/zamenjava-neke-besede-v-vseh-datotekah-imenika/</guid><description>&lt;p>Prva enovrstičnica oz. kako bolje rečti one-liner 🙂&lt;/p>
&lt;p>Verjetno moji primeri ne bodo najkrajši, glede na to da za vsako stvar uporabim kar perl, zatorej komaj čakam na komentarje in borbo krajšanja.&lt;/p>
&lt;p>Tale bo enostavna, v vseh datotekah v imeniku zamenjati besedilo.&lt;/p>
&lt;h1 id="for-i-in-ls--1--do-cat-i-perl--ne-snek_star_stringnov_stringg-print-iold-mv-iold-i-done">for i in &lt;code>**ls -1** &lt;/code>; do cat $i |perl -ne ‘s/nek_star_string/nov_string/g; print’ &amp;gt;$i.old; mv $i.old $i; done&lt;/h1>
&lt;p>pri čemer lahko ls -1 zamenjate z ls -1 *.html, če zelite besedilo zamenjati samo v html datotekah.&lt;/p>
&lt;p>Če želite narediti enako zamenjavo tudi po vseh podimenikih, ls -1 zamenjate z ustreznim find ukazom, kot recimo find . -name “*.html”.&lt;/p>
&lt;p>Toliko zaenkrat, kmalu kaj resnejšega.&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>lepo vreme ! piknik !</title><link>https://simon.zekar.com/2007/06/09/lepo-vreme-piknik/</link><pubDate>Sat, 09 Jun 2007 11:00:42 +0000</pubDate><guid>https://simon.zekar.com/2007/06/09/lepo-vreme-piknik/</guid><description>&lt;p>Danes je kot nalašč za piknik,&lt;/p>
&lt;p>priprave so potekale že včeraj, ne priprave, mesarsko klanje !&lt;/p>
&lt;p>&lt;img alt="ribice" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/08062007.jpg">&lt;/p>
&lt;p>Sorry ribice, ja, grdo je…&lt;/p>
&lt;p>Je pa to dobra hrana za glavo, za sistemce ! 🙂&lt;/p></description></item><item><title>ekstremno počasen ssh na HP-UX po nadgradnji</title><link>https://simon.zekar.com/2007/06/09/ekstremno-pocasen-ssh-na-hp-ux-po-nadgradnji/</link><pubDate>Sat, 09 Jun 2007 10:54:16 +0000</pubDate><guid>https://simon.zekar.com/2007/06/09/ekstremno-pocasen-ssh-na-hp-ux-po-nadgradnji/</guid><description>&lt;p>Verjetno bo kakšen post namenjen bolj arhivu problemov/rešitev, kot širši uporabi.&lt;/p>
&lt;p>Tale bo verjetno tak…&lt;/p>
&lt;p>po nadgradnji openssh-ja na HP-UX 11 v2 ia64 na verzijo 4.5p1 je sprva izgledalo, kot da je vse ok, ko pa je prijatelj želel nekaj skopirati iz strežnika na strežnik, pa se je kazalec hitrosti ustavil na 33 KB/s. Premalo za gigabitno mrežo…&lt;/p>
&lt;p>Po iskanju problema v random generatorju in še kje, se je izkazalo, da z 32 bitno verzijo openssh-ja tega problema ni.&lt;/p>
&lt;p>Zamenjava na 32bit je enostavna:&lt;br>
/opt/ssh/switchmode.sh&lt;/p>
&lt;p>Mogoče pa se najde heroj ki ve zakaj 64bit verzija ne dela kot bi morala 🙂&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>SSH iz konzole – malo hitreje do priljubljenih strežnikov</title><link>https://simon.zekar.com/2007/06/08/ssh-iz-konzole-malo-hitreje-do-priljubljenih-streznikov/</link><pubDate>Fri, 08 Jun 2007 09:49:26 +0000</pubDate><guid>https://simon.zekar.com/2007/06/08/ssh-iz-konzole-malo-hitreje-do-priljubljenih-streznikov/</guid><description>&lt;p>še ena da vam prihranim prste…&lt;img alt="terminal2" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/picture-2.png">&lt;/p>
&lt;p>če se veliko ssh-jate po strežnikih in tipkate vedno dolga cela imena strežnikov, po možnosti še s portom, like&lt;/p>
&lt;h1 id="ssh--p-32453">ssh -p 32453 &lt;a href="mailto:aleksandertrstenjakmlajsi@server13.cluster24.datacenter3.at.company.org">aleksandertrstenjakmlajsi@server13.cluster24.datacenter3.at.company.org&lt;/a>&lt;/h1>
&lt;p>vam naj povem, da gre hitreje…&lt;/p>
&lt;p>ustvarite, ce se nimate datoteke “~/.ssh/config” torej datoteka z imenom config, v podmapi .ssh v domači mapi.&lt;/p>
&lt;p>Datoteka lahko služi kot ssh bookmarking orodje, zapisi v njej pa zgledajo takole:&lt;/p>
&lt;p>Host s13&lt;br>
User aleksandertrstenjakmlajsi&lt;br>
Port 32453&lt;br>
HostName server13.cluster24.datacenter3.at.company.org&lt;/p>
&lt;p>Host tivoli18&lt;br>
User root&lt;br>
Port 5563&lt;br>
HostName tivoli.server.at.some.company&lt;/p>
&lt;p>itd.&lt;/p>
&lt;p>do bookmarknjenga serverja dostopate tako z&lt;/p>
&lt;h1 id="ssh-s13">ssh s13&lt;/h1>
&lt;p>S.&lt;/p>
&lt;p>P.S.: direktiva User v config fajlu sluzi kot default user, če tega ne specifirate, lahko ga pa overwritetate za en session, kot recimo # ssh simon@s13 pri čemer se bodo vsi parametri za s13 upoštevali iz configa, uporabljeno uporabniško ime pa bo simon.&lt;/p></description></item><item><title>IBM optimistično prikazuje napake.</title><link>https://simon.zekar.com/2007/06/07/ibm-optimisticno-prikazuje-napake/</link><pubDate>Thu, 07 Jun 2007 14:23:55 +0000</pubDate><guid>https://simon.zekar.com/2007/06/07/ibm-optimisticno-prikazuje-napake/</guid><description>&lt;p>Ena bučka.&lt;/p>
&lt;p>IBM SVC sistem (virtualizacija SAN omrežja in diskovnih polj za njim) sestavljata dva strežnika (Linux seveda). Ko enega zaradi takšnih ali drugačnih razlogov zmanjka, se drugi odzove s prijaznim opozorilom:&lt;/p>
&lt;p>&lt;img alt="IBM svc funny error" loading="lazy" src="https://simon.zekar.com/wp-content/uploads/2007/06/01062007003.jpg">&lt;/p>
&lt;p>Nobenega klicaja, nič rdeče barve, pravkar ti je crknila polovica sistema, redundance ni več, kot opozorilo pa si dobil eno optimistično kljukico na zelenem.&lt;/p>
&lt;p>IBM očitno dobro skrbi za živce sistemcev…&lt;/p></description></item><item><title>začnite uporabljati vaš shell – bash</title><link>https://simon.zekar.com/2007/06/07/zacnite-uporabljati-vas-shell-bash/</link><pubDate>Thu, 07 Jun 2007 00:35:47 +0000</pubDate><guid>https://simon.zekar.com/2007/06/07/zacnite-uporabljati-vas-shell-bash/</guid><description>&lt;p>Prva ura nove učilnice.&lt;/p>
&lt;p>Tema, opisana verjetno na prvih straneh večina UNIX knjig, na ogromno spletnih straneh, pa vendar, dnevno videvam ljudi, z ogromno UNIX znanja, ki ne uporabljajo niti osnovnih funkcionalnosti / bližnjic njihovega shella.&lt;/p>
&lt;p>Popravljanje besed na začetku ukaza tako, da z backspace-om pobrišeš kar si napisal, popraviš napako in ponovno napišeš kar si imel že napisano. Znano ? Upam da ne…&lt;/p>
&lt;p>Vzemite se čas, poskusite napisano, poskusite začeti to uporabljati, prihranilo vam bo tisoče pritisnjenih tipk.&lt;/p>
&lt;p>Za prvič samo nekaj najbolj uporabnih:&lt;/p>
&lt;p>Navigacija:&lt;br>
&lt;strong>CTRL+A&lt;/strong> = kurzor na začetek ukaza&lt;br>
&lt;strong>CTRL+E&lt;/strong> = kurzor na konec ukaz&lt;br>
(typo na začetku ukaza lahko popravite torej tako, da se s CTRL+A posavite na začetek ukaza, se s kurzorskimi tipkami premaknete do napake in jo popravite)&lt;/p>
&lt;p>Verjetno se vam je že zgodilo, da ste napisali ukaz, potem pa ste se spomnili da bi pred njim morali pognati kakšen drug ukaz. Zbrisali ste vrstico, pognali ukaz in ponovno napisali že prej napisan ukaz.&lt;/p>
&lt;p>Recept: Ko imate napisan ukaz, se prestavite na njegov začetek CTRL+A in izbrišite vrstico s CTRL+K (cut). Vpišite nov ukaz, ga potrdite. Prej izbrisan ukaz prikličete nazaj s kombinacijo CTRL+Y (yank).&lt;/p>
&lt;p>Zelo uporabno – ponavljanje parametrov:&lt;/p>
&lt;h1 id="mkdir-homekekecculjazvitek">mkdir /home/kekec/culja/zvitek&lt;/h1>
&lt;h1 id="cd-esc-">cd &lt;strong>ESC-.&lt;/strong>&lt;/h1>
&lt;p>z ESC-. (escape in pika) prikličete zadnji parameter predhodno izvedenega ukaza.&lt;/p>
&lt;p>Pa še zadnji bonbonček:&lt;/p>
&lt;p>Ker veliko uporabljate ukaze, ki ste jih že napisali, besno med njimi listate s kurzorskima tipkama gor in dol. Po njih lahko tudi iščete !&lt;/p>
&lt;p>&lt;strong>CTRL+R&lt;/strong>&lt;/p>
&lt;p>pojavi se napis: (reverse-i-search)`’: in ko začnete pisati, se vam izpisujejo ukazi, ki vsebujejo natipkane besede. Med večimi ukazi ki ustrezajo parametrom ciklate s ponovnim pritiskom CTRL+R.&lt;/p>
&lt;p>Tako npr. med vsemi ukazi ki uporabljajo “rsync” ciklate tako, da pritisnete CTRL+R napisete rsync in pritiskate CTRL+R da najdete pravilen zadetek.&lt;/p>
&lt;p>Upam, da vam s tem prihranim par 100 odvečnih udarcev 🙂&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>pisalo se bo: unix, komunikacije in oslarije</title><link>https://simon.zekar.com/2007/06/06/pisalo-se-bo-unix-komunikacije-in-oslarije/</link><pubDate>Wed, 06 Jun 2007 22:44:52 +0000</pubDate><guid>https://simon.zekar.com/2007/06/06/pisalo-se-bo-unix-komunikacije-in-oslarije/</guid><description>&lt;p>Ne maram blogov, ne berem jih, zdi se mi izguba casa, pa vendar, vecina prijateljev jih pise. Zdaj pa se je zgodil ta dan, mogoce se mi je zazdelo, da nekatere stvari moras deliti. Mogoce je to nadomestek za dolga druženja in deljenje doživetega ob vedno daljših delovnikih.&lt;/p>
&lt;p>Bomo videli.&lt;/p>
&lt;p>Moje ime je v URL-ju, mogoce se ze s tem kvalificiram za blogerja. Mogoce sem se ze z registracijo domene…&lt;/p>
&lt;p>S ključnimi besedami bi vsebino prihodnjih sporočil označil kot: unix, komunikacije, krneki.&lt;/p>
&lt;p>Rad bi preprosto, po domače približal svet unixa, izpeljank, telekomunikacij vam, ene stvari bodo zelo strokovne, ene ne, spet, bomo videli.&lt;/p>
&lt;p>Napovedujem tudi kakšen dvoboj “one-linerjev”, programov ki ne smejo biti daljši od ene vrstice in še kaj.&lt;/p>
&lt;p>Pa ostanite z mano, chapter I pomojem kmalu…&lt;/p>
&lt;p>S.&lt;/p></description></item><item><title>About author</title><link>https://simon.zekar.com/about-author/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://simon.zekar.com/about-author/</guid><description>&lt;p>System and networking designer and administrator.&lt;br>
CTO and founder of &lt;a href="http://www.siel.si/">SiEL&lt;/a>.&lt;br>
Pilot at &lt;a href="http://www.lcm.si/">LCM – Letalski center Maribor&lt;/a>&lt;br>
Biker &lt;a href="http://www.bmw-motorrad.com/">BMW motorrad&lt;/a>, &lt;a href="https://www.honda.com/motorcycles">Honda&lt;/a>&lt;br>
Cyclist &lt;a href="https://moustachebikes.com/">Moustache Bikes&lt;/a>.&lt;/p>
&lt;p>&lt;a href="http://si.linkedin.com/in/simonzekar">Linkedin&lt;/a>.&lt;/p></description></item></channel></rss>