Re: Performance monitoring for selected process

2007-04-07 Thread yaron
Hi Baruch, >From Its main second version, valgrind equipped with a profiling tool. Although I tested this tool only several times, I think it might be handy See http://valgrind.org/info/about.html "Valgrind can help you speed up your programs. With Valgrind tools you can also perform very det

Re: Performance monitoring for selected process

2007-04-07 Thread yaron
HI again, Just to make myself clear, Valgrind and Vtune are different. Valgring have memory cache profiler "Cachegrind" and "Callgrind". So it can be used for that purpose. I must confess that I use Valgrind mainly for memchecks, and vtune for to gain speed. Regarding oprofile, I am not familia

Nokia E61 Linux syncing

2007-04-07 Thread Gil Freund
Hi, I am considering buying a Nokia e61 phone, and would appreciate any note on syncing the thing with Linux (more specifically Kontact, FireFox or Evolution). Any experience? -- Gil Freund, Systems Analyst --- Sysnet consulting [EMAIL PROTECTED], http://

Re: VMWare and native Windows XP

2007-04-07 Thread Gadi Cohen
http://www.vmware.com/support/ws3/doc/ws32_disks8.html Have fun :) Valery Reznic wrote: > Good day. > > I have dual-boot computer with Linux on one partition > (sda1) and WinXP on the other (sda2). > > Linux has VMware installed. > (VMware-server-1.0.2-39867) > > Now, I want boot into Linux, a

Re: FOSS accounting software

2007-04-07 Thread Geoffrey S. Mendelson
On Fri, Apr 06, 2007 at 11:53:45PM +0300, Dan Armak wrote: > On Friday 06 April 2007, Geoffrey S. Mendelson wrote: > > I have a philosophical question. With open source software how do you > > make sure that the copy you are running was not modified to send > > your accounting data to some "data co

Hacked server

2007-04-07 Thread Ori Idan
A server I managed was hacked by a libian hacker. The only thing he did was changing the index.html of some web sites. The server is based on fedora core 2 running: httpd sendmail bind proftp (through xinetd) ssh Any ideas how he could have done it? What should I do to prevent such hackes in the

Re: Hacked server

2007-04-07 Thread Lior Kaplan
Ori Idan wrote: > A server I managed was hacked by a libian hacker. > The only thing he did was changing the index.html of some web sites. > > The server is based on fedora core 2 Didn't fedora stopped releasing security updates for this version a long time ago? -- Lior Kaplan [EMAIL PROTECTED

Re: Hacked server

2007-04-07 Thread Josh Zlatin-Amishav
On Sun, 8 Apr 2007, Ori Idan wrote: A server I managed was hacked by a libian hacker. The only thing he did was changing the index.html of some web sites. The server is based on fedora core 2 running: httpd sendmail bind proftp (through xinetd) ssh Any ideas how he could have done it? The ht

Re: Hacked server

2007-04-07 Thread ik
I suggest, that you should scan for full open ports on your web site (all the port range), to see if that person have an open "shell" on your account. Regardless of that, please look for known vulnerabilities from the versions of every server on the machine, and also if the server runs any dynami

Re: Hacked server

2007-04-07 Thread Oren Held
Indeed a remote exploit in the services is possible, and ofcourse each service can have a remote exploit... However, I'd be trying to eliminate the less-uber-cool-hacker possibilities: a. Bad local user (Bad user! spank him..) b. SSH remote login using a weak password which was just guessed ("t

Re: Hacked server

2007-04-07 Thread Hetz Ben Hamo
You could do few things: 1. apt-get dist-upgrade (or yum upgrade), or better - move to a stable distribution like CentOS. That way you'll have security fixes for at least 5 years. DO NOT use Fedora on any server which offfer services outside. 2. Have some logs emailed to you from the server on a

Re: Hacked server

2007-04-07 Thread Amos Shapira
On 08/04/07, Josh Zlatin-Amishav <[EMAIL PROTECTED]> wrote: On Sun, 8 Apr 2007, Ori Idan wrote: > What should I do to prevent such hackes in the future? There are lots of things you can do, like keep software up to date, remove unneeded services, audit web applications for flaws (though I am ki

Re: Hacked server

2007-04-07 Thread Josh Zlatin-Amishav
On Sun, 8 Apr 2007, ik wrote: I suggest, that you should scan for full open ports on your web site (all the port range), to see if that person have an open "shell" on your account. Good advice, though the (possible) open shell might just be running on port 80/443 (i.e. a php shell) which is al

Re: Nokia E61 Linux syncing

2007-04-07 Thread Amos Shapira
On 07/04/07, Gil Freund <[EMAIL PROTECTED]> wrote: Hi, I am considering buying a Nokia e61 phone, and would appreciate any note on syncing the thing with Linux (more specifically Kontact, FireFox or Evolution). Any experience? Not sure how much this is relevant but I've been tracking the fol

Re: Hacked server

2007-04-07 Thread Amos Shapira
On 08/04/07, Josh Zlatin-Amishav <[EMAIL PROTECTED]> wrote: On Sun, 8 Apr 2007, ik wrote: > I suggest, that you should scan for full open ports on your web site > (all the port range), to see if that person have an open "shell" on > your account. Good advice, though the (possible) open shell m

Re: Hacked server

2007-04-07 Thread Ariel Biener
On Sunday, 8 בApril 2007 00:33, Ori Idan wrote: > A server I managed was hacked by a libian hacker. > The only thing he did was changing the index.html of some web sites. > > The server is based on fedora core 2 > running: > httpd > sendmail > bind > proftp (through xinetd) > ssh > > Any ideas how

Re: Hacked server

2007-04-07 Thread Orr Dunkelman
sendmail & bind are also bad for your mental health. Consider normal alternatives, or if you want to make sure no one is hacking your system through them, switch to qmail and djbdns. You will also need to install everything from scratch (and I suggest you init. your bios as well). If you want to

Re: adding a third SATA drive

2007-04-07 Thread Shlomo Solomon
On Thursday 05 April 2007 09:26, Noam Meltzer wrote: > On 4/5/07, Shlomo Solomon <[EMAIL PROTECTED]> wrote: > > QUESTION #3 - While GOOGLing for this, I found some mentions of EVMS. I > > seem > > to remember that on a previous version of Mandriva I had disk-access > > problems > > until I un-insta

Re: Hacked server

2007-04-07 Thread Boaz Rymland
Adding to what's been said so far (and if repeating please consider it as "double emphasis" :-) I'd recommend: 1. Do not run anything not needed on the server. Make sure to look not only in system services level but in the service level itself. E.g: run on the web server only what you need on