Tag Info

New answers tagged

0

You need to add the following two lines to /etc/network/interfaces: allow-hotplug eth0 iface eth0 inet dhcp Then, as root, run ifup eth0 You can probably fix your X.org problem by installing lightdm; that will start a desktop manager when the system boots.


1

Do they maybe just mean that if you use -i any that tcpdump won't put the interfaces into PROMISC mode? Yes, that's what I meant by that. The "any" device doesn't work by opening all devices independently and capturing on them, it works by opening a "packet socket" and, instead of binding it to a particular device (which is how you capture on that ...


0

You said the interface is up, but is it up as far as ip link is concerned or as far as ifup is concerned? A failure of the post-up commands would mean the latter. To debug why IPv6 ND isn't working, you have to run something like a packet tracer (tcpdump, tshark, ...) and see if you're getting router advertisements. If you are, verify that ...


1

You need to set up remote port forwarding from the server to the Raspberry Pi. Below is just a brief explanation of what that means.1 Remote port forwarding Now comes the second part of this tutorial, which is remote port forwarding. This is again best to explain with an example. Say that you’re developing a Rails application on your local ...


2

Any application can be allowed a set of root capabilities using setcap. Opening port below 1024 if one of them. You can run the application as a non-root user, and if the capabilities you need are set, there will no problem. Read about the possible capabilities: http://linux.die.net/man/7/capabilities. For example, running apache-tomcat as non-root: ...


1

What is the best way to get around this? The one that's given in glassfish itself. Straight from linux-service.template: # Example commands that demonstrate how to run GlassFish on the "special" ports < 1024 # # iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080 # iptables -t nat -A PREROUTING -p udp -m udp --dport ...


2

Apache is an example of a daemon that supports dropping privileges. Apache is started as root, and it binds to the ports as root. After it has binded, it uses the setuid and setgid system call to drop to lesser privileges. The user that it changes to is determined by it's "User" and "Group" configuration options.


0

While it's not as heavily used as it once was, 'chroot' is a tool that improves the security for processes that must run with root privileges. It takes some extra effort as you are creating a virtual / folder with all files that your application needs, including libraries (compiled the program statically linked) That way if some process should break your ...


0

You could use a copy of bash... What I mean is that you could make a separate version of bash in one of your $PATH directories, and call it bash1 or something. Then what you could do is give it different permissions so that you could run glassfish with bash1 instead of bash. This would mean tyat bash would remain unchanged and you have your own seperate ...


2

You can use: ifdown eth0 to stop and ifup eth0 to start


0

The "Remember me" option just creates a session cookie which the service (Facebook for instance) will be happy to accept "forever". Nowadays almost all services work by generating a session cookie which the client (your browser) will transmit over and over again during the session. So, the "remember me" option actually "only" tells the service/server to keep ...


1

This is due to a procedure called Autonegotiation, which happens at the physical layer. As far as the kernel is concerned, that link (connection) can only handle a bandwidth of 10 Mbps, and iperf presumably respects that maximum connection speed. The good folks over at http://networkengineering.stackexchange.com/ can probably go into more detail if you have ...


0

@Mike: Flush ALL rules/tables and start with just the basics to ensure you can nat between networks. echo 1 > /proc/sys/net/ipv4/ip_forward route add -net 10.0.0.0/16 dev m0 iptables -t nat -A POSTROUTING -o m0 -j MASQUERADE In my eyes, this should route and masquerade all 10.0.x.x traffic to m0 regardless of ip addressing. If successful, build on ...


1

With socat on the server: socat tcp-listen:8001,reuseaddr,fork tcp:localhost:8000


0

There are several things to know your network configuration. For instance, if you want to find your route table you may use the "route" command. route or route -n Moreover, may find your active network devices using "ifconfig". ifconfig eth0 Finally you can use "ping -I [interface] ww.xx.yy.zz" to test your connection to machine with ip address ...


1

Just do an, nslookup. Part of its results include the server that it's using.


0

I know this question is already two years old but recently I stumbled over the same problem on a machine running 'wheezy'. After searching for a solution on various sites, it seemed to be a problem caused by the network-manager, which didn't bring up the network-interface fast enough to allow mumble opening its socket. Therefore i removed the ...


1

Found the mistake. You need to add a line above the interface-start-line and add a vlan-raw-device: auto eth0:1 iface eth0:1 inet static address 10.10.10.20 netmask 255.255.255.0 broadcast 10.10.10.255 vlan-raw-device eth0 With this, it works fine ;)


1

On Ubuntu, Upstart takes care of starting services. Restarting services as inetd can do is often not needed as the programs like sshd just start and run in the background, instead of being restarted again and again. If you install some serial ports you might have to install (x)inetd to allow login over a serial line, but I haven't seen any need recently for ...


0

Since this question got me a "Tumbleweed" badge - I thought I'd step in. It transpires that yes, the above config will work. I was able to leave the data centre in a state of calm having installed the new machine.


0

Don't use allow-hotplug eth0 Try this config: auto eth0 iface eth0 inet static address 192.168.0.1 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 dns-nameservers 8.8.8.8


0

I had this (or an eerily similar issue) using Evolution on Fedora 21 Xfce spin over IMAP. The general consensus seems to be that Evolution somehow stops being able to communicate with the system keyring. The only thing that fixed it for me was this unlikely sequence of actions. It may not fix the issue permanently, but it has certainly done the trick for ...


0

Here is how I recently did it, and I am quite happy with this approach now. This is for Ubuntu 12.04 + gentoo, but I guess any distro, which allows to install udev and autofs should work. Prerequisites: You have to have installed udev + autofs. Step 1) Create the following "/etc/udev/rules.d/90-usbsd-auto.rules" file (of course you might use any name as ...


0

You should use domain from your realm,not ekiga You can troubelshoot by using asterisk -r sip set debug on


0

Well, the route still looks odd: tleilax:~ # tleilax:~ # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.1 0.0.0.0 UG 0 0 0 enp3s8 loopback * 255.0.0.0 U 0 0 0 lo 192.168.1.0 * ...


1

You may dump application generated traffic by different methods: If you know the ports the application is using, you can run tcpdump or wireshark with specific filtering rules for these ports. If that is not an option, you may mark application packets using an iptables rule, matching the owner of the process. You may need to create a new user account to ...


0

I recently had this same issue with Mint 17.1 Cinnamon. I was able to fix the issue with a kernel update. My old kernel was 3.13.24 and since updating to 3.16.30, my internet connection is back up to 100% and no longer taking forever to load a page or dropping the connection. Prior to the update, my internet connection was around 83% and that was right ...


2

File "/proc/net/dev" has information about trannsmited and recieved packages for every interface your computer has. I guess you could make a script to time the packages and get the bandwith since you have data in its raw form.


1

These images show logical topology not physical one. Image 1 It does not mean you have to get many NICs if you want many client. The line symbolizes LAN there. So in fact your physical topology will include a switch, to which all the clients, and the asterisk box would be connected. Image 2 This show the basic mode of operation. SIP protocol is used ...


0

It sounds like your networking is not working. The delays you are seeing are due to the numerous daemons present in startup that utilize the network and taking a long time to timeout requests. I'd suggest that you closely examine your VM NIC configuration parameters closely. One other thought, are you sure you set the ONBOOT parameter to yes in the NIC ...


0

The issue here is that your wired interface (eth0) does not have an IPv4 address. You have manually added an IPv4 route but, without having an IPv4 address, traffic cannot get routed as it cannot assign an IP address for (your system's) source IP. Without knowing more information of your environment (Are you using a DSL connection? Are you in an corporate ...


0

The logs show that the Ethernet card lost carrier (i.e. it was "disconnected") before 20:48. When it enables the interface and tries to obtain an IP address through DHCP the queries go unanswered: Jan 14 20:48:31 plex dhclient: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 11 (xid=0x6c7ab96a) As it cannot obtain an IP address, Network Manager ...


0

I will answer my own question I was using VirtualBox 4.3.14 on Windows host, after upgraded to latest 4.3.22 everything start working. Without any RHEL config changes.


1

The state that's being changed is probably in the network adapter itself. Wireless adapters especially tend to be complex programmable computers in and of themselves, and it's likely that b43 is leaving the adapter in a state where it doesn't know how to talk to wl. Beyond that, you'd need deep understanding of how these drivers work to say what exactly is ...


0

Use this: iptables -t nat -A PREROUTING -m mac --mac-source xx-xx-xx-xx-xx-xx -j ACCEPT (Host A) iptables -t nat -A PREROUTING -m mac --mac-source xx-xx-xx-xx-xx-xx -j ACCEPT (Host B) iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to 127.0.0.1:8080 The first two commands ACCEPT packets from A and B, so redirection only happen if the packet is ...


0

If the setting can wait until after the interface is up (DHCP has finished), then there are a few different ways to run a script when the interface comes up. The Debian way is to put a script in /etc/network/if-up.d/. This should work on Debian no matter what method you use to manage your interface (NetworkManager, ifupdown, etc). The interface name and a ...


1

It looks like your cabled connection is not obtaining an IP address from the DSL connection. This can be either because there is no DHCP server running on the network you are connecting to or because the interface is not properly configured. Try doing the following: Install the ifupdown-extra package, (as root): apt-get install ifupdown-extra Disable ...


3

From your requirements I think this is exactly what Multicast DNS (i.e. Bonjour) was defined for. If you are using Ubuntu systems, chances are you already have Avahi already installed both the server avahi-daemon and the client avahi-discover Basically you would set it up as follows: If you want a fancy name for your server (instead of its hostname, which ...


1

A network scan with nmap should work. A far easier first step is to run the command arp -a which could give you all of the mac and IP on your broadcast network (if ICMP requests are not blocked). Next, try ping of the broadcast address you are in (requires ICMP requests not blocked). For instance, if your server is 192.168.1.10 and the netmask is ...


1

Edit 2 (per our conversation): See if this works better for you (with more information): nmap -p 22 --open -sV 192.168.1.0/24 Like before, add the awk if you just want the IP's: nmap -p 22 --open -sV 192.168.1.0/24 | awk '/is up/ {print up}; {gsub (/\(|\)/,""); up = $NF}' where: nmap : the executable name -p 22 : specifies the port to ...


1

I guess server's MAC is not going to chage, at least not frequently, so I would use that to identify the server's IP. I would use something like arpwatch to monitor the network until the servers IP/MAC pair is identified thus having the server IP.


1

It is fixed - it was actually due to my VPN killswitch detecting something wrong and turning my internet off. Thanks for assistance.


1

Try Synergy, it allows to use one mouse on many computers so maybe it will do what you want http://synergy-project.org/


0

You could look at netsniff-ng, which is not built atop libpcap and directly uses Linux PF_PACKET sockets, but you'll probably want to (and possibly have to) further trim it down yourself to make it sufficiently minimal. I don't know of any "here's the source, just compile" minimal sniffers of that sort.


0

If it was virt-manager, it should be somewhere in /var/lib/libvirt/images/. In case of Yast, I have no idea. Anyway, I'd try following command: find / -name 'hda.img' substitute hda.img for the name of disk created.


0

Another good option might be nethogs On fedora is available among the core packages, and on centos you can get it through the epel repo.


3

There are generally two options for blocking traffic when it comes to iptables/firewalld security: DROP the packet or REJECT it. REJECT results in an icmp-host-prohibited ICMP packet being sent back to the client informing them that the end host refused the connection. This is usually described as "Connection Refused" by your application. DROP results in ...


1

Be aware that the Pi USB+Ethernet comes from a single dumb on-board chip that connects to a SINGLE port on the Pi GPU = i.e. the USB Ethernet dongle will NOT just 'link direct' to built in Ethernet Thus, when you attempt transfer data from one interface to the other, throughput is crippled as each byte has to be read by the CPU, wait whilst the CPU tells ...


0

What does route -n and cat /etc/resolv.conf show?


1

To make ordinary user to operate with remote share you should add the user's id to the option like sudo mount.cifs //DRIVE ~/homedir/ -o user=user,pass=pass,sec=ntlmssp,uid=1000,gid=46 where uid - user id which can found in id command output guid - user group id ( but in some case you'd better use plugdev group which equal 46)



Top 50 recent answers are included