Skip to content
Apr 8 10

Running Wireshark as non-root user on OpenSUSE

by john

If you run Wireshark as root you are opening yourself up to some serious security risks. Best to run it as your regular user. But that's a heck of a lot more difficult then it sounds.

Here's the fix. I got the information from these sites -

http://wiki.wireshark.org/CaptureSetup/CapturePrivileges

http://packetlife.net/blog/2010/mar/19/sniffing-wireshark-non-root-user/

NOTE: I installed the latest SVN release of Wireshark from source using './configure --prefix=/opt', make, make install so that it wouldn't interfere with my already installed version of Wireshark. I also made the following changes to the current install of dumpcap under /usr/bin.

Add 'file_caps=1' to your kernel options in /boot/grub/menu.lst
Reboot

# groupadd wireshark
# usermod -G wireshark jholbrook
# chgrp wireshark /opt/bin/*
# chmod 750 /opt/bin/dumpcap
# setcap cap_net_raw,cap_net_admin=eip /opt/bin/dumpcap
# getcap /opt/bin/dumpcap
/opt/bin/dumpcap = cap_net_admin,cap_net_raw+eip

Then as a regular user I can now run Wireshark and see all my network interfaces.
$ /opt/bin/wireshark

Mar 15 10

Going wireless

by john

Finally decided to bite the bullet and set up a wireless AP at my home.

Picked up the Buffalo WHR-HP-G300N.

Being a geek, I decided I didn't want to use the default firmware. I did try it for a bit but it was really ugly. Decided to try installing DD-WRT on it instead. For those who don't know what DD-WRT is:

DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. The main emphasis lies on providing the easiest possible handling while at the same time supporting a great number of functionalities within the framework of the respective hardware platform used.

So I read some of the docs and figured I had to do a hard reset on the device and then try uploading the proper firmware using TFTP. I tried to get it to upload about 60 different ways with no luck. Then I came across a post on the DD-WRT forums. Turns out I could upload the firmware right from the default web interface upload tool! Duh! 2 minutes later I had it working with DD-WRT.

Wanna know what's really cool? Turns out that Buffalo is going to use DD-WRT as the default firmware on several of their models including the one I bought. Awesome stuff.

Too bad this Open Source 'thing' isn't going to catch on, ain't it?

Mar 4 10

/libexec/ld-elf.so.1: Shared object “libintl.so.8″ not found, required by “bash”

by john

Was playing with the installation of some software and I stupidly ran ldconfig without any options. After that I couldn't log in or change users without getting this error:

/libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "bash"

Found a fix via Google:

/rescue/ldconfig /lib
/etc/rc.d/ldconfig start

Feb 22 10

Unable to find device node…

by john

I am trying to install FreeBSD 8.0 on a hard drive that used to have FreeNAS installed on it. Unfortunately, when I got to the part of sysinstall where it starts formatting the drives, I get the following error:

Unable to find device node for /dev/ad6s1b in /dev/ad6! Creation of filesystem will be aborted.

Did some Google searches and found the fix was to overwrite the MBR with dd if=/dev/zero of=/dev/ad6 bs=512 count=1 and various combinations of the dd command. I tried it every way from Sunday with no flippin' luck. I was getting really pissed. I even tried installing another Linux distro but I had other issues there.

Finally found a fix - Run Darik's Boot and Nuke (aka DBAN)!!

I let it overwrite about 1% of the disk, rebooted and started in the install again. Now things are working great.

Feb 20 10

Going to do the BSDA Certification

by john

I've decided to write the BSDA certification exam at LinuxFest Northwest at the end of April. I also need to renew one of my SANS certifications by the end of May. I must like stressing myself out.

I ordered and received the Winter 2010 BSDA Courseware DVD in the mail a couple of days ago. I know the materials are all available on the 'net for free but I like to support a good cause.

If you've done the BSDA exam, drop me a note if you have any recommended study methods, tips, tricks, etc.

Feb 4 10

LFNW

by john

Im going to Linxufest Northwest 2010 April 24-25th

Jan 7 10

Termcap issue with rxvt-unicode

by john

Now that I've moved to xmonad for all my desktops I've also made the switch to rxvt-unicode (or urxvt) as my primary terminal. Now when I ssh into some of my boxes I get the following errors when I try to edit a file:

$ vi filename
vi: No terminal database found
$ nano layout.css
Error opening terminal: rxvt-unicode.

What's weird is this happens on some of my FreeBSD 8.0 boxes and not others.

Figured out a fix.

# export TERM=screen
# cd /usr/share/misc
# nano termcap

Added the following just below the 'rxvt-mono' section:

Termcap entry for rxvt-unicode, taken from http://cvs.schmorp.de/rxvt-unicode/doc/rxvt.7.html#I_need_a_termcap_file_entry rxvt-unicode|rxvt-unicode terminal (X Window System):\
:SF=\E[%dS:SR=\E[%dT:bw:ec=\E[%dX:kb=\177:kd=\EOB:ke=\E[?1l\E>:\
:kl=\EOD:kr=\EOC:ks=\E[?1h\E=:ku=\EOA:lm#0:te=\E[r\E[?1049l:\
:ti=\E[?1049h:tc=rxvt-mono:

# cap_mkdb termcap

Log out and back in again and you should now be able to use vi/nano/pico/etc.

BTW: This isn't anything original. I found the fix at http://lists.freebsd.org/pipermail/freebsd-bugs/2009-April/034865.html

Dec 20 09

xmonad install on OpenSUSE 11.2

by john

Just my notes on how I got xmonad working on my PC at home (I also am running it at work). Please remember that I am only configuring this to work for my user account instead of setting it up globally.

read more...

Dec 8 09

xmonad

by john

One of the guys in the LUG did a presentation a couple of months ago on xmonad, a tiling window manager. Thought it was a little weird but decided to give it a try over the last few days.

All I have to say is WOW! It's pretty amazing. I'm totally hooked. I'll post some docs over the last while on how I got the latest version up and running on OpenSUSE 11.2 since the only packages I could find for it were really old.

And no Nathan I will NOT be switching to a dvorak keyboard! I'm not that crazy. ;-P

Oct 29 09

Putting Swine Flu in perspective

by john

http://www.flickr.com/photos/michaelpaukner/4052849920/sizes/o/in/pool-16135094@N00/

Makes you think, doesn't it?