If you run Wireshark as root you are opening yourself up to some serious security risks. Best to run it as your regular user. But that's a heck of a lot more difficult then it sounds.
Here's the fix. I got the information from these sites -
http://wiki.wireshark.org/CaptureSetup/CapturePrivileges
http://packetlife.net/blog/2010/mar/19/sniffing-wireshark-non-root-user/
NOTE: I installed the latest SVN release of Wireshark from source using './configure --prefix=/opt', make, make install so that it wouldn't interfere with my already installed version of Wireshark. I also made the following changes to the current install of dumpcap under /usr/bin.
Add 'file_caps=1' to your kernel options in /boot/grub/menu.lst
Reboot
# groupadd wireshark
# usermod -G wireshark jholbrook
# chgrp wireshark /opt/bin/*
# chmod 750 /opt/bin/dumpcap
# setcap cap_net_raw,cap_net_admin=eip /opt/bin/dumpcap
# getcap /opt/bin/dumpcap
/opt/bin/dumpcap = cap_net_admin,cap_net_raw+eip
Then as a regular user I can now run Wireshark and see all my network interfaces.
$ /opt/bin/wireshark
Going wireless
Finally decided to bite the bullet and set up a wireless AP at my home.
Picked up the Buffalo WHR-HP-G300N.
Being a geek, I decided I didn't want to use the default firmware. I did try it for a bit but it was really ugly. Decided to try installing DD-WRT on it instead. For those who don't know what DD-WRT is:
DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. The main emphasis lies on providing the easiest possible handling while at the same time supporting a great number of functionalities within the framework of the respective hardware platform used.
So I read some of the docs and figured I had to do a hard reset on the device and then try uploading the proper firmware using TFTP. I tried to get it to upload about 60 different ways with no luck. Then I came across a post on the DD-WRT forums. Turns out I could upload the firmware right from the default web interface upload tool! Duh! 2 minutes later I had it working with DD-WRT.
Wanna know what's really cool? Turns out that Buffalo is going to use DD-WRT as the default firmware on several of their models including the one I bought. Awesome stuff.
Too bad this Open Source 'thing' isn't going to catch on, ain't it?
Was playing with the installation of some software and I stupidly ran ldconfig without any options. After that I couldn't log in or change users without getting this error:
/libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "bash"
Found a fix via Google:
/rescue/ldconfig /lib
/etc/rc.d/ldconfig start
Unable to find device node…
I am trying to install FreeBSD 8.0 on a hard drive that used to have FreeNAS installed on it. Unfortunately, when I got to the part of sysinstall where it starts formatting the drives, I get the following error:
Unable to find device node for /dev/ad6s1b in /dev/ad6! Creation of filesystem will be aborted.
Did some Google searches and found the fix was to overwrite the MBR with dd if=/dev/zero of=/dev/ad6 bs=512 count=1 and various combinations of the dd command. I tried it every way from Sunday with no flippin' luck. I was getting really pissed. I even tried installing another Linux distro but I had other issues there.
Finally found a fix - Run Darik's Boot and Nuke (aka DBAN)!!
I let it overwrite about 1% of the disk, rebooted and started in the install again. Now things are working great.
Going to do the BSDA Certification
I've decided to write the BSDA certification exam at LinuxFest Northwest at the end of April. I also need to renew one of my SANS certifications by the end of May. I must like stressing myself out.
I ordered and received the Winter 2010 BSDA Courseware DVD in the mail a couple of days ago. I know the materials are all available on the 'net for free but I like to support a good cause.
If you've done the BSDA exam, drop me a note if you have any recommended study methods, tips, tricks, etc.
LFNW
Termcap issue with rxvt-unicode
Now that I've moved to xmonad for all my desktops I've also made the switch to rxvt-unicode (or urxvt) as my primary terminal. Now when I ssh into some of my boxes I get the following errors when I try to edit a file:
$ vi filename
vi: No terminal database found
$ nano layout.css
Error opening terminal: rxvt-unicode.
What's weird is this happens on some of my FreeBSD 8.0 boxes and not others.
Figured out a fix.
# export TERM=screen
# cd /usr/share/misc
# nano termcap
Added the following just below the 'rxvt-mono' section:
Termcap entry for rxvt-unicode, taken from http://cvs.schmorp.de/rxvt-unicode/doc/rxvt.7.html#I_need_a_termcap_file_entry rxvt-unicode|rxvt-unicode terminal (X Window System):\
:SF=\E[%dS:SR=\E[%dT:bw:ec=\E[%dX:kb=\177:kd=\EOB:ke=\E[?1l\E>:\
:kl=\EOD:kr=\EOC:ks=\E[?1h\E=:ku=\EOA:lm#0:te=\E[r\E[?1049l:\
:ti=\E[?1049h:tc=rxvt-mono:
# cap_mkdb termcap
Log out and back in again and you should now be able to use vi/nano/pico/etc.
BTW: This isn't anything original. I found the fix at http://lists.freebsd.org/pipermail/freebsd-bugs/2009-April/034865.html
xmonad install on OpenSUSE 11.2
Just my notes on how I got xmonad working on my PC at home (I also am running it at work). Please remember that I am only configuring this to work for my user account instead of setting it up globally.
xmonad
One of the guys in the LUG did a presentation a couple of months ago on xmonad, a tiling window manager. Thought it was a little weird but decided to give it a try over the last few days.
All I have to say is WOW! It's pretty amazing. I'm totally hooked. I'll post some docs over the last while on how I got the latest version up and running on OpenSUSE 11.2 since the only packages I could find for it were really old.
And no Nathan I will NOT be switching to a dvorak keyboard! I'm not that crazy. ;-P
Putting Swine Flu in perspective
http://www.flickr.com/photos/michaelpaukner/4052849920/sizes/o/in/pool-16135094@N00/
Makes you think, doesn't it?
