Posts by rubberman

Well, there shouldn't be a problem then. I don't know why your system is keeping user1 out of the directory. Can they CD to it and list the contents?

Very useful, yes, but less irritating without the sound! :-)

As user1, execute the command "groups" to see what groups the user is a member of.

To add the restricted group, just use the command: groupadd restricted
To add user1 to group restricted, do this: usermod -G restricted user1

Also, do you know if you have SELinux extensions enabled w/ ACL's (Access Control Lists), or not?

Use groupadd instead.

Yes. User1 has to be a member of the restricted group in order to access the directory, which is why you need to use the groupadd command to add that user to the group.

Well, members of the restricted group should be able to navigate the restricted directory, and read files that have group read permissions on them. So, what precisely is going on? As root, create a file in /home/restricted with some text. Make the file's group "restricted", and make sure that the group permissions include +r (read access).

Actually, I think that the number of entries that will force 3 levels is 25 when the order is 5 (4 keys and 5 links to sub-nodes / node). So, level 1 will have 4 keys and 5 links, level 2 will have 5 nodes w/ 4 keys / node == 20 keys (24 total). So, a 25th key/entry will force a 3rd level, but only one partially filled node there. If you mean how many entries to create 3 full levels, then the number is 124:

Level 1 == 4 (1 node x 4 entries + 5 sub-nodes)
Level 2 == 20 (5 nodes x 4 entries + 25 sub-nodes)
Level 3 == 100 (25 nodes x 4 entries)

Which would be the case for a fully balanced tree.

If you want to eliminate an entry that is only spaces, then try this:

^[ ]*$

First, learn something about programming...

What jingda and massy7890 said. Also, you can install Chrome or Firefox on OSX if you prefer them to Safari.

Either get a power supply that fits properly, get a motherboard that has the memory slots located differently so they are not interfered with by the PS, or get a case that locates the motherboard further away from the power supply. Neither solution you mention is, in my professional opinion as an EE, viable.

So the file type is ext3 right?

Right. If you cd to /home, execute the command "ls -l". The entry for the restricted directory should look something like this (though the owner may vary, it should be root):

drwxr-x---.   3 root      restricted       4096 Feb 10  2011 restricted

The first field are the directory permissions, the 3rd is the owner, 4th is the group, the fifth is the size, and the last is the directory/file name. Note that the owner has full permissions (rwx), the group has read/execute (on directories, execute == search permission) permissions, and everyone else has no access. This should be the settings for all the sub-directories under /home/restricted as well, though files should be (assuming you don't want people to be able to modify a file):

-rw-r-----.   1 root      restricted       4096 Feb 10  2011 filename

If you want to allow execute permission on a file, such as a script or other executable, then it should look like this:

-rwxr-x---.   1 root      restricted       4096 Feb 10  2011 filename

did you have to do it so friken fast .lol

Just had to make the rest of us look a bit lame (sic) - :-)

Just in case somebody doesn't know, Lame is the producer of one of the most popular mp3 codecs out there... :-)

Post the output of the "mount" command (no arguments) here.

I usually pare down the number of services that are automatically started in my clients' Vista machines for similar reasons - slow booting at the least. However, unless they are taking more memory than the system has (including swap space), they should not cause a BSOD.

You might want to read this: http://www.cplusplus.com/doc/tutorial/typecasting/

What operating system is he running? If some version of Windows (likely), then have you tried booting into "Safe mode"?

Have you tried rebooting? It should not be necessary, but it's a good sanity check in case the system has cached old settings somehow. Anyway, I'll test this behavior myself. Just to know, what is the file system you are using for /home?

Try changing the permissions for /restricted and its sub-directories to g+rx and did you create the restricted group? Are you sure that user1 is in that group?

Time for it to take a trip to the repair depot.

Give the group ownership of those directories that the user is not a member of, and set group permissions to 0. Example, using directory /home/restricted, as root do this:

# create group "restricted"
groupadd restricted

# this next command is only used if /home/restricted does not yet exist
mkdir /home/restricted

# set group ownership of all files and directories in /home/restricted to "restricted"
chgrp --recursive restricted /home/restricted

# disable other privileges on /home/restricted
chmod --recursive o-rwx /home/restricted

# enable read privileges for group restricted
chmod --recursive g+r /home/restricted

Now, the only the owner of the files/directories, or members of the restricted group may access them.

Yum can install any rpm file from any directory. However, you do need to run the command as root. For example, the LibreOffice distribution is, for most systems, not available in the repositories so you have to download the rpm files and install them individually (or in groups). In fact, you can install multiple rpm files with one command just as you can with packages in a repository, as in: yum install filea.rpm fileb.rpm ...

or

yum install packageA packageB ...

You can install an rpm file with yum. Just execute: yum install filename.rpm

finding it hard to paste it, but they look the same

As they say, the devil's in the details. If you can paste them it would be helpful to diagnose the problem.

Ok. On both the desktop and the laptop, open a cmd.exe window and execute the command: ipconfig /all
Then post the output from each here.

Most devices these days can switch a port from requiring a patch cable to using a regular one, but not all do that. Apparently that was your problem.

There are pre-compiled packages that, for Red Hat derived distributions (RHEL, Fedora, CentOS, SL), are distributed as RPM files. The package manager for those distributions, yum, run some scripts that verify that the package can be installed, will install dependent packages, and then install the package components in the correct places for you. Theses RPM files are (unless source code files) precompiled so you don't have to run make. They can also be uninstalled with yum. This is the preferred method of getting software for your system. Source packages that you have to configure and make / install yourself are either not available from your package repositories, or that have newer/older features that require a manual build/install.

You mention rpm -Uvh ... rpm file - using the rpm command is normally not recommended in current systems as it does not deal with missing dependencies nicely. The yum package manager is much better at that and is the recommended way to install package files in rpm format, or from available repositories such as epel, atrpms, or rpmforge.

Ok. Is this connected to the same network as your desktop?

Your conclusion is correct. If you aren't familiar with how makefiles work, you might want to do some reading on the subject. The short answer to how make install works is that there is a "target" in the make file called "install", and following that are directions of what to do, such as copying files from A to B, etc. There can also be associated target dependencies, such as "install_part1", "install_part2", etc. Example:

# sample Makefile
# Note that leading spaces in the lines below should be hard tabs
install_part1:
    cp dira/part1 /usr/local/bin

install_part2:
    cp dirb/part2.so dirb/part2.a /usr/local/lib

install: install_part1 install_part2

You might want to check on your DNS settings for the laptop then. From what you report as the system's behavior, the DNS server is either not finding the hosts, or is reporting incorrect IP addresses. Go back to the cmd.exe window and try this command:

nslookup www.xyzzy.com

where www.xyzzy.com is the web site address as I illustrated previously.

The make command always (or should always) generate the binary or other components in the local directory space. The "make install" command will, in the case of PF_RING userland tools and libraries, install those libraries, executables, configuration files, etc. into the /usr/local tree. At least, that's what it did on my system.

To install software on the system for everyone to use, it has to be done by root since the installation has to place files in locations that are only writable by root. You can install as a regular user, but you would have to configure the package (edit the userland Makefiles in the case of PF_RING) to install to the user's directory. However, in the case of the PF_RING drivers or kernel modules, those DO have to be installed by root since you are modifying the operating system.

So, the userland tools and libraries can be installed to a user's directory tree (/home/username) if you edit the makefiles to do so. The kernel mods and drivers have to be installed by root.

I hope this makes things a bit clearer.

Where is the router?

Say goodbye to your Vaio. Pull the hard drive, get an external USB carrier for the drive and a new laptop, then restore your data to the new system. You will have to reinstall your software first. Good luck.

P.S. DON'T get a new Vaio. Sony makes it very difficult to use non-branded external devices or other operating systems such as Linux. My wife had one that caused her nothing but grief. Now, you would have to pry her Mac out of her cold, dead fingers! Myself, I use Dell's for my laptops. Not bullet proof, but they do give good support and fast repairs.

It's sort of like joehms22 said, but it may not work using newlines alone. The printf() function is to stdout, which is buffered by default, and not output until flushed. A newline will not necessarily flush the output. So, do this instead:

#include<stdio.h>

main()
{
    printf("welcome to\n");
    fflush(stdout);
    fork();
    printf("DaniWeb Discussion\n");
    fflush(stdout);
}

Note that stderr is not buffered. All output to stderr is output immediately, so this will also work:

#include<stdio.h>

main()
{
    fprintf(stderr, "welcome to\n");
    fork();
    fprintf(stderr, "DaniWeb Discussion\n");
}

Clear your cache and cookies on Chrome and Firefox and try again. You might also want to try pinging the site from your laptop to see if you are able to access it - it could be that your firewall or other software is blocking it. Open a cmd.exe window and run the command: ping host.domain

Example: if the site is http://www.xyzzy.com/something, then execute the command ping [url]www.xyzzy.com[/url]

I don't know if you need the driver modules or not. If so, go into the drivers directory and execute make. Then you can install the .ko files that are created with insmod or modprobe. Also, go into the userland directory and execute make, and then as root "make install". That will install the libraries that your user applications will utilize, as well as other utilities such as tcpdump, etc. I think that the snort version to use these libraries has to be built separately, so go into userland/snort/daq-0.5 and execute ./configure and then make to get a set of libraries that snort can use. See all the various README files for more details.

At this point, that is as much as I can tell you. I haven't used these libraries and haven't determined what issues may arise in attempting to use them. Good luck.

According to the README file, you should uninstall the kernel patches. Try running "make uninstall" and see what happens. In any case, grub should let you boot to the previous kernel if necessary. As the README says, if you install the kernel patches on a system that doesn't need them, then you will see repeated packets when using the tools - not necessarily a "good thing"... :-)

First, read the README file in the top level:

This directory contains:

kernel/ Kernel related patches
userland/ User space code
userland/lib/ User space library used to manpulate PF_RING
userland/libpcap-XXX-ring/ Libpcap enhanced with PF_RING support
userland/examples/ P(acket)count application (use it for your tests)

See also:

- PF_RING and Snort
http://synfulpacket.blogspot.com/2006/11/pfring-and-snort.html
See the new daq library

- Advanced Packet Capturing Howto: PF_RING, NAPI and extended libpcap on Debian Sarge
http://bjou.homeunix.net/blog/2006/12/advanced-packet-capturing-howto-pf_ring-napi-and-extended-libpcap-on-debian-sarge/

NOTE
As of PF_RING 4.x you NO LONGER NEED to patch the linux kernel. If you are using
a patched kernel, please revert the patch otherwise you will capture the same
packet twice

------------
(C) Luca Deri 2004-10

The top level Makefile has to install target, although components do. Once you execute the make command without arguments, to install the libraries, go to the lib directory and as root or sudo execute the command "make install". Note that you do NOT want to install the kernel patches with this version, per the README file's instructions.

The sudo command allows regular users to run higher privilege operations. To enable it for a user account, you need to edit as root the file /etc/sudoers. Instructions on that can be found in the sudoers man page, and comments in the default /etc/sudoers file (lines that start with #) are also helpful.

Well, I didn't actually install it. I just verified that I could build it successfully. I didn't verify that there was no install target for PF_RING itself. Sorry if it confused you. The kernel modules and libraries could be manually installed if desired, or necessary... :-(

Well, if you were able to get it to install, and can use it, then I guess it worked! :-)

NEVER install a dead-switch on your customers' computers, no matter what!

1. It leaves you open for serious liability
2. It will cost you more than you want to recoup from your "deadbeat" customers
3. Well, I think that #1 and #2 are enough

If you don't think your customers will pay up on credit, then take ca$h or kind. FWIW, I'm in the same business.

Not enough detailed information to answer your question...

Ok. I think you need to configure your network router(s) then and how you do that depends upon the make/model. This is about as much help as I can give right now - sorry.

1. Go to this page: http://sourceforge.net/projects/ntop/files/PF_RING/
2. Click on the green "Download" button.
3. Go to directory where the PF_RING-4.6.0.tgz file was stored.
4. Execute the command "tar -zxvf PF_RING-4.6.0.tgz
5. Cd into the PF_RING-4.6.0 directory
6. Execute the command "make". You might get some warnings, but you should not get errors. If you do get errors, report them back here.
7. If #6 succeeded, then you can run "make install" as root, or if you are a sudoer, run "sudo make install".

Note that it should create 5 ethernet drivers and a couple of other kernel modules. Here is a list of the ones it built on my system:
./kernel/pf_ring.ko
./kernel/plugins/dummy_plugin.ko
./drivers/intel/e1000/e1000-8.0.25/src/e1000.ko
./drivers/intel/ixgbe/ixgbe-3.1.15-FlowDirector-NoTNAPI/src/ixgbe.ko
./drivers/intel/igb/igb-2.4.12/src/igb.ko
./drivers/intel/e1000e/e1000e-1.2.17/src/e1000e.ko
./drivers/neterion/vxge/vxge.ko

You took from the ntop page is it? Then you follow the user guide is it? Did you run as root or normal user? Thank you.

I build all this stuff as regular user, then I install as root, or using sudo.

Ok. Just finished building top level of the SVN version and got some errors:

/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c: In function ‘ixgbe_set_eeprom’:               
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:971: error: storage size of ‘perfect_cmd’ isn’t known                                                                                                                                      
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1035: error: invalid application of ‘sizeof’ to incomplete type ‘struct ethtool_rx_ntuple’                                                                                                 
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1039: error: dereferencing pointer to incomplete type                                                                                                                                      
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1039: error: ‘ETHTOOL_RXNTUPLE_ACTION_DROP’ undeclared (first use in this function)                                                                                                        
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1039: error: (Each undeclared identifier is reported only once                                                                                                                             
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1039: error: for each function it appears in.)
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1041: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1044: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1048: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1051: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1054: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1057: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1062: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1063: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1067: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1068: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1072: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1073: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1077: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1078: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1082: error: dereferencing pointer to incomplete type
/home/bboyle/Downloads/Network_Tools/PF_RING/drivers/DNA/ixgbe-3.3.9-DNA/src/ixgbe_ethtool.c:1083: error: dereferencing pointer to incomplete type

So, I have to suggest that you use the stable version instead.

Ok. Since it is building a kernel module, you need to install the kernel-headers and kernel-devel packages on your system. Did you do that first?