Archive for February, 2008

Using Ettercap and Ethereal to Create MITM Attack on Switched Network

Posted in Linux, Network Security, Tutorials/Whitepapers, Wireless with tags on February 7, 2008 by triz

This is for educational purposes only!  Do not attempt this in any malicous way… or else.  I set this lab in a controlled environment using a Windows file server, Windows XP desktop, and my laptop runing Knoppix live CD.  In this lab I use Ettercap only for arp poison and spoofing, and I use Ethereal for the sniffing.  First of all, Read more »

Install MySQL Community 5.0 for use with Groundworks Foundation

Posted in Linux, Tutorials/Whitepapers with tags on February 7, 2008 by triz

Download MySQL server and client 5.0 from http://dev.mysql.com/downloads/mysql/5.0.html  I already had 4.0 MySQL installed, but did not have any database, so I removed  the 4.0 versions of server and client with rpm tool to install latest version. 

First check to see what is installed
#rpm -qa | grep -i mysql
qt3-mysql-3.3.1-35.11
perl-DBD-mysql-2.9003-22.1
mysql-shared-4.0.18-32.1
python-mysql-0.9.3b2-90.1 Read more »

Script and Procedure to Upgrade NIC Speed on Suse 9

Posted in Linux, Tutorials/Whitepapers with tags on February 1, 2008 by triz

After a few trial and error attempts to upgrade the NIC and port speed on several Linux servers running Suse Linux Enterprise Server 9 I have documented the procedure I follow to complete this successfully.  First of all, the port on the switch needs to be set at the speed that you want to configure the NIC at.  In this case, I’m am setting all of my servers to 1000/Full duplex. Read more »

TCPDUMP to Troubleshoot Oracle Cluster Issue

Posted in Linux, Tutorials/Whitepapers with tags on February 1, 2008 by triz

I have two Oracle servers that were clustered, however we broke the cluster in order to move one node at a time to a new comm room.  Now that we have have both nodes racked together again, we are having problems starting CRS to get the cluster to work again.  Node A is the main production machine and it appears to be able to see node B, however node B is not “seeing” node A.  This doc will focus on the sniffing areas.

Document when ethernet cards are the interconnect and ethernet cables on both machines.  On mine both nodes have the interconnect on eth1 and the network is on eth4. 

On node B run #tcpdump -i eth1 -p -vvv -XXX -w bnodeICsniff.pcap

On node B run #tcpdump -i eth4 -p -vvv -XXX host node A -w bnodeIPsniff.pcap

On node A run #tcpdump -i eth1 -p -vvv -XXX -w anodeICsniff.pcap

Once you or the Oracle DBA if finished attempting to build the cluster connection, you will have three files that can be pulled into Ethereal or Wireshark to dig thru and hopefully find an answer.