df -h

[df-h]

OpenSSL + GOST-engine

Debian 9:

echo “deb http://deb.debian.org/debian unstable main“ >> /etc/apt/sources.list

apt update

apt-get install openssl libssl-dev -t unstable -y

git clone https://github.com/gost-engine/engine

cd engine/

cmake . -DOPENSSL_ENGINES_DIR=`openssl version -e | awk '{print $2}' | sed 's/\"//g'`

make && make install

apt install curl

[df-h]

DisplayIPCam on Raspberry Pi

root@cam0:~# aptitude install fbi omxplayer screen

user@cam0:~# cat /etc/init.d/displaycamera

#!/bin/bash ### BEGIN INIT INFO # Provides: omxplayer # Required-Start: # Required-Stop: # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Displays camera feeds for monitoring # Description: ### END INIT INFO

# Camera Feeds & Positions top_left="screen -dmS top_left sh -c 'omxplayer -o hdmi --timeout 15 -r -s -n -1 --avdict rtsp_transport:tcp --live rtsp://admin:admin@`cat ~user/playIp`:554/h264 '";

# Camera Feed Names # (variable names from above, separated by a space) camera_feeds=(top_left)

#---- There should be no need to edit anything below this line ----

# Start displaying camera feeds case "$1" in start) for i in "${camera_feeds[@]}" do eval eval '$'$i done echo "Camera Display Started" ;;

# Stop displaying camera feeds stop) sudo killall omxplayer.bin echo "Camera Display Ended" ;;

# Restart any camera feeds that have died repair) for i in "${camera_feeds[@]}" do if !(screen -list | grep -q $i) then eval eval '$'$i echo "$i is now running" fi done ;;

*) echo "Usage: /etc/init.d/displaycamera {start|stop|repair}" exit 1

;; esac user@cam0:~#

user@cam0:~# cat ~user/playIp 127.0.0.1

user@cam0:~# cat ~user/wrapper.sh #!/bin/bash

start="~user/wrapper.sh"

/usr/bin/pkill -9 fbi fbi -T 1 -a -noverbose ~user/fullhd.jpg fbi -T 2 -a -noverbose ~user/fullhd.jpg

/usr/bin/pkill -9 omxplayer.bi[n] /etc/init.d/displaycamera start

sleep 10

PID=$(ps ax | grep omxplayer.bi[n] | awk '{print $1}')

while [ $PID ];    do      sleep 5     echo "PID = $PID"      PID=$(ps ax | grep omxplayer.bi[n] | awk '{print $1}')    done

exec $start user@cam0:~#

user@cam0:~# crontab -l @reboot ~user/wrapper.sh

[df-h]

rm zero size files

 find . -name "zerosizefilename" -size 0 -exec rm {} \;

[df-h]

ipv6 over ipv4

opensuse + debian

opensuse:/ # cat /etc/sysconfig/network/ifcfg-tun1 STARTMODE='onboot' BOOTPROTO='static' TUNNEL='sit' TUNNEL_LOCAL_IPADDR='192.168.1.3' TUNNEL_REMOTE_IPADDR='192.168.1.2' IPADDR='1011:1aa0:4000:402:2::2/80' TUNNEL_TTL='64'

debian:/# grep -A 10 'tun1' /etc/network/interfaces auto tun1 iface tun1 inet6 v4tunnel         address 1011:1aa0:4000:402:2::1         netmask 80         ttl 64         endpoint 192.168.1.3         up ip link set mtu 1480 dev tun1

[df-h]

nat forward ipv6

server:~# echo "1"> /proc/sys/net/ipv6/conf/all/forwarding

iptables:

iptables -I OUTPUT -p ipv6 -j ACCEPT

iptables -I INPUT  -p ipv6 -j ACCEPT

ip6tables

server:~# cat ~/ip6tables.bak # Generated by ip6tables-save *filter :INPUT DROP [0:0] :FORWARD DROP [7:420] :OUTPUT DROP [0:0] -A INPUT -p ipv6-icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i tun1 -j ACCEPT -A INPUT -m rt --rt-type 0 -j DROP -A INPUT -s fe80::/10 -j ACCEPT -A INPUT -s ff00::/8 -j ACCEPT -A FORWARD -p ipv6-icmp -j ACCEPT -A FORWARD -m rt --rt-type 0 -j DROP -A FORWARD -s ::/48 -i tun1 -o eth0 -m state --state NEW -j ACCEPT -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -p ipv6-icmp -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o tun1 -j ACCEPT -A OUTPUT -m rt --rt-type 0 -j DROP -A OUTPUT -s fe80::/10 -j ACCEPT -A OUTPUT -s ff00::/8 -j ACCEPT COMMIT #

[df-h]

mpls on openbsd

$ cat /etc/ldpd.conf

fast="2" # global configuration router-id 10.0.242.2 # lfib-update no distribution independent retention liberal advertisement unsolicited interface vlan902 {         hello-interval $fast }

$ cat /etc/hostname.vlan902 inet 10.0.242.2 255.255.255.252 NONE vlan 902 vlandev em0 mpls description "MPLS Vlan" up -inet6

# cat /etc/bgpd.conf # BGP config AS 4 router-id 10.0.242.2 listen on 10.0.242.2 connect-retry 10 holdtime 15 holdtime min 15 nexthop qualify via default route-collector no fib-update yes allow from any inet prefixlen 0 - 32 allow from any prefix 0.0.0.0/0 #neighbors config neighbor 10.0.242.1 {         remote-as       1         descr           R30         local-address   10.0.242.2         announce IPv4 vpn         announce refresh yes         announce capabilities yes } #VRF config rdomain 1 {         descr "rdomain 1"         rd 1:103         import-target rt 1:103         export-target rt 1:103         depend on mpe1         network 10.0.248.5/32 }

$ cat /etc/hostname.mpe1 rdomain 1 mplslabel 17 inet 10.0.248.1 255.255.255.255 NONE up

$ cat /etc/hostname.lo1  rdomain 1 inet 10.0.248.5 255.255.255.255 NONE up

$ route -n -T1 show             Routing tables Internet: Destination        Gateway            Flags   Refs      Use   Mtu  Prio Iface 8.8.8.1/32         10.0.242.1         UGT        0        5     -    48 mpe1 8.8.8.2/32         10.0.242.1         UGT        0        0     -    48 mpe1 10.0.248.5         10.0.248.5         UH         0        0 33200     4 lo1

$ ping -V1 -I 10.0.248.5 8.8.8.1 PING 8.8.8.1 (8.8.8.1): 56 data bytes 64 bytes from 8.8.8.1: icmp_seq=0 ttl=254 time=0.893 ms 64 bytes from 8.8.8.1: icmp_seq=1 ttl=254 time=0.815 ms

[df-h]

cisco termination of the connection

read state of tcp connection

bash-3.00$ snmpwalk -v 2c -c community_ro cisco_host 1.3.6.1.2.1.6.13.1.1

TCP-MIB::tcpConnState.172.16.18.21.179.192.168.18.22.21507 = INTEGER: established(5)                                          

make clean session

bash-3.00$ snmpset -v 2c -c community_rw cisco_host TCP-MIB::tcpConnState.172.16.18.21.179.192.168.18.22.21507 i 12

TCP-MIB::tcpConnState.172.16.18.21.179.192.168.18.22.21507 = INTEGER: deleteTCB(12)

http://goo.gl/8GyJ

[df-h]

cricket config for "Acme Packet Net-Net 4000 Series SBC"

less ~cricket/cricket-config/sbc/Defaults

Target --default--         dataDir                 = %auto-base%/../cricket-data/%auto-target-path%         rrd-datafile            = %dataDir%/%auto-target-name%.rrd         server  = ""         snmp-host       = %server%         target-type     = undef         directory-desc = "Acme Packet Net-Net 4000 Series SBC" OID     apSysCPUUtil                    1.3.6.1.4.1.9148.3.2.1.1.1.0 OID     apSysMemoryUtil                 1.3.6.1.4.1.9148.3.2.1.1.2.0 OID     apSysHealthScore                1.3.6.1.4.1.9148.3.2.1.1.3.0 OID     MonTemperatureStatusEntry       1.3.6.1.4.1.9148.3.3.1.3.1.1.4.1 OID     apSysGlobalConSess              1.3.6.1.4.1.9148.3.2.1.1.5.0 OID     apSysGlobalCPS                  1.3.6.1.4.1.9148.3.2.1.1.6.0 OID     StatsSessionAgentHostname       1.3.6.1.4.1.9148.3.2.1.2.1.1.2 OID     StatsCurrentActiveSessionsInbound       1.3.6.1.4.1.9148.3.2.1.2.1.1.4 OID     StatsCurrentActiveSessionsOutbound      1.3.6.1.4.1.9148.3.2.1.2.1.1.6 OID     StatsCurrentSessionRateInbound          1.3.6.1.4.1.9148.3.2.1.2.1.1.5 OID     StatsCurrentSessionRateOutbound         1.3.6.1.4.1.9148.3.2.1.2.1.1.7 OID     StatsTotalSessionsInbound       1.3.6.1.4.1.9148.3.2.1.2.1.1.8 OID     StatsTotalSessionsOutbound      1.3.6.1.4.1.9148.3.2.1.2.1.1.12 OID     StatsPeriodHighInbound          1.3.6.1.4.1.9148.3.2.1.2.1.1.10 OID     StatsPeriodHighOutbound         1.3.6.1.4.1.9148.3.2.1.2.1.1.14 OID     StatsAverageRateInbound         1.3.6.1.4.1.9148.3.2.1.2.1.1.11 OID     StatsAverageRateOutbound        1.3.6.1.4.1.9148.3.2.1.2.1.1.15 OID     StatsMaxBurstRate               1.3.6.1.4.1.9148.3.2.1.2.1.1.16 OID     StatsPeriodASR                  1.3.6.1.4.1.9148.3.2.1.2.1.1.19 OID     StatsMaxLatency                 1.3.6.1.4.1.9148.3.2.1.2.1.1.21 OID     StatsAverageLatency             1.3.6.1.4.1.9148.3.2.1.2.1.1.20 map agent-hostname     base-oid    =       StatsSessionAgentHostname     match       =       %agent% datasource --default--         rrd-ds-type             =  GAUGE datasource apSysCPUUtil         ds-source       =       snmp://%snmp%/apSysCPUUtil         rrd-min         =       0 datasource apSysMemoryUtil         ds-source       =       snmp://%snmp%/apSysMemoryUtil         rrd-min         =       0 datasource apSysHealthScore         ds-source       =       snmp://%snmp%/apSysHealthScore         rrd-min         =       0 datasource MonTemperatureStatusEntry         ds-source       =       snmp://%snmp%/MonTemperatureStatusEntry         rrd-min         =       0 datasource apSysGlobalConSess         ds-source       =       snmp://%snmp%/apSysGlobalConSess         rrd-min         =       0 datasource apSysGlobalCPS         ds-source       =       snmp://%snmp%/apSysGlobalCPS         rrd-min         =       0 datasource StatsCurrentActiveSessionsInbound         ds-source       =       snmp://%snmp%/StatsCurrentActiveSessionsInbound.%inst%         rrd-min         =       0 datasource StatsCurrentActiveSessionsOutbound         ds-source       =       snmp://%snmp%/StatsCurrentActiveSessionsOutbound.%inst%         rrd-min         =       0 datasource StatsCurrentSessionRateInbound         ds-source       =       snmp://%snmp%/StatsCurrentSessionRateInbound.%inst%         rrd-min         =       0 datasource StatsCurrentSessionRateOutbound         ds-source       =       snmp://%snmp%/StatsCurrentSessionRateOutbound.%inst%         rrd-min         =       0

datasource StatsTotalSessionsInbound         ds-source       =       snmp://%snmp%/StatsTotalSessionsInbound.%inst%         rrd-min         =       0 datasource StatsTotalSessionsOutbound         ds-source       =       snmp://%snmp%/StatsTotalSessionsOutbound.%inst%         rrd-min         =       0 datasource StatsPeriodHighInbound         ds-source       =       snmp://%snmp%/StatsPeriodHighInbound.%inst%         rrd-min         =       0 datasource StatsPeriodHighOutbound         ds-source       =       snmp://%snmp%/StatsPeriodHighOutbound.%inst%         rrd-min         =       0 datasource StatsAverageRateInbound         ds-source       =       snmp://%snmp%/StatsAverageRateInbound.%inst%         rrd-min         =       0 datasource StatsAverageRateOutbound         ds-source       =       snmp://%snmp%/StatsAverageRateOutbound.%inst%         rrd-min         =       0 datasource StatsMaxBurstRate         ds-source       =       snmp://%snmp%/StatsMaxBurstRate.%inst%         rrd-min         =       0 datasource StatsPeriodASR         ds-source       =       snmp://%snmp%/StatsPeriodASR.%inst%         rrd-min         =       0 datasource StatsMaxLatency         ds-source       =       snmp://%snmp%/StatsMaxLatency.%inst% datasource StatsAverageLatency         ds-source       =       snmp://%snmp%/StatsAverageLatency.%inst%

targettype system         ds = "apSysCPUUtil, apSysMemoryUtil, apSysHealthScore, MonTemperatureStatusEntry, apSysGlobalConSess, apSysGlobalCPS"         view = "Hardware: apSysCPUUtil apSysMemoryUtil apSysHealthScore MonTemperatureStatusEntry,                 Software: apSysGlobalConSess apSysGlobalCPS" targettype voip-agent         ds = "StatsCurrentActiveSessionsInbound, StatsCurrentActiveSessionsOutbound, StatsCurrentSessionRateInbound, StatsCurre ntSessionRateOutbound, StatsTotalSessionsInbound, StatsTotalSessionsOutbound, StatsPeriodHighInbound, StatsPeriodHighOutbound, StatsAverageRateInbound, StatsAverageRateOutbound, StatsMaxBurstRate,StatsPeriodASR, StatsMaxLatency, StatsAverageLatency"         view = "Current Sessions: StatsCurrentActiveSessionsInbound StatsCurrentActiveSessionsOutbound,                 Total Sessions: StatsTotalSessionsInbound StatsTotalSessionsOutbound,                 Concurrent Sessions: StatsPeriodHighInbound StatsPeriodHighOutbound,                 Rate Sessions: StatsAverageRateInbound StatsAverageRateOutbound StatsMaxBurstRate StatsCurrentSessionRateInboun d StatsCurrentSessionRateOutbound,                 ASR: StatsPeriodASR,                 Latency: StatsMaxLatency StatsAverageLatency"

graph apSysCPUUtil         draw-as  = LINE2         color   = red         units = "percent"         y-axis  = "Percent utilization"         legend  = "Percentage of CPU utilization" graph apSysMemoryUtil         color   = dark-green         units = "percent"         y-axis  = "Percent utilization"         legend  = "Percentage of memory utilization" graph apSysHealthScore         color   = blue         units = "percent"         y-axis  = "Percent utilization"         legend  = "System health percentage." graph MonTemperatureStatusEntry         color   = brown         units = "C"         y-axis  = "temperature"         legend  = "The current temperature of the main board PROM in Celsius" graph StatsCurrentActiveSessionsInbound         color   = blue         units = "num"         y-axis  = "sessions"         legend  = "Number of current active inbound sessions" graph StatsCurrentActiveSessionsOutbound         color   = red         units = "num"         y-axis  = "sessions"         legend  = "Number of current active outbound sessions" graph StatsCurrentSessionRateInbound         color   = orange         units = "CPS"         y-axis  = "sessions"         legend  = "Current inbound session rate"

graph StatsCurrentSessionRateOutbound         color   = red         units = "CPS"         y-axis  = "sessions"         legend  = "Current outbound session rate" graph StatsPeriodASR         color   = purply         units = "percent"         y-axis  = "The answer-to-seizure ratio"         legend  = "The answer-to-seizure ratio, expressed as a percentage" graph StatsMaxLatency         color   = red         units = "ms"         y-axis  = "latency"         legend  = "Maximum observed one-way signalling latency during the 100 second sliding window period." graph StatsAverageLatency         color   = dark-green         units = "ms"         y-axis  = "latency"         legend  = "Average observed one-way signalling latency during the period" graph StatsTotalSessionsInbound         color   = blue         units = "num"         y-axis  = "sessions"         legend  = "Total number of inbound sessions during the 100 second slidingwindow period" graph StatsTotalSessionsOutbound         color   = red         units = "num"         y-axis  = "sessions"         legend  = "Total number of outbound sessions during the 100 second slidingwindow period" graph StatsPeriodHighInbound         color   = dark-green         draw-as = AREA         units = "num"         y-axis  = "sessions"         legend  = "Highest number of concurrent inbound sessions during the period"

graph StatsPeriodHighOutbound         color   = blue         units = "num"         y-axis  = "sessions"         legend  = "Highest number of concurrent outbound sessions during the 100 second sliding window period" graph StatsAverageRateInbound         color   = dark-green         draw-as = AREA         units = "CPS"         y-axis  = "rate of sessions"         legend  = "Average rate of inbound sessions during the 100 second sliding window period in CPS" graph StatsAverageRateOutbound         color   = blue         units = "CPS"         y-axis  = "rate of sessions"         legend  = "Average rate of outbound sessions during the 100 second sliding window period in CPS" graph StatsMaxBurstRate #       draw-as        = LINE2         color   = black         units = "CPS"         y-axis  = "rate of sessions"         legend  = "Maximum burst rate of trafficmeasured during the 100 second sliding window period (combined inbound and outb ound)" graph apSysGlobalConSess         color   = dark-green         draw-as = AREA         units = "num"         y-axis  = "number"         legend  = "Total instant number of global concurrent sessions at the moment" graph apSysGlobalCPS         draw-as        = LINE2         color   = blue         units = "num"         y-axis  = "number"         legend  = "Number of global calls per second"

less ~cricket/cricket-config/sbc/device/Defaults

target  --default--         server  = "ip or hostname"         snmp-community  = community         directory-desc  = 'short descr'

less ~cricket/cricket-config/sbc/device/sys

target --default--         inst    = undef         target system         target-type = system         short-desc = "system stat"

less ~cricket/cricket-config/sbc/device/targets

target --default--         target-type     = voip-agent         inst            = map(agent-hostname) target 192.168.0.1         agent = 192.168.0.1 target voice.test.org.         agent = voice.test.org

for more information visit http://cricket.sourceforge.net

[df-h]

make debian install usb flashlinux

1. cfdisk /dev/sdb - make new boot partition (exampl. /dev/sdb1 ~ 1Gb)

2. mkfs.vfat /dev/sdb1

3. syslinux /dev/sdb1

4. install-mbr /dev/sdb

5. mount /dev/sdb1 /mnt/flash

cd /mnt/flash

wget -c http://ftp.nl.debian.org/debian/dists/lenny/main/installer-i386/current/images/hd-media/initrd.gz

wget -c http://ftp.nl.debian.org/debian/dists/lenny/main/installer-i386/current/images/hd-media/vmlinuz

wget -c http://cdimage.debian.org/debian-cd/5.0.5/i386/iso-cd/debian-505-i386-CD-1.iso

echo "default vmlinuz append initrd=initrd.gz" > ./syslinux.cfg

6. umount /dev/sdb1

[df-h]

set tos

iptables -t mangle -A POSTROUTING -o eth1.102 -j TOS --set-tos 0xA0

set tos 0xA0 on vlan 102

[df-h]

eject for new mail

#!/bin/sh for i in `seq 1 3`;do eject;eject -t;sleep 5; done eject

[df-h]

put cisco conf in file

shconf.sh:

#!/usr/local/bin/expect -f set timeout 30 spawn telnet [lindex $argv 0] match_max 100000000 expect ogin {send login\r} sleep 1 expect assword {send pass\r} sleep 1 expect ">" send "terminal length 0\r" sleep 3 expect ">" send "show configuration\r" sleep 1 expect ">" set fid [open [lindex $argv 0].log w+]; set tempvar1 $expect_out(buffer); puts "this is tempvar \n $tempvar1"; puts $fid $tempvar1 ; expect eof

./shconf.sh cisco_1

[df-h]

telnet cisco login

sh_int.sh:

#!/usr/local/bin/expect -f spawn telnet [lindex $argv 0] expect ogin {send login\r} sleep 1 expect assword {send password\r} sleep 1 send "terminal length 0\r"

#if juniper

#send "set cli screen-length 0\r"

send "show interface [lindex $argv 1]\r"

send "exit\r" expect eof

./sh_int.sh cisco_1 gi1/1.5

[df-h]

ban sshd invalid user

tail -10000 /var/log/messages | egrep sshd | egrep Invalid | awk '{print $10}' | sort -n | uniq -c | sort -n | awk '{print "iptables -I INPUT 1 -s "$2" -j DROP"}' | sh

[df-h]

mysql check

#!/bin/sh

/usr/local/etc/rc.d/mysql-server stop; /usr/local/bin/myisamchk -r --sort-index -O sort_buffer_size=16M /var/db/mysql/*/*.MYI; /usr/local/etc/rc.d/mysql-server start;

[df-h]

mcrypt

#!/bin/sh

cd /home/user/passs mcrypt -d ./passw.nc cat ./passw rm ./passw >/dev/null 2>&1

[df-h]

nat forward

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -I FORWARD 1 -s 10.0.0.0/8 -j ACCEPT

iptables -I FORWARD 2 -d 10.0.0.0/8 -j ACCEPT

iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -j MASQUERADE