None of the Above

Merry christmas to me!

nospam@example.com (ra) — 2009-12-27T22:02:00Z

So not only did I get a Motorola CLIQ this month, but I also got a new laptop! FINALLY! It does not exactly meet my stated criteria, but it's pretty damn close! (holy bang abuse, batman!!!)

I got a Dell Studio 14z. It has a 1600x900 LED backlit screen, a 2.53 GHz Core 2 Duo and 3 GB DDR3 ram. It also weighs about half what my old laptop did (OK, not really, but including the power adapter it might be close) while easily besting it in processing power, noise, etc. So far I'm very happy with it.

INsane[d]!

nospam@example.com (ra) — 2009-12-20T20:28:00Z

I share my scanner on the network using sane but after reloading my server I found it was not being seen from the network even though it appeared to be working locally.

I saw this kind of stuff in the logs:

Dec 19 15:56:19 localhost saned[32422]: saned (AF-indep+IPv6) from sane-backends 1.0.19 starting up
Dec 19 15:56:17 localhost saned[32422]: check_host: access by remote host: 10.0.0.55
Dec 19 15:56:17 localhost saned[32422]: init: access granted to saned-user@10.0.0.55
Dec 19 15:56:19 localhost saned[32422]: saned exiting

I increased the verbosity but it wasn't any more helpfup:

[saned] check_host: access granted from IP address 10.0.0.55 (in subnet 10.0.0.0/24)
[saned] init: access granted
[saned] init: access granted to saned-user@::ffff:10.0.0.55
[saned] process_request: waiting for request
[saned] process_request: got request 1
[saned] process_request: waiting for request
[saned] process_request: got request 10
[saned] bailing out, waiting for children...
[saned] bail_out: all children exited

After much troubleshooting I realized that while local access worked file, saned was not working when running as user saned, but worked fine if run as root.

Obviously this looked like a permission problem, and it was. I checked the perms on the scanner device, /dev/sg2 and confirmed that saned had no access. But why? I checked the udev rules and found a rule that would give permissions to the scanner group, of which saned is a member. But this rule had set the permissions.

Then I realized that since I booted up with the scanner attached, and then installed sane, the new udev rule would not have had any effect until the device was replugged or the system was rebooted. I restarted udev and un/re-plugged the scanner and then saned worked fine again!

you're being watched

nospam@example.com (ra) — 2009-12-14T01:28:00Z

I've been experimenting with more and more IP cameras.

Some quick notes on image/video/audio URL's for the cameras I currently have:

ABS 311M
mjpeg:
http://camera_address/mjpg/video.mjpg?resolution=vga

Trendnet 312W
jpeg:
http://username:password@camera_address/cgi/jpg/image.cgi

mjpeg:
http://username:password@camera_address/cgi/mjpg/mjpg.cgi

pcm (amr?) audio:
http://username:password@camera_address/cgi/audio/audio.cgi

CLIQy CLIQy CLIQy

nospam@example.com (ra) — 2009-12-08T17:21:00Z

Yes, Virginia; I DID finally get a MOTOCLIQ!

And yes, I love it! I will have to withhold further comment until later because right now I'm too busy playing with my phone!

notsmartenoughphone

nospam@example.com (ra) — 2009-09-29T12:30:04Z

I still have yet to own a smartphone. I carry a phone and a separate PDA, although the latter is kept in my wallet-case so I'm not really burdened by carrying an "extra" device or anything. But it does feel like a bit like I'm living in the past. When I pull out my PDA it seems like people are thinking "wow... that's quaint".

It wasn't until my first exposure to Android that I actually had any desire for a smartphone. I had finally found something that could truly replace both my phone and my Palm TX and give me more functionality rather than amounting to a frustrating compromise. It certainly doesn't hurt that's it's Android based and largely open-sourced either. So I am definitely decided on the Android platform, there's just one problem. I need to find some sexy Android powered hardware. And that's the problem.

Until now, that is. I will have to wait to see and touch it in person of course but I think the Motorola CLIQ could be my first smartphone. It runs Android, I love the look of it, I love the physical keyboard and I've had a lot of Motorola phones over the years and for the most part have been very pleased with them. The G1 was just too clunky looking for me, and the HTC Magic lacked the physical keyboard and I just didn't care for how it felt in my hand. But the Cliq... appears to be something entirely different. I can't wait!

echo loop

nospam@example.com (ra) — 2009-04-12T13:45:00Z

If you're lucky enough to be able to call two different Asterisk servers from one phone, a really fun thing to do is to call the echo test on one Asterisk server, then conference in a new call to the echo test on a different Asterisk server, creating an echo loop.

The IP phone on my desk is connected to two Asterisk servers and it made my day when I realized I could do this.

laptop unexistium

nospam@example.com (ra) — 2009-04-09T21:18:00Z

I've been shopping for a new laptop and it's becoming a thoroughly frustrating experience.

I know what I want... but NO one makes it. I'm considering either purchasing a 15" laptop that would be my primary workstation at home and away, or buying a 13" small, convenient, portable machine that I would use mostly on the go. I would even go for a 14" if I could only find one with the right features, even though it's not what I really want.

This is my requirements list for each size laptop:

15" LED backlit WUXGA (1920x1200) screen
Intel Core 2 Duo 2.4+Ghz
DDR3 ram

14" LED backlit WSXGA+ (1680x1050) screen
Intel Core 2 Duo 2.2+Ghz
DDR3 ram

13" LED backlit WXGA+ (1440x900) screen
Intel Core 2 Duo 2.0+Ghz
DDR3 ram

I don't think I'm really being that picky. My budget is at most about $2500 for my new laptop, so I am willing to pay for something that meets my criteria. Plus there are all kinds of other components not listed on which I'm willing to be flexible. Alas every notebook on the market falls short. I don't know what to do, so for now I'm just waiting for a new product to come along and impress me.

video killed

nospam@example.com (ra) — 2009-03-18T00:38:00Z

...the radio star. Yeah. Anyway, I have a linksys WVC54GCA Network/IP camera that I've been playing around with. This camera is convenient because it's wireless so I can put it almost anywhere I want... or I could if the fucking piece of shit didn't lose it's wireless connection every ~24 hours and require a reset to get back online. So I have to run cat5 to the fucker instead. And it doesn't support PoE. Annoying, but it seems to work OK with power and UTP stuck up it's ass. Whatever. Remind me not to buy linksys again.

I've also been playing around with ZoneMinder and trying to get it grabbing video from the camera. That worked fine at 320x240 (jpeg) but not at 640x480 (jpeg or mjpeg). I finally figured out that it was a memory allocation problem. Even though I had followed a tip I found somewhere on upping the limit to 134217728, apparently that wasn't enough to grab high res from the camera. Finally I found this tip and I raised the limit to 268424446. Now it works fine at 640x480.

The most difficult part of the process was finding the URL's for grabbing video/stills directly. Through googling and experimentation this is what I came up with:

Linksys WVC54GCA - firmware 1.00r24

320x240 jpeg:
http://camera_ip_address/img/snapshot.cgi

640x480 jpeg:
http://camera_ip_address/img/snapshot.cgi?a
(I first tried ?res=640x480, which worked, but then I discovered that passing any argument at all gives you the larger jpeg)

640x480 mjpeg:
http://camera_ip_address/img/mjpeg.jpg
http://camera_ip_address/img/mjpeg.cgi
http://camera_ip_address/img/video.mjpeg
(I don't know whether there is any difference between these. I didn't notice any.)

640x680 mpeg:
http://camera_ip_address/img/video.asf
(VLC 0.9.4 plays this perfectly, including audio)

secret downtime

nospam@example.com (ra) — 2009-03-10T00:44:00Z

Why is unannounced scheduled maintenance so ridiculously fucking common these days?

I tried to login to Citibank's website just now to pay my bill. No go. I get some random "General Error" with an even more vague definition of what is (or isn't) happening when I try to log in. Last time something like this happened I told them about it after the fact and they denied that there had been any problem, so this time I called them up right away. I'm told that they might be doing scheduled maintenance until 03:00, but they don't know whether they are doing maintenance tonight or not. OK...... They can however confirm that if they are indeed doing maintenance, I will not be able to login until it is complete. Hmmm... homepage says nothing about maintenance, neither does the error message. Finally, they suggest I try to reset my password. If there is a chance you're doing maintenance now, is this really an ideal time to fuck around with resetting my password?? Morons.

Dear Citibank: I made the following just for you. Please feel free to copy and paste it to the top of your website as appropriate:

------------
WE'RE BUSY DOING PREVENTATIVE DEVASTATION RIGHT NOW. FEEL FREE TO RESET YOUR PASSWORD IF YOU CAN'T LOGIN, BUT KEEP IN MIND THAT IT'S NOT GOING TO FUCKING WORK AT ALL UNTIL WE'RE DONE.

LOVE,
CITIBANK
------------

openvpn routing

nospam@example.com (ra) — 2009-02-16T12:21:17Z

I've recently started using OpenVPN's subnet topology. This requires OpenVPN 2.1 on both ends of the tunnel, but allows for one IP per client instead of a /30 block and works on all platforms, unlike the old (and now depricated) p2p topology.

EDIT: I should note that while topology subnet works with all platforms and I have tested with Linux, Mac and Windows clients; I have only tested topology subnet and the routing solution below on OpenVPN servers running on Linux.

I quickly ran into a snag with the subnet topology, however. The routes in my server-side OpenVPN config file no longer got created when OpenVPN was started, so networks behind connecting clients were unrouteable. I checked the logs and found the following messages from when OpenVPN started:

OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
OpenVPN ROUTE: failed to parse/resolve route for host/network ...

If I changed back to topology net30, everything worked fine with the config as is, so the problem was definitely specific to the subnet topology. Googling led me to several unanswered queries and finally one solution:
http://openvpn.net/archive/openvpn-users/2007-08/msg00152.html

As the errors above indicate, you need to specify a gateway in the route command in the OpenVPN config file when using the subnet topology. But what should the gateway be? The person in the linked post chooses the obvious solution, the VPN IP of the client behind which the remote network resides. That works, but what if I don't have a specific IP set for that client? From the system routing table you really only have to get traffic destined for the remote network routed to the VPN adapter, because OpenVPN has it's own routing table and will take care of the rest. Therefore, simply using the VPN IP of the OpenVPN server as the gateway accomplishes this, and seems to me to be the best solution.

OpenVPN server config snippet:

# Configure server mode and supply a VPN subnet
# for OpenVPN to draw client addresses from.
# The server will take 10.8.0.1 for itself,
server 10.0.8.0 255.255.255.0

# ...if a connecting client has a private
# subnet behind it that should also have VPN access,
# use the subdirectory "ccd" for client-specific
# configuration files and the route command to
# specify the specific IP(s) or connected networks.

# route used with net30 topology
route 10.0.55.0 255.255.255.0

# route used with subnet topology
route 10.0.55.0 255.255.255.0 10.0.8.1

More configuration detail after the break...
Continue reading "openvpn routing"

fruity networking

nospam@example.com (ra) — 2009-01-19T17:58:00Z

Although my personal exposure to Apple products has been somewhat limited (mostly an originally blueberry iMac running OS 10.3 that I play around with... seriously), I have plenty of experience helping other people with their Macs or Apple gear. The times I've spent with Apple desktops and laptops has been enjoyable, but as for Apple networking equipment (Airport express, Airport Extreme, etc) i would have to rate these experiences at the opposite end of the pleasure spectrum. Somewhere near "pound my bloody head on the desk over and over".

Specifically, I would like to know what fruit-loop at Apple decided that CLI and web-interfaces were too passé, so they needed a closed configuration interface that requires a binary application running on a Mac or Windows computer to do anything at all with the device*. If they were trying to say "Dear users of Linux and other lesser OS's: FUCK YOU", well I got the message. Thanks. The last general networked device I encountered that was so retarded that it's main configuration method was proprietary software running on another device was a stupid print server.... from NINETEEN FUCKING NINETY-FIVE. However, at least that device could still be mostly configured using Telnet!! Not so for POS Apple networking gear.

Yesterday I discovered that the Apple Airport Extreme wireless router does not support static routes. Seriously, even if this was a seldom used feature for most users, how fucking hard is it to include it when you're putting together a router anyway. Besides which I can't even remember the last time I encountered a POS off-the-shelf Linksys or whatever router that didn't have static routes. So again, Apple is apparently competing with low-end networking gear from the 1990's??

Here's another added bonus: changing anything as trivial as a firewall rule reboots the router. Again, all but the shittiest routers I can think of can apply firewall rules and many other config changes without rebooting the whole router. This is absolutely pathetic for hardware that costs as much as Apple's shit does.

Between the hell I went through trying to configure a couple of Airport Expresses using their awful software and the new knowledge that Apple routers can't even do static routes, you can bet I'll be recommending Apple networking gear precisely NEVER. I wouldn't want someone to buy one only to find out it also doesn't support... I don't know, DHCP? DNS? Who the fuck needs that anyway, right? We'll just all say Bonjour and Rendezvous over at .local.

Fuck you, Apple.

* Yes, I know there are some open-source tools painstakingly constructed by sniffing traffic from Apple's software, but they aren't fully-featured and don't work with all devices, and that only supports my point.

yea NF!

nospam@example.com (ra) — 2008-07-04T00:21:57Z

So Netflix and a clue went out on a date... and she won them over! Yea!

Yeah, profiles are staying and I resumed our subscription.

Letter to netflix

nospam@example.com (ra) — 2008-06-20T01:04:00Z

to: publicrelations@netflix.com
cc: lkilgore@netflix.com
cc: reed.hastings@netflix.com
subject: Netflix profiles feature

To whom it may concern:

As a direct result of the email I received from Netflix last night regarding the elimination of the profiles feature, I have just placed my Netflix account On Hold.

For us, profiles are the most important feature differentiating Netflix from its competitors like Blockbuster Online. Profiles are integral to our Netflix experience. We are not interested in trying to merge queues or manage reviews and recommendations for three different people on a single profile/account.

My subscription is currently set to resume on 07 September 2008, but rest assured that if profiles disappear on 01 September I will instead cancel my subscription outright.

pissing me the FUCK off

nospam@example.com (ra) — 2008-06-19T02:33:18Z

What a lovely evening.

First of all, around midnight tonight some fucker rings our doorbell and runs off.
Great. So now I get to wonder whether it was just punk kids, or someone checking to see if anybody was home so they could rob the place. I might not be as concerned if someone hadn't rang the bell earlier today as well. I didn't answer it then because I was busy and I wasn't expecting anyone. But I can't help but wonder if someone was canvassing the neighborhood looking for unoccupied houses to return to at night.

Then, when I come back inside I'm greeted by an email from Netflix that says they are removing profiles. WTF. Their profiles are in my opinion one of their best features. We have three profiles on our account. Their email tells me they are eliminating profiles to "help [them] continue to improve" their site. If this is a taste of "improvements" to come then I guess it's about time to "upgrade" my Netflix account... to the ZERO discs plan. I'm canning their asses to let them know what I think.

GRRRRR. FUCK. THAT IS ALL.

broken cables, leaky switches

nospam@example.com (ra) — 2008-05-02T22:52:00Z

I had one hell of a networking problem crop up at a client the other day. I was called in to troubleshoot an odd problem where some machines suddenly could not get to the internet... sometimes.

Damn I just LOVE problems that start like this. I poked around and checked their router and rebooted their shittier-than-turds Dell VLAN switches and came up with nothing.

The router has several interfaces and the only ones being affected where those which have VLAN's on them, so I was fairly suspicious of those Dell switches since they've given me trouble with VLAN's before, but the symptoms here were downright bizarre.

I did some packet monitoring and some other experimentation and came up with the following observations:

- Local internetwork traffic is mostly passed just fine (there was one case where we saw some packet loss from one VLAN subnet to another but it could have been a fluke)
- From the affected machines, Internet bound traffic goes in the switch and never comes out-- doesn't even make it to the router.
- Moving devices from one switch port to another would sometimes make them work--or if they were working, fail to work. But the problem was never static across any given ports.

After several hours of troubleshooting and headscratching, I had but one pathetically weak theory. I knew that new device had been connected to the network, and we eventually found that after unplugging this device, the problem seemed to gradually clear up, however plugging the device in did not reintroduce the problem, at least not within a reasonable period of time. The new device was connected across a hallway using a patch cable that was getting walked on. The cable under the hallway rug was stupid yes, but I didn't immediately associate it with this strange network-wide problem, but that became my main hypothesis, because everything else had been eliminated.

So we tested it. We went and started jumping up and down on the cable and sure enough, some of the machines on the network lost Internet connectivity. And unplugging the cable and rebooting the switches restored it.

So there you have it. Bad patch cables can seriously fuck up your network, especially if you're using Dell switches. But wait, how does one broken cable connected from a switch to just one device cause only certain packets with certain destinations to disappear? I HAVE NO FUCKING CLUE!