find unique ip from access log

g@cmnew:$ cut -d' ' -f1 access.log |  sort | uniq -u

enable https (comodo cert) for apache2 & ubuntu 14

1, make xxxxxxxxxxxx.ca-bundle file

cat AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt yourdomain_com.crt > yourdomain_com.ca-bundle

2, create cert folder under /etc/apache2/cert

3, copy all file from comodo to this folder

root@cnew:/etc/apache2/cert# ll

total 36

drwxr-xr-x 2 root root 4096 Jul 10 23:15 ./

drwxr-xr-x 9 root root 4096 Jul 10 21:34 ../

-rw-r--r-- 1 root root 1521 Jun 28 07:31 AddTrustExternalCARoot.crt

-rw-r--r-- 1 root root 7515 Jul 10 23:15 yourdomain_com.ca-bundle

-rw-r--r-- 1 root root 1891 Jun 28 07:31 yourdomain_com.crt

-rw-r--r-- 1 root root 1675 Jun 28 07:31 yourdomain.key

-rw-r--r-- 1 root root 1952 Jun 28 07:31 COMODORSAAddTrustCA.crt

-rw-r--r-- 1 root root 2151 Jun 28 07:31 COMODORSADomainValidationSecureServerCA.crt

4: vim /etc/apache2/sites-available/default-ssl.conf

                SSLCertificateFile  /etc/apache2/cert/yourdomain_com.crt

                SSLCertificateKeyFile /etc/apache2/cert/yourdomain_com.key

                SSLCertificateChainFile /etc/apache2/cert/yourdomain_com.ca-bundle

5:  enable ssl mod and ssl site

a2enmod ssl

a2ensite default-ssl.conf

service apache2 restart

sqlr-listener error:

ERROR:

sqlr-listener error:
        Unable to create a shared memory segment.  This is usally because an
        sqlr-listener is already running for the rovi instance.

        If it is not running, something may have crashed and left an old segment
        lying around.  Use the ipcs command to inspect existing shared memory
        segments and the ipcrm command to remove the shared memory segment with
        id -1.

        Error was: File exists


sqlr-connection error:
        The pid file /usr/local/var/sqlrelay/tmp/pids/sqlr-listener-rovi was not found.
        This usually means that the sqlr-listener
is not running.
        The sqlr-listener must be running for the sqlr-connection to start.


FIX:

Step 1: get shared memory info:
root@devtest:~# ipcs

------ Shared Memory Segments --------
key        shmid      owner      perms      bytes      nattch     status
0x0101520c 385941504  ubuntu     640        679968     7
0x01015379 385974273  nobody     640        679968     3

------ Semaphore Arrays --------
key        semid      owner      perms      nsems
0x0101520c 9437184    ubuntu     600        13
0x01015379 9469953    nobody     600        13

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages

Step 2: remove shared memory
ipcrm -m 385941504

ipcrm -m 385974273

Step 3:
start sqlr:
sqlr-start -id abc
sqlr-start -id efg

install ssdeep in ubuntu

 sudo apt-get install build-essential libffi-dev python python-dev python-pip automake autoconf libtool


 sudo BUILD_LIB=1 pip install ssdeep

root@SBGF:~/Downloads# ssdeep VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1
ssdeep,1.1--blocksize:hash:hash,filename
393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6,"/home/chang/Downloads/VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1"
root@SBGF:~/Downloads# ssdeep VirusShare_a985e7236a60d3b6027ee33124cfbd2c
ssdeep,1.1--blocksize:hash:hash,filename
49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7,"/home/chang/Downloads/VirusShare_a985e7236a60d3b6027ee33124cfbd2c"

chang@SBGF:~/Downloads/9233160510$ ssdeep VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1

ssdeep,1.1--blocksize:hash:hash,filename

393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6,"/home/chang/Downloads/9233160510/VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1"

chang@SBGF:~/Downloads/9233160510$ ssdeep VirusShare_a985e7236a60d3b6027ee33124cfbd2c

ssdeep,1.1--blocksize:hash:hash,filename

49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7,"/home/chang/Downloads/9233160510/VirusShare_a985e7236a60d3b6027ee33124cfbd2c"

chang@SBGF:~/Downloads/9233160510$ python

Python 2.7.11+ (default, Apr 17 2016, 14:00:29)

[GCC 5.3.1 20160413] on linux2

Type "help", "copyright", "credits" or "license" for more information.

>>> iport ssdeep

  File "<stdin>", line 1

    iport ssdeep

               ^

SyntaxError: invalid syntax

>>> import ssdeep

>>> ssdeep.compare('393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6', '49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7')

0