Tuesday, August 11, 2015

install qpid on ubuntu 14

# install qpid
apt-get install qpidd qpid-doc qpid-client python-qpid-extras-qmf python-qpid python-cqpid

wget http://apache.mirrors.tds.net/qpid/0.32/qpid-tools-0.32.tar.gz
tar zxvf qpid-tools-0.32.tar.gz
cd qpid-tools-0.32/
./setup.py build
./setup.py install

sub-process /usr/bin/dpkg returned an error code (1) ubuntu apache2 (OpsWorks)

When do
apt-get install apache2
got error:
sub-process /usr/bin/dpkg returned an error code (1) ubuntu apache2

Solution:  do these first:

apt-get remove --purge apache2
apt-get install -f
apt-get autoremove

may need if you remove apache2 got same issue:
umount /var/log/apache2
umount /var/www


Then:
apt-get install apache2


Friday, August 7, 2015

ES AWS

updatedb
apt-get update
apt-get upgrade

add-apt-repository ppa:webupd8team/java

apt-get update
wget https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.1.deb

dpkg -i elasticsearch-1.7.1.deb

apt-get install oracle-java8-installer

cd /usr/share/elasticsearch
bin/plugin install elasticsearch/elasticsearch-cloud-aws/2.7.0

cat /dev/null > /etc/elasticsearch/elasticsearch.yml
vim /etc/elasticsearch/elasticsearch.yml

/etc/init.d/elasticsearch start
/etc/init.d/elasticsearch status

Friday, July 10, 2015

enable https (comodo cert) for apache2 & ubuntu 14

1, make xxxxxxxxxxxx.ca-bundle file

cat AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt yourdomain_com.crt > yourdomain_com.ca-bundle

2, create cert folder under /etc/apache2/cert

3, copy all file from comodo to this folder

root@cnew:/etc/apache2/cert# ll
total 36
drwxr-xr-x 2 root root 4096 Jul 10 23:15 ./
drwxr-xr-x 9 root root 4096 Jul 10 21:34 ../
-rw-r--r-- 1 root root 1521 Jun 28 07:31 AddTrustExternalCARoot.crt
-rw-r--r-- 1 root root 7515 Jul 10 23:15 yourdomain_com.ca-bundle
-rw-r--r-- 1 root root 1891 Jun 28 07:31 yourdomain_com.crt
-rw-r--r-- 1 root root 1675 Jun 28 07:31 yourdomain.key
-rw-r--r-- 1 root root 1952 Jun 28 07:31 COMODORSAAddTrustCA.crt
-rw-r--r-- 1 root root 2151 Jun 28 07:31 COMODORSADomainValidationSecureServerCA.crt

4: vim /etc/apache2/sites-available/default-ssl.conf


                SSLCertificateFile  /etc/apache2/cert/yourdomain_com.crt
                SSLCertificateKeyFile /etc/apache2/cert/yourdomain_com.key

                SSLCertificateChainFile /etc/apache2/cert/yourdomain_com.ca-bundle

5:  enable ssl mod and ssl site
a2enmod ssl
a2ensite default-ssl.conf
service apache2 restart



Monday, July 6, 2015

sqlr-listener error:

ERROR:

sqlr-listener error:
        Unable to create a shared memory segment.  This is usally because an
        sqlr-listener is already running for the rovi instance.

        If it is not running, something may have crashed and left an old segment
        lying around.  Use the ipcs command to inspect existing shared memory
        segments and the ipcrm command to remove the shared memory segment with
        id -1.

        Error was: File exists


sqlr-connection error:
        The pid file /usr/local/var/sqlrelay/tmp/pids/sqlr-listener-rovi was not found.
        This usually means that the sqlr-listener
is not running.
        The sqlr-listener must be running for the sqlr-connection to start.


FIX:

Step 1: get shared memory info:
root@devtest:~# ipcs

------ Shared Memory Segments --------
key        shmid      owner      perms      bytes      nattch     status
0x0101520c 385941504  ubuntu     640        679968     7
0x01015379 385974273  nobody     640        679968     3

------ Semaphore Arrays --------
key        semid      owner      perms      nsems
0x0101520c 9437184    ubuntu     600        13
0x01015379 9469953    nobody     600        13

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages

Step 2: remove shared memory
ipcrm -m 385941504
ipcrm -m 385974273

Step 3:
start sqlr:
sqlr-start -id abc
sqlr-start -id efg




Friday, July 3, 2015

install ssdeep in ubuntu

 sudo apt-get install build-essential libffi-dev python python-dev python-pip automake autoconf libtool


 sudo BUILD_LIB=1 pip install ssdeep




root@SBGF:~/Downloads# ssdeep VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1
ssdeep,1.1--blocksize:hash:hash,filename
393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6,"/home/chang/Downloads/VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1"
root@SBGF:~/Downloads# ssdeep VirusShare_a985e7236a60d3b6027ee33124cfbd2c
ssdeep,1.1--blocksize:hash:hash,filename
49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7,"/home/chang/Downloads/VirusShare_a985e7236a60d3b6027ee33124cfbd2c"



chang@SBGF:~/Downloads/9233160510$ ssdeep VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1
ssdeep,1.1--blocksize:hash:hash,filename
393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6,"/home/chang/Downloads/9233160510/VirusShare_94e75b0bc1398e516e2f4d525cd9e2d1"
chang@SBGF:~/Downloads/9233160510$ ssdeep VirusShare_a985e7236a60d3b6027ee33124cfbd2c
ssdeep,1.1--blocksize:hash:hash,filename
49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7,"/home/chang/Downloads/9233160510/VirusShare_a985e7236a60d3b6027ee33124cfbd2c"
chang@SBGF:~/Downloads/9233160510$ python
Python 2.7.11+ (default, Apr 17 2016, 14:00:29)
[GCC 5.3.1 20160413] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> iport ssdeep
  File "<stdin>", line 1
    iport ssdeep
               ^
SyntaxError: invalid syntax
>>> import ssdeep
>>> ssdeep.compare('393216:wfk5JDNLkgFEXwj38789F+GzKIVSVer6hiM4hjaf8IZa6:9r2nwjZ9FzKIkRYWPw6', '49152:zUZWIDo67rsgVd7XWsPru4kMjc94tj8GskIt7qZi9qOu7aa:OV/sgVdbWsrkMw94tj8bkqqOu7')
0