Skip to main content

Posts

Sextortion Spam.

If you received such a mail means bad guys already harvest your email. Don't worry this is only a bait. Below is the sample of mail.  Email is received with spoof email address. This email also bypass office 365 ATP as well. Detection status on VT score is none when this email was received. X-BESS-REASON: bbl X-BESS-REASON-EXTRA: 175.117.27.170 Received: from [175.117.27.170] (unknown [175.117.27.170]) by mx4.eu-west-2a.ess.aws.cudaops.com; Wed, 09 Jan 2019 18:31:24 +0000 Message-ID: <003e> From: <cust> To: <cust> Subject: Your account has been hacked! You need to unlock. Date: 10 Jan 2019 11:03:17 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="ibm852" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-BESS-ID: 1547058684-889006-11704-54424-1 X-BESS-VER: 2018.16_20190108.1920 X-BESS-Apparent-Source-IP: 175.117.27.170 Hi, stranger! I hacked your device, because I sent you this message from your account. If you

MongoDB Failed to start lsb an object/document-oriented database

After long gap I'm going to post new blog. Due to the work load and research I have little time.  MongoDB could not started after installation of 3.6 version, However downgrade to the 3.4, still the Mongodb couldn't start and show below error message. Search don't help to resolved the issue. After so much hit and trail nothing work. One Chinese forum posted this command and its works for me.  cd /var/lib sudo rm -rf ./mongodb sudo mkdir mongodb sudo chown -R mongodb mongodb/ sudo serivce mongodb restart

UBUNTU Files not Opening

Suddenly My Ubuntu 16.04 LTS giving me a issue, I can't open files manger as well as screenshots app.  So I dig into the problem and found this temporary solution for file manager. Still searching for permanent solution. Ubuntu is very buggy since and then, not stable any way. Step 1 : @jpudasaini:~$ nautilus -q (nautilus:6210): GLib-GIO-CRITICAL **: g_dbus_interface_skeleton_unexport: assertion 'interface_->priv->connections != NULL' failed (nautilus:6210): GLib-GIO-CRITICAL **: g_dbus_interface_skeleton_unexport: assertion 'interface_->priv->connections != NULL' failed (nautilus:6210): Gtk-CRITICAL **: gtk_icon_theme_get_for_screen: assertion 'GDK_IS_SCREEN (screen)' failed (nautilus:6210): GLib-GObject-WARNING **: invalid (NULL) pointer instance (nautilus:6210): GLib-GObject-CRITICAL **: g_signal_connect_object: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed Step 2 : jpudasaini@jpudasaini:~$ nautilus Nautilus-S

Cisco ASA in GNS3

Here is another tutorial running Cisco ASAv on GNS3 using Qemu. For Configure GNS3 In My case I have used ASAv952-204.qcow2 Go  to the GNS3>Edit>Preferences>QEMU>Qemu VMs>New Follow on screen procedure.  Don't forget to enable kvm and memory allocation.  Now you can see I can run ASAv 9.5.2 Blank Password.

IOS XR GNS3 QEMU

This time lets have tutorial on Cisco XR 9k series router image running on the GNS3. Please don't ask for the XR image. Your are smart enough to get it. My system configuration: Ubuntu 16.04 GNS3 1.4 RAM 8Gig i7 processor Used XR Image iosxrv-k9-demo-6.0.1.qcow2 This image is VIRL extracted image. You need to convert this image into QEMU image, follow this link I strongly recommend you to run it on the Linux system. Now you have converted image, then go to the GNS3>Edit>Preferences>QEMU>Qemu VMs>New then follow the onscreen procedure. Setting for QEMU XR Image. RAM:- 4Gig CPU:- 1 Adapters at lest 4.  -enable-kvm Here you can see I can run the XR on my system. Interface is up and system is already booted.  I have run 3 XR router  here is my system RAM CPU usages. RP/0/0/CPU0:XR3(config)#int gi0/0/0/0 RP/0/0/CPU0:XR3(config-if)#ip add 192.168.13.2 255.255.255.252 RP/0/0/CPU0:XR3(config-if)#co

Unit vpnagentd service not loaded.

Somebody ask me to run Cisco EPIC VPN lab test provide by the Cisco. I just try it done but Anyconnect client doesn't seems to work on ubuntu system. The error message was How to resolved the issue??  First of all install the following packages. sudo apt-get install lib32z1 lib32ncurses5 Then try to install the AnyConnect client, if its still show the same error message. Used below command.... sudo apt-get install network-manager-openconnect Reload the changes using this command.... sudo systemctl daemon-reload Now AnyConnect should be installed. 

Perl Can't Locate in @inc

Recently I try to install  SmokePing (tar ball) on Centos 7, for my company to check Network latency, but   same error re-occur. Multiple Errors: Then I search a lot, try to install the packages but the problem still appear, then after I found  a simple solution. Solution: # perl -MCPAN -eshell Terminal does not support AddHistory. cpan shell -- CPAN exploration and modules installation (v1.9800) Enter 'h' for help. cpan[1]> install Net::OpenSSH Reading '/root/.cpan/Metadata'   Database was generated on Sat, 03 Sep 2016 21:53:30 GMT Running install for module 'Net::OpenSSH' Running make for S/SA/SALVA/Net-OpenSSH-0.73.tar.gz Fetching with LWP: http://cpan.communilink.net/authors/id/S/SA/SALVA/Net-OpenSSH-0.73.tar.gz Fetching with LWP: http://cpan.communilink.net/authors/id/S/SA/SALVA/CHECKSUMS Checksum for /root/.cpan/sources/authors/id/S/SA/SALVA/Net-OpenSSH-0.73.tar.gz ok Scanning cache /root/.cpan/build for sizes .............

No Matching Host Key Type Found. Their Offer: ssh-rsa

After upgrading the Laptop OS when I try to login to my old machine I got this error message.... jay@jay:~$ ssh -p 2222 jay@jpudasaini.com.np Unable to negotiate with 192.168.156.101 port 2222: no matching host key type found. Their offer: ssh-dss I can't access the system, here is the solution jay@jay:~$ ssh -oHostKeyAlgorithms=+ssh-dss -p 2222 jay@jpudasaini.com.npThe authenticity of host '[jpudasaini.com.np]:2222 ([192.168.156.101]:2222)' can't be established. DSA key fingerprint is SHA256:J#$/zFpzr05gdfrshufHHOQvss6NQcEpPMgKlibTc. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '[jpudasaini.com.np]:2222,[192.168.156.101]:2222' (DSA) to the list of known hosts. Password: Now Just type the password 

nslookup Command

A Network Administrator command  which help diagnosis DNS related issue. However to understand this,  you should better to know how DNS works. How to troubleshoot DNS related issue. 1. NSLOOKUP example display "A Record" (IP Adress) of the domain C:\Users\jpudasaini>nslookup jpudasaini.com.np 8.8.8.8 Server:  google-public-dns-a.google.com Address:  8.8.8.8 Non-authoritative answer: Name:    jpudasaini.com.np Address:  216.239.32.21 A Non-Authoritative Answer is a response from Cache. A DNS server is authoritative for zones actually holds it. The above output shows "A Records" (IP Adress) of the domain " jpudasaini.com.np ". Which is actually query to the public Google DNS. If you don't put DNS after the domain, it will used your default DNS, in my case I have used public DNS. 2. MX Record using -query=mx MX (Mail Exchange) record maps for the specific domain name to verify mail exchaing servers on that domain.

EoMPLS Configuration

EoMPLS is point to point L2 VPN services which is used to transport all Ethernet frame received on particular Ethernet or VLAN,  its also called Any Transport over MPLS(ATOM) means this technology can connect like Frame-Relay, PPP, Ethernet,ATM etc. IOS used c7200-adventerprisek9-mz.151-4.M Logical Topology   Make sure MPLS with IGP  is confugure as shown in a diagram. I'm not going to configure MPLS here. This tutorial only show how to configure xconnect tunnel peer with other side customer faces interface in our network diagram we interconnect PE1 fa1/0 with PE2 fa0/0 interfaces. Config of PE1 PE1#sh run Building configuration... Current configuration : 1337 bytes ! upgrade fpd auto version 15.1 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname PE1 ! ip cef interface Loopback0  ip address 2.2.2.2 255.255.255.255  ip ospf network point-to-point  ip ospf 1 area 0 ! interface FastEthernet0/0  ip ad

Configuring a Basic MPLS VPN

It's been a long time I'm away from blogging due to some R&D on the network with Juniper boxes. On this tutorial I'm going to configure very basic MPLS VPN configuration in GNS3. After that we go for EoMPLS configuration. This is the logical topology for this tutorial.   Here I only post the configuration file from PE other router configuration is almost same. Here is the points should be remember. 1. Make sure IGP with MPLS is configure on PE,P, it shouldn't be configure on customer facing interface. 2. Make sure all loopback interface is reachable.  3. Configure VRF with RD and RT, then applied it on right interface. 4. Configure MP-BGP on PE and peer it. 5. Make sure to redistribute the CE IGP protocol into the BGP and vice versa. Below command can be copy paste into your router. Before that make sure you had make change necessary things. Config from PE1 PE1#sh run Building configuration... Current configuration : 2126 bytes ! versi

Juniper DHCP Server Configuration

We already configure our QEMU in GNS3 and run our vSRX Router. Now its time to configure DHCP server in our vSRX router. Lets began. Logical Diagram for this tutorial To configure DHCP server Assign Lowest and highest IP range root# set system services dhcp pool 192.168.1.0/24 address-range low 192.168.1.50 high 192.168.1.200 Assign DNS server (in my case I had used Router interface IP) root# set system services dhcp pool 192.168.1.0/24 name-server 192.168.1.1 Assign IP address of the router root# set system services dhcp pool 192.168.1.0/24 router 192.168.1.1 Assign the lease time root# set system services dhcp pool 192.168.1.0/24 default-lease-time 3600 Assign DHCP as an allowed inbound service for the interface which we are going to enable DHCP. root# set security zones security-zone untrust interfaces ge-0/0/1 host-inbound-traffic system-services dhcp Assign IP address to the client faced interface. root# set interfaces ge-0/0/1 unit 0 family inet ad

vSRX GNS3 QEMU

In this tutorial I'm going to run vSRX JunOS in QEMU and configure it as DHCP Server. Lets began with installing vSRX into QEMU. I have try vSRX to run into Vbox but never succeeded. So I better to choose QEMU otherwise waste of time. In my case I had used junos-vsrx-12.1X46-D10.2-domestic to mount into QEMU. Search for it. Now we have to convert our .vdi file into .image, for that use following command cd d:\junos\ c:\Program Files\GNS3\qemu\>qemu-img.exe convert -O qcow2 d:\junos\junos-vsrx-12.1X46-D10.2-domestic-disk1.vdi d:\junos\junos-vsrx-12.1X46-D10.2-domestic.img We just made our image ready to run into QEMU. Go the GNS3 Note: Strongly recommended to use QEMU in linux and enable KVM otherwise it eats up all your CPU and RAM. -nographic -smp 2 -enable-kvm >edit>preference>choose "QEMU VMs" Click on "New" Choose "Default " Gave Name "vSRX" (in my case). I'll use following topology

Juniper Message from syslogd

While doing some lab test, this weird syslogd message appear every seconds on the console terminal, so it was very difficult to complete the lab. This messages are due the following syslog configuration .  So for now we are going to de-activate it to generating the message #deactivate system syslog user *  #commit

The-requested-url-nagioscgi-binstatusmap-cgi-was-not-found-on-this-server

Everything goes well while installing the Nagios 4.0.8 into Ubuntu 10.04 LTS. However Nagios Map section doesn't plotted the maps of the device. Displayed error like this way G for god and G for google, found the solution like   Install the package apt-get install libgd2-xpm install libgd2-xpm-dev cd /home/jpudasaini/nagios-4.0.8/ Configure the package for installation ./configure -with-gd-lib=/usr/local/lib/ make cgis Then copy it into the sbin directory  cp /home/jpudasaini/nagios-4.0.8/cgi/*.cgi /usr/local/nagios/sbin/ Change the permission for that files. chown nagios:nagios /usr/local/nagios/sbin/*.cgi

vSphere Client Displays Empty Inventory

Suddenly my home datacenter  vsphere lab show empty inventory in vSphere client. There was no any host at all. I have three ( Cisco IOU, CentOS 7, Ubuntu server) host configure for lab  purpose. So I must recover those host to complete my lab because I almost completed all labs.  Thus here is process how to retrieve those lost host from vSphere client in vSphere 6 database. Step 1: Login to the vSphere client choose your database from Configuration Tab > right click database and choose "Browse Dababase". Step 2: Now next window open the database page. From here open your host folder then choose ".vmx" right click and choose "Add to inventory" then follow the onscreen instruction. Next window  Select the database Next click to finish Now your server is in the inventory list, you can run the server. In my case its my CentOS 7 server, it will run smoothly. 

Table Already Exists SQL Server

Somehow I have created or you can say I have imported database into SQL and try to continue installation, but error "table already exists sql server" occur then installation has been interrupted. Meanwhile, another error "SQL=Duplicate entry 'add_user' for key 'PRIMARY':" also appear. In this case I had deleted those tables and modified dbsetup file. CREATE TABLE logs (         id bigint unsigned NOT NULL AUTO_INCREMENT, to CREATE TABLE logs (         id bigint(20) unsigned NOT NULL AUTO_INCREMENT, On sql I have used this command to delete tables MariaDB [(none)]> use syslog Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed MariaDB [syslog]> drop table {YourTableName};

Huawei Switch Show Commands

Here are basic show commands used in Huawei switch. For configuration of Huawei switch click here . 1. Show VLANs <sw1>display vlan 8. Show port base VLAN <sw1>display port vlan   Port                    Link Type    PVID  Trunk VLAN List ------------------------------------------------------------------------------- Eth-Trunk0              hybrid       1     -                                 GigabitEthernet0/0/1    trunk        1     1 GigabitEthernet0/0/2    hybrid       1     -                                 GigabitEthernet0/0/3    access       301   -                                 GigabitEthernet0/0/4    access       302   -                                 GigabitEthernet0/0/5    hybrid       1     -                                 GigabitEthernet0/0/6    hybrid       1     -                                 GigabitEthernet0/0/7    hybrid       1     -                                 GigabitEthernet0/0/8    hybrid       1     - 2. View Configurati

Huawei Switch Configuration Commands

Here are some Huawei switch configuration command and verification command is here. 1. Enter int to the privilege mode <sw1>system view 2. Create the VLAN [sw1]vlan 30 [sw1]des fiber 3. Configure interface trunk [sw1]interface GigabitEthernet 0/0/1 [sw1-GigabitEthernet0/0/1]port link-type trunk 4. Configure interface access [sw1-GigabitEthernet0/0/3]port link-type access [sw1-GigabitEthernet0/0/4]port link-type access 5. Assign vlan to that port [sw1]vlan 30 [sw1-vlan30]port GigabitEthernet 0/0/3 [sw1]vlan 30 [sw1-vlan30]port GigabitEthernet 0/0/4 6. Change port speed and duplex [sw1]interface GigabitEthernet 0/0/3 [sw1-GigabitEthernet0/0/3]undo negotiation auto [sw1-GigabitEthernet0/0/3]speed ?   10                10M port speed mode   100               100M port speed mode   1000              1000M port speed mode   auto-negotiation  Auto negotiation [sw1-GigabitEthernet0/0/3]speed 100 [sw1]int gi0/0/4 [sw1-GigabitEthernet0/0/4]undo negotiatio

PERL can't locate module in @ INC

Hi, recently when I'm trying to install some linux daemon in CentOS 7 I have encountered a PERL issue, indicating that some module are missing e.g. Can't locate sys/syslog.pm in @INC It means it can't find the pear-sys-syslog. So I have to install this daemon to continue my installation. In my case its syslog.pm but you may encounter different than this. I mean the module name is different, but the error code is same. You need to search that package and install it. In my case I have just used this module root@localhost#yum install -y perl-sys-syslog Now the installation has been working.