eNik

Push Synology syslogs to Splunk

admin — Mon, 19 Dec 2011 16:57:25 +0000

This article walks you through the steps that are needed to get the Log messages from your Synology NAS out and into a Splunk instance.

For the sake of simplicity I assume in this example that the IP address of the Synology NAS is 192.168.10.99 and that the IP of the Server running is 192.168.10.200

1) Prepare Splunk

First let’s prepare Splunk to receive syslog messages

Click on Manager

Select “Data Inputs”

Click “Add New” for UDP

Enter the Port number (let’s use the standard 9998)

Select “syslog” as source type

Click “Save”

2) Prepare your Synology NAS

There you should see the model name in the second line – write it down

Click on “Control Panel”

And then on “Terminal”

Make sure “Enable SSH service” is checked

You can now quit the DSM.

3) Get the Bootstrap

Open this page and search for your Synology model

Then go to this page and look for your processor model

Copy the link location of the ssh file

4) On to the Synology NAS

Start a Terminal application and log into the NAS

ssh root@192.168.10.99

Type your admin password and reply with “yes” if needed (only the first time you connect)

You’re in…

5) Installing IPKG

Type wget and paste the link of the xsh file that you copied before and hit enter.

DiskStation> wget http://wizjos.endofinternet.net/synology/archief/syno-mvkw-bootstrap_1.2-7_arm-ds111.xsh

After the download is done, type

DiskStation> sh

(sh with a space) and then the TAB key

this should result in something like

DiskStation> sh syno-mvkw-bootstrap_1.2-7_arm-ds111

Hit enter and IPKH gets installed

Finally you’ll have to update the packages list, type

DiskStation>ipkg update

DiskStation>ipkg upgrade

6) Install the Packages

Install the Nano text editor (if you master vi, you can skip this step, but you probably wouldn’t be here . Type

DiskStation> ipkg install nano

Then install syslog-ng by typing

DiskStation> ipkg install syslog-ng

7) Adapt the configuration

Open the configuration file by typing (you can speed this up this by using the TAB key to autocomplete)

DiskStation> nano /opt/etc/syslog-ng/syslog-ng.conf

Scroll down to the Destination Section and enter a new destination (put here the IP Address and Port of your Splunk server)

destination splunk { udp(“192.168.10.200″ port(9998)); };

Scroll down to the Log Section and enter a new log command (you can also use filters, but I prefer to do this in Splunk)

log { source(src); destination(splunk); };

Click

CTRL-O (to save hit Enter)

CTRL-X (to quit)

Start logging

Start Syslog by typing

syslog-ng

Check that there is a connection to your Splunk server by typing

netstat

You should see an entry for the connection to Splunk

Finally Using Splunk

Select Search

You should see the IP Address of the Synology NAS with a growing number of Events

If you click on the IP Address you apply a filter to see only messages from this host

That’s it, enjoy.

See the Splunk website for more information.

FinFisher beats Carrier IQ

admin — Fri, 02 Dec 2011 12:48:01 +0000

The FinFisher Trojan is government spyware that is installed via a phony iTunes update.

Your iPhone could be spying on you, according to the latest documents from Wikileaks, called the Spyfiles…

(Via CultOfMac: If You Thought Carrier IQ Scandal Was Bad, Wait Till You See Latest Wikileaks)

Automatically sync files across Macs via iCloud

admin — Wed, 02 Nov 2011 15:56:21 +0000

Did you know that you can sync any document between your Macs by using a little trick?

In fact, every document you put in the ~/Library/Mobile Documents folder will get synced through iCloud.

read the whole story here MacOSXHints.com

Pixelmator 2.0 Now Available

admin — Thu, 27 Oct 2011 14:50:14 +0000

Finally the long awaited Pixelmator 2.0 is available.

Check out this review: Pixelmator 2.0 Now Available On The Mac App Store, Our First Impressions

Private Eye – Check who’s phoning home

admin — Thu, 13 Oct 2011 14:44:02 +0000

There are a miryad of possibilities to check what connections are active on your Mac.

Rubbernet, Little Snitch and Dtrace (for the unafraid) are only two of them…

Now there is a new small and free tool called Private Eye that sort of formats the Dtrace output in a nice way,

so you can verify strange outgoing or incoming connections.

You can download it here – everyone should have this on his Mac…

NetworkMiner packet analyzer – Version 1.1 available

admin — Mon, 10 Oct 2011 14:22:45 +0000

NetworkMiner is a free Network Forensic Analysis Tool (NFAT) for Windows that can detect the OS, hostname and open ports of network hosts through packet sniffing or by parsing a PCAP file.

(Via Sourceforge)

Chrome Remote Desktop

admin — Mon, 10 Oct 2011 09:39:50 +0000

Chrome Remote Desktop BETA is the first installment on a

capability allowing users to remotely access another computer

through the Chrome browser or a Chromebook.

The goal of this beta release is to demonstrate the core

Chrome Remoting technology and get feedback from users.

This version enables users to share with or get access to

another computer by providing a one-time authentication code.

Access is given only to the specific person the user identifies

for one time only, and the sharing session is fully secured.

One potential use of this version is the remote IT helpdesk case.

The helpdesk can use the Chrome Remote Desktop BETA to help

another user, while conversely a user can receive help by setting

up a sharing session without leaving their desk.

Additional use cases such as being able to access your own computer

remotely are coming soon.

Chrome Remote Desktop BETA is fully cross-platform, so you can connect

any two computers that have a Chrome browser, including Windows, Linux,

Mac and Chromebooks.

Get it here

Websecurify Website Security Testing Framework

admin — Mon, 10 Oct 2011 09:09:14 +0000

…

Websecurify is an open source framework for testing web application, the platform is designed to perform automated as well as manual vulnerability tests.

The built-in vulnerability scanner and analyzing engine are capable of automatically detecting many types of web application vulnerabilities as you launch a penetration test. List of automatically detected vulnerabilities include:

SQL Injection

Local and Remote File Include

Cross-site Scripting

Cross-site Request Forgery

Information Disclosure Problems

Session Security Problems

many others including all categories in the OWASP TOP 10

The current version is still a beta one but you can run it on all major platforms (Windows, Mac OS and Linux), also it is available for the Google Chrome (Chromium) web browser. This extension provides intuitive web application security testing environment which is easy to use by everyone: from casual users who want to check the security of their web apps to experienced professionals.

(Via SecTechno)

About Yoghurts…

admin — Wed, 06 Jul 2011 14:35:30 +0000

[From About Yoghurts | Bonkers World]

SparkleShare – Your private Dropbox on OSX

admin — Wed, 01 Jun 2011 15:12:23 +0000

Yesterday I came across a promising new project called SparkleShare.

SparkleShare is some sort of a Dropbox clone that allows you to use GIT repositories on your server.

This means that your data can be stored on your private server!

The project is still in its very early stages and the setup is a bit complicated.

But I somehow managed to get it to work on my Macs at home.

Here is how I did it:

Preparation

Download GIT from here
Download SparkleShare from here

Install the server

Install GIT on the server

Create an empty GIT container

> cd (to make sure you are in your home folder)

> git init –bare TEST.git

Install the client

Install GIT on the client
Install SparkleShare
try to ssh into the server

>ssh YOURNAME@MY.SERVER.COM

If this does not connect you have to find out why first,
this is the very basics to make this work.

Create the SSH keys

> ssh-keygen

> scp .ssh/id_rsa.pub YOURNAME@MY.SERVER.COM:TEMP_rsa.pub

SSH into your server

> ssh YOURNAME@MY.SERVER.COM

> cat TEMP_rsa.pub >> .ssh/authorized_keys

Check git install on the server – try to run

> ssh YOURNAME@MY.SERVER.COM git-upload-pack –help

If you get:

> usage: git upload-pack [--strict] [--timeout=nn]

you’re OK

If you get:

> git-upload-pack: command not found

you have to create a symlink to the git executables for “non-interactive shell login”

> cd /usr/bin/
>sudo ln -s /usr/local/git/bin/git* .

retry the above command

you can also try the following (even though it did not work for me)
> export PATH=$PATH:”/usr/local/bin:/usr/local/git/bin”

Now launch SparkleShare Enter your name and e-mail, click next.

Server Type:
“My own Server”

Address:
YOURNAME@MY.SERVER.COM

Folder Name:
/Users/YOURNAME/TEST.git

Click Sync

General remarks:

YOURNAME: this is the username on your Mac (Server Side!)

MY.SERVER.COM: this is the name of the server (can be internal, like server.local or URL)

Experience Dad’s internet

admin — Mon, 23 May 2011 20:14:57 +0000

Experience the beginings of the Internet on http://telehack.com/

Easily create HTML5 animations

admin — Mon, 23 May 2011 20:11:59 +0000

link: Hype 1.0 allows you to create slick, animated websites in HTML5

OSX – Quickly switch between function keys mode

admin — Tue, 26 Apr 2011 08:55:08 +0000

Palua on the Mac App Store

BigBrother is watching you…

admin — Wed, 20 Apr 2011 17:45:11 +0000

Did you know that your iPhone is registering all your movements in a SQLite database?
And that this database is included in the iTunes backup?
And that it is not encrypted?

And the best: there is a tool to follow your latest movements around the globe:
petewarden/iPhoneTracker @ GitHub

How to properly handle anti-piracy

admin — Thu, 31 Mar 2011 11:44:23 +0000

I just stumbled on this article on Androidpolice:
Fake App Gets Uploaded To Pirate Android Markets, Megatrolls And Embarrasses Those Who Download ItIt seems, that the developers of the “Walk and Text” Android Application have found an extremely effective way against piracy.

Their 1.54$ app that they sell through the Android Store is widely pirated and the .apk installer file can be downloaded from the usual shady sources on the web.

Now there is a new version out there (done by the App developer or someone else) that does the following:

Show a dialogue saying that it’s cracking the Application
In the meantime, all of your personal data is forwarded to a remote server (IMEI, phone number, your name, …)
Then the compromising SMS is sent to ALL of your phone contacts
In the end another dialogue tells you to go buy the app

So in the end you look stupid and your next phone bill is likely to be gigantic.

Even if I don’t approve the publication of any Virus/Trojan or Spyware (why does this send all of your data to a server?) and sending humiliating and unsolicited SMS, I still think that this is “an original” way to deal with people who think that you work for free to bring them good applications.

Google vs Apple – Tablet Wars

admin — Thu, 31 Mar 2011 08:53:59 +0000

“Google says it will delay the distribution of its newest Android source code, dubbed Honeycomb, at least for the foreseeable future.”
and

“To make our schedule to ship the tablet, we made some design tradeoffs,” says Andy Rubin

It seems that Google had to take some serious shortcut to get Android Honeycomb out of the door in time – to beat (or at least keep up) Apple in the run for the release of a “truly magic tablet”.

Now it comes back to bite Google, because they have to delay the release of the source code of Honeycomb (which is supposed to be Open Source) because they couldn’t prevent that users put Honeycomb on phones “and [would be] creating a really bad user experience. We have no idea if it will even work on phones.”

This seems like some nice case of “Honeygate” to me
On the other hand: Kudos to Google for maintaining the effort to invest in Open Source projects.

eNik iPad version

admin — Tue, 29 Mar 2011 10:28:52 +0000

Thanks to the Onswipe WordPress plugin, the posts on eNik can now be viewed in iPad specific format.

How OSX came to be

admin — Thu, 24 Mar 2011 20:54:13 +0000

Web Development Tools for Macs

admin — Wed, 23 Mar 2011 08:15:47 +0000

Have a look at this very complete overview of tools for the Mac based Webdeveloper.

I’m personally using a bunch of those like:

Coda
Smultron
Flow
Espresso
MAMP
Pixelmator
Transmit
PHPMyAdmin

but who knows, you might find some new inspiration…
I certainly did

Swiss Love Their Macs

admin — Fri, 18 Mar 2011 14:25:57 +0000

I always knew it: Swiss Love Their Macs
Switzerland toppes thae list with 17.61% market share.
Luxembourg, USA, and Iceland are also countries with high Mac market share, all above 15%.