[SYSCTL] New Cyberabuse Whois 5.5 is out

This new version corrects a few minor bug and improves a few things.

As always, this new version is the best available, anyone using the cyberabuse whois should upgrade.

5.4 was released in 2006, so this is a long awaited release.

I'll detail the ChangeLog right here :

- fix Makefile for Win32
at least on the latest cygwin version, the current "make sqlite" didn't work, now it does
- gcc 2 compat issue
well, this one was introduced with the "make mta" thing
- get rid of that lame and big ascii art
- default TLDs libs have been updated
- TLD includes generator has been updated
- removed support for sqlite 2.x, upgrade to 3.x
- fixed a small bug in the ARIN cache system
honestly I don't remember what this bug was... it may have been fixed in 2006 or 2007
- fixed typo in INSTALL file for "make server"
- added better checks for netname and inetnum for KRNIC
- various improvement for LACNIC
- added "make mta" for those who use zcw to add abuse headers at the MTA level
that's not such a good idea... but I'll let people choose what they do with their mta
- added "make sqlite-spam" for those who use zcw to report spam
zcw was made to report abuse/security issues
this is probably the most awaited feature... I must say I'm not really a fan of this one and I don't know if it's going to be more efficient than the classic (sqlite) version...
- make strstr case insensitive when the searched string is lowercase
shouldn't change anything (email search), but who knows

I'm happy that this tool is still in use... it's now 5 years old !

[Thoughts] Hi-Fi upgrade

Big upgrade of my hi-fi system.

My Inter-M (Inkel) amplifier has been replaced by a Cambridge Audio 840A(v2).

Sound is really getting better, I don't miss the very dynamic sound of the Inter-M.

Long time listening of this system is now a much better pleasure and stereo image has been really boosted...

[SYSCTL] Lighttpd separate Error Log for 404's

You might have seen that my lighttpd conf doesn't include an access log... in fact I don't even load mod_accesslog.

Why would I want or even need to log access to my static content... you might need it, but I don't. Also, since I run multiple workers, even if I wanted to log server accesses, the log file would be broken (logs + multiple workers are not handled well at the moment).

However, if I don't care about 200s, I do need to get my 404 errors logged...
Apache logs 404s and > 400 in the error_log file, but Lighty doesn't (it uses access.log for that). However there's a nice feature called "server.error-handler-404" to bypass this issue.

This is how I use it... in the conf file :
server.error-handler-404 = "/errors/log_errors.x"
static-file.exclude-extensions = ( ".x" )
fastcgi.server = ( "/your_noatime_.../static/errors/log_errors.x" => ((
"bin-path" => "/usr/local/bin/log_errors.x",
"host" => "127.0.0.1",
"port" => 8200, # (why not...)
"min-procs" => 1,
"max-procs" => 1,
"check-local" => "disable"
))
)

touch /your_noatime_mounted_partition/static/errors/log_errors.x

Install FastCGI dev lib from :
http://www.fastcgi.com/dist/fcgi.tar.gz

Then edit log_errors.c :
#include <time.h>
#include <stdio.h>
#include "fcgi_config.h"
#include "fcgi_stdio.h"
#include <stdlib.h>
int main () {
FCGI_FILE *err = FCGI_fopen("/your/path/to/error.log","a");
if(!err) return 1;
while (FCGI_Accept() >= 0) {
time_t rawtime;
char buf [80];
time(&rawtime);
strftime(buf,80,"%Y-%m-%d %H:%M:%S",localtime(&(rawtime)));
char *uri = getenv("REQUEST_URI");
FCGI_fprintf(err,"[%s] 404 : %s\n",buf,uri);
// FCGI_fflush(err); - if low traffic and realtime logs desired
printf("Content-type: text/html\r\nRefresh: 0;url=/nice_message.html\r\n\r\n");
}
FCGI_fclose(err);
return 0;
}
// EOF

Then :
gcc -I/usr/local/include -L/usr/local/lib -Wall -O2 -o log_errors.x log_errors.c -lfcgi
mv log_errors.x /usr/local/bin/log_errors.x

And that's it...
Oh, this is not the most beautiful piece of code you can find... but it does the job.
I'll be happy to get better code if you write it...

[SYSCTL] Testing Lighttpd

In need for a server that would serve only static content (small files), but at the highest rate possible, I've tested Nginx, Lighty and Apache.

While Apache is clearly out of the game, Nginx wasn't that bad, however lighty 1.4.19 clearly achieved the best performance (even better than 1.5.0 with sendfile-aio) and was much better documented.

Since I thought I was really wasting my time testing different parameters (which many other probably already did) to achieve the best performance, I'm posting my config file here in hope it will be useful.

server.document-root = "/your_noatime_mounted_partition/static"
server.errorlog = "/your_noatime_.../logs/lighttpd.error.log"
server.event-handler = "linux-sysepoll"
server.network-backend = "linux-sendfile"
server.max-fds = 8192
server.max-connections = 4096
server.stat-cache-engine = "simple"
server.max-worker = 4 # (= number of CPU)
server.max-read-idle = 60
server.max-write-idle = 360
server.max-keep-alive-requests = 1024
server.max-keep-alive-idle = 16
server.bind = "127.0.0.1"
server.port = 80
dir-listing.activate = "disable"
etag.use-inode = "enable"
etag.use-mtime = "enable"
static-file.etags = "enable"
server.username = "your_favorite_anonymous_user"
server.groupname = "your_favorite_anonymous_group"
mimetype.assign = (
".swf" => "application/x-shockwave-flash",
".gif" => "image/gif",
".jpg" => "image/jpeg",
".jpeg" => "image/jpeg",
".png" => "image/png"
)

You can then use mod_mem_cache if you want even better performance...

[Netlantis] From Netlantis to FRNOG Tools

Some of my BGP related projects will now exist under 2 different "brands" :
- Netlantis
- FRnOG Tools

Here's the logo :

This might be temporary and we can only hope for the Netlantis projet's revival in a few months (years).

[SYSCTL] FreeBSD 7.0

One of my (FreeBSD) servers has been up for more than 3 years without the need for a reboot...
# w
8:38AM up 1138 days, 7:05, 1 user, load averages: 1.05, 1.35, 1.37
This one is serving something like 100 GB of data per day, the box is from 2000, a dual P3 Xeon 500 Mhz with 384 MB RAM...

This makes you wonder why the trend for switching from Windows to *nix hasn't been faster :)

Though it's nice to see so many devices running a *nix (mostly Linux) around us everyday. When Linux Phones will come to the mass market, people will be surprised to have a stable smartphone again (I have to soft-reboot my Win Mobile 2005 at least every 2-3 weeks). Though I really can't see why companies still stick with Linux... since the license (GPL) is clearly not the most flexible, compared to the BSD one, for example.


The very new FreeBSD 7.0 is available for download since a few days and runs on ARM CPUs (those used in mobile devices). NetBSD runs on ARM since a few years... Strange to see how some so tactical/important decisions are made.

Even though I'm still a FreeBSD lover, I mostly install CentOS (RedHat Entreprise clone) in production environment, because to me, it's simply the most production-ready *nix available to date.

[Netlantis] RANX beta

You can try RANX beta, HERE.

The RANX Graph feature is the one to be tested, the rest of the website is simple XHTML and should work on most modern browsers.

For this website, I've used several open-source libraries :
menus (which I've enhanced) : Dynamic Drive CSS Library,
RANX graph drawing library from Walter Zorn
(you may wonder why I've used a javascritp/DHTML lib to draw shapes dynamically... the answer is quite simple... I don't know Flash and I know several hardcore-GNUs who don't have it installed...),
the data for the RANX Graph are in AJAX/JSON format.

There's still a bit of work and optimization to do, but I must admit I like it already :) It's been really interesting working with these technologies that make 2.0 exist (namely, DHTML/CSS, XHTML, AJAX).

Don't hesitate to report bugs you can find.

[Thoughts] End-of-transmission - Changing Job

For those who used to contact me through my work e-mail pbourcier _at_ citali.com, this e-mail address won't be working anymore since yesterday was my last day at this company.

I'll be working for Criteo from now on... more stories on my new 2.0 work-life later :)

[Netlantis] RANX

I'm working on a new Netlantis project right now, called RANX.


The project is based on an AS Ranking code and concept from PhD Mickael Meulle from France Telecom R&D.

You can read his presentation at NANOG 40 by clicking here.

More infos later...

[Thoughts] Hand's fix0red...

It should look like this under X-rays now...


Question is... does it beep at the airport ? :)

[Thoughts] Audiophile PC

I've decided to get myself a new home-built silent and "green" (as in energy-efficient) PC...

My needs were :
- pro optical audio output
- 3 video output (for my dual-screen + my HDTV)
- totally silent !
- less than 1000 euros

It works really nice, so here's my recipe :
Asus M2A-VM HDMI Micro-ATX Motherboard (0 dB)
Asus EAH2400PRO HTP 256M graphic adapter (0 dB)
CPU AMD X2 BE-2300 AM2 (45 Watts : the most energy-efficient Desktop CPU available)
DDR2 RAM Crucial 2 x 1G PC6400 800MHz
Seasonic S12II-380 Power Supply 380 Watts (Active PFC, very silent and 85%+ efficiency)
PC case ANTEC SOLO (expensive but good against noise)
Noctua NH-U12F CPU cooler (6 dB)
Noctua NF-S12-1200 case fan (6 dB)
DVD burner PIONEER DVR IDE (Pioneer SATA + AHCI = won't work well)
PRO audio adapter E-MU 0404 PCI
SATA HHDD (Hybrid HardDisk) Samsung 2.5" HM08HHI 80G (one platter = better against noise) 5400rpm 8M cache + 256M Flash (good if vista really uses it...)
Corsair Voyager GT 4 GB (entirely used by readyboost)

With AMD Cool&Quiet active, the CPU runs at 23° Celsius, the GPUs at 33°, the motherboard at 42° and the PC is really silent.

The total price is 750 euros all tax included (in France).

[Thoughts] My Photoshop secret tip for underwater photography post-prod

The photo as taken with my now very old (but still working) Powershot A70 in its underwater case ($100 on ebay) :

Blurry and lacking some colors, isn't it ?

This is the photoshoped result.

Before...

After...

So you are in Photoshop and you opened your photo (it's called Background by default).

1 - Duplicate current layer (Background)
2 - Auto Levels
3 - Brightness/Contrast : Brightness +50
4 - Duplicate Background
5 - Move current layer to layer 2 (at the top)
6 - Auto Color
7 - Opacity 80%

If the result is too flashy you can play with the Opacity of the two first layers.

Of course you can make this an action script.

Enjoy!

[Thoughts] Br0ken!

A pedestrian crossed the street and had me fell from my bicycle.

The result is a broken right hand scaphoid bone...


Believe me, it hurts...

More infos about the scaphoid fracture.

I also broke the radius, but this is less of a problem...

I'll get better brakes and tires for my bicycle :)

Btw, the bike ain't broke, it's a decathlon (cocorico).

[Thoughts] From Eudora to Penelope

Saturday was migration day... from Eudora 7 to Eudora 8 (aka Thunderbird 2.0.0.6 + Penelope extension (made by Eudora developers)).

I have to say this wasn't the nicest migration ever...
First, my Outbox was lost during the conversion (~1 GByte of emails) for an unknown reason and I had to re-import it manually with a converter written in Python.

Then, I have to say Penelope is quite far from Eudora at the moment.
There are some nice features, like an huge speed improvement compared to Eudora 7, but all the GUI is crap compared to the existing Eudora 7.

The nice thing is there are tons of add-ons for Thunderbird which will make it look more like Eudora... and some will make it better for specific tasks or parts.

Here's my add-on list with notations :

+ = nice idea but buggy or incomplete implementation
++ = nice
+++ = really useful and well implemented
++++ = should be included into thunderbird

Dictionary Switcher / to switch between French and English : +++
Header Scroll Extension / to limit the size of the full headers panel : ++++
Maximize Message Pane / to open new messages inside thunderbird's main window : + (not quite as cool as Eudora 7 was)
No New Window on Double Click / to avoid the opening of new windows when you double-click on a folder : + (double-click should take us to that folder)
Penelope / Eudora 8 : +
Quote Colors : to colour threads in e-mails : + (nice but sometimes buggy)
Show Address : to show sender and destination e-mails : +++

[Thoughts] Back from Greece

Nice holidays in a small Greek island...

(view from our house)

Some photos... HERE

[Netlantis] Routing Table Geoanalysis

Today is the official launch of my latest (and newest) project, the Routing Table Geoanalysis.

In fact, while I was working on the ASGEO project I received an invitation to participate to a visualization competition, NetSci07, with my (now old) rootzmap project... which I did (though I did not win :)).

This is when came to me the idea of creating Geoanalysis posters... and the Netlantis Routing Table Geoanalysis project was born. Of course, this will be part of the Netlantis project (when it's back), so every peer will have its own RTG poster available for download every month.

ps: Note that the rootzmap project will also be available from Netlantis so peers will be available to generate their own map (which is going to make nice t-shirts for your-favorite-NOG meeting) :)

[SYSCTL] Cable Bandwidth Upgrade

No need to say that it works better than before (4Mb/s - 256Kb/s).

Yumm, since October, upload has been upgraded to 1Mb/s...

[SYSCTL] Installing VMXnet on Debian Etch (4.0)

# Getting the right packages if using a netinst (with a 2.6.18-4-686 kernel)
apt-get install linux-kernel-headers linux-headers-2.6.18-4-686 make psmisc gcc

# Creating a symlink so that the vmware script finds everything easily
cd /usr/src && ln -s linux-headers-2.6.18-4-686 linux

# Installing VMWare Tools (no SSH, console only)
./vmware-install.pl
(Answer "no" to the vmhgfs question, so that you won't build it (it's useless in most cases))

# the vmxnet module is compiled...

# Now we're doing what they are telling us to do...
/etc/init.d/networking stop
rmmod pcnet32
rmmod vmxnet
depmod -a
modprobe vmxnet
Don't /etc/init.d/networking start ... it's useless

# And this is what they are not telling us to do :
Stop the VMWare...
Edit "Other Linux 2.6.x kernel.vmx" (or whatever .vmx you have) :
Add the following line under ethernet0.present = "TRUE" :
ethernet0.virtualDev = "vmxnet"

Reboot the Linux, lspci and lsmod will show you no pcnet32 device, only the vmxnet one.

Enjoy!

[Thoughts] New sound system @ sysctl labs

I just finished my sound system upgrade, which consisted in getting the new Samson Rubicon 10" sub (mid-end studio monitoring equipment) and two beautiful and really great speakers from Monitor Audio, the RS6.

Here's the whole system :

Even though it's still being running in, it already sounds good and the "Rosenut" RS6' suits better my interior which has red & black for theme.

If you're interested by this setup, here's the components list :
- 1 x Toslink splitter from Velleman (hugh! ... though it's only a switch :))
- 1 x Inter-M (Inkel) R150 Plus
- 1 x Behringer ULTRAMACH PRO SRC 2496
- 1 x Samson Rubicon R10S
- 2 x Monitor Audio Silver RS6
...and it's total price is good for the quality (~1800 euros).

Don't hesitate to give your thoughts on possible improvements to this system :)

The sub + the RS6 replace my Tannoy MX2M's mounted on Atacama Nexus 7 stands, which offered me hours of pleasure and have been sold to a good friend (which tells how much I appreciated these :) ).

[Thoughts] Signal Spam

First spam sent to Signal Spam...


Well it seems to go in the database, and the site is really fast, which probably means they haven't yet been affected by the slashdot syndrome.

I'm surprised how "geeky" (as opposed to user-friendly) the website looks...

I've read an interesting post about the technical details behind the project : http://www.jgc.org/blog/

Surprisingly, it's MySQL based, we'll see if the database works well after a few million emails sent... My experience says after 20 Million entries or 40 Gb of data, MySQL on a single server tends to be "less usable" :)