Monthly Archives:: January 2009

New Project?

Posted by & filed under Projects, RADIUS, Security, WiFi.

Well the time has come and I have been looking for a new project. I think implementing WPA2 Enterprise complete with a RADIUS backend would be fun not to mention help secure the home network further (currently using WPA2/TKIP).

I’m not sure if I am going to ditch my Tomato firmware on the WRT54G v3 for openWRT or what. I need to see what kind of requirements the freeradius server has.

Some links Ive found so far:
wiki.openwrt.org/OpenWrtDocs/Wpa2Enterpr…
Using RADIUS for WLAN Authentication

Memory Forensics

Posted by & filed under Forensics, Security.

Dumping out a image of the current memory set for further analysis seems to be a much better approach to finding hidden processes, open ports, etc.

 http://sansforensics.wordpress.com/2008/11/19/memory-forensic-analysis-finding-hidden-processes/ is a good article on it.

In a nutshell www.mandiant.com/software/memoryze.htm provides a suite of tools. Once he image gets dumped, you can analyze it with analyze.bat which will generate a XML file that you can import into excel for analysis.

RedHat LVM Expansion Fiasco

Posted by & filed under Linux, Server Admin.

Finally I figured out a procedure for resizing the LVM partition. A server’s /usr partition has been dangerously full for some time now so this has become a priority.

Procedure:

  • Resize VHD with VhdResizer
  • fdisk /dev/hda
    Add a new primary partition (hda4 for this list)
  • Reboot
  • Tell LVM about the new physical volume
    pvcreate /dev/hda4
  • Extend the volume group
    vgextend VolGroup00 /dev/hda2
  • Extend the logical volume to use the newly expanded space
    lvextend -L 19G /dev/VolGroup00/LogVol00
  • Resize the filesystem to use the new space
    ext2online /dev/VolGroup00/LogVol00
  • Optional – check the disk for errors
    e3fsck -f /dev/VolGroup00/LogVol00