Friday, February 27, 2009

Fun with Apache 2 and help from helpful sources

After I got the major work things out of the way and while I was waiting for a matter to come back to me I had some time to look at the major differences of running a Snort IDS sensor on Debian 5. First and foremost, I found I had a bit of a learning curve going from the webserver Apache 1.x to Apache 2. One of those was the modular setup that Apache 2 and how a seperate SSL package wasn't nessesary. But it was not without its problem to work out.

A half hour into a reload this evening I could only get regular HTTP web traffic to work, but no TLS/SSL-encrypted web sessions. Later today I had to watch Jason while dinner was being made and I can say he helped me figure out the problem.
While I was studying how to enable 'sites' in Apache 2, Jason was sitting on my lap and looking around the desk. I was lucky in getting a few nice pictures like this one at the time. Soon thereafter I made a breakthrough and I got the Apache2 SSL issue fixed.
I can also report that it may not be possible to pack in the standard Debian install, Apache 2, Snort, and MySQL and assorted networking tools into a 450-Mb parition. (Yes, I was trying to sqeeze in the install into a small compact-flash (CF) card, but it just means I need to use my 4 Gb CF card!)

Snort-SGuil IDS and new Debian version


A little background: Late last night after everyone else in the house went to sleep I was watching TV and doing a bit of research on an intrusion detection system (IDS) project I am working on in my spare time. I am a fan of the Snort IDS system and have been working with it for at least 5 or so years. About 4 years ago I was introduced to a network monitoring front-end that does outstanding data correlation and event reporting without having to perform regular browser-screen refreshing like you would have to do using the legacy ACID or BASE packages. Its called SGuil and you can read more about it by going to this link.

Anyway last night while I was looking around for SGuil configuration tips and advice I appened over to the Debian Linux homepage and what do I discover???! I found out that Debian 5 is now out as it just was released on February 14th, 2009. Well I immediately started a download of a net-install CD so I can revamp my IDS that I was just getting started on loading. I got as far as loading SSH, Apache, and Snort where it was capturing data on 3 NICs using passive taps when I made this discovery. Its easy at this point to blow it away and reload it with the latest version of Debian packages (and better as bug fixes and vulnerabilities are addressed in the new versions of the packages.) Something to do this weekend. Joy! :-) I mean...what else am I going to do...watch NetFlix all weekend?

Thursday, February 26, 2009

A week home

Well, its been a week back at home and things are returning back to normal. I can see that I was missed by my work team and the group I work with at my Army Reserve Unit, the Western Information Operations Center in Dublin, CA. This past weekend I had to stay at home to keep a close eye on Jason while he was recovering (and my wife and I learned a lesson that in the beginning, it really takes two people to watch over one baby recovering from heart surgery.) So the Army had to do without me for a weekend.

The week back back at work has been pretty productive with catching up on old business that I had to curtail when I left suddenly two weeks ago and writing up reports. I am looking at a malware identification tool called TARA that features the use of detection rules. After a bit more study, I might end up using it more as the realm of malware will need every trick in the book to stay abreast of the threat.

Jason has been doing well this week and this is despite the head cold he seemed to pick up. At first the coughing was hurting his chest (we could see it in his facial expressions and especially his cries!) But either his chest stopped hurting as much or the cold symptoms abated very quickly as he seems like he is on the road to getting over it. I got a call from my parents today who said they got Jason's latest picture we sent to them and they enjoyed it. Here is a copy of that picture which is really something. Yes, Jason is now turning back into his cute self before the cold and his recent trip to the hospital. Its a marvel to see how much he is changing and growning in what seems like a matter of days.

Wednesday, February 18, 2009

Ah...back home!

So Jason got discharged from UCSF on account of good health and recovery progress on his recent cardiothorasic surgery. His labs looked good and the staff was satisfied in what they saw in the X-ray shots and heart ultrasound examinations over the past few days.

So all that got us home and we found that things were in pretty good order. The cats appeared to be a bit antsy at first but later got around to re accepting us. I think they were disappointed they could not watch Battlestar Galactica on SciFi channel on Friday nights till we got home. Well, we all know who really runs the house....

More news later when we get fully settled and adjusted.

Sunday, February 15, 2009

Jason is making a good recovery


It's Sunday and it appears that everyone is getting in rest and recovery. Jason is becoming more and more himself after the surgery and we can get him to smile and 'talk' a little bit. I have never had any type of in-patient surgical care like this but I can image I would feel like a train wreck if I was in the same shoes as Jason if a proprotional proceedure were done on me. I am just thrilled that he is getting back to his old self. This is definately more like his character that we are accustomed to seeing. We too are also getting some more rest and the wear on us is starting to subside. I do miss home, the people I work with, the family cats, and the coffee machine once again like last year. But we are told the stay here will be a lot less than our stay during the summer.


Jason's color and appearance are going back to normal for him. Here is a latest picture as I promised I would post

Thursday, February 12, 2009

Successful surgery and on the path of recovery

I have some good news for those that have been interested to know. Jason's sugery yesterday was successful. At about 8 Am he was wheeled into the surigcal ward where the cardiac surgeons performed a Glen proceedure and it went well where Jason was brought back to the pediactric ICU floor to recover. He was extubated in the evening and he did well enough resting through the night for his recovery from the surgery.

Today he is getting pain management and fluids to help nurse him along, even getting some of his formula by bottle. Jason is very much like me where much of my happiness is judged on food and eating!

I will have more news later and I might be able to put up some pictures later. That's all for now.

Wednesday, February 11, 2009

Suddenly back at UCSF

Folks-

What was supposed to be a routine visit to the doctors office turned into a trip to UCSF where we are all presently at. On Monday (yes, just after my last posting) Jason was seen by his cardiologist who recognized signs that Jason's health was very concerning and she had Jason readmitted to UCSF. (For everyone out there who's heart just stopped: Jason is presentlty OK.) Just as Jason got to his Dr's appointment he started presenting signs that his circulation was not all that well and our doctor caught onto it and took immediate action. I got called by my wife who told me the news. From there I had to hurridly & sloppily pack (I later found I did a rotten job at that) and leave work to meet with my wife so we can then travel to San Francisco where Jason was going.

That evening Jason had what was reportedly a great airplane ride to the hospital and the very next morning they performed a cardiac catherization. They determined that Jason's BT shunt was filling up and occluded. But Jason's circulatory system has built up extra blood vessles in the area which are referred to as 'collaterals' (sp?) and these have taken up the task where the shunt could not pass blood volume. I guess sometimes you can't top the wonder of nature and its ability to compensate.

Right now Jason is in surgery for his Glen operation and so far reported soon to come out as things have been successful in operating room. Jason was scheduled to have these exams and surgeries at a later date but everything got moved up because of his situation and the sudden onset. Anyway I will keep you posted. But everyone should know that Jason has been doing fine all along and handleing the change of routine very very well. He is in great hands here. These people are rock stars.

Monday, February 9, 2009

Into February and the rain has come

This past weekend has been a lot of fun. Football is out of the way until August and while most of the country is in the midst of a massive snowy weather pattern, California is finally getting rain. In recent years, January is a wet month for California and the local agricultural economy looks forward to it in making forecasts on how the crop seasons will go for the year.

Well it feels like Spring here. Not your usual weather. But its not all frowns. We get take Jason out in the afternoon for walks in his stroller and its warm enough that the walks are enjoyable. For the time being, we are not getting rained on, but a rain system is making its way in from the Pacific Ocean and the next few weeks may have some wet days in the forecast.

This past weekend we had to travel to the USCG Coast Guard Island to get renewed ID and dependent ID cards. It was an all day experience because on certain days, only certain DoD or Department of Homeland Security offices are open for business and on a first-come, first-served basis. So we had to wait throughout the morning and afternoon once we arrived to be seen. While its tough to get an appointment during the week, it is well advised if your situation allows you to get away long enough to do it. Otherwise I recommend you show up real early, right around opening time. Too bad it took all day because we were thinking about taking Jason to the Oakland Zoo after getting the ID cards taken care of. Better luck next time.

We've gotten many pictures taken of Jason and they look great. I will post them on another posting and scan in the pictures that aren't already in digital format later, perhaps tonight or tomorrow night. Jason is doing really well and he is growing like a weed, very fast. He seems to be vocalizing more and is certainly more aware of what he does on things or people. He recognizes bottles and his baby toys and we've noticed he makes different grunts/squeals in response of them coming into view. When any one of the cats come nearby, he gets excited and sometimes he will reach out and pet them. Its really great to watch these moments.

That's all for now...