I'm trying to configure AWStats so that it ignores my benchmarks, which I usually run with ab (Apache Benchmark).
The following entry did not change anything, the entries are still considered:
SkipUserAgents="REGEX[ApacheBench.*] ApacheBench/2.3"
And yes, I deleted the old AWStats result (to force re-creation). How do I solve this?
When I try to dump some traffic on my vserver's network interface, I get an error that I'm not allowed to do that:
# tcpdump -p -i eth0
tcpdump: eth0: You don't have permission to capture on that device
(socket: Operation not permitted)
I guess the problem is that my server provider seems to use a virtualization solution with shared Linux kernel (uname returns "2.6.33.7-vs2.3.0.36.30.4-netcup" as version).
Any way that allows me to dump outgoing traffic from a single process?
I set up OpenVPN 2.1.3 on Windows 7 following the OpenVPN Easy Windows Guide. The client (another computer) can connect without problems and gets the desired IP x.x.x.6/255.255.255.252 in the VPN IP range. The server itself is x.x.x.1/255.255.255.252.
In my scenario, I only have clients which need to connect securely to that one server (which also runs the OpenVPN server).
But the client and server cannot ping each other (on their VPN IP addresses). What's wrong here?
On the server, I set "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter=1" to enable IP forwarding (and restarted of course).
(EDIT: I must add that ping works when I use TAP device, but how about TUN?)
Server config:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 192.169.0.0 255.255.255.0 # OpenVPN seems to change this to x.x.x.252
ifconfig-pool-persist ipp.txt
client-to-client # not sure if I need this, just tried
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
Client config:
client
dev tun
proto udp
remote 192.168.1.197 1194 # That's the server's physical address on my wifi
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
EDIT 2
Here are the routes created by both modes:
route print on client with TUN
192.169.0.0 255.255.255.0 192.169.0.9 192.169.0.10 30
192.169.0.8 255.255.255.252 On-link 192.169.0.10 286
192.169.0.10 255.255.255.255 On-link 192.169.0.10 286
192.169.0.11 255.255.255.255 On-link 192.169.0.10 286
route print on server with TUN
192.169.0.0 255.255.255.0 192.169.0.2 192.169.0.1 30
192.169.0.0 255.255.255.252 On-link 192.169.0.1 286
192.169.0.1 255.255.255.255 On-link 192.169.0.1 286
192.169.0.3 255.255.255.255 On-link 192.169.0.1 286
route print on client with working TAP
192.169.0.0 255.255.255.0 On-link 192.169.0.8 286
192.169.0.8 255.255.255.255 On-link 192.169.0.8 286
route print on server with working TAP
192.169.0.0 255.255.255.0 On-link 192.169.0.1 286
192.169.0.1 255.255.255.255 On-link 192.169.0.1 286
How can I auto-deploy a WAR file (created by Play! framework, by the way) to Tomcat 6, but on an arbitrary URL such as "/sub/url", and without changing the WAR filename?
I know I can simply upload it as "sub#url.war" and Tomcat will automatically deploy it to "/sub/url", but my filename contains a special site identifier so I would like to keep the filename even if the URL changes.
Lets assume the filename is "specialfilename.war".
I also tried to add a META-INF/context.xml file to the WAR
<Context path="/sub/url" />
but that does not get used in any way. Tomcat copies that file to "conf/Catalina/localhost/specialfilename.xml" but the specified URL path does not affect anything. My application keeps getting auto-deployed to "/specialfilename".
Is it possible to let Apache automatically return a 404 page for a single URL using the Location tag?
<Location "/some/url">
# ???
</Location>
Solutions without mod_rewrite or any other modules preferred.
The manpage of traceroute says that the "-U" parameter (UDP probing) is the default, but I'm getting different results every time.
With "-U":
traceroute -U www.univ-paris1.fr
traceroute to www.univ-paris1.fr (193.55.96.121), 30 hops max, 60 byte packets
[...]
13 rap-vl165-te3-2-jussieu-rtr-021.noc.renater.fr (193.51.181.101) 59.445 ms 56.924 ms 56.651 ms
[...]
18 * paris1web.univ-paris1.fr (193.55.96.121) 23.797 ms 23.603 ms
but the normal traceroute gives me another result (never reaches the final node) - it's either "!X" or just exits after the maximum of 30 hops:
traceroute www.univ-paris1.fr
traceroute to www.univ-paris1.fr (193.55.96.121), 30 hops max, 60 byte packets
[...]
11 te1-1-paris1-rtr-021.noc.renater.fr (193.51.189.38) 28.147 ms 28.250 ms 28.538 ms
[... non-responding nodes ...]
28 site-1.03-jussieu.rap.prd.fr (195.221.126.58) 85.941 ms !X * *
Note: I tried this very often and always get the same results. The path in my local network is always the same.
So what does the "-U" parameter actually change here? I'm especially interested what the reason for "!X" could be (communication administratively prohibited).
EDIT: If that helps, paris-traceroute gives me the following for the last hop:
14 P(1, 6) site-1.03-jussieu.rap.prd.fr (195.221.126.58) 34.938 ms !5 !T2
which means that node discards the packet with TTL=2 and returns an unknown message (not "destination unreachable" or the like).
I'm trying to transparently route traffic of one Xen VM through another, like so:
------- 192.168.250.4 192.168.250.3 ---------
| VM1 | <-----------------bridged----------------> | VM2 | <-----> Internet
------- | with |
| squid |
| proxy |
---------
Don't ask why, just experimenting with iptables. I'm able to successfully route HTTP traffic through VM2's Squid proxy (transparent mode) with
iptables -t nat -A PREROUTING -p tcp --dport 80 –s ! 192.168.250.3 -j REDIRECT --to-port 3128
but how can I simply pass through all other traffic? Already tried this config but it gives me "Connection refused" errors when trying to access the Internet from VM1 (192.168.250.4):
vm2:~# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
# route outgoing udp traffic
DNAT udp -- !192.168.250.3 0.0.0.0/0 udp dpt:!80 to:192.168.250.3
# route outgoing tcp traffic
DNAT tcp -- !192.168.250.3 0.0.0.0/0 tcp dpt:!80 to:192.168.250.3
# this is the working squid rule
REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 3128
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
# route incoming traffic
SNAT all -- 0.0.0.0/0 192.168.250.3 to:192.168.250.4
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
What is wrong here? I already read lots of tutorials but most don't work properly... (BTW: /proc/sys/net/ipv4/ip_forward is 1)