Search Results

(2022-09-07) Prevent the certificate warning page from popping up on subsequent initial connections to a website: click a blank section of the denial page using your keyboard, type thisisunsafe -- this will add the website to a safe list where you should not ...

(2024-11-12) Most of the time I'm running iperf3 to understand the capability of a long distance link (think cross-continental or intercontinental), some of the tricks listed below won't apply or will be misleading if applied to a short distance link. Run the...

(2024-11-12) This page contains a quick reference guide for Linux tuning for Data Transfer hosts connected at speeds of 1Gbps or higher. Note that most of the tuning settings described here will actually decrease performance of hosts connected at rates less th...

(2024-11-13) Stronger encryption algorithms equals to lower MTU values. For example, the FortiGate sets an IPsec tunnel Maximum Transmission Unit (MTU) of: 1446 for 3des-sha1, 1438 for aes256-sha256, aes192-sha256, aes128-sha1, aes128-sha256 1422 for aes...

MTU can be adjusted via three ways: Adjusting the MTU of the physical interface where the IPsec tunnel is bound to. This method will not only affect the VPN traffic but all traffic which is traversing the physical interface as well. Changing the encryption...

(2024-11-13) To confirm errors are increasing on IPsec VPN interface(s), periodically issue one of the below commands: A) RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:337 errors:1 dropped:0 overruns:0 carrier:0 collisions:0 ...

(2024-11-15) Problem You have a logfile full of IP addresses and you need to figure out if they belong to a given set of subnets. In my case I have a nameserver that is part of my authoritative trio, but a select number (forty subnets) of clients are permitted...

(2014-07-17) MrRogers knows who is in your neighbourhood. mrrogers is a perl script which uses snmp to query a switch to list its LLDP neighbours. Originally I wanted a perl script that would list the LLDP neighbour on a specific port so that I could run it in...

(2024-11-22) mkdir tmp.$$ cd tmp.$$ for z in /var/log/maillog ; do for i in `grep stat= $z | awk '{print $6}' | sort -u` ; do echo $i # this is the message transaction ID grep $i $z | egrep -i 'Hello|rcpt to|mail from' > $i done done mkdir ../out.$...

(2024-11-22) for z in /var/log/maillog* ; do for i in `grep stat= $z | awk '{print $6}' | sort -u` ; do grep $i $z | grep 'Hello' | sed -e 's/^.*\[//' -e 's/\].*$//' done done | sort | uniq -c | sort -nr

(2024-11-24) Dotfiles for my personal consumption: # wget https://raw.githubusercontent.com/xdroop/xdroop_dotfiles/master/.screenrc # wget https://raw.githubusercontent.com/xdroop/xdroop_dotfiles/master/.vimrc # wget https://raw.githubusercontent.com/xdroop/xd...

(2024-11-28) fw # exec log filter category Category. device Device to get log from. dump Dump current filter settings. field Filter by field. free-style Filter by free-style expression. ha-mem...

(2024-12-05) Assuming you already have a remi php installed: # dnf module switch-to php:remi-8.3

(2024-12-17) Command Mode Show System Info > show system info hostname:... ... Show configuration for system section > configure # show deviceconfig system system { ssh { ... Find a command Show the entire command hierarcy: > find command Show command s...

(2024-12-17) set deviceconfig system snmp-setting access-setting version v3 views My-SNMP-View view FULL-ACCESS oid 1.3.6.1 set deviceconfig system snmp-setting access-setting version v3 views My-SNMP-View view FULL-ACCESS option include set deviceconfig syste...

(2025-01-13) General: packet-tracer input ifc_name [ vlan-id vlan_id ] icmp [ inline-tag tag ] { src_ip | user username | security-group { name name | tag tag } | fqdn fqdn_string } icmp_value [ icmp_code ] [ dmac ] { dst_ip | security-group { name name | tag ...

(2025-01-31) FGVM # di geoip ip2c 147.45.47.173 147.45.47.173 - Netherlands, is not anycast ip FGVM # di geoip ip2c 179.60.146.34 179.60.146.34 - Netherlands, is not anycast ip FGVM # di geoip ip2c 185.190.24.15 185.190.24.15 - Lithuania, is not anycast ip ...

(2025-02-19) Command Does diag dvm device list list all devices diag dvm device list name list the entry for name Note that the fortimanager does not have grep, so if you have a non-trivial number of devices registered you'll want to copy/paste the...