Link: Linux ntopng – Network Monitoring Tool Installation (Screenshots)

Nowdays computers are connected between each other. From the small area such as your home Local Area Network (LAN) until the the biggest one which we call – Internet. When you are managing a network computer, you are managing one of the most critical component. Since most of developed application is web based application, the network between critical.

There is why we need a network monitoring tool. One of the best network monitoring tool is called ntop. From Wikipediantop is a network probe that shows network usage in a way similar to what top does for processes. In interactive mode, it displays the networkstatus on the user’s terminal. In Web mode, it acts as a web server, creating a HTML dump of the network status. It supports a NetFlow/sFlowemitter/collector, a HTTP-based client interface for creating ntop-centric monitoring applications, and RRD for persistently storing traffic statistics

Now after 15 years, you will find ntopng – the next generation ntop.

What is ntopng

Ntopng is a high-speed web-based traffic analysis and flow collection. Ntopng is based from ntop. It’s run on every Unix platform, MacOS X and Windows.

Full article here:
Linux ntopng – Network Monitoring Tool Installation (Screenshots) (LinOxide)

Note that according to the ntopng download page, in addition to Linux, ntopng “should virtually compile on any Unix/Win32 platform.” However, we don’t know of any specific instructions for those platforms at this time.

Link: How to Recover Accidentally Deleted Files Without Paying Outrageous Fees

You can’t always blame data loss on hardware failure. A clumsy user can be just as harmful. PhotoRec is a nifty little command-line based tool that can recover accidentally deleted files.

To use PhotoRec effectively you need to understand how the filesystem handles files. When you delete a file, it isn’t actually zapped into oblivion. Rather the file system just marks it as deleted, and makes the space the file occupies available to other files.

This means that until another app uses that recently freed-up space, the original file is still there, and can be retrieved by a file recovery tool. For this very reason, it’s very important that you immediately stop using the computer as soon as you realize that you have accidentally deleted files in order to minimize the interactions with the hard disk.

Note: PhotoRec is cross-platform compatible. For this tutorial, we will use a Linux (Ubuntu) system for illustration.

Full article here:
How to Recover Accidentally Deleted Files Without Paying Outrageous Fees (Make Tech Easier)

An interesting, but perplexing expansion board for the Raspberry Pi

Expansion board for Raspberry Pi
This afternoon our Twitter stream informed us of the existence of this thing: An Expansion Board Made for Raspberry Pi made by a company called SupTronics, which appears to be headquartered in Shenzhen, China. It can be purchased from this site, and the specifications can be found here. Quoting from that page:

 Introduction

The X100 expansion board designed for use on the Raspberry Pi (RPi) computer platform. The board supplies RPi with a regulated +5V from a wide-range voltage source and also contains a real-time clock, a RS232 master port, a HDMI to VGA converter, 3-port USB hub, memory card reader, and 8-channel darlington Driver.  
Main Features
  • Exactly same size as Raspberry Pi (85 x 56mm)
  • Directly installed into the GPIO header pins with no wiring or soldering
  • 6-23V input to 5V, 3A high-efficiency step-down DC/DC converter to supply your RPI
  • Supports HDMI to VGA (NOT powered by the RPI’s HDMI port)
  • Supports self-powered USB hub (Total 4 ports available)
  • Supports self-powered SD and Micro-SD card reader
  • RTC based on NXP PCF2127AT / PCF2129AT with CR2032 backup battery
  • RS232 Serial Port
  • Having the reset switch convenient to enable RPi reset facility
  • Having two slots to make use of RPi’s FPC connector (S1 & S5)
  • Allowing to stack along with other expansion boards.
  • 8-channel darlington Driver chip allowing to control electronic circuits which require more current to drive them
  • Have DIP switch to remove connection from RPi’s pin header so as to keep using other expansion board with no effect.
 * This expanson board is suitable for Raspberry Pi Rev 2 Model B.

We haven’t actually had our hands on the device, but our initial impression is that it adds a bunch of things that might each be individually interesting to a certain subset of Raspberry Pi owners, but in most cases it will be priced too high to get that one feature you really need, and if you only need one of those features you can probably build it yourself or find a cheaper way to add it. Let’s take each actual feature in turn:

6-23V input to 5V, 3A high-efficiency step-down DC/DC converter to supply your RPI

This in and of itself is great if it works, since the Raspberry Pi is notoriously finicky about power supplies (use one that’s not quite stable enough and you’re likely to have occasional SD card corruption). But a good power supply wouldn’t cost nearly this much. However, if you want to install a Raspberry Pi in a vehicle that only has a 12 volt supply available, or some other situation where the available power is unstable, then this become a more desirable feature.

Supports HDMI to VGA

WHY? Who uses VGA anymore? Oh, right, this came out of China, where the first world dumps all its CRT monitors that nobody wants anymore. We’d have much rather seen this relatively ginormous space used to provide improved audio capability; perhaps a S/PDIF connector supporting full 5.1 or even 7.1 audio. That would have been something we could actually make use of.  And why do they use the word “Supports” to mean “This is included on the board”?

Supports self-powered USB hub (Total 4 ports available)

It appears this means that it includes 4 USB ports. Which is great if you need them, but you can buy powered USB hubs for less than what this costs.

Supports self-powered SD and Micro-SD card reader

Again this is a rather strange way to word this, because the card reader is on the board. Since the Raspberry Pi already has a SD card slot, what’s the advantage of having one on this board? For many users there will be none.

RTC based on NXP PCF2127AT / PCF2129AT with CR2032 backup battery

This is really only useful if you are using your Raspberry Pi in a situation where you can’t update the time from an Internet-based timeserver. And even then, it only matters if keeping something close to the exact time is important to your application. Again, we could see this being most useful in a vehicle-based application.

RS232 Serial Port

This is so early 2000’s. A rare few people might have a use for this (and for those that do, we suspect that add-on serial port circuits are available for less than this) but for most people this is just a useless port that wastes space that could have been occupied by something useful, like maybe a Wi-Fi or Bluetooth module, or any of a number of things that might actually be useful to people in this decade.

Having the reset switch convenient to enable RPi reset facility

A switch that costs less than a dollar to add is hardly a reason to buy this board, but at least it’s more useful than some of the other things they put on here. But, why not a true power switch, that (when used with some software) would do a proper shutdown on the Raspberry Pi? That would have been far more useful. And, viewed one way, giving people easier access to a cold reset is not such a great idea, since every time you use it you risk corrupting your SD card. Yet we understand that it can be a convenient feature if the Raspberry Pi is prone to freezing up occasionally.

8-channel darlington Driver chip allowing to control electronic circuits which require more current to drive them

This appears to be basically a ULN2803A integrated circuit with the outputs brought out to some inconvenient connectors. It’s described this way:

ULN2803 8-channel RC servo port
Bring in some muscle to your output pins with 8 mighty Darlingtons! This driver chip contains 8 drivers that can sink 500mA from a selecable 5V or input voltage supply and has kickback diodes included inside for driving coils. This will let your little microcontroller or microcomputer power solenoids, DC motors (in one direction) and unipolar stepper motors. The GPIO Pins are connected to ULN2803 inputs through a DIP switch, with the its outputs going to two array of Wire-to-Board header. Alternatively, these ports can be used to supply +5V or input voltage to other external circuitry, or embedded devices.Please note that this is an ‘open collector’ driver – it can only be used to connect the load to ground and there will be a 1 Volt (or more) ‘drop’ across the internal transistors.

For some people this might be the most useful thing on this board, although it would be nice if there were better documentation on how it’s used. It appears that this converts the Raspberry Pi GPIO ports to make them behave more like those on an Arduino, though we can’t be entirely sure. But you can do the pretty much the same thing same thing with a cheap breadboard, a ULN2803A (get the kind with long pins, not the surface mount type), some connector wires, and an external power supply. Here you get all that in one package (except you will still need the external power supply), but why on earth did they add those funky little white GPIO connectors on the board? We realize those appear to be similar to the type used to bring power to certain devices (such as some internal drives) but still, the plugs that fit those connectors are not something that the average person is likely to have lying around.

Basically, it’s our opinion, again based solely on the information we can find online, that this will only be a good fit for people that happen to need several of these features, or that simply have money to burn and no inclination to look for other ways to achieve the same results. And (at least in the first world) relatively few people will have use for a VGA port, and probably even fewer for a serial port. We can see some of the other features being a bit more useful, particularly in vehicle based and remote sensing applications, or cases where you plan to power this off a solar or wind-powered source of electricity.

If there is ever a second revision on this board, we would recommend the following:

– Ditch the VGA port and replace it with a S/PDIF audio output.
– Ditch the serial port and consider replacing it with a wi-fi and/or bluetooth connection
– Change the reset button so that it becomes a true power on/off button, so that when the power is turned off it signals the Raspberry Pi to do a graceful shutdown (the equivalent of typing sudo poweroff at the command prompt) and then waits for that shutdown to complete before removing the power. We would expect that you’d need to run a background task to catch the shutdown signal and run the shutdown sequence, but you have to install additional software to make the RTC work, so this would simply be similar to that procedure. And several people have built standalone devices that do this, so it’s definitely possible, and this would be far better than giving a typical user an easy way to do a “cold” reset that might bork their system.
– Add a receiver for an infrared remote (suggested by Jeff Darlington in the comments section)

We neither recommend this board nor advise against it, we’re just saying that depending on the reasons you’d want to use it, there might be better or less expensive options. But if you can utilize several of the functions on this board, then it might be a good value for you, assuming that it works as advertised and that if you plan to use the GPIO connections, you can actually figure out how you’re supposed to connect to them.

OpenSprinkler Pi (OSPi) – An Open-Source Sprinkler / Irrigation Extension Board for RPi

OpenSprinkler Pi (OSPi) is an open-source sprinkler / irrigation extension board for Raspberry Pi (RPi). It is based on the design of OpenSprinkler, but its ‘brain’ is an RPi instead of an AVR microcontroller.

The idea of OSPi first came when I noticed that many users were setting up RPi to work with OpenSprinkler. There are good reasons to do so, for example, to enable logging, to customize the default Javascript files, and to allow more advanced features such as weather-based and learning-based control. OSPi is designed as an extension board that makes use of RPi’s GPIO pins to directly control sprinkler valves, without an additional layer of microcontorller and Ethernet controller. In other words, it is a circuit board that allows an RPi to directly interface with sprinkler valves.

Full article here:
OpenSprinkler Pi (OSPi) (rayshobby.net)

Link: How to install and configure Nagios on Linux

Nagios is one of the most powerful network monitoring systems, which is widely used in the industry. It can actively monitor any network, and generate audio/email warnings and alerts when any problem is detected. The check types and alert timers are fully customizable.

Another incredible capability of Nagios is that it can monitor both hosts and services e.g., it can monitor IP addresses and TCP/UDP port numbers. To explain a little, let us assume that there is a web server that we want to monitor. Nagios can check whether the server is online by running ping on the IP/name of the server as well as it can be set up to provide warnings in case the round trip time (RTT) to the server increases. Further, Nagios can also check whether TCP port 80 (web server) is reachable e.g., the server is online but Apache/IIS is not responding.

There are also 3rd party monitoring tools that are based on Nagios, such as Centreon, FAN , op5 Monitor, which supplement standalone Nagios engine in terms of interface, automation, and technical support.

This tutorial explains how to install and configure Nagios on Linux.

Full article here:
How to install and configure Nagios on Linux (Xmodulo)
Related:
Install And Configure Nagios on Ubuntu 14.04 LTS (Unixmen)

Why you can’t get SRTP encryption to work between Asterisk and your VoIP adapter or phone

Some recent versions of Asterisk (Asterisk 11 in particular) have built-in SRTP support of sorts. As Wikipedia notes,

The Secure Real-time Transport Protocol (or SRTP) defines a profile of RTP (Real-time Transport Protocol), intended to provide encryption, message authentication and integrity, and replay protection to the RTP data in both unicast and multicast applications. It was developed by a small team of IP protocol and cryptographic experts from Cisco and Ericsson including David Oran, David McGrew, Mark Baugher, Mats Naslund, Elisabetta Carrara, James Black, Karl Norman, and Rolf Blom. It was first published by the IETF in March 2004 as RFC 3711.

In simple terms, SRTP encrypts the audio of your VoIP calls, making it much more difficult for anyone with a packet sniffer to listen in.

Let’s say you have an Android-based tablet and you are running CSipSimple. If you have configured it as an extension off your Asterisk 11 server, and you turn SRTP on in the security settings, you will likely find that outgoing calls work fine but incoming calls do not.  The reason is that you need to add one line to the extension’s configuration settings in Asterisk:

encryption=yes

If you are using FreePBX then it’s only a bit more complicated.  You’d need to add two lines to the /etc/asterisk/sip_custom_post.conf file:

[####](+)
encryption=yes

Replacing #### with the extension number. Once you have done this and reloaded Asterisk, it will only communicate with the endpoint using SRTP.

BUT there is one problem here.  With some other VoIP devices and softphones, once your have enabled SRTP, any attempt to place an outgoing call will not work.  And, if you watch the Asterisk CLI, you may see lines similar to this:

[2013-12-19 08:18:57] NOTICE[2949][C-000005e9]: sip/sdp_crypto.c:255 sdp_crypto_process: Crypto life time unsupported: crypto:1 AES_CM_128_HMAC_SHA1_80 inline:6aV+PFYMnVJVUZuxug9EM5yefPnfOrNhHcKLSABE|2^20
[2013-12-19 08:18:57] NOTICE[2949][C-000005e9]: sip/sdp_crypto.c:265 sdp_crypto_process: SRTP crypto offer not acceptable
[2013-12-19 08:18:57] WARNING[2949][C-000005e9]: chan_sip.c:10454 process_sdp: Rejecting secure audio stream without encryption details: audio 17100 RTP/SAVP 0 8 18 104 101

The problem is that in Asterisk, “any SRTP offers that specify the optional lifetime key component will fail”, as is detailed in this submitted patch to Asterisk:

(ASTERISK-17899) [patch] Adds a ‘ignorecryptolifetime’ (Ignore Crypto Lifetime) option to sip.conf for SRTP keys specifying optional ‘lifetime’

If if the device or softphone had a setting to disable sending the lifetime parameter, it probably would work. If users would go through the trouble of applying this patch to Asterisk, it would probably work, but many users either don’t know how to do that, or they are running a pre-built distribution and don’t want to or cannot tamper with it (also, any upgrades to Asterisk thereafter would require re-application of the patch). If Digium would apply this patch to Asterisk and push it out in upgrade releases, it probably would work. But for whatever reason, though this patch was first posted back in May of 2011, Digium has not seen fit to roll it into Asterisk.

So, this may very well be the reason, or at least one of the reasons, why you can’t get SRTP encryption to work between Asterisk and your VoIP adapter or phone! Basically, your VoIP device or softphone and Asterisk just don’t want to play nice with each other.

We’ve heard that some other varieties of PBX software, such as FreeSWITCH, might not have this issue, but since we don’t have a working FreeSWITCH installation at the moment we cannot comment on that.

Link: Raspberry Pi OpenVPN Server Tutorial

This page shows how one user installed an OpenVPN server on a Raspberry Pi. (For your Pi!)

Link: What You Need to Know About Swap Partitions on Linux

When you install Linux, the setup process will likely add a swap partition to the hard disk along with the partitions for Linux itself. But what is this swap partition used for and is it really necessary?

Full article here:
What You Need to Know About Swap Partitions on Linux (Make Tech Easier)

Link: Managing the Iptables Firewall

Your firewall is an important first line of defense on any publicly-accessible server. In previousarticles I listed how to set up a firewall without getting into any detail. This article goes into depth with configuring your iptables firewall.

Full article here:
Managing the Iptables Firewall (Fideloper)

Link: How to Install and Configure UFW – An Un-complicated FireWall in Debian/Ubuntu

The ufw (Uncomplicated Firewall) is an frontend for most widely used iptables firewall and it is well comfortable for host-based firewalls. ufw gives a framework for managing netfilter, as well as provides a command-line interface for controlling the firewall. It provides user friendly and easy to use interface for Linux newbies who are not much familiar with firewall concepts.

While, on the other side same complicated commands helps administrators it set complicated rules using command line interface. The ufw is an upstream for other distributions such as Debian, Ubuntu and Linux Mint.

Full article here:
How to Install and Configure UFW – An Un-complicated FireWall in Debian/Ubuntu (TecMint)