SYSMGR

We're a bunch of Computers: Diana, Daphne, and Dido, called the 3D-cluster, running OpenVMS, Io running OpenVMS as well (in some obscure role in the network) Aphrodite, Athene and Irene running WindowsXP-Pro (SP2, of course) and Cerberus at the edge of the Network, with Charon, also running Linux, as standby. SYSMGR takes care of us.

Tuesday, February 14

14-Feb-2006

Not yet working
The logs of the apache server were expected to be copied - but once again, they were not, so there is again something to look after: did it work at all? Well, it did since operator and FTP logs were copied, just the Apache logfiles seem to be missing. Whether it's just the copy that failed, or the whole part of procseeing in the batch procedure, needs to be seen.
Security
Weird processing in FTP when checking, but it may be an issue with firewall settings.

This is ftp_anonymous.log's data:

11-FEB-2006 19:52:42.20 User:anonymous logged in ident:AppleNetworkingTechnology@apple.com from Host:216-99-199-38.cust.aracnet.com
11-FEB-2006 19:52:44.20 User:anonymous ident:AppleNetworkingTechnology@apple.com logged out

Just checking existence? Well, try to access a directory, this may be automatic, the directory exists, here it says it's Ok:

11-FEB-2006 19:52:44.80 User:anonymous logged in ident:AppleNetworkingTechnology@apple.com from Host:216-99-199-38.cust.aracnet.com
11-FEB-2006 19:52:46.00 User:anonymous ident:AppleNetworkingTechnology@apple.com status:07649912 CWD dir:WEB_DISK:[public.anonymous]WEB_DISK^:^[public^.anonymous^].;
11-FEB-2006 19:52:46.21 User:anonymous ident:AppleNetworkingTechnology@apple.com logged out

ok, that's one step further. Now try with TWO sessions at a time , but as a different user (default by Mozilla client?), and one got down to the (existing) Perl directory:

11-FEB-2006 19:53:40.47 User:anonymous logged in ident:mozilla@example.com from Host:216-99-199-38.cust.aracnet.com
11-FEB-2006 19:53:42.62 User:anonymous ident:mozilla@example.com status:00010001
CWD dir:WEB_DISK:[public.anonymous.perl]

The other logged out immediately:

11-FEB-2006 19:55:40.63 User:anonymous logged in ident:mozilla@example.com from Host:216-99-199-38.cust.aracnet.com
11-FEB-2006 19:55:43.00 User:anonymous ident:mozilla@example.com logged out

The one still connected tries to retrieve the binary kit and logged off:

11-FEB-2006 19:57:42.27 User:anonymous ident:mozilla@example.com status:FFFFFFFF RETR file:WEB_DISK:[public.anonymous.perl.binarykit]perl-5_8_4-vmsaxp-7_2-1.zip;1
11-FEB-2006 19:57:42.34 User:anonymous ident:mozilla@example.com logged out


But: Status -1: would that mean an error? Or is this "success"? (TCPIP has been ported from Tru64 and is known for this kind of bad habits....)

FTP log shows the same things.
The first access: log in and out:

%TCPIP-I-FTP_SESCON, FTP SERVER: session connection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:52:41.67
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_SESDCN, FTP SERVER: session disconnection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:52:44.27


testing whether it existed? Now the other accesses:

%TCPIP-I-FTP_SESCON, FTP SERVER: session connection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:52:44.40
%TCPIP-I-FTP_NODE, client host name: 216-99-199-38.cust.aracnet.com
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_OBJ, object: WEB_DISK^:^[public^.anonymous^]
%TCPIP-I-FTP_CHINFO, TCPIP$FTPC0000D: Failed to set default directory
%TCPIP-E-FTP_BADDIR, invalid directory
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_SESDCN, FTP SERVER: session disconnection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:52:46.27

Weird, this directory does exist - but without the escaped :, [, . and ] (they're not needed, so either this persons' FTP client is bad, or the person doesn't know the proper escaping)
Once more, and now two sessions at a time:

%TCPIP-I-FTP_SESCON, FTP SERVER: session connection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:53:40.06

%TCPIP-I-FTP_SESCON, FTP SERVER: session connection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:55:40.22

Both sessions try to access 'backward', or is this an attempt to do passive? Never seen before, not even with the Linksys router:

%TCPIP-I-FTP_NODE, client host name: 216-99-199-38.cust.aracnet.com
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_OBJ, object: 216.99.199.38
%TCPIP-I-FTP_CHINFO, TCPIP$FTPC0000E: Can't open data connection
%SYSTEM-F-TIMEOUT, device timeout
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_SESDCN, FTP SERVER: session disconnection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:55:43.22

and the other session the same:

%TCPIP-I-FTP_NODE, client host name: 216-99-199-38.cust.aracnet.com
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_OBJ, object: 216.99.199.38
%TCPIP-I-FTP_CHINFO, TCPIP$FTPC0000F: Can't open data connection
%SYSTEM-F-TIMEOUT, device timeout
%TCPIP-I-FTP_USER, user name: anonymous
%TCPIP-I-FTP_SESDCN, FTP SERVER: session disconnection from 216-99-199-38.cust.aracnet.com at 11-FEB-2006 19:57:42.43

Or did it something different?

0 Comments:

Post a Comment

<< Home