I’ve written about networked printer insecurities before and I came across another great article called Hacking Network Printers (Mostly HP JetDirects, but a little info on the Ricoh Savins) by Adrian “Irongeek” Crenshaw. Don’t forget that those network printers are fully functioning computers these days and should be treated with the same security measures.

I recently found that the Barnyard process on my IDS sensors were unexpectedly throwing errors in /var/log/messages:

barnyard[3862]: FATAL ERROR: Error (The table 'data' is full) executing
query: INSERT INTO data(sid, cid, data_payload) VALUES('5', '9158',
'00000A2EFF534D4273000000001807C800004253525350594C2000000000FFFE0000400
00CFF002E0A04413200000000000000AB0900000000D4000080F309608209A706062B060

I logged into my master MySQL database server and checked the size of the sguildb data file:

# du -ha sguildb/data.MYD
4.1G    sguildb/data.MYD

Oh, there must be a 4G filesize limit. Let’s see how many rows I have in data:

mysql> select count(*) from data;
+----------+
| count(*) |
+----------+
|  3719121 |
+----------+
1 row in set (0.00 sec)

I probably need to bump up the number of rows. This article at the MySQL site helped.

mysql> SHOW TABLE STATUS FROM sguildb LIKE 'data';

That output gave me the rows and avg_row_length I need for the following command. I decided to bump up the max_rows to double what I currently had (2*3719121):

mysql> ALTER TABLE data max_rows = 7438242 avg_row_length = 1154;
Query OK, 3719121 rows affected (16 min 0.57 sec)
Records: 3719121  Duplicates: 0  Warnings: 0

Problem solved.

I bought some wireless components to do wireless auditing at work. It’s a bit confusing picking out exactly what you need and what works well so I wanted to make a note of what I got (from Netgate, recommended):

200mW Long Range 802.11b PCMCIA Card
9 dBi Yagi Antenna N Female
MMCX to N-Male Pigtail 18″

The card worked out well as it contains a widely supported Intersil Prism 2.5 chipset and has two external antenna leads. I was also tuned into a great bootable OS based on KNOPPIX called Auditor. It has 300 some security tools and worked well in performing wireless audits using tools like Kismet and Wellenreiter. Also, wavemon, a monitor for wireless devices, works extremely well for pinpointing the location of wireless devices. In fact, I liked Auditor so much I installed it on the hardrive of the laptop.

Here’s a picture I took of the wireless hardware.