by Hank Kingsle » Tue, 05 Mar 2002 20:16:17
--
NOSPAM: remove _ to email me.
by Richard L. Hamilt » Tue, 05 Mar 2002 22:17:19
Here's what I know about it, from the opposite perspective (trying toQuote:> Is there a reliable way of working out the Host ID of a Sun server from it's
> MAC address. I see that the last 3 octets in the MAC address are used for
> the last 3 octets in the Host ID, but the Host ID has a number that can
> change between different types of server. I've seen host ID's with 80 and
> 83 as the first octet.
http://groups.google.com/groups?as_umsgid=%3Cu6nj7rmhe5l476%40corp.su...
Look near the end - if the high bit of the first byte of the hostid is off,
the first byte represents the architecture (1st nybble) and model (2nd
nybble), otherwise architecture and model are to be obtained elsewhere
(and presumably the value of the first byte of the hostid is assigned so
as to maximize the number of unique hostids available, and thus can't be
calculated unless you have a substantial table of values actually assigned,
and some other obtainable information to determine which apply).
Y'know, if you just want to be able to obtain a hostid over the network,
it's easy: pick an unassigned port number, and add an entry to
/etc/services, and another entry to /etc/inetd.conf, something like these:
/etc/services:
hostid 8887/tcp
/etc/inetd.conf:
hostid stream tcp nowait nobody /usr/bin/hostid
After that, you can use e.g. telnet or mconnect with a port argument to
to retrieve the hostid from the system you set up accordingly. Keep in
mind that you might not want the whole world to be able to retrieve your
hostid, and so your choice of a port number should be made in consultation
with whoever maintains your firewall(s).
--
by savares » Tue, 05 Mar 2002 22:44:07
For an E10K domain to be created you need to get a license. That license
gives you the serial number for the domain. (BTW the domain is just a host
running on an E10K). This serial number is in hex and is 24 bits long. The
last 24 bits of the hostid are the same as the serial number and the last 3
octets (24 bits) of the mac id, are the same as the serial number...
Scott
by Hank Kingsle » Wed, 06 Mar 2002 00:06:52
Quote:> Is there a reliable way of working out the Host ID of a Sun server from
it's
> MAC address. I see that the last 3 octets in the MAC address are used for
> the last 3 octets in the Host ID, but the Host ID has a number that can
> change between different types of server. I've seen host ID's with 80 and
> 83 as the first octet.
> --
> NOSPAM: remove _ to email me.
by Hank Kingsle » Wed, 06 Mar 2002 00:33:03
> If the MAC address starts with 00:03:BA then the first octet of the host
> ID is 83. The next three octets are the last 3 octets of the MAC address.
> If the MAC address starts with 08:00:20 then the first octet of the host
> ID indicates the machine type. The next three octets are the last 3 octets
> of the MAC address. The machine type octet can be found here:
> < http://www.squirrel.com/squirrel/sun-nvram-hostid.faq.html >
> and has been 80 for all recent machines (except the ones where it is 83).
> Note that this is the default when the system leaves Sun.
> The host ID and the MAC address are stored separately in the NVRAM
> and as they can be changed, as described at the link above, no relation
> between the host ID and the MAC address may exist.
> --
> G?ran Larsson hoh AT approve DOT se
by Boll Weevi » Wed, 06 Mar 2002 07:01:21
What??? What's top posting???????????
>Hank, please don't top-post.
>http://groups.google.com/googlegroups/posting_style.html
>#
># Summarize what you are following up.
>#
># When you follow up an existing article, Google Groups includes
># the full article in quotes, with the cursor at the top of the
># article.
>#
># Tempting though it is to just start typing your message, please
># STOP and do two things first. Look at the quoted text and delete
># parts that are irrelevant.
>#
># Then, go to the BOTTOM of the article and start typing there.
>#
># Doing this makes it much easier for your readers to get through
># your post. They'll have a reminder of the relevant text before
># your comment, but won't have to re-read the entire article. And
># if your reply appears on a site before the original article does,
># they'll get the gist of what you're talking about.
by Joe Blogg » Wed, 06 Mar 2002 07:24:35
cypher gets all emotional when people do this.
Joe
> What??? What's top posting???????????
> ># Cheers 4 your help guys but my question is still not answered....
> >Hank, please don't top-post.
> >http://groups.google.com/googlegroups/posting_style.html
> >#
> ># Summarize what you are following up.
> >#
> ># When you follow up an existing article, Google Groups includes
> ># the full article in quotes, with the cursor at the top of the
> ># article.
> >#
> ># Tempting though it is to just start typing your message, please
> ># STOP and do two things first. Look at the quoted text and delete
> ># parts that are irrelevant.
> >#
> ># Then, go to the BOTTOM of the article and start typing there.
> >#
> ># Doing this makes it much easier for your readers to get through
> ># your post. They'll have a reminder of the relevant text before
> ># your comment, but won't have to re-read the entire article. And
> ># if your reply appears on a site before the original article does,
> ># they'll get the gist of what you're talking about.
by Boll Weevi » Wed, 06 Mar 2002 23:13:32
Hmmm.... I don't get it.
The bug
>cypher gets all emotional when people do this.
>Joe
>> What??? What's top posting???????????
>> ># Cheers 4 your help guys but my question is still not answered....
>> >Hank, please don't top-post.
>> >http://groups.google.com/googlegroups/posting_style.html
>> >#
>> ># Summarize what you are following up.
>> >#
>> ># When you follow up an existing article, Google Groups includes
>> ># the full article in quotes, with the cursor at the top of the
>> ># article.
>> >#
>> ># Tempting though it is to just start typing your message, please
>> ># STOP and do two things first. Look at the quoted text and delete
>> ># parts that are irrelevant.
>> >#
>> ># Then, go to the BOTTOM of the article and start typing there.
>> >#
>> ># Doing this makes it much easier for your readers to get through
>> ># your post. They'll have a reminder of the relevant text before
>> ># your comment, but won't have to re-read the entire article. And
>> ># if your reply appears on a site before the original article does,
>> ># they'll get the gist of what you're talking about.
Pretty simple.
A host is a single computer
A network is a group of computers
Host IDS detects instrusions on a single PC
Network IDS watches the network which may have multiple PC's or clients.
Could be a class A/B/C or even D network or any combination. For
networks, an IDS normally exist at the enclave boundry protecting or
monitoring all traffic at the boundry going to/from networks behind the
boundry.
Disclaimer: Various IDS make various claims.
A host IDS may protect your network if you have a dual nic'd host
between your network and your provider.
For example: I may have a WIN2K PC with 2NICS with one NIC connected to
my cable modem and service provider and the other NIC connected to a hub
or switch with my kids computer, bedroom computer, living room and
kitchen computer connected to the hub/switch. The WIN2K PC is acting as
a gateway or internet connection sharing box. I might be able to use a
host IDS to monitor and protect all my data from all PC's since I am
"bottle-necking" all data through the WIN2K PC and the host IDS is
monitoring traffic on the WIN2K PC.
But say I have a router with a built-in switch and I have all my PC's
connected to it. That means I probably need a network IDS that is going
to look at all the traffic on my home LAN since I am not
"bottle-necking" my traffic through the one PC but am using the cable
router/switch as my gateway.
Example of Host IDS for windoz is Black Ice, Zone Alarm etc., and for
linux is portsentry. An example of a good network IDS for both windoz
and linux is Snort.
Much more to it but the above is the simple answer. And of course this
is arguable..
ITC(SW) Smith
2. Will this system support linux?
3. comp.sys.mac.misc comp.sys.mac.system comp.sys.mac.apps
4. gimp-print / RPM recursive dependency list?
6. How to access to C: drive in win XP from RH 7.2
7. which MAC-ID when using NAT with iptables/netfilter?
8. PCMCIA 10/100 Ethernet card.
10. MAC ID Config
12. secret ids & flash mac address