In my case having just made the mount over to the transporter worked out great. Let’s walk through the steps of making the image backup to the transporter folder. That will not only give you a backup but an offsite one too as the transporter syncs it off to another location.

Determine the device name of the sd card

First we need to get the device name of the sd memory card our Raspberry Pi is running on. Log into the Pi and run the following command.

>sudo fdisk -l

Disk /dev/mmcblk0: 8010 MB, 8010072064 bytes

4 heads, 16 sectors/track, 244448 cylinders, total 15644672 sectors

Units = sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk identifier: 0×00016187

Device Boot Start End Blocks Id System

/dev/mmcblk0p1 8192 122879 57344 c W95 FAT32 (LBA)

/dev/mmcblk0p2 122880 15644671 7760896 83 Linux

We can see that the partitions on the card start with “mmcblk0″ and that is the part we need.

Run the backup to our mounted transporter drive

The backup will take a while to write especiallly if you have an 8GB or more card. You will not get a progress indicator. You will know it is done when you see records output lines.

>sudo dd if=/dev/mmcblk0 of=/home/pi/transporter/raspi/Rpi-Backup.img bs=2M

3819+1 records in

3819+1 records out

8010072064 bytes (8.0 GB) copied, 1054.02 s, 7.6 MB/s

Confirm the backup is over on the transporter

>ls -lh /home/pi/transporter/raspi

total 7.5G

drwxrwxrwx 0 root root 0 Sep 26 00:06 Python

-rwxrwxrwx 0 root root 7.5G Mar 5 23:18 Rpi-Backup.img

That is all there is to it. You have an image backup of your active sd card running your Raspberry Pi.
Check out Norman’s two part series on all the other neat tricks such as mounting the image to pull out files.

I have a FileTransporter on the same network as my Raspi. Here is how I hooked it up.

Preparing the Transporter

First log into your Transporter admin site. And go to your transporters.
https://secure.connecteddata.com/transporters

Choose the desired unit if you have more than one.
Choose Advanced on the right side and go into the SMF/CIFS section.

If SMB/CIFS is not enabled. Check that box to turn it on.
Then I chose to enable the “second login” option and name the user raspi.
I entered a reasonable password and that has the Transporter ready for the Raspi to connect.

Configuring the Raspi

Log into the Raspi.
Create a folder in your home directory:

mkdir transporter

Set the folder permissions:

chmod 777 transporter

We need to setup a credentials file:

sudo su -

While escalated to root:

vi smbcreds

Edit the file to be as follows, substituting in the password and username you setup as the second smb login on the raspi

username=raspi
password=yourpasswordhere

Save the file and exit.
Exit again to return to the pi user account from root.

Next we need to edit fstab to mount the drive to the transporter folder:

sudo vi /etc/fstab

Add the following line to your fstab. You will need to substitute the ipaddress, Name of the transporter, username and password from the transporter.

//ipaddress/nameoftransporter /home/pi/transporter cifs auto,credentials=/root/smbcreds,iocharset=utf8,file_mode=0777,dir_mode=0777

Finishing up

Now just execute the command:

sudo mount -a

You should be able to change into the transporter directory and find all the folders you have existing on your transporter. From now on if you restart your raspi it will auto mount the transporter.

If you set your rapsi to write any files to one of those folders it will now be automatically distributed to all other transporters sharing that folder. If you have other remote raspis and they have access to a transporter you now wide large distributed storage across them. Maybe one pi grabs photos and another elsewhere displays them.

Enjoy!

Using just my iPhone I do 90% of what I need. I download podcasts and audiobooks on a daily basis. I check email, twitter with Tweetbot, etc all using my phone. It was a little difficult to manage at times due to power. Even with having two Mophie Air iPhone cases. I airplay content such as my audio books to an appleTV while gives plenty of volume for whole room audio via a TV. It could be inconvenient if I needed check a message, pause playback etc when the phone was on the charger. Now enter my Pebble watch. I put in a few minutes and cleaned up what types of notifications get sent to the Pebble. Now I can actually leave my iPhone plugged in on my Kensington Night Stand, with the iHandy Alarm Clock up and still stream my content and check messages all with the iPhone as the central management point.

It just amazes me to live in the future. I grew up with the Vic20 and Commodore64 and recall when modems went from acoustic couplers to plug in modular cables. Now, I even write full blog posts using my iPad with a bluetooth keyboard. Sometimes I even edit those posts via my iPhone prior to posting. Got to love it.

I was excited to find my Pebble waiting for me this weekend. Reviews by other backers have generally been good. You can find several others listed below so I will not rehash all of the common details. Instead, I want to touch on a couple of issues specific to my experience.

• Week with Pebble Review
• Rev.Voodoo Pebble Review
• Pebble Video Walk Through – Screencasts Online

I wore my Pebble to dinner on Friday night. The $spouse’s comment was that it looked like something out of a cereal box due to the black plastic. My reply was: I was just as excited to get it as when digging the prize out of said cereal box. Granted, it is not formal wear like a Rolex. It does handle the things that I wanted it for. Viewing information and controlling music on my iPhone when walking to and from the office or working out. Even the black rubber band it comes with works best for my immediate needs. I won’t mess it up with water or sweat.

Issues – Siri and Bluetooth

I have run into a couple of the reported issues. The Siri blocking issue frustrates me most. This occurs most of the time when the Pebble is active with my iPhone and I try and trigger Siri. You will see the bluetooth selector next to Siri’s microphone icon. If the pebble is selected then it dead ends the audio and Siri cannot hear you. Sometimes you can select the iPhone to get Siri working again. Often it will flip back to the Pebble if you have lost Bluetooth connectivity. Such as leaving the watch on your desk and carrying your iPhone around the house.

I did find that I never have the Siri issue when I am in my car. My iPhone is set to automatically pair with my car handsfree system. The non phone audio of my iPhone also automatically associates with my TuneLink bluetooth adapter that goes to the line in of my car audio system. Siri functions every time normally without hooking into the Pebble by accident.

There is another issue I have noticed that no one else seems to have mentioned. If I open an app that consumes a lot of iPhone memory and other resources I think the iPhone is killing the Pebble app. It comes back when the Pebble communicates with the iPhone. That triggers the popup to request approval for allowing the Pebble to talk to the phone again. This is something I hope Pebble can fix in a software update to better hook approved status and not keep prompting going forward.

Issues – Notifications

I have had a mixed experience on notifications. I had some sporadic issues with even normal notifications working such as iMessages. A reboot of my iPhone seemed to clear that up.

Email notifications gave me a brief headache. I did not want every single email showing up on my Pebble. So I killed display in lock screen on the main settings for my two primary mail accounts in the iPhone. However I left it active on my VIP list which is supposed to override the settings. I had hoped this would mean that I only saw email on the Pebble from that list of people. Unfortunately that temporarily broke email notifications.

I did a run through to reset all notification styles and got it working again. Then moved it back to VIP list only and that seems to have cleared it up for me. I am now just seeing email notifications on my Pebble from those on my VIP list.

I strongly suspect the reset notification hook dance has a tie to the Bluetooth reconnection after the iPhone and Pebble gets back into range of each other.

Update 2/17/13 7PM I have found I definitely have to do the trick of changing notification type to none and back to the desired type like banner after I have gotten the pop up requesting permission to give the Pebble permission to connect to my phone. It is consistent.

Summary Opinion

I love the watch so far despite the odd bluetooth and Siri issues. I think it will fit the need exactly as I intended. Future software updates should keep the experience improving. It is not going to be a purchase for everyone for a while yet. But perfect for my walking and exercising needs. One other scenario I look forward to with the Pebble. I listen to a lot of audio books. Now I can leave my iPhone plugged in and charging on the night stand with airplay of my books to speakers. I get to see important messages and pause the book if needed all without having to take the phone from it’s charger.

Setup

The setup was very straight forward. I just have to install the Hue app on my iPhone after hooking up the controller box to my router andinstalling the three bulbs. You just press the button on the controller and the app sees and associates the unit to your app. Nowyou can control the bulbs with any of the preset lighting profiles.

The App

Now the bad part of all this is the app. It is nearly pure garbage. It tries to sync the profiles between your online account and to alldevices with the Hue app connected to your controller. My experience has been that it often glitches and you get duplicate or missing profiles across devices. They would have done better to support iCloudor dropbox sync support. The worst part of the app by far is the timer function. You can set profiles to start and stop on a timer. Youwould think that the timer settings get loaded into the controllerunit. The best I can tell is that the timers only work if you leave the app running on the device where you set the schedule. Any glitches in connectivity can cause them to fail to go off as well. In a nutshell they are completely unreliable.

General Experience

Overall the setup was very simple. The app is the worst part of the experience for automation. The bulbs are 60W equivalent. If you needbrighter then these are not the bulbs for you. I did enjoy takingphotos and setting my own color profiles as long as I was satisfied manually switching to those profiles rather than scheduling them. I definitely do not regret the purchase, since I can climb into bed and flip all the lights off at once. If I need to get up in the middle of the night I can flip them all to a low power profile like “moonlight.”That is great so I can move around without waking myself up too muchfrom bright light.

Keep in mind the limitations of the scheduling if you are considering this purchase. That might be a deal breaker for most folks. Instead look at the Belkin WeMo to control your existing lights.

The laundry room of my apartment building uses  a service called Laundryview.com to let people see the status of the washer and dryer units including time remaining.  I have my raspberrypi handy.  So I set out to put together a python script to scrape the machine status every fifteen minutes and push the data into splunkstorm.com.  This is so I can actually trend the machine usage to determine what days of the week and times are most available.   Plus I wanted to see if I could do something new. Below is a sample graph from splunkstorm showing the in use pattern for the washing machines.

If you want to see the python script just click more.  Warning it is down and dirty.  I could have made things more elegant but it works and I have not had time to polish it up.  You will see I use lxml to parse the mobile version of the site for the machine status from a table.

# import the needed modules
import lxml.html
from datetime import datetime
import time
import logging
from logging.handlers import SysLogHandler

# grab the laundry room status and parse it by machines
html = lxml.html.parse(“http://lite.laundryview.com/laundry_room.php?lr=455621″)
machines = html.xpath(‘//tr/td/div/span/text()’)

# create the timestamp for the running status collection
timestamp = str(datetime.now())

# setup the syslog handling to splunkstorm
logger = logging.getLogger()
logger.setLevel(“INFO”)
syslog = SysLogHandler(address=(‘logs2.splunkstorm.com’, 20085))
formatter = logging.Formatter(‘%(name)s: %(levelname)s %(message)s’)
syslog.setFormatter(formatter)
logger.addHandler(syslog)
# iterate through the machines, build the syslog message for each machine with it’s status
# this could be more elegant to know how many machines but it works quick and dirty

i=iter(machines)
i.next()
message=timestamp+”,machine_id=01,machine_type=Washer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=02,machine_type=Washer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=03,machine_type=Washer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=04,machine_type=Washer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=05,machine_type=Dryer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=06,machine_type=Dryer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=07,machine_type=Dryer,machine_status=”+i.next()+” ”
logger.info(message)
i.next()
message=timestamp+”,machine_id=08,machine_type=Dryer,machine_status=”+i.next()+” ”
logger.info(message)

time.sleep(5)

 

This is a great project where he is collecting DNS records for as much as the Internet as he can manage with some really creative methods. Currently he has turned on PTR record searching.  So let’s say you are doing a pen test or joining a new organization. You need to gather what information is available for the domain you are being employees to help. Just put the domain in quotes up in the search field and you will get back the resulting records. The search results are limited to 1,000 records by default but can be increased to up to 10,000.  Small personal domains may not show up. It is giving great results for larger more established domains for organizations.

Just dump as many of the records you can. Drop it in a text file and grep with fun words like ldap, dc, mail, ftp etc can speed up your learning curve.

Scenario:
Let’s say you have Cisco ACS up and running. It is already successfully talking to your Active Directory installation. You also already have an existing VPN Client remote configuration where the group policy name is “GP_VPN_ITNET” and the tunnel group name is “TG_VPN_ITNET”

Now you have an active directory group called “RG_VPN_ITNET” and want to ensure that the only vpn remote access profile that group can use is the existing remote configuration.

1. Log into the Cisco ACS
2. Create a New Network Access Authorization Profile under Policy Elements-> Authorization and Permissions-> Network Access->Authorization Profiles
1. Create a new Profile
2. Name the set to match the desired AD VPN Group Name
1. Example Name: ‘RG_VPN_ITNET”
2. On the RADIUS Attributes tab, add the following
1. Dictionary Type: RADIUS-IETF
2. RADIUS Attribute: 25 – Class
3. Fill in the group-policy name from the asa tunnel-group in the bottom field box.
1. Example: “OU=GP_VPN_ITNET;”
3. Create new rule under “Radius-CPS Remote Access” object in Access Policies->Services Access
4. Name the Authorization Rule. Example: “RG_VPN_ITNET”
1. Conditions: AD1:ExternalGroups: use the desired AD VPN group. Example :”domain.com//Global Groups/Resource groups/VPN/RG_VPN_ITNET” specify the Authorization Profile “RG_VPN_ITNET”
5. Move the Authorization Rule: above the existing rules.
6. Connect to the ASA Unit where the remote access VPN tunnel-group configuration exists.

Config t
group-policy GP_VPN_ITNET attributes
group-lock value TG_VPN_ITNET
exit
exit

7. Test the VPN client connects successfully for a member of the Active Directory group.

So here is an AppleScript that will do just that. It is written and tested on OSX Lion with iLife 11. So you may have to play with it for your version if that is not what you are running.  Keep in mind it is a toggle script.  It will reverse the settings of iPhoto, iTunes sharing and the firewall. So it is assumed you share both with the firewall off when at home.

Also you need to ensure Enable access for assistive devices is checked under Universal Access in System Preference.

Just cut and paste the below script into the AppleScript editor.  Then save either as an application on your desktop you can double click. Or save as an AppleScript where an application like LaunchBar can use it as an action. ~/Library/Application Support/LaunchBar/Actions

– This script is setup for OSX Lion with iLife 11

– You may have to edit menu item, bar and button numbers to adapt for other versions with altered gui.

– Technically this script will toggle the states from whatever they were when you run it.

– So pay attention to if you are setting things to be secure before getting onto public wifi

 

tell application “iTunes” to activate

 

tell application “System Events”

tell process “iTunes”

click menu item 3 of menu “iTunes” of menu bar 1

click button “Sharing” of tool bar 1 of window 1

click checkbox “Share my library on my local network” of group 1 of window 1

click button “Ok” of window 1

end tell

end tell

 

tell application “iPhoto” to activate

 

tell application “System Events”

tell process “iPhoto”

click menu item 3 of menu “iPhoto” of menu bar 1

click button “Sharing” of tool bar 1 of window 1

click checkbox “Share my photos” of group 1 of group 1 of window 1

click button 1 of window 1

end tell

end tell

 

– This assumes you have used the firewall before and allowed the applications you want with it running.

– It will prompt you to enter your admin credentials in order to turn the firewall on

tell application “System Preferences”

activate

tell application “System Events”

tell process “System Preferences”

click menu item “Show All Preferences” of menu 1 of menu bar item “View” of menu bar 1

click button 6 of scroll area 1 of window “System Preferences”

click button 4 of window “Security & Privacy”

click button “Start” of tab group 1 of window “Security & Privacy”

end tell

end tell

delay 3

quit

end tell

The VM tutorial uses Ubuntu Linux, syslog-ng and Splunk.  I go over how to use syslog-ng with fifo queues to handle multiple sources and even rewrite forwarded syslog events coming from Kiwisyslog before indexing in Splunk.  The tutorial zip has both pdf and epub formats in it.

*update* I was asked some questions today during my presentation on MS Log Parser.  I added my post on it below to the link list.  Also for those downloading my actual logging vm from the link I gave those whom attended my talk.  The url does redirect to dropbox so do not be surprised.

*second update* a question came up today on a forensics mailing list to search some evtx event log files.  I suggested using MS Log Parser to replay output to syslog.  The target being spunk say like in my logging vm tutorial.  Then the logs are easily searchable.

• Slides Download (pdf)
• Tutorial – Rolling your own Logging VM
• Fun with dumpevt and MS Log Parser