D
Dag Wieers
dag.wieers.com · Personal blog · on HN since 2009
Dag Wieers writes Linux sysadmin notes and is the author of the dstat monitoring tool, with posts on SSH tunneling and RPM.
What HN saysHN commenters link his SSH over HTTP tunneling how-to and his dstat tool page, and discuss his Firefox lost-tabs post.
16HN people shared it
12linked it in comments
4stories submitted
36story points
13 years agolast shared
2009people per year2026
Most-shared posts
- 1Dstat: Versatile replacement for vmstat, iostat, netstat and ifstat5 people · 4 points · first shared 2010 · discussion on HN
- 2Ssh http tunneling4 people · first shared 2010
- 3Rpm2 people · first shared 2010
- 4Improving Putty settings on Windows1 people · 30 points · first shared 2009 · 16 comments on HN
- 5Chrome no longer supporting RHEL6 (and CentOS-6 and SL6)1 people · 2 points · first shared 2013 · discussion on HN
- 6FAQ1 people · first shared 2010
- 7What if firefox loses your tabs1 people · first shared 2013
- 8Workrave1 people · first shared 2010
- 9The burden of keeping things private1 people · first shared 2009
What HN people wrote when they linked it
specto · 2012-08-21
Similar to the method outlined in the following link by Dag Wieers
http://dag.wieers.com/howto/ssh-http-tunneling/
peterwwillis · 2011-04-01
A neat way to hide your SSH port, but not very practical (scanners will just wait a little while to see if the SSH banner gets pumped out). You want something that speaks HTTP so it'll get through transparent proxies of corporations and wifi paywalls, which would be proxytunnel combined with a server-side configuration of whatever your favorite http proxy/server is. Even if your corporate environment forces NTLMv2 proxy authentication, you can chain cntlm and proxytunnel to their proxy and still tunnel out, and nobody is the wiser.
(http://dag.wieers.com/howto/ssh-http-tunneling/)
danishkhan · 2010-09-02
Great article. I have been trying to implement a lot of those points that you make.
If you really need to try and drink something other than water I would recommend Apple juice. It's really the only thing you can find that is 100% pure all the time. Even OJ isn't something especial if it's from MinuteMaid.
For taking breaks I would recommend a few applications a computer geek can download.
Mac OSX: TimeOut: http://www.dejal.com/timeout/, AntiRSI: http://tech.inhelsinki.nl/antirsi/
Linux: Workrave: sudo apt-get install workrave or http://dag.wieers.com/rpm/packages/workrave/
Windows: Workrave works for windows as well, Bigstretch: http://www.monkeymatt.com/bigstretch/
brymaster · 2013-08-09
> crash and upon restart completely have forgotten what tabs I had open
I've run into some strange behavior like this before too. When you reopen Firefox and its lost your session, try opening another window or two and see if 'Restore Previous Session' is finally available.
If that didn't work, there are also a few other tools that can help solve restoring your sessionstore.js:
Firefox Sessionstore.js fixer
http://thepanz.netsons.org/post/firefox-sessionstore-js-fixer
What if Firefox loses your tabs ?
http://dag.wieers.com/blog/what-if-firefox-loses-your-tabs
emmelaich · 2012-12-09
Nice -- it's good to see something like this that has long been a natural niche for Perl.
See also http://dag.wieers.com/home-made/dstat/
daten · 2010-11-15
I suggest dstat over vmstat, it has color coded output and abbreviates units automatically. It's easy to add columns or monitor specific devices or interfaces.
http://dag.wieers.com/home-made/dstat/
I suggest OpenNMS as a cacti and nagios alternative. It eliminates most of the manual configuration. It can automatically detect nodes and services and if you give it SNMP information it can monitor specifics of each machine. I've used it to monitor hundreds of machines but it can be resource intensive.
http://www.opennms.org/
iftop is also a nice lightweight alternative to iptraf and helps track down bandwidth heavy processes and connections.
http://ex-parrot.com/pdw/iftop/
cpach · 2010-10-25
And if the firewall does protocol blocking, solutions like http://dag.wieers.com/howto/ssh-http-tunneling/ might be able to get through.
patrickgzill · 2010-09-15
Centos 5.x exactly tracks bug-for-bug what RHEL 5.x is. That is why some of it appears old.
If you don't need or want a free version of Linux that is exactly compatible with RHEL, then simply add some repositories, such as EPEL or the DAG repository (http://dag.wieers.com/rpm/ ) .
pieter · 2010-01-10
At the end of the article, the author suggests to look at proxytunnel and http://dag.wieers.com/howto/ssh-http-tunneling if you want to do this under Linux.
I just want to point out that this last option does a lot more than what the article does: it actually encapsulates the ssh session in HTTPS requests, so it'll work even if your firewall does layer-7 filtering. The article just runs sshd on port 443 and connects to that.
ArcticCelt · 2009-08-01
This post tells a bit about it.
Basically that all the donation and ad revenue are unaccounted for. I certainly wont donate a cent (pun highly intended) until this is cleared up.
http://dag.wieers.com/blog/the-burden-of-keeping-things-private
cellularmitosis · 2012-06-29
I'd like to extend your claim to Redhat as well. I won't make the comparison directly to Ubuntu, but I will compare it to Debian. And in the realm of server-oriented tasks, Debian is hands-down a better option, from the point of view of a sysadmin.
I was a linux sysadmin at a university for 6 years, and I used linux personally for a decade (before switching to iOS dev). During that period, I've had brief, frustrating encounters with Redhat.
It's not that it is unusable -- anything which can be done on Debian can be accomplished on a Redhat box. It's death by a thousand little annoyances, which is exactly the argument against PHP, so I think it's an "apt" comparison (pun intended).
For example,
* How do you restart apache on Debian? "/etc/init.d/apache restart". On Redhat? "/etc/init.d/httpd restart". Ah, so Redhat is in the habit of renaming all of their init.d scripts after the protocol of the service? Nope, turns out they only did that to Apache's script. WTF?
* While we are picking on Redhat's Apache, they also chose to pollute /etc with a bunch of crap which doesn't belong there. Symlinks to /var/log/httpd, /usr/lib/httpd/modules, /var/run, etc. So now, when I grep /etc for something config-related, I pause and think "why is this grep taking so long...", and then a bunch of crap from /var/log spews onto the screen. Thanks, guys...
* Still on the Apache kick, they decided to make the default permissions drwx------ for /var/log/httpd, with root as the…
influx · 2010-04-16