A little more than two years ago, I set up a PKI and did a post on it. The main goal was to get a certificate on my EdgeOS router to get proper HTTPS support without the annoying red X. When I did it, however, I didn’t do it quite right, and so I decided… Continue reading PKI Revisited
Category: Tech
Netflow and Splunk
Yesterday, I told the tale of getting netflow data out of my EdgeOS router. Once I started actually receiving data, I wanted to get it into Splunk. I figured that I would have to set up a directory for netflow log data from nfdump, then set up a reader to have Splunk ingest the data.… Continue reading Netflow and Splunk
EdgeOS and Netflow
Update: Since I wrote this blog post in 2016, I’ve turned off netflow on my router. Why? Because I upgraded to gigabit fiber, and when netflow is enabled, it throttled my speed to 150 Mb/s or so. Not good! Giving up netflow is a small price to pay for full gigabit speeds. If you do… Continue reading EdgeOS and Netflow
EdgeOS and IPv6 Revisited
About a week ago I noticed that my browsing was no longer using IPv6. How, you ask? I use IPvFoo, a Chrome extension that shows you in your address bar whether you are browsing a site using IPv4 or IPv6. True, only Google and Facebook are the sites that I browse regularly that use IPv6,… Continue reading EdgeOS and IPv6 Revisited
Monitoring my UPS with Splunk
Last time, I had set up my UPS monitoring software on my CentOS logging server. But I wanted more: what good is having a UPS if I can’t monitor things like voltage, battery charge, and load on an ongoing basis? Of course, the answer to this is to log to Splunk, which is what I… Continue reading Monitoring my UPS with Splunk
Installing NUT on CentOS
Getting a UPS (Uninterruptible Power Supply) has long been on my tech wish list, so that I could keep my network and logging server up and running during transient power outages. Fortunately, aside from a brief outage right after we bought our house three years ago, power has not been a problem, unlike when I… Continue reading Installing NUT on CentOS
mDNS Update
My last update on getting Bonjour/mDNS working on my network ended with “If it ain’t broke”… Sadly, the broke state cropped up at some point between then and now. Home sharing with the Apple TV was no longer working, and nothing had changed on my end to break it. Apple may have changed things on… Continue reading mDNS Update
Splunk Reporting: Port Scans
It’s been a while since I’ve done some Splunk work on my home network, but lately I’ve been thinking about port scans, specifically about reporting on port scans against my environment. I’m not terribly worried about people scanning my network since it is quite locked down, but why not check on it to see if anything interesting… Continue reading Splunk Reporting: Port Scans
Crypto 1
I’ve been taking my first MOOC via Coursera, Crypto 1, taught by Dan Boneh. I’ve just finished up the final, and it’s been a fantastic experience, something I’d recommend to anybody with an interest in the subject. This course is more about theory that how to implement crypto in the real world, but the theory… Continue reading Crypto 1
Replacing Chef’s self-signed certificates
Having gotten my home network and logging to a point where I wanted it, my next project was going to be Chef. Life intervened before I got too much involved with Chef, but now that things are approaching a sense of normalcy, I’m trying to pick up where I left off. My ultimate goal is… Continue reading Replacing Chef’s self-signed certificates