Cisco ASR-1001-X Update

There are at least to pieces of software you can update in a Cisco ASR-1001-X. The Rommon (Firmware) and the IOS itself. This router uses “Cisco IOS XE Software”. Which is an IOS process on a Linux kernel as far as I know. Cisco recommends specific Rommon releases for different generations of Software. You can …

Continue reading ‘Cisco ASR-1001-X Update’ »

LS Style After Devuan 3 or Debian 10 Update

After Devuan 3 update ls output showed characters, that are not really in the directory listing. The reason is that “ls” draws quotes around filenames with spaces. This is a bug from my point of view, ls should never change the actual filenames. If a filename has quotes or double quotes it’s even weirder . …

Continue reading ‘LS Style After Devuan 3 or Debian 10 Update’ »

Time Format after Devuan 3 and Debian 10 Update

After updating to Devuan 3 the date command shows 12hours am/pm but my days have 24 hours. The locale was always en_US.UTF8 to keep sane command and error output. Debian 10 thinks they had to fix the correct hour display to the complicated one. Therefor all sysadmins like me have to apply the following workaround, …

Continue reading ‘Time Format after Devuan 3 and Debian 10 Update’ »

Mikrotik OSPF Routing Distance Ignored

Discussion: Every routing protocol has a default distance to help the router to decide which route to use in case of multiple routes for the same destination. For Mikrotik routers these distances are listed here:https://wiki.mikrotik.com/wiki/Manual:Route_Selection_Algorithm_in_RouterOSIf you want to configure a backup link that is only activated when the OSPF main route is missing, you can …

Continue reading ‘Mikrotik OSPF Routing Distance Ignored’ »

ARP and Broadcast Packets Missing

Problem: A Linux box with Debian 9 (kernel 4.9) on a HP server with Intel i40e (X710) network cards, is not reachable from neighbor machines, because ARP does not work. Discussion: while testing with tcpdump ARP worked, but later ARP stopped working again. When tcpdump is used with “-p” (non promiscuous mode) you can see …

Continue reading ‘ARP and Broadcast Packets Missing’ »

MITMProxy and IOS 13

Problem: if you want to debug a IOS app with MITMProxy, the iPhone needs to trust the MITMProxy CA. This is done by going to http://mitm.it/ and clicking on the apple symbol. Then you have to accept the “profile” in Settings “downloaded profiles”. Then you have to trust this new CA cert in “Settings” “General” …

Continue reading ‘MITMProxy and IOS 13’ »

Linux Live-boot Fails after Debian/Devuan Update

Problem: after updating from Debian 8 to Devuan 2 the overlay live-boot failes with “no such device” Discussion: I use a bootable USB stick combined with live-boot. In this case the USB stick partition 3 is a normal ext4 file system used as read only “plainroot” filesystem. Live-boot overlays this with an ramfs.As I don’t …

Continue reading ‘Linux Live-boot Fails after Debian/Devuan Update’ »

Greenlock(-express) Letsencrypt Fails with ECONNRESET

Problem: after upgrading vom greenlock-express v2.0 to v2.5 and switching from acme-v1 to acme-v2 every attempt to register a new TLS cert with Letsencrypt fails with “ECONNRESET” Discussion: the new version of greenlock tries to validate the .well-known/acme-challenge file before asking letsencrypt for the certificate.If your webserver is behind a loadbalancer or firewall and the …

Continue reading ‘Greenlock(-express) Letsencrypt Fails with ECONNRESET’ »

Apache Start Hangs during Reboot of a KVM Virtual Server

Problem: Apache needs very long to start on a virtual server running on a KVM/QEMU virtual maschine. Solution: Apache needs a RNG (random number generator) for startup, probably because of TLS. A pure virtual maschine has no RNG device per default. If you add an RNG device to the virtual maschine configuration, apache startup is …

Continue reading ‘Apache Start Hangs during Reboot of a KVM Virtual Server’ »