This morning we (the crew) pushed off for a trip to scatter some ashes along the north shore of Molokai on the Waipoul. The area was one of grandpa’s favorite places to go and one that I have had the privilege to share with him.
His boat, a 46 foot sampan he designed and built 30 years ago now carries some of his ashes in the anchor post on the bow, now adorned with a lei for the duration of the trip. Thank you grandpa for the memories and the amazing legacy you built and left for us to enjoy.

Unless I’m just not seeing it, there isn’t a way to differentiate alerts from drops with BASE for snort.  They all appear the same, and unless you know the the sid or the .rules file, all the information looks the same.  To help alleviate this, and give users the abillity to see rules that are dropping packets at a glance, I decided to task Oinkmaster.pl with this job.  Adding the phrase “DROPPED” to the end of the “msg:” section of the signature will make it appear that way in BASE and Aanval can now send an email whenever one of these rules are kicked off.
To do so simply add the following to your oinkmaster.conf file:

modifysid sid or rule “(.*msg:\s*”.+?)”(\s*;.+;)” | “${1}, DROPPED”${2}”

I’ve made the switch to Windows 7 on one of my machines.  It’s time to wrap my head around this new beast.  I installed Win7 x64 on a second hard drive and was dual booting the system for some of the tools I needed.

Now that Windows XP mode is up and running and documents were transferred, I decided it was time for XP to go, cutting the cord.  Unfortunately it’s not as easy as just removing the hard drive and calling it good, though the process isn’t all that hard. NOTE: Do at your own risk; I’m not responsible for damage.

1. Start the machine in Windows XP
2. Show hidden files and folders if they aren’t already and copy the “boot” folder and the bootmgr file to the Win7 drive.
3. Shut the machine down, remove the XP drive and boot off the Win7 DVD
4. Enter the System Recovery mode after the machine boots and click “Next” to enter the Recovery Toolbox
5. Click “Command Prompt” and type:

   "bootrec /fixmbr"

   "bootrec /fixboot"

6. Reboot into Windows 7 and open a command prompt. Run the following command to remove the other second boot option:

   "BCDEdit /delete {ntldr} /f"

More information if you installed on a second partition can be found at: http://blogs.techrepublic.com.com/window-on-windows/?p=1751&tag=leftCol;post-1306

One of my biggest peeves about Snort and running it inline is having to restart the Snort process to load new rules.  This had me worried with putting snort into production as it would make it awfully hard to tweak it while live.

Today I was browsing the Snort manual and found two short paragraph’s relating to the “–enable-reload” option.  Wha?  Why didn’t I find this earlier?  After a quick recompile with the “–enable-reload” command.  What a life saver this will be when we go live!

After using that option, you can simply issue a “kill -SIGHUP pid” to have it reload without restarting!

Check out the pg 107 of the Snort manual though, as some changes require a restart, so your not going to get off completely scott free.

According to an article on ESPN.com, the NCAA is looking to propose “a ban of all words, logos, numbers, or other symbols on players’ eye black beginning next season.”  You might be thinking, “big whoop”, in fact I was thinking the same thing, until I started reading further down the middle of the second paragraph.  The writer states, “For instance, after Tebow scrawled “John 3:16” on his eye black for the 2009 BCS Championship Game, 94 million people Googled that exact Bible verse.”

94 million? Are you kidding me?  I can’t believe that there are 94 million people tuning into the BCS Championship Game who needed to search Google for that verse.

Speaks pretty directly to the state of the Church in the US right now.

Boy, when I started down the process of trying to get an IPS system setup, I had no idea what I was getting myself into.  I’m not much of a security guy or a linux guy, but I thought I’d give it a go.  I followed many different guides that all worked great for me, and thank you to those who put the following guides together: http://ubuntuforums.org/showthread.php?t=919472,  http://www.openmaniak.com/inline.php,  http://forum.learnit.vn/showthread.php?p=7007

If you have information you’d like to share and include in The Hatch, please feel free to use the link at the top of the page titled “Submit Hatch Information”.  You will be presented with a form asking for the state, river name, bug, and month’s you’ll find the bug hatching. These updates will be included in periodic updates to the app.

Thanks everyone.

After the purchase of a new MacBook Pro about a year ago, I thought you know what?  I’m going to try and develop an app.  I hadn’t seen anything related to fly fishing and thought maybe I could create an app that provides a hatch chart for rivers across the US!

PHEW, didn’t know how long the skunk would go into the new year.  A buddy of mine and I went out for a quick trip to the Crooked today.  I haven’t been fishing there in over a year but had heard that fishing had picked up in the last few months and the weather was decent, so why not?

We arrived on the river at about 1pm.  The temp rose about 6 degrees on the drive over to a nice and balmy 45.  I’m not sure what the water temp was, but there was still ice on the surface of some of the slower water.

Following along a previous post about reading and goals, especially the Bible, I happened across a website called http://www.youversion.com.  It’s essentially an online bible, journal, reading plans, and community based website, but I’d say one of the best features is the slew of mobile apps.