Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
DelphiAegis
Jun 21, 2010

The Fool posted:

is it actually white allow listed or just not blocked

ftfy

I know it's probably just my personal pet peeve, I don't say this with any malice at all e: oh god what a terrible page snipe

teethgrinder posted:

I mean as far as I can tell it's been manually approved and categorised. From what I can tell, any "unseen" URL is automatically blocked, and seeing how they operate they probably started with zero permitted.
Speaking honestly, there is a lot of good technical help just in SH/SC I could see it being approved as sort of like Stackexchange. Is it bullshit? Maybe, but the Goon approving it is looking for a good enough excuse! :v:

DelphiAegis fucked around with this message at 00:12 on May 17, 2024

Adbot
ADBOT LOVES YOU

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


DelphiAegis posted:

ftfy

I know it's probably just my personal pet peeve, I don't say this with any malice at all e: oh god what a terrible page snipe


Nah this is good to point out - it's a pretty easy change and helps avoid word connotations from continuing to be imprinted. To be clear it won't solve racism or anything, but anyone who protests it is just being A) a dick for being unwilling to change or B) racist. I've almost changed my behavior - I usually manage to say or write allow/deny, but I still have the mental translation of thinking of it as white or blacklist first and then making the switch. Hopefully with more practice I'll think of allow/deny first.

The Fool
Oct 16, 2003


DelphiAegis posted:

ftfy

I know it's probably just my personal pet peeve, I don't say this with any malice at all e: oh god what a terrible page snipe

thank you, I try to keep that kind of stuff in mind but often forget

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


The Fool posted:

thank you, I try to keep that kind of stuff in mind but often forget

add it to your mental denylist

joebuddah
Jan 30, 2005
Today while trying to get data from a manufacturing device. The documentation says to use terminal emulation software, terra, putty etc. Connect to the correct port, enter a command , the latest values are returned.

So I then call the manufacturer to find out what protocol is actually being used, and if I can turn on any other outputs.

All they can tell it's a tcp/ ip connection.

I finally realized that it was a telnet service. Terminal software duh.
The device returns data using bars | as the separator.
The data looks like this

0| |1.23|900|2.33|0|2.34| | |

I've seen some older devices that have similar outputs. However given that the same device has a web interface to change some settings. Why the hell can't it be an API with json response?

xzzy
Mar 5, 2009

How long has this device been in production? Guessing it's their original protocol and they have to keep it working because some ancient customer of theirs refuses to upgrade off W95.

Well given the delimiter maybe it was Windows XP era. If it was 95 they'd probably forego the delimiter and expect the client to know the data structure.

teethgrinder
Oct 9, 2002

DelphiAegis posted:

Speaking honestly, there is a lot of good technical help just in SH/SC I could see it being approved as sort of like Stackexchange. Is it bullshit? Maybe, but the Goon approving it is looking for a good enough excuse! :v:
Oh for sure, and I absolutely use SH/SC as 'an edge', especially my 42 year old rear end in this role lol.

Honestly I'm a bit flabbergasted I'm somehow still relevant and more knowledgeable than all the younger people I manage. I truly assumed I'd be useless by now except maybe as management.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady
As IT has gotten broader and more prevalent in the workplace the need for dedicated people for niche roles has expanded, and kids are now being trained to go direct from education into what used to be the 5+ year specialisation pathways. Having the ability to just frantically google poo poo and apply a solid baseline understanding of how computer do to achieve a business goal is still really valuable.

Kibner
Oct 21, 2008

Acguy Supremacy

joebuddah posted:

Today while trying to get data from a manufacturing device. The documentation says to use terminal emulation software, terra, putty etc. Connect to the correct port, enter a command , the latest values are returned.

So I then call the manufacturer to find out what protocol is actually being used, and if I can turn on any other outputs.

All they can tell it's a tcp/ ip connection.

I finally realized that it was a telnet service. Terminal software duh.
The device returns data using bars | as the separator.
The data looks like this

0| |1.23|900|2.33|0|2.34| | |

I've seen some older devices that have similar outputs. However given that the same device has a web interface to change some settings. Why the hell can't it be an API with json response?

Looks like HL7 which was (maybe still is???) heavily used in the medical IT field to communicate from devices to the medical/health record system.

MF_James
May 8, 2008
I CANNOT HANDLE BEING CALLED OUT ON MY DUMBASS OPINIONS ABOUT ANTI-VIRUS AND SECURITY. I REALLY LIKE TO THINK THAT I KNOW THINGS HERE

INSTEAD I AM GOING TO WHINE ABOUT IT IN OTHER THREADS SO MY OPINION CAN FEEL VALIDATED IN AN ECHO CHAMBER I LIKE

Arquinsiel posted:

As IT has gotten broader and more prevalent in the workplace the need for dedicated people for niche roles has expanded, and kids are now being trained to go direct from education into what used to be the 5+ year specialisation pathways. Having the ability to just frantically google poo poo and apply a solid baseline understanding of how computer do to achieve a business goal is still really valuable.

and getting increasingly harder due to LMM/AI vomit poisoning searches, search engines making it actively harder to find real content and a lot of content getting deleted, put behind paywalls and such.

MF_James fucked around with this message at 05:18 on May 17, 2024

Sywert of Thieves
Nov 7, 2005

The pirate code is really more of a guideline, than actual rules.

Kibner posted:

Looks like HL7 which was (maybe still is???) heavily used in the medical IT field to communicate from devices to the medical/health record system.

Yeah it's still used. :smith:

joebuddah
Jan 30, 2005

Kibner posted:

Looks like HL7 which was (maybe still is???) heavily used in the medical IT field to communicate from devices to the medical/health record system.
It's a material blender. It mixes plastic pellets and colors.



xzzy posted:

How long has this device been in production? Guessing it's their original protocol and they have to keep it working because some ancient customer of theirs refuses to upgrade off W95.

Well given the delimiter maybe it was Windows XP era. If it was 95 they'd probably forego the delimiter and expect the client to know the data structure.

I have no idea. How old anything is.

The location just had a leadership change. No one seems to know how old things are and they don't have any manuals.
The vendors company was founded in 1996. Other blenders from that era that I have worked with have plc tags.

Polling with a telnet connection seems like a bad idea to me.

joebuddah fucked around with this message at 06:16 on May 17, 2024

CitizenKain
May 27, 2001

That was Gary Cooper, asshole.

Nap Ghost
We are moving from Juniper to Meraki for our branch switches as our current stuff is hitting EOL. Its going well but there is one thing that is going to be a problem for me for a long time.
Juniper starts at port 0, Cisco is port 1. I have to stop and think every time I plug something in now.

Koskun
Apr 20, 2004
I worship the ground NinjaPablo walks on

joebuddah posted:

It's a material blender. It mixes plastic pellets and colors.

I have no idea. How old anything is.

15 or so years ago I had a temp gig at an automobile mirror manufacturer. Got a tour of the plant, and I noticed all their injection moulding machines were being run with either Win 3.11 or Win95 computers. I think there was one using Win98, but that was the "newer" of the moulding machines they had.

The reason? The cost to update the moulding software to the latest Windows version was, at the time, mid 5 figures. Per machine.

mllaneza
Apr 28, 2007

Veteran, Bermuda Triangle Expeditionary Force, 1993-1952




Koskun posted:

The reason? The cost to update the moulding software to the latest Windows version was, at the time, mid 5 figures. Per machine.

Some of our lab equipment is in 7 figures to replace. So yeah, we have a Win2k machine in production. It's not on the network, but it's still doing work.

Wibla
Feb 16, 2011

CitizenKain posted:

We are moving from Juniper to Meraki for our branch switches as our current stuff is hitting EOL. Its going well but there is one thing that is going to be a problem for me for a long time.
Juniper starts at port 0, Cisco is port 1. I have to stop and think every time I plug something in now.

802.1x with port automation solves the problem, and many others...

Thanks Ants
May 21, 2004

#essereFerrari


Juniper starting at port 0 is almost the most annoying way to label switch ports, second only to Cisco numbering the ports of their SMB switches 1-24 along the top row and then 25-48 along the bottom, which I am sure they only did to piss people off until they bought Catalysts instead.

Wibla
Feb 16, 2011

The real answer is to buy Extreme :smugbert:

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

MF_James posted:

and getting increasingly harder due to LMM/AI vomit poisoning searches, search engines making it actively harder to find real content and a lot of content getting deleted, put behind paywalls and such.
Knowing how to never see that poo poo is quite the skill alright.

joebuddah posted:

It's a material blender. It mixes plastic pellets and colors.
<snip>
Polling with a telnet connection seems like a bad idea to me.
Is that network properly segmented and firewalled? If yes: no problem. If you find yourself in the situation where someone is on your network loving with your pellet blending then you've probably lucked out as the hacker has honeypotted themselves.

joebuddah
Jan 30, 2005

Arquinsiel posted:

Knowing how to never see that poo poo is quite the skill alright.

Is that network properly segmented and firewalled? If yes: no problem. If you find yourself in the situation where someone is on your network loving with your pellet blending then you've probably lucked out as the hacker has honeypotted themselves.


That's a good point. I asked and was told they are all on a separate vlan.
There is a firewall, as far as I know you need a VPN to access the internal network.

They've got a pretty good intrusion detection system, as I got a call from the security team after doing an nmap scan of the device.

CitizenKain
May 27, 2001

That was Gary Cooper, asshole.

Nap Ghost

Wibla posted:

802.1x with port automation solves the problem, and many others...

That would be great, but we are so far behind on our current projects and work load I'm not sure who could even start that, much less deploy it.

That Extreme stuff sounds great though, kinda wish we'd looked at it.

joebuddah
Jan 30, 2005

CitizenKain posted:

That would be great, but we are so far behind on our current projects and work load I'm not sure who could even start that, much less deploy it.

That Extreme stuff sounds great though, kinda wish we'd looked at it.

They are switching to Aruba where I work.

Wibla
Feb 16, 2011

joebuddah posted:

That's a good point. I asked and was told they are all on a separate vlan.
There is a firewall, as far as I know you need a VPN to access the internal network.

They've got a pretty good intrusion detection system, as I got a call from the security team after doing an nmap scan of the device.

This is a lot better than most places with industrial automation and other legacy :can:

CitizenKain posted:

That would be great, but we are so far behind on our current projects and work load I'm not sure who could even start that, much less deploy it.

That Extreme stuff sounds great though, kinda wish we'd looked at it.

Start planning for the next replacement now, and put "Must have port automation / 802.1x" at the very top of your requirements.

Most vendors have solutions for this, I'm just very happy with Extreme's version since it works really well with the switches they deliver.
These days the only things I set manually on a switch is the SNMP name and CLIP IP, the rest (IS-IS auth, RADIUS config, SNMP creds) is pushed from Site Engine, and we don't configure any ports on most of our switches, NAC/RADIUS deals with that.
The "underlay" network, aka Fabric Connect aka SPBm / 802.1aq is fully automated on the switches themselves, with full topology freedom. A truly mind boggling change from having to deal with link VLANs / nets and OSPF.

E: It's not all roses with Extreme though, we've been updating Site Engine and switch firmware pretty regularly and the workflows and ZTP+ onboarding has given us some grief along the way, as Extreme makes changes, but we have always been able to solve it.

Wibla fucked around with this message at 10:14 on May 18, 2024

Prescription Combs
Apr 20, 2005
   6

Wibla posted:

This is a lot better than most places with industrial automation and other legacy :can:


Tell me about it...

e: yeah

Prescription Combs fucked around with this message at 07:15 on May 19, 2024

CitizenKain
May 27, 2001

That was Gary Cooper, asshole.

Nap Ghost

joebuddah posted:

They are switching to Aruba where I work.

My condolences.

I might be unfair to Aruba as we have a bunch of old APs on old controllers and we never really got things setup like we should have, or received training. We have a Clearpass server that is so underpowered and is barely able to load the captive portal for the old APs. When it dies we have no backup.

Wibla posted:

Start planning for the next replacement now, and put "Must have port automation / 802.1x" at the very top of your requirements.

We don't even have a 802.1x thing in place because we don't have time to get one going, and also there is a long running battle over who has to manage it. We only recently got some people to stop with static IPs for things and using DHCP reservations because the previous team that ran DHCP just refused to do things.

joebuddah
Jan 30, 2005
I only know about the switch because, I am also working on a project that required buying new APs ,a switch and a rack.

ChickenOfTomorrow
Nov 11, 2012

god damn it, you've got to be kind

When we moved into this place we set up static IPs through DHCP for a bunch of things, and didn't document which was which, so it's a list of mystery MAC addresses.

I think scream testing by erasing all the static leases is the easiest way to sort it out. :evilbuddy:

Wibla
Feb 16, 2011

Prescription Combs posted:

Tell me about it...

e: yeah

I read the pre-edited post and ... that's just peachy :sigh:

CitizenKain posted:

My condolences.

I might be unfair to Aruba as we have a bunch of old APs on old controllers and we never really got things setup like we should have, or received training. We have a Clearpass server that is so underpowered and is barely able to load the captive portal for the old APs. When it dies we have no backup.

We don't even have a 802.1x thing in place because we don't have time to get one going, and also there is a long running battle over who has to manage it. We only recently got some people to stop with static IPs for things and using DHCP reservations because the previous team that ran DHCP just refused to do things.

It sounds like you are doing the best you can with what you have, but also working at a seriously dysfunctional shitshow of a company. Time to :yotj: ?

joebuddah posted:

I only know about the switch because, I am also working on a project that required buying new APs ,a switch and a rack.

This is a cult classic where I work too, project division does $idiotic_things and then run to us for help to fix it. I've told them to pound sand a few times now, and it seems to be helping? They're actually asking what documentation they need to provide now :haw:

ChickenOfTomorrow posted:

When we moved into this place we set up static IPs through DHCP for a bunch of things, and didn't document which was which, so it's a list of mystery MAC addresses.

I think scream testing by erasing all the static leases is the easiest way to sort it out. :evilbuddy:

Did you bother setting up DNS when you did DHCP? That might help. Anything that's AD joined should be easier to deal with, but YMMV obviously.

Prescription Combs
Apr 20, 2005
   6

Wibla posted:

I read the pre-edited post and ... that's just peachy :sigh:


It was a little too specific in hindsight :tinfoil:

freeedr
Feb 21, 2005

I’m not an IT guy despite being the only person in my building that knows how to use a computer. Today I found a water leak in an old section of the building in a valve that controlled irrigation. I knew I needed a water key, one of which is kept in the utility room where our panels, network closet, newer irrigation control, etc are. I make my way over there and it takes me a second to process what I’m seeing.

We have a big network rack on the wall. Not one of the hugest ones but one of the hefty steel cube ones with the hinged backs so the whole thing can swing open. Apparently, the last time someone worked on it they neglected to close and latch it. I am seeing the backbone of our building’s network twisting its hinges apart and hanging on by a thread. I say the magic chant (gently caress!) and run over to brace it. I guess just the vibrations of my footsteps were enough, because as I approach the bottom hinge that was holding it up shoots off like a bullet and I catch this thing. This thing is loving HEAVY for its size I am thinking as I hold it in place, tethered by various cables. I am pretty big and pretty fit, but this situation can’t last until someone wanders by.

A few feet away is a bookshelf with old posters and wall hangings leaned against it. I push everything away from it. Knock down what books I can reach, and grab hold. It is about six feet tall; perfect height for the bottom of the rack’s original position. I twist my shoulder under the rack and hold it with one arm while dragging the bookshelf over with the other. I squeeze the bookshelf right against the wall under the rack and let it finally rest. After a few seconds of rest I snap a picture to send to the help desk because I can’t contact anyone directly.

I walk out of the utility room and to the closest provider pod and ask “Is the network working ok?” A doctor says “yeah, why?”

I say “No reason.”

Also the water valve I was trying to close is just busted and leaking.

KillHour
Oct 28, 2007


You should get one of those heroes' medals they give to pedestrians who pull random strangers out of burning buildings.

Internet Explorer
Jun 1, 2005





Agreed. Key to the server room, presented by the mayor.

freeedr
Feb 21, 2005

I just know it would take them weeks to piece their sloppy poo poo back together. Everything is falling apart here.

Arquinsiel
Jun 1, 2006

"There is no such thing as society. There are individual men and women, and there are families. And no government can do anything except through people, and people must look to themselves first."

God Bless Margaret Thatcher
God Bless England
RIP My Iron Lady

Internet Explorer posted:

Agreed. Key to the server room, presented by the mayor.
First time I got access to a server room the key was my own thumb so... I would politely decline.

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

Internet Explorer posted:

Agreed. Key to the server room, presented by the mayor.

You are now responsible for fixing whatever it is that's in there, your budget is whatever you can beg borrow or steal from other departments.

Also the city council just called, they want to know why the teleconferencing setup they asked for isn't done already.

Thanks Ants
May 21, 2004

#essereFerrari


YOU CAN'T CUT BACK ON COOLING, YOU WILL REGRET THIS!

guppy
Sep 21, 2004

sting like a byob

freeedr posted:

I’m not an IT guy despite being the only person in my building that knows how to use a computer. Today I found a water leak in an old section of the building in a valve that controlled irrigation. I knew I needed a water key, one of which is kept in the utility room where our panels, network closet, newer irrigation control, etc are. I make my way over there and it takes me a second to process what I’m seeing.

We have a big network rack on the wall. Not one of the hugest ones but one of the hefty steel cube ones with the hinged backs so the whole thing can swing open. Apparently, the last time someone worked on it they neglected to close and latch it. I am seeing the backbone of our building’s network twisting its hinges apart and hanging on by a thread. I say the magic chant (gently caress!) and run over to brace it. I guess just the vibrations of my footsteps were enough, because as I approach the bottom hinge that was holding it up shoots off like a bullet and I catch this thing. This thing is loving HEAVY for its size I am thinking as I hold it in place, tethered by various cables. I am pretty big and pretty fit, but this situation can’t last until someone wanders by.

A few feet away is a bookshelf with old posters and wall hangings leaned against it. I push everything away from it. Knock down what books I can reach, and grab hold. It is about six feet tall; perfect height for the bottom of the rack’s original position. I twist my shoulder under the rack and hold it with one arm while dragging the bookshelf over with the other. I squeeze the bookshelf right against the wall under the rack and let it finally rest. After a few seconds of rest I snap a picture to send to the help desk because I can’t contact anyone directly.

I walk out of the utility room and to the closest provider pod and ask “Is the network working ok?” A doctor says “yeah, why?”

I say “No reason.”

Also the water valve I was trying to close is just busted and leaking.

You're a hero, but also, please be careful. Those things are very heavy, and they will absolutely seriously hurt you. I have seen it happen. Keeping the network up is not worth your health.

KillHour
Oct 28, 2007


Methylethylaldehyde posted:

You are now responsible for fixing whatever it is that's in there, your budget is whatever you can beg borrow or steal from other departments.

Also the city council just called, they want to know why the teleconferencing setup they asked for isn't done already.

Hi, yes, this is Trevor. I work for the city of Arvada, population 10,000. And I was just looking at our website, www dot arvada dot org backslash Arvada harvest festival. And uh, uh I get this error message? Page cannot be displayed? And then I tried Arvada harvest festival backslash pumpkin patch - that one's not there. And I tried harvest festival backslash beanbag race and nothing's coming up and I literally have the mayor breathing down my neck right now so if we could just get this back up, uh...

freeedr
Feb 21, 2005

guppy posted:

You're a hero, but also, please be careful. Those things are very heavy, and they will absolutely seriously hurt you. I have seen it happen. Keeping the network up is not worth your health.

My original plan was to just shove something under it and never touch it, both for safety and liability reasons.

Turns out our hardware guys passed this issue off to the maintenance guys. We had a maintenance guy show up this afternoon asking about a broken cabinet. I said “well, ok, but you aren’t going to touch it. It’s full of network stuff” and showed him where it was. He called his boss who called everyone he could think of and they all dodged him. He said he wanted to just start yanking cables out and replace the cabinet because they were pissing him off. I asked him to please not do that. I guess the ball is in no one’s court now.

Earlier today we had a power outage and then the power started cycling on at like half voltage for about ten seconds every two minutes or so. I flipped the breakers to stop all of our equipment in the closet and lab and x-ray from getting hosed up.

I’m working another 13 hours on 90 minutes of sleep due to another catastrophe at home and I’m sore from doing CPR. I didn’t get a lunch break. Please will someone come fix my cabinet

Adbot
ADBOT LOVES YOU

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

freeedr posted:

I’m working another 13 hours on 90 minutes of sleep due to another catastrophe at home and I’m sore from doing CPR. I didn’t get a lunch break. Please will someone come fix my cabinet

Sounds like you need to send an email to literally everyone upchain from you specifically calling out the broken and dangerous nature of this, and the critical need to get it both replaced, and replaced in a way that doesn't impact patient care.

Then when nobody responds to you, document what'll need to happen when it inevitably all gets completely hosed, then do nothing until that day happens.

Writing good documentation is it's own reward!

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply