My 2nd Head

I've done some "academic" tests with a STEC Mach8 IOPS Flash Disk and Opensolaris SNV_134 The test included measuring installation time (from USB Image), first boot time (importing SMF manifests takes time), and normal boot time (both after GRUB Menu until login screen). The test was done on a Intel Core 2 Duo @ 2.4GHz Laptop and as a comparison on a EeePC 1000H with an Intel Atom CPU. The Flashdisk was recognized immediatly: Here are the measured times on my Core 2 Duo system: Installation: 6'39'' First boot: 3'22'' Normal boot: 30'' Here are times for the EeePC with Atom CPU with SSD: Installation: 17'24'' First boot: 3'50'' Normal boot: 54'' Normal boot time for EeePC with Atom CPU with Harddisk and OS 2009.06: Normal boot: 1'25'' Opinion: Don't waste your money on an expensive SSD if your overall system is slowish. For comparison, the Atom boot time is...

I've updated my Nexus One today with Froyo (Android 2.2) Froyo contains Flash Support. First thing to try is of course Real-Time Splunking :-)

Normally we see about 20-30 million incoming connections per day to our MTAs. Around the 16th of March, we saw a drop in incoming connections. Suddenly, after the 5th of April, there is a huge spike in connections, with a peak of almost 50 million connections. As McAfee has reported, the Storm Botnet has made a Comeback.

Rumors are, that Flash will be available next month on Android devices such as the Google's Nexus One I own. I was wondering how good Splunk's will work on the Nexus One, as it uses AJAX a lot. Not bad at all (Click on image to enlarge). Ok. We get a "missing flash" message, but even real-time search is working: I would say, as soon as Flash is available, this is the ultimate Splunk Mobile Device. I feel sorry for all iPhone users who will never get Flash...

People are checking their emails all over the world. Maybe they're stuck because of Eyjafjallajökull ...?

I haven't blogged about Splunk for a while, but with Release 4.1 there are some new cool features, that helps us tremendously in fighting spammers. Most of you may not know, that a substantial part of running an ISP mail platform consists of fighting abuse. Almost all abuse cases are caused by Spammers. Their main target is to control as many mailbox accounts as possible, where they can send spam from. Spammers can send Spam through bot-nets, acquire passwords through phishing attacks, or just do a smpt-auth brute-force attack. Anyways, the Internet is 24x7, Spammers never sleep and we do neither. There is always someone on-call. I want to show you, how we currently detect abuse on our platform, and what we do against it. Detecting Abuse There are many ways how to detect abuse. I don't want to go into too many details, and also, I don't want to reveal everything we do, as Spammers might read this :-) One popular way is to count the number of "User unknowns" status...

It wasn't hard to set up at all, took about 2h to remember all the commands ;-)