DNS and Asset Information

Saw this post at TaoSecurity today about using DNS as a tool for Asset Management.

http://taosecurity.blogspot.com/2009/02/asset-management-assistance-via-custom.html

It toys with the thought of creating custom DNS records that identify asset owners. It's an interesting thought that was partially used at my last job. Our senior sysadmin had an unwritten policy that any server added to our internal DNS would also need a TXT record that contained information such as the hardware serial number. I'm not sure how many characters a TXT record supports, but I'm sure you could add other info as well. If you weren't sure who the contact person for a server was, or where it was located, you could "dig servername txt".

Here's an example of a DNS TXT record entry.

http://www.zytrax.com/books/dns/ch8/txt.html

Man page reading tip

I usually keep my ssh windows pretty small, but it makes them a pain to read man pages. The way I read man pages now is using Google and finding man pages posted online. That way, it's as easy as reading any other web page.

For Linux, I use the search string (minus the quotes) "man linux command", and it usually pulls up the appropriate man page on http://linux.die.net.

For Solaris, I'll use the search string (minus the quotes) "man sunos command", since the syntax or switches of the Solaris command may be slightly different than the Linux one.

Another bonus is that commands and configurations in the "SEE ALSO" section are usually hyperlinked to the corresponding web entry. There are probably browser plugins or toolbars that will accomplish the same thing, but this is universal and lightweight.

NFS with VMware

I came across this blog post, and it piqued my interest.

http://blogs.netapp.com/virtualization/2009/02/mythbusters-nfs.html

It briefly suggests that NFS is a viable alternative for VMware instead of SAN. I don't have the resources or clout to try this, but I'm curious to how well NFS would work. This information could potentially be useful for people that don't use NetApp also.