clear ip nat selectively

On cisco router device you can clear all ip nat translations once doing:

but when you try remove only one translation you have to write long command i.e.

which also cannot be easy cut and past from show command result. Fortunetly in cisco device there is a TCL shell, activated by:

Sample script to clear ip nat selectively:

Paste it in tclsh and fire up with:

For me it was first met of tcl scripting, so it isn’t written optimally. TCL script looks pretty odd to my previous scripting experience ;)



hidepid capabilities of procfs

RHEL 5.9 introduces new feature which allow to hide some sensitive information about process activity to non-root users.  Release notes about new RHEL version doesn’t tell us too much:

more technical information about this patch is on

http://www.openwall.com/lists/kernel-hardening/2011/11/15/3

how it looks like in practice: