Router#clear ip nat translation *

but when you try remove only one translation you have to write long command i.e.

Router#clear ip nat translation udp inside <ip> <port> <ip> <port> outside <ip> <port> <ip> <port>

which also cannot be easy cut and past from show command result. Fortunetly in cisco device there is a TCL shell, activated by:

Router#tclsh

Sample script to clear ip nat selectively:

proc clearnat {x} {
set result [exec {sh ip nat translation}]
set data [split $result "\n"]

foreach item $data {

    if {[string match *$x* $item]} {
        set wordList [regexp -all -inline {\S+} $item]
        set proto [ lindex $wordList 0 ]
        set insglob [ lindex $wordList 1 ]
        regsub -all ":" $insglob " " insglob
        set inslocal [ lindex $wordList 2 ]
        regsub -all ":" $inslocal " " inslocal
        set outlocal [ lindex $wordList 3 ]
        regsub -all ":" $outlocal " " outlocal
        set outglob [ lindex $wordList 4 ]
        regsub -all ":" $outglob " " outglob
        clear ip nat translation $proto inside $insglob $inslocal outside $outlocal $outglob
    }

}

}

Paste it in tclsh and fire up with:

Router(tcl)#clearnat <ip>

For me it was first met of tcl scripting, so it isn’t written optimally. TCL script looks pretty odd to my previous scripting experience ;)

Restricting Access to /proc/<PID>/
The hidepid= and gid= mount options have been added to procfs to allow
restricting of access to /proc/<PID>/ directories.

more technical information about this patch is on

http://www.openwall.com/lists/kernel-hardening/2011/11/15/3

how it looks like in practice:

# mount  | grep ^proc
proc on /proc type proc (rw)

# mount -o remount,hidepid=1 /proc
$ ps ax
  PID TTY      STAT   TIME COMMAND
 2054 pts/0    S      0:00 -bash
 2084 pts/0    R+     0:00 ps ax
$ ls -ld /proc/[0-9]*
dr-xr-xr-x 6 root       root         0 May  1 13:29 /proc/1
dr-xr-xr-x 6 root       root         0 May  1 13:29 /proc/10
$ ls -l /proc/[0-9]*
ls: /proc/1: Operation not permitted
ls: /proc/10: Operation not permitted
...

# mount -o remount,hidepid=2 /proc
$ ps ax
  PID TTY      STAT   TIME COMMAND
 2189 pts/0    S      0:00 -bash
 2218 pts/0    R+     0:00 ps ax
$ ls -ld /proc/[0-9]*
dr-xr-xr-x 6 w.duranek domain users 0 May  1 13:31 /proc/2189
$ id
uid=10000(w.duranek) gid=10(wheel)

# mount -o remount,hidepid=2,gid=10  /proc
$ ps ax
  PID TTY      STAT   TIME COMMAND
    1 ?        Ss     0:03 init [3]
    2 ?        S<     0:00 [migration/0]
    3 ?        SN     0:00 [ksoftirqd/0]
...

echo "- - -" > /sys/class/scsi_host/host2/scan

http://events.linuxfoundation.org/events/linuxcon-europe/slides

http://folk.uio.no/trondham/software/check_openmanage.html

[1] https://github.com/cormander/tpe-lkm

[2] https://github.com/cormander/tpe-lkm/blob/master/INSTALL

[3] https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.3_Release_Notes/index.html

[4] https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.3_Technical_Notes/index.html

console ready:

• http://justniffer.sourceforge.net/  –  pretty nice multi purpose sniffer with http support
• http://dumpsterventures.com/jason/httpry/  –  packet sniffer for http traffic
• http://www.wireshark.org/docs/man-pages/tshark.html - comes from wireshark tool
• http://www.circlemud.org/jelson/software/tcpflow/ - multi purpose sniffer with convenient file store format
• http://www.rhythm.cx/~steve/devel/tcptrack/ - it is not a sniffer, but it shows us source,amount, tcp state of traffic
• http://www.tcpdump.org/ - of course

gui ready:

• http://www.wireshark.org/ - with remote capture http://wiki.wireshark.org/CaptureSetup#Step_5:_Capture_traffic_using_a_remote_machine

gui but with capturing http traffic from end user perspective:

• http://www.fiddler2.com/fiddler2/
• https://addons.mozilla.org/pl/firefox/addon/live-http-headers/
• http://getfirebug.com/network
• and much more…

We noticed that your Red Hat Login uses a personal email address. We’re sorry, but users must have an enterprise or business email address to obtain product evaluations.

Proof of the absurd.

The first one which I would recommend is cfg2html [1] it generates pretty nice looking output in html about collected data. It covers vast amount of services running on unix based operating system. It’s a good start point for doing maintenance job, because you know what was before.

The second one is sos. It’s a software bundled in RHEL and its derivates distros, mainly used to help support team to resolve your problems. You can collect data about particular service:

<span style="color: #ff9900;"># sosreport -o ssh</span>

<span style="color: #ff9900;">
</span>

or choose all plugins which covers whole operating system. Report it’s placed in /tmp directory.

[1]  http://cfg2html.com/