OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Eric Jon Rostetter (eric.rostetterphysics.utexas.edu)
Date: Tue Oct 09 2001 - 10:18:50 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Quoting fergus <tofergusyahoo.co.uk>:

    > On 02.10-05:47, Janto Trappe wrote:
    > > * Systems Administrator <sysadminsunet.com.au> [17-09-01 10:36]:

    [...]

    > if you are capturing the fstab, i'd suggest getting a complete partition map
    > of all disks so that you know the logical location of file systems.

    I agree.

    > this may become complicated with complex disk solutions (vinum || similar) but
    > worth while for analysis - recovery of data.

    Yes. We print out the parition tables, plus the fstab, plus the raid setup
    files if they exist for software raid, etc. It can get very complicated.
     
    > i'm not familiar with the tools but i guess they may already do this ? ?
    > ?

    We created our own script that goes through and grabs all the info we can
    think of. Every few months we find we need another piece of info, and we
    have to modify the script to add that piece. It is ever growing. It isn't
    easy (since we try to make this script run on 3 OS versions, cover most
    possible config files, etc) but it is worth the time when you loose a machine,
    upgrade a machine, etc.

    I think documentation is definately the place to start with any rescue or
    emergency kit.

    Eric Jon Rostetter
    The Department of Physics
    The University of Texas at Austin
    Austin, Texas 78712-1081

    Office: RLM 7.126
    Telephone: 512-471-5821
    Email: eric.rostetterphysics.utexas.edu