Thursday, May 27, 2010

Outlook 2010 + Social Connector + Security Zones


I've not seen many people explore Outlook 2010 and Internet Zones yet. I have a restricted Internet Security Zone so I can run a vulnerable version of Java for testing against specific sites on my main Windows 7 workstation. When loading Outlook 2010, I did find it useful to see a conversation history of people. The trouble was, I got useful information and then an annoying error message saying "check security settings" with no specifics.

I run in High Security for the Internet Zone so I was sure that the error was related to some component of Outlook hitting the Internet Zone. The trouble was finding the content and how it was being rendered. After looking for a bit, I had a dumb idea: Check IE History. Sure enough, I saw plenty of %AppData%\Local\Temp\{GUID}.html files in temp. My default cygwin less warned that it was a binary file. Saving unicode handling errors for another day, I used notepad to view that it was requesting res://C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\SocialConnectorRes.dll/GIF/#290.

I then loaded the HTML file in IE directly. As far as I can tell, the entire point of loading this page is to pull social network conversations and display a pretty loading page. Still not positive what this connector DLL is doing tbut I hope this helps point someone in the right direction.

Friday, May 7, 2010

Python + Flow-Tools

Getting Flow-Tools 0.68 working on a 64-bit platform was a bit of work. Then I actually wanted to develop a report so I wanted to install

http://www.splintered.net/sw/flow-tools/
http://www.icir.org/robin/flowtools/

I have a penchant for unmaintained software as I'm replacing ipaudit with something else.

Short Summary:

In flow-tools 0.68:

ftlib.h/ftlib.c -> s/u_int32_t/time_t in FlowTools
edit lib/Makefile -> AM_CFLAGS to include -fPIC
make clean
make

In pyflowtools:

python setup.py build_ext -I ~/src/flow-tools-0.68/lib -L ~/src/flow-tools-0.68/lib

Update: 5/7/2010:

Now looking at http://code.google.com/p/flow-tools/ for a maintained 64-bit clean version.

ftlib.h killed the unsigned int defs so I'm here's a working/lightly test patch:

--- pyflowtools-0.3/flowtools.c 2002-05-21 16:54:41.000000000 -0500
+++ pyflowtools-0.3.cmg/flowtools.c 2010-05-07 14:02:53.000000000 -0500
@@ -10,6 +10,11 @@

#define offset( x ) offsetof( struct fts3rec_offsets, x )

+typedef unsigned long long u_int64;
+typedef unsigned int u_int32;
+typedef unsigned short u_int16;
+typedef unsigned char u_int8;
+
/* Define flow attributes */

enum RecordAttrType {