text:
Welcome back to our continuing discussion of the various tools of the Linux trade.
This article is the second of a three-part series that takes a look at some of the common tools you can use on your own systems to spot holes, look for potential problems, and then take steps to tighten your grip on the system.
Last time, I took you through a brief introduction to "honey pots," Ethereal, and the venerable nmap. This time, we'll take a look at a few more common tools, namely
tcpdump and Tripwire.
Tcpdump is a network traffic analysis tool originally created by the Network Research Group at Lawrence Berkley National Lab. As the name implies,
tcpdump allows you to "dump" TCP traffic to screen or file for later analysis. Actually,
tcpdump also serves as a back-end program to many other network analysis tools such as
snort and
shadow. The underlying traffic capture library,
libcap, is also used in other tools such as Ethereal (which we discussed last time),
tcptrace, and many others. You can find out more details on these tools from the
tcpdump web site.
Tcpdump comes with most Linux distributions by default so you don't have to grab it yourself.
Like many other tools,
tcpdump can only be used by the root user. There are many other tools, including some commercial tools, that provide slightly different or more elegant output than
tcpdump. However,
tcpdump is a good raw tool that can help you understand other tools and your network.
By default,
tcpdump reads all the traffic from the default network interface (usually
eth0M) and spews all the output to the console. For many reasons, primarily the data whips up the screen at a rather uncontrollable rate on a busy network; this is probably not always the behavior you want or need. Thus,
tcpdump includes many command options to change the behavior into something more manageable.
Let's take a look at a typical packet you might capture using
tcpdump. This output was captured without any command-line options given to
13:37:11.950966 Mallard.36872 > archive.progeny.com.www: . ack 1259760 win 376
48 <nop,nop,timestamp 249582195 600468459,nop,nop,sack sack 1 {1261208:1280032
This packet is a download session from a web server. How do I know that? Well a little experience for one thing, and I set it up that way. But let me break down the packet into more detail for you.
Notice the destination port on archive.progeny.com is www, port 80. Therefore, this is a web session. Notice that the source and destination addresses are resolved. "Mallard" is the name of my machine. You can restrict the output to show IP addresses and numbers instead of the resolved host name (use the
-n option) or you can not show some things such as the time stamp (use the
-t option).
TCP flags
There are several TCP flags you might encounter when using
tcpdump. They are
urg, and
. (period). I'll describe them briefly here.
|TCP Flag
|Flag in tcpdump
|Flag Meaning
|Syn packet, a session establishment request. The first part of any TCP connection.
|Ack packet, used to acknowledge the receipt of data from the sender. May appear in conjunction with other flags.
|Finish flag, used to indicate the sender's intention to terminate the connection to the receiving host.
|Indicates the sender's intention to immediately abort the existing connection.
|Signals the immediate push of data from the sending host to the receiving host. For interactive applications such as telnet, the main issue is the quickest response time, which this "push" flag signals.
|Urgent data should take precedence over other data. For example, a Ctrl-C to terminate a FTP download.
|If the connection does not have a syn, finish, reset, or push flag set, this placefolder flag will be found after the destination port. Note that it also appears in conjunction with the
ack flag.
Understanding the information provided by
tcpdump takes a bit of time and practice. It does help to have a good TCP reference book such as TCP/IP Illustrated, Volume 1 by Dr. Richard Stevens.
Do you have any additional tips concerning how to use tcpdump and Tripwire to protect your Linux server.
Let's look at something with more meat. Remember last time I showed a TCP session using Ethereal. Well, let's look at a similar session in
tcpdump. For the purposes of this illustration, I've cut out a bunch of extraneous data.
For this particular packet dump, I used the following command:
tcpdump -l -vvv -x -X > tcpdat & tail -f tcpdat. This command makes
tcpdump give both Hex and ASCII output in a very verbose mode.
15:55:37.842404 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 107:110(3) ack 88 win 5840 <nop,nop,timestamp 250412784 526505810>
0x0000 fffd 01 DO ECHO
(DF) [tos 0x10] (ttl 64, id 45160, len 55)
0x0000 4510 0037 b068 4000 4006 05e1 c0a8 0119 E..7.h@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4eec 744a ed10 .....3..u$N.tJ..
0x0020 8018 16d0 2035 0000 0101 080a 0eec fef0 .....5..........
0x0030 1f61 d752 fffd 01 .a.R...
15:55:37.843792 192.168.1.254.telnet > Mallard.36915: P [tcp sum ok] 88:107(19) ack 110 win 32120 <nop,nop,timestamp 526505810 250412784> (DF) (ttl 64, id 6922, len 71)
0x0000 4500 0047 1b0a 4000 4006 9b3f c0a8 01fe E..G..@.@..?....
0x0010 c0a8 0119 0017 9033 744a ed10 7524 4eef .......3tJ..u$N.
0x0020 8018 7d78 2b8d 0000 0101 080a 1f61 d752 ..}x+........a.R
0x0030 0eec fef0 0d0a 6c6f 6361 6c68 6f73 7420 ......localhost.
0x0040 6c6f 6769 6e3a 20 login:.
OK. We've connected to the remote system. Notice the last line. The fact that we're waiting for a login ID is clear. Now, understand that with telnet, every keystroke is sent to the remote system as a separate packet. With that in mind, look at the very last character of the next few packets. Note: some packets have been removed as they are echo packets sent from the server back to the client system.
15:55:37.879456 Mallard.36915 > 192.168.1.254.telnet: . [tcp sum ok] 110:110(0) ack 107 win 5840 <nop,nop,timestamp 250412788 526505810> (DF) [tos 0x10] (ttl 64, id 45161, len 52)
0x0000 4510 0034 b069 4000 4006 05e3 c0a8 0119 E..4.i@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4eef 744a ed23 .....3..u$N.tJ.#
0x0020 8010 16d0 2124 0000 0101 080a 0eec fef4 ....!$..........
0x0030 1f61 d752 .a.R
15:55:38.672320 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 111:112(1) ack 108 win 5840 <nop,nop,timestamp 250412867 526505873> (DF) [tos 0x10] (ttl 64, id 45164, len 53)
0x0000 4510 0035 b06c 4000 4006 05df c0a8 0119 E..5.l@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef0 744a ed24 .....3..u$N.tJ.$
0x0020 8018 16d0 b18a 0000 0101 080a 0eec ff43 ...............C
0x0030 1f61 d791 6f .a..o
15:55:38.798130 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 112:113(1) ack 109 win 5840 <nop,nop,timestamp 250412879 526505893> (DF) [tos 0x10] (ttl 64, id 45166, len 53)
0x0000 4510 0035 b06e 4000 4006 05dd c0a8 0119 E..5.n@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef1 744a ed25 .....3..u$N.tJ.%
0x0020 8018 16d0 b168 0000 0101 080a 0eec ff4f .....h.........O
0x0030 1f61 d7a5 6f .a..o
15:55:38.922395 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 113:114(1) ack 110 win 5840 <nop,nop,timestamp 250412892 526505906> (DF) [tos 0x10] (ttl 64, id 45168, len 53)
0x0000 4510 0035 b070 4000 4006 05db c0a8 0119 E..5.p@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef2 744a ed26 .....3..u$N.tJ.&
0x0020 8018 16d0 ac4c 0000 0101 080a 0eec ff5c .....L.........\
0x0030 1f61 d7b2 74 .a..t
Oh my! someone is trying to log in as root. First of all, you should never log in as root directly. It's safer to log in as yourself and then issue the
su command to become root. Let's see what else we have.
15:55:39.175941 192.168.1.254.telnet > Mallard.36915: P [tcp sum ok] 113:123(10) ack 116 win 32120 <nop,nop,timestamp 526505943 250412916> (DF) (
ttl 64, id 6928, len 62)
0x0000 4500 003e 1b10 4000 4006 9b42 c0a8 01fe E..>..@.@..B....
0x0010 c0a8 0119 0017 9033 744a ed29 7524 4ef5 .......3tJ.)u$N.
0x0020 8018 7d78 d18f 0000 0101 080a 1f61 d7d7 ..}x.........a..
0x0030 0eec ff74 5061 7373 776f 7264 3a20 ...tPassword:.
Ok, waiting for the password now. Again, pay attention to the last character of each of the following packets.
15:55:40.290932 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 116:117(1) ack 123 win 5840 <nop,nop,timestamp 250413029 526505943> (DF) [tos 0x10] (ttl 64, id 45173, len 53)
0x0000 4510 0035 b075 4000 4006 05d6 c0a8 0119 E..5.u@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef5 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 b78e 0000 0101 080a 0eec ffe5 ................
0x0030 1f61 d7d7 68 .a..h
15:55:40.382285 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 117:118(1) ack 123 win 5840 <nop,nop,timestamp 250413038 526506057> (DF) [tos 0x10] (ttl 64, id 45174, len 53)
0x0000 4510 0035 b076 4000 4006 05d5 c0a8 0119 E..5.v@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef6 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 b012 0000 0101 080a 0eec ffee ................
0x0030 1f61 d849 6f .a.Io
15:55:40.485134 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 118:119(1) ack 123 win 5840 <nop,nop,timestamp 250413048 526506066> (DF) [tos 0x10] (ttl 64, id 45175, len 53)
0x0000 4510 0035 b077 4000 4006 05d4 c0a8 0119 E..5.w@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef7 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 b1fe 0000 0101 080a 0eec fff8 ................
0x0030 1f61 d852 6d .a.Rm
15:55:40.611048 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 119:120(1) ack 123 win 5840 <nop,nop,timestamp 250413061 526506076> (DF) [tos 0x10] (ttl 64, id 45176, len 53)
0x0000 4510 0035 b078 4000 4006 05d3 c0a8 0119 E..5.x@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef8 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 b9e6 0000 0101 080a 0eed 0005 ................
0x0030 1f61 d85c 65 .a.\e
15:55:40.918409 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 120:121(1) ack 123 win 5840 <nop,nop,timestamp 250413091 526506089> (DF) [tos 0x10] (ttl 64, id 45177, len 53)
0x0000 4510 0035 b079 4000 4006 05d2 c0a8 0119 E..5.y@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4ef9 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 bcba 0000 0101 080a 0eed 0023 ...............#
0x0030 1f61 d869 62 .a.ib
15:55:41.080038 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 121:122(1) ack 123 win 5840 <nop,nop,timestamp 250413108 526506120> (DF) [tos 0x10] (ttl 64, id 45178, len 53)
0x0000 4510 0035 b07a 4000 4006 05d1 c0a8 0119 E..5.z@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4efa 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 bd89 0000 0101 080a 0eed 0034 ...............4
0x0030 1f61 d888 61 .a..a
15:55:41.221580 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 122:123(1) ack 123 win 5840 <nop,nop,timestamp 250413122 526506136> (DF) [tos 0x10] (ttl 64, id 45179, len 53)
0x0000 4510 0035 b07b 4000 4006 05d0 c0a8 0119 E..5.{@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4efb 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 ab6a 0000 0101 080a 0eed 0042 .....j.........B
0x0030 1f61 d898 73 .a..s
15:55:41.312177 Mallard.36915 > 192.168.1.254.telnet: P [tcp sum ok] 123:124(1) ack 123 win 5840 <nop,nop,timestamp 250413131 526506150> (DF) [tos 0x10] (ttl 64, id 45180, len 53)
0x0000 4510 0035 b07c 4000 4006 05cf c0a8 0119 E..5.|@.@.......
0x0010 c0a8 01fe 9033 0017 7524 4efc 744a ed33 .....3..u$N.tJ.3
0x0020 8018 16d0 b952 0000 0101 080a 0eed 004b .....R.........K
0x0030 1f61 d8a6 65 .a..e
We now know the password for the root account to this box is "homebase." We know that's the last character because of the next few packets which show the remote system information confirming a successful login.
15:55:41.876090 192.168.1.254.telnet > Mallard.36915: P 125:195(70) ack 126 win 32120 <nop,nop,timestamp 526506213 250413178> (DF) (ttl 64, id
6938, len 122)
0x0000 4500 007a 1b1a 4000 4006 9afc c0a8 01fe E..z..@.@.......
0x0010 c0a8 0119 0017 9033 744a ed35 7524 4eff .......3tJ.5u$N.
0x0020 8018 7d78 2034 0000 0101 080a 1f61 d8e5 ..}x.4.......a..
0x0030 0eed 007a 5468 696e 4c69 6e75 7820 6c6f ...zThinLinux.lo
0x0040 6361 6c68 6f73 7420 322e 322e 3134 2d74 calhost.2.2.14-t
0x0050 6869 hi
15:55:41.964197 192.168.1.254.telnet > Mallard.36915: P [tcp sum ok] 195:206(11) ack 126 win 32120 <nop,nop,timestamp 526506222 250413187> (DF) (ttl 64, id 6939, len 63)
0x0000 4500 003f 1b1b 4000 4006 9b36 c0a8 01fe E..?..@.@..6....
0x0010 c0a8 0119 0017 9033 744a ed7b 7524 4eff .......3tJ.{u$N.
0x0020 8018 7d78 7705 0000 0101 080a 1f61 d8ee ..}xw........a..
0x0030 0eed 0083 6c6f 6361 6c68 6f73 7423 20 ....localhost#.
There you have it, easy as pie.
With a little more experimentation and familiarity with
tcpdump, you can do much more. Once again, if this same session used Secure Shell (SSh) instead, the attacker would not be able to capture any of this information, it would be garbage and of no use at all.
I hope I've showed you just how easy it is to look at packets on a network. There is much much more to it than what I've showed here, but this should give you a starting point for further learning.
Tripwire is a unique tool in that it doesn't really stop an attacker from compromising your system. However, Tripwire can tell you which files have been changed or replaced since the last run.
Tools such as Tripwire are often used on a honey pot system. You can see and log what the intruder changes this way very easily. Tripwire uses a database that includes all the information about your system that you want to log. This database is created the first time you run Tripwire. Then, it's used in successive audits to compare what has changed and what has not.
In many configurations, there are files that change all the time, such as those found in user's home directories so you don't want to include those in the audit. However, files that rarely change such as the programs in
/bin, and so forth, are prime targets for inclusion in the database. It depends on your needs and the programs you run.
You can install Tripwire in one of two ways. You can either download the source code and compile it yourself (recommended for any security tool) or you can download the RPM or Debian packages and install that way. As I write this, the latest version of Tripwire is 2.3.1-2.
Place the source in an accessible location such as
/usr/local/src. Then uncompress it in the normal way:
$ cd /usr/local/src
$ tar -xzvf tripwire-2.3.1-2.tar.gz
$ cd tripwire/src
Compiling Tripwire from source is different from most Linux applications, there's no config script for example. Before compiling Tripwire, look over the
makefile and make any changes you need. The
makefile is well documented, so take your time reading. You'll learn a lot in the process. Be sure you also have gtcc 2.95.2 or greater as well or Tripwire will not compile properly. The
makefile makes many references to
gmake, which on Linux systems at least is the same as
make. In fact you may find both commands with one sym-linked to the other.
Tripwire can be compiled in one of two configurations, debug or release. Debug is useful if you are a developer and want to know more about the internals of Tripwire and such or if you're testing out a new version before putting on a production system. Release is the mode you'll use on a production system and the one we'll concentrate on here. Once you've made the modifications you want to the
makefile, you compile tripwire with the following command:
$ make release
Once finished, you actually install Tripwire using the supplied install script. You must be root to run it:
$ su
# cd /usr/local/src/tripwire-2.3.1-2/install
# ./install.sh
The install script copies all the Tripwire programs, libraries, and man pages to their proper places on the system. It also places the default policy and configuration files in
/etc/tripwire/. The install script will also prompt you for site key passwords and local key passwords, compile the default policy and configuration files, and finally sign these files with the site key. Remember these passphrases as they cannot be recovered. You have been warned!
Tripwire's files
Tripwire uses four files in the working of its magic: the policy file, the configuration file, the database file, and the report files. Some of these files exist in two formats: binary and text.
The text version is what you edit to configure how you want Tripwire to work. Then, you run
twadmin to compile the text files into the binary files it uses. You should then move the text files to a floppy or CD media and delete them from the system. This way, an intruder cannot change what Tripwire reports to cover his tracks.
The policy file
/etc/tripwire/tw.pol is used by you as the administrator to specify how Tripwire checks the system. The policy file consists of various rules, each of which specify a system object that Tripwire monitors, and describe what changes to that object should be reported or ignored.
The configuration file
/etc/tripwire/tw.cfg stores system-specific information such as the location of the Tripwire data files and the settings used for notification via email when violations occur.
A good sample policy and configuration file comes with the Tripwire source code. In the beginning, you can use them as a starting point instead of trying to create your own until you become more familiar with how Tripwire works.
The database file
/var/lib/tripwire/$(HOSTNAME).twd is central to the integrity assessment strategy. Tripwire uses the rules specified in the policy file to create a "snapshot" of the system. Ideally, this snapshot should be of a clean install so you are guaranteed of being in a known secure state. The database file is then used as a "baseline" during integrity checks. The current state of the system is compared against this database to determine if any changes have been made since the database was created.
The report files
/var/lib/tripwire/$(HOSTNAME)-$(DATE).twr are produced every time the integrity check is run. Usually, you run an integrity check at a set interval using the
cron facility. The results of that check, including any changes (additions, deletions, or modifications) that violate the policy file rules, are stored in a report file. Summary results of the integrity check are stored in the report file which can be viewed in a variety of formats at varying levels of detail.
Web sites:
Linux Administrator's Security Guide
Linux System Administrator's Guide
Network Intrusion Detection, 2nd Ed. (New Riders) ISBN: 0-7357-1008-2
Intrusion Signatures & Analysis (New Riders) ISBN: 0-7357-1063-5
Maximum Linux Security (SAMS) ISBN: 0-672-31670-6
Linux Network Administrator's Guide, 2nd Edition (O'Reilly) ISBN: 1-56592-400-2
Practical Unix and Internet Security (O'Reilly) ISBN: 1-56592-148-8
Running Linux, 3rd Edition (O'Reilly) ISBN: 1-56592-469-X
Linux System Security (Prentice Hall) ISBN: 0-13-015897-0
Using Tripwire
Once everything is set up, you're ready to begin using Tripwire. Tripwire consists of a few different applications:
twadmin compiles the text files into binary files used by Tripwire while
twprint allows you to take a binary config file and get the ASCII text out of it. Because these programs are administrative, you'll want to remove them from your system once everything is set up. Removing them will prevent an intruder from using the admin programs to change what Tripwire looks for and so forth.
The main application is called
tripwire. Use
tripwire to create your initial database like this:
# tripwire -m i
-m tells Tripwire what mode to use, in this case, initialization mode. Now that the database is created, you run comparisons on your system with the following command:
# tripwire -m c
You should put this into a
crontab or shell script file. How often you run Tripwire depends on your level of paranoia. If you are really paranoid, you might run it every couple hours. If you're not that paranoid, once a day may be sufficient. Remember, you have to look over the reports generated by Tripwire, so if you do it too often, the task may become too daunting. But again, that's entirely up to you. What do the reports look like you ask? Like this.
There is more to it than this, but the files can be large depending on your system. If you find that you are changing some files that Tripwire compares (new versions of applications for example) you can always update Tripwire's database with the command:
# tripwire -m u
There are many things you can do to avoid use of some tools like
tcpdump and Ethereal. You can use a switched network for a start to avoid "broadcasting" your packets to every workstation on your network. Note: This doesn't stop somone from sniffing traffic going from your network to the Internet, or from capturing data from the Internet (such as a remote user) destined for your network. But it does narrow down the ability to use such tools internally, unless they are being run on the source or destination machine (such as one of your servers).
Another thing to do, is get rid of any network protocol that transmits text in the clear. This means telnet and FTP to start. You should also look at getting rid of the Berkley "R commands" such as
rlogin, et al. You should be using SSh for all remote access and server to server synchronization. If you really need the Berkley "R commands," consider running them over an encrypted SSh session instead.
Tripwire is a great tool for tracking changes to your system. Depending on how "paranoid" you are and how often you run it, you can find a change very quickly, hopefully before the intruder has a chance to stop Tripwire from running and trash any logs. But hey, that's where tools like
syslog come in. We'll take at look at this tool next week along with the venerable
Carl Constantine works for Open Source Solutions, Inc. (www.os-s.com) as a Linux Trainer and Programmer.
Return to the Linux DevCenter.
Copyright © 2009 O'Reilly Media, Inc.


text:
Congratulations to user swtxcandi for correctly guessing the previous Face with BEAST's - Kikwang. For guessing within 10 minutes, they receive an EXP speed bonus of 25 points. In Faces, your task is to identify who the body part belongs to. The first person to correctly guess the artist based on the featured facial feature, will earn 100 EXP points as well as Legion Points for your Mixr Legion. Keep your guesses to Asian idols.
Note: Only one guess per user.
The winner will be announced in the next Faces game. Good luck, all!
New to Ningin? Our newbie guide will help bring you up to speed.
Don't know what EXP is? Well, it's a measure of everything that you do on Ningin and then some. Read our Definitive EXP guide for the complete details.
The winner of this blog game will earn Legion Points for Mixr Legions. Mixr Legions is a team-based game that along with EXP, keeps track of all the activities that you do across the Mixr Network of sites. Head here to learn more!

subset: commoncrawl


text:
Sign up to our newsletter and be the first to hear when the hottest tickets go on sale.For further information about how GET ME IN! uses your information please see our Privacy Policy.
As part of GET ME IN!'s commitment to customer satisfaction:
Kendrick Lamar Announces UK Tour In January 2013Last updated: 25th October 2012Hip-hop's New West Coast rapper is 25 year old Kendrick Lamar who has announced his 2013 short UK tour. His debut album 'Good Kid, m.A.A.d City' has been described as "Deep. Dark. Bassy. Heavy" by the NME and "Hip Hop has been waiting for Kendrick" by Clash magazine.Kendrick Lamar Tour Dates January 2013Manchester, HMV Ritz, Thur 17th January 2013Birmingham, HMV Institute, Fri 18th January 2013Bristol, O2 Academy, Sat 19th January 2013London, IndigO2, Sun 20th January 2013


text:
Melita House
Elegant, good value, newly-refurbished, family-run hotel, close to Victoria station. Rooms are well equipped and the hotel is recommended by major tourist guides.
This content has been supplied by Melita House
|Nightly rate:
|£94.00 to £209.00 (USD118.70) per room
This content has been supplied by Melita House
Venue Details & Map
Melita House
- Address
35 Charlwood StreetLondonSW1V 2DU
- Telephone:
- +44 (0)20 7828 0471
- Public transport:
- Victoria - 0.5 km Walk up Wilton Road, turn left onto Belgrave Road and turn first right into Charlwood Street. The hotel is 30m on the right.
- Booking Facilities
- Coach parties accepted
- Stag or hen parties accepted
- Catering Facilities
- Breakfast included
- Halal options on menu
- Kosher options on menu
- Nut-free option on menu
- Vegetarian options on menu
- Children Facilities
- Children welcome
- General Facilities
- Guest lounge
- Internet access
- Ironing facilities
- Payment Facilities
- Credit cards accepted
- Debit cards accepted
- Euros accepted
- Group rates available
- Traveller cheques accepted
- Room Facilities
- Drink making facilities
- Ground floor accommodation available
- Hairdryer
- Central heating
- Telephone
- Television
- Service Facilities
- Night porter
TripAdvisor Reviews
Loading reviews for Melita House
Are you a representative of Melita House?
Respond to Reviews
Read more reviews on TripAdvisor
About TripAdvisor and Visit London
Please be advised that any comments, opinions and statements submitted herewith are entirely independent and do not represent views held by, or are in any way connected to visitlondon.com.


text:
Passaic (NJ) Schools has instituted a new lunchroom policy that will deny meals to cash students whose accounts are $50 or more in arrears, reports the North Jersey Herald News. Students signed up for government subsidized meals will not be affected. The policy change was voted in by the Board of Education in September after the previous policy of serving "humanitarian meals" cost the cash-strapped district over $130,000 in the 2009-10 school year and contributed to the foodservice ...
Register to view this Article
WhyRegisterfor FREE?
Registering for Premium Content on Food Management will give youINSTANTaccess to invaluable articles and media content that industry professionals rely on. You will have access to our special reports, feature articles, and industry analysis. It'sFREE, easy and quick.


text:
What's as Painful as the Sox Getting Off to a Bad Start?
1 Comment
Tough start. But you know your team is better than 4-9. Same way I know my team has alot of work to do to earn their 10-3 record status. Right now your boys are knocking my Rays around the Cell, playing pepper with the outfield wall. I'm hoping that Price can start shutting your guys down before those balls start flying over the fence.


text:
Welcome to Hyperion Records, an independent British classical label devoted to presenting high-quality recordings of music of all styles and from all periods from the twelfth century to the twenty-first.
Hyperion offers both CDs, and downloads in a number of formats. The site is also available in several languages.
Please use the dropdown buttons to set your preferred options, or use the checkbox to accept the defaults.
|Christmas through the ages
'Other than to assure you that it works for me, need I say more?' (Fanfare, USA)» More
|Schütz: The Christmas Story; Gabrieli: Christmas Motets
'Ravishing… the sheer beauty of the sound, immeasurably enhanced by a warm, sonorous recording, sweeps us into the narration of the familiar story' (B ...» More
|The King's Consort Baroque Collection
'Hyperion and the Consort celebrate a decade together – fifty CDs – with an anthology of delights. Consistency of performance and of engineering is a ...
'I must admit to being quite bowled over by this record. There is something especially infectious about Robert King's music-making [and] the recording ...» More


text:
Nicolai the Vampire is renowned for his virility, but in a cruel twist of fate "The Dark Seducer" has become a sex slave in the kingdom of Delfina—stripped of his precious timepiece and his memory. All that remains is a primal need for freedom, revenge—and the only woman who can help him.
When the wanton vampire summons Jane Parker, she is helpless to obey. She's drawn to his dark sexuality and into his magical realm. But for this human, all is not a fairy tale. For saving Nicolai could mean losing the only man she's ever craved...
Possessed by the demon of Defeat, Strider cannot lose a challenge without suffering unimaginable pain. For him, nothing stands in the way of victory. Until Kaia, an enchanting Harpy, tempts him to the razor's edge of surrender.
Known among her people as The Disappointment, Kaia must bring home the gold in the Harpy Games or die. Strider is a distraction she can't afford because he has an agenda of his own – steal first prize, an ancient godly artifact, before the winner can be named. But as the competition heats up, only one prize will matter – the love neither had thought possible…
Carla -Q1): What are 3 things about yourself that we couldn't find out on the Internet?Gena: 1. I sometimes like to have dinner foods for breakfast, and breakfast foods for dinner. 2. When I was a pre-teen, I had a poster of Kirk Cameron. I kissed it until he had no lips left. Yeah. I did. 3. I love the Bible.
Q2): What's a typical day like in the life of Gena Showalter?
Gena: For years I had the same routine. Get up, write until my work for the day was done, drinking coffee all the while, then do everything else. Like eat. Over the last few months, however, that routine has changed. Now I get up and do ~not~ drink coffee, then go for a walk, shower (that is, if my family is lucky and I wasn't struck with inspiration and need to head straight to the computer), then jump into whatever book I'm working on. I stay there until I've met my goal for the day, taking breaks to eat and stretch. I'm trying for a healthier schedule.
Q3): What are some of your favorite things to do when you're not writing or taking care of other author business?
Gena: I love to read, watch TV, go to the movies, email bomb my friends (Jill Monroe, Kresley Cole, and PC Cast especially), and phone my friends (same three mentioned). Every night before bed, my husband and I like to pick a program on DVD and watch a few episodes. That way, we can power through entire seasons and never have to watch commercials or wait for answers. Right now we're watching NCIS.
Q4): What are 2 things that never fail to make you smile, and 2 things that never fail to piss you off?Gena: Smile: 1. My family. 2. Hitting a new milestone with my books. Pissed: 1. When my favorite shows get canceled. 2. Illness.
Q5): What are some of your favorite T.V. shows and movies?Gena: I adore How I Met Your Mother, House, Castle, Drop Dead Diva, Cougar Town, Bones, and many more! And I recently watched Conan, the new movie, and fortified my lust for Jason Momoa.
Q6): You have written so many books in multiple genres and every book is better than the last. Where do you get all of your inspiration from to create so many different and exciting worlds?Gena: First, thank you so much! Second, inspiration comes from conversations I have, things I overhear, things I see and read, and really, everywhere. Nothing is safe!
Q7): Do you have any interesting writing quirks or things you must have with you when you start the writing process?
Gena: Once upon a time, I would have said coffee. Now, having defeated my coffee addiction, I have to say . . . listening to music. I always have music playing while I'm writing.
Q8): If you had to describe yourself in 5 words what would they be?Gena: Obsessed, quirky girl. Means well.
Q9): If you could have any one super power, what would it be and why that power?Gena: I change my mind about this all the time (because, yes, I often wonder about it) but today I pick invisibility. As a determined wall flower, I'd never have to worry about being spotted again <g> And maybe I'd like to watch (and drool over) Jason Momoa without being labeled a stalker.
Carla - Book Monster Reviews - Now that we've gotten to know more about you Gena, I'm going to ask some questions regarding your books and series.
Q10): The EXTRAORDINARY GIRL and ATLANTIS series are two of my all time favorites, as I'm sure it is for many of your fans out there. Do you have any plans at all to write more books for both of these series? (pretty please say YES!!)Gena: I would love to write a full-length novel about Belle and Rome's honeymoon. They are one of those couples I can't get enough of. And I would love to write – at the very least – a short story tying up all the loose ends in the Atlantis series. Right now, neither is in the works but I hope to change that very soon!
Q11): I saw on your blog that Paris' book, (tentatively titled) "The Darkest Seduction", will be next up after Strider's book (Yippee!!). Inquiring minds want to know if Sienna will be the lucky woman to land the lusty Paris?Gena: I'll be spilling all kinds of details about Paris's book in November, and his heroine is one of them. Until then, I've gotta keep my lips shut. But I soooo want to talk. (No, Gena, no. You have to wait. But . . . but . . . )
Q12): I also saw that you have plans for a LORDS OF THE UNDERWORLD Spin-off series. Can you please give us a little information about this series?
Gena: That's another bit of info I'll be dishing out in November. Right now, I've got to channel all of my energy into my new and upcoming releases. I've never had so many books release so close together (4!), and it's been a nail biter.
Q13): How many more books will there be in the LORDS OF THE UNDERWORLD series?Gena: I'm not sure on the number, but right now I'm contracted for five more, be they Lords of the Underworld or the spin-off books. One of those is to be Kane's story, two are spin-offs (for sure). As for other two, I'm not sure which characters will get them.
Q14): Can you please tell us about "Dating The Undead", the cool new book/magazine that you created with Jill Monroe?Gena: This was such a fun, amazing project! We have articles and stories about how to date creatures of myth, including men from the pages of romances novels. There's an exclusive excerpt of The Darkest Seduction, and pictures of beefcake galore! There are ads for products like Coffin Klein. There's even a section where real-life Lords of the Underworld bare all!
Q15): You have a new paranormal YA series coming out in December of 2012 called ALICE IN ZOMBIELAND. Can you tell us what it's going to be about and what we can expect?Gena: Alice in Zombieland features a teenage girl who loses her family in a crash, and wakes up to a world of zombies and zombie slaying, as well as a bad boy who could save or destroy her. And I have to tell you, I am so in love with this bad boy. His name is Cole, and I'd be willing to fight Ali for him.
Q16): "Twisted" is now the third book in the INTERWINED series. How many more books do you have planned for this series?Gena: There will be one more book in the Intertwined series, where Aden and the gang discover their ultimate fate. I do have a spin-off contracted, and think I'll write about Riley's werewolf brothers, Max and Nate, who are both cursed by a witch. Anyone they desire sees them as ugly, and anyone they do not desire sees them as beautiful. This will be a real Beauty and the Beast tale.
Q17): What does the future hold for the ALIEN HUNTRESS series? Will Dallas ever get his own book? How many books do you have planned for this series?Gena: I have two more books contracted in the Alien Huntress series, and really hope one of those belongs to Dallas. I never know until I sit down to write. Sometimes characters are stubborn, sometimes they are ready for whatever I dish. So far, Dallas's hasn't been ready. But I think that's about to change.
Q19): What would you like to say to all of the readers and fans out there?
Gena: Thank you so much for your support and enthusiasm. I couldn't do this without you, and I will be forever grateful!
Carla - Book Monster Reviews: Gena, that was so much fun! Thank you again for coming by today and answering all of our questions. We would absolutely LOVE for you to come back in 2012 so we can help you promote Paris' book and any other new releases you may have.
CONTEST: Gena is very generously giving away a copy of her 3 new releases. That's right! You have the opportunity to win a copy of "Dark Taste Of Rapture", "Lord Of The Vampires", and "Twisted." 3 winners will be picked (one winner per book).
Contest is open to international fans as well.


text:
Home List of Titles Probing the 2D kinematic structure of early-type galaxies out to three effective radii
Please use this identifier to cite or link to this item: http://hdl.handle.net/1959.3/64727
|Download PDF (Accepted manuscript) (Adobe Acrobat PDF, 1 MB)
- Title
- Probing the 2D kinematic structure of early-type galaxies out to three effective radii
- Author(s)
- Proctor, Robert N.; Forbes, Duncan A.; Romanowsky, Aaron J.; Brodie, Jean P.; Strader, Jay; Spolaor, Max; Mendel, J. Trevor; Spitler, Lee
- Abstract
- We detail an innovative new technique for measuring the two-dimensional (2D) velocity moments (rotation velocity, velocity dispersion and Gauss–Hermite coefficients h3 and h4) of the stellar populations of galaxy haloes using spectra from Keck DEIMOS (Deep Imaging Multi-Object Spectrograph) multi-object spectroscopic observations. The data are used to reconstruct 2D rotation velocity maps. Here we present data for five nearby early-type galaxies to ∼three effective radii. We provide significant insights into the global kinematic structure of these galaxies, and challenge the accepted morphological classification in several cases. We show that between one and three effective radii the velocity dispersion declines very slowly, if at all, in all five galaxies. For the two galaxies with velocity dispersion profiles available from planetary nebulae data we find very good agreement with our stellar profiles. We find a variety of rotation profiles beyond one effective radius, i.e. rotation speed remaining constant, decreasing and increasing with radius. These results are of particular importance to studies which attempt to classify galaxies by their kinematic structure within one effective radius, such as the recent definition of fast- and slow-rotator classes by the Spectrographic Areal Unit for Research on Optical Nebulae project. Our data suggest that the rotator class may change when larger galactocentric radii are probed. This has important implications for dynamical modelling of early-type galaxies. The data from this study are available on-line.
- Publication type
- Journal article
- Research centre
- Swinburne University of Technology. Faculty of Information and Communication Technologies. Centre for Astrophysics and Supercomputing
- Source
- Monthly Notices of the Royal Astronomical Society, Vol. 398, no. 1 (Sep 2009), pp. 91-108
- Publication year
- 2009
- FOR Code(s)
- 0201 Astronomical and Space Sciences
- Keyword(s)
- 2D velocity maps; Dynamics; Galaxies; Galaxy structure; Kinematics; Spectroscopic techniques; Stellar dynamics
- Publisher
- Wiley-Blackwell Publishing
- 0035-8711
- Publisher URL
- Copyright
- Copyright © 2009 The Authors. Journal compilation copyright © 2009 Royal Astronomical Society. The accepted manuscript of the paper is reproduced here in accordance with the copyright policy of the publisher. The definitive version is available at www.interscience.wiley.com.
- Full text
- Peer reviewed


text:
Amazing Step-by-Step Carving of Eagle Totem Pole by Young Brothers
Sealaska Heritage Institute (SHI) has announced that two brothers, Joe and TJ Young, will be carving totem poles and a screen for the Gajaa Hít building in Juneau's Indian Village. The new works will replace poles carved in 1977 (for more on the project, read the news story at the SHI website). While the undertaking will demand artistry and commitment, SHI is in good hands with the talented Haida brothers, who carved an eagle totem pole for SHI in 2009 that was installed at the University of Alaska Southeast. These photos of Joe and TJ at work on that 2009 carving come from the Sealaska Heritage Institute Picasa gallery.
You need to be logged in in order to post comments
Please use the log in option at the bottom of this page


text:
i got sunrizer, dxi and tabletop thats it.
what do you recomend
Any good apps for music ?
Started by Tastik BEATS , Nov 24 2013 02:22 PM
3 replies to this topic
Posted 24 November 2013 - 02:22 PM
Posted 24 November 2013 - 02:49 PM
i recommend searching album names in google followed by "blogspot" and finding 320 kbps rips of vinyl.
download and unzip to play in iTunes...done.
download and unzip to play in iTunes...done.
Posted 25 November 2013 - 12:48 AM
I mean like synths and stuff lol ill remake the thread with a better title
Posted 26 November 2013 - 05:11 AM
I love fucking around with the impc
Cos I don't own a real one lololol
Cos I don't own a real one lololol
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users