Solaris 10 generating Malicious Traffic...HELP

Hi,
Recently, we started getting WARNING messages from our ISP that one of our box IP generating malicious traffic.
We have a Solaris 10 Box (OS patched upto date - services like telnet, snmp are disabled already) with that IP (ISP mentioned), is generating malicious traffic. I confirm it doing because I could see online using netstat command today.
It�s generating traffic onto internet with destination port = 23 and source port (on my box) is random.
I implemented a script using lsof, that reads source port of all connection destined to remote�s 23 port. It also includes running lsof using that random local port to get the process (or ID). But none of them I could get as the script result.
Today I happened to see it online and the reason why my script not generating any output is that the suspicious process generating the traffic, changing local port numbers in such a way that by the time I run lsof, the local port connection closed/gone. It keeps generating/changing very fast such that the script not able to capture the process.
The only thing I could get the output of �ps �aef� and is attached below. Could anybody please go through the list of processes in listed below and hint me any process to suspect?
+++++++++++++
ps -aef output:
list99: UID PID PPID C STIME TTY TIME CMD
list99: root 0 0 0 Jun 10 ? 0:03 sched
list99: root 1 0 0 Jun 10 ? 0:26 /sbin/init
list99: root 2 0 0 Jun 10 ? 0:00 pageout
list99: root 3 0 1 Jun 10 ? 44:04 fsflush
list99: daemon 196 1 0 Jun 10 ? 0:00 /usr/lib/nfs/statd
list99: root 7 1 0 Jun 10 ? 0:20 /lib/svc/bin/svc.startd
list99: root 9 1 0 Jun 10 ? 1:23 /lib/svc/bin/svc.configd
list99: daemon 208 1 0 Jun 10 ? 0:00 /usr/lib/nfs/lockd
list99: daemon 194 1 0 Jun 10 ? 0:15 /usr/lib/nfs/nfsmapid
list99: root 190 1 0 Jun 10 ? 0:06 /usr/sbin/cron
list99: daemon 191 1 0 Jun 10 ? 0:00 /usr/sbin/rpcbind
list99: daemon 119 1 0 Jun 10 ? 0:03 /usr/lib/crypto/kcfd
list99: root 93 1 0 Jun 10 ? 0:00 /usr/lib/sysevent/syseventd
list99: root 96 1 0 Jun 10 ? 0:29 /usr/lib/picl/picld
list99: root 351 1 0 Jun 10 ? 0:00 /usr/lib/ssh/sshd
list99: root 117 1 0 Jun 10 ? 0:20 /usr/sbin/nscd
list99: root 198 7 0 Jun 10 ? 0:00 /usr/lib/saf/sac -t 300
list99: root 115 1 0 Jun 10 ? 0:00 devfsadmd
list99: root 508 1 0 Jun 10 ? 0:05 /usr/lib/fm/fmd/fmd
list99: root 322 1 0 Jun 10 ? 0:00 /usr/lib/nfs/mountd
list99: root 210 7 0 Jun 10 console 0:00 /usr/lib/saf/ttymon -g -d /dev/console -l console -T sun -m ldterm,ttcompat -h
list99: root 203 198 0 Jun 10 ? 0:00 /usr/lib/saf/ttymon
list99: root 209 1 0 Jun 10 ? 0:34 /usr/lib/inet/inetd start
list99: root 211 1 0 Jun 10 ? 0:01 /usr/lib/utmpd
list99: nobody 513 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: root 382 381 0 Jun 10 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
list99: root 302 1 0 Jun 10 ? 0:00 /usr/lib/autofs/automountd
list99: root 475 467 0 Jun 10 ? 1:10 /usr/openwin/bin/Xsun :0 -defdepth 24 -nobanner -auth /var/dt/A:0-pday6a
list99: root 381 1 0 Jun 10 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
list99: root 509 467 0 Jun 10 ? 0:00 /usr/dt/bin/dtlogin -daemon
list99: root 303 302 0 Jun 10 ? 0:02 /usr/lib/autofs/automountd
list99: daemon 324 1 0 Jun 10 ? 2:49 /usr/lib/nfs/nfsd
list99: root 334 1 0 Jun 10 ? 0:01 /usr/sbin/syslogd
list99: root 383 381 0 Jun 10 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
list99: root 510 467 0 Jun 10 ?? 0:00 /usr/openwin/bin/fbconsole -d :0
list99: nobody 512 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: root 529 528 0 - ? 0:00 <defunct>
list99: nobody 514 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: lp 1237 1 0 Jun 11 ? 0:00 lpfilter
list99: nobody 515 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: nobody 516 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: root 511 1 0 Jun 10 ? 0:16 /usr/apache/bin/httpd
list99: root 467 1 0 Jun 10 ? 0:00 /usr/dt/bin/dtlogin -daemon
list99: root 528 509 0 Jun 10 ? 1:17 dtgreet -display :0
list99: nobody 778 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: nobody 637 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: nobody 636 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: nobody 779 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: nobody 777 511 0 Jun 10 ? 0:01 /usr/apache/bin/httpd
list99: root 5740 10012 0 12:32:38 ? 0:00 sleep 18
list99: root 4153 209 0 12:31:51 ? 0:00 /usr/lib/nfs/rquotad
list99: root 3655 2908 0 11:29:23 pts/3 0:00 -bash
list99: praveen 22983 22654 0 11:18:47 ? 0:00 /usr/lib/ssh/sshd
list99: root 23070 23004 0 11:18:55 pts/2 0:00 -bash
list99: connie 821 209 0 12:28:28 ? 0:00 /usr/sbin/in.ftpd -a
list99: praveen 2908 2607 0 11:29:13 pts/3 0:00 -sh
list99: connie 892 209 0 12:28:32 ? 0:00 /usr/sbin/in.ftpd -a
list99: root 1209 351 0 11:28:53 ? 0:00 /usr/lib/ssh/sshd
list99: root 6015 3655 0 12:32:55 pts/3 0:00 ps -aef
list99: root 22654 351 0 11:18:18 ? 0:00 /usr/lib/ssh/sshd
list99: praveen 23004 22983 0 11:18:49 pts/2 0:00 -sh
list99: praveen 2607 1209 0 11:29:09 ? 0:01 /usr/lib/ssh/sshd
list99: root 5985 209 0 12:32:52 ? 0:00 /usr/sbin/in.ftpd -a
list99: root 7350 209 0 11:30:35 ? 0:00 /usr/sbin/in.rlogind
+++++++++++
Thanks
Praveen RK

Wow. That is really too bad. You can't spot anything suspicious in the logs? Do you think it could have been the telnet vulnerability? Maybe they got in before the patch.
Sadly the above posters were probably right, you need to format and start over. Even if you identify the culprit on the machines there is no way of making sure it is not still compromised.
I am a fan of ipfilter and scripts watching the logs for suspicious activities. It is not fool-proof by a long shot but it keeps the kids out. I set it so anything suspicious (even a port scan) results in completely blocking that IP from all ports, not just the one it was pestering. If you set it to 'one hit wonder' you can stop people from doing things like the telnet vulnerability, but I would not bank on complete protection. I use sshblack and modify it to watch other services as well as ssh. However, I am in academics and not business so I am sure if there is money involved a person would really want to make sure what they were doing was 'right' not just a bulletin board suggestion.
If they did get in through the telnet vulnerability there was nothing you could have done besides turn the service off from the start.
I am not trained in this kind of thing but I am pretty sure ALL data on those boxes must be considered compromised as well and should be isolated from the new installations.

Similar Messages

How to generate web traffic report on SharePoint 2013?

Hello All,
I am working on Intranet in SharePoint 2013 On Premise.
There are functionalities like Poll, Survey, Event, Announcements etc.
Now there is a requirement to create web traffic report for all these functionality. How should I generate web traffic report for all these?
Thanks in Advance.

Hi Darsh,
Here is the out of box analytic reports you can view. Please refer to the following article.
SharePoint 2013 Analytics A Big Step Backward
New Analytics in SharePoint 2013
Please mark it answered, if your problem resolved or helpful.

Sun Cluster 3.2/Solaris 10 Excessive ICMP traffic

Hi all,
I have inherited a 2 node cluster with a 3510 san which I have upgraded to Cluster 3.2/Solaris 10. Apparently this was happening on Cluster 3.0/Solaris 8 as well.
The real interfaces on the two nodes seem to be sending excessive pings to the default gateway it is connected to. The configuration of the network adapters are the same - 2 NIC's on each are grouped for multi-home and 2 NIC's configured as private for cluster heartbeats.
The 2 NIC's that are grouped together on each of the servers are the cards generating the traffic.
23:27:52.402377 192.168.200.216 > 192.168.200.1: icmp: echo request [ttl 1]
23:27:52.402392 192.168.200.1 > 192.168.200.216: icmp: echo reply
23:27:52.588793 192.168.200.217 > 192.168.200.1: icmp: echo request [ttl 1]
23:27:52.588806 192.168.200.1 > 192.168.200.217: icmp: echo reply
23:27:52.818690 192.168.200.215 > 192.168.200.1: icmp: echo request [ttl 1]
23:27:52.818714 192.168.200.1 > 192.168.200.215: icmp: echo reply
23:27:53.072442 192.168.200.214 > 192.168.200.1: icmp: echo request [ttl 1]
23:27:53.072479 192.168.200.1 > 192.168.200.214: icmp: echo reply
Here is the setup to one of the servers:
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
ce0: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 2
inet 192.168.200.214 netmask ffffff00 broadcast 192.168.200.255
groupname prod
ether 0:3:ba:43:f4:f4
ce0:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.200.212 netmask ffffff00 broadcast 192.168.200.255
ce1: flags=1008843<UP,BROADCAST,RUNNING,MULTICAST,PRIVATE,IPv4> mtu 1500 index 5
inet 172.16.0.129 netmask ffffff80 broadcast 172.16.0.255
ether 0:3:ba:43:f4:f3
qfe0: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 3
inet 192.168.200.216 netmask ffffff00 broadcast 192.168.200.255
groupname prod
ether 0:3:ba:34:95:4
qfe1: flags=1008843<UP,BROADCAST,RUNNING,MULTICAST,PRIVATE,IPv4> mtu 1500 index 4
inet 172.16.1.1 netmask ffffff80 broadcast 172.16.1.127
ether 0:3:ba:34:95:5
clprivnet0: flags=1009843<UP,BROADCAST,RUNNING,MULTICAST,MULTI_BCAST,PRIVATE,IPv4> mtu 1500 index 6
inet 172.16.193.1 netmask ffffff00 broadcast 172.16.193.255
ether 0:0:0:0:0:1
Any suggestions on why the excessive traffic?

I would guess these are the ipmp probes (man in.mpathd).
You can start in.mpathd in debug mode to find out.
HTH,
jono

Does Robohelp HTML V 7.02.001 support Arabic language to generate context sensitive help

Kindly let us know URGENTLY if RoboHelp 7.02.001 supports Arabic language to generate context sensitive help in Arabic. If RoboHelp does not support, let us know if there is any other workaround solution or third party integration tool that may help us to generate Arabic help files.

The supported languages are listed in the help file, they do not include right to left languages.
There are no tools that I know of but last week there was a post that might interest you.
http://forums.adobe.com/message/2242235#2242235
See www.grainge.org for RoboHelp and Authoring tips

Generating JavaHelp (online help) in Arabic Language

Dear Friends,
I would like to know from you that I want to generate JavaHelp (online help) in Arabic Language. Could you please suggest me which tool will generate Javahelp in Arabic?
Thanks & Regards,
T. BALAJI
Sr. Tech. Writer

Hi,
I think you can use "jhelpdev" open source tool. (I use it to create javahelp files in Persian). Pleae don't forget to set UTF-8 where it is necessary.
Please find it in http://jhelpdev.sourceforge.net/
Regards,
Elham

QoS for locally generated mgmt traffic

Hi all,
If two tetra cards (GSR GE Linecards) are connected back to back and run ebgp (vrf level) between them. I presume the locally generated bgp traffic (prec 6) automatically goes into the default queue if multiple output queues are present?
If the connecting link uses discard-class wred for implementing wred in the output direction, what happens to this management traffic in terms of wred?

Check here :
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt4/qcfcbshp.htm

Need help in generating L4 Traffic monitor logs

Hi,
As a part of my project I need to study different types of logs produced by Cisco IronPort. I could generate some access and authentication logs however not sure about generating the L4 Traffic Monitor logs. Can anyone point me to right documentation that will help me generate those logs?
Thanks,
Harshad Kashikar

Harshad,
L4 Traffic Monitoring needs to be configured within the IronPort - first question is do you have a SPAN/TAP port set up on your switch to capture L4 traffic?
Second, I only use this feature to capture information on malware/spyware - I have seen P2P, IRC, and 'phone-home' traffic amongst other things. Do you have an infected host you can monitor?
BF

Am getting message from MacPro that my start up disc is full - but I can't find it and can't figure out what to do to help situation. I've been making a number of imovies, which generates junk files. help?

I am getting message from MacPro that my start up disc is full - but I can't find this "start up disc" and can't figure out what to do to help situation. I've been making a number of imovies, which generates junk files and material that I should toss in the trash, but it is not clear to me what items I can toss and which items I can't toss. Can you help? Using the imovie "help" support the system showed me under the menu item "go" where the "start up disc" should be - but that wasn't actually available on my menu! Thanks for your help!

Disk Utility
Get Info on the icon on Desktop
Try to move this to the MacBook Pro forum
Your boot drive should be 30% free to really perform properly. 10% minimum
Backup, clone, use TimeMachine, use another drive for your projects and movies, replace and upgrade the internal drive even.

Name of .exe file generated from Air Help

Is there a way to customize the name of the .exe file generated by the Air Help output? I can specify the name of the .air file. But when the Air application is installed, the .exe filename is the same as the help title ("Help Title" field in the Adobe Air dialog box) . This means the help title is used in the title bar of the Air application, on the Start menu and Add/Remove Programs, and in the filename.
I would like to use a shorter, one-word filename. I would expect the name of the .air file to be the name of the .exe file.
I'm generating an Adobe Air application using RoboHelp 8.
Thanks,
- Maura

I assume you are creating the file as a java.io.File object. Under those circumstances you should be able to specify the name and target directory when you save it:File f = new File(directory+System.getProperty("file.separator")+filename);Or, if you have already named it:
f.renameTo("file.txt");Actually, now I look at it, I may have totally misunderstood what you are trying to do there- are you naming it right in the hyperlink?

Solaris 10 with Windows 2000 HELP!

Hi,
I'm having a terrible time with Solaris 10 installation and configuration.
I installed W2k on a NTFS partition. I shrinked the partiton with Partition Magic so I have enough place for Solaris.
I installed Solaris using the rest of the disk space and completed sucessfully.
The system then asked me where I want to boot and I said W2K. Once I went to W2K I found that my DVD-Rom wasn't recognized. Also, I couldn't run Partition Magic as it was giving me a message about partition table is corupt.
Then on the next boot I could not for the life of me get into Solaris. There was no choice anymore.
Can someone please help me with this issue? I'm trying like crazy for weeks now and all I need is some kind of step-by-step help if possible.
Thanks in advance,
Chaim Bochner

Resizing a Windows partition assumes that this partition has to be defragmented before. Furhter in nearly every cases I know Windows has always to be installed at first operating system. It is a good advice when the amount of primary partitons on one HD are not more then four at all, specially when Windows is on it. This number is quickly reached because Solaris needs as I know three primary partitions for itselfs. Installing further operating systems after Windows, Windows losts its attribut as master partition. That means Windows might be not recognized any more. The problems increase by resizing partitions. Unfortunately Soraris does not support realy the usage with several operating systems on one HD and its tools on board are very purely.
There are two strategies to solve the problem: First I would delete Solaris from the HD so Windows is the first Operatin System and starts well, again. Then size the Windows partion after defragmenting as you want. Afterwards make a boot disk from Windows. Then I would install Solaris, but the Grub Loader I would install on a floppy disk and not on the HD to avoid Solaris from writing in the master boot record. Finally you need a boot loader that starts from a floppy disk. Such boot loaders can be found at Internet or from Linux.
My second strategy is, depends on the size of the HD, to install a very small Linux patition at the last operating system. The Linux boot loader LILO can manage several operating systems on the one HD very well.
My advice to Sun: Look what competitors operating systems can do nowadays and learn now. Talk to your customers what they need. Don�t wait for the next 30 years.
I wish much success.
Kind regards from Berlin, Germany

Compile Errors when Generating Conditional Tag Help File

Ok, here is a recap of everything I have done. I started over from scratch. Unzipped the Help File into C:\Users\edwinwood\Documents\My RoboHelp Projects\Adobe RoboHelp 9 folder. Went to the properties SSOL Help Development folder and unchecked read only. Opened RoboHelp 9 as an administrator, went to File->Open and opened the help file. The first thing that pops up is a message stating this is a help file made with an older version of RoboHelp(v8) and must be upgraded(v9). I hit ok. The next pop-up is this “Unable to connect to the project $/SSOL HelpDevelopment@:ROBOSOURCE in version control. Would you like to browse for it?” I hit yes and the next pop-up just asks do you want to discontinue connection attempts in the future. I hit no. After that is usually where the files that are write protected pop-up but they didn’t this time. After about 5 minutes It will say upgrade complete. I shut down RoboHelp go into the language folder copy the robohhre.lng and paste it into the root folder. Like I said this file has nothing in it. I reopen RoboHelp as an administrator and open the project again. I then go to View->Pods->Single Source Layouts. Double click the Tag1 Remove Hickory Tech and then click save and generate. At the very end of the compile process I still get Template Errors...
Applying WebHelp 5.50 Template...
Template Error: can not resolve macro: WH_LNG_LoadingData
...Template Error: can not resolve macro: WH_LNG_MergeError1
Template Error: can not resolve macro: WH_LNG_MergeError2
Template Error: can not resolve macro: WH_LNG_JS_alert_ProjectLoadingFail
...Template Error: can not resolve macro: WH_LNG_PreTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_NextTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_Show_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_Hide_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_Show_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_Hide_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
Template Error: can not resolve macro: WH_LNG_SyncTocTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtopic.js
.....Template Error: can not resolve macro: WH_LNG_IndexSelectTopicTitle
Template Error: can not resolve macro: WH_LNG_IndexSelectTopicLabel
.....Template Error: can not resolve macro: WH_LNG_LoadingContentsData
Template Error: can not resolve macro: WH_LNG_Book
Template Error: can not resolve macro: WH_LNG_Page
Template Error: can not resolve macro: WH_LNG_Remote_Page
....Template Error: can not resolve macro: WH_LNG_IndexBtnText
....Template Error: can not resolve macro: WH_LNG_SearchPrompt in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whfform.htm
Template Error: can not resolve macro: WH_LNG_SearchPrompt in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whfform.htm
Template Error: can not resolve macro: WH_LNG_SearchPrompt in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whfform.htm
Template Error: can not resolve macro: WH_LNG_FtsMaxResult
Template Error: can not resolve macro: WH_LNG_FtsBtnText
.....Template Error: can not resolve macro: WH_LNG_JS_alert_ErrorInLoading
....Template Error: can not resolve macro: WH_LNG_About in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whskin_banner.htm
Template Error: can not resolve macro: WH_LNG_Author in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whskin_banner.htm
Template Error: can not resolve macro: WH_LNG_PoweredBy in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whskin_banner.htm
Template Error: can not resolve macro: WH_LNG_GeneratedBy in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whskin_banner.htm
Template Error: can not resolve macro: WH_LNG_SearchPrompt in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_ToolBarSearchBtnText in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_Show_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_Hide_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_Hide_Navigation_Component in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_SyncTocTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_ContentCategoryList in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_NextTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Template Error: can not resolve macro: WH_LNG_PreTooltip in C:\SSOL Tag1 Remove HickoryTech\WebHelp\whtbar.js
Finished applying Template in 40 sec(s)

Ok, replaced the 0k .lng file with one that actually has something in it and I am down to one error.
Template Error: can not resolve macro: WH_LNG_ContentCategoryList
If anyone could help me with this one I would be much obliged

FM8 with RoboHelp 7 -- Straightforward way to generate as Web Help?

I'm an experienced FrameMaker user who hasn't used any
version of RoboHelp for a while. I'm currently trying to use
RoboHelp 7 generate a structured FrameMaker book OR the book's
individually selected .fm or .mif files as an HTML-based help
system with a properly hierarchical TOC.
What a mess! I've tried reading the help, browsing the Web,
and searching this forum and am very surprised I can't find any
straightforward discussion of how to do this.
First, RoboHELP 7 seems not to want to create a sensible TOC.
I've tried using a variety of options such as Convert FrameMaker
TOC, mapping styles, and so on. The result is a chaotic dogs
breakfast that seems to do strange things with the TOC hierarchy.
The RoboHELP help system seems to suggest that the way to remedy
the problem is to manually edit the TOC after each gen of the
project!
Second, RoboHelp seems to not process non-breaking spaces
contained in the FrameMaker source files properly, particularly if
those non-breaking spaces are contained in variables...(?)
So, is there any straightforward way to generate a FrameMaker
book or an individually selected set of book files as a coherent
system with a TOC that *doesn't* require extensive manual
post-generation fiddling?
Moreover, is it just me? I'm normally good with tools, but
must confess I'm decidedly dis-impressed with RoboHelp 7's
inability to ingest a FrameMaker book or .fm files and product
somewhat usable output straightaway...
Cheers & thanks,
Riley

Hi Riley,
My experience with FM 8 and RH 7 is the same; however, I
fixed the TOC problem.
It's very important how the FM TOC file looks like. You
cannot use inline bold or character specific styles applied to the
paragraph styles used to create your TOC. When you import the TOC
file you should not do anything with it ... just let RH generate
the output based on the TOC. IOW, it's VERY important that you
prepare your FM files before using RH. They're certainly not a
match made in heaven!
The only problem I have these days is to successfully
recreate a numbered list with proper indentation. RH does not map
these things automatically in any sensible way (at least not as far
as I know). For now it seems I'm stuck with ordered lists that show
the number as part of the paragraph which is not good as it's poor
typography.
So, basically RH 7's integration with FM 8 has some serious
usability issues ... :)
Best of luck,
Jon

Table maintenance generator : EVENTS : please help me

I need to use table maintenance generator to maintain a custom table through a custom transaction.
I am using event BEFORE SAVE (01). It is working fine but small issues.
1)After entering new entries for some fields(KEY FIELDS), when I press save button, remaining fields values to be populated. Seletion statements have written in FORM of the EVENT 01 (BEFORE SAVE).
But the values for remaining fieldsare not populating immediately and but populating when I press BACK (F3). My requirement is with out presssing BACK or F3 , fields to be populated.
(note: SAP internal code..values are coming into TOTAL structure..then I manipulated this internal table)
PLEASE GUIDE ME, WHICH EVENT TO BE USED. importantly, which internal table/structure (like TOTAL we used for this requirement ) to be used for the proposed new EVENT? (Because lot of R&D to be done to find SAP structure)
2) second requirement is: even after entering new entries, if we press ENTER, then also it should behave like SAVE like in the previous requirement. Please help me to find the EVENT and Internal SAP generated structure (like TOTAL we used for this requirement ).

Hi Glen Anthony,
Thanks for replay,
I used foreign key relationship between those 2 internal tables....
I used event 05: When creating a new entry. I want to know the custom logic by which my 2nd Internal table gets automatically updated when i update my 1st Internal table
Thanks Glen.

Generate HTML REPORTS Help

hai....
i am new to this field i need some help regarding how to generate html report ... well i am using db2 as my database .....and these reports are not crystal reports.....
i have to generate some fields information from multiple tables in the database...
thank you

Apex does not as yet support PDF printing out of the box. At this stage your options are;
1. Wait for the release of Apex 3.0 (evaluation instance is now available).
2. Use FOP to generate PDF output (probably not for a novice user). See this link;
http://www.oracle.com/technology/pub/notes/technote_htmldb_fop.html
3. Purchase a product such as PL/PDF
http://www.plpdf.com
cheers,
Ron

PO Account Generator Workflow - Need Help

Hi All,
My Requirement is to customize the PO Account Generator Workflow such that the General Default charge Account is choosen based on PO Line Type.
My Plan is to do as below:
select count(*)
from po_lines_all
where line_type = 'Goods'
and po_line_id = :line_id
and po_header_id = :header_id;
Could you please help me how can I get the :line_id and :header_id here. I mean what should be the value to be passed to getattrbvalue which returns the line_id, header_id.
Thanks in Advance.

This sounds like Oracle Applications.
I suggest you ask your question in the E Business Suite section of the Forums, that's the place for Oracle Apps questions.
Tony

Solaris 10 generating Malicious Traffic...HELP

Similar Messages

Maybe you are looking for