網頁

2009年7月31日 星期五

2009.7.31 XP被我disable的service

DLG.exe, 2009.7.31
MMReminderService.exe, 2009.7.31

2009.7.31 DLG.exe的用途

這裡有原討論DLG.exe程式用途的論壇
-------------------------------------------------------------------------------------------------
The Digital Line Detection program monitors the modem to make sure that the phone line is a standard analog phone line. Plugging into a digital phone line could cause damage to the modem.

The purpose of this application is to provide a warning before damage occurs.

簡單的說,就是保護你的Thinkpad的Modem,在被插入數位電話線時會提出警告以避免Modem損毀(可能數位電話線的電壓脈衝較高容易造成Modem損傷,詳細我也不清楚是否真的如此)
-------------------------------------------------------------------------------------------------
數位電話指的應該像是ISDN這類的線路,因為他的電壓較高,誤接確實會導致設備燒毀。

敝人的USB轉RS232轉接線就因為誤接ISDN孔已經燒掉兩條..... 好爛!

2009.7.31 網路除錯(Troubleshooting)精準度的提升

此議題最近在我的內心深處一直在討論著.

每當客戶在報修時, 從工程師收到客戶的報修陳述後, 無論客戶陳述的事情有否錯誤, 一直到處理完畢為止, 這中間所經歷過的過程是否有效率?

我們從來就沒有試著讓不同的工程師去處理相同的問題過, 除非是在Lab或考場上, 給不同的工程師一樣的環境一樣的條件一樣的問題. 所以很難知道工程師在除錯時的效率如何?

除錯要精準,我認為要involve到:
  1. 客戶網路架構的了解
  2. 設備功能的了解
  3. 網路理論的了解
  4. 工作經驗
(而這四個串起來, 所表現出來的樣子, 會被客戶默默的看著, 客戶看到的是態度,專業及EQ, 這是另一項議題)
當上述的要素都備齊時, 除錯的精準度就會提高, 除錯時間就縮短, 效率就會up
當沒有備齊時, 往往都是在try error, 然後一直try到問題解決(但有某些少數的例子,還非得是用try error方式來解決)

2009.7.31 蚊蟲咬一口 發炎差點截肢

蚊蟲咬一口 發炎差點截肢

更新日期:2009/07/31 04:09

記者歐素美/台中報導

一名一歲多女童因被蚊蟲叮咬引發蜂窩性組織炎,差點截肢,所幸緊急送醫治療,才挽回右腿。台中童綜合醫院小兒科醫師高佳慧表示,入夏後,已接獲10多起幼兒被蚊蟲叮咬,引發蜂窩性組織炎案例,提醒家長防範。

夏天蚊蟲多,許多家長擔心,幼兒被叮咬而感染日本腦炎或登革熱,但醫師表示,幼兒抵抗力較弱,被蚊蟲叮咬後搔抓,即容易引發細菌感染,造成蜂窩性組織炎,甚至併發壞死性筋膜炎或敗血症,嚴重時,可能導致休克死亡。

一 名1歲大的女童日前因高燒39度不退,家長誤以為感冒,至診所治療多日不見好轉,發現女童的右下肢被蚊子叮咬的紅腫愈來愈大,趕緊轉送童綜合醫院小兒感染 科,診斷為嚴重的蜂窩性組織炎,經住院及手術治療,清除壞死化膿組織,抑制細菌蔓延,並施以抗生素治療,才免於截肢,目前已出院。

高佳慧說,4月至今,該院已接獲10多起幼童因蚊蟲叮咬引發蜂窩性組織炎案例,發生部位以手、腳最多,眼睛發生蜂窩性組織炎的患者則集中在5歲以下,提醒家長不要小看蚊蟲叮咬造成的傷害。

高佳慧指出,人的皮膚分為表皮、真皮及皮下組織三層,一般皮膚感染大多侷限在表皮及真皮層,若往下蔓延到皮下組織即稱為蜂窩性組織炎,蜂窩性組織炎好發於小腿及足部,因組織鬆軟,細菌容易沿著血管及淋巴竄行,以致感染快速擴散。

爐主

民國九十八年協助製作了一份信徒名單,按這裏下載

其來有自....是因為...忘記了...

以下轉載自爐主頭家大福頭

爐主頭家大福頭

爐主、副爐、頭家,簡單地說,就是神明所欽點的年度信徒代表。

爐主、副爐、頭家選拔自有參與分擔祭祀費用(俗稱丁口錢)的廟宇信徒,神明會也有這樣的制度,但不是每一間廟都有這種作法,爐主、副爐、頭家最重要的責任就是廟宇該年的祭典籌辦與清潔管理。

因為爐主、副爐、頭家要挨家挨戶收取緣金、丁口錢作為祭典開銷,在人際疏離、缺乏公眾事務參與感的現今功利社會,變成吃力不討好的事,有時不禁讓人怨嘆:信教的(基督宗教徒)有的出錢還比不信教的阿殺力。

民間對於爐主、副爐、頭家這些神明欽點的服務人員又別稱「福頭」,認為他們是「受到神明眷顧關愛,即將消災解厄、飛黃騰達的幸運兒」,因為這群福頭在擔任爐主、副爐、頭家當年為神明揮汗效勞的種種,神明都有看在眼裡、記到心裡、上稟 金闕玉皇大天尊,自然這群弟子們有難神明會暗中相助、財祿遇阻會幫忙疏通,同樣道理,這群弟子如果為惡也會受到處分。

有了管理委員會之類的信徒組織後,爐主、副爐、頭家的角色在各廟更顯不同,大體上民間都還是認為「神選的」要比「人選的」更接近神明,祭典時由這群人代表全體信徒祈祝更能上達天聽。

管理委員會等信徒「社團法人」組織,是源自於台灣光復後國民政府戒嚴時期所雷厲風行的宗教箝制政策,運用的是民國初期還在大陸時所制訂的寺廟監督條例、寺 廟登記規則等法律來管理台灣民間信仰,要求廟宇設置管理委員會或管理人,著實將「神明的廟、眾人效勞」變成「法律保障主權在少數人的廟」,信徒登記的制度 更將信徒區分成「合法有權參與的」與「非法無權參與的」兩種,傳統宮廟事務運作的「眾人都有參與效勞的責任」變成「法律保障少數人金錢主權在握」。這種以 人為主的制度當然就會面臨永恆的「人性挑戰」,也就會有因人事派系問題造成廟務中輟,甚至「合法」主事者敵不過私欲誘惑將廟宇「合法」出售改建為查某間、 賭窟、酒店,大眾奉獻給神明的香油錢被少數人假借廟宇公務所需圖利自己派系樁腳的耳目聲色之愉悅享受、甚至全數中飽私囊、據為己有等等流弊,形成法律保障 的社會不公平、扭曲了民間傳統信仰。

無論法律怎麼定、社會怎麼變,無庸置疑的,到頭來只有真正為神明、公益效勞奉獻的人才會是受到天地神明眷顧的。

2009年7月30日 星期四

思科公司推出比CCIE級別更高的CCA認證


思科公司推出比CCIE級別更高的CCA認證
此認證將於2010年一月開始受理

CCIE+MBA=? 思科推出新頂級認證CCA


Using CAR During DOS Attacks

Using CAR During DOS Attacks






Document ID: 12764



Contents

Introduction
Prerequisites
Requirements
Components Used
Conventions
Rate Limit ICMP/Smurf
Rate Limit TCP SYN Packets
11.1(X)CC
12.0(X)[S/T/M]
CAR Frequently Asked Questions
How to Identify the Values to Use for the CAR Rules to Rate Limit SYN Packets?
How Do I Know if I Restrict too Many SYN Packets?
Can I Enable CAR on a Gigabit Switch Router (GSR)?
Can I Enable Distributed CAR (dCAR) on a Cisco 7500?
Can I Enable CAR on a Cisco 7200?
Other Features and Alternatives
IP Receive ACL
IP Source Tracker
NetPro Discussion Forums - Featured Conversations
Related Information

F5 GTM憑證過期,導致設定(Sync Group)無法同步

F5 GTM v9.3.0, 這時期的憑證都是一年到期, 每年都要將憑證renew一次
F5 Support有文章(ex:SOL7754, SOL6353)講述如何將憑證展期至2,5,10年等
v10開始可以在GUI configuration utility下就能展延. 這是很奇怪的理論, 這種功能竟然不在舊版開放.

以下是處理憑證過期,導致設定無法同步的步驟:

1.兩地各自產生self憑證(此步驟只有在第一次要執行, 以後縱使是憑證過期也不用執行)
2.兩地交換self憑證. 交換後Trusted Device Certificates內會有對方憑證
交換憑證方式有兩種:使用GUI交換, 使用bigip_add交換
使用bigip_add指令, 分別要執行一次自己,執行一次對方的
交換後, 設備要重開機 or 重新啟動httpd及tomcat4(bigstart restart httpd tomcat4)
3.兩地執行iqdump檢查
4.檢查設定後是否同步
Wide IPs設定, 並檢查
Zone Runner設定, 並檢查. 檢查Zone or A record是否有同步
(如果Zone Runner設定項目內無法同步, 則重新啟動zrd (bigstart restart zrd)
5.檢查以上項目運作過程 tail /var/log/gtm
6.往後憑證過期後, 只要執行Device Certificate下的renew, 然後再重複步驟2~4即可.

2009年7月29日 星期三

2009.7.29 Ask F5 - Added and updated documents from 7/19 through 7/25

*Helping F5 Support troubleshoot technical issues*

Refer to the following solution for information about the files you can provide to F5 Support in order to help F5 support troubleshoot technical issues.

SOL2633: Instructions for submitting a support case to F5 Networks https://support.f5.com/kb/en-us/solutions/public/2000/600/sol2633.html

*RSS feeds on Ask F5*

You can receive Ask F5 RSS feeds to stay informed about new documents pertaining to your products. You can configure feeds for specific products, product versions and/or document sets. You can also aggregate multiple feeds in your RSS Reader to display one unified list of all selected documents.

For more information, including instructions to sign up for Ask F5 RSS feeds, refer to:

https://support.f5.com/kb/en-us/pages/rssfaq.html

*Added and updated documents from 7/19 through 7/25*

BIG-IP - New
SOL10339: Auditing a BIG-IP system for time changes https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10339.html

SOL10328: Forcing a file system check on the next system reboot https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10328.html

SOL10316: The pv_ntlm_auth cookie does not include a domain attribute https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10316.html

SOL10315: The BIG-IP WebAccelerator reports incorrect non-cacheable response code https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10315.html

SOL10311: The performance graphs no longer display data after 497 day Linux uptime wraparound https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10311.html

SOL10306: BIG-IP ASM Violation: Illegal Query String or POST Data https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10306.html

SOL10305: The switchboot utility returns an error on VIPRION version 10.x systems https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10305.html

SOL10303: Converting PKCS certificates for use in WebAccelerator https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10303.html

SOL10302: Configuring the BIG-IP WebAccelerator to recognize RealMedia files https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10302.html

SOL10300: Attack signature event thresholds do not function https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10300.html

SOL10289: Reinstalling BIG-IP LTM version 9.6.1 software on the VIPRION platform https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10289.html

SOL10285: The NTLMconnpool cookie does not include a domain attribute https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10285.html

SOL10239: Unsolicited management traffic may not use the intended management address or management routes https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10239.html

BIG-IP - Updated
SOL10167: Overview of the ClientSSL profile https://support.f5.com/kb/en-us/solutions/public/10000/100/sol10167.html

SOL10156: Licensing BIG-IP GTM on one member of a redundant pair https://support.f5.com/kb/en-us/solutions/public/10000/100/sol10156.html

SOL10061: The HTTP/1.0 Requests HTTP profile option is not honored when serving a cached response https://support.f5.com/kb/en-us/solutions/public/10000/000/sol10061.html

SOL10035: Issuing a sys-reset when remote authentication is configured will prevent logging into the system after a reboot https://support.f5.com/kb/en-us/solutions/public/10000/000/sol10035.html

SOL9953: The BIG-IP ASM does not validate XML schema files uploaded to the XML profile https://support.f5.com/kb/en-us/solutions/public/9000/900/sol9953.html

SOL9856: The BIG-IP system does not support time synchronization using SNTP https://support.f5.com/kb/en-us/solutions/public/9000/800/sol9856.html

SOL9842: The BIG-IP system does not properly fragment egress packets when using a FastL4 profile https://support.f5.com/kb/en-us/solutions/public/9000/800/sol9842.html

SOL9755: The Policy Builder does not support some language encodings https://support.f5.com/kb/en-us/solutions/public/9000/700/sol9755.html

SOL9597: Large packet filter names may cause undesired behavior https://support.f5.com/kb/en-us/solutions/public/9000/500/sol9597.html

SOL9502: BIG-IP hotfix matrix
https://support.f5.com/kb/en-us/solutions/public/9000/500/sol9502.html

SOL9477: Requests with an HTTP header size smaller than the maximum allowed in the http-acceleration profile may still fail https://support.f5.com/kb/en-us/solutions/public/9000/400/sol9477.html

SOL9476: The F5 Networks hardware / software compatibility matrix https://support.f5.com/kb/en-us/solutions/public/9000/400/sol9476.html

SOL9384: The sys-reset utility does not correctly process filenames with spaces https://support.f5.com/kb/en-us/solutions/public/9000/300/sol9384.html

SOL9279: BIG-IP automatically translates addresses between IPv4 and IPv6 when necessary https://support.f5.com/kb/en-us/solutions/public/9000/200/sol9279.html

SOL9123: Recommended practices for deploying F5 Networks devices remotely https://support.f5.com/kb/en-us/solutions/public/9000/100/sol9123.html

SOL9118: Overview of the sys-icheck utility https://support.f5.com/kb/en-us/solutions/public/9000/100/sol9118.html

SOL9076: Network failover traffic fails after the TM.PreserveClientPort BigDB key is set to disable https://support.f5.com/kb/en-us/solutions/public/9000/000/sol9076.html

SOL9057: Overview of the BIG-IP LTM network failover protocol https://support.f5.com/kb/en-us/solutions/public/9000/000/sol9057.html

SOL8849: Configuring a virtual server to use the same IP address as a self IP https://support.f5.com/kb/en-us/solutions/public/8000/800/sol8849.html

SOL8835: The BIG-IP redundant pair SCCP firmware requirements https://support.f5.com/kb/en-us/solutions/public/8000/800/sol8835.html

SOL8834: Determining whether the Request Logs, Forensics, or Traffic Learning entries have been cleared https://support.f5.com/kb/en-us/solutions/public/8000/800/sol8834.html

SOL8826: The BIG-IP GTM does not immediately mark down dependent virtual servers https://support.f5.com/kb/en-us/solutions/public/8000/800/sol8826.html

SOL8805: The BIG-IP LTM supports SOAP version 1.1 EAV monitors https://support.f5.com/kb/en-us/solutions/public/8000/800/sol8805.html

SOL8665: BIG-IP redundant pair hardware and software parity requirements https://support.f5.com/kb/en-us/solutions/public/8000/600/sol8665.html

SOL8442: Configuring the BIG-IP system to use an NTP server from the command line https://support.f5.com/kb/en-us/solutions/public/8000/400/sol8442.html

SOL8304: Requests will not update sensitive parameters with metacharacters https://support.f5.com/kb/en-us/solutions/public/8000/300/sol8304.html

SOL8266: BIG-IP ASM Violation: Illegal pattern found in XML data https://support.f5.com/kb/en-us/solutions/public/8000/200/sol8266.html

SOL8217: Updating the BIG-IP ASM attack signatures https://support.f5.com/kb/en-us/solutions/public/8000/200/sol8217.html

SOL7964: Persistence may fail for subsequent requests on Keep-Alive connections https://support.f5.com/kb/en-us/solutions/public/7000/900/sol7964.html

SOL7741: Associating virtual servers with links https://support.f5.com/kb/en-us/solutions/public/7000/700/sol7741.html

SOL7718: The BIG-IP prohibits configuring the failover IP address on the same network as the management port https://support.f5.com/kb/en-us/solutions/public/7000/700/sol7718.html

SOL7679: Setting the chunking method to rechunk in the HTTP profile causes the BIG-IP LTM to ignore the minimum content-length for compression https://support.f5.com/kb/en-us/solutions/public/7000/600/sol7679.html

SOL7550: Resetting the BIG-IP system configuration to the factory default settings using the sys-reset command https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7550.html

SOL7115: Managing log files on the BIG-IP system https://support.f5.com/kb/en-us/solutions/public/7000/100/sol7115.html

SOL7036: The Linux uptime counter wraps after 497 days https://support.f5.com/kb/en-us/solutions/public/7000/000/sol7036.html

SOL5396: Overview of the client SSL profile timeout settings https://support.f5.com/kb/en-us/solutions/public/5000/300/sol5396.html

SOL4812: Interactive traffic, such as Telnet and SSH, may be slower when passed through BIG-IP https://support.f5.com/kb/en-us/solutions/public/4000/800/sol4812.html

SOL4039: Overview of iQuery communication between BIG-IP / 3-DNS version 4.x and BIG-IP LTM / GTM https://support.f5.com/kb/en-us/solutions/public/4000/000/sol4039.html

SOL3830: Disabling remote LDAP authentication and enable local authentication https://support.f5.com/kb/en-us/solutions/public/3000/800/sol3830.html

SOL3800: Support for Stream Control Transmission Protocol (SCTP) https://support.f5.com/kb/en-us/solutions/public/3000/800/sol3800.html

SOL3669: Overview of management interface routing https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3669.html

SOL3621: Reinstalling BIG-IP LTM, GTM, Link Controller, ASM, PSM, or WebAccelerator https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3621.html

SOL3525: Configuring the BIG-IP system to boot from a network boot server https://support.f5.com/kb/en-us/solutions/public/3000/500/sol3525.html

SOL3122: Configuring BIG-IP to use an NTP server https://support.f5.com/kb/en-us/solutions/public/3000/100/sol3122.html

SOL2788: Specifications of the Fiber Gigabit Ethernet ports included on the BIG-IP 2400 and 5100 platforms https://support.f5.com/kb/en-us/solutions/public/2000/700/sol2788.html

SOL1771: Compatibility of lasthop features with IPv6 addressing https://support.f5.com/kb/en-us/solutions/public/1000/700/sol1771.html

SOL1669: LED indicators on the BIG-IP 520 (D35) and BIG-IP 540 (D35) platforms https://support.f5.com/kb/en-us/solutions/public/1000/600/sol1669.html

SOL148: Converting the current time into the number of seconds since the beginning of the UNIX epoch https://support.f5.com/kb/en-us/solutions/public/0000/100/sol148.html

FirePass - New
SOL10342: Status of cumulative hotfix HF-603-4 https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10342.html

SOL10341: After installing cumulative hotfix HF-603-4, Active Directory authentication and group mapping may fail when nested groups are enabled https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10341.html

SOL10324: User accounts are incorrectly deactivated or deleted when synchronizing the local user database with Active Directory https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10324.html

SOL10317: Change in Behavior: The TunnelServer.exe process continues to run after a Static Application Tunnel closes https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10317.html

SOL10314: After installing cumulative hotfix HF-603-4, Active Directory authentication and group mapping may fail when the memberOf attribute contains multiple values https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10314.html

SOL10310: After installing cumulative hotfix HF-603-3, users must re-install the OPSWAT client components every time they connect https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10310.html

FirePass - Updated
SOL10279: Support for Safari 4.0
https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10279.html

SOL10150: Web browser proxy settings
https://support.f5.com/kb/en-us/solutions/public/10000/100/sol10150.html

SOL9790: Change in Behavior: FirePass now warns users when their Active Directory password is set to expire https://support.f5.com/kb/en-us/solutions/public/9000/700/sol9790.html

SOL3622: Writing JavaScript applications for web sites that are accessed through Portal Access https://support.f5.com/kb/en-us/solutions/public/3000/600/sol3622.html

SOL3551: Web Engine Trace yields no data https://support.f5.com/kb/en-us/solutions/public/3000/500/sol3551.html

ARX - New
SOL10330: CIFS virtual services may fail to start and remain in Starting state after upgrade https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10330.html

SOL10323: The ARX system may experience poor NFS metadata performance https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10323.html

SOL10298: The NVRAM battery status may be inaccurately reported on the ARX 4000 platform https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10298.html

SOL10297: ERROR: UNTAR_REL_ERROR message when attempting to upgrade an ARX system https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10297.html

ARX - Updated
SOL10208: Change in Behavior: Display format change for the number of files used https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10208.html

SOL9651: RAID controller cable may be loose after ARX 6000 System Control Module (SCM) replacement https://support.f5.com/kb/en-us/solutions/public/9000/600/sol9651.html

Data Manager - New
SOL10320: Discovering a Solaris file server fails with a HostNameResolverConverter error https://support.f5.com/kb/en-us/solutions/public/10000/300/sol10320.html
____________________________________________________________________
F5 Networks | 401 Elliott Avenue West | Seattle, Washington 98119

The Leader in Application Traffic Management Ensuring secure and optimized application delivery for global enterprises.

You may unsubscribe from this list at any time by sending a blank email to technews-unsubscribe@lists.f5.com

Cisco Press Wish List

2009.7.31 revised

Cisco Access Control Security: AAA Administration Services
Cisco Access Control Security: AAA Administration Services(Delete)
By Brandon James Carroll
Saved Jul 31, 2009
Cisco LAN Switching Configuration Handbook
Cisco LAN Switching Configuration Handbook(Delete)
By David Hucaby, David Jansen, Steve McQuerry
Saved Jul 29, 2009
Designing for Cisco Internetwork Solutions (DESGN) (Authorized CCDA Self-Study Guide) (Exam 640-863)
Designing for Cisco Internetwork Solutions (DESGN) (Authorized CCDA Self-Study Guide) (Exam 640-863)(Delete)
By Diane Teare
Saved Jul 28, 2009
Designing Cisco Network Service Architectures (ARCH) (Authorized Self-Study Guide)
Designing Cisco Network Service Architectures (ARCH) (Authorized Self-Study Guide)(Delete)
By Keith Hutton, Mark Schofield, Diane Teare
Saved Jul 28, 2009
Cisco Router Firewall Security
Cisco Router Firewall Security(Delete)
By Richard Deal
Saved Mar 17, 2009
Cisco LAN Switching Fundamentals
Cisco LAN Switching Fundamentals(Delete)
By David Barnes, Basir Sakandar
Saved Nov 11, 2008
End-to-End QoS Network Design: Quality of Service in LANs, WANs, and VPNs
End-to-End QoS Network Design: Quality of Service in LANs, WANs, and VPNs(Delete)
By Christina Hattingh, Tim Szigeti
Saved Jan 28, 2008
LAN Switch Security: What Hackers Know About Your Switches
LAN Switch Security: What Hackers Know About Your Switches(Delete)
By Christopher Paggen, Eric Vyncke
Saved Jan 28, 2008
End-to-End Network Security: Defense-in-Depth
End-to-End Network Security: Defense-in-Depth(Delete)
By Omar Santos
Saved Jan 28, 2008

追蹤者