<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[『AskWan』]]></title> 
<link>http://www.askwan.com/index.php</link> 
<description><![CDATA[Related About My Life,Unix,Linux,System Architecture,Mysql,PostgreSQL,Oracle Etc ]]></description> 
<language>en-US</language> 
<copyright><![CDATA[『AskWan』]]></copyright>
<item>
<link>http://www.askwan.com/How_to_install_ipmitool_IPMI_support_IPMI_ON_Debian_Lenny_for_Dell_PE_sc1435/</link>
<title><![CDATA[How to install ipmitool to support IPMI on Debian Lenny for Dell PE sc1435]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Tue, 27 Apr 2010 06:40:42 +0000</pubDate> 
<guid>http://www.askwan.com/How_to_install_ipmitool_IPMI_support_IPMI_ON_Debian_Lenny_for_Dell_PE_sc1435/</guid> 
<description>
<![CDATA[ 
	The <b>Intelligent Platform Management Interface</b> (IPMI) <a class="mw-redirect" href="http://en.wikipedia.org/wiki/Specification" title="Specification">specification</a> is an <a class="mw-redirect" href="http://en.wikipedia.org/wiki/Intel" title="Intel">Intel</a> led standard which defines a set of common <a href="http://en.wikipedia.org/wiki/Interface_%28computer_science%29" title="Interface (computer science)">interfaces</a> to a computer system which <a href="http://en.wikipedia.org/wiki/System_administrator" title="System administrator">system administrators</a> can use to monitor system health and manage the system.<br />
<br />
DELL PE sc1435 have Standard Baseboard Management Controller with IPMI 2.0 support,so we can use this feature to manage our servers .<br />
<br />
IPMItool is a command line utility for managing and configuring systems with IPMI support. This tool allows you the ability to communicate directly with the IPMI card installed in the server or over a network using TCP/IP.<br />
<br />
First , Power On PowerEdge sc1435 server ,when BIOS check , input Ctrl-E to keyboard:<br />
<br />
then configure IMPI to the server, and also you can refer this guide document:<br />
<a href="http://www.dell.com/downloads/global/power/ps4q04-20040204-Murphy.pdf" target="_blank">http://www.dell.com/downloads/global/power/ps4q04-20040204-Murphy.pdf</a><br />
<br />
then,start OS(Debian Lenny 5.0.3 amd64)
<pre class="brush:bash;">
#apt-get install ipmitool

#apt-get install openipmi libopenipmi-dev</pre>
<pre class="brush:bash;">
# modprobe ipmi_watchdog
# modprobe ipmi_poweroff
# modprobe ipmi_devintf
# modprobe ipmi_si
# modprobe ipmi_msghandler
</pre>
Check if ipmi_xxx related kernel modules have loaded or not:
<pre class="brush:bash;">
# lsmod &#124;grep ipmi
ipmi_si 43628 2
ipmi_devintf 13200 0
ipmi_poweroff 13776 0
ipmi_watchdog 22896 0
ipmi_msghandler 38520 4 ipmi_si,ipmi_devintf,ipmi_poweroff,ipmi_watchdog</pre>
Now,as you see, it have loaded,create the IPMI device:
<pre class="brush:bash;">
mknod /dev/ipmi0 c `cat /proc/devices &#124; grep ipmidev &#124; awk &#39;{print $1}&#39; ` 0
</pre>
you can then use ipmitool now !
<pre class="brush:bash;">
#ipmitool lan print 1</pre>
<pre class="brush:plain;">
Set in Progress         : Set Complete
Auth Type Support       : NONE MD2 MD5 PASSWORD 
Auth Type Enable        : Callback : MD2 MD5 
                        : User     : MD2 MD5 
                        : Operator : MD2 MD5 
                        : Admin    : MD2 MD5 
                        : OEM      : MD2 MD5 
IP Address Source       : Static Address
IP Address              : 192.168.101.3
Subnet Mask             : 255.255.255.0
MAC Address             : 00:18:8b:89:52:84
SNMP Community String   : public
IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
Default Gateway IP      : 192.168.101.1
Default Gateway MAC     : 00:00:00:00:00:00
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
802.1q VLAN ID          : Disabled
802.1q VLAN Priority    : 0
RMCP+ Cipher Suites     : 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14
Cipher Suite Priv Max   : aaaaaaaaaaaaaaa
                        :     X=Cipher Suite Unused
                        :     c=CALLBACK
                        :     u=USER
                        :     o=OPERATOR
                        :     a=ADMIN
                        :     O=OEM</pre>
and you can reconfigure ipmi sets:
<pre class="brush:bash;">
# ipmitool -I open lan set 1 ipsrc static

# ipmitool -I open lan set 1 ipaddr 192.168.101.154
Setting LAN IP Address to 192.168.101.154

# ipmitool -I open lan set 1 defgw ipaddr 192.168.101.1
Setting LAN Default Gateway IP to 192.168.101.1

# ipmitool -I open lan set 1 netmask 255.255.255.0
Setting LAN Subnet Mask to 255.255.255.0

# ipmitool -I open lan set 1 access on

#ipmitool -I open user set password 2 askwan.com</pre>
logo to another server,check the server&#39;s system event log:
<pre class="brush:bash;">
# ipmitool -I lan -H 192.168.101.154 -U root -a sel list
Password: </pre>
<pre class="brush:plain;gutter:false;">
1 &#124; 01/08/2010 &#124; 03:45:19 &#124; Event Logging Disabled #0x72 &#124; Log area reset/cleared &#124; Asserted
2 &#124; Pre-Init Time-stamp &#124; Power Supply #0x65 &#124; Power Supply AC lost &#124; Asserted
3 &#124; Pre-Init Time-stamp &#124; Power Supply #0x74 &#124; Redundancy Lost
4 &#124; 01/31/2010 &#124; 06:19:46 &#124; Power Supply #0x65 &#124; Failure detected &#124; Asserted
5 &#124; 01/31/2010 &#124; 06:19:50 &#124; Power Supply #0x74 &#124; Redundancy Lost
6 &#124; 02/04/2010 &#124; 22:52:58 &#124; Power Supply #0x65 &#124; Power Supply AC lost &#124; Asserted
7 &#124; 02/04/2010 &#124; 22:53:08 &#124; Power Supply #0x65 &#124; Power Supply AC lost &#124; Deasserted
8 &#124; 02/04/2010 &#124; 22:53:10 &#124; Power Supply #0x74 &#124; Fully Redundant
9 &#124; 02/21/2010 &#124; 19:41:41 &#124; Power Supply #0x65 &#124; Failure detected &#124; Asserted
a &#124; 02/21/2010 &#124; 19:41:44 &#124; Power Supply #0x74 &#124; Redundancy Lost
b &#124; 04/05/2010 &#124; 21:13:58 &#124; Power Supply #0x74 &#124; Fully Redundant</pre>
for more usage of ipmitool ,please refer ipmitool man page :<br />
<a href="http://ipmitool.sourceforge.net/manpage.html" target="_blank">http://ipmitool.sourceforge.net/manpage.html</a><br />
<br />
Reference:<br />
<a href="ftp://download.intel.com/design/servers/ipmi/IPMIv2_0rev1_0.pdf" target="_blank">ftp://download.intel.com/design/servers/ipmi/IPMIv2_0rev1_0.pdf</a><br />
<a href="http://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface" target="_blank">http://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface</a><br />
<a href="http://www.mainehost.com/DellPowerEdge-SC1435.pdf" target="_blank">http://www.mainehost.com/DellPowerEdge-SC1435.pdf</a><br />
<a href="http://openipmi.sourceforge.net/IPMI.pdf" target="_blank">http://openipmi.sourceforge.net/IPMI.pdf</a><br />
<a href="http://lab.advancedclustering.com/twiki/bin/view/Documentation/IPMITools" target="_blank">http://lab.advancedclustering.com/twiki/bin/view/Documentation/IPMITools</a><br />
<a href="http://lonesysadmin.net/2007/06/21/how-to-configure-ipmi-on-a-dell-poweredge-running-red-hat-enterprise-linux/" target="_blank">http://lonesysadmin.net/2007/06/21/how-to-configure-ipmi-on-a-dell-poweredge-running-red-hat-enterprise-linux/</a><br />
<br />
-------END------<br />
<br />
<br/>Tags - <a href="http://www.askwan.com/tags/ipmitool/" rel="tag">ipmitool</a> , <a href="http://www.askwan.com/tags/ipmi/" rel="tag">ipmi</a> , <a href="http://www.askwan.com/tags/debian/" rel="tag">debian</a> , <a href="http://www.askwan.com/tags/openipmi/" rel="tag">openipmi</a> , <a href="http://www.askwan.com/tags/ipmi_si/" rel="tag">ipmi si</a> , <a href="http://www.askwan.com/tags/bmc/" rel="tag">bmc</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/500_ERROR_User_root_cannot_be_used_as_an_NX_user/</link>
<title><![CDATA[500 ERROR: User root cannot be used as an NX user]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Sat, 27 Mar 2010 03:38:25 +0000</pubDate> 
<guid>http://www.askwan.com/500_ERROR_User_root_cannot_be_used_as_an_NX_user/</guid> 
<description>
<![CDATA[ 
	OS: CentOS 5<br/>NXserver : 3.4<br/><div class="code">NX&gt; 203 NXSSH running with pid: 3164<br/>NX&gt; 285 Enabling check on switch command<br/>NX&gt; 285 Enabling skip of SSH config files<br/>NX&gt; 285 Setting the preferred NX options<br/>NX&gt; 200 Connected to address: xx.xx.xx.xx on port: 22<br/>NX&gt; 202 Authenticating user: nx<br/>NX&gt; 208 Using auth method: publickey<br/>HELLO NXSERVER - Version 3.4.0-12 - LFE<br/>NX&gt; 105 Hello NXCLIENT - Version 3.4.0<br/>NX&gt; 134 Accepted protocol: 3.4.0<br/>NX&gt; 105 Set shell_mode: shell<br/>NX&gt; 105 Set auth_mode: password<br/>NX&gt; 105 Login <br/>NX&gt; 101 User: root<br/>NX&gt; 500 ERROR: User &#039;root&#039; cannot be used as an NX user<br/>NX&gt; 999 Bye.<br/>NX&gt; 280 Exiting on signal: 15</div><br/><br/>for security reasons, <a href="http://www.nomachine.com/" target="_blank">Nomachine&nbsp;&nbsp;</a>can't allowed you to login with user root default! <br/>if you want to login with root,then you can do followings!<br/><br/><div class="code">$vim /usr/NX/etc/server.cfg<br/>EnableAdministratorLogin = &quot;1&quot;</div><br/>or <br/><div class="code">EnableUserDB = &quot;1&quot;<br/>EnablePasswordDB = &quot;1&quot; <br/> </div><br/><div class="code">$nxserver --useradd USERNAME &#91;--administrator&#93;<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#91;--system &#91;--home&#91;=homedir&#93;&#124;--nohome&#93;&#91;--gid&#91;=gid&#93;&#93;<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &#91;--uid&#91;=uid&#93;&#93;&#93;<br/>$nxserver&nbsp;&nbsp;--userenable USERNAME&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;# Enable the NX login for the specified user. This command is allowed <br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;# only when NX user DB is enabled in the server configuration file. <br/>$nxserver&nbsp;&nbsp;--userdisable USERNAME<br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #Disable the NX login for the specified user. Both the system and NX <br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #password, when the NX password DB is enabled, of the user are left <br/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #unchanged. </div><br/>then&nbsp;&nbsp;<br/><div class="code"> /etc/init.d/nxserver restart</div><br/><br/>now,you can login with user root!<br/>Tags - <a href="http://www.askwan.com/tags/user/" rel="tag">user</a> , <a href="http://www.askwan.com/tags/root/" rel="tag">root</a> , <a href="http://www.askwan.com/tags/nx/" rel="tag">nx</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/Linux_server_ext3_filesystem_readonly/</link>
<title><![CDATA[A friend companys Linux server ext3 filesystem becomes read only]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Mon, 08 Mar 2010 03:12:35 +0000</pubDate> 
<guid>http://www.askwan.com/Linux_server_ext3_filesystem_readonly/</guid> 
<description>
<![CDATA[ 
	System has been restarted everything seemed normal, the application starts normally! View the system boot log, there is no exception, the specific reasons for this situation also unknown now! It seems&nbsp;&nbsp;need to continue to observe.<br/><br/>However, open system, found that swap partition 0<br/><div class="code">Swap:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0k total,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0k used,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0k free,&nbsp;&nbsp; 300496k cached</div><br/>Is it did not installed the system swap partition?<br/><div class="code"> &#91;root@youke2 log&#93;# cat /proc/swaps</div><br/>output Nothing, there is no swap partition indeed !<br/>this System has 4G mem, so additional 8G swap space manually<br/><div class="code">&#91;root@youke2 log&#93;# dd if=/dev/zero of=/tmp/swapfree bs=1024K count=8192 <br/>8192+0 records in 8192+0 records out 8589934592 bytes (8.6 GB) copied, 111.247 seconds, 77.2 MB/s</div><br/><div class="code"><br/>&#91;root@youke2 log&#93;# mkswap /tmp/swapfree <br/>Setting up swapspace version 1, size = 8589930 kB<br/></div><br/><div class="code">&#91;root@youke2 log&#93;# swapon /tmp/swapfree </div><br/>Re-examine swap partition:<br/><div class="code"><br/>&#91;root@youke2 log&#93;# cat /proc/swaps <br/>Filename&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Size&nbsp;&nbsp;&nbsp;&nbsp;Used&nbsp;&nbsp;&nbsp;&nbsp;Priority<br/>/tmp/swapfree&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; file&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;8388600 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -1<br/></div><br/>USE top TO CHECK&nbsp;&nbsp;<br/><div class="code">Tasks: 145 total,&nbsp;&nbsp; 1 running, 144 sleeping,&nbsp;&nbsp; 0 stopped,&nbsp;&nbsp; 0 zombie<br/>Cpu(s):&nbsp;&nbsp;0.1%us,&nbsp;&nbsp;0.2%sy,&nbsp;&nbsp;0.0%ni, 94.4%id,&nbsp;&nbsp;5.3%wa,&nbsp;&nbsp;0.0%hi,&nbsp;&nbsp;0.0%si,&nbsp;&nbsp;0.0%st<br/>Mem:&nbsp;&nbsp; 4138172k total,&nbsp;&nbsp;3834908k used,&nbsp;&nbsp; 303264k free,&nbsp;&nbsp;&nbsp;&nbsp;28220k buffers<br/>Swap:&nbsp;&nbsp;8388600k total,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0k used,&nbsp;&nbsp;8388600k free,&nbsp;&nbsp;3605544k cached</div><br/>OK! write this to fstab file,so it can valid at system start time !<br/><div class="code">/tmp/swapfree&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; swap&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;swap&nbsp;&nbsp;&nbsp;&nbsp;defaults&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0 0</div>
]]>
</description>
</item><item>
<link>http://www.askwan.com/debian_net-snmp_compile/</link>
<title><![CDATA[compile net-snmp on debian lenny]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Wed, 23 Sep 2009 08:16:08 +0000</pubDate> 
<guid>http://www.askwan.com/debian_net-snmp_compile/</guid> 
<description>
<![CDATA[ 
	net-snmp<br/>下载地址：<a href="http://ncu.dl.sourceforge.net/project/net-snmp/net-snmp/5.4.2.1/net-snmp-5.4.2.1.tar.gz" target="_blank">http://ncu.dl.sourceforge.net/project/net-snmp/net-snmp/5.4.2.1/net-snmp-5.4.2.1.tar.gz</a><br/>解压然后编译，编译参数<br/><div class="code">./configure --prefix=/usr/local/net-snmp/ --with-sys-contact=&quot;askwan@askwan.com&quot; --with-sys-location=&quot;pudong shanghai China&quot; --enable-shared --with-default-snmp-version=2 --enable-mfd-rewrites --with-mib-modules=&quot;misc/ipfwacc mibII host disman/event-mib ucd_snmp agent_mibs agentx notification target utilities ucd-snmp/diskio tunnel mibII/mta_sendmail&quot; --with-sysconfdir=&quot;/usr/local/net-snmp/etc/&quot;</div><br/>如编译报错：<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">/usr/bin/ld: cannot find -lperl<br/>collect2: ld returned 1 exit status</div></div><br/>这是缺少libperl-dev开发库,安装上<br/><div class="code">apt-get install libperl-dev</div><br/>然后make ;make install <br/>可以用snmpconf配置snmpd.conf，也可用例子文件<br/><div class="code">cp&nbsp;&nbsp;EXAMPLE.conf /usr/local/net-snmp/etc/snmpd.conf</div><br/>然后根据需要修改此文件<br/><div class="code">com2sec local&nbsp;&nbsp;&nbsp;&nbsp; localhost&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; askwan<br/>com2sec mynetwork 192.168.0.0/24&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;askwan<br/><br/>group MyRWGroup v1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; local<br/>group MyRWGroup v2c&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;local<br/>group MyRWGroup usm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;local<br/>group MyROGroup v1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mynetwork<br/>group MyROGroup v2c&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mynetwork<br/>group MyROGroup usm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mynetwork<br/><br/>view all&nbsp;&nbsp;&nbsp;&nbsp;included&nbsp;&nbsp;.1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 80<br/>access MyROGroup &quot;&quot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; noauth&nbsp;&nbsp;&nbsp;&nbsp;exact&nbsp;&nbsp;all&nbsp;&nbsp;&nbsp;&nbsp;none&nbsp;&nbsp; none<br/>access MyRWGroup &quot;&quot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; noauth&nbsp;&nbsp;&nbsp;&nbsp;exact&nbsp;&nbsp;all&nbsp;&nbsp;&nbsp;&nbsp;all&nbsp;&nbsp;&nbsp;&nbsp;none<br/><br/>syslocation shanghai pu dong <br/>syscontact Me askwan@askwan.com</div><br/>启动<br/><div class="code">/usr/local/net-snmp/sbin/snmpd -Lsd -Lf /dev/null -p /var/run/snmpd.pid -a -c /usr/local/net-snmp/etc/snmpd.conf </div><br/><br/>测试<br/><div class="code">snmpwalk -c askwan -v2c 192.168.0.5 if</div><br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">IF-MIB::ifIndex.1 = INTEGER: 1<br/>IF-MIB::ifIndex.2 = INTEGER: 2<br/>IF-MIB::ifDescr.1 = STRING: lo<br/>IF-MIB::ifDescr.2 = STRING: eth0<br/>IF-MIB::ifType.1 = INTEGER: softwareLoopback(24)<br/>IF-MIB::ifType.2 = INTEGER: ethernetCsmacd(6)<br/>....</div></div><br/><br/>---------END------------<br/><br/>Tags - <a href="http://www.askwan.com/tags/debian/" rel="tag">debian</a> , <a href="http://www.askwan.com/tags/net-snmp/" rel="tag">net-snmp</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/oracle_Temporary_tablespace_boom_unexpectedly/</link>
<title><![CDATA[oracle temporary tablespace boom unexpectedly]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Mon, 07 Sep 2009 00:38:52 +0000</pubDate> 
<guid>http://www.askwan.com/oracle_Temporary_tablespace_boom_unexpectedly/</guid> 
<description>
<![CDATA[ 
	临时表空间用途：<br/>INDEX CREATE ,INDEX REBUILD,ORDER BY ,GROUP BY, DISTINCT,Analyze,UNION, Sort-Merge etc.. <br/>上面这些操作均会用到临时表空间<br/><br/>临时表空间重建步骤：<br/>比如临时表空间一直增大，导致系统磁盘空间吃紧，考虑重建<br/>1 定位当前临时表空间位置<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> SELECT FILE_NAME,TABLESPACE_NAME FROM DBA_TEMP_FILES;<br/> <br/>FILE_NAME&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;TABLESPACE_NAME<br/>-------------------------------------------------------------------------------- ------------------------------<br/>/u01/oracle/oradata/askwan/temp01.dbf&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;TEMP</div></div><br/> <br/>2 创建临时表空间TEMP02<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> CREATE TEMPORARY TABLESPACE TEMP02 TEMPFILE '/u01/oracle/oradata/askwan/temp02.dbf' <br/>SIZE 100M REUSE AUTOEXTEND ON NEXT 512K MAXSIZE UNLIMITED;<br/> <br/>Tablespace created</div></div><br/><br/>review:<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL>&nbsp;&nbsp;SELECT FILE_NAME,TABLESPACE_NAME FROM DBA_TEMP_FILES;<br/> <br/>FILE_NAME&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;TABLESPACE_NAME<br/>-------------------------------------------------------------------------------- ------------------------------<br/>/u01/oracle/oradata/askwan/temp01.dbf&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;TEMP<br/>/u01/oracle/oradata/askwan/temp02.dbf&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;TEMP02<br/><br/>have created successfull.</div></div><br/><br/>3 改变缺省临时表空间为TEMP02<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> ALTER DATABASE DEFAULT TEMPORARY TABLESPACE TEMP02;<br/> <br/>Database altered</div></div><br/><br/>4 .删除原缺省表空间temp<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> drop tablespace temp including contents and datafiles;<br/> <br/>Tablespace dropped</div></div><br/><br/>5.创建新表空间temp<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> CREATE TEMPORARY TABLESPACE TEMP TEMPFILE '/u01/oracle/oradata/askwan/temp.dbf' <br/>SIZE 100M REUSE AUTOEXTEND ON NEXT 512K MAXSIZE UNLIMITED;<br/><br/>Tablespace created</div></div><br/><br/>6. 改变缺省表空间<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content"> SQL> alter database default temporary tablespace temp;<br/> <br/>Database altered</div></div><br/><br/>7.删除中间过程表空间TEMP02<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> drop tablespace temp02 including contents and datafiles;<br/> <br/>Tablespace dropped</div></div><br/><br/>8.重新指定用户临时表空间<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">SQL> alter user ASKWAN temporary tablespace temp;<br/><br/>User altered</div></div><br/><br/>涉及临时文件相关操作<br/>eg.<br/>alter database tempfile '/u01/oracle/oradata/askwan/temp.dbf'&nbsp;&nbsp;autoextend off;<br/>alter database tempfile '/u01/oracle/oradata/askwan/temp.dbf'&nbsp;&nbsp;resize 300M;<br/>alter database tempfile ''/u01/oracle/oradata/askwan/temp.dbf' autoextend on;<br/>
]]>
</description>
</item><item>
<link>http://www.askwan.com/Linux_Kernel_sock_sendpage_NULL_Pointer_Dereference_Vulnerability/</link>
<title><![CDATA[linux的内核漏洞]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Fri, 21 Aug 2009 23:39:17 +0000</pubDate> 
<guid>http://www.askwan.com/Linux_Kernel_sock_sendpage_NULL_Pointer_Dereference_Vulnerability/</guid> 
<description>
<![CDATA[ 
	<strong>“Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability”&nbsp;&nbsp;</strong><br/><br/>标准化代号 CVE-2009-2692<br/><br/>这漏洞恐怕是linux历史上非常值得“怀念”的了 <br/>如今<a href="http://www.securityfocus.com/bid/36038/exploit" target="_blank">exploit</a>工具早已发布出来 还是有不少人没有引起重视啊 <br/>我安装的几台debian lenny 5.0.1和几台RHEL5.3也不幸名列其中 加上我自己的Ubuntu9.04<br/>几乎可以说是全部“中招”了 呵呵<br/><br/><a href="http://www.askwan.com/attachment/200908/1250898142_9451fbc9.txt" target="_blank">受影响linux系统列表</a><br/><br/>在各种<a href="http://www.securityfocus.com/bid/36038/solution" target="_blank">solutions</a>也都公布出来的今天 <br/>我想我们应该只关心两个问题<br/>1.你管理的linux服务器在这个列表中吗 ？<br/>2.你已经采取了补救措施了吗？<br/><br/>
]]>
</description>
</item><item>
<link>http://www.askwan.com/YSlow_Add_Future_Expires_Headers/</link>
<title><![CDATA[Add Future Expires Headers]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Fri, 21 Aug 2009 08:40:09 +0000</pubDate> 
<guid>http://www.askwan.com/YSlow_Add_Future_Expires_Headers/</guid> 
<description>
<![CDATA[ 
	无它 可以增加YSlow得分<br/> <br/>apache配置文件http.conf 或者 .htaccess文件 根据需要自行添加<br/><br/><div class="code"><br/>&lt;FilesMatch &quot;&#92;.(ico&#124;pdf&#124;flv&#124;jpg&#124;jpeg&#124;png&#124;gif&#124;js&#124;css&#124;swf)$&quot;&gt; <br/>Header set Expires &quot;Fri, 08 Aug 2010 08:08:08 GMT&quot; <br/>&lt;/FilesMatch&gt;<br/></div><br/><br/>注意：<br/><br/>1。若有很多静态文件，如ico,jpg,css,js,gif之类的文件长时间不会改变或者更新的，用此方法甚好<br/><br/>2。若这类文件更新比较频繁，那过期时间就设置得距离现在短一点。<br/><br/><br/><br/>Tags - <a href="http://www.askwan.com/tags/yslow/" rel="tag">yslow</a> , <a href="http://www.askwan.com/tags/expires/" rel="tag">expires</a> , <a href="http://www.askwan.com/tags/headers/" rel="tag">headers</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/debian_lenny_install_webmin/</link>
<title><![CDATA[debian5.0下Webmin的安装]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Wed, 19 Aug 2009 00:43:20 +0000</pubDate> 
<guid>http://www.askwan.com/debian_lenny_install_webmin/</guid> 
<description>
<![CDATA[ 
	<div class="quote"><div class="quote-title">Quotation</div><div class="quote-content"><strong>There are two sides to every question。</strong></div></div>Webmin is a web-based interface for system administration for Unix. <a href="http://www.webmin.com/" target="_blank">website</a><br />
ok 开始 1.安装必要的deb包<div class="code">apt-get -y install libnet-ssleay-perl libauthen-pam-perl libio-pty-perl libmd5-perl</div>2. 下载 webmin deb包<div class="code">wget http://ncu.dl.sourceforge.net/project/webadmin/webmin/1.480/webmin_1.480_all.deb</div>update: 2010-03-15 the newest version is 1.5.1.0<div class="code">wget http://downloads.sourceforge.net/project/webadmin/webmin/1.510/webmin_1.510-2_all.deb?use_mirror=ncu </div>3.安装<div class="code">dpkg -i webmin_1.480_all.deb</div>根据自己需要修改vi /etc/webmin/miniserv.conf文件<br />
4.使修改生效<div class="code">/etc/init.d/webmin restart</div><br />
----------END-------------<br/>Tags - <a href="http://www.askwan.com/tags/debian/" rel="tag">debian</a> , <a href="http://www.askwan.com/tags/webmin/" rel="tag">webmin</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/Metadatafilematchchecksum/</link>
<title><![CDATA[Metadata file does not match checksum]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Thu, 30 Jul 2009 03:55:15 +0000</pubDate> 
<guid>http://www.askwan.com/Metadatafilematchchecksum/</guid> 
<description>
<![CDATA[ 
	yum有时候不是很稳定？不知道是不是RP问题 <br/><div class="code">&#91;Errno -1&#93; Metadata file does not match checksum<br/>Trying other mirror.</div><br/><br/>每次出现这个 都要“清仓”才行<br/>yum clean all<br/>奈何？<br/>Tags - <a href="http://www.askwan.com/tags/metadata/" rel="tag">metadata</a> , <a href="http://www.askwan.com/tags/file/" rel="tag">file</a> , <a href="http://www.askwan.com/tags/match/" rel="tag">match</a> , <a href="http://www.askwan.com/tags/checksum/" rel="tag">checksum</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/175/</link>
<title><![CDATA[There is no public key available for the following key IDs 问题]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Mon, 08 Jun 2009 15:53:55 +0000</pubDate> 
<guid>http://www.askwan.com/post/175/</guid> 
<description>
<![CDATA[ 
	OS: debian 4.0 etch<br/>此问题比较普遍 故记录之 且供参考<br/>一般都是在apt-get update 后出错：<br/><div class="code">W: There is no public key available for the following key IDs:<br/>9AA38DCD55BE302B<br/>W: You may want to run apt-get update to correct these problems</div><br/>按照提示 运行apt-get&nbsp;&nbsp;update这个指令 很遗憾 无论运行多少次 都无济于事 <br/><br/>为演示这一过程 先下apt-key指令 import当前的keys<br/># apt-key update<br/><div class="code">gpg: key 2D230C5F: &quot;Debian Archive Automatic Signing Key (2006) &lt;ftpmaster@debian.org&gt;&quot; not changed<br/>gpg: key 6070D3A1: &quot;Debian Archive Automatic Signing Key (4.0/etch) &lt;ftpmaster@debian.org&gt;&quot; not changed<br/>gpg: key ADB11277: &quot;Etch Stable Release Key &lt;debian-release@lists.debian.org&gt;&quot; not changed<br/>gpg: key BBE55AB3: &quot;Debian-Volatile Archive Automatic Signing Key (4.0/etch)&quot; not changed<br/>gpg: Total number processed: 4<br/>gpg:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;unchanged: 4</div><br/><br/>当前系统有4个keys<br/><br/>增加上面列出的key<br/>gpg --keyserver wwwkeys.eu.pgp.net --recv-keys&nbsp;&nbsp;<span style="color: #DC143C;">9AA38DCD55BE302B</span> && apt-key add /root/.gnupg/pubring.gpg<br/><br/>再来看看系统中的trusted gpg keys信息<br/># apt-key list<br/>/etc/apt/trusted.gpg<br/>--------------------<br/>pub&nbsp;&nbsp; 1024D/2D230C5F 2006-01-03 [expired: 2007-02-07]<br/>uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Debian Archive Automatic Signing Key (2006) <ftpmaster@debian.org><br/><br/>pub&nbsp;&nbsp; 1024D/6070D3A1 2006-11-20 [expires: 2009-07-01]<br/>uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org><br/><br/>pub&nbsp;&nbsp; 1024D/ADB11277 2006-09-17<br/>uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Etch Stable Release Key <debian-release@lists.debian.org><br/><br/>pub&nbsp;&nbsp; 1024D/BBE55AB3 2007-03-31 [expires: 2010-03-30]<br/>uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Debian-Volatile Archive Automatic Signing Key (4.0/etch)<br/>sub&nbsp;&nbsp; 2048g/36CA98F3 2007-03-31 [expires: 2010-03-30]<br/><br/><span style="color: #FF0000;">pub&nbsp;&nbsp; 4096R/55BE302B 2009-01-27 [expires: 2012-12-31]</span><br/>uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org><br/><br/>OK 5个 最后一行正是刚才加入的<br/>再次apt-get update 就应该没有问题了<br/><br/>#apt-get update <br/><div class="code">Get:1 http://security.debian.org etch/updates Release.gpg &#91;1032B&#93;<br/>Hit http://security.debian.org etch/updates Release<br/>Ign http://security.debian.org etch/updates/main Packages/DiffIndex<br/>Ign http://security.debian.org etch/updates/contrib Packages/DiffIndex<br/>Ign http://security.debian.org etch/updates/main Sources/DiffIndex<br/>Ign http://security.debian.org etch/updates/contrib Sources/DiffIndex<br/>Hit http://security.debian.org etch/updates/main Packages<br/>Hit http://security.debian.org etch/updates/contrib Packages<br/>Hit http://security.debian.org etch/updates/main Sources<br/>Hit http://security.debian.org etch/updates/contrib Sources<br/>Fetched 1B in 2s (0B/s)&nbsp;&nbsp;<br/>Reading package lists... Done</div><br/><br/>还有一种情况就是 key过期的问题 那么这时候可以一个个先删除系统中的key<br/>比如 <br/>apt-key list <br/>apt-key del 55BE302B<br/>apt-key del BBE55AB3<br/>...<br/>然后删除debian-archive-keyring包<br/>dpkg –purge debian-archive-keyring<br/>再次重新安装<br/>apt-get install debian-archive-keyring<br/>基本上都能解决这个问题<br/><br/>---------------END---------------<br/><br/>Tags - <a href="http://www.askwan.com/tags/debian/" rel="tag">debian</a> , <a href="http://www.askwan.com/tags/public/" rel="tag">public</a> , <a href="http://www.askwan.com/tags/key/" rel="tag">key</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/168/</link>
<title><![CDATA[Linux最强渗透检测发行版BackTrack 4]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Wed, 29 Apr 2009 02:14:00 +0000</pubDate> 
<guid>http://www.askwan.com/post/168/</guid> 
<description>
<![CDATA[ 
	<a href="http://www.remote-exploit.org/" target="_blank">Backtrack </a><br/><a href="http://www.askwan.com/attachment.php?fid=184" target="_blank"><img src="http://www.askwan.com/attachment.php?fid=184" class="insertimage" alt="Open in new window" title="Open in new window" border="0"/></a><br/><br/>看到系统界面里 用中文繁体写就的 “龙” 字，倍觉亲切吧 呵呵<br/><br/>喜欢研究安全技术的linux fans不容错过！<br/><br/>最新发行版已经到 BackTrack 4 beta release&nbsp;&nbsp;<br/>1DVD 854 MB&nbsp;&nbsp;同时又集成众多老的安全工具和最近最新的安全工具<br/><a href="http://www.askwan.com/attachment.php?fid=183" target="_blank"><img src="http://www.askwan.com/attachment.php?fid=183" class="insertimage" alt="Open in new window" title="Open in new window" border="0"/></a><br/>其同时也是无线网络破解集成工具箱！非常适合蹭网族，呵呵<br/>最近拿来蹭办公楼附近的无线资源，甚觉强悍！<br/>发此文，以推荐linux安全爱好者<br/><br/>最新版下载地址：<br/><a href="http://backtrack.unixheads.org/bt4-beta.iso" target="_blank">http://backtrack.unixheads.org/bt4-beta.iso</a><br/>vmware镜像：<br/><a href="http://backtrack.unixheads.org/bt4-beta-vm-6.5.1.rar" target="_blank">http://backtrack.unixheads.org/bt4-beta-vm-6.5.1.rar</a><br/>Tags - <a href="http://www.askwan.com/tags/%25E6%25B8%2597%25E9%2580%258F/" rel="tag">渗透</a> , <a href="http://www.askwan.com/tags/%25E6%25A3%2580%25E6%25B5%258B/" rel="tag">检测</a> , <a href="http://www.askwan.com/tags/linux/" rel="tag">linux</a> , <a href="http://www.askwan.com/tags/%25E5%258F%2591%25E8%25A1%258C%25E7%2589%2588/" rel="tag">发行版</a> , <a href="http://www.askwan.com/tags/backtrack/" rel="tag">backtrack</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/166/</link>
<title><![CDATA[《诸侯》的刀片服务器]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Mon, 27 Apr 2009 10:38:28 +0000</pubDate> 
<guid>http://www.askwan.com/post/166/</guid> 
<description>
<![CDATA[ 
	4.30 <a href="http://zh.12ha.com/" target="_blank">诸侯</a> 内测<br/>一上来就不同凡响 <br/>这刀片机器四四方方的 好“正点”啊<br/><a href="http://www.askwan.com/attachment.php?fid=178" target="_blank"><img src="http://www.askwan.com/attachment.php?fid=178" class="insertimage" alt="Open in new window" title="Open in new window" border="0"/></a><br/>HP08年推出的一款新型刀片机器 <a href="http://h10010.www1.hp.com/wwpc/cn/zh/sm/WF06b/3709945-3709945-3328410-3722790-3722790-3707371-3723465.html" target="_blank">ProLiant BL2x220c G5.</a><br/><br/>印象中，用刀片服务器的公司越来越多了，刀片服务器价格低，能耗低，占用机柜空间小等优势<br/>这张IDC的报告图则更直观的显示了未来刀片服务器市场的走势，以后搞就搞“一箱子“机器吧<br/>省得一台一台的折腾了 哈<br/><a href="http://www.askwan.com/attachment.php?fid=179" target="_blank"><img src="http://www.askwan.com/attachment.php?fid=179" class="insertimage" alt="Open in new window" title="Open in new window" border="0"/></a><br/><br/>Tags - <a href="http://www.askwan.com/tags/hp/" rel="tag">hp</a> , <a href="http://www.askwan.com/tags/%25E5%2588%2580%25E7%2589%2587/" rel="tag">刀片</a> , <a href="http://www.askwan.com/tags/%25E6%259C%258D%25E5%258A%25A1%25E5%2599%25A8/" rel="tag">服务器</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/165/</link>
<title><![CDATA[yahoo的关于大型网站前端性能加速的实践指南]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Mon, 27 Apr 2009 09:49:13 +0000</pubDate> 
<guid>http://www.askwan.com/post/165/</guid> 
<description>
<![CDATA[ 
	很早就看到yahoo性能团队的<a href="http://developer.yahoo.com/performance/rules.html" target="_blank">这篇文章</a><br/><a href="http://developer.yahoo.com/performance/rules.html" target="_blank">http://developer.yahoo.com/performance/rules.html</a><br/><br/>逢今日再读，仍旧令人拍案叫绝，若大中型网站，特别是以静态内容为主的网站，能做到其十之八九，<br/>那我想访问响应性能速度定能提升几个档次。<br/><br/>这段时间 自觉需要好好学习研究一下这些方法 希望将来尽力用得上 <br/>然而这个必然需要需要前端开发工程师，程序开发设计人员和系统运维相关人员通力合作才行<br/><br/>顺便做个自己的土笔记 留以后备忘。<br/><br/>大致从文章看下来说 这篇文章中一共34种方法 分为7个类别<br/><br/>分别是<br/>1.<strong>Content&nbsp;&nbsp;</strong><br/>2.<strong>Server </strong><br/>3.<strong>Cookie</strong><br/>4.<strong>Css</strong><br/>5.<strong>Javascript</strong><br/>6.<strong>Image</strong><br/>7.<strong>Mobile</strong><br/><br/>几乎牵涉到了网站前端的方方面面 实为猛料！<br/><br/>这上34种实践方法 如下 ：<ol id="rules-list"><li><a class="content" href="http://developer.yahoo.com/performance/rules.html#num_http">Make Fewer HTTP Requests</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#cdn">Use a Content Delivery Network</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#expires">Add an Expires or a Cache-Control Header</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#gzip">Gzip Components</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="css" href="http://developer.yahoo.com/performance/rules.html#css_top">Put Stylesheets at the Top</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript" href="http://developer.yahoo.com/performance/rules.html#js_bottom">Put Scripts at the Bottom</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="css" href="http://developer.yahoo.com/performance/rules.html#css_expressions">Avoid CSS Expressions</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript css" href="http://developer.yahoo.com/performance/rules.html#external">Make JavaScript and CSS External</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#dns_lookups">Reduce DNS Lookups</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript css" href="http://developer.yahoo.com/performance/rules.html#minify">Minify JavaScript and CSS</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#redirects">Avoid Redirects</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript" href="http://developer.yahoo.com/performance/rules.html#js_dupes">Remove Duplicate Scripts</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#etags">Configure ETags</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#cacheajax">Make Ajax Cacheable</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#flush">Flush the Buffer Early</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="server" href="http://developer.yahoo.com/performance/rules.html#ajax_get">Use GET for AJAX Requests</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#postload">Post-load Components</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#preload">Preload Components</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#min_dom">Reduce the Number of DOM Elements</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#split">Split Components Across Domains</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#iframes">Minimize the Number of iframes</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="content" href="http://developer.yahoo.com/performance/rules.html#no404">No 404s</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="cookie" href="http://developer.yahoo.com/performance/rules.html#cookie_size">Reduce Cookie Size</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="cookie" href="http://developer.yahoo.com/performance/rules.html#cookie_free">Use Cookie-free Domains for Components</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript" href="http://developer.yahoo.com/performance/rules.html#dom_access">Minimize DOM Access</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="javascript" href="http://developer.yahoo.com/performance/rules.html#events">Develop Smart Event Handlers</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="css" href="http://developer.yahoo.com/performance/rules.html#csslink">Choose &lt;link&gt; over @import</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="css" href="http://developer.yahoo.com/performance/rules.html#no_filters">Avoid Filters</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="images" href="http://developer.yahoo.com/performance/rules.html#opt_images">Optimize Images</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="images" href="http://developer.yahoo.com/performance/rules.html#opt_sprites">Optimize CSS Sprites</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="images" href="http://developer.yahoo.com/performance/rules.html#no_scale">Don't Scale Images in HTML</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="images" href="http://developer.yahoo.com/performance/rules.html#favicon">Make favicon.ico Small and Cacheable</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="mobile" href="http://developer.yahoo.com/performance/rules.html#under25">Keep Components under 25K</a></li>&nbsp;&nbsp;&nbsp;&nbsp;<li><a class="mobile" href="http://developer.yahoo.com/performance/rules.html#multipart">Pack Components into a Multipart Document</a></li></ol>下面 就是过段时间一个一个做个测试 ！ 能用的要尽量用上。<br/>Tags - <a href="http://www.askwan.com/tags/yahoo/" rel="tag">yahoo</a> , <a href="http://www.askwan.com/tags/%25E5%25A4%25A7%25E5%259E%258B%25E7%25BD%2591%25E7%25AB%2599/" rel="tag">大型网站</a> , <a href="http://www.askwan.com/tags/%25E5%2589%258D%25E7%25AB%25AF/" rel="tag">前端</a> , <a href="http://www.askwan.com/tags/%25E6%2580%25A7%25E8%2583%25BD/" rel="tag">性能</a> , <a href="http://www.askwan.com/tags/%25E5%258A%25A0%25E9%2580%259F/" rel="tag">加速</a> , <a href="http://www.askwan.com/tags/%25E5%25AE%259E%25E8%25B7%25B5/" rel="tag">实践</a> , <a href="http://www.askwan.com/tags/%25E6%258C%2587%25E5%258D%2597/" rel="tag">指南</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/159/</link>
<title><![CDATA[TCP_Wrappers的语法格式]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Wed, 01 Apr 2009 07:19:54 +0000</pubDate> 
<guid>http://www.askwan.com/post/159/</guid> 
<description>
<![CDATA[ 
	&nbsp;&nbsp; TCP_Wrappers和iptables是linux下最重要的两个安全方面的项目，不容忽视，反复测试后发现TCP_Wrappers的/etc/hosts.allow 和/etc/hosts.deny 是不支持CIDR方式的写法的(如192.168.0.0/24, 172.16.0.0/16等)！<br/>某些文章和资料书籍里面有这种写法是错误的，要注意了。<br/>&nbsp;&nbsp;<br/>&nbsp;&nbsp;其写法支持如<br/>1.&nbsp;&nbsp; .askwan.com <br/>包括askwan.com自身以及 其下所有子域名<br/><br/>2. 192.168.<br/>包括192.168. 下的所有ip<br/><br/>3. 10.10.0.0/255.255.0.0<br/><br/>4. ALL <br/>包括系统所有daemon 和所有IP段<br/><br/>5. userX@askwan.com <br/>指示某个域名主机里某个特定用户<br/><br/>6. EXCEPT 语法<br/>例如： 要求192.168.0.0/255.255.255.0 下的除了 192.168.0.100 之外的机器可以使用sshd服务，那么可以写为<br/> sshd：192.168.0.0/255.255.255.0 EXCEPT 192.168.0.100&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br/><br/>一点补充内容：<br/>&nbsp;&nbsp;&nbsp;&nbsp;TCP_Wrappers可以使用系统中的twist 和 spawn 记录和追踪来访者的信息，以作为系统安全日志分析<br/>，有几个常用变量可以使用 <br/><br/><div class="code">%a&nbsp;&nbsp;&nbsp;&nbsp;Client address<br/>%h&nbsp;&nbsp;&nbsp;&nbsp;Client host name<br/>%A&nbsp;&nbsp;&nbsp;&nbsp;Host address<br/>%H&nbsp;&nbsp;&nbsp;&nbsp;Server host name<br/>%c&nbsp;&nbsp;&nbsp;&nbsp;Client information<br/>%p&nbsp;&nbsp;&nbsp;&nbsp;Process ID<br/>%d&nbsp;&nbsp;&nbsp;&nbsp;Process name<br/>%s&nbsp;&nbsp;&nbsp;&nbsp;Server information</div><br/> <br/><br/>Tags - <a href="http://www.askwan.com/tags/%2526quot%253Btcp_wrappers%2526quot%253B/" rel="tag">&quot;tcp wrappers&quot;</a> , <a href="http://www.askwan.com/tags/twist/" rel="tag">twist</a> , <a href="http://www.askwan.com/tags/spawn/" rel="tag">spawn</a> , <a href="http://www.askwan.com/tags/hosts.allow/" rel="tag">hosts.allow</a> , <a href="http://www.askwan.com/tags/hosts.deny/" rel="tag">hosts.deny</a>
]]>
</description>
</item><item>
<link>http://www.askwan.com/post/158/</link>
<title><![CDATA[GPT (GUID Partition Table)]]></title> 
<author>askwan &lt;askwan@yahoo.cn&gt;</author>
<category><![CDATA[Oprating System ]]></category>
<pubDate>Sun, 29 Mar 2009 05:26:31 +0000</pubDate> 
<guid>http://www.askwan.com/post/158/</guid> 
<description>
<![CDATA[ 
	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Linux早可以支持大于2T的块设备（Large Block Device），但是分区的时候却不能用常见的fdisk工具了，一定要用的话，会有下面的警告信息：<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">[root@host2001 data]# fdisk -l<br/><br/>Disk /dev/sda: 500.1 GB, 500107862016 bytes<br/>255 heads, 63 sectors/track, 60801 cylinders<br/>Units = cylinders of 16065 * 512 = 8225280 bytes<br/><br/>&nbsp;&nbsp; Device Boot&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Start&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; End&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Blocks&nbsp;&nbsp; Id&nbsp;&nbsp;System<br/>/dev/sda1&nbsp;&nbsp; *&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;33&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;265041&nbsp;&nbsp; 83&nbsp;&nbsp;Linux<br/>/dev/sda2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;34&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12781&nbsp;&nbsp; 102398310&nbsp;&nbsp; 83&nbsp;&nbsp;Linux<br/>/dev/sda3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12782&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 14056&nbsp;&nbsp;&nbsp;&nbsp;10241437+&nbsp;&nbsp;82&nbsp;&nbsp;Linux swap / Solaris<br/><br/><span style="color: #FF0000;">WARNING: GPT (GUID Partition Table) detected on '/dev/sdc'! The util fdisk doesn't support GPT. Use GNU Parted.</span><br/><br/>Disk /dev/sdc: 2500.1 GB, 2500140728320 bytes<br/>255 heads, 63 sectors/track, 303958 cylinders<br/>Units = cylinders of 16065 * 512 = 8225280 bytes</div></div><br/><br/>上面提示fdisk工具不支持GPT,得使用另一个GNU发布的强大分区工具parted<br/>官方链接：<a href="http://www.gnu.org/software/parted/index.shtml" target="_blank">http://www.gnu.org/software/parted/index.shtml</a><br/>若强制用fdisk分区，最后大于2T的部分系统会不能认出来！<br/><br/>而GPT,比较权威的解释是：<br/><div class="quote"><div class="quote-title">Quotation</div><div class="quote-content">In computer hardware, GUID Partition Table (GPT) is a standard for the layout of the partition table on a physical hard disk. It is a part of the Extensible Firmware Interface (EFI) standard proposed by Intel as a replacement for the PC BIOS, one of the few remaining parts of the original IBM PC. EFI uses GPT whereas BIOS uses a Master Boot Record (MBR）</div></div><br/>下面的图说明了其结构：<br/><a href="http://www.askwan.com/attachment.php?fid=174" target="_blank"><img src="http://www.askwan.com/attachment.php?fid=174" class="insertimage" alt="Open in new window" title="Open in new window" border="0"/></a><br/>要详细了解这家伙，这篇文章或许可以帮助你：<a href="http://developer.apple.com/technotes/tn2006/tn2166.html" target="_blank">http://developer.apple.com/technotes/tn2006/tn2166.html</a><br/><br/>关于parted的用法和信息可以参看GUN专门文档：<a href="http://www.gnu.org/software/parted/manual/parted.html" target="_blank">http://www.gnu.org/software/parted/manual/parted.html</a><br/>就不演示了。今天正好碰到一客户遇到的这个问题，记下来给准备使用大于2T块设备的l网友一点提示。<br/><br/>Tags - <a href="http://www.askwan.com/tags/linux/" rel="tag">linux</a> , <a href="http://www.askwan.com/tags/gpt/" rel="tag">gpt</a> , <a href="http://www.askwan.com/tags/fdisk/" rel="tag">fdisk</a> , <a href="http://www.askwan.com/tags/parted/" rel="tag">parted</a>
]]>
</description>
</item>
</channel>
</rss>