Configure 6513 IDSM and Local SPAN failed

Hi, my catalyst 6513 IOS version is 12.2(18)SXF16 and  12.2(33)SXI5 , today I want to configure my IDSM module,
I should SPAN my vlan traffic to the IDSM, right?
commands like :
monitor session 4 source vlan 21
monitor session 4 destination intrusion-detection-module 10 data-port 1
But the switch tell me :
% Local Session limit has been exceeded
So, what should I do if I want my IDSM work.
Thank you !

Hi,
You mayuse VACLs to pass the traffic to the IDSM2. VACL capture allows you to specify whatever vlans you would like to   have the IDSM2 monitor. 
So if you know what vlans  passing on the  etherchannels, then you may include them in the VACL configuration 
For Example :
intrusion-detection module 4 data-port 1 capture allowed-vlan   10-20,40,70
Please find the documentation to configure VACLs on the 6500 switch:
http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/cli/cli_idsm2.html#wp1030767
Hope that answers your query.
Thulasi Shankar

Similar Messages

  • X-configure with AMD64 and ATI 4250HD fails

    I have just installed Arch
    I figured to install gnome-shell would do all, but not,
    i did pacman -S xorg to install the X
    and After that I run X-configure and it gave me some errors.
    As i have ubuntu and the .run ati installer I installed the fglrx driver at Arch, did not work
    I copied my ubuntu xorg.conf not work too
    I edited xorg.conf to put "radeon" driver instead of "fglrx"
    i also installed gnome
    i tried X-configure severla times and give me errors of "other drivers ot ati"
    I tried to remove xorg "pacman -R xorg", impossible
    I tried to reinstall and instead of install all, install only 13 the ati driver, nothing.
    The Xorg man page says that there are some problems with X-configure sometimes.
    As AMD64 +ATI is a common config, and sure there are some gurus that has this config working with the X
    I suggest, not only publish it, making arch packages for this not working with X-configure configuration to be detected and well configured.
    Last time I installed Arch was less diffcult but editing manually xorg.conf I was able to do it, I'm revisiting this distro, and is not very comfortable to install the X
    even if it did work.
    But thanks in advance if anyone can give me a xorg.conf that works

    karol wrote:
    glaiky wrote:In addition to xorg you need to install xorg-xinit. If you have installed the ATI proprietry driver, run (as root) aticonfig --initial to create an xorg.conf file. Add 'nomodeset' to /boot/grub/grub.lst (on the line that points to your kernel.
    What do you mean "In addition to xorg"? 'xorg' is a group one shouldn't ever need to install whole.
    As you've already explained.
    In addition to everything else others have said, mitcoes, per the Beginner's Guide [ https://wiki.archlinux.org/index.php/Be … #Install_X ] follow what it recommends, albeit it's notable the guide presumes this is a new install. If you intend on using Catalyst, the link is available there for the ATI Catalyst instructions.

  • List all printers configured from server and local machine when hosted in server machine and working from Client machine

    Hello Team
    I am developing web application in asp.net. When application run from IIS(hosted in server machine running from client machine using web browser) application should list all the configured printers in local and network.
    can any one please let me know the process, in this i was able to load printers from server, so need to load printers from local machine.
    Thanks in Advance
    Bindu

    Hi Bindu,
    I am developing web application in asp.net. When application run from IIS(hosted in server machine running from client machine using web browser) application should list all the configured printers in local and network.
    From this message, this is a web application in asp.net, and it also related to IIS.
    You should post in the dedicated ASP.Net Forum
    http://forums.asp.net
    For IIS issue, http://forums.iis.net/ IIS forum should post.
    Thanks
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • [svn:bz-trunk] 16330: QA: Yes - Ran test locally and it was failing but tested condition was true - there is no services-config .xml file

    Revision: 16330
    Revision: 16330
    Author:   [email protected]
    Date:     2010-05-26 07:55:41 -0700 (Wed, 26 May 2010)
    Log Message:
    QA: Yes - Ran test locally and it was failing but tested condition was true - there is no services-config.xml file
    Doc: No
    Checkintests: NA
    Details: Updated expected error message to match current error.
    Modified Paths:
        blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/NoServicesConfigFileTest/error.t xt

    I have uploaded detail.txt at below url.
    http://m.uploadedit.com/b041/1413264342685.txt
    Hi Mahesh,
    According to log file, I find the message ‘The setup100.exe.config file was not found, therefore the DTSWizard and SQLWatson app config files were not replaced’. It seems that the SQL Server setup file is not complete. Please check that if the SQL Server
    setup file is corrupted, if it is corrupted, please download it again and reinstall SQL Server 2008 R2.
    However, if there’s no problem with the setup file, please check that if there is third-party software such as anti-virus software on your computer blocking the process of SQL Server installation. In addition, make sure that you choose ‘Run as administrator’
    to launch the setup and configure SQL Server service accounts appropriately with administrator permission during the installation.
    For more details about this error, please review the following similar thread.
    http://answers.flyppdevportal.com/categories/sqlserver/sqlsetupandupgrade.aspx?ID=ad794a97-09ae-4aae-9d68-0b06f9af3e16
    Thanks,
    Lydia Zhang

  • I have an iPhone 4s and a hotmail account, and despite having configured push mail notifications to be received automatically and immediately, I fail, I have to do something extra? thanks

    I have an iPhone 4s and a hotmail account, and despite having configured push mail notifications to be received automatically and immediately, I fail, I have to do something extra? thanks

    IOS supported push mail account http://support.apple.com/kb/HT2625#

  • Every now and then (every 15 minutes-half an hour or so), my internet fails. It says in the Diagnostics that the internet and server have failed. Happens on my sister's mac as well. Is this our modem?

    Every now and then (every 15 minutes-half an hour or so), my internet fails. It says in the Diagnostics that the internet and server have failed. Happens on my sister's mac as well. Is this our modem? Our PCs don't do this so it has something to do with the macs.

    Hi Patrick,
    I'm starting to think it's either an AirPort card issue or something to do with the Mac OS. I have stopped using wireless as much as possible in my home (have wired up several new Ethernet outlets), and it sure is nice having Internet run at the speed it's supposed to all the time, and with no drops. Might be something to consider.
    In the meantime:
    Open System Preferences > Network > select AirPort > click on Advanced > TCP/IP > Configure IPv6 > Off > OK > Apply > Turn AirPort Off > Turn AirPort On
    Open System Preferences > Network > select Ethernet > click on Advanced > TCP/IP > Configure IPv6 > Off > OK > Apply
    (FOR LION: If you can’t see an option to turn ipv6 off, set it to link-local only.)
    IPv6 troubleshooting http://support.apple.com/kb/TS3802
    And here are some internet troubleshooting ideas:
    http://docs.info.apple.com/article.html?path=Mac/10.6/en/11395.html
    http://support.apple.com/kb/HT1714

  • Facing issue in configuring soa server in local jdev 11G

    Hi All,
    I am facing an issue in configuring local soa server in jdev 11G. I was trying to do the practice excercises in the local jdev and while configuring soa server followed following steps :-
    1. Configure SOA to install the Integrated OC4J Server
    a. In JDeveloper, select Tools -> Preferences, Run, and then select Integrated OC4J Server.
    b. Next, select Tools -> Configure SOA…
    c. Complete the dialog for your configuration specifying the database location and the SOA schema user name and password
    d. Use the Test button to test the database connection and then click on Ok
    This will take 8-10 minutes to run and when finished will end with "Build Successful."
    In the end I am getting following log file
    [echo] ==Starting standalone oc4j. Check server log D:\FMW\JdevInstance\system11.1.1.0.22.47.96\o.j2ee\embedded-oc4j\log\startsoa.log.
    [echo] ==Waiting max 420 second(s) for startup of URL http://LAP1-RBAGRI-IN:8988...
    [echo]
    * Configuring SOA Infrastructure has FAILED. *
    * Please check following logs for possible cause: *
    * D:\FMW\JdevInstance\system11.1.1.0.22.47.96\o.j2ee\embedded-oc4j\install\tmp\soa-infra-java.log
    * D:\FMW\JdevInstance\system11.1.1.0.22.47.96\o.j2ee\embedded-oc4j\log\startsoa.log
    [echo] ==Stopping oc4j standalone...
    BUILD SUCCESSFUL
    Total time: 7 minutes 11 seconds

    Hi Heidi,
    Thanks a lot for your response. The solution you provided worked for me. I am able to configure SOA now and the SOAConsole is coming up properly.
    One issue I am facing while deploying my application . The application is getting deployed properly but it does not show up in the console if I look at Default server console I can see this error message :-
    Incorrect db schema version.
    The database schema version "11.1.6" from the database does not match the version "11.1.7" expected by the server.
    The database schema for your SOA installation was not properly installed or your installation is using a database schema installed for a prior release.
    The database schema currently in place has probably been configured for a previous release; please re-install the database schema and try to start the server again.
    Though I have configured the database locally just like mentioned in the training material. Please let me know if you have any thoughts on this.
    Regards,
    Ranjana

  • Msbuild creating different assembly in build machine and local machine

    In our deployed application(in AFS), created by msbuild in a build machine, a call to a member function from another member function in the sameclass
    is failing with an exception "absolute path information is required".
    My locally built application is working fine. Our application is configured as "AnyCpu" and “Debug”. I have tried msbuild build in my machine using a 32 bit msbuild and 64 bit msbuild. In
    both cases the assembly created is running without a problem. So it is the build machine which is producing the problem dll
    We thought we should find the core cause of the issue
    Details:
    The "problem" class.
     [Export("SomeName",
    typeof(IDataPresenter))]
    [PartCreationPolicy(CreationPolicy.NonShared)]
    public class
    SomeDataPresenter : MyDataPresenter
      protected void
    BeginFieldsWithDi(ReportFields reportDefinition)
        if(reportDefinition.ReportDimension != null)
    reportDefinition.ReportDimension.ForEach(x =>x.LogicalName=_reportHelper.AddDiStart(x.LogicalName));
        if(reportDefinition.ReportMeasure != null)
    reportDefinition.ReportMeasure.ForEach(x => x.LogicalName =
    _reportHelper.AddDiStart(x.LogicalName));
    protected override
    bool UpdateReport(ReportFields reportDefinition, bool isReportExecution)
    //the following call is failing with exception"absolute path information is required".    
    BeginFieldsWithDi(ReportFields reportDefinition);
    //the base classes just for clarity
    [PartCreationPolicy(CreationPolicy.NonShared)]
    public class
    MyDataPresenter: BaseDataPresenter, IMyDataPresenter
    [Export("DefaultReportDataPresenter", typeof(IDataPresenter))] 
    [PartCreationPolicy(CreationPolicy.NonShared)]
     public class
    BaseDataPresenter: Model, IBaseDataPresenter
    For BeginFieldsWithDi() function the IL in my local machine and the deployed IL is different(Only the beginning part which is given below)
    IL in my machine
    .method family hidebysig instance void  RemoveDiFromFields() cil managed{
      // Code size       119 (0x77)
      .maxstack  3
      .locals init ([0] class [mscorlib]System.Action`1<class [MyApp.Infra]ReportFieldsReportDimension> 'CS$<>9__CachedAnonymousMethodDelegatef',
               [1] class [mscorlib]System.Action`1<class [MyApp.Infra]ReportMeasure> 'CS$<>9__CachedAnonymousMethodDelegate10',
               [2] bool CS$4$0000)
      IL_0000:  ldnull
      IL_0001:  stloc.0
      IL_0002:  ldnull
      IL_0003:  stloc.1
      IL_0004:  nop
      IL_0005:  ldarg.0
      IL_0006:  call       instance class [MyApp.Infra]ReportFields [MyApp.Modules.Ux]MyApp.Modules.Ux.Controls.VirtualGrid.Applications.Controllers.ReportDataPresenter::get_ColumnMetadata()
    IL from deployed DLL
    .method family hidebysig instance void  RemoveDiFromFields() cil managed
      // Code size       119 (0x77)
      .maxstack  3
      .locals init (class [mscorlib]System.Action`1<class [MyApp.Infra]ReportFieldsReportDimension> V_0,
               class [mscorlib]System.Action`1<class [MyApp.Infra]ReportMeasure> V_1,
               bool V_2)
      IL_0000:  ldnull
      IL_0001:  stloc.0
      IL_0002:  ldnull
      IL_0003:  stloc.1
      IL_0004:  nop
      IL_0005:  ldarg.0
      IL_0006:  call       instance class [MyApp.Infra]ReportFields [MyApp.Modules.Ux]MyApp.Modules.Ux.Controls.VirtualGrid.Applications.Controllers.ReportDataPresenter::get_ColumnMetadata()
    Question: What causes the IL to generate “CachedAnonymousMethodDelegate” entry in my machine and does not in the build machine (which is deployed)? 
    If we can deduct the cause of the exception("absolute path information is required") from above, what is it?

    Update:
    Changed the code to prevent compiler from creating closures. All is fine now.
    Looks like the compiler which the build machine uses is not creating the closures correctly. A bug which is already fixed perhaps(which is why it is working fine in my machine) 
    protected void BeginFieldsWithDi(ReportFields reportDefinition) 
    if (reportDefinition.ReportDimension != null)           
    foreach (var dimension in reportDefinition.ReportDimension)
    dimension.LogicalName = _reportHelper.AddDiStart(dimension.LogicalName); 
    if (reportDefinition.ReportMeasure != null)           
    foreach (var measure in reportDefinition.ReportMeasure)      {                   
    measure.LogicalName =_reportHelper.AddDiStart(measure.LogicalName); 

  • How can I use Local SPAN with RSPAN ??

    How can I use Local SPAN with RSPAN ??
    I want to mirror traffics from ISP-A and ISP-B to Anomaly-detector module.
    so I had configured like this...
    C6500-A
    vlan 1000
    name RSPAN
    remote-span
    monitor session 10 source interface Gi5/1 - 2 rx
    monitor session 10 destination remote vlan 1000
    monitor session 20 destination anomaly-detector-module 3 data-port 1
    monitor session 20 source remote vlan 1000
    interface GigabitEthernet1/13
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1000
    switchport mode trunk
    no ip address
    C6500-B
    vlan 1000
    name RSPAN
    remote-span
    monitor session 10 source interface Gi5/1 - 2 rx
    monitor session 10 destination remote vlan 1000
    interface GigabitEthernet1/13
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1000
    switchport mode trunk
    no ip address
    end
    but it was not working..
    it wasn't any change of input packet hit count when
    I'd enter a command 'show anomaly-detector module 3 data-port 1 traffic'
    was upper configuration wrong..?
    Can I use VACL configuration ?

    try to change "monitor session 10 destination remote vlan 1000 " to "monitor session 10 destination anomaly-detector-module 3 data-port 1 " on C6500-A

  • Cisco 877w -Configuration of subinterfaces and main interface within the same bridge group is not permitted

    Hi,
    I have another problem - after upgrade ios wirelles connection not work.
    After reload i have :
    Configuration of subinterfaces and main interface
    within the same bridge group is not permitted
    STP: Unable to get the port parameters.
    Please configure the bridge group on this interface first.
    Please configure the bridge group on this interface first.
    Please configure the bridge group on this interface first.
    SETUP: new interface NVI0 placed in "shutdown" state
    my old configuration work propertly in the old software, but after update i have notificatio.
    Old thread:
    https://supportforums.cisco.com/discussion/12379491/cisco-877w-no-wireless-connection
    my current sh run:
    version 12.4 
    no service pad 
    service tcp-keepalives-in 
    service tcp-keepalives-out 
    service timestamps debug datetime msec localtime 
    service timestamps log datetime msec localtime 
    service password-encryption 
    hostname cisco 
    boot-start-marker 
    boot system flash:c870-advipservicesk9-mz.124-24.T6.bin 
    boot-end-marker 
    logging message-counter syslog 
    logging buffered 4096 informational 
    enable secret 5 $1$eCNp$rWuBfZ/cexnwnkm7L447s. 
    aaa new-model 
    aaa session-id common 
    dot11 syslog 
    dot11 ssid ciscowifi 
     vlan 1 
     authentication open 
     authentication key-management wpa 
     guest-mode 
     wpa-psk ascii 7 050D031D26595D0617 
    dot11 wpa handshake timeout 500 
    ip source-route 
    no ip dhcp use vrf connected 
    ip dhcp excluded-address 192.168.56.1 
    ip dhcp pool CLIENT 
       import all 
       network 192.168.56.0 255.255.255.0 
       default-router 192.168.56.1 
       dns-server 8.8.8.8 194.204.159.1 194.204.152.34 
       lease 0 2 
    ip cef 
    no ip domain lookup 
    no ipv6 cef 
    multilink bundle-name authenticated 
    username marek password 7 00121A0908500A 
    archive 
     log config 
      hidekeys 
    ip tcp path-mtu-discovery 
    bridge irb 
    interface ATM0 
     description Polaczenie ADSL do ISP$ES_WAN$ 
     no ip address 
     no atm ilmi-keepalive 
     pvc 0/35 
      encapsulation aal5mux ppp dialer 
      dialer pool-member 1 
     hold-queue 224 in 
    interface FastEthernet0 
     description Edzia 
    interface FastEthernet1 
     description dom 
    interface FastEthernet2 
     description Dziadek 
    interface FastEthernet3 
    interface Dot11Radio0 
     no ip address 
     no ip redirects 
     ip local-proxy-arp 
     ip nat inside 
     ip virtual-reassembly 
     no dot11 extension aironet 
     encryption vlan 1 mode ciphers tkip 
     encryption mode ciphers aes-ccm tkip 
     broadcast-key change 3600 
     ssid ciscowifi 
     speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 
     station-role root 
     world-mode dot11d country AU indoor 
     no cdp enable 
     bridge-group 1 
     bridge-group 1 subscriber-loop-control 
     bridge-group 1 spanning-disabled 
     bridge-group 1 block-unknown-source 
     no bridge-group 1 source-learning 
     no bridge-group 1 unicast-flooding 
    interface Dot11Radio0.1 
     description ciscowifi 
     encapsulation dot1Q 1 native 
     no cdp enable 
    interface Vlan1 
     no ip address 
     bridge-group 1 
    interface Dialer0 
     description Interfejs dzwoniacy 
     ip address negotiated 
     ip nat outside 
     ip virtual-reassembly 
     encapsulation ppp 
     dialer pool 1 
     dialer-group 1 
     ppp chap hostname [email protected] 
     ppp chap password 7 xxxxxxxxxxxxxxxxxxxxxx 
    interface BVI1 
     description Polaczenie dla sieci LAN 
     ip address 192.168.56.1 255.255.255.0 
     ip nat inside 
     ip virtual-reassembly 
    no ip forward-protocol nd 
    ip route 0.0.0.0 0.0.0.0 Dialer0 
    no ip http server 
    no ip http secure-server 
    ip nat inside source list 100 interface Dialer0 overload 
    ip nat inside source static tcp 192.168.56.10 80 interface Dialer0 80 
    ip nat inside source static tcp 192.168.56.10 22 interface Dialer0 22 
    logging trap debugging 
    logging 192.168.56.10 
    access-list 100 permit ip 192.168.56.0 0.0.0.255 any 
    access-list 100 deny   ip any any 
    no cdp run 
    snmp-server community ciskacz RO 
    snmp-server chassis-id ciskacz 
    control-plane 
    bridge 1 protocol ieee 
    bridge 1 route ip 
    line con 0 
     no modem enable 
    line aux 0 
    line vty 0 4 
     exec-timeout 0 0 
     transport preferred ssh 
     transport input ssh 
    scheduler max-task-time 5000 
    end 
    please help - thanks!

    Hello Marek,
    I suppose you are not planning to do any kinds of advanced config using several VLANs and multiple SSIDs so let's just make your configuration simple and working.
    In short, you need to remove all references to VLAN 1 and to any subinterfaces possibly related to the VLAN 1. This means in particular (follow these steps in sequence):
    Remove the Dot11Radio0.1 subinterface entirely
    In the Dot11Radio0 section, remove the encryption vlan 1 mode ciphers tkip command
    In the dot11 ssid ciscowifi section, remove the vlan 1 command
    After performing these steps, make sure that the ssid ciscowifi and encryption mode commands are still present in the Dot11Radio0 configuration, and if not, reenter them.
    Best regards,
    Peter

  • Connect as: normal with Oracle 12c and Toad 12 FAILS.

    Connect as: normal with Oracle 12c and Toad 12 FAILS.
    I've been looked at forums, blogs and wikies but I couldn't found why my new user, that I created before, can't connect as NORMAL but as SYSDBA it can.
    I don't know why this occurs.
    My intention is create a user/schema in a local DB to have my own db.
    I can create a new user but when I go to connect to this new schema I only connect as SYSDBA, this is a big trouble because I can "see" object's DBA and I don't want this, I want create my own new schema db and not share name's object or name's tables with DBA.
    For example, object JOB exists as SYSDBA and I can't create a new table with this name.
    Please, help me.
    Thanks very much for read me.

    Hello rp0428!!
    I'll show you all step that you wrote.
    In sql plus:
    sho con_name
    CON_NAME
    CDB$ROOT
    SELECT name, created, open_mode FROM v$database;
    NAME CREATED                OPEN_MODE
    ORCL 23/07/2013 15:59:44 READ WRITE
    SELECT username, account_status, lock_date, expiry_date FROM dba_users WHERE USERNAME like '%IMEI%' ORDER BY 1;
    username       account_status  lock_date     expiry_date
    IMEILOCAL   OPEN                                    22/01/2014 12:20:25
    SELECT USERNAME,CON_ID,USER_ID FROM CDB_USERS WHERE USERNAME like '%IMEI%';
    USERNAME     CON_ID   USER_ID
    IMEILOCAL      3               117
    select GRANTEE,con_id from cdb_ROLE_PRIVS where GRANTED_ROLE='CONNECT' AND GRANTEE LIKE '%IMEI%';
    GRANTEE                  con_id
    IMEILOCAL                3
    SELECT NAME, CON_ID, DBID, CON_UID, GUID FROM V$CONTAINERS ORDER BY CON_ID;
    NAME       CON_ID    DBID                CON_UID         GUID
    ORCLC    3               2835062256     2835062256     14236144864B451C8E04D5C6453034FA
    To create my user I did:
    select con_id,dbid,NAME,OPEN_MODE from v$pdbs;
    2    4064112103    PDB$SEED    READ ONLY
    3    2835062256    ORCLC      MOUNTED
    alter PLUGGABLE database ORCLC open;
    select con_id,dbid,NAME,OPEN_MODE from v$pdbs;
    --2    4064112103    PDB$SEED    READ ONLY
    --3    2835062256    ORCLC      READ WRITE
    alter session set container=ORCLC;
    CREATE TABLESPACE DATA3 DATAFILE 'C:\app\X05699SA\oradata\orcl\DATA3.dbf' SIZE 50M;
    CREATE USER IMEILOCAL IDENTIFIED BY IMEILOCAL DEFAULT TABLESPACE DATA3 TEMPORARY TABLESPACE TEMP PROFILE DEFAULT ACCOUNT UNLOCK;
    select username, password, created, password_versions, default_tablespace from dba_users where username like '%IMEI%';
    username      password     created                         password_versions    default_tablespace
    IMEILOCAL                       24/07/2013 16:41:35   11G                             DATA3
    GRANT CREATE SESSION TO IMEILOCAL;
    GRANT CREATE TABLE TO IMEILOCAL;
    GRANT CREATE VIEW TO IMEILOCAL;
    GRANT CREATE procedure TO IMEILOCAL;
    GRANT CREATE trigger TO IMEILOCAL;
    GRANT CONNECT TO IMEILOCAL;
    GRANT CREATE SEQUENCE to IMEILOCAL;
    GRANT create any context TO IMEILOCAL;
    GRANT create public synonym TO IMEILOCAL;
    GRANT execute on dbms_rls TO IMEILOCAL;
    GRANT administer database trigger TO IMEILOCAL;
    SELECT user, osuser, terminal, program FROM gv$session WHERE sid = (SELECT sid FROM v$mystat WHERE rownum = 1);
    user     osuser                                 terminal                      program
    SYS    SECTORIALES\X05699SA MX3500906DC1549 Toad.exe
    SELECT u.username, u.default_tablespace, u.temporary_tablespace "TMP TBS", u.profile, r.granted_role,
    r.admin_option, r.default_role
    FROM sys.dba_users u, sys.dba_role_privs r
    WHERE u.username = r.grantee and u.username like '%IMEI%'
    GROUP BY u.username, u.default_tablespace, u.temporary_tablespace, u.profile, r.granted_role,
    r.admin_option, r.default_role;
    IMEILOCAL USERS TEMP DEFAULT CONNECT NO YES
    SELECT tablespace_name FROM dba_tablespaces;
    SYSTEM
    SYSAUX
    TEMP
    USERS
    EXAMPLE
    DATA3
    SELECT name, password FROM user$ where name like '%IMEI%';
    IMEILOCAL passwordx
    select USERNAME, USER_ID, CREATED,                      COMMON, ORACLE_MAINTAINED from all_users WHERE username like '%IMEI%' order by 1;
              IMEILOCAL    117           24/07/2013 16:41:35       NO              N
    select * from user$ where name like '%IME%';
    117 IMEILOCAL 1 passwordx 3 2 24/07/2013 16:41:35 26/07/2013 12:20:25   0  1   0 0 DEFAULT_CONSUMER_GROUP  0   S:566C0A818AC42C203D49706D3586926A7656F5B16AA6C37E8FE10A1F779B;H:6FB057BA9F5B0690B93FD9A20695654D      
    Here you're my tnsnames.ora
    # tnsnames.ora Network Configuration File: C:\app\X05699SA\product\12.1.0\dbhome_1\network\admin\tnsnames.ora
    # Generated by Oracle configuration tools.
    LISTENER_ORCL =
      (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    ORACLR_CONNECTION_DATA =
      (DESCRIPTION =
        (ADDRESS_LIST =
          (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
        (CONNECT_DATA =
          (SID = CLRExtProc)
          (PRESENTATION = RO)
    ORCL =
      (DESCRIPTION =
        (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
        (CONNECT_DATA =
          (SERVER = DEDICATED)
          (SERVICE_NAME = orcl.iecisa.corp)
    # Here you're my listener.ora Network Configuration File: C:\app\X05699SA\product\12.1.0\dbhome_1\network\admin\listener.ora
    # Generated by Oracle configuration tools.
    SID_LIST_LISTENER =
      (SID_LIST =
        (SID_DESC =
          (SID_NAME = CLRExtProc)
          (ORACLE_HOME = C:\app\X05699SA\product\12.1.0\dbhome_1)
          (PROGRAM = extproc)
          (ENVS = "EXTPROC_DLLS=ONLY:C:\app\X05699SA\product\12.1.0\dbhome_1\bin\oraclr12.dll")
    LISTENER =
      (DESCRIPTION_LIST =
        (DESCRIPTION =
          (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
          (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    I think my problem source from about CDBs and PDBs, that is new in Oracle 12c and I'm not configure correcly my new DB and neither my new User
    Thanks for all!!!

  • Nexus1000v local SPAN can't capture inbound traffic

    hi all,
    I just configured local SPAN on nexus1000v (version 1.3d).
    local SPAN source and destination is on same VEM.
    my config is like below:
    monitor session 3
      source interface Vethernet13 both
      destination interface Vethernet170
      destination interface Vethernet36
      no shut
    SPAN session is up.
    But we can't see any inbound traffic to the source VM.
    (10.16.185.4,5,6 is the IPs of SPAN source)
    [root@davidzhangRHEL ~]# tcpdump -i eth1
    tcpdump: WARNING: eth1: no IPv4 address assigned
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
    11:46:07.644551 IP 10.16.185.3.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=sta                                                ndby group=1 addr=10.16.185.1
    11:46:07.654771 IP 10.16.185.2.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=act                                                ive group=1 addr=10.16.185.1
    11:46:07.961735 IP 10.16.185.6.https > 10.16.184.196.50254: S 3897896960:3897896                                                960(0) ack 1838046824 win 8192 <mss 1460,nop,wscale 8,sackOK,timestamp 74329579                                                 2654766205>
    11:46:07.962955 IP 10.16.185.6.https > 10.16.184.196.50254: R 1:1(0) ack 2 win 0
    11:46:10.644950 IP 10.16.185.3.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=sta                                                ndby group=1 addr=10.16.185.1
    11:46:10.657615 IP 10.16.185.2.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=act                                                ive group=1 addr=10.16.185.1
    11:46:11.081231 IP 10.16.185.5.https > 10.16.184.197.58538: S 1850399261:1850399                                                261(0) ack 3055844595 win 8192 <mss 1460,nop,wscale 8,sackOK,timestamp 74329891                                                 2654662655>
    11:46:11.081970 IP 10.16.185.5.https > 10.16.184.197.58538: R 1:1(0) ack 2 win 0
    11:46:11.957381 IP 10.16.185.5.https > 10.16.184.196.42161: S 1862096740:1862096                                                740(0) ack 970410175 win 8192 <mss 1460,nop,wscale 8,sackOK,timestamp 74329978 2                                                654770202>
    11:46:11.958705 IP 10.16.185.5.https > 10.16.184.196.42161: R 1:1(0) ack 2 win 0
    11:46:12.089401 IP 10.16.185.6.https > 10.16.184.197.45604: S 2733719434:2733719                                                434(0) ack 3290215780 win 8192 <mss 1460,nop,wscale 8,sackOK,timestamp 74329992                                                 2654663683>
    11:46:12.090735 IP 10.16.185.6.https > 10.16.184.197.45604: R 1:1(0) ack 2 win 0
    11:46:12.956018 IP 10.16.185.6.https > 10.16.184.196.50302: S 2275642708:2275642                                                708(0) ack 3286673454 win 8192 <mss 1460,nop,wscale 8,sackOK,timestamp 74330078                                                 2654771200>
    11:46:12.956838 IP 10.16.185.6.https > 10.16.184.196.50302: R 1:1(0) ack 2 win 0
    11:46:13.552716 IP 10.16.185.4.61913 > 10.2.222.111.5723: P 3867141198:386714222                                                3(1025) ack 4146771556 win 508
    11:46:13.645770 IP 10.16.185.3.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=sta                                                ndby group=1 addr=10.16.185.1
    11:46:13.654427 IP 10.16.185.2.hsrp > 224.0.0.2.hsrp: HSRPv0-hello 20: state=act                                                ive group=1 addr=10.16.185.1
    11:46:13.817143 IP 10.16.185.4.61913 > 10.2.222.111.5723: . ack 180 win 508
    1000v# module vem 12 execute vemcmd show span
    VEM SOURCE IP NOT CONFIGURED.
    HW SSN ID            DST LTL/IP  ERSPAN ID  HDR VER
            0                    68      local
    1000v# show monitor internal errors
    1) Event:E_DEBUG, length:96, at 163774 usecs after Thu Sep 22 15:12:17 2011
        [102] eth_span_phy_if_init_runtime_info(1051): im_get_ifindex_span_mode_list returned 0x40e30005
    2) Event:E_DEBUG, length:96, at 684704 usecs after Thu Sep 22 15:12:04 2011
        [102] eth_span_phy_if_init_runtime_info(1051): im_get_ifindex_span_mode_list returned 0x40e30005
    anybody any suggestion. Your help is highly appreciated.

    Hi Michael,
    Thanks. You are correct. We are able to see outbound traffic from SPAN source but not inbound traffic to SPAN source.
    Note: I have done vmotion for the SPAN source and SPAN destination virtual machines.
    Please see the below output which you requested.
    1000v# show monitor session 1
       session 1
    type              : local
    state             : up
    source intf       :
        rx            : Veth13
        tx            : Veth13
        both          : Veth13
    source VLANs      :
        rx            :
        tx            :
        both          :
    filter VLANs      : filter not specified
    destination ports : Veth170   Veth36
    1000v#
    show monitor internal info session 1
    Session 1 info:
    FSM state: SESSION_STATE_OPER_ACTIVE
    State reason: 0
    *** ADMIN DATA ***
    Session state: NO SHUT
    Ingress sources
    phy if: Veth13
    port ch:
    vlans:
    Egress sources
    phy if: Veth13
    port ch:
    vlans:
    Destinations:
    Veth170, Veth36
    PSS source list:
    Veth13
    PSS destination list:
    Veth170, Veth36
    *** RUNTIME DATA ***
    hw_ssn_id: 0
    destination index: 0x4fa3 (multicast di)
    oper rx: Veth13
    oper tx: Veth13
    oper dest: Veth170, Veth36
    oper dest for di: Veth170, Veth36
    programmed rx: Veth13
    programmed tx: Veth13
    programmed dest: Veth170, Veth36
    programmed dest for di: Veth170, Veth36
    programmed filter rx:1500
    programmed filter tx:
    Lock Info: resource [Session ID(0x1)]
      type[0] p_gwrap[(nil)]
          FREE @ 97236 usecs after Sun Sep 25 12:14:25 2011
      type[1] p_gwrap[(nil)]
          FREE @ 580143 usecs after Tue Sep 27 01:53:06 2011
      type[2] p_gwrap[(nil)]
          FREE @ 520203 usecs after Sun Sep 25 12:48:23 2011
    0x1
    Use lock event history for more details
    1000v# terminal length 0
    1000v# show monitor internal info interface vethernet 13
    Interface info:
    if_index: 1c0000c0
    source for ssn 1, src_dir 3
    state: up
    layer: 2
    mode: access
    Access vlan: 1500
    Interface is not in switchport monitor mode
    No Entries in SDB for if_index 0x1c0000c0
    1000v# show monitor internal info interface vethernet 36
    Interface info:
    if_index: 1c000230
    destination for ssn 1
    state: up
    layer: 2
    mode: access
    Access vlan: 1500
    Interface is not in switchport monitor mode
    The port is MISCONFIGURED, being not span destination but used as such
    No Entries in SDB for if_index 0x1c000230
    1000v# show monitor internal info interface vethernet 170
    Interface info:
    if_index: 1c000a90
    destination for ssn 1
    state: up
    layer: 2
    mode: access
    Access vlan: 1500
    Interface is not in switchport monitor mode
    The port is MISCONFIGURED, being not span destination but used as such
    No Entries in SDB for if_index 0x1c000a90
    1000v# show interface virtual | egrep "(13|36|170)"
    Veth13      Net Adapter 1  VM451             11  esx905
    Veth36      Net Adapter 4  VM510             11  esx905
    Veth113     Net Adapter 2  VM808             12  esx902
    Veth130     Net Adapter 1  VMSDE449          12  esx902
    Veth131     Net Adapter 3  VM809             10  esx904
    Veth132     Net Adapter 2  VMSDE449          12  esx902
    Veth134     Net Adapter 2  VM510             11  esx905
    Veth135     Net Adapter 2  VM511             8   esx901
    Veth136     Net Adapter 2  VM465             9   esx903
    Veth137     Net Adapter 1  VM472             11  esx905
    Veth138     Net Adapter 3  VM470             10  esx904
    Veth139     Net Adapter 3  VM472             11  esx905
    Veth151     Net Adapter 1  VMSDE436          11  esx905
    Veth152     Net Adapter 2  VMSDE436          11  esx905
    Veth170     Net Adapter 2  RHEL5             11  esx905
    1000v# module vem 11 execute vemcmd show port
      LTL    IfIndex   Vlan    Bndl  SG_ID Pinned_SGID  Type  Admin State  CBL Mode   Name
        8          0   3969       0     32          32  VIRT     UP    UP    4 Access
        9          0   3969       0     32          32  VIRT     UP    UP    4 Access
       10          0   1513       0     32           7  VIRT     UP    UP    4 Access
       11          0   3968       0     32          32  VIRT     UP    UP    4 Access
       12          0   1514       0     32           8  VIRT     UP    UP    4 Access
       13          0      1       0     32          32  VIRT     UP    UP    0 Access
       14          0   3971       0     32          32  VIRT     UP    UP    4 Access
       15          0   3971       0     32          32  VIRT     UP    UP    4 Access
       16   1a0a0000   1600 T   307      0          32  PHYS     UP    UP    4  Trunk vmnic0
       18   1a0a0200    616 T   306      2          32  PHYS     UP    UP    4  Trunk vmnic2
       19   1a0a0300      1 T   305      3          32  PHYS     UP    UP    1  Trunk vmnic3
       20   1a0a0400      1 T   305      4          32  PHYS     UP    UP    1  Trunk vmnic4
       21   1a0a0500   1600 T   307      5          32  PHYS     UP    UP    4  Trunk vmnic5
       23   1a0a0700      1 T   304      7          32  PHYS     UP    UP    1  Trunk vmnic7
       24   1a0a0800      1 T   304      8          32  PHYS     UP    UP    1  Trunk vmnic8
       25   1a0a0900    616 T   306      9          32  PHYS     UP    UP    4  Trunk vmnic9
       48   1b0a0000   1500       0     32           3  VIRT     UP    UP    4 Access VM510 ethernet3
       49   1b0a0010    620       0     32           9  VIRT     UP    UP    4 Access VM510 ethernet2
            pvlan isolated 616 620
       50   1b0a0020   1500       0     32           4  VIRT     UP    UP    4 Access VM510 ethernet1
       51   1b0a0030   1620       0     32           0  VIRT     UP    UP    4 Access VM480 ethernet2
            pvlan isolated 1600 1620
       52   1b0a0040    620       0     32           2  VIRT     UP    UP    4 Access VM480 ethernet1
            pvlan isolated 616 620
       53   1b0a0050   1502       0     32           3  VIRT     UP    UP    4 Access VM480 ethernet0
       54   1b0a0060   1509       0     32           4  VIRT     UP    UP    4 Access fiserv-f5 ethernet2
       55   1b0a0070    620       0     32           9  VIRT     UP    UP    4 Access fiserv-f5 ethernet1
            pvlan isolated 616 620
       56   1b0a0080   1512       0     32           7  VIRT     UP    UP    4 Access fiserv-f5.eth0
       57   1b0a0090   1620       0     32           5  VIRT     UP    UP    4 Access VM459 ethernet2
            pvlan isolated 1600 1620
       58   1b0a00a0    620       0     32           2  VIRT     UP    UP    4 Access VM459 ethernet1
            pvlan isolated 616 620
       59   1b0a00b0   1501       0     32           3  VIRT     UP    UP    4 Access VM459 ethernet0
       60   1b0a00c0    620       0     32           2  VIRT     UP    UP    4 Access VM476 ethernet2
            pvlan isolated 616 620
       61   1b0a00d0   1501       0     32           4  VIRT     UP    UP    4 Access VM476 ethernet1
       62   1b0a00e0   1620       0     32           0  VIRT     UP    UP    4 Access VM476 ethernet0
            pvlan isolated 1600 1620
       63   1b0a00f0    620       0     32           2  VIRT     UP    UP    4 Access VM451 ethernet3
            pvlan isolated 616 620
       64   1b0a0100   1620       0     32           5  VIRT     UP    UP    4 Access VM451 ethernet2
            pvlan isolated 1600 1620
       65   1b0a0110   1500       0     32           3  VIRT     UP    UP    4 Access VM451 ethernet0
       66   1b0a0120   1620       0     32           0  VIRT     UP    UP    4 Access VMSDE440 ethernet1
            pvlan isolated 1600 1620
       67   1b0a0130   1508       0     32           4  VIRT     UP    UP    4 Access VMSDE440 ethernet0
       68   1b0a0140   1509       0     32           3  VIRT     UP    UP    4 Access VM501 ethernet0
       72   1b0a0180   1620       0     32           0  VIRT     UP    UP    4 Access VMSDE436 ethernet1
            pvlan isolated 1600 1620
       73   1b0a0190   1508       0     32           3  VIRT     UP    UP    4 Access VMSDE436 ethernet0
       74   1b0a01a0    620       0     32           2  VIRT     UP    UP    4 Access VM477 ethernet3
            pvlan isolated 616 620
       75   1b0a01b0   1620       0     32           5  VIRT     UP    UP    4 Access VM477 ethernet1
            pvlan isolated 1600 1620
       76   1b0a01c0   1501       0     32           3  VIRT     UP    UP    4 Access VM477 ethernet0
       77   1b0a01d0   1620       0     32           0  VIRT     UP    UP    4 Access VMSDE434 ethernet1
            pvlan isolated 1600 1620
       78   1b0a01e0   1508       0     32           4  VIRT     UP    UP    4 Access VMSDE434 ethernet0
       79   1b0a01f0   1620       0     32           5  VIRT     UP    UP    4 Access VM454 ethernet3
            pvlan isolated 1600 1620
       80   1b0a0200    620       0     32           9  VIRT     UP    UP    4 Access VM454 ethernet2
            pvlan isolated 616 620
       81   1b0a0210   1501       0     32           4  VIRT     UP    UP    4 Access VM454 ethernet0
       82   1b0a0220   1620       0     32           0  VIRT     UP    UP    4 Access VM815 ethernet1
            pvlan isolated 1600 1620
       83   1b0a0230   1507       0     32           3  VIRT     UP    UP    4 Access VM815 ethernet0
       87   1b0a0270   1620       0     32           0  VIRT     UP    UP    4 Access VMSDE405 ethernet1
            pvlan isolated 1600 1620
       88   1b0a0280   1509       0     32           3  VIRT     UP    UP    4 Access VMSDE405 ethernet0
       89   1b0a0290   1620       0     32           5  VIRT     UP    UP    4 Access VMSDE424 ethernet1
            pvlan isolated 1600 1620
       90   1b0a02a0   1509       0     32           3  VIRT     UP    UP    4 Access VMSDE424 ethernet0
       91   1b0a02b0    620       0     32           9  VIRT     UP    UP    4 Access VM472 ethernet2
            pvlan isolated 616 620
       92   1b0a02c0   1620       0     32           0  VIRT     UP    UP    4 Access VM472 ethernet1
            pvlan isolated 1600 1620
       93   1b0a02d0   1500       0     32           4  VIRT     UP    UP    4 Access VM472 ethernet0
       94   1b0a02e0   1508       0     32           4  VIRT     UP    UP    4 Access VMSDE431 ethernet1
       95   1b0a02f0   1620       0     32           5  VIRT     UP    UP    4 Access VMSDE431 ethernet0
            pvlan isolated 1600 1620
       96   1b0a0300   1620       0     32           0  VIRT     UP    UP    4 Access VM496 ethernet2
            pvlan isolated 1600 1620
       97   1b0a0310   1501       0     32           3  VIRT     UP    UP    4 Access VM496 ethernet1
       98   1b0a0320   1500       0     32           4  VIRT     UP    UP    4 Access VM496 ethernet0
       99   1b0a0330   1620       0     32           5  VIRT     UP    UP    4 Access VM510 ethernet0
            pvlan isolated 1600 1620
      100   1b0a0340   1500       0     32           4  VIRT     UP    UP    4 Access RHEL5 ethernet1
      101   1b0a0350   1512       0     32           8  VIRT     UP    UP    4 Access RHEL5.eth0
      102   1b0a0360   1620       0     32           0  VIRT     UP    UP    4 Access VM452 ethernet3
            pvlan isolated 1600 1620
      103   1b0a0370    620       0     32           2  VIRT     UP    UP    4 Access VM452 ethernet2
            pvlan isolated 616 620
      104   1b0a0380   1500       0     32           3  VIRT     UP    UP    4 Access VM452 ethernet0
      304   16000028      1 T     0     32          32  VIRT     UP    UP    1  Trunk
      305   16000029      1 T     0     32          32  VIRT     UP    UP    1  Trunk
      306   1600002a    616 T     0     32          32  VIRT     UP    UP    4  Trunk
      307   1600002b   1600 T     0     32          32  VIRT     UP    UP    4  Trunk
    1000v# module vem 11 execute vemcmd show span
    VEM SOURCE IP NOT CONFIGURED.
    HW SSN ID            DST LTL/IP  ERSPAN ID  HDR VER
            0                  4408      local
    1000v#

  • Mounting local filesystem - FAIL (yet the fs still mounts...) [SOLVED]

    After modifying my time/date setup (setting the hardware clock to UTC, and using a custom timezone file) I started to get a [FAIL] message during boot (after the system had resynched to drive times to the system time), and shutdown.
    @ boot time
    Mounting local filesystem
            Ext3-fs: barriers not enabled
            kjournal starting. Commit interval 5 seconds
            Ext3-fs (sda4): using internal journal
            Ext3-fs (sda4): mounted filesystem with ordered data mode
                                                                                                                     [FAIL]
    @ shutdown
    Unmounting Filesystem                    [FAIL]
    Nothing seems to be negatively affected, and the boot and shutdown processes continue without even pausing, and sda4 (my /home directory) certainly seems to by mounted (since I'm using it now).
    I've run fsck at boot a couple times, but the drives keep coming back clean. I've tried using my old timezone setup, but the fail message persists. I've successfully unmounted and mounted sda4 as Root, trying to generate an error message of some kind, but all I get is a successfully unmounted, or mounted, drive. I've unmounted sda4 priod to shutdown as well, but the message persists.
    The only place in the logs the [FAIL] message shows up is in /var/log/boot:
    Mounting local filesystem   [BUSY]  [FAIL]
    I'm at a loss. I would like to fix this, if only to be sure that it's not a symptom of a larger problem. At the very least, I'd like to know what is causing it.
    Last edited by uxrs75 (2011-08-02 06:40:31)

    You interpret correctly, Logicien. BIOS is set to UTC; HARDWARECLOCK="UTC". Time and date are a-ok.
    I ran mkinitcpio -p kernel26, but the message persists. I also tried using the live cd, and mounting each of the drives in turn. All of them mounted successfully, with no error messages. To verify that it is sda4, I commented the sda4 line out in fstab, and rebooted the machine. I got:
    Mounting Local Filesystems [FAIL]
    but none of the Ext3-fs stuff, and the boot process continued successfully. I'm wondering if it's something else.
    I'll try adding quiet to the kernel boot line later this evening and see what that brings about.
    rc.conf
    # /etc/rc.conf - Main Configuration for Arch Linux
    # LOCALIZATION
    # LOCALE: available languages can be listed with the 'locale -a' command
    # DAEMON_LOCALE: If set to 'yes', use $LOCALE as the locale during daemon
    # startup and during the boot process. If set to 'no', the C locale is used.
    # HARDWARECLOCK: set to "", "UTC" or "localtime", any other value will result
    # in the hardware clock being left untouched (useful for virtualization)
    # Note: Using "localtime" is discouraged, using "" makes hwclock fall back
    # to the value in /var/lib/hwclock/adjfile
    # TIMEZONE: timezones are found in /usr/share/zoneinfo
    # Note: if unset, the value in /etc/localtime is used unchanged
    # KEYMAP: keymaps are found in /usr/share/kbd/keymaps
    # CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
    # CONSOLEMAP: found in /usr/share/kbd/consoletrans
    # USECOLOR: use ANSI color sequences in startup messages
    LOCALE="en_US.UTF-8"
    DAEMON_LOCALE="no"
    HARDWARECLOCK="UTC"
    TIMEZONE="PST"
    KEYMAP="uk"
    CONSOLEFONT="ter-116n.psf.gz"
    #CONSOLEMAP="8859-1"
    USECOLOR="yes"
    # HARDWARE
    # MODULES: Modules to load at boot-up. Blacklisting is no longer supported.
    # Replace every !module by an entry as on the following line in a file in
    # /etc/modprobe.d:
    # blacklist module
    # See "man modprobe.conf" for details.
    MODULES=()
    # Udev settle timeout (default to 30)
    UDEV_TIMEOUT=30
    # Scan for FakeRAID (dmraid) Volumes at startup
    USEDMRAID="no"
    # Scan for BTRFS volumes at startup
    USEBTRFS="no"
    # Scan for LVM volume groups at startup, required if you use LVM
    USELVM="no"
    # NETWORKING
    # HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
    HOSTNAME="darkstar"
    # Use 'ip addr' or 'ls /sys/class/net/' to see all available interfaces.
    # Wired network setup
    # - interface: name of device (required)
    # - address: IP address (leave blank for DHCP)
    # - netmask: subnet mask (ignored for DHCP) (optional, defaults to 255.255.255.0)
    # - broadcast: broadcast address (ignored for DHCP) (optional)
    # - gateway: default route (ignored for DHCP)
    # Static IP example
    # interface=eth0
    # address=192.168.0.2
    # netmask=255.255.255.0
    # broadcast=192.168.0.255
    # gateway=192.168.0.1
    # DHCP example
    # interface=eth0
    # address=
    # netmask=
    # gateway=
    interface=eth0
    address=
    netmask=
    broadcast=
    gateway=
    # Setting this to "yes" will skip network shutdown.
    # This is required if your root device is on NFS.
    NETWORK_PERSIST="no"
    # Enable these netcfg profiles at boot-up. These are useful if you happen to
    # need more advanced network features than the simple network service
    # supports, such as multiple network configurations (ie, laptop users)
    # - set to 'menu' to present a menu during boot-up (dialog package required)
    # - prefix an entry with a ! to disable it
    # Network profiles are found in /etc/network.d
    # This requires the netcfg package
    #NETWORKS=(main)
    # DAEMONS
    # Daemons to start at boot-up (in this order)
    # - prefix a daemon with a ! to disable it
    # - prefix a daemon with a @ to start it up in the background
    # If something other takes care of your hardware clock (ntpd, dual-boot...)
    # you should disable 'hwclock' here.
    DAEMONS=(hwclock syslog-ng dbus !network !netfs crond alsa mpd)
    fstab
    # /etc/fstab: static file system information
    # <file system> <dir> <type> <options> <dump> <pass>
    none /dev/pts devpts defaults 0 0
    none /dev/shm tmpfs defaults 0 0
    #none /proc/bus/usb usbfs auto,busgid=101,busmode=0775,devgid=101,devmode=0664 0 0
    /dev/sr0 /media/sr0 auto ro,users,noauto,unhide 0 0
    /dev/sr1 /media/sr1 auto ro,users,noauto,unhide 0 0
    #/dev/sda1 /boot ext2 defaults 0 1
    #/dev/sda2 swap swap defaults 0 0
    #/dev/sda3 / ext3 defaults 0 1
    #/dev/sda4 /home ext3 defaults 0 1
    UUID=597bd99a-173b-4b23-947d-b8a50859bcdd /boot ext2 defaults 0 1
    UUID=a51a3b55-7c5c-45bb-96eb-79cfd1a77f54 swap swap defaults 0 0
    UUID=c6ecf0fe-d2c4-4743-b639-1550295b65c6 / ext3 defaults 0 1
    UUID=ff7030b8-890a-4673-bd1c-f502ca5efb2b /home ext3 defaults 0 1
    /dev/sdb1 /media/sdb1 auto noauto,owner,users 0 0
    /dev/sdb1 /media/sdb1 auto noauto,owner,users 0 0
    /dev/sdc1 /media/sdc1 auto noauto,owner,users 0 0
    /dev/sdd1 /media/sdd1 auto noauto,owner,users 0 0
    /dev/sde1 /media/sde1 auto noauto,owner,users 0 0
    /dev/sdf1 /media/sdf1 auto noauto,owner,users 0 0
    fdisk -l
    Disk /dev/sda: 500.1 GB, 500107862016 bytes
    255 heads, 63 sectors/track, 60801 cylinders, total 976773168 sectors
    Units = sectors of 1 * 512 = 512 bytes
    Sector size (logical/physical): 512 bytes / 512 bytes
    I/O size (minimum/optimal): 512 bytes / 512 bytes
    Disk identifier: 0x00000000
    Device Boot Start End Blocks Id System
    /dev/sda1 * 1 208844 104422 83 Linux
    /dev/sda2 208845 738989 265072+ 82 Linux swap / Solaris
    /dev/sda3 738990 103153364 51207187+ 83 Linux
    /dev/sda4 103153365 976768064 436807350 83 Linux
    dumpe2fs -h /dev/sda1
    dumpe2fs 1.41.14 (22-Dec-2010)
    Filesystem volume name: <none>
    Last mounted on: <not available>
    Filesystem UUID: 597bd99a-173b-4b23-947d-b8a50859bcdd
    Filesystem magic number: 0xEF53
    Filesystem revision #: 1 (dynamic)
    Filesystem features: ext_attr resize_inode dir_index filetype sparse_super
    Filesystem flags: signed_directory_hash
    Default mount options: (none)
    Filesystem state: not clean
    Errors behavior: Continue
    Filesystem OS type: Linux
    Inode count: 26208
    Block count: 104420
    Reserved block count: 5221
    Free blocks: 84721
    Free inodes: 26177
    First block: 1
    Block size: 1024
    Fragment size: 1024
    Reserved GDT blocks: 256
    Blocks per group: 8192
    Fragments per group: 8192
    Inodes per group: 2016
    Inode blocks per group: 252
    Filesystem created: Fri Apr 30 20:35:47 2010
    Last mount time: Thu Aug 19 05:44:48 2010
    Last write time: Mon Aug 1 13:58:14 2011
    Mount count: 8
    Maximum mount count: 23
    Last checked: Mon Aug 1 07:23:24 2011
    Check interval: 15552000 (6 months)
    Next check after: Sat Jan 28 07:23:24 2012
    Reserved blocks uid: 0 (user root)
    Reserved blocks gid: 0 (group root)
    First inode: 11
    Inode size: 128
    Default directory hash: half_md4
    Directory Hash Seed: f5f22ff8-0cb1-4c30-a172-ead082f0ad8a
    dumpe2fs -h /dev/sda3
    dumpe2fs 1.41.14 (22-Dec-2010)
    Filesystem volume name: <none>
    Last mounted on: <not available>
    Filesystem UUID: c6ecf0fe-d2c4-4743-b639-1550295b65c6
    Filesystem magic number: 0xEF53
    Filesystem revision #: 1 (dynamic)
    Filesystem features: has_journal ext_attr resize_inode dir_index filetype needs_recovery sparse_super large_file
    Filesystem flags: signed_directory_hash
    Default mount options: (none)
    Filesystem state: clean
    Errors behavior: Continue
    Filesystem OS type: Linux
    Inode count: 3203072
    Block count: 12801796
    Reserved block count: 640089
    Free blocks: 10487133
    Free inodes: 3000642
    First block: 0
    Block size: 4096
    Fragment size: 4096
    Reserved GDT blocks: 1020
    Blocks per group: 32768
    Fragments per group: 32768
    Inodes per group: 8192
    Inode blocks per group: 512
    Filesystem created: Fri Apr 30 20:35:51 2010
    Last mount time: Mon Aug 1 13:58:14 2011
    Last write time: Mon Aug 1 07:22:14 2011
    Mount count: 8
    Maximum mount count: 23
    Last checked: Mon Aug 1 07:22:14 2011
    Check interval: 15552000 (6 months)
    Next check after: Sat Jan 28 07:22:14 2012
    Reserved blocks uid: 0 (user root)
    Reserved blocks gid: 0 (group root)
    First inode: 11
    Inode size: 256
    Required extra isize: 28
    Desired extra isize: 28
    Journal inode: 8
    First orphan inode: 262152
    Default directory hash: half_md4
    Directory Hash Seed: 08e3f2db-7bb4-41fc-9364-9a9f637951ff
    Journal backup: inode blocks
    Journal features: journal_incompat_revoke
    Journal size: 128M
    Journal length: 32768
    Journal sequence: 0x0007df4e
    Journal start: 1
    dumpe2fs -h /dev/sda4
    dumpe2fs 1.41.14 (22-Dec-2010)
    Filesystem volume name: <none>
    Last mounted on: <not available>
    Filesystem UUID: ff7030b8-890a-4673-bd1c-f502ca5efb2b
    Filesystem magic number: 0xEF53
    Filesystem revision #: 1 (dynamic)
    Filesystem features: has_journal ext_attr resize_inode dir_index filetype needs_recovery sparse_super large_file
    Filesystem flags: signed_directory_hash
    Default mount options: (none)
    Filesystem state: clean
    Errors behavior: Continue
    Filesystem OS type: Linux
    Inode count: 27303936
    Block count: 109201837
    Reserved block count: 5460091
    Free blocks: 80860937
    Free inodes: 27074933
    First block: 0
    Block size: 4096
    Fragment size: 4096
    Reserved GDT blocks: 997
    Blocks per group: 32768
    Fragments per group: 32768
    Inodes per group: 8192
    Inode blocks per group: 512
    Filesystem created: Fri Apr 30 20:36:07 2010
    Last mount time: Mon Aug 1 13:58:14 2011
    Last write time: Mon Aug 1 13:58:14 2011
    Mount count: 8
    Maximum mount count: 25
    Last checked: Mon Aug 1 07:23:25 2011
    Check interval: 15552000 (6 months)
    Next check after: Sat Jan 28 07:23:25 2012
    Reserved blocks uid: 0 (user root)
    Reserved blocks gid: 0 (group root)
    First inode: 11
    Inode size: 256
    Required extra isize: 28
    Desired extra isize: 28
    Journal inode: 8
    Default directory hash: half_md4
    Directory Hash Seed: e8dbb219-f7fe-4878-96b6-9137361ce1e2
    Journal backup: inode blocks
    Journal features: journal_incompat_revoke
    Journal size: 128M
    Journal length: 32768
    Journal sequence: 0x0011b560
    Journal start: 1
    Last edited by uxrs75 (2011-08-02 06:19:11)

  • Linux on my X220T (and why it failed)

    I’m sorry but this is going to be a long post but I have seen so many posts out there from people in my position - making an attempt to migrate from Windows to Linux - that I felt compelled to share my experiences. This is not a Linux bashing post either. Like UFOs, I want to believe. I just haven’t seen the light yet so if there are any Linux evangelists out there who have got Linux working on their X220T then I would *love* to hear from you
    Background and reasons for change:
    I am not your ordinary Windows user. I work in IT and I’ve been working with Windows since the days of v2 (yes I’m that old) running on Dos. I’m comfortable with it. Because of my age I’m also comfortable with the command line. I’ve worked with Xenix (a variant of the original Unix) and have a grasp of the fundamentals. Now I’m all grown up and an IT consultant I wanted to ‘round out’ my understanding of my business by getting to grips with Linux in order to write code. I understand it’s very different to the nice little bubble of Visual Studio where everything happens around you. I’ve yet to find out Sure I can produce a virtual machine and learn in there but wanted to immerse myself in it all so decided to convert my X220T. This little beauty is not my main work computer so I could sacrifice the contents. If your X220T is your only machine and you need it for serious stuff, think carefully before going ahead.
    Starting point:
    My X220T was pretty much out-of-the-box Windows 7. It was working fine, but had the odd glitch. Wouldn’t hibernate properly (although it did before an ‘upgrade’ screwed it up) and the mouse kept losing its settings despite following all the advice, upgrading, hacking etc to fix it. I also had Windows 8 preview on the ‘Q’ drive and was liking that but of course it’s not really ready to go yet.
    My choice was Linux Mint with the KDE desktop. Did a bit of digging. Seemed to do the job. So I took several backups, trashed the drive and installed it.
    My previous experiences with Linux have always been a battle to get the OS to see certain devices. Wireless cards never used to work. Peripherals failing. Not resuming from hibernate. That kind of thing. This time it was flawless. It simply installed. Everything appeared to work! Fantastic!! Of course it wasn’t all there yet. But because my internet access was up and running (had always been an issue before) I was a happy man.
    Then three things happened almost simultaneously.
    I wanted to read an eBook and the screen wouldn’t rotate
    I couldn’t log on using my fingerprint reader
    My fan wouldn’t shut up
    So thought I would tackle the first issue. KDE supports a tool that pops a nice little icon on to your task bar to allow screen rotation. Didn’t work. What it did do was install the Wacom drivers to manage the touch screen and it would re-orientate the mouse ‘as if’ the screen had rotated, but the display itself was in portrait mode. So spent two evenings after work working out how to make this happen. In the end I wrote two shell scripts to rotate the screen AND to set the Wacom drivers to orientate the mouse and stylus properly. Job done! Felt pleased with myself. I was cross that the KDE interface screen button thingy didn’t work properly but that’s life. I had learned something. Two dos-like icons on my task bar flipped my screen (albeit slowly) from landscape to portrait and back again.
    Meanwhile, I’m sitting in my conservatory (no power) and watching my battery disappear in about two hours. Under windows, my usage pattern gave me at least five hours before a re-charge. And that pesky fan didn’t run once! Peace!! But not with Linux. It was annoying so thought I would tackle that next. Everyone uses their machine differently so since power consumption is quite subjective I thought if I fixed this I could move on to other things and then ‘suddenly notice’ that my battery is still powering my baby after four or five hours.
    After research and digging into a cpu frequency daemon (background process) I realised that this was the wrong line of attack. That took another two evenings of work. The Linux Mint kernel doesn’t support this. More research suggested that this was an old/different methodology and the approach was to use cpu ‘governers’ to control cpu frequency switching. The governers have names like ‘ondemand’ and ‘conservative’ and as you might guess, the conservative one holds the processor speed down to reduce power consumption. You may assume dear reader that I had done all the other stuff. Turning off bluetooth only happened in software and I gave up before researching that. It may be possible to turn it off in hardware via the operating system but didn’t get that far. Screen brightness, wireless etc. Typically when I read a book I flick the hardware radio-off switch on the side which of course turns off bluetooth and wireless, so they were taken out of the equation in terms of power consumption.
    After another evening of digging I managed to discover how to instruct the machine to use the ‘conservative’ governor. By now I’m starting to get a bit fed up. My philosophy was partly to learn what it was like to live in the world of Linux, but mostly to get to grips with the C++ compilers, possibly mono (A windows-like development environment) and Apache (system for hosting web sites) but hadn’t got beyond the foibles of the operating system. Finally got the conservative governor in place, rotated my screen (still working!) and settled down to a good read (purely for testing purposes of course
    Within five minutes, on the came the pesky fan. Battery gone in about three hours. This had me seriously pissed off by now. But still wanted to battle on. Thought I would tackle the fingerprint reader next. Found a driver but it didn’t work. I could register a fingerprint but when it came to save the results it died. Even as the godlike super user it failed.
    Then I found another gui based app and that one worked. Well, it worked nicely in-system. Anything that needed elevated privileges it would work for. I just couldn’t use it to log in. When the laptop was in tablet mode I couldn’t authenticate with my fingerprint reader and there was no on-screen keyboard to use as an alternative.
    And it was all these little things that eventually drove me screaming back towards Windows. I’m now running Windows 8 CP as my main desktop. It’s incomplete and has its own set of foibles, but by installing some of the drivers that Lenovo supply for Windows 7 it is perfectly usable.
    The screen rotates out of the box
    The buttons along the bottom of the screen work to rotate the screen (never did get that working in Linux but it was on my list
    Power consumption is back to being pretty good for a laptop rather than just average
    I can turn my bluetooth off at the hardware level but leave my wireless running so that I can browse the internet without hammering my battery too much (using the Lenovo on-screen utility form Windows7)
    I can logon with my fingerprint reader and when it fails (I get it wrong three times) I can revert to an on-screen keyboard to get me out of trouble without having to switch to desktop mode to do it.
    I know they are small things but they are now what I am used to and what I expect from my operating system so why should I do without them?
    My feeling as I sit here writing is that Linux is great. Don’t get me wrong here. I still love it and intend to explore further, but unlike Windows there is a learning curve that you HAVE to climb. You have no choice. When I come home at the end of the day, sure I want to play with my little Lenovo and have some fun. But then I want to relax. Do a bit of surfing, read my ebooks and generally do stuff that the operating system is intended to support. Instead the operating system got in the way of my user experience rather than supporting my user experience. The problem for me is that wihlst I can produce a Linux machine in vmWare or VirtualBox, the driver woes I’ve just described are hidden from you because those virtual worlds either abstract the problem away or don’t port-over the hardware from the host that you want to explore the problems with. The only solution is to buy another X220T to play with and that’s not worth it for me.
    I also think that my relatively large understanding of Windows frustrates my experience of because I am now a novice with the computer which I’m definitely not used to and that of course skews my perception.
    So if there are any Linux superheroes out there who have solved all the above issues and can lead me into the glorious sunshine of developing in the wonderful world of Linux then please talk to me. And for the rest of you guys in my position for whom this has struck a chord, if you want to play, I’m sure the results are worth it but prepare to be frustrated!!

    Hi all. I must be in league with the devil as my lucky number is 13. When I saw Galloping Gerbil or Raring Rhinocerous or whatever the **bleep** thing is called I also saw v13.04 and thought that the time had come to go again!
    So it's about a year on now. Two important things have happened. The first is that my trusty old X220T is now no longer my primary machine so I can afford to lose it to experimentation for a while. The second is that the huge behemoth that is Linux is rolling over the bugs and niggles that sent me screaming back to Windows all those months ago.
    So I've tried again with Raring Ringtail v13.04 and right now I feel as if I've come home! It's still not right but it's pretty close! More importantly, I fee that I'm no longer in the minority in wanting to get this to work right. There is this big push out there towards touch screen so people are spending time on this and wanting their software to be touch screen friendly so it is!
    Before I go on, I was rather shocked when I did my pre-13.040-install research to find this post top of the google list on linux on x220! I'm guessing that my thoughts must parallel a lot of other people thinking about making the jump. So to that end, here's some thinking.
    13.04 is close. Really close to being a very serious competitor to Windows. My view is that Linux is about there now. The X220T is a complex beast to support. it has touch, pen, fingerprint readers, rotating screens etc. And it all works pretty well. I can do a sudo apt-get install to make the fingerprint reader work. And it DOES work. Reliably. I still have issues rotating the screen but I've learned enough now to knock up a simple bash script that will do it for me. AND (this is where the Linux philosophy works) I have written the script to suit me. I like to hold the battery unit in my left hand and hold my laptop in portrait mode to read books/browse the internet. Then switch to normal orientation to type emails etc. The script only toggles between normal and anti-clockwise and back again. Works for me.
    The issue with Linux was more that it was a philosophy than an operating system. You don't just "use" it. You immerse yourself in it. That made it geeky and non mainstream. You can make it sit up and do stuff that suited you exactly if you were prepared to put the time in. The issue was that until now it didn't do the basics reliably enough to suit everyone. I used to read a lot of stories about sons/friends putting Linux on to Mums/Dads/Grans laptop and it working beautifully. Linux is very very good at this. It just works. But getting it there was a right pain unless you were lucky. Now however that out-of-the-box functionality is really really close. To the point at which Tracey from Essex (forgive me Tracey!) can stick the CD in and expect the same functionality from Linux that she could get from Windows without having to sweet talk that geeky bloke that she knows has a crush on her to come in and sort it all out
    Once you get past that bit then you end up in this little wonderful world. Without too much effort courtesy of all those hard-working ordinary people out there, I have a machine that will do most of what I want without tweaks and pokes that take days to research. Now I can browse, read my books, play the odd game and "ignore" the operating system until such times as I choose to tackle the odd tweak. On my relatively small screen for example I want hide the Unity launch bar thingy. However if I do this I can't get it back via the touch interface. Enter Ginn! I have yet to play with tihs but I can configure multi-touch gestures to "do stuff" like making the launcher appear with two finger gestures (!) and that little nugget of configuration pleasure is waiting in the wings for when I get bored reading the news or playing silly games. My operating system has now become a toy, a tool and a learning centre. I can now pursue my long term dream (okay I have modest dreams!) of being able to develop AJAX based web sites using WCF in Mono running under Apache. That means I have all the fun of learning how to use Apache, and working out how to make WCF code in Mono. These things are easy for me under Windows and IIS but how you do it in Linux is a new and exciting challenge! Yes I truly am that boring!
    I wish I could change the title of my original post because Linux is coming of age. Windows had better watch out.

  • Vpn configuration problems 2621xm and vpn client

    hello,
    I'm trying to configure my home cisco 2621xm to accept vpn connections. I've used many cisco pdf documents and they all same almost the same so I've done my configuration using these documents.
    now I just can't get past this error message I'm getting and I have no idea why this is happening.
    any ideas to help me get past this step, I'm really stuck here.
    also, I've tried vpn client version 5 and 4.8
    cisco ios version is:
    Cisco IOS Software, C2600 Software (C2600-ADVIPSERVICESK9-M), Version 12.4(16), RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2007 by Cisco Systems, Inc.
    Compiled Wed 20-Jun-07 05:48 by prod_rel_team
    ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)
    vision-router-01 uptime is 2 hours, 53 minutes
    System returned to ROM by power-on
    System image file is "flash:c2600-advipservicesk9-mz.124-16.bin"
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Cisco 2621XM (MPC860P) processor (revision 1.0) with 127308K/3764K bytes of memory.
    Processor board ID JAD06350FM7
    M860 processor: part number 5, mask 2
    2 FastEthernet interfaces
    32K bytes of NVRAM.
    49152K bytes of processor board System flash (Read/Write)
    Configuration register is 0x2102
    here is my the config that's vpn related
    aaa authentication login MYTAC group tacacs+ local enable
    aaa authorization network GROUPAUTHOR local
    username someuser password 0 somepassword
    crypto isakmp policy 5
    encr aes 256
    authentication pre-share
    group 2
    crypto isakmp keepalive 10 periodic
    crypto isakmp client configuration group VTELVPN
    key cisco123
    dns 192.168.10.5
    domain xyz.com
    pool VTELVPNPOOL
    crypto ipsec transform-set VTELSET1 esp-aes esp-sha-hmac
    crypto dynamic-map VTELDYNAMAP 10
    set transform-set VTELSET1
    set identity thisrouter-01
    reverse-route
    crypto map VTELCLIENTMAP client authentication list MYTAC
    crypto map VTELCLIENTMAP isakmp authorization list GROUPAUTOHOR
    crypto map VTELCLIENTMAP client configuration address respond
    crypto map VTELCLIENTMAP 10 ipsec-isakmp dynamic VTELDYNAMAP
    interface Dialer1
    ip address negotiated
    ip nat outside
    ip virtual-reassembly
    encapsulation ppp
    dialer pool 1
    no cdp enable
    ppp chap hostname xxxxxx
    ppp chap password 7 hahahahohoho
    ppp pap sent-username xxxxxx password 7 hahahahohoho
    crypto map VTELCLIENTMAP
    ip local pool VTELVPNPOOL 192.168.6.3 192.168.6.254

    Hi
    Can you try assigning a static ip to the dialer interface and try checking out the vpn connectivity ?
    regds

Maybe you are looking for

  • Xcelsius 4.5 issue using QAAWS and Tomcat

    Hello, We have this issue where the dashboards do not display any data when opened. They are set to refresh on open. Only after the Tomcat webserver is restarted, then do they display data. But this keeps happenning often and intermitently. We do not

  • Macbook Pro + Adapter/Converter

    Hi, I'm in France and am trying to charge my macbook Pro. I have an adaptor and a converter. On the converter, there is an option to change it to 50W and also 1800W. Which should I use? Or should I only use an adapter? Thank you!

  • How can I prevent copy/pasting of text from my PDF?

    I'm having trouble creating PDF security that DOES NOT allow copying of text. It seems I follow the security steps yet still am able to copy/paste.

  • X58 Pro motherboard will not display video

    Just put together a computer and the video wont work. Here's the part list:     Intel Core i7 920 Nehalem 2.66GHz LGA 1366 130W Quad-Core Processor Model BX80601920     MSI X58 Pro LGA 1366 Intel X58 ATX Intel Motherboard     Western Digital Caviar R

  • Using Pages to edit existing HTML??

    How useful/user-friendly is PAGES for this: I have some pre-existing Web pages, created for me by someone using Dreamweaver & GoLive. All I want to do is edit the text and images, maybe mess with the tables? Possible?? Or more of a hassle than it's w