Sensor filtering

Hi,
I am using Interface force sensor (load cell), Labview 8, and E6062 DAQ card. The data from the sensor is noisy and I need to filter it. The bandwidth of my signal conditioner is 60Hz, and when I send my data in the labview from the DAQ assist to Filter (low pass filter, with butterworth topolgy) I get an error, althought I assign the cutoff frequency 0.5 sample frequency. Any suggestion?
Thanks, Azadeh
Attachments:
interface sensor.vi ‏176 KB

Hello,
I won't be able to run your code immediately because you use the DAQ assistant which makes it hardware dependent - however if you can post the error message I will try to help you further. Also, you should definitely check out the shipping examples in the example finder, as you'll find filtering examples there to serve as an example for you!
Best Regards,
JLS
Best,
JLS
Sixclear

Similar Messages

1DX "Caution 02" Warnigns AND Filthy Sensor

For those that have the Canon 1DX, Have any of you seen the 'Caution 02" (Which is to warn about a suppsoed unexpected drop in battery power)? You'll find any system warnigns under the 1: 'System Status Display' choice in the 4'th section of the yellow wrench in the menu - If you haven't viewed these before, you'll need to click on the 'system status display' - then click info, then I beleive click info again when you select one of the warnigns cautions (If you have any listed there?)
I've searched the itnernet but there is VERY little info on this issue- I've contacted canon services via email- but haven';t hearde back yet, and they'll probably want me to send it in to them isntead of just explaining what the problem might be-
I have updated firmware to latest version- but hte problem existed even before the uopdate- I've only had abotu 4 of these 'caution 02' warnings
On another note- did anyoen notice an unusually filthy sensor filter when viewign photos of sky with small aperatures (abotu f16-22 or so?) My sensor filter was absolutely filthy on a suppsoedly brand new camera, (Which was bought from Amazon.com ltd liscenced which I can imagine anyone messign with the camera before selling it since amazon's reputation is on the line- it could happen i suppose, but it would seem unlikely- I read soemwhere that the canon 6d's are arrivign with, or get filthy sensor filter shortly after firing a few shots- soem thinking perhaps a lubricant is causing dirty sensors? The grunge and dust I saw ion soem moon shots at F22 in the sky was shocking! In 3 years of usign my canon 7d with many many lens changes i nthe field, I have never seen dust dirt and grime liek htis on my sensor- but this brand new 1DX was just absolutely filthy- soem of it was dust- and fell off with compressed air, but most of it is either lubricant or really stuck on dust- I suspect it's lubricant htough as it looks morel ike grime smears than dustr particles when viewed enlarged
Have a look at this fred miranda thread to see what I'm talking about in regards to the filthy sensor filter- we're not talking about just usualy dust here- as you'll see- My sensor filter is just as filthy as the one in the link, and others in photocamel who own the 1DX have shared that their sensor filters are also filthy when they bought it new or shortly after- the amount of spots and grunge is very unusually high. I've heard from several new 1DX owners that in their years of ownign and using cameras and changing lenses etc, they have never seen the amount of filth and grunge o ntheir sensors as they've seen o ntheir new 1DX's sensors- and that too has been my experience- there seems to be an issue with the 1DX's sensor filter or soem lubricant i nthe camera splattering all over trhe filter or something- If anyone here who owns the 1DX has these two issues (The warning/caution 02) and the dirty sensor filter despite camera being new, please post your experience here- thanks
http://www.fredmiranda.com/forum/topic/1153198/0

Nazareth, Thanks for posting. I see that you posted in canonrumor site as well. Members there are very knowledgeable and helpful .
Here's my take . . .
Comparing the picture you posted contra the picture posted by John Mulgrew @ the other forum site, I'd say that yours are way different in the following:
1. lubricant / spots - is(are) what you see at the other post (not yours). On that picture, though not 100% sure, it looks like the dirt was from a compressed air blown directly onto the chamber at the time of cleaning. Somehow, it was as though the compressed air cartridge was almost empty and spread the debris all thru the nooks of the camera.
                In your case, if you have other pictures to examine, check if the [dark] spots are in the same location - picture-by-picture. If they are, then it really might be in the sensor. If not, then it is not in the sensor.
2. smears – I have seen this from what I did long time ago with my F1 camera. Luckily, I have cleaned the mirror, the focusing screen and the bottom of the pentaprism that faces the mirror.  If the smear was from the camera lens, you will actually notice a hazy or blurry view when looking at the VF. It's kinda stubborn to clean this with just a swab hence, you will need a lens cleaning paper or cloth and wipe/clean it purposely.  Breath onto the lens to see where else needs further cleaning.
                In your case, the smear was as though it was a result of an attempt to clean the sensor itself by a cotton swab that has been dubbed with a liquid solution, then, was wiped or left to dry.
If you are adventureous, and not afraid to further ruin your 1DX, and this is at your own risk: set the camera to Bulb, and while holding the shutter, clean the sensor lightly until you are satisfied with the result. I am not going to recommend what to use. Search the internet for the best and safest tool/application to use.
Better yet, bring and have your 1DX serviced by the nearest Canon service center.
Good Luck!

Acqusitioning signal from sonar sensor and filtering

Hi
I am using sonar sensor to caclulate the distance and velocity of my robot vehicle. If I look at signal in Ocope for distance measurement I have two signal(see attachment) one shorter pulse width which is command from host controller to sonar sensor to emit burst this shorter pulse is like 2 micro second and then when the echo returns I have larger pulse this pulse width depends upon the ditabce from the object--larger pulse width is from 115 microsecond to 18.5 millisec. Since I want to calculate the velocity of my robot I need only larger pulse width and if I take difference of two consecutive larger pulses it will give me the velocity.
but in present case I get pulse width of two consecutive as one larger and one smaller every time. My question is how can I filter or reject shorter pulse from my calculation.
see my attachments for Oscope which is exactly what the signal should look like. But the signal which I am capturing in Vi is all edgy how can I take good signal in Vi and how can I get pulse width for only echo that I receive in sonar and not shorter pulse in order to calculate further my velocity and stuff.
thanks
Attachments:
labcapture.zip ‏432 KB

Hi
I captured the signal in Vi that came with NI examples cont acq & graph voltage-int clk.vi . I mentioned earlier since sonar sensor emits small ping and then larger pulse tells you about the distance larger the pulse farther the distance ideally speaking I must see one small pulse and one larger pulse but I can see the larger pulse but instead of small I am looking at some noise or distortion. so pattern I am getting is large pulse and then distortion , larger pulse then distortion and so on. If I am able to remove that noise the larger pulse width is my distance which I want further for my calculation. Look at the attachments.
What do you suggest?
My Vi was same as I posted only I have attached graphic indicator more in the Vi.
Due to this recurrent distortion I get some wrong constant data and number alternatively which makest my delta X i.e dstance same
for example distortion every times give me 0.17 distance so if disance is like 20 cm my display will work like 20--0.17---21---0.17--22---0.17 so if I take deltax that is difference between twoconsecutive distance change which should be like difference between 22-21=1 it actually becomes 22-0.17=20.93 and next time it calculates 0.17-23=-22.83 which becomes wrong.
If I remove this distortion or tell my Vi not to read below certain votages--- how can I do that.
Since you mentioned increase the thresh hold how we do that and how to remove this distortion just see my captures of the signal.
Thanks
Attachments:
signal1.zip ‏110 KB

Customizing sensor from filtering false alarms.

hi,
How can i filter the false alarms coming out from my dhcp server and dns servers. Iam getting a lot of frag overlap signature alarms.Can anyone help me to avoid these false alarms ? Please help.

Hi,
You cna configure event action filter for those host you do not want the sensor to do any further action for the specific signatures.
This is described here : http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmevtrul.htm#wp1063299
I hope this helps you.

Filtering P2P programs by IPS sensor

Hi,
I tried to stop P2P programs by enabling all signatures of P2P. some programs were stopped like Kaza but may other programs like lime-wire and others were still working. I tried to modify the signatures to add ports of regex to it but I couldn't find any information about this programs. can any one help me with that issue.
Thanks.

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.
show run all regex (for the ASA)
Regards
Farrukh

Problem while filtering time

Hey ppl,
I''m working in a report and I need to do some time filtering to keep in the graph only the records of the current day. Everything workis fine while on edit mode in the Active Studio, however when I switch to the view mode or to the Active Viewer I keep getting this exception:
Exception Message An error has occurred in the ADC storage system. ORA-00904: "33a5c05c-667a-4d67-9463-ab56ac"."_tipoDeDocumento": invalid identifier
Stack Trace Server stack trace: at Oracle.BAM.ActiveDataCache.Kernel.Server.DataStoreServer.OpenViewset(Modifier modifier, ViewsetOptions options, Int32 iTransactionID) at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(MethodBase mb, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [0]: at Oracle.BAM.ReportCache.Server.ReportCacheServer.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(MethodBase mb, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [1]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Oracle.BAM.Middleware.ReportCache.IReportCache.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at Oracle.BAM.Middleware.ReportCache.RemoteReportCache.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at Oracle.BAM.ReportServer.DataManager.OpenViewSet(String strModifier, ViewSetBuilderBase oViewSetBuilder, String strUserName) at Oracle.BAM.ReportServer.ViewSet.GetRecords(XmlDocument oProperties, String strUserName, ViewSetBuilderBase oViewSetBuilder, Int32 iBrowserTimezoneOffset) at Oracle.BAM.ReportServer.Chart.RenderChart(String strXmlModifier, String strXmlProperties, String strActive, String strClientWidth, String strClientHeight, String strBrowserTimezoneOffset, Boolean bEMail, String strUserName) ...
Debugging Information An error has occurred in the ADC storage system. ORA-00904: "33a5c05c-667a-4d67-9463-ab56ac"."_tipoDeDocumento": invalid identifier [ErrorSource="ActiveDataCache", ErrorID="ADCStorageException"] Debugging information: Oracle.BAM.ActiveDataCache.Common.Exceptions.CacheException: An error has occurred in the ADC storage system. ORA-00904: "33a5c05c-667a-4d67-9463-ab56ac"."_tipoDeDocumento": invalid identifier Server stack trace: at Oracle.BAM.ActiveDataCache.Kernel.Server.DataStoreServer.OpenViewset(Modifier modifier, ViewsetOptions options, Int32 iTransactionID) at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(MethodBase mb, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [0]: at Oracle.BAM.ReportCache.Server.ReportCacheServer.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(MethodBase mb, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [1]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Oracle.BAM.Middleware.ReportCache.IReportCache.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at Oracle.BAM.Middleware.ReportCache.RemoteReportCache.OpenViewSet(ViewSetBuilderBase oViewSetBuilder) at Oracle.BAM.ReportServer.DataManager.OpenViewSet(String strModifier, ViewSetBuilderBase oViewSetBuilder, String strUserName) at Oracle.BAM.ReportServer.ViewSet.GetRecords(XmlDocument oProperties, String strUserName, ViewSetBuilderBase oViewSetBuilder, Int32 iBrowserTimezoneOffset) at Oracle.BAM.ReportServer.Chart.RenderChart(String strXmlModifier, String strXmlProperties, String strActive, String strClientWidth, String strClientHeight, String strBrowserTimezoneOffset, Boolean bEMail, String strUserName) ...
Assembly ReportServer
State Oracle.BAM.ReportServer.ViewStreamer
Event GetViewsInOneRoundTrip
ViewIDsXml <ViewIDsXml><ViewID id='view1'/></ViewIDsXml>
view1_ReportType tiled
view1_DataSet McHistorial_DO
view1_ViewsetId NOT_INITIALIZED
view1_ViewId view1
view1_Properties <Properties ContentType="LineChart" datasetId="_Mc_Historial_DO"><Title display="true" color="#ffffff" font-family="Tahoma" font-weight="Bold" font-size="11" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false" background-color="#7B97C0" text-align="left"><Text bUseViewName="true"></Text></Title><ChartTitle display="false" font-family="tahoma" font-weight="Bold" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><DataAxis auto="true" min="" max="" major="" minor="" font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><NonDataAxis font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false" bAllowDiagonal="true" bShowGroupLabels="true"/><Legend display="false" font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false" location="bottom"/><ColorPalette selected="1"/><ActiveData showColor="true" newColor="#FFE299" newTimeSeconds="1000"/><Groups bynumber="false"/><SeriesValues font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><ErrorMessage font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><HorizontalAxisLabel showlabel="false" labelpos="onside" font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><VerticalAxisLabel showlabel="false" labelpos="onside" font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><Target bUseTarget="false" fTargetValue="" bShowValue="true" strTargetLabel="" eDashStyle="solid" strTargetColor="" iDashThickness="1" font-family="tahoma" font-size="11" color="#000000" underline="false" overline="false" line-through="false" capitalize="false" uppercase="false" lowercase="false"/><Empty display="true" text="No Values"/><ThreeDOptions fBackDepth="25"/><Body background-color="transparent"><Border color="#000000" width="1px" style="solid"/></Body><Series datasetField="_EstadoC" dataType="INTEGER" bShowValue="true" bShowPercent="false" bShowSeriesName="false" bShowAggFunction="true" ModifierID="0" aggregate="SUM" include="true" chartType="LineChart" order="0"/><Series datasetField="_EstadoH" dataType="INTEGER" bShowValue="true" bShowPercent="false" bShowSeriesName="false" bShowAggFunction="true" ModifierID="0" aggregate="SUM" include="true" chartType="LineChart" order="1"/><Series datasetField="_EstadoI" dataType="INTEGER" bShowValue="true" bShowPercent="false" bShowSeriesName="false" bShowAggFunction="true" ModifierID="0" aggregate="SUM" include="true" chartType="LineChart" order="2"/><Series datasetField="_EstadoL" dataType="INTEGER" bShowValue="true" bShowPercent="false" bShowSeriesName="false" bShowAggFunction="true" ModifierID="0" aggregate="SUM" include="true" chartType="LineChart" order="3"/><GroupLevel datasetField="_Fecha" dataType="DATETIME" ModifierID="0" eTimeUnit="HOUR" iQuantity="1" isTimeline="true" zeroFill="true" fieldID="HOUR__Fecha"/></Properties> ...
view1_ModifierXml <Modifier dataset="_Mc_Historial_DO" id="0"><FieldRefs></FieldRefs><Filter><Branch type="ALL"><Entry type="EQ"><Node type="COLUMN">tipoDeDocumento</Node><Node type="STRING">TSF</Node></Entry><Entry type="PeriodicNowCurrent"><Node type="COLUMN">Fecha</Node><Node type="PeriodicNow" period="DAY" offset="0" bActive="false"></Node></Entry></Branch></Filter><Groups><Group level="0"/><Group level="1" datasetField="_Fecha" iQuantity="1" eTimeUnit="HOUR" isTimeline="true" zeroFill="true"><Aggregate operandDatasetField="_EstadoC" operation="SUM"/><Aggregate operandDatasetField="_EstadoH" operation="SUM"/><Aggregate operandDatasetField="_EstadoI" operation="SUM"/><Aggregate operandDatasetField="_EstadoL" operation="SUM"/></Group></Groups></Modifier> ...
view1_InEditor false
view1_IsInViewMode true
view1_ActiveDataDelay 0
view1_TimezoneOffset 300
view1_ActionButtons <ActionButtons/>
view1_clientWidth 1131
view1_clientHeight 663
view1_Assembly ReportServer
view1_State Oracle.BAM.ReportServer.LineChart
Hope someone can help me with this,
Thanks in advance:
Alex

Hi,
I have the same problem. The report works without the time filter (within a time interval of 1 week). In my case, I'm using an external data source (MySQL database table) to feed the BAM data object. But the time filter works with BAM data coming from sensors in other reports. I'm using BAM 10.1.3.1.
Is it a bug? Is there a workaround? Any help would be greatly appreciated.
amir

Java with sensor networks

Hi,
I have recently been given a task to create an interface that should allow simple command input in the CSLU toolkit (http://cslu.cse.ogi.edu/toolkit/) to be interpreted to invoke applications to run on a wireless sensor network base node. I have a TinyOS(open source operating system for sensor networks) application that allow me to program the nodes wireless with various program images. ( TinyOS: Deluge Network Programming)
The problem I have and that I need help with is that I have to connect the CSLU with the sensor network. Data input from CLSU to the node and the opposite way around sensor data out from the node to be taken in, buffered (may have to be filtered in a later stage) and displayed for the user in a graphical way. I have an application that can dislpay the data for me but again it has to be connected to the java interface.
I would really appreciate any help! Suggestions on how to set this up, maybe create a java rapper around the TinyOS application that controls the nodes or? Any ideas, please don't hesitate to mail me
Thanx
Marie

CeciNEstPasUnProgrammeur wrote:
JavaJaquar wrote:
do u knw the codingparts..
this.setAttribute(PLATINUM_STAR);
this.setAttribute(FEATURED_DEVELOPER);
this.setAttribute(COOL_FRENCHY_WITH_MOTORCYCLE);
Fame fame = this.getGenerateFameFromAttributes();
Chicks chickSet = null;
try {
chickSet = fame.acquireChicks();
} catch(NullPointerException npe) {
System.out.println("Oh fuque off.");
this.attachGroupies(chickSet); // works with null, too
this.haveFun();
Don't forget to work your RubberChickenVoodooMagic. ;-)

How do PS CS3 Noise Reduction Filters compare with dedicated third-party plug-ins?

Am I missing something by not installing a dedicated Noise Reduction application into my PS CS3? Can Neat Image, Noise Ninja, Noiseware Pro, etc. do something that the PS CS3 Noise Filters can't do? Do these third-party aplications do it better?
Since I like flashless photography, and I generally carry with me small-sensor compacts when I travel, I'm frequently confronted with the problem of digital noise. I've always wondered how the third-party noise reduction applications perform in comparison with the Photoshop Noise Filters. I hope someone in this Forum has been able to acquire direct experience on this topic and will be kind enough to share this experience with us.
Kindest Regards,
Conrad

Conrad,
ACR 4.3 has better NR (noise reduction) than previous versions and can handle NR in most normal situations. However, available light photography with a small pixel sensor may require more NR and the specialized plugins such as Noise Ninja, NeatImage, and NoiseWare Pro can do a better job. I have all three and they do an excellent job, but I currently use NoiseWare most of the time.
Here is a demonstration of NoiseWare vs ACR NR, using 100% crops of an image taken with the Nikon D200, 1/320 sec at f/2.8. The image is reasonably sharp at normal viewing conditions, but has quite a lot of luminance noise. It was rendered with ACR and the settings were exposure +0.85, brightness +60. One thing you learn early in this type of shooting is to expose to the right to reduce noise, but this may conflict with stopping action and reducing camera shake. More exposure would have helped this image, and one should try to avoid exposures requiring this amount of positive exposure adjustment.
The results are shown below, followed by some discussion. Other comments are welcome. Color noise is not prominent in this image and I left color NR at its default.
ACR, No sharpening, no NR
ACR, Luminance NR 53, no sharpening
ACR, No NR, No sharpening, NoiseWare default, no sharpening
Noise reduction and sharpening are antagonistic processes. It is important that NR is applied before sharpening--you don't want to sharpen noise. Following NR there is an inevitable loss of detail, and some sharpening is necessary to restore the detail, but this also brings back the noise. One can use masks and blend if sliders in Photoshop in both NR and sharpening to mitigate some of these effects, and Bruce Fraser discusses the details in his excellent book on sharpening.
If you use an add on such as NoiseWare, you should turn off luminance sharpening in ACR. In doing so, you lose all those nifty sharpening features that have recently been added to ACR. I leave color NR at the default. It has a minimal effect on detail.
In adjusting the NR in ACR at 100% viewing, I estimated that a luminance setting of +53 was optimal. Beyond that, blotchy artifacts appear in the image.
For NoiseWarePro, I used the default settings with no sharpening. The NR effect is dramatic, but detail is lost and some sharpening is needed. This could be applied in NoiseWare or in Photoshop, perhaps with a plugin such as PhotoKit Sharpener. Personally, I have found that PK does not work well with this type of image because it bring back noise and produces artifacts.
In all of these examples, sharpening is needed following the NR. One could try to use surface masks to keep sharpening in Photoshop with the unsharp mask away from the edges. However, I find it is difficult to get a good surface mask, and I don't take the trouble.
For now, I use the sharpening built into NoiseWare. I don't know how it works internally, but it does have a slider for detail protection, and you can play with this to get the best result. It would be best to have the robust NR of the add ons built into ACR much like NoiseNinja is built into Bibble Pro. However, this is an ACR forum and I would expect that ACR is the preferred raw converter of those who frequent this forum.
After expending this much effort on the post, I hope to get some helpful feedback.

ISE and CDP device sensor

Hi, all.
Anyone can explain to me, how the CDP device sensor probe works with ISE ???
What I am trying to do, is to identify different Cisco Wireless Access Point models (i.e. LAP 1142) with ISE.
Since the APs do speak CDP (I can see the AP devices on the switch), this should be possible with the CDP device sensor on the switch, shouldn't it ....
I have done the following so far:
Configured the switch to talk to ISE via radius accounting:
aaa group server radius SERVERGROUP_radius_accounting
     server name ISE02
radius server ISE02
      address ipv4 [ISE02 ip address] auth-port 1645 acct-port 1646
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute nas-port-id include remote-id
radius-server dead-criteria time 30 tries 3
radius-server retry method reorder
radius-server retransmit 2
radius-server timeout 2
radius-server deadtime 1
radius-server key 7 [ISE02 radius key]
radius-server vsa send cisco-nas-port
radius-server vsa send accounting
radius-server vsa send authentication
aaa accounting dot1x default start-stop group SERVERGROUP_radius_accounting
Configured SNMP traps to be sent to ISE:
snmp-server host [ISE02 ip address] [SNMP RO Community]
authentication mac-move permit
authentication critical recovery delay 120
mac address-table notification change interval 60
mac address-table notification change
mac address-table notification mac-move
interface GigabitEthernet0/1
snmp trap mac-notification change added
snmp trap mac-notification change removed
Configured logging to ISE:
epm logging
logging host [ISE02 ip address] transport udp port 20514
Configured CoA:
aaa server radius dynamic-author
client [ISE02 ip address] server-key 7 [ISE02 radius key]
Configured DHCP snooping, device tracking and device sensors:
ip dhcp snooping vlan xyz
no ip dhcp snooping information option
ip dhcp snooping
ip device tracking
device-sensor filter-list dhcp list DSFL_dhcp
option name domain-name-servers
option name host-name
option name domain-name
option name class-identifier
option name client-identifier
device-sensor filter-list lldp list DSFL_lldp
tlv name system-name
tlv name system-description
tlv name system-capabilities
tlv name management-address
device-sensor filter-list cdp list DSFL_cdp
tlv name device-name
tlv name port-id-type
tlv name capabilities-type
tlv name version-type
tlv name platform-type
tlv name duplex-type
tlv number 34
device-sensor filter-spec dhcp include list DSFL_dhcp
device-sensor filter-spec lldp include list DSFL_lldp
device-sensor filter-spec cdp include list DSFL_cdp
device-sensor notify all-changes
Configured an additional IP helper on the AP vlan pointing to ISE:
interface vlan xyz
ip helper-address [ISE02 ip address]
I have configured new profiling conditions on ISE, which use the cdp attributes:
and used these conditions in a new profiling policy for the 114x AP:
ISE is configured to listen to DHCP, radius, DNS and SNMP traps ....
However, the only thing ISE sees of this AP, is the dhcp probe:
and therefore, the 114x policy has no effect .......
ISE version is the following:
Cisco Application Deployment Engine OS Release: 2.0
ADE-OS Build Version: 2.0.4.018
ADE-OS System Architecture: i386
Copyright (c) 2005-2011 by Cisco Systems, Inc.
All rights reserved.
Hostname: deess01nise02
Version information of installed applications
Cisco Identity Services Engine
Version      : 1.1.2.145
Build Date   : Fri Oct 26 21:10:35 2012
Install Date : Fri Jan 18 07:18:49 2013
Cisco Identity Services Engine Patch
Version      : 2
Install Date : Mon Jan 21 07:36:50 2013
Cisco Identity Services Engine Patch
Version      : 3
Install Date : Mon Jan 21 07:42:11 2013
Version of the switch:
cisco WS-C3560CG-8PC-S (PowerPC) processor (revision C0) with 131072K bytes of memory.
Processor board ID FOC1619Y180
Last reset from power-on
7 Virtual Ethernet interfaces
10 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 58:BF:EA:B9:AC:80
Motherboard assembly number     : 73-13272-06
Power supply part number        : 341-0407-01
Motherboard serial number       : FOC16174ZZ5
Power supply serial number      : LIT16120XR8
Model revision number           : C0
Motherboard revision number     : A0
Model number                    : WS-C3560CG-8PC-S
System serial number            : FOC1619Y180
Top Assembly Part Number        : 800-33676-02
Top Assembly Revision Number    : A0
Version ID                      : V02
CLEI Code Number                : CMMD900ARB
Hardware Board Revision Number : 0x00
Switch Ports Model              SW Version            SW Image
*    1 10    WS-C3560CG-8PC-S   15.0(2)SE             C3560c405ex-UNIVERSALK9-M
What am I missing ??? Should this config make the switch send CDP information about connected devices to the ISE (via radius accounting) ???
How do the device sensors work ???
Rgs
Frank

A switch with sensor capability gathers endpoint information from network devices using protocols such as Cisco Discovery Protocol (CDP), LLDP, and DHCP, subject to statically configured filters, and makes this information available to its registered clients in the context of an access session. An access session represents an endpoint's connection to the network device
Client notifications and accounting messages containing profiling data along with the session events, and other session-related data, such as MAC address and ingress port are generated and sent to the internal and external clients (ISE). By default, for each supported peer protocol, client notifications and accounting events are only generated where an incoming packet includes a TLV that has not previously been received in the context of a given session. You can enable client notifications and accounting events for all TLV changes, where either a new TLV has been received or a previously received TLV has been received with a different value using CLI commands.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/15.0_1_se/device_sensor/guide/sensor_guide.html#wp1112722

Filtering verbose alerts

Greetings all. I'm having some difficulties implementing event filters for a 4215 running 5.0.4.
1. I've globally enabled verbose alerting via the CLI by doing
# service event-action-rules rules0
# overrides produce-verbose-alert
2. I want to filter 'TCP SYN Port Sweep' (3002 0) so it doesn't get logged to the idsEventStore. I've created the following single filter,
# service event-action-rules rules0
# filters insert foo begin
# signature-id 3002
# subsignature-id-range 0-10
# actions-to-remove produce-verbose-alert
# filter-item-status Enabled
# stop-on-match True
I save my changes and when running local scans I see the event still being logged but WITHOUT the triggerPacket info. OK, I edit the rule and change to
# actions-to-remove produce-alert
run scans again and the event appears in the idsEventStore WITH the triggerPacket.
It appears I have to create two identical filter rules, first one with
# actions-to-remove produce-verbose-alert
next one with,
# actions-to-remove produce-alert
in order to completely filter 'TCP SYN Port Sweep' from the idsEventStore and I don't see it. So my question to the group is,
How does one create a single event filter rule to drop verbose alerts? Note: I need to have produce-verbose-alert set globally for troubleshooting.
Thanks in advance for the assistance.

When creating a filter you can specify multiple actions to remove. In IDM you hold down the control key to select each additional action. In IDM I think you put a "|" between each action you want to remove: "produceAlert|produceVerboseAlert".
You will need to use the one filter to remove All actions that produce any kind of alert.
So you need to remove the following actions at a minimum:
produceAlert
produceVerboseAlert
requestSnmpTrap
logAttackerPackets
logVictimPackets
logPairPackets
The last 5 actions above will force an alert to be produced Even if produceAlert has been filtered out. So you have to remove them as well. This is sort of stated in the IDM guide:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids11/idmguide/dmevtrul.htm#wp1062278
But was not made clear in the CLI guide.
If you want to prevent all the actions (including those that don't produce an alert) then enter every action in the actions to remove section.
(NOTE: This is much easier to do in IDM. You select the top action, Hold down Shift key, and select the last action, and all the actions will be selected for removal).
It sounds like you are not interested in the 3002 signature at all. If this is the case, then the simplest thing to do is to just Disable the signature, and not worry about the filters.
The filters shoudl really only be used if you want to filter for specific address ranges, or want to filter out some but not all of the actions.
If you want to filter out All actions for All ip addresses, then just Disable the signature instead.
It will save on internal processing within the sensor.

How can I open sensored sites with Firefox?

in my country"IRAN" some sites are been sensored or filtered so I can not visit theme. "Chrom" browser has adds program named"browsec".Have Firefox browsec too?please help me

hello, apparently it also offers an extension for firefox: https://browsec.com/en/dashboard/main

IPS - Event Action Filters. Which alerts do you supress

Currently we have three IPS sensors consolidating all of our information into MARS and it is working quite well.
The question that I am wondering is if anyone has a suggestion for what is the best practice for tuning signatures at the IPS appliances and what alerts to surpress.
For example, our internal IPS has fired off a signature in regards to network scanning from our Orion NPM server. In the past I would filter out all alerts from this source IP to respective destination networks.
Looking at things again, is it best to just surpress the alert and still log the packets, or just remove all of the alerts, packet logging, etc. because it is a false positive.
Thanks in advance,
Matt

I think everyone has a different opinion about where and how to best tune the "SIM" environment. My 2 cents...
Think about how many places you'd have to make a change in order to effectively tune out what your after.
Reserve your MARS drop rules for more "broad" filtering that would otherwise require changes to multiple devices and device types. For example, you might have a drop rule for all devices that perform network management-like processes. These devices can create lots of firewall accept (and sometimes denies). Lots of netflows. They often trigger various IDS signatures. This is perfect for a MARS drop rule. Some changes may only require a change in one place (i.e. tune one reporting device). Cisco IDS alarms are a common one. You have a specific signatures triggering a single rule in MARS. In this situation, if you have the ability to do it(time,know-how,access to device,etc), do your tuning as close to the reporting device as possible. Research alarms and tune on the sensor itself. Disable irrelevant or false-positive prone signatures. Create event filters where necessary.

Do I need lens filters for the EOS Rebel T3?

Do I need lens filters?

I agree with all the above...
If you shoot a lot of scenics, for example, a Circular Polarizer might be a very handy filter to have. It's useful to deepen the blue of the sky and make white clouds really stand out, to reduce or control reflections off water and glass, to increase color saturation in foliage and other things outdoors on overcast days, even in some portrait situations. It's one of the most useful of all filters, and also one of the most difficult (or impossible) to replicate in post processing softwares. I would encourage a C-Pol (sometimes "CPL") as one of the first and most important filters you might want.
Neutral density filters are handy for long exposure still photographs, such as making flowing water look "creamy". Today's DSLRs just don't have a low enough ISO setting, so ND filters can help in situations where you either want a long exposure or are trying to use a large aperture in stronger light. ND filters are gray all over to reduce the light reaching the sensor, and come in a wide variety of strengths: 1 stop, 3 stop, 6 stop, 10 stop and more.
I do carry UVs to fit all my lenses (well, at least all the ones that can be fitted with a filter). But they are stored in my camera bag until actually needed for protection. I'd install one if out shooting in a sand storm, for example.
If you go looking for Circular Polarizer or any other filter, don't skimp. Get a good quality, multi-coated to make for the best image quality. B+W MRC, Pro and Kaesemann are very good. Hoya HMC, SHMC, HD and HD2 are too. Also Marumi gets high marks (I haven't used them personally). Heliopan, Singh Ray and Lee are some other well respected brands.
I would encourage you to first get the matching lens hoods for all your lenses, though. A hood is great protection for the lens alone... But when using filters, it's even more important to use a hood (to also protect the filter... both from oblique light and from physical bumps).
Alan Myers
San Jose, Calif., USA
"Walk softly and carry a big lens."
GEAR: 5DII, 7D(x2), 50D(x3), some other cameras, various lenses & accessories
FLICKR & PRINTROOM

Filtering alerts

I have recently installed 2 scanning machines on my network and am wondering what the best approach would be for ignoring the IDS alarms that they set off.
I am using VMS to view events from a number of sensors, it is set to view 50k events by default, when I go much higher than that my box craaawls, and with all the TCP SYN Host Sweep and TCP Syn Port Sweep alerts being generated by my 2 scanning boxes my 50k alerts are only covering a short timeframe.
The scanning machines are running windows 2003 with sql server on one of them so I dont want to eliminate alerts from them altogether but if I could somehow get rid of this enormous amount of noise that would be best.
So should I be tuning the alert on the sensor itself to exclude sig X and Y for attacker IPs of A and B? or can I build a filter in VMS so that when I view alerts it filters out any alerts from those IPs?

Good questions. This is another great example of "What's the best practice?" that I think we, as a community should better address.
Anyway, since you want to continue to protect the hosts you use to perform network scans, while at the same time filtering out the IDS alerts they generate while performing their assigned tasks, I'd like to suggest some event filters.
I'm going to assume you know how to build event filters, so I'll skip over the instructional elements and get right to the suggestions.
I suggest you start by identifying exactly which SigIDs are being generated by a typical scan (for example, 2100, 3002 and 3030 - which are ICMP netsweep w/ echo, TCP Syn Port sweep and TCP Syn Host sweep respectively. They are common occurrences when network scanners are at work). Take this list of SigIDs and combine it with the two IP addresses as sources to make a filter.
Quick tip - you can put all the SigIDs into one filter by separating them with commas (no spaces). This way, a single event filter can deal with multiple SigIDs for the two IP addresses.
IMHO, it's always better to squelch known false positive/accepted traffic at the sensors, vice filtering it out at the Monitoring Console. Essentially, this improves the value of your collected IDS alarms by not introducing unwanted data to your SecMon (or SIMS), which typicaly employs a backend DB. Less records in the DB means more efficient searches and reports can be generated from it.
I hope this helps,
Alex Arndt

Depicting Shark sensors with Plugins/Compositing?

heya
currently i am working on a project that involves depicting Shark sensory abilities.
the task i have been set is representing a sharks electro, thermal and scent sensors both from a POV of the shark(recieving signal) and the prey(transmitting signal)
i will be overlaying(compositing) organic fx over real HD footage depicting the 3 sensors. my question i pose to y'all is a suitable plugins that can provide the best outcome!!
While i understand there is never a one plugin answer and its likely that a combination of filters and tweaking will be involved...i am open to suggestion as to how to create the best output.
I have a budget to purchase 3 plugins per sensor effect..so again i am open to suggestion here as to what you would be possible options.
so, let me break down how i envisage the 3 sensory effects:
scent: i see this as a silvery tendril effect getting transmitted from the prey and slowly dissipating...i'm anticipating this effect will move through x,y,z space (show perspective)
my solution: trapcode form (i assume like all other trapcode plugins this allows the comp camera to fly around the effect as if it appears to have volume????)...tweak and blur to suit
electro sensitivity: sharks(great whites) have small holes on its snout to sense electrical currents.This sensitivity to electrical currents allows the great white to detect nearby prey whose beating hearts, gill actions, and muscle contractions all give off small electrical signals.
not sure how to create this affect entirely...i was thinking maybe track emitting points on the prey, turn that into a displacement map and run that over the footage so i distorts it??...kinda like a predator type effect accept it gets transmitted out from the source?...i reckon it'll look real busy and probably quite crap...but again open to suggestion?...maybe transmitting a subtle plasma effect out from the prey???
thermal footprint: sharks detect a thermal footprint emitted from the prey.
my solution: emmiting a trapcode smoke cloud with a color change over time....red for close to the source disappating into a yellow?? run a blur or even change the particle???
so there you have it, any suggestions welcome...as i said i have a budget to buy plugins...but already have some of the trapcode plugins,(but not trapcode form)
the key words that i wish to be reflected in the fx are : ORGANIC, SUBTLE ...but definately not diagramatic!!!
if you have read this far...thanks for your patience!!...and thanking the ones in advanced for any suggestions!!..please feel free to ask any question
regards
Nate
MacBook Pro, AE 6.5, AE 7, trapcode shine, particular, glow, combustion 2
unfortunately i can't afford any 3D apps at the moment

>not sure how to create this affect entirely...i was thinking maybe >track emitting points on the prey, turn that into a displacement map >and run that over the footage so i distorts it??...kinda like a >predator type effect accept it gets transmitted out from the >source?...i reckon it'll look real busy and probably quite crap...but >again open to suggestion?...maybe transmitting a subtle plasma effect >out from the prey???
Not realistic. The EM field changes with every move of any object and even the surroundings will have different electrical potential e.g. due to different temperatures and streaming velocities in the water. More likely it will be perceived as some sort of fake color with "flashes" whenever there is a significant change in the EM field. In a way the shark would be flying through some sort of "electrical fog". The peaks themselves would be perceived as white flashes or electrical sparks as you would see them in a dark room, I guess.
>thermal footprint: sharks detect a thermal footprint emitted from the >prey. my solution: emmiting a trapcode smoke cloud with a color
>change over time....red for close to the source disappating into a
>yellow?? run a blur or even change the particle???
Again, not realistic. Thermal footprints can last for hours, though arguably the differences would be minute with coldblooded species such as fish. In my view you should not work with changes in the color over time at all. It's also worth noting that it matters whether a fish appear on its own or if it swims in a swarm. Swarms are usually warmer due to the compression of the water by the movement.
Mylenium

Sensor filtering

Similar Messages

Maybe you are looking for