Switch harware identification
Mod Port Model Serial # Versions
1 2 WS-X6K-SUP1A-2GE SAD04460J3K Hw : 7.0
Fw : 5.3(1)
Fw1: 5.4(2)
Sw : 7.2(2)
Sw1: 7.2(2)
What does Fw mean/used for & why they are 2 Fw -- Fw & Fw1..
thanks
Ty
This is a very old thread to try to re-start. You probably would be better off to start a new thread and ask your question as a fresh issue.
In the context of the original post FW is FirmWare. We do not have enough information to give a good answer about fw and fw1. My guess is that there are two different modules/cards each with its own firmware but the display in the original post only contained the slot port model information for the slot with supervisor.
If you have a similar situation then perhaps you could post the output of show module from your switch? If we had a more complete output we might be able to give better answers.
HTH
Rick
Similar Messages
-
Error exporting catalog using bi_export.bat
Getting error when exporting catalog using bi_export.bat
version 9.2.0.2
bi_export -u BIBCAT -p BIBCAT -j thin -h localhost -po 1521 -sid mysid -x a catalogdump.xml
Fri Feb 28 14:40:31 CET 2003 PROBLEM: In oracle.dss.persistence.administration.Export::StorageManager InitializeStorageManager(String classname, Hashtable env): BIB-14418 Loaded storagemanager: oracle.dss.persistence.storagemanager.bi.BIStorageManagerImpl
Any idea?
-peterHi Folks,
I tested this on my server and I got the same error and no XML file created. However, in the documentation there is an additional switch that identifies the logical user and when this is used the XML file should be created. There is still a warning message issued BIB-14418, however, as Katia has identified this is expected behaviour.
So the command that works for me is as follows:
bi_export -u BIBCAT -p BIBCAT -lu BIBCAT -j thin -h localhost -po 1521 -sid mysid -x a catalog.xml
The TAR listed above has been updated by support to reflect this information as well. Hope this helps.
Keith Laker
Product Manager
Oracle Business Intelligence Beans -
I can't download my e-mail on my iphone 3G anymore
Yes, I am the proud owner of a vintage iPhone - and was happy until my me.com account was transferred to iCloud. Now I can't access my e-mail on my iPhone because I can't download OS5 on it. Save from buying a new iPhone or switching harware entirely, is there something I can do to access my e-mail on iCloud on my vintage iPhone?
You should be able to do a work around and enter the iCloud information by hand as if it were any other email service provider. I have had to do something similar because I have a mixup with multiple Apple IDs, even though I have an iPad 2 updated to iOS 5.0.1.
Create the mail account using these server settings. -
PYRO A/V Link XP,Vista, & Win7 switch settings + info for use in PE7
I see a lot of confusion regarding capture glitches and switch settings using the PYRO A/V Link. I looked at Canopus and others before I bought this one because it fit my budget. After I bought it I went through the glitches and the Support system of ADS Tech problems that others are experiencing.The settings I use worked on my Vista 32 bit laptop and without a hitch when I got my Windows 7 64 bit desktop using PE7. I"m sure they will work for PE8. I have a ton of VHS tapes that I am working with so my point of reference is for VHS capture. I am also using NTSC.
If you are ordering one what you will be ordering is an API-558-EFS. Or maybe you are using one of the API-550 units. Thjis information should work fine for the 550. There is NO API-558 unit unless this has changed since I bought mine. The BOX with an API-557, a power cord, and an outdated API-550 user manual is what constitutes an API-558. I know this because an irate ADS Tech rep told me. I emailed to find out why I didn't get an API-558 and that is what I was told. "We no cheat you. You got what you pay for".
I checked for updated drivers and info from ADS Tech and found a REVISION E. You can go online to their website and print it off if you like but I will dialog on this revision in the switch settings. I tried to get the ADS Tech rep to give me a serial number break as to when they changed from the 550 to the 557 units but did not get an answer. I think he said REV.E started with the API-557 but who knows seems to be answer.
Switch settings: I use #1 DOWN #2 UP #3 DOWN #4 DOWN and here are the reasons why.
The API-550 booklet/user manual shows a few windows versions. I refer to Windows XP because Vista and Win 7 seem to be offshoots of XP.
SWITCH NO. 1 for the API-550 (the API-557 and Vista and Win 7 are not in there) says DOWN for NTSC and Up for PAL . REV E says this has been changed to a black level (Color IRE) down being 0 IRE and up being 7 IRE(default). The ADS Tech rep told me the new unit Automatically detects NTSC or PAL. Do I believe him? Not at this point in time.
SWITCH NO.2 was not changed with REV.E UP for XP, Vista, and Win 7
SWITCH NO.3 was not changed with REV.E DOWN for XP, Vista, and Win 7
SWITCH NO.4 was originally (for the API-550) DOWN for LOCKED AUDIO and Up for Unlocked Audio. REV E. changed this to Down =12-bit/32kHz and Up =16-bit/48kHz Audio Sampling Rate
At this point in time I believe I have an API-550 with an API-557 sticker on it. My reasoning is that I import one long stream (60 to 90 minutes) of video from VHS into PE7 without stopping and after making a DVD where the video and sound separated further and further to about 5 minutes off at the end. I went back to switch #4 LOCKED AUDIO. I also didn't care about black level so I set the #! Switch DOWN fo make sure of NTSC. Depending on which unit you think you have you can experiment with the first and last switches. It is possible on short video you might not notice the video/audio separation. ALSO PE7 identifies the unit as an API-550 at the top of the capture screen/panel.(Capturing Device) Whether or not this is the result of windows drivers I don't know.
Connections I have a VHS/DVD Recorder unit with HDMI and Component Video (3 Video and R & L Audio) output. The PYRO AV link has Component Video IN which I use and the Canopus did not as I recall. I don't know what the other various units have as they were over my spending limit. The quality of Video I get seems really good.. If you are thinking about upgrading your VHS player look on the Back of the unit you think you want to buy and see if it has the Component Video output. The users guide says for DVD player out on my machine but works fine for VHS out. To connect the Pyro to computer you need Firewire as others have said. No USB connection.
One Major Glitch; Get off the Internet (as others have said) before you start trying to do video. This is even more important with an underpowered computer. My laptop had a switch I would flip to disconnect. My desk top Internet connection has to be disabled. or unplugged from router, or turn router off if you don't need it for other computers. If you don't know how to watch your task manager learn how to bring it up and watch it to see cpu and memory usage and the ammount of processes being used. RESTART the computer maybe more than once. What you will notice will be the number of processes being used will drop and the ammount of memory being used will drop. Restarting seems to dump all the Internet garbage at least till you get back on again and surf around and collect it again. I used to leave mine off the internet for several days and the movie making went smoothly. On my laptop it took up to 10% of the memory and the desktop takes 6+% of 12GB just to be on the internet. I started noticing this early on when things would lock up and I would have to restart anyway.
Starting; After you get off the internet, restart, bring up the task manager, and watch till things settle down to about 0 cpu usage, start PE7 or whatever Video program you want. Watch the task manager again and when everything is down to about 0 cpu usage, start a new project in the welcome screen. Where you want to put your project and how you name it is up to you. I make a new folder and put Everything in there. If you use an external hard drive make sure you dont forget to have it hooked up and on when your video program goes looking for projects the next time you open one up.
After you push ok and the selections come up for what type of video you are working with Click on the NTSC DV and it will give you a choice of 4:3 or 16:9 Wldescreen. I use the standard 4:3 because all of my footage is old and when playing a DVD later on, the newer TVs seem to be able to widen it out and on older TVs things look normal anyway. I click done and when mainscreen comes up select Get Media. I again select DV ( Camcorder) and the capture Window opens up.
I fire up my VCR, put a tape in and plug in the PYRO unit. I don't know if that's bad or not, I just got tired of pushing the teeny power button on the unit so I just plug or unplug the PYRO power cord. If the red light is not on the front of the PYRO push the button next to it and hold briefly. When you let go the Red light should be on for Analog. When you hook up one of these to the computer Windows may install a driver. Some firewire devices say you don't need a driver. With the PYRO TURNED ON, if you open up DEVICE MANAGER you will see the Pyro show up under IMAGING Devices. Imaging Devices does not show up in my machine until the PYRO is plugged in. Then when Imaging Devices shows up mine says AD API-550. Click on properties,then driver, and windows shows a driver. Says its an older driver but it works. If you don't see it listed before you try to import video you may have other issues.
Play some video through your VCR and make sure the light stays Red on the Pyro. You should see the Video in the Capture Window and also hear the audio. I let my VCR do some auto tracking, play and rewind and zero the counter when I reach the point I want to push the capture button. After a few times you can pretty much tell where the tape needs to be at the point you push capture. When capturing it will say capturing and a red line will appear around the window. If you push pause, that segment is pretty much a done deal. If it didn't capture enough video you may have to rewind and capture again and leave the first capture out of your project.
If you have glitches or the capture is screwy you may have to exit the project (save it if you alrerady have existing material in) RESTART and try again, or delete and start over. Once you learn what you want to do you shouldn't have that problem. I also learned early on to NEVER push the close button in the upper RH corner to close PE7 as you would normally do to close a window or program. PE7 didn't like that. Always use File and EXit.
Always wait for PE7 to settle down on each step before you try to do other things or you are going to lock things up depending on how fast your machine is. I have the Task manager to always be on top of other windows (under options at the top of Task Manager window). If it gets in the road I minimize the window and bring it back up whenever I think things are moving slow or I want to check something.
I have used this procedure for other movie programs and capture always works. Hope it works for others using PYRO. Hopefully I was to the point and this makes sense. Bill Hunt suggested I maybe post this to Muvipix but when I visited the Muvipix site there was Pyro stuff all over the place and I wasn't sure where to post. Maybe after he reads this he may not want me to post. Or If he thinks its ok material maybe he can scoot it over to Muvipix for me. Thanks again. I will watch this post to see if I was unclear on anything. Or if you guys clear up any mistatements you think I made.Steve,
I am pleased you thought this was good info. Please use it as you think it will do the most good. The reason I posted it to the main forum is because I am a novice when it comes to forum use. I wasn't aware of the fact there were sub forums (so to speak) until recently. The same for Muvipix.
What I mean is, that when I first found Adobe forums I was only looking at the main forum for answers, as I would guess other novices are doing. I found the PE portion, and that was as far as I went unless you guys had links to other stuff, and even then it didn't dawn on me that there was a Tips & Tricks or hardware sections, etc. I would type in PYRO for example, and if nothing came up in the main forum first to redirect me to something else, I thought that was all there was. Don't know if there are other novices thinking the same thing.
I apologize for my ignorance on posting to Muvipix. The format seems to be different and I found Pyro discussions there which seemed to be in several sub forums? So I posted here first and the only knowledge I have about sending this material to Muvipix (outside of re-typing the whole thing) would be to copy and paste it. (Bring up Muvipix in a separate Internet window along side Adobe and copy/paste). Sounds dumb, but as I said I am still computer illiterate. Also which section of Muvipix would I post it under? I'm pretty sure you guys have a better way of posting the same material in both forums at the same time than copy/paste. Thanks for the info. -
When I click on a pdf file link in FireFox, the Windows open file dialogue opens, saying "You have chosen to open [filename]
which is: Foxit Reader PDF Document [filesize]
from: [author]
What should FireFox do with this file?
[selected radio button] Open with Adobe Reader
THERE IS NO PROBLEM OPENING THE FILE. It opens in Adobe Reader, in a window outside of Firefox, which is exactly what I have it set up to do. The problem is that it identifies the file as a "Foxit Reeader PDF Document," even though I uninstalled the Foxit trial and associated FireFox plugin ages ago, and Foxit does not appear anywhere on my computer in any way, shape or form (that I have access to). No Foxit in the file associations for Windows, or in the applications associations for FireFox. There is no Foxit plugin installed, and I even went and deleted what was left of the Foxit directory. Yet pdfs are still identified in FireFox as Foxit files, so FireFox must be storing this old info somewhere. How do I get rid of it?
BTW, files open in a browser window inside the browser in the other 3 browsers I have installed, so there is no open file dialogue, and I can't tell whether there is the same problem. When I check the properties of a pdf outside of FireFox (by rightclicking a pdf on my desktop, for example), it is identified as an Adobe Reader file. I have both Adobe Reader and Adobe Acrobat. I have two Adobe Acrobat plugins showing in FireFox (10.1.8.24 and 11.0.5.3). Should I have two? No plugins, extensions, or anything else by Foxit.Most likely this information is in the mimeTypes.rdf file, which can accumulate a lot of obsolete information which occasionally does cause problems. You can rename the file and have Firefox rebuild it from scratch with only the current applications detected (as far as Firefox can tell from the Windows Registry).
Open your current Firefox settings (AKA Firefox profile) folder using
Help > Troubleshooting Information > "Show Folder" button
Switch back to Firefox and Exit
Pause while Firefox finishes its cleanup, then rename '''mimeTypes.rdf''' to something like mimeTypes.old
Restart Firefox. Presumably now it will forget all about Foxit. Unfortunately, it may also have forgotten some of your application preferences, but hopefully those won't take too long to reestablish. -
Help!!! Switched plan, lost phone number, can't get it back
Over a month ago, I switched plans for my husband and myself - no new phones, just different pricing. Everything went smoothly for my phone, but my husband's number stopped working. The last five weeks have been a never ending hell of calling "customer service" or going into the local store only to be told it would be fixed, "tomorrow", "in a couple days," or "starting in the next billing period." I have no idea why/how it can be this complicated, although I do now that at one point Verizon had the wrong identification code for the phone...which came from Verizon's records. Having already wasted over 15 hours on the phone or in the local Verizon store, I'd be happy to give up the number just so my husband could have a working cell phone (we have no idea how many text phone calls have gone unanswered in the last 5 weeks, but have had numerous - "why didn't you respond to my text moments") except for the fact that so many other things are tied to that number (credit card and bank accounts, etc.). I'm wondering if anyone has had similar problems and has advice on how to get Verizon to actually fix things, or at least acknowledge that is not unreasonable to expect a working phone within 5 weeks of switching Verizon plans!!!
never fixed, we both have basic phones. Have spent over 20hrs talking to customer service on every weekend for last 2 months. I have been told three weekends in a row that my case has been flagged (I think they say escalated) and that somebody will call me back the next week...guess what nobody every calls. I wish we could switch carriers at this point, but nobody else gets coverage in our medium sized town. Mamma warned me about monopolies.
-
Account Identification thru Account no instead of telephone number
My Client has a CTI solution which is already in use by the call center agents.
As of now, the call center agents are using Desktop Manager through which they are using the accept, reject or other functions.
Now they want to replace the Desktop Manager with SAP CRM Webclient functions to use the functions like Accept, Reject, Hold ...
The current status is, i have done the configuration in which i have integrated CTI with SAP CRM 7.0 and the ICWC is able to identify the caller based on the telephone no. saved in the BP.
The main challenge what i am facing is, the client doesnt want to use the Customer's telephone number to identify instead they want to use Contract Account no. or Legacy number to identify the customer.
Do we need any connector to do this.
How can i achieve this. I would really appreciate your advise on this.Hi Kalees,
In the CTI scenario that is conected to the ACD switch and have an IVR/VRU (Interactive Voice Responce System), in the CRM 7.0 IC/CTI standard intergated scenario, CRM IC system performs the search for Account by ID that is in the Call Attached Data (if CAD is configured for Identification profile for your Business Role) and it is passed thru IVR (customer enters it via dail pad on his phone or does not enter it).
If the Account ID value is not in the CAD (customer has not entered that number in IVR) or the search for a customer by this ID failed in CRM, then system will try to search by the phone number. It will find a cusomer in your CRM system if this phone number is maintained on this cusomer, otherwise no search results returned and agents can perform search manually.
Regards,
Vadim. -
I switched to outlook instead of hotmail, and I downloaded firefox as instructed, but each time I sign in to my email account it comes up download firefox now or continue on without, I want the firefox but am unsure how to get it to go....why do I keep getting told to upgrade if I already have?
You have a general.useragent.override pref that identifies you as Firefox/3.6.25
* Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.25) Gecko/20111212 Firefox/3.6.25 FBSMTWB -
What is business function switch?
Hi,
Can anyone tell me what business function switches are? And also how they are to be checked in the
program (as to whether a business function is switched on or not)? Thanks.
Regards,
SuhasHi,
Here are the links which give wealthy info on Enhancement Frame Work(SWITCH).
/people/thomas.weiss/blog/2006/01/24/what-the-new-enhancement-framework-is-for-150-its-basic-structure-and-elements-for-beginners
/people/thomas.weiss/blog/2006/03/15/the-new-enhancement-framework-part-2--what-else-you-need-to-know-before-building-an-enhancement
/people/thomas.weiss/blog/2006/04/03/how-to-define-a-new-badi-within-the-enhancement-framework--part-3-of-the-series
/people/thomas.weiss/blog/2006/04/18/how-to-implement-a-badi-and-how-to-use-a-filter--part-4-of-the-series-on-the-new-enhancement-framework
/people/thomas.weiss/blog/2006/05/03/source-code-enhancements--part-5-of-the-series-on-the-new-enhancement-framework
/people/thomas.weiss/blog/2007/12/12/the-three-use-cases-of-the-enhancement-and-switch-framework--part-1
/people/thomas.weiss/blog/2008/01/07/the-three-use-cases-of-the-enhancement-and-switch-framework--part-2
/people/thomas.weiss/blog/2008/01/14/the-three-use-cases-of-the-enhancement-and-switch-framework--part-3
/people/thomas.weiss/blog/2008/01/23/the-three-use-cases-of-the-enhancement-and-switch-framework--part-4-the-many-ways-to-enhance-a-sap-application-with-the-new-framework
/people/thomas.weiss/blog/2008/02/04/the-three-use-cases-of-the-enhancement-and-switch-framework--part-5-the-basics-about-switching
Creating Switch.
1. in SFW1, Once you create your SWITCH and assign your package and Activate it, it shows in Active mode but the SWITCH is not still Active GLOBALLY.
2. To activate it, create a Bussiness Function in SFW2 and assign your SWITCH to this and Activate it.
2.1 Here if you select the Business Function as type ' INDUSTRY ', then again you need to assign this Business Function to Business Function Set in SFW3.
2.1.1 In SFW3, Create a Business Funstion Set, and assign this Business Function to it and Activate it. But your SWICT is still it not active Globally.
2.1.2 Go to SFW5, and Activate your Business Function Set here, then your SWICT is GLOBALLY ACTIVE
2.2 If your Business Function is of type ' Add On ', then there is no need to assign it to any Business Function Set.
2.2.1 Directly, go to SFW5, click on type ' Add Ons ', and after identifing your Business Function, Activate your Business Function here, then your SWITCH is GLOBALLY ACTIVE.
But the final problem is : Once you activate your SWITCH, there is no other way to deactivate your SWICTH.
Enhancement implementations are switchable.
Steps to assign a switch to BADI Implementation:
1) Assign the Enhancement Implementation containing the BADI implementation to a Package/development class.
2)Assign this Package/development class to a switch in transaction SFW1.
3)Make sure the switch you are using has state ON. For this assign this switch to an ACTIVE business function using transaction SFW2. A switch inherits the state of the business function.
Reward Points if answer is useful.
Regards,
Raj. -
Hi,
I am in the process of developing a System to monitor the components on the Printed circuit boards in oven,It s a basically a failure analysis of the components such as C's,Resistors and Capacitors.
The following is an overview of my test system
The test system should monitor the components on the PCB 1 year.
I would like to measure the Resistances and Capacitances using an LCR meter to identify the failure. Failure of the Resistor is identified with a Open circuit and a failure of the Capacitor is identifed with a short circuit/open circuit.I have 420 capacitances to be measured and I would like to automate the measurement using NI Multiplexers.
I have to monitor the first Capacitance (C1) for 3 mins ( which would be connected to the first input of the multiplexer) , followed by second for 3 mins and so on. Once all the 420 capacitances are monitored , the loop should start again from Capacitance C1. I would like to know how to program the NI 's switches. Could someone please suggest me how to go ahead with this.? Is Labview good enough to automate the switches or should I go ahead with a switch management software ? Can you please explain in detail as am a newbie to Labview ? Looking forward to your response. Thanks in advance
Solved!
Go to Solution.Hello there, 2nF approaches the territory where we need to consider the parasitic capacitance in the cabling/modules/etc. For example, the multi-conductor LFH-200 cable that plugs into the PXI-2575 specifies 25pF/ft nominal parasitic capacitance with a single-ended signal, versus 15pF/ft nominal with a 2-wire signal. There's also internal capacitance from the switch, your test harness (anything that plugs into the LFH-200 cabling), etc. With a 1-wire system, all DUT capacitor minus terminals are connected together all the time, which means you have a bunch of additional coupling locations for additional stray capacitance... wherever you have a stray path from any of the minus leads back to the particular channel under test. For example, you could have coupling back through each capacitor's power supply back through the DUT's power supply and then into your measurement, etc. With a 2-wire system, both the plus and minus are switched, which greatly reduces the number of venues for stray parasitic capacitance. You might be able to get away with a 1-wire system, but my concern is with 420 channels your parasitic capacitance could approach your DUT capacitance. If the parasitics are constant, you could compensate out the error, but I still recommend a 2-wire solution.
NI HW definitely allows synchronization between DMM/Switch using external triggering, but in your case I recommend just using SW API calls: "switch: connect CHn" "dmm: take measurement y times" "switch: connect CHn+1" etc. Synchronization is a method to measure as fast as possible, whereas you're taking measurements over a period of hours with a required period for each DUT... with HW synchronization, you can't implement a "wait t seconds" (unless you used additional external hardware, e.g. 555 timer to add delay, but this isn't practical when there's a perfectly good SW API).
Note that if you're not comfortable with LabVIEW programming, but do know text-based programming, NI-Switch has a full-featured C++ API. NI-Switch includes numerous examples in both LabVIEW and C++, and of course the community here can offer tips/hints/advice if you run into coding trouble.
-John Sullivan
Analog Engineer -
WIRELESS SWITCH REMAINS ORANGE AND CANT TURN IT ON.
WIRELESS SWITCH REMAINS ORANGE AND CANT TURN IT ON.TRIED HP SOFTPAQ DOWNLOAD MANAGER BUT NOT HELPING AND SHOWING INSTALLS ERROR FOR : 1. ARCSOFT TOTALMEDIA THAETRE 3 BLU-RAY PLAYER2. ARCSOFT WEBCAM SHARING MANAGER3. REALTEK ETHERNET CONTROLLER DRIVER ALSO DEVICE MANAGER SHOWING ERRORS : FOR QUALCOMM ATHEROS AR3011 HARDWARE IDS ARE : USB\VID_03F0&PID_311D&REV_0001
USB\VID_03F0&PID_311D FOR UNKNOWN DEVICES PHYSICAL DEVICE OBJECT NAME : \Device\0000004e FOR UNKNOWN DEVICES PHYSICAL DEVICE OBJECT NAME : \Device\00000051NO OPTION OF HARWARE IDS IN UNKNOWN DRIVERS ---------erico wrote:
The following driver is for Windows 7 Qualcomm Atheros 3011 Bluetooth 3.0+HS Driver http://h20564.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5060881&swItemId=ob_131365_1&swEnvOid=4058#tab4 The other devices need to be identified with their Hardware ids PCI\VEN character strings instead of the what you used.See the following example. Right click on any unknown device that needs a driver, then click on properties to invoke the window.
PROPERTIES ........... -
Account Identification - Not Bound Messages
Hi Experts,
when searching an account in the account Identification view in component ICCMP_BP_DETAIL I have a problem with some fields where is appearing the message: 'BuilHeader not bound' in the fields 'Name First' and 'Name Last' and in the fields
Function and Department is appearing the message 'BuilContactPerson not bound' after choosing the account in the account result list.
I think that happens becsause the system can not find the relevant 'Contact Person'. As we don't work with the concept persons in my proyect and I have switched the relevant customizing in the account identification profile I don't know why these fields not only appear in blank?
Best Regards
OliverHi, Oliver.
please read this note:
Note 1310136 - UI fields contain text "... not bound"
Or
Enter the parameter ID BSPWD_SHOW_NOT_BOUND and
the text "Y=Display, N=Do Not Display, SPACE=System-dependent" and choose "Save".
Denis. -
3750 Cross-stack equal cost routes across different switches in the stack
Hello,
If I configure a cross stack ethernet channel does it support link aggregation to increase bandwidth or is it just support for link failover?Answer is support for link failover.
The EtherChannel on multiple switches in the Cisco Catalyst 3750 stack is called cross-stack EtherChannel.
If a link within an EtherChannel fails, traffic previously carried over that failed link changes to the remaining links
within the EtherChannel. A trap is sent for a failure, which identifies the switch, the EtherChannel, and the failed link.
Inbound broadcast and multicast packets on one link in an EtherChannel are blocked, and cannot return on any other link of the EtherChannel.
HTH
Regards
inayath -
[SOLVED] openssl: REMOTE HOST IDENTIFICATION HAS CHANGED! Hacked?
There's a bit of Windowsisms in here, but one of the main questions is about openssl. As well, this post could help others regardless of the OS involved.
I remote into a Windows 7 workstation at my work using xfreerdp going through Server 2008 R2. RDP is closed at the firewall to all but two IP addresses and neither of those uses port 3389. I'm connecting through NTLM for authentication then the connection is encrypted using TLS. FreeRDP uses openssl to handle SSL/TLS connections.
Last week I remoted in my workstation first thing in the morning as I always do with no problems. I went to work that day and everything was normal. Later that night I went to remote in again and I got the "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!" message. I followed the advice in the message and contacted the system admin:
me wrote:skottish, were there any major changes in the system that could cause the RSA fingerprint to change?
skottish wrote:I don't think so skottish. There were no changes made to the system beyond a simple update to the server's spam filters.
There was nothing major that changed on the server and I wasn't anywhere in the system that could have forced a change. The only server-side work that I did was with some accounts in Active Directory and updated Exchange's spam filters.
The way that I see it, and I may be missing something, is that there are four possibilities:
1) A MITM attack. If this is the case then it was successful and I haven't tracked it down yet
2) Someone accidentally changed something in the server
3) Someone intentionally changed something in the server
4) The server made it's own changes (which sadly wouldn't be out of character for a MS server)
We do have an outside partner that has server access, but they told me that they weren't in there and I see no evidence to the contrary.
My first question is am I missing any other possibilities?
The second is how does openssl generate the RSA fingerprint of a computer? I've read many, many pages and so far I'm not finding any answers. If I could verify the fingerprint manually, that would help.
The third is that if it is a MITM attack, what are the appropriate steps to identify it? I went through all of the ARP tables on the server and the workstation looking to see if anything is out of line and everything looks fine. I could run a capture off of our firewall and see if there's anything there, but I don't know Wireshark all that well, so I'm not sure what I would be looking for exactly.
Thoughts?
Last edited by skottish (2012-09-22 03:10:22)litemotiv wrote:Something like this happened to me before and it was caused by an unforeseen clock/time change, is that somehow possible in your case?
Well, there was a clock change on my end that same day. For some reason openntpd was running about two minutes behind and it had been since I migrated to systemd. I switched to ntpd in order to correct it. I can't imagine why a change on the client side would make a difference though. But, I'm open to the possibility.
--EDIT--
I tried some experiments with openntpd, ntp, and changing clocks and such, but I couldn't trigger the error. I'm still open to the possibility though.
-- RESOLUTION EDIT --
It's not worth bumping this thread over the resolution of this, but someone may be interested in what happened for their own reference later.
I realized that I was looking in the wrong direction and discovered that Windows automatically changed security keys for reasons that I don't understand yet. openssl did it's job perfectly. There was a force that wasn't the system administrator that made changes to the security of the system on a machine that hadn't changed physically. Is it possible that there has been an attack still? Yes, it's just much more unlikely now.
Last edited by skottish (2012-09-22 03:25:31) -
Why doesn't the SLM2024 Smart Switch 10/100/1000 support 10M?
Hi,
Since a couple of weeks I have installed 5 SLM2024 Gig Smart Switches. Now we have a new Time Attendance System that tries to communicate to the Cisco with 10M. The Cisco identifies it correctly but will not parse any info to the Device. Why is that?
Test it with a D-Link 10/100 Switch -> OK
Test with a Cisco 10/100 Switch -> OK
Test with noname 10/100/1000 Switch -> OK
Test with SLM2024 -> Failed.
I would love for someone to explain this to me. What does the Cisco do? I would gather that if a Switch is 10/100/1000 it can communicate over anyone.
Anybody?
Regards,
RichardHi Richard,
I would definitely expect to be receiving broadcast packets, maybe ARP packets from the time attendance advice.
Yep that is a problem.
But, why are you not receiving broadcast packets on the port that is connected to the time attendance device.hmm that my question that I am mulling in the back of my mind. Your switch port statistics showed an issue.
Packet capture
A wireshark or packet trace would be most useful , so mirroring the time attendance switch port to your PC's switch port would be useful. This would allow us to see what is coming in and out of that switch port.
Pretty easy to setup on this managed switch, see my screen capture below as an example.
Wireshark is a wonderful freeware 'sniffer' software that would allow us to see the ethernet frames coming in and out of the switch port in question.
to grab wireshark try the following URL; http://www.wireshark.org/download.html
Don't need much data just a 30 second capture and remember to undo the mirroring and save changes after the capture is taken.
MAC address Table
Be interesting to see the dynamic MAC address table to see the MAC address of the time attendance device.
Might be most intersting to add a static arp entry for the time attendance device, MAP it's MAC address to a switch port.
(This is only necessary if there isn't a dynamic ARP entry, MAC address of the time attendance device on the switch port.)
see my screen capture below, you will also note, that underneath the static address is a option to look at the dynamic address.
Switch port Status and Error log
But could be most useful to see the setting for that switch port similar to the two following screen captures.
lastly the log is informative as it might indicate what or where the error is.
David
Maybe you are looking for
-
Email notifications are not showing in notification center
i have a macbook pro with OS X moutain lion 10.8.2... the problem is that i don't get any notifications in the NC. Although i enabled alerts and notifications for my email account, twitter and FB as well in the system preferences... i tried many advi
-
Sharing iphoto libraries on different computers
Hi, I'm trying to move all my files from one mac to another. I have a ton of photos in my iPhoto on Old Computer, but only some of them show up on New Computer. I took my last import, and made a photo stream out of it, but I can't give it a name, and
-
Planning upgrade to both. What bugs should I anticipate? Does it matter which one I do first?
-
My iphone 4 isnt recognized in my computer or itunes
My iphone for is notrecognized in itunes or in My Computer
-
Elements 11 not letting me click share online button
I made an 8 minute video, and i want to upload it to youtube, but the share online button does not seem to work for some reason, I searched online and in support, but i am not able to find a solution for this. Any suggestions?