Friday, July 31, 2015

windows - Can my laptop's Hard Disk be cloned and loaded to another laptop?



I bought an Asus X202E laptop and installed Ubuntu on it and then completely formatted it which deleted everything including the recovery partition. So i could not restore it. Then I installed Windows 8.1 update 1 complete raw and now I am not having those original Asus programs and drivers (I downloaded some but i am not satisfied).


My friend bought a new Asus X202E the same model. So I am planning to migrate his hard disk to an external hard disk then install it on my hard disk. By which i might get the same experience of a new asus X202E. Is it possible and if yes please tell me how? Will my friend's laptop be harmed?


thank you!


Answer



Yes, it is possible and there is no worries in this case because both hardware are identical.


Just use a disk cloning app that supports full disk cloning (that includes boot partition), like the apps listed above:


--


Macrium Reflect (FREE):
http://www.macrium.com/reflectfree.aspx


Macrium Refrect Screenshot


--


Paragon Backup & Recovery (FREE):
http://www.paragon-software.com/home/br-free/


Paragon Backup & Recovery FREE Edition


--


Honorable mentions:


Clonezilla (FREE): http://clonezilla.org/


EaseUS Partition Master (FREE): http://www.partition-tool.com/download.htm


DriveImage XML (FREE): http://www.runtime.org/driveimage-xml.htm


Is It Safe to Unmount Disk 1 Debian Linux From Disk 0 Windows 7

Background:




  • I have an Asus P67 Sabertooth motherboard. The motherboard supports 6GB SATA.

  • I have two 1TB Western Digital Caviar Black 64MB Cache SATA Drives.

  • I have a Plextor PX-880SA CD/DVD Optical SATA.



Both hard drives are on the 6GB Channels.




I DO NOT dual boot ... I simply use the uEFI BIOS quick key to access drive selection on POST to determine which drive ~ OS I want to use. In Linux, I have disabled OS prober in Grub ... so if I run update-grub it won't try to wipe out my Windows MBR on disk 0.



Disk 0 is Windows 7.
Disk 1 is my Debian 6.



==================================================================================




  1. Disk 0: Online





    Vol C = Sys Reserved for W7 = 100MB NTFS
    Vol C = W7 (C:) = 244GB NTFS
    Vol D = Data (D:) = 342 GB NTFS
    346GB = Unallocated



  2. Disk 1: Online




    (/boot / /etc /home) = 500GB
    346GB = Unallocated



  3. CD-ROM 0 :





    DVD (E:)





==================================================================================



When I start Windows 7 I can see Disk 1 as 'Active' which ... concerns me ... I don't want Windows to have any access to this disk. I want to Disk 0 and Disk 1 completely separate.



Is it safe to unmount my Linux drive from Windows 7 using diskpart? Is this even necessary to achieve my goal?

iso image - How to update root certificates in Windows 7 installation ISO?

I want to integrate current certificates (root, disallowed) into Windows 7 installation ISO.
I have integrated (using dism) latest updates and drivers (mass storage + usb 3.x) and stucked with certs.


How to do it and what cert files do I need:
rootsupd.exe
authrootstl.cab
disallowedcertstl.cab
?


PS I can unpack rootsupd.exe and run 4 commands:
updroots.exe authroots.sst
updroots.exe updroots.sst
updroots.exe -l roots.sst
updroots.exe -d delroots.sst
...but how to "inject" it into installation ISO?

networking - configuring dedicated internet access



I have taken a dedicated internet access service from my ISP. for which i received one P2P IP address with a specified gateway, and 6 IP addresses on a /29 subnet. but they havent specified any gateway for these 6 addresses. Further, they say that is an internal range for my account. What does this mean? that these 6 addresses are not public IPs? if so, how do I configure them ? any help would be appreciated.


Answer



You mean that you have a P2P (/30) address between your router and the ISP equipment?




Internal range usually just means that they will be routing the /29 subnet towards your routers P2P IP address.



You'd need to assign the /29 to an interface pointing towards your LAN on the router using one of the ip addresses in the range. Then you can assign the remaining addresses to hosts with a default gateway of whatever address you just assigned on your router interface towards the LAN.


Thursday, July 30, 2015

windows - batch not capturing hidden files


The following lines allowed me to list all the files, folders, and sub-folders in file TXT, but the problem is that the hidden files are not included in file TXT. So, what do I have to do?


@echo off
set /a VAR=%random%
mkdir C:\Users\Blm\Desktop\folder\
for /r E:\ %%i in (*) do (echo %%i >> C:\Users\Blm\Desktop\folder\%VAR%.txt)
pause

Answer



Try replacing this line:


for /r  E:\ %%i in (*) do (echo %%i >> C:\Users\Blm\Desktop\folder\%VAR%.txt)

With this one:


dir /s/o/b /a E:\ > C:\Users\Blm\Desktop\folder\%VAR%.txt

linux - Running a DansGuardian filter on the entire network




I'm looking to run DansGuardian on my home network via a server machine I'm building. Before I build the server, I need to know whether or not I need two dedicated gigabit LAN ports or one on the machine.



I'm not sure how to run the server. Should it be part of the network or above the network between the router and the modem?



For example, before the router:



                             |-[COMPUTER_1]
[INTERNET]-[FILTER]-[ROUTER]-|-[COMPUTER_2]
|-[COMPUTER_X]



Or after the router:



                    |-[COMPUTER_1]
[INTERNET]-[ROUTER]-|-[COMPUTER_2]
|-[COMPUTER_X]
|-[FILTER]


In solution one above, I'd need two gigabit LAN ports, one connected to the internet and the other to the router. I'd also have to figure out how to run all traffic between the two ethernet interfaces.




In solution two above, I'd only need one gigabit LAN port, but I'd need to find a way to forward internet traffic through the filter from the router. The goal here is that the entire network is seamlessly filtered through DansGuardian.



I'll be running Ubuntu Server on the machine. I'm not sure how to set something like this up, so could someone recommend the steps I should take and the setup I should have? From time to time, I'd need to SSH into the filter machine, and I'm not sure if that's possible if the filter is behind the router.


Answer



The way Dansguardian works you don't have to have two NICs. In a standard installation DG acts as a proxy on your server on port 8080 and so if you set up all the Web clients to run via the proxy on yourserveraddress:8080 things will 'just work'.



Mind you, this configuration makes it easier for someone 'in the know' to bypass the proxy unless other filtering/blocking is put in place.


Why does Linux use a swap partition when the kernel supports paging/virtual memory anyway?




As far as I understand paging and swapping, they're completely different concepts. While swapping means, that a process is either completely in physical memory or on the hard drive, with paging parts of a process can be in physical memory and other parts can be on the hard drive.



But why does linux need a swap partition then? If the physical memory is full, some processes will be outsourced to the hard drive and a new process will be mapped from virtual memory to physical memory.



I just don't get why one needs a swap partition (or swapping in general) then?



Or is this just a matter of terminology and swap partition == virtual memory?


Answer



Yes it is just a matter of terminology, in many cases a swap partition is used as virtual memory.




The reason UNIX and UNIX-like systems prefer swap partitions to page-files is that they can be contiguous which results in lower seek times compared to a page-file which may be fragmented.


email server - PTR record needed? Where?

I have a problem which I think can be resolved by adding a PTR record. Email isn't working for xx@example.com. I looked up the SMTP issues on mxtoolbox.com which returned the following:




SMTP Reverse Banner Check Reverse DNS FAILED!




This is a problem..




When I look at the DNS settings, the mail, mail(x) etc records point to an IP address and example.net. I believe the email is sent from an external server so the solution would be to add a PTR record, correct? Where do I add this? Do I add this on the domain to point to the email, or should it be added where the email is sent from to point to my domains IP Address?

boot - Arch Linux UEFI bootable usb installation media

I want to install Arch Linux in UEFI mode, but I fail at booting the installation media in UEFI mode. What I have done so far is:




  • Create msdos partition table on usb key OR create gpt partition table on usb key

  • write the official iso to the usb key with dd bs=4M if=archlinux.iso of=/dev/sdX

  • reboot the system




When I try to select the dialog only shows me a BIOS/CSM entry to boot, which works perfectly. But there is option to boot in UEFI mode.



Aditionaly, when I try to view the partitions in gparted i get the message dev/sdd contains GPT signatures, indicating that it has a GPT table. However, it does not have a valid fake msdos partition table, as it should. Perhaps it was corrupted -- possibly by a program that doesn't understand GPT partition tables. Or perhaps you deleted the GPT table, and are now using an msdos partition table. Is this a GPT partition table? and when I click yes I get the message The backup GPT table is corrupt, but the primary appears OK, so that will be used.
Also there is only partition that is unallocted and has a warning sign, when I view the details I see the errors listed above.
What have I done wrong? Have I forgotten something?

windows 7 - Java incompatibility between versions


I run software on my PC that works great on Java v6u32 and Java v7u25, but my PC ran automatic Java updates and updates my Java to a newer version than v7u25, which was what I had.


The software is basically driver software for a USB token - For the token software to be recognised, the right Java needs to be installed.


Since the update to a newer Java version which is not officially supported by the token software, the USB token does not detect the token software anymore.


Even if I uninstall the latest Java and reinstall the older supported version of Java, it still does not work.


My question: How do I revert back to the previous Java configuration after a new version is installed?


Answer



One way is to do a System Restore on Windows to before the update. Be careful this may also undo any other changes that has been made to the PC, like Windows service packs or other updated drivers.


windows server 2008 - How to migrate Workgroup with SBS 2003 to full AD domain with Exchange?



My company's desktops, Linux and Windows servers, are all stand-alone, with nothing more than a workgroup to bind them. We also have an SBS 2003 server that is used for shared contacts/calendar and as a fileserver. This SBS server has a simple domain with a bunch of users and groups that are only used for the fileserver permissions, and for the Exchange login (only shared contacts/calendar). DNS is a BIND server and not integrated with the SBS2003.



I'm about to migrate and join all this to a Active Directory domain, based on Windows Server 2008 R2 which I've installed on a new virtual machine. I can install a separate 2008 R2 machine for Exchange 2010. I'd prefer to dump the old domain name, due to crappy naming and no decent design. Recreating the fileserver permissions will be easy, but I'd prefer to keep the user accounts and Exchange data.



I'm unsure how to proceed though, since I'm primarily a Linux admin.




Create a new forest and domain with the proper name, and migrate the users and groups via ADMT? Join all servers to the domain? Then migrate the Exchange data?



Or join the new server to the old domain, promote it and decommision the old one? Then somehow migrate the Exchange data? I'm not sure how well this would work without AD-aware DNS server.



Other ways I could do this? Any tips are welcome. Thanks.


Answer



There are probably at leat 6 different ways to do this. My opinion is that any attempt to "migrate" anything is going to be cumbersome and messy. I might suggest setting up a new forest\domain on the W2K8R2 server, installing Exchange, setting up identical user accounts\mailboxes, exporting the mailboxes from the old SBS2K3 server using exmerge and importing the resultant pst files into the new mailboxes.


power - Plugging in USB device shorts out USB hub


My device is 12V DC and takes a maximum to 1.08 Amps. The cable is split where one end goes into power and the other end goes into USB.


Works:


Plug device power into 120V AC adapter which converts to 12V DC 1.08A.


Does not work:


Plug straight into 12V DC


Device powers on in both scenarios because the LED blinks green. One interesting difference is that the LED blink is shorter when connected to straight DC (Battery) Power.


Note: The battery is a 11.1V LiPo. I have a DC step-up booster connected which is putting out a steady 12V to my device. I've testing a 12V 5A computer on this same line and it works fine.


What should I do / check to find out why this is not working?



  • Powered USB wire is a split cable - 2 lines in 1 line out

    • Can plug into AC 120V Adapter (works)

    • OR can plug into DC 12V Battery (does not work)


  • Device plugs into Powered USB (middle plug)

  • Powered USB plugs directly into USB Hub (right plug)


enter image description here


Answer




I bypassed the 12V DC/DC booster/transformer and went straight to the battery. This works. Any idea what that means?



Yes - I was going to ask you to do that test of powering it direct from the LiPo battery, after I read that the Kinect can use a power supply voltage lower than its nominal 12 V, according to this webpage:



"We found that at 12V the Kinect operates and draws about 0.35A. We kept decreasing the voltage and we found that the minimum operating voltage for the Kinect is about 8.5V. At this level it drew about 0.42A."



The likely cause is because the DC output from cheap boost converters can have lots of ripple at the switching frequency, as well as other potential noise. In other words, although yours says 12 V on the built-in LED voltmeter, that does not mean that its DC output is as smooth as the real DC from a battery, or even from a good-quality mains power adapter.


Ideally, you would use an oscilloscope to view the output voltage from that boost converter, to confirm ripple / noise on the output as the cause, and that's what I was going to suggest - but I guess that if you had an oscilloscope, you would have used it already.


Another way is to test powering your Kinect using only a suitable battery within that input power voltage range of the Kinect mentioned above (e.g. LiPo or lead-acid) - without using a boost converter. If the Kinect then works OK, we can infer the cause of the problem as being the quality of the DC output from your boost converter - and that is what you have done. :-)


Your DC-powered PC (or some other devices) may work OK connected to that boost converter, if they have enough power conditioning on their power inputs to cope with any ripple & noise on the boost converter's output.


Adding extra capacitance or filtering between the output of the boost converter and the power input of your Kinect might allow the Kinect to then work, while using that boost converter. However without an oscilloscope to confirm this hypothesis of the cause, and to help identify what filtering or smoothing is needed, you would be left with trial-and-error about what to try.


Wednesday, July 29, 2015

Keyboard layout using Chrome RDP on a Chromebook

I'm using a Chromebook with an azerty keyboard. I want it to connect to a Windows server using RDP. I'm using Chrome RDP as it is the only one that I found that actually will connect. However, for some reason, when connected the keyboard settings are never right.


When I set up the Windows server with a US keyboard layout, it actually types azerty for the letters, but the numbers and symbols appear as on a qwerty keyboard. When I set it up as a Belgian (Period) keyboard (what it should be), the opposite happens, letters as if qwerty, but symbols and digits correctly.


Anybody have any idea how to solve this?

USB boot and newer BIOS and firmware

Is it safe to say that most newer (x64 2010+) desktop BIOS from major manufacturers can be configured for USB boot?


I'd like to be able to boot from USB for GParted 10, Windows 7 pro, and Ghost 2003+ ideally on a small form factor stateless disk drive like desktop with no built in CD/DVD ROM. Can anybody recommend good tiny HW and boot/iso SW for this?


Any technical reason/limitation why BIOS firmware do not already come with some form of BOOT FROM USB ISO like feature built in where you do not need a DVD rom or even a boot formated USB drive? How cool would it be that you could boot to bootloader that prompts you for an ISO on a USB or Local file mount?

How do I type the backtick / Grave accent character on a (UK) Windows 8 touch keyboard?


How do I type backtick (i.e. `) on a Windows 8 touch keyboard?


This is a similar question to How do I type the tick and backtick characters on Windows? but the answer there covers real physical keyboard configurations while I need the Windows 8 virtual screen keyboard.


Here are some screen-shots of the keyboard that I am asking about:


Windows 8 touch keyboard


Windows 8 touch keyboard


Windows 8 touch keyboard


Answer



The default touch keyboard in Windows 8 is quite simple and destined to be used
on small screens.


The article
How to Make the Standard Keyboard Layout Available in Windows 8 Touch Keyboard
describes how to replace it by the full keyboard.


To add the standard keyboard layout to touch keyboard in Windows 8 :



  1. Open PC Settings

  2. Click/tap on General on the left side

  3. On the right side under Touch keyboard, move the slider on the right to the end
    of the list

  4. Turn on Make the standard keyboard layout available

  5. When finished, you can close PC Settings.


On Windows 8.1, this setting has migrated to PC Settings -> PC and devices -> Typing.


image


domain name system - SPF configuration question



I understand the basics to setting up an SPF record in my zone files, on my DNS.
And for the most part it seems easy enough to configure.

However, I've been constantly testing my postfix server with simple PHP scripts, and sending emails to myself via smtp.



I've configured the spf to allow for my mail servers to be permitted. I've included the ip addresses, and now I've changed to domain names.



Here's what I've got:



@  IN TXT "v=spf1 a mx include:_spf.google.com a:subdomain.anothersite.com ~all"


When I relay thru google's mail servers I always get a neutral response:







"Received-SPF: neutral (google.com: 209.85.210.41 is neither permitted nor denied by best guess record for domain of mypersonalsite.com) client-ip=209.85.210.41"



"Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.210.41 is neither permitted nor denied by best guess record for domain of mypersonalsite.com) smtp.mail=me@mypersonalsite.com"






I get that from the "Show Original" option, inside my gmail account.

It may be nothing, but I've been expecting something other than "is neither permitted nor denied by best guess", from google.



I see the same thing with qualified companies, with correct spf settings. And then I see places with a "pass".



Has anyone had any luck moving from "neutral" to "pass"?


Answer



It's not recognizing the TXT record as valid SPF because of a typo, and falling back to the default of ?all.



Change v=sfp1 to v=spf1:




@  IN TXT "v=spf1 a mx include:_spf.google.com a:subdomain.anothersite.com ~all"

hardware - Fastest server ram configuration for 48GB?



I have an HP ProLiant DL160G6 server, with 2 CPU's and 48GB ram, with following modules:




  • 4x 8GB Module - DDR3 1066MHz (KTH-PL310Q8/8G)

  • 4x 4GB Module - DDR3 1333MHz (KTH-PL3138/4G)




I'm re-purposing the server now to be a VMWare host, and wonder what would be the fastest RAM configuration placement?



Also, will it make any sense to place faster memory (16 GB on 1333MHz) on 1st CPU, and slower on 2nd, despite it creating an non-even configuration (16 + 32)?



Otherwise, should I just place:




  • P1 - Channel 0 - 2x 8GB


  • P1 - Channel 1 - 2x 4GB

  • P2 - Channel 0 - 2x 8GB

  • P2 - Channel 1 - 2x 4GB


Answer



For an HP ProLiant DL160 G6, there are a few things to consider.





Summary:





  • Balance the DIMMs across CPUs.

  • Heaviest rank goes farthest from the CPU in each bank.

  • The presence of Quad-Rank memory will limit you to only using 12 of the 18 slots in the server.



So, your best option is for each CPU, populate Slots A and B with 8GB modules. Populate Slots C and D with 4GB modules.



The result will likely run at 800MHz instead of the native 1066MHz of the 8GB sticks or the 1333MHz of the 4GB sticks. If you remove two of the 4GB modules, the system will probably run at 1066MHz.







enter image description here



enter image description here


command line - Disable Windows 10 fast boot via CMD/Powershell

I dual boot Windows 10 alongside Ubuntu. Every so often I get an error that looks like this when I try to access my NTFS (Windows) drive from Ubuntu.



Error mounting /dev/sda5 at /media/mani/0AC217250AC21725:  
Command-line `mount -t "ntfs" -o "uhelper=udisks2,nodev,nosuid,uid=1000,gid=1000" "/dev/sda5" "/media/mani/0AC217250AC21725"' exited with non-zero exit status 14:
The disk contains an unclean file system (0, 0).
Metadata kept in Windows cache, refused to mount.
Failed to mount '/dev/sda5': Operation not permitted
The NTFS partition is in an unsafe state. Please resume and shutdown Windows fully (no hibernation or fast restarting), or mount the volume read-only with the 'ro' mount option



Now I realise every time I start using Windows 10 it normally has updates, these cause fast boot to be enabled. So I go to the Control Panel and check if fast boot has been enabled if so I disable it and reboot to Windows 10 (to ensure the setting has been enabled), then shutdown Windows 10 and boot Ubuntu see if the error has gone away.



If it hasn't solved it I then go back to Windows and run cmd as Admin and enterpowercfg /h off and then its usually fixed.



But I figure if it keeps happening it seems a lot of reboots are required and its quite a tiresome process.






My idea:
First I need a way to disable fast boot every time I shut down Windows 10? Just incase it gets enabled by some update. To do this I would have a script that turns off fast boot every time I shut down? (I'm yet to find a way to turn of fast boot via CMD so this is the current issue)




Then also put in that script run powercfg /h off






If my idea is sound (I'm open to other suggestions) how do you disable fast boot via CMD/PowerShell?



Currently I have to go to the Control Panel -> Power Options -> Choose what the power buttons do -> (Untick) fast boot.



My purpose is to stop Windows 10 enabling Fast Boot option after every update (I want it off!).

How to enable memory compression Windows 10


Recently I've been running programs that really like to soak up my system memory. So much that a lot of the time I don't even have a gigabyte left. This has led my system to hang and eventually crash quite often. I see in task manager there's a variable that tells me my compressed memory. I don't have it enabled, but from the sounds of it, it could solve my lack of memory issue until I buy more. How would I go about enabling Windows 10 memory compression?


Note: Yes, I've looked else where before posting, surprisingly I didn't find much, only things I found were to disable it for odd reasons.


enter image description here


OS: Windows 10 Pro


System Specifications:


CPU: Ryzen 7 2700X - 3.7GHz 8C/16T
RAM: G.Skill Trident Z RGB - 16GB (2x8GB) DDR4-3466MHz
Mother board: MSI X470 Gaming Pro Carbon
Video Card: EVGA GTX 1060 - 3GB DDR5
Power Supply: EVGA 650W - EQ (80+ Gold)
1st Hard drive: Western Digital Red - 2TB 7200RPM
2nd Hard drive: Western Digital Blue - 1TB 7200RPM
3rd Hard drive: Samsung Evo 970 - 1TB NVMe M.2 (OS Drive)
Internet Adapter: TP-Link TL-WDN4800 - 450Mbit/s transfer

Answer




How would I go about enabling Windows 10 memory compression?



Memory compression is enabled by default. However, it appears for whatever reason, you currently have it disabled. Within a Administrator PowerShell command prompt type the following command to disable memory compression


Disable-MMAgent -MemoryCompression


enter image description here


Within a Administrator PowerShell command prompt type the following command to enable memory compression


Enable-MMAgent -MemoryCompression


enter image description here


Sources:


windows xp - Tracking down System CPU usage


My System process (Not system idle process) is using 5-10% CPU constantly.


Using Sysinternals process explorer, I've identified the offending thread as having an ID of 8 and the following stack trace:


ntkrnlpa.exe!NtBuildNumber+0x33
ntkrnlpa.exe!MmIsDriverVerifying+0xb9a
ntkrnlpa.exe!ZwYieldExecution+0x941
ntkrnlpa.exe!KeRemoveQueue+0x276
ntkrnlpa.exe!MmTrimAllSystemPagableMemory+0x669b

How can I take the above information and determine which DLL/Driver/??? is the culprit?


Edit: Interestingly, after a reboot, the System process is still eating up CPU (It's the same Thread Id (8) which is using CPU but I'm assuming that's pure coincidence). The stack trace, however, is noticeably different:


ntkrnlpa.exe!KiDispatchInterrupt+0xa7
ntkrnlpa.exe!ZwYieldExecution+0x3744
ntkrnlpa.exe!NlsOemLeadByteInfo+0x19a74
ntkrnlpa.exe!PsRemoveCreateThreadNotifyRoutine+0x214
ntkrnlpa.exe!KiDispatchInterrupt+0x72e

Answer



Please configure your symbols so that you get more useful information, also look into the stacks if you can.


Other than that, you can try this procedure so that I could try to look into it (or you could yourself)... :)


windows 7 - some keyboard keys not working properly

I'm using Windows 7. All of a sudden, a couple of hours ago, this happened:


My keyboard number keys [above the letters] stopped working properly, both as numbers and as symbols. Only 5 and 6 are functional. Also, I've noticed that the End key isn't working either, and perhaps a couple more from that group.


I'm pretty sure it has something to do with those evil Sticky Keys/Filter Keys/ whatever those ease of access things are, BUT I've turned off all the ease of access keyboard options and nothing has changed. Is it possible that something is still turned on while I unchecked it? Are the on/off checkboxes to control WHEN it happens or IF it happens?
I also tried rebooting and uninstalling/reinstalling keyboard from device manager, to no avail.


It's certainly a software issue and not a hardware issue, as I've tried another keyboard and the problem persists. And, predictably enough, it's annoying. Any ideas?

Tuesday, July 28, 2015

apache 2.4 - Apache2 after graceful restart needs 100% cpu

OS: Debian 8.2, Apache: Apache/2.4.10 (Debian)



Since two days my apache2 "suddenly" starts to run on 100% cpu at night. The process does not stop then and I have run kill -9 to stop it in the morning. service apache2 stop does not work to stop the instance.



I guess it all started when I installed kolab (kolab.org) on my machine. I also installed owncloud before and did some smaller installs. Otherwise the Debian install is pretty much "fresh". But it started the night after installing kolab.



The problem seems to be triggered by a graceful restart at 6 in the morning. At least the logs hint into this direction.




And if I do manually: apachectl -k graceful I get exactly this apache2 process running on 100% cpu.



service apache2 restart does NOT trigger this problem!



I have no clue how to proceed further to find the problem.

laptop - Can a 7 days full 100% CPU load "burn-in" / "stress test" damage a modern notebook?





When I buy new computers, I usually do a "burn-in" with 100% CPU load for, say, seven days, in a well ventilated place.



This is to




  • find out if the computer has problems before I invest time into setting it up for me



  • let it "steam out" some of the "plastic/chemical gasses" before I use it in my home




But, now I'm wondering, am I creating hardware problems by doing this? Are modern notebooks built to withstand this?



I guess a server surely is, but is a notebook? I'm talking one from a "well" known brand as Apple, Lenovo, HP, ASUS, Dell, etc.



So I did a burn-in for a new notebook recently. It went fine and didn't crash the OS even once. The notebook is of a model that doesn't get that very hot.



But after some weeks the hardware seems to "give up", recently the SSD has started to act up.




So, can a seven days full 100% CPU load "burn-in" / "stress test" damage a modern notebook??



How would you do a "burn-in" of a notebook? I guess one could put a fan next to it, but then the temperature would not get that high, and huge part of the reason for burn-in would disappear.






Thank you all for answers!



But reading them, I really wonder where "computing" is today. Many say that this seven days 100% CPU load will be damaging (/wear out early) to the computer.




From my computing background (1990- ) this sounds really strange - though I'm not saying it is wrong.



What if you have some encoding work to do? Or some 3D-rendering work? Those can easily run for three days, 100% CPU load. Shouldn't notebooks be used for those things?



I can accept that some people are skeptical about my worries about "toxic fumes"; you want to see proof. OK. But really, if one can't use a new notebook at 100% CPU for some days, I really would like to see some disclaimers from computer manufacturers, or some kind of admissions from them, that this is the case.



"This notebook is not suitable for 3D rendering." LOL!!!







Added 22 Oct 2014:
I took a look at the SSD using some diagnostics software. It had information on the temperatures:




  • Highest temperature recorded ever was around 42 °C


  • Highest temperature recommended was circa 70 °C


  • Shutdown temperature was circa 75 °C





Conclusion: My seven days 100% CPU burn-in did not create a high temperature in the SSD, and it kept very good margin to the given max. Remember that I had the notebook in a room that never had an air temperature over, say, 26 °C.


Answer



Can damage? Yes. Should damage? Usually not. It will reduce the lifetime though, and I do not see any benefit of doing such an extreme burn-in for workstations or even laptops - you'd get nearly all of the benefits by running the same tests for 10-30 minutes, instead of 150 hours.



When you use a device, there's wear and tear. Lifetime of components is not infinite - many components die after a few years of normal use (some even after a few months) even though they should last forever.



There are some things to consider in your case:




  • Some Notebooks are quite simply not designed to run continuously at maximum load for ~150 hours straight. For most laptops, the cooling can not keep up with running the system at max load, so when the temperature increases the system reduces max speed to protect itself from overheating. That means the system will run at full speed, get hot, throttle, get cooler, release the throttle, get hot, throttle, get cooler, et cetera. The frequency and the severity of these temperature changes depend on the laptop. This will shorten the lifetime of components.


  • Anything with moving parts, such as hard disks, will degrade by being used.

  • SSDs, despite having no moving parts, have limited lifetime based on how many writes are made on the disk.



Engineering always involves compromises. When designing a PC, one goal is to keep costs for production down while also keeping costs for warranty repairs/replacements down. This involves designing for the most likely usage scenarios. Unlike laptops, servers can be expected to run under load 24/7, which is why they are designed to last longer than consumer desktops and laptops. That increases their cost (just compare prices of server hard disks to those of consumer hard disks).


64 bit - How to upgrade Windows 8.1 32-bit to 64-bit without CD/USB



I have a PC running Windows 8.1 32-bit and I want to upgrade to 64-bit because I heard it's faster. I watched tutorials on YouTube but all of them require a CD/USB but I have none. How would I upgrade?


Answer





  1. There is no simple way.


  2. Which is what you need.


  3. The simplest way would be to get a CD/DVD/Blu-Ray+-DLRW drive.

  4. A blank DVD.

  5. magic-iso to burn your image to the blank DVD.

  6. Boot from that and install as usual.



Sorry But that's the factsjack



VMware ESXi - vSphere - Can't exit VM console access



I'm running ESXi 4.1 on a Dell T110 Server
I connect to ESXi using vSphere
vSphere is running inside a Windows 7 VM
The Windows 7 VM is running in VMware Fusion on my Mac OS X system



When I'm in vSphere and I've selected a VM and I click the console tab on some systems the VM console won't release me when I press the control + command keys.



pfSense (FreeBSD) and Ubuntu Server behave like this. I can't exit their console screen. I have to shut down these VM's to be released from their VM console access.




Windows, Ubuntu Desktop, etc. all behave like I'd expect; When I press the control + command keys I'm released from the VM console and I'm able to navigate in vSphere.



Does anyone know what might be causing this or a way around this?



Thanks in advance.


Answer



The key combination Control + Alt solves this problem


execute batch file in invisible mode




How do I execute batch files at startup so that I won't see the cmd like black window.
I have this batch file which I use to attach vhd file on startup:


  @echo off
SET TEMPFILE="%TEMP%\%RANDOM%.TXT"
echo SELECT VDISK FILE=X:\sap.vhd >%TEMPFILE%
echo ATTACH VDISK>>%TEMPFILE%
DISKPART /s %TEMPFILE%
del %TEMPFILE%

Is there anything I could do to make the execution invisible?

partitioning - which partition should be set active in windows 10?

I accidentally made C: as active, but don't know which one was before.
Should I set the System Reserved as active?


System Reserved - (System, Primary Partition)
Win-10 (C:) - (Boot, Page File, Active, Crash Dump, Primary Partition)

iis 7 - Wildcard SSL on IIS7 - Does each site need it's own IP?




If I buy a Wildcard SSL Certificate for one domain, like: domain.com
and I have 40 sites, like apples.domain.com and pears.domain.com



All the sites are on the same IIS 7 server



Does each site need a unique IP address?



If yes, is there anyway around it?


Answer




No, they do not need to be on unique IP addresses.



Navigate to C:\Windows\System32\Inetsrv\ In the Inetsrv folder, run the following command for each of the other websites on the IP address that need to use the certificate:



appcmd set site /site.name:"{IISSiteName}" /+bindings.[protocol='https',bindingInformation='*:443:{hostHeaderValue}']



Replace {IISSiteName} with the name of the IIS site and {hostHeaderValue} with the host header for that site e.g. site.mydomain.com


Most programs not visible in Programs and Features in windows 7


The issue I'm having is that only a small percentage of programs show up in the "Program and Features" section of Windows 7, where a user can uninstall programs. Formerly known as add/remove programs.


When I use uninstall software such as TweakNow Powerpack, all software does show up and I can uninstall whatever I want with great success. This is not the issue and I am not satisfied with this work around, I would like to solve the core issue and get the list to populate in the proper location.


In tweakNow, it shows about 60 programs, In Windows Programs and Features, it shows only about 20, most of which were installed recently, post heavy virus removal. Oddly in Revo, it shows only 14. I have also looked into the registry keys that house the uninstall information:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall

These locations don't contain any DisplayName or UninstallString with more than 60 or 63 characters.
Here is a screenshot of the full tilt poker entry in the registry which does not show up in the list.


Registry Screenshot


Things I've tried:
sfc/scannow
DiskCheck
These fixes: http://www.tomshardware.com/forum/244764-45-programs-remove-programs
Booted into safe mode, same amount of programs appear.
Created a new user account, same results.


Doing a fresh install is out of the question.


Answer



Here's a link to an article on how the Programs&Features list actually works:
http://community.spiceworks.com/how_to/2238-how-add-remove-programs-works


In the particular case of your poker program, it's the presence of the SystemComponent value in the programs's registry key with data "1" that prevents it being included in the list (so the article says). I assume that your other "missing" programs have similar reasons for being excluded.


windows 10 - How to see RAM usage from processes that don't appear in the Task Manager?

I know that not all processes appear in the Task Manager. However, I am curious about the complete breakdown of my RAM usage, so I would like to view the RAM usage of all processes. How do I do this?

php - Server being hit with quite a few requests per second



I run an image hosting website. My server can get anywhere between 8 requests a second to 20 requests a second during peak hours. I am currently running a server on the current hardware:



Processor AMD Hexa-Core Speed 6 Cores x 2.8 GHz (3.3 Turbo Core)
RAM 16 GB DDR3
ECC Hard-disk space 1,000 GB
(2 x 1,000 SATA) RAID Software RAID 1




Full specifications http://www.1and1.com/ServerPremiumXL?__lf=Static&linkOrigin=ServerPremium&linkId=ct.btn.package.xl I ordered the XL6 server.



I don't statically serve the images since they are stored elsewhere on the server. They are dynamically loaded on each call with readfile(). The server has been taking a beating recently and I want to know how I can optimize the server to be able to handle this kind of traffic with ease.



I have installed eaccelerator which seems to be helping, but not helping enough. I also had X-SendFile installed at one point, which seemed to help also, but I had to remove it temporarily because of issues with Apache, although I want to try to get it back on.



I am basically here asking for advice so I can vamp up my server to easily handle 50 req a second (unless this is just completely unreasonable). I myself am a developer and do not know too much about linux/apache, although i know the basics. I am also willing to learn. Thanks for any information.


Answer



There are a number of things you can do here. For one, you mention that you serve the images with readfile()? This can be a culprit here since it is PHP that is serving the images. That is not inherently much slower than serving them static and does come with multiple benefits (like dynamic image processing), but you can have a number of pitfalls as a result. From server standpoint it is always much faster to serve images as static.




First of all, is your script - the one that returns images - pushing out correct headers? That is, are you sending out Cache-control and Expires headers that tell user agents to cache images? Your traffic might come from the fact that your images are served either all the time or too frequently. Also send a Last-modified header.



You can also send a Not-modified header as a response if a user agent makes a request for a file and you know it has not been modified since the date that user agent provides.



If you already do set all proper headers and make sure that user-agents are not uselessly requesting the data that they already have, then your problem is in your web server. Have you done any performance testing to see if this affects only images or if it affects all requests in general?



I suggest trying to see how powerful your server is when serving regular (PHP) requests. See how long your pages themselves take time and compare it against requests for an image. I suggest a good tool such as Pylot for this (it is command-line, but really useful).



(Note that for comparison it is useful to compare a page with X size to an image of X size so that bandwidth is equal and you can just grade performance).




EDIT:



Cache headers that tell user agents that make the request to cache the file for as long as possible are as follows:



$lastModified=filemtime($myPicture); // File location of your image
$cacheDuration=31536000; // One year
// This tells user agent to keep the cache for one year
header('Cache-Control: public,max-age='.$cacheDuration);
header('Expires: '.gmdate('D, d M Y H:i:s',(time()+$cacheDuration)).' GMT');

// This tells the user agent the last modified time of your image
header('Last-Modified: '.gmdate('D, d M Y H:i:s',$lastModified).' GMT');


Serving Not-modified headers is a bit more complicated:



// Testing if the servers known last modified time is different from the last modified time of file on your server
// If those times are the same, then we will not return the image and just tell the user agent to use their cache
if(isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE'])>=$lastModified){
// Cache headers (Last modified is never sent with 304 header, since it is often ignored)

header('Cache-Control: public,max-age='.$cacheDuration);
header('Expires: '.gmdate('D, d M Y H:i:s',(time()+$cacheDuration)).' GMT');
// Returning 304 header
header('HTTP/1.1 304 Not Modified');
die();
}

windows 8.1 - Connecting a second monitor blanks both displays

On my windows 8.1 computer, when I connect a second monitor the first monitor goes blank (loses signal) and won't come back even if I unplug the second monitor.
I can plug either monitor into the primary video port and it will work, but the second video port doesn't appear to work at all.
Graphics card is an AMD Radeon HD 7900 series
Monitors are both Asus VGA monitors.

windows - Shutting down the computer- reboots instead


On my Lenovo Yoga 13 with Windows 8.1, quite frequently, when I want the computer to shutdown (by pressing on Shutdown explicitly), it reboots. (it has been like that for 2 weeks I think)


I have checked the registry key PowerdownAfterShutdown, and the current value is 0. I have read on other forums that it might help to change this value to for instance to 1, but, as I recently read on http://technet.microsoft.com/en-us/library/cc939719.aspx,



Do not delete this entry from the registry or change its value. These changes can cause serious, unexpected results.



in the Caution section.


Is it that serious If I would change the value of the key, and would you recommend me doing so as a solution to this rebooting problem? Does anyone have a better solution to this problem.


Answer



The "PowerdownAfterShutdown" key has no effect on Windows 2000 or later. You're running Windows 8.1, which is newer (much, much newer) than Windows 2000, therefore this registry key has no effect.


You can set it to 0, 1, 1000, "plz", or delete it; it makes no difference.


I have a Yoga 2 11" running Windows 8.1, and I don't have this problem. But I don't run any custom drivers, I have all Windows Updates installed, and I haven't installed anything out of the ordinary.


Unfortunately, debugging reboot/poweroff/standby issues is very difficult. The tried and true method of troubleshooting is this:



  • Reinstall your OS clean with the default image from the recovery partition.

  • One by one, install every program you have installed on your current install, and after each installation, try to shutdown, and see if it reboots instead. If it does, that's your problem.

  • One by one, install every updated driver you have installed on your current install, and after each installation, try to shutdown, and see if it reboots instead. If it does, that's your problem.


I do not think there is anything under Power Options that would cause this behavior, unless maybe the Yoga doesn't work properly with Hybrid Sleep or Fast boot disabled.


If, upon a clean install of the operating system with absolutely no modifications, you can replicate this behavior, then it is either a firmware or hardware problem.


microsoft office - How do I format all hyperlinks in a Word document?

I have an MS Word document which has several links that don't show up as links. Hovering over the text shows the target URL, and if I right click to Edit Hyperlink, I can see the URL and the text shown for the hyperlink. However, the link boundaries are not visually apparent in the document.


I can use the Format painter to copy styling from a new and properly styled hyperlink to each one of these improperly formatted ones, but that will take a long time as there are many hyperlinks in my document and their edges are hard to find (this is the problem). How can I get ALL the links in my document to look like links?


Helpful info: when I click to place the cursor in one of these links and open the Styles pane (Alt+Ctrl+Shift+S or in the Home tab, click the arrow in the lower right corner of Styles), I can see their Style is Standard rather than Hyperlink.

Word 2007 - Pasted Text Not Spellchecked?

My Word 2007 spell-check seems to work fine, except that when I paste in text from somewhere else, it won't detect any misspellings in that pasted text...no matter what I try.



If it makes any difference, when I paste in text, the formatting is preserved (size color etc).



Any ideas on what to try?

Database (MySQL) and SSD lifetime - "lot" of writes to DB




In company where I work we started using SSD for our internal 3 GB MySQL database



Difference in perfomance is HUGE, which is great.



What I am worried about is lifetime of SSD



Writes to DB are perfomed 24hrs/7days, very few reads.



Should I be worried about the lifespan of SSD?





  • Database (binaries) size is 3 GB, MySQL, InnoDB tables

  • Hard drive(s) size is 250 GB (RAID 1)

  • We do about around 100 UPDATE's / INSERT's per minute 24h/7

  • We do about around 10-20 row UPDATE's / INSERT's per minute 24h/7



Update: (some more data)





  • SSD's in use: SAMSUNG 250GB 840 Evo SATA III

  • Software raid (mdadm)

  • System: CentOS 6.4

  • MySQL version: 5.4



Update 2:




  • no TRUNCATE queries are perfomed


  • daily stats: lot of UPDATE's (>300k), < 50 DELETE'S, a quite few INSERT's as database is growing ~7-10 MB/day


Answer



10 MB/day = 4 GB/year. If formatted with ext4 and TRIM is enabled, no other data is saved on SSD (especially swap), then it will need ca. 200GB/4GB*2 = 100 years for one (!) complete RW cycle, SSD can withstand thousands.



Follow general recommendations, enable TRIM and no problem: https://wiki.archlinux.org/index.php/Solid_State_Drives



In your case problem might be in RAID. LVM in Centos 6.4 supports TRIM with issue_discards option through /etc/lvm/lvm.conf. mdraid - doesnt (see RHEL Solid-State Disk Deployment Guideline)



Globally, honestly, I've never heard about dead SSD's caused by internal reallocation reserve exhaustion, I've only read it once when Linus Torvald's SSD died (https://plus.google.com/+LinusTorvalds/posts/V81f6d7QK9j). I use some old (maybe first generation) models as block-cache with HW RAID on the servers and flush rate is MUCH higher, running years.



hardware failure - Laptop internal hard disk not found error

My Dell Vostro 2520 64-bit laptop. Shows the following error on power on.



Internal hard disk drive not found


To resolve this issue, try reseat the drive


No bootable devices -- strike F1 to retry boot, F2 enter setup menu, F5 enter PSA



I ran the F5 Dell internal diagnostic tool. It shows all the rest of the peripherals working correctly except no hard drive status.


The last thing I did with the laptop was to install Virtual Box and install Windows 7 32-bit OS in the virtual guest machine. The next day I got the hard disk not found error. So tried to repair any possible corrupt OS to boot from USB drive but on reboot I get a similar "No bootable devices" error.


The legacy option is enabled and secure boot is disabled in the BIOS.


To fix a possible configuration issue tried to boot from USB drive to repair os but again it shows no bootable device found error. Tried with different usb drives hp and sandisk, USB drives are recognized and shown in the bios but while booting it show no bootable devices


What could be the possible cause and fix for the problem.

Monday, July 27, 2015

ubuntu 16.04 - Deny NTP servers with stratum more than specific level

How can I deny in my /etc/ntp/ntp.conf to sync with the NTP server with specific stratum level (e.g. more than 5 )?
I have a bad NTP server in my local network and sometimes is going really wrong after starting offline. I don't have internet and I cannot use public NTP servers for adjust time in my server.
This NTP server is not my server and I cannot rights to change config on it. In this case, NTP server cannot connect to other NTP servers online, so it is have not the exact time, and stratum level is changing from level 2 (then it is good) to level 9 (then it is bad).



Syncing time with bad NTP server with stratum 9:



root@ubuntuserver1604lts:~# ntpq -p
remote refid st t when poll reach delay offset jitter
==============================================================================
*172.112.2.14 11.22.33.44 9 u 60 64 397 0.565 -53.519 2.984

LOCAL(0) .LOCL. 10 l 9h 64 0 0.000 0.000 0.000


I want to filter out temporarily NTP servers then stratum is "9" (or 4 or more) and syncronize time only then stratum is "4" or lower.

smart - Anything I can do about erratic hard disk drive speeds



I don't seem to have very good luck with hard disk drives these days; 3 side-by-side (non-RAID) drives on my machine, replaced 5 drives in the last 4 years. My problem of the moment is that my largest drive (3000GB) seems to now be having some pretty serious read issues.



At best, accessing it comes up with erratic read/write speeds, but for the most part, I can’t even really access the data for anything meaningful and testing it seems to fail out after a bit. The SMART test on it lists two warnings under “Reallocated Sector Count” and “Current Pending Sector.”




The drive itself is a Seagate Barracuda bought in 2013. Installed at the same time was a SSD which seems to be functioning just fine (I run performance and health tests on it every once and a while as it is my primary drive). The machine is a custom build with 1000w power supply and Cooler Master case. The machine and drives stay relatively cool and have good ventilation.



Is there anything I can do to save my drive, or am I looking down the barrel of yet another hard disk drive replacement?



1



2


Answer



What specific kind of drive/model is this? Are your previous drives the same type of HDD? I assume yes if your running a RAID (what you meant by 3 parallel drives?) Regardless, this seems to be a reoccurring issue and simply "replacing the drive" isn't going to help. There's clearly an underlying issue that isn't being addressed, drives shouldn't be failing this frequently.




Perhaps it's an issue with the specific brand of drive. For instance Western Digital's green drives tend to have more "erratic" usage than others, especially if your settings or the way you access them isn't necessarily in tandem with their intended operations.



If you require this many drives perhaps consider educating yourself in HDD health, the difference between "Reallocated Sector Count and Current Pending Sector", more importantly basic HDD diagnostics and repair tools.



Here's some stuff to get you started:



Hard vs. Soft Bad sectors (part of what your SMART is flagging):
http://www.howtogeek.com/173463/bad-sectors-explained-why-hard-drives-get-bad-sectors-and-what-you-can-do-about-it/




Free/Purchasable HardDrive diagnostics and scans that will tell you more than the surface scans of your SMART. They also offer potential repairs based on the Hard vs. Soft sectors mentioned. HDAT2, MHDD, SpinRite, HDDRegen, Hiren's Boot CD, Ultimate Boot CD.



EDIT: Seagate (3TB) drives have been notorious for some of the least reliable drives.



enter image description here
enter image description here



http://www.pcworld.com/article/2089464/three-year-27-000-drive-study-reveals-the-most-reliable-hard-drive-makers.html


My USB Flash Drive is seen as a fixed disk. How can I add the "removable bit" to my drive to make it bootable?

I am using:



  • Windows 8

  • Walgreens EasyStore 16gb USB 2.0 Flash Drive (Sandisk internals from my research)

  • Windows 7 USB DVD Download Tool


The flash drive is seen as a fixed disk in Windows, which makes it unbootable.


How can I add the "removable bit" to my drive to make it bootable?

.htaccess - htaccess rule to encode only some captured group

My current rule is



RewriteRule ^data/(v[0-9]\.[0-9]\.?[0-9]?)/.*$ http://35.231.131.100:5000/cocoon_$1?subject=https://w3id.org/cocoon/$0 [L,NE,QSA,R=308]


It will convert




https://w3id.org/cocoon/data/v1.0.1/2019-03-07/CloudStorageTransactionsPriceSpecification/Azure/managed_disk/transactions-ssd



to



http://35.231.131.100:5000/cocoon_v1.0.1?subject=https://w3id.org/cocoon/data/v1.0.1/2019-03-07/CloudStorageTransactionsPriceSpecification/Azure/managed_disk/transactions-ssd



But for another example original URL



https://w3id.org/cocoon/data/v1.0.1/Measurement/DownlinkSpeed-1-128-KB/StorageService/Gcloud/150.203.213.249/lat=-35.271475/long=149.121434/2019-02-26T07%3A14%3A19.932Z/australia-southeast1




I need to encode the query string for subject=, i.e.



http://35.231.131.100:5000/cocoon_v1.0.1?subject=https%3A%2F%2Fw3id.org%2Fcocoon%2Fdata%2Fv1.0.1%2FMeasurement%2FDownlinkSpeed-1-128-KB%2FStorageService%2FGcloud%2F150.203.213.249%2Flat%3D-35.271475%2Flong%3D149.121434%2F2019-02-26T07%253A14%253A19.932Z%2Faustralia-southeast1



I'm currently using the NE flag, for not escaping $1, i.e. v1.0.1.



How do I encode the https://w3id.org/cocoon/$0 part?



Some reasons behind all this: It is the : in the date time part of the URL stopped the page from working, encoding it individually to %3A doesn't work, so I'm encoding the whole subject= part.







Edit



Rules suggested by MrWhite, doesn't quite work.



RewriteCond %{THE_REQUEST} [a-z]{3,5}\s.*?/(data/(v[0-9]\.[0-9]\.?[0-9]?)/.*)\s [NC]
RewriteRule ^data/(v[0-9]\.[0-9]\.?[0-9]?)/.* http://35.231.131.100:5000/cocoon_$1?subject=https\%3A\%2F\%2Fw3id.org\%2Fcocoon\%2F%1 [L,NE,QSA,R=308]



I tested with



curl http://localhost/cocoon/data/v1.0.1/Measurement/DownlinkSpeed-1-128Gcloud/150.203.213.249/lat=-35.271475/long=149.121434/2019-02-26T07%3A14%3A19.932Z/australia-southeast1


It redirects to
http://35.231.131.100:5000/cocoon_v1.0.1?subject=https%3A%2F%2Fw3id.org%2Fcocoon%2Fdata/v1.0.1/Measurement/DownlinkSpeed-1-128-KB/StorageService/Gcloud/150.203.213.249/lat=-35.271475/long=149.121434/2019-02-26T07%3A14%3A19.932Z/australia-southeast1



This can't be recognized by my Linked Data Fragments server. The / isn't encoded. I think the subject doesn't take a partial encoded string. With : it has to be encoded, hence the whole subject string has to go with the encoding option.




And for B flag, I tested with B=/, it seems everthing get encoded twice? i.e. . to %252e and / to %252f?



And thank you for pointing out the unintentional trailing dot, I actually want v[0-9]\.[0-9](?:\.[0-9])?



I also tried the N flag, but couldn't get it right. It becames an infinite loop.



RewriteRule ^data/(v[0-9]\.[0-9]\.?[0-9]?)/([^/]+)/(.*) data/$1/$2\%2F$3 [N=20]
RewriteRule ^data/(v[0-9]\.[0-9]\.?[0-9]?)/.* http://35.231.131.100:5000/cocoon_$1?subject=https\%3A\%2F\%2Fw3id.org\%2Fcocoon\%2Fdata\%2F$1\%2F$3[L,NE,QSA,R=308]



I wanted [^/]+ to match anything not /, so I can replace all slash after version number to be the encoded value, added \ to escape the %2F.

Windows 2008 Firewall - How do I restrict HTTP inbound to specific IP?

My goal is to restrict all HTTP inbound requests to a specific IP addresses. I thought it would be a simple process - but I am not getting the result desired



I have modified a predefined rule called WWW (HTTP Traffic-In) - so that it "Block" incoming connection (and made sure the this inbound rule's Scope applies to the currently active Profile)



I did not at this stage - specify allowable IPs - as I want to see if the rule would block ALL http traffic inbound.



In the Private Profile (which is the active profile) - i have these settings:
- Firewall state: On
- Inbound connections: Allow
- Outbound connections: Block




Windows Firewall Overview Page shows:
- Private Profile is Active
- Inbound connections that do not match a rule are allowed
- Outbound connections that do not match a rule are blocked



However, the firewall rule still allowed HTTP traffic inward and my Windows 2008 server still responded with a test page



I know it should be a simple task setting up a firewall rule - but perhaps I missing something ??

Install multiport module on iptables

I'am trying to install "fail2ban" on Cubidebian, a Debian port for Cubieboard (A raspberry like board).


The following rule failed due to "-m multiport --dports ssh" options (It works, when i run manually the command without multiple options).


$ iptables -I INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh"
iptables: No chain/target/match by that name.

When i make a cat on "/proc/net/ip_tables_matches", i see that multiport module is not loaded:


$ cat /proc/net/ip_tables_matches
u32
time
string
statistic
state
owner
pkttype
mac
limit
helper
connmark
mark
ah
icmp
socket
socket
quota2
policy
length
iprange
ttl
hashlimit
ecn
udplite
udp
tcp

The result of iptables -L -n -v command :


$ iptables -L -n -v
Chain INPUT (policy ACCEPT 6 packets, 456 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 3 packets, 396 bytes)
pkts bytes target prot opt in out source destination
Chain fail2ban-apache (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fail2ban-ssh (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0

What can i do to compile or to enable the multiport module?


Thanks in advance for your help

Configure postfix to DKIM-sign emails generated from the system




My web hosting server features a Postfix setup up and running. That postfix is also open with STARTTLS on port 587 for authorized users (only me, myself and I right now) to send emails to any domain after signing it with DKIM.



Every email I send via Outlook authenticating myself is fine. All DMARC reports display no error. The problem is when web applications send email via that Postfix.



Since I use Apache's mod-itk for PHP hosting, all emails are generated by username@host.mydomain.com and submitted to Postfix via standard means (sendmail???).



But in that way they are not DKIM-signed. Consider the following:



$ mail check-auth@verifier.port25.com

Subject: Test DKIM
Hello
.
EOT


Port25 responded:



----------------------------------------------------------
DomainKeys check details:

----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=djechelon@host.mydomain.com
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified:



Postfix logs don't show dkimproxy interaction.



Before posting my configuration, let's repeat the situation and ask the question.



Currently, when I send an email via SMTP/TLS on port 587 it gets DKIM-signed. When a process on the server sends an email using mail command or PHP builtin mail function, the mail dorsn't get signed by dkimproxy.



The question is: how to sign every email coming from the server itself with dkimproxy?




Configuration is pasted to http://pastebin.ca/2374363. Please note that I have only dkimproxy.out enabled for the moment


Answer



You added dkim SIGNING to submission port only.



Postfix handles smtp separatly submission from pickup (mails submited by sendmail command are entering postfix via pickup)



In postfix You should use dkim milter in main.cf



smtpd_milters = inet:localhost:10027
non_smtpd_milters = inet:localhost:10027



First line is for SMTP submission (port 587)



Second line is for mails entering via pickup



One thing to note is that bounce messages and NDR reports generated internally by postfix will not be DKIM signed



Reference http://www.postfix.org/MILTER_README.html


Emails sent through SMTP on VPS are considered to be spam

During our business we have to make regular mailing to our clients: invoices, information emails, etc.



Previously we received and sent emails using mail server of our hosting provider. But as the number of clients increased, we have to order VPS and install our own SMTP server their for performing our mailings.




So, now we have default provider mail server for receiving emails, let it be business.com. We have email accounts like info@business.com, etc. We use this mail server to receive emails and manage our email accounts.



And we have SMTP server which is running on VPS. We use this SMTP only for sending emails with From addresses like info@business.com. VPS has default DNS records created by provider, let it be IP.AD.RE.SS <-> ip-ad-re-ss.provider.com.



Mailings are made using either desktop email clients or custom Java-based application which uses JavaMail for sending emails.



The problem is that most of emails sent by us are placed in spam folders in clients email accounts. Clients have their email in Gmail, Yahoo, Hotmail, etc.



Could you please tell what is the most probable reason and solution of described problem?




Are there any service in Intranet where we can send test email and get an answer with description why this email could be considered to be spam?

Force memory allocation for Java VM in Windows 7 32-bit


How can I start a Java program with large max heap?


I use a memory hog program (CrashPlan) written in Java, which sometimes, at peak use, needs some 1.5 GB of memory (this is controlled by the parameter -Xmx1500M).


Usually (and at least when starting) it needs very little memory, but with anything lower than -Xmx1500M it crashes at peak use. After start (with -Xmx1000M), Task Manager shows its memory usage about 100 MB in Working Set, Private Set, and Assigned Memory.


However, Java VM cannot start with -Xmx1500M, I guess because it fails to allocate this memory. (With -Xmx1000M it does start, but crashes later on.)


I use Windows 7 pro 32-bit (not 64-bit), with 32 GB memory installed (3 GB accessible, and pagefile on a large RAM disk in inaccessible memory).


I would expect that Windows would swap out other processes in order to allocate memory for Java, and since Java does not use it anyway, would swap Java's unused memory to pagefile. Say, right now I see mydefrag process using 1700 MB allocated set with no problem.


(It seems until last week it worked this way. Then something changed.)


How can I force Java to start with -Xmx1500M?


Answer



As you already realized the addressable memory of your user-process is limited to 2GB on 32-bit windows (half of the 4GB address-space is reserved for the OS). But you must also take into account that heap-memory is not the only kind of memory the Java-VM uses: there's also requirements for native memory-allocations, stack-space, perm-gen, code-cache etc. All of these have to come from the same 2GB that are available. So the exact maximum heap-size may vary between java-versions (maybe even between different computers), but according to Oracle



On most modern 32-bit Windows systems the maximum heap size will range from 1.4G to 1.6G.



So for anything that needs 1.5 GB up of heap you might be out of luck on a 32bit-JVM (and so on a 32-bit OS).


You might be able to gain some additional MB by reducing other memory-pools, e.g. by setting -XX:ReservedCodeCacheSize (default 32m) or -XX:MaxPermSize (default 64m), but that might lead to other problems while running your application.


windows - can't access web site with same name as AD domain name

their internal Windows/AD domain name is blahblahblah.com and their public website is blahblahblah.com and they can't see their website while on the office network (the web site loads just fine from anywhere else). How do I fix this so they can see their public web site internally?

Sunday, July 26, 2015

caffe - Pulling docker image using Ubuntu


I correctly install docker and test it. i pull some of images using



docker pull imagename



but i am having problem while pulling caffe image.


i used the command



'docker pull bvlc/caffe'



and i get the following error:



Error response from daemon: manifest for bvlc/caffe:latest not found



Please note that docker pull Ubuntu is working and Ubuntu image is on my system.


Answer



You should use this command:


docker pull bvlc/caffe:cpu

Refer to this official readme link


Hop this help!


DDOS protection from ISP side, UDP protocol, whitelist

Is it possible to ignore packets from ISP side which are incoming to my server?




Is possible this kind of situation ? :



I have white list of IP addresses.
I continually update white list and sends it to ISP(?).
ISP checks if UDP packet sender's ip address is on white list. If it is - ISP sends packet to my server. If it isn't, it blocks it so my bandwidth is not wasted.



Thanks for replies.

windows 7 - Disappearing Hard Disk

Symptom: I will be using the drive normally, playing a game that has been installed to it, and the game will freeze, almost freezing the entire system, then crash. My Computer no longer displays the drive. The Disk Manager no longer displays the drive (in fact, the drive count is off now, Drive 1 is missing, but 0/2/3/4 are all there).


System Events related to the disk in the order that they occured (Event ID)



  1. The driver detected a controller error on \Device\Ide\IdePort5 (11)

  2. The device, \Device\Harddisk1\DR1, is not ready for access yet. (15)

  3. An error was detected on device \Device\Harddisk1\DR1 during a paging operation. (51)

  4. The system failed to flush data to the transaction log. Corruption may occur. (57)


Each of these is repeated multiple times in a row, from 2 to 200 or so.


What I've tried so far


Cleared some space on the drive, its now down to around half full.


Replaced the SATA cable, and plugged it into a different receiving port on the MB. Also re-seated the power cable.


Other assorted Notes


The drive will reappear on reboot, and work normally for an uncertain length of time, depending on amount of access, before failing again with the same errors and behavior.


I recently upgraded my video card from 2 GeForce 9500's to 1 GeForce 440.


600W power supply.


If there's any other data you need, please ask for it, I either dont know you need it, or need to look it up myself.


UPDATE: SMART
Here are the smart attributes for the drive in question. Im not 100% certain I understand these completely...but they dont look like they flag anything as an actual failure...


=== START OF READ SMART DATA SECTION ===
SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000b 100 100 016 Pre-fail Always - 0
2 Throughput_Performance 0x0005 131 131 054 Pre-fail Offline - 147
3 Spin_Up_Time 0x0007 115 115 024 Pre-fail Always - 176 (Average 178)
4 Start_Stop_Count 0x0012 100 100 000 Old_age Always - 2373
5 Reallocated_Sector_Ct 0x0033 100 100 005 Pre-fail Always - 1
7 Seek_Error_Rate 0x000b 100 100 067 Pre-fail Always - 0
8 Seek_Time_Performance 0x0005 131 131 020 Pre-fail Offline - 29
9 Power_On_Hours 0x0012 097 097 000 Old_age Always - 24969
10 Spin_Retry_Count 0x0013 100 100 060 Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 1195
192 Power-Off_Retract_Count 0x0032 098 098 000 Old_age Always - 2881
193 Load_Cycle_Count 0x0012 098 098 000 Old_age Always - 2881
194 Temperature_Celsius 0x0002 193 193 000 Old_age Always - 31 (Min/Max 12/50)
196 Reallocated_Event_Count 0x0032 100 100 000 Old_age Always - 2
197 Current_Pending_Sector 0x0022 100 100 000 Old_age Always - 0
198 Offline_Uncorrectable 0x0008 100 100 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x000a 200 200 000 Old_age Always - 19

anti virus - Antivirus in Windows 8




I have been using Windows 8 for a while, and I have just remembered that I did not install any antivirus software. To my surprise, I don't think Windows 8 has ever shown any of the usual nag popups that appeared in Windows 7, Vista, or XP if you didn't keep an up-to-date antivirus.



Is there a default antivirus in Windows 8 already installed? Or is the nag popup just disabled?


Answer



Yes, Microsoft Security Essentials is now built in to Windows 8, it has been integrated in to Windows Defender. See this SU answer on instructions on how to access the features


How can you assign a batch file to a special key on a keyboard?

I'm trying to use the special keys (play,pause,next,prev, internet) on my keyboard to open select batch files and im having trouble doing this with Windows or a 3rd party program



I understand you can change what media program is opened by going to default programs but that only lets you open media apps.



I tried assigning a keyboard shortcut to a batch file shortcut but that only lets you pick traditional keyboard shortcuts like Ctrl + Alt + O which is plausible but if I'm using a program that already has that key combo I think that program will intercept it like a bad pass




Any apps that can do this or how to do this without an app is greatly appreciated

reinstalling windows 8.1 with only os partition format?

when I reinstall windows 8.1 if I Don't format other partition because of the data. will there be a problem?
I have already formatted once without formatting any partition but windows. old is not able to delete

routing - Amazon AWS: SSL in our testing environment



My company has a running business web service on AWS which uses a wildcard SSL certificate (works for *.example.com). Multiple partners have subdomains and need SSL (https://partner1.example.com, https://partner2.example.com, etc.) and we serve either HTML or JSON responses to them.



Our production site has a web-facing ELB that has our SSL certificate installed. THe ELB balances and terminates SSL to a cluster of production server instances within our VPC. Our web app knows how to serve the correct partner HTML/JSON based on the sub-domain name.



I want to replicate this for our test environments (e.g. QA, Staging, Demo) as simply as possible. But test and production environments can't be the same server instances; I need to know that I won't kill production if I mess up on our test environment.




Ideally, the same ELB that handles production traffic could somehow route traffic to my test servers, perhaps if they used a known IP address or DNS subdomain? Am I correct that this isn't possible?



I suppose I could set up an ELB with the SSL cert for each test environment, each "balancing" to one server, but this seems overly complicated, and I would guess expensive too.



All instances, production and test, run within our VPC. But currently only the production cluster has SSL set up on the ELB (which terminates SSL) and passes along straight HTTP requests to the instances themselves.



The test servers accept HTTP. I have public elastic IPs and DNS names set up (staging.example.com, qa.example.com, demo.example.com) ... but they are not protected by SSL.



There's almost no critical or customer data on test server instances, and they are secured and patched properly as any web-facing server should be (I hope!!). Still, I would like SSL not only for additional security, but also to have my test environment match my production environment as closely as possible.




In all but the case of our staging server, the other environments are supported by a single instance (e.g. demo and qa both on the same server) with Apache named virtual host configurations. So, for test, lots of sites, but only a few servers.



Is there a way that I can still have my wildcard SSL certificate installed only on my load balancer (or perhaps one more), or some other configuration that allows me to detect and route the HTTP request to the right test server, based on IP or domain name (or even an HTTP header)?



I know this is a complicated question. I understand AWS, security, and networking pretty well, but I am still trying to figure out routing and even internal DNS within the VPC environment, so may be ignorant of my options.


Answer



Honestly? I'd say you're overthinking this. Just use multiple ELBs and put the *.example.com certs on all of them. This isn't really cost prohibitive. In your entire stack, the ELB is probably going to be one of the cheapest components. This also allows you to spin up stacks from the same CloudFormation template or provisioning system. You can use the cert on as many ELBs as you'd like.



We faced a problem very similar to yours and decided to do exactly what I describe above. We ended up saving money because the ELB just isn't a significant predictor of our monthly cost, and it'd have taken far more time in salary to hack up a solution, even if one was possible. With ELBs you only pay for what you use traffic-wise, so QA and demo environments just aren't going to be anywhere near the cost of production load. In the example described in that link, 100GB of traffic in a month is $18. That's like three Starbucks coffees.




One added benefit: It's also way easier to debug. No need to worry about weird trafficking rules or the like.


windows - Fastest way to search a directory for file names with specific charachters?




I have a directory which contains sub folders which contain files with very diverse names from many different users so they are not named very consistently. I am moving this directory to a sharepoint site which does not allow certain characters as file names because the way it was designed they are reserved characters.



Invalid chars: " # % & * : < > ? \ / { | } ~



Referenced from:
http://www.thesug.org/mossasaurus/Wiki%20Pages/SharePoint%20Invalid%20Characters.aspx



As you can see there are many chars which I would have to look for, I could tear through the many folders and hundreads of files hunting for each invalid char by eye, but is there a faster way can I go about searching the master folder which contains sub folders as well as their contents for each or every one of these chars so that only the folders and files with the bad chars show up?




Thank you for your time,


Answer



This ought to do the trick for you:



dir *#* *%* *^&* *{* *}* *~*  /s /b > bad_file_names.txt


This should pick up the files with bad characters and dump them in a neat little text file list. I omitted the characters that should already be invalid on Windows (I assume you're running Windows what with the SharePoint server).


How to change Windows 7 Wallpaper using the registry?

All I'm trying to do is get Windows to switch to a different Wallpaper folder at night (a folder containing night images). To achieve this I'm planning to use Task Scheduler to run .bat files which simply switch the names of the two folders around. That's pretty straight-forward.



The only problem is that Windows won't let me rename the folder containing the current Wallpaper image. This means I have to temporarily change the current wallpaper image to something else while I'm renaming the folders.



And to do this I need some kind of file to modify the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\Wallpaper



I did find a script someone had written which I think does this, but it's too technical for me to understand. I don't know anything about the C language, what classes and namespaces are, or how to create a file that runs this code in Windows. Also, it seems like a lot of code just to change the value of a single registry key. And would I have to install software?



Perhaps someone could give me some help?




Also, could anyone confirm that the Windows wallpaper folder is not kept in the registry? If it was, I could simply change this, and wouldn't have to rename folders. But I've done a lot of searching and can't find any trace of it in the registry.

Windows 10 PC keeps Freezing


My computer keeps freezing and I'm struggling to find the cause of the issue. I have tried replacing the RAM. De-fragmenting, disk clean ups, windows updates, disabling automatic updates.


It either freezes with no message or occasionally displays the CLOCK_WATCHDOG_TIMEOUT error.


The easiest way I can replicate the error is video editing or playing a game and turning settings up to high. I can also replicate the error when running a full antivirus scan with AVG (error still occurs when I uninstall it)


Updates


19/01/2016 - I have tried a repair install and the issue still persists


The Specs of the PC are below:


Operating System: Windows 10
Mother board: Asus maximus vi impact
Processor: intel i7 4790k
Processor Cooler: Corsair H80i
Graphics Card: MSI GeForce GTX 770 2GB PCI-E 3.0
Power: Corsair 650W CS650M CSM Semi-Modular
Ram: Corsair Vengeance Pro Series 16GB (2x8GB) DDR3 2400Mhz
Main hard Drive: Samsung 840 EVO 500GB
Other Drive: Seagate 3TB 3.5 inch 7200RPM

Running MiniToolBox.exe I get the following event log error:


MiniToolBox by Farbar Version: 02-11-2015
Ran by difurious (administrator) on 14-01-2016 at 21:57:45
Running from "E:\Downloads"
Microsoft Windows 10 Pro (X64)
Model: All Series Manufacturer: ASUS
Boot Mode: Normal




========================= Event log errors: ===============================


Error: (01/14/2016 09:22:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/14/2016 09:19:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/14/2016 07:42:35 PM) (Source: Application Error) (User: )
Description: Faulting application name: SystemSettings.exe, version: 10.0.10240.16384, time stamp: 0x559f39ae
Faulting module name: MusUpdateHandlers.dll, version: 10.0.10240.16590, time stamp: 0x563ad6f2
Exception code: 0xc0000005
Fault offset: 0x000000000002c7a8
Faulting process ID: 0x22a0
Faulting application start time: 0xSystemSettings.exe0
Faulting application path: SystemSettings.exe1
Faulting module path: SystemSettings.exe2
Report ID: SystemSettings.exe3
Faulting package full name: SystemSettings.exe4
Faulting package-relative application ID: SystemSettings.exe5


Error: (01/14/2016 07:09:48 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.


System Error:
Access is denied.
.


Error: (01/14/2016 06:47:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/14/2016 06:47:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/11/2016 10:25:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/11/2016 10:25:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/10/2016 10:14:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: difurious)
Description: Activation of application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.


Error: (01/14/2016 09:49:23 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}


Error: (01/14/2016 09:44:12 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 9:39:23 PM on ‎1/‎14/‎2016 was unexpected.


Error: (01/14/2016 09:39:24 PM) (Source: BugCheck) (User: )
Description: 0x00000101 (0x0000000000000018, 0x0000000000000000, 0xffffd0010831f180, 0x0000000000000004)C:\WINDOWS\MEMORY.DMP


Error: (01/14/2016 09:39:24 PM) (Source: BugCheck) (User: )
Description:


Error: (01/14/2016 09:39:23 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 9:29:09 PM on ‎1/‎14/‎2016 was unexpected.


Error: (01/14/2016 09:32:17 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}


Error: (01/14/2016 09:28:13 PM) (Source: DCOM) (User: difurious)
Description: 1084WSearchUnavailable{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


Error: (01/14/2016 09:28:12 PM) (Source: DCOM) (User: difurious)
Description: 1084WSearchUnavailable{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


Error: (01/14/2016 09:23:53 PM) (Source: DCOM) (User: difurious)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}


Error: (01/14/2016 09:23:53 PM) (Source: DCOM) (User: difurious)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}


Error: (01/14/2016 09:22:06 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141


Error: (01/14/2016 09:19:44 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141


Error: (01/14/2016 07:42:35 PM) (Source: Application Error)(User: )
Description: SystemSettings.exe10.0.10240.16384559f39aeMusUpdateHandlers.dll10.0.10240.16590563ad6f2c0000005000000000002c7a822a001d14f025d5554abC:\WINDOWS\ImmersiveControlPanel\SystemSettings.exeC:\Windows\System32\MusUpdateHandlers.dlla7265b74-818c-498c-9ff4-d8512f85bc5cwindows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewymicrosoft.windows.immersivecontrolpanel


Error: (01/14/2016 07:09:48 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.


System Error:
Access is denied.


Error: (01/14/2016 06:47:23 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2147024865


Error: (01/14/2016 06:47:23 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141


Error: (01/11/2016 10:25:41 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141


Error: (01/11/2016 10:25:41 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App-2144927141


Error: (01/10/2016 10:14:27 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: difurious)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141


Date: 2016-01-14 21:56:21.224
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:56:21.165
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:40:11.746
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:40:11.676
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:34:05.400
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:34:05.341
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:34:04.916
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 21:34:04.855
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 19:54:06.891
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Date: 2016-01-14 19:54:06.831
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


Answer



Updating the bios using the tool in the link seems to have solved the issue


http://www.asus.com/microsite/2014/MB/New_4th_gen_Intel_processor_compatibility/


linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...