八克里: 09/2008

不免俗的先來各預告片...

看過這片已經很久了，但都沒有心情寫心得文。個人覺得會熱賣的最大原因：
1.台灣人在地的情感佔了很大的因素，劇中的角色從國小6年級到經歷日據時代號稱台灣公園內最厲害的老阿伯

涵蓋的年齡廣泛，每個看電影的叫角色幾乎可以投影到自己或生活中的朋友上。
2.劇中口白在地化及生活化，我喜歡使用台灣話說話但真的日常生活常會因為工作關係不得不使用國語來表達工作上的呈現，貼切的語言更拉近了在地的情感。或許有人覺得很爆笑那是因為現代都市生活太過壓抑所以很難看到這樣的言語，就我看來台灣人就是這樣再說話的。

3.海角直銷會的力量，如果你看著票旁的成長圖 http://cape7.pixnet.net/blog/post/21746004 在一開始票房在國片中算是不錯，看過之後的網友在MSN及blog推薦後，小眾市場漸漸的變大。這個趨勢可以從google的搜尋趨勢看出來。(你會問yahoo勒？？yahoo基本上是非自然搜尋引擎不列入參考，簡單的講就是付費search)
* 海角七號google 趨勢圖

4.颱風適時的來到 9/5~9/6 全台放颱風假，但有些縣市風雨不大，沒地方去就剛好擠進戲院看電影，於是剛好就創造出了爆發性的票房轉捩點這兩天的票房共 475萬，硬是把洋片比了下去，敏感度較低的主流媒體(沒付錢不播？)也不得跟著這股旋風（之前只有自由及三立這些愛台灣的電視台有報導多一點）。接下來成長幾乎天天漲停板(如果這是股票就好了)，配合導演及演員的全省巡迴QA又拉台了人氣.....

==================================
颱風：欠你的總是要還的....
魏導：........
颱風：9/27(sat),9/28(sun)我還會再來...
魏導：...............
==================================
5.主流媒體報導後依以前的看洋片的經驗，上網用bt,foxy及emule幾乎都可以找到該電影的種子.....洋片外國公司都用釣魚的方式舉發，但偏偏這部片是國片沒有在大陸上映所以....
但海角七號還是有種子呀！！....抓過看過的都說讚..........

種子是內容為立花里子主演的愛情動作片..........

http://www.hp.com/rnd/support/faqs/2610.htm

Q: Are ACLs (Access-Control Lists) Supported? Yes, two types of ACLs are supported with a maximum of 127 for each type (total of 254):

* Port Based ACLs
Port Based ACLs can be configured through the CLI (Command Line Interface)
ACLs can be shared across ports
ACLs can filter Layer 3 IP, and Layer 4 source and destination TCP/UDP ports
Logging can be configured for deny, first hit, and summary every 5 minutes
* User Based ACLs
Must be configured through IDM (Identity Driven Manager)
Supports a maximum of two users per port
Processes Layer 2 MAC, Layer 3 IP, and Layer 4 TCP/UDP
Counters are available and can be displayed using the sh

開解鎖如下：
ftp://ftp.hp.com/pub/networking/software/
夾檔如附件
章節再 2600-2800-4100-6108-Security-Oct2005-59906024.pdf
檔案的 section 9 節錄如下!!
MAC Lockdown
MAC Lockdown is available on the Series 2600, 2600-PWR, and 2800
switches only.
MAC Lockdown, also known as !§static addressing,!‥ is the permanent assig
ment of a given MAC address (and VLAN, or Virtual Local Area Network) to
a specific port on the switch. MAC Lockdown is used to prevent station
movement and MAC address hijacking. It also controls address learning on
the switch. When configured, the MAC Address can only be used on the
assigned port and the client device will only be allowed on the assigned VLAN.
Port security and MAC Lockdown are mutually exclusive on a given port. You
can either use port security or MAC Lockdown, but never both at the same
time on the same port.
Syntax: [no] static-mac < mac-addr > vlan < vid > interface < port-number >
You will need to enter a separate command for each MAC/VLAN pair you wish
to lock down. If you do not specify a VLAN ID (VID) the switch inserts a VID
of !§1!‥
How It Works. When a device!|s MAC address is locked down to a port
(typically in a pair with a VLAN) all information sent to that MAC address must
go through the locked-down port. If the device is moved to another port it
cannot receive data. Traffic to the designated MAC address goes only to the
allowed port, whether the device is connected to it or not.
MAC Lockdown is useful for preventing an intruder from !§hijacking!‥ a MA
address from a known user in order to steal data. Without MAC Lockdown,
this will cause the switch to learn the address on the malicious user!|s port,
allowing the intruder to steal the traffic meant for the legitimate user.
MAC Lockdown ensures that traffic intended for a specific MAC address can
only go through the one port which is supposed to be connected to that MAC
address. It does not prevent intruders from transmitting packets with the
locked MAC address, but it does prevent responses to those packets from
going anywhere other than the locked-down port. Thus TCP connections
cannot be established. Traffic sent to the locked address cannot be hijacked
and directed out the port of the intruder.
If the device (computer, PDA, wireless device) is moved to a different port on
the switch (by reconnecting the Ethernet cable or by moving the device to an
area using a wireless access point connected to a different port on that same
switch), the port will detect that the MAC Address is not on the appropriate
port and will continue to send traffic out the port to which the address was
locked.
Once a MAC address is configured for one port, you cannot perform port
security using the same MAC address on any other port on that same switch.
You cannot lock down a single MAC Address/VLAN pair to more than one port;
however you can lock down multiple different MAC Addresses to a single port
on the same switch.
Stations can move from the port to which their MAC address is locked to other
parts of the network. They can send, but will not receive data if that data must
go through the locked down switch. Please note that if the device moves to a
distant part of the network where data sent to its MAC address never goes
through the locked down switch, it may be possible for the device to have full
two-way communication. For full and complete lockdown network-wide all
switches must be configured appropriately.
Other Useful Information. Once you lock down a MAC address/VLAN pair
on one port that pair cannot be locked down on a different port.
You cannot perform MAC Lockdown and 802.1x authentication on the same
port or on the same MAC address. MAC Lockdown and 802.1x authentication
are mutually exclusive.
Lockdown is permitted on static trunks (manually configured link aggrega-
tions).
Differences Between MAC Lockdown and Port Security
Because port-security relies upon MAC addresses, it is often confused with
the MAC Lockdown feature. However, MAC Lockdown is a completely differ-
ent feature and is implemented on a different architecture level.
Port security maintains a list of allowed MAC addresses on a per-port basis.
An address can exist on multiple ports of a switch. Port security deals with
MAC addresses only while MAC Lockdown specifies both a MAC address and
a VLAN for lockdown.
MAC Lockdown, on the other hand, is not a !§list.!‥ It is a global parameter o
the switch that takes precedence over any other security mechanism. The
MAC Address will only be allowed to communicate using one specific port on
the switch.
MAC Lockdown is a good replacement for port security to create tighter
control over MAC addresses and which ports they are allowed to use (only
one port per MAC Address on the same switch in the case of MAC Lockdown).
(You can still use the port for other MAC addresses, but you cannot use the
locked down MAC address on other ports.)
Using only port security the MAC Address could still be used on another port
on the same switch. MAC Lockdown, on the other hand, is a clear one-to-one
relationship between the MAC Address and the port. Once a MAC address has
been locked down to a port it cannot be used on another port on the same
switch.
The switch does not allow MAC Lockdown and port security on the same port.

----
講那麼多，結論是
指令前面加個 no 就可以關了!!!

Mirror port
Mirror port
簡單的說就是把整台switch 的 port 封包，做一份 mirror 到這個 port
我們只要透過封包分析軟體，就可以知道目前的網路使用狀況。
文件節錄如下：第27頁 key word: mirror port
-----
CLI: Configuring Port and Static Trunk Monitoring
Port and Static Trunk Monitoring Commands Used in This Section
show monitor below mirror-port page B-27 monitor page B-28
You must use the following configuration sequence to configure port and static trunk monitoring in the CLI:
1. Assign a monitoring (mirror) port.
2. Designate the port(s) and static trunk(s) to monitor.
Displaying the Monitoring Configuration. This command lists the port assigned to receive monitored traffic and the ports and/or trunks being monitored.
Syntax: show monitor
For example, if you assign port A6 as the monitoring port and configure the switch to monitor ports A1 - A3, show monitor displays the following:

八克里

2008/09/27

「海角七號」熱賣的原因？？

2008/09/11

HP 2626 鎖MAC 及 port mirror

2008/09/05

工作報告-20080905

2008/09/02

Text mode MSN client

高雄空拍圖(高雄市都市發展局--空中看大高雄)