local_root=/data/httpd则当以 sample 帐号登录时，也会进入 /data/httpd 而不是希望的 /home/backup/shopex。这时可以利用 vsftpd 的 user_config_dir 参数：
sh$ vi /etc/vsftpd/vsftpd.conf
user_config_dir=/etc/vsftpd/users
sh$ vi /etc/vsftpd/users/sample
local_root=/home/backup/shopex # 只需增加一条
sh$ head sites.txte.72h.net /home/httpd/72h.net/e.72h.net现在需要对每一行进行一个代码生成，例如生成：
syssite /home/httpd/72h.net/ec.72h.net/syssite
mall.72h.net /home/httpd/72h.net/mall.72h.net
shop.72h.net /home/httpd/72h.net/shop.72h.net
aws /home/httpd/aws
ftputil /home/httpd/ftputil
is-me.com /home/httpd/is-me.com
mail.phpedu.org /home/httpd/mail.phpedu.org
payex /home/httpd/payex
phpadm /home/httpd/phpadm
sh$ for line in "`cat sites.txt`"; do echo $line; done都不是想要的结果！
e.72h.net /home/httpd/72h.net/e.72h.net syssite /home/httpd/72h.net/ec.72h.net/syssite mall.72h.net /home/httpd/72h.net/mall.72h.net shop.72h.net /home/httpd/72h.net/shop.72h.net aws /home/httpd/aws ftputil /home/httpd/ftputil is-me.com /home/httpd/is-me.com mail.phpedu.org /home/httpd/mail.phpedu.org payex /home/httpd/payex phpadm /home/httpd/phpadm phpedu.org /home/httpd/phpedu.org 46.shopex.com.cn /home/httpd/shopex/46.shopex.com.cn 99bill.shopex.com.cn /home/httpd/shopex/99bill.shopex.com.cn acco.shopex.com.cn /home/httpd/shopex/acco.shopex.com.cn alipay.shopex.com.cn /home/httpd/shopex/alipay.shopex.com.cn book.shopex.cn /home/httpd/shopex/book.shopex.cn card.shopex.cn /home/httpd/shopex/card.shopex.cn cd.shopex.cn /home/httpd/shopex/cd.shopex.cn clothes.shopex.com.cn /home/httpd/shopex/clothes.shopex.com.cn com.shopex.com.cn /home/httpd/shopex/com.shopex.com.cn digi.shopex.com.cn /home/httpd/shopex/digi.shopex.com.cn free.shopex.com.cn /home/httpd/shopex/free.shopex.com.cn game.shopex.com.cn /home/httpd/shopex/game.shopex.com.cn gift.shopex.com.cn /home/httpd/shopex/gift.shopex.com.cn health.shopex.cn /home/httpd/shopex/health.shopex.cn home.shopex.cn /home/httpd/shopex/home.shopex.cn magicisland.shopex.com.cn /home/httpd/shopex/magicisland.shopex.com.cn makeup.shopex.cn /home/httpd/shopex/makeup.shopex.cn mall.shopex.com.cn /home/httpd/shopex/mall.shopex.com.cn mobile.shopex.cn /home/httpd/shopex/mobile.shopex.cn paypal.shopex.com.cn /home/httpd/shopex/paypal.shopex.com.cn pc.shopex.cn /home/httpd/shopex/pc.shopex.cn pifa.shopex.com.cn /home/httpd/shopex/pifa.shopex.com.cn syssite /home/httpd/shopex/platform.shopex.com.cn/syssite shopex.cn /home/httpd/shopex/shopex.cn blog /home/httpd/shopex/shopex.cn/blog help /home/httpd/shopex/shopex.cn/help store.shopex.cn /home/httpd/shopex/store.shopex.cn tex.shopex.com.cn /home/httpd/shopex/tex.shopex.com.cn top.shopex.cn /home/httpd/shopex/top.shopex.cn update.shopex.com.cn /home/httpd/shopex/update.shopex.com.cn store.verycd.com /home/httpd/store.verycd.com zovamailredir /home/httpd/zovamailredir zovatech /home/httpd/zovatech
sh$ for line in `cat sites.txt`; do echo $line; done
e.72h.net
/home/httpd/72h.net/e.72h.net
syssite
/home/httpd/72h.net/ec.72h.net/syssite
mall.72h.net
/home/httpd/72h.net/mall.72h.net
shop.72h.net
/home/httpd/72h.net/shop.72h.net
aws
/home/httpd/aws
......
sh$cat sites.txt | while read id path; do echo $id, $path; done所以最终的命令如下：
e.72h.net, /home/httpd/72h.net/e.72h.net
syssite, /home/httpd/72h.net/ec.72h.net/syssite
mall.72h.net, /home/httpd/72h.net/mall.72h.net
shop.72h.net, /home/httpd/72h.net/shop.72h.net
aws, /home/httpd/aws
ftputil, /home/httpd/ftputil
is-me.com, /home/httpd/is-me.com
mail.phpedu.org, /home/httpd/mail.phpedu.org
payex, /home/httpd/payex
phpadm, /home/httpd/phpadm
......
sh$ cat sites.txt | while read id path; do fs_backup -a t:$path $id; done
sh$ cat /usr/src/apache/.configsvnadmin 直接访问版本库（因此只可以在存放版本库的机器上使用），它通过路径访问版本库，而不是 URL。
command = "./configure --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr --with-mpm=prefork --enable-so --enable-rewrite=static --enable-track-vars --enable-dav=shared --enable-dav-fs=shared --enable-dav-lock=shared";
sh$ cat /usr/src/subversion/.config
command = "./configure --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr";
command = "make";
command = "sed -i 's@MKDIR = /usr/bin/install -c -d@MKDIR = mkdir -p@g' Makefile";
command = "make install";
sh$ cat httpd.conf
......
NameVirtualHost *:80
"<"VirtualHost *:80">"
ServerName docs.shopex.cn
DocumentRoot "/var/www/html/docs"
"<"Directory "/var/www/html/docs"">"
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
"<"/Directory">"
"<"Location /repos">"
DAV svn
SVNParentPath /var/www/html/docs/repos
"<"/Location">"
"<"/VirtualHost">"
sh$ svnadmin create --fs-type fsfs http://docs.shopex.cn/
svnadmin: 'http://docs.shopex.cn' is an URL when it should be a path
sh$ svnadmin create --fs-type fsfs /var/www/html/docs/repos/sysadm
sh$ svn list http://docs.shopex.cn/docs
svn: Unrecognized URL scheme for 'http://docs.shopex.cn/docs'
sh$ upm files subversion-1.4.3 | grep ra_dav
neon is an HTTP and WebDAV client library, with a C interface;
providing a high-level interface to HTTP and WebDAV methods along
with a low-level interface for HTTP request handling. neon
supports persistent connections, proxy servers, basic, digest and
Kerberos authentication, and has complete SSL support.
sh$ svn list file:///var/www/html/docs/repos/sysadm/从页面上访问 docs.shopex.cn/repos：
sh$ svn list http://docs.shopex.cn/repos/sysadm
svn: PROPFIND request failed on '/repos/sysadm'
svn: PROPFIND of '/repos/sysadm': 301 Moved Permanently (http://docs.shopex.cn)
"<"D:error">"这个问题参考这些页面：
"<"C:error/">"
"<"m:human-readable errcode="2"">"
Could not open the requested SVN filesystem
"<"/m:human-readable">"
"<"/D:error">"
sh$ sudo -L所以可以知道 timeout 的相关参数：
sh$ sudo -L | grep timeout再编辑 /etc/sudoers：
timestamp_timeout: Authentication timestamp timeout
passwd_timeout: Password prompt timeout
sh# visudo后面的 passwd_timeout 应该是指出现密码提示符后，如果在这个时间段里没有输入密码，就失效。
......
Defaults:%admins timestamp_timeout=30
# 设置为 30 分钟, -1 表示没有限制
......
# User privilege specification这太过于简单，做一个复杂点的来适应服务器系统管理的需要：
root ALL=(ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
......这里重点是 Cmnd_Alias 部分，因为涉及到安全的很多问题。首先 SYSCMD 定义所有的系统命令，%admin 组可以执行这些命令，并且只能执行这些命令，即所有 bin 和 sbin 目录下的程序。
# Cmnd alias specification
Cmnd_Alias SYSCMD=/bin/*,/sbin/*,/usr/bin/*,/usr/sbin/*,/usr/local/bin/*,/usr/local/sbin/*
Cmnd_Alias COPY_BIN=/*/cp */bin/* *,/*/cp * */bin/*,/*/cp */sbin/* *,/*/cp * */sbin/*
Cmnd_Alias MOVE_BIN=/*/mv */bin/* *,/*/mv * */bin/*,/*/mv */sbin/* *,/*/mv * */sbin/*
Cmnd_Alias LINK_BIN=/*/ln */bin/* *,/*/ln * */bin/*,/*/ln */sbin/* *,/*/ln * */sbin/*
Cmnd_Alias RENAME=/*/rename,
Cmnd_Alias VISUDO=/usr/sbin/visudo,/*/vi* /etc/sudoers
# Cmnd_Alias VISUDO=/*/visudo
Cmnd_Alias CHOWN=/*/chown *
Cmnd_Alias CHMOD=/*/chmod *
Cmnd_Alias USER_CMD=/usr/bin/passwd,\
/usr/sbin/useradd,\
/usr/sbin/usermod,\
/usr/sbin/groupadd,\
/usr/sbin/groupmod,\
/usr/bin/chage -m ? -W [3-7] * ?*
# Defaults specification
# User privilege specification
root ALL=(ALL) ALL
%admins ALL=(%root) SYSCMD,!COPY_BIN,!MOVE_BIN,!LINK_BIN,!VISUDO,!CHOWN,!CHMOD,!USER_CMD
sysadm ALL=(%root) NOPASSWD:ALL
......
sh# useradd -u 123 sysadm这样看上去万无一失了
sh# groupadd -u 124 admins
sh# useradd sysadm01
sh# useradd -G admins sysadm01
sh$ sudo /bin/cp /bin/cp /tmp但实际上还是不够。不信运行下面这几条命令：
Sorry, user sysadm01 is not allowed to execute '/bin/cp /bin/cp /tmp' as root on stor.shopex.cn.
sh$ sudo /bin/cp /usr/sbin/visudo /tmp/
Sorry, user sysadm01 is not allowed to execute '/bin/cp /usr/sbin/visudo /tmp/' as root on stor.shopex.cn.
sh$ sudo cp /usr/sbin/visudo /tmp/
Sorry, user sysadm01 is not allowed to execute '/bin/cp /usr/sbin/visudo /tmp/' as root on stor.shopex.cn.
sh$ sudo cp -r /usr/sbin/visudo /tmp/
# 看看加一个参数在中间会不会有影响！
Sorry, user sysadm01 is not allowed to execute '/bin/cp -r /usr/sbin/visudo /tmp/' as root on stor.shopex.cn.
sh$ cd /usr/sbin显然 sudo 无法检查匹配的路径，这样就完全绕过了前面的安全设定；而且 sudo 的匹配只是针对命令字符串的匹配，并且不支持正则表达式。对[1]还可以处理，虽然没有正则，但可以多加几条规则也可以避免，但对[2]就完全无能为力了，因为完全可以从别的系统上传一个 VISUDO 到 /tmp，然后切换到 /usr/sbin 绕开 !COPY_BIN 限制！
sh$ sudo cp visudo /tmp
sh$ sudo cp visudo VISUDO # [1]
sh$ sudo cp /tmp/VISUDO ./VISUDO # [2]
sh$ upm packs
sqlite-3.3.12
pysqlite-2.3.2
sh$ python
>>> import pysqlite2
>>> dir(pysqlite2)
['__builtins__', '__doc__', '__file__', '__name__', '__path__']
>>> from pysqlite2 import dbapi2 as sqlite
>>> dir(pysqlite2)
['__builtins__', '__doc__', '__file__', '__name__', '__path__', '_sqlite', 'dbapi2']
>>> dbconn = sqlite.connect('/tmp/filedb')
>>> dbcurs = dbconn.cursor()
>>> dbcurs.execute('''create table stocks (date text, trans text, symbol text, qty real, price real)''')
pysqlite2.dbapi2.Cursor object at 0xb7c20ce0
>>> dbcurs.execute("""insert into stocks values ('2006-01-05','BUY','RHAT',100,35.14)""")
pysqlite2.dbapi2.Cursor object at 0xb7c20ce0
>>> dbcurs.close()
>>> dbconn.close()
import logger这里抛出 NameError 的异常。因为 python 是动态类型变量，所以不可能有 C 语言那样的声明(declare)方式可以在赋值之前进行声明，所以对于名字问题只能通过调整出现的顺序来解决。所以这里应该调整为：
class CTreeEx:
def __init__(self, ...):
......
def logError(self, logerr=outlog):
print >> sys.stderr, self.strerr)
if self.errno == 1: logerr.error(self.strerr)
elif self.errno == 127: logerr.critical(self.strerr)
class CTree:
......
def func():
......
raise CTreeEx(...)
def main():
......
ctobj = CTree()
ctobj.func()
if __name__ == '__main__':
outlog = logger.get(program)
usage = "program usage ..."
main()
else:
outlog = logger.get(__name__)
usage = "module usage ..."
sh$ ./ctree.py
Traceback (most recent call last):
File "./ctree.py", line 78, in ?
class CTreeEx:
File "./ctree.py", line 84, in CTreeEx
def logError(self, logerr=outlog):
NameError: name 'outlog' is not defined
def main():注意这里 main() 也要提到前面，在 if __name__ == '__main__': 之前，否则又会出现“NameError: name 'main' is not defined”。
if __name__ == '__main__':
class CTreeEx:
class CTree:
if __name__ == '__main__':当然这里只是一个 Warning，但这也说明这样是有问题的。要知道 python 的结构性已经很强了。而在最前面使用 global：
outlog = logger.get(program)
global outlog
sh$ ./ctree.py
./ctree.py:0: SyntaxWarning: name 'outlog' is assigned to before global declaration
Traceback (most recent call last):
File "./ctree.py", line 78, in ?
class CTreeEx:
File "./ctree.py", line 84, in CTreeEx
def logError(self, logerr=outlog):
NameError: name 'outlog' is not defined
global outlog则不会有任何效果，仍然会抛出 NameError 异常。
class CTreeEx:
......
class CTreeEx:这样，看上去对 usage 的使用在 outlog 之前了，应该会抛出 'usage' 的 NameError，但实际上却不会！ 换一种作法却会：
def __init__(self, ...):
print usage
class CTreeEx:所以，可以看到，只有那些定义，或成为赋值的语句会有影响，即 assignment──在 python 中，因为是动态类型，所以所有的名字和对象之间都相当于一个 C 语言中的指针赋值，所以只有赋值，而 class name:/def name(): 都只不过是将一个 class/function 对象赋给一个名字 name，甚至包括 import name 也是将一个 module(文件)赋给一个 name。
def __init__(self, ..., test=usage):
NameError: name 'usage' is not defined
class CTreeEx:这样却不会有问题。所以这取决于这个赋值会在何时发生。象这里的 class/def 定义，都是在 module 顶层，是在从命令行调用或 import module 时马上就会执行的部分，包括 def __init__() 也是在生成 class CTreeEx 这个 class 对象时必须的部分，所以会有问题；但 __init__() 内部的东西则是在生成 class instance 对象时才调用的，所以不会有问题。可以看看这样的效果：
def __init__(self, errno=1, strerr='CTree,Exception'):
test = usage
class CTreeEx:就完全明白了。
test = usage
def __init__(self, ...):
>>> L1 = ['a', 'b', 'c']
>>> L2 = [1, 2, 3]
>>> zip(L1, L2)
[('a', 1), ('b', 2), ('c', 3)]
>>> map(L1, L2)
Traceback (most recent call last):
File "", line 1, in ?
TypeError: 'list' object is not callable
>>> map(None, L1, L2)
[('a', 1), ('b', 2), ('c', 3)]
>>> dict(zip(L1, L2))
{'a': 1, 'c': 3, 'b': 2}
>>> dict(map(None, L1, L2))
{'a': 1, 'c': 3, 'b': 2}
>>> L3 = []
>>> zip(L1, L3)
[]
>>> map(L1, L3)
[]
>>> map(None, L1, L3)
[('a', None), ('b', None), ('c', None)]
>>> dict(zip(L1, L3))
{}
>>> dict(map(None, L1, L3))
{'a': None, 'c': None, 'b': None}
>>> def fun(A, B):
... if B == None: B = ''
... return A, B
...
map(fun, L1, L2)
[('a', 1), ('b', 2), ('c', 3)
>>> map(fun, L1, L3)
[('a', ''), ('b', ''), ('c', '')]
>>> dict(map(fun, L1, L3))
{'a': '', 'c': '', 'b': ''}
sh$ find . -path ./linux-2.6.16.28 -prune -o -print | grep linux-2.6.16.28这样，在使用 fs_backup 时就可以使用如下方式来加入或排除一个目录是否被备份：
./linux-2.6.16.28.SMP
./linux-2.6.16.28.tar.bz2
sh$ find . -path ./linux-2.6.16.28/* -prune -o -print | grep linux-2.6.16.28
find: paths must precede expression
Usage: find [path...] [expression]
sh$ find . -path './linux-2.6.16.28/*' -prune -o -print | grep linux-2.6.16.28
./linux-2.6.16.28
./linux-2.6.16.28.SMP
./linux-2.6.16.28.tar.bz2
sh$ fs_backup -a t:/path/to/dir/*只是 fs_backup 这个脚本调用 os.popen3(command) 时这个 command(即 find 的命令)需要做出调整，在代码生成时给 -path 'dir/*' 加上引号。
sh$ fs_backup -a x:/path/to/dir/*
sh$ find . | grep subversionOK，也可以！
./.subversion
./.subversion/README.txt
./.subversion/config
./.subversion/servers
./.subversion/auth
./.subversion/auth/svn.username
./.subversion/auth/svn.simple
./.subversion/auth/svn.ssl.server
sh$ find . -path ./.subversion -prune -o -print | grep subversion
sh$ find . -path './.subversion/*' -prune -o -print | grep subversion
./.subversion
sh$ find . -path './.subversion/*/*' -prune -o -print | grep subversion
./.subversion
./.subversion/README.txt
./.subversion/config
./.subversion/servers
./.subversion/auth
sh# cat /var/fs_backup/myopt/.t_files这是因为在寻找顶级文件/目录列表时的问题，因为 * 通配符不被支持。修改如下：
/opt
sh# cat /var/fs_backup/myopt/.x_files
/opt/backup
/opt/profiles/*
sh# ./fs_backup myopt
/opt/profiles/* is not a valid file or directory
find /opt \( -path '/opt/backup' \) -prune ! -type d -print >>/tmp/fs_backup.myopt.full.1171197285.0.list
83 def find_top_files(tmpl):
84 import glob
85 tmpl.sort()
86 topfiles = []
87 invalids = []
88 file1 = ''
89 for item in tmpl:
90 item = item.strip()
91 if not os.path.exists(item) and len(glob.glob(item)) == 1:
92 # There may be 'dir/*' style string
93 strerr = "^[[31m%s is not a valid file or directory^[[00m" % item
94 print >> sys.stderr, strerr
95 invalids.append(item)
96 continue
97 if not file1:
98 if item == '': continue #^W
99 file1 = item
100 topfiles.append(file1)
101 elif item.startswith(file1):
102 # 'file1' is the parent directory of 'item'
103 continue
104 elif file1.startswith(item):
105 file1 = item
106 topfiles[-1] = file1
107 else:
108 file1 = item
109 topfiles.append(file1)
110 return topfiles, invalids
snmpwalk -v2c -c public localhost system但是 interfaces 就不行，这样如何监控网络的流量呢？而使用 snmpget 也得不到需要的 IF-MIB:: 中的信息，使用 snmpgetnext 得到的也不正确。snmpgetnext 应该是得到下一个(NEXT)节点的信息，例如：sh$ snmpwalk -v2c -c demo 192.168.0.98 system | head -n 2这里 -c demo 是一个 community name，而且这里也不是使用的 localhost 而是 192.168.0.98 这样的地址，这是因为更改了 snmpd.conf 的缘故，实际上，如果不更改而使用默认的 snmpd.conf，那么只能使用 -c public localhost，否则只能得到诸如："Timeout: No Response from 192.168.0.98."这样的信息。这些会在下面讲到。
SNMPv2-MIB::sysDescr.0 = STRING: Linux localhost.localdomain 2.6.14.2 #1 SMP Thu Jan 11 15:39:36 EST 2007 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
sh$ snmpget -v2c -c demo 192.168.0.98 SNMPv2-MIB::sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: Linux localhost.localdomain 2.6.14.2 #1 SMP Thu Jan 11 15:39:36 EST 2007 i686
sh$ snmpgetnext -v2c -c demo 192.168.0.98 SNMPv2-MIB::sysDescr.0
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
access {group} "" any noauth exact {read-tree} {write-tree} {notify-tree}这里 {group} 就是将要用 group 语句来定义的组，{read-tree} {write-tree} {notify-tree} 就是将要用 view 来定义的子树。所以 group 就是哪些人，view 就是哪些子树。# com2sec notConfigUser default public为了更清楚的说明，这里我将原来的注释掉了。v1/v2c 是 serurityModel，就是在 snmpwalk/snmpget 这些命令使用时使用的参数如 -v2c(-v 2c)。所以我们的 group 为 gmynet，它与 mynet 这个名字(security name)是一个映射关系，而为了简便起见，也可以直接定义 group 为 mynet，而不用绕这么多圈子：
# group notConfigGroup v1 notConfigUser
# group notConfigGroup v2c notConfigUser
com2sec mynet 192.168.0.0/24 demo
group gmynet v1 mynet
group gmynet v2c mynet
group mynet v1 mynetcom2sec 即 community to security，实际上定义了一个基于 地址的访问控制，另外它大概还有一个将 SNMPv2/SNMPv1 的名字映射过来的作用，如上的 demo，这样在 snmpwalk/snmpget 时使用 -v2c 这样的参数时可以使用 -c demo。按照上面的方式定义之后，就只能使用上面的 snmpwalk/snmpget -v2c -c demo 192.168.0.98 这样的形式，而不能再使用 -c public localhost 了，否则就得到"Timeout: No Response from localhost"这样的出错。
group mynet v2c mynet
view interface included .1.3.6.1.2.1.2可以利用 snmptranslate 来得到 numeric 树，
view system included .1.3.6.1.2.1.1
view system included .1.3.6.1.2.1.25.1.1
sh$ snmptranslate -On IF-MIB::interfaces也可以直接使用 MIB 定义。
.1.3.6.1.2.1.2
sh$ snmptranslate -On SNMPv2-MIB::system
.1.3.6.1.2.1.1
access mynet "" any noauth exact system none none这样，按道理就应该可以得到 interfaces 的值了。记得要使 agent 重新读取配置文件，在 RHEL4 下面使用 /etc/init.d/snmpd restart 即可。
access mynet "" any noauth exact interface none none
sh$ snmpwalk -v2c -c demo 192.168.0.98 interfaces但是如果使用如下的设置却可以：
IF-MIB::interfaces = No Such Object available on this agent at this OID
sh$ snmpget -v2c -c demo 192.168.0.98 IF-MIB::ifDescr.1
IF-MIB::ifDescr.1 = No Such Object available on this agent at this OID
view all included .1那么最初的配置有什么问题呢？
access mynet "" any noauth exact all none none
sh$ snmpwalk -v2c -c demo 192.168.0.98 interface
IF-MIB::ifNumber.0 = INTEGER: 4
IF-MIB::ifIndex.1 = INTEGER: 1
IF-MIB::ifIndex.2 = INTEGER: 2
IF-MIB::ifIndex.3 = INTEGER: 3
IF-MIB::ifIndex.4 = INTEGER: 4
IF-MIB::ifDescr.1 = STRING: lo
IF-MIB::ifDescr.2 = STRING: eth0
IF-MIB::ifDescr.3 = STRING: eth1
IF-MIB::ifDescr.4 = STRING: sit0
IF-MIB::ifType.1 = INTEGER: softwareLoopback(24)
IF-MIB::ifType.2 = INTEGER: ethernetCsmacd(6)
IF-MIB::ifType.3 = INTEGER: ethernetCsmacd(6)
IF-MIB::ifType.4 = INTEGER: tunnel(131)
IF-MIB::ifMtu.1 = INTEGER: 16436
IF-MIB::ifMtu.2 = INTEGER: 1500
IF-MIB::ifMtu.3 = INTEGER: 1500
IF-MIB::ifMtu.4 = INTEGER: 1480
IF-MIB::ifSpeed.1 = Gauge32: 10000000
IF-MIB::ifSpeed.2 = Gauge32: 100000000
IF-MIB::ifSpeed.3 = Gauge32: 10000000
IF-MIB::ifSpeed.4 = Gauge32: 0
IF-MIB::ifPhysAddress.1 = STRING:
IF-MIB::ifPhysAddress.2 = STRING: 0:2:b3:b0:59:36
IF-MIB::ifPhysAddress.3 = STRING: 0:2:b3:b0:59:4a
IF-MIB::ifPhysAddress.4 = STRING: 0:0:0:0:59:4a
IF-MIB::ifAdminStatus.1 = INTEGER: up(1)
IF-MIB::ifAdminStatus.2 = INTEGER: up(1)
IF-MIB::ifAdminStatus.3 = INTEGER: down(2)
IF-MIB::ifAdminStatus.4 = INTEGER: down(2)
IF-MIB::ifOperStatus.1 = INTEGER: up(1)
IF-MIB::ifOperStatus.2 = INTEGER: up(1)
IF-MIB::ifOperStatus.3 = INTEGER: down(2)
IF-MIB::ifOperStatus.4 = INTEGER: down(2)
IF-MIB::ifInOctets.1 = Counter32: 381118
IF-MIB::ifInOctets.2 = Counter32: 125019173
IF-MIB::ifInOctets.3 = Counter32: 0
IF-MIB::ifInOctets.4 = Counter32: 0
IF-MIB::ifInUcastPkts.1 = Counter32: 4308
IF-MIB::ifInUcastPkts.2 = Counter32: 1069602
IF-MIB::ifInUcastPkts.3 = Counter32: 0
IF-MIB::ifInUcastPkts.4 = Counter32: 0
IF-MIB::ifInDiscards.1 = Counter32: 0
IF-MIB::ifInDiscards.2 = Counter32: 0
IF-MIB::ifInDiscards.3 = Counter32: 0
IF-MIB::ifInDiscards.4 = Counter32: 0
IF-MIB::ifInErrors.1 = Counter32: 0
IF-MIB::ifInErrors.2 = Counter32: 0
IF-MIB::ifInErrors.3 = Counter32: 0
IF-MIB::ifInErrors.4 = Counter32: 0
IF-MIB::ifOutOctets.1 = Counter32: 383414
IF-MIB::ifOutOctets.2 = Counter32: 1770179210
IF-MIB::ifOutOctets.3 = Counter32: 0
IF-MIB::ifOutOctets.4 = Counter32: 0
IF-MIB::ifOutUcastPkts.1 = Counter32: 4340
IF-MIB::ifOutUcastPkts.2 = Counter32: 1319881
IF-MIB::ifOutUcastPkts.3 = Counter32: 0
IF-MIB::ifOutUcastPkts.4 = Counter32: 0
IF-MIB::ifOutDiscards.1 = Counter32: 0
IF-MIB::ifOutDiscards.2 = Counter32: 0
IF-MIB::ifOutDiscards.3 = Counter32: 0
IF-MIB::ifOutDiscards.4 = Counter32: 0
IF-MIB::ifOutErrors.1 = Counter32: 0
IF-MIB::ifOutErrors.2 = Counter32: 0
IF-MIB::ifOutErrors.3 = Counter32: 0
IF-MIB::ifOutErrors.4 = Counter32: 0
IF-MIB::ifOutQLen.1 = Gauge32: 0
IF-MIB::ifOutQLen.2 = Gauge32: 0
IF-MIB::ifOutQLen.3 = Gauge32: 0
IF-MIB::ifOutQLen.4 = Gauge32: 0
IF-MIB::ifSpecific.1 = OID: SNMPv2-SMI::zeroDotZero
IF-MIB::ifSpecific.2 = OID: SNMPv2-SMI::zeroDotZero
IF-MIB::ifSpecific.3 = OID: SNMPv2-SMI::zeroDotZero
IF-MIB::ifSpecific.4 = OID: SNMPv2-SMI::zeroDotZero
sh$ snmpget -v2c -c demo 192.168.0.98 IF-MIB::ifDescr.1
IF-MIB::ifDescr.1 = STRING: lo
sh$ snmpget -v2c -c demo 192.168.0.98 IF-MIB::ifDescr.2
IF-MIB::ifDescr.2 = STRING: eth0
sh$ snmpgetnext -v2c -c demo 192.168.0.98 IF-MIB::ifDescr.2
IF-MIB::ifDescr.3 = STRING: eth1
sh$ snmptranslate .1.3.6.1.2.1
SNMPv2-SMI::mib-2
sh$ snmptranslate -Of .1.3.6.1.2.1
.iso.org.dod.internet.mgmt.mib-2
sh$ cat /etc/snmp/snmpd.conf
view system included .1.3.6.1.2.1
access mynet "" any noauth exact system none none
sh$ grep 'system' /usr/share/snmp/mibs/SNMPv2-MIB.txtsnmptranslate 这个命令可以用来查看映射关系：
system OBJECT IDENTIFIER ::= { mib-2 1 }
......
sh$ snmptranslate .1.3.6.1.2.1.1.3.0可以看到这个 SNMPv2-MIB 其实就是 /usr/share/snmp/mibs/SNMPv2-MIB.txt。
SNMPv2-MIB::sysUpTime.0
sh$ snmptranslate -On SNMPv2-MIB::system.sysUpTime.0
.1.3.6.1.2.1.1.3.0
sh$ snmpwalk -v2c -c public localhost system如果增加 -Of 参数可以得到一个完整的树形表达。我不太明白这里的 system 和 interfaces 是如何定义和识别的？因为如果使用 snmpget 这样就不行：
SNMPv2-MIB::sysDescr.0 = STRING: Linux localhost.localdomain 2.6.14.2 #1 SMP Thu Jan 11 15:39:36 EST 2007 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
SNMPv2-MIB::sysUpTime.0 = Timeticks: (687617) 1:54:36.17
SNMPv2-MIB::sysContact.0 = STRING: zhoupeng@zovatech.com
SNMPv2-MIB::sysName.0 = STRING: localhost.localdomain
SNMPv2-MIB::sysLocation.0 = STRING: Unknown (edit /etc/snmp/snmpd.conf)
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module to describe generic objects for network interface sub-layers
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.5 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.6 = STRING: View-based Access Control Model for SNMP.
SNMPv2-MIB::sysORDescr.7 = STRING: The SNMP Management Architecture MIB.
SNMPv2-MIB::sysORDescr.8 = STRING: The MIB for Message Processing and Dispatching.
SNMPv2-MIB::sysORDescr.9 = STRING: The management information definitions for the SNMP User-based Security Model.
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.2 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.3 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.4 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.5 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.6 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.7 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.8 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.9 = Timeticks: (1) 0:00:00.01
sh$ snmpwalk -v2c -c public localhost interfaces
IF-MIB::interfaces = No Such Object available on this agent at this OID
sh$ snmpget -v2c -c public localhost system现在我知道 interfaces 的一些 MIB(《Linux Server Hacks, 卷二》)，前面用 snmpwalk 得不到结果，那么现在用 snmpget 呢？
SNMPv2-MIB::system = No Such Object available on this agent at this OID
sh$ snmpget -v2c -c public localhost SNMPv2-MIB::system
SNMPv2-MIB::system = No Such Object available on this agent at this OID
sh$ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0
SNMPv2-MIB::sysDescr.0 = STRING: Linux localhost.localdomain 2.6.14.2 #1 SMP Thu Jan 11 15:39:36 EST 2007 i686
sh$ snmpget -v2c -c public localhost IF-MIB::ifDescr.1再参考 net-snmp 的 FAQ，使用 snmpgetnext：
IF-MIB::ifDescr.1 = No Such Object available on this agent at this OID
sh$ snmpgetnext -v2c -c public localhost IF-MIB::ifDescr.1根据此 FAQ 上的说明，这样是会有问题的，因为实际上是使用了别的 MIB 文件，或者得到诸如"end of MIB"的响应，应该要更改配置，那么如何来做？在《Linux Server Hacks, Volume 2》上，是如下的表示：
HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (70364798) 8 days, 3:27:27.98
sh$ snmpgetnext -v2c -c public localhost HOST-RESOURCES-MIB::hrSystemUptime.0
HOST-RESOURCES-MIB::hrSystemUptime.0 = No more variables left in this MIB View (It is past the end of the MIB tree)
IF-MIB::ifDescr.1 = STRING: lo
IF-MIB::ifDescr.2 = STRING: eth0
...
83 def find_top_files(tmpl):这里首先是对列表进行了排序，这样方便操作。而接下来一个主要的问题是如何判断一个 pathname 是另一个的父目录(或子目录/文件)。因为 pathname 是 string，但这里不能直接使用 str1 in str2 这样的判断，因为显然 /etc in /usr/etc，但两种并没有父/子目录文件的关系。所以这里我使用了上面的粗体部分的办法：if file1.startswith(item)，即 str.startswith(substr) 我想这样应该是可行的，这比直接去用 os.path.* 的方法去判读要简便得多。
84 tmpl.sort()
85 topfiles = []
86 invalids = []
87 file1 = ''
88 for item in tmpl:
89 item = item.strip()
90 if not os.path.exists(item):
91 strerr = "^[[31m%s is not a valid file or directory^[[00m" % item
92 print strerr >> sys.stderr
93 invalids.append(item)
94 continue
95 if not file1:
96 if item == '': continue #^W
97 file1 = item
98 topfiles.append(file1)
99 elif item.startswith(file1):
100 # 'file1' is the parent directory of 'item'
101 continue
102 elif file1.startswith(item):
103 file1 = item
104 topfiles[-1] = file1
105 else:
106 file1 = item
107 topfiles.append(file1)
108 return topfiles, invalids
sh# find . -type f \( -path ./docbook \) -prune -o -print | grep 'docbook'这里没有起到需要的效果，即排除 ./docbook 目录及其所有子文件。但如果使用：
./blfs-book-6.1-html/pst/docbook-utils.html
./blfs-book-6.1-html/pst/docbook-dsssl.html
./blfs-book-6.1-html/pst/docbook-xsl.html
./docbook
./docbook/index.xml
sh# find . \( -path ./docbook \) -prune -o -print -type f | grep 'docbook'则可以。这其实应该也是和 -o(OR) -a(AND) 运算的顺序一致的(-print -type f 相当于 -print -a -type f)。
./blfs-book-6.1-html/pst/docbook-utils.html
./blfs-book-6.1-html/pst/docbook-dsssl.html
./blfs-book-6.1-html/pst/docbook-xsl.html
sh# ls ts -l可以看到 -cnewer ts 的位置会有影响，如果放在最后就完全没有效果！
-rw-r--r-- 1 root root 0 2007-01-01 00:00 ts
sh# ls blfs-book-6.1-html/pst/docbook-* -l
-rw-r--r-- 1 roc roc 11619 2005-08-21 05:14 blfs-book-6.1-html/pst/docbook-dsssl.html
-rw-r--r-- 1 roc roc 13821 2005-08-21 05:14 blfs-book-6.1-html/pst/docbook-utils.html
-rw-r--r-- 1 roc roc 11979 2005-08-21 05:14 blfs-book-6.1-html/pst/docbook-xsl.html
sh# find . \( -path ./docbook \) -prune -o -type f -print | grep 'docbook'
./blfs-book-6.1-html/pst/docbook-utils.html
./blfs-book-6.1-html/pst/docbook-dsssl.html
./blfs-book-6.1-html/pst/docbook-xsl.html
sh# find . \( -path ./docbook \) -prune -o -type f -print -cnewer ts | grep 'docbook'
./blfs-book-6.1-html/pst/docbook-utils.html
./blfs-book-6.1-html/pst/docbook-dsssl.html
./blfs-book-6.1-html/pst/docbook-xsl.html
sh# find . \( -path ./docbook \) -prune -o -cnewer ts -type f -print | grep 'docbook'
options {
directory "/var/named";
allow-query { any; };
recursion yes;
allow-transfer { none; };
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
listen-on { 192.168.0.222; };
};
logging {
channel "querylog" {
file "/var/log/named.log" versions 3 size 100m;
print-time yes;
print-severity yes;
};
category queries { querylog; };
};
acl cnc_ip {
192.168.0.222;
58.16.0.0/13;
58.100.0.0/15;
58.211.0.0/16;
58.240.0.0/12;
60.0.0.0/11;
60.52.145.0/24;
60.55.0.0/24;
60.194.192.0/24;
60.208.0.0/12;
61.4.64/20;
61.14.128.0/23;
61.29.146.0/23;
61.48.0.0/13;
......
};
view "from_cnc" {
match-clients { cnc_ip; };
zone "." {
type hint;
file "named.ca";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "named.local";
};
zone "example.com" {
type master;
file "example.com.cnc_zone";
allow-update { none; };
};
};
view "from_telcom" {
match-clients { any; };
zone "." {
type hint;
file "named.ca";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "named.local";
};
zone "example.com" {
type master;
file "example.com.zone";
allow-update { none; };
};
};
sh# cat example.com.zone
;
; BIND data file for local loopback interface
;
$TTL 10
$ORIGIN example.com.
@ IN SOA example.com. admin.example.com. (
2006120602 ; Serial
10s ; Refresh
10 ; Retry
10 ; Expire
10 ) ; Negative Cache TTL
IN NS ns1.example.com.
ns1 IN A 192.168.0.222
@ IN A 124.74.193.210
www IN A 192.168.0.210
bbs IN CNAME www
test IN A 124.74.193.210
sh# cat example.com.cnc_zone
;
; BIND data file for local loopback interface
;
$TTL 10
$ORIGIN example.com.
@ IN SOA example.com. admin.example.com. (
2006120602 ; Serial
10s ; Refresh
10 ; Retry
10 ; Expire
10 ) ; Negative Cache TTL
IN NS ns1.example.com.
ns1 IN A 192.168.0.222
@ IN A 210.51.46.227
www IN A 192.168.0.210
bbs IN CNAME www
test IN A 210.51.46.227然后可以使用 dig 来查看结果。首先在 acl cnc_ip{} 部分不加入 192.168.0.222(本机)，则运行 dig：sh# dig test.example.com @192.168.0.222而 acl cnc_ip{} 部分加上本机地址后：
;; ANSWER SECTION:
test.example.com. 10 IN A 124.74.193.210
sh# dig test.example.com @192.168.0.222这种办法解析针对不同来源的 client 到不同的 IP，但与通常的DDNS(动态域名服务)又不同，而实际上又不是那么"智能"，所以只好命名为"变态" DNS 了 !^_^
;; ANSWER SECTION:
test.example.com. 10 IN A 210.51.46.227
target 0:0:0: FAST-80 WIDE SCSI 168.0MB/s DT(12.5ns, offset 62)以上信息反复出现，系统无法启动。但使用单处理器的内核却可以启动系统！而且使用 Windows 也是可以启动的，在 BIOS 中也是可以正常识别的。
sym0:0: ERROR(20:0) (d-2d-2f) (3e/18/80) @ (scripta 7f0:150003d8)
sym0: script cmd = 88080000
sym0: regdump: ...
sym0: RCI STATUS = 0x2000
sym0: SCSI BUS reset detected
sym0: SCSI BUS has been reset
......
sh# grep -i 'MEM' config可以看到有 HIGHMEM4G 和 HIGHMEM64G，在 make menuconfig 的 "Process type and features" ->"High Memory Support"中也可以看到。既然已经有 64G 的支持，为什么还需要 4G 呢？这是一个疑点，也是一个突破点。通过查看 help，大致可以了解，如果内存在 1~4G 之间，最好使用 4G 支持，如果内存多于 4G，则应使用 64G。
......
# CONFIG_HIGHMEM4G is not set
CONFIG_HIGHMEM64G=y
CONFIG_HIGHMEM=y
......
sh# /etc/init.d/mysqld stop
sh# mysqld_safe --skip_grant_tables --defaults-file=/etc/my.cnf
sh# mysql -u root
mysql> update mysql.user set password=PASSWORD('********') where User='root';
OR
mysql> set password for 'root'@'localhost' = PASSWORD('********');
mysql> flush privileges;
mysql> quit
sh# /etc/init.d/mysqld stop
sh# /etc/init.d/mysqld start