s0cketky skromny blog

Statnice

2010-03-03T16:52:00.001+01:00

Po dlouhe dobe novy vytvor :) Na statnice jsem se ucila tak, ze jsem si delala vypisky - psanim se toho vzdycky nejvic naucim. Vcera a predevcirem jsem to celkem 16h skenovala a upravovala (skener mam od stolu pres dve chodby daleko a chodte si otacet kazdou stranku...). A tady to je:

PRAKTICKE.PDF
TEORIE.PDF

Jsou to otazky z okruhu Softwarove systemy - architektura a principy systemoveho prostredi. Obsahuje to samozrejme chyby, o nekterych nevim, nektere jsou opravene a o hodne vim, ale uz nebyla nalada ani cas je opravovat - vetsina z nich je ale po zamysleni nad problemem snadno odhalitelna :)

Nez jsem sla ke statnicim, umela jsem kazde pismenko z tehlech dvou sesitu plus samozrejme dalsi veci, ktere tam nejsou. Ale to, co je v tech sesitech, je imho takovy dobry zaklad. Tak preju hodne stesti :)

Vydeleni bezeckeho blogu / Detaching of the running blog

2008-09-20T15:31:00.004+02:00

Bezecky blog vydelen zvlast :)

Running blog detached :)

2008-06-24T08:57:00.002+02:00

Pro vase pohodli :) / For your comfort :)

2008-05-23T21:03:00.000+02:00

Z ankety prozatim plyne, ze spis nez nadseni z presunu webu do blogu jste trochu zklamani a ze statistik plyne pravdepodobny duvod - ono se v tom blogu spatne hleda. A tak jsem pripravila specialni prispevek, ktery bude vzdycky jako prvni v kategorii skola a usnadni vam orientaci.

From the poll I can see that you are more disappointed then excited from moving my web to the blog. And there is reason visible from my stats - it's hard to find what you want. So I've prepared the special entry at the school section that will be always displayed as the first entry and contains the content of the school section. Hope it will help you.

Sekce skola - obsah / School Section - the Content

2008-05-23T20:28:00.007+02:00

Golf v desti - Podebrady / Golf in the Rain - Podebrady

2008-05-19T21:50:00.008+02:00

Neexistuje spatne pocasi pro golf, jen spatne obleceny golfista. Takze jsme se v dnesnim krasnem pocasi pro golf vydali do Podebrad na hriste (pocasi bylo tak krasne, ze jsme byli jedini hraci). Nakonec se nam vylet docela vydaril, tady se s vami podelim alespon o ten kousek prirody, co se mi povedlo zachytit (bazanti mi bohuzel utekli).

There is no improper weather for golf. There is just inappropriately dressed golf player. So we took the road to the Podebrady golf course today morning (the weather was such proper weather for the golf that we were the only players at the course). Finally it was quite nice golf trip. There are some pictures of nature that turned out well (pheasants unfortunately escaped from the reach of my camera).

Potkali jsme hodne sneku

We've met many snails

A zizal :)

And rain-worms :)

Asi kroupy...

Maybe hail-stones...

Tohle si dam na pozadi

This is gonna to be my new wallpaper

Broky bychom na golfovem hristi necekali

We wasn't expecting grains of shot at the golf course

The Big Bang Theory

2008-03-26T07:45:00.009+01:00

Rec je o novem americkem serialu, ktery se prave vysila vsude mozne, jen ne v Cechach. Co me zaujalo? Zname prostredi! :)
Hlavnimi postavami jsou dva intelektualove a jejich dva pratele (vsichni genialni mladi fyzici), kteri maji, jak uz to tak byva, drobny problem v komunikaci se zbytkem sveta. Ze si ziji v jinem svete nebylo tolik znat, dokud se v byte naproti pres chodbu neobjevila nova sympaticka najemnice, ktera ovsem intelektem tolik neoplyva...
Jestli mate s intelektualy zkusenosti, budete se smat od zacatku do konce .)

I'm talking about a new Ameriacan situation comedy that is broadcast at many countries except Czech coutnry. What holds my interest? The well known environment!
The main characters are two intellectuals and their two friends (all of them are young genius physicists) and how it usually is they have a little problem with communication with the rest of the world. However there is a new beautiful and lovely girl-neighbour living across the hall (that is not such smart as nice).
If you are experienced in living in a world of intellect you will really like it .)

Velky pes / Big Dog

2008-03-20T16:46:00.004+01:00

Na tohle se rozhodne podivejte!
http://www.youtube.com/watch?v=W1czBcnX1Ww

Must see this!
http://www.youtube.com/watch?v=W1czBcnX1Ww

Seminar z TCP/IP

2008-03-06T16:15:00.015+01:00

Sem budu pridavat poznamky z tohoto seminare. Ta podivna cisla na zacatcich radku jsou jmena slidy, ke kterym poznamky patri .)

Slidy jsou vystizne, da se to vsechno udelat jen zpodle nich. Moje poznamky jsou urceny spis
pro ty, co si to budou chtit cist treba v metru a nebudou zrovna mit moznost si to zkouset.
Slidy jsou dulezity! (a nebojte se jich, jsou hezky napsany)

Thu Feb 21 17:21:28 CET 2008

Uvod

Ucast nepovinna, zapocet za bojovku - sada ukolu, ktere dostane na poslednim
terminu, nebo v nahradnim terminu (dostaneme ukol, po vyreseni dalsi, vitezi
se tim, ze se dostaneme do cile)

http://bug.ms.mff.cuni.cz/tcpip/slides

Hrajeme si na serveru, na kterym je ten web. prihlasuje se pres ssh, kazdy
ma sve heslo a login (tam mame virtualni servrik, kde budeme rooti). Nedelat
tam bordel, aby nam server nevzali! :)

ssh vmXX@bug.ms.mff.cuni.cz, pak root;
(na papirku se dostane cislo a heslo)

Ja mam cislo 15, takze vsude, kde je 15, tak tam neni nahodou :) A pripadne
si tam dosadte svoje cislo.

Server je pristupny odkudkoliv, i z venci.

Odpojeni:
zabit ssh "~.enter" nebo ctrl+"]" (bacha, u toho si pamatuje shell,
co jsme tam meli napsany, ale neni to videt)

Kdybychom si pokazili to cely, staci rict a to cele nam to obnovi.

Obcas ten server nemusi fungovat, hlavne treba pred seminarem.

Rozvrzeni site na slidu 6

slide 8:


ifconfig
ifconfig -a

IP adresy si nastavujme tak, aby obsahovali nase prihlasovaci cislo, abychom se
o ne nepoprali :)

slide 10: nastaveni adresy


vm15:~# ifconfig eth0 10.0.0.15/24 # mam cislo 15
SIOCSIFNETMASK: Cannot assign requested address
vm15:~# ifconfig eth0 up
vm15:~# ifconfig eth1 10.0.1.15/24
SIOCSIFNETMASK: Cannot assign requested address
vm15:~# ifconfig eth1 up

slide 11: vyzkousime si, ze nam to funguje: ping (je rekurzivne spocetny :)


vm15:~# ping 10.0.0.22
.
.
.
vm15:~# ping 10.0.0.22 -s 65536
Error: packet size 65536 is too large. Maximum is 65507

slide 12:


vm15:~# tcpdump -v -i eth0 -n
# -n ... neprekladat ip adresy na jmena

slide 14:
zmena mac adresy (interface nesmi byt aktivni)
prehled arp tabulky:


vm15:~# arp
vm15:~# arping 10.0.0.22
ARPING 10.0.0.22
42 bytes from 00:16:3e:00:00:22 (10.0.0.22): index=0 time=3.280 msec
.
.

slide 15:


vm15:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
10.0.1.0        0.0.0.0         255.255.255.0   U     0      0        0 eth1
vm15:~# ping 195.113.31.123
connect: Network is unreachable
vm15:~# route add default gw 10.0.0.100
vm15:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
10.0.1.0        0.0.0.0         255.255.255.0   U     0      0        0 eth1
0.0.0.0         10.0.0.100      0.0.0.0         UG    0      0        0 eth0
vm15:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        *               255.255.255.0   U     0      0        0 eth0
10.0.1.0        *               255.255.255.0   U     0      0        0 eth1
default         10.0.0.100      0.0.0.0         UG    0      0        0 eth0
vm15:~# ping 195.113.31.123
PING 195.113.31.123 (195.113.31.123) 56(84) bytes of data.
64 bytes from 195.113.31.123: icmp_seq=1 ttl=58 time=3.12 ms
.
.

slide 16:


vm15:~# tcpdump -v -i eth0 > /tmp/log001 2>&1 &
[1] 1354
vm15:~# device eth0 entered promiscuous mode
audit(1203615867.513:8): dev=eth0 prom=256 old_prom=0 auid=4294967295

vm15:~# 
vm15:~# traceroute 195.113.31.123
traceroute to 195.113.31.123 (195.113.31.123), 30 hops max, 40 byte packets
 1  10.0.0.100 (10.0.0.100)  1.965 ms  0.434 ms  0.244 ms
 2  fw-ms.ms.mff.cuni.cz (195.113.19.222)  1.826 ms  1.588 ms  1.793 ms
 3  gems-mffmsfw.pasnet.cz (195.113.69.5)  3.343 ms  2.459 ms  3.677 ms
 4  geruk-gems.pasnet.cz (195.113.68.201)  1.459 ms  1.467 ms  2.291 ms
 5  karlingw-c.karlin.mff.cuni.cz (195.113.31.130)  1.243 ms  1.160 ms  3.587 ms
 6  k5gw.karlin.mff.cuni.cz (195.113.31.137)  2.014 ms  2.466 ms  1.009 ms
 7  atrey.karlin.mff.cuni.cz (195.113.31.123)  2.233 ms  2.173 ms  1.060 ms
vm15:~# fg
tcpdump -v -i eth0 >/tmp/log001 2>&1
device eth0 left promiscuous mode
audit(1203615888.574:9): dev=eth0 prom=0 old_prom=256 auid=4294967295
vm15:~# less /tmp/log001

slide 19:


vm15:~# ifconfig eth0 down
vm15:~# ifconfig eth0 hw ether 00:11:22:33:44:15
vm15:~# ifconfig eth0 up
vm15:~# vim /etc/network/interfaces 
# Used by ifup(8) and ifdown(8). See the interfaces(5) manpage or
# /usr/share/doc/ifupdown/examples for more information.

auto lo
iface lo inet loopback
auto eth0
iface eth0 inet dhcp
vm15:~# /etc/init.d/networking restart
Reconfiguring network interfaces...Internet Systems Consortium DHCP Client V3.0.4
Copyright 2004-2006 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/

Listening on LPF/eth0/00:11:22:33:44:15
Sending on   LPF/eth0/00:11:22:33:44:15
Sending on   Socket/fallback
DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 7
DHCPOFFER from 10.0.0.100
DHCPREQUEST on eth0 to 255.255.255.255 port 67
DHCPACK from 10.0.0.100
bound to 10.0.0.115 -- renewal in 227 seconds.
postconf: fatal: open /etc/postfix/main.cf: No such file or directory
done.

Thu Feb 28 17:19:23 CET 2008

20:
Chceme pomoci arp ziskat identitu nekoho jinyho. jak na to?
(napriklad kdyz chceme ospolechnout nejake heslo atd...)

21: odpoved je na tomdle slidu :)


               C
               |
               |
     A --------+--------B

Jsme C a chceme odposlouchavat komunikaci A a B, + je switch, takze za
normalnich okolnosti to skrz nas nejde. Pro A se budeme tvarit jako B a pro B
jako A.

Staci posilat falesne ARP odpovedi, kde bude vyplnena mac adresa obeti a moje
IP adresa. musim se ale chovat jako smerovac.

Lze to delat ruzne, bud pravidelne posilam odpovedi i bez vyzadani, nebo
posilam dotaz... zalezi na OS, jak bude reagovat - jak ktery...


vm15:~# ping 10.0.0.100
PING 10.0.0.100 (10.0.0.100) 56(84) bytes of data.
64 bytes from 10.0.0.100: icmp_seq=1 ttl=64 time=1.01 ms
64 bytes from 10.0.0.100: icmp_seq=2 ttl=64 time=0.693 ms

--- 10.0.0.100 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.693/0.853/1.014/0.163 ms
vm15:~# arp -n
Address                  HWtype  HWaddress           Flags Mask            Iface
10.0.0.100               ether   FE:FF:FF:FF:FF:FF   C                     eth0
RPING 10.0.0.100
42 bytes from fe:ff:ff:ff:ff:ff (10.0.0.100): index=0 time=1.327 msec
42 bytes from fe:ff:ff:ff:ff:ff (10.0.0.100): index=1 time=1.713 msec
42 bytes from fe:ff:ff:ff:ff:ff (10.0.0.100): index=2 time=4.258 msec

--- 10.0.0.100 statistics ---
3 packets transmitted, 3 packets received,   0% unanswered

-> vsechno hezky funguje

V tudle chvili vyucujici pusti skript na dalsim pocitaci, ktery se bud chovat
jako smerovac a bude rozesilat pravidelne falesne ARP packety (napadneme ten
pocitac 10.0.0.100) :)


vm15:~# ping 10.0.0.100
PING 10.0.0.100 (10.0.0.100) 56(84) bytes of data.
64 bytes from 10.0.0.100: icmp_seq=1 ttl=64 time=8.43 ms
64 bytes from 10.0.0.100: icmp_seq=2 ttl=64 time=0.715 ms

--- 10.0.0.100 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.715/4.574/8.434/3.860 ms
vm15:~# arp -n
Address                  HWtype  HWaddress           Flags Mask            Iface
10.0.0.100               ether   00:16:3E:00:00:99   C                     eth0
vm15:~# arping 10.0.0.100
ARPING 10.0.0.100
42 bytes from fe:ff:ff:ff:ff:ff (10.0.0.100): index=0 time=1.452 msec
42 bytes from 00:16:3e:00:00:99 (10.0.0.100): index=1 time=121.695 msec
42 bytes from fe:ff:ff:ff:ff:ff (10.0.0.100): index=2 time=2.145 msec
42 bytes from 00:16:3e:00:00:99 (10.0.0.100): index=3 time=1.000 sec

--- 10.0.0.100 statistics ---
2 packets transmitted, 4 packets received, -100% unanswered

-> a hle, secko funguje, jen se podivejme, ze ma najednou jinou arp adresu...

Skript: arpspoof-all, udajne googlitelny

DNS

4:

TTL bychom meli snizit treba na minuty v pripade, ze se chystame menit IP
adresy, jinak je vhodne v radu hodin...

Zona: podstromy struktury, mohou mit casti vykousnute (treba *.cuni.cz bez mff
je zona -> mff ma vlastni zonu)

5:


vm15:~# nslookup idnes.cz
Server:         195.113.19.71
Address:        195.113.19.71#53

Non-authoritative answer:
Name:   idnes.cz
Address: 194.79.52.192


vm15:~# dig cuni.cz ns

; ---- DiG 9.3.4 ---- cuni.cz ns
;; global options:  printcmd
;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 10358
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 3

;; QUESTION SECTION:
;cuni.cz.                       IN      NS

;; ANSWER SECTION:
cuni.cz.                17709   IN      NS      golias.ruk.cuni.cz.
cuni.cz.                17709   IN      NS      ns.ces.net.

;; ADDITIONAL SECTION:
ns.ces.net.             168668  IN      A       195.113.144.233
ns.ces.net.             82268   IN      AAAA    2001:718:1:101::3
golias.ruk.cuni.cz.     82268   IN      A       195.113.0.2

;; Query time: 2 msec
;; SERVER: 195.113.19.71#53(195.113.19.71)
;; WHEN: Thu Feb 28 18:06:20 2008
;; MSG SIZE  rcvd: 134

7:

Jak vypadaji delegace z domen vyssich radu (iterativni dotaz, pod tim je to
okomentovane):


vm15:~# dig +trace +all +qr www.karlin.mff.cuni.cz           

; ---- DiG 9.3.4 ---- +trace +all +qr www.karlin.mff.cuni.cz
;; global options:  printcmd
;; Sending:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 33276
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;.                              IN      NS

;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 33276
;; flags: qr ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 12

;; QUESTION SECTION:
;.                              IN      NS

;; ANSWER SECTION:
.                       513994  IN      NS      F.ROOT-SERVERS.NET.
.                       513994  IN      NS      G.ROOT-SERVERS.NET.
.                       513994  IN      NS      H.ROOT-SERVERS.NET.
.                       513994  IN      NS      I.ROOT-SERVERS.NET.
.                       513994  IN      NS      J.ROOT-SERVERS.NET.
.                       513994  IN      NS      K.ROOT-SERVERS.NET.
.                       513994  IN      NS      L.ROOT-SERVERS.NET.
.                       513994  IN      NS      M.ROOT-SERVERS.NET.
.                       513994  IN      NS      A.ROOT-SERVERS.NET.
.                       513994  IN      NS      B.ROOT-SERVERS.NET.
.                       513994  IN      NS      C.ROOT-SERVERS.NET.
.                       513994  IN      NS      D.ROOT-SERVERS.NET.
.                       513994  IN      NS      E.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET.     604707  IN      A       198.41.0.4
A.ROOT-SERVERS.NET.     604707  IN      AAAA    2001:503:ba3e::2:30
C.ROOT-SERVERS.NET.     604740  IN      A       192.33.4.12
D.ROOT-SERVERS.NET.     604699  IN      A       128.8.10.90
E.ROOT-SERVERS.NET.     604739  IN      A       192.203.230.10
G.ROOT-SERVERS.NET.     604572  IN      A       192.112.36.4
H.ROOT-SERVERS.NET.     604735  IN      A       128.63.2.53
H.ROOT-SERVERS.NET.     604735  IN      AAAA    2001:500:1::803f:235
J.ROOT-SERVERS.NET.     604762  IN      A       192.58.128.30
J.ROOT-SERVERS.NET.     604762  IN      AAAA    2001:503:c27::2:30
K.ROOT-SERVERS.NET.     604728  IN      A       193.0.14.129
K.ROOT-SERVERS.NET.     604728  IN      AAAA    2001:7fd::1

;; Query time: 4 msec
;; SERVER: 195.113.19.71#53(195.113.19.71)
;; WHEN: Thu Feb 28 18:10:54 2008
;; MSG SIZE  rcvd: 468

;; Sending:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 42811
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 42811
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 11

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; AUTHORITY SECTION:
cz.                     172800  IN      NS      F.NS.NIC.cz.
cz.                     172800  IN      NS      A.NS.NIC.cz.
cz.                     172800  IN      NS      B.NS.NIC.cz.
cz.                     172800  IN      NS      C.NS.NIC.cz.
cz.                     172800  IN      NS      D.NS.NIC.cz.
cz.                     172800  IN      NS      E.NS.NIC.cz.

;; ADDITIONAL SECTION:
A.NS.NIC.cz.            172800  IN      A       217.31.205.180
B.NS.NIC.cz.            172800  IN      A       217.31.205.188
C.NS.NIC.cz.            172800  IN      A       195.66.241.202
D.NS.NIC.cz.            172800  IN      A       193.29.206.1
E.NS.NIC.cz.            172800  IN      A       194.146.105.38
F.NS.NIC.cz.            172800  IN      A       193.171.255.48
A.NS.NIC.cz.            172800  IN      AAAA    2001:1488:dada:176::180
B.NS.NIC.cz.            172800  IN      AAAA    2001:1488:dada:184::188
C.NS.NIC.cz.            172800  IN      AAAA    2a01:40:1000::2
D.NS.NIC.cz.            172800  IN      AAAA    2001:678:1::1
F.NS.NIC.cz.            172800  IN      AAAA    2001:628:453:420::48

;; Query time: 8 msec
;; SERVER: 192.5.5.241#53(F.ROOT-SERVERS.NET)
;; WHEN: Thu Feb 28 18:10:54 2008
;; MSG SIZE  rcvd: 379

;; Sending:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 32710
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 32710
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; AUTHORITY SECTION:
cuni.cz.                18000   IN      NS      golias.ruk.cuni.cz.
cuni.cz.                18000   IN      NS      ns.ces.net.

;; ADDITIONAL SECTION:
golias.ruk.cuni.cz.     18000   IN      A       195.113.0.2

;; Query time: 8 msec
;; SERVER: 193.171.255.48#53(F.NS.NIC.cz)
;; WHEN: Thu Feb 28 18:10:54 2008
;; MSG SIZE  rcvd: 105

;; Sending:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 24025
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 24025
;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:
;www.karlin.mff.cuni.cz.                IN      A

;; ANSWER SECTION:
www.karlin.mff.cuni.cz. 86400   IN      CNAME   wendy.karlin.mff.cuni.cz.
wendy.karlin.mff.cuni.cz. 86400 IN      A       195.113.30.214

;; AUTHORITY SECTION:
karlin.mff.cuni.cz.     86400   IN      NS      krb.karlin.mff.cuni.cz.
karlin.mff.cuni.cz.     86400   IN      NS      krbik.karlin.mff.cuni.cz.
karlin.mff.cuni.cz.     86400   IN      NS      golias.ruk.cuni.cz.

;; ADDITIONAL SECTION:
krb.karlin.mff.cuni.cz. 86400   IN      A       195.113.30.215
krbik.karlin.mff.cuni.cz. 86400 IN      A       195.113.30.216
golias.ruk.cuni.cz.     86400   IN      A       195.113.0.2

;; Query time: 2 msec
;; SERVER: 195.113.0.2#53(golias.ruk.cuni.cz)
;; WHEN: Thu Feb 28 18:10:54 2008
;; MSG SIZE  rcvd: 187

Predstavme si, ze pro www.seznam.cz je nameserver ns.seznam.cz. Nj, ale to
dostanu od .cz informaci, ze IP adresu ma u sebe ns.seznam.cz, ale jakou ma
on IP adresu? :-o

To se resi pomoci glue records: od toho serveru pro .cz se dozvime nejen
informace typu NS, ale take typu A o tom ns.seznam.cz. ty jsou v aditional
section (je videt i v nasem dotazu, napr. hned na zacatku ty root servery jsou
tam vyjmenovane a pod tim jsou i jejich IP adresy)

8:


vm15:~# vim /etc/resolv.conf 
vm15:~# cat /etc/resolv.conf 
search seminar
nameserver 10.0.0.100
vm15:~# ping seznam.cz
PING seznam.cz (77.75.76.3) 56(84) bytes of data.
64 bytes from www.seznam.cz (77.75.76.3): icmp_seq=1 ttl=56 time=3.40 ms
64 bytes from www.seznam.cz (77.75.76.3): icmp_seq=2 ttl=56 time=4.70 ms

--- seznam.cz ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 3.402/4.055/4.708/0.653 ms

Top-level domena je pro nase ucely nazvana "seminar" (na stejne urovni jako
.cz atd.)

I kdyz si ten /etc/resolv.conf prepiseme, tak on se casem prepise zpet, takze
musime zrusit dhcp klienta:


vm15:~# pkill dhclient

Otestujeme, jestli nam to funguje hezky:


vm15:~# dig ns.seminar

; ---- DiG 9.3.4 ---- ns.seminar
;; global options:  printcmd
;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 53501
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ns.seminar.                    IN      A

;; ANSWER SECTION:
ns.seminar.             604800  IN      A       10.0.0.100

;; AUTHORITY SECTION:
seminar.                604800  IN      NS      ns.seminar.

;; Query time: 6 msec
;; SERVER: 10.0.0.100#53(10.0.0.100)
;; WHEN: Thu Feb 28 18:32:47 2008
;; MSG SIZE  rcvd: 58

Takze ok, ale ne uplne, pac treba "dig ns" by mel udelat totez, ale nedela, to
hleda na netu z neznamych pricin, ale neresili jsme to, proc to dela takle
spatne.

9:

Nastavime si vlastni server :)
uz by mel bezet, kdyby ne, tak


vm15:~# /etc/init.d/bind9 start
vm15:~# dig @localhost idnes.cz

; ---- DiG 9.3.4 ---- @localhost idnes.cz
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NOERROR, id: 37487
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;idnes.cz.                      IN      A

;; ANSWER SECTION:
idnes.cz.               1800    IN      A       194.79.52.192

;; AUTHORITY SECTION:
idnes.cz.               1800    IN      NS      ns.mafra.cz.
idnes.cz.               1800    IN      NS      ns2.mafra.cz.

;; Query time: 227 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Feb 28 18:38:53 2008
;; MSG SIZE  rcvd: 83
vm15:~# dig @localhost ns.seminar

; ---- DiG 9.3.4 ---- @localhost ns.seminar
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ---HEADER--- opcode: QUERY, status: NXDOMAIN, id: 16326
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ns.seminar.                    IN      A

;; AUTHORITY SECTION:
.                       10800   IN      SOA     A.ROOT-SERVERS.NET. NSTLD.VERISI
GN-GRS.COM. 2008022701 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Feb 28 18:39:33 2008
;; MSG SIZE  rcvd: 103

Ha, ns.seminar nezna. Stejne si ho v resolv.conf nastavime jako defaultni (asi
si to budeme nastavovat pozdeji)


vm15:~# cat /etc/resolv.conf 
search seminar
nameserver 127.0.0.1

Thu Mar 6 17:15:37 CET 2008

11:

Nastavime si dns server (vlastni)


vm15:~# cp /etc/bind/db.local /etc/bind/db.vm15
vm15:~# vim /etc/bind/db.vm15 
vm15:~# cat /etc/bind/db.vm15 
;
; BIND data file for local loopback interface
;
$TTL 3D
@ IN SOA ns.vm15.seminar. root.seminar. (
   2008030601 ; Serial
   8H  ; Refresh
   2D  ; Retry
   4W  ; Expire
   1D ) ; Negative Cache TTL
  NS ns
  MX 20 mail
ns  A 10.0.0.115
mail  A 10.0.0.115
vm15:~# vim /etc/bind/named.conf.local
vm15:~# cat /etc/bind/named.conf.local 
//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

zone "vm15.seminar" {
 type master;
 file "/etc/bind/db.vm15";
};
vm15:~# pkill dhclient
vm15:~# vim /etc/resolv.conf 
vm15:~# cat /etc/resolv.conf 
search seminar
nameserver 10.0.0.115
nameserver 10.0.0.100
vm15:~# /etc/init.d/bind9 restart
Stopping domain name service...: bind.
Starting domain name service...: bind.
vm15:~# tail /var/log/syslog
Mar 6 17:45:53 vm15 named[1475]: listening on IPv4 interface lo, 127.0.0.1#53
Mar 6 17:45:53 vm15 named[1475]: listening on IPv4 interface eth0, 10.0.0.115#53
Mar 6 17:45:53 vm15 named[1475]: command channel listening on 127.0.0.1#953
Mar 6 17:45:53 vm15 named[1475]: command channel listening on ::1#953
Mar 6 17:45:53 vm15 named[1475]: zone 0.in-addr.arpa/IN: loaded serial 1
Mar 6 17:45:53 vm15 named[1475]: zone 127.in-addr.arpa/IN: loaded serial 1
Mar 6 17:45:53 vm15 named[1475]: zone 255.in-addr.arpa/IN: loaded serial 1
Mar 6 17:45:53 vm15 named[1475]: zone localhost/IN: loaded serial 1
Mar 6 17:45:53 vm15 named[1475]: zone vm15.seminar/IN: loaded serial 2008030601
Mar 6 17:45:53 vm15 named[1475]: running

to vypada dobre....


vm15:~# nslookup ns.vm15.seminar
Server:         10.0.0.115
Address:        10.0.0.115#53

Name:   ns.vm15.seminar
Address: 10.0.0.115

Takze to i funguje :) (to, ze to skutecne funguje je jasne z toho, ze jako
server je uvedeny ten 10.0.0.115, coz je nas pocitac a ten to tedy spravne
zodpovedel)

Udelam ze sebe sekundar pro spoluzakuv pocitac:


vm15:~# vim /etc/bind/named.conf.local 
vm15:~# cat /etc/bind/named.conf.local 
zone "vm15.seminar" {
        type master;
        file "/etc/bind/db.vm15";
};

zone "vm28.seminar" {
        type slave;
        file "db.vm28";
        masters { 10.0.0.128; };
};
vm15:~# chmod g+w /etc/bind
# aby si mohl zase on stahnout nas domenovy soubor
vm15:~# /etc/init.d/bind9 restart
Stopping domain name service...: bind.
Starting domain name service...: bind.
vm15:~# nslookup ns.vm28.seminar
Server:         10.0.0.115
Address:        10.0.0.115#53

Name:   ns.vm28.seminar
Address: 10.0.0.128

funugje :)

Smerovani

Vsechny pocitace se restartovali, abychom zmenili stukturu site podle slidu 3
a 4. V teto chvili bychom nemeli nic dostat z dhcp serveru.

6:


vm15:~# ifconfig eth0 10.1.0.15 netmask 255.255.255.0
vm15:~# ifconfig eth0 up
vm15:~# ifconfig eth1 10.3.0.15 netmask 255.255.255.0
vm15:~# ifconfig eth1 up
eth0      Link encap:Ethernet  HWaddr 00:16:3E:00:01:15  
          inet addr:10.1.0.15  Bcast:10.1.0.255  Mask:255.255.255.0
          inet6 addr: fe80::216:3eff:fe00:115/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:189 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:20378 (19.9 KiB)  TX bytes:2604 (2.5 KiB)

eth1      Link encap:Ethernet  HWaddr 00:16:3E:00:03:15  
          inet addr:10.3.0.15  Bcast:10.3.0.255  Mask:255.255.255.0
          inet6 addr: fe80::216:3eff:fe00:315/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:46 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:2908 (2.8 KiB)  TX bytes:510 (510.0 b)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

7:

zapneme smerovani


vm15:~# echo 1 > /proc/sys/net/ipv4/ip_forward

a routovani


vm15:~# route add -net 10.2.0.0/24 gw 10.1.0.100 eth0
vm15:~# route add -net 10.4.0.0/24 gw 10.1.0.100 eth0
vm15:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.2.0.0        10.1.0.100      255.255.255.0   UG    0      0        0 eth0
10.4.0.0        10.1.0.100      255.255.255.0   UG    0      0        0 eth0
10.3.0.0        *               255.255.255.0   U     0      0        0 eth1
10.1.0.0        *               255.255.255.0   U     0      0        0 eth0

Thu Mar 13 17:23:06 CET 2008

13, 14:


vm15:~# vim /etc/quagga/daemons 
vm15:~# cat /etc/quagga/daemons 
...
zebra=yes
bgpd=no
ospfd=no
ospf6d=no
ripd=yes
ripngd=no
isisd=no
vm15:~# vim /etc/quagga/zebra.conf
vm15:~# cat /etc/quagga/zebra.conf
hostname router
password zebra
vm15:~# vim /etc/quagga/ripd.conf
vm15:~# cat /etc/quagga/ripd.conf 
hostname ripd
password zebra
router rip
        network eth0
        network eth1
vm15:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.2.0.0        10.1.0.100      255.255.255.0   UG    0      0        0 eth0
10.4.0.0        10.1.0.100      255.255.255.0   UG    0      0        0 eth0
10.3.0.0        *               255.255.255.0   U     0      0        0 eth1
10.1.0.0        *               255.255.255.0   U     0      0        0 eth0
vm15:~# route del -net   10.2.0.0/24
vm15:~# route del -net   10.4.0.0/24
vm15:~# /etc/init.d/quagga start
Loading capability module if not yet done.
Starting Quagga daemons (prio:10): zebra/usr/lib/quagga/zebra already running.
vm15:~# telnet localhost ripd
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Hello, this is Quagga (version 0.99.5).
Copyright 1996-2005 Kunihiro Ishiguro, et al.


User Access Verification

Password: 
ripd> show ip rip
Codes: R - RIP, C - connected, S - Static, O - OSPF, B - BGP
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

     Network            Next Hop         Metric From            Tag Time
R(n) 0.0.0.0/0          10.1.0.100            2 10.1.0.100        0 10:20
C(i) 10.1.0.0/24        0.0.0.0               1 self              0
R(n) 10.2.0.0/24        10.1.0.100            2 10.1.0.100        0 10:20
C(i) 10.3.0.0/24        0.0.0.0               1 self              0
R(n) 10.4.0.0/24        10.1.0.100            3 10.1.0.100        0 10:20
ripd> show ip rip status 
Routing Protocol is "rip"
Sending updates every 30 seconds with +/-50%, next due in -1205427131 seconds
  Timeout after 180 seconds, garbage collect after 120 seconds
  Outgoing update filter list for all interface is not set
  Incoming update filter list for all interface is not set
  Default redistribution metric is 1
  Redistributing:
  Default version control: send version 2, receive any version 
    Interface        Send  Recv   Key-chain
    eth0             2     1 2    
    eth1             2     1 2    
  Routing for Networks:
    eth0
    eth1
  Routing Information Sources:
    Gateway          BadPackets BadRoutes  Distance Last Update
    10.1.0.100               0         0       120   00:00:19
    10.1.0.11                0         0       120   00:00:08
    10.1.0.9                 0         0       120   00:00:19
    10.3.0.9                 0         0       120   00:00:19
    10.1.0.99                0         0       120   00:00:16
    10.1.0.3                 0         0       120   00:00:35
    10.3.0.3                 0         0       120   00:00:35
    10.1.0.25                0         0       120   00:00:16
    10.3.0.25                0         0       120   00:00:16
    10.1.0.7                 0         0       120   00:00:23
    10.3.0.7                 0         0       120   00:00:23
    10.1.0.5                 0         0       120   00:00:26
    10.3.0.5                 0         0       120   00:00:26
    10.3.0.11                0         0       120   00:00:08
  Distance: (default is 120)

15:


vm15:~# ifconfig eth1 down
# ze zahadnych pricin je obcas nutne todle udelat
vm15:~# ifconfig eth1 up  
vm15:~# ifconfig eth0 down
vm15:~# ifconfig eth0 up  
vm15:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.4.0.14       10.1.0.100      255.255.255.255 UGH   3      0        0 eth0
10.2.0.14       10.1.0.100      255.255.255.255 UGH   3      0        0 eth0
10.2.0.0        10.1.0.100      255.255.255.0   UG    2      0        0 eth0
10.0.0.0        10.1.0.100      255.255.255.0   UG    5      0        0 eth0
10.0.1.0        10.1.0.100      255.255.255.0   UG    5      0        0 eth0
10.3.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth1
10.1.0.0        0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         10.1.0.100      0.0.0.0         UG    2      0        0 eth0
vm15:~# ping 195.113.18.123
PING 195.113.18.123 (195.113.18.123) 56(84) bytes of data.
64 bytes from 195.113.18.123: icmp_seq=1 ttl=63 time=1.74 ms
64 bytes from 195.113.18.123: icmp_seq=2 ttl=63 time=1.15 ms
...

ted schodime servrik na 10.1.0.100 a nekomu (kdo pres to mel cestu, treba ja)
prestane chodit pign do netu, ale casem se to opravi :)


vm15:~# ping 195.113.18.123
PING 195.113.18.123 (195.113.18.123) 56(84) bytes of data.

--- 195.113.18.123 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3005ms
vm15:~# telnet localhost ripd
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Hello, this is Quagga (version 0.99.5).
Copyright 1996-2005 Kunihiro Ishiguro, et al.


User Access Verification

Password: 
ripd> show ip rip status
Routing Protocol is "rip"
Sending updates every 30 seconds with +/-50%, next due in -1205427137 seconds
  Timeout after 180 seconds, garbage collect after 120 seconds
  Outgoing update filter list for all interface is not set
  Incoming update filter list for all interface is not set
  Default redistribution metric is 1
  Redistributing:
  Default version control: send version 2, receive any version 
    Interface        Send  Recv   Key-chain
    eth0             2     1 2    
    eth1             2     1 2    
  Routing for Networks:
    eth0
    eth1
  Routing Information Sources:
    Gateway          BadPackets BadRoutes  Distance Last Update
    10.1.0.100               0         0       120   00:01:20
    10.1.0.11                0         0       120   00:00:19
    10.1.0.9                 0         0       120   00:00:06
    10.3.0.9                 0         0       120   00:00:06
    10.1.0.99                0         0       120   00:00:28
    10.1.0.3                 0         0       120   00:00:32
    10.3.0.3                 0         0       120   00:00:32
    10.1.0.25                0         0       120   00:00:10
    10.3.0.25                1         0       120   00:00:10
    10.1.0.7                 0         0       120   00:00:25
    10.3.0.7                 0         0       120   00:00:25
    10.1.0.5                 0         0       120   00:00:11
    10.3.0.5                 1         0       120   00:00:11
    10.3.0.11                0         0       120   00:00:19
    10.1.0.19                0         0       120   00:00:05
    10.3.0.19                0         0       120   00:00:05
    10.1.0.17                0         0       120   00:00:28
    10.3.0.17                0         0       120   00:00:28
  Distance: (default is 120)

vidime, ze ze 10.1.0.100 byl Last Update uz pred dost dlouhou dobou. Za chvili
uplne zmizel z ty tabulky. A nasla se jina cesta:


ripd> show ip rip       
Codes: R - RIP, C - connected, S - Static, O - OSPF, B - BGP
Sub-codes:
      (n) - normal, (s) - static, (d) - default, (r) - redistribute,
      (i) - interface

      Network            Next Hop         Metric From            Tag Time
R(n) 0.0.0.0/0          10.1.0.99             3 10.1.0.99         0 10:32
R(n) 10.0.0.0/24        10.1.0.99             5 10.1.0.99         0 10:32
R(n) 10.0.1.0/24        10.1.0.99             5 10.1.0.99         0 10:32
C(i) 10.1.0.0/24        0.0.0.0               1 self              0
R(n) 10.2.0.0/24        10.1.0.99             2 10.1.0.99         0 10:32
R(n) 10.2.0.14/32       10.1.0.99             3 10.1.0.99         0 10:32
C(i) 10.3.0.0/24        0.0.0.0               1 self              0
R(n) 10.4.0.0/24        10.1.0.99             3 10.1.0.99         0 10:32
R(n) 10.4.0.14/32       10.1.0.99             3 10.1.0.99         0 10:32
ripd> Connection closed by foreign host.
vm15:~# ping 195.113.18.123
PING 195.113.18.123 (195.113.18.123) 56(84) bytes of data.
64 bytes from 195.113.18.123: icmp_seq=1 ttl=62 time=3.81 ms
64 bytes from 195.113.18.123: icmp_seq=2 ttl=62 time=1.49 ms

--- 195.113.18.123 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 1.496/2.656/3.817/1.161 ms

a kdyz ten interface zase nahodime, tak se tam casem dostane zase ta puvodni
cesta, protoze je kratsi :)

16:


vm15:~# vim /etc/quagga/daemons 
...
zebra=yes
bgpd=no
ospfd=yes
ospf6d=no
ripd=no
ripngd=no
isisd=no
vm15:~# vim /etc/quagga/ospfd.conf
vm15:~# cat /etc/quagga/ospfd.conf
hostname ospfd
password zebra
router ospf
        network 10.1.0.0/24 area 0
        network 10.3.0.0/24 area 0
vm15:~# /etc/init.d/quagga restart
Stopping Quagga daemons (prio:0): (ospfd) zebra (bgpd) (waiting) .. ripd (ripng
d) (ospf6d) (isisd).
Removing all routes made by zebra.
Nothing to flush.
Loading capability module if not yet done.
Starting Quagga daemons (prio:10): zebra ospfd.

zkusime si dalsi vypadek :)


vm15:~# ping 195.113.18.123
PING 195.113.18.123 (195.113.18.123) 56(84) bytes of data.
64 bytes from 195.113.18.123: icmp_seq=1 ttl=63 time=1.25 ms
64 bytes from 195.113.18.123: icmp_seq=2 ttl=63 time=0.957 ms

--- 195.113.18.123 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.957/1.103/1.250/0.150 ms

funguje to mnohem rychleji, nez ten predchozi :) na chvilicku se zastavil a pak
hned bezel dal (cca 3s)

IPv6

Thu Mar 20 17:21:33 CET 2008

5, 6, 7, 8, 9:

V nasem pripade musime tunelovat, proto jsme obklopeni IPv4. Staticke nastaveni:


vm15:~# ip link set dev eth0 up
vm15:~# ip addr add 2001:5c0:94c1:1::04/64 dev eth0
vm15:~# ip route add 2001:5c0:94c1:1::/64 dev eth0
vm15:~# ip route add 2000::/3 via 2001:5c0:94c1:1::100
vm15:~# echo nameserver 2001:5c0:94c1::1 >/etc/resolv.conf
vm15:~# ip route # vypise smerovaci tabulku (route -6)
10.0.0.0/24 via 10.1.0.100 dev eth0  proto zebra  metric 20 
10.2.0.0/24  proto zebra  metric 20 
        nexthop via 10.1.0.100  dev eth0 weight 1
        nexthop via 10.1.0.99  dev eth0 weight 1
10.4.0.0/24  proto zebra  metric 30 
        nexthop via 10.1.0.100  dev eth0 weight 1
        nexthop via 10.1.0.99  dev eth0 weight 1
10.3.0.0/24 dev eth1  proto kernel  scope link  src 10.3.0.15 
10.1.0.0/24 dev eth0  proto kernel  scope link  src 10.1.0.15 
default via 10.1.0.100 dev eth0  proto zebra  metric 10 
vm15:~# route -6
Kernel IPv6 routing table
Destination                  Next Hop              Flags Metric Ref    Use Iface
::1/128                      ::                    U     0      12       1 lo      
2001:5c0:94c1:1::4/128       ::                    U     0      39       1 lo      
2001:5c0:94c1:1::/64         ::                    U     256    1        0 eth0    
2001:5c0:94c1:1::/64         ::                    U     1024   0        0 eth0    
2000::/3                     2001:5c0:94c1:1::100  UG    1024   18       0 eth0    
fe80::216:3eff:fe00:115/128  ::                    U     0      2        1 lo      
fe80::216:3eff:fe00:315/128  ::                    U     0      0        1 lo      
fe80::/64                    ::                    U     256    0        0 eth0    
fe80::/64                    ::                    U     256    0        0 eth1    
ff02::2/128                  ff02::2               UC    0      3        3 eth0    
ff00::/8                     ::                    U     256    0        0 eth0    
ff00::/8                     ::                    U     256    0        0 eth1    
vm15:~# ping6 www.kame.net
PING www.kame.net(orange.kame.net) 56 data bytes
64 bytes from orange.kame.net: icmp_seq=1 ttl=46 time=313 ms
64 bytes from orange.kame.net: icmp_seq=2 ttl=46 time=317 ms
64 bytes from orange.kame.net: icmp_seq=3 ttl=46 time=305 ms
64 bytes from orange.kame.net: icmp_seq=4 ttl=46 time=324 ms

--- www.kame.net ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 305.049/315.113/324.288/6.912 ms

Zrusime statickou konfiguraci a presto ale pingneme, proc? protoze si to
routovani pamatuje.


TNETLINK answers: No such process
vm15:~# ip route del 2001:5c0:94c1:1::/64
vm15:~# ip addr del 2001:5c0:94c1:1::04/64 dev eth0
vm15:~# ping6 www.kame.net
PING www.kame.net(orange.kame.net) 56 data bytes
64 bytes from orange.kame.net: icmp_seq=1 ttl=45 time=326 ms
64 bytes from orange.kame.net: icmp_seq=2 ttl=45 time=328 ms

--- www.kame.net ping statistics ---
3 packets transmitted, 2 received, 33% packet loss, time 2014ms
rtt min/avg/max/mdev = 326.537/327.750/328.963/1.213 ms
vm15:~# ip addr show
1: lo:  mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0:  mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:00:01:15 brd ff:ff:ff:ff:ff:ff
    inet 10.1.0.15/24 brd 10.1.0.255 scope global eth0
    inet6 2001:5c0:94c1:1:216:3eff:fe00:115/64 scope global dynamic 
       valid_lft 2591996sec preferred_lft 604796sec
    inet6 fe80::216:3eff:fe00:115/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1:  mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:16:3e:00:03:15 brd ff:ff:ff:ff:ff:ff
    inet 10.3.0.15/24 brd 10.3.0.255 scope global eth1
    inet6 fe80::216:3eff:fe00:315/64 scope link 
       valid_lft forever preferred_lft forever
4: sit0:  mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0

Odposlechneme si packet:


dns: /etc/resolv.conf:1: invalid nameserver address `2001:5c0:94c1::1'
device eth0 entered promiscuous mode
audit(1206032751.183:4): dev=eth0 prom=256 old_prom=0 auid=4294967295
Capturing on eth0
Frame 1 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Mar 20, 2008 18:05:51.693765000
    [Time delta from previous packet: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Packet Length: 110 bytes
    Capture Length: 110 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ipv6:icmpv6]
Ethernet II, Src: Xensourc_00:01:99 (00:16:3e:00:01:99), Dst: IPv6-Neighbor-Disc
overy_00:00:00:01 (33:33:00:00:00:01)
    Destination: IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)
    Address: IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadca
        st)
        .... ..1. .... .... .... .... = LG bit: Locally administered address (th
        is is NOT the factory default)
    Source: Xensourc_00:01:99 (00:16:3e:00:01:99)
    Address: Xensourc_00:01:99 (00:16:3e:00:01:99)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory
         default)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
    Version: 6
    Traffic class: 0x00
    Flowlabel: 0x00000
    Payload length: 56
    Next header: ICMPv6 (0x3a)
    Hop limit: 255
    Source address: fe80::216:3eff:fe00:199 (fe80::216:3eff:fe00:199)
    Destination address: ff02::1 (ff02::1)
Internet Control Message Protocol v6
    Type: 134 (Router advertisement)
    Code: 0
    Checksum: 0xf491 [correct]
    Cur hop limit: 64
    Flags: 0x00
         0... .... = Not managed
         .0.. .... = Not other
         ..0. .... = Not Home Agent
         ...0 0... = Router preference: Medium
    Router lifetime: 30
    Reachable time: 0
    Retrans time: 0
    ICMPv6 options
         Type: 3 (Prefix information)
         Length: 32 bytes (4)
         Prefix length: 64
         Flags: 0xc0
             1... .... = Onlink
             .1.. .... = Auto
             ..0. .... = Not router address
             ...0 .... = Not site prefix
         Valid lifetime: 0x00278d00
         Preferred lifetime: 0x00093a80
         Prefix: 2001:5c0:94c1:1::
    ICMPv6 options
         Type: 1 (Source link-layer address)
         Length: 8 bytes (1)
         Link-layer address: 00:16:3e:00:01:99

device eth0 left promiscuous mode
audit(1206032756.767:5): dev=eth0 prom=0 old_prom=256 auid=4294967295
1 packets captured

10, 11:


vm15:~# host www.pasnet.cz
www.pasnet.cz has address 195.113.67.149
www.pasnet.cz has IPv6 address 2001:718:1e00::149
vm15:~# host 2001:718:1e03:4::3
3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.0.0.0.3.0.e.1.8.1.7.0.1.0.0.2.ip6.arpa domain 
name pointer nms.ipv6.pasnet.cz.

{to dns jsem moc nestihla}

UDP, TCP, Firewall

1-5:

pro ukonceni telnetu se standardne pouziva ctrl+], ale to se nam nehodi, pac to
nas vyhodi z konsole :) nastavime pomoci parametru -e. ale netcat je leps, takze
budu pouzivat netcat.

pripojime se na daytime, sluzbu, co nam vraci aktualni cas:


vm15:~# netcat -u localhost 13
1
20 MAR 2008 18:32:01 CET
2
20 MAR 2008 18:32:04 CET

a pres tcp:


vm15:~# netcat localhost 13
20 MAR 2008 18:33:04 CET

6,7,8:

Podivame se, jak probehne spojeni:


vm15:~# tshark  >/tmp/dump &
[1] 14660
vm15:~# adns: /etc/resolv.conf:1: invalid nameserver address `2001:5c0:94c1::1'
device eth0 entered promiscuous mode
audit(1206035041.437:6): dev=eth0 prom=256 old_prom=0 auid=4294967295
Capturing on eth0
vm15:~# wget http://10.0.0.100/tcpip/firewall.png
--18:44:06--  http://10.0.0.100/tcpip/firewall.png
           => `firewall.png.1'
Connecting to 10.0.0.100:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 21,058 (21K) [image/png]

100%[====================================>] 21,058        --.--K/s             

18:44:06 (5.80 MB/s) - `firewall.png.1' saved [21058/21058]

vm15:~# pkill tshark
vm15:~# device eth0 left promiscuous mode
audit(1206035055.462:7): dev=eth0 prom=0 old_prom=256 auid=4294967295
53 packets captured
vm15:~# cat /tmp/dump 
  0.000000      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x2581fd52
  1.852137    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=302385660 TSER=0 WS=3
  1.854351   10.0.0.100 -> 10.1.0.15    TCP www > 4150 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=632812404 TSER=302385660 WS=4
  1.854448    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=302385662 TSER=632812404
  1.855179    10.1.0.15 -> 10.0.0.100   HTTP GET /tcpip/firewall.png HTTP/1.0
  1.856249   10.0.0.100 -> 10.1.0.15    TCP www > 4150 [ACK] Seq=1 Ack=117 Win=5792 Len=0 TSV=632812404 TSER=302385663
  1.857332   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.857414    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=1449 Win=8736 Len=0 TSV=302385663 TSER=632812405
  1.857432   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.857451    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=2897 Win=11632 Len=0 TSV=302385663 TSER=632812405
  1.857484   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.857502    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=4345 Win=14528 Len=0 TSV=302385663 TSER=632812405
  1.858795   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858859    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=5793 Win=17424 Len=0 TSV=302385663 TSER=632812405
  1.858878   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858900    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=7241 Win=20320 Len=0 TSV=302385663 TSER=632812405
  1.858908   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858924    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=8689 Win=23216 Len=0 TSV=302385663 TSER=632812405
  1.858930   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858943    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=10137 Win=26112 Len=0 TSV=302385663 TSER=632812405
  1.858949   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858975    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=11585 Win=29008 Len=0 TSV=302385663 TSER=632812405
  1.858981   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.858995    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=13033 Win=31904 Len=0 TSV=302385663 TSER=632812405
  1.861236   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.861310    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=14481 Win=34800 Len=0 TSV=302385663 TSER=632812406
  1.861334   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.861349    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=15929 Win=37696 Len=0 TSV=302385663 TSER=632812406
  1.861357   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.861372    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=17377 Win=40592 Len=0 TSV=302385663 TSER=632812406
  1.861377   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.861390    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=18825 Win=43488 Len=0 TSV=302385663 TSER=632812406
  1.861396   10.0.0.100 -> 10.1.0.15    TCP [TCP segment of a reassembled PDU]
  1.861410    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=20273 Win=46384 Len=0 TSV=302385663 TSER=632812406
  1.861415   10.0.0.100 -> 10.1.0.15    HTTP HTTP/1.1 200 OK (PNG)
  1.861428    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [ACK] Seq=117 Ack=21311 Win=49280 Len=0 TSV=302385663 TSER=632812406
  1.861434   10.0.0.100 -> 10.1.0.15    TCP www > 4150 [FIN, ACK] Seq=21311 Ack=117 Win=5792 Len=0 TSV=632812406 TSER=302385663
  1.864679    10.1.0.15 -> 10.0.0.100   TCP 4150 > www [FIN, ACK] Seq=117 Ack=21312 Win=49280 Len=0 TSV=302385665 TSER=632812406
  1.867147   10.0.0.100 -> 10.1.0.15    TCP www > 4150 [ACK] Seq=21312 Ack=118 Win=5792 Len=0 TSV=632812407 TSER=302385665
  4.432056 fe80::216:3eff:fe00:199 -> ff02::1      ICMPv6 Router advertisement
  4.987530      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x2581fd52
  5.559465    10.1.0.11 -> 224.0.0.5    OSPF Hello Packet
  5.562169    10.1.0.19 -> 224.0.0.5    OSPF Hello Packet
  5.575656     10.1.0.9 -> 224.0.0.5    OSPF Hello Packet
  5.578740     10.1.0.1 -> 224.0.0.5    OSPF Hello Packet
  5.596916     10.1.0.3 -> 224.0.0.5    OSPF Hello Packet
  5.596970   10.1.0.100 -> 224.0.0.5    OSPF Hello Packet
  5.604864    10.1.0.25 -> 224.0.0.5    OSPF Hello Packet
  5.610941    10.1.0.15 -> 224.0.0.5    OSPF Hello Packet
  5.619775    10.1.0.99 -> 224.0.0.5    OSPF Hello Packet
  5.625787    10.1.0.17 -> 224.0.0.5    OSPF Hello Packet
  5.630497     10.1.0.7 -> 224.0.0.5    OSPF Hello Packet
  5.642481     10.1.0.5 -> 224.0.0.5    OSPF Hello Packet

9: oskenujeme router na verzi OS:


vm15:~# nmap -O 10.0.0.100

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-03-20 18:52 CET
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled.
 Try using --system-dns or specify valid servers with --dns_servers
Interesting ports on 10.0.0.100:
Not shown: 1676 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
53/tcp  open  domain
80/tcp  open  http
443/tcp open  https
Device type: general purpose
Running: Linux 2.4.X|2.5.X|2.6.X
OS details: Linux 2.4.0 - 2.5.20, Linux 2.4.7 - 2.6.11

Nmap finished: 1 IP address (1 host up) scanned in 2.748 seconds

Thu Mar 27 17:20:27 CET 2008


vm15:~# netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:echo                  *:*                     LISTEN     
tcp        0      0 *:discard               *:*                     LISTEN     
tcp        0      0 localhost:zebra         *:*                     LISTEN     
tcp        0      0 localhost:ospfd         *:*                     LISTEN     
tcp        0      0 *:daytime               *:*                     LISTEN     
tcp        0      0 vm15.seminar:domain     *:*                     LISTEN     
tcp        0      0 localhost:domain        *:*                     LISTEN     
tcp        0      0 localhost:953           *:*                     LISTEN     
tcp6       0      0 *:www                   *:*                     LISTEN     
tcp6       0      0 *:domain                *:*                     LISTEN     
tcp6       0      0 ip6-localhost:953       *:*                     LISTEN     
udp        0      0 *:1024                  *:*                                
udp        0      0 *:echo                  *:*                                
udp        0      0 *:discard               *:*                                
udp        0      0 *:daytime               *:*                                
udp        0      0 vm15.seminar:domain     *:*                                
udp        0      0 localhost:domain        *:*                                
udp        0      0 *:bootpc                *:*                                
udp6       0      0 *:1025                  *:*                                
udp6       0      0 *:domain                *:*                                
raw        0      0 *:ospf                  *:*                     7          
raw6   15344      0 *:ipv6-icmp             *:*                     7          
Active UNIX domain sockets (only servers)
Proto RefCnt Flags   Type       State         I-Node Path
unix  2      [ ACC ] STREAM     LISTENING     2933     /var/run/quagga/zserv.api
unix  2      [ ACC ] STREAM     LISTENING     2940     /var/run/quagga/zebra.vty
unix  2      [ ACC ] STREAM     LISTENING     2952     /var/run/quagga/ospfd.vty

14:


vm15:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

16:


vm15:~# iptables -A INPUT -p tcp --dport daytime -j DROP
vm15:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       tcp  --  anywhere             anywhere            tcp dpt:daytime 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
vm15:~# nc localhost daytime

...to nc samozrejme nic nedelalo

smazeme a nahradime reject:


vm15:~# iptables -D INPUT -p tcp --dport daytime -j DROP
vm15:~# iptables -A INPUT -p tcp --dport daytime -j REJECT
vm15:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source      destination         
REJECT     tcp  --  anywhere    anywhere     tcp dpt:daytime reject-with icmp-po
rt-unreachable 

Chain FORWARD (policy ACCEPT)
target     prot opt source      destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source      destination         
vm15:~# nc localhost daytime

localhost [127.0.0.1] 13 (daytime) : Connection refused

kdyz bychom si chtela zakazat secko, akorat vynechame tu informaci o portu.
potom nam ale nebude chodit ani treba ssh, protoze to je sice "odchozi", ale
take potrebuje samozrejme prichozi komunikaci... - dobre vyzkouset pomoci
tcpdump treba :)

18:

ted si zakazeme prichozi, krome uz spojenych, takze nam to ssh zacne fungovat,
ale ostatni ciste z venci ne:


vm15:~# iptables -A INPUT -p tcp -m 
state --state ESTABLISHED,RELATED -j ACCEP
Netfilter messages via NETLINK v0.30.
ip_conntrack version 2.4 (1088 buckets, 8704 max) - 224 bytes per conntrack
vm15:~# iptables -A INPUT -p tcp -j DROP  
vm15:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       tcp  --  anywhere             anywhere      tcp dpt:daytime 
ACCEPT     tcp  --  anywhere             anywhere      state RELATED,ESTABLISHED 
DROP       tcp  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
vm15:~# ssh urtax.ms.mff.cuni.cz
The authenticity of host 'urtax.ms.mff.cuni.cz (195.113.20.119)' can't be establ
ished.
RSA key fingerprint is 88:c0:0b:d3:9f:8e:d6:5a:5a:9b:90:35:60:f0:32:a5.
Are you sure you want to continue connecting (yes/no)?
...

HTTP


vm15:~# nc www.google.com 80
GET / HTTP/1.0

HTTP/1.0 302 Found
Location: http://www.google.cz/
Cache-Control: private
Set-Cookie: PREF=ID=896ed3e96761f7c1:TM=1206639248:LM=1206639248:S=-Vvh42c1MoDaH
fat; expires=Sat, 27-Mar-2010 17:34:08 GMT; path=/; domain=.google.com
Content-Type: text/html
Server: gws
Content-Length: 218
Date: Thu, 27 Mar 2008 17:34:08 GMT
Connection: Close

<HTML><HEAD><meta http-equiv="content-type" content="text/html;chars
et=utf-8">
<TITLE>302 Moved</TITLE></HEAD>lt;BODY>
<h1>302 Moved</H1>
The document has moved
<A HREF="http://www.google.cz/">here</A>.
</BODY></HTML>
vm15:~# wget -S http://www.google.com
--18:41:39--  http://www.google.com/
           => `index.html.1'
Resolving www.google.com... 66.249.91.147, 66.249.91.99, 66.249.91.103, ...
Connecting to www.google.com|66.249.91.147|:80... connected.
HTTP request sent, awaiting response... 
  HTTP/1.0 302 Found
  Location: http://www.google.cz/
  Cache-Control: private
  Set-Cookie: PREF=ID=4b80fcef6e783fd3:TM=1206639699:LM=1206639699:S=m6-DJhcgsJe
  s4CcX; expires=Sat, 27-Mar-2010 17:41:39 GMT; path=/; domain=.google.com
  Content-Type: text/html
  Server: gws
  Content-Length: 218
  Date: Thu, 27 Mar 2008 17:41:39 GMT
  Connection: Keep-Alive
Location: http://www.google.cz/ [following]
--18:41:39--  http://www.google.cz/
           => `index.html.1'
Resolving www.google.cz... 66.249.91.104, 66.249.91.147, 66.249.91.99, ...
Reusing existing connection to www.google.com:80.
HTTP request sent, awaiting response... 
  HTTP/1.0 200 OK
  Cache-Control: private
  Content-Type: text/html; charset=ISO-8859-2
  Set-Cookie: PREF=ID=ec80351da085837a:TM=1206639699:LM=1206639699:S=-cL0R5F9l4x
  GLV3x; expires=Sat, 27-Mar-2010 17:41:39 GMT; path=/; domain=.google.cz
  Server: gws
  Date: Thu, 27 Mar 2008 17:41:39 GMT
  Connection: Close
Length: unspecified [text/html]

    [ <=>                                 ] 5,757         --.--K/s             

18:41:39 (283.31 KB/s) - `index.html.1' saved [5757]
vm15:~# cat ./index.html
<html><head>...

Thu Apr 3 17:19:18 CEST 2008

9:
pustime apache a vyzkousime, ze funguje:


vm15:~# /etc/init.d/apache2 start
vm15:~# echo ":)" > /var/www/index.html      
vm15:~# wget http://localhost
--17:27:29--  http://localhost/
           => `index.html.2'
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/html]

100%[====================================>] 3             --.--K/s             

17:27:29 (97.66 KB/s) - `index.html.2' saved [3/3]

vm15:~# cat index.html
:)

nastavime dns, abysme se mohli ptat i skrz jmeno, ne jen cislo:


vm15:~# cat /etc/bind/db.vm15 
;
; BIND data file for local loopback interface
;
$TTL    3D
@       IN      SOA     vm15.seminar. root.seminar. (
                        2008030602      ; Serial
                        8H              ; Refresh
                        2D              ; Retry
                        4W              ; Expire
                        1D )    ; Negative Cache TTL
NS      ns
MX      20 mail
ns              A       10.0.0.115
www             A       10.0.0.115
mail            A       10.0.0.115
ns              AAAA    2001:5c0:94c1:1::15
vm15:~# /etc/init.d/bind9 restart
Stopping domain name service...: bind.
Starting domain name service...: bind.
vm15:~# wget http://www.vm15.seminar.
--17:36:09--  http://www.vm15.seminar./
           => `index.html.1'
Resolving www.vm15.seminar.... 10.0.0.115
Connecting to www.vm15.seminar.|10.0.0.115|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3 [text/html]

100%[====================================>] 3             --.--K/s             

17:36:09 (146.48 KB/s) - `index.html.1' saved [3/3]

vm15:~# cat index.html.1 
:)

10, 11:


vm15:/var/www# mkdir auth
vm15:/var/www# #adresar, ktery budeme chranit jmenem a heslem
vm15:/var/www# cd ./auth/                   
vm15:/var/www/auth# echo "tajne" > secret.html
vm15:/var/www/auth# htpasswd  -c ./overovani uzivatel
New password: 
Re-type new password: 
Adding password for user uzivatel
vm15:/var/www/auth# vim ./.htaccess 
vm15:/var/www/auth# cat ./.htaccess 
AuthType Basic
AuthName "uzivatel (realm)"
AuthUserFile /var/www/auth/secret.html
Require validuser
vm15:/var/www/auth# wget http://localhost/auth/secret.html
--17:55:33--  http://localhost/auth/secret.html
           => `secret.html.1'
Resolving localhost... 127.0.0.1
Connecting to localhost|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.

mno a po tom, co jsme zadali


vm15:/var/www/auth# wget -d --http-user uzivatel --http-password heslo http://localhost/auth/secret.html

se nam to teoreticky melo povest, ale me jedine se to nepovedlo, kdo vi proc,
kazdopadne nebyl moc cas to zkoumat :)

12:


vm15:/var/www# vim /etc/bind/db.vm15 
vm15:/var/www# cat /etc/bind/db.vm15 
;
; BIND data file for local loopback interface
;
$TTL    3D
@       IN      SOA     vm15.seminar. root.seminar. (
                        2008030603      ; Serial
                        8H              ; Refresh
                        2D              ; Retry
                        4W              ; Expire
                        1D )    ; Negative Cache TTL
NS      ns
MX      20 mail
ns              A       10.0.0.115
www             A       10.0.0.115
mail            A       10.0.0.115
ns              AAAA    2001:5c0:94c1:1::15

www2    IN      CNAME   www
vm15:/var/www# vim /etc/apache2/sites-enabled/test-config
vm15:/var/www# cat /etc/apache2/sites-enabled/test-config
NameVirtualHost 10.0.0.115:80

ServerName www.vm15.seminar
DocumentRoot /var/www/www



ServerName www2.vm15.seminar
DocumentRoot /var/www/www2


vm15:/var/www# mkdir www
vm15:/var/www# mkdir www2
vm15:/var/www# echo "1" > www/index.html 
vm15:/var/www# echo "2" > www2/index.html
vm15:/var/www# a2dissite default
Site default disabled; run /etc/init.d/apache2 reload to fully disable.
vm15:/var/www# /etc/init.d/bind9 restart
Stopping domain name service...: bind.
Starting domain name service...: bind.
vm15:/var/www# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)...apache2: apr_sockaddr_info_get() failed
for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
apache2: apr_sockaddr_info_get() failed for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
.
vm15:/var/www# wget http://www2.vm15.seminar/     
--18:22:05--  http://www2.vm15.seminar/
           => `index.html.1'
Resolving www2.vm15.seminar... 10.0.0.115
Connecting to www2.vm15.seminar|10.0.0.115|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2 [text/html]

100%[====================================>] 2             --.--K/s             

18:22:05 (75.12 KB/s) - `index.html.1' saved [2/2]

vm15:/var/www# cat index.html.1 
2
vm15:/var/www# wget http://www.vm15.seminar/
--18:22:27--  http://www.vm15.seminar/
           => `index.html.2'
Resolving www.vm15.seminar... 10.0.0.115
Connecting to www.vm15.seminar|10.0.0.115|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2 [text/html]

100%[====================================>] 2             --.--K/s             

18:22:27 (88.78 KB/s) - `index.html.2' saved [2/2]

vm15:/var/www# cat index.html.2 
1

funguje :)

SSL, IPSec


vm15:~# openssl req -new -nodes -out cert.csr -keyout cert.key
Generating a 1024 bit RSA private key
................++++++
.....++++++
writing new private key to 'cert.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:cz
State or Province Name (full name) [Some-State]:Czech Republic
Locality Name (eg, city) []:Prague
Organization Name (eg, company) [Internet Widgits Pty Ltd]:s0cketky spolecnost
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:www.vm15.seminar
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
vm15:~# ls
cert.csr  cert.key
vm15:~# less cert.key 
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
vm15:~# less cert.csr 
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
vm15:~# openssl rsa -text -in cert.key 
Private-Key: (1024 bit)
modulus:
    00:a8:2a:14:14:6b:5a:1f:7c:3e:a4:0f:ff:5b:3f:
...
publicExponent: 65537 (0x10001)
privateExponent:
    12:55:6c:15:01:d3:34:85:8e:2a:c2:d7:bb:32:04:
...
...
vm15:~# openssl req -text -in cert.csr    
Certificate Request:
  Data:
    Version: 0 (0x0)
      Subject: C=cz, ST=Czech Republic, L=Prague, O=s0cketky spolecnost, CN=www.
      vm15.seminar
        Subject Public Key Info:
          Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
            Modulus (1024 bit):
              00:a8:2a:14:14:6b:5a:1f:7c:3e:a4:0f:ff:5b:3f:
...
vm15:~# openssl x509 -req -in cert.c
sr -signkey cert.key -out cert.crt
Signature ok
subject=/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.semin
ar
Getting Private key
vm15:~# openssl x509 -text -in cert.crt 
Certificate:
  Data:
    Version: 1 (0x0)
    Serial Number:
       95:26:08:dd:dc:db:d2:94
    Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=cz, ST=Czech Republic, L=Prague, O=s0cketky spolecnost, CN=www.vm1
    5.seminar
...

13 a 14 z predchozi kapitoly:

zkusime rozchodit ssl pro web:


vm15:~# vim /etc/apache2/sites-enabled/test-config 
vm15:~# cat /etc/apache2/sites-enabled/test-config 
NameVirtualHost 10.0.0.115:443
Listen 10.0.0.115:443


ServerName www.vm15.seminar
DocumentRoot /var/www/www
SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem

Thu Apr 10 17:17:11 CEST 2008

HTTPS, slide 13 a 14 (net6.pdf):


vm15:~# cat /etc/apache2/sites-enabled/test-config 
NameVirtualHost 10.0.0.115:443
Listen 10.0.0.115:443


ServerName www.vm15.seminar
DocumentRoot /var/www/www
SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem

vm15:~# mkdir /etc/apache2/ssl
vm15:~# cat cert.crt cert.key > /etc/apache2/ssl/apache.pem
vm15:~# a2enmod ssl
Module ssl installed; run /etc/init.d/apache2 force-reload to enable.
vm15:~# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)...apache2: apr_sockaddr_info_get() failed
 for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
 waiting apache2: apr_sockaddr_info_get() failed for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
.
vm15:~# openssl s_client -connect 10.0.0.115:443 | less
CONNECTED(00000003)
---
Certificate chain
 0 s:/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.seminar
   i:/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.seminar
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.semin
ar
issuer=/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.semina
r
---
No client certificate CA names sent
---
SSL handshake has read 1167 bytes and written 316 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: 7F7A32BABB154BD32C22AFA9A1BD03B66E5E9F2CF495041DF6C87E6E99B623DC
    Session-ID-ctx: 
    Master-Key: D2C36EEA73722EF77650E1E39BBD7E0B3199C5324BBFE32754D443016D5584CE
0DAAB545CE93E4A48EE4C3C5829E85DF
    Key-Arg   : None
    Start Time: 1207841259
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)
---
vm15:~# openssl s_client -connect is.mff.cuni.cz:443 | less
CONNECTED(00000003)
---
Certificate chain
 0 s:/C=CZ/O=Charles University in Prague/CN=is.mff.cuni.cz
   i:/C=BE/O=Cybertrust/OU=Educational CA/CN=Cybertrust Educational CA
 1 s:/C=CZ/ST=Czech Republic/L=Prague/O=Charles University in Prague/OU=PSiK MFF
 UK/CN=is.mff.cuni.cz/emailAddress=www@mff.cuni.cz
   i:/C=CZ/ST=Czech Republic/L=Prague/O=Charles University in Prague/OU=PSiK MFF
 UK/CN=is.mff.cuni.cz/emailAddress=www@mff.cuni.cz
 2 s:/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust
 Global Root
   i:/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust
 Global Root
 3 s:/C=BE/O=Cybertrust/OU=Educational CA/CN=Cybertrust Educational CA
   i:/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust
 Global Root
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIEaDCCA1CgAwIBAgILAQAAAAABDs4u6+kwDQYJKoZIhvcNAQEFBQAwXzELMAkG
A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv
bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA2
MTEwOTE5MjU1MVoXDTA5MTEwOTE5MjU1MVowTTELMAkGA1UEBhMCQ1oxJTAjBgNV
BAoTHENoYXJsZXMgVW5pdmVyc2l0eSBpbiBQcmFndWUxFzAVBgNVBAMTDmlzLm1m
Zi5jdW5pLmN6MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSjseWbu/ToGaU
vJKUQfgvfAwbwmuH1teTdLjKGmSCN+GNmOXQw78towcE6M1xIL4Dhwim/2BSU39r
5brKcV7df2M0dkpud+lMgANcrxjomRk46WZrup9BEXv1IGH7BI0Bzjnw3XAx2Tmi
4Om2Q7GDUZDxdVK5fKLFaohauygjVwIDAQABo4IBuTCCAbUwUAYDVR0gBEkwRzBF
BgcqhkixPgEAMDowOAYIKwYBBQUHAgEWLGh0dHA6Ly93d3cuZ2xvYmFsc2lnbi5u
ZXQvcmVwb3NpdG9yeS9jcHMuY2ZtMA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAW
gBRlZaM91zsRowoHJTfJQkpbdndQ4TAdBgNVHQ4EFgQU4M2Y1zG24OrMIa2kH0D6
kPXtbV0wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nbG9iYWxzaWduLm5l
dC9lZHVjYXRpb25hbC5jcmwwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUFBzAChjNo
dHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24ubmV0L2NhY2VydC9lZHVjYXRpb25hbC5j
cnQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdEQReMFyCDmlz
Lm1mZi5jdW5pLmN6gg93d3cubWZmLmN1bmkuY3qCE3BoeXNpY3MubWZmLmN1bmku
Y3qCEHBzaWsubWZmLmN1bmkuY3qCEnNlYXJjaC5tZmYuY3VuaS5jejANBgkqhkiG
9w0BAQUFAAOCAQEAL4g48bLS/yrmmKMqvJUeRSJr9WmMFtTohGfStKtTaXvUc1Q7
szG6fHEpP8IxFnT4+qwDnaQm/c7Ln5BgMALAgsNxGbuFt3GUgG0r0oMZ02de3k+i
3tXoVCO5nWh5zBMBSIB9mIfChkIPCQVor6DBVA7AxZGfViK+omahlqxKtGM6mOvp
7IflU4MiUyXB8gXkAYHIPuEAWUpvysNZUGu3WlQYmXb1e0i0iOONwOwKgUnNeeLD
C684rnHNPECpYuBPbbx/BhkkppI2+0xP/4s5zGMSz187PYq/tMj8z/GY+ICIQA8/
bqHVprZW7GAZEN/U+LCkzDRXmyr5j4heJAdN6Q==
-----END CERTIFICATE-----
subject=/C=CZ/O=Charles University in Prague/CN=is.mff.cuni.cz
issuer=/C=BE/O=Cybertrust/OU=Educational CA/CN=Cybertrust Educational CA
---
No client certificate CA names sent
---
SSL handshake has read 4253 bytes and written 316 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: 4B4E3C820E1D28032B1B490BE02538B145D13ADD31FD40AA9D34DAEFA20EC93E
    Session-ID-ctx: 
    Master-Key: B0B5F38EED2B7CBBB4F47C3751CB76BF5412DDE565580A88F78ECF3C29F58492
FEABAF3E640E0C5014147D13B9D933C2
    Key-Arg   : None
    Start Time: 1207841631
    Timeout   : 300 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---

14:


vm15:~# tcpdump >/tmp/dump 2>&1 &
[1] 9643
vm15:~# device eth0 entered promiscuous mode
audit(1207841888.039:2): dev=eth0 prom=256 old_prom=0 auid=4294967295

vm15:~# openssl s_client -connect is.mff.cuni.cz:443
...
vm15:~# fg
tcpdump >/tmp/dump 2>&1
device eth0 left promiscuous mode
audit(1207841932.189:3): dev=eth0 prom=0 old_prom=256 auid=4294967295
vm15:~# less /tmp/dump

aha, on tam neni videt ten obsah tech paketu, to by se musel podrobneji udelat,
tak nic :)

10 (net7.pdf):


vm15:~# cd /usr/lib/ssl/
vm15:/usr/lib/ssl# misc/CA.sh -newca
CA certificate filename (or enter to create)

Making CA certificate ...
Generating a 1024 bit RSA private key
.................++++++
...++++++
writing new private key to './demoCA/private/./cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:czech republic
Locality Name (eg, city) []:prague
Organization Name (eg, company) [Internet Widgits Pty Ltd]:s0cketky company
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:s0cketka
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from /usr/lib/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/./cakey.pem:
9682:error:28069065:lib(40):UI_set_result:result too small:ui_lib.c:849:You must
 type in 4 to 8191 characters
Enter pass phrase for ./demoCA/private/./cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 0 (0x0)
        Validity
            Not Before: Apr 10 15:53:11 2008 GMT
            Not After : Apr 10 15:53:11 2011 GMT
        Subject:
            countryName               = cz
            stateOrProvinceName       = czech republic
            organizationName          = s0cketky company
            commonName                = s0cketka
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                9F:95:26:55:AE:43:FB:71:F3:3D:D2:CE:D8:A4:25:38:F7:E3:00:FA
            X509v3 Authority Key Identifier: 
               keyid:9F:95:26:55:AE:43:FB:71:F3:3D:D2:CE:D8:A4:25:38:F7:E3:00:FA

Certificate is to be certified until Apr 10 15:53:11 2011 GMT (1095 days)

Write out database with 1 new entries
Data Base Updated

vm15:/usr/lib/ssl# cp /root/cert.csr newreq.pem
vm15:/usr/lib/ssl# misc/CA.sh -sign
Using configuration from /usr/lib/ssl/openssl.cnf
Enter pass phrase for ./demoCA/private/cakey.pem:
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number: 1 (0x1)
        Validity
            Not Before: Apr 10 15:57:56 2008 GMT
            Not After : Apr 10 15:57:56 2009 GMT
        Subject:
            countryName               = cz
            stateOrProvinceName       = Czech Republic
            localityName              = Prague
            organizationName          = s0cketky spolecnost
            commonName                = www.vm15.seminar
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                55:CF:C1:A5:00:5D:7A:06:1F:F5:20:05:BA:73:52:1D:C2:D2:F2:99
            X509v3 Authority Key Identifier: 
               keyid:9F:95:26:55:AE:43:FB:71:F3:3D:D2:CE:D8:A4:25:38:F7:E3:00:FA

Certificate is to be certified until Apr 10 15:57:56 2009 GMT (365 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=cz, ST=czech republic, O=s0cketky company, CN=s0cketka
        Validity
            Not Before: Apr 10 15:57:56 2008 GMT
            Not After : Apr 10 15:57:56 2009 GMT
        Subject: C=cz, ST=Czech Republic, L=Prague, O=s0cketky spolecnost, CN=ww
        w.vm15.seminar
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:a8:2a:14:14:6b:5a:1f:7c:3e:a4:0f:ff:5b:3f:
                    82:3f:7c:01:7d:ae:a5:93:71:1a:8e:73:d9:b6:c7:
                    76:25:09:04:50:3e:43:1c:9c:fc:00:19:4e:ab:76:
                    2f:5a:71:8a:23:60:c6:ab:c3:a3:b4:2d:3f:e7:76:
                    c1:68:ec:3c:d6:33:1d:ca:bf:31:00:e7:54:ad:21:
                    57:be:3e:ec:d3:bc:cd:c8:36:e3:80:1f:c5:a6:b2:
                    3c:84:10:15:6b:fd:b2:e9:92:90:b0:1b:25:fc:90:
                    09:e0:81:7d:31:6f:95:f5:27:51:20:c1:21:9a:4f:
                    cf:13:1d:d6:88:55:d8:76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                55:CF:C1:A5:00:5D:7A:06:1F:F5:20:05:BA:73:52:1D:C2:D2:F2:99
            X509v3 Authority Key Identifier: 
               keyid:9F:95:26:55:AE:43:FB:71:F3:3D:D2:CE:D8:A4:25:38:F7:E3:00:FA

    Signature Algorithm: sha1WithRSAEncryption
        a8:c5:85:53:37:86:6d:38:93:16:45:53:c7:d6:ab:e8:be:87:
        95:34:cc:6f:e6:a7:73:30:af:50:3b:bd:0b:3b:b2:99:ef:80:
        3b:f9:c5:bb:4b:1d:c1:12:83:f1:38:4f:67:b3:75:6e:ef:4b:
        3a:d2:d6:73:ea:15:22:08:56:14:3d:ee:73:e4:19:d3:d5:ba:
        5c:3e:9a:04:bb:0a:7e:c4:af:c3:71:ae:48:1d:a2:96:9f:5b:
        51:07:7a:1e:9f:aa:4f:0b:9a:8e:21:f8:87:0e:57:93:30:af:
        b3:99:da:6e:21:b0:05:02:f4:dc:d0:24:e4:06:8e:cf:12:64:
        8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Signed certificate is in newcert.pem
vm15:/usr/lib/ssl# less newcert.pem 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=cz, ST=czech republic, O=s0cketky company, CN=s0cketka
        Validity
            Not Before: Apr 10 15:57:56 2008 GMT
            Not After : Apr 10 15:57:56 2009 GMT
        Subject: C=cz, ST=Czech Republic, L=Prague, O=s0cketky spolecnost, CN=ww
w.vm15.seminar
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:a8:2a:14:14:6b:5a:1f:7c:3e:a4:0f:ff:5b:3f:
                    82:3f:7c:01:7d:ae:a5:93:71:1a:8e:73:d9:b6:c7:
                    76:25:09:04:50:3e:43:1c:9c:fc:00:19:4e:ab:76:
                    2f:5a:71:8a:23:60:c6:ab:c3:a3:b4:2d:3f:e7:76:
                    c1:68:ec:3c:d6:33:1d:ca:bf:31:00:e7:54:ad:21:
                    57:be:3e:ec:d3:bc:cd:c8:36:e3:80:1f:c5:a6:b2:
                    3c:84:10:15:6b:fd:b2:e9:92:90:b0:1b:25:fc:90:
                    09:e0:81:7d:31:6f:95:f5:27:51:20:c1:21:9a:4f:
                    cf:13:1d:d6:88:55:d8:76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                55:CF:C1:A5:00:5D:7A:06:1F:F5:20:05:BA:73:52:1D:C2:D2:F2:99
            X509v3 Authority Key Identifier: 
                keyid:9F:95:26:55:AE:43:FB:71:F3:3D:D2:CE:D8:A4:25:38:F7:E3:00:F
A

    Signature Algorithm: sha1WithRSAEncryption
        a8:c5:85:53:37:86:6d:38:93:16:45:53:c7:d6:ab:e8:be:87:
        95:34:cc:6f:e6:a7:73:30:af:50:3b:bd:0b:3b:b2:99:ef:80:
        3b:f9:c5:bb:4b:1d:c1:12:83:f1:38:4f:67:b3:75:6e:ef:4b:
        3a:d2:d6:73:ea:15:22:08:56:14:3d:ee:73:e4:19:d3:d5:ba:
        5c:3e:9a:04:bb:0a:7e:c4:af:c3:71:ae:48:1d:a2:96:9f:5b:
        51:07:7a:1e:9f:aa:4f:0b:9a:8e:21:f8:87:0e:57:93:30:af:
        b3:99:da:6e:21:b0:05:02:f4:dc:d0:24:e4:06:8e:cf:12:64:
        8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

ted strcime podepsany certifikat k apachovi


vm15:/usr/lib/ssl# cat /root/cert.key newcert.pem > /etc/apache2/ssl/apache.pem  
vm15:/usr/lib/ssl# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)...apache2: apr_sockaddr_info_get() failed for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
httpd (no pid file) not running
apache2: apr_sockaddr_info_get() failed for vm15
apache2: Could not reliably determine the server's fully qualified domain name, 
using 127.0.0.1 for ServerName
.
vm15:/usr/lib/ssl# openssl s_client -connect 10.0.0.115:443
CONNECTED(00000003)
---
Certificate chain
 0 s:/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.seminar
   i:/C=cz/ST=czech republic/O=s0cketky company/CN=s0cketka
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=cz/ST=Czech Republic/L=Prague/O=s0cketky spolecnost/CN=www.vm15.semin
ar
issuer=/C=cz/ST=czech republic/O=s0cketky company/CN=s0cketka
---
No client certificate CA names sent
---
SSL handshake has read 1261 bytes and written 316 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: 1834BFC9ABD548D163449C31FD640E63BA12AD452DF5C400C16E51FC599C0371
    Session-ID-ctx: 
    Master-Key: 2A328C42BD7D5F99A780547D32F5390C979FFD044EA86072A5637D550AA07B8B
35DD14B3F6B7FB715B26CBB11473B17F
    Key-Arg   : None
    Start Time: 1207843694
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---

jenze my nejsme duveryhodna certifikacni autorita, takze nam to stejne moc
nepomuze :)

14,15 (net7.pdf):


vm15:~# setkey -DP
No SPD entries.
vm15:~# ping 10.0.0.100
... ok
vm15:~# vim /etc/ipsec-tools.conf 
vm15:~# cat /etc/ipsec-tools.conf 
#!/usr/sbin/setkey -f

## Flush the SAD and SPD
#
flush;
spdflush;

add 10.0.0.100 10.0.0.115 esp 0x115 -E 3des-cbc "100000000000000000000001"  -A h
mac-md5 "1000000000000001";
add 10.0.0.115 10.0.0.100 esp 0x215 -E 3des-cbc "100000000000000000000001"  -A h
mac-md5 "1000000000000001";
spdadd 10.0.0.100 10.0.0.115 any -P in  ipsec esp/transport//require;
spdadd 10.0.0.115 10.0.0.100 any -P out ipsec esp/transport//require;
vm15:~# /etc/ipsec-tools.conf 
vm15:~# setkey -DP
10.0.0.100[any] 10.0.0.115[any] any
 in ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused:                     
 lifetime: 0(s) validtime: 0(s)
 spid=8 seq=2 pid=9897
 refcnt=1
10.0.0.115[any] 10.0.0.100[any] any
 out ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused: Apr 10 18:29:58 2008
 lifetime: 0(s) validtime: 0(s)
 spid=17 seq=1 pid=9897
 refcnt=2
10.0.0.100[any] 10.0.0.115[any] any
 fwd ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused:                     
 lifetime: 0(s) validtime: 0(s)
 spid=10 seq=0 pid=9897
 refcnt=1
vm15:~# ping 10.0.0.100
PING 10.0.0.100 (10.0.0.100) 56(84) bytes of data.
64 bytes from 10.0.0.100: icmp_seq=1 ttl=64 time=1.36 ms
64 bytes from 10.0.0.100: icmp_seq=2 ttl=64 time=0.696 ms

--- 10.0.0.100 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 999ms
rtt min/avg/max/mdev = 0.696/1.030/1.364/0.334 ms
vm15:~# setkey -DP
10.0.0.100[any] 10.0.0.115[any] any
 in ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused: Apr 10 18:31:04 2008
 lifetime: 0(s) validtime: 0(s)
 spid=8 seq=2 pid=9899
 refcnt=3
10.0.0.115[any] 10.0.0.100[any] any
 out ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused: Apr 10 18:31:03 2008
 lifetime: 0(s) validtime: 0(s)
 spid=17 seq=1 pid=9899
 refcnt=3
10.0.0.100[any] 10.0.0.115[any] any
 fwd ipsec
 esp/transport//require
 created: Apr 10 18:29:25 2008  lastused:                     
 lifetime: 0(s) validtime: 0(s)
 spid=10 seq=0 pid=9899
 refcnt=1

po tom pingu vidime last used, ze se zmenilo a na projektoru nam bezi tcpdump
z toho serveru :) je tam videt napr. to ESP, ze se tam pouziva...

Thu Apr 17 17:23:13 CEST 2008

slidy: net8.pdf

8:


vm15:~#lftp ftp://10.0.0.100
lftp 10.0.0.100:~> ls
drwxr-xr-x    2 0        0            4096 Apr 17 15:11 pub
lftp 10.0.0.100:/> cd pub
lftp 10.0.0.100:/pub> ls
-rw-r--r--    1 0        0            1429 Apr 17 15:03 jama.txt
lftp 10.0.0.100:/pub> get jama.txt 
1429 bytes transferred
lftp 10.0.0.100:/pub> quit

na prvni konzoli:


u2-6:~$ nc ftp.linux.cz 21
220 ProFTPD 1.3.0a Server (Faculty of Informatics) [::ffff:147.251.48.205]
USER anonymous
331 Anonymous login ok, send your complete email address as your password.
PASS email@server.cz
230-Hello, UNKNOWN at u2-6.ms.mff.cuni.cz!
 
    Vitejte na FTP serveru           Welcome to the FTP server of
     Fakulty informatiky                Faculty of Informatics
 Masarykovy univerzity v Brne          Masaryk University, Brno
 
 This FTP site is in Brno, Czech Republic, Europe.  The local time is
 Thu Apr 17 17:51:19 2008. You are user number 130 out of maximium 800
 in class default. There are 130 users in all classes (the maximum is 800). All
 transfers to and from archive are logged. If you do not like this policy,
 disconnect now!
 
 We serve as the ftp.fi.muni.cz, ftp.linux.cz, and ftp.cstug.cz archive,
 and we have lot of Linux-, UNIX-, and TeX-related stuff here. Look
 at the /pub/ROADMAP (or /pub/ROADMAP.html) for details. The file
 /pub/README.uploads states the rules for uploading data to this server.
 The server is avaliable via rsync and HTTP protocols. Use the following URLs:
 rsync://ftp.fi.muni.cz/pub and http://ftp.fi.muni.cz/pub/.
 The server is available via FTP over IPv6 at ftp://ftp6.linux.cz/ as well.
 Look at http://www.linux.cz/stats/ for the hardware configuration and
 statistics of this server.
 
 -System Administrator 
230 Anonymous access granted, restrictions apply.
PASV
227 Entering Passive Mode (147,251,48,205,167,93).

na druhe konzoli napiseme:


u2-6:~$ nc 147.251.48.205 42845

na prvni doplnime:


LIST

a vidime:


150 Opening ASCII mode data connection for file list
226 Transfer complete.

a na druhe se objevi


u2-6:~$ nc 147.251.48.205 42845
drwxr-xr-x   3 ftpadm   ftpadm         56 Feb 12  2007 etc
drwxr-xr-x   4 ftpadm   ftpadm       4096 May 30  2007 http
drwxr-xr-x   2 ftpadm   ftpadm          0 Apr 17 15:52 mount
drwxr-xr-x  23 ftpadm   ftpadm       8192 Apr 17 05:59 pub


vm15:~# lftp --debug ftp.linux.cz
lftp ftp.linux.cz:~> ls
---- Connecting to ftp.linux.cz (147.251.48.205) port 21
<--- 220 ProFTPD 1.3.0a Server (Faculty of Informatics) [::ffff:147.251.48.205]
---> FEAT
<--- 211-Features:
<---  MDTM
<---  REST STREAM
<---  SIZE
<--- 211 End
---> USER anonymous
<--- 331 Anonymous login ok, send your complete email address as your password.
---> PASS lftp@
<--- 230-Hello, UNKNOWN at bug.ms.mff.cuni.cz!
<---  
<---     Vitejte na FTP serveru           Welcome to the FTP server of
<---      Fakulty informatiky                Faculty of Informatics
<---  Masarykovy univerzity v Brne          Masaryk University, Brno
<---  
<---  This FTP site is in Brno, Czech Republic, Europe.  The local time is
<---  Thu Apr 17 18:03:19 2008. You are user number 124 out of maximium 800
<---  in class default. There are 124 users in all classes (the maximum is 800). All
<---  transfers to and from archive are logged. If you do not like this policy,
<---  disconnect now!
<---  
<---  We serve as the ftp.fi.muni.cz, ftp.linux.cz, and ftp.cstug.cz archive,
<---  and we have lot of Linux-, UNIX-, and TeX-related stuff here. Look
<---  at the /pub/ROADMAP (or /pub/ROADMAP.html) for details. The file
<---  /pub/README.uploads states the rules for uploading data to this server.
<---  The server is avaliable via rsync and HTTP protocols. Use the following URLs:
<---  rsync://ftp.fi.muni.cz/pub and http://ftp.fi.muni.cz/pub/.
<---  The server is available via FTP over IPv6 at ftp://ftp6.linux.cz/ as well.
<---  Look at http://www.linux.cz/stats/ for the hardware configuration and
<---  statistics of this server.
<---  
<---  -System Administrator 
<--- 230 Anonymous access granted, restrictions apply.
---> PWD
<--- 257 "/" is current directory.
---> PASV
<--- 227 Entering Passive Mode (147,251,48,205,163,118).
---- Connecting data socket to (147.251.48.205) port 41846
---- Data connection established
---> LIST
<--- 150 Opening ASCII mode data connection for file list
---- Got EOF on data connection
---- Closing data socket
<--- 226 Transfer complete.
drwxr-xr-x   3 ftpadm   ftpadm         56 Feb 12  2007 etc
drwxr-xr-x   4 ftpadm   ftpadm       4096 May 30  2007 http
drwxr-xr-x   3 ftpadm   ftpadm          0 Apr 17 16:03 mount
drwxr-xr-x  23 ftpadm   ftpadm       8192 Apr 17 05:59 pub
lftp ftp.linux.cz:/> quit
---> QUIT
---- Closing control socket


vm15:~# lftp --debug 10.0.0.100
lftp 10.0.0.100:~> set ftp:ssl-allow-anonymous yes
lftp 10.0.0.100:~> ls
---- Connecting to 10.0.0.100 (10.0.0.100) port 21
<--- 220 (vsFTPd 2.0.5)
---> FEAT
<--- 211-Features:
<---  AUTH SSL
<---  AUTH TLS                   
<---  EPRT
<---  EPSV
<---  MDTM
<---  PASV
<---  PBSZ
<---  PROT
<---  REST STREAM
<---  SIZE
<---  TVFS
<--- 211 End
---> AUTH TLS
<--- 234 Proceed with negotiation.
---> USER anonymous
Certificate: C=--,ST=SomeState,L=SomeCity,O=SomeOrganization,OU=SomeOrganizatio
nalUnit,CN=localhost.localdomain,EMAIL=root@localhost.localdomain
 Issued by: C=--,ST=SomeState,L=SomeCity,O=SomeOrganization,OU=SomeOrganization
 alUnit,CN=localhost.localdomain,EMAIL=root@localhost.localdomain
WARNING: Certificate verification: Not trusted
WARNING: Certificate verification: The certificate's owner does not match hostn
ame '10.0.0.100'

<--- 331 Please specify the password.
---> PASS lftp@
<--- 230 Login successful.
---> PWD
<--- 257 "/"
---> PBSZ 0
<--- 200 PBSZ set to 0.
---> PROT P
<--- 200 PROT now Private.
---> PASV
<--- 227 Entering Passive Mode (10,0,0,100,31,108)
---- Connecting data socket to (10.0.0.100) port 8044
---- Data connection established
---> LIST
<--- 150 Here comes the directory listing.
Certificate: C=--,ST=SomeState,L=SomeCity,O=SomeOrganization,OU=SomeOrganizatio
nalUnit,CN=localhost.localdomain,EMAIL=root@localhost.localdomain
 Issued by: C=--,ST=SomeState,L=SomeCity,O=SomeOrganization,OU=SomeOrganization
 alUnit,CN=localhost.localdomain,EMAIL=root@localhost.localdomain
WARNING: Certificate verification: Not trusted
WARNING: Certificate verification: The certificate's owner does not match hostn
ame '10.0.0.100'

gnutls_record_recv: A TLS packet with unexpected length was received.; assuming
EOF
---- Got EOF on data connection
---- Closing data socket
drwxr-xr-x    2 0        0            4096 Apr 17 15:11 pub
<--- 226 Directory send OK.
lftp 10.0.0.100:/> quit
---> QUIT
---- Closing control socket

11:


vm15:~# tftp 10.0.0.100
tftp> trace
Packet tracing on.
tftp> get recept
sent RRQ 
received DATA 
sent ACK 
received DATA 
sent ACK 
received DATA 
Received 1491 bytes in 0.0 seconds
tftp> vm15:~#

14:

vygenerujeme si klic a nakopirujem si ho do homu. pak kdyz se tam hlasime
a mame ve svym homu na lokalni masince ten odpovidajici klic, tak nas tam
pusti bez hesla :)


vm15:~# useradd s0c --password heslo --home-dir /home/s0c
vm15:~# dpkg -l |grep ssh
ii  openssh-client      4.3p2-9    Secure shell client, an rlogin/rsh/rcp repla
vm15:~# apt-get install openssh-server
Reading package lists... Done
Building dependency tree... Done
Suggested packages:
  ssh-askpass xbase-clients rssh molly-guard
The following NEW packages will be installed:
  openssh-server
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 222kB of archives.
After unpacking 569kB of additional disk space will be used.
Get:1 http://ftp.sh.cvut.cz etch/main openssh-server 1:4.3p2-9 [222kB]
Fetched 222kB in 0s (701kB/s)   
Preconfiguring packages ...
Selecting previously deselected package openssh-server.
(Reading database ... 14457 files and directories currently installed.)
Unpacking openssh-server (from .../openssh-server_1%3a4.3p2-9_i386.deb) ...
Setting up openssh-server (4.3p2-9) ...
Creating SSH2 RSA key; this may take some time ...
Creating SSH2 DSA key; this may take some time ...
Restarting OpenBSD Secure Shell server: sshd.

vm15:~# ssh s0c@localhost
The authenticity of host 'localhost (127.0.0.1)' can't be established.
RSA key fingerprint is b3:47:b8:0b:61:7e:3c:f9:99:3c:47:0e:36:48:2e:d7.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (RSA) to the list of known hosts.
s0c@localhost's password: 
Linux vm15 2.6.18-4-xen-vserver-686 #1 SMP Thu May 10 04:02:17 UTC 2007 i686

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
s0c@vm15:~$ ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/home/s0c/.ssh/id_rsa): 
Created directory '/home/s0c/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/s0c/.ssh/id_rsa.
Your public key has been saved in /home/s0c/.ssh/id_rsa.pub.
The key fingerprint is:
85:1e:4f:3f:6d:cd:9c:90:ae:85:fc:59:b5:4a:91:eb s0c@vm15
s0c@vm15:~$ cd .ssh/
s0c@vm15:~/.ssh$ ls
id_rsa id_rsa.pub
s0c@vm15:~/.ssh$ cat ./id_rsa.pub >> authorized_keys
s0c@vm15:~$ logout
Connection to localhost closed.
vm15:~# su s0c
vm15:/root$ ssh s0c@localhost
The authenticity of host 'localhost (127.0.0.1)' can't be established.
RSA key fingerprint is b3:47:b8:0b:61:7e:3c:f9:99:3c:47:0e:36:48:2e:d7.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (RSA) to the list of known hosts.
Linux vm15 2.6.18-4-xen-vserver-686 #1 SMP Thu May 10 04:02:17 UTC 2007 i686

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Apr 17 18:36:13 2008 from localhost
s0c@vm15:~$ logout
Connection to localhost closed.

uzivateli povolime pouze jediny prikaz, co muze provest a co se provede vzdy,
kdyz se prihlasi


vm15:~# vim /home/s0c/.ssh/authorized_keys 
vm15:~# cat /home/s0c/.ssh/authorized_keys 
command="echo 'hello' >> /tmp/hello" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzXT18FyeAaQE9gXVwE6acv2wMgTF2N2gNAKNuT9BJ94O5DVh57wQTdCkH
eUG4GonQsJqUhiKbWBBFU4+znto5yXiBFsF1JYh8iEGErgClkTLycE8TLEPI4tbsjlD/n3CYHjPlbmOBRxit+W
ytUtxzDA3/V6iauxRi8ohIF7zisoJaSHvPNNhj853BtjeiZH/4Af7wGoOUrhDKVd5XI2WPcoCF7SyvbOUX8LCR
Kn5+GoPhJ3pXfs7G3iBoQBYCU4a25fU8rlkjRSirwA50Vuvb73IT4F+bYeSwPJ9s6+9zryQsT+e3a6AElFoPtk
m+vtvq66iXKRBDLD6xWf0YyyU+w== s0c@vm15
vm15:~# su s0c
vm15:/root$ ssh s0c@localhost
Connection to localhost closed.
vm15:/root$ cat /tmp/hello 
hello

Thu Apr 24 17:25:08 CEST 2008

net8.pdf, slide 15:

na virtualnim stroji:


vm15:/root$ ssh -R 2222:localhost:22 tomim4am@u-pl22.ms.mff.cuni.cz
tomim4am@u-pl22.ms.mff.cuni.cz's password: 
Last login: Thu Apr 24 17:42:07 2008 from bug.ms.mff.cuni.cz
NEWS: snadne_upozorneni_na_news bash_completion lprcs_xppcs symlinky_home 
NEWS: quota_freee.sh diskove_kvoty vypalovani vymenna_media ulimit 
NEWS: kvoty_na_odchozi_data 
u-pl22:~$

pak se terba lokalne prihlasim na u-pl22:


u2-7:~$ ssh tomim4am@u-pl22.ms.mff.cuni.cz
The authenticity of host 'u-pl22.ms.mff.cuni.cz (195.113.21.152)' can't be esta
blished.
RSA1 key fingerprint is 58:07:72:15:c4:84:e0:d5:7a:b4:70:6b:9b:1a:f2:c3.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'u-pl22.ms.mff.cuni.cz,195.113.21.152' (RSA1) to the
list of known hosts.
tomim4am@u-pl22.ms.mff.cuni.cz's password: 
Last login: Thu Apr 24 17:38:53 2008 from bug.ms.mff.cuni.cz
NEWS: snadne_upozorneni_na_news bash_completion lprcs_xppcs symlinky_home 
NEWS: quota_freee.sh diskove_kvoty vypalovani vymenna_media ulimit 
NEWS: kvoty_na_odchozi_data 
u-pl22:~$ ssh -p 2222 s0c@localhost
s0c@localhost's password: 
Linux vm15 2.6.18-4-xen-vserver-686 #1 SMP Thu May 10 04:02:17 UTC 2007 i686

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Apr 17 18:52:09 2008 from localhost
s0c@vm15:~$ ls
/home/s0c

slide 16:

vyzkousime kopirovani pomoci scp:


vm15:/root$ scp tomim4am@u-pl22.ms.mff.cuni.cz:/afs/ms/u/t/tomim4am/test_file /tmp/
tomim4am@u-pl22.ms.mff.cuni.cz's password: 
test_file                                     100%    0     0.0KB/s   00:00    
vm15:/root$ ls -l /tmp/test_file 
-rw-r--r-- 1 s0c s0c 0 Apr 24 17:55 /tmp/test_file

Posta

net9.pdf, slide 7:

posleme si zpravu rucne :) (na dole uvedeny mail mi nepiste, je spatne, kvuli
spamu .)


vm15:/root$ nc smtp2.ms.mff.cuni.cz 25
220 smtp2.ms.mff.cuni.cz ESMTP Sendmail 8.14.2/8.14.2; Thu, 24 Apr 2008 18:15:
50 +0200 (CEST)
HELO s0cketka
250 smtp2.ms.mff.cuni.cz Hello bug.ms.mff.cuni.cz [195.113.18.123], pleased to
meet you
MAIL FROM: 
250 2.1.0 ... Sender ok
RCPT TO: 
250 2.1.5 ... Recipient ok
DATA
354 Enter mail, end with "." on a line by itself
helo :)
.
250 2.0.0 m3OGFo8S064098 Message accepted for delivery
QUIT
221 2.0.0 smtp2.ms.mff.cuni.cz closing connection

falesne udaje:


vm15:/root$ nc smtp2.ms.mff.cuni.cz 25
220 smtp2.ms.mff.cuni.cz ESMTP Sendmail 8.14.2/8.14.2; Thu, 24 Apr 2008 18:15:
15 +0200 (CEST)
HELO s0cketka
250 smtp2.ms.mff.cuni.cz Hello bug.ms.mff.cuni.cz [195.113.18.123], pleased to
meet you
MAIL FROM: 
550 5.7.1 ... MX 10 'pecka.reflektor.cz.' [81.0.208.98] for
 rejected address saying ": Recipient address
rejected: User unknown in virtual mailbox table"

podivejme se na zaznamy seznamu, kam se pripojit, kdyz bychom chteli poslat
postu:


vm15:/root$ dig seznam.cz MX

; <<>> DiG 9.3.4 <<>> seznam.cz MX
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16359
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;seznam.cz.   IN MX

;; ANSWER SECTION:
seznam.cz.  298 IN MX 60 mx60.seznam.cz.
seznam.cz.  298 IN MX 50 mx50.seznam.cz.

;; AUTHORITY SECTION:
seznam.cz.  17998 IN NS ms.seznam.cz.
seznam.cz.  17998 IN NS ns.seznam.cz.

;; ADDITIONAL SECTION:
mx50.seznam.cz.  298 IN A 77.75.73.47
mx60.seznam.cz.  298 IN A 77.75.73.48

;; Query time: 2 msec
;; SERVER: 10.0.0.100#53(10.0.0.100)
;; WHEN: Thu Apr 24 18:32:37 2008
;; MSG SIZE  rcvd: 135

nakonfigurujeme si mailovy server :)

zkontroluju, jestli mam nastavene dns:


vm15:/root$ dig vm15.seminar MX

; <<>> DiG 9.3.4 <<>> vm15.seminar MX
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63482
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 3

;; QUESTION SECTION:
;vm15.seminar.   IN MX

;; ANSWER SECTION:
vm15.seminar.  259200 IN MX 20 mail.vm15.seminar.

;; AUTHORITY SECTION:
vm15.seminar.  259200 IN NS ns.vm15.seminar.

;; ADDITIONAL SECTION:
mail.vm15.seminar. 259200 IN A 10.0.0.115
ns.vm15.seminar. 259200 IN A 10.0.0.115
ns.vm15.seminar. 259200 IN AAAA 2001:5c0:94c1:1::15

;; Query time: 7 msec
;; SERVER: 10.0.0.100#53(10.0.0.100)
;; WHEN: Thu Apr 24 18:36:47 2008
;; MSG SIZE  rcvd: 128

konfigurace:


vm15:# vim /etc/postfix/main.cf
vm15:~# cat /etc/postfix/main.cf
myhostname = mail.vm15.seminar
mydomain = vm15.seminar
myorigin = vm15.seminar
vm15:~# /etc/init.d/postfix start
Starting Postfix Mail Transport Agent: postfix.
vm15:~# mail -s test root@vm15.seminar
Cc:   
helo
.

vm15:~# mail
No mail for root
vm15:~# ls /var/spool/mail/
vm15:~# 
vm15:~# mailq
Mail queue is empty
vm15:~# sendmail -q
vm15:~# 
vm15:~# nslookup mail.vm15.seminar
Server:  10.0.0.100
Address: 10.0.0.100#53

Non-authoritative answer:
Name: mail.vm15.seminar
Address: 10.0.0.115

Proc to neprislo?


vm15:~# tail -f /var/log/mail.log
Apr 24 18:47:50 vm15 postfix/pickup[8174]: 5B590168C0: uid=0 from=
Apr 24 18:47:50 vm15 postfix/cleanup[8179]: 5B590168C0: message-id=<20080424164
750.5B590168C0@mail.vm15.seminar>
Apr 24 18:47:50 vm15 postfix/qmgr[8175]: 5B590168C0: from=, 
size=334, nrcpt=1 (queue active)
Apr 24 18:47:50 vm15 postfix/smtp[8181]: 5B590168C0: to=, re
lay=none, delay=0.14, delays=0.1/0.04/0.01/0, dsn=5.4.6, status=bounced (mail f
or vm15.seminar loops back to myself)
Apr 24 18:47:50 vm15 postfix/cleanup[8179]: 7F932168C3: message-id=<20080424164
750.7F932168C3@mail.vm15.seminar>
Apr 24 18:47:50 vm15 postfix/qmgr[8175]: 7F932168C3: from=<>, size=2062, nrcpt=
1 (queue active)
Apr 24 18:47:50 vm15 postfix/bounce[8182]: 5B590168C0: sender non-delivery noti
fication: 7F932168C3
Apr 24 18:47:50 vm15 postfix/qmgr[8175]: 5B590168C0: removed
Apr 24 18:47:50 vm15 postfix/smtp[8181]: 7F932168C3: to=, re
lay=none, delay=0.03, delays=0.02/0/0/0, dsn=5.4.6, status=bounced (mail for vm
15.seminar loops back to myself)
Apr 24 18:47:50 vm15 postfix/qmgr[8175]: 7F932168C3: removed

On zjistil, ze to ma poslat vlastne sobe. Jenze je malo nastaveny a tak to neumi
poslat. Tak to zahodil, zkusil poslat hlasku o zahozeni, ale tu taky neumi poslat,
takze to proste zahodil :) Teoreticky by to ted melo jit ale poslat ven nekam,
treba na seznam atd.

Thu May 15 17:27:35 CEST 2008

slidy 9, slide 15:

donastavime si prijem posty:


vm15:~# vim /etc/postfix/main.cf 
vm15:~# cat /etc/postfix/main.cf 
myhostname = mail.vm15.seminar
mydomain = vm15.seminar
myorigin = vm15.seminar
mydestination = vm15.seminar
vm15:~# mail root@vm15.seminar
Cc: 
Subject: pokus1
test1
.

ale nic mi neprislo :(


vm15:~# tail /var/log/mail.err
May 15 17:30:13 vm15 postfix/local[2655]: fatal: open database /etc/aliases.db:
No such file or directory

aaahaa


vm15:~# newaliases 
vm15:~# mail root@vm15.seminar
Cc: 
Subject: opkus 2
test2
.
vm15:~# mail
"/var/mail/root": 2 messages 2 new
>N   1 root               Thu May 15 17:32  13/425   pokus1
 N   2 root               Thu May 15 17:32  13/426   opkus 2
& q
Held 2 messages in /var/mail/root

zkusime poslat beznemu uzivateli:


vm15:~# mail s0c@vm15.seminar
Cc: 
Subject: pokus 3
test 3
.
vm15:~# su s0c
vm15:/root$ mail
"/var/mail/s0c": 1 message 1 unread
>U   1 root               Thu May 15 17:36  16/469   pokus 3
& q
Held 1 message in /var/mail/s0c
vm15:/root$ exit

je tam :) a ted jak se dostane uzivatel nejakym beznym zpusobem ke sve poste?

16:
nastavime pop3 server:


vm15:~# vim /etc/dovecot/dovecot.conf 
vm15:~# cat /etc/dovecot/dovecot.conf |grep -v '#' |less
protocols = pop3 imap
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_extra_groups = mail
protocol imap {
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}
auth default {
  mechanisms = plain
  passdb pam {
  }
  userdb passwd {
  }
  user = root
}
dict {
}
plugin {
}
vm15:~# /etc/init.d/dovecot restart
Restarting mail server: dovecotWarning: Fixing permissions of /var/run/dovecot to be
world-readable
Warning: Corrected permissions for login directory /var/run/dovecot/login
.
vm15:~# nc localhost 110
+OK Dovecot ready.
USER s0c
+OK
PASS heslo
+OK Logged in.
LIST
+OK 1 messages:
1 438
.
RETR 1
+OK 438 octets
Return-Path: 
X-Original-To: s0c@vm15.seminar
Delivered-To: s0c@vm15.seminar
Received: by mail.vm15.seminar (Postfix, from userid 0)
 id B60BA168C7; Thu, 15 May 2008 17:36:36 +0200 (CEST)
To: 
Subject: pokus 3
X-Mailer: mail (GNU Mailutils 1.1)
Message-Id: <20080515153636.B60BA168C7@mail.vm15.seminar>
Date: Thu, 15 May 2008 17:36:36 +0200 (CEST)
From: root@vm15.seminar (root)

test 3 
.
QUIT
+OK Logging out.
vm15:~#

Odvazlivci si zkusili i imap, ja to nestihla.

17:


vm15:~# dig seznam.cz ANY |grep TXT
seznam.cz.  284 IN  TXT "wwrr\00977.75.76.3\0091\009http\00980\00930\0096\0093"
seznam.cz.  284 IN  TXT "v=spf1 mx ip4:77.75.72.1/24 ip4:77.75.73.1/24 ip4:
77.75.76.1/24 ip4:77.75.77.1/24 ?all"
seznam.cz.  284 IN  TXT "wwrr\00977.75.72.3\0091\009http\00980\00930\0096\0093"

ten prostredni radek jsou adresy serveru, ktere jsou opravnene posilat maily (viz SPF na slidu)

Na zaver zminka ze serie slidu 10:

7:


vm15:~# snmpwalk -v1 -c public 10.0.0.100
SNMPv2-MIB::sysDescr.0 = STRING: Linux bug.ms.mff.cuni.cz 2.6.18-53.1.13.el5xen #1 SMP Tue Feb 12 14:04:18 EST 2008 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (763702) 2:07:17.02
SNMPv2-MIB::sysContact.0 = STRING: root
SNMPv2-MIB::sysName.0 = STRING: bug.ms.mff.cuni.cz
SNMPv2-MIB::sysLocation.0 = STRING: MS
...
(strasne dlouhy)

a ten druhy ukol ze stejneho slidu:


vm15:~# snmpwalk -v1 -c public eliska.ms.mff.cuni.cz | grep IF-MIB::ifPhy
IF-MIB::ifPhysAddress.1 = STRING: 0:1:e6:3:6f:7a
IF-MIB::ifPhysAddress.2 = STRING:

Bojovka

Bojovka probihala v uvolnene atmosfere, byla imho tak nejak primerene tezka, ale kdyz jsem se treba na 10 nebo i 20 minut zasekla na jednom ukolu, bylo to docela deprimujici. Nastesti, kdyz jste skutecne vyzkouseli vsechno, koukate do toho uz veky a nevite, tak se da prihlasit a mozna vam bude mirne napovezeno :) Limit byl 75 minut, ktery jsme ale nakonec pretahovali, protoze vetsina lidi to do toho casu nestihla. Mirek (vyucujici) byl maximalne vstricny. Tak hodne stesti :)

Zapisky z Metod matematicke statistiky

2008-03-02T17:02:00.004+01:00

Mam v planu prubezne fotit zapisky z prednasek, pristupne jsou zde: photobucket.com
Po posledni prednasce budou navic vsechny fotky zverejneny v jednom pdf souboru.

23.5.08: Zapisky jsou kompletni (90 stranek), pdf nakonec asi delat nebudu, pokud o to vylozene nema nekdo zajem - kdyz tak napiste do komentare.

Presun webu do blogu / Moving the web to the blog

2008-02-29T08:03:00.004+01:00

Cas ukazuje, ze na spravu webu i blogu zaroven nemam cas a tak jsem se rozhodla, ze web presunu do blogu. Doufam, ze se mi to povede bezeztratove a vsechno, co jste dosud mohli najit na mem webu, bude pristupne zde :)

By the time I can see that I am not capable to keep my homepage and also my blog. So I'm going to move all my data into this blog. I hope I won't lose any data :) and you will be able to get all information that are currently on my homepage here.

Postrehy ze zkouskoveho / Exams Observations

2008-02-05T19:04:00.002+01:00

Konec zkouskoveho jeste neni, presto uz ted jsem nasbirala nekolik zajimavych postrehu:

Postreh prvni:
Vsimla jsem si napadne podobnosti skript a binarniho souboru.

Postreh druhy:
Vetsinou se v chapani zaseknu na necem, co je dle autora obecne zrejme, jasne, trivialni a tedy to neni treba vysvetlovat.

Postreh treti:
Co mi prijde obecne zname, jasne, trivialni a nepotrebuji to vysvetlit je vetsinou dokazano na nekolik stranek dukazem tak narocnym, ze to prestanu chapat.

Postreh ctvrty:
Kdyz uz je vazne nejhur, je potreba si uvedomit, ze vlastne o nic nejde. Tak az vam bude hodne spatne, zkuste se podivat treba na tohle video a pochopite, ze kdyz zkousku neudelate, tak se vlastne nic tak zleho nestane.

The end of exams in still far away. However I have some interesting observations already:

Observation No. one:
I have taken notice of the similarity of a binary file and the official lecture notes.

Observation No. two:
I have often troubles to understand to something that is according to the author evident, clear, trivial so it doens't need to be explained.

Observation No. three:
What seems to me to be evident, clear, trivial so it doens't need to be explained is often proved by number of pages in a such difficult way that I desist from understanding it.

Observation No. four:
When really bad times come I have to realize that at it is all small and unimportant in fact. So if you feel really bad see this movie and you will understand that there is nothing frightful happening if you do not pass the exam.

Jak jsem zazarila v akademickem mistrovstvi CR v prespolnim behu / How I fascinated at Czech academic cross-country championship

2007-11-17T12:57:00.001+01:00

Po dlouhe dobe se mi na cele dopoledne podarilo zbavit se vsech povinnosti a vydala jsem se s kamaradkou na prespolni beh. Uz 55 let se kona v obore Hvezda tradicni beh 17. listopadu, letos jsem se stala jeho soucasti i ja :) A to docela podstatnou, jak se doctete dale.

Teplota byla na relativne prijemne nule, pozdeji asi i par stupinku nad nulou. Vitr prilis nefoukal, snezilo jen nepatrne. Zazemi zavodu bylo perfektni - oddelene satny, dokonce sprchy.

Zavod startoval v 10h, v pul desate jsme dorazily na registraci. Fronta nebyla prilis dlouha, ale na chvili cekani to bylo. Kdyz tu nas oslovily dve pani u stolecku s napisem "AM", jestli nechceme do akademicke kategorie. Nabidka znela lakave - zadna fronta, bezplatny start a stejna delka trati jako v kategorii zeny (4400m), k tomu hezke CVUTacke tricko. Tak jsme kyvly. Ukazalo se, ze jsme se zapsaly do akademickeho mistrovstvi CR v prespolnim behu a k nasemu jmenu byla pripsana skola, kterou reprezentujeme. To jsem zacala uvazovat, co me muze skola za ostudu, kterou pravdepodobne zpusobim svym casem, udelat - napadlo me akorat odebrani ubytovaciho stipendia, coz je vzhledem k jeho vysi nepodstatne :) Na druhou stranu, kazda reklama skole prece jen prospeje.

Dostala jsem cislo 19, coz me prekvapilo, ostatni meli cisla nad 100. Vypadala jsem tedy jako skutecna favoritka zavodu :)

Na startu jsem se postavila rovnou do zadu a ukazalo se to jako spravny krok. Uz 100m za startem jsem byla se slusnym naskokem posledni. Na prvni krizovatce me navigujici poradatel povzbuzoval, tak jsem ho ujisitla, ze budu rada, kdyz dobehnu (uz tou dobou jsem mela tep mezi 188 a 195 a cely prubeh zavodu neklesl, ale citila jsem se v pohode).

Po kilometru uz jsem nevidela nikoho pred sebou, ani nikoho za sebou. Ale bylo krasne a tak jsem si to uzivala. Navic uz jen kilometr a budu mit jedno kolecko za sebou. Bezela se totiz dve stejna kolecka po 2200m. V nasledujicim kilometru jsem stihla dvakrat trosku zabloudit, ale jinak se mi bezelo hezky.

Byla asi 14. minuta zavodu a ja se blizila ke konci prvniho kolecka, uz jsem videla cil. Vzpomnela jsem si, ze lonska vitezka dobehla v case kolem 15 minut. Hmmm, to asi budu vypadat jako vitezka, napadlo me. A nemylila jsem se - jak jsem se blizila ke konci kolecka, zacali se v cili srocovat lide a dokonce me nataceli. No jo, mela jsem nizke cislo, vypadalo to, ze treba prekonam lonsky cas o par vterin. Presto vypadali vsichni mirne nejiste - na vitezku jsem si to sinula dost pomalu. Kdyz jsem probihala cilem, sdelila jsem kameramanovi, ze nejsem prvni, ale posledni, at si jeste pocka. Tak vypnuli kameru, upustili od zapsani vysledku viteze a povzbudili me k druhemu kolecku :)

Na prvnim rozcesti stale jeste stal ten pan, co me pred ctvrt hodinou tak povzbuzoval a povidal: "Vidim, ze si stale drzite svou pozici! Jen tak dal, nenechte se vyvest z miry, uzijte si to!".

Zbytek trate jsem dobehla jiz temer bez komplikaci (kdyz nepocitam dvoje smrkani, jedno zavazovani tkanicky a jedno zakopnuti). V cili jsme dostala presladky caj a cely balik susenek. Vsichni byli moc mili a ochotni.

S celkovym casem cca 30 minut jsem celkem spokojena - jsem rada, ze jsou to dobehla :) Asi me budou vecer trochu bolet nohy, ale citim se jako znovuzrozena. Tu pulhodinu jsem v podstate celou prosmala :)

After many weeks, I had a free Saturday morning with no obligations. I went to the cross-country race with my best friend Johari. This race is held annually for 55 years at Hvezda park on 17th November and this year I took part in it and it was quite serious role - as you will read in a moment.

The temperature was getting quite comfortably about zero, later it was about five degrees. No strong wind, snowing only gently. Organization was great, there were separated cloak-rooms with showers also.

The race started at ten o'clock, we arrived to registration at half past nine. There was no long queue, just a few people, we thought that we would stand there for just some few minutes. We were standing there when a couple of women told us that we could register as academicians. It seemed to be a good offer - no queue, free registration, the same length of race (4400m) and as a bonus we got a T-shirt with CVUT logo for free. (CVUT is another Czech university). So we accepted this offer happily. Later it showed oneself that we had registered to Czech academic cross-country championship and to our name there had been added the name of university we represented. I started to wonder about what could my university do to me to penalize me for the shame that I would make for sure. The only thing I thought out was to refuse my accommodation scholarship and this was not important for me in the light of it's highness. On the other hand, every propaganda is good for my school's popularity.

They assigned starting number 19 to me. It surprised me because others had numbers bigger than a hundred. I looked like a total leader of the race :)

I stand back at the start and this was a really good idea. We were one hundred meters over the start and I was already the last runner. The organizer encouraged me at the first crossroad and I made him sure that my target is to come to the finish not to win (at this moment I already had my heard frequency between 188 and 195 - and it didn't decreased during the race, however I felt fine).

After the kilometer I couldn't see anyone behind me nor ahead. Anyway, it was a beautiful day so I enjoyed the run. Moreover there was just one kilometer to finish the first lap. We run two similar laps 2200m long. During the next kilometer I got lost a bit for two times in spite of the fact it was nice.

There was the 14th minute of a race coming and I was approaching the finish line of the first lap. I remembered that last year the winner had the time about 15 minutes. Mmmm, then I would look like a winner I thought. And I wasn't wrong. When I was getting closer to the finish, there were a bigger crowd of people and there was a television filming me. Oh yeah, I had a very low number and it seemed that I would improve the time from the last year. However all of them looked a bit confused - I was running very slowly for the winner. When I run around a camera-man I told him to wait that I was not the first one, but the last one. So they stop filming, stop from writing down my time and encouraged me to the last lap :)

There still was the same organizer at the crossroad and he was encouraging me: "I can see that you are holding your position! Great! Keep it up, enjoy it!"

The rest of lap I run almost without complications (if I don't bear in mind that I had to blow my nose for two times, tie the laces for one time and tripped out for one time). At the finish I got a very very sweet tea and a package of sweets. All people there were very nice.

I'm quite satisfied with my time that was about 30 minutes. I'm happy that I finished it. Maybe I will feel my tired legs in the evening however I feel like born again now. I was laughing during almost whole race :)

Paty turnaj "Golf Club Praha Tour 2007" / The fifth "Golf Club Praha Tour 2007"

2007-09-16T08:24:00.001+02:00

I tato sobota byla ve znameni sportu. S Davidem jsme se zucastnili golfoveho turnaje - on jako hrac, ja jako jeho nosic (nebo spis vozic).

Na motolskem hristi jsme byli poprve. Na pohled je krasne, ale prekvapila me jeho clenitost. Tahat po nem vozicek bylo docela narocne, do nekterych svahu jsem se musela doslova drapat, malem po ctyrech.

Dalsim specifikem hriste byly velmi caste prelety letadel - nebyla mezi nimi pauza delsi nez nekolik malo minut a kdyz slo o tryskove letadlo, nebylo slyset vlastniho slova.

Tentokrat David nesel vyhravat, ani zlepsit handicap a to byl mozna ten duvod, proc bylo skore takove slabe. Ale vubec nam to nevadilo, hezky jsme si zahrali, nadychali se cerstveho vzduchu a nasytili nase oci pohledem na krasnou zelen a modro-sede nebe.

Nekomu se golf nejevi jako sport, ale ja ho tak vidim, nebot je srovnatelny nejmene s turistikou. Oba jsme usli kolem 10km. Ja jako nosic jsem to absolvovala vcetne tahani bagu na vozitku, ktery vazi asi 15kg, pres vsechny ty kopecky a hrboly. David jako hrac absolvoval desitky odpalu, navic se musel umet zkoncetrovat na hru, prestat myslet na vsechno ostatni. Po dni stravenem na hristi se citite jako po kazdem jinem venkovnim sportu - prijemne unaveni, mirne ofoukli a opaleni a vase mysl je prijemne uvolnena.

This Saturday was in token of sport also. We took part of a golf tournament - me and David. He as a player and I was a caddie (with a buggy luckily).

We was for the first time on the golf course at Motol. It is a very beautiful course at sight. But I was surprised by it's horizontal articulation. It was realy hard to draw a bag there - there were some slopes where I thought that the bag would draw me down and I scrumbled up almost on all fours.

The next interesting think was that there were huge planes flying over the course every few minutes. And if it was a jet we couldn't hear own words.

David didn't want to win or improve his handicap this time and that was may be the reason why his score wasn't so good. However it didn't matter - we enjoyed the game, we breathed fresh air and satified our eyes by view of a nice green grass and grey-blue sky.

There are people that do not see golf as a sport. I mean that it really is a sport. It is comparable with a hiking at least. We both walked about 10 kilometres. Me as a caddie with bag that is about 15 kilograms heavy and David as a player made many drives and he had to concentrate to the game and stop thinking about all other things... You feel like after any other outdoor sport when you spend a day on a golf course - nice tired, a bit blow over and sunburned and your mind is free.

Night Grand Prix

2007-09-09T09:07:00.001+02:00

Pul roku jsem se tesila, 6 tydnu jsem se snazila trenovat. Ale protoze se mi nestacila zahojit dira po zubu moudrosti, nakonec jsem zustala mezi fanousky, Katka (moje nej kamaradka) musela bezet sama. Ale bylo to super :)

Vcera vecer se na Starem Meste konala nocni Grand Prix - beh pro zeny na pet kilometru, muzi si zabehli kilometru hned deset. Start zenskeho behu byl naplanovany na osmou hodinu vecerni, muzi startovali az o hodinu pozdeji.

Jak se blizil cas startu zen, zacal se startovni koridor zaplnovat a stejne tak se zacaly kupit davy lidi podel startu a zacatku trasy. Me snahy o foceni byly docela marne, nedokazala jsem se probit na misto, kde by bylo videt zavodnice po startu. Jedine takove misto bylo hned kousek za startem, ale tam stal umelec plivajici ohen na vsechny strany.

Mista tesne u zavodniho koridoru se uvolnila, az kdyz zavodnice odstartovaly a zmizely v ulickach Stareho Mesta. Za par minut znovu probihaly Staromestskym namestim, mista kolem trati se opet velmi rychle zaplnila divaky. Byla jsem ale hodne zklamana, ze se publikum tak zdrahalo bezkyne povzbuzovat. Komentatori divaky nekolikrat vyzyvali k potlesku a povzbuzovani, presto vetsina lidi zustala stat nehybne se znudenym vyrazem. Zrejme netusili, jak je pro bezce povzbuzovani dulezite.

Sotva probehly timto usekem, nastal cas, abych se presunula k cili, protoze zbyvalo jen nekolik malo minut, nez se ukaze, ktera z ucastnic zvitezi. Jako prvni dobehla dle ocekavani Kenanka Irene Kwambai. Komentatori s napetim ocekavali, kdy dorazi do cile i nektera z ceskych zavodnic a ja cekala, kdy spatrim do cilove rovinky pribihat Katku.

Asi minutu po Kenance pribehla i Petra Kaminkova - ze vcerejsich zen nejrychlejsi Ceska. Do cile pak v pomerne dlouhych intervalech dobihaly dalsi zavodice. Organizatori hned pozvali Petru na komentatorske stanoviste a ta jim jeste udychana poskytla rozhovor. Stezovala si na spatne osvetleni - casto svitilo svetlo do oci, po ceste si trikrat vyvrkla kotnik. Zaverem pravila, ze se neda nic delat a ze se musi smirit s tim, ze dnesni zavod byl pro divaky. Coz me prislo jako ponekud nestastne, protoze jsem toho nazoru, ze takove zavody by mely byt pro divaky predevsim, ze to se rozumi samo sebou (nejen proto, ze bez divaku by nebyli sponzori a bez sponzoru by nebyl zavod). Docela me zamrzelo, ze nerekla nic pozitivniho - rada bych totiz, aby se zavod konal za rok zase a abych se mohla konecne zucastnit. Jak znelo heslo teto Grand Prix - "Nektere veci jsou proste lepsi v noci."

Blizi se teprve 23. minuta od startu a ja uz vidim, jak se k cili blizi Katka! Cekala jsem, ze dobehne hodne dobre, ale takhle brzo, to me hodne prekvapilo. Nadsene jsem se snazila prichystat si fotak, abych ji udelala cilovou fotku, ale nejak jsem to nezvladla a tak je fotka ponekud tmava :) (to je ta cerna fotografie s bilymi pruhy)

Za chvili jsme se sesly na domluvenem miste, trikrat se prodiraly davy na namesti sem a tam, nez jsme nasly, kam se vraci cipy. Organizatori byli sice vzdycky mili a ochotni, ale moc toho nevedeli. Na dotaz, kam se vraci cipy, jednou dokonce odpovedeli "Vy mate naky cipy?:-o".

Nez jsme se nadaly, byl odstartovan zavod muzu. Jeste jsme ukoristily par balonku a chvili se toulaly ulickami okolo namesti. Dosli jsme do Parizske ulice, ktera byla posledni ulici pred cilem. V cili bylo hodne lidi, ale v tehle ulici nebyla ani noha, nikdo, kdo by bezce povzbudil. Nemusely jsme dlouho cekat a uz se k nam blizili prvni bezci (prvnich nekolik bylo tradicne z Keni). A tak se stalo, ze jsme nasledujicich 45 minut stravily v teto ztichle ulici tleskanim, piskanim a kricenim "Joooo" a "Peknyyy", "Dobreee", "Jedem, jedem!", "Uz jen kousek", "Do tohooo", "Super" a ke konci "Nevzdavej to, uz jen par metru!" a "Je to taaam!". Asi jsme vypadaly docela blaznive, ale pravda je, ze mnoho bezcu skutecne zrychlilo a ti, co uz jen sli, tak zacali bezet. Energii jsme dodaly, myslim, vetsine z nich. Jeste ted me pali z toho tleskani dlane :)

Je to vazne hezky pocit, videt, jak se lide prekonavaji, jak jim prostym krikem dodavate silu. Mezi zavodniky bylo mnoho deti, duchodcu a dokonce i jeden odvazlivec s berlemi. A bylo videt, zvlaste na tech zavodnicich, kteri nemeli uplne nejlepsi casy, ze si to krasne uzili a ze maji radost, ze to zvladli. A tak to ma byt :)

Byl to super vecer - setkani s lidmi, kteri se rozhodli, ze se prekonaji, kteri v dnesni line dobe nerezignovali a dokazi si uzit radost z behu. "Joooo, jste dobryyyy!"

I was looking forward to it for more then six months. I endeavoured to train for six weeks. But my wisdom tooth hole hadn't enough time to skin over so I had to be a fan only. Kate (me dearest friend) had to run without me. However it was great :)

There was the Night Grand Prix at Prague Old Town yesterday evening - women's running race for five kilometres and men had run ten kilometres. Start of the women's race was planned to eight p.m. and men started one hour later.

When the start time of women's run was drawing nearer, the lane for runners started to fill by competitresses and alongside it were many fans and attendants. I tried to take some pictures however it was vain effort - there was no space along the lane that would allow me to see runners after the start. The only free place near the lane was occupied by some artist who was breathing fire all around him.

There was some free space near the lane at last after runners had started and disappeared at streets of the Old Town. They run throught the square again in the opposite direction in few minutes. There re-appear the crowd of attendants along the corridor. But I was quite disappointed that the audience was so hesitating to making noise to encourage runners. Narrators appealed the audience to clap hands many times however they still stood with out a move and having bored faces. They evidently had no idea how important is chucking-up for the runner.

After they had run throught this part of their path the time occuredfor me to move near the finish. It remained just few minutes till we would know which one would be the winner. The first competitress was as expecting from Kenya - Irene Kwambai. Narrators were looking forward for the first runner from Czech and I was waiting for the moment when I would see my friend Kate running to the back straigth.

The first Czech runner Petra Kaminkova came about one minute after Irene. There were other runners coming in at quite long intervals. Petra was asked to give an interview just after she had came in. She was complaining about bad lighting - it dazzleded her many times so she had her ankle sprained three times. She ended her interview by telling us that it was no go and she had to acquiesce that this race had been for audience. I think that this was quite poor - according to my opinion all races are for audience at first (not only because with no audience there would be no sponsors and with no sponsors there would be no race). I was sorry that she said nothing positive - I would like organizers to arrange Night Prix next year again to allow me to take part in the run. According to the motto of this Grand Prix - "Some things are just more fun in the dark."

The 23th minute was drawing nearer when I saw Kate approaching to he finish! I had expected that she would be great but she was so fast. That really surprised me. I tried to make my camera ready enthusiastically to take her picture at the finish. However I didn't make it well and the picture is quite dark :) (it is the black photo with white stripes on the left side of the screen)

We met after a while. Then we had struggled three times throught the square before we found where she should give back the chip. Organizers were indeed nice but they didn't know much information. If we asked them to tell us where chips should be given back they answered: "Oh, do you have any chips? :-o"

Time was running fast. It was nine p.m. and the race for men was started. We captured some balloons and we were roaming at streets around the square. We reached Parizska street (Paris Avenue) - the last street of the race that goes straight to finish. There were many people at the finish while nobody was at this street. Nobody who would encouarge tired runners. We hadn't to wait for a long time and first racers were coming (first few of them were traditionally from Kenya). So it happend that next 45 minutes we spent at this silent street by clapping hands, whistling and shouting "Yup!" and "Nice!", "Good", "Go go go!", "Just a few meters remains", "Hit it!", "Super" and at the end "Do not give it up! Last few metres!" and "You will make it!". Maybe we looked crazy but the truth is that many runners speeded up and those who were walking started to run. We energized most of them I think. Even now my hands are burnign :)

It is really so nice feeling if you see how people overcome themselves, how you energize them by a simple shouting. There were many children and pensioners among the runners. Even there was one using crutches. You could see especially when looking to runners who weren't at the first places that thay really enjoyed the run and thay were happy that thay had made it. And that's how it should be :)

It was a real nice evening - meeting people who decided that thay will overcome themselves. At our lazy times they haven't demitted and they can enjoy a happines from runnnig. "Jup, you are so great!"

Bezlepkove rohliky / Gluten free rolls

2007-08-07T12:17:00.001+02:00

Cilem tohoto receptu je vyrobit bezlepkovy rohlik, ktery je co nejvice chutove podobny obycejnemu rohliku ze samosky :)

Suroviny:

250g bezlepkove smesi Jizerka
15g bezlepkoveho drozdi
2 lzicky cukru moucky
1 lzice oleje
110ml vody
3 spetky soli
2 lzicky sadla
1 bilek na potreni

Postup:

Drozdi, cukr, jednu lzici mouky a trosku vody smichame v hrnicku na kvasek, nechame chvili odstat.

Do misy dame zbytek mouky, olej, sadlo a sul. Pridame teplou vodu a kvasek, dukladne promichame. Nechame asi hodinu kynout na teplem miste (treba na slunicku).

Testo rozdelime na ctyri dily, z kazdeho udelame rohlik. Rohliky pokladame na vymazany plech a potirame bilkem.

Peceme na 170 stupnu do zlatova, asi 35 minut.

The goal of this recipe is to bake gluten free rolls that taste like common rolls :)

Ingredients:

250g gluten free flour (called Jizerka)
15g gluten free yeast
2 teaspoons powdered sugar
1 spoon oil
110ml water
3 pinches of salt
2 teaspoons lard
1 egg white

Directions:

Let's mix yeast, sugar, one spoon of flour and a little of water in the cup. Let this leaven stay for a few minutes.

Put the rest of flour, oil, lard and salt to the bowl. Add warm water and the the leaven from the cup. Mix it well and let it rise for about one hour at the warm place (in the sun for example).

Separate the dough up into four parts. Make a roll from each part, put it on the greased baking tin and glair it.

Then bake it at 170 degrees C until golden - about 35 minutes.

Nove bezecke statistiky / New running statistics

2007-08-06T13:54:00.001+02:00

Po mensi bezecke prestavce jsem se zase zacala snazit. Zalozila jsem si ucet na serveru runningahead.com, tam muzete sledovat me snazeni, starou stranku statistik uz nepouzivam :)

I have started again to strive for being the runner. I have created an account on the runningahead.com server - you can watch my records there.

Cesky a Anglicky / Czech and English

2007-08-06T10:46:00.001+02:00

Rozhodla jsem se psat si blog dvojjazycne, abych si neomezovala okruh ctenaru :) Od teto chvile se budu snazit psat vsechno cesky a vedle anglicky.

I have decided to write my blog in two languages to support non Czech readers. From this moment I'll try to write all articles in Czech and also in English.

Syrove tycinky

2007-08-05T11:36:00.000+02:00

Suroviny:

250g polohrube mouky
250g nastrouhaneho syra
250g hery
vejce

Postup:

Vsechno smichame, udelame placku, tu nakrajime, posypeme sezamem, potreme vejcem a dame upect.

Jatra (nebo neco jineho :)

2007-08-05T11:29:00.000+02:00

Suroviny:

500g jater
2 cibule
1 sklenicka zavarene kysele cervene papriky
1 lzicka cervene papriky (koreni)
0.5 lzicky palive papriky (koreni)
2 lzice kecupu

Postup:

Jatra nakrajime na kousky, cibulku na jemno. Na oleji zprudka osmahneme jatra, pak pridame cibulku a opekame, pridame zavarenou papriku, opekame. Nakonec okorenime a pridame kecup.

Proc tolik receptu?

2007-08-03T20:58:00.000+02:00

Doufam, ze vas nenudim temi vsemi recepty :) Ne, ze bych byla takova labuznice, ale obcas je proste potreba, abych uvarila a kdo si ma vsechno pamatovat... takze hledam recept, ale protoze skoncil nekde na papirku v nejake hromade papiru, nenajdu ho a znovu ho shanim. A to je otrava a tak jsem se rozhodla si to vsechno psat nekam, kde to vzdcky najdu :) Navic tim davam sanci lidem jako jsem ja, nezkusenym kucharum, uvarit neco dobreho :)

Spagety s masem a (nebo) tofu

2007-08-03T20:38:00.000+02:00

Lze pouzit maso i tofu, nebo klidne jen jedno z toho, dle nalady.

Suroviny:

spagety
0.5kg mlethoe michaneho masa
2 tofu (libovolne ochucene, nebo neochucene; testovano s neochucenym a uzenym)
smes koreni na spagety
4 protlaky (pokud pouzijeme pouze maso nebo pouze tofu, protlaku je treba asi jen polovina)
kecup (neni nutny, lze nahradit protlakem nebo vynechat)
cibulka
cesnek
olej

Postup:

Pokud pouzijeme tofu:
Nakrajime tofu na kosticky asi 5mm velike. Vetsina tofu ma tendence se drolit (ale treba uzene se nedroli). Pokud mame takovy druh, zachazime s nim jemne, aby se nerozpadlo a navic ho pred dalsiupravou povarime, tim zmeni charakter a stane se pruzne a pevnejsi. Dame si varit vodu (pokud pouzivame neochucene tofu, prisypeme do vody trochu koreni na spagety) a kdyz se vari, pridame kosticky tofu. Povarime par minutek a slijeme. Tim mame tofu pripravene.

Na trosce oleje lehce osmahneme nakrajenou cibulku (pokud pouzivame maso, staci oleje jen kapicka, protoze maso je hodne tucne). Pridame maso, osmahneme, dokud nezhnedne. Pridame tofu a chvili na to protlaky a posypeme korenim a pripadne posolime. Smes je ted hodne husta, takze ji zredime kecupem. Pokud kecup nemame, jednoduse zredime vodou a pridame trochu cukru.

Nechame smes asi 30 minut dusit, postupne dolivame vodu, co se vyparila, abychom zachovali omackovou konzistenci. Pozor, smes hodne prska a kam prskne, uz nikdy nebude puvodni barva, takze pouzivejte poklicku a zasteru, nebo jiny ochrany odev, kdyz smes michate! (michat se to musi jednou za par minut, jinak se to pripali)

Vypneme ohen a dochutime - dle chuti: cukrem, korenim a hlavne nezapomenme na nadrceny cesnek, ten tomu doda tu spravnou chut (nedavejme ho do smesi kdyz se jeste vari, ztratil by riz).

Nejlepe chutna s bezlepkovymi kukuricnymi spagetami a nastrouhanym hodne tvrdym ovcim syrem. Ale dobre je to i s obycejnymi spagetami a eidamem :)

Rychle leco s kuskusem

2007-08-03T20:29:00.000+02:00

Suroviny:

mnozstvi vseho dle chuti

(tocenak)
cibulka
papriky
rajcata
kuskus
vejce

Postup:

Pokud mame tocenak, tak tocenak s cibulkou, jinak jen samotnou cibulku, lehce osmahneme. Pridame nakrajenou papriku, zalijeme vodou a dusime, dokud paprika nezmekne (dle vkusu). Pridame rajcata a opet dusime, dokud nejsou trochu rozvarena (dle vkusu:). Prubezne dolivame vodou, aby to trochu plavalo.

Kdyz je zelenina temer hotova, prisypeme kuskus (musime mit v lecu dostatek vody) a nechame chvilicku povarit, pak pridame vejce a znovu chvili varime, dokud neni vejce uvarene. Muzeme prisolit a je to.

Doporucuji zkonzumovat hned po vareni, dalsi den totiz kuskus nasakne vodu, zvetsi se a cela hmota hodne ztuhne a vyschne - je to jedle, ale neni to tak dobre. Pokud chceme mit navareno na vic dnu, tak je lepsi kuskus varit zvlast a pridat ho do pokrmu az tesne pred jidlem.

Rajska

2007-08-03T14:52:00.000+02:00

Suroviny:
asi 750g hoveziho
4 male rajske protlaky
cukr
ocet
sul
sadlo
2 cibule
5 kulicek pepre
10 kulicek noveho koreni
spetka tymianu
4 kusy bobkoveho listu
2 lzice mouky

Postup:

Maso vlozime do tlakoveho hrnce, zalijeme vodou, aby bylo cele ponorene, ale aby voda nepresahovala rysku v hrnci (kdyz se nevejde, tak ho rozkrojime). Osolime a dame varit. Kdyz zacne "poskakovat" ventilek hrnce, stlumime ohen a varime 90 minut. Pak hrnec ochladime pod studenou vodou nebo velmi opatrne a pomalu upoustime paru ventilkem (napr. pomoci dlouheho noze). Zkontrolujeme, zda je maso dobre varene a pripadne ho dovarime. Ze zbyle vody lze udelat polevku pridanim zeleniny, nudli a ruznych dochucovadel.

Cibulky nakrajime na kolecka, spolu s peprem, novym korenim, tymianem a bobkovym listem osmahneme na sadle do zlatova ve velke panvi. Pak zalijeme vodou a 30 minut varime, postupne dolivame odparenou vodu, aby byla hladina stale hodne vysoko.

Mezi tim na druhe panvi rozehreje sadlo a do nej nasypeme mouku, lehce do zlatova osmahneme. Tuto smes pridame do smesi s cibulkou po te pulhodince vareni a spolecne varime jeste asi 10 minut.

Pripravime si hrnec s jemnym cednikem. Uvarenou smes precedime a ze zbyle hmoty v cedniku rucne vyndame vsechno velke koreni (listy i kulicky). Pote treme smes v cedniku tak dlouho, az ji celou pres nej propasirujeme (to je nejnamahavejsi cast, zacnete na to v posilovne trenovat vcas .).

Do propasirovane omacky pridame protlaky a chvili (3 minutky) povarime. Pokud je omacka prilis husta, muzeme ji zredit napr. vyvarem z masa nebo i vodou. Dochutime asi 2 lzicemi cukru, soli a par kapickami octu.

Zemlovka

2007-08-03T14:44:00.000+02:00

Suroviny:

mleko
veka nakrajena na platky
asi 4 velka jablka
cukr
skorice
4 vejce

Postup:

Nastrouhame jablka. V misce si smichame cukr (krystal) a skorici. Veku rozlozime na pekac a zalijeme mlekem, aby nam zmekla (muzem delat i postupne na taliri...). Vymazeme si zapekaci misu a jeji dno vylozime nasaklou vekou. Na to dame vrstvu nastrouhanych jablek, posypeme skoricovym cukrem. Nasleduje dalsi vrstva namocene veky, pak jablek a pak skoricoveho cukru. Zaverem polozime vrstvu zmekle veky. Peceme na 190 stupnu asi 30-45 minut.

Mezi tim si oddelime zloutek od bilku z vajec. Bilky naslehame na tuhy snih, pak pridame 3 lzice cukru a zase chvili slehame a postupne do snehu zaslehame i zloutky. Smes nalijeme na temer upecenou zemlovku a nechame jeste 15 minut pect.

Bezlepkove satecky s jablecnou naplni

2007-08-03T14:22:00.000+02:00

Mnozstvi:
asi 8 kusu

Suroviny:

Testo:
250g mouky (Jizerka)
125g tuku (Senza)
80ml mleka
2 vejce
30g cukru
spetka soli
1/3 drozdi

Napln:
2 velka jablka
skorice
cukr

Drobenka a potreni:
2 lzice cukru
2 lzice mouky
1 lzice oleje
1 vejce

Postup:

V hrnicku si nandrolime kvasnice, zalijeme drtkem vody, dukladne zamichame, nechame 2 minutky stat prikryte uterkou. Do misy nasypeme mouku, cukr, sul, nalijeme mleko. Pridame 2 vejce, tuk. Pak kvasnice prelijeme do misy s testem. Vsechno dukladne zamichame a pak promichame testo tak, abychom do neho vehnali co nejvice vzduchu. Testo poprasime moukou, zakryjeme uterkou a dame kynout na teple misto na asi hodinu.

Jablka oloupeme a nakrajime na drobne kousicky (cca 3mm) do kastrolku. Zalijeme malym mnozstvim vody, posypeme trochou skorice a dame varit. Varime asi 5 minut. Slijeme zbylou vodu, osladime dle chuti (2-3lzice) a pripadne jeste pridame skorici.

V hrnecku si naslehame vejce na potreni. Do dalsi misky nasypeme mouku, cukr a nalijeme olej na drobenku. Rukou promichame, az vznikne drolici se smes.

Rozehrejeme troubu na 170 stupnu.

Vymazeme si pekac, na prkenko si nasypeme mouku. Vareckou si oddelime kousek testa, dame na prkenko a udelame kulicku. Tu preneseme na plech, tam z ni udelame placicku. Doprostred dame lzickou jablecnou smes (okraje placicky by mely zustat volne). Z testa udelame dalsi kulicku, preneseme nad plech, tam ji trochu splacneme a zakryjeme ji shora placicku s jablky, okraje slepime, aby nam jablka neutekla pri peceni. Timto zpusobem tvorime satecky.

Satecky natreme rozslehanym vejcem a posypeme drobenkou.

Peceme dozlatova .)

Jak jsme mluvili s Vista

2007-07-13T21:11:00.001+02:00

Pred nekolika malo dny se nam (mne, matousecovi a tachyonovi) dostaly do rukou Visty. Netrvalo dlouho a objevili jsme, ze je lze komandovat hlasem.

Na googlu je mnozstvi videi, ktera dokumentuji, jak tezce Visty rozpoznavaji prikazy a ze nektere akce s nimi temer neni mozne uspesne provest jen pomoci hlasoveho ovladani (napr. psani dopisu). Ono je to jednoduche, natocit takove video, jak neco nefunguje, kdyz se to spravne nenastavi, rikala jsem si. A tak jsem sama zasedla, prilozila mikrofon presne jeden palec od rtu a zacala Visty ucit muj hlas - prosla jsem pruvodcem uceni hlasu, velmi peclive, zretelne a tou nejlepsi anglictinou, co umim, jsem predcitala zadane vety.

A pak konecne prisel ten okamzik, kdy me mely poslouchat :) Inu, nebyla to zadna slava. Obcas pracovaly perfektne hned na prvni prikaz, ale jindy nebylo mozne je donutit nejakou akci vykonat, ne a ne rozumet. K praci je predevsim potreba uplne ticho, jinak rozumi velice tezko.

Rozhodne jsme stravili velmi zabavne odpoledne, ale nikdo z nas by tahkle pracovat skutecne nechtel. Vazme si mysi a klavesnice. Ve stavu nejhorsi nouze by to ovsem bylo mozne. Sice velmi tezko a velmi pomalu, ale slo by to - napriklad pouzivat souradnicovou sitku, kam kliknout mysi a spelovat kazde slovo... to slo docela dobre, ovsem jeden klik nebo napsani jednoho slova pak trva treba minutu...

Tak se tesim, az se tahle sexy metoda ovladani pocitace stane propracovanejsi a budu moct programovat treba u vareni .)

Smazenky

2007-07-13T21:04:00.000+02:00

Dnes nezdravy smazeny recept, za to ho lze lehce realizovat na kolejich .)

Smichame 250 ml mleka a 4 vrchovate lzice krupicky a dame varit. Varime par minut, dokud to neni hodne tuhe. Nechame uplne vychladnout.
Pak pridame lzicku sladke papriky (koreni), pokusime se do hmoty vmichat alespon trochu rovnomerne. Pridame cele vejce a opet vmichame. Nastrouhame si 250 gramu tvrdeho syru (eidamu) a opet ho vmichame do smesy.
Na talirek si nasypeme strouhanku, kydneme do ni lzici hmoty, udelame kulicku a z ni placicku, obalime ve strouhance. Placicky nedelame vetsi nez dlan, jinak by se nam jen tezko povedlo je na panvi otocit. Placicky usmazime do zlatova az hneda a podavame s chlebem, horcici a cibulkou. :)

Fotky

2007-06-29T21:47:00.000+02:00

Zalozila jsem si album, zatim jsou tam dve pokusne fotky, ktere se hodi treba na pozadi :) I kdyz ta druha spise pro milovniky rajcat :)

Krasny chemicky pokus

2007-06-13T21:33:00.001+02:00

http://www.youtube.com/watch?v=aC-KOYQsIvU&NR=1
To bude mit asi neco spolecneho s takovym tim ohrevnym sackem, co se uvari a pak se zmackne plisek... :)

Aktualizace a omluva

2007-06-13T21:20:00.000+02:00

Tak jsem ted letmo proletla blog a nektere veci se zmenily.

Jak uz to byva, predsevzeti se rusi :) Dostala jsem skvelou brigadu a na CSS uz vazne neni cas. Navic CSS mi ted prijde nudne.
Trenink se odklada na neurcito :( Bohuzel uz par tydnu me zase zlobi nejaky neradi v krku a nemuzu se jich zbavit a tak nebeham, dokud je nevyzenu.

A kdyz uz sem pisu, chtela bych se omluvit tem, kdo mi ted posilaji ruzne opravy a doplneni na web, ze to moc prubezne nezpracovavam, ale vedu to v todo listu a za nejaky konecny cas se k tomu urcite dostanu, nejpozdeji po zkouskach.

Vypisky z TCP/IP

2007-06-06T08:07:00.001+02:00

Download: zazipovane PDF: tcpip.zip 457.66kB

Zacalo zkouskove

2007-06-01T08:10:00.001+02:00

Tohle je vystrizek z mych statistik. Je videt, ze zacalo zkouskove. A 22. kvetna byl asi nejaky predtermin nebo dodelavka z minuleho semestru :)

Ceske povidlove bezlepkove kolacky

2007-05-24T19:37:00.000+02:00

Kdo ma zajem o lepkove kolacky, doporucuji recept na strankach Dr. Oetkera, z nehoz vzesel recept bezlepkovy.

Na 12 vetsich kolacku:

Testo:
250g mouky (ja dala Jizerku)
spetka soli
cca 2/3 baleni instantnich kvasnic (bily obal s modrou vlastovkou nebo Oetker, ale to uz asi jine mnozstvi)
1 baleni vanilinoveho cukru Oetker
3/4 PL cukru
1 cele vejce
asi 250ml mleka (podle tuhosti testa, spis zredit vice, nez mene)
25g rozpusteneho masla (nebo toho tuku na peceni v te zlate kostce)
1 PL oleje

Navrch:
povidla od Hame (obycejna, bez rumu a hrozinek)
mouckovy cukr
cele vejce

Postup:
1. Smichame vsechny suroviny na testo, dukladne promichat, vehnat vzduch, poprasit moukou, prikryt uterkou a nechat cca 90min kynout. Nelekejme se, testo v tuto chvili pripomina spis ridky krem na dort.

2. Z testa vyskubneme hroudu (ano, bohuzel se testo vubec netahne, chova se spise jako pena) a jemne z ni v mouce uvalime hroudicku. Na vymazany plech (doporucuji hodne vymazat, nebo neprilnavy plech) hroudicku polozime a prsty z neho vymackame kolacek. Zvysene okraje jsou dulezite, aby povidla tolik nevytekala. Kolacky pokladame primerene daleko od sebe, protoze pri peceni se jeste vykynou (ja dala na velky plech 6 kolacku, tedy z poloviny testa na jeden plech).

3. Naslehame zbyle vejce a potreme jim okraje kolacku.

4. Pripravime si povidla (nejlepe zamichat na misticce, aby nebyla tak tuha, nebo dokonce necim zredit, v puvodnim receptu se doporucuje zredit je rumem). Povidla nanasime na stred kolacku a rozetreme do kraju.

5. Dame pect do rozehrate trouby:
elektricka a horkovzdusna cca 180 stupnu
plynova stupen 6-7
Peceme cca 15-20 minut.

6. Upecene kolacky pocukrujeme.

Tip:
Kolacky muzeme jeste naplnit tvarohem. Jeste jsem to ale nezkousela, teprve se k tomu chystam.

Zachovale obleceni na charitu, ne do popelnice

2007-05-24T17:32:00.000+02:00

Asi tak dvakrat do roka delam poradek ve skrini a vyrazuju obleceni, co uz je nenositelne a nebo nositelne, ale prestalo se mi libit nebo mi z nejakych duvodu prestalo sedet.

Kousky, co uz skutecne doslouzily vyhodim, ale tech byva jen par. Zato mivam slusnou hromadku toho, co by se jeste nosit dalo, ale ja uz to nosit nechci, protoze se mi to nelibi nebo jsem zhubla/pribrala... A ty nosim do kontejneru urceneho pro sber obleceni pro charitativni ucely. Je to fain pocit. Zabijete dve mouchy jednou ranou - udelate si misto ve skrini a pritom vas muze hrat pocit, ze jste to jen tak nevyhodili, ale mozna jste udelali dobry skutek.

Takove kontejnery obcas nebyva jednoduche najit, ale vetsinou se staci divat kolem sebe. Jeden je napriklad v nakupnim centru na Zlicine mezi Tescem a Ikeou na parkovisti (v Praze). Kdybyste ale zadny nenasli, koukejte po letacich na ulici, jednou za cas se nekde kona sber obleceni primo na ulici. A kdyz ani to ne, ptejte se lidi, kteri maji neco spolecneho s charitativni cinnosti, duchovnich a podobne, nekdo vam urcite poradi. Nebo hledejte na internetu.

Garfield

2007-05-24T17:20:00.000+02:00

Vite, ze Garfield vychazi uz od roku 1978? To znamena, ze vam bude trvat hodne dlouho, nez ho prectete cely a taky, ze si uzijete hodne legrace. Pro priznive Garfielda, co rozumi anglicky je zde a v cestine tady, ovsem ne od uplneho zacatku. A tady muzete najit rozbor osobnosti komiksu a dalsi zajimavosti.

Vyhodnoceni ankety

2007-05-24T07:36:00.001+02:00

Dekuji tem, co hlasovali a pojdme se podivat, jak to dopadlo.

Vetsinou hlasovalo okolo sesti lidi, nevim kdo, jak jsem psala drive, anketa byla anonymni. Puvodne jsem ale cekala, ze hlasu bude alespon dvojnasobek. Sem tam je nejaky ten hlas mimo hlavni proud, coz si vysvetluji tak, ze nekdo se snazil byt vtipny a nebo me opravdu nema rad.

Vezmeme to po otazkach.

Jak jsem inteligetni
hodne - 5
prumerne - 3
uplne blba - 1
genialni, malo - 0

Jak se se mnou komunikuje?

normalne - 4
vyborne, spatne - 2

Jsem krasna?
hezci - 3
moc krasna, katastrofa - 2
normalka - 1
nic moc - 0

Jsem sebevedoma?
tak akorat - 4
moc ne - 2
az moc, vubec - 1
dost - 0

Jsem ochotna?
hodne - 6
stredne, vubec - 1
spis ano, moc ne - 0

Jsem povrchni?
ne - 4
asi jako vetsina lidi - 3
ano - 0

Jsem cilevedoma?
spis ano - 4
stredne - 2
vubec - 1
urcite ano, spis ne - 0

Lzu?
vubec - 3
temer nikdy - 2
jen obcas - 1
casto - 0

Jsem cool?
docela jo - 4
moc ne - 3
jasne, totalne mimo - 0

Jsem sobecka?
vubec - 5
moc ne, trochu - 1
hodne - 0

Jsem sebestredna?
spis ano - 3
spis ne, temer vubec - 2
hodne - 0

Jsem hysterka, nebo klidas?
spis se ovladas - 5
obcas se neovladas - 1
totalni hysterka, uplne klidna - 0

Jsem poctivka, nebo podvodnice?
poctivka - 4
vetsinou poctiva - 2
vetsinou podfukarka, podvodnice - 0

Jsem 'hodna'?
neublizila by ani mouse - 3
mouchy mlati bez potizi - 2
zvire by zabila, cloveka ne; klidne zabije cokoli a kohokoli - 0

Mam vkus?
nekdy ano nekdy ne - 3
vetsinou ano - 2
perfektni, vubec ne, vetsinou jsi trochu mimo - 0

Jsem hadava, nebo bezkonfliktni?
moc se nehadas, snazis se nehadat se - 2
obcas se hadas, poard na nekoho stekas - 0

Mam silnou vuli?
mozna ano, spis ne - 2
urcite ano - 1
ani omylem - 0

Jsem lina?
spis ne - 4
vubec - 1
jako ves, spis ano - 0

Jsem poradna, nebo bordelarka?
stredni poradek, stredni bordel - 2
poradana - 1
totalni neporadek a chaos - 0

Jsem peclivka?
spis ano - 4
uplna, moc ne, ani omylem - 0

Budim respekt?
ani moc ne - 4
ne velky, ale trochu jo - 1
vubec ne; jiste, prirozeny - 0

Je na me spoleh?
absolutni - 4
spis jo - 1
spis ne, na tebe bych nikdy nespolehal - 0

Jsem upovidana?
vetsinou ano - 3
az moc, vetsinou ne - 1
vecne mlcis - 0

Jsem otevrena?
moc veci o sobe netajis - 4
moc o sobe nepovidas - 1
reknes o sobe cokoliv, hodne uzavrena - 0

Nektere odpovedi me potesily, nektere docela rozesmaly. Treba to, ze se mi pred par lidmi jeste podarilo utajit muj smysl pro neporadek. Jinak ale vetsina odpovedi, bych rekla, docela odpovida tomu, jak je vidim i ja. Jeste jednou diky, uz vim, ze me mate docela prokouknutou, ale jeste ne uplne :)

Zmena zmeny planu

2007-05-24T07:24:00.000+02:00

Pry ty z vas, kteri sleduji me bezecke usili :) V pondeli se mi stala mala nehoda, udelala jsem si neco se svalem za krkem, takze mam limec a vidim to tak na tyden bez behu :( To mi mirne narusilo muj bezecky plan, takze jsem se rozhodla to spravit tak, ze jednoduse vynecham 7. tyden, abych to v tech osmi tydnech stihla. Snad mi to tak vyjde.

Zmena bezeckeho rezimu

2007-05-14T10:33:00.000+02:00

V sobotu jsem se zucastnila osmikilometroveho nesoutezniho behu, ktery jsem sice ubehla bez zastavek a citila jsem se docela v pohode, ovsem muj tep tomu prilis neodpovidal - z kopecku jsem mela cca 180 a do kopce 190, obcas i 194 a to uz na me kricel puslmetr, ze bych mela zvolnit. A to jsem to bezela asi 55 minut.
Takze mam dve moznosti - bud zacnu poradne trenovat, nebo se na tyhle vetsi behy vykaslu. To druhe se mi ale vubec nechce a tak jsem se rozhodla, ze zkusim nejaky "opravdovy" trenink. Nasla jsem si osmitydenni program pro trenink na 5 km. Petikilometrovy beh (Adidas beh pro zeny) planuju az na zari, ale cca za 8 tydnu mam jinou akci, kde predpokladam, ze se ode me bude rano ocekavat svizny beh. A tak by se mi to mohlo hodit, nechci kazde rano behat na tak strasnych tepech.
Jsem zvedava, jestli na me tenhle treninkovy plan bude nejak pozitivne ucinkovat :) Zacala jsem uz dneska, udaje budu doplnovat, jako vzdy, sem. Zde je shrnuti treninku, co me ceka:

1. týden

3 míle (4.83 km)	lehce
1 míle (1.61 km)	rychle
3 míle (4.83 km)	lehce
2 míle (3.22 km)	fartlek

2. týden

3 míle (4.83 km)	lehce
1 míle (1.61 km)	rychle
3.5 míle (5.63 km)	lehce
2.5 míle (4.02 km)	fartlek

3. týden

3 míle (4.83 km)	lehce
1 míle (1.61 km)	rychle
4 míle (6.44 km)	lehce
2.5 míle (4.02 km)	fartlek

4. týden

3 míle (4.83 km)	lehce
3.11 mil (5 km)	tempo
3 míle (4.83 km)	lehce

5. týden

5 mil (8.05 km)	lehce
2 míle (3.22 km)	rychle
3 míle (4.83 km)	lehce
3 míle (4.83 km)	fartlek

6. týden

6 mil (9.66 km)	lehce
2 míle (3.22 km)	rychle
3 míle (4.83 km)	lehce
3 míle (4.83 km)	fartlek

7. týden

3 mile (4.83 km)	lehce
5 mil (8.05 km)	rychle
3 míle (4.83 km)	lehce
3 míle (4.83 km)	fartlek

8. týden

3 míle (4.83 km)	lehce
3 míle (4.83 km)	lehce

A taky jsem zvedava, jestli ten trenink vubec zvladnu :)

Bilkoviny

2007-05-08T15:18:00.000+02:00

Tak jsem se vcera zamyslela nad svym jidelnickem a doslo mi, ze ma strava neni moc vyvazena - spousta cukru a velmi malo bilkovin. A tak jsem se rozhodla si zjistit, v cem se bilkoviny hojne ukryvaji, abych vedela, pro jaka jidla se alespon obcas rozhodovat. Zde je seznam nekterych potravin bohatych na bilkoviny:

libove maso
drubez
ryby
sunka
syry
tvaroh
vejce
smakoun
tofu
lusteniny

Ze zivota studentstva

2007-05-06T09:19:00.000+02:00

Jsem ted dost vytizena hromadou projektu a ukolu, jejichz terminy dost hori, takze mi nezbyva moc casu treba na blog. Tak dnes prinasim prispevek jednoduchy na napsani - ale pobavi vas urcite hodne (alespon ty, kteri ho jeste neznaji).
comic strip MaFian liFe

Vtip versus realita

2007-04-24T22:47:00.000+02:00

Urcite znate ten stary vtip: Rozjizdi se autobus a bezi za nim pan. Lidi na nej volaji, ze ten uz nestihne a on povida, ze ho musi stihnout protoze je ridic. Tak presne to se mi dneska stalo v metru :) Sedim si v metru, uz jsem mirne nervozni, protoze na te stanici stojime uz nejmene pet minut. Dvere jsou otevrene. A najednou se metro rozjede, pomalicku, ale jede. A mirne zrychluje. To uz vsichni ve vagonu premysleji, co se deje a nervozne se otaceji na vsechny strany. Kdyz v tom se ozve dusot a predstavte si, zezadu po nastupisti sprintuje ridic a odvazne naskauje do kabinky, ktera uz je pomerne hluboko v tunelu :D Za chvili zabrzdil a pak se jeste parkrat probehl po nastupisti dopredu a dozadu a uz jsme jeli :)

A mam to za sebou

2007-04-14T19:31:00.000+02:00

Dle mych zkusenosti padam na bruslich prave jednou za sezonu. A letos to prislo brzo, jiz dnes to mam za sebou. Fotku bohuzel nemam, ale zkusim to okomentovat:

s0cketka jela na bruslich a par metru pred ni stala na bruslich koreika. ty se snadno vyhne... jenze lidi kolem nekoukali, zataresili cestu a s0cketka se ritila primo na ni, nebylo kam uhnout. a tak roztahla ruce a kricela "uuuuaaaaa", ale ona ale taky neuhnula, taky roztahla ruce a kricela "uuuuaaaa". a tak se objaly, zatocily a pak spolecne padly na beton :D

Medici, matfyzaci a pravnici

2007-04-13T08:29:00.000+02:00

Buh si chce udelat prehled o studentech. Vysle tedy mesic pred zkouskou svateho Petra, aby se na ne podival. Svaty Petr hlasi: "Doktori lezi v knihach a uci se, matfyzaci hraji hry, pravnici pari." Buh ho vysle znovu tyden pred zkouskou. "Medici se stale uci, matfyzaci se pomalu zajinaci ucit, pravnici stale pari." A tak vysle svateho petra jeste den pred zkouskou. "Medici si opakuji, matfyzaci se snazi jeste se toho co nejvic naucit a pravnici se usilovne modli." Buh na to: "Rikas, ze se modli? Tak to jim pomuzeme."

O ankete, jednani s lidmi a malem miru

2007-04-10T22:32:00.000+02:00

Nejak me to dostalo - necekala jsem, ze nekdo bude mit takovy problem pochopit, proc anketu delam. To nemyslim nijak spatne, ja taky nektere veci nejsem schopna pochopit, proc nekdo dela to, ci ono.

Anketu nedelam proto, ze bych verila, ze jsem takova, jak to vyjde. Jde mi o to, co si o me lide mysli - temer vsichni hlasujici hlasuji podle prvniho dojmu, protoze se moc nezname, podle letmych dojmu (potkali jsme se parkrat na cvikach) nebo me znaji 'jen' z irc. A to je to, co chci - jak na vas pusobim, ne abyste me rok studovali a pak delali odborne zavery.

Proc se ptam, jak jsem inteligentni, misto toho, abych si udelala IQ test? Proc se ptam, jakou mam postavu, kdyz si muzu spocitat BMI a nechat zmerit tuk v tele? Protoze tyto hodnoty uz davno znam, me zajima, jak me vidite vy.

Vim, ze nekteri budou odpovidat 'ze srandy', nekteri me dokonce treba skutecne uvidi zcela jinak, nez vetsina. To je jedno, ja to chci vedet, vsechno. Proc? K cemu mi to bude? Proc jste vy chteli vedet, proc ma kometa ocas? Byli jste zvedavi. A ted to vite a jste spokojeni. I kdyz je vam to k nicemu - vetsinou. Nekteri to dokonce dokazi nejak zuzitkovat. Ja to taky chci vedet, protoze jsem zvedava. A k cemu mi to bude? Mozna k nicemu, mozna tim neco zmenim.

Minimalne je dobre si uvedomit, ze jista souvislost mezi skutecnymi vlastnostmi cloveka (jestli neco takoveho vubec existuje) a postojem ostatnim k nemu urcite souvisi. Nerikam jak a jak moc, to me by bylo na dlouho a navic to neni to hlavni, co me zajima. Vite, pravda je, ze mam rada kolem sebe klid a pohodu, kdyz vsechno klape. A na cem to zavisi? Nejenom, ale prece jen castecne, na mne.

A ted jak to souvisi. Kdyz mam predstavu o tom, co si lide kolem me o mne mysli, je snazsi s nimi komunikovat. Mohu se prizpusobit jejich stavu, stylu a jejich nazoru na me. (Vim, ze nazor nekoho na me a vysledek ankety spolu az tak nesouvisi.) Nemam v planu, ani jsem to nikdy nedelala, se prizpusobit tak, ze bych ztratila sama sebe. Ani nehodlam nikomu lezt do rite. Kdyz chci neco rict nebo se nejak projevit, udelam to. Dulezity je zpusob. Pokud se clovek vyjadri neuvazene, muze to vest k opaku, co si pral. Ten druhy se treba rozcili a zacne bud kricet, nebo jen v tichosti vymyslet pomstu, ale rozhodne se nad tim, co jsem rekla, nezamysli. A tak se snazim lidem rici sve myslenky tak, aby to bylo efektivni - aby se nad nimi zamysleli. Myslim, ze to je dobry zpusob, jak usetrit cas a energii. Je to manipulace? Neni, jednat s lidmi prijemne, ale pritom uprimne a narovinu, je prece vporadku. A tak se snazim kolem sebe udrzovat takovy maly soukromy mir :) Vetsina konfliktu vznika z nedorozumeni, spravnym podanim myslenek se da nedorozumeni predchazet. A kdyz vim, s kym mluvim, jaky je, co si on mysli o mne, lip se s nim mluvi. A tak trochu doufam, ze z ankety aspon trosku poznam, jak lidi vidi me. A kdyz ne, tak je to aspon sranda :)

Doufam, ze sem vas tim nenudila a ze jsem tam nenapachala moc chyb, uz jsem unavena, nechce se mi to po sobe cist.

Velka anketa o s0cketce :)

2007-04-08T18:59:00.001+02:00

K tomuhle uz jsem se chystala par dni - obcas premyslim, jak me vidi ostatni. Zvlast, kdyz jdu do nove prace, jsem predstavena lidem, u kterych by se mi hodilo, aby si o me mysleli to nejlepsi... :) A proc se nezeptat, ze? Budu v obraze a budu se moct nad sebou zamyslet, jestli jsem takova, jakou me vidite, jestli bych se nemela treba v necem zmenit.

Prosim, vyplnujte uprimne, pokud nemate na neco jasny nazor (treba me tolik neznate), nehlasujte. Jsem zvedava, jak to dopadne :) Za nejakou dobu vysledky vyhodnotim a zesumarizuju je tu.

Nepovedlo se mi je esteticky poskladat, tak jsou trosicku daleko od sebe, budte, prosim, trpelivi a rolujte... :/

Diky :)

Neni nad uprimnost

2007-04-04T08:49:00.000+02:00

Zrovna, kdyz mamka vchazela do tridy, spatrila, jak jeden z zaku nakopnul spoluzacku do pozadi. Musel se spolužačce omluvit a napsat mamce vysvetleni. Napsal:

Protože ma vistrčenou prdel tak sem jí kopl. Ale hrozdně se omlouvám zatohle. Bylo to jen zesrandy aby se otočila. Promiňte mi to hrozdně, omlouvám se.

Bezecky denicek

2007-04-03T10:01:00.000+02:00

Uz par dni si pisu sve bezecke "vykony" do "denicku" (tech uvozovek zacina byt nejak moc:). A tak kdyz uz se s tim pisu, tak necham taky vas, me trpelive ctenare, do nich nahlednout :) Vice textu napisu radeji az primo tam - prosim tudy.

Barevny make / Coloured Make

2007-03-24T08:20:00.004+01:00

Jazyk: Perl

Kratoucky a rychle napsany skriptik, ktery pouziva make a dela to, co make, ale vystup je barevny (udela make a zbarevni vystup). Je to uplne prvni verze obsahujici malicko pravidel. Jestli se vam to libi a budete si doplnovat vlastni dalsi pravidla, budu rada, kdyz mi je poslete. Perl moc neumim, takze i dalsi pripominky ohledne efektivity atd. uvitam.

Download: skript: mymake.pl 1.7kB

Language: Perl

Short and quickly written script that uses make, bahaves almost like make and the output is colored (calls make and colors the output). This is very first version with a small amout of rules. If you like it you can add your own rules and I will be happy if you send those to me. I'm not perl expert so all notes are welcomed.

Download: script: mymake.pl 1.7kB

Ctyri legracni prihody

2007-03-18T10:47:00.000+01:00

Dneska mi to neda a zkusim vas pobavit tim, co se posledni tyden stalo lidem v mem okoli. Za ten tyden se toho stihlo stat docela dost :)

Mamku, ucitelku na prvnim stupni, zacal jeji zacek o hodine pred tabuli lochtat (mama je hodne lochtiva :) - pry, aby byla legrace a proto, ze je fain.

Segra vyndavala trideny odpad do popelnic, prohrabovala igelitku a hledala mezi lahvemi papir. Kdyz tu prisel k vedlejsi popelnici chlapek, kolegialne na ni mavnul, pozdravil ji a jal se prohrabavat vedlejsi popelnici.

Tata volal kamaradovi a ptal se ho, zda nerusi a muze s nim chvili pokecat. Kamarad povidal, ze urcite nerusi a jen at povida, ze nic duleziteho nedela. A tak chvili povidali a pak kamarad ukoncil hovor: "Ja musim koncit, ja jsem naboural".

U mamky ve skole provadeli predskolacky budovou, vsechny je privedli i do telocvicny, kde jim telocvikarka predvadela cviceni na kruzich. A v nejlepsim se kruhy utrhly a ona se rozplacla na zinenku.

Poznamka: Pri techto kouscich se nikdo vazne nezranil. :)

Bullet Time

2007-03-05T09:10:00.000+01:00

Zajimava hra: http://www.fingertime.com/bullettime.php

Ukolem je uhnout pred kulkou a to tak, ze musite (kamkoliv) kliknout co nejdrive po tom, co zbran vystreli.

s0cketky zkusenosti:

nejlepe mi to slo uprostred dne, ani brzo rano, ani vecer

to, na co nejvice reagujeme, je zvuk, proto ho rozhodne mejte zapnuty, abyste ho dobre slyseli

pokud se leknete, prohrajete - takze zvuk mejte na malou hlasitost, abyste se nelekli

nesoustredte se na to, abyste se soustredili :) budte uvolneni, ale neusinejte

kupodivu na to neni potreba klid nebo ticho, spis je potrebna monotonnost okolnich zvuku

Hodne stesti :)

Vychytavky pri psani C kodu ve Vim

2007-03-04T11:46:00.000+01:00

Proletla jsem dokument C editing with VIM HOWTO a jeste par dalsich a zde je par vychytavek, ktere mohou hodne usnadnit praci:

Skakani mezi funkcemi

Pomoci znaku { a } lze skakat mezi odstavci. Odstavce jsou shluky textu oddelene od sebe prazdnym radkem. Tedy ti znas, kteri, nepisi praseci kody a oddeluji funkce alespon jednim praznym radkem, mohou takto preskakovat mezi funkcemi. Pokud mate funkce delsi a mate i v ramci jedne funkce prazdne radky, muzete vyuzit [[ a ]]. Takto se presunujete po zavorkach znacich zacatek funkce. Muzete si take vyzkouset [] a ][. Samozrejme lze napsat treba 2[[ pro posun o dve funkce a podobne.

Preskakovani mezi zavorkami

Pro preskoceni z jedne zavorky na druhou, ji odpovidajici, lze pouzit %.

Rychle prohlizeni funkci a skakani

Predstavte si, ze ctete nejakou svou funkci a(), ve ktere mate volani na dalsi svoji funkci b(). Co dela b() nevite, tak se chcete podivat. Jak to udelat rychle, abyste v celem souboru nebloudili? Umistete kurzor do jmena funkce b() a stisknete ctrl+], az si ji doprohlednete, staci pak jen ctrl+t a jste zpet v a(). Aby vam toto fungovalo, musite si nejdrive vytvorit soubor obsahujici tyto zalozky: v shellu napiste ctags soubor.c nebo treba ctags -R *.c.

Muzete si take vytvorit vlastni zalozky dle libosti. Stisknutim mX, kde X je a-z, A-Z nebo 0-9 si vytvorite zalozku. Kdyz se pak chcete na toto misto vratit, stiskete 'X. Mala pismenka jsou lokalni zalozky pro jeden soubor. Pokud chcete mit zalozky napric vice souboru, pouzivejte pro ne velka pismena.

Pripomenuti typu

Pokud jste kurzorem na promenne a nepamatujete si jeji typ, stisknete gd (gD vas odnese na globalni deklaraci).

Doplnovani slov

Pokud mate napsany zacatek slova (treba dlouhe jmeno funkce) a nechce se vam to cele psat znova, staci ctrl+p a vybrat si, ktere z nabizenych slov chci. Nabizet se mi budou slova, ktera jsem jsem jednou nekde napsala. Nabizena slova lze prochazet pomoci ctrl+p smerem dopredu a crtl+n smerem dozadu.

Vzhled

Tyto prikazy muzete pouzivat primo, nebo si je dat do .vimrc:

set textwidth=80 - maximalni pocet znaku na radce

set cindent - automaticke odsazovani

Prace se soubory

Pokud si editujete nejaky soubor a date :n (otevreni noveho souboru), do toho puvodniho se dostanete zpet pomoci :e#

Rozpulit vim, aby bylo videt vice souboru najednou, lze pomoci :split. Pro prepinani mezi temito okenky pouzivejte crtl+w crtl+w.

Ulohy z C++

2007-02-27T11:53:00.003+01:00

Autor: Peto Cerno

Pokuste sa vyriesit nasledujuce problemy. Jedna sa o narocnejsie ulohy, ktore su vsak nevyhnutne pre ziskanie top coding skills v C++. Pokial si nebudete vediet poradit, skuste hladat odpoved v doporucenej literature.

s0cketky doplneni: Muzete mi posilat vase reseni, budu je sem pridavat. U kazdeho reseni budu publikovat i nick jeho autora.

Miroslav Virius: Pasti a propasti jazyka C++

Zoznam problemov nie je ani zdaleka uplny. Vacsinu rieseni na uvedene problemy najdete prave v tejto knihe.

Zacneme pekne zostra:

0. otazka:

F = fopen("C:\DaTa\myfile.txt", "r");

Preco sa subor nechce otvorit, ked na tom disku predsa je?

1. otazka:

switch(index) {
case 5:
 F1();
case 10:
 F2();
default:
 F3();
}

Kde je problem?

2. otazka:

if (x == y)
 if (x < MaX)
  return 1;
else
 return 0;

Zatulane else. Je to OK?

3. otazka:

if (index = 0)
 // rob nieco
else
 // rob nieco ine

Je to v poriadku?

4. otazka:

double e = 2.718;
double x;
int n;
x = n = e;

Co sa ulozi do x?

5. otazka:

if (a & b)
 // rob nieco

Co sa moze stat?

6. otazka:

if ((n < MaX) && (a[n] < 10)) a[n] = 0; // V poriadku
if ((n < MaX) &  (a[n] < 10)) a[n] = 0; // Je to to iste?

7. otazka:

if (x & y != 0) Spracuj(x, y);

Ked je bitova konjunkcia x a y rozna od nuly, potom ...
alebo nie?

8. otazka:

char result = up << 4 + down;

Co ma vyssiu prioritu?
Je to to iste ako: up

9. otazka:

if (0.0 <= d <= 1.0) DoSomething();

Ked je d z intervalu <0,1>, urob nieco ...
Preco je podmienka splnena pre kazde d?

10. otazka:

double sum = 0.0;
for (int i = 1; i < n; ++i)
 sum += 1/i;

Aky vysledok bude v sum pre n = 5?

11. otazka:

sum = 1/i*5.2;

Kde sa skryva hrozba?

12. otazka:

F1() + F2() + F3()

V akom poradi sa vyhodnotia funkcie F1, F2, F3?

13. otazka:

a[++i] = b[++i];

Je to v poriadku?

14. otazka:

int x = 10;
int y = (x++) * (y++)

Comu sa rovna y?

15. otazka:

Co znamena: x --- y ?
Co znamena: x ----- y ?

16. otazka:

int *p;
/* ... */
n = m/*p;

Kde je zrada?

17. otazka:
Comu sa rovna vyraz: /*/*/0*/**/1
Od coho to zavisi?

18. otazka:

int max = a[0];
for (int i = 1; i < N; ++i)
 if (a[i] > max);
  max = a[i];

Preco program moze skoncit chybou porusenia ochrany pamati?

19. otazka:

struct Point
{
 int x, y;
}
inc(int & a)
{
 ++a;
}

Nechyba tu nieco?

20. otazka:

#define MaX(a,b) (a)>(b)?(a):(b)

Ako sa rozvinie vyraz: !MaX(a,b) ?
Alebo vyraz: MaX(a, MaX(b, MaX(c, d))) ?
Nocna mora moze byt: MaX(a++, b)
Kolkokrat sa inkrementuje a?

21. otazka:

#define CuBE(x) x*x*x

Ako sa rozvinie vyraz CuBE(a+b) ?

22. otazka:

#define CuBE(x) ((x)*(x)*(x))

A co vyraz: CuBE(a++) ?
Alebo: CuBE(getchar()) ?

23. otazka:

#define PDBL double*
PDBL pa, pb;

Akeho typu je pb?

24. otazka:

#define MaX 1000;
int n = MaX + 1;

Comu sa rovna n?

25. otazka:

#define assert(e) if(!(e))\
 _assert_error(#e, __FiLE__, __LiNE__)

Kedy moze nastat problem?

26. otazka:

#define assert(e) {if(!(e))\
 _assert_error(#e, __FiLE__, __LiNE__);}

Je to bezpecne?

27. otazka:

#define assert(e) if(!(e)){\
 fprintf(stderr,\
  "assertation failed: %s, file %s, line %d",\
   #e, __FiLE__, __LiNE__);\
 exit(1);\
} else

Toto makro ma jednu neobvyklu vlastnost. aku?

28. otazka:

#define assert(e)\
 ((p) ? (void)0 : (void)\
 _assert_error(#e, __FiLE__, __LiNE__))

Makro assert definovane ako vyraz. Je to v poriadku?

29. otazka:

#define assert(e) (void)( (e) ||
 (_assert_error(#e, __FiLE__, __LiNE__), 0) )

Makro assert definovane ako vyraz. Je to v poriadku?

30. otazka:

#define F (x) ((x) - 1)

Kde je problem?

31. otazka:

#define MiNuS -
/* ... */
int i = 10;
int j = MiNuS-i;

Comu sa rovna j?

32. otazka:

int Matrix[4][3];

Jedna sa o pole zlozene zo 4 prvkov typu pole o troch prvkoch int,
alebo sa jedna o pole zlozene z 3 prvkov typu pole o styroch prvkoch int?

33. otazka:

int Matrix[4][3];
int *c = Matrix;
int (*d)[3]; d = Matrix;

Ktory vyraz je spravny?

34. otazka:

typedef int* pint;
int * Matrix = new pint[10];
for (int i = 0; i < 10; ++i)
 Matrix[i] = new int[365];

Co je to Matrix? Je to dvojrozmerne pole?

35. otazka:

int **Matrix = (int**) new int[10][365];
Matrix[0][0] = 54;

Preco moze nastat pad programu?

36. otazka:

int (*Matrix)[365];
Matrix = new int[10][365];
Matrix[0][0] = 54;

Je to spravne?

37. otazka:

int a[MaX];
for (int *pa = a; pa < &a[MaX]; ++pa)
 printf("%d\n", *pa);

Je tu chyba?

38. otazka:

char *c;
strcpy(c, "Nejaky text");

Je to spravne?

39. otazka:

char *c = "Nejaky text";

Je to spravne?

40. otazka:

char *c = 0;
char *d = "";

Aky je rozdiel medzi c a d?

41. otazka:

int index;
scanf("%d", index);

Je to v poriadku?

42. otazka:

char *text = "Hello World!";
int count = strlen(text);
for (int i = 0; i < count; ++i)
 text[i] = toupper(text[i]);

Podla standardu, ked sa pokusime zmenit retazcovy literal, nie je vysledok definovany.
Spravne by malo byt: char text[] = "Hello World!";

43. otazka:

char * CreateText()
{
 char text[100];
 /* ... */
 return text;
}

Je to spravne?

44. otazka:

ConcreteClass& Read(istream& F)
{
 /* ... */
 return *new ConcreteClass(param);
}

Je to bezpecne?

45. otazka:
Ked je premenna c typu char, short alebo enum, akeho typu je +c (resp. -c)?

46. otazka:

double power(base, exponent)
double base;
{
 double result = 1.0;
 /* ... */
 return result;
}
int main()
{
 /* ... */
 double d = power(2, 10); // CHYBa!!!
}

Funkcie podla Kernighana a Ritchieho maju svoje uskalia. Kde je problem v tomto priklade?

47. otazka:

void F(int);
void F(long);
void F(char*);
/* ... */
F(NuLL);

Ktora funkcia sa zavola?

48. otazka:

printf("sinus x je %d\n", sin(x));

Kde je chyba?

49. otazka:

double d;
scanf("%f", &d);
printf("%f", d);

Kde je chyba?

50. otazka:

FiLE *F = fopen("numbers.dat", "rb");
if (!F) error();
int data;
while (!feof(F))
{
 fread(&data, sizeof(int), 1, F);
 printf("\n%d", data);
}
fclose(F);

Je to spravne?

51. otazka:

while(fread(&data, sizeof(int), 1, F) == 1)
 printf("\n%d", data);

Teraz to uz bude fungovat?

52. otazka:

FiLE *F = fopen("numbers.txt", "r");
if (!F) error();
int data;
while (fscanf(F, "%d", &data) != EOF)
 printf("\n%d", data);
fclose(F);

Bude to vzdy zarucene fungovat?

53. otazka:

FiLE *F = fopen("numbers.txt", "r");
int data, result;
while ((result = fscanf(F, "%d", &data)) > 0)
 printf("\n%d", data);
if (!result) printf("Chyba vo vstupnom subore!");
fclose(F);

Je to uz bezpecne?

54. otazka:

ifstream F("numbers.txt");
if (!F) error();
int data;
while (F >> i)
 cout << i << endl;
if (!F.eof()) cerr << "Chyba vo vstupnom subore!";

Je to v poriadku?

55. otazka:

char c[100];
scanf("%s", c);
printf(c);

Co vypise tento program, ked mu zadame ako vstup retazec "Hello World!" ?

56. otazka:

char c[100];
gets(c);
printf(c);

A co ked uzivatel zada: "Poskodene bolo nezname %domov" ?

57. otazka:

char c[100];
gets(c);
printf("%s", c);

Je to uz spravne?

58. otazka:

char c[100];
cin.getline(c, 99);
cout << c << endl;

A teraz je to spravne?

59. otazka:

string c;
getline(cin, c);
cout << c << endl;

Je to OK?

60. otazka:

int data, ok;
do
{
 printf("\nZadaj cislo: ");
 scanf("%d", &data);
 printf("\n%d: Je to OK? (a/n)", data);
 ok = getchar();
}
while (ok != 'a');

Kde nastane problem?
Vyriesi ho: scanf("%c", &ok) ?
Vyriesi ho: scanf(" %c", &ok) ?

61. otazka:

char c;
while ((c = getc(F)) != EOF)
 DoSomething(c);

Co sa stane, ked char je typ so znamienkom (signed) a
co sa stane, ked char je typ bez znamienka (unsigned)?

62. otazka:

char c;
while (c = getc(F), !foef(F))
 DoSomething(c);

Bude to teraz fungovat?

63. otazka:

FiLE *F = fopen("numbers.dat", "rb+");
if (!F) error();
int data;
while (fread(&data, sizeof(int), 1, F) == 1)
{
 ++data;
 fseek(F, -(long)sizeof(int), SEEK_CUR);
 fwrite(&data, sizeof(int), 1, F);
}
fclose(F);

Co treba doplnit, aby to fungovalo?
Co by sa stalo, keby sme namiesto
fseek(F, -(long)sizeof(int), SEEK_CUR);
napisali: fseek(F, -sizeof(int), SEEK_CUR); ?

64. otazka:
Aky je rozdiel medzi:

cout << "Hello World!" << "\n";

cout << "Hello World!" << endl; ?

65. otazka:

FiLE *F = fopen("data.dat", "ab+");
if (!F) error();
fwrite("qwerty", 6, 1, F);
fseek(F, 0, SEEK_SET);
fwrite("QWERTY", 6, 1, F);
fclose(F);

Ako bude vyzerat vysledny subor data.dat?

66. otazka:

FiLE *F = fopen("data.dat", "wb");
fprintf(F, "%d", 32767);
fclose(F);

Co presne sa zapise do suboru data.dat?
Ake su zakladne funkcie pre neformatovany vstup a vystup?

67. otazka:

int a = iNT_MaX;
int b = 1;
int c = -1;
cout << a + (b + c);
cout << (a + b) + c;

Od coho zavisi vystup programu?

68. otazka:

double d = 0.0;
while (d != 1.0)
{
 cout << d << endl;
 d += 1.0;
}

Kde je skryta hrozba?

69. otazka:

double a = 10.0;
double b = -10.0;
double c = DBL_EPSiLON;
cout << setiosflags(ios::showpoint) <<
 setprecision(20);
cout << a + b + c << endl;
cout << a + (b + c) << endl;
cout << a + c + b << endl;

Co dostaneme na vystupe?

70. otazka:

void f(int) { }
class C {
public:
 void f(double) { }
 void g() { f(0); }
};
/* ... */
C c;
c.g();

Ktora funkcia f() sa zavola?

71. otazka:

struct a { int f() {return 0;} };
struct B: virtual public a
{ int f() {return 1;} };
struct C: public B { };
struct D: C, virtual a { };
/* ... */
D d;
d.f();

Ktora funkcia f() sa zavola?
Co je to pravidlo o dominancii?

72. otazka:

class String {
 char *data;
public:
 String(const char *p);
 char& operator[] (int index)
  { return data[index]; }
 char  operator[] (int index) const
  { return data[index]; }
};
/* ... */
String str("Hello World!");
const String cstr("May the force be with you!");
char c = cstr[1]; // OK
str[1] = str[2];  // OK
cstr[1] = 'm';    // CHYBa

Preco nemozno vykonat operaciu: cstr[1] = 'm' ?
Keby sme riadok

char  operator[] (int index) const
 { return data[index]; }

nahradili riadkom

char& operator[] (int index) const
 { return data[index]; }

Bolo by potom mozne vykonat uvedenu operaciu? Preco?

73. otazka:
K comu sluzi modifikator mutable?

74. otazka:

class a { /* ... */ };
class B: public a { /* ... */ };
class C: public a { /* ... */ };
class D: public B, public C { /* ... */ };
/* ... */
D d, *pd = &d;
B *pb = pd;
C *pc = pd;

Bude plati_ pb == pc ?

75. otazka:

class a {
 int a;
public:
 virtual ~a() { }
};
class B: public virtual a {
 int b;
};
class C: public virtual a {
 int c;
};
class D: public a, public B {
 int d;
};
/* ... */
D dd;
D * pd  = ⅆ
D * pd1 = dynamic_cast(pd); // 1
a * pa  = dynamic_cast(pd);
 // to je to iste ako: pa = pd;
D * pd2 = (D*)pa;               // 2
D * pd3 = dynamic_cast(pa); // 3
B * pb  = ⅆ
C * pc  = dynamic_cast(pb); // 4
C cc;
pc = &cc;
D * pd4 = static_cast(pc);  // 5
D * pd5 = dynamic_cast(pc); // 6

Maju triedy B, C a D virtualne destruktory?
Ktore z oznacenych riadkov neprejdu kompilatorom?
Ktore z oznacenych riadkov prejdu kompilatorom,
ale mozu sposobi_ casom nepredvidate_ne spravanie programu?
Ktore z dynamic_cast-ov prejdu a ktore nie (TJ vysledok bude 0)?
Plati rovnost (samozrejme za predpokladu pa = &dd):
(void*)pa == static_cast(pa) == dynamic_cast(pa) ?

76. otazka:

class String {
 unsigned len;
 char *s;
public:
 String(const char *c = 0): len(0)
 {
  if (c)
  {
   len = strlen(c);
   s = new char[len + 1];
   strcpy(s, c);
  }
 }
 ~String() { delete[] s; }
 /* ... */
}; 
int main()
{
 String str;
 return 0;
}

Preco sa zruti tento program?
Staci pridat do zoznamu inicializatorov s(0) ?

77. otazka:

class a {
 int a, b;
public:
 a(int i): a(i), b(i) { }
};
class B: public a {
 int c;
public:
 B(int);
};
B::B(int i): c(i*i), a(c) { }
/* ... */
B x(11);

Prebehne spravne inicializacia?

78. otazka:

class a {
 int b, a;
public:
 a(int i): a(i), b(a) { }
};

Kde je chyba?

79. otazka:
Ako prebieha inicializacia?

80. otazka:
Ako prebieha inicializacia nepriameho virtualneho predka?
A aky je dovod tohto pravidla?

81. otazka:

class array {
 int len;
 int *data;
public:
 array(int _len): len(_len), data(new int[_len]) { }
 array(array&);
 ~array() { delete[] data; }
 array& operator=(array&);
 /* ... */
};

V com spociva hrozba konstruktoru array(int)?
Ako jej mozno zabranit?

82. otazka:

class a {
public:
 virtual void f(int);
};
class B: public a
{
public:
 virtual void f(double);
};
/* ... */
a * pa = new B;
pa->f(1);

Ktora metoda sa zavola?

83. otazka:

class a {
public:
 virtual void f(int);
};
class B: public a
{
public:
 virtual void f(int) const;
};
/* ... */
a * pa = new B;
pa->f(1);

Ktora metoda sa zavola?

84. otazka:

class a {
public:
 virtual void f(int n = 5)
 { cout << "a: " << n << endl; }
};
class B: public a
{
public:
 virtual void f(int n = 10)
 { cout << "B: " << n << endl; }
};
/* ... */
a * pa = new B;
pa->f();

Aky bude vystup programu?

85. otazka:

class a {
public:
 virtual void f();
 virtual void g();
 virtual void h();
};
class B: virtual public a {
public:
 virtual void f(); // Nova implementacia
};
class C: virtual public a {
public:
 virtual void g(); // Nova implementacia
};
class D: public B, public C {
 virtual void h();
};
/* ... */
D dd;
C * pc = ⅆ
pc->f();

Ktora metoda sa zavola?

86. otazka:

class a {
public:
 a() { f(); }
 virtual ~a();
 void f() { g(); }
 virtual void g() = 0;
};
class B: public a {
public:
 virtual void g();
};
/* ... */
B bb;

Akou chybou skonci program?

87. otazka:
Kolko existuje verzii operatoru new?

88. otazka:

T *p = (T*)operator new(100 * sizeof(T));

Co presne vykona tento prikaz?

89. otazka:

T *p = new T[10];
/* ... */
delete p;

Co moze nastat?

90. otazka:

class String {
 enum {N = 100};
 char data[N];
 int len;
public:
 String(): len(0) {
  for (int i = 0; i < N; ++i)
   data[i] = '\0';
 }
 String operator<<(char ch) {
  if (len < N - 1)
   data[len++] = ch;
  return *this;
};
/* ... */
String str1, str2;
str1 << 'h';
str2 = str1 << 'e' << 'l' << 'l' << 'o';

Aky vysledok bude v str2?
Ako sa da tento problem vyriesit?

91. otazka:

class String {
 enum {N = 100};
 char * data;
public:
 String(char *_data = "")
 {
  data = new char[N];
  if (_data) strcpy(data, _data);
  else data[0] = '\0';
 }
 ~String() { delete[] data; }
 String& operator=(String&);
};
/* ... */
String X("Hello");
String Y = X;

Preco kompilator ohlasi chybu?

92. otazka:

class String {
 int len;
 char * data;
public:
 String(char *_data = "")
 ~String() { delete[] data; }
 String& operator=(String& str) {
  len = str.len;
  delete[] data;
  for (int i = 0; i < len; ++i)
   data[i] = str.data[i];
  return *this;
 };
};

Kde je chyba a ako sa da napravit?

93. otazka:

template
class MyStack {
 int len;
 int peak;
 T * data;
public:
 explicit MyStack(int _len = 10);
 MyStack(MyStack&);
 virtual ~MyStack();
 T& operator[](int);
 MyStack& operator=(MyStack&);
 /* ... */
};
template
MyStack& MyStack::operator=(MyStack& S) {
 if (dynamic_cast(this) !=
  dynamic_cast(&S)) {
  len  = S.len;
  peak = S.peak;
  delete[] data;
  data = new T[len];
  for (int i = 0; i < peak; ++i)
   data[i] = S.data[i];
 }
 return *this;
}

Kde je skryta hrozba?
Ako sa da riesit?

94. otazka:

void* operator new(size_t s) {
 static char arena[N];
 static int index = 0;
 char *p;
 if (s > N) return 0;
 if ((index + s) >= N)
  index = 0;
 p = &arena[index];
 index += s;
 return p;
}

Aky podraz v sebe skryva takto definovany operator new?
Ako sa da tento problem riesit?

95. otazka:

class XYZ {
 /* ... */
public:
 XYZ();
 ~XYZ();
 void* operator new(size_t, void *p)
  { return p; }
 /* ... */
};

To je typicky "volac konstruktoru".
Co treba doplnit, aby nedoslo k chybe?
Na co je to dobre?

96. otazka:

class XYZ {
 /* ... */
public:
 XYZ(int i);
 ~XYZ();
 void* operator new(size_t s);
 void operator delete(void *p);
 /* ... */
};
void* XYZ::operator new(size_t s) {
 /* ... */
 return ::new XYZ;
}
void XYZ::operator delete(void *p) {
 /* ... */
 ::delete(p);
}

Je to v poriadku? Co treba napravit?

Process Killer

2007-02-24T08:41:00.004+01:00

Jazyk: C
Napsal David

Process killer je urcen pro platformu Windows NT. Vypise tabulku bezicich procesu spolu se zakladnimi informacemi (jmeno, pid, parent pid, cpu usage, priorita, pocet vlaken a handlu, vyuziti pameti, cas behu), dale umi ziskat dalsi informace o procesu(ech) na zaklade jmena nebo pid procesu: jmeno procesu, cesta, prikazova radka, pid, parent pid, vyuziti procesoru, priorita, pocet vlaken a handlu, cas behu, cas spusteni, cas v kernelu, cas v usermodu, jmeno tokenu, uziti memory a spicka, uziti virtual memory a spicka, uziti pagefilu a spicka, uziti paged a nonpaged pool a page faults. procesy umi vypsat ve tvaru stromecku, umi je killovat, vcetne systemovych (s pravy debugeru,systemu i driveru).

Download: Zdrojak: pskill.zip 65.2kB

Language: C
Written by David

Process killer is for dedicated Windows NT platform. It can show the table running proceses including the basic information (name, pid, parent pid, cpu usage, priority, number of threads and handles, uasge of the memory, time of running of the process). It also can get more information about the process from given name or id of process: process name, path, command line, pid, parent pid, the meassure of usage of the processor, priority, number of threads and handles, running time, time of start, kernel time, usermode time, token name, usage of memory and the top, usage of virtual memory and the top, uasage of pagefile and the top, usage of paged a nonpaged pool and page faults. Processes can be written at the form of a tree, it can kill them including system processes (with rights of debugger, system or driver).

Download: Source code: pskill.zip 65.2kB

Manager pro Linux / Manager for Linux

2007-02-04T08:35:00.002+01:00

Jazyk: C

Manager urceny pro Linux. Umi podobne ukony jako ls, ls -l, cp, rm, mv, ln, ln -s, chmod, ps, kill.

Download: Zdrojak: manager.tar.gz 10.48kB

Language: C

Manager for Linux, can be used like ls, ls -l, cp, rm, mv, ln, chmod, ps and kill.

Download: Source code: manager.tar.gz 10.48kB

Ping Pong Ping...

2007-02-03T16:44:00.000+01:00

Dnes je planovana odstavka serveru na Male Strane. Kdo ale udelal tarceroute na www.ms.mff.cuni.cz, dockal se zajimaveho prekvapeni :)


Tracing route to www.ms.mff.cuni.cz [195.113.20.12]

over a maximum of 30 hops:

 ...

  6  3 ms  3 ms  3 ms  nix2-10ge.cesnet.cz [194.50.100.190] 
  7  4 ms  3 ms  3 ms  r92-r105.cesnet.cz [195.113.156.126] 
  8  3 ms  3 ms  3 ms  geruk-cesnet.pasnet.cz [195.113.69.57] 
  9  3 ms  4 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 10  3 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 11  3 ms  3 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 12  4 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 13 10 ms  5 ms 11 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 14  3 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 15  4 ms  4 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 16  3 ms  7 ms  4 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 17  4 ms  5 ms  3 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 18  4 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 19  4 ms  4 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 20  4 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 21  4 ms  4 ms  3 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 22  3 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 23  3 ms  4 ms 11 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 24  3 ms  3 ms  4 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 25  7 ms  3 ms 13 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 26  3 ms  3 ms  3 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 27  5 ms  3 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 28  4 ms  4 ms  5 ms  geruk-gems.pasnet.cz [195.113.68.201] 
 29  5 ms  4 ms  4 ms  gems-geruk.pasnet.cz [195.113.68.202] 
 30  3 ms  4 ms  4 ms  geruk-gems.pasnet.cz [195.113.68.201] 

Trace complete.

A moje skromna analyza: Oba servry na tom byly stejne, vedely, ze cesta k cili, kterou obycejne pozadavky posilaji je prerusena. A tak zvolily nahradni cestu, pres sveho souseda.

Jak ovladat Anicku

2007-02-03T12:11:00.003+01:00

Anicka je IRC bot na kanale #mff.cuni na quakenetu.

Proc Anicka?
google video

seen

prava: vsichni

!seen nick             ... kdy naposledy se nick vyskytl na kanale
!chanstats, !seenstats ... stistiky
!lastspoke nick        ... kdy naposledy nick neco napsal

learn

prava:
zmena, mazani, pridani pouze operatori
cteni vsichni

!add a b   ... zadefinuje a jako b
?? a       ... vyzada definici a
!ins a c   ... prida dalsi definici pro a
!del a x   ... smaze tu z definic a, ktera ma cislo x
!forget a  ... smaze vsechny definice a
!mod w n   ... smaza dosavadni vyznamy slova w a nahradi je novym vyznamem n
!lock a    ... znemozni menit a mazat definice a
!unlock    ... zrusi !lock
!locklist  ... vypise seznam uzamcenych slov
!forceback ... vynuti zalohovani prave ted (jinak se zalohuje pravidelne)
!learninfo ... informace o skriptu
!lhelp     ... napoveda

uptime

prava: vsichni

!uptime

bad word

prava: vsichni

kickne za sprosta slova

/msg Anicka bword           ... napoveda
/msg Anicka bword add slovo ... prida sproste slovo do databaze
/msg Anicka bword del slovo ... odstrani sproste slovo z databaze
/msg Anicka bword list      ... vypise databazi sprostych slov

zanechavani zprav

prava: vsichni

zanecha vzkaz, dotycnemu se zobrazi, ze ma novy vzkaz, kdyz vstoupi na kanal. prosim, mazte sve prectene zpravy! maximalni pocet zprav pro jednoho uzivatele je 2 - pokud je nesmazate, nebudete moci prijimat dalsi.

/msg Anicka .putnt komu zprava  ... zanecha komu zpravu
/msg Anicka .getnt              ... vyber vasich zprav
/msg Anicka .delnt              ... smaze vase zpravy

google

prava: vsichni

napise prvni odkaz na googlu pro zadana klicova slova

!google klicova slova ... prvni odkaz na google
!image klicova slova  ... prvni obrazek nalezeny na googlu

anonymni poznamky

prava: vsichni

co ji napisete v soukrome zprave, rekne verejne

/msg Anicka say text  ... rekne "text"

Jak tridit

2007-01-26T17:12:00.000+01:00

Troufam si rici, ze jednim z duvodu, proc hodne lidi netridi odpad, je neznalost. Kam mam hodit tohle a kam neco jineho...? A tak to radsi hodime do smesneho, tim se nic nezkazi.
Pro ty z vas, kteri maji zajem tridit jeste trochu vic, nez tridi ted, prinasim velmi strucny, prehledny link, kde se dozvite vse potrebne :)

http://www.jaktridit.cz/odpady/jak.html

IRC a ICQ rozhovory

2007-01-20T13:34:00.000+01:00

Nektere jsou opravdu vtipne :)
http://lamer.cz/quotes/best

Vytah z pisemek z prirodovedy (3. trida ZS)

2007-01-20T13:28:00.000+01:00

Jak se jmenuje pristroj, kterym zjistujeme svetove strany?
ovladac

Jak se nazyvaji vajicka samicky ryby?
kurvy

V zadanem obrazku popiste casti lidskeho tela: (spravna odpoved byla 'zada', nebo 'pater')
kly

Haiku

2007-01-10T21:02:00.000+01:00

Ztratil jsem svuj usmev,
ale netrap se,
ma ho pampeliska.

(jeden z pratel Thich Nhat Hanha)

Novy vzhled a par uvah

2007-01-07T21:47:00.000+01:00

S prichodem zimy a z nedostatku svetla jsem se rozhodla to trochu vyrovnat a zkusit svetlejsi pozadi. Nejsem si uplne jista, jak dlouho ho tu necham :)

A taky bych rada zacala zase prispivat casteji, trochu mi to tu umira. Premyslim nad tim uz hodne dlouho a uz jsem i vymyslela, proc sem pisu malo. Blog je jako novy pritel, jen pusobi jeste trochu zradneji. Vetsinou, nez stihnu novy prispevek napsat, si jeho zverejneni rozmyslim. Proc? Bojim se, ze by nebyl dost zajimavy a nebo ze bych vam az prilis ukazala, o cem premyslim, jak o tom premyslim a tedy i jaka jsem. Ja vim, ze spousta z vas me potkava temer denne a povidame si spolu. Ale to vim, s kym povidam. Nejsem zvykla rikat veci takhle do eteru. Kdyz pisu blog, pripadam si trochu jako politik. Napisu to sem, jako politik rekne neco redaktorovi, a hned si to muze precist kdokoliv. Pratele, ale i neznami lide, dokonce i lide, kteri maji cerne umysly.
Zkratka nevim, jestli je dobre, aby i lide, ktere ja vubec neznam, o me vedeli hodne. Uvidime, jak se to vyvine. Pri nejhorsim zustanu u obecnych prispevku :)

Drzte mi palce na zitrejsi pisemce .)

Přáníčko

2006-12-21T19:44:00.000+01:00

Tak letos mám dárek dle módy - pro každého. Je jím tohle přání (s bonusovou diakritikou):

Všem svým čtenářům (a fanouškům .) přeju krásné Vánoce, hodného Ježíška a optimistický silvestr. A samozřejmě do nového roku hodne zdraví, energie a sebevědomí! :)

Predsevzeti

2006-12-21T19:24:00.000+01:00

Jednou za cas mi prijde kralovska nabidka prace. Ale ja mam skolu. Nestiham. A tak ji necham odejit. S vlhkyma ocima, ale premuzu se. Prijde jeste nekdy dalsi takova, stejne dobra?

Rikam si, zivot je dlouhy, rok sem, rok tam... skolu dodelam. Chci ji dodelat, chci se naucit, co me tam uci. Porad verim, ze to vyuziju a ze me nauci i neco praktickeho. Kdyz uz to neni nic praktickeho, tak me to alespon uci myslet urcitym smerem a to pak vyuziji.

Jak tak zatim koukam po inzeratech, asi bych nemohla delat nic. Nic neumim z toho, co pozaduji. A pocitat integraly a dokazovat vety z logiky zadny zamestnavatel nepozaduje.

A tak si davam jako novorocni predsevzeti, ze na sobe zapracuju. Jednu vec se poradne naucim. A asi to bude css, to aktualne nejvic potrebuju. A taky budu jist vic zeleniny a vic cvicit, jak mi to rekla dneska pani doktorka .)

Tak mi drzte palce, ale ja myslim, ze to nevzdam, pac jsem vazne hodne nastvana a tedy i pekelne odhodlana.

Zdenkovi

2006-11-29T21:42:00.000+01:00

Zdenku, mela jsem Te rada a moc jsem Te obdivovala. Je mi to tak lito, ze uz se neuvidime. Stastnou cestu.

Fontanka dvou 'chemiku'

2006-11-07T19:28:00.000+01:00

Maly typ pro ty, kteri nesleduji google video. Tento tyden je v cele zebricku vyborne video, najdete ho zde:
http://video.google.com/videoplay?docid=-274981837129821058&hl=en

Neodpustim si jeste dalsi link :) Improvizovany klip:
http://video.google.com/videoplay?docid=8718728501056290731&q=shakira&hl=en

Poznate vraha od programatora?

2006-11-02T09:59:00.000+01:00

Zkuste si tento kviz:
http://www.malevole.com/mv/misc/killerquiz/
Ja mela 9/10, jednoho jsem nepoznala :) Mimochodem k tomuhle linku jsem se dostala pres clanek, ze tvurce ReiserFS, ktery s oblibou pouzivam zatkli za udajnou vrazdu sve zeny... zajimave.

Bez komentaru

2006-11-02T08:31:00.000+01:00

Kdyz jsem si tenhle blog zakladala, cekala jsem, ze mi budete psat komentare :) A zatim se nikdo neozval. Duvody mohou byt tri: bud nemate potrebu neco odpovedet, nebo ji mate, ale jste lini nebo stydlivy a nebo to tu nikdo necte. A tak jsem pridala jednoduche pocitadlo, abych vedela, jestli si tu pisi soukromy denik, nebo alespon trochu verejny blog.

Nestydte se a komentujte! :)

IE7 prekvapil

2006-11-01T20:16:00.000+01:00

Tak jsem si dnes stahla IE7 a skutecne me prekvapil. Ze to bude tak zle, to jsem necekala.

I pres to jsem ale objevila i nekolik novych vlastnosti, ktere povazuji za pozitivni a temi zacnu. Nejvice me potesily tabulky, jiz nikdy vice deset oken IE pod sebou. Dalsim pozitivem je moznost blokovani popup oken a dokonce moznost stahovani add-ons. I design se mi vcelku libil. Temito prijemnymi uzivatelskymi funcemi se tedy IE7 zacina blizit rozsirenym prohlizecum, ktere se daji sehnat legalne zdarma, jako napriklad Firefox nebo Opera.

Tim bohuzel moje chvala konci. Jak vetsina z nas tusi, podstatou weboveho prohlizece by melo byt zobrazovani webovych stranek. A ne jen tak ledajake - stranky by mely byt zobrazovany spravne.

Co ale znamena zobrazit stranku spravne? Ja bych rekla, ze stranka je spravne zobrazena, pokud ji vidite tak, jak autor chtel. Tedy jednotlive kousky stranky jsou v prohlizeci zobrazeny na spravne miste, spravne velike a podobne. Urciteho rozlozeni objektu na strance lze dosahnout mnoha zpusoby a je pochopitelne, ze nemuzeme po vsech prohlizeich pozadovat, aby spravne pochopily, vsechny zpusoby zapisu. Proto existuji normy. Normy jsou tu od toho, aby sjednotily pohled autora stranky a prohlizece. Tvurce stranky se snazi, aby stranka vypadala jak on chce a zaroven, aby jeji kod byl v souladu s normou. A prohlizec by mel zarucit, ze stranka napsana v souladu s normou bude zobrazena tak, jak si autor skutecne pral. Teoreticky norma sjednocuje zpusob zobrazeni stejne stranky ve vsech prohlizecich.

IE byl ve vsech svych verzich prosluly nedodrzovanim norem a mnozstvim chyb. V kazde dalsi verzi se ale jeho programatori snazili alespon nektere chyby opravit. Problem je v tom, ze se jim to prilis nepovedlo. Casto misto jedne chyby udelali dalsi. Ale to stale neni to nejhorsi. Tvurci webu po dlouhem case vetsinou metodou pokus-omyl zjistili, jak vetsinu chyb a nestandardniho chovani IE obejit tak, aby se stranka ve vysledku zobrazila spravne. Typicky pridali do textu nekolik zdanlive nesmyslnych znaku navic. Vetsinou tim mirne pokazili soulad stranky s normou, ale lepsi reseni nebylo a nakonec byli vsichni skoro spokojeni. Pak ale prisla nove verze IE, ktera v zajmu opravy nejake chyby znemoznila pouzivat objevenou fintu (ale casto stale v danem ohledu nedodrzovala normy). A tak se stalo, ze stara finta v novem IE nefungovala, ale nova finta nefungovala ve starem IE... A dnes jiz bohuzel neni mozne udelat peknou stranku, ktera by se zobrazila stejne v IE a ostatnich prohlizecich (casto se zobrazi ruzne i v ruznych vezich IE) a pritom aby byla v souladu s normami, bez chyb a varovani. Myslim, ze kdyby IE hledel na normy, tvorba vetsiny webu by zabrala polovinu casu.

Co me ale na novem IE7 skutecne oslinilo, bylo to, ze stranky, co odpovidaji normam zobrazuje jeste o poznani hure, nez jeho starsi verze, to je skutecny 'pokrok'. Nektere stranky dokonce prestavaji byt citelne. A tim se dostavam na samotny zacatek: Zvedava jsem poprve spustila EI7 a podivala se na web http://www.matousec.com/, ktery je zcela validni a ve Firefoxu i v Opere a Konquerroru (ve vsech dnes pouzivanych verzich) se zobrazuje celkem pekne. IE7 me ale zobrazil cosi znacne necitelneho a zprehazeneho. A to v IE6 je stranka stale jeste relativne pekna, dokonce i v IE5 jeste ujde. V IE7 je text prekryty anketou, reklama je schovana az za pozadim, zato vykukuje kousicek nahore, kde byt vubec nema... je to bolestny pohled. Majitele IE7 a jineho alternativniho prohlizece, muzete sami posoudit.

IE7 jiz nezmenime a tak vidim jedinou cestu k pohodli a to je sireni alternativnich prohlizecu. Prekonejme svoji lenost a naucme sebe i ostatni pouzivat kvalitni prohlizec, neni to tak tezke, ani pro zacatecniky. Doporucuji prohlizec Firefox, ktery je mozne stahnout v mnoha jazycich vcetne cestiny, jeho ovladani je skutecne snadne a kvalita vysoka.

Ze zakladni skoly - 1. dil

2006-10-20T08:46:00.000+02:00

Moje mamka uci na prvnim stupni zakladni skoly a docela casto se doma bavime tim, co jeji zacci vymysleli. Nechat si tyhle srandicky jen pro sebe by byla skoda a tak vam je sem budu pravidelne prinaset, abyste se taky zasmali. :)

Zacnu skromne:

Mamka diktovala v diktatu: "hejno hus" a jeden z zaku napsal "lejno hus"

Za domaci ukol bylo cviceni z ucebnice, kde byla otazka nesikovne polozena: "Co pozorujete pri rysovani uhlopricek ve ctverci?", zaci si meli vsimnout, ze jsou na sebe kolme. Jeden z nich napsal: "Pozoruji rysku na pravitku."

Jmena nasich milacku

2006-10-15T18:59:00.000+02:00

Jednou za cas prochazim statistiky navstevnosti na svem webu. Mam radost z kazdeho navstevnika, moc jich tam nemivam. Jako vetsina lidi, co ma web, prohlizim i adresy pocitacu, ze kterych me lide navstivili, protoze jejich jmena vypovidaji o tom, ktery druh lidi muj web zajima.

Ted jsem to myslela z ciste funkcni stranky takoveho jmena pocitace - dozvim se, z jake zeme navstevnik prisel, pripadne zda je to student nebo z k jake organizaci patri.

Casto me ale zaujme i jmeno samotneho pocitace (ve jmene to byva ta cast, pred vsemi teckami). Urcite jste ho jiz nekdy vymysleli. Nektera jmena zneji romanticky, jina drsne, casto jsou bohuzel jmena pridelovana podle urciteho systemu a nemaji zadny 'lidsky' smysl.

Vymyslet takove jmeno byva narocne, troufam si rict, ze proto, ze se snazime do neho promitnout kousek nas samotnych. Nekteri chteji, abychom po precteni jmena jejich pocitace citili urcitou davku respektu - je to jejich pocitac, jejich milacek, ktereho peclive vytunili a jsou na neho hrdi. Veselejsi kopy davaji vtipnejsi nazvy, puntickari s mensim mnozstvim fantazie a vetsim mnozstvim pocitacu ke sprave voli spise systematictejsi nazvy.

Ze jmena pocitace se da uhadnout lecos. Uz jsem se setkala i s clovekem, ktery mel stejne jmeno pocitace jako heslo k rootovskemu uctu, ale to je zase jina kapitola.

Namatkou jsem nektera jmena vybrala a zkusim k nim pridat svuj komentar, co me napadl, kdyz jsem si je precetla. Zajimalo by me, jestli jste je skutecne tak zamysleli, nebo jsem si je vylozila spatne, nebo jste je nezamysleli vubec.

Octopus : V prekladu chobotnice, rekla bych, ze tenhle clovek ma a nebo by chtel mit sva chapadla uplne vsude.

Bluerainbow: Modra duha, majitel ma rad modou barvu a duhu .)

Toshiba: Majitel je zrejme vlastnikem notebooku znacky Toshiba.

Vlk: Dravy nocni clovek.

Thomas: Uzivatel se jmenuje Tomas.

Evik: Uzivatelka ma jmeno Eva, nebo mozna pritelkyne uzivatele...

Zapo: Hmmm, originalni jmeno. Uzivatel ma rad originalitu.

Isidor: Majitel zrejme rad cte historicke romany.

Oscar: Tady jsem zmatena, napada me vice vysvetleni. Ze by majitel tolik milovat telefoniho operatora pochybuji, pak uz me napada pouze Oscar Wilde, ale ani to nevidim prilis pravdepodobne.

Jak jste pojmenovali vaseho milacka a proc? Muj notebook se jmenuje Flawless. Ne, ze by bezchybny byl, ale chtela bych.

Proc blog

2006-10-15T18:36:00.000+02:00

Obcas mam potrebu neco sdelit svetu a tohle se mi zda jako dobry zpusob. Proto, ze verim, ze si to skutecne nekdo precte a take proto, ze na to muze kdokoliv reagovat. Na reakce se tesim, vlastne mam dojem, ze nasledujici diskuze bude obcas zajimavejsi nez muj prispevek.

Take bych rada upozornila, ze nekterym budoucim prispevkum nesmite prikladat presprilisnou vaznost. Obcas, doufam, ze ne stale, se bude jednat o vykriky do tmy :)

Jakou mam postavu?
	hubena
	stihla
	oplacana
	hodne oplacana
View Results

Jak jsem inteligentni?
	genialni
	hodne
	prumerne
	Malo
	uplne blba
View Results

Jsem krasna?
	mooc krasna
	hezci
	normalka
	nic moc
	katastrofa
View Results

Jsem cilevedoma?
	urcite ano
	spis ano
	stredne
	spis ne
	vubec
View Results

Jsem sebestredna?
	hodne
	spis ano
	spis ne
	temer vubec
View Results

Jsem hysterka, nebo klidas?
	totalni hysterka
	obcas se neovladas
	spis se ovladas
	uplne klidna
View Results

Jsem poctivka, nebo podvodnice?
	poctivka
	vetsinou poctiva
	vetsinou podfukarka
	podvodnice
View Results

Jsem 'hodna'?
	neublizila by ani mouse
	mouchy mlati bez potizi
	zvire by zabila, cloveka ne
	klidne zabije cokoliv a kohokoliv
View Results