Combining dual identity routing and isolated interfaces revisited

Back in DualIdentityIsolation , I described how I set up a dualidentity machine so that it had isolatedinterfaces . In it I wrote:

Alas, I am now left with a mystery: according to the policy routingrules, it looks like a packet from IP1 to an address on that subnetshould get routed via the gateway (and similarly for the othernetworks), [....]

You know what? I should have paid more attention to the mystery,because as it turns out such packets were


歌詩吧漫遊 Gili Gulu 2
















歌詩吧漫遊 Gili Gulu 2
日期: 2008年 12 7 日(星期 )
時間: 下午4時正
地點: 大埔普益街 Gili Gulu 酒吧

內容:
發仔(陳偉發)+EDMUND+阿存(何柏存)+JENNY+老飛(潘志雄)+大量音樂陸續有來......丸仔.....

來自

烽火台是抗爭地,連結左中右

1. 中大學生會反對拆卸烽火台聲明,任何人都可以聯署

引文:

中大校方拆卸烽火台的決定,由頭到尾都是黑箱作業。學生、校友甚至教職員,竟然都是在傳媒揭發後才知悉整個計劃。校長更稱「這些工程傳統上不公開諮 詢教


A growing realization about tcpdump and reading IP traffic

Here is a gotcha about reading tcpdump output that recent events havebeen tattooing on my forehead:

The only sure way to tell whether a packet is going to your gatewayor to something on the local network is to look at the destinationEthernet address.

To put it another way: a packet being sent to your network's gatewaydoes not have the gateway's IP address in it. Thus, reading tcpdump output without Ethernet addresses is not really telling you whether apacket was really sent to your gateway or whether


BitTorrent's file fragmentation problem

When BitTorrent receives a file, it gets the various chunks out of order, generally in a completely randomone. This presents the client with the problem of putting them inorder and in place.

I believe that historically there have been three approaches to dealwith this. The very first BitTorrent clients did it the simple way:they put every received block in its correct place by seeking to thatspot and writing the block out. The problem with this was horrible filefragmentation (resulting in terrible sequential read performance);


Thur Night 有線娛樂新聞臺


10:30pm 主播會客室

今日無feel

昨天開市前沽期指,下午因為要做facial,不想煩這事,所以3點就平了。
(開市:13,298;收市:12,915;低見12,676)

昨晚道指雖然升151點,但相信是少少技術性+少少妄想性樂觀的結果。
今天恒指頂多

敵友

什麼叫敵人?誰又是朋友?

喜歡搬弄是非和搞小動作的人走到任何地方都在樹敵,這其實是天性,世界上就是會有這樣的人種。然而有時候,朋友比敵人傷得你更深,你搞不清他們是不是故意的,但那種難過是會讓你感到交錯了


徵友廣告

我有一位友人,絕望地尋覓真愛。

據說,他想找願意跟他結婚生子的女人,而他保證會努力賺錢養老婆。

以下是他的CV (由他自己提供):
  • 1.8M
  • 70Kg
  • IT company Executive Director
  • MBA, FHKIoD
  • fashionable, artistic & professional
  • Smoke and Drink.... but not playboy
  • looking for long term life partner
  • romantic type..

Where vi runs into its limits

Despite the fact that I use vi a fair bit , I feel that it has definite limits thatmake it not my favorite editor. For me, vi's main limits are two-fold.

First, it doesn't use graphics effectively, and I believe that itcan't; the core of vi, what makes it vi and not some other editor, isfundamentally screen oriented. You can make vi display graphicallyinstead of in a terminal window, but I don't think that you can