what did you learn today?

Status
Not open for further replies.

Brimstar

Ars Scholae Palatinae
1,359
Originally posted by wEvuk:
That APC still can't make reliable network adapters for their battery units.
That just seems so odd to see to me... We have a network adapter in our unit here that's been in use for over 6 years without a single glitch. It's in it's 3rd UPS due to replacement and failures of the UPS units themselves, but the card is solid.

That being said, that's our only network enabled UPS and the only card in a unit I've been responsible for, so we could just be the strange exception.
 

Metzen

Ars Scholae Palatinae
1,042
Originally posted by Whittey:
Originally posted by goForth:
Today I learned that the amount of peace that one gets on vacation is directly related to the amount of quality documentation that one writes before leaving.


I learned that people don't read documentation. Ever. So I redirect them to our support and they read the documentation to them.
Coworker: User said you fixed the Contract Management server in the past.
Me: There's a document that OldCowoker wrote about 4 years ago on how to fix the problem. It's on sharepoint under "Contract Management."
Coworker: So can you fix it?

After careful application of a tape measure, I've learned that my trunk can hold my golf clubs AND my coworker.


-=Whittey=-


I just had this documentation problem with a medical software program that I had to reverse-engineer its network talk and then document for the rest of the tech team.

The software comes with a "Verify connection" button. From the client to the server it worked every time, implying you could do all the features of the software on the client end. The two features used are "retrieve list" and "pull images". From the client you could pull lists for whatever days you wanted but you couldn't retrieve the images. For retrieving lists, the client will open a connection to the server, request the list, get the list, close the connection. For pulling images, the client would open a connection to the server, put in a request for images, then close the connection. The server would then take note of the IP the client was at, open a connection and send the images. The problem is your standard firewall blocks incoming! So when the client closed the connection, the firewall would block the port!

Naturally this wouldn't happen if the client kept the port open when it made an image retrieval request.

Nice.

So the solution is the unblock the required port on the client end. The solution proposed by the vendor of the software is to disable your firewall and put your client machine in a DMZ.

Beyond the ridiculous stupidity of the vendor's solution and the ineptitude of their technical support staff, I documented how to open the port on the Windows Firewall, your standard router, and forward the port from the router to the client that requires that software. I also included testing procedures (you can telnet into the port and it will display a blank page, hit "Enter" and it shows "UKN CMD"). If you can telnet from the client to the server and vice versa your connection will work.

Send out the document, leave for vacation, a week later I have requests for a dozen or so people to have this setup on their systems because out tech staff couldn't be bothered to read the documentation, instead relaying to the client that I would be back Monday and I know how to solve the issue. -- :mad: --

Although, I have to say that sitting and watching the server communicate to a working client and non-working client via Wireshark was an eye-opening experience. I learned how the communication works by comparing the two and Wireshark provided enough information on the protocol (DICOM) that could see the authentication attempts and timeouts. I've been meaning to learn Wireshark for a while and now having used it in real life to resolve a technical issue, it really is quite a simple, powerful, program.
 

ronelson

Ars Legatus Legionis
21,399
Subscriptor
I learned that people don't read documentation. Ever. So I redirect them to our support and they read the documentation to them.
It gets better. User A wrote a document and posted it on the Wiki. Time goes by. User A goes to User B to find out how to perform Process X - which is described in User A's article.

I wish that was a terminable offense, in pretty much every way.
 

llib

Ars Scholae Palatinae
649
I learned that a 300 kVA UPS does not really provide 300 kvA.

The manufacturer, who shall remain nameless lest I incur his wrath, recommends no more than 80% load.

Thinking that I would blow by his recommendation "just a little bit" until our new dual 750 kVA power system is finished, I also learned that the UPS will actively enforce that limit.

Question: If you can only get 240 kVA from it, how can they call it a 300 kVA UPS!!! -- :mad: -- Would you buy a half-ton truck that could only haul a quarter ton? (Well, that's not exactly proportionally correct, but you get my point...)
 

ronelson

Ars Legatus Legionis
21,399
Subscriptor
The manufacturer, who shall remain nameless lest I incur his wrath, recommends no more than 80% load.

Thinking that I would blow by his recommendation "just a little bit" until our new dual 750 kVA power system is finished, I also learned that the UPS will actively enforce that limit.
NEC suggests putting only 80% load on a circuit...but for a UPS to enforce that? Crazy. What if there is a brief spike in usage? Well, we know the answer, but how come no-one thought of that when designing it?
 

abenn

Ars Scholae Palatinae
1,197
When I tried SEP about a year ago I was thoroughly disappointed. When our maintenance came up just recently I switched to Eset. Eset seems to be one of the better corporate AV products and has worked well for me so far. Plus, it was cheaper than Symantec.

Originally posted by jorgem:
A current installation of Symantec Endpoint Protection will kill a Windows 2008 x64 file server's shares.

Its a known issue, but somehow hasn't made it into any maintenance releases.
 

brshoemak

Ars Tribunus Militum
2,398
Originally posted by jorgem:
A current installation of Symantec Endpoint Protection will kill a Windows 2008 x64 file server's shares.

Its a known issue, but somehow hasn't made it into any maintenance releases.

Did you install just the AV portion of SEP or did you do a full install including that Network Threat Protection garbage? SEP is OK (and that is being amazingly overgenerous) if you just install the AV portion and nothing else.
 

abenn

Ars Scholae Palatinae
1,197
Originally posted by brshoemak:
Did you install just the AV portion of SEP or did you do a full install including that Network Threat Protection garbage? SEP is OK (and that is being amazingly overgenerous) if you just install the AV portion and nothing else.

Then what is the point in installing "endpoint protection" if you are are only using the AV component? Why pay extra for a product if you can only use one piece of it? In theory I understand what Symantec is trying to do with SEP, as AV on its own isn't enough these days. However, since SEP only works if you disable everything beyond AV... I don't understand why anyone would continue to use it.
 
Originally posted by llib:
I learned that a 300 kVA UPS does not really provide 300 kvA.

The manufacturer, who shall remain nameless lest I incur his wrath, recommends no more than 80% load.

Thinking that I would blow by his recommendation "just a little bit" until our new dual 750 kVA power system is finished, I also learned that the UPS will actively enforce that limit.

Question: If you can only get 240 kVA from it, how can they call it a 300 kVA UPS!!! -- :mad: -- Would you buy a half-ton truck that could only haul a quarter ton? (Well, that's not exactly proportionally correct, but you get my point...)


Dont forget that KVA != Watts, and that the rating is normally an Input rating and not an Output rating. Actual output of UPS equipment can vary depending on the load connected and the efficency of the unit. Most older large UPS are .8 Power Factor, Some more recent are .9 PF, and some even higher.
 

Darthkim

Ars Scholae Palatinae
1,311
Originally posted by abenn:
Originally posted by brshoemak:
Did you install just the AV portion of SEP or did you do a full install including that Network Threat Protection garbage? SEP is OK (and that is being amazingly overgenerous) if you just install the AV portion and nothing else.

Then what is the point in installing "endpoint protection" if you are are only using the AV component? Why pay extra for a product if you can only use one piece of it? In theory I understand what Symantec is trying to do with SEP, as AV on its own isn't enough these days. However, since SEP only works if you disable everything beyond AV... I don't understand why anyone would continue to use it.

Granted, SEP doesn't get any love at Ars, however, we've used it sucessfully in our environment (SEP 11 MR3, with AV and PTP active). And we have it running on all of ours servers too.

I didn't think that SEP charged for any of the other components, except for NAC piece. SAV EE transformed into Symantec Mult-tier protection, so free for most enterprise customers.
 

nzspambot

Ars Praefectus
4,366
Subscriptor
Originally posted by Rick25:
Originally posted by jaericho:
a 10 dollar PCI card to provide USB2.0 will work in an HP DL380.

I've never figured out why HP does the 1.1 route on those servers....spend the extra few $$ and give us usable USB speeds

what G are you talking about?

G5 and I think G4 are USB 2.0
 

afidel

Ars Legatus Legionis
18,224
Subscriptor
Originally posted by jgbaker:
Originally posted by Rick25:
Originally posted by jaericho:
a 10 dollar PCI card to provide USB2.0 will work in an HP DL380.

I've never figured out why HP does the 1.1 route on those servers....spend the extra few $$ and give us usable USB speeds

what G are you talking about?

G5 and I think G4 are USB 2.0

G4 is 1.1 G4p is 2.0 Hi speed capable as is G5 (or else the internal stick for ESX/XenServer would be REALLY slow).
 
Originally posted by jaericho:
a 10 dollar PCI card ... Even tho' all the slots are PCI-X.
Ugh, I learned that PCI-X slots were backwards-compatible with standard PCI cards only after spending an entire weekend calling every vendor in the area trying to find a PCI-X SCSI card.

I guess the bigger lesson learned was: read the whole Wikipedia page before panicking.
 
Originally posted by brshoemak:
Originally posted by jorgem:
A current installation of Symantec Endpoint Protection will kill a Windows 2008 x64 file server's shares.

Its a known issue, but somehow hasn't made it into any maintenance releases.

Did you install just the AV portion of SEP or did you do a full install including that Network Threat Protection garbage? SEP is OK (and that is being amazingly overgenerous) if you just install the AV portion and nothing else.

Just the AV portion.
 
Originally posted by Darthkim:
Originally posted by abenn:
Originally posted by brshoemak:
Did you install just the AV portion of SEP or did you do a full install including that Network Threat Protection garbage? SEP is OK (and that is being amazingly overgenerous) if you just install the AV portion and nothing else.

Then what is the point in installing "endpoint protection" if you are are only using the AV component? Why pay extra for a product if you can only use one piece of it? In theory I understand what Symantec is trying to do with SEP, as AV on its own isn't enough these days. However, since SEP only works if you disable everything beyond AV... I don't understand why anyone would continue to use it.

Granted, SEP doesn't get any love at Ars, however, we've used it sucessfully in our environment (SEP 11 MR3, with AV and PTP active). And we have it running on all of ours servers too.

2008, too? It works fine on our 2003 boxes, but caused major headaches with the 2008 boxes.
 

DucRider

Ars Scholae Palatinae
748
That nod32 doesn't do throttling. That a nod32 on startup scan kills a machine for a good 3-4 minutes (high end workstations too, not rinky dink systems).

That polycom's conference phone support absolutely BLOWS. They made me register a support account with has a pwd requiring special characters. I don't want to make a SUPPORT ACCOUNT with an exclamation point in my pw. WTF is someone going to do - brute force my polycom support account and create a bunch of rogue tickets? STUPID.
 

llib

Ars Scholae Palatinae
649
NEVER RENOVATE A PRODUCTION DATA CENTER!!!

AARRRGGGHHH!!! -- :scared: --

Strange people walking around with large sledge hammers knocking down stucco walls making dust.

Rockers cutting sheet and making more dust.

Visquene tents hanging everywhere in a vain and unsuccessful attempt to contain said dust.

Lungs doing a lousy job of filtering said dust.

CRACs doing a not-too-bad job of filtering said dust.

Servers and SAN doing a much better job of filtering said dust. -- :eek: --

Q: Why are there no filters on the fronts of servers and SAN?
A: Restricts air flow and YOU'RE NOT SUPPOSED TO RENOVATE A PRODUCTION DATA CENTER!!!

At this point, I'm strongly tempted to do a functional test of the dry-pipe system.

Mutters to Self, "There's gotta be a lesson in here somewhere..."

Finding another job comes readily to mind.
 

afidel

Ars Legatus Legionis
18,224
Subscriptor
Originally posted by llib:
NEVER RENOVATE A PRODUCTION DATA CENTER!!!

AARRRGGGHHH!!! -- :scared: --

Strange people walking around with large sledge hammers knocking down stucco walls making dust.

Rockers cutting sheet and making more dust.

Visquene tents hanging everywhere in a vain and unsuccessful attempt to contain said dust.

Lungs doing a lousy job of filtering said dust.

CRACs doing a not-too-bad job of filtering said dust.

Servers and SAN doing a much better job of filtering said dust. -- :eek: --

Q: Why are there no filters on the fronts of servers and SAN?
A: Restricts air flow and YOU'RE NOT SUPPOSED TO RENOVATE A PRODUCTION DATA CENTER!!!

At this point, I'm strongly tempted to do a functional test of the dry-pipe system.

Mutters to Self, "There's gotta be a lesson in here somewhere..."

Finding another job comes readily to mind.


Hate to squash a good rant but you CAN expand an existing datacenter, you just need a good contractor that specializes in doing them. We did two expansions of our current datacenter (starting with a data closet, moving to a server room, and finally a proper datacenter) and both times had almost zero dust. HDD loss rate is still significantly below industry norms two years out so I'm pretty sure it was more than just cosmetic too =)
 
Originally posted by Metzen:
When you're remote your boss will trust the opinion of his cronies (your peers or peers one ladder rung beneath you) over yours.

That makes sense no? Being local, it is intuitive that those peers would be at least a closer working relationship with your boss than you. More communication = better understanding and trust.

Not that I haven't been burned by that situation.. I have..more than once.. ugh..
 
A current installation of Symantec Endpoint Protection will kill a Windows 2008 x64 file server's shares.Its a known issue, but somehow hasn't made it into any maintenance releases.

A current release of SEP will pretty much kill everything. Except for most viruses of course.
I've been fighting that particular product at every for about 18 months now.
 

ronelson

Ars Legatus Legionis
21,399
Subscriptor
More communication = better understanding and trust.
Being close != more communication. Also, more communication != better understanding as a rule, though it is likely.

I suffer from this as well, being one of <10 people in a group of over 100 people who works from home 100% of the time. My old boss did not care and when something happened, I was always the go-to guy. The new boss just hits up whomever is around him, often with disastrous results. It does not reflect poorly on me, so I do not really mind, but it is not the situation I desire the most.
 

padster

Ars Tribunus Militum
2,503
Subscriptor
The hype, sensationalizing and fear-mongering by the media over Conficker has reach sufficiently high levels when my Mom, yes my MOM, my can't really speak/read/write English Mom, calls me to tell me that on the [Multi-Cultural Channel] news, she heard about this terrible thing that will "ruin all the computers in the world" tomorrow and whether or not I knew about it and whether or not I "copied my information" before something bad happened(!)

Someone near me would have heard me say on the phone, in a remarkably even tone, with nearly indiscernible exasperation:

Yes Mom, I know about it.
[...]
Yes Mom, I know what to do.
[...]
Yes Mom, I "copied my information".
[...]
Mom, I've been in IT for a few years.
[...]
No Mom, nothing bad will happen to my computer.
[...]
Mom, I do this for a living.
[...]
[etc. and much later]
[...]
Yes, me too. Good night Mom.
 

Fulgan

Ars Tribunus Angusticlavius
7,534
Subscriptor
I learned that no matter how yow you try to be "objective" about things and how much you try to "give it a chance before you judge", Symantech product always suck.

That's for releasing a backup product (Backup exec) that doesn't support daylight saving time migration, even though they seem to have "fixed" the bug once every version since 6 (none of our backups worked this weekend because BE tasks will fail to run the first time after the computer clock has changed. And of course, that will screw up a whole week of incremental backups unless you go there and give it a kick manually).
 
Originally posted by Fulgan:
I learned that no matter how yow you try to be "objective" about things and how much you try to "give it a chance before you judge", Symantech product always suck.

That's for releasing a backup product (Backup exec) that doesn't support daylight saving time migration, even though they seem to have "fixed" the bug once every version since 6 (none of our backups worked this weekend because BE tasks will fail to run the first time after the computer clock has changed. And of course, that will screw up a whole week of incremental backups unless you go there and give it a kick manually).

Symantec is where good software goes to die
 

Metzen

Ars Scholae Palatinae
1,042
Originally posted by Tsun:
Originally posted by Metzen:
When you're remote your boss will trust the opinion of his cronies (your peers or peers one ladder rung beneath you) over yours.

That makes sense no? Being local, it is intuitive that those peers would be at least a closer working relationship with your boss than you. More communication = better understanding and trust.

Not that I haven't been burned by that situation.. I have..more than once.. ugh..

I think as a remote user there needs to be more implicit trust between your boss and you then if you're local. The reason being is "the boss" will not have all the facts to make the best decision in a decent amount of time. You can try your best to commuicate your entire daily on-goings but things will get miss-communicated, forgotten, or if they're time sensitive then you need to be empowered to make decisions and have him trust you that it was the right one.

We do lots of sluething in our jobs. We listen to issues, understand them, troubleshoot them, and resolve them. (Warning: Analogy!) Could you imagine a detective in San Francisco not being able to start resolving cases until his boss in New York put it through his detectives all the way over there first? Then each time the detective wanted to persue something he needed to check with "the bosses" detectives and for them to give him the OK first? What if he was working with *lesser* detectives? The process would be ungodly slow, painful and frustrating.

There may be some remote situations that aren't as engrossing that this isn't applicable too. My current situation is a frustrating experience in "listen to issue, understand issue, troubleshoot issue, come up with potential solution". Then instead of "implement solution" I am currently required to: "inform boss of potential solution, have boss talk it over amongst his underlings, have boss come back with inferior solution, state your case back to him with a advantages/disadvantages chart, etc." This is for some of the simplest of problems. All of a sudden, changing an IP address on a printer devolves into a discussion as to whether it should be done via telnet or http and whether or not those services should be enabled in the first place. a 5 second job can turn into 2-3 days.

We ran into another issue where a system needed to be resoftwared because it's current state was so degraded that when I suggested that solution as it would be the fastest, easiest and would resolve the issue 100%; I was informed that the team needed to confer to make that decision (the system was a standard reception's desktop). It took them *4* days to get back to me that, "yup, we agreed with you, that is the best solution".

Meanwhile the receptionist is without a computer for 4 days because it was so unusable.

Not acceptable. If any organization feels that amount of time is acceptable, I feel for you. It's not right.

And to add to this thread:

I learned that if "the team" 1200 miles away hires a contractor to do equipment moves at a site 200 miles from you so you don't have to be on site and shit breaks, it's all your fault. It all falls on you because it's your site. Trying to get a hold of your boss to rehire out said contractor to get them to go back to the site to resolve the issue because you don't have approval authority and having to keep trying for 3 hours just pisses off the workers at said site because they feel like they're in limbo and their jobs are VERY time sensitive!

What a great April fools this was for me.
 

Whittey

Ars Tribunus Militum
2,006
Originally posted by padster:
The hype, sensationalizing and fear-mongering by the media over Conficker has reach sufficiently high levels
I learned the direct answer to this question:
Who do you trust for technical information, the subject matter experts (in this case McAfee, who said Conficker was a low) or the media (who said the world would end)?

The answer, judging the every-hour conference calls from midnight (local) till 9am yesterday, was the Media. Good times.


-=Whittey=-
 
Status
Not open for further replies.