text:
Cisco Application Control Engine (ACE) Troubleshooting Guide -- Troubleshooting Access Control Lists
From DocWiki
This article describes security access control lists (ACLs) in the ACE, how to configure them, and troubleshooting steps to follow if you encounter problems with ACLs.
Overview of Security Access Control Lists
An ACL consists of a series of statements called ACL entries that define the network traffic profile. Each entry permits or denies network traffic (inbound and outbound) from and to the parts of your network specified in the entry. Each entry also contains a filter element that is based on criteria such as the source address, the destination address, the protocol, and protocol-specific parameters such as ports and so on.
An implicit deny-all entry exists at the end of each ACL, so you must configure an ACL on each interface that you want to permit connections. Otherwise, the ACE denies all traffic on the interface.
ACLs allow you to control network connection setups rather than processing each packet. Such ACLs are commonly referred to as security ACLs. You can configure ACLs as parts of other features (for example, security, Network Address Translation (NAT), server load balancing (SLB), and so on). The ACE merges these individual ACLs into one large ACL called a merged ACL. The ACL compiler then parses the merged ACL and generates the ACL lookup mechanisms. A match on this merged ACL can result in multiple actions.
|You can apply only one extended ACL to each direction (inbound or outbound) of an interface. You can also apply the same ACL on multiple interfaces. You can apply EtherType ACLs only in the inbound direction and only on Layer 2 interfaces.
ACL Types and Uses
You can configure the following two types of ACLs in the ACE:
- Extended—Control network access for IP traffic (Layer 3 and Layer 4)
- EtherType—Control network access for non-IP traffic on Layer 2 interfaces
The ACE does not explicitly support standard ACLs. To configure a standard ACL, specify the destination address as any and do not specify ports in an extended ACL. For details about configuring an extended ACL, see the "Configuring an Extended ACL" section.
ACL Configuration Guidelines
This section describes the guidelines to observe when you configure and use ACLs in your network. It contains the following topics:
- ACL Entry Order
- ACL Implicit Deny
- Maximum Number of ACL Entries
ACL Entry Order
An ACL consists of one or more entries. Depending on the ACL type, you can specify the source and destination addresses, the protocol, the ports (for TCP or UDP), the ICMP type, the ICMP code, or the EtherType as the match criteria. By default, the ACE appends each ACL entry at the end of the ACL. You can also indicate the location of each entry within an ACL by specifying a line number.
The order of the entries is important. When the ACE decides whether to accept or refuse a connection, the ACE tests the packet against each ACL entry in the order in which the entries are listed. After it finds a match, the ACE does not check any more entries. For example, if you create an entry at the beginning of an ACL that explicitly permits all traffic, the ACE does not check any other statements in the ACL.
|If there is a deny statement for packets coming to the Control Plane (CP), then the ACE skips to the next ACL entry.
ACL Implicit Deny
All ACLs have an implicit deny entry at the end of the ACL, so, unless you explicitly permit it, traffic cannot pass. For example, if you want to allow all users to access a network through the ACE except for those users with particular IP addresses, then you must deny the particular IP addresses in one entry and permit all other IP addresses in another entry.
Maximum Number of ACL Entries
ACLs are used in ACE as conventional access-groups, and also for use in class maps. The ACLs are converted into trees of different data structures called nodes, which are merged into a single tree instance that consists of nodes of one type called Policy Action Nodes (PANs). This merged tree is then transferred to the dataplane. A tree is created for each instance, and an instance is defined as a VLAN interface in either the input or output direction. Therefore, all ACLs that are applied to a given VLAN and a given direction contribute to the node usage for that instance.
The ACE supports a maximum of 256,000 Policy Action Nodes (PANs) entries. Some ACLs use more memory than others, such as an ACL that uses large port number ranges or overlapping networks (for example, one entry specifies 10.0.0.0/8 and another entry specifies 10.1.1.0/24). Depending on the type of ACL, the actual limit that the ACE can support may be less than 256,000 PANs entries.
If you use object groups in ACL entries, you enter fewer actual ACL entries, but the same number of expanded ACL entries as you did when you entered entries without object groups. Expanded ACL entries count toward the system limit. To view the number of expanded ACL entries in an ACL, use the show access-list name command.
If you exceed the memory limitations of the ACE, it generates a syslog message and increments the Download Failures counter in the output of the show interface vlan number command. The configuration remains in the running-config file and the interface stays enabled. The ACL entries stay the same as they were before the failing configuration was attempted.
For example, if you add a new ACL with ten entries, but the addition of the sixth entry fails because the ACE runs out of memory, the ACE removes the five entries that you successfully entered.
|You must allocate sufficient ACL memory resources for each virtual context in the ACE. The ACE does not generate a syslog if you exceed the maximum number of ACL entries.
Configuring ACLs
You can configure ACLs in one of two ways:
- Using the access-list command in configuration mode
- Using the match access-list command in a Layer 3 and Layer 4 class map
You can permit or deny network connections based on the IP protocol, source and destination IP addresses, and TCP or UDP ports. To configure a non-ICMP extended ACL, enter the following command:
access-list name [line number] extended {deny | permit} {protocol {any | host src_ip_address | src_ip_address netmask | object-group net_obj_grp_name} [operator port1 [port2]] {any | host dest_ip_address | dest_ip_address netmask | object-group net_obj_grp_name} [operator port3 [port4]]} | {object-group service_obj_grp_name} {any | host src_ip_address | src_ip_address netmask | object-group net_obj_grp_name} {any | host dest_ip_address | dest_ip_address netmask | object-group net_obj_grp_name}
You can also permit or deny network connections based on the ICMP type (for example, echo, echo-reply, unreachable, and so on). To configure an ICMP extended ACL, enter the following command:
access-list name [line number] extended {deny | permit} {icmp {any | host src_ip_address | src_ip_address netmask | object-group net_obj_grp_name} {any | host dest_ip_address | dest_ip_address netmask | object-group net_obj_grp_name} [icmp-type code [operator code1 [code2]]]} | {object-group service_obj_grp_name} {any | host src_ip_address | src_ip_address netmask | object-group net_obj_grp_name} {any | host dest_ip_address | dest_ip_address netmask | object-group net_obj_grp_name}
You can configure an ACL that controls traffic based on its EtherType. An EtherType is a subprotocol identifier. EtherType ACLs support Ethernet V2 frames; they do not do not support 802.3-formatted frames. To configure an Ethertype ACL, enter the following command:
access-list name ethertype {deny | permit} {any | bpdu | ipv6 | mpls}
|You can configure an EtherType ACL on a Layer 2 interface in the inbound direction only. If you are operating the ACE in bridge mode, be sure to configure an ACL on all interfaces that permit BPDUs. Otherwise, a bridge loop may result.
For example, to configure an extended ACL to permit all IP traffic from any source IP address and that is destined to any IP address on interface VLAN 200, enter the following commands:
ACE_module5/Admin(config)# access-list ACL1 extended permit ip any any ACE_module5/Admin(config)# interface vlan 200 ACE_module5/Admin(config-if)# ip address 192.168.1.1 255.255.255.0 ACE_module5/Admin(config)# access-group input ACL1
You can apply an ACL to all interfaces in a context at once, subject to the following conditions:
- No interface in the context has an ACL applied to it.
- You can globally apply one Layer 2 and one Layer 3 ACL in the inbound direction only.
- On Layer 2 bridged-group virtual interfaces (BVIs), you can apply both Layer 3 and Layer 2 ACLs.
- On Layer 3 virtual LAN (VLAN) interfaces, you can apply only Layer 3 ACLs.
- In a redundant configuration, the ACE does not apply a global ACL to the FT VLAN.
For example, to apply ACL1 to all interfaces in the Admin context, enter the following command in configuration mode:
ACE_module5/Admin(config)# access-group input ACL1
The syntax of the match access-list command is as follows:
match access-list acl_name
To configure an ACL match statement in a class map, enter the following commands:
ACE_module5/Admin(config)# class-map match-any L4_CLASS ACE_module5/Admin(config-cmap)# match access-list ACL1 ACE_module5/Admin(config-cmap)# exit ACE_module5/Admin(config)# policy-map multi-match L4_POLICY ACE_module5/Admin(config-pmap)# class L4_CLASS ACE_module5/Admin(config-pmap-c)#
For more details about ACLs and how to configure them, see the Cisco Application Control Engine Module Security Configuration Guide.
ACL-Related syslogs
When a packet matches an ACL entry, a syslog message is generated based on the following rules:
- All ACL deny entries generate a syslog message unless logging is explicitly disabled using the no logging enable command in configuration mode.
- An ACL permit entry generates a syslog message only if logging is enabled using the logging enable command in configuration mode.
- All implicit deny entries generate the default deny syslog (%ACE-4-106023).
To minimize syslog message generation, the ACE uses the flow cache as follows:
- For the first packet hit on an ACL entry, the ACE generates a syslog and caches the flow (5-tuple) in the connection table.
- For subsequent hits on the same ACL entry, the ACE checks the cache. If it finds the flow in the cache, the ACE increments a hit counter for this entry in the cache and does not generate a syslog.
- After some time (the default is 300 seconds, which is configurable in the ACL entry definition in the CLI as the interval_secs option), the ACE generates a syslog and sets the hit count to 0.
- However, if at the expiry of the above time, the hit count is 0, the ACE deletes the cache entry silently. So by default, a cache entry is aged out 600 seconds after the last hit.
Troubleshooting ACLs
Many ACL issues manifest themselves by all traffic or only certain traffic being denied or permitted access to the ACE or out of the ACE. Remember that, initially, all traffic to the ACE is denied until you permit traffic using an ACL. Every ACL contains an implicit deny at the end of it, so only traffic that you explicitly permit will have access to the ACE. To troubleshoot ACLs, follow these steps:
1. Verify that your ACL configuration is correct for your network application. Make any required changes to the running-config file, and then test the configuration. If it is satisfactory, save it to the startup-config file using the copy runnning-config startup-config command.
For example, to display the ACLs that you have configured in your ACE, enter the following command:
ACE_module5/Admin# show running-config access-list Generating configuration.... access-list ACL1 remark This ACL permits any IP traffic from any source going to any destination except for ICMP traffic originating from 192.168.12.15 255.255.255.192. access-list ACL1 line 8 extended permit ip any any access-list ACL1 line 10 extended deny icmp 192.168.12.15 255.255.255.192 any echo code range 1 1 (hitcount=0) [0x65af0edd] access-list ANYONE line 8 extended permit ip any any
To verify that the configured ACLs are applied to the correct interfaces and in the right directions (input or output), enter the following command:
ACE_module5/Admin# show running-config interface Generating configuration.... interface vlan 100 ip address 10.2.1.1 255.255.255.0 access-group input ANYONE access-group output ANYONE no shutdown interface vlan 200 ip address 192.168.1.1 255.255.255.0 access-group input ACL1 service-policy input MGMT_POLICY no shutdown
2. Verify that you have allocated sufficient resources for ACLs. To display the allocated resources in your ACE, enter the following command:
ACE_module5/Admin# show resource usage Allocation Resource Current Peak Min Max Denied ------------------------------------------------------------------------------- Context: Admin conc-connections 10 18 0 8000000 0 mgmt-connections 2 10 0 100000 0 proxy-connections 584 590 0 1048574 0 xlates 0 0 0 1048574 0 bandwidth 880 16194 0 625000000 0 throughput 880 12606 0 500000000 0 mgmt-traffic rate 0 3588 0 125000000 0 connection rate 1 21 0 1000000 0 ssl-connections rate 0 0 0 5000 0 mac-miss rate 0 16 0 2000 0 inspect-conn rate 0 0 0 6000 0 acl-memory 33448 33448 7858944 70749384 0 <------- ACL memory resource allocation statistics sticky 0 0 0 0 0 regexp 0 0 0 1048576 0 syslog buffer 188416 188416 0 4194304 0 syslog rate 0 9 0 100000 0 Context: C1 conc-connections 0 0 0 8000000 0 mgmt-connections 0 0 0 100000 0 proxy-connections 0 0 0 1048574 0 xlates 0 0 0 1048574 0 bandwidth 0 0 0 625000000 0 throughput 0 0 0 500000000 0 mgmt-traffic rate 0 0 0 125000000 0 connection rate 0 0 0 1000000 0 ssl-connections rate 0 0 0 5000 0 mac-miss rate 0 0 0 2000 0 inspect-conn rate 0 0 0 6000 0 acl-memory 0 0 7858944 70749384 0 sticky 0 0 0 0 0 regexp 0 0 0 1048576 0 syslog buffer 0 0 0 4194304 0 syslog rate 0 0 0 100000 0
For example, to allocate a 10 percent minimum and a maximum of unlimited resources for ACL memory in the Admin virtual context, enter the following commands:
ACE_module5/Admin(config)# resource myclass ACE_module5/Admin(config-resource)# limit-resource acl-memory minimum 10 maximum unlimited ACE_module5/Admin(config-resource)# exit ACE_module5/Admin(config)# context Admin ACE_module5/Admin(config-context)# member myclass
3. Display the details of an individual ACL by using the show access-list acl_name detail command. This command displays every entry in the specified ACL, the hit counts for each entry, and a 32-bit hexadecimal MD5-hash value that the ACE computes from the access-list command immediately when you configure an ACL. The ACE includes this hash value in deny syslog messages (106023) to help you identify the ACL entry that caused the deny syslog. For example to display the details of the ACL1 access control list, enter the following command:
ACE_module5/Admin# show access-list ACL1 detail access-list:ACL1, elements: 2, status: ACTIVE remark : This ACL permits any IP traffic from any source going to any destination except for ICMP traffic originating from 192.168.12.15 255.255.255.1. access-list ACL1 line 8 extended permit ip any any (hitcount=9) [0x894c1008] <------- 32-bit hexadecimal MD5-hash value access-list ACL1 line 10 extended deny icmp 192.168.12.15 255.255.255.192 any echo code range 1 1 (hitcount=15) [0x65af0edd]
The format of the deny syslog message is as follows:
%ACE-4-106023: Deny protocol number | name src incoming-interface:src-ip dst outgoing-interface:dst-ip by access-group "acl-name" An IP packet was denied by the ACL.
- Explanation: This message displays even if you do not have the log option enabled for an ACL. If a packet hits an input ACL, the outgoing interface will not be known. In this case, the ACE prints the outgoing interface as undetermined. The source IP and destination IP addresses are the unmapped and mapped addresses for the input and output ACLs, respectively, when used with NAT.
- Recommended Action: If messages persist from the same source address, messages may indicate a foot-printing or port-scanning attempt. Contact the remote host administrators.
An ACL merged list is a large ACL that the CP compiles from multiple security ACL entries and policies. When the ACE executes an ACL merged list, it performs multiple actions on a flow that matches the merged list.
4. Display the actions that the ACE will perform on a flow by entering the show acl-merge merged-list command. For example, to display the merged list for VLAN 100, enter the following command:
ACE_module5/Admin# show acl-merge merged-list vlan 100 in non-redundant All ACEs in merged list 2 Total:18 Non-redundant:12 Priority:1000, Lineno:0, ACE-id:211 Action:PERMIT, Path-id:0x81/0x0/0x0:6/0[6/0] [6/0] Pmap:0x5, Log:FALSE/FALSE[FALSE][FALSE], Interval:0/0[0][0] Hash1:0x0 Hash2:0x0 Generated:TRUE, need-to-add-in-comp:NO_ACT_NEEDED, redundant:FALSE Parent:: feature:SECURITY ace-lineno:5 ACL priority:0[G:0,P:0,C:0,ACL:0] Parent:: feature:TO CP ace-lineno:2 ACL priority:16779265[G:0,P:1,C:8,ACL:1] Feature:SECURITY Policy:1[1][1] sec-level:0x0 Intratype:SKIP Feature:TO CP Policy:1[1][1] sec-level:0x0 Intratype:TERMINATE Intertype:TERMINATE IP address SRC:220.127.116.11/255.255.0.0 DST:10.86.215.134/255.255.255.255 Ports SRC:RANGE 0 65535 DST:RANGE 22 22 Protocol:6 Hit Count:0 Active:TRUE Timerange:0 . . . Feature:SECURITY Policy:0[0] sec-level:0x0 Intratype:TERMINATE . . . Feature:SLB Policy:14[14] sec-level:0x0 Intratype:TERMINATE . . . Feature:SRC NAT Policy:2[2] sec-level:0x0 Intratype:TERMINATE . . .
5. If the acl-memory Denied counter in the output of the show resource usage command is incrementing and the Peak (ACL) memory counter has not exceeded the Max Allocated ACL memory counter, the problem may lie with one of the nodes in the ACL merge tree. The ACL merge tree contains several different kinds of nodes (see the example output below), each of a different size and each with a maximum limit. If you allocate a minimum of 10 percent of the ACE resources to ACL memory, the ACE will guarantee 10% of the maximum number of each node. If your configuration causes the ACE to exceed the maximum value of one of these nodes, the ACL resource allocation will fail and the acl-memory Denied counter will increment.
To monitor the ACL merge tree node usage in the ACE, enter the following command:
ACE_module5/Admin# show np 1 access-list resource ACL Tree Statistics for Context ID: Admin ========================================= ACL memory max-limit: None ACL memory guarantee: 10.00 % MTrie nodes(used/guaranteed/max-limit): 43 / 26214 / 262143 (compressed) <-------| 3 / 2199 / 21999 (uncompressed) <--------| Leaf Head nodes (used/guaranteed/max-limit): | 39 / 26214 / 262143 <--------------------|---- Maximum number of available nodes in the ACE Leaf Parameter nodes (used/guaranteed/max-limit):| 594 / 52428 / 524288 <-------------------| Policy action nodes used: 153 memory consumed: 23776 bytes resource-limited 4896 bytes other 28672 bytes total . min-guarantee: 7861043 bytes total, 0 % consumed. max-limit: 78610432 bytes total, 0 % consumed. ACL Tree Statistics for the linecard ==================================== MTrie nodes(used): 43 (compressed) 3 (uncompressed) <--------------| (shared): 235929 (compressed) 19800 (uncompressed) | Leaf Head nodes (used/shared): 39 / 235929 <-----------------------|---- Number of used nodes in the ACE Leaf Parameter nodes (used/shared): 594 / 471860 <-----------------| Policy action nodes (used/shared): 153 / 261990 <------------------|
You can calculate the percentage of use for each node type by dividing the used nodes value by the maximum number of nodes and multiplying the result by 100. If any of these percentages exceeds the maximum value of allocated ACL memory for the context, increase the max value of allocated ACL memory using the limit-resource acl-memory command in resource class configuration mode so that that value is greater than or equal to the highest used nodes percentage that you calculated. Alternatively, if you are approaching the limits of ACL resource capacity, you may consider consolidating your ACL configuration.
If the ACL nodes are depleted while the ACE is downloading ACL configurations for an interface, the complete ACL merged list for that interface is deleted and no traffic flows through that interface. The ACE increments the download failure counter in the output of the show interface command and the ACE logs a system message from the configuration manager.
6. To trace a packet through a specific ACL, enter the following command:
ACE_module5/Admin# show np 1 access-list trace vlan 130 in protocol 1 source 172.27.16.23 2000 destination 192.168.12.15 3000 Root 0x2c01b00 Src Mtrie (0) offset 1 curr 0x2c01b00 child 0x0 leaf 0x10a840 Dst Mtrie (0) offset 2 curr 0x10a840 child 0x0 leaf 0x3c01330 proto ICMP head node 0x4004880 proto node 0x4004880 src op range port 0/65535 dst op range port 0/65535 lineno 112000 inner match line#:112000 inner match line#: 112000 packet matched priority 112000 action node 0x4c02460 Action Leaf-node version+aceid 0x99 (version 0 ace_id 153 dirty no) action_flag 0x10 (permit no log no punt_to_cp no capture no bridge yes) path ID 0x0 src nat 0x0 dst nat 0x0 vserver 0x0 fixup 0x0 TCP conn 0x0 AAA 0x0 Websense 0x0 QOS Policer 0x0 Syslog Info 0 Hitcount 130426 Syslog info: idx:[153:0] name_idx:[0:0] hash1:0x0 hash2:0x0 name_len:0 invalid Number of DRAM access: 6 (2 mtrie 4 non-mtrie)


text:
New Contest! Total Beauty Red Carpet Ready Collection
In celebration of awards season, TotalBeauty.com has put together a red-carpet worthy Collection. The Collection features 5 amazing skin care and makeup products including a full-size Cailyn Tinted Lip Balm in Big Apple and a full-size Sheswai Nail Lacquer. Plus, to cherish your most beautiful moments, they've included a MailPix.com Photo Brag Book as a free bonus.
The Red Carpet Ready Box from TotalBeauty.com Shops:
The box retails for only $25 (Plus use MakeHerUp discount code TBRED15 for 15% off this collection!)
Inside the Box:
Cailyn Tinted Lip Balm in Big Apple: Full Size!!! $19.00 value
I am new to this brand but I love it. The red color is gorgeous and I love how easy it is to apply with the brush. The product is listed as a balm but I would say its more a stain as the color lasts all day.
Sheswai Nail Lacquer: Full Size!!! $16 value: This is by far one of my favorite nail polish lines I have tried. The brush makes it super easy to apply without making a mess. And even better it doesn't chip. I am lucky to go a whole day without chipping my polish, usually its within the first hours of application. With Sheswai polish I made it Monday to Friday before it started chipping! I will be ordering more.
Pur-lisse Pur-Delicate Gentle Soymilk Cleanser: Deluxe Sampe size $12.65 Value: At 1.7 oz, this is a very generous sample. I love this cleanser its super gentle and doesn't irritate my skin. This is a great sample size for my travel bag.
Manna Kadar Sheer Glow Shimmer Lotion: Deluxe Sample size $8.00 value: A really great shimmer lotion it goes on light and adds the perfect glow to my cheekbones.
Racinne Ultimate Aqua Blanc Brightening Mask: 3 foil packets with a $5.00 value: This is on the list for my Friday night spa night. I can't wait to see how it works.
Get this box while you can! Like all Total Beauty Collection boxes, there is no subscription needed. However, when the boxes sell out…they are gone.
Hurry grab one of these star-studded and A-list approved collections before they are gone!
You can order your box here: Order the Total Beauty Collection Red Carpet Ready Box

subset: commoncrawl


text:
Business intelligence (BI) is a multistep process that traditionally has been heavily dependent on IT. Microsoft PowerPivot breaks with tradition by giving end users the tools they need to own some or all of the process. IT sets up the infrastructure, and end users implement the steps. As Figure 1 shows, end users utilize two tools: Microsoft PowerPivot for Excel 2010 and Microsoft SQL Server PowerPivot for SharePoint.
PowerPivot for Excel 2010 is a free data analysis tool that lets end users gather, store, model, and analyze data. PowerPivot for SharePoint lets end users share that data. I already discussed PowerPivot for Excel 2010 in "A Walkthrough of PowerPivot for Excel 2010", so I'll concentrate on PowerPivot for SharePoint here. After I define PowerPivot for SharePoint and describe its architecture, I'll discuss several common use cases and provide some administration pointers.
Related: Business Intelligence in SharePoint 2010
PowerPivot for SharePoint is a service that extends Microsoft SharePoint Server 2010 to support PowerPivot workbooks. Specifically, it's a named instance of SQL Server Analysis Services (SSAS) 2008 R2 Enterprise Edition running in the new SharePoint Integrated mode. In this mode, SSAS is part of a SharePoint 2010 Enterprise environment, with databases and cubes sourced from Microsoft Excel workbooks that have been published to a SharePoint document library.
Administrators need to be familiar with the PowerPivot for SharePoint architecture in order to install, deploy, and manage it. I'm not going to review the installation steps here because SQL Server Books Online (BOL) does a good job of explaining how to install PowerPivot for SharePoint to new and existing SharePoint environments. But I do want to review some of the key components, because the actual deployment involves several layers that can be a bit daunting to understand, especially if you're new to SharePoint.
Figure 2, which is from the white paper "Microsoft SQL Server PowerPivot Planning and Deployment," identifies key architectural components, including:
- Analysis Services service. This component is the named instance of SQL Server 2008 R2 Enterprise Edition running in SharePoint Integrated mode. The instance is always named PowerPivot.
- PowerPivot System service. This service acts as the communication layer for the Analysis Services service. In Figure 2, you'll see that this system service is wrapped by another box labeled Service Applications. You can think of a service application as a resource that makes a system service available to the sites in the SharePoint farm. The service application is created and configured automatically when installing PowerPivot for SharePoint using the New Server installation option; otherwise, it can be created manually using the SharePoint Central Administration console.
- PowerPivot Web service. This thin middle-tier connection manager is deployed on the SharePoint web front-end server. It detects external requests for PowerPivot data and forwards them to the service application, which in turn communicates with the PowerPivot System service.
- PowerPivot Gallery. Although it's called the PowerPivot Gallery, this component is a special-purpose SharePoint document library that contains features (e.g., a Silverlight control) to display and work with PowerPivot workbooks. For example, when a PowerPivot workbook is deployed to the PowerPivot Gallery, a thumbnail image of each worksheet is generated to provide a preview of the workbook.
- PowerPivot Management Dashboard. Exposed through the SharePoint Central Administration console, this web page is used to monitor and administer the overall PowerPivot for SharePoint deployment. (I'll discuss what the dashboard monitors later.)
- SharePoint timer jobs. Similar to SQL Server Agent jobs, SharePoint timer jobs are used to collect statistics and usage data about PowerPivot. SharePoint timer jobs are scheduled and executed through the SharePoint Timer Service.
Note that in terms of physical layout, it's certainly possible to install all the components on one dedicated server, such as the HP Business Decision Appliance. This appliance is a single-server implementation that can support 60 to 80 concurrent users, equating to hundreds of real-world end users. (For more information, see "HP Business Decision Appliance.") However, larger enterprise deployments will likely involve multiple dedicated servers. The "Technical diagrams (SharePoint Server 2010)" web page provides sample topologies.
Figure 2 has several arrows denoting communication paths between the various components. To help you better understand the paths, I'll walk you through four common use cases:
- Saving a workbook to the PowerPivot Gallery
- Viewing a workbook in a browser
- Interacting with a workbook in such a way that invokes the PowerPivot for SharePoint components
- Interacting with a workbook in such a way that turns a PowerPivot workbook into a data source
Use Case 1
Suppose that an end user saves an Excel 2010 workbook to the PowerPivot Gallery. In response, SharePoint saves the entire Excel workbook. Remember, the PowerPivot Gallery is just a special type of SharePoint document library.
In this use case, the various PowerPivot web applications and service applications shown in Figure 2 aren't used. The Excel workbook is simply stored in a SharePoint content database.
Use Case 2
Suppose that an end user wants to use Internet Explorer (IE) to view a workbook in the PowerPivot Gallery, so the person navigates to the gallery and clicks the workbook. In response, IE first communicates with the PowerPivot Gallery. Excel Web Access and Excel Calculation Services then retrieve the workbook from the content database and render it in the browser, as Figure 3 shows. These two components are part of Excel Services, a SharePoint service application that lets you load, calculate, and display Excel workbooks. (For more information about Excel Services, see the "Excel Services Architecture" web page.)
Once again, this use case doesn't involve any of the PowerPivot web applications or service applications. By default, when an Excel workbook is rendered through Excel Services, only a static copy of the workbook is displayed. An additional action must be invoked before PowerPivot for SharePoint gets involved, as the next use case demonstrates.
Use Case 3
Suppose that the end user who opened the workbook in Figure 3 refreshes the data connection. In response, Excel Services first re-queries the external data source. The Analysis Services OLE DB Provider then communicates with the PowerPivot System service, which in turn makes a request to the Analysis Services service. The Analysis Services service loads the Excel workbook into memory and returns the query results.
This same communication process occurs when a user changes a slicer. New to Excel 2010, slicers provide buttons that you can click to filter PivotTable data. Referring back to Figure 3, the Estimate, Century, and Decade_Desc boxes are all slicers. The two PivotCharts and the PivotTable in the worksheet are connected to them. For example, if the end user clears the filter applied to the Estimate slicer, the charts and table will be refreshed to display both actual and estimated values.
I want to reiterate a subtle but important point. Refreshing a data source or changing a slicer causes Excel to re-query the PowerPivot data model, but the PowerPivot data model doesn't re-query any of its data sources. A PowerPivot data model is a point-in-time copy of data from one or more source systems. A PowerPivot data model is updated one of two ways: manually in the Excel 2010 client or through a separate SharePoint scheduling process. (I'll discuss these methods later.)
Use Case 4
When you use PowerPivot for SharePoint, you can turn a PowerPivot workbook into a data source. In the top left corner in Figure 2, notice the three orange boxes labeled Analysis Services OLE DB Provider, Analysis Management Objects (AMO), and ADOMD.NET. These three technologies are client libraries used by products such as SQL Server Reporting Services (SSRS), PerformancePoint Services, and Excel PivotTables to communicate with SSAS cubes. When a PowerPivot workbook is published to SharePoint, it becomes a URL-addressable data source that looks just like a standard SSAS cube.
For example, suppose that an end user designs a report in Report Builder 3.0. As Figure 4 shows, the data source is SSAS. However, the data source's connection string points to the PowerPivot workbook stored in SharePoint rather than pointing to a server. In this scenario, the PowerPivot Web service connects directly to the PowerPivot System service. Excel Services isn't used.
Why would end users want to connect to a PowerPivot workbook as a data source? Even though the Excel 2010 client and Excel Services provide a great interface, there might be situations in which the other technologies are preferable. For example, with SSRS, end users can schedule a report subscription to deliver reports via email on a recurring basis. With PerformancePoint Services, end users can create a dashboard that includes Key Performance Indicators (KPIs) and interactive web-based grids and charts. And with the standard PivotTable interface in Excel 2007 and Excel 2003, end users can connect to a PowerPivot workbook in SharePoint without having to download the entire workbook. For very large workbooks or environments in which not all users have Excel 2010, this option provides a great way of using the PowerPivot data model.
Administration of Data Refreshes
As I mentioned previously, a PowerPivot data model is updated one of two ways: manually in the Excel 2010 client or through a separate SharePoint scheduling process. The data refresh functionality is disabled by default, so an end user or administrator needs to enable it. When a PowerPivot Gallery is displayed in either the Gallery or Carousel view, a small Calendar icon appears to the right of the workbook. Clicking this icon brings up the Manage Data Refresh page shown in Figure 5. To get to this page in the Document Library view, click the down arrow and select the Manage PowerPivot Data Refresh option. In the Manage Data Refresh page, select the Enable check box and create a schedule to refresh one or more of the data sources used by the PowerPivot data model You can also manually refresh the data model by selecting the Also refresh as soon as possible check box.
To clarify, this data refresh capability rebuilds the PowerPivot data model and refreshes the workbook data connection so that the PivotTables and PivotCharts reflect the updated model. From my experience, this is the kind of refresh experience end users expect—not the Excel Services refresh command, which simply re-queries the existing PowerPivot data model.
Administration of the PowerPivot Deployment
Giving end users the ability to easily connect to and consume millions of rows of data is a bit frightening. To manage and monitor the PowerPivot deployment, administrators can use the PowerPivot Management Dashboard, which Figure 6 shows. As I mentioned previously, this dashboard is a built-in component of PowerPivot for SharePoint and is accessible from the SharePoint Central Administration console. To clarify, this is a tool for administrators and not end users.
The PowerPivot Management Dashboard provides performance data for the SSAS instance (e.g., query response time, CPU utilization, memory utilization), general usage statistics for each workbook saved to the SharePoint site, and information about workbook data refreshes. Interestingly, the performance and usage statistics data is collected on a schedule and maintained in a PowerPivot workbook named PowerPivot Management Data.xlsx. In other words, the PowerPivot Management Dashboard uses PowerPivot to monitor PowerPivot.
A New Paradigm
PowerPivot is a new paradigm in BI, which Microsoft calls managed self-service BI. Looking ahead, Microsoft has committed to further PowerPivot investments in the next release of SQL Server, which is code-named Denali. If you'd like to learn about those investments, check out the SQL Server BI Blog "BI for the Masses (including Excel & DBA Pros) Continues…." Even if your organization hasn't yet deployed PowerPivot, I encourage you to get up to speed on its concepts and architectural components, because they will be the building blocks for a major part of Microsoft's future BI capabilities.


text:
Difference between revisions of "Elk County, Pennsylvania Genealogy"
(Fixing vitals)
(PA court template)
|Line 127:
|Line 127:
==== Court Records ====
==== Court Records ====
===== Court of Common Pleas =====
===== Court of Common Pleas =====
|Line 134:
|Line 136:
====== Prothonotary ======
====== Prothonotary ======
===== Orphan's Court (see Vital Records) =====
===== Orphan's Court (see Vital Records) =====
{{PA court6|Elk|502639}}
{{PA court6|Elk|502639}}
Revision as of 18:58, 13 September 2012
United States Pennsylvania Elk County
|Elk County, Pennsylvania
Location in the state of Pennsylvania
Location of Pennsylvania in the U.S.
|April 18, 1843
|County Seat
| Elk County Courthouse
250 Main Street P.O. Box 448
Ridgway, PA 15853
Elk County Website
- 1 Historical Facts
- 2 Resources
- 2.1 Bible Records
- 2.2 Cemeteries
- 2.3 Census
- 2.4 Church Records
- 2.5 Court Records
- 2.6 Emigration and Immigration
- 2.7 Ethnic Groups
- 2.8 Gazetteers
- 2.9 Genealogy
- 2.10 History
- 2.11 Land and Property
- 2.12 Maps
- 2.13 Migration
- 2.14 Military
- 2.15 Naturalization and Citizenship
- 2.16 Newspapers
- 2.17 Occupations
- 2.18 Periodicals
- 2.19 Poorhouse, Almshouse
- 2.20 Probate Records
- 2.21 Repositories
- 2.22 Taxation
- 2.23 Vital Records
- 3 Web Sites
- 4 Places
- 5 References
Historical Facts
|Beginning dates for major county records
- Parent Counties: Formed from Jefferson, McKean and Clearfield Counties 18 April 1843.[1]
- County Seat: Ridgway
- Neighboring Counties: Elk County, Pennsylvania Genealogy residents may also have records in [2]McKean (north) • Forest (west) • Clearfield (south) • Cameron (east) • Warren (northwest) • Jefferson (southwest)
Named for the elk that historically inhabited the area.
Boundary Changes
29 March 1860: Part taken along with parts from neighboring counties to create Cameron County. [1]
Bible Records
Cemetery records often reveal birth, marriage, death, relationship, military, and religious information.
|Online Grave Transcripts
|Published Grave Transcripts
|County Cemetery Directories
|Family History Library
|Names in Stone
|Billion Graves
|Pennsylvania Genealogy
|Pennsylvania Gravestones
|Billion Graves
|Names in Stone
|Access Genealogy
|See Pennsylvania Cemeteries for more information.
For tips on accessing Elk County, Pennsylvania Genealogy Federal (or United States) census records online, see: Pennsylvania Census.
There are no county or state census records available for Pennsylvania. County and city tax records can be used as a substitute when census records are not available.
Church Records
Finding Church Records at Other Repositories
Additional church records can sometimes be found using search phrases such as Elk County, Pennsylvania Genealogy Church Records in online catalogs like:
- Historical Society of Pennsylvania
- WorldCat (For instructions see WorldCat Online Catalog).
- FamilySearch Catalog (For instructions see FamilySearch Catalog Place-name Search).
County-wide Database - Multi-denominational
- 1708-1985 - Pennsylvania, Church and Town Records, 1708-1985 at Historical Society of Pennsylvania – $, free to members of the society; Also available at Ancestry.com – $; 7,542,774 entries. This database is incomplete for all counties.
- "100 years of the Pittsburgh Catholic Diocese 1843–1943," Western Pennsylvania Genealogical Society Quarterly, Vol. 17, No. 1. FHL Book 974.8 B2wg. Chronology, map, county-by-county information.
Court Records
Elk County, Pennsylvania Genealogy court records are housed at the Elk County, Pennsylvania Genealogy Courthouse. For many counties copies of court records may be found at the Pennsylvania State Archives and in the FamilySearch collection. Note that within these collections some films may contain the same records, but have different titles. Other titles are not duplicates. See Finding Court Records at other repositories within this section for links to the online catalogs for these two collections. Films at the Pennsylvania State Archives are not available for inter-library loan. If court records are available FamilySearch films may be available at a local Family History Center. Call ahead for availability.
Court of Common Pleas
Clerk of the Court
Orphan's Court (see Vital Records)
Finding Court Records at Other Repositories
Additional court records can sometimes be found using search phrases such as Elk County, Pennsylvania Genealogy Court Records in online catalogs like:
- Historical Society of Pennsylvania
- WorldCat (For instructions see WorldCat Online Catalog).
- FamilySearch Catalog (For instructions see FamilySearch Catalog Place-name Search).
Emigration and Immigration
For information about emigration into Pennsylvania, see the Pennsylvania Emigration and Immigration page.
Ethnic Groups
Published Histories
Land and Property
Land records in Elk County began in 1844. These records are filed with the Register and Recorder office in Ridgway, Pennsylvania.
Land and property records can place an ancestor in a particular location, provide economic information, and reveal family relationships. Land records include: deeds, abstracts, indexes, mortgages, leases, grants, sheriff sales, land patents, and maps. Property records include liens as well as livestock brands and estray records.
The following are examples of available resources:
Online Land Records
- 1972–present Elk County offers online access to records. Fees apply.
Land Records on Microfilm
- 1844–1910 Deed books, 1844-1887; Deed Index, 1844-1910 FHL film 870473 (first of 22 films)
Additional Resources
Note that the "Maps" section below includes maps related to land ownership.
See Pennsylvania Land and Property for more information about using land records, especially about original land warrants, surveys, and patents filed at the state land office.
Additional resources can sometimes be found using search phrases such as Elk County Pennsylvania Land in online catalogs such as:
- Historical Society of Pennsylvania
- WorldCat (For instructions see WorldCat Online Catalog.)
- Family History Library Catalog (For instructions see FHL Catalog Place-name Search.)
Ancestor Tracks has posted free downloadable images from the 1855 Map of Elk County. This wall map located in the Library of Congress shows major landowners and geographic sites at the date of publishing. While the physical maps are in the public domain, the images we have taken of the maps belong to us and are not to be used commercially. We hereby give permission to use them strictly for personal use; please attribute to Ancestor Tracks.
Naturalization and Citizenship
Naturalization records can contain information about immigration and nativity. Prior to 1906, it is rare to find the town of origin in naturalization records. See Pennsylvania Naturalization for more information about the types of records and availability.
Naturalizations granted at the county level were kept by the office of the Prothonotary. Naturalizations could also be granted on the Federal Court level.
Elk County, Pennsylvania Genealogy newspapers may contain genealogical value including obituaries, births, marriages, deaths, anniversaries, family gatherings, family travel, achievements, business notices, engagement information, and probate court proceedings.
To access newspapers, contact public libraries, historical/genealogical societies, college or university libraries, or state archives in the area where the newspaper was published.
For information on state-wide newspapers see Pennsylvania Newspapers
Newspapers of Elk County, Pennsylvania
- Pennsylvania Newspapers
- Chronicling America US Newspaper Directory
Online Newspapers
To learn if there are newspapers online for a specific town or city in Pennsylvania, see news.google.com/newspapers and search for the town or the name of a newspaper.
Online Newspaper Abstracts
- PA-Roots Newspaper Articles for Elk County.
Obituaries are generally found in local newspapers where the person died. However, sometimes an obituary is found in the location from which he or she originated. To find an obituary, see the information under the Newspaper heading
|Sometimes the fastest way of finding obituaries is to call or email the local public library in the area where the person died. If the library does not have newspapers, a librarian often will know where they are kept. If a death date is known, and the newspapers are at the library, someone on staff will usually make a search for a small fee, or will indicate someone who will do the search.
Online Obituaries Abstracts
- PA-Roots Obituaries for Elk County.
- Elk County Obituaries at Elk County, Pennsylvania USGenWeb Archives
Indentured Servants
Poorhouse, Almshouse
Probate Records
Probate matters in Elk County, Pennsylvania Genealogy are handled by the Orphans' Court and start when the county was created. To obtain original probate records, contact the Orphan's Court in the County Courthouse.
In addition to wills and administrations, the Orphans' Court also handles: audits of accounts of executors, administrators, trustees, and guardians; distribution of estates of decedents, incompetents, and minors; appointment and control of guardians; adoptions; appeals from the Register of Wills involving probate matters; inheritance tax appeals and various petitions and motions.
Online Probate Indexes
- 1843–1880's – Elk County Wills at PAGenWeb. Index of the first 100 wills recorded in Elk County, Will Book A. Lists name of deceased, residence, date written, date proved, executors, and witnesses. [Project did not continue on to add all wills recorded in Book A.]
- More Elk County Wills at PAGenWeb links to the North Central Pennsylvania page hosted by Rootsweb with an index and twenty-six transcriptions from Elk County Will Books A and B.
- Elk County Wills and Estate Records at Pennsylvania USGenWeb Archives
Online Probate Records
Original probate records for some Pennsylvania counties are available free online as digital images at FamilySearch.org. The dates vary significantly for each county and not all counties are listed. Some counties may only have probate indexes. This Pennsylvania collection of images may be browsed through the links listed below:
Complete Collection:
Elk County only:
Original Probate Records on Microfilm
- 1844–1868 Miscellaneous Docket FHL films 870491-870492 – Index included: 1844–1971
- 1844–1971 Index to Estates FHL films 870486–870487
- 1845–1916 Will Books FHL film 870488 (first of 3 films)
- 1851–1896 Accounts FHL film 870490 - Index included
- 1857–1886 Court Docket FHL film 870489
Additional Probate Indexes and Abstracts
Additional probate indexes or abstracts can sometimes be found using search phrases such as Elk County, Pennsylvania Genealogy probate wills in online catalogs like:
- Historical Society of Pennsylvania
- WorldCat (For instructions see WorldCat Online Catalog).
- FamilySearch Catalog (For instructions see FamilySearch Catalog Place-name Search).
- The Pennsylvania Archives collection contains county archive records that can be searched onsite. Currently the Archives' staff cannot provide research or make copies of these records. Their collections include Almshouse Registers; Tax records; Birth, Death and Marriage Indexes and Records; Midwife records; African American records; Wills; Deeds; Naturalizations; Coroner's inquests; and Orphan's Court dockets. A list of the Archive's county holdings are on Microfilm or Manuscript form.
Elk County Courthouse
250 Main Street, P.O. Box 448
Ridgway, PA 15853
Family History Centers
Rich in history, Elk County, Pennsylvania Genealogy contains a number of societies dealing with the history of the area.
- Elk County Historical Society
P.O. Box 361
Ridgway, PA 15853
(814) 776-1032
- Elk County Genealogical Society
P.O. Box 142
Johnsonburg, PA 15845
Vital Records
Vital records are handled by the County Orphans' Court. Between the years 1852-1855 Pennsylvania made a failed attempt to record birth, marriage and death events at the county level. While the records for that time period are available, there were few events recorded. County marriage records were kept in earnest in 1885. Births and deaths, at the county level, were begun in 1893 and kept through 1905. Abstracts and copies of vital records are available for some counties, but most are incomplete. For the most complete set of records, always contact the County Orphans' Court.
Some birth records exist for the 1852–1853 time period for Elk County. Only a small percentage of births were recorded in this time period. These records are available at:
- 1852-1854- Pennsylvania Births Ancestry.com – $ Index with images
- 1852-1853– Birth Records FHL film 1317012 Item 1
Birth records for Elk County began in 1893. The Elk County Clerk of the Orphans Court maintains the birth records from 1893–1906. To obtain a copy of birth record in the 1893–1906 time period you may contact:
Clerk of Orphan's Court
Elk County Courthouse
240 Main Street
PO Box 314
Ridgway, PA 15853
The birth records for Elk County were microfilmed by FamilySearch. These microfilms may be ordered into a local FamilySearch Center or authorized public library for a small fee.
- 1893-1906 Births - Elk County, Pennsylvania FHL book 974.885 V2cAn alphabetical listing of 1893–1906 births from Elk County was published by Charles Howard Starr. The book is available at the Family History Library.
- 1893-1907 – Birth Records FHL film 1288685
Beginning in 1906 Pennsylvania birth records are available through the Department of of Health. Birth records become public after 105 years. A statewide index is available. Once an individual is located in the index a certificate can be obtained by writing to:
Division of Vital Records
ATTN: Public Records
P.O. Box 1528
New Castle, PA 16103
The cost for an non-certified birth certificate is $3.00.
Elk County marriages are maintained by the Clerk of the Orphans' Court. The county began recording marriages in October 1885. A few marriage records were created by the county in the 1853–1854 time period. To obtain a marriage record you may go to or contact the Clerk of the Orphans' Court at:
courthouse building.
- 1700-1821 - Pennsylvania Marriage Records Ancestry.com – ($) This database is incomplete for all counties.
- 1725-1976 - Pennsylvania, Marriages, 1709-1940 - free index. Not complete for all years. This index is not necessarily intended to index any specific set of records. This index is not complete for any particular place or region. This collection may include information previously published in the International Genealogical Index or Vital Records Index collections.
- Pre-1810 – Pennsylvania Marriages Ancestry.com – ($) This database is incomplete for all counties. Includes 35,000 marriage records from vol. VIII of of the second series of the Pennsylvania Archives.
- 1852-1854 - Pennsylvania Marriages Ancestry.com – ($) Index with images.
- 1853-1854 – Marriage records FHL film 1317012
- 1885-1916 – Marriage License Docket film 1288525 (first of 8)
- 1885-1950 - Pennsylvania County Marriage, 1885-1950 Extracted marriage records – free. This database is incomplete for all counties. May also contain marriage records earlier than 1885.
Divorce records are available through the office of the Prothonotary. The office of the Prothonotary is located in the courthouse building.
Elk County began recording deaths in 1893 although some were recorded from 1853–1854. These records as well as records from 1893–1906 are available at the County Courthouse in Ridgway. You may request a death record from the Clerk of the Orphans' Court. courthouse building.
These county death records were microfilmed by FamilySearch.
- 1893–1907 – Death Records FHL film 1288684
Pennsylvania death certificates become public records after 50 years. An annual index is released by the Pennsylvania Department of Health. Records less than 50 years old are kept by the Division of Vital Records and are not public certificates. Only certain people can request a non-public death certificate. To order a non-public representative you must be:
- Legal representative of decedent's estate
- Immediate family member
- Extended family member who indicates a direct relationship to the decedent
- Power of Attorney (Please note that a Power of Attorney document is no longer valid upon the death of the individual)
See the Pennsylvania Department of Health website to obtain a copy of a non-public death certificate. The cost is $9.
The cost for a non-certified public death certificate is $3.00. Indexes for Pennsylvania public death records are available online through the Department of Health for 1906 through 1961. Once an individual is located in the index a certificate can be obtained by writing to:
Division of Vital Records
ATTN: Public Records
PO Box 1528
New Castle, PA 16103
Finding Vital Records at Other Repositories
Additional vital records can sometimes be found using search phrases such as Elk County, Pennsylvania Genealogy Vital Records in online catalogs like:
- Historical Society of Pennsylvania
- WorldCat (For instructions see WorldCat Online Catalog).
- FamilySearch Catalog (For instructions see FamilySearch Catalog Place-name Search).
Web Sites
- USGenWeb project. May have maps, name indexes, history or other information for this county. Select the state, then the county.
- Family History Library Catalog
- Encyclopedia listing for Elk County, Pennsylvania from Wikipedia
Populated Places
- Benezette Township
- Benzinger Township
- Fox Township
- Highland Township
- Horton Township
- Jay Township
- Jones Township
- Millstone Township
- Ridgway Township
- Spring Creek Township
- ↑ 1.0 1.1 Handybook for Genealogists: United States of America, 10th ed. (Draper, Utah: Everton Pub., 2002), [FHL book 973 D27e 2002]. Cite error: Invalid
<ref>tag; name "HBG" defined multiple times with different content
- ↑ Wikipedia contributors, "Adams County, Pennsylvania" in Wikipedia: the Free Encyclopedia at http://en.wikipedia.org/wiki/Adams_County,_Pennsylvania (accessed 17 July 2012).


text:
Alyssa O'Brien is the author of 'Envision In Depth: Reading, Writing, and Researching Arguments (2nd Edition)', published 2010 under ISBN 9780205758463 and ISBN 0205758460.[read more]
{{post.questionOneAnswer|unescape}} {{post.questionTwoAnswer|unescape}}[read more]
You can find lots of answers to common customer questions in our FAQs
View a detailed breakdown of our shipping prices
Learn about our return policy
Still need help? Feel free to contact us
View college textbooks by subject
and top textbooks for college
With our dedicated customer support team, 30-day no-questions-asked return policy, and our price match guarantee, you can rest easy knowing that we're doing everything we can to save you time, money, and stress.


text:
Israeli minister says Syria used chemical weapons
JERUSALEM (AP) — A senior Israeli official says chemical weapons were used in the attack in Syria that left at least 100 people dead in the eastern suburbs of Damascus.
Yuval Steinitz, the minister for intelligence and strategic affairs, says Israel's assessment is based on "intelligence estimates." He did not elaborate.
Steinitz told Israel Radio on Thursday that the attack the previous day was not the first time such agents were used.
Steinitz appears to be blaming Syrian President Bashar Assad and calls his regime "exceptionally cruel."
Israel has accused Assad of deploying chemical weapons in the past and has repeatedly expressed concern that neighboring Syria's chemical arsenal could fall into the hands of anti-Israel militants.
The U.N. Security Council has called for an investigation into the latest allegation of chemical weapons use.


text:
|Le Maroc - pays des merveilles
url: http://www.colby.edu/lrc/projects/maroc/high/
purl: http://purl.oclc.org/colby/lrc/morocco
license: Creative Commons (by-nc-sa)
current version:beta
Video clips from a Colby trip to Morocco to study women's NGOs, narrated and subtitled in French. This site includes an extensive Teacher's Guide as pedagogical grounding for how to make use of the website as a curricular resource.
|Bihua Project
url: http://www.colby.edu/lrc/studio/chinese/
purl: http://purl.oclc.org/colby/lrc/bihua
license: Creative Commons (by-nc-sa)
current version: 2.0
Searchable database of movie clips showing stroke order, pronunciation, and meaning of 700 chinese characters. An open content project built in collaboration with the University of Connecticut LRC.
url: http://www.colby.edu/~bknelson/SLC/index.php
license: copyright
current version: final
Barbara Nelson's latest project developed with the help of the LRC Design Studio.
|Venez Voir Le Sénégal
license: Creative Commons (by-nc-sa)
current version: 1.0
Six short film clips in French, along with French transcriptions form the core of this learning object.
|Chekhov Centenary Festival
url: http://www.colby.edu/lrc/projects/chekhov.html
purl: http://purl.oclc.org/colby/lrc/chekhov
license: copyright
current version: 1.0
NEH Conference website and potential portal for future streaming media content.
Prononciation de Français
url: http://www.colby.edu/lrc/projects/phonetique.php
purl: http://purl.oclc.org/colby/lrc/phonetique
license: copyright
current version: final
Pronunciation guide for French using International Phonetic Alphabet notation and embedded quicktime audio.


text:
VALENCIA, Spain (AP) -- Goals by Ezequiel Lavezzi and Javier Pastore gave Paris Saint-Germain an important 2-1 away win at Valencia in a the first leg of their Champions League last-16 match Tuesday, which still ended badly for the French team as it allowed a late goal and had star striker Zlatan Ibrahimovic needlessly sent off in injury time.
PSG looked to have virtually secured a spot in the quarterfinals after Lavezzi hit his fourth goal of the season with a fierce strike in the 10th minute and Pastore doubled the lead in the 43rd when he shot through Valencia goalkeeper Vicente Guaita's legs.
But Valencia clawed back into the series when Adil Rami latched on to a perfectly delivered free kick by Tino Costa in the 90th, and Ibrahimovic then earned a straight red card for a clumsy challenge on Andres Guardado, meaning he will miss the return leg.
"We played really well, we have to be happy but at the end it was not good for us,'' PSG coach Carlo Ancelotti said. "Valencia is a good team, we have played the first half, but now we have to play second half and we have to pay attention.''
In Tuesday's other game, Juventus beat Celtic 3-0 in Glasgow to take a seemingly comfortable lead ahead of the return leg on March 6.
Up until those final few minutes in Valencia, PSG had seemed likely to take a similar advantage with it back to Paris. Everything had worked perfectly for the French club, which is trying to establish itself as a European power after spending lavishly on star players since being bought up by wealthy Qatari owners.
While Valencia was allowed to control play for much of the game - enjoying more than 60 percent of possession - the French team calmly sat back and defended, before launching counterattacks that always proved dangerous.
"They have been very strong, each counter had much danger and the truth is that we may have been too straightforward,'' Valencia coach Ernesto Valverde said.
PSG's 20-year-old attacking midfielder Lucas Moura was behind many of those counterattacks in the first half, wreaking havoc with his speed along the right wing and possible leaving new signing David Beckham - who watched on in the stands - wondering where he can find a spot in the lineup.
Moura hit the post with a fierce strike from distance in the ninth minute, but PSG still went ahead moments later.
Lavezzi played a one-two with Pastore and then skillfully dribbled past defender Ricardo Costa into the area before sending a fierce shot past Guaita, who allowed the ball to pass over his shoulder.
Valencia midfielder Ever Banega had a chance to equalize when he pounced on a poor clearance but shot wide in the 20th.
Moura was then behind PSG's second goal, breaking down the right flank and going past a defender before squaring the ball for Pastore, whose low shot snuck past Guaita, who again looked like he had a chance to save it.
Moura was then taken off early in the second half with an apparent ankle problem, but PSG still created several chances to extend its lead.
Ibrahimovic and Lavezzo both had efforts saved, while substitute Clement Chantome had a goal ruled out for offside - despite protests from the French team that a Valencia player had last touched the ball.
Valencia also had chances, with Nelson Valdes wasting the best one when he received a lobbed pass in the area but shot into the side netting in the 76th.
But the Spanish team finally broke through when Costa's free kick sailed over the PSG defense and Rami was there to knock it into the net. And Valencia's chances of turning things around then increased significantly when Ibrahimovic - possibly frustrated at conceding a goal - stamped Guardado's foot in a reckless challenge near Valencia's corner flag, leaving the French team without its top player for the return game.
While the challenge was clearly unnecessary, Ancelotti was among those who thought the straight red card was harsh.
"It was a normal tackle and it was nothing special, and I was surprised by the red card,'' Ancelotti said.


text:
- Home
- News
- Sports
- Opinion
- Obituaries
- Features
- Special Sections
- Classifieds
- Public Notices
The late-January winter storm that slammed into Kentucky tested not only our infrastructure but our spirit.
Belying its glistening beauty, the relentless accumulation of snow and ice caused such devastation that its impact has been compared to that of an earthquake.
Nearly 800,000 families and businesses – representing almost 36 percent of the state's energy consumers -- lost power.
If you currently subscribe or have subscribed in the past to the The Springfield Sun, then simply find your account number on your mailing label and enter it below.
Click the question mark below to see where your account ID appears on your mailing label.
|ZIP Code:


text:
Apple's Cyclone microarchitecture detailed
Anand Lai Shimpi, writing for Anandtech:
At the launch of the iPhone 5s, Apple referred to the A7 as being "desktop class" – it turns out that wasn't an exaggeration.
… Looking at Cyclone makes one thing very clear: the rest of the players in the ultra mobile CPU space didn't aim high enough. I wonder what happens next round.
The full article is an interesting dive into the A7 chipset. It's clear that Apple's early purchases of semi-conductor companies is paying off, and has effectively made Apple the current leader.


text:
HONOLULU (Reuters) - A Hawaii state health official who gained national attention when she released a copy of President Barack Obama's birth certificate in 2011, died from a stress-induced irregular heartbeat following a plane crash last month, police said.
Loretta Fuddy, 65, director of the Hawaii Department of Health, died on December 11 after a single-engine plane with nine people on board crashed some 300 yards off Molokai's Kalaupapa peninsula during an inter-island flight.
The pilot and seven other passengers survived the crash with various injuries and one of the injured swam to shore, a U.S. Coast Guard official said.
"It has been determined that Fuddy's cause of death was cardiac arrhythmia as a result of stress and the manner of death was accidental," the Maui Police Department said.
Heart rhythm problems occur when the electrical impulses in the heart that coordinate heartbeats do not work properly, causing the heart to beat too fast, too slow or irregularly, according to Mayo Clinic's website.
Hawaii Governor Neil Abercrombie appointed Fuddy as health director in 2011. She previously held other leadership positions in the state, including chief of the Family Health Services Division.
Amid accusations by so-called "birthers," who said Obama was not born in the United States, Fuddy released to him copies of his original certificate of live birth in Hawaii.
She said that "in recognition of your status as president of the United States," she was making an exception to her department's policy of only releasing a computer-generated certified copy.
Obama then released a copy of that longer version of his birth certificate in response to the widely discredited claims he was not born in the United States. In doing so, he blasted "carnival barkers" who refused to let the issue go.
A spokesman for the Hawaii Department of Health said Fuddy's deputy, Keith Yamamoto, was among the passengers who survived the crash of the Cessna 208 Caravan.
The flight was being operated by Makani Kai Air, which flies between Oahu and Molokai.
Reporting by Malia Mattoch in Honolulu; Writing by Eric M. Johnson, editing by Elizabeth Piper


text:
Aspire People are the UK's leading
Education Recruitment Agency.
1,268,230 Teachers placed
Register with us and we will find you exciting education roles
Teaching AssistantRegister with us
Job Reference: 00001016909017652
Date Added: 12.12.17
£ £250 - £325 Per week
Job Type: Education and Training
Sector: Primary non-teaching
Duration: Contract
Interviewing: N/A
Level 3 Teaching Assistant
GBP50-GBP65 per day
Aspire People are currently recruiting for a qualified Level 3 Teaching Assistant to work in one of our schools in Stourbridge.
The school itself is a fantastic school and they are looking for a committed and experienced Level 3 Teaching Assistant to join their team.
The successful candidate will:
* Enjoy working with children
* Have experience of teaching primary aged pupils
* Have excellent English and Mathematic skills
* Have excellent interpersonal and communication skills
* Be able to plan and work independently and under own initiative
* Enjoy working as part of a team
* Be well organised and have a positive outlook
* Be passionate, self-driven and motivated
* Have a secure knowledge of the curriculum
* Able to plan, assess / mark children's work
In return you are offered:
* Enthusiastic, welcoming and friendly children and staff
* Support from an experienced team of teachers and governors
* A happy workplace
* Professional development
* A consultant who will lead you through the process
We are currently working with numerous vacancies so if this position is not quite for you please do send us your CV to discuss other opportunities more suitable to your requirements.
Aspire People take safeguarding children and safer recruitment practices very seriously. You will be required to attend a face to face interview and Aspire People will also undertake a number of vetting checks prior to completing your application. This application process is highly effective and will not prolong you from starting an assignment.
Aspire People are an equal opportunities employer and welcome applications from instructors, overseas trained teachers and qualified teachers. As long as you have a real passion for teaching and for inspiring the youth of today, you can communicate well with your consultant and go that extra mile for all of our clients we could have the ideal solution for you!
Here at Aspire People you won't just be treated as a 'number' but as a person, your consultant will offer you the personalised service that you deserve.
We look forward to hearing from you.
Aspire People Limited provides services as an Education Agency and an Education Employment Business. Aspire People is committed to safeguarding and promoting the welfare of pupils and expects every candidate to share this commitment. Placements are subject, to appropriate Child Protection screening, including checks with former employers and the Disclosure and Barring Checks.


text:
Palit GT 240 Sonic Review
Today Palit and nVidia have launched a new video card – the Palit GT240 Sonic Edition – which packs in 96 CUDA cores, and for this particular card, 1GB of GDDR5 memory, while other models should be available with 512MB and for less money. Palit is the first company to come out with a 1GB version of this card. The GPU core is built on the 40nm fabrication process with 128-bit bandwidth. Connectivity is through VGA, DVI, and HDMI. The card supports Microsoft DirectX 10.1 with Shader Model 4.1 support, OpenGL 3.2, nVidia CUDA technology, nVidia 3D Vision, nVidia PureVideo HD technology, amongst many other features. The card should use very little energy since it doesn't even use an auxiliary power connector common on most other video cards, except for entry-level devices, since the PCI Express slot can only supply around 75W. With the same number of CUDA cores as the 8800 GS, 8800 GTS, and 9600 GSO, with possibly other cards also having the same number of CUDA cores, it will be interesting to see how well the Palit GT 240 1GB compares to those cards and how much the extra memory and GDDR5 may help.
The GT 240 is intended to bring quality media and decent gaming for a decent price tag, but it is also suggested to be used as a PhysX processing card in an SLI setup with a more powerful card to enhance gameplay and further boost FPS. This feature will also be examined to see how effective the card actually is at these claims.
Closer Look:
The front of the box has the unique mascot of Palit – Frobot – swinging around in his mechanical body. In the top left corner the box reads "The Latest Technology 40nm†with a lightning bolt, which I assume is there for the increase in energy efficiency that is usually gained by switching to a smaller node design. Also on the front is the company mantra, "Play it, Tweak it, Get more out of it.†Hopefully users will be able to tweak this card for some serious performance! Near the lower right some of the basic features of the card are listed: the Palit GT 240 is a Sonic Edition with 1GB of GDDR5 on a 128-bit bus. The back of the box has the Palit acronym spelled out and listed in several languages: nVidia Geforce chipset, Advanced Display Pipeline with Full nView capabilities, Complete DirectX support, including DirectX 10.1 and lower, Full OpenGL 3 and lower support, and Drivers included for Windows XP, Vista and 7. The back also has the website and contact e-mail addresses.
The sides of the box have the slogan and company logo again, but also list HDMI and HDCP capability, PCI Express design, and have a small nVidia logo in the corner. Opening the box shows that a red bubble wrap bag protects the card, which is surrounded by a cardboard platform with plenty of space around the sides to help deter damage.
Removing the graphics card and cardboard platform allows access to the installation guide and driver CD that were stuck together. The card is fairly small but sounds promising from the specifications even though the bundle is almost nonexistent, nothing is really needed except for drivers and maybe a manual to get this card running, so only time and testing will tell.
With the Palit GT 240 Sonic out of the box, let's examine it closer!


text:
I've done a design consisting of white spray paint onto wood, followed by drawing with a "Sharpie" brand permanent marker.
The sharpie despite being described as "permanent on most surfaces" was not exactly on top of the white spray paint (It faded significantly over time so the contrast was lost between the original dark black and white background - to a greyish colour against a white background).
I re-did the drawing and tried to spray it with a clear spray paint after the marker had dried for two days, to try and add a protective coat to stop the marker colour fading so much (sealing it from air).
When I sprayed it, the ink ran dramatically, blurring the drawing. I sprayed it slowly at a reasonable distance from the wood, but it still blurred.
Is there any other way I can stop the marker fading over time? Other clear protective coatings for example?


text:
Expedia Verified Reviews
Don't miss out on a lower price on this hotel
Get an overview of this hotelGarza Garcia hotel with full-service spa and unique pool
Popular property highlights
Basilica: 2.9 km
This Garza Garcia hotel is 2.9 kilometers from the Basilica de Guadalupe, 3.5 kilometers from Plaza Zaragoza, and 4 kilometers from Faro de Comercio and the Museo de Arte Contemporaneo. A shopping center is located a few steps from the hotel.
24-hour room service
Camino Real Monterrey features an outdoor pool with sun loungers, a full-service health spa with sauna, a business center, a coffee shop, and two on-site restaurants. Room service is available 24 hours a day.
Flat-panel LCD TVs
The 254 guestrooms at Camino Real Monterrey offer minibars and 40-inch flat-panel TVs with premium cable channels. Bathrooms include telephones and hair dryers. Turndown service is provided.
Languages Spoken
- English
Camino Real Monterrey
Hotel Amenities
Hotel Amenities
Camino Real Monterrey is in a distinct, brick-colored building in Garza Garcia and is conveniently connected to a shopping center, in the business district and near convention center. The hotel's unique aesthetic is evident throughout the hotel, with an atrium-style lobby with stripes of natural stone, arched ceilings, glass walls, a lobby fireplace, and richly pigmented furnishings. The hotel's unusual pool runs from outdoors to indoors and is surrounded with sun loungers. There is also fitness equipment, a sauna, and a full-service health spa that provides a variety of treatments. The hotel offers two restaurants, an Internet-providing coffee shop, and 24-hour room service. This property also has a heliport.
The business center, located on the mezzanine floor, offers 3 meeting/conference rooms, secretarial services, and print services. The hotel also offers free WiFi, translation, currency exchange, tour assistance, and a concierge desk. Newspapers are complimentary. Laundry facilities are available on site. Parking is available onsite for a fee.
Camino Real Monterrey is a smoke-free property.
- Express check-in
- Bar/lounge
- Elevator/lift
- 24-hour front desk
- Business center
- Conference space
- Porter/bellhop
- Meeting rooms 3
- Coffee shop or café
- Dry cleaning/laundry service
- Free WiFi
- Pool sun loungers
- Self parking (surcharge)
- Steam room
- Valet parking (surcharge)
- Babysitting or childcare (surcharge)
- Health club
- Limo or Town Car service available
- Outdoor pool
- Smoke-free property
- Safe-deposit box at front desk
- Number of restaurants - 2
- ATM/banking
- Breakfast available (surcharge)
- Gift shops or newsstand
- Shopping on site
- Laundry facilities
- Total number of rooms - 254
- Number of floors - 17
- Number of buildings/towers - 1
- Wedding services
- Multilingual staff
- Fireplace in lobby
- Free newspapers in lobby
Family Friendly Amenities
- Family Hotel
- Outdoor pool
- Free Wi-Fi
- Laundry facilities
- Babysitting or childcare (surcharge)
- Cribs/infant beds (complimentary)
Available in all rooms: Free WiFi
Available in some public areas: Free WiFi
Languages Spoken
- English
- Spanish
Self parking (surcharge), Valet parking (surcharge)
Room Amenities
- Connecting/adjoining rooms available
- Air conditioning
- Free bottled water
- Turndown service
- Blackout drapes/curtains
- In-room climate control (air conditioning)
- Free toiletries
- Desk
- Hair dryer
- Daily housekeeping
- Iron/ironing board
- Free WiFi
- Number of bathrooms -
- Minibar
- Premium TV channels
- Private bathroom
- Shower only
- Room service (24 hours)
- Free cribs/infant beds
- Flat-panel TV
- In-room safe (laptop compatible)
Where to Eat
Bistro - This restaurant serves Italian cuisine.
Blue Bar Lounge - This lounge serves a range of drinks, including martinis.
Token C@fe Bar - This bar offers a menu of coffee drinks, sandwiches, and desserts.
Room Service - Available 24 hours a day.
Nearby Things to Do
Camino Real Monterrey offers a health club with weights and cardio machines. The hotel also has an outdoor pool with two lanes.
The recreational activities listed below are available either on site or nearby; fees may apply.
- Golfing nearby
Spa Services
Camino Real Monterrey features a full-service health spa with sauna, offering a variety of services and beauty treatments, such as scrubs, facials, and massages (advanced reservations are required).
Hotel Policies
Check-in time starts at 3 PM
Check-out time is 1 PM
Payment types
Children and extra beds
- Children are welcome.
- Rollaway/extra beds are not available.
- Free cribs (infant beds)!
- Pets not allowed
You need to know
Extra-person charges may apply and vary depending on property policy.
Optional extras
- Fee for buffet breakfast: MXN 337 per person (approximately)
- Self parking fee: MXN 90 per night
- Valet parking fee: MXN 90 per night
Hotel Name
- Camino Real Monterrey
- Camino Real Monterrey Garza Garcia
- Camino Real Monterrey Hotel
- Camino Real Monterrey Hotel Garza Garcia
- Camino Real Monterrey Hotel San Pedro Garza Garcia
- Camino Real Monterrey Mexico/San Pedro Garza Garcia, Nuevo Leon
We should mention
The property has connecting/adjoining rooms, which are subject to availability and can be requested by contacting the property using the number on the booking confirmation.


text:
he LP2985 family of fixed-output, low-dropout regulators offers exceptional, cost-effective performance for both portable and nonportable applications. Available in voltages of 1.8 V, 2.5 V, 2.8 V, 2.9 V, 3 V, 3.1 V, 3.3 V, 5 V, and 10 V, the family has an output tolerance of 1% for the A version (1.5% for the non-A version) and is capable of delivering 150-mA continuous load current. Standard regulator features, such as overcurrent and overtemperature protection, are included.
Please enter valid number
Please enter a valid price


text:
Cross posted at Daily Kos and at Things I Wish Democrats Would Say
Just saw this….
Gore supporters fall short in effort to put him on Michigan ballot
now I'm starting to get worried….. here's more:
LANSING, Mich. (AP) – Efforts to collect enough signatures to put Al Gore on Michigan's January 15th Democratic presidential primary ballot have fallen short.
Supporters needed to collect more than 12,000 valid signatures by today, but collected only around 3,000.
Michigan Draft Gore co-chairman Bob Alexander says the group collected only about a fifth of the money it needed to mount a full-time petition drive.
Gore won Michigan in his unsuccessful 2000 presidential bid, but so far has not said he'll run again for the White House.
He still could get on the January 15th ballot as a write-in candidate if he files with the Michigan secretary of state's office by January 4. But his name will not appear on the regular primary ballot.
I don't understand what Mr. Gore is doing. In 2003, he made it very clear to the Draft Gore movement that he wanted them to stop their efforts. He hasn't done that this time; when asked directly, he has refused to tell us to cease and desist.
But we're getting closer to the moment where it's do or die for a possible Gore campaign. As has been diaried elsewhere, DFA is asking Gore to either get in or get out. I voted for Gore in their poll, and I still am hoping he gets in, but at some point, whether he says anything to the contrary or not, it's going to be over. The question for me is, when is that point?
Does anyone here have any knowledge that would give us hope? Any inkling of anything? Please?
Update: The other major candidates besides HRC are not on the ballot either…..


text:
Deathmatch or Deathwish?
You know how you and your friends sometimes argue over who would win in a fight
between Bruce Lee and Jet Li? Well back in the day, MTV decided to do something
about it by tossing claymation versions of cheeseball celebrities and pop stars
into a wrestling ring and letting them go at it in a no-holds-barred fight to
the death. Hillary Clinton vs. Monica Lewinsky, Jackie Chan vs. Jean-Claude Van
Damme or *NSYNC vs. Backstreet Boys – nothing was too sacred. The result dropped
in '98 and Celebrity Deathmatch was born.
So now it's 2003 and Celebrity Deathmatch hits the video
game world. Talk about impeccable timing. Since I haven't gotten a chance to
see an epic battle between Gary
Coleman and Emmanuel Lewis, I still had a little hope for this game. But
alas, it was not to be. Not only did Celebrity Deathmatch forget
to include my favorite pint-sized stars, it forgot a few other things like "fun"
and "playability," too.
the B-list roster: Busta
Rhymes, Marilyn
Manson, Ron Jeremy,
Carmen Electra,
Top, Mr. T, Shannen
Doherty, Tommy
Lee, Anna
Nicole, the *NSYNC
crew, Jerry
Springer and Cindy
Margolis. There are a few more unlockables, but you won't find anyone noteworthy
– unless you hold Frankenstein and the Wolfman in high regard. There's also
a "create your own celebrity" maker, but since you can't actually make
any other celebrities, it turns out to be a big fat lie. All you find is a smattering
of assorted bodies and heads. You don't even get nice Hollywood accessories
like a boob job or Botox injections.
Celebrity Deathmatch contains a whopping TWO modes. The first,
called Episode, throws you into a predetermined three-fight show. That means
you'll be forced to choose between one of two pre-selected characters for each
particular episode. The entire game is comprised of a mere six episodes, so
you'll be done before you know it. And since all of the episodes have predetermined
fight cards, there is absolutely zero reason to play it again.
The second mode, bearing the incredibly creative name 'Deathmatch,' is your basic Versus mode, allowing you to fight another player. There isn't an option to fight four-way, even though the show has seen some matches with more than two combatants.
Controlling the fighters is really simple since there are only a few moves. There are four basic attack buttons with another button to execute a super move (available when the 'MTV' meter is full). Occasionally items will drop into the ring, but they generally don't have much of an impact since the weapons are completely useless and the only thing worth grabbing is the health icon.
The moves may be simple, but actually hitting your opponent is another matter. Bad camera angles along with extremely short-ranged attacks can make it tougher to land a blow than you'd think. I guess it doesn't matter, since beating the clay-for-brains opponents is about as hard as blinking.
match ends with a deathblow fatality, one of the few noteworthy points in the
game. Mr. T drops the A-Team van on opponents, while Jerry Springer talkshows
them to death with a special guest star. The problem is, each star only has
one fatality, which means it gets stale incredibly fast.
Celebrity Deathmatch lacks the craziness of the TV show it's
based on. There's no out-of-the-ring fighting, no interaction with any cool
objects or any kind of hazards within the squared circle. One of the arenas
is surrounded by rivers of molten lava just begging to swallow a thrown fighter,
but nope, you can't toss 'em in.
Johnny Gomez and Nick Diamond, the hosts of the show, put on a satisfactory performance with plenty of puns and witticisms. It's just too bad the rest of the celebrity impersonators don't do as well. I know for a fact that Shawn does a much better Mr. T impression, while both Duke and Ben can put on a pretty mean *NSYNC show.
Considering the interesting claymation style of the show, the graphics in
Celebrity Deathmatch are bland and boring. The arenas are plain,
the rings themselves are plain and the fighters look nothing like their claymation
counterparts. Instead, they're just played-out polygonal personalities.
I'm not an abnormally strong man, per se, but I was actually able to break
the Xbox version. In mid-fight, the screen locked up and an incredibly annoying
screech kicked in. What a showstopper! It was probably just a fluke, but that
crash was like an exclamation point on the calamity that is Celebrity
Besides the two seconds of fatality joy, the only other redeeming quality
of this game is its price. Major retail outlets tag it at about $20. That's
still about $19 overpriced, but at least they're not trying to pretend this
decorative coaster is anything else.
According to an actual line from the game, "There's nothing you can do to stop
it, except turn it off." I couldn't agree more.