2007-10-17 Wed
车东 posted a photo:
DNS被劫持后,有很大的安全风险,比如Google域下的COOKIE有可能被劫持域的网站读取到。
想使用OpenDNS的服务非常简单,只需要将你现在的DNS换为如下两个地址就行了:
* 208.67.222.222
* 208.67.220.220
如果无法查看此图: 请试用Firefox的Access Flickr 插件
www.chedong.com/blog/archives/001355.html
某国外公司的一个2TB的数据仓库坏了, 由于磁盘的问题, 系统表空间上出现了一些块坏. 他们也不是没有备份, 只是最后一次备份是在一个月以前做的, 而最近一段时间装载和处理了很多数据(大约100G左右), 如果直接恢复到一个月以前的备份, 则需要将这些数据重新装载和处理, 将消耗很长的时间. 在数据仓库中, 一般会将数据按时间分表或分区来存放, 因此还是比较容易将最近处理的数据恢复出来的.
他们的领导给他们下了最后命令, 必须在5个工作日之内将这些数据恢复出来, 以供业务部门进行经营分析. 因此他们在对AUL作了一些测试后, 选用它作为这次恢复的解决方案. 这可是AUL有史以来面最大的数据库了, 要恢复其中100g的数据, 数据量也不算少了. 上次遇到一个1TB的, 不过我建议了他们重新生成数据.
第一天我给他们许可证, 第二天我去问他们恢复进行得如何时, 已经只有一张大一点的表还没有恢复出来, 其他大部份数据都已经恢复好了, 速度还是比较快的. 在整个过程中, 我基本上没有作什么技术支持, 只是将英文站点上的几个页面链接发过去, 告诉他们如何申请许可证, 如何一步一步进行恢复.
中国的数据仓库就没有这样的事了, 一个500G的坏掉了, 在OEM中将用户删除了, 三年的数据, 领导说重新从业务系统来生成数据, 只能说明这个数据仓库并不重要. 另外一个200G的数据仓库坏掉了, 磁盘陈列坏了, 拷出来的系统表空间文件中有很多的坏块, 好象也没有选择去恢复.
还有一个数据库, 一个15G的表空间不知如何被删除了, 只留下了数据文件, 表空间文件用自动增长方式, 在这15G充满了数据. 据说是10月1号左发生的, 到现在还没有恢复, 因为领导还在费用和数据之间做平衡工作.
相关文章 | Related Artiles

东北一哥们前两天中了6500万元的彩票(理论值,实际小于这个数),是开国以来第一人。领奖的时候由运钞车和武装护卫护送,阵势和一小型元首出巡没有什么两样。首先我很羡慕,因为这就意味着他不用继续光荣的劳动了。我以及我周围的一小撮人有一个共同的梦想:35岁以前退休。中了6500万大奖,可以左手对奖,右手写辞职书。高兴的话,可以在原公司对面再开一家一样的公司,然后挤跨它,请原来的老总过来擦皮鞋。不高兴的话,可以就那么呆着,一年出去旅行两次。下半年一次,北半球。上半年一次,南半球。一边玩,一边等着排队的消息,随时准备随神舟十号上天一次。
其次我觉得这位哥们勇气可嘉,没有戴墨镜蒙丝袜什么的,而是勇敢地走到了镜头前面。媒体在他还没有领奖前就已经曝料,很多人都表示,在他们美国领大奖要公布真实身份,这是公众的权利。也有人反对,说必须保护当事人。已经发生过类似的事情,人才从彩票中心出来,刀就已经架在了脖子上。我认识的时评家盛大林先生根据这事已经写好了评论,《彩票中奖者身份不应该保密》。吵来吵去,哥们自己出来了,虽然身边有几个拿霰弹枪(Google拼音中文不及格,xian!霰雪纷其无垠兮的霰,不是San!)的大汉。
我个人是反对曝光真实身份的,因为我们现在是个丛林社会。被亲戚朋友要点,被慈善机构勒索点,这都是小事。关键是一旦曝光之后,连我这样的良民都会立即动了邪念:干掉他。这是种非常自然的心态流露,中国人的行为方式是财不露白。一旦露出来而不抢,那是一种对财神的不尊重,我们要尊重赵公元帅。身边有宝马疾驰而过,路人都要投以仇恨的目光,何况6500万就在面前?
从另外一个方面来说,如果我是媒体记者,报道的风险也很大。法律上保证了中奖人有权保护自己的真实信息,透露就是违法。而他本人有好几千万,如果打官司的话,我的赢面很低。法律是对每个人都是公平的,但是对富人要更公平一些。即使官司赢了,他还有好几千万,买房买车买人都很容易的事情。守法是每个公民的责任,但是权力和财富可以获得豁免。
所以,还是什么都不知道最好,相信有圣诞老人,相信有天堂地狱,相信彩票真的能中大奖。
In this week’s Creative Commons Artist Spotlight, we interview French artist Philippe Mangold about his CC-licensed work available at Jamendo.com.
Why did you decide to release your music under a Creative Commons license?
I always considered art and music in particular as a way to share and build relationships with others. When I heard about the CC licences, I was immediately attracted because it fit my personal ethic. On the one hand, my works are protected under a copyright, but on the other hand I have the opportunity to do anything I want with it — and why not offer them by free downloads? It allows me to have good visibility on the web, a visibility which leads me into relationships with people like Red Hat Magazine readers!
How much of your work is CC-licensed?
All of my work is available under CC license on jamendo.com.
Who are your musical influences?
Actually I’m interested in all music; I’m like a kind of sponge. It influences me if i feel emotionally touched. Of course African music and ethnic music are my strongest influences. I fell for the Swiss harpist/guitar player Andreas Wollenweider. His music turned out to be a revelation for me — a kind of world fusion with a lot of instruments.
My carrier as a musician is pretty weird. Basically I’m a guitarist and I come from rock music. I had the chance to get in touch with many musicians with very different influences and they handed a little of their knowlege down to me, and they all contribute to build my tastes and my styles. I’m a completely open musician and I look forward to new discoveries.
What tools do you use to produce your music?
I work with Cubase but I play all the VSTs. I dont program any samples or loops. This is perhaps why my creations sound alive, with a kind of warmth. Of course I play all guitar, electric or not; it is my favorite instrument.
In composing my music I am very instinctive; despite my high musical level, I completely lean on a kind of intuition that allows me to build a sonic landscape to make the listener feel great emotion.
Are you touring, and if so, how can readers find you?
Currently touring is a project that I’m not able to realize, since I can’t afford it right now. But to play the Voyage Dans L’ether live — it would be an amazing experience.
Anything you’d like our readers to know about you?
I wish a brilliant future to Red Hat Magazine readers, and I advise all readers to keep an ear on the Jamendo platform. There are many talents and so many styles there!
I already wrote once about hosting troubles which we had with this site a while back. Today we had another trouble to one of the European hit servers for ClickAider project.
We had purchased this 1and1 server few months ago, before we were running into troubles and as it was running well and because we have rather quick and automated fail over if it ever crashes we do not get into too much trouble.
There is however yet another traffic trick surprise which we got into.
When we purchased the server we specially looked for traffic limits and 1and1 looked very good from the glance view. Promising Unlimited Traffic with 100Mbit transfer speed and when we got the server it indeed had 100Mbps connection.
Yesterday we’ve noticed server responding slow, showing packet loss as well as very large ping times compared to other servers in the same network. Checking with 1and1 support of course was useless - “if you shut down the web server you do not have any packet loss means it is your application problem”. I specially asked them if they could have enabled any traffic shaping or have any concurrent connection limit on their firewall or something similar - they told me they do not.
Looking closer at the problem I discovered my NIC is now switched to 10Mbit/Half duplex mode which was not enough at the times.
Checking with 1and1 support again I was told I’m switched to 10Mbps because I used over 1TB of traffic over month.
Now I’m given the option to unblock it in the control panel manually but I have to do this each 250GB of traffic manually after it blocks, which is of course unusable for any real use.
Indeed you can find about this limit in fine print but not from the outlined offer.
This is not the first time I run into the problem. The last one was with other provider and was even funnier. I got the server with
3000GB per month of traffic, however as I started to put any traffic on it I found my server is down and I was told their system simply shuts down the server if it uses more than 3Mbit/sec for more than 24 hours. And that was not even in the fine print.
The funnies thing is if you do the math here - if you use 5Mbit/Sec for 30 days 24 hours with 100% efficiency you can use only 970GB worth of traffic, which means their advertised offer is simply unreachable with such restrictions.
Generally in my experience (which is at large extent focused on inexpensive hosting) I found it much better to work with Co-Location than dedicated server hosting. If you get a rack or two, especially from the smaller company (which will make you significant client) you can get fair treatment. On other hand if you’re unlucky if will be harder to move servers to another location than simply stop renting one dedicated server and get another one. Typically used 95% Commit + Overcharge payment is also fair pricing which means hosting provider is interested for me to use more traffic, not less.
There are some surprised in Co-Location market as well but as setting up your own location is more involved you tend to check things more carefully. For example 24/7 support may not be such or it could be a guy living 30 miles from data center which can come where within an hour during the night if you need him. The “remote hands” may also wary a lot in price and quality.
The other interesting surprises I had were about power consumption. First you really need to make sure what power consumption is stated. Many data centers even though they give you 20A of power will only allow 80% peak use, which makes it 16A. In other cases you could get the amperage you can use fully. Of course I do not speak about 110V vs 208V difference which is pretty obvious one. Another gotcha with power is power availability and density - quite often there would not be extra power available or power density allowed per rack will be very low. Hurricane Electric in one of their data centers for example allows 15A of power per rack and this is it - want more power buy another rack.
Going forward we plan to host our consulting business web sites MySQLPerformanceBlog, Percona high quality dedicated server, mainly to keep it isolated from everything else and be secure, while for our other projects such as ClickAider as development and test servers and some other projects we have in works we will need to organize our little data center in the next few months.
For ClickAider this however would not be good enough - to minimize latency we need several GEOIP based locations which gather the data and that would be way to expensive to organize multiple data centers. So for the coming months I will be on lookout for dedicated physical or virtual servers in different parts of the world.
Entry posted by peter | No comment
Thursday, October 18 at 9:00 am and 5:00 pm U.S. Eastern Time
"Every quarter, Oracle releases a Critical Patch Update (CPU) that fixes a hundred or so security bugs in all the Oracle products including the Oracle Database, Oracle Application Server, and Oracle E-Business Suite. These patches are large, complex, and often difficult to understand for the Oracle E-Business since multiple patches are required with some being cumulative and others needing prerequisites. This eLearning session will focus on the October 2007 CPU and the impact on E-Business Suite environments. Topics will include a review of the security vulnerabilities fixed in the CPU, an analysis of the required CPU patches, and a discussion of a high-level patch strategy."
This session is available free to OAUG members and you can sign-up for the session at -
http://secure.meetingexpectations.com/oaug/eLearning/elSchedule.aspx?DayOfWeek=5&mtd=10/1/2007
Oracle released the twelfth Critical Patch Update (CPU) yesterday. This quarter is the same as the previous eleven with many patches and long hours in order to get all the security patches applied in a timely manner. Fortunately like last quarter, this quarter there are no patches required for the Oracle Application Server or Developer 6i. For R12, Oracle has now made the Oracle Applications patches cumulative and the patch is also included in the newly released 12.0.3 patch.
This quarter does have a larger than average number of database vulnerabilities that can be exploited by lowly privileged database accounts, so the database security patch should be a priority. Also, unlike the vast majority of previous database security bugs, this quarter has 7 vulnerabilities that can be exploited without a database account. It appears most of these issues are denial of service or low risk, nevertheless, another reason to prioritize the database patch.
Oracle continues the push to keep all customers on recent versions by only certifying the CPU patches with 9.2.0.8, 10.1.0.5, 10.2.0.2, and 10.2.0.3 for the database and RUP4 or RUP5 for the Oracle E-Business Suite 11i.
Most information about the vulnerabilities and detailed recommendations on patching and testing is available at -
Oracle Oracle Critical Patch Update - October 2007 - E-Business Suite Impact
Oracle Critical Patch Update - October 2007 - Version Support Matrix
I will be presenting an OAUG eLearning Community Thursdays session this Thursday October 18th giving additional information on the CPU and its impact on your Oracle Applications implementation. You can sign-up for the session at -
http://secure.meetingexpectations.com/oaug/eLearning/elSchedule.aspx?DayOfWeek=5&mtd=10/1/2007
Someone got a 2TB Oracle database corrupted due to some trouble (few corrupted blocks) in the system tablespace. It's a data warehouse database, so running in no archive log mode, and the last backup was taken one months ago. A lot of new data have been loaded into it since the last backup, about 100GB new data need to be reprocessed if they directly restore the database from backup. A lot of work load for this job, and the database is very important to the company, they have a dead line to get the database ready for business statistics. Since the data is monthly partitioned or stored in different tables, it's easy to get the recent data back from the corrupted database.
Very lucky that they choose AUL/MyDUL as the data recovery solution for this case. This is the largest database that AUL ever supported, I am proud of this utility.
I provided the license to them yesterday before payment to save their time, and tell them how to do the data recovery. Just after one day, I get the email from them that most of the data have been recovered from the huge database.
"Many thanks for an excellent tool and superior service". I like this feedback from my customers.
Related Posts
Leave New Comment(Current: 1)
Link: http://www.dbatools.net/support/aul_2tb_oracle_recovery.html
tnsping,oracle中最常用的判断client和server端通信的命令,应该没有人会觉得这个命令不安全,说实话,今天以前,我也觉得,tnsping不安全的话,oracle就没有那个命令是安全的了,可是,tnsping真的安全吗?
今天碰到一个案例.我们的多台服务器之间,要进行互相的tnsping检查,看到底那些连接已经不需要使用,或者说是需要下线.
服务器太多,有其他部分写了shell给我们,我们测试过shell,只是互相的tnsping,在各个平台上均测试过,没有问题,ok,那就部署到各个服务器上,开始互相tnsping吧.写过来的脚本,对于可以tnsping通的,会很快通过,如果不能连接的,会有一个超时判断,也就是会尝试了,这个想必逻辑上也没有太多的问题.
进行了一个多小时以后,应用突然报故障,有一个服务器失去连接,rlogin,telnet均无法和该服务器连接.找主机的兄弟介入,发现该服务器内存消耗完毕.导致服务器不堪重负,宕机了.
进一步跟踪后发现,该服务器os为aix 5.3,oracle版本为9206,rac环境,因为是多个服务器之间互相tnsping,所以这个环境也就是他自己tnsping其他服务器时候的client的环境.系统检查后发现,tnsping这个进程消耗了所有剩余的内存和page space.tnsping真的有这么强吗.
测试说明一切,找一个完全相同的环境,在人工监测下,进行tsnping操作.发现,如果是tnsping一个不通的服务器,那么,每秒大概消耗整个万分之五的内存.也就是说,大约90分钟后,tnsping会消耗掉client端的所有内存,如果你的这个client刚好又是其他的应用的服务器端的角色,那么,就会导致服务宕机.
在hp平台上,作同样的操作,未发现这个问题,那么,这个问题到底是aix的缘故还是oracle的缘故,持续关注中.也欢迎大家讨论下为何会有这种问题.如果是单机环境,也将不存在这样的问题,是rac引入的bug,又或者是opatch的问题,我们需要继续测试,也欢迎见过这种问题的兄弟,说说到底是什么状况引起的,或者是patch不对,或者是os的补丁问题?
奇怪的问题最近非常多呀!
已确认该问题为bug,bug id为2728394.
One of the first rules you would learn about MySQL Performance Optimization is to avoid using functions when comparing constants or order by. Ie use indexed_col=N is good. function(indexed_col)=N is bad because MySQL Typically will be unable to use index on the column even if function is very simple such as arithmetic operation. Same can apply to order by, if you would like that to use the index for sorting. There are however some interesting exception.
Compare those two queries for example. If you look only at ORDER BY clause you would see first query which sorts by function is able to avoid order by while second which uses direct column value needs to do the filesort:
-
mysql> EXPLAIN SELECT * FROM tst WHERE i=5 AND date(d)=date(now()) ORDER BY date(d) \G
-
*************************** 1. row ***************************
-
id: 1
-
select_type: SIMPLE
-
TABLE: tst
-
type: ref
-
possible_keys: i
-
KEY: i
-
key_len: 5
-
ref: const
-
rows: 10
-
Extra: USING WHERE
-
1 row IN SET (0.00 sec)
-
-
mysql> EXPLAIN SELECT * FROM tst WHERE i=5 AND date(d)=date(now()) ORDER BY d \G
-
*************************** 1. row ***************************
-
id: 1
-
select_type: SIMPLE
-
TABLE: tst
-
type: ref
-
possible_keys: i
-
KEY: i
-
key_len: 5
-
ref: const
-
rows: 10
-
Extra: USING WHERE; USING filesort
-
1 row IN SET (0.00 sec)
If you take a closer look to WHERE clause you will find the reason - date(d) equals to date(now()) which is constant which means we're sorting by constant and so sort phase can be skipped all together.
Note in this case MySQL Optimizer is rather smart and is able to do this even if we have function in ORDER BY and exactly the same function is equals to constant by WHERE clause. If course it works for direct constants as well.
However if functions are different MySQL is not able to do this optimization even in cases when this would be possible:
-
mysql> EXPLAIN SELECT * FROM tst WHERE i=5 AND date(d)=date(now()) ORDER BY unix_timestamp(date(d)) \G
-
*************************** 1. row ***************************
-
id: 1
-
select_type: SIMPLE
-
TABLE: tst
-
type: ref
-
possible_keys: i
-
KEY: i
-
key_len: 5
-
ref: const
-
rows: 10
-
Extra: USING WHERE; USING filesort
-
1 row IN SET (0.00 sec)
Entry posted by peter | One comment
Yesterday I've attended MySQL Customers Conference in London. This event is much smaller size than Users Conference (one day and about 170 people attending) and surely less geeky - there were no one from MySQL Development Support or Consulting teams and Sales Engineers were as close as you could get. Though Anders Karlsson and Ivan Zoratti are one of the best of the kind being more technical than quite a few of the teams mentioned.
It started with Robins presentation about MySQL features and Roadmap. Not what it was something new but it was good to hear about release plans for MySQL 5.1 (Q1 2008) and MySQL 6.0 (Q4 2008) - which sounds pretty ambitious to me but we shall see how many resources 5.1 will take after it is released to get all the issues resolved. Falcon will be default transactional storage engine in MySQL 6.0 - I did not truly understand if it will be recommended transactional storage engine or just default storage engine will switch from MyISAM to Falcon.
It was rather interesting to hear a lot about features of new storage engines such as Nitro and InfoBright but there was nothing told about Innodb features, even ones such as page compression which were publicly announced before.
Somewhere in 6.x series proper performance monitoring instrumentation and semi-synchronous replication is promised together with a lot of other good stuff.
Robin also showed some optimized improvements for subqueries in MySQL 6.0 which are pretty cool and which we still do not have a time to take a closer view at.
There is also not much told about Maria (aka MyISAM++) in product road map presentation, so I guess this is also kept low profile, while later in the conference Anders and David barely mentioned it.
Performance Tuning Presentations - I've visited two of these, one by Anders and one by Ivan. There was not much of new stuff to learn (I would not be doing much job if there would be). Though it was fun and mostly correct - we had interesting discussions with Anders. Ivan had number of benchmarks presented in his presentations which however were hard to understand as table schema as well as queries were often missing not even to say about settings.
Customer Presentations - There was one by Swedish Police and one by Net-A-Porter. I was on the second one and I kept thinking how these guys happened to be chosen ? Well It was perfect presentation from Marketing side perhaps the speaker kept quoting benefits of MySQL Enterprise from MySQL Marketing Materials . There is not much of technical insight otherwise - pretty simple site, master slave replication, plans to use DRBD, nothing which I would call fancy or exciting. Though this is may be what London audience is looking for - how does "Average Joe" benefits from MySQL Enterprise offering and MySQL Services. I would prefer to hear about some project which cooler from the technical standpoint and I bet it would not be that hard to find.
Partner Presentations Couple of sponsors had a time to talk. Dolphin Interconnect was perhaps most interesting for guys dealing with High Performance. Though I'd really like them to see to have some work done outside of MySQL Cluster - for example quite possible their solution could help a lot to shorten latency dealing with MemCache servers etc.
MySQL High Availability Solutions This was very good talk by Anders - it felt like he likes this topic a lot and spend plenty of time preparing this presentation and Anders also had a lot of practice in the area. It was mostly focused on DRDB which I'm not the big fan of for various reasons.
The last part was Storage Engine Panel which was very unusual to see without Brian Aker which normally takes part in all Storage Related activities. There were some Q&A about various storage engines - mostly basic stuff.
As a final note I should say this was much more than British conference - were were a lot of people from Sweden, Norway, Denmark, Netherlands and other countries. I guess they are much better of with English speaking conference than one in Paris for example
Entry posted by peter | 4 comments
这次因为私事回武汉,结果发现到了那里,没有网络,被同事催命,要求处理事务.上不了网真不爽,而cdma的话,太贵,一个月要130多列,而且我去的地方基本都有网络.
所以只能临时用手机作为调制解调器来顶一下,不过在武汉因为没有网络,所以不能google,就找不到解决的方法,今天搞定,记录之.
我的手机型号是Moto E6.
首先,找个e6的驱动,据说是叫MPT,安装再说,不过不知道是不是手机是水货的缘故,居然这东西找不到手机.先不管.在手机的设置中选择usb模式中的调制解调器模式,把手机用usb线捅到我的x60上.
然后在我的电脑的管理中,看看是不是多了个黄色图标,一个没有驱动的调制解调器,给它更新下驱动.
然后新建一个网络连接,拨号的那种就行了.拨号号码为*99***1# ,没有用户名和密码的.
然后,拨号吧,拨号成功以后,将ie的代理设置为10.0.0.172:80,这步一定要作,移动不会告诉你的,不作这步,上了等于没上,啥都干不了.
看看,能上google不,能上就ok了,不能的话,RPWT,需要仔细反省!
(按:一个月前就有一个学动物的朋友问我,可不可以写一篇关于虎骨治风湿的文章。因为我对动物不熟,所以虽然允诺,却迟迟没有动笔。但是最近陕西发生的“发现野生华南虎”的闹剧实在让我忍无可忍了,决定就利用这个机会把这篇文章写出来。请各位动物界的专业人士和动物爱好者赐教。)
2007年10月12日,新华社报道,陕西省大巴山区的镇坪县有人在野外拍到了野生华南虎的照片,由此说明华南虎在野外并没有灭绝。消息传开后马上引起轰动,也引来了众多的质疑。有摄影爱好者对公布的三张照片作了比对分析,发现老虎的神态、动作丝毫没有改变,但周围的背景却发生了很大的变化,说明其中的老虎绝不可能是活物,而只可能是模型。更有一些植物学专家发现,老虎头上有一张叶片大到几乎盖住了整个虎头,从叶形上看,这样的叶片只能是栎树叶子,但大巴山区绝对不可能有这样大的栎树叶,当地能够长出这样大的叶子的植物只有通脱木和七叶树,但形状又绝不相同;更可笑的是,连这张绝无仅有的叶子居然都在三张照片上同时出现,而且位置丝毫没有变动,说明叶子很可能是和老虎一起画在平板上的。这些铁证,都表明这三张照片必属造假无疑。五天之后,镇坪县副县长杨高不得不向新闻记者承认,照片的确“经过处理”,只不过他仍一口咬定虎踪是确实存在的。
镇坪是不是真的有老虎,姑且不去管它(事实上,一位做野生动物保育的专家在网上透露,目前动物学界的主流观点认为华南虎应该已在野外绝迹,即使未绝迹,也至多分布在以南岭为中心的长江以南山区)。人们对这则真伪难辨的新闻这么关注,从一个侧面反映了中国老虎当下濒临灭绝的悲惨处境。造成老虎这种悲惨处境的罪魁祸首之一,就是中医。
从《神农本草经集注》开始,虎骨就成了一味常用的中药,到明代的《本草纲目》,不仅是虎骨,虎肉、虎油、虎血、虎胆、虎睛、虎牙、虎皮甚至虎须、虎屎都入药了。可惜,虽然把老虎利用到了这个份上,中国人对于老虎的基本情况,却始终知之甚少。《本草纲目》中,李时珍介绍老虎的一段文字在今天看来实在是绝妙好辞,我把它全文抄在下面:
时珍曰:按《格物论》云:虎,山兽之君也。状如猫而大如牛,黄质黑章,锯牙钩爪,须健而尖,舌大如掌(生倒刺),项短鼻齆。夜视,一目放光,一目看物。声吼如雷,风从而生,百兽震恐。《易通卦验》云:立秋虎始啸。仲冬虎始交。或云:月晕时乃交。又云:虎不再交,孕七月而生。又云:虎知冲破,能画地观奇偶以卜食。今人效之,谓之虎卜。虎噬物,随月旬上下而啮其首尾。其搏物,三跃不中则舍之。人死于虎,则为伥鬼,导虎而行。虎食狗则醉,狗乃虎之酒也。闻羊角烟则走,恶其臭也。虎害人、兽,而猬、鼠能制之,智无大小也。狮、駮、酋耳、黄腰、渠搜能食虎,势无强弱也。《抱朴子》云:虎五百岁则变白。又海中有虎鲨能变虎,古有貙虎变人、貙人变虎之说,亦自有是理也。
(翻译:李时珍说:《格物论》这本书说,虎是山上野兽的君主。形状像猫,但像牛一样大,皮毛黄底而有黑色花纹,牙齿如锯子,爪子像钩,胡须硬挺而尖,舌头大得像手掌(生有倒刺),脖子短,鼻子不通。晚上看东西的时候,一只眼睛发光,另一只眼睛看东西。吼声大得像雷,风就从吼叫中生发,使各种野兽都感到害怕。《易通卦验》这本书说,立秋的时候老虎开始啸叫,仲冬的时候老虎开始交配。但也有人说,月亮周围出现光环时才交配。这本书还说,老虎一生只交配一次,怀孕七个月后生产。又说,老虎知道算卦中“冲破”的道理,能够在地上演算奇偶,由此决定如何捕食猎物。现在的人仿效它算卦的方法,称之为“虎卜”。老虎在撕吃猎物的时候,随着一月或一旬中日期的早晚,从猎物的头部一直吃到尾部。在搏杀猎物的时候,如果跳起三次还没有扑到就放弃。人被虎杀死,就变成名字叫“伥”的鬼,在老虎前面引导老虎杀人。老虎如果吃了狗就会醉,狗原来是老虎的酒。老虎闻到烧羊角产生的烟就会逃走,因为讨厌它的气味。老虎危害人和野兽,但刺猬、老鼠却能制服它,是因为智慧和体大体小无关。狮子、駮、酋耳、黄腰和渠搜(后四者都是神话中的兽类。——刘注)可以猎食老虎,是因为势力和体强体弱无关。《抱朴子》这本书说,老虎活到五百岁的时候就变成白色,而且海中有种虎鲨可以变成老虎。古时候有传说,一种叫貙虎的野兽可以变成人,一个叫貙人的部族可以变成老虎,也自然有它的道理。)
这段介绍中,自然有一些是准确的,比如“状如猫而大如牛,黄质黑章,锯牙钩爪,须健而尖,舌大如掌(生倒刺)”之类,但也有大量的天方夜谭。有些限于古代的科学水平,一时不容易获得正确的认知,也还罢了(比如白虎实际上是孟加拉虎的白化变异,并不是什么“虎五百岁则变白”),有些其实只要通过仔细的观察,就不难知其谬误,比如“虎不再交,孕七月而生”(实际上,健康雌虎每2-3年就可产崽一次,妊娠期只有三个多月)、“而猬、鼠能制之”等等。可惜,古代中国人的观察力一向是十分之差的,要求他们拿出献身的勇气去弄明白老虎的生活习性,真的是太苛求了。
古代中国人不仅观察力差,逻辑能力更差,这在中医思维中有非常明显的体现。在虎骨的种种功效中,“祛除风湿”是最为人称道的。《本草纲目》中罗列的各种对虎骨“祛除风湿”的解释,是另一段绝妙好辞,所以我再次不嫌冗长地把它全文抄在下面:
颂曰:李绛《兵部手集》,有虎骨酒,治臂胫痛。崔元亮《海上方》,治腰脚不随,并有虎胫骨酒方。宗奭曰:风从虎者,风,木也;虎,金也。木受金制,焉得不从?故虎啸而风生,自然之道也。所以治风病挛急,屈伸不得,走疰,骨节风毒,癫疾惊痫诸病,皆此义也。汪机曰:虎之强悍,皆赖于胫,虽死而胫犹矻立不仆,故治脚胫无力用之。时珍曰:虎骨通可用。凡辟邪疰,治惊痫温疟,疮疽头风,当用头骨;治手足诸风,当用胫骨;腰背诸风,当用脊骨,各从其类也。按吴球《诸证辨疑》云:虎,阴也;风,阳也。虎啸风生,阳出阴藏之义,故其骨能追风定痛。虎之一身筋节气力,皆出前足,故以胫骨为胜。
(翻译:苏颂(北宋人)说:李绛(唐代人)《兵部手集方》这部书中记载有虎骨酒,可以治胳膊和小腿痛。崔元亮(唐代人)《海上集验方》这部书说虎骨可以治腰脚不能随意活动,并收录有虎胫骨酒的方剂。寇宗奭(北宋人)说:之所以风产生于老虎,是因为风属木,虎属金。木要受到金的压制,所以风怎么可能不产生于老虎呢?因此老虎吼叫而产生风,是自然的道理。所以要治疗“风病挛急”“屈伸不得”“走疰”“骨节风毒”“癫疾惊痫”这种种和“风”有关的病症,要服用虎骨,都是这个道理。汪机(明代人,在李时珍之前)说:老虎的强悍,全依赖于它的胫骨。即使老虎死了,它的胫仍然直立不倒,所以可以用来治人的腿脚无力。李时珍说:虎骨其实全都可以入药。凡是要治“邪疰”“惊痫温疟”“疮疽头风”这些头部的“风”症,应该用头骨;治手和脚的各种“风”症,应该用胫骨;治腰和背的各种“风”症,应该用脊梁骨,各各按其类似的部位取材就行了。另外,吴球(明代人,在李时珍之前)《诸证辨疑》这部书说,虎是阴物,风是阳物,虎吼叫而产生风,这是阳物出自它在阴物中的储藏之处的道理,所以虎骨可以“追风定痛”。老虎一身的肌肉关节的气力,全都出自前脚,所以虎骨中以胫骨为胜。)
这大段的解释中,充满了臆测的、自以为是的逻辑。什么“木受金制”,什么“各从其类”,什么“阳出阴藏”,都是些毫无本质联系的机械类比,而不幸的是,这种机械类比,正是中医理论的根本特征,也是传统中国思维的致命缺陷;一旦把这种机械类比的愚蠢逻辑剥离出去,整个中医理论乃至整个传统中国思维体系,马上就会轰然崩塌!
在古代中国人低下的观察能力和低下的逻辑思维能力的双重作用下,虎骨既然不幸被列为“祛除风湿”的良药,中国老虎注定要遭到灭顶之灾,也就是不可避免的事情。然而对中国老虎最后的致命一击,还是来自于中华人民共和国成立之后的20世纪50-70年代的中央政策。那时,在“人定胜天”的偏激思想的主导下,老虎被定性为“害兽”,各地都大肆捕杀,并且大量用虎骨入药。70年代以后,这种错误的政策虽然逐渐扭转了过来,但是由此广泛传播开来的“虎骨驱风”的神话,已经牢不可破了。在这种神话的驱使下,不仅中国老虎终于走到了今天濒临灭绝的田地,连南亚、东南亚的老虎,也都被当地人大肆捕杀,把虎骨出售给华人当药使用。
这情形,和欧美发达国家为了获取藏羚羊皮毛,千方百计唆使当地人盗猎藏羚羊,完全没有两样。所不同的是,欧美发达国家没有人敢公然为利用藏羚羊皮毛辩护,但在中国却有众多的人在呶呶不休地为虎骨入药辩解。有人就在一本名为《中国道地药材论丛》(胡世林主编,中医古籍出版社,1997年)的书中,说即使找到虎骨的代用品,仍然不能完全代替虎骨的效能。说出这种话的人,实在是我见过的最坚硬的花岗岩脑袋之一了。
行文至此,很多人也许都在关注:那么虎骨到底有没有药效?答案很明确:完全没有!
任何哺乳动物的骨骼结构和成分都是类似的,虎骨也不例外。以胫骨这样的长骨为例,除掉两侧的骨骺外,中间的骨干自外向内,分为骨膜、骨质和骨髓三部分。骨膜是一薄层致密的组织,内有血管和神经;骨髓的主要成分是脂肪;而占骨干绝大多数质量的骨质,超过一半都是羟基磷灰石——一种钙的磷酸盐,剩下的成分中又有90%以上是胶原纤维(这也是皮冻的主要成分),其他也不过是诸如粘蛋白、多糖这样的在其他组织中也大量存在的物质,丝毫没有特殊之处。如果虎骨有药效的话,一切哺乳动物的骨头——包括人骨——也都应该有药效,把油脂、羟基磷灰石(可以人工制取)和皮冻按相应的比例混起来吃,也应该有药效了!
另一方面,正如我在《天麻“南迁”记》一文中说的,“风”其实是中医理论里的一个定义含混的词汇,许多在发病机理上风马牛不相及的病症,都被概括成是“风症”,而它们和风其实完全没有关系。即以现在最令人头痛的关节炎来说,它可以分为类风湿性关节炎和骨关节炎两种,尽管现代医学还未能完全揭示其病因,但已经公认前者是一种自身免疫疾病,而后者,则一般认为和关节的过度劳损及肥胖有关。这都和“风湿”没有任何关系。长期以来,人们普遍以为关节炎患者一到阴雨天病情就会加重,这似乎成了常识,然而现代医学告诉我们,连这个“常识”也靠不住,实际上心理作用在其中起的影响更大。迄今为止,唯一一个能较充分地排除心理干扰的检验气候和关节炎的实验,是美国塔夫茨新英格兰医学中心做的。他们利用统计方法研究了之前另一个关节炎的临床实验报告,和同期的美国国家海洋大气局的气象数据,发现病人的病情和气象条件确实存在一定的相关性。这个研究成果发表在2007年5月的《美国医学杂志》上。然而,表面的相关性未必有实际意义,也许只不过是巧合;尽管这个成果在关节炎研究上有一定的突破性,但由此断言关节炎和风湿有关,实在为时尚早。
所以,现在最稳妥、最有效的治疗关节炎的方法,绝不是从什么“风湿”的角度着手,而是采取药物治疗、生活方式改善和手术的综合治疗手段。在这种综合治疗手段的运用上,美国无疑是最先进的,那里的大多数关节炎患者基本都可以过上正常的生活。反倒是在虎骨治风湿喊得震天响、虎骨不让用了就用鹿骨、猪骨、牛骨甚至鼢鼠骨入药的中国,却有更多的关节炎患者在庸医的教导下,罹受着无谓的病痛折磨。
对一个充满谎言的国度来说,要让其中乐于造谣、信谣和传谣的人承认错误,比让他们下跪都难。我并不指望中医信徒们能够在短时间内承认用虎骨入药这种巫术医学的荒谬性,我现在更乐于观望的,是陕西这场“发现野生华南虎”的闹剧最后究竟打算如何收场。
2007.10.17

公布的陕西镇坪“华南虎”照片之一

“色影无忌”摄影论坛网友制作的三张老虎照片比对图
2007-10-16 Tue
2007-10-15 Mon
AnySQL.net
DBA notes
Oracle & Starcraft
eagle's home
给你点color see see
AnySQL.net English
Oracle Scratchpad
Oracle Life
OracleDBA Blog
Photos from dbanotes
Chanel [K]
xzh2000的博客
Oracle Security Blog
ERN空间
Eddie Awad's Blog
MySQL Performance Blog
The Tom Kyte Blog
del.icio.us/fenng/oracle
AIXpert
O'Reilly Databases
Red Hat Magazine
DBASupport
DB2 Magazine 中文版
developerWorks : AIX 专区的文章,教程
Pythian Group Blog » Log Buffer
车东[Blog^2]
blue_prince
玉面飞龙的BLOG
此生 今世
人生就是如此
Orange Tiger 木匠 的 移民生活
生活帮-LifeBang
Hey!! Sky!
dba on unix
Oracle Notes Wiki
Welcome to brotherxiao's Home
柔嘉维则@life.oracle.eng
Fenng's shared items in Google Reader
jametong's shared items in Google Reader
缥缈游侠-logzgh
Tanel Poder's blog: Core IT for geeks and pros
DBA Tools
DBA is thinking
yangtingkun
NinGoo@Net





