text:
Skip to content
Skip to footer
Worldwide [change]
Log In
My Cisco
Cisco.com Worldwide Home
Products & Services
How to Buy
Training & Events
Product Support
Cisco Secure Access Control System
End-User Guides
Book Contents
Book Contents
Find Matches in This Book
Available Languages
November 17, 2013
Chapter: Glossary
Authentication, authorization, and accounting (AAA) is a term for a framework for intelligently controlling access to computer resources, enforcing policies, auditing usage, and providing the information necessary to bill for services. These combined processes are considered important for effective network management and security. A system in IP-based networking to control what computer resources users have access to and to keep track of the activity of users over a network.
AAA client IP address
An IP address of the AAA client, used to configure the AAA client in Access Control Server (ACS) to interact with the network device. To represent multiple network devices, specify multiple IP addresses. Separate each IP address by pressing
AAA server
A server program that handles user requests for access to computer resources and, for an enterprise, provides authentication, authorization, and accounting (AAA) services. The AAA server typically interacts with network access and gateway servers and with databases and directories containing user information. The current standard by which devices or applications communicate with an AAA server is the Remote Authentication Dial-In User Service (RADIUS).
The capability to get to what you need. Data access is being able to get to (usually having permission to use) particular data on a computer.
Access Control
Ensures that resources are only granted to those users who are entitled to them.
Access Control List (ACL)
A mechanism that implements access control for a system resource by listing the identities of the system entities that are permitted to access the resource.
Access Control System (ACS)
A AAA server that performs authentication, authorization, and accounting to manage devices in a network.
Access Control Service
A security service that provides protection of system resources against unauthorized access. The two basic mechanisms for implementing this service are ACLs and tickets.
access point. The Hub of a wireless network. Wireless clients connect to the access point, and traffic between two clients must travel through the access point.
access policies
The policies that limit access to the ACS web interface by IP address, TCP port range, and secure socket layer (SSL).
access registrar
A RADIUS-compliant, access policy server designed to support the delivery of dial, ISDN, and new services including DSL, cable with telco-return, wireless and Voice over IP
accessibility design requirements
Provides detail on how to design accessible products, web sites, and documentations
The capability of ACS to record user sessions in a log file.
ACS System Administrators
Administrators with different access privileges defined under the System Configuration section of the ACS web interface. They administer and manage ACS deployments in your network.
address resolution protocol. A protocol for mapping an Internet Protocol address to a physical machine address that is recognized in the local network. A table, usually called the ARP cache, is used to maintain a correlation between each MAC address and its corresponding IP address. ARP provides the protocol rules for making this correlation and providing address conversion in both directions.
advanced encryption standard. A Federal Information Processing Standard (FIPS) Publication that will specify a cryptographic algorithm for use by U.S. Government organizations to protect sensitive (unclassified) information. This standard specifies Rijndael as a FIPS-approved symmetric encryption algorithm that may be used by U.S. Government organizations (and others) to protect sensitive information.
anonymous (LDAP)
An LDAP session is described as anonymous if no user DN or secret is supplied when initiating the session (sending the bind).
A software program designed to identify and remove a known or potential computer virus
application program interface. The specific methodology by which a programmer writing an application program may make requests of the operating system or another application.
Java programs; an application program that uses the client's web browser to provide a user interface.
Address Resolution Protocol. A protocol used to obtain the physical addresses (such as MAC addresses) of hardware units in a network environment. A host obtains such a physical address by broadcasting an ARP request, which contains the IP address of the target hardware unit. If the request finds a unit with that IP address, the unit replies with its physical hardware address.
Advanced Research Projects Agency Network. A pioneer packet-switched network that was built in the early 1970s under contract to the US Government, led to the development of today's Internet, and was decommissioned in June 1990.
Asymmetrical Key Exchange
Asymmetric or public key cryptography is based on the concept of a key pair. Each half of the pair (one key) can encrypt information so that only the other half (the other key) can decrypt it. One part of the key pair, the private key, is known only by the designated owner; the other part, the public key, is published widely but is still associated with the owner.
attribute (LDAP)
The data in an entry is contained in attribute-value pairs. Each attribute has a name (and sometimes a short form of the name) and belongs to an objectClass. The attributes characteristics are fully described by an ASN.1 definition. One or more objectClasses may be included in a Schema. Depending on the ASN.1 definition of the attribute there can be more that one attribute-value pair of the same named attribute in an entry. One (or more) attribute(s), the naming attribute or RDN will always uniquely identify an entry.
The information gathering and analysis of assets to ensure such things as policy compliance and security from vulnerabilities.
authenticated (LDAP)
A session is described as authenticated if a user DN and secret is supplied when initiating the session (sending the bind).
The process of confirming the correctness of the claimed identity.
The validity and conformance of the original information.
The approval, permission, or empowerment for someone or something to do something.
authorization profile
The basic "permissions container" for a RADIUS-based network access service. The authorization profile is where you define all permissions to be granted for a network access request. VLANs, ACLs, URL redirects, session timeout or reauthorization timers, or any other RADIUS attributes to be returned in a response are defined in the authorization profile.
basic authentication
The simplest web-based authentication scheme that works by sending the username and password with each request.
Berkeley Internet Name Domain. An implementation of DNS. DNS is used for domain name to IP address resolution.
bind (LDAP)
When connection is made to an LDAP server the first operation of the sequence is called a bind. The bind operation sends the dn of the entry that will be used for authentication and the password to be used. In the case of an anonymous bind both values will be NULL.
block cipher
Encrypts one block of data at a time.
A product that connects a local area network (LAN) to another local area network that uses the same protocol (for example, Ethernet or token ring).
To simultaneously send the same message to multiple recipients. One host to all hosts on network.
broadcast address
An address used to broadcast a datagram to all hosts on a given network using UDP or ICMP protocol.
A client computer program that can retrieve and display information from servers on the World Wide Web.
CA Signature
A digital code that vouches for the authenticity of a digital certificate. The CA signature is provided by the certificate authority (CA) that issued the certificate.
A special high-speed storage mechanism. It can be either a reserved section of main memory or an independent high-speed storage device. Two types of caching are commonly used in personal computers: memory caching and disk caching.
cascading style sheet. A Web page derived from multiple sources with a defined order of precedence where the definitions of any style element conflict.
certificate authority. An authority in a network that issues and manages security credentials and public keys for message encryption and decryption. As part of a public key infrastructure (PKI), a CA checks with a registration authority (RA) to verify information provided by the requestor of a digital certificate. If the RA verifies the requestor's information, the CA can then issue a certificate.
certificate-based authentication
The use of Secure Sockets Layer (SSL) and certificates to authenticate and encrypt HTTP traffic.
Digital representation of user or device attributes, including a public key, that is signed with an authoritative private key.
common gateway interface. This mechanism is used by HTTP servers (web servers) to pass parameters to executable scripts in order to generate responses dynamically.
Challenge-Handshake Authentication Protocol. A protocol that uses a challenge/response authentication mechanism where the response varies every challenge to prevent replay attacks.
CHAP is an authentication technique where after a link is established, a server sends a challenge to the requestor. The requestor responds with a value obtained by using a one-way hash function. The server checks the response by comparing it its own calculation of the expected hash value. If the values match, the authentication is acknowledged otherwise the connection is usually terminated.
A common authentication technique whereby an individual is prompted (the challenge) to provide some private information (the response). Most security systems that rely on smart cards are based on challenge-response. A user is given a code (the challenge) which he or she enters into the smart card. The smart card then displays a new code (the response) that the user can present to log in.
A value that is computed by a function that is dependent on the contents of a data object and is stored or transmitted together with the object, for the purpose of detecting changes in the data.
A cryptographic algorithm for Encryption and Decryption. The method used to transform a readable message (called plaintext or cleartext) into an unreadable, scrambled, or hidden message (called ciphertext).
The encrypted form of the message being sent. Ciphertext is data that has been encrypted. It is the output of the encryption process and can be transformed back into a readable form (plaintext) with the appropriate decryption key.
A system entity that requests and uses a service provided by another system entity, called a "server." In some cases, the server may itself be a client of some other server.
Describes the relationship between two computer programs in which one program, the client, makes a service request from another program, the server, which fulfills the request. Although the client/server idea can be used by programs within a single computer, it is a more important idea in a network. In a network, the client/server model provides a convenient way to interconnect programs that are distributed efficiently across different locations.
Occurs when multiple systems transmit simultaneously on the same wire.
command sets
Contains a set of permitted commands for TACACS+ based, per-command authorization.
community string
A character string used to identify valid sources for Simple Network Management Protocol (SNMP) requests, and to limit the scope of accessible information. Ravlin units use a community string, such as a password, allowing only a limited set of management stations to access its MIB.
computer network
A collection of host computers together with the sub-network or inter-network through which they can exchange data.
The need to ensure that information is disclosed only to those who are authorized to view it.
configuration management
The process of establishing a known baseline condition and managing it.
Data exchanged between an HTTP server and a browser (a client of the server) to store state information on the client side and retrieve it later for server use. An HTTP server, when sending data to a client, may send along a cookie, which the client retains after the HTTP connection closes. A server can use this mechanism to maintain persistent client-side state information for HTTP-based applications, retrieving the state information in later connections.
A threat action that undesirably alters system operation by adversely modifying system functions or data.
Class of Service. A way of managing traffic in a network by grouping similar types of traffic (for example, e-mail, streaming video, voice, large document file transfer) together and treating each type as a class with its own level of service priority.
Reactive methods used to prevent an exploit from successfully occurring once a threat has been detected. Intrusion Prevention Systems (IPS) commonly employ countermeasures to prevent intruders form gaining further access to a computer network. Other counter measures are patches, access control lists and malware filters.
covert channels
The means by which information can be communicated between two parties in a covert fashion using normal system operations. For example by changing the amount of hard drive space that is available on a file server can be used to communicate information.
certificate revocation list. A list of certificates (more accurately: their serial numbers) which have been revoked, are no longer valid, and should not be relied upon by any system user.
Create, read, update and delete. The basic management operations that are performed on managed data
The mathematical science that deals with analysis of a cryptographic system in order to gain knowledge needed to break or circumvent the protection that the system is designed to provide. In other words, convert the cipher text to plaintext without knowing the key.
cryptographic algorithm or hash
An algorithm that employs the science of Cryptography, including Encryption algorithms, Cryptographic Algorithm or Hash, Digital Signature Algorithm (DSA), and key agreement algorithms.
Garbles a message in such a way that anyone who intercepts the message cannot understand it.
comma-separated value. This file format is a delimited data format that has fields separated by the comma character and records separated by new lines.
Cisco Trusted Security
Common User Experience
A method of switching where only the header of a packet is read before it is forwarded to its destination.
Cyclic Redundancy Check. Sometimes called "cyclic redundancy code." A type of checksum algorithm that is not a cryptographic hash but is used to implement data integrity service where accidental changes to data are expected.
A program which is often started at the time the system boots and runs continuously without intervention from any of the users on the system. The daemon program forwards the requests to other programs (or processes) as appropriate. The term daemon is a Unix term, though many other operating systems provide support for daemons, though they're sometimes called other names. Windows, for example, refers to daemons and System Agents and services.
Data Encryption Standard. A widely-used method of data encryption using a private (secret) key. There are 72,000,000,000,000,000 (72 quadrillion) or more possible encryption keys that can be used. For each given message, the key is chosen at random from among this enormous number of keys. Like other private key cryptographic methods, both the sender and the receiver must know and use the same private key.
Request for Comment 1594 says, "a self-contained, independent entity of data carrying sufficient information to be routed from the source to the destination computer without reliance on earlier exchanges between this source and destination computer and the transporting network." The term has been generally replaced by the term packet. Datagrams or packets are the message units that the Internet Protocol deals with and that the Internet transports. A datagram or packet needs to be self-contained without reliance on earlier exchanges because there is no connection of fixed duration between the two communicating points as there is, for example, in most voice telephone conversations. (This kind of protocol is referred to as connectionless.)
The process of stripping off one layer's headers and passing the rest of the packet up to the next higher layer on the protocol stack.
The process of transforming an encrypted message into its original plaintext.
denial of service
The prevention of authorized access to a system resource or the delaying of system operations and functions.
device administration
Capability to control and audit the administration operations performed on network devices. The network device administrator role has full access to perform the administrative operations on network devices.
A store to configure attributes of RADIUS and TACACS+ protocols, internal users, and internal hosts.
dictionary attack
An attack that tries all of the phrases or words in a dictionary, trying to crack a password or key. A dictionary attack uses a predefined list of words compared to a brute force attack that tries all possible combinations.
A key agreement algorithm published in 1976 by Whitfield Diffie and Martin Hellman. Diffie-Hellman does key establishment, not encryption. However, the key that it produces may be used for encryption, for further key management operations, or for any other cryptography.
Digest Authentication
Allows a web client to compute MD5 hashes of the password to prove it has the password.
digital certificate
An electronic "credit card" that establishes your credentials when doing business or other transactions on the Web. It is issued by a certification authority. It contains your name, a serial number, expiration dates, a copy of the certificate holder's public key (used for encrypting messages and digital signatures), and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real.
digital envelope
An encrypted message with the encrypted session key.
digital signature
A hash of a message that uniquely identifies the sender of the message and proves the message hasn't changed since transmission.
digital signature algorithm. An asymmetric cryptographic algorithm that produces a digital signature in the form of a pair of large numbers. The signature is computed using rules and parameters such that the identity of the signer and the integrity of the signed data can be verified.
Digital Signature Standard. The US Government standard that specifies the Digital Signature Algorithm (DSA), which involves asymmetric cryptography.
The process of taking a binary program and deriving the source code from it.
A circumstance or event that interrupts or prevents the correct operation of system services and functions.
directory information tree (also known as the naming context). The hierarchy of objects that make up the local directory structure. More than one DIT may be supported by an LDAP server. The Root DSE will provide this information.
Distinguished Name. A DN is comprised of a series of RDNs that uniquely describe the naming attributes on the path UP the DIT from the required entry to the directory root. A DN is written LEFT to RIGHT and looks something like this:
A sphere of knowledge, or a collection of facts about some program entities or a number of network points or addresses, identified by a name. On the Internet, a domain consists of a set of network addresses. In the Internet's domain name system, a domain is a name with which name server records are associated that describe sub-domains or host. In Windows NT and Windows 2000, a domain is a set of network resources (applications, printers, and so forth) for a group of users. The user need only to log in to the domain to gain access to the resources, which may be located on a number of different servers in the network.
domain name
Locates an organization or other entity on the Internet. For example, the domain name "www.sans.org" locates an Internet address for "sans.org" at Internet point 184.108.40.206 and a particular host server named "www". The "org" part of the domain name reflects the purpose of the organization or entity (in this example, "organization") and is called the top-level domain name. The "sans" part of the domain name defines the organization or entity and together with the top-level is called the second-level domain name.
Domain Name System. The way that Internet domain names are located and translated into IP addresses. A domain name is a meaningful and easy-to-remember "handle" for an Internet address.
DSA Directory System Agent
X.500 term for any DAP or LDAP enabled directory service e.g. an LDAP server.
DSE DSA Specific Entry
An entry in a local directory server.
due diligence
The requirement that organizations must develop and deploy a protection plan to prevent fraud, abuse, and additional deploy a means to detect them if they occur.
A security tool that dumps a variety of information about a system's users, file system, registry, permissions, password policy, and services.
Dynamic Link Library. A collection of small programs, any of which can be called when needed by a larger program that is running in the computer. The small program that lets the larger program communicate with a specific device such as a printer or scanner is often packaged as a DLL program (usually referred to as a DLL file).
Listening to a private conversation which may reveal information which can provide access to a facility or network.
Egress Filtering
Filtering outbound traffic.
The inclusion of one data structure within another structure so that the first data structure is hidden for the time being.
Cryptographic transformation of data (called "plaintext") into a form (called "cipher text") that conceals the data's original meaning to prevent it from being known or used.
entry (LDAP)
The name given to a stored object in a LDAP enabled directory. Each entry has one parent entry (object) and zero or more child entries (objects). The data content of an entry consist of one or more attributes one (or more) of which is (are) used as the naming attribute (more correctly the RDN) to uniquely identify this object in the DIT.
equality (LDAP)
Equality defines the comparison rule of an attribute when used in a search filter that contains no wildcards, and both the content and length must be exactly the same. When wildcards are used, this is called a substring and the SUBSTR rule is used.
external identity store
External databases that ACS accesses to perform credential and authentication validations for internal and external users (as defined by you within a policy).
The most widely-installed LAN technology. Specified in a standard, IEEE 802.3, an Ethernet LAN typically uses coaxial cable or special grades of twisted pair wires. Devices are connected to the cable and compete for access using a CSMA/CD protocol.
An observable occurrence in a system or network.
Exponential Backoff Algorithm
Used to adjust TCP timeout values on the fly so that network devices don't continue to timeout sending data over saturated links.
A threat action whereby sensitive data is directly released to an unauthorized entity.
extended ACLs
A more powerful form of standard ACLs on Cisco routers. They can make filtering decisions based on IP addresses (source or destination), Ports (source or destination), protocols, and whether a session is established.
Extensible Authentication Protocol. A protocol for wireless networks that expands on Authentication methods used by the PPP (Point-to-Point Protocol), a protocol often used when connecting a computer to the Internet. EAP can support multiple authentication mechanisms, such as token cards, smart cards, certificates, one-time passwords, and Public Key Encryption authentication.
Extensible Authentication Protocol-Message Digest 5. An EAP security algorithm developed by RSA Security that uses a 128-bit generated number string, or hash, to verify the authenticity of a data communication.
Extensible Authentication Protocol-Translation Layer Security. A high-security version of EAP that requires authentication from both the client and the server. If one of them fails to offer the appropriate authenticator, the connection is terminated. Used to create a secured connection for 802.1X by preinstalling a digital certificate on the client computer. EAP-TLS is the protocol that serves for mutual authentication and integrity-protected cipher suite negotiation and key exchange between a client and server. Both the client and the server use X.509 certificates to verify their identities to each other.
false rejects
When an authentication system fails to recognize a valid user.
File Transfer Protocol . A TCP/IP protocol specifying the transfer of text or binary files across the network.
Used to specify which packets will or will not be used. It can be used in sniffers to determine which packets get displayed, or by firewalls to determine which packets get blocked.
filtering router
An inter-network router that selectively prevents the passage of data packets according to a security policy. A filtering router may be used as a firewall or part of a firewall. A router usually receives a packet from a network and decides where to forward it on a second network. A filtering router does the same, but first decides whether the packet should be forwarded at all, according to some security policy. The policy is implemented by rules (packet filters) loaded into the router.
A TCP/IP Fragmentation Attack that is possible because IP allows packets to be broken down into fragments for more efficient transport across various media. The TCP packet (and its header) are carried in the IP packet. In this attack the second fragment contains incorrect offset. When packet is reconstructed, the port number will be overwritten.
The process of storing a data file in several "chunks" or fragments rather than in a single contiguous sequence of bits in one place on the storage medium.
Data that is transmitted between network points as a unit complete with addressing and necessary protocol control information. A frame is usually transmitted serial bit by bit and contains a header field and a trailer field that "frame" the data. (Some control frames contain no data.)
full duplex
A type of duplex communications channel which carries data in both directions at once. Refers to the transmission of data in two directions simultaneously. Communications in which both sender and receiver can send at the same time.
fully-qualified domain name
A server name with a hostname followed by the full domain name.
A network point that acts as an entrance to another network.
global system options
Configuring TACACS+, EAP-TTLS, PEAP, and EAP-FAST runtime characteristics and generating EAP-FAST PAC.
hash functions
Used to generate a one way "check sum" for a larger text, which is not trivially reversed. The result of this hash function can be used to validate if a larger file has been altered, without having to compare the larger files to each other. Frequently used hash functions are MD5, SHA1, and SHA2.
The extra information in a packet that is needed for the protocol stack to process the packet.
Any computer that has full two-way access to other computers on the Internet. Or a computer with a web server that serves the pages for one or more Web sites.
Host-Based ID
Host-based intrusion detection systems use information from the operating system audit records to watch all operations occurring on the host that the intrusion detection software has been installed upon. These operations are then compared with a pre-defined security policy. This analysis of the audit trail imposes potentially significant overhead requirements on the system because of the increased amount of processing power which must be utilized by the intrusion detection system. Depending on the size of the audit trail and the processing ability of the system, the review of audit data could result in the loss of a real-time analysis capability.
Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL. HTTPS is a Web protocol developed by Netscape and built into its browser that encrypts and decrypts user page requests as well as the pages that are returned by the Web server. When used in the first part of a URL (the part that precedes the colon and specifies an access scheme or protocol), this term specifies the use of HTTP enhanced by a security mechanism, which is usually SSL.HTTPS uses port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP and an additional encryption/authentication layer between HTTP and TCP.
A network device that operates by repeating data that it receives on one port to all the other ports. As a result, data transmitted by one host is retransmitted to all other hosts on the hub. The central device in a star network, whether wired or wireless. Wireless access points act as hubs in wireless networks.
hybrid attack
Builds on the dictionary attack method by adding numerals and symbols to dictionary words.
hybrid encryption
An application of cryptography that combines two or more encryption algorithms, particularly a combination of symmetric and asymmetric encryption.
Hypertext Markup Language. The set of markup symbols or codes inserted in a file intended for display on a World Wide Web browser page.
Hypertext Transfer Protocol. The protocol in the Internet Protocol (IP) family used to transport hypertext documents across an internet.
Internationalization and localization are means of adapting software for non-native environments, especially other nations and cultures. Internationalization is the adaptation of products for potential use virtually everywhere, while localization is the addition of special features for use in a specific locale.
Whom someone or what something is, for example, the name by which something is known.
identity groups
A logical entity that is associated with all types of users and hosts.
incremental backup
A scheduled job that allows users to take smaller, periodic backups of the Monitoring & Report Viewer database.
The need to ensure that information has not been changed accidentally or deliberately, and that it is accurate and complete.
internal identity store
A database that contains the internal user attributes and credential information used to authenticate internal users and hosts.
Internet Engineering Task Force .
The body that defines standard Internet operating protocols such as TCP/IP. The IETF is supervised by the Internet Society Internet Architecture Board (IAB). IETF members are drawn from the Internet Society's individual and organization membership.
Internet Protocol. The method or protocol by which data is sent from one computer to another on the Internet.
Internet Protocol Security. A developing standard for security at the network or packet processing layer of network communication.
A signal that informs the OS that something has occurred.
intrusion detection
A security management system for computers and networks. An IDS gathers and analyzes information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organization) and misuse (attacks from within the organization).
Internet Protocol. The method or protocol by which data is sent from one computer to another on the Internet. Each computer (known as a host) on the Internet has at least one IP address that uniquely identifies it from all other computers on the Internet.
IP address
A computer's inter-network address that is assigned for use by the Internet Protocol and other protocols. An IP version 4 address is written as a series of four 8-bit numbers separated by periods.
IP flood
A denial of service attack that sends a host more echo request ("ping") packets than the protocol implementation can handle.
IP forwarding
An Operating System option that allows a host to act as a router. A system that has more than 1 network interface card must have IP forwarding turned on in order for the system to be able to act as a router.
IP poofing
The technique of supplying a false IP address.
International Organization for Standardization, a voluntary, non-treaty, non-government organization, established in 1947, with voting members that are designated standards bodies of participating nations and non-voting observer organizations.
Internet Service Provider. A business or organization that provides to consumers access to the Internet and related services. In the past, most ISPs were run by the phone companies.
Java Runtime Environment. A software bundle that allows a computer system to run a Java application.
A system developed at the Massachusetts Institute of Technology that depends on passwords and symmetric cryptography (DES) to implement ticket-based, peer entity authentication service and access control service distributed in a client-server network environment.
In cryptography, a key is a variable value that is applied using an algorithm to a string or block of unencrypted text to produce encrypted text, or to decrypt encrypted text. The length of the key is a factor in considering how difficult it will be to decrypt the text in a given message.
Layer 2 Forwarding Protocol (L2F)
An Internet protocol (originally developed by Cisco Corporation) that uses tunneling of PPP over IP to create a virtual extension of a dial-up link across a network, initiated by the dial-up server and transparent to the dial-up user.
Layer 2 Tunneling Protocol (L2TP)
An extension of the Point-to-Point Tunneling Protocol used by an Internet service provider to enable the operation of a virtual private network over the Internet.
LDAP client
LDAP Client describes a piece of software that provides access to an LDAP sever. Most standard web browsers provide limited LDAP client capabilities using LDAP URLs. LDAP browsers and web interfaces are both very common examples of LDAP clients. List of Open Source Clients.
Lightweight Directory Access Protocol (LDAP)
LDAP is a networking protocol for querying and modifying directory services running over TCP/IP The LDAP protocol is used to locate organizations, individuals, and other resources such as files and devices in a network, on the public Internet or on a corporate Intranet.
Local Operations (secondary servers only)
The operations performed to register or deregister a secondary server, or to replicate a secondary server and a request for a local mode from the Join a Distributed System page.
Log Configuration
A system that uses logging categories and maintenance parameters that enable you to configure and store the logs generated for accounting messages, AAA audit and diagnostics messages, system diagnostics messages, and administrative audit messages.
MAC Address
A physical address; a numeric value that uniquely identifies that network device from every other device on the planet.
matchingRule (LDAP)
The method by which an attribute is compared in a search operation. A matchingRule is an ASN.1 definition that usually contains an OID a name (for example, caseIgnoreMatch [OID = 184.108.40.206]), and the data type it operates on (for example, DirectoryString).
A one way cryptographic hash function.
MIB (Management Information Base)
A MIB is a formal description of a set of network objects that can be managed using SNMP (Simple Network Management Protocol).
monitoring and reports
In the ACS web interface, a drawer that contains the monitoring, reporting, and troubleshooting options.
MPPE Microsoft Point-to-Point Encryption
A protocol for encrypting data across PPP (Point-to-Point Protocol) and Virtual Private Network links.
name space (LDAP)
Term used to describe all DNs that lie in (or are contained within or bounded by) a given directory information tree (DIT). If the DIT root is dc=example,dc=com, then cn=people,dc=example,dc=com is said to lie in the name space but ou=people,dc=example,dc=net does not; it lies in the dc=example,dc=net name space.
naming attribute (LDAP)
A unique identifier for each entry in the directory information tree (DIT). Also known as the Relative Distinguished Name (RDN).
naming context (LDAP)
A a unique name space starting from (and including) the root Distinguished Name (DN). Also known as namingContext or directory information tree (DIT).
NAS (Network Access Server)
A single point of access to a remote resource. The NAS is meant to act as a gateway to guard access to a protected resource. This can be anything from a telephone network, to printers, to the Internet.
network device groups
A logical grouping of network devices by location and type.
network resources
A drawer that defines all network devices in the device repository that access the ACS network, including Network Device Groups (NDGs), network devices, AAA clients,, and external policy servers.
PAP (Password Authentication Protocol.)
PAP is a simple authentication protocol used to authenticate a user to a remote access server or Internet service provider(ISP).
PI (Programmatic Interface)
The ACS PI is a programmatic interface that provides external applications the ability to communicate with ACS to configure and operate ACS; this includes performing the following operations on ACS objects: create, update, delete and read.
policy condition
Rule-based single conditions that are based on policies, which are sets of rules used to evaluate an access request and return a decision.
policy element
Global, shared object that defines policy conditions (for example, time and date, or custom conditions based on user-selected attributes) and permissions (for example, authorization profiles). Policy elements are referenced when you create policy rules.
port setting
You can configure ACS to authenticate using different LDAP servers, or different databases on the same LDAP server, by creating more than one LDAP instance with different IP addresses or port settings.
PPP (Point-to-Point Protocol)
PPP is a protocol for communication between two computers using a serial interface, typically a personal computer connected by phone line to a server. For example, your Internet server provider may provide you with a PPP connection so that the provider's server can respond to your requests, pass them on to the Internet, and forward your requested Internet responses back to you. PPP uses the Internet Protocol (IP) and is designed to handle others. It is sometimes considered a member of the TCP/IP suite of protocols. Relative to the Open Systems Interconnection (OSI) reference model, PPP provides layer 2 (data-link layer) service. Essentially, it packages your computer's TCP/IP packets and forwards them to the server where they can actually be put on the Internet.
A protocol is the special set of rules that end points in a telecommunication connection use when they communicate. Protocols exist at several levels in a telecommunication connection. For example, there are protocols for the data interchange at the hardware device level and protocols for data interchange at the application program level. In the standard model known as Open Systems Interconnection (OSI), there are one or more protocols at each layer in the telecommunication exchange that both ends of the exchange must recognize and observe. Protocols are often described in an industry or international standard.
An HTTP Proxy is a server that acts as a middleman in the communication between HTTP clients and servers.
Public Key
In Cryptography a publicKey is a value provided by some designated authority as an Encryption Key that, combined with a private key derived from the public key, can be used to effectively encrypt messages andDigital Signatures.
The use of combined public and private keys is known as asymmetric cryptography. A system for using public keys is called a public key infrastructure (PKI).
Public Key Infrastructure (PKI)
A PKI enables users of a basically unsecure public network such as the Internet to securely and privately exchange data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority. The Public Key infrastructure provides for a Digital Certificate that can identify an individual or an organization and directory services that can store and, when necessary, revoke the certificates. Although the components of a PKI are generally understood, a number of different vendor approaches and services are emerging. Meanwhile, an Internet standard for PKI is being worked on.
The Relative Distinguished Name (frequently but incorrectly written as Relatively Distinguished Name). The name given to an attribute(s) that is unique at its level in the hierarchy. RDNs may be single valued or multi-valued in which case two or more attributes are combined using '+' (plus) to create the RDN e.g. cn+uid. The term RDN is only meaningful when used as part of a DN to uniquely describe the attributes on the path UP the DIT from a selected entry (or search start location) to the directory root (or more correctly the Root DSE). More info.
referral (LDAP)
An operation in which the LDAP server returns to an LDAP client the name (typically in the form of an LDAP URL) of another LDAP server that might be able to provide the information requested by the LDAP client.
Remote Authentication Dial-In User Service (RADIUS)
RADIUS is a client/server protocol and software that enables remote access servers to communicate with a central server to authenticate dial-in users and authorize their access to the requested system or service. RADIUS allows a company to maintain user profiles in a central database that all remote servers can share. It provides better security, allowing a company to set up a policy that can be applied at a single administered network point. Having a central service also means that it's easier to track usage for billing and for keeping network statistics.
(Request for Comments)
A series of memoranda that encompass new research, innovations, and methodologies applicable to Internet technologies.
A set of typical administrator tasks, each with an associated set of permissions. An administrator can have more than one predefined role, and a role can apply to multiple administrators.
root (LDAP)
The root entry (a.k.a base, suffix) is one of many terms used to describe the topmost entry in a DIT. The Root DSE is a a kind of super root.
Root DSE (LDAP)
Conceptually the top most entry in a LDAP hierarchy - think of it as a super root and normally invisible i.e. not accessed in normal operations. Sometimes confused with root or base or suffix. DSE stands for DSA Specific Entry and DSA in turn stands for Directory System Agent (any directory enabled service providing DAP or LDAP access). Information about the rootDSE may be obtained in OpenLDAP by querying the OpenLDAProoDSE classobject and will provide information about protocol versions supported, services supported and the naming-context(s) or DIT(s) supported.
rootdn (LDAP)
The rootdn is a confusingly named directive in the slapd.conf file which defines a superuser which can bypass normal directory access rules.
RPM (RedHat Package Manager)
An RPM is a downloadable software package that is installable on Linux distributions that use RPM as their package management format.
SAN (Subject Alternative Name)
Extension within certificate information.
Schema (LDAP)
A package of attributes and object classes that are sometimes (nominally) related. The schema(s) in which the object classes and attributes that the application will use (reference) are packaged are identified to the LDAP server so that it can read and parse all that wonderful ASN.1 stuff. In OpenLDAP this done using the slapd.conf file.
search (LDAP)
An operation that is carried out by defining a base directory name (DN), a scope, and a search filter.
Secure Sockets Layer(SSL)
A protocol developed by Netscape for transmitting private documents via the Internet. SSL works by using a public key to encrypt data that's transferred over the SSL connection. SSL is a cryptographic protocol which provides secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, and other data transfers. There are slight differences between SSL 3.0 and TLS 1.0, but the protocol remains substantially the same. The term "TLS" as used here applies to both protocols unless clarified by context.
Security Policy
A set of rules and practices that specify or regulate how a system or organization provides security services to protect sensitive and critical system resources.
A system entity that provides a service in response to requests from other system entities called clients.
service provisioning
Service provisioning refers to the "preparation beforehand" of IT systems' materials or supplies required to carry out a specific activity. This includes the provisioning of digital services such as user accounts and access privileges on systems, networks and applications, as well as the provisioning of non-digital or "physical" resources such as cell phones and credit cards.
service selection policy
A set of rules that determines which access policy applies to an incoming request.
A session is a virtual connection between two hosts by which network traffic is passed.
session (LDAP)
A session occurs between a LDAP client and a server when the client sends a bind command. A session may be either anonymous or authenticated.
session conditions
Custom conditions, and date and time conditions.
Session Key
In the context of symmetric encryption, a key that is temporary or is used for a relatively short period of time. Usually, a session key is used for a defined period of communication between two computers, such as for the duration of a single connection or transaction set, or the key is used in an application that protects relatively large amounts of data and, therefore, needs to be re-keyed frequently.
shell profiles
The basic "permissions container" for a TACACS+ based device administration policy, in which you define permissions to be granted for a shell access request.
SLA (Service Level Agreement)
A SLA is that part of a service contract in which a certain level of service is agreed upon. A SLA is a formal negotiated agreement between two parties. It is a contract that exists between customers and their service provider, or between service providers. It transcripts the common understanding about services, priorities, responsibilities, guarantee, etc. It then specifies the levels of availability, serviceability, performance, operation or other attributes of the service like billing.
SNMP (Simple Network Management Protocol)
A TCP/IP network protocol that provides a means to monitor and control network devices, and to manage configurations, statistics collection, performance, and security.
SOAP (Simple Object Access Protocol)
A lightweight XML-based protocol for exchange of information in a decentralized, distributed environment. SOAP consists of three parts: an envelope that defines a framework for describing what is in a message and how to process it, a set of encoding rules for expressing instances of application-defined datatypes, and a convention for representing remote procedure calls and responses.
SPML (Service Provisioning Markup Language)
SPML is the open standard protocol for the integration and interoperation of service provisioning requests.
SSH(Secure Shell)
A program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another.
subtype (LDAP)
LDAPv3 defines a number of subtypes at this time two have been defined binary (in RFC 2251) and lang (in RFC 2596). subtypes may be used when referencing an attribute and qualify e.g. cn;lang-en-us=smith would perform a search using US english. The subtype does not affect the encoding since UTF-8 (used for cn) allows for all language types. lang subtypes are case insensitive.
suffix (LDAP)
Also known as root, base, is one of many terms used to describe the topmost entry in a DIT. The term is typically used because this entry is usually defined in the suffix parameter in a OpenLDAP's slapd.conf file. The Root DSE is a kind of super root. Suffix Naming.
system administration
The role-based administrative functions performed by a group of administrators.
system configuration
The role-based administrative functions performed by a group of administrators to configure system performance.
System Health Dashboard
The Monitoring & Report Viewer Dashboard that provides information about the health status of associated ACS instances.
system operations
A set of operations that you must perform to effectively deploy and manage the ACS servers in your network.
TACACS (Terminal Access Controller Access Control System) is an older Authentication protocol common to UNIX networks that allows a remote access server to forward a user's logon password to an authenticationServer to determine whether access can be allowed to a given system. TACACS is an Encryption protocol and therefore less secure than the later TACACS+ and Remote Authentication Dial-In User Service (RADIUS) protocols.
TACACS+ settings
Used to configure TACACS+ runtime characteristics.
Transmission Control Protocol/Internet Protocol is the basic communication language or protocol of the Internet. TCP/IP is a two-layer program. The higher layer, Transmission Control Protocol, manages the assembling of a message or file into smaller packets that are transmitted over the Internet and received by a TCP layer that reassembles the packets into the original message. The lower layer, Internet Protocol, handles the address part of each packet so that it gets to the right destination.
User Datagram Protocol. A communications protocol that offers a limited amount of service when messages are exchanged between computers in a network that uses the Internet Protocol (IP)
Uniform Resource Locator. The unique address for a file that is accessible on the Internet.
user and identity store
A repository of users, user attributes, and user authentication options.
user authentication option
An option to enable or disable TACACS+ password authentication.
user attribute configuration
An administrative task consisting of configuring an internal user's identity attributes.
Virtual Private Network. Enables IP traffic to travel securely over a public TCP/IP network by encrypting all traffic from one network to another. A VPN uses "tunneling" to encrypt all information at the IP level.
Vendor Specific Attribute. A proprietary property or characteristic not provided by the standard Remote Authentication Dial-In User Service (RADIUS) attribute set. VSAs are defined by vendors of remote access servers to customize RADIUS for their servers.
Cisco Wireless Control System us a platform designed to help enterprises design, control and monitor Cisco wireless LANs. WCS is the industry leading platform for wireless LAN planning, configuration, and management.
Web server
A Web server is a program that, using the client/server model and the World Wide Web's Hypertext Transfer Protocol (HTTP), serves the files that form Web pages to Web users (whose computers contain HTTP clients that forward their requests).
Web service
A Web service is a software system designed to support interoperable machine-to-machine interaction over a network. The web server interface is described in a machine-processable format, WSDL. Other systems interact with the Web service, typically using HTTP with an XML serialization in conjunction with other Web-related standards.
WSDL (Web Services Description Language)
WSDL is an XML-based language used to describe the services a business offers and to provide a way for individuals and other businesses to access those services electronically.
A standard for public key infrastructure. X.509 specifies, amongst other things, standard formats for public key certificates and a certification path validation algorithm.
XML (eXtensible Markup Language)
XML is a flexible way to create common information formats and share both the format and the data on the World Wide Web, intranets, and elsewhere.
Was this Document Helpful?
Let Us Help
Open a Support Case
(Requires a
Cisco Service Contract
Information For
Small Business
Midsize Business
Service Provider
Consumer Packaged Goods
Financial Services
Life Sciences
Materials and Mining
Public Sector
Smart+Connected Communities
Sports and Entertainment
Workplace Transformation
Contact Cisco
Meet our Partners
Find a Reseller
News & Alerts
Field Notices
Security Advisories
Technology Trends
Internet of Things (IoT)
Software Defined Networking (SDN)
Learning Network
Support Community
Video Portal
Inside Cisco
Service Provider
Technology Trends
About Cisco
Investor Relations
Corporate Social Responsibility
Environmental Sustainability
Trust and Transparency Center
There's Never Been A Better Time
Search Jobs
We Are Cisco
Cisco Designated VIP Program
Cisco Powered
Financing Options
© 2017 Cisco and/or its affiliates. All rights reserved.


text:
• loquacious •
Pronunciation: lo-kway-shês • Hear it!
Part of Speech: Adjective
Meaning: Very talkative, chatty, using lots of words, verbose.
Notes: The noun from today's word is loquacity [lo-qwæ-sê-ti] and the adverb loquaciously. A related adjective is loquent "talking, speaking", which turns up mostly in technical writing as in, "Do chimpanzees comprise a loquent species?" This adjective yields a noun, loquency "talk, the ability to speak". The synonym of today's word, talkative, is an accepted lexical violation in that it is made up of a native stem, talk, plus a Latin suffix -ative, two grammatically incompatible constituents. But perhaps I am waxing loquacious myself and should stop here to leave room for a few other comments on this interesting word.
In Play: Today's word is the antonym of an earlier Good Word, reticent "taciturn, untalkative". "Molly was such a reticent child but since starting school she has become positively loquacious." Loquacity can be fun and entertaining or it can get in the way: "We want to keep today's meeting short, so I may interrupt anyone who becomes too loquacious."
Word History: Today's Good Word comes from a Latin with a similar meaning, loquax (loquac-s) from loqui "to speak". It derives from the PIE root *tolkw- which apparently metathesized to *tlokw- (where the [t] could not be pronounced) in Latin. Eloquent and elocution come from eloqui "to speak out" a reduction of ex "out (of)" + loqui "to speak". In Russian we find it unmetathesized in tolk "sense", whose plural is, oddly, tolki "talk, rumors." Although it looks very much like English "talk," the [t] in this stem would have become [th] in English as the contrast Latin pater : English father shows. Talk probably comes from an original word meaning "count", as does Dutch taal "language". (We are always happy when the talkative Katy Brezger talks to us into running a wonderful word like today's Good Word.)
Use this forum to discuss past Good Words.
2 posts • Page 1 of 1
- Dr. Goodword
- Site Admin
- Posts: 4562
- Joined: Wed Feb 02, 2005 9:28 am
- Location: Lewisburg, PA
- Contact:
• The Good Dr. Goodword
We are always happy when the talkative Katy Brezger talks to us into running a wonderful word like today's Good Word.
And yet, she has been rather reticent lately. What's up Katy? Have the buggies you alude to from time to time (the ones with legs, not the ones with wheels) put you off your feed?
"Time is nature's way of keeping everything from happening all at once. Lately it hasn't been working."
2 posts • Page 1 of 1
Return to "Good Word Discussion"
Who is online
Users browsing this forum: Bing [Bot] and 4 guests

subset: commoncrawl


text:
(written from a Production point of view)
Jake and Nog get into trouble while trying to cheer up Sisko by acquiring a mint-condition 1951 Willie Mays rookie baseball card; the Dominion offers to sign a nonaggression pact with Bajor.
Summary Edit
The mood aboard Deep Space 9 has grown dark as the Dominion threat has intensified. Three ships have disappeared along the Cardassian border in just the last three weeks, Odo has canceled a vacation due to increased thefts of food rations and medical supplies, and the crew is generally gloomy – Captain Sisko most of all. What's more, Kai Winn Adami announces she'll be visiting the station. Fortunately, Jake Sisko has a plan to lift his father's spirits – Quark has invited him to an auction at which a mint-condition Willie Mays rookie year baseball card will be available. He'll show up, purchase the card, and make a gift of it. "How hard can that be?"
Act One Edit
Jake convinces Nog to let him use some of the gold-pressed latinum he's saved up over his lifetime so he can purchase this gift for the Captain, by guilting him through a reminder that the Captain made it possible for Nog to attend Starfleet Academy. Meanwhile, Kai Winn meets with Captain Sisko and reveals that the Dominion has requested a meeting with her. Both Sisko and the Kai are concerned about how Bajor will be able to cope with a pending Dominion invasion. At the auction, even Nog's entire life savings isn't enough to out-bid a mysterious man at the back of the room. He bids 10 bars of latinum (twice what Nog has saved) and then disappears out the back.
Act Two Edit
Nog tries to convince Jake they've lost the card, but Jake is determined to come through for his father. They intercept the man as he leaves the auction house but he mutters something about refusing to get involved with any "soulless minions of orthodoxy" and disappears into a turbolift. Weyoun arrives on the station to meet with Kai Winn and exchanges insults with Sisko.
Finally, the man who bought the baseball card – Dr. Elias Giger – requests a meeting with Jake and Nog after learning of their relationships to Captain Sisko and Quark. It seems he needs some supplies he believes they're in a position to obtain, and he's willing to trade the baseball card for those supplies. Jake agrees, even after learning that Dr. Giger plans to use the supplies in the construction of his cellular regeneration and entertainment chamber – a device designed to keep the cells of the body from getting bored, thus prolonging life indefinitely. Jake and Nog agree that the man is crazy, but since he has the baseball card they have little choice.
Act Three Edit
Giger provides a lengthy list, and Jake and Nog go straight to work. For a neodymium power cell from a Cardassian phase-coil inverter they visit Chief O'Brien, but he's too busy re-calibrating EPS regulators to help. Nog, always a Ferengi, strikes a deal: Jake and Nog will do the work while the Chief visits a holosuite for a chance to go kayaking for the first time in weeks. In exchange, O'Brien will find the power cell.
For five liters of anaerobic metabolites suspended in a hydrosaline solution, they call on Doctor Bashir, who's not only busy but is doing something he wants to do (so they can't strike a deal like they did with Chief O'Brien). Nog's cunning though, and he gets Bashir to admit that he'd be much happier if he had Kukalaka – his teddy bear. The pair manage to retrieve the bear from Leeta while she's sleeping.
While Jake and Nog are running errands, Kai Winn discusses Weyoun's proposal with Sisko. The Dominion wants to sign a non-aggression treaty with Bajor. She recognizes that Starfleet can't possibly protect Bajor from the full strength of the Dominion, but also knows that allying with the Dominion could make Bajor the next world conquered. Sisko advises that she stall for time and keep Bajor's options open. He tells her she needs to trust him this time. She puts her hand on his ear to read his pagh, then agrees.
Weyoun, meanwhile, has gotten suspicious of the activity in the quarters below his, where Giger's machinery is humming along.
Weyoun meets again with Kai Winn, and she tells him he'll have to wait until she's given a report to the First Minister. He says he understands, and that he and she are very much alike. She puts a hand on his ear as she did with Sisko, then says, "No, we are nothing alike," and leaves.
Nog has agreed to filter out subharmonic distortions from Worf's Klingon opera recordings while Jake helps Kira with an upcoming speech to the Bajoran Agricultural Ministry. When they've collected the last of the supplies, however, they find that Giger and his equipment are no longer in his quarters.
Act Four Edit
Jake and Nog visit Odo, who insists there never was such a person in those quarters. When he hears about the "Cellular Regeneration and Entertainment Chamber," he reads them a list of charges including making a false report and wasting police time and scares them out of his office.
Searching for an explanation, Jake blames Kai Winn, thinking she was after a Bajoran mandala that was auctioned in the same lot as the baseball card. He and Jake confront her in the corridor as Weyoun departs, accusing her of kidnapping Giger. Sisko is furious when he finds out, but Jake, still wanting to surprise his father, lies and insists that he and Nog got drunk at Quark's before approaching the Kai. Naturally this makes Captain Sisko even angrier, and he tells them that he was wrong to place so much trust in them. He confines both of them to quarters and angrily dismisses them.
As the two argue after they leave Sisko's office, they're suddenly beamed onto Weyoun's ship.
Act Five Edit
Weyoun inquires about their connection to Dr. Giger, who was abducted on Weyoun's orders. Jake explains that they were only trying to acquire a baseball card, but Weyoun doesn't believe him. He mentions the polarized particles from Giger's room, and the fact that Jake and Nog met with Kai Winn immediately after she left him.
The Jem'Hadar bring Giger into the room with the box from the auction and Weyoun begins examining the contents. Weyoun tells Jake he would like them to be friends, but they must be truthful with each other.
Jake says he and Nog were working for Starfleet Intelligence, and concocts an absurd story about hunting for a mysterious man from the future named Willie Mays. Weyoun realizes their original story was truthful.
Weyoun turns to Giger and asks for an explanation of his machinery. Jake says Giger is harmless, he's just crazy. Nog agrees, saying Giger was trying to become immortal. Weyoun suddenly gets very excited. "Really?" He says to Giger. "I have a background in 'creative genetics,' perhaps I could be of help." Giger says it will take some time to explain his theories. As Giger starts to explain the chamber, Weyoun allows Jake and Nog to leave... with the baseball card.
- "Captain's log: Stardate 50929.4. Two days ago, this station felt like a tomb. I'd never seen so many of my crew depressed at the same time. But for some reason, it now seems as though a new spirit has swept through the station ... as if someone had opened a door and let a gust of fresh air blow through a musty old house.
- "Why this is happening is frankly a mystery to me. After all, nothing has really changed. The Dominion is still a threat, the Cardassians are still threatening to retake the station, and I can still see the clouds of war gathering on the horizon.
- "So why do I sense a newfound sense of optimism in the air? But maybe I'm over thinking this. Maybe the real explanation is as simple as something my father taught me a long time ago. Even in the darkest moments, you can always find something that'll make you smile."
Due to unintentional benefits of Jake's and Nog's trades, Chief O'Brien had time to go kayaking in the holosuite, Dr. Bashir has Kukalaka back (though Leeta is confused about losing him), Major Kira's speech was well received, and Worf is able to listen to his opera collection on the Defiant's bridge again. Weyoun even takes an interest in Giger's work on immortality. But most importantly, Captain Sisko has a mint-condition Willie Mays rookie baseball card from Earth, 1951. The whole station feels happier.
Log entries Edit
Memorable quotes Edit
"It's my money, Jake! If you want to bid at the auction, use your own money."
"I'm Human, I don't have any money."
"It's not my fault that your species decided to abandon currency-based economics in favor of some philosophy of self-enhancement."
"Hey, watch it. There's nothing wrong with our philosophy. We work to better ourselves and the rest of Humanity."
"What does that mean exactly?"
"It means... it means we don't need money!"
"Well, if you don't need money, then you certainly don't need mine!"
- - Nog and Jake
"You accused the Kai of burglary and kidnapping?!"
"We didn't really accuse her of anything."
"Oh, I see, you just implied it."
- - Sisko, Jake, and Nog
"Sold... to the blue man... in the good shoes."
- - Quark
"Do you want to die?"
- - Giger, to both Jake Sisko and Weyoun, introducing his cellular regeneration and entertainment chamber
"Let's come up with something else to cheer up your dad, like a new pair of shoes."
"What's wrong with shoes?"
"Nothing, except it's stupid."
- - Nog and Jake
"Mr. Worf, you've been paroled. The party's over."
- - Sisko
"I'm not crazy... I'm just a little obsessed."
"A little?"
- - Jake and Nog
"I have some experience in that area as well."
- - Kai Winn, referring to political intrigues
"I see that my faith in the two of you has been sadly misplaced. You both are confined to quarters until further notice! DISMISSED!!!"
- - Sisko, to Jake and Nog
"Maybe the soulless minions of orthodoxy finally caught up with him."
"The who?"
- - Nog and Odo, on Giger's disappearance
"Lions and Gigers and bears."
"Oh, my."
- - Nog and Jake
"The entire future of the galaxy may depend on us tracking down Willie Mays... and stopping him."
- - Jake, to Weyoun
"He's harmless, he's just working on a way to become immortal."
"Really? I have a background in, shall we say, creative genetics. I'd be most interested in hearing your theories."
- - Nog and Weyoun
Background informationEdit
Story and scriptEdit
- This episode was conceived as a bottle show. As Ronald D. Moore explains, "We had a very simple premise for a show. Jake and Nog chase a card around the station, trying to give it to Sisko. That's really just where we started. We figured we could do the show right before the season finale and it would be fun and funny and contained and cheap and after that we'd send them out on this big war story." (Star Trek: Deep Space Nine Companion)
- In the original version of the teleplay, Elias Giger was trying to resurrect his dead wife, using just her ear to genetically recreate her. This particular idea was Ira Steven Behr's, but Ronald D. Moore was having trouble getting it to work. Eventually, René Echevarria pointed out that the reason it wasn't working was because Giger is not supposed to be a character to be taken seriously, but if he's trying to get back his wife, the audience is going to want him to succeed, which undermines the reason the character exists in the first place. Echevarria suggested that he be searching for immortality, but Moore wasn't keen on the idea. Behr then proposed that Giger should be trying to achieve something that initially sounds very interesting and plausible, but quickly begins to sound crazy. After Behr's suggestion, Moore came up with idea of "cellular ennui" and the theory that you could literally be bored to death. Behr and Echevarria both loved it, and so Moore began to write a new draft of the teleplay. (Star Trek: Deep Space Nine Companion)
- Ronald D. Moore commented: "Basically we reverse the normal structure in this show, so that the A-story is the comedy and the B-story is serious. It's a fun show". This episode is somewhat unique in Star Trek: Deep Space Nine insofar as it is the only show with a light-hearted humorous A-story and a serious and important B-story. Usually, the positions are reversed, a serious A-story is often offset with a lighter B-story (the third season episode "Life Support" is a good example: the A-story is about the death of Vedek Bareil and the signing of the Bajoran-Cardassian Treaty, while the B-story is about Jake and Nog going on a double date). In the case of this episode, the A-story is about Jake and Nog obtaining a baseball card, while the B-story is about Bajor's involvement in the inevitable Dominion War. ("In Pursuit of Happiness", Star Trek Monthly, issue 29)
- Jake quotes Captain Picard from Star Trek: First Contact when he says "we work to better ourselves and the rest of humanity." Moore commented, "I take great glee at mocking my own work." (AOL chat, 1999)
- Nog's line "Lions and Gigers and bears" is an obvious reference to the 1939 Victor Fleming film The Wizard of Oz where Dorothy says "Lions and tigers and bears." Indeed, the character of Elias Giger was named specifically so the Oz allusion would make sense. "Lions" refers to Jake's line "We're going to beard the lion in its den." "Bears" refers to Kukalaka. So Ronald D. Moore needed something rhyming with "tiger". After he came up with Giger, he then completed the reference by having Jake add "Oh, my!", as Dorothy adds in the film. (Star Trek: Deep Space Nine Companion)
- Ron Moore handed in his script for this episode on 21 March 1997 (AOL chat, 1997) and it began filming 3 April 1997. (AOL chat, 1997)
- This episode proved to be a big hit with the fans, and was also popular with the producers. According to Ira Steven Behr, "All the plot machinations, all the humor, all the tech talk, everything, it ultimately comes down to simple Human emotion of trying to make someone you care about feel better. It's very simple and very nice." Similarly, Ronald D. Moore states, "The father and son are really tight, and they really do love each other. It's a family that works, and that's important to us. In this particular episode, Jake's feelings ground everything, and it makes you actually care about all the ridiculous stuff. There's heart to it." (Star Trek: Deep Space Nine Companion)
- The computer system Doctor Giger uses in this episode appears to be the same system we see on the USS Excelsior and USS Enterprise-A in Star Trek VI: The Undiscovered Country.
- Morn can be seen leaving the bar with the painting Quark offered for auction just after the baseball card. This is the same painting Quark would inherit in "Who Mourns for Morn?", and which would ultimately end up being smashed over his head.
- The layout of the A-story of this episode, Jake and Nog trying to buy a baseball card but continually being forced to get something in lieu of the card, is similar in design to the B-story of the first season episode "Progress", where they are trying to earn latinum, but keep on ending up with commodities rather than profit. Nog continues this tradition on his own in the seventh season episode "Treachery, Faith and the Great River", where he describes this process to Chief O'Brien as sailing the river of the Great Material Continuum.
- This episode introduces the possibility of a non-aggression pact between Bajor and the Dominion. In the following episode, "Call to Arms", that pact would be signed.
- Despite going missing in this episode, the USS Tian An Men would at some point be recovered by Starfleet, taking part in the First Battle of Chin'toka a year later.
- Following on from "Rapture", this episode continues to add ambiguity to the usually villainous character of Kai Winn, in much the same way as the writers had added ambiguity to the character of Gul Dukat throughout the third and fourth seasons. In particular, we see in this episode that her relationship with Sisko is improving, and that their respect for one another is growing. We also see Winn tell Weyoun to his face that she is nothing like him.
- Just after Jake and Nog lose the baseball card at auction, Quark introduces Lot 49, an apparent reference to Thomas Pynchon's novel The Crying of Lot 49.(citation needed • edit)
- This is the first episode of Star Trek to be directed by Michael Dorn.
- Some events from DS9: "Rapture" are referenced, specifically Sisko's insistence that Bajor should not join the Federation, as of yet. According to Kai Winn, this episode is set six months after the events of DS9: "Rapture".
- Terry Farrell (Jadzia Dax) does not appear in this episode.
- Quark had previously held an auction of items from the Gamma Quadrant in his bar with Vash in DS9: "Q-Less".
- Although the established conversion of Latinum is twenty strips are equal to one bar (DS9: "Body Parts"), during the auction Quark raises the price of the chest containing the baseball card to one bar, twenty-five strips before Dr. Giger bids 2 bars. Since there are only twenty strips in a bar, this bid is in fact less than the previous bid.
- The Willie Mays baseball card is from the 1951 Bowman Baseball set, with a value of $4,000 as of 2014
Video and DVD releases Edit
- UK VHS release (two-episode tapes, CIC Video): Volume 5.13, 20 October 1997
- As part of the DS9 Season 5 DVD collection
Links and references Edit
Starring Edit
Also starring Edit
- Rene Auberjonois as Odo
- Michael Dorn as Lt. Commander Worf
- Cirroc Lofton as Jake Sisko
- Colm Meaney as Chief O'Brien
- Armin Shimerman as Quark
- Alexander Siddig as Doctor Bashir
- Nana Visitor as Major Kira
Guest stars Edit
- Jeffrey Combs as Weyoun
- Brian Markinson as Elias Giger
- Aron Eisenberg as Nog
- Chase Masterson as Leeta
Special guest star Edit
Uncredited co-stars Edit
- Uriah Carr as an Human operations division officer
- Tory Christopher as a Human medical officer
- Cathy DeBuono as Klingon bidder at auction
- Charlie-Olisa Kaine as Kelly
- Mark Newsom as Bajoran Vedek at auction
- James Lee Stanley as a Bajoran security deputy
- Susie Stillwell as a Bajoran security deputy
- Unknown performers as
References Edit
1951; 6th century; 22nd century; 23rd century; acrylic; anaerobic metabolite; Andor; Andorian chest; Andros III; artificial gravity grid; Bajor; Bajoran; Bajoran mandala; Bajoran War Orphans Fund; baseball; Bathkin; Berengaria VII; biogenic energy; Bolian; bracelet; bronze; bust; Cardassia; Cardassian border; Cellular boredom; cellular ennui; ceramic; chewing gum; chromoelectric wavelength; commission; confined to quarters; Cooperstown; Coridan system; currency-based economics; dagger; decibel; Decker; Earth; economics; electro-plasma conduit; EPS regulator; Emi's species; Eminence; Emissary of the Prophets; eventualistic movement; Federation; Ferengi; First Minister; Hall of Fame; holosuite; hydrosaline solution; immortality; intoxication; ion transtator; Jem'Hadar; kayaking; kismet; Klingon opera; Kukalaka; latinum; Martian colonies; Matoian movement; Mays, Willie; meter; Milky Way Galaxy; mitochondria; money; Mora Pol; neodymium; New York; O'Brien, Keiko; O'Brien, Kirayoshi; Orb of Wisdom; painting; parole; pedestal; phase coil inverter; polaric particle; power cell; prion; Promenade; pre-Surak; Prophets; Quark's; Romulan; Shakaar Edon; shoes; Sisko, Joseph; Starfleet Academy; Starfleet Intelligence; Surak; tapestry; Tellarite; Tholian; Tian An Men, USS; transtator; tricorder; triptin; turbolift; vedek; Vilk, Kandra; Vulcan; velvet; water basin
External linksEdit
- "In the Cards" at Memory Beta, the wiki for licensed Star Trek works
- "In the Cards" at Wikipedia
| Previous episode:
"Empok Nor"
| Star Trek: Deep Space Nine
Season 5
| Next episode:
"Call to Arms"


text:
Colombian Chicken Stew With Potatoes, Tomato, and Onion Recipe
Regional cuisine from Central and South America.
Every recipe we publish is tested, tasted, and Serious Eats-approved by our staff. Never miss a recipe again by following @SeriousRecipes on Twitter!
About the author: J. Kenji Lopez-Alt is the Chief Creative Officer of Serious Eats where he likes to explore the science of home cooking in his weekly column The Food Lab. You can follow him at @thefoodlab on Twitter, or at The Food Lab on Facebook.
- Yield:serves 4
- Active time: 5 minutes
- Total time:30 minutes
- Rated:
- 4 large Russet or Yukon Gold potatoes, peeled and cut into 1- to 2-inch chunks
- 1 large onion, sliced into 1/4-inch slices (about 1 1/2 cups)
- 4 medium beefsteak tomatoes, cut into 1- to 2-inch chunks (about 3 cups)
- 1 whole chicken, back removed, cut into 8 pieces (about 4 pounds), or 4 whole chicken legs, cut into thighs and drumsticks
- 2 bay leaves
- Kosher salt and freshly ground black pepper
Combine potatoes, onion, tomato, chicken pieces, bay leaves, and a large pinch of salt in a pressure cooker. Toss with hands to combine. Seal lid and cook under high pressure for 25 minutes. Release pressure, remove lid, season to taste, and serve.


text:
Winner: Scottsdale Fashion Square
|Scottsdale Fashion Square is the premier regional shopping center in the Southwest, attracting visitors who seek quality sophistication and selection. An unparalleled retail experience, Scottsdale Fashion Square has a unique style and atmosphere that makes it Arizona's epicenter of elite and first-to-market brands. Comprised of more than 240 shops and restaurants, the center boasts nearly 50 stores exclusive to Arizona, including Neiman Marcus, Barneys New York, Ted Baker, Tory Burch, David Yurman, Omega and Kate Spade. Scottsdale Fashion Square also offers a multitude of dining options, including Modern Steak, Fred's at Barneys New York, Marcella's Italian Kitchen and more.
|Year Est: 1961
Total SQFT: 1.8M
Principal(s): Westcor
|7014 E. Camelback Rd., #590
Scottsdale, AZ 85251
Finalist: Molina Fine Jewelers
|History is filled with examples of companies that have experienced incredible growth during periods of financial and economic unrest. Molina Fine Jewelers is committed to continuing its strong growth by nurturing and living the corporate values that have served Molina so well since its inception in 1987. Molina has adopted nine non-negotiable corporate values: 1) Do the right thing; 2) Help one another; 3) Deliver legendary service … the WOW Factor; 4) Produce quality always; 5) Exceed expectations … "Never Say No" attitude; 6) Embrace change; 7) Accept social responsibility; 8 ) Earn a reasonable profit; 9) Do what others are not willing to do. These values are the foundation for what Molina is and does.
|Year Est: 1987
AZ Staff: 48
Principals: Al Molina, Owner;
Bryan Greenwood, COO
|3134 E. Camelback Rd.
Phoenix, AZ 85016
Finalist: Camelback Volkswagen Subaru Mazda
|Camelback Volkswagen Subaru and Mazda never forgets that it is all about the customer. It has imbedded this philosophy within its staff and processes. For example, its five-day "no hassle" return policy sets Camelback Volkswagen apart from other dealers. You can literally bring the car back with no questions asked. The Camelback Volkswagen team is led by Mark Exposito, who has been a part of the dealership for more than 13 years. He continues to improve the way Camelback Volkswagen does business. His goal is to develop a dealership that has customers for life and not just a single visit. With his vision, Camelback Volkswagen is confident it will thrive in this ever-changing world.
|Year Est: 1989
Cars Sold: 2,376
Principal(s): Mark Exposito,
Larry Van Tuyl
|1499 E. Camelback Rd.
Phoenix, AZ 85014


text:
Did you know?
The floods of 2000 had one positive spin-off: a treasure of wood for carvers.
The artists of Venda are always producing new work. Their inspiration comes from a dream in the night, a sudden flash in the mind – or a morning of contemplation under a paw-paw tree. They scour their neighbourhoods for materials, scavenging shattered trees brought by the floods that have swept through these villages in past decades or working with richly coloured clay to make the pots for which the region is so well-known.
This is Ribolla art in action and these artists are the living heart of the Ribolla Open Africa Route.
Developed to support the area's artists, this route through a number of villages in northern Limpopo helps to put artists on the map, making it easier for visitors and art lovers to find them – and their work. Officially, the route stretches from northern Polokwane (formerly Pietersburg) towards Musina, before joining the R524 and R523 to the Punda Maria Gate at Kruger National Park, where it joins the Hlanganani Route in the eastern part of the province.
Venda art is renowned all over the world. It's a safe bet that somewhere in New York today, a well-travelled Manhattan account executive will rest his eyes lovingly on the contours of a headless clay maiden, fashioned by Noria Mabasa or one of the artists who is following in her footsteps. In Hong Kong, a shipping mogul may lightly tap his manicured fingers on the stretched cowhide of a Phineas Masuvhelele drum, so large it dominates his Victoria Peak patio. And on a rainy morning in London, a young stockbroker may think back fondly on the time Ribolla art master Jackson Hlungwane gave him a lesson in life, and then sold him a superb piece of Venda impressionism.
Completing the route will not only put you in touch with Venda's artists. You will also be able to explore the area's cultural richness, experience its warm hospitality and be amazed by its beautiful landscapes. And if you're lucky enough to find one of the master artists hard at work, you can watch as they chisel away at a hardwood stump, charming art from ironwood until a figure begins to emerge...
Travel tips & Planning info
Who to contact
Ribolla Tourism Association
Tel: +27 (0)15 556 4262
Email: firstname.lastname@example.com
How to get here
The Ribolla Open Africa Route is best accessed from Elim, not far from the town of Makhado.
Around the area
This is a delightfully scenic land. Take time to gaze at the mountains and Albasini Dam.
Get around
This is a self-drive route.
Length of stay
The tour takes a day, so you'll probably want to stay at least two nights.
Where to stay
There are a number of local options, the best of which is the Shiluvari Lakeside Lodge, which has done much to cultivate many of the artists in the area and helped set up the Ribolla Art Route.
Best buys
Any of the art, especially the wood carvings, found along the route.


text:
PHILADELPHIA - Once again, the University of Pennsylvania women's basketball team went toe-to-toe with a major conference opponent. And once again, they trailed by one with the ball and under 10 seconds to play. But the Quakers could not duplicate the heroics from the program's first-ever ACC win just two weeks ago at Miami, and fell to Big 5 rival Villanova, 55-54, at The Pavilion on Wednesday night.
Penn had two shots in the final seconds as senior captain Alyssa Baron missed a tough running jumper in the lane and freshman Sydney Stipanovich's contested putback also found iron. The first road loss of the season snapped Penn's school record eight-game non-conference win streak and dropped the Quakers to 8-4 overall and 1-1 in the Big 5.
Stipanovich gave the Quakers the lead, 54-53, with a pair of free throws with 1:58 to go. Villanova responded with the go-ahead basket at the 1:00 mark. Following a missed jumper, Stipanovich corralled the loose ball and Penn retained possession. That gave the Quakers the option for the last shot, but a road win over the Big East foe was not to be.
In a series dominated by the Wildcats -- Penn has won just two of the 41 meetings -- and in a building detested by the Red and Blue -- Penn had lost the last three meetings at The Pavilion by an average of 25.8 points per game -- the Quakers were unfazed by the opponent, atmosphere and the history. They played fearless throughout the night.
It showed early. The Wildcats jumped out to a 9-4 lead, but Penn made an early statement when Bonenberger and Baron alternated baskets throughout a 9-0 run for a 13-9 lead midway through the first half.
That run extended to 12-2 after senior captain Meghan McCullough hit the first of her two threes for a 16-11 advantage with 9:35 to go in the half.
Villanova (13-3, 3-1 Big 5) scored six straight and the teams traded the lead down the stretch. But sophomore Keiera Ray hit two free throws in the final minute to give Penn a 29-27 lead at the break.
The Quakers delivered an early blow to start the second half with a 9-2 run in the first five minutes. Baron hit a jumper, junior Kara Bonenberger had back-to-back buckets and McCullough's three from the wing gave Penn a 38-31 advantage.
But the Wildcats stormed back on their home court and tied the game at 42-42. At the 9:55 mark, Villanova reclaimed the lead at 48-47.
The deficit grew to 53-48 with 5:25 remaining, but the Quakers refused to surrender. Penn held Villanova without a bucket for the next four minutes and eventually retook the lead on Stipanovich's free throws.
Inside the Numbers
Baron was one rebound shy of a double-double for the second time in a week and led the team with 16 points. Bonenberger finished with 12 points on 6-of-8 shooting, while McCullough added eight points, three assists and two steals. Allen had a team-high four assists and matched Baron with a game-high nine rebounds. Penn was 21-of-56 (37.5%) from the field and just 3-of-17 (17.6%) from three-point range. Villanova connected on 22-of-57 (38.6%) overall and made nine of their 31 three-point attempts (29.0%). Penn held the rebounding edge, 37-34.
*Penn has now lost four games this season to teams with a combined record of 50-10 (.833).
*Penn won its first four road games to tie a school record. No Penn team has ever started the season 5-0 in true road games.
*Penn is now 21-4 over the last two seasons when leading at the half and 6-2 this year (other loss was in the season opener to St. Francis Brooklyn).
*Baron has now started all 99 games of her career.
*This was the first one-point game in this series since a near-identical 54-53 loss at The Pavilion exactly 30 years ago to the day.
*Penn lost for the first time in 20 games when outrebounding their opponent (last loss was at Cornell on Feb. 17, 2012).
Up Next
Its a quick turnaound for the Quakers, who will have another Big 5 matchup in less than 48 hours. Tip off at Saint Joseph's is Friday at 7 p.m. Penn is then at Temple on Wednesday, Jan. 22 (7 p.m.) before the final non-conference game of the year against NJIT at The Palestra on Jan. 25 (5 p.m.).
Download: 12-Villanova Box.pdf


text:
A J's Stitching ProjectsLogic Grid puzzles come with a handy interactive grid that will help you solve the puzzle based on the given clues.
A J really enjoyed stitching pictures and designs with her needle and thread. Not only did she love making things, she had lots of fun giving them away. Recently, she just completed five projects. Can you figure out who got each project, what the design was, what the main color was, and how big it was?
Recipients: Daughter, Granny, Husband, Mom, Niece
Designs: Butterfly, Clouds, Cross, Flower, Leaves
Main colors: Blue, Brown, Green, Red, White
Sizes: Extra Small, Small, Medium, Large, Extra Large
1) The five projects were the one for her mom, the one with clouds, the brown one, the medium one, and the extra large one.
2) A J decided to give her daughter, Rachel, the smallest one since it would go in her locker at school.
3) A J used (subtractive) primary colors for the butterfly and the flower.
4) A J's mom got a project that has something to do with plants.
5) Rachel's cousin got the medium sized project with a butterfly.
6) A J had a lot of red, so she made that the main color of the large project.
7) The project for A J's granny was bigger than the white one and bigger than the one with a cross.
8) A J did not use brown on her husband's design.
HintRed and blue are primary colors.
A J's daughter is Rachel. Rachel's cousin is A J's niece.
AnswerThe daughter got a cross that was brown and extra small.
The granny got leaves that were green and extra large.
The husband got clouds that were white and small.
The mom got a flower that was red and large.
The niece got a butterfly that was blue and medium.
What Next?
See another brain teaser just like this one...
Or, just get a random brain teaser
If you become a registered user you can vote on this brain teaser, keep track of
which ones you have seen, and even make your own.
Back to Top


text:
A CHARFIELD woman is urging others to do all they can to reunite pets with their owners after her family's much-loved cat went missing.
Jan Baber's ten-year-old cat Monty disappeared on January 4.
He was found almost a month later and brought to Rowe Vet Group in Wotton and later transferred to Rowe's in Bradley Stoke for recovery. Sadly Monty was very dehydrated and suffering from jaundice and died a few days later.
Ms Baber wants to highlight the power of social media and the work done by Rowes after Monty was found.
She said the Facebook group Lost and Found Pets in Bristol/South Glos gave her family the support they needed during their search for Monty and afterwards.
"I had over 320 comments at one point from members, all hoping for Monty to be returned to us.
"So many people see a cat and befriend it without thinking that the cat belongs to someone or see one on the roadside and just pass it by.
Ms Baber said there are lots of things that can be done to help people who have lost their pets.
"We enlisted help in looking for Monty so that people knew that we were looking for him. Monty had an identification microchip inserted under the skin which enabled Rowe's to track us down as his owners after the kind person who found him took him into their surgery."
She said microchips will become compulsory for dogs in April 2016 but they were an excellent idea to insure against loss for cats too.
Ms Baber is urging people to check their sheds and outside buildings for pets that might have got trapped in them before they go away for weekends or holidays.
She said: "It is highly likely Monty was trapped somewhere and unable to get food and water which ultimately led to the health problems that he was sadly unable to recover from."


text:
After performing surprisingly well Monday, corn futures accelerated upward Tuesday. There was no obvious bullish news, so wire service reports cited cash market firmness and signs of improving demand as powering the market upward. Technicians may have been buying as well, especially with the nearby March contract having pushed above chart resistance associated with the psychologically important $7.00/bushel level. March corn ended Tuesday having surged 11.5 cents to $7.05/bushel, while December gained 6.5 cents to $5.5625.
Soybean futures proved quite firm Tuesday. The market seemed set to continue its recent slide, with talk of improving Argentine weather, the progressing Brazilian harvest and concerns about potential cancelations of Chinese orders weighing upon prices. No news item obviously powered the bounce from early lows, but suggestions that tightening farmer supplies played a role gained considerable traction. Still, one has to wonder if soybean rallies can be sustained with the Brazilian harvest hitting its stride. March beans lost 3.50 cents to $14.4775 at their Tuesday afternoon close, while March soyoil remained under pressure from the palm oil market; that contract plummeted 1.11 cents to 49.02 cents/pound, whereas March meal had gained $2.1 to $427.7/ton.
Strength spilling over from the corn pit also seemed to boost the wheat markets Tuesday. Given the bearish implications of the ongoing winter storm and the moisture it is providing to large areas of the Great Plains, the wheat bounce was impressive. U.S. producer insistence upon better prices may be supporting the market, but the bounce may also have a significant technical component, with the March Chicago contract closing above the $7.00/bushel level seeming especially noteworthy. March CBOT wheat futures closed 6.5 cents higher at $7.0575/bushel Tuesday afternoon, while March KCBT wheat edged 1.25 cents upward to $7.3275, and March MGE futures advanced 3.0 cents to $7.89.
The blizzard that hit the Southern Plains Monday greatly stressed feedlot cattle in that region, which seemed to belatedly push cattle futures higher Tuesday afternoon. Poor feedlot conditions can power major winter price gains, but animals may already be adapted to the cold weather at this point. The possibility that the budget sequester will force packers to slow operations (due to the absence of Federal inspectors) may be weighing upon the market. April cattle had surged 0.87 cents to 129.30 cents/pound at the end of the CME open outcry session, while August gained 0.27 cents to 125.55. Meanwhile, March feeder cattle climbed 0.37 cents to 141.17 cents/pound, and August rose 0.25 cents to 154.40.
Lean hog futures were mixed Tuesday, with the nearby April future seeming to reflect short-term pessimism while the deferred contracts anticipated seasonal strength through spring and summer. The cash markets were mixed, whereas the ongoing blizzard seemed to disrupt the release of wholesale beef and pork information. We are guardedly optimistic about the potential for a short-term rebound, but such ideas could go out the window if the Federal government sequester forces slowdowns upon the packing industry. April hogs dipped 0.33 cents to 81.57 cents/pound at the Tuesday close, while June rose 0.27 cents to 91.32.


text:
Thanksgiving has turkey, Christmas has ham (or perhaps turkey), but for America's biggest unofficial holiday – Super Bowl Sunday – the food of choice is the chicken wing. According to the National Chicken Council (NCC), Americans will consume more than 1.2 billion wings over Super Bowl weekend. Yes, that's billion, with a "b."
And the Super Bowl isn't the only time Americans devour piles of wings. During 2013 the NCC estimates more than 13.2 billion chicken wings, about three billion pounds, will be marketed as wings, excluding those sold attached to the rest of the chicken.
For Super Bowl XLVII, football fans will pay the highest price ever for their hot wings. With the retail price averaging upwards of $2.50 per pound, wings are the most expensive part of the chicken.
Beef really needs a chicken-wing equivalent.
So how did an item consisting of mostly bone and skin, formerly viewed essentially as a byproduct of the rest of the chicken, become such a hit?
Thinking back to my youth, chicken was available in two forms at grocery stores – whole or cut up. The cut-up package contained all the parts, typically with the wings still attached to the breast sections. Most home cooks weren't really sure what to do with them. Somewhere around the late 1970s, processors began packaging individual cuts of the chicken, largely because of the growing popularity of chicken breasts as consumers perceived the dry, flavorless white meat as more healthy.
For a time, that trend left wings without a home, but fortuitously for chicken producers and processors, the wing craze was just getting started.
According to chicken-wing lore, the Buffalo Wing was conceived at the Anchor Bar in Buffalo, New York in 1964. After closing one night, the bar's co-owner fried up some left-over wings, dunked them in hot sauce and served them to her son and his friends for a late-night snack. They liked the wings so much the Anchor added them to the menu and the concept spread from there. By the early 1990s, major chains such as McDonald's, KFC and Domino's Pizza began serving wings, adding to their national popularity. Today, national chains such as Buffalo Wild Wings and Wing Stop have built their entire business around the lowly chicken wing.
The chicken-wing story provides lessons in consumer behavior that could be valuable in marketing future beef products.
- Consumers are willing to pay more for an item they like, even if its attributes would logically indicate a lower value. Case in point: Chicken drumsticks taste virtually the same as wings and have a greater meat-to-bone ratio, and yet they sell for less than half the price of wings at retail.
- If consumers like a food item, they'll gladly throw all their supposed concerns over healthy eating out the window. Traditional Buffalo Wings are deep fried, then soaked in a one-to-one mix of melted margarine and hot sauce, but Americans will eat three billion pounds of them this year.
Beef really needs a chicken-wing equivalent.
The NCBA, Cattlemen's Beef Board and industry partners have tried over the years to develop beef snack items that could fill the same niche as wings and add value to lower-priced cuts, but have not yet found the winning formula.
I don't know what the answer will be, but I hope they keep trying. Perhaps something using meat from the short ribs – lower-value cuts that are mostly exported but feature good beef flavor and marbling. Hmm. Thinly sliced short-rib meat, well seasoned and grilled on a small kabob. I'm getting hungry.


text:
May 2012, Volume 41 No. 3
Book Reviews
I Found It on the Internet by Carrie Allmendinger
What They Don't Teach You in Library School by Elizabeth Marcus
Content Curation by John Farrier
We Could Do That by Andrea Mullarkey
So You Want a Job, Huh? by Tahirah Akbar-Williams
Making the Most of Anaheim by Julia Glassman
Regular Features
President's Column by Linda Crook
Headliners by Heidi Steiner