Overcommit memory
Dear all, there is a lot to read about z/VM and Linux performance. Also about memory over commit. but I didn`t find real life performance data about zLinux SAP or Oracle or Tomcat (nor other standard Application-Server) and how the perform while over commit memory. A special point of interest would be: - How many escon-channels do you use for swap under z/VM ? - How much (in percent) do you over commit memory for a Linux-guest ? - What`s about fibre-channel ? Is there a much better performance and is it possible to do much more memory over commit ? - If yes, how much more ? As I can say so far, 20% memory over commitment in general works. We us 4 escon-channels to the z/VM swap-devices. I would be happy, if someone can share some real life experience with us. Regards, Martin Lonkwitz Martin Lonkwitz Lufthansa Systems GmbH UNIX Systems EngineerFRA AR/ISS Systemplanung,-betrieb Am Weiher 24 und Entwicklung D-65451 Kelsterbach Telefon:(069) 696-72456 Externer Servicepartner der Firma networker, projektberatung GmbH Am Kaltenborn 1 61462 Königstein -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Veritas NetBackup
We are running Upstream on our z/Linux (SLES8) with the server address space running on z/OS and are very pleased with the product. We were in the same position running Veritas as our standard Wintel backup utility and had to find an alternative. Regards, Graeme --- Graeme Westerman Principal Systems Programmer Tel: 01789 265113Fax: 01789 262770 NFU Mutual Insurance, Tiddington Road, Stratford-upon-Avon, Warwickshire, CV37 7BJ, England Email: [EMAIL PROTECTED] --- __ IMPORTANT The information contained in this e-mail and in any attachments is intended only for the named recipient or entity. The e-mail and any attachments may contain legally privileged or confidential information and may not be disclosed to anyone else. If you are not the intended recipient, please notify us immediately on 01789-202121 and delete the material from any computer that may contain it and destroy any printed copies you may have made. We accept no liability for any direct, indirect or consequential loss or damage arising from any action taken in reliance on or use of the information contained in this e-mail and give no warranty or representation as to its accuracy or reliability. NFU Mutual has the facility to monitor and read both incoming and outgoing communications by e-mail and these may be intercepted by its automated e-mail administrators. NFU Mutual will not accept e-mail communications found to contain viruses. Parent Company: The National Farmers Union Mutual Insurance Society Ltd (No. 111982). Authorised and regulated by the Financial Services Authority for Life, Pension and Investment business. Registered in England Registered office : Tiddington Road, Stratford-upon-Avon, CV37 7BJ. Tel: 01789 204211 NFU Mutual is a member of the General Insurance Standards Council, ABI and FOS. http://www.nfumutual.co.uk -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: SLES 9 online_update
I don't have an answer for you; I'm just starting to get familiar with YOU myself; but I'm curious where did you find the doc for online_update command line options? -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Little, Chris Sent: Thursday, October 14, 2004 4:23 PM To: [EMAIL PROTECTED] Subject: [Spam] SLES 9 online_update Having problems with online_update -- probably mostly because I'm not too familiar with it. molly:~ # online_update -gD -u http://okdhs:[EMAIL PROTECTED]/download Types of patches to be installed: security recommended patchlevel Server URL: http://okdhs:[EMAIL PROTECTED]/download Server Name: Directory File: Path 0: ./s390x/update/SUSE-SLES/9/patches Path 1: ./s390x/update/SUSE-CORE/9/patches ERROR(Media:file not found)[HTTP return code: 400 (URL: http://okdhs:[EMAIL PROTECTED]/download/s390x/update/SUSE-CORE/9/pat ches /directory.3)] molly:~ # online_update -c Product 0 (primary product) Name: SUSE SLES Version: 9 Architecture: s390x Product 1 Name: SUSE CORE Version: 9 Architecture: s390x Language: de Directory:directory.3 molly:~ # +--+ | Chris Little OKDHS Platform Services | | IS Operating Systems Specialist IV | | email [EMAIL PROTECTED] | | work (405)522-1306 cell (405)229-7822 | +--+ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Veritas NetBackup
We've been asking for the SLES8 client for more than 2 years. We have been told the SLES8 client will be available soon. However, it requires the master server to be version 5.1. So now we will finally have a client and still cannot use it. Our server is still a version 4 and has to remain so until since intel clients are upgraded (that could be another year). -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of SOLLENBERGER, JUSTIN Sent: Thursday, October 14, 2004 3:11 PM To: [EMAIL PROTECTED] Subject: Veritas NetBackup We are looking to deploy our first Linux guest and are looking for a file-level backup solution. We would like to go with the Veritas NetBackup Client on our SuSE SLES 8, but according to the information we found on their website they don't have a supported client at this time (we are trying to confirm this with their sales department and get a date when they will). Can anyone confirm or deny this? What other options are people using, and how pleased are you with the products/support? Thanks in advance for the help, Justin Sollenberger Operating Systems DISA DECC Mechanicsburg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Cloning Linux systems problem
Hi Calos, Hi sebastian, most probably this is caused by the fact that your carbon copy of the dasd has a different devno. The device number of the dasd is in the kernel parameter line, which zipl stores on preparation of the boot volume. You can use the following workaround: - attach the copy to a running linux guest - enable it $bash echo add devno /proc/dasd/devices (you should see some messages on the console indicating that the dasd was detected) - look at /proc/dasd/devices to figure what device name it has (in this example: dasdx) - mount it on /mnt $bash mount /dev/dasdx1 /mnt - look at /proc/mounts to verify that the dasd was mounted ok - switch to the dasd as root device $bash chroot /mnt - edit the parmfile (most probably in /boot/parmfile or similar, maybe in /etc/zipl.conf - I am not sure where SuSE puts their kernel parameters) change the dasd=devno parameter to fit your new devno - run zipl to prepare the volume for boot - logout (to get out of the chroot jail) and log in again - unmount the dasd $bash umount /mnt - disable the dasd $bash echo set devno off /proc/dasd/devices - detach the dasd - attach it back to the guest that should run it - ipl just FYI: with sles9 you can edit the parameters at ipl time, that makes things much easier with kind regards Carsten Otte -- omnis enim res, quae dando non deficit, dum habetur et non datur, nondum habetur, quomodo habenda est carlos [EMAIL PROTECTED] Sent by: Linux on 390 Port [EMAIL PROTECTED] 14/10/2004 09:45 AM Please respond to Linux on 390 Port To: [EMAIL PROTECTED] cc: Subject:Re: Cloning Linux systems problem hello - Original Message - From: Sebastian Welton [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, October 03, 2004 6:51 PM Subject: Cloning Linux systems problem We have just installed SLES8 and require another 5 systems so using the Redbook SLES8 under zVM as our guide we followed the instructions for cloning. This suggests to use DDR to copy the disks which we dutifully did. However upon booting the new system the zVM user goes into a CP wait state after the initial boot as it cannot read the partition table (dasda1.) As this is running under FLEX we also tried using a ckdbackup piped into a ckdrestore as its a lot quicker than DDR and the same problem occurred. Have we missed something or is there another way apart from having to install each zLinux image one at a time? Many thanks in advance... MfG / Best Regards Sebastian -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: SLES 9 online_update
online_update --help -Original Message- From: Romanowski, John (OFT) [mailto:[EMAIL PROTECTED] Sent: Friday, October 15, 2004 7:12 AM To: [EMAIL PROTECTED] Subject: Re: SLES 9 online_update I don't have an answer for you; I'm just starting to get familiar with YOU myself; but I'm curious where did you find the doc for online_update command line options? -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Little, Chris Sent: Thursday, October 14, 2004 4:23 PM To: [EMAIL PROTECTED] Subject: [Spam] SLES 9 online_update Having problems with online_update -- probably mostly because I'm not too familiar with it. molly:~ # online_update -gD -u http://okdhs:[EMAIL PROTECTED]/download Types of patches to be installed: security recommended patchlevel Server URL: http://okdhs:[EMAIL PROTECTED]/download Server Name: Directory File: Path 0: ./s390x/update/SUSE-SLES/9/patches Path 1: ./s390x/update/SUSE-CORE/9/patches ERROR(Media:file not found)[HTTP return code: 400 (URL: http://okdhs:[EMAIL PROTECTED]/download/s390x/update/SUSE-CORE/9/pat ches /directory.3)] molly:~ # online_update -c Product 0 (primary product) Name: SUSE SLES Version: 9 Architecture: s390x Product 1 Name: SUSE CORE Version: 9 Architecture: s390x Language: de Directory:directory.3 molly:~ # +--+ | Chris Little OKDHS Platform Services | | IS Operating Systems Specialist IV | | email [EMAIL PROTECTED] | | work (405)522-1306 cell (405)229-7822 | +--+ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: SLES 8 YAST Online Update
This is probably because you don't have a proxy server defined for the GUI environment. I have to do that so infrequently that I can never remember just how to do it. So, I wind up playing around with a number of different things before it will work. Then I forget it until the next time. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Seader, Cameron Sent: Wednesday, October 13, 2004 11:39 AM To: [EMAIL PROTECTED] Subject: SLES 8 YAST Online Update YAST Online Update GUI does not work when i try to log into the sdb database, but it works when i use yast in SSH. Does anyone have troubles like this. What is up with that. -Cameron This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. A1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Overcommit memory
First, use Ficon. performance is SIGNIFICANTLY better than Escon. Channels for VM Paging (vm does paging, not swapping) is rarely an issue. Escon channels to me are a huge inhibitor to LInux on z/VM performance. There has been no published research for SAP performance under Linux under z/VM. There IS however work on a redbook for Oracle under linux under z/VM that will hopefully be published or at least partially distributed. I've been working on the performance part of that. I've looked at some SAP data but i think some extended research is needed. The overcommit question is not easy, there are several issues to address first. Do your servers drop from queue? This allows VM storage management to page servers out and is critical. Do you use virtual disk for linux swap? and have minimized the virtual machine size? This reduces overall requirements. Can you determine what percent of time your servers are active? if all your servers are active at the same time, you need storage to satisfy all of the active requirements. There was a z/VM performance class scheduled last month in Munich. Another class has not as of yet been scheduled. Check www.velocitysoftware.com for z/VM performance education schedules. From: Lufthansa Systems Infratec ZLINUX SYSPROG [EMAIL PROTECTED] Dear all, there is a lot to read about z/VM and Linux performance. Also about memory over commit. but I didn`t find real life performance data about zLinux SAP or Oracle or Tomcat (nor other standard Application-Server) and how the perform while over commit memory. A special point of interest would be: - How many escon-channels do you use for swap under z/VM ? - How much (in percent) do you over commit memory for a Linux-guest ? - What`s about fibre-channel ? Is there a much better performance and is it possible to do much more memory over commit ? - If yes, how much more ? As I can say so far, 20% memory over commitment in general works. We us 4 escon-channels to the z/VM swap-devices. I would be happy, if someone can share some real life experience with us. Regards, Martin Lonkwitz Martin Lonkwitz Lufthansa Systems GmbH UNIX Systems EngineerFRA AR/ISS Systemplanung,-betrieb Am Weiher 24 und Entwicklung D-65451 Kelsterbach Telefon:(069) 696-72456 Externer Servicepartner der Firma networker, projektberatung GmbH Am Kaltenborn 1 61462 K=F6nigstein If you can't measure it, I'm Just NOT interested!(tm) // Barton Robinson - CBW Internet: [EMAIL PROTECTED] Velocity Software, IncMailing Address: 196-D Castro Street P.O. Box 390640 Mountain View, CA 94041 Mountain View, CA 94039-0640 VM Performance Hotline: 650-964-8867 Fax: 650-964-9012 Web Page: WWW.VELOCITY-SOFTWARE.COM // -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Linux on z/Series and Anti-virus software
What are the current leading anti-virus software vendors that have a product that runs native under linux on z/Series? I've seen options that require me to NFS mount my disk, and other things. I've seen a few anti-virus probrams that run native, but our management doesn't want a 'small fish' as it were. They are looking for an AV vendor that has some legs... is going to be here in 5 years. That sort of thing. Recommendations? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Friday funny.
I hadn't heard this before, but our storage admin came up with: Point and click means that you forgot to load the gun. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Overcommit memory
For what's it's worth, we aren't currently running SAP or Oracle but we do run several applications with tomcat. We were able to cut down the virtual storage required by the tomcat guests dramatically by using 4 VDISK's for swap. For example, one vendor stated they needed 1 GIG of memory. But we now run their product with 96Meg. The performance Redbook was a big help. Don't just look at overcommit'ing memory. Look at using VDISK's to cut back on real memory usage. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of Lufthansa Systems Infratec ZLINUX SYSPROG Sent: Friday, October 15, 2004 2:12 AM To: [EMAIL PROTECTED] Subject: Overcommit memory Dear all, there is a lot to read about z/VM and Linux performance. Also about memory over commit. but I didn`t find real life performance data about zLinux SAP or Oracle or Tomcat (nor other standard Application-Server) and how the perform while over commit memory. A special point of interest would be: - How many escon-channels do you use for swap under z/VM ? - How much (in percent) do you over commit memory for a Linux-guest ? - What`s about fibre-channel ? Is there a much better performance and is it possible to do much more memory over commit ? - If yes, how much more ? As I can say so far, 20% memory over commitment in general works. We us 4 escon-channels to the z/VM swap-devices. I would be happy, if someone can share some real life experience with us. Regards, Martin Lonkwitz Martin Lonkwitz Lufthansa Systems GmbH UNIX Systems EngineerFRA AR/ISS Systemplanung,-betrieb Am Weiher 24 und Entwicklung D-65451 Kelsterbach Telefon:(069) 696-72456 Externer Servicepartner der Firma networker, projektberatung GmbH Am Kaltenborn 1 61462 Königstein -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Friday funny.
The one I heard was: Smith Wesson, the original point and click interface -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Friday, October 15, 2004 11:08 AM To: [EMAIL PROTECTED] Subject: Friday funny. I hadn't heard this before, but our storage admin came up with: Point and click means that you forgot to load the gun. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 Confidentiality Warning: This e-mail contains information intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering it to the intended recipient, any dissemination, publication or copying of this e-mail is strictly prohibited. The sender does not accept any responsibility for any loss, disruption or damage to your data or computer system that may occur while using data contained in, or transmitted with, this e-mail. If you have received this e-mail in error, please immediately notify us by return e-mail. Thank you. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux on z/Series and Anti-virus software
On Friday, 10/15/2004 at 10:17 EST, James Melin [EMAIL PROTECTED] wrote: What are the current leading anti-virus software vendors that have a product that runs native under linux on z/Series? I've seen options that require me to NFS mount my disk, and other things. I've seen a few anti-virus probrams that run native, but our management doesn't want a 'small fish' as it were. They are looking for an AV vendor that has some legs... is going to be here in 5 years. That sort of thing. Recommendations? Try http://www.ibm.com/servers/eserver/zseries/os/linux/apps/sec.html. This site is worth bookmarking. Alan Altmark Sr. Software Engineer IBM z/VM Development -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Friday funny.
And if it did not click you can drag drop the victim. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: VDSK, Swapgen et al
James, Module Size Used byTainted: P qeth 153756 2 qdio 33652 2 [qeth] ipv6 246300 -1 [qeth] lvm-mod69676 0 (autoclean) dasd_eckd_mod 56548 4 dasd_mod 47680 5 [dasd_eckd_mod] ... exec swapgen 300 256000 (reuse) DIAG swap disk defined at virtual address 300 I believe you need to load the dasd_diag_mod.o module too. We wrote it up in sec 6.6.2, p.121 of the Domino redbook: http://www.redbooks.ibm.com/abstracts/sg247021.html?Open (see especially the section Making the swap spaces permanent) -Mike MacIsaac, IBM [EMAIL PROTECTED] (845) 433-7061 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: VDSK, Swapgen et al
Jim, Please check if your initrd contains the dasd_diag_mod kernel module. You also seem to lack the dasd_fba_mod module, otherwise it would have loaded instead. Please try: insmod dasd_diag_mod Ronald van der Laan -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: [Spam] Re: SLES 8 YAST Online Update
YOU uses wget and wget can be told in /etc/wgetrc where the proxy server is. Edit /wtc/wgetrc and add a line that reads http_proxy = http://your.proxy:nn Example: http://10.5.5.121:8080 for a proxy server listening on port 8080 You can also add proxy authentication lines (if needed): proxy_user = userid proxy_passwd = password Until it's working well, you might find it helpful to also add lines that tell wget to create a log file and run in debug mode; the log gives you a clue what's going wrong (and right). logfile = /root/wget.log debug = on -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Sent: Friday, October 15, 2004 11:10 AM To: [EMAIL PROTECTED] Subject: [Spam] Re: SLES 8 YAST Online Update This is probably because you don't have a proxy server defined for the GUI environment. I have to do that so infrequently that I can never remember just how to do it. So, I wind up playing around with a number of different things before it will work. Then I forget it until the next time. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Seader, Cameron Sent: Wednesday, October 13, 2004 11:39 AM To: [EMAIL PROTECTED] Subject: SLES 8 YAST Online Update YAST Online Update GUI does not work when i try to log into the sdb database, but it works when i use yast in SSH. Does anyone have troubles like this. What is up with that. -Cameron This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. A1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux on z/Series and Anti-virus software
James Melin wrote: What are the current leading anti-virus software vendors that have a product that runs native under linux on z/Series? I've seen options that require me to NFS mount my disk, and other things. I've seen a few anti-virus probrams that run native, but our management doesn't want a 'small fish' as it were. They are looking for an AV vendor that has some legs... is going to be here in 5 years. That sort of thing. Recommendations? TrendMicro Server Protect. It surpassed our requirements and wishes. *Brandon -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux on z/Series and Anti-virus software
On Oct 15, 2004, at 9:28 AM, Brandon Darbro wrote: James Melin wrote: What are the current leading anti-virus software vendors that have a product that runs native under linux on z/Series? I've seen options that require me to NFS mount my disk, and other things. I've seen a few anti-virus probrams that run native, but our management doesn't want a 'small fish' as it were. They are looking for an AV vendor that has some legs... is going to be here in 5 years. That sort of thing. Recommendations? TrendMicro Server Protect. It surpassed our requirements and wishes. Your management probably isn't going to be interested in ClamAV, since there isn't a vendor per se, since it's an Open Source project--but hey, you'd have the source code. And, uh, I happen to know you could buy third-party support. It works quite well on Debian, and I assume it works fine on the other distros. They seem good about timely database updates. http://www.clamav.net. However, virus scanning is by its nature CPU intensive, so using your S/390 to do it may not be the right approach; of course that depends on how much CPU you have, how much scanning you need to do, and how badly you don't want to use the network to hand the workload to some other machine. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux on z/Series and Anti-virus software
This doesn't list the current Computer Associates offerings, including AntiVirus for Linux/390 You can find the AV details here http://ca.com/technologies/subsolution.jsp?id=4874 Mitch Rozonkiewiecz Development, CA -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Friday, October 15, 2004 10:38 AM To: [EMAIL PROTECTED] Subject: Re: Linux on z/Series and Anti-virus software On Friday, 10/15/2004 at 10:17 EST, James Melin [EMAIL PROTECTED] wrote: What are the current leading anti-virus software vendors that have a product that runs native under linux on z/Series? I've seen options that require me to NFS mount my disk, and other things. I've seen a few anti-virus probrams that run native, but our management doesn't want a 'small fish' as it were. They are looking for an AV vendor that has some legs... is going to be here in 5 years. That sort of thing. Recommendations? Try http://www.ibm.com/servers/eserver/zseries/os/linux/apps/sec.html. This site is worth bookmarking. Alan Altmark Sr. Software Engineer IBM z/VM Development -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Problem pinging DNS from SuSE SLES8 under z/VM via CTC
Hello, I am getting the following messages when trying to configure my network prior to install. It does not seem to be getting out to our network to find either the DNS or my ftp server running on my PC. = = ==-Welcome to SuSE Linux Enterprise Server 8 for zSeries -== = = Please select the type of your network device: 0) no network 1) OSA Token Ring 2) OSA Ethernet 3) OSA-Gigabit Ethernet or OSA-Express Fast Ethernet 4) Channel To Channel 5) Escon 6) IUCV 8) Hipersockets 9) Show subchannels and detected devices Enter your choice (0-9): 4 List of first 10 CTC Channels that were detected: Dev. Channel type CHPIDS 0808 CTC or LCSff00 0809 CTC or LCSff00 Device address for read channel (0808): 0808 Device address for write channel (0809): 0809 Select protocol number for CTC: 0) Compatibility mode, also for non-Linux peers other than OS/390 and z/OS (this is the default mode) 1) Extended mode 3) Compatibility mode with OS/390 and z/OS Enter your choice (0): 0 Writing 'ctc0,0x0808,0x0809,0,0' to /proc/chandev Starting ctc driver: CTC driver Version: 1.55.10.2 with CHANDEV support initialized ctc0: read: ch 0808 (irq 0001), write: ch 0809 (irq 0002) proto: 0 ctc46576 0 (unused) fsm 1888 0 ctcÙ ctc0 detected. ctc0 is available, continuing with network setup. Please enter your full host name, e.g. 'linux.example.com' (linux.example.com): linuxvm.fhsu.edu Please enter your IP address, e.g. '192.168.0.1' (192.168.0.1): 209.114.111.18 Please enter the IP address of your peer, e.g. '192.168.0.254' (192.168.0.254): 209.114.111.17 Please enter the IP address of the DNS server or 'none' for no DNS (none): 209.114.111.1 Please enter the DNS search domain, e.g. 'example.com' (fhsu.edu): fhsu.edu Please enter the MTU (Maximum Transfer Unit), leave blank for default: (1500): Configuration for ctc0 will be: Full host name : linuxvm.fhsu.edu IP address : 209.114.111.18 Peer IP address : 209.114.111.17 DNS IP address : 209.114.111.1 DNS search domain: fhsu.edu MTU size : 1500 Is this correct (Yes/No) ? yes For security reasons you have to set an temporary installation system password for the user root. You'll be asked for it only when you telnet into this installation system to limit the access to it and it will be cleared as soon as you shut down or reset the installation system Please enter the temporary installation password: X Temporary installation password set. ifconfig ctc0 209.114.111.18 pointopoint 209.114.111.17 mtu 1500 /sbin/ifconfig ctc0 : ctc0 Link encap:Serial Line IP inet addr:209.114.111.18 P-t-P:209.114.111.17 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Trying to ping my IP address: PING 209.114.111.18 (209.114.111.18) from 209.114.111.18 : 56(84) bytes of data. 64 bytes from 209.114.111.18: icmp_seq=1 ttl=64 time=0.062 ms 64 bytes from 209.114.111.18: icmp_seq=2 ttl=64 time=0.055 ms 64 bytes from 209.114.111.18: icmp_seq=3 ttl=64 time=0.057 ms --- 209.114.111.18 ping statistics --- 3 packets transmitted, 3 received, 0% loss, time 1998ms rtt min/avg/max/mdev = 0.055/0.058/0.062/0.003 ms Waiting 6 seconds for connection with remote side. Waiting 3 seconds for connection with remote side. Waiting 4 seconds for connection with remote side. Waiting 5 seconds for connection with remote side. Waiting 4 seconds for connection with remote side. Waiting 4 seconds for connection with remote side. Waiting 3 seconds for connection with remote side. ctc0: connected with remote side Trying to ping the IP address of the peer: PING 209.114.111.17 (209.114.111.17) from 209.114.111.18 : 56(84) bytes of data. 64 bytes from 209.114.111.17: icmp_seq=2 ttl=60 time=0.408 ms 64 bytes from 209.114.111.17: icmp_seq=3 ttl=60 time=0.393 ms 64 bytes from 209.114.111.17: icmp_seq=4 ttl=60 time=0.424 ms --- 209.114.111.17 ping statistics --- 4 packets transmitted, 3 received, 25% loss, time 3016ms rtt min/avg/max/mdev = 0.393/0.408/0.424/0.020 ms Peer seems to respond to our pings, continuing. Trying to ping the IP address of the DNS Server: PING 209.114.111.1 (209.114.111.1) from 209.114.111.18 : 56(84) bytes of data. --- 209.114.111.1 ping statistics --- 10 packets transmitted, 0 received, 100% loss, time 9016ms Warning: The DNS address 209.114.111.1 did not ping. Diagnostics: traceroute to the DNS IP with max ttl 10, waittime 1, one probe per hop: traceroute to 209.114.111.1 (209.114.111.1), 10 hops max, 40 byte packets
Re: Problem pinging DNS from SuSE SLES8 under z/VM via CTC
Assuming you *can* ping the .1 address from a CMS userid on z/VM ... I am missing the PROXYARP in the TCPIP PROFILE (which is only enabled by default in the latest versions). Rob -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
External MAC Address on guests...
Anyone here have any problems with the fact that multiple guests sitting on the same LPAR running through VM and using the same adapter all share (to the outside world) the same MAC address? Seems like this potentially can cause a lot of problems. Certainly for things like reverse look up etc... Any thoughts? -- Derric Goodwin z/Linux Support (312)985-3312 [EMAIL PROTECTED] -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: External MAC Address on guests...
On Fri, 15 Oct 2004 16:00:42 -0500, Derric Goodwin [EMAIL PROTECTED] wrote: Anyone here have any problems with the fact that multiple guests sitting on the same LPAR running through VM and using the same adapter all share (to the outside world) the same MAC address? Seems like this potentially can cause a lot of problems. In practice the OSA does a nice job in offloading that work from the guests. Certainly for things like reverse look up etc... What applications would be doing reverse lookup of MAC address? One thing I can imagine is when you run the DHCP server on the LAN and want the guests to use that. This will not work with z/VM 4.4 and you need to run the DHCP server in the box on the Guest LAN or VSWITCH to serve the Linux guests. But that's not really a problem because running DHCP on behalf of servers is a bit different than running it on the LAN for your workstations. But things are changing in this area. -- Rob van der Heij rvdheij @ gmail.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: External MAC Address on guests...
On Friday, 10/15/2004 at 04:00 EST, Derric Goodwin [EMAIL PROTECTED] wrote: Anyone here have any problems with the fact that multiple guests sitting on the same LPAR running through VM and using the same adapter all share (to the outside world) the same MAC address? Seems like this potentially can cause a lot of problems. Certainly for things like reverse look up etc... Any thoughts? In April we announced a Statement of Direction for z/VM 5.1 and OSA-Express to provide a layer 2 (MAC) capability in the hardware and software. On October 7 we announced the fulfillment of that SoD with new functions on the z890 and z990. When the OSA support becomes available later this month, and you use z/VM 5.1 virtual switch, the OSA will make each virtual MAC visible to the network. It is for this reason that I have been preaching that every z/VM 4.4 and 5.1 system have a unique VMLAN MACPREFIX value in SYSTEM CONFIG. This will prevent duplicate MACs on the net. You will have to explicitly configure this support, including the use of a new Linux OSA driver, also planned to be released this month. Existing Layer 3 (IP) functions will remain. Layer 2 support will not be available for z/VM 4.4 or for z800/z900. Alan Altmark Sr. Software Engineer IBM z/VM Development -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
