Re: [CentOS] NMS Opinions

[Joseph L. Casale]

>Snmp is the best feature but it has an assortment of application tests and can 
>work with nagios agents, WMI, and JMX, and parse syslog messages.

Yeah don’t get me wrong, snmp is a must (I don’t want agent software) but wmi 
etc is useful.
There is only so far you can get w/ snmp from an application level. I didn’t 
know it it did this,
I will surely have another look, thanks for the info!

The one thing I remember about it ages ago when I made the bad move and started 
w/ Nagios
was that the community was strong, a considerable merit for a complex beast 
like any nms...

jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[Joseph L. Casale]

>may be zennoss useful for you?

The Zenoss community looked a little slim/quit the last time I looked at it, I 
was
attracted to the ESX and wmi capabilities but it looked like it would be a steep
undertaking w/o the solid community.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[David]

Joseph L. Casale wrote:
> A recent post that mentioned Zabbix inspired me to have a look at them again
> while I was waiting on something as it’s been a while since I looked at them.
>
> Currently, I was using Nagios but had to start using Munin to add some 
> functionality
> I needed and don’t want to continue down this road of supporting umpteen 
> different
> packages.
>
> Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these 
> have to say.
> HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems 
> to be down☺
> Maybe they a monitoring solution, heh…
>
> Any opinions appreciated!
> jlc
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>   
may be zennoss useful for you?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[Les Mikesell]

Joseph L. Casale wrote:
>> Have you also looked at OpenNMS?  It is fairly easy to install on Centos with
>> their yum repository.
> 
> CMIW, isn’t OpenNMS only snmp based?

Snmp is the best feature but it has an assortment of application tests and can 
work with nagios agents, WMI, and JMX, and parse syslog messages.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[Ray Van Dolson]

On Tue, Dec 22, 2009 at 03:24:28AM +, Joseph L. Casale wrote:
> >Have you also looked at OpenNMS?  It is fairly easy to install on Centos with
> >their yum repository.
> 
> CMIW, isn’t OpenNMS only snmp based?

You _want_ agents?! :)

Yeah, OpenNMS is agent-less (last I knew anyways).

Ray
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[Joseph L. Casale]

>Have you also looked at OpenNMS?  It is fairly easy to install on Centos with
>their yum repository.

CMIW, isn’t OpenNMS only snmp based?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CENTOS 5.3 "kernel segfault at ..."

[Ross Walker]

On Dec 21, 2009, at 1:34 PM, mcclnx mcc  wrote:

> We have CENTOS 5.3 on DELL server.  Recently I saw /var/log/messages  
> have following pop-up:
>
>
> Dec 19 11:31:45 ORA2 kernel: oracle[18900]: segfault at  
> fff0 rip 07d54183 rsp 7fff8eff2c60 error 4
> Dec 19 11:31:49 ORA2 kernel: oracle[18902]: segfault at  
> fff0 rip 07d54183 rsp 75e12a80 error 4
> Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at  
> fff0 rip 07d54183 rsp 7fff228684d0 error 4
>
>
> Anyone know why?

Did you give it the shared memory and open handles it requires per the  
installation guide?

If so, check your memory.

-Ross

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] NMS Opinions

[Les Mikesell]

Joseph L. Casale wrote:
> A recent post that mentioned Zabbix inspired me to have a look at them again
> while I was waiting on something as it’s been a while since I looked at them.
> 
> Currently, I was using Nagios but had to start using Munin to add some 
> functionality
> I needed and don’t want to continue down this road of supporting umpteen 
> different
> packages.
> 
> Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these 
> have to say.
> HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems 
> to be down☺
> Maybe they a monitoring solution, heh…
> 
> Any opinions appreciated!

Have you also looked at OpenNMS?  It is fairly easy to install on Centos with 
their yum repository.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] routing with 2 ISPs

[David G . Miller]

David Hláčik  writes:

> 
> > Each VLAN has it's own DHCP which assigns ip address with netmask
> > 255.255.255.0 and uses particular VLAN interface on router as a
> > gateway. If I will do so. I will lost a route between my VLAN's that
> > way and I do not want to use netmask 255.255.0.0 so computers in local
> > lan can communicate without router.
> 
> Well, actually they will also be not reacheable, since I am using
> switch with configured VLAN, so subnets can not physically reach each
> others.
> 
>  I have done little research and I have noticed :
> /etc/sysconfig/network-scripts/ifup-routes which seems to use
> route-$IFNAME and rule-$IFNAME files, passing lines to ip command.
> Maybe I can try a little game in this area.
> 
> Thank you and Best Regards,
> David Hlacik
> 
Hi David -

You might want to look into a router specific distro like Vyatta.  The community
edition is free or you can go the paid support route.  

Vyatta will give you a much more robust router capability with a more
maintainable configuration than trying to set this up by hand using IP tables. 
It also supports routing protocols like OSPF that make a lot more sense in the
type of application you're looking at.

Cheers,
Dave



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] NMS Opinions

[Joseph L. Casale]

A recent post that mentioned Zabbix inspired me to have a look at them again
while I was waiting on something as it’s been a while since I looked at them.

Currently, I was using Nagios but had to start using Munin to add some 
functionality
I needed and don’t want to continue down this road of supporting umpteen 
different
packages.

Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these have 
to say.
HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems to 
be down☺
Maybe they a monitoring solution, heh…

Any opinions appreciated!
jlc

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SFTP - stalled - on large files

[Les Mikesell]

Sean Carolan wrote:
> On Mon, Dec 21, 2009 at 7:06 PM, 唐建伟  > wrote:
> 
>  I met the same as you, but always due to the bad network connection.
> 
> 
> I should probably provide some more information, the server is a VMware 
> guest running CentOS 5.3.  It's using the vmxnet driver for the eth0 
> connection.  IPv6 is disabled. 

I'm not sure what would cause that, but I'd use rsync over ssh instead of sftp 
anyway - and use the -P option to permit restarting.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SFTP - stalled - on large files

[Sean Carolan]

On Mon, Dec 21, 2009 at 7:06 PM, 唐建伟  wrote:

>  I met the same as you, but always due to the bad network connection.
>

I should probably provide some more information, the server is a VMware
guest running CentOS 5.3.  It's using the vmxnet driver for the eth0
connection.  IPv6 is disabled.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] SFTP - stalled - on large files

[唐建伟]

 I met the same as you, but always due to the bad network connection.


On 12/21/09, Sean Carolan  wrote:
> I have an SSH server that was set up for a client, and every time we
> try to upload large files via SFTP or scp, the transfers speed quickly
> slows to zero and gives a - stalled - status message, then
> disconnects.  Here is an example:
>
> ftp> put iTunesSetup.exe iTunesSetup.exe
> Uploading iTunesSetup.exe to /home/scarolan/iTunesSetup.exe
> iTunesSetup.exe 0%  704KB   0.0KB/s -
> stalled -debug1: channel 0: free: client-session, nchannels 1
> Read from remote host ftp.authoria.net: Connection reset by peer
> debug1: Transferred: stdin 0, stdout 0, stderr 66 bytes in 203.9 seconds
> debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.3
> debug1: Exit status -1
> Connection closed
>
> I have no idea why this is happening.  Can anyone point me in the
> right direction?
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>


-- 
Tang Jianwei
System Administrator
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] xm mem-set on an F11 xen guest

[Scot P. Floess]

Hey thanks...

Yeah I saw that regarding no guarantee...  Was hoping maybe it would work 
;)


On Mon, 21 Dec 2009, Mathew S. McCarrell wrote:


On Mon, Dec 21, 2009 at 3:01 PM, Scot P. Floess  wrote:
  I just tried to change the memory for my F11 xen guest from 512 to 1024.
  After executing:

  xm mem-set workstation 1024

  xm list shows the memory still being 512.  Anyone else see this behavior
  before?  I tried other values as well - but the memory is still what it
  was when I created the VM...

  I'm running CentOS 5.4 on an i386...

 
You might have to use xm mem-max to set the maximum memory for the guest prior 
to using xm mem-set.  Also, if you look at the man page for xm, you will see 
the following for mem-set:

"Because this operation requires cooperation from the domain operating system, there 
is no guarantee that it will succeed.  This command will definitely not work unless the 
domain has the required paravirt driver."

So, there is no guarantee that you can increase/decrease the ram of a guest 
without restarting it.

Matt

--
Mathew S. McCarrell
Clarkson University '10

mccar...@gmail.com
mccar...@clarkson.edu
1-518-314-9214




Scot P. Floess
27 Lake Royale
Louisburg, NC  27549

252-478-8087 (Home)
919-890-8117 (Work)

Chief Architect JPlate   http://sourceforge.net/projects/jplate
Chief Architect JavaPIM  http://sourceforge.net/projects/javapim

Architect Keros  http://sourceforge.net/projects/keros___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] xm mem-set on an F11 xen guest

[Mathew S. McCarrell]

On Mon, Dec 21, 2009 at 3:01 PM, Scot P. Floess  wrote:

> I just tried to change the memory for my F11 xen guest from 512 to 1024.
> After executing:
>
> xm mem-set workstation 1024
>
> xm list shows the memory still being 512.  Anyone else see this behavior
> before?  I tried other values as well - but the memory is still what it
> was when I created the VM...
>
> I'm running CentOS 5.4 on an i386...
>
>
You might have to use xm mem-max to set the maximum memory for the guest
prior to using xm mem-set.  Also, if you look at the man page for xm, you
will see the following for mem-set:

"Because this operation requires cooperation from the domain operating
system, there is no guarantee that it will succeed.  This command will
definitely not work unless the domain has the required paravirt driver."

So, there is no guarantee that you can increase/decrease the ram of a guest
without restarting it.

Matt

--
Mathew S. McCarrell
Clarkson University '10

mccar...@gmail.com
mccar...@clarkson.edu
1-518-314-9214
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] SFTP - stalled - on large files

[Sean Carolan]

I have an SSH server that was set up for a client, and every time we
try to upload large files via SFTP or scp, the transfers speed quickly
slows to zero and gives a - stalled - status message, then
disconnects.  Here is an example:

ftp> put iTunesSetup.exe iTunesSetup.exe
Uploading iTunesSetup.exe to /home/scarolan/iTunesSetup.exe
iTunesSetup.exe 0%  704KB   0.0KB/s -
stalled -debug1: channel 0: free: client-session, nchannels 1
Read from remote host ftp.authoria.net: Connection reset by peer
debug1: Transferred: stdin 0, stdout 0, stderr 66 bytes in 203.9 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.3
debug1: Exit status -1
Connection closed

I have no idea why this is happening.  Can anyone point me in the
right direction?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Jake]

Whatever you decide to go with, if you are graphing a gigabit
interface, make sure you use 64-bit counters. The standard 32-bit
counters overflow just past 100Mbit/sec and will give you innacurate
readings.

On 12/21/09, Marcelo M. Garcia  wrote:
> On 21/12/2009 16:05, Thomas Harold wrote:
>>
>> You can also (ab)use MRTG to graph things like CPU usage&  CPU
>> temperature, disk utilization, or anything else that you can query via a
>> remote shell command or SNMP query.
>
> Hi
>
> In this case why not use Ganglia. Look how MediaWiki uses Ganglia with
> Nagios, and other tools:
> http://ganglia.wikimedia.org/
>
> Regards
>
> mg.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

-- 
Sent from my mobile device

Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Munin CGI Graphs

[Kai Schaetzl]

what are CGI graphs?

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Marcelo M. Garcia]

On 21/12/2009 16:05, Thomas Harold wrote:
>
> You can also (ab)use MRTG to graph things like CPU usage&  CPU
> temperature, disk utilization, or anything else that you can query via a
> remote shell command or SNMP query.

Hi

In this case why not use Ganglia. Look how MediaWiki uses Ganglia with 
Nagios, and other tools:
http://ganglia.wikimedia.org/

Regards

mg.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] xm mem-set on an F11 xen guest

[Scot P. Floess]

I just tried to change the memory for my F11 xen guest from 512 to 1024. 
After executing:

xm mem-set workstation 1024

xm list shows the memory still being 512.  Anyone else see this behavior 
before?  I tried other values as well - but the memory is still what it 
was when I created the VM...

I'm running CentOS 5.4 on an i386...

Scot P. Floess
27 Lake Royale
Louisburg, NC  27549

252-478-8087 (Home)
919-890-8117 (Work)

Chief Architect JPlate   http://sourceforge.net/projects/jplate
Chief Architect JavaPIM  http://sourceforge.net/projects/javapim

Architect Keros  http://sourceforge.net/projects/keros
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Peter Serwe]

Of course, if you want to be a really sneaky sysadmin and avoid links
altogether, not to mention confuse the shit out of the developers using your
system,
you can always do a mount --bind as an alternative to symlinking directories
;)

Peter

On Mon, Dec 21, 2009 at 11:25 AM, nate  wrote:

> b.j. mcclure wrote:
>
> > I know I'm going to be embarrassed by the answer to this one but I've
> > checked a couple rsync and ssh references, including man rsync, and do
> > not find an option -H.  What is it?
>
> Looks like
>
>  -H, --hard-linkspreserve hard links
>
> In my experience hard links aren't very common, symlinks on the other
> hand are very common, and probably the type of link you were
> encountering.
>
> nate
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Peter Serwe
http://truthlightway.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Les Mikesell]

Tom H wrote:
 Does there has way scp not change "link" setup?
> 
>>> I've always preferred 'rsync -essh -aHv  source host:path' over scp for
>>> remote copies.  It will generally get everything right and in the case
>>> where part of the content is already there it is much more efficient.
> 
>> I know I'm going to be embarrassed by the answer to this one but I've
>> checked a couple rsync and ssh references, including man rsync, and do
>> not find an option -H.  What is it?
> 
> -H, --hard-links  preserve hard links

Most of the other options to create as exact a duplicate as possible are 
bundled into the '-a' option.  However, since there is no efficient way 
to handle hardlink matching and recreation (it needs a brute-force inode 
table lookup), it is left separate.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Peter Kjellstrom]

On Monday 21 December 2009, b.j. mcclure wrote:
...
> I know I'm going to be embarrassed by the answer to this one but I've
> checked a couple rsync and ssh references, including man rsync, and do
> not find an option -H.  What is it?

$ man rsync | grep "\-H"
-a, --archive   archive mode; same as -rlptgoD (no -H)
-H, --hard-linkspreserve hard links
  want  recursion  and want to preserve almost everything (with -H
  ply-linked  files is expensive.  You must separately specify -H.
   -H, --hard-links

Cheers,
 Peter


signature.asc
Description: This is a digitally signed message part.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[b.j. mcclure]

On Mon, 2009-12-21 at 11:25 -0800, nate wrote:
> b.j. mcclure wrote:
> 
> > I know I'm going to be embarrassed by the answer to this one but I've
> > checked a couple rsync and ssh references, including man rsync, and do
> > not find an option -H.  What is it?
> 
> Looks like
> 
>  -H, --hard-linkspreserve hard links
> 
> In my experience hard links aren't very common, symlinks on the other
> hand are very common, and probably the type of link you were
> encountering.
> 
> nate
> 
Darn.  I knew it was dumb. ;-/
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
CentOS 5.4, Linux 2.6.18-164.9.1.el5 x86_64 14:29:22 up 2 days, 20:36, 1
user, load average: 0.13, 0.22, 0.20

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Tom H]

>>> Does there has way scp not change "link" setup?

>> I've always preferred 'rsync -essh -aHv  source host:path' over scp for
>> remote copies.  It will generally get everything right and in the case
>> where part of the content is already there it is much more efficient.

> I know I'm going to be embarrassed by the answer to this one but I've
> checked a couple rsync and ssh references, including man rsync, and do
> not find an option -H.  What is it?

-H, --hard-links  preserve hard links
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[nate]

b.j. mcclure wrote:

> I know I'm going to be embarrassed by the answer to this one but I've
> checked a couple rsync and ssh references, including man rsync, and do
> not find an option -H.  What is it?

Looks like

 -H, --hard-linkspreserve hard links

In my experience hard links aren't very common, symlinks on the other
hand are very common, and probably the type of link you were
encountering.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[b.j. mcclure]

On Mon, 2009-12-21 at 12:51 -0600, Les Mikesell wrote:
> mcclnx mcc wrote:
> > We have CENTOS 5.3 on DELL servers.  I tried to us following command to 
> > copy remote files system to local:
> > 
> >scp -rp ora...@ora2:/home/app/oracle/10.2 .
> > 
> > After SCP finish copy, I found some files on source file system using 
> > "link" but on target file systems it change to "physical file".
> > 
> > Does there has way scp not change "link" setup?
> 
> I've always preferred 'rsync -essh -aHv  source host:path' over scp for
> remote copies.  It will generally get everything right and in the case
> where part of the content is already there it is much more efficient.
> 
I know I'm going to be embarrassed by the answer to this one but I've
checked a couple rsync and ssh references, including man rsync, and do
not find an option -H.  What is it?

Cheers!

CentOS 5.4, Linux 2.6.18-164.9.1.el5 x86_64 14:18:18 up 2 days, 20:25, 1
user, load average: 0.24, 0.14, 0.19

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Munin CGI Graphs

[Joseph L. Casale]

>p.s. and of course which version of CentOS?
>:-)

Sorry, should have posted that:) CentOS 5.4 and Munin 1.4.2 and the cgi scripts
are those that shipped with Munin's sourceforge rpm's.

I had to use 1.4.2 as I have a multi-graph plugin.

Thanks!
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What determines default kernel after update?

[Akemi Yagi]

On Mon, Dec 21, 2009 at 10:06 AM, Les Mikesell  wrote:

> Thanks - it says:
> DEFAULTKERNEL=kernel
> and now that I think about it, the box may have had 4 gigs of RAM when
> Centos was originally installed.  What should it say so future updates
> pick the PAE version?

It should say kernel-PAE.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[nate]

mcclnx mcc wrote:

> Does there has way scp not change "link" setup?

use rsync, not scp

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CENTOS 5.3 "kernel segfault at ..."

[nate]

mcclnx mcc wrote:

> Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at fff0 rip
> 07d54183 rsp 7fff228684d0 error 4
>
>
> Anyone know why?

There's a reason that oracle has a big support organization,
this is one example.

Contact their support.

nate

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Les Mikesell]

mcclnx mcc wrote:
> We have CENTOS 5.3 on DELL servers.  I tried to us following command to copy 
> remote files system to local:
> 
>scp -rp ora...@ora2:/home/app/oracle/10.2 .
> 
> After SCP finish copy, I found some files on source file system using "link" 
> but on target file systems it change to "physical file".
> 
> Does there has way scp not change "link" setup?

I've always preferred 'rsync -essh -aHv  source host:path' over scp for
remote copies.  It will generally get everything right and in the case
where part of the content is already there it is much more efficient.

-- 
  Les Mikesell
   lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] scp copy remote files does NOT copy link?

[Benjamin Franz]

mcclnx mcc wrote:
> We have CENTOS 5.3 on DELL servers.  I tried to us following command to copy 
> remote files system to local:
>
>scp -rp ora...@ora2:/home/app/oracle/10.2 .
>
> After SCP finish copy, I found some files on source file system using "link" 
> but on target file systems it change to "physical file".
>
> Does there has way scp not change "link" setup?
>   
If you want to preserve symlinks you probably want to use rsync instead
of scp.

-- 
Benjamin Franz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Munin CGI Graphs

[Alan McKay]

p.s. and of course which version of CentOS?
:-)


-- 
“Don't eat anything you've ever seen advertised on TV”
 - Michael Pollan, author of "In Defense of Food"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Munin CGI Graphs

[Alan McKay]

What version of Munin ?
And which version of the Apache plugins?



-- 
“Don't eat anything you've ever seen advertised on TV”
 - Michael Pollan, author of "In Defense of Food"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] scp copy remote files does NOT copy link?

[mcclnx mcc]

We have CENTOS 5.3 on DELL servers.  I tried to us following command to copy 
remote files system to local:

   scp -rp ora...@ora2:/home/app/oracle/10.2 .

After SCP finish copy, I found some files on source file system using "link" 
but on target file systems it change to "physical file".

Does there has way scp not change "link" setup?

Thanks.

___ 
 您的生活即時通 － 溝通、娛樂、生活、工作一次搞定！ 
 http://messenger.yahoo.com.tw/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Munin CGI Graphs

[Joseph L. Casale]

Anyone here running Munin w/ the CGI graphs? I must have missed something in
the munin wiki as its creating the correct html, yet the only errors I get are 
apache
suggesting it can't find the files for the png's? The cgi script has all the 
perl modules
it requires installed.


Thanks,
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] CENTOS 5.3 "kernel segfault at ..."

[mcclnx mcc]

We have CENTOS 5.3 on DELL server.  Recently I saw /var/log/messages have 
following pop-up:


Dec 19 11:31:45 ORA2 kernel: oracle[18900]: segfault at fff0 rip 
07d54183 rsp 7fff8eff2c60 error 4
Dec 19 11:31:49 ORA2 kernel: oracle[18902]: segfault at fff0 rip 
07d54183 rsp 75e12a80 error 4
Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at fff0 rip 
07d54183 rsp 7fff228684d0 error 4


Anyone know why?

Thanks.

___ 
 您的生活即時通 － 溝通、娛樂、生活、工作一次搞定！ 
 http://messenger.yahoo.com.tw/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What determines default kernel after update?

[Les Mikesell]

Akemi Yagi wrote:
> On Mon, Dec 21, 2009 at 9:57 AM, Les Mikesell  wrote:
>> I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel,
>> but after the last update noticed that grub was set to default to the
>> non-PAE version although both were installed.  Does anyone know how boot
>> default is supposed to be determined?
> 
> Look in /etc/sysconfig/kernel

Thanks - it says:
DEFAULTKERNEL=kernel
and now that I think about it, the box may have had 4 gigs of RAM when 
Centos was originally installed.  What should it say so future updates 
pick the PAE version?

-- 
  Les Mikesell
   lesmikes...@gmail.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] What determines default kernel after update?

[Akemi Yagi]

On Mon, Dec 21, 2009 at 9:57 AM, Les Mikesell  wrote:
> I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel,
> but after the last update noticed that grub was set to default to the
> non-PAE version although both were installed.  Does anyone know how boot
> default is supposed to be determined?

Look in /etc/sysconfig/kernel

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] What determines default kernel after update?

[Les Mikesell]

I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel, 
but after the last update noticed that grub was set to default to the 
non-PAE version although both were installed.  Does anyone know how boot 
default is supposed to be determined?

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] disk at 101% - but it isn't

[nate]

Alan McKay wrote:
> Hey folks,
>
> Is there any way to get this to report the proper values again?
> The disk did fill up but we removed a good 60G of data but it still shows
> full
>

Is/was the data you removed still in use? Run lsof and grep for
"deleted", if you get a bunch of hits you have to stop/kill those
processes for the space to be freed.

Otherwise perhaps a fsck is in order.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] disk at 101% - but it isn't

[Alan McKay]

Hey folks,

Is there any way to get this to report the proper values again?
The disk did fill up but we removed a good 60G of data but it still shows full

[r...@price-two:/]# df -h
FilesystemSize  Used Avail Use% Mounted on
/dev/sda3 131G  -64Z  131G 101% /
/dev/sda1  99M  9.7M   84M  11% /boot
/dev/sdb1 269G   60G  196G  24% /data
none  4.0G 0  4.0G   0% /dev/shm


-- 
“Don't eat anything you've ever seen advertised on TV”
 - Michael Pollan, author of "In Defense of Food"
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] minimal set of packages for gnome desktop

[Akemi Yagi]

On Mon, Dec 21, 2009 at 4:49 AM, Janez Kosmrlj
 wrote:
> Does anybody know what is the minimal set of packages, you have to install,
> to make gnome desktop work.

Try running a command:

yum groupinfo "GNOME Desktop Environment"

and see what is listed under "Mandatory Packages". That may give you a
good starting point.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Cannot see samba in win Neighborhood

[JS]

> -Original Message-
> From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
> Behalf Of Joseph L. Casale
> Sent: Sunday, December 20, 2009 11:08 AM
> To: 'CentOS mailing list'
> Subject: Re: [CentOS] Cannot see samba in win Neighborhood
> 
> >It´s like samba is not being able to "talk" to the rest of the
> >workgroup. (of course they are all in the same workgroup)
> >
> >I´m using "wins support = yes" and I´ve set the DHCP to set the clients
> to use the samba server as wins server.I´ve checked the win clients and
> they get the correct conf.
> 
> Unless you have pre w2k clients, disable Wins, Win2k uses DNS or Netbios
> res.
> What you are experiencing is a lag in the population of the master
> browser, you
> need patience. You could setup up dyn dns for the Samba server and win
> clients
> as well...
> 
> You set local master = no, so what / who is the master browser? Do you
> have any
> win servers?
> 
> Setup Sambas as per the example, then go away and grab a coffee... It
> takes ~15 mins...


Set Samba as the master Browser.  You may have to bump the number up for it.
Then service smb reload.  Then restart the Windows clients (lots faster).
All you really need to access the server is \\server_name\machine_share\
then map the Network Drive to it.  I have seen some win clients that just
would not enumerate shares though.

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Jake]

On Mon, Dec 21, 2009 at 11:05 AM, Thomas Harold wrote:

> In the past I've used Nagios & NTop.  Unfortunately, NTop was a bit of a
> CPU hog and I had stability issues with it that I never tracked down.
> So at the moment, we're mostly relying on MRTG to see traffic.


We had the same problems with Ntop (we monitor netflows, not local
interfaces). There was a thread about a good netflow tool a week or two ago
where someone suggested NfSen + nfdump. I set it up Thursday (took 30 mins
or so) and it totally rocks. We've gone to production with it to monitor
flows from around 50 devices. I highly recommend you take a look if you have
serious needs to see what's really on the wire.

-- 
Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Thomas Harold]

On 12/21/2009 9:08 AM, sadas sadas wrote:
 >   What is the best way to monitor the total incoming / outcoming network
 > traffic of CentOS server. I think that the solution is to monitor the
 > network interfaces and to send SNMP packets to remote server. But is it
 > possible?
 >

MRTG is the simplest to setup, but it only does graphs.  It's especially 
easy if you're trying to monitor the local host.  You'll need to also 
install the net-snmp and possibly net-snmp-utils packages.

Network monitoring solutions also do graphs (Cacti, Nagios, OpenNMS).

You can also try ntop.  It produces pretty graphs and also segregates 
network traffic by type/port.

In the past I've used Nagios & NTop.  Unfortunately, NTop was a bit of a 
CPU hog and I had stability issues with it that I never tracked down. 
So at the moment, we're mostly relying on MRTG to see traffic.

You can also (ab)use MRTG to graph things like CPU usage & CPU 
temperature, disk utilization, or anything else that you can query via a 
remote shell command or SNMP query.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] storage servers crashing, hair being pulled out!

[Ryan Lynch]

On Mon, Dec 21, 2009 at 08:24, Gordon McLellan  wrote:
> Thank you all for the suggestions.  I will grab a test suite or two
> and do some burn in testing over the upcoming weekends.  These
> machines are new, built from scratch.  I've been building systems for
> over fifteen years and haven't had anywhere near this amount of
> trouble which is really aggravating!
>
> I realize garbage in equals garbage out and some of the chosen
> components are pretty low-end, but I did spend close to six months
> researching the components, and couldn't find substantial evidence to
> dissuade me from any of the choices.  The only parts not new are the
> 250G seagates where are basically left-over parts from an old server
> that was upgraded.  They're all known-good as that server gave me no
> trouble through its service life.

I know someone mentioned this earlier in the thread, but before you
spend a lot of time, looking at power supplies, drives, etc., you
might want to consider installing any motherboard BIOS updates that
the vendor has released. It's quick, cheap, and easy, and the symptoms
fit.

I had basically identical symptoms on a cluster of storage systems I
built, about a year ago. It was terrible--machines kept crashing with
no explanation, under load, at random times. Similar to your
situation, we custom-built our own machines from identical boards,
CPUs, etc.

The problem turned out to be a combination of the CPU and the
motherboard. Our procs were the newest CPU stepping in that particular
product line (AMD Opteron 4xxx, I think), and the board's original
BIOS wasn't 100% compatible with the new stepping. After we'd updated
the BIOS, the problems disappeared and the system was basically
rock-solid.

I was pretty surprised by the whole thing: I was skeptical about the
BIOS update, because I imagined that an incompatible CPU wouldn't even
boot. But the bug was more subtle than that, and I learned something
new.

Whatever happens, good luck, and I hope you find the problem quickly.

-Ryan
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 6 won't support Itanic, will support PowerPC, though

[Kai Schaetzl]

Mike A. Harris wrote on Mon, 21 Dec 2009 06:40:38 -0500:

> And some people don't believe the Flying Spaghetti Monster exists.  This
> is proof.

Be careful.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[Gabriel Rosca]

I personal use zabbix ... On all the servers ( Windows, Linux ) with dynamic
IP I use dyndns ... 


Gabe

www.techshrinks.com


-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Rajagopal Swaminathan
Sent: Monday, December 21, 2009 8:50 AM
To: CentOS mailing list
Subject: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

Greetings,

I have one centos server for network monitoring.

there are remote devices which are connected through ADSL lines and
hence Dynamic IPs

Q1. Is there any tool which is capable of handling this type of situation?
Q2. Is there a workaround for this problem

Regards

Rajagopal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[nate]

Rajagopal Swaminathan wrote:

> Q1. Is there any tool which is capable of handling this type of situation?

Perhaps ntop?


nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[Jake]

On Mon, Dec 21, 2009 at 8:50 AM, Rajagopal Swaminathan <
raju.rajs...@gmail.com> wrote:

> Greetings,
>
> I have one centos server for network monitoring.
>
> there are remote devices which are connected through ADSL lines and
> hence Dynamic IPs
>
> Q1. Is there any tool which is capable of handling this type of situation?
> Q2. Is there a workaround for this problem
>
>
I think it really depends on the type of monitoring you'd like to do and the
type of tool you're trying to use now. For example, we use Nagios to monitor
our systems. With Nagios, you could use passive checks. This is where the
programs that monitor your server run locally on the server and submit
results to the central monitoring server. The central Nagios server can
alert based on the results it receives or based on the fact that it hasn't
received results for a period of time.

-- 
Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[Juan Carlos Díaz Fernández]

Or maybe implementing dyndns if you can

Regards,

Juan Carlos

El 21 de dic de 2009, 3:09 p.m., "Les Mikesell" 
escribió:

Rajagopal Swaminathan wrote: > Greetings, > > I have one centos server for
network monitoring. > >...
One approach would be to establish a VPN network to the locations using
private
static addresses with monitoring (and perhaps administration) traffic routed
through it, but the details would depend on the hardware available.  Most
snmp
monitoring tools will be confused by frequently changing IPs anyway, though.

--
  Les Mikesell
   lesmikes...@gmail.com

___ CentOS mailing list
CentOS@centos.org http://lists...
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Les Mikesell]

Jake wrote:
> On Mon, Dec 21, 2009 at 9:08 AM, sadas sadas  > wrote:
> 
> What is the best way to monitor the total incoming / outcoming
> network traffic of CentOS server. I think that the solution is to
> monitor the network interfaces and to send SNMP packets to remote
> server. But is it possible?
> 
> 
> Absolutely. Check out Cacti http://cacti.net/ 
> 
> There are lots of alternatives to Cacti too (MRTG, even doing graphing 
> in your system monitoring tool like Nagios.) You might also find it 
> easier to monitor the switch instead of the servers if that's possible 
> with your gear. This way, you configure the switch once and can monitor 
> all the servers on it instead of having to configure each server 
> individually to allow snmp access.

OpenNMS is good too, if you have enough devices to be worth the extra 
complexity.  Http://www.opennms.org.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitor Network Traffic

[Jake]

On Mon, Dec 21, 2009 at 9:08 AM, sadas sadas  wrote:

> What is the best way to monitor the total incoming / outcoming network
> traffic of CentOS server. I think that the solution is to monitor the
> network interfaces and to send SNMP packets to remote server. But is it
> possible?
>

Absolutely. Check out Cacti http://cacti.net/

There are lots of alternatives to Cacti too (MRTG, even doing graphing in
your system monitoring tool like Nagios.) You might also find it easier to
monitor the switch instead of the servers if that's possible with your gear.
This way, you configure the switch once and can monitor all the servers on
it instead of having to configure each server individually to allow snmp
access.

-- 
Jake Paulus
jakepau...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[Les Mikesell]

Rajagopal Swaminathan wrote:
> Greetings,
> 
> I have one centos server for network monitoring.
> 
> there are remote devices which are connected through ADSL lines and
> hence Dynamic IPs
> 
> Q1. Is there any tool which is capable of handling this type of situation?
> Q2. Is there a workaround for this problem
> 

One approach would be to establish a VPN network to the locations using private 
static addresses with monitoring (and perhaps administration) traffic routed 
through it, but the details would depend on the hardware available.  Most snmp 
monitoring tools will be confused by frequently changing IPs anyway, though.

-- 
   Les Mikesell
lesmikes...@gmail.com


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Monitor Network Traffic

[sadas sadas]

 What is the best way to monitor the total incoming / outcoming network traffic 
of CentOS server. I think that the solution is to monitor the network 
interfaces and to send SNMP packets to remote server. But is it possible?

regards
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] College student printer for CentOS 5.4 x86_64?

[m . roth]

>
>> What would the community recommend? His needs are simple...mostly B&W
>> papers.  On rare occasions he needs to print a paper with color
>> photos/graphs embedded. Not looking to spend a lot, just enough to
>> satisfy the requirement.
>
> I wouldn't buy a color printer at all.
> I assume, every decent college has some sort of print-shop on the campus
> where you can make high-quality color printouts for pennies.
> For black&white, I'd buy a decent laser printer.

I'll second this. A couple years ago, when the inkjet I had died, I looked
at other inkjets (ANY MAKE *O*T*H*E*R* than HP!!!), and then the salesguys
chatted up a cute, small HP Laserjet 1018 (HP Laserjets, on the other
hand, *are* still good). After the promotional discount that was literally
half the price, I got it for about $68. No, that's not a mistake. It's
worked very well (though that model, I had to build the driver for). Color
- I get someone else to do, or do it at work.

 mark


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Monitoring Dynamic IPs using Some network monitoring tool

[Rajagopal Swaminathan]

Greetings,

I have one centos server for network monitoring.

there are remote devices which are connected through ADSL lines and
hence Dynamic IPs

Q1. Is there any tool which is capable of handling this type of situation?
Q2. Is there a workaround for this problem

Regards

Rajagopal
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] storage servers crashing, hair being pulled out!

[Gordon McLellan]

Thank you all for the suggestions.  I will grab a test suite or two
and do some burn in testing over the upcoming weekends.  These
machines are new, built from scratch.  I've been building systems for
over fifteen years and haven't had anywhere near this amount of
trouble which is really aggravating!

I realize garbage in equals garbage out and some of the chosen
components are pretty low-end, but I did spend close to six months
researching the components, and couldn't find substantial evidence to
dissuade me from any of the choices.  The only parts not new are the
250G seagates where are basically left-over parts from an old server
that was upgraded.  They're all known-good as that server gave me no
trouble through its service life.

Kind Regards,
Gordon
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] minimal set of packages for gnome desktop

[Janez Kosmrlj]

Does anybody know what is the minimal set of packages, you have to install,
to make gnome desktop work.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Pasi Kärkkäinen]

On Mon, Dec 21, 2009 at 12:04:32PM +0200, sadas sadas wrote:
>
>>Some months ago there was discussions about 10 gbit performance with
>>Linux. Some guys were pushing over 70 Gbit/sec through a single linux
>>box.
> 
>70 Gbit/sec ? Maybe with port
>aggravation it's possible. Can you give some more info about that guys. To
>achieve that hight throughput maybe it's necessary to cut most of the OS
>and the kernel, leaving only the necessary. I'm very interested to read
>more information about the experiment.
> 
>regards
> 
>p.s here you can see 10 Gbit/s experiment
>http://haproxy.1wt.eu/10g.html


See this thread:
http://groups.google.com/group/linux.kernel/browse_thread/thread/70e62d8a85cd3241

quote:
"We also achieved nearly 80 Gbps in bidirectional TCP tests (40 Gbps
simultaneously in each direction):

This was using 2 dual-port 10-GigE NICs in the first two PCIe 2.0 slots.
We are using an Intel i7 965 quad-core 3.2 GHz Nehalem processor
(overclocked to 3.4 GHz) and 2000 MHz DDR3 memory.  Adding an additional
dual-port 10-GigE NIC on the Nvidia N200 chip does only marginally
better, as it appears we are basically CPU limited at this point for
this test (the sum of the TX and RX CPU utilization for each pair of
10-GigE interfaces is about 93%). "


-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 6 won't support Itanic, will support PowerPC, though

[Timo Schoeler]

thus Mike A. Harris spake:
> Timo Schoeler wrote:
>> Hi list,
> 
>> after some discussion on #IRC on PowerPC I was waiting for some
>> commitment on supported architectures in RHEL 6. As I just learnt,
>> Itanic will be dumped, but there will be a PowerPC release:
> 
>> http://www.theregister.co.uk/2009/12/18/redhat_rhel6_itanium_dead/
> 
> And some people don't believe the Flying Spaghetti Monster exists.  This
> is proof.

Means... what? Sorry, but I don't get it. I'm not interested in the 
Itanium port (any more), but I am interested in the PowerPC port.

What else can one do than reading IT news if there's no official 
announcement?

Best,

Timo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] RHEL 6 won't support Itanic, will support PowerPC, though

[Mike A. Harris]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Timo Schoeler wrote:
> Hi list,
> 
> after some discussion on #IRC on PowerPC I was waiting for some
> commitment on supported architectures in RHEL 6. As I just learnt,
> Itanic will be dumped, but there will be a PowerPC release:
> 
> http://www.theregister.co.uk/2009/12/18/redhat_rhel6_itanium_dead/

And some people don't believe the Flying Spaghetti Monster exists.  This
is proof.

- --
Mike A. Harris   Website: http://mharris.ca
Google Wave: mike.andrew.harris - at - googlewave.com
https://identi.ca/mharris | https://twitter.com/mikeaharris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFLL16z4RNf2rTIeUARAlsrAJ9mYd/WhLCsF+GJMbELH4r6YVj6ggCfSKwW
AFfuGC9WpsjDVZEahH+Lq9Q=
=J7Ob
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Inquiry:How to recognize the assigned device for attached usb memory?

[hadi motamedi]

Dear All
I have attached usb memory to my CentOS 5.2 server and I want to add it to
my /etc/fstab . Can you please let me know how can I recognize it from
my"/dev/?" list ?
Thank you in advance
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] routing with 2 ISPs

[David Hláčik]

> Each VLAN has it's own DHCP which assigns ip address with netmask
> 255.255.255.0 and uses particular VLAN interface on router as a
> gateway. If I will do so. I will lost a route between my VLAN's that
> way and I do not want to use netmask 255.255.0.0 so computers in local
> lan can communicate without router.

Well, actually they will also be not reacheable, since I am using
switch with configured VLAN, so subnets can not physically reach each
others.

 I have done little research and I have noticed :
/etc/sysconfig/network-scripts/ifup-routes which seems to use
route-$IFNAME and rule-$IFNAME files, passing lines to ip command.
Maybe I can try a little game in this area.

Thank you and Best Regards,
David Hlacik
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] routing with 2 ISPs

[David Hláčik]

Frank,

but as noticeable from my routing table, I have several VLANs iniside
my local network - for servers, computers, wifi's, and voip.

Each VLAN has it's own DHCP which assigns ip address with netmask
255.255.255.0 and uses particular VLAN interface on router as a
gateway. If I will do so. I will lost a route between my VLAN's that
way and I do not want to use netmask 255.255.0.0 so computers in local
lan can communicate without router.

Thank you in advance,

David Hlacik

On Sun, Dec 20, 2009 at 11:04 PM, Frank Cox  wrote:
>
> On Sun, 2009-12-20 at 19:54 +0100, David Hláčik wrote:
>> Computers from local network range 10.123.123.0/24 (eth0.7) should
>> access internet using my second internet provider via ppp0.
>
> This may be too simple for your needs, but it took a while for the light
> to come on for me about this when I set up something similar.
>
> I have two Internet connections, one cable and one DSL.  I want to have
> some of my computers on the cable connection and some on the DSL
> connection, but I want all of my computers to be on the same internal
> network.
>
> Solution:  Put a router on each modem with a different address.  Assign
> the default gateway on each computer depending on what outside
> connection it is supposed to use.  192.168.0.1 == cable, 192.168.0.254
> == DSL.
>
> Nothing to it.
>
> --
> MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] College student printer for CentOS 5.4 x86_64?

[Louis Lagendijk]

On Sat, 2009-12-19 at 18:42 -0800, MHR wrote:

> 
> Yeah, those are the good ones.  I have a Canon i560 inkjet that my son
> likes, and it uses the BCI-3 black and BCI-6 color cartridges.  Those
> are terrific - you can use generic ink in them for refills and they
> just work and work and work (except not with Linux, as John says).
> 
See http://www.openprinting.org/show_printer.cgi?recnum=Canon-i560
Gutenprint should support your printer

Louis

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Timo Schoeler]

thus Pasi Kärkkäinen spake:
> On Mon, Dec 21, 2009 at 10:17:48AM +0100, Timo Schoeler wrote:
>> thus Pasi Kärkkäinen spake:
>>> On Fri, Dec 18, 2009 at 09:36:57PM +0200, sadas sadas wrote:
I will explain more deeply. I need to deploy a firewall(s) in front of 
 web
server farm because I need to do billing - I will use CentOS with 
 iptables
+ ipset to store a list if my clients so when client doesn't pay his
server's IP is out of the list and he can't access the web server.

Second - I know that iptables is very heavy and it's not recommended to
use it in gigabit firewall but I don't have a choice as far as I know 
 only
ipset works with iptables. I don't know can pf store 500 IPs in one 
 list.
Ipset is written for that purpose.

I can't find information is there linux or BSD distribution with 
 effective
firewall that uses optimized algorithm to store hundreds of IPs and to
forward huge traffic. Any idea?

>>> I've been using Linux (CentOS5) on gigabit firewalls, for thousands of
>>> users. No problems.
>> Yeah, but what is your ruleset?
>>
> 
> Hundreds of chains, thousands of rules..
> 
>>> Just make sure ip_conntrack_max is big enough, so you don't run out of
>>> connections. 
>> Just three months ago I saw a CentOS L2TP cluster explode because of 
>> this -- and the machines have _plenty_ of RAM each. Turned off 
>> ip[6]tables entirely and let the Ciscos do this was the only solution.
>>
> 
> The default values are way too low. First step is to increase that
> value.

Was the first thing I tried; unfortunately, I didn't really see sense in 
giving iptables the vast majority of 32GiByte RAM...

>>> There are other things to tune to optimize the performance, but it's
>>> certainly doable with linux+iptables.
>> Nail, hammer, etc. ;)
>>
> 
> -- Pasi

Timo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[sadas sadas]

   
 >Some months ago there was discussions about 10 gbit performance with
 >Linux. Some guys were pushing over 70 Gbit/sec through a single linux
 >box.

  70 Gbit/sec ? Maybe with port aggravation it's possible. Can you give some 
more info about that guys. To achieve that hight throughput maybe it's 
necessary to cut most of the OS and the kernel, leaving only the necessary. I'm 
very interested to read more information about the experiment.

regards

p.s here you can see 10 Gbit/s experiment
http://haproxy.1wt.eu/10g.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Pasi Kärkkäinen]

On Mon, Dec 21, 2009 at 10:17:48AM +0100, Timo Schoeler wrote:
> thus Pasi Kärkkäinen spake:
> > On Fri, Dec 18, 2009 at 09:36:57PM +0200, sadas sadas wrote:
> >>I will explain more deeply. I need to deploy a firewall(s) in front of 
> >> web
> >>server farm because I need to do billing - I will use CentOS with 
> >> iptables
> >>+ ipset to store a list if my clients so when client doesn't pay his
> >>server's IP is out of the list and he can't access the web server.
> >>
> >>Second - I know that iptables is very heavy and it's not recommended to
> >>use it in gigabit firewall but I don't have a choice as far as I know 
> >> only
> >>ipset works with iptables. I don't know can pf store 500 IPs in one 
> >> list.
> >>Ipset is written for that purpose.
> >>
> >>I can't find information is there linux or BSD distribution with 
> >> effective
> >>firewall that uses optimized algorithm to store hundreds of IPs and to
> >>forward huge traffic. Any idea?
> >>
> > 
> > I've been using Linux (CentOS5) on gigabit firewalls, for thousands of
> > users. No problems.
> 
> Yeah, but what is your ruleset?
>

Hundreds of chains, thousands of rules..

> > Just make sure ip_conntrack_max is big enough, so you don't run out of
> > connections. 
> 
> Just three months ago I saw a CentOS L2TP cluster explode because of 
> this -- and the machines have _plenty_ of RAM each. Turned off 
> ip[6]tables entirely and let the Ciscos do this was the only solution.
> 

The default values are way too low. First step is to increase that
value.

> > There are other things to tune to optimize the performance, but it's
> > certainly doable with linux+iptables.
> 
> Nail, hammer, etc. ;)
> 

-- Pasi

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[John R Pierce]

Pasi Kärkkäinen wrote:
> Some months ago there was discussions about 10 gbit performance with
> Linux. Some guys were pushing over 70 Gbit/sec through a single linux
> box.
>
> Not sure if firewalling was enabled.. most probably not.
>   

what I see consistently with iptables is people writing far too many 
rules and trying to micromanage traffic when the kernel already knows 
what its doing.
try to keep it super simple. 

***BSD's pf rules are just much simpler, it takes far fewer of them to 
do what you need to do.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Timo Schoeler]

thus Pasi Kärkkäinen spake:
> On Fri, Dec 18, 2009 at 09:36:57PM +0200, sadas sadas wrote:
>>I will explain more deeply. I need to deploy a firewall(s) in front of web
>>server farm because I need to do billing - I will use CentOS with iptables
>>+ ipset to store a list if my clients so when client doesn't pay his
>>server's IP is out of the list and he can't access the web server.
>>
>>Second - I know that iptables is very heavy and it's not recommended to
>>use it in gigabit firewall but I don't have a choice as far as I know only
>>ipset works with iptables. I don't know can pf store 500 IPs in one list.
>>Ipset is written for that purpose.
>>
>>I can't find information is there linux or BSD distribution with effective
>>firewall that uses optimized algorithm to store hundreds of IPs and to
>>forward huge traffic. Any idea?
>>
> 
> I've been using Linux (CentOS5) on gigabit firewalls, for thousands of
> users. No problems.

Yeah, but what is your ruleset?

> Just make sure ip_conntrack_max is big enough, so you don't run out of
> connections. 

Just three months ago I saw a CentOS L2TP cluster explode because of 
this -- and the machines have _plenty_ of RAM each. Turned off 
ip[6]tables entirely and let the Ciscos do this was the only solution.

> There are other things to tune to optimize the performance, but it's
> certainly doable with linux+iptables.

Nail, hammer, etc. ;)

> -- Pasi

Timo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[sadas sadas]

   
 >I've been using Linux (CentOS5) on gigabit firewalls, for thousands of
 >users. No problems.
 >
 >Just make sure ip_conntrack_max is big enough, so you don't run out of
 >connections. 
 >
 >There are other things to tune to optimize the performance, but it's
 >certainly doable with linux+iptables.
 >
 >-- Pasi
 >
 
Would you provide us information about how the firewalls are configured, the 
hardware, the total bandwidth passing the firewall in each direction and the 
connections in the busiest hours.

regards
   ___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Pasi Kärkkäinen]

On Sun, Dec 20, 2009 at 09:58:19AM -0800, nate wrote:
> RedShift wrote:
> 
> > Have you got some figures to back that up? Everybody's saying OpenBSD's pf
> > performance is superior, yet nobody has posted some proof.
> 
> Not sure myself, keep in mind that there are (at least) two different
> ways to measure firewall performance - connections/second and
> throughput. There was a url someone posted a few days ago going in depth
> into tuning of OpenBSD for max performance and mentioned 930Mbit of
> throughput on a single gigE link.
>

Some months ago there was discussions about 10 gbit performance with
Linux. Some guys were pushing over 70 Gbit/sec through a single linux
box.

Not sure if firewalling was enabled.. most probably not.

-- Pasi


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Optimizing CentOS for gigabit firewall

[Pasi Kärkkäinen]

On Fri, Dec 18, 2009 at 09:36:57PM +0200, sadas sadas wrote:
>I will explain more deeply. I need to deploy a firewall(s) in front of web
>server farm because I need to do billing - I will use CentOS with iptables
>+ ipset to store a list if my clients so when client doesn't pay his
>server's IP is out of the list and he can't access the web server.
> 
>Second - I know that iptables is very heavy and it's not recommended to
>use it in gigabit firewall but I don't have a choice as far as I know only
>ipset works with iptables. I don't know can pf store 500 IPs in one list.
>Ipset is written for that purpose.
> 
>I can't find information is there linux or BSD distribution with effective
>firewall that uses optimized algorithm to store hundreds of IPs and to
>forward huge traffic. Any idea?
>

I've been using Linux (CentOS5) on gigabit firewalls, for thousands of
users. No problems.

Just make sure ip_conntrack_max is big enough, so you don't run out of
connections. 

There are other things to tune to optimize the performance, but it's
certainly doable with linux+iptables.

-- Pasi


>regards
> 
>I'll second damn near everything
>nate said, and hopefully add a tidbit or two.
> 
>If you're new to BSD, you may want to consider the pfsense project in the
>aforementioned active-active configuration.
> 
>It gives you a nice, intuitive gui to manage your failover firewalls, if
>you insist on putting a firewall in front of your web servers.
> 
>Better to secure the box, leave only the ports you need open on the public
>interfaces, and don't firewall them.
> 
>Also, I'd strongly consider running your firewalls with no disk at all.  A
>Live CD, CF card or USB Flash to boot off of, remote syslog and
>one less subsystem (disks) to buy/fail makes for some mighty cheap 1U
>servers.  A single dual-core with core speeds above 3.0Ghz
>and 4GB of RAM is to pass Gb @ line rate - ethernet overhead.  Truth be
>told, it's already being done on much less
>than that.  You can also load balance your traffic, albiet somewhat
>primitively with it.  If you really want massive throughput, consider
>toying
>around with extremely expensive 10G gear, size RAM appropriately, and see
>how PF performs under multi-processor, high-core speed.
>but if you're handling over a Gb of traffic and you can't split the
>application into multiple farms, that's the best move.
> 
>Akamai, for instance, runs 10G to each rack, each rack has around 20-24
>servers, and they run GB to the server.
> 
>[1]pfsense.org has extensive information about hardware requirements,
>features, and what you're looking to do.
> 
>[2]https://calomel.org/network_performance.html is an excellent BSD
>firewall performance site.
> 
>One thing to note, you are claiming to want to deploy this as a passive
>bridge.  You cannot do what you want to do
>running anything in bridge mode.  The packets need to route somehow.  Get
>a /29 from your colo provider and ask
>to have your existing block routed through it once you've tested it.
> 
>Another option for a seamless failover, is to alias a different range of
>IP's to the server interfaces, put a /29 and whatever
>netblock you want to end up being your public IP block on the PFSense
>hardware.  When you're convinced everything's
>working through rigorous testing, put a test domain up pointing to that
>block, modify virtualhost entries on the servers to
>respond to that domain with your production web site, and test some more.
>Once you're convinced that's working perfectly,
>make the changes in DNS to point your production domain at the IP's you
>want, and failover will happen with DNS convergence.
> 
>Peter
> 
>On Fri, Dec 18, 2009 at 9:06 AM, nate <[3]cen...@linuxpowered.net> wrote:
> 
>  sadas sadas wrote:
>  >
>  > Hi,
>  >  I want to configure CentOS on powerful server with gigabit
>  > adapters as transparent bridge and deploy it in front of server farm.
>  > Can you tell how to optimize the OS for hight packet processing? What
>  > configurations I need to do to achieve very hight speeds and thousands
>  of
>  >  packets?
> 
>  iptables makes a TERRIBLE firewall, use pf instead
> 
>  [4]http://www.openbsd.org/faq/pf/index.html
> 
>  Also consider how your going to provide redundancy, if you have a web
>  server farm you want to protect them with at least two firewalls, not
>  one.
> 
>  [5]http://www.openbsd.org/faq/pf/carp.html
> 
>  I haven't used CARP myself but did setup a pair of pf firewalls about
>  5 years ago in a large network in bridging mode, the layer 3 fault
>  tolerance was provided by OSPF on the core switches, the firewalls
>  were active-active(with pfsync) since they were layer 2 only.
> 
>  Maybe someday linux will