redirect network traffic - netfwd project
Hi! I wrote a little utility and want to share it with you. It allows to redirect incoming connections to remote (and also local) host. For example, it listens for incoming TCP connections, accepts them and creates connection with remote host. But it works not only with TCP. One can easily redirect the following: - TCP - UDP - UNIX socket (SOCK_STREAM) - UNIX socket (SOCK_DGRAM) - serial port (actually, tty device). And it doesn't matter what into what you redirect :) For example, you can give your chrooted web server access to MySQL not enabling networking in MySQL: # netfwd unix stream /chroot/.../mysql.sock unix stream /.../mysql.sock Any connects are welcome! -- Alexey Vatchenko http://www.bsdua.org E-mail: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
Re: redirect network traffic - netfwd project
On 10/12/07, Alexey Vatchenko [EMAIL PROTECTED] wrote: Hi! I wrote a little utility and want to share it with you. It allows to redirect incoming connections to remote (and also local) host. For example, it listens for incoming TCP connections, accepts them and creates connection with remote host. But it works not only with TCP. One can easily redirect the following: - TCP - UDP - UNIX socket (SOCK_STREAM) - UNIX socket (SOCK_DGRAM) - serial port (actually, tty device). And it doesn't matter what into what you redirect :) For example, you can give your chrooted web server access to MySQL not enabling networking in MySQL: # netfwd unix stream /chroot/.../mysql.sock unix stream /.../mysql.sock Any connects are welcome! -- Alexey Vatchenko http://www.bsdua.org E-mail: [EMAIL PROTECTED] JID: [EMAIL PROTECTED] If you want it to be widely used by OpenBSD users just make a port of it and I bet it will get wider use. BR dunceor
Re: redirect network traffic - netfwd project
And, of cause, you can get it here: http://www.bsdua.org/netfwd.html -- Alexey Vatchenko http://www.bsdua.org E-mail: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
Re: redirect network traffic - netfwd project
On 2007-10-12, Karl Sjodahl - dunceor [EMAIL PROTECTED] wrote: On 10/12/07, Alexey Vatchenko [EMAIL PROTECTED] wrote: I wrote a little utility and want to share it with you. It allows to redirect incoming connections to remote (and also local) host. For example, it listens for incoming TCP connections, accepts them and creates connection with remote host. If you want it to be widely used by OpenBSD users just make a port of it and I bet it will get wider use. Makes sense, thank you. -- Alexey Vatchenko http://www.bsdua.org E-mail: [EMAIL PROTECTED] JID: [EMAIL PROTECTED]
Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system
* Owain Ainsworth [EMAIL PROTECTED] [2007-10-12 07:12]: Then again I'm currently attempting to port the DRM (direct rendering manager) to OpenBSD, so I'm not whining about it. and that is the right attitude. sit down and send code to change what you didn't like. instead of sending questionable faq additions. (now, sending faq additions in general is not a bad idea either, just this one was) -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg Amsterdam
Re: : Which remvable drive is connected to which USB port
On Fri, Oct 12, 2007 at 08:01:13AM +0930, Edwards, David (JTS) wrote: -Original Message- From: Nick Guenther [mailto:[EMAIL PROTECTED] Sent: Thursday, 11 October 2007 8:01 PM To: Edwards, David (JTS) Cc: misc@openbsd.org Subject: Re: Which remvable drive is connected to which USB port On 10/11/07, Edwards, David (JTS) [EMAIL PROTECTED] wrote: Hi again. Just a wrap up to this thread. - [snip] I'm not happy with the fact that the script uses dmesg output. dmesg uses a ring buffer and that can fill very quickly (say if you unplug a usb disk while something is writing to it) which will break the above script totally. However, currently I don't have the time (or probably the expertise) to go through the source to work out a better way to do it. everything in dmesg is also dumped to /var/log/messages. disk naming *is* consistent in OpenBSD. devices are all named in a deterministic manner, so that they won't change on you without you realizing it / adding an extra layer of naming indirection. What are you actually trying to do here? boot from a USB disk? Hi, thanks for responding. I'm using USB disks for backups. The problem I have is that there are multiple backup sets that I need to keep for different purposes so I need to know which physical USB port a disk device is attached to. I've got three USB cables labelled with the names of the backup sets (set 1, set 2...) and when I swap a disk on one of the cables, I need to know the disk device to mount so that I can dump the right set onto it.. It seems that the disk devices are named (sd1, sd2 etc) based on which one is plugged in first (unrelated to the physical port). My testing shows that the disk device names are retained as long as the box is not rebooted, but if it reboots, then I can no longer be sure that the right disk is plugged into the right port and my backup sets would get mixed up. So, basically I need a tool where I can start with a physical port description (seems /dev/usb# addr # works) and end with a disk device (sd#). The script I put together works fine, but it relies on dmesg (or as you suggested /var/log/messages) which grates on my sense of neatness (or maybe I'm being too precious :-) I'll take the time to have a look at the sources one day. I'm sure it would be possible to write a tool that would be able to work this out in a better way. Would you have any pointers as to where to start looking? I would like there to be some kind of usb tool where you can query interesting properties about the usb device, such as manufacturer and serial number. I think there is some kind of tools in ports, but do not think they can give the needed data... Correction. The usbutil package has got a command usbctl that gives the needed data: # usbctl -f /dev/usb1 -a 2 prints out a DEVICE descriptor containing: iManufacturer, iProduct, iSerialNumber BUT... The problem is to map what hotplug/attach sees - sd0 class 2, scsibus1 class0 and umass0 class 0, to /dev/usb1 address 2. Missing is still some way to find out what the kernel device tree looks like - the kernel must know that sd0 is attached to scsibus1 targ 1 lun 0 which is attached to umass0 which is attached to uhub1 port 1. The question is if there is a way of finding that without parsing dmesg. I also can not see how to map uhub1 port 1 to /dev/usb1 address2. ciao dave --- Dave Edwards -- / Raimo Niskanen, Erlang/OTP, Ericsson AB
Re: : How can i boot a bsd.rd from windows 2000 ?
Can grub actually boot a bsd kernel. I thought it was in a different binary format than Linux kernels. Does grub pass kernel arguments to the bsd kernel in the right way. Sorry about the doubts, but I have always chain loaded OpenBSD from grub through the PBR code in biosboot installed by installboot, which in its turn calls the boot program that loads the bsd or bsd.rd kernel. Off-Topic: In that case, can SYSLINUX boot the bsd kernel from a DOS partition? On Thu, Oct 11, 2007 at 12:34:13PM -0300, Rodrigo V. Raimundo wrote: Em Qua, 2007-10-10 C s 21:49 +0200, Christopher Bianchi escreveu: Hello everyone. My situation is this: i've a laptop, a Sharp pc-ax10 with Windows 2000 preinstalled , without cdrom, floppy. I wish install OpenBSD on it. Naturally bios can't boot from USB. So i've thinked to boot the bsd.rd , but how ? The faq explain the procedure from an older OpenBSD operating system... i've Windows 2000 on it. Is it possible ? and if is possible, in which way ? Where i must put the bsd.rd and in which way i can boot from him ? I've tried google, but nothing :-( Thanks for the attention Christopher Bianchi 1 - Use some free tool to create a new partition on your hard-disk, if you lose Win 2k bye-bye 2 - Install grub on Windows (*) and attach it's stage1 file to boot.ini(**) 3 - Add an entry to grub's menu.lst so it can boot bsd.rd from virtualy anywhere on your hd. (***) See: http://www.geocities.com/lode_leroy/grubinstall/ (***) menu.lst example: title OpenBSD Installer # Windows on the first partition of the first drive root (hd0,0) # Grub will found the file if compiled with fat/ntfs support kernel /boot/bsd.rd boot -- (**) boot.ini example: [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=Microsoft Windows 200 Professional c:\boot\stage1=Grub - (*) grubinstall command line example: Run cmd.exe, them: c:\ grubinstall -d (hd0,0) -1 C:\boot\stage1 -2 C:\boot\stage2 -- / Raimo Niskanen, Erlang/OTP, Ericsson AB
Re: : Which remvable drive is connected to which USB port
On Fri, 12 Oct 2007, Raimo Niskanen wrote: On Fri, Oct 12, 2007 at 08:01:13AM +0930, Edwards, David (JTS) wrote: -Original Message- From: Nick Guenther [mailto:[EMAIL PROTECTED] Sent: Thursday, 11 October 2007 8:01 PM To: Edwards, David (JTS) Cc: misc@openbsd.org Subject: Re: Which remvable drive is connected to which USB port On 10/11/07, Edwards, David (JTS) [EMAIL PROTECTED] wrote: Hi again. Just a wrap up to this thread. - [snip] I'm not happy with the fact that the script uses dmesg output. dmesg uses a ring buffer and that can fill very quickly (say if you unplug a usb disk while something is writing to it) which will break the above script totally. However, currently I don't have the time (or probably the expertise) to go through the source to work out a better way to do it. everything in dmesg is also dumped to /var/log/messages. disk naming *is* consistent in OpenBSD. devices are all named in a deterministic manner, so that they won't change on you without you realizing it / adding an extra layer of naming indirection. What are you actually trying to do here? boot from a USB disk? Hi, thanks for responding. I'm using USB disks for backups. The problem I have is that there are multiple backup sets that I need to keep for different purposes so I need to know which physical USB port a disk device is attached to. I've got three USB cables labelled with the names of the backup sets (set 1, set 2...) and when I swap a disk on one of the cables, I need to know the disk device to mount so that I can dump the right set onto it.. It seems that the disk devices are named (sd1, sd2 etc) based on which one is plugged in first (unrelated to the physical port). My testing shows that the disk device names are retained as long as the box is not rebooted, but if it reboots, then I can no longer be sure that the right disk is plugged into the right port and my backup sets would get mixed up. So, basically I need a tool where I can start with a physical port description (seems /dev/usb# addr # works) and end with a disk device (sd#). The script I put together works fine, but it relies on dmesg (or as you suggested /var/log/messages) which grates on my sense of neatness (or maybe I'm being too precious :-) I'll take the time to have a look at the sources one day. I'm sure it would be possible to write a tool that would be able to work this out in a better way. Would you have any pointers as to where to start looking? I would like there to be some kind of usb tool where you can query interesting properties about the usb device, such as manufacturer and serial number. I think there is some kind of tools in ports, but do not think they can give the needed data... Correction. The usbutil package has got a command usbctl that gives the needed data: # usbctl -f /dev/usb1 -a 2 prints out a DEVICE descriptor containing: iManufacturer, iProduct, iSerialNumber BUT... The problem is to map what hotplug/attach sees - sd0 class 2, scsibus1 class0 and umass0 class 0, to /dev/usb1 address 2. Missing is still some way to find out what the kernel device tree looks like - the kernel must know that sd0 is attached to scsibus1 targ 1 lun 0 which is attached to umass0 which is attached to uhub1 port 1. The question is if there is a way of finding that without parsing dmesg. I also can not see how to map uhub1 port 1 to /dev/usb1 address2. I can see an easy way to identify disks, without any dependency on the physical stuff like cables etc. Use the disklabel: it has a disk name field that can be edited. -Otto
Re: New alternative identd port question
On 11/10/2007, Strykar [EMAIL PROTECTED] wrote: sscanf(buff,%d,%d,u1,u2); hmmm. yes -- Best Regards Edd --- http://students.dec.bournemouth.ac.uk/ebarrett
Re: vr driver trouble on Soekris 5501
Not sure if related, but something similar has been fixed in 4.2-current already. This was also the first thing that came into my mind, however, I don't think it is related. VR_STICKHW is only written erroneously during attach, and since my machine runs now for several weeks without any problem, I doubt that the observed stall has something to do with this. Opinions by the vr maintainers? Anything I can do to debug the problem when it occurs next time?
Re: vr driver trouble on Soekris 5501
for the record, i have a via rhine2 and i never had trouble. (if they are not related i'm sorry to bother you, but it might help debugging) vr0 at pci0 dev 18 function 0 VIA RhineII-2 rev 0x51: irq 10, address 00:40:63:c9:5c:05 this is the one on the via c3 533Mhz board. alwin [demime 1.01d removed an attachment of type application/pgp-signature]
Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system
On 12/10/2007, Owain Ainsworth [EMAIL PROTECTED] wrote: Then again I'm currently attempting to port the DRM (direct rendering manager) to OpenBSD, Do you accept paypal donations at your zerooa at googlemail dot com email address? I'm broke, not rich, so I can't pay you for your work hours, but I can send you a tiny sum (a few euros) as a gesture of encouragement (and cc this to misc in the hope of others doing the same). Why am I so hyped? Games, really... I have some Ubuntu Linux box with a Unichrome Pro graphics chipset. I discovered http://www.openchrome.org/ , an apparently blob-free FOSS video driver, and for the first time in my life I had OpenGL running on completely free software; yes, granted, most Ubuntu users, including me, end up tolerating some other blobs (if only to watch those sbemails), but the hardware accelerated graphics setup at least is blob-free. So then I discovered Chromium BSU ( http://www.reptilelabour.com/software/chromium/ ). I would love to have this kick ass on an OpenBSD box...
Re: vr driver trouble on Soekris 5501
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christian Plattner Sent: Friday, October 12, 2007 4:43 PM To: misc@openbsd.org Subject: Re: vr driver trouble on Soekris 5501 Not sure if related, but something similar has been fixed in 4.2-current already. This was also the first thing that came into my mind, however, I don't think it is related. VR_STICKHW is only written erroneously during attach, and since my machine runs now for several weeks without any problem, I doubt that the observed stall has something to do with this. Opinions by the vr maintainers? Anything I can do to debug the problem when it occurs next time? For what it's worth, I experienced the same problem caused by attaching and detaching a (short) crossover cable multiple times on a vr interface in soekris net5501 running 4.1-stable. As it was on a production firewall I didn't troubleshoot much, tcpdump didn't show any incoming traffic on that interface - then I went for a quick reboot that obviously fixed things. Let me see if I can replicate it in lab. Mitja
Re: vr driver trouble on Soekris 5501
For what it's worth, I experienced the same problem caused by attaching and detaching a (short) crossover cable multiple times on a vr interface in The cable used in the situation when things went wrong was also short, 1m. soekris net5501 running 4.1-stable. As it was on a production firewall I didn't troubleshoot much, tcpdump didn't show any incoming traffic on that OK, same phenomenon. interface - then I went for a quick reboot that obviously fixed things. Let me see if I can replicate it in lab. That would be very nice - unfortunately, I don't have any spare Soekris 5501 boxes.
Re: vr driver trouble on Soekris 5501
Are these interfaces configured in autoselect mode? What happens when you configure them in fixed mode, e.g. 100Mb/full duplex? Sounds like a good idea. In the future, I will configure them in fixed mode, it won't hurt. Even though it may have something to do with the autoselect mode, the whole story still has a bad smell =) I mean, the problem persisted even though I several times disconnected the cable, changed the cable, hooked the Soekris to a Dell 5324 Switch (to a port in autoselect mode) and nevertheless the interface did not get out of the stalled state until I did the ifconfig down/up sequence.
Re: vr driver trouble on Soekris 5501
On 12/10/2007, Christian Plattner [EMAIL PROTECTED] wrote: Hi, Today something strange happened on one of my Soekris 5501 boxes, it runs OpenBSD 4.1-stable. The box is connected with a cross-over cable to another machine via the vr1 interface (the box has 4 vr interfaces). Problem: After having rebooted the machine at the other end of the cable multiple times, the Soekris box suddenly stopped receiving packets on the vr1 interface. After playing around with ping and tcpdump on both sides I found out that the vr1 interface allowed me to send packets, but incoming packets did no show up in tcpdump, even though the LED on the interface was flickering. I changed the cable, connected the vr1 of the Soekris to another machine, then to a switch port with lots of broadcast traffic etc.etc. nothing helped, ingress traffic on vr1 did not show up in tcpdump. Solution: Finally, immediatelly after doing ifconfig vr1 down ifconfig vr1 up everything worked again as normal. The link on vr1 is currently only used to do SSH between the two machines, so this is really a low traffic link. On the other hand, vr0,vr2,vr3 are heavily used (BGP sessions etc., the Soekris is at the border of my AS). btw: the machine at the other end of the cable is a Soekris 5501 as well. Had to reboot it to perform a BIOS upgrade. No suspicious output in dmesg. Any ideas on how I could further track down the problem? Thanks, Christian The vr interfaces in dmesg: vr0 at pci0 dev 6 function 0 VIA VT6105M RhineIII rev 0x96: irq 11, address 00:00:24:c8:de:68 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 vr1 at pci0 dev 7 function 0 VIA VT6105M RhineIII rev 0x96: irq 5, address 00:00:24:c8:de:69 ukphy1 at vr1 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 vr2 at pci0 dev 8 function 0 VIA VT6105M RhineIII rev 0x96: irq 9, address 00:00:24:c8:de:6a ukphy2 at vr2 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 vr3 at pci0 dev 9 function 0 VIA VT6105M RhineIII rev 0x96: irq 12, address 00:00:24:c8:de:6b ukphy3 at vr3 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 # ifconfig vr1 vr1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:24:c8:de:69 media: Ethernet autoselect (100baseTX full-duplex) status: active inet XX.XX.XX.XX netmask 0xffe0 broadcast XX.XX.XX.YY inet6 fe80::200:24ff:fec8:de69%vr1 prefixlen 64 scopeid 0x2 Not sure if related, but something similar has been fixed in 4.2-current already. http://lists.freebsd.org/pipermail/freebsd-current/2007-August/076486.html http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/if_vr.c#rev1.70 I think you should be able to safely apply the 1.69 to 1.70 diff to your source tree if this is of a concern. The diff is for vr_attach() only, so if your system is already up and running and you never reboot it, then you probably shouldn't bother until your next upgrade. Cheers, Constantine.
Re: TLS/FTP via OpenBSD NAT
Hello Mikel, Friday, October 12, 2007, 6:46:20 AM, you wrote: ML ... the client wants to be able to connect to an FTP server that ML is using TLS. ML My first thought of this was you can't. however, I was quickly ML disabused of this idea by connecting to their server using the program ML they use (FileZilla) within a Windows XP instance running inside ML Parrallels through a Netlink ADSL modem. That is two sets of ML translation happening! ML This got me confused as everything I have read about TLS says this ML can't be done. At least not with NAT. I'm confused too. :) Why wont it work over a NAT? You might need to bypass ftp-proxy for that server (like I did), but only if it's using standard ftp ports (20/21). And it should be passive, of course. -- Best regards, Borismailto:[EMAIL PROTECTED]
Re: Server just freeze with no reason
On 10/12/07, Edgars MakEa [EMAIL PROTECTED] wrote: Once per week it just freezes and thats all, nothing in logs. It freezes also when it's idling. Strange is taht, i can ping it still, but nothing more, noone service is responding. How idle is idling? Have you any processes which can explode in RAM usage or massive forks? I saw once a system run out of mem, with no swap space exhibiting the same beviour. I could imagine (disclaimer: _didn't_ see that one) a system behave similiar after not being aber to fork anymore. --knitti
4.2 fvwm2 error `gtkaccelgroup.lo' is not a valid libtool object
Sent it to ports but got no response :-( Did I do something really stupid? Just wondering if anybody here can throw any light on this issue. Thanks Siju Hi, I tried to install fvwm2 in ports on my OpenBSD 4.2 GENERIC#1179 amd64 ( from official CD ) I get this error, could somebody please help me out == # make install clean === Checking files for fvwm-2.4.19 fvwm-2.4.19.tar.gz doesn't seem to exist on this system. Fetch ftp://ftp.fvwm.org/pub/fvwm/version-2/fvwm-2.4.19.tar.gz. 100% |**| 1784 KB00:58 Size matches for /usr/ports/distfiles/fvwm-2.4.19.tar.gz fvwm_icons.tgz doesn't seem to exist on this system. Fetch http://www.fvwm.org/generated/icon_download/fvwm_icons.tgz. ftp: Error retrieving file: 404 Not Found Fetch ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//fvwm_icons.tgz. 100% |**| 354 KB00:11 Size matches for /usr/ports/distfiles/fvwm_icons.tgz (SHA256) fvwm-2.4.19.tar.gz: OK (SHA256) fvwm_icons.tgz: OK === fvwm2+fvicons-2.4.19p0 depends on: gtk+-* - not found === Verifying install for gtk+-* in x11/gtk+ === Building for gtk+-1.2.10p6 make all-recursive Making all in po Making all in gdk Making all in gtk /usr/local/bin/libtool --mode=link cc -O2 -pipe -Wall -L/usr/local/lib -o libg tk.la -rpath /usr/local/lib -version-info 3:0:0 -export-dynamic -L/usr/local/lib -Wl,-E -lgmodule -lglib -L/usr/X11R6/lib -lXi -lXext -lX11 -lm gtkaccelgroup.lo gtkaccellabel.lo gtkadjustment.lo gtkalignment.lo gtkarg.l o gtkarrow.lo gtkaspectframe.lo gtkbin.lo gtkbindings.lo gtkbbox.lo gtkbox.lo g tkbutton.lo gtkcalendar.lo gtkcheckbutton.lo gtkcheckmenuitem.lo gtkclist.lo gt kcolorsel.lo gtkcombo.lo gtkcontainer.lo gtkctree.lo gtkcurve.lo gtkdata.lo gt kdialog.lo gtkdnd.lo gtkdrawingarea.lo gtkeditable.lo gtkentry.lo gtkeventbox.l o gtkfilesel.lo gtkfixed.lo gtkfontsel.lo gtkframe.lo gtkgamma.lo gtkgc.lo gtkh andlebox.lo gtkhbbox.lo gtkhbox.lo gtkhpaned.lo gtkhruler.lo gtkhscale.lo gtkhs crollbar.lo gtkhseparator.lo gtkimage.lo gtkinputdialog.lo gtkinvisible.lo gtk item.lo gtkitemfactory.lo gtklabel.lo gtklayout.lo gtklist.lo gtklistitem.lo gt kmain.lo gtkmarshal.lo gtkmenu.lo gtkmenubar.lo gtkmenufactory.lo gtkmenuitem.l o gtkmenushell.lo gtkmisc.lo gtknotebook.lo gtkobject.lo gtkoptionmenu.lo gtkpa cker.lo gtkpaned.lo gtkpixmap.lo gtkplug.lo gtkpreview.lo gtkprogress.lo gtkpro gressbar.lo gtkradiobutton.lo gtkradiomenuitem.lo gtkrange.lo gtkrc.lo gtkruler .lo gtkscale.lo gtkscrollbar.lo gtkscrolledwindow.lo gtkselection.lo gtksepara tor.lo gtksignal.lo gtksocket.lo gtkspinbutton.lo gtkstyle.lo gtkstatusbar.lo g tktable.lo gtktearoffmenuitem.lo gtktext.lo gtkthemes.lo gtktipsquery.lo gtktog glebutton.lo gtktoolbar.lo gtktooltips.lo gtktree.lo gtktreeitem.lo gtktypeutil s.lo gtkvbbox.lo gtkvbox.lo gtkviewport.lo gtkvpaned.lo gtkvruler.lo gtkvscale. lo gtkvscrollbar.lo gtkvseparator.lo gtkwidget.lo gtkwindow.lo fnmatch.lo -lic onv -lintl -liconv libtool: link: `gtkaccelgroup.lo' is not a valid libtool object *** Error code 1 Stop in /usr/ports/x11/gtk+/w-gtk+-1.2.10p6/gtk+-1.2.10/gtk (line 371 of Makefil e). *** Error code 1 Stop in /usr/ports/x11/gtk+/w-gtk+-1.2.10p6/gtk+-1.2.10 (line 301 of Makefile). *** Error code 1 Stop in /usr/ports/x11/gtk+/w-gtk+-1.2.10p6/gtk+-1.2.10 (line 451 of Makefile). *** Error code 1 Stop in /usr/ports/x11/gtk+ (line 2063 of /usr/ports/infrastructure/mk/bsd.port. mk). *** Error code 1 Stop in /usr/ports/x11/gtk+ (line 1373 of /usr/ports/infrastructure/mk/bsd.port. mk). *** Error code 1 Stop in /usr/ports/x11/gtk+ (line 1861 of /usr/ports/infrastructure/mk/bsd.port. mk). *** Error code 1 Stop in /usr/ports/x11/gtk+ (line 1403 of /usr/ports/infrastructure/mk/bsd.port. mk). *** Error code 1 Stop in /usr/ports/x11/fvwm2 (line 1531 of /usr/ports/infrastructure/mk/bsd.port .mk). *** Error code 1 Stop in /usr/ports/x11/fvwm2 (line 1892 of /usr/ports/infrastructure/mk/bsd.port .mk). *** Error code 1 Stop in /usr/ports/x11/fvwm2 (line 1373 of /usr/ports/infrastructure/mk/bsd.port .mk). *** Error code 1 Stop in /usr/ports/x11/fvwm2 (line 1861 of /usr/ports/infrastructure/mk/bsd.port .mk). *** Error code 1 Stop in /usr/ports/x11/fvwm2 (line 1403 of /usr/ports/infrastructure/mk/bsd.port .mk). # = Thankyou so much Kind Regards Siju
Re: : : Which remvable drive is connected to which USB port
On Fri, 12 Oct 2007, Raimo Niskanen wrote: On Fri, Oct 12, 2007 at 10:23:16AM +0200, Otto Moerbeek wrote: I can see an easy way to identify disks, without any dependency on the physical stuff like cables etc. Use the disklabel: it has a disk name field that can be edited. Great proposal! I may be blind, but can not find an editable name field. Which is it? And how can I edit it? use the e command in disklabel interactive editor (started with disklabel -E). -Otto
Re: all kernels except i386 MP high cpu in interrupt -- was: 4.2 on H8SSL-I2: acpi at mainbus0 not configured
aarrgh. sorry I ment to post this: Hi, I was asked off-list to gather some more data, which I now present to anyone who's interested. Disclaimer: there is no acute problem to fix, but something is odd. Summary: - the location of a tgz which includes an acpidump and some dmesgs is: http://stuff.ghweb.de/h8ssli2/stuff.tgz - I tested the following kernels on a Supermicro H8SSL-i2 with an Athlon64 X2: amd64: GENERIC, GENERIC.MP, i386: GENERIC, GENERIC.MP - all except the i386/MP kernel have about 70% cpu load on interrupts (the mp kernels on one core), regardless whether acpi is enabled or not on an otherwise idle standard installation (up to 2 ssh-sessions active), and up to 90% interrupt load, if they've got something to do. - the i386/MP kernel has about 0.0% interrupt load, also regardless whether acpi is enabled - I did the following to put some load on I/O: a) ping -f from another machine to this (only 100 MBit-Network), with no packet loss in every case b) dd if=/dev/zero of=/tmp/stuff bs=1m count=2000 - the interrupt count monitored through systat vm 1 is roughly comparatively on all kernels, with and without acpi, except for pciide, which comes short on UP kernels (both count and transfer rate) Some data (interrupt count with systat vm 1): idle: amd64/MPamd64/UPi386/MPi386/UP clock 200 100 200100 ipi 100 rtc 128128 bge05+/-3 5+/-3 5+/-3 5+/-3 a) (ping-f) (clock, ipi and rtc same as above) bge03.4k3.3k3.3k 3.4k +/-100 +/-50 +/-50 +/-50 a) + b) (ping and dd) (clock, ipi and rtc same as above) bge03.4k3.3k3.3k 3.4k +/-100 +/-50 +/-50 +/-50 peaks ofpeaks of up to +2k up to +2k pciide 3.7k850 3.4k 530 +/-150 +/-50 +/-500 +/-20 overall data transfer with dd: amd64/MP: 53-58 MB/s amd64/UP: 11-12 MB/s (about 19MB/s without ping -f) i386/MP: 52-56 MB/s i386/UP: 8- 9 MB/s --knitti
Re: : : Which remvable drive is connected to which USB port
On Fri, Oct 12, 2007 at 10:23:16AM +0200, Otto Moerbeek wrote: On Fri, 12 Oct 2007, Raimo Niskanen wrote: On Fri, Oct 12, 2007 at 08:01:13AM +0930, Edwards, David (JTS) wrote: -Original Message- From: Nick Guenther [mailto:[EMAIL PROTECTED] Sent: Thursday, 11 October 2007 8:01 PM To: Edwards, David (JTS) Cc: misc@openbsd.org Subject: Re: Which remvable drive is connected to which USB port On 10/11/07, Edwards, David (JTS) [EMAIL PROTECTED] wrote: Hi again. Just a wrap up to this thread. - [snip] I'm not happy with the fact that the script uses dmesg output. dmesg uses a ring buffer and that can fill very quickly (say if you unplug a usb disk while something is writing to it) which will break the above script totally. However, currently I don't have the time (or probably the expertise) to go through the source to work out a better way to do it. everything in dmesg is also dumped to /var/log/messages. disk naming *is* consistent in OpenBSD. devices are all named in a deterministic manner, so that they won't change on you without you realizing it / adding an extra layer of naming indirection. What are you actually trying to do here? boot from a USB disk? Hi, thanks for responding. I'm using USB disks for backups. The problem I have is that there are multiple backup sets that I need to keep for different purposes so I need to know which physical USB port a disk device is attached to. I've got three USB cables labelled with the names of the backup sets (set 1, set 2...) and when I swap a disk on one of the cables, I need to know the disk device to mount so that I can dump the right set onto it.. It seems that the disk devices are named (sd1, sd2 etc) based on which one is plugged in first (unrelated to the physical port). My testing shows that the disk device names are retained as long as the box is not rebooted, but if it reboots, then I can no longer be sure that the right disk is plugged into the right port and my backup sets would get mixed up. So, basically I need a tool where I can start with a physical port description (seems /dev/usb# addr # works) and end with a disk device (sd#). The script I put together works fine, but it relies on dmesg (or as you suggested /var/log/messages) which grates on my sense of neatness (or maybe I'm being too precious :-) I'll take the time to have a look at the sources one day. I'm sure it would be possible to write a tool that would be able to work this out in a better way. Would you have any pointers as to where to start looking? I would like there to be some kind of usb tool where you can query interesting properties about the usb device, such as manufacturer and serial number. I think there is some kind of tools in ports, but do not think they can give the needed data... Correction. The usbutil package has got a command usbctl that gives the needed data: # usbctl -f /dev/usb1 -a 2 prints out a DEVICE descriptor containing: iManufacturer, iProduct, iSerialNumber BUT... The problem is to map what hotplug/attach sees - sd0 class 2, scsibus1 class0 and umass0 class 0, to /dev/usb1 address 2. Missing is still some way to find out what the kernel device tree looks like - the kernel must know that sd0 is attached to scsibus1 targ 1 lun 0 which is attached to umass0 which is attached to uhub1 port 1. The question is if there is a way of finding that without parsing dmesg. I also can not see how to map uhub1 port 1 to /dev/usb1 address2. I can see an easy way to identify disks, without any dependency on the physical stuff like cables etc. Use the disklabel: it has a disk name field that can be edited. Great proposal! I may be blind, but can not find an editable name field. Which is it? And how can I edit it? -Otto -- / Raimo Niskanen, Erlang/OTP, Ericsson AB
Re: making a release with 4.1 Sept 24 snapshot
Hi, On Mon, 08.10.2007 at 16:17:35 -0400, Juan Miscaro [EMAIL PROTECTED] wrote: I am running the Sept 24 snapshot. I've never tried to make a release with a snapshot before and so I wonder whether it's possible. I updated my sources with cvsup (tag=OPENBSD_42) and keep getting a crash: install: addftinfo/addftinfo.cat1: No such file or directory *** Error code 71 Stop in /usr/src/gnu/usr.bin/groff (line 88 or /usr/share/mk/bsd.man.mk). *** Error code 1 and so on. good question. I also get a crash while trying to compile groff, but mine (i386 snapshot from September 25th) looks a bit different. It complains that there is no valid C (or C++) compiler. Wish I had my CDs, too... Best, --Toni++
Re: vr driver trouble on Soekris 5501
Christian Plattner [EMAIL PROTECTED] wrote: Problem: After having rebooted the machine at the other end of the cable multiple times, the Soekris box suddenly stopped receiving packets on the vr1 interface. I think I've observed something likes this _once_ on my 5501 with 4.2. Any ideas on how I could further track down the problem? Find a way to reproduce it with some regularity? -- Christian naddy Weisgerber [EMAIL PROTECTED]
Re: : : Which remvable drive is connected to which USB port
On 2007/10/12 11:47, Raimo Niskanen wrote: Use the disklabel: it has a disk name field that can be edited. Great proposal! I may be blind, but can not find an editable name field. Which is it? And how can I edit it? Label - you can edit it with disklabel -e.
Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system
On 12/10/2007, Douglas A. Tutty [EMAIL PROTECTED] wrote: I'd like to start a discussion about extending the answer to the OpenBSD FAQ # 1.10: Can I use OpenBSD as a Desktop System? I have also felt before that that FAQ item could be expanded, so I wrote an expanded answer and submitted a diff. However, my answer was not posted online, so either people didn't like my expanded answer, or my email got lost in the shuffle (or maybe I made some newbie mistake with diff(1)). In case people are still interested, here is what I submitted: -- Forwarded message -- From: Jens Ropers [EMAIL PROTECTED] Date: 3 Oct 2006 16:59 Subject: FAQ diff: OpenBSD on the desktop To: [EMAIL PROTECTED] Hi, Please find below a diff for http://www.openbsd.org/faq/faq1.html ; specifically for http://www.openbsd.org/faq/faq1.html#Desktop . I have also attached the diff as file for you convenience. Thanks and regards, --ropers Quoted unified diff (diff -u) follows: --- faq1.html.orig 2006-10-03 16:25:05.0 +0200 +++ faq1.html 2006-10-03 16:47:39.0 +0200 @@ -417,6 +417,25 @@ You must answer this question for yourself. p +That said, OpenBSD ships with the a href=http://www.x.org/;X Window System/a, the basis for a graphical windowing environment of the type currently commonly associated with desktop computing. Many users identify desktop system to mean a href=http://www.catb.org/jargon/html/W/WIMP-environment.html;WIMP/a-a href=http://en.wikipedia.org/wiki/Graphical_user_interface;GUI/a setup with the following applications: + +ul +lia graphical web browser,/li +lian email client,/li +lia PDF viewer,/li +lian image viewer,/li +lioffice software applications such as a word processor, a spreadsheet, and a presentation program,/li +limusic/media player software,/li +liand possibly a choice of further productivity software and games./li +/ul + +p +While there isn't an official OpenBSD desktop distribution, it is certainly possible to satisfy all of the above requirements and install such applications on an OpenBSD system. + +p +However, different people have different opinions about which individual application programs are preferred, and it is not for the OpenBSD project to prejudice your decisions. You will have to make these choices for yourself and do the legwork in terms of setting up your own system the way iyou/i prefer it. Searching the web for iopenbsd on the desktop/i may a good starting point. You will undoubtedly find some of the documents other people have written about their own setup. Please understand however that these are not official and only represent other users' solutions to their own needs mdash; which may be different from yours. Your mileage may vary. + +p a name=HowAbout/a h21.11 - Why is/isn't iProductX/i included?/h2 -- www.ropersonline.com
Re: making a release with 4.1 Sept 24 snapshot
On 10/12/07, Toni Mueller [EMAIL PROTECTED] wrote: Hi, On Mon, 08.10.2007 at 16:17:35 -0400, Juan Miscaro [EMAIL PROTECTED] wrote: I am running the Sept 24 snapshot. I've never tried to make a release with a snapshot before and so I wonder whether it's possible. I updated my sources with cvsup (tag=OPENBSD_42) and keep getting a crash: install: addftinfo/addftinfo.cat1: No such file or directory *** Error code 71 Stop in /usr/src/gnu/usr.bin/groff (line 88 or /usr/share/mk/bsd.man.mk). *** Error code 1 and so on. good question. I also get a crash while trying to compile groff, but mine (i386 snapshot from September 25th) looks a bit different. It complains that there is no valid C (or C++) compiler. Wish I had my CDs, too... I replied to Juan off-list, my bad. Read this: http://www.openbsd.org/faq/faq5.html snapshot is not release, but some point in time of -currrent. 4.2 and current diverged in august. What you have to do is in the FAQ. --knitti
Supporting newer atheros chipsets...
Hi! People who had problems with unsupported Atheros devices (single chip variants found in recent laptops, macbooks, etc.) should get the latest code from CVS and test it... I was able to make 11b mode work on at least two different new-age chipsets: ath0 at pci2 dev 0 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01: apic 1 int 17 (irq 11) ath0: AR 10.3 phy 6.1 rf 10.2, WOR2W, address 00:16:cf:ab:4c:97 ath1 at cardbus0 dev 0 function 0 Atheros Communications, Inc., AR5001--, Wireless LAN Reference Card: irq 10 ath1: AR5413 10.5 phy 6.1 rf 6.3, WOR0W, address 00:12:bf:0e:7d:36 Thanks again to Dave Del Debbio and David Menzel for donating me PCI Express MiniCards for testing and development. But there are still some known problems: - The ath0 device sometimes runs into a hardware-locking RX overrun bug. The only way to recover the device is to _cold_ start the computer. Use ifconfig ath0 debug and look for rx FIFO overrun; resetting. - The devices sometimes need a long time to calibrate, just associate and wait some seconds before trying your first ping. - The offset is not alway right, I'm trying to find a better way to set the channels correctly. See the attached commit message for more info. - more...? Hacked and tested in the Melbourne Museum during the AUUG 2007... reyk - Forwarded message from Reyk Floeter [EMAIL PROTECTED] - Date: Fri, 12 Oct 2007 09:34:12 -0600 (MDT) From: Reyk Floeter [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: CVS: cvs.openbsd.org: src X-Loop: [EMAIL PROTECTED] Precedence: list CVSROOT:/cvs Module name:src Changes by: [EMAIL PROTECTED] 2007/10/12 09:34:11 Modified files: sys/dev/ic : ar5xxx.c ar5xxx.h Log message: The newer single chip Atheros wireless chipsets like the AR5424, AR2423 etc. are mostly compatible to the AR5212 but use a different algorithm to set the 2GHz RF channel, that's why they didn't work in OpenBSD. I figured out that the channels were set with an offset, setting channel 11 in the driver caused the hardware to set channel 5 etc. Because I didn't figure out the pattern to fix the algoritm yet, I fixed it in a workaroundish way by defining a small table with offsets for the 11b channels to get the right results. For example, if we want to set channel 11 (2462MHz), we add an offset of -30MHz, and feed the result (2432MHz ^= channel 5) into the unmodified AR5212/AR5112 RF setup function. Long description for a commit message, but it needed some time to figure it out. It is still not perfect, needs some more work, and it doesn't work in all cases; but it allows to use newer chipsets in 11b mode restricted to 1 or to 2Mbit/s. 11a mode seems to work without problems so far. - End forwarded message -
all kernels except i386 MP high cpu in interrupt -- was: 4.2 on H8SSL-I2: acpi at mainbus0 not configured
On 10/11/07, knitti [EMAIL PROTECTED] wrote: Hi, after some sleep and coffee I am embarrassed to realize I made two mistakes: - I didn't provide a GENERIC(.MP) dmesg - I booted off the non-acpi-enabled kernel Sorry for that. Below you can see two GENERIC.MP dmesgs (i386/amd64) which clearly show that acpi is enabled and detected. However, one Problem remains: The interrupt load is very high on GENERIC/amd64 (with and without MP, with and without acpi) - about 70% of one cpu core on the idle machine. Different is GENERIC.MP/i386, which has low (normal) interrupt load. Shall I ditch amd64 and run i386 on the machine, or is there anything I can try? OpenBSD 4.2 (GENERIC.MP) #252: Tue Aug 28 10:53:04 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ (AuthenticAMD 686-class, 1024KB L2 cache) 3 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16 real mem = 3220729856 (3071MB) avail mem = 3121356800 (2976MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 03/01/07, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.4 @ 0xfbcf0 (50 entries) bios0: vendor American Megatrends Inc. version 080011 date 03/01/2007 bios0: Supermicro H8SSL-I2 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf4d40/176 (9 entries) pcibios0: no compatible PCI ICU found: ICU vendor 0x1166 product 0x0205 pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc/0xb000 0xcb000/0x2000! acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP APIC OEMB acpitimer at acpi0 not configured acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 199 MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ (AuthenticAMD 686-class, 1024KB L2 cache) 3 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 11, 16 pins ioapic1 at mainbus0: apid 3 pa 0xfec01000, version 11, 16 pins ioapic2 at mainbus0: apid 4 pa 0xfec02000, version 11, 16 pins acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (P0P1) acpiprt2 at acpi0: bus 2 (P1P2) acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpibtn at acpi0 not configured acpibtn at acpi0 not configured pci0 at mainbus0 bus 0: configuration mode 1 (no bios) ppb0 at pci0 dev 1 function 0 ServerWorks HT-1000 PCI rev 0x00 pci1 at ppb0 bus 1 ppb1 at pci1 dev 13 function 0 ServerWorks HT-1000 PCIX rev 0xb2 pci2 at ppb1 bus 2 bge0 at pci2 dev 3 function 0 Broadcom BCM5704C rev 0x10, BCM5704 B0 (0x2100): apic 3 int 8 (irq 9), address 00:30:48:5e:6d:f6 brgphy0 at bge0 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0 bge1 at pci2 dev 3 function 1 Broadcom BCM5704C rev 0x10, BCM5704 B0 (0x2100): apic 3 int 9 (irq 5), address 00:30:48:5e:6d:f7 brgphy1 at bge1 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0 pciide0 at pci1 dev 14 function 0 ServerWorks HT-1000 SATA rev 0x00: DMA pciide0: using apic 2 int 11 (irq 11) for native-PCI interrupt pciide0: port 0: device present, speed: 1.5Gb/s wd0 at pciide0 channel 0 drive 0: ST3320620AS wd0: 16-sector PIO, LBA48, 305245MB, 625142448 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 pciide0: port 1: device present, speed: 1.5Gb/s wd1 at pciide0 channel 1 drive 0: ST3320620AS wd1: 16-sector PIO, LBA48, 305245MB, 625142448 sectors wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 5 pciide0: port 2: PHY offline pciide0: port 3: PHY offline pciide1 at pci1 dev 14 function 1 ServerWorks HT-1000 SATA rev 0x00 piixpm0 at pci0 dev 2 function 0 ServerWorks HT-1000 rev 0x00: polling iic0 at piixpm0 iic0: addr 0x2f 00=80 05=a8 06=ff 07=a8 08=ff 09=64 0a=64 0b=5e 0c=73 0d=5c 0e=7b 0f=12 10=b0 11=2e 13=ff 14=22 15=6f 16=d0 17=7b 18=d0 19=d0 1a=bf 1b=0f 1c=1f 1d=9c 1e=80 1f=80 20=1d 21=51 22=03 23=0f 25=0f 27=0f 29=0f 2b=0f 3b=ff 3c=ff 3d=ff 3e=ff 3f=ff 40=09 44=40 46=f7 47=ff 48=ff 49=7f 4a=3f 4b=02 4d=7c 50=1e 51=02 52=01 58=80 59=01 5c=03 5e=55 5f=03 60=ca 61=87 62=ca 63=87 64=ff 66=ff 67=ff 68=3f 6a=2b 6b=18 6c=7c 6d=65 6e=e3 6f=b9 70=8a 71=70 72=e5 73=bb 74=e5 75=bb 76=e3 77=b9 78=48 79=43 7a=48 7b=43 7c=48 7d=5f 7e=55 7f=50 80=64 81=5f 82=55 83=50 84=64 85=5f 86=55 87=50 88=46 89=41 8a=55 8b=50 8c=64 8d=5f 8e=55 8f=50 90=07 91=68 92=07 93=68 94=07 95=68 96=07 97=68 98=07 99=68 9a=07 9b=68 9c=07 9d=68 9e=ff 9f=ff a0=ff a1=ff a2=ff a3=ff a4=ff a5=ff a6=ff a7=ff a8=f5 ae=ff af=ff b1=04 b2=30 b3=30 b4=30 b5=30 b6=30 b7=30 b8=30 b9=30 ba=30 bb=89 bc=89 bd=89 be=89 bf=89 c0=89 c1=89 c2=89 c3=01 c4=01 c5=7f c6=ff c9=ff ca=ff cb=ff cc=ff cd=ff ce=ff cf=ff d1=46 d2=46 d3=46 d4=46 d6=f0 d7=ff d8=80 d9=01 da=80 db=01 dc=80 dd=01 de=80 df=01 e0=bb e1=c0 e2=82 e3=ff e4=80 e5=06 e6=fe
Re: OpenBSD replacement for GnuPG
Sean Darby a icrit : I should add... there seems to be a NetBSD variant, BPG, though I am not sure of the reliability of that (does anyone here use it?). Last time i checked (a year ago) bpg was stalling, I had a contact with Manuel Freire who was swamped, it does not seem that the project has evolved since then. If there might be an OpenBSD-based program of this general type, I would much prefer using that over NetBSD's or any other. Thanks! I have as a (very) low-priority side project to revive bpg as a rewrite (no ruby and with a different design and API) but what I currently got is nowhere near usable code ;-) Gilles -- SCHNEIER FACT #189: If Bruce Schneier wants your plaintext, he'll just squeeze it out of the ciphertext using his barehands
Re: Server just freeze with no reason
Hi! It's a very strange but i have same problem with my HP DL 140. running i386 OS. Once per week it just freezes and thats all, nothing in logs. It freezes also when it's idling. Strange is taht, i can ping it still, but nothing more, noone service is responding. DMESG follows OpenBSD 4.1 (WWW) #0: Thu Mar 31 04:10:45 EEST 2005 [EMAIL PROTECTED]:/usr/sys/arch/i386/compile/WWW cpu0: Intel(R) Xeon(R) CPU 5130 @ 2.00GHz (GenuineIntel 686-class) 2 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,TM2,CX16,xT PR real mem = 2146054144 (2095756K) avail mem = 1952407552 (1906648K) using 4278 buffers containing 107425792 bytes (104908K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xfd361, SMBIOS rev. 2.31 @ 0xdc010 (57 entries) bios0: HP ProLiant DL140 G3 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd360/0xca0 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/512 (30 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #16 is the last bus bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x1600 0xca800/0x1600 0xdc000/0x4000! acpi at mainbus0 not configured cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 5000X Host rev 0x31 ppb0 at pci0 dev 2 function 0 Intel 5000 PCIE rev 0x31 pci1 at ppb0 bus 1 ppb1 at pci1 dev 0 function 0 Intel 6321ESB PCIE rev 0x01 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 Intel 6321ESB PCIE rev 0x01 pci3 at ppb2 bus 3 ppb3 at pci1 dev 0 function 3 Intel 6321ESB PCIE-PCIX rev 0x01 pci4 at ppb3 bus 5 ppb4 at pci0 dev 3 function 0 Intel 5000 PCIE rev 0x31 pci5 at ppb4 bus 6 ppb5 at pci0 dev 4 function 0 vendor Intel, unknown product 0x25fa rev 0x31 pci6 at ppb5 bus 8 ppb6 at pci0 dev 5 function 0 Intel 5000 PCIE rev 0x31 pci7 at ppb6 bus 9 ppb7 at pci0 dev 6 function 0 vendor Intel, unknown product 0x25e6 rev 0x31 pci8 at ppb7 bus 10 ppb8 at pci0 dev 7 function 0 Intel 5000 PCIE rev 0x31 pci9 at ppb8 bus 11 pchb1 at pci0 dev 16 function 0 Intel 5000 Error Reporting rev 0x31 pchb2 at pci0 dev 16 function 1 Intel 5000 Error Reporting rev 0x31 pchb3 at pci0 dev 16 function 2 Intel 5000 Error Reporting rev 0x31 pchb4 at pci0 dev 17 function 0 Intel 5000 Reserved rev 0x31 pchb5 at pci0 dev 19 function 0 Intel 5000 Reserved rev 0x31 pchb6 at pci0 dev 21 function 0 Intel 5000 FBD rev 0x31 pchb7 at pci0 dev 22 function 0 Intel 5000 FBD rev 0x31 ppb9 at pci0 dev 28 function 0 Intel 6321ESB PCIE rev 0x09 pci10 at ppb9 bus 14 bge0 at pci10 dev 0 function 0 Broadcom BCM5721 rev 0x11, BCM5750 B1 (0x4101): irq 11, address 00:1a:4b:a4:d8:20 brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0 ppb10 at pci0 dev 28 function 1 Intel 6321ESB PCIE rev 0x09 pci11 at ppb10 bus 15 bge1 at pci11 dev 0 function 0 Broadcom BCM5721 rev 0x11, BCM5750 B1 (0x4101): irq 7, address 00:1a:4b:a4:d8:21 brgphy1 at bge1 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0 uhci0 at pci0 dev 29 function 0 Intel 6321ESB USB rev 0x09: irq 5 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1 at pci0 dev 29 function 1 Intel 6321ESB USB rev 0x09: irq 5 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2 at pci0 dev 29 function 2 Intel 6321ESB USB rev 0x09: irq 5 usb2 at uhci2: USB revision 1.0 uhub2 at usb2 uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered ehci0 at pci0 dev 29 function 7 Intel 6321ESB USB rev 0x09: irq 5 ehci0: timed out waiting for BIOS usb3 at ehci0: USB revision 2.0 uhub3 at usb3 uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1 uhub3: 6 ports with 6 removable, self powered ppb11 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xd9 pci12 at ppb11 bus 16 vga1 at pci12 dev 2 function 0 vendor Matrox, unknown product 0x0522 rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ichpcib0 at pci0 dev 31 function 0 Intel 6321ESB LPC rev 0x09: PM disabled pciide0 at pci0 dev 31 function 1 Intel 6321ESB IDE rev 0x09: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility atapiscsi0 at pciide0 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: TEAC, DW-224E-R, C.AC SCSI0 5/cdrom removable cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 ignored (disabled) pciide1 at pci0 dev 31 function 2 Intel 6321ESB SATA rev 0x09: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide1: using irq 10 for native-PCI interrupt wd0 at pciide1
Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system
On Thu, Oct 11, 2007 at 09:36:33PM -0700, Darrin Chandler wrote: On Thu, Oct 11, 2007 at 11:57:18PM -0400, Kevin Stam wrote: However, it is also worth noting that some typical desktop needs and uses are incompatible with the focus of OpenBSD. There are currently no video cards that provide the necessary specifications to create open drivers for all hardware function, most notably 3D acceleration. I have a problem with the way this is stated. It's not the focus of OpenBSD that's causing the problem here. It's the lack of vendors giving you, the customer, the option to use the hardware with your choice of software (including OS). You can't buy hardware from a company that restricts your use, and then blame the makers of software for not providing full functionality. It's completely backward. The focus of OpenBSD is on security. Its not the problem but it is incompatible with providing binary blob drivers. This is in no way a complaint agains OpenBSD. _Somebody_ has to provide a rock-solid secure OS and that precludes allowing some things that would otherwise be convenient for some people. I do beleive that the current short statement in the FAQ should be expanded to address the issue. Doug.
CARP preemption
Hi, carp(4) states: When the option is enabled and one of the carp enabled physical interfaces goes down, advskew is changed to 240 on all carp interfaces. in case preemption is enabled. Can anyone give me a hint why this is limited to a failure of the physical interface? I had some floods on my firewall which caused the external interfaces to drop packets (including the carp packets I assume) which was leading to a takeover of the external carp interface only. This of course left the cluster in a non-functional state until preemption switched back the external carp interface to the flooded host. I wonder if this is intended? regards Tim Config: net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=1 net.inet.carp.arpbalance=0 carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:01 carp: MASTER carpdev em0 vhid 1 advbase 1 advskew 0 groups: carp egress inet6 fe80::200:5eff:fe00:101%carp0 prefixlen 64 scopeid 0x7 inet 192.168.0.26 netmask 0xfffc broadcast 192.168.0.31 carp1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:fe carp: MASTER carpdev em1 vhid 254 advbase 1 advskew 0 groups: carp inet6 fe80::200:5eff:fe00:1fe%carp1 prefixlen 64 scopeid 0xa inet 192.168.1.2 netmask 0xff00 broadcast 192.168.2.255
TLS/FTP via OpenBSD NAT
Hello all, I have a few OpenBSD servers faithfully running NAT in various spots. One of these firewalls is doing VERY simple NAT on an interface, almost a cut and past from the PF pages (only really the IP addresses got changed). However, the client wants to be able to connect to an FTP server that is using TLS. My first thought of this was you can't. however, I was quickly disabused of this idea by connecting to their server using the program they use (FileZilla) within a Windows XP instance running inside Parrallels through a Netlink ADSL modem. That is two sets of translation happening! This got me confused as everything I have read about TLS says this can't be done. At least not with NAT. So I am wondering if anyone has had any experience with this and can point me in the right direction? The only way I can think that the Netlink is doing it is by doing some sort of Dynamic IP Address forwarding (setting up some rule that just dumps all traffic directly...) but I don't know. Regards Mikel
Re: cvs disk space error
On Thu, Oct 11, 2007 at 09:49:50PM -0500, Jeremy C. Reed wrote: On Thu, 11 Oct 2007, Aaron wrote: ? share/man/mantest unable to write, file adduser.8 No space left on device and returns me to the #. There is plenty of disk space. Try a different cvs server: http://openbsd.org/anoncvs.html#CVSROOT Or, if you want an explanation to go along with the answer, this message can also be caused by the *server* running out of disk space. Joachim -- TFMotD: mrinfo (8) - displays configuration info from a multicast router
Re: OpenBSD replacement for GnuPG
On 10/11/07, Sean Darby [EMAIL PROTECTED] wrote: Hi, Is there an alternative PGP or OpenPGP-like program available other than PGP or GnuPG/GPG? quoth http://www.cypherspace.org/openpgp/ * Tom Zerucha's reference OpenPGP implementation (C code, uses openSSL library, BSD license -- home site?) * Adam Back's pgpdsa minimalistic openPGP compatible dsa signature code (C code, uses openSSL library, public domain code -- home site) * Adam Back / Henry Hastur's PGP stealth (version 1.x by Henry Hastur (a nym), version 2.x mods by Adam Back) PGP 2.x steganography tool for PGP to normalize PGP messages (C code, open source -- home site) CK -- GDB has a 'break' feature; why doesn't it have 'fix' too?
Re: Locale
Hi, Toine. May be you can contact Marc Espie(espie#openbsd.org), he said locale support was in his todo list. I need Chinese locale support too. ^_~ -- Michael Bibby, China.
Re: : : Which remvable drive is connected to which USB port
On 10/12/07, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/10/12 11:47, Raimo Niskanen wrote: Use the disklabel: it has a disk name field that can be edited. Great proposal! I may be blind, but can not find an editable name field. Which is it? And how can I edit it? Label - you can edit it with disklabel -e. But I thought the problem was that he wants the first USB cable to always be the first USB backup--with constant churn of USB keys (so that there are many). Each key is only used once. How does editing the disklabel help in that case? -Nick
Re: cvs disk space error
On Thu, 11 Oct 2007, Aaron wrote: ? share/man/mantest unable to write, file adduser.8 No space left on device and returns me to the #. There is plenty of disk space. Try a different cvs server: http://openbsd.org/anoncvs.html#CVSROOT Or, if you want an explanation to go along with the answer, this message can also be caused by the *server* running out of disk space. Joachim Multiple simultaneous checkouts can fill up the working space cvs has to play with. it's a sign the server you are using is busy, and used by many other people. I suspect you went walking to anoncvs1.ca.openbsd.org, which gets regularly pummeled by hundreds of people too dumb to use a mirror. -Bob
Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system
On 10/11/07, Nick Holland [EMAIL PROTECTED] wrote: Personally, I absolutely LOVE the fact that OpenBSD doesn't support flash natively. I think that's a great selling point for using it on a desktop. Oh, but you not only like flash, but demand it. That's ok, that's your measure of desktop, it's my measure of annoying. Are there some places I can't go? Yep. I rather suspect they lose more by not having me than I do by not having them. I'm in the same boat as you, however youtube/google video are the best argument for flash. adobe should thank them, and possibly myspace for keeping their macromedia pipe dreams alive. OT noise I know. This thread climaxed on Henning's earlier post.
Re: TLS/FTP via OpenBSD NAT
On Fri, Oct 12, 2007 at 09:46:20PM +1000, Mikel Lindsaar wrote: Hello all, I have a few OpenBSD servers faithfully running NAT in various spots. One of these firewalls is doing VERY simple NAT on an interface, almost a cut and past from the PF pages (only really the IP addresses got changed). However, the client wants to be able to connect to an FTP server that is using TLS. My first thought of this was you can't. however, I was quickly disabused of this idea by connecting to their server using the program they use (FileZilla) within a Windows XP instance running inside Parrallels through a Netlink ADSL modem. That is two sets of translation happening! This got me confused as everything I have read about TLS says this can't be done. At least not with NAT. So I am wondering if anyone has had any experience with this and can point me in the right direction? The only way I can think that the Netlink is doing it is by doing some sort of Dynamic IP Address forwarding (setting up some rule that just dumps all traffic directly...) but I don't know. There is, of course, active and passive FTP. In active FTP, the server connects back to the client; this shouldn't be too difficult to set up, especially if the FTP server always connects from port 20. The other way round (passive FTP), you'll either have to integrate your FTP server with PF or forward a range of ports. vsftpd supports both SSL and restricting the data ports to a specific range, so that might be a good way to go about this. Joachim -- TFMotD: perlipc (1) - Perl interprocess communication (signals, fifos, pipes, safe subprocesses, sockets, and semaphores)
Re: Server just freeze with no reason
On 11/10/2007, Dmitry Slobodchikov [EMAIL PROTECTED] wrote: Hello all, My server freezed periodically like a log. I can't understand why. There are no any special software and non standard core, only packages from the same release. Server got router role and many people depend on it. Just freeze... Please ask me additional information more than I send now-) It's probably totally unrelated, but I once managed to freeze an OpenBSD box after attempting to make it automagically back up stuff to a Windows Server 2003 box. In my case, I had installed sharity-light (a package allowing you to access CIFS/SMB shares) and I had tried to tell it to mount the CIFS/SMB share at some mountpoint -- this is when it froze. It turned out that pf (which I had running on the OpenBSD box) blocked some port that was needed for proper communication between sharity-light and Windows Server 2003. I could only troubleshoot by first ssh-ing into the OpenBSD box, then making the mount attempt from the actual local keyboard/monitor of the OpenBSD box (where things duly froze) and then using the preexisting ssh session to troubleshoot and look at what was happening with tcpdump(8) (cf. http://www.openbsd.org/faq/pf/logging.html ). If I didn't have a preexisting ssh console open when making the mount attempt, then I couldn't ssh into the box anymore from the moment of it freezing (which meant there was no way to stop the madness, not even with a local Ctrl+C; in that case I had to power cycle the machine). But with a preexisting ssh session un-freezing the OpenBSD box was as simple as punching a big hole into pf.conf (or disabling pf). Again, you don't seem to be using sharity-light (at least it's not in your below package list), but I thought I'd tell ya anyway; maybe something along these lines might help you or a future reader of the archives. For the record, my above problems happened with OpenBSD 3.9 -release/i386 and the appropriate sharity-light package. cheerio, ropers There are following packages: bash-3.1.17 expat-2.0.0 freetype-1.3.1p2 gettext-0.14.5p1 glib2-2.10.3 jpeg-6bp3 libiconv-1.9.2p3 mc-4.6.1p0 mysql-client-5.0.22 mysql-server-5.0.22 p5-Bit-Vector-6.4p0 p5-Carp-Clan-5.3p0 p5-DBD-mysql-2.9004 p5-DBI-1.51 p5-Date-Calc-5.4 p5-Net-Daemon-0.39 p5-PlRPC-0.2018 php4-core-4.4.1p1 php4-gd-4.4.1p4-no_x11 php4-mysql-4.4.1p0 png-1.2.12 recode-3.6p3 t1lib-5.1.0p0 trafd-3.0.1 trafshow-3.1 unzip-5.52 zip-2.32
Re: OpenBSD replacement for GnuPG
On Fri, Oct 12, 2007 at 12:50:36PM +0200, Gilles Chehade wrote: Sean Darby a icrit : I should add... there seems to be a NetBSD variant, BPG, though I am not sure of the reliability of that (does anyone here use it?). Last time i checked (a year ago) bpg was stalling, I had a contact with Manuel Freire who was swamped, it does not seem that the project has evolved since then. If there might be an OpenBSD-based program of this general type, I would much prefer using that over NetBSD's or any other. Thanks! I have as a (very) low-priority side project to revive bpg as a rewrite (no ruby and with a different design and API) but what I currently got is nowhere near usable code ;-) I _think_ that you can do all normal functions of PGP/GPG (sign docs, encrypt, etc) with OpenSSL but I don't think that they will interoperate. So I suppose it depends on if you need to interoperate with people who don't use/have OpenSSL. Doug.
Re: Which remvable drive is connected to which USB port
On 10/11/07, Edwards, David (JTS) [EMAIL PROTECTED] wrote: So, basically I need a tool where I can start with a physical port description (seems /dev/usb# addr # works) and end with a disk device (sd#). I'll take the time to have a look at the sources one day. I'm sure it would be possible to write a tool that would be able to work this out in a better way. Would you have any pointers as to where to start looking? disklabel will also tell you the label for a disk, which you could use to determine the port.
Re: Transparent Firewall with NAT
On 10/10/2007, Cidric THIBAULT [EMAIL PROTECTED] wrote:
Thank's for your comment. Unfortunately, i well understand the Nat
process.
Huh? If you understand NAT very well, then how is that unfortunate?
I'm not trying to be a prick here; I honestly have trouble
understanding you.
I's right it's not seems to be interesting to nat some machine in the same
IP lan, but that is what i want.
Is this what you are trying to say?:
It's true that it would not seem to make sense to do Network Address
Translation between machines that are on the same physical network
segment, but this is what I want.
I'll give you an example of what I understood. Please tell me if this
describes what you are trying to do:
- You have multiple hosts on a single physical network segment.
- An OpenBSD box is also connected to the same network segment,
possibly intercalated between two parts of that network, where one
part of that network is connected to its 1st NIC and the other to a
2nd NIC.
- There are hosts on both sides that are on the same logical subnet.
Therefore bridging is required.
- There are other hosts connected to that same physical network
segement that are configured with IP addresses and subnet masks so
that they are in a second different logical subnet. They need NAT in
order to talk to the hosts in the first logical subnet.
Is this what you need?
The problem, you said it very well, it's the firewall can't assign it's own
IP adress because is in bridge mode.
You can assign an IP address to a NIC that's part of a bridge. This is
frequently done, so the bridge can be remotely administered with SSH.
In this scenario you put both NICs in promiscuous mode (so they listen
to all traffic and bridge whatever is allowed in pf.conf), but you
assign an IP address to one of the NICs anyway. Most users will never
see/know that IP. It doesn't appear in their network settings. It's
strictly for when you want to talk directly to the OpenBSD box.
So, the idea is to set a particular IP on all trafic outgoing from the
firewall.
I have no idea what you're trying to say here.
The rule could be this one :
nat pass on bridge0 inet tagged LAN1 - 192.168.2.3 (it's an example of an
ip pick in the LAN...)
pass in inet proto {tcp,udp, icmp} on $lan1_if http://10.0.0.0/24 tag
LAN1
I don't know if this syntax is ok, because i never tested it.
I have no idea what you're trying to do here. I'm missing contextual
information.
Transparent Firewall with NAT
I don't fully understand your email, because some of your sentences aren't really gramatically correct, and some of them don't seem to me to be technologically correct (ie. the technology questions in them don't seem to make sense to me). From reading this thread, I suspect others are having similar problems. Let me look at what you wrote: On 10/10/2007, Cidric THIBAULT [EMAIL PROTECTED] wrote: Hello everybody, I work on BSD 4.1, with i386 hardware. I'm searching a way to enable a transparent firewall (without ip adress), probably in bridge mode.., with a capability of NAT. Let me stop you there. Normally, you would EITHER use your OpenBSD box to do NAT, OR you would set your OpenBSD box up as a bridge. Let's take a step back and instead of talking about things in the abstract, let's make plain what you're trying to do: - Do you have a network w/ multiple hosts on the same physical network segment? - Do these hosts have private or public IP addresses? - Are these hosts' IP addresses in the same (logical) subnet? I.e. are they using the same network address and subnet mask, e.g. xxx.yyy.zzz.0/24? - You've mentioned bridging. Which hosts do you want to separate with a bridge? Are these hosts on the same logical subnet (and possibly already on the same physical network segment)? If they aren't, then how is what you're trying to do bridging? - You've mentioned NATing. Normally this involves translating between two DIFFERENT logical networks. What do you mean by enable a transparent firewall (...) in bridge mode.., with a capability of NAT? Do you want to set up a bridge NOW and only possibly separate your network LATER, and then change your OpenBSD bridge to an OpenBSD NAT router? I know the interest is not evident to nat some computers on the same IP lan, but it's for a client, so! Hm. Forgive my skepticism, but has the client asked you to put in a bridge that does NAT? Do you understand what they want? Do they? It seems that PF doesn't have this capability. Perhaps, it could be possible with an another package ? OpenBSD/PF can do NAT while filtering the NATted traffic. OpenBSD/PF can also be used to set up a transparent bridge that is invisible to users, yet filters traffic. This can be done out of the box; no extra packages are required. I have personally in the past set up such an OpenBSD bridge. In my case, this was a physical network segment with multiple hosts, only some of which were under my control. The foreign and my own hosts were also on the same (logical) subnet. I needed to protect one of the hosts from the others (especially the ones I didn't control). That sensitive host was a Windows Server 2003 box ((which by default comes w/o a firewall and the Windows Firewall, while available in a service pack, cannot be enabled on Domain Controllers without serious hacking; really; it boggles the mind)). So I connected stuff thus: W2K3 Srv --- OpenBSD bridge --- rest of network, incl. Internet gateway I set up the bridge and configured pf.conf so that those boxes that needed to talk to the server could do so. It was NOT a totally bulletproof solution, but it was the best I could come up with, given the constraints I was operating within. Maybe you could describe your network like I did above. I think that would help me and possibly others to understand you better. Please be specific. Thanks and regards, --ropers
Re: 4.2 fvwm2 error `gtkaccelgroup.lo' is not a valid libtool object
On 12/10/2007, Siju George [EMAIL PROTECTED] wrote: I tried to install fvwm2 in ports on my OpenBSD 4.2 GENERIC#1179 amd64 ( from official CD ) I get this error, could somebody please help me out I'm pretty clueless myself, but could this be the reason? === fvwm2+fvicons-2.4.19p0 depends on: gtk+-* - not found Are you missing GTK+? ( http://www.gtk.org/ ) There's an OpenBSD GTK+ package for 4.1, but since you're running 4.2, you may have to wait a bit. That'd just me guessing, I could be wrong.
Re: Server just freeze with no reason
Hmm... good idea! I will try to add some access-list to that server and will see :) -Original message- From: Maxim Bourmistrov [EMAIL PROTECTED] Date: Fri, 12 Oct 2007 14:46:17 +0300 To: Edgars MakEa [EMAIL PROTECTED] Subject: Re: Server just freeze with no reason This can idndicate that some process eating all resources. This might be an ssh-brute_force. Consider to trim you box, which is not supported by OpenBSD-devs officially. http://www.pantz.org/os/openbsd/runningandtunningopenbsd.shtml It is also has been proven that running fork_bomb on obsd-server with current login.conf settings produces exactly the same result: ping - ok, but not services responding. On 12 okt 2007, at 10.49, Edgars MakEa wrote: Hi! It's a very strange but i have same problem with my HP DL 140. running i386 OS. Once per week it just freezes and thats all, nothing in logs. It freezes also when it's idling. Strange is taht, i can ping it still, but nothing more, noone service is responding. DMESG follows OpenBSD 4.1 (WWW) #0: Thu Mar 31 04:10:45 EEST 2005 [EMAIL PROTECTED]:/usr/sys/arch/i386/compile/WWW cpu0: Intel(R) Xeon(R) CPU 5130 @ 2.00GHz (GenuineIntel 686- class) 2 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE3 6,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS- CPL,VMX,TM2,CX16,xT PR real mem = 2146054144 (2095756K) avail mem = 1952407552 (1906648K) using 4278 buffers containing 107425792 bytes (104908K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xfd361, SMBIOS rev. 2.31 @ 0xdc010 (57 entries) bios0: HP ProLiant DL140 G3 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd360/0xca0 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/512 (30 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #16 is the last bus bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x1600 0xca800/0x1600 0xdc000/0x4000! acpi at mainbus0 not configured cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 5000X Host rev 0x31 ppb0 at pci0 dev 2 function 0 Intel 5000 PCIE rev 0x31 pci1 at ppb0 bus 1 ppb1 at pci1 dev 0 function 0 Intel 6321ESB PCIE rev 0x01 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 Intel 6321ESB PCIE rev 0x01 pci3 at ppb2 bus 3 ppb3 at pci1 dev 0 function 3 Intel 6321ESB PCIE-PCIX rev 0x01 pci4 at ppb3 bus 5 ppb4 at pci0 dev 3 function 0 Intel 5000 PCIE rev 0x31 pci5 at ppb4 bus 6 ppb5 at pci0 dev 4 function 0 vendor Intel, unknown product 0x25fa rev 0x31 pci6 at ppb5 bus 8 ppb6 at pci0 dev 5 function 0 Intel 5000 PCIE rev 0x31 pci7 at ppb6 bus 9 ppb7 at pci0 dev 6 function 0 vendor Intel, unknown product 0x25e6 rev 0x31 pci8 at ppb7 bus 10 ppb8 at pci0 dev 7 function 0 Intel 5000 PCIE rev 0x31 pci9 at ppb8 bus 11 pchb1 at pci0 dev 16 function 0 Intel 5000 Error Reporting rev 0x31 pchb2 at pci0 dev 16 function 1 Intel 5000 Error Reporting rev 0x31 pchb3 at pci0 dev 16 function 2 Intel 5000 Error Reporting rev 0x31 pchb4 at pci0 dev 17 function 0 Intel 5000 Reserved rev 0x31 pchb5 at pci0 dev 19 function 0 Intel 5000 Reserved rev 0x31 pchb6 at pci0 dev 21 function 0 Intel 5000 FBD rev 0x31 pchb7 at pci0 dev 22 function 0 Intel 5000 FBD rev 0x31 ppb9 at pci0 dev 28 function 0 Intel 6321ESB PCIE rev 0x09 pci10 at ppb9 bus 14 bge0 at pci10 dev 0 function 0 Broadcom BCM5721 rev 0x11, BCM5750 B1 (0x4101): irq 11, address 00:1a:4b:a4:d8:20 brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0 ppb10 at pci0 dev 28 function 1 Intel 6321ESB PCIE rev 0x09 pci11 at ppb10 bus 15 bge1 at pci11 dev 0 function 0 Broadcom BCM5721 rev 0x11, BCM5750 B1 (0x4101): irq 7, address 00:1a:4b:a4:d8:21 brgphy1 at bge1 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0 uhci0 at pci0 dev 29 function 0 Intel 6321ESB USB rev 0x09: irq 5 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1 at pci0 dev 29 function 1 Intel 6321ESB USB rev 0x09: irq 5 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2 at pci0 dev 29 function 2 Intel 6321ESB USB rev 0x09: irq 5 usb2 at uhci2: USB revision 1.0 uhub2 at usb2 uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered ehci0 at pci0 dev 29 function 7 Intel 6321ESB USB rev 0x09: irq 5 ehci0: timed out waiting for BIOS usb3 at ehci0: USB revision 2.0 uhub3 at usb3 uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1 uhub3: 6 ports with 6
Re: spdmem: what does PC25100 mean?
On 08/10/2007, Daniel Ouellet [EMAIL PROTECTED] wrote: Alexey Suslikov wrote: CL5 is CAS latency I think, but what does PC25100 mean here? :) PC2-5100 Hm, Wikipedia currently only knows PC2-5300. http://en.wikipedia.org/wiki/DDR2_SDRAM Of course Wikipedia is infallible... ;-P
Re: spdmem: what does PC25100 mean?
ropers wrote: Hm, Wikipedia currently only knows PC2-5300. That's easy to fix.
Re: [Newbie] OpenBSD HTTP proxy
On Mon, Oct 08, 2007 at 10:00:34PM -0400, Jeremy Huiskamp wrote: On 8-Oct-07, at 8:43 PM, Lars Noodin wrote: Tony Bruguier wrote: ... I would like to install an HTTP proxy. ... Squid is recommended. Read the directions carefully and you will have to make one or two changes to the configuration. Have squid listen localhost and then tunnel to get to it. What's the point of getting squid involved? Putty does SOCKS proxying does it not? Jeremy Yep. There is no need for any proxy software if he can just ssh -D with putty and configure his browser to use that.
Google employment opportunity
Hi Theo, My name is David Mack, and I am a recruiter for the Google.com engineering team, a dynamic, challenging and fun group, which is responsible for our Google website, from start to finish. While doing a search for a specific skill set, I found your contact information on-line and I wanted to contact you to see if you may be interested in learning more about opportunities with us. You seem like you might be a great fit here at Google. We have a number of exciting projects going on throughout the company in a number of different locations. Just wanted to see if you might be interested in exploring some? If you're open to that type of conversation, please feel free to circle back with me. Thank you and I hope to hear from you soon! All the best, David Mack Technical Recruiter/Sourcer Google Staffing 650-253-7919 [EMAIL PROTECTED]
Re: Google employment opportunity
OMG a Google employee was dumb enough to spam an entire mailing list to get to one person. WOW, I thought they hired really smart people. On 10/12/07, David Mack [EMAIL PROTECTED] wrote: Hi Theo, My name is David Mack, and I am a recruiter for the Google.com engineering team, a dynamic, challenging and fun group, which is responsible for our Google website, from start to finish. While doing a search for a specific skill set, I found your contact information on-line and I wanted to contact you to see if you may be interested in learning more about opportunities with us. You seem like you might be a great fit here at Google. We have a number of exciting projects going on throughout the company in a number of different locations. Just wanted to see if you might be interested in exploring some? If you're open to that type of conversation, please feel free to circle back with me. Thank you and I hope to hear from you soon! All the best, David Mack Technical Recruiter/Sourcer Google Staffing 650-253-7919 [EMAIL PROTECTED]
Re: Google employment opportunity
On 10/12/07, David Mack [EMAIL PROTECTED] wrote: Hi Theo, My name is David Mack, and I am a recruiter for the Google.com engineering team, a dynamic, challenging and fun group, which is responsible for our Google website, from start to finish. While doing a search for a specific skill set, I found your contact information on-line and I wanted to contact you to see if you may be interested in learning more about opportunities with us. You seem like you might be a great fit here at Google. [snip] Oh man, and I was wondering what to do on a Friday night. Now *this* is entertainment! Sit back and prepare to watch the show folks.
Re: Google employment opportunity
On Fri, 12 Oct 2007 20:39:07 -0400 Frank Hale [EMAIL PROTECTED] wrote: OMG a Google employee was dumb enough to spam an entire mailing list to get to one person. WOW, I thought they hired really smart people. Be gentle with them, they read your mail. Jona -- I am chaos. I am the substance from which your artists and scientists build rhythms. I am the spirit with which your children and clowns laugh in happy anarchy. I am chaos. I am alive, and tell you that you are free. Eris, Goddess Of Chaos, Discord Confusion
Re: Google employment opportunity
Be gentle with them, they read your mail. I'm sorry, It was a cheap shot... maybe I should apply to Google... maybe stupidity is in... If it is then I am sure to get a job offer...
Re: Google employment opportunity
Maybe they have smart *engineers*, but the recruiters are, well, there you go . -- Original message -- From: Frank Hale [EMAIL PROTECTED] OMG a Google employee was dumb enough to spam an entire mailing list to get to one person. WOW, I thought they hired really smart people. On 10/12/07, David Mack [EMAIL PROTECTED] wrote: Hi Theo, My name is David Mack, and I am a recruiter for the Google.com engineering team, a dynamic, challenging and fun group, which is responsible for our Google website, from start to finish. While doing a search for a specific skill set, I found your contact information on-line and I wanted to contact you to see if you may be interested in learning more about opportunities with us. You seem like you might be a great fit here at Google. We have a number of exciting projects going on throughout the company in a number of different locations. Just wanted to see if you might be interested in exploring some? If you're open to that type of conversation, please feel free to circle back with me. Thank you and I hope to hear from you soon! All the best, David Mack Technical Recruiter/Sourcer Google Staffing 650-253-7919 [EMAIL PROTECTED]
Re: Supporting newer atheros chipsets...
On Fri, Oct 12, 2007 at 05:55:21PM +0200, Reyk Floeter wrote:
People who had problems with unsupported Atheros devices (single chip
variants found in recent laptops, macbooks, etc.) should get the
latest code from CVS and test it... I was able to make 11b mode work
on at least two different new-age chipsets:
ath0 at pci2 dev 0 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01: apic 1
int 17 (irq 11)
ath0: AR 10.3 phy 6.1 rf 10.2, WOR2W, address 00:16:cf:ab:4c:97
ath1 at cardbus0 dev 0 function 0 Atheros Communications, Inc.,
AR5001--, Wireless LAN Reference Card: irq 10
ath1: AR5413 10.5 phy 6.1 rf 6.3, WOR0W, address 00:12:bf:0e:7d:36
Thanks again to Dave Del Debbio and David Menzel for donating me PCI
Express MiniCards for testing and development.
But there are still some known problems:
- The ath0 device sometimes runs into a hardware-locking RX overrun
bug. The only way to recover the device is to _cold_ start the
computer. Use ifconfig ath0 debug and look for rx FIFO overrun;
resetting.
- The devices sometimes need a long time to calibrate, just associate
and wait some seconds before trying your first ping.
- The offset is not alway right, I'm trying to find a better way to
set the channels correctly. See the attached commit message for more info.
- more...?
Hacked and tested in the Melbourne Museum during the AUUG 2007...
ok, it appears that the offset varies in some cases and there needs to
be some sort of calibration. you can use the attached diff to adjust
the offset to make it work - this is really only for testing and not
for the tree.
for example, here in the melbourne museum i have to adjust the offset
by 5MHz to be able to join the public wireless network:
# ifconfig ath1 chanoff 5 down up
# ifconfig ath1
ath1: flags=8863UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:12:bf:0e:7d:36
groups: wlan egress
media: IEEE802.11 autoselect (DS2 mode 11b)
status: active
ieee80211: nwid museumpublic chan 1 (offset 5) bssid 00:12:a9:4f:2a:82
82%
inet6 fe80::212:bfff:fe0e:7d36%ath1 prefixlen 64 scopeid 0x5
inet 136.154.47.89 netmask 0xff00 broadcast 136.154.47.255
if you experience any problems, try to set the chanoff to positive or
negative numbers and send me some feedback.
reyk
Index: sbin/ifconfig/ifconfig.c
===
RCS file: /cvs/src/sbin/ifconfig/ifconfig.c,v
retrieving revision 1.188
diff -u -p -r1.188 ifconfig.c
--- sbin/ifconfig/ifconfig.c9 Oct 2007 21:41:54 - 1.188
+++ sbin/ifconfig/ifconfig.c13 Oct 2007 01:41:55 -
@@ -154,6 +154,7 @@ voidsetifnwid(const char *, int);
void setifbssid(const char *, int);
void setifnwkey(const char *, int);
void setifchan(const char *, int);
+void setifchanoff(const char *, int);
void setiftxpower(const char *, int);
void setifpowersave(const char *, int);
void setifpowersavesleep(const char *, int);
@@ -283,6 +284,8 @@ const structcmd {
{ -nwkey, -1, 0, setifnwkey },
{ chan, NEXTARG,0, setifchan },
{ -chan, -1, 0, setifchan },
+ { chanoff,NEXTARG,0, setifchanoff },
+ { -chanoff, -1, 0, setifchanoff },
{ powersave, 1, 0, setifpowersave },
{ -powersave, 0, 0, setifpowersave },
{ powersavesleep, NEXTARG,0, setifpowersavesleep },
@@ -1417,6 +1420,27 @@ setifchan(const char *val, int d)
warn(SIOCS80211CHANNEL);
}
+void
+setifchanoff(const char *val, int d)
+{
+ const char *errstr;
+ int off;
+
+ if (d != 0)
+ off = 0;
+ else {
+ off = strtonum(val, -5000, 5000, errstr);
+ if (errstr) {
+ warnx(wrong channel offset %s: %s, errstr, val);
+ return;
+ }
+ }
+
+ ifr.ifr_metric = off;
+ if (ioctl(s, SIOCSIFGENERIC, (caddr_t)ifr) == -1)
+ warn(SIOCSIFGENERIC(chanoff));
+}
+
#ifndef SMALL
void
setiftxpower(const char *val, int d)
@@ -1516,7 +1540,7 @@ setifpowersavesleep(const char *val, int
void
ieee80211_status(void)
{
- int len, i, nwkey_verbose, inwid, inwkey, ichan, ipwr, ibssid, itxpower;
+ int len, i, nwkey_verbose, inwid, inwkey, ichan, ipwr, ibssid,
itxpower, ichanoff, chanoff;
struct ieee80211_nwid nwid;
struct ieee80211_nwkey nwkey;
struct ieee80211_power power;
@@ -1546,6 +1570,12 @@ ieee80211_status(void)
strlcpy(channel.i_name, name, sizeof(channel.i_name));
ichan = ioctl(s, SIOCG80211CHANNEL, (caddr_t)channel);
+ memset(ifr,
4.2 best shot not yet shared
its 24.8M and i've only lowly american bandwidth, quite a nice desktop. virtuous patients, the early bird, and the lot... http://g33t.org/pub/puff42-600dpi.png ot: is puff a water-bearer? thanks to all involved! jake
