Later intel nics, not reporting link up. Any suggestions?

2010-11-14 Thread Kenneth Østrup
Greetings,

I'm trying to get OpenBSD running on a Fujitsu BX920 S2 server blade,
but ran into a wall trying to set up the network interfaces.

The server has two dual port Intel 82575 Gigabit Ethernet controllers,
as far as I could tell this chipset should be supported in em(4),
but ifconfig reports back with "status: no carrier" on the interface,
even though the interface and link is up.

I tried both 4.8-stable and 4.8-current as of Oct 12 2010.

OpenBSD 4.8-current (GENERIC.MP) #462: Tue Oct 12 17:56:54 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP

pcidump lists the devices as:

 1:0:0: Intel PRO/1000 PF (82575EB)
 1:0:1: Intel PRO/1000 PF (82575EB)
 2:0:0: Intel PRO/1000 PF (82575EB)
 2:0:1: Intel PRO/1000 PF (82575EB)

ifconfig em0:

 em0: flags=8802 mtu 1500
 lladdr xx:xx:xx:xx:xx:ee
 priority: 0
 media: Ethernet autoselect (none)
 status: no carrier

I've tried 4.8-stable and 4.8-current as of 2010-11-09.

Dmesg has following info:

 em0 at pci1 dev 0 function 0 "Intel PRO/1000 PF (82575EB)" rev 0x02:
  apic 7 int 4 (irq 10), address xx:xx:xx:xx:xx:ee
 em1 at pci1 dev 0 function 1 "Intel PRO/1000 PF (82575EB)" rev 0x02:
  apic 7 int 16 (irq 5), address xx:xx:xx:xx:xx:ef
 em2 at pci2 dev 0 function 0 "Intel PRO/1000 PF (82575EB)" rev 0x02:
  apic 7 int 5 (irq 10), address xx:xx:xx:xx:xx:f0
 em3 at pci2 dev 0 function 1 "Intel PRO/1000 PF (82575EB)" rev 0x02:
  apic 7 int 17 (irq 5), address xx:xx:xx:xx:xx:f1

(Mac addresses partially blanked in this output on purpose)


This NIC seems to be quite common for new servers, so before I run off
sending a bug report, I'd like to hear if anyone else has stumbled upon
this or could give me some advise before I run off submitting a bug
report.


Thank you.

Best regards,
Kenneth Oestrup



Vendo al primero, oportunidad.

2010-11-14 Thread Walter Talayer Vende
SE  VENDE, COMPLEJO  APROBADO,
en el Balneario AGUAS  DULCES del depto. de ROCHA.-

A 270  kilsmetros de la capital del pams, Montevideo.
A  9 kilsmetros de la ciudad de Castillos en el Departamento de Rocha.

1 casa  y 6 cabaqas, terreno con galpsn y apartamento.-
A 2 cuadras de la playa.- (Ociano Atlantico)
Bien de papeles; construcciones ante el Banco de Previsisn Social,
regularizadas; contribucisn  inmobiliaria al dma;  totalmente amoblado; en
2000 metros de terreno, con un  solar listo para edificar, con muro
perimetral, jardines; la casa y todas las cabaqas estan pintadas
recientemente.-
La Casa principal tiene parrillero cerrado, lavadero y depssito.-


A un precio de regalo. Por poco tiempo.



Sr. Talayer: 099 694 420
waltertala...@gmail.com



Asiste gratis y resuelve todas tus dudas. Seminario Facturacion Electronica

2010-11-14 Thread Lic. Patricia Parra
*Si no visualizas correctamente este email da click **AQUI

*

 

 Sabias que ahora existen 4 esquemas de facturaciC3n?

 FacturaciC3n tradicional

 FacturaciC3n impresa con cC3digo bidimensional

 FacturaciC3n electrC3nica esquema 2010 sin la intervenciC3n de un
Proveedor Autorizado de CertificaciC3n.

 FacturaciC3n electrC3nica esquema 2011 con la intervenciC3n de un
Proveedor Autorizado de CertificaciC3n folio por folio.

 Y que el SAT nos exige que cambiemos al Codigo Bidimensional o la
FacturaciC3n Electronicab&b&. Para quienes facturan mas de 4
millones de pesos ES OBLIGATORIO para el 1 ero de enero del 2011 y
para quienes facturan menos el SAT nos ofrece BENEFICIOS FISCALES por
adoptarla.

 Contpaq i estC! preparado para apoyarte en la ejecuciC3n de los 4
esquemas con nuestros sistemas Adminpaq, Contpaq i Factura
ElectrC3nica y Contpaq i Punto de Venta. 

 Y ya sabias que b&b&b&b&.

 Los contribuyentes que durante el ejercicio fiscl de 2011 y
anteriores hayan optado por expedir CFD`s al amparo de lo dispuesto
por el artC-culo 29 del CFF, vigente hasta el 31 de diciembre de 2010
y los hayan emitido efectivamente, podrC!n optar por continuar
generando y emitiendo directamente CFD`s sin necesidad de remitirlos a
un proveedor de certificacion de CFD`s para la validaciC3n de
requisitos, asignacion de folio e incorporaciC3n del sello digital del
SAT. Considerando, ademC!s, que los contribuyentes que emiten facturas
electrC3nicas a travC)s de proveedores o prestadores de servicios de
factura electronica actuales (TERCEROS) podrC!n seguir operando C)ste
esquema, SOLAMENTE durante el primer semestre de 2011 unicamente. 

 Los contribuyentes que utilizan la facturaciC3n electrC3nica han
visto sus beneficios en materia de seguridad, disminuciC3n de costos,
optimizaciC3n de controles internos, impulso de mejores procesos
tecnolC3gicos y cambio de prC!cticas, por lo que han ido incrementando
paulatinamente su uso, disminuyendo o eliminando la emisiC3n de
comprobantes impresos. 

 Existen muchas lagunas con respecto a este tema. te
invitamos a asistir a nuestro evento sobre este tema, donde se
trataran todos los temas vigentes expuestos por expertos en la
materia.

 Podras resolver todas tus dudas. AcompC!C1anos y entC)rate de toda la
informaciC3n al respecto. Apunta tus dudas y ahi podras discutirlas.

 El evento sera el dia 23 de noviembre a las 10:30 de la maC1ana, en
Ejercito Nacional 613 , en la nueva Torre del Hospital EspaC1ol. Col.
Polanco

 El registro sera a las 10:00

 Solicita tu clave de asistencia, sera indispensable para entrar.

 CADA CONFERENCIA SE ESTAN MANEJANDO TEMAS NUEVOS! NO TE LA PIERDAS!!

 SOMOS UN DISTRIBUIDOR MASTER AUTORIZADO POR LA MARCA CONTPAQ I

 Te ofrecemos todos los servicios que necesitas para implementar este
sistema:

 Instalacion gratis por soporte remoto

 Soporte tC)cnico telefC3nico limitado en un numero 01 800

 CapacitaciC3n

 Soporte Tecnico

 Todo lo que necesites.

 Llamanos al 53 95 25 62 y 55 57 11 86

 Chatea con nosotros en : pe...@live.com.mx

 Escribenos a i...@procesosempresariales.com.mx

 El objetivo de este correo es informarte con respecto a este tema tan
relevante para todas las empresas y personas fC-sicas mexicanas. Si te
molestamos te pedimos disculpas. 

 Pero antes, reenvC-a este correo a todas aquellas personas para
quienes esta informaciC3n es importante.

 Patricia Parra

 Distribuidor Master Contpaq i

 53952562



--



--
Powered by PHPlist, www.phplist.com --



Re: 4.8 sensorsd blind spot, failure to trigger command on any state changes after initialisation

2010-11-14 Thread mark hellewell
On 14 November 2010 20:06, Constantine A. Murenin wrote:

> indicator is not a smart sensor  doesn't have a state like OK  so
> it's never monitored automatically; i think you'd have to specify low
> and high values for it or something like that.
>
> You can also use a shell script for watthour3 thing, where you can
> manually run sysctl and see what the value of the indicator is, then
> decide whether to shutdown or not.  Also, specifying an extra low
> value will get you the extra command execution if you need one.


Ah; thanks for your reply!  I think I was expecting the wrong thing from
sensorsd -- thanks for shedding light on what's going on.  I'll use a shell
script command on watthour3 to check the other vals through sysctl directly,
as you suggest.

I wish that hw.sensors.acpibat0.raw0 changed state from OK to something else
when it was discharging. I wonder why this isn't the case: CHARGING,
DISCHARGING, IDLE would be great additions I think.  Maybe it's done the way
it is for good reason.

Mark

C.



Re: ldapd and self-signed certificate

2010-11-14 Thread Joel Carnat
-Message initial-
@:  Joel Carnat ;
Cc: misc@openbsd.org;
De: Philip Guenther 
Envoyi: dim. 14-11-2010 02:25
Sujet:  Re: ldapd and self-signed certificate
> On Sat, Nov 13, 2010 at 12:02 PM, Joel Carnat  wrote:
> > I want to use LDAP to store postfix, apache and dovecot users.
> > This sounds a quite simple need so I plan to use the native ldapd.
> ...
> > Then I created a self-signed certificate in /etc/ldap/ using directions
from
> > starttls(8).
> > The ldapd starts and listens to ldap and ldaps ports.
> > But when I run: # ldapmodify -x -H ldaps://ldapd.tumfatig.local -D
> > "cn=admin,dc=tumfatig,dc=local" -W -f /tmp/tumfatig
> > I get: "additional info: error:14090086:SSL
> > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"
> > The ldapd (in debug mode) says: "SSL library error: ssl_session_accept:
> > error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca"
> >
> > Can I use ldapd with self-signed certificate ?
> > Did I miss a step ?
>
> There are two aspects to verifying a cert:
> 1) does it have a valid signature?
> 2) is the CA that signed this trustable at all?
>
> The point of this is to know whether you can trust the contents of the
> cert so that you're protected from Man-in-the-Middle attacks.  If you
> accepted any self-signed cert then anyone could generate a cert that
> claimed to be your server, then splice your TCP connection and snoop
> and modify all your data.
>
> So, you need some way to know which certs to trust; that's where #1
> and #2 come in.  #1 validates that this cert can be traced back to a
> particular CA, while #2 is where you decide whether that CA is okay.
> #1 is done automatically by the OpenSSL code; #2 is done by putting
> all the CAs you want to trust in location(s) that OpenSSL checks.
>
> For a self-signed cert, step #1 is basically trivial, while #2 is done
> by either putting a link to the cert in /etc/ssl/certs/ with a name
> that's derived from a hash of the cert's subject, or adding the cert
> itself to /etc/ssl/cert.pem.  The latter is easy but you may find it
> cluttered.  To do the former, do something like:
> cert_file=/absolute/path/to/the/cert.pem
> ln -s $cert_file /etc/ssl/certs/`openssl x509 -noout -in
> $cert_file -subject_hash`.0
>
> Note that /etc/ssl/cert* are the default trust paths for practically
> all openssl-based apps, so a cert added there will be trusted for lots
> of things.  If you don't like that idea then you'll need to look at
> how to set the CA paths for the apps you want to trust that cert.
> That's fairly specific to the involved app.  starttls(8) describes the
> settings for sendmail, ldap.conf(5) describes it for the OpenLDAP
> libldap and clients, etc.
>
>
> Philip Guenther
>

Thank you for this detailed explanation.

For the moment, I just testing things in a "closed" environment.
This is why I used self-signed certificates. In a "real" environment, I
would go with certificates signed by publicly known CA.

I did try creating /etc/ssl/certs and linking my self-signed certificates
as you describe. But that doesn't seem to work neither.

I also took one of my certificates, signed by a publicly know CA but I
still got the same message... I checked the certificate and it contains
the path to the CA.

But I still get the "tlsv1 alert unknown ca" error :(

  Joel Carnat



New with 4.8 : inteldrm0: gpu hung!

2010-11-14 Thread Peter Fraser
The problem Occurred after I put up 4.8.
So far it has happened three times.
It occurs when I switch to console 1 then switched back to X, not every time
though

dmesg
usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb0 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0x81
pci1 at ppb0 bus 1
cmpci0 at pci1 dev 3 function 0 "C-Media Electronics CMI8738/C3DX Audio" rev
0x10: apic 2 int 21 (irq 9)
audio0 at cmpci0
opl at cmpci0 not configured
mpu at cmpci0 not configured
fxp0 at pci1 dev 8 function 0 "Intel 82801DB LAN" rev 0x81, i82562: apic 2 int
20 (irq 9), address 00:e0:18:7e:3b:7e
inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
ppb1 at pci1 dev 9 function 0 "Intel S21152BB PCI-PCI" rev 0x00
pci2 at ppb1 bus 2
ste0 at pci2 dev 4 function 0 "D-Link 550TX" rev 0x14: apic 2 int 21 (irq 9),
address 00:05:5d:6d:a9:d2
ukphy0 at ste0 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste1 at pci2 dev 5 function 0 "D-Link 550TX" rev 0x14: apic 2 int 22 (irq 9),
address 00:05:5d:6d:a9:d3
ukphy1 at ste1 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste2 at pci2 dev 6 function 0 "D-Link 550TX" rev 0x14: apic 2 int 23 (irq 9),
address 00:05:5d:6d:a9:d4
ukphy2 at ste2 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste3 at pci2 dev 7 function 0 "D-Link 550TX" rev 0x14: apic 2 int 20 (irq 9),
address 00:05:5d:6d:a9:d5
ukphy3 at ste3 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ppb2 at pci1 dev 13 function 0 "Intel S21152BB PCI-PCI" rev 0x00
pci3 at ppb2 bus 3
ste4 at pci3 dev 4 function 0 "D-Link 550TX" rev 0x14: apic 2 int 21 (irq 9),
address 00:05:5d:6d:a9:e6
ukphy4 at ste4 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste5 at pci3 dev 5 function 0 "D-Link 550TX" rev 0x14: apic 2 int 22 (irq 9),
address 00:05:5d:6d:a9:e7
ukphy5 at ste5 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste6 at pci3 dev 6 function 0 "D-Link 550TX" rev 0x14: apic 2 int 23 (irq 9),
address 00:05:5d:6d:a9:e8
ukphy6 at ste6 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ste7 at pci3 dev 7 function 0 "D-Link 550TX" rev 0x14: apic 2 int 20 (irq 9),
address 00:05:5d:6d:a9:e9
ukphy7 at ste7 phy 1: Generic IEEE 802.3u media interface, rev. 0: OUI
0x0090c3, model 0x0004
ichpcib0 at pci0 dev 31 function 0 "Intel 82801DB LPC" rev 0x01
pciide0 at pci0 dev 31 function 1 "Intel 82801DB IDE" rev 0x01: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
wd1 at pciide0 channel 0 drive 1: 
wd1: 16-sector PIO, LBA, 19092MB, 39102336 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  ATAPI 5/cdrom
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
mtrr: Pentium Pro MTRR support
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
syncing disks... done
OpenBSD 4.8 (GENERIC) #136: Mon Aug 16 09:06:23 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) CPU 1.70GHz ("GenuineIntel" 686-class) 1.69 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM
real mem  = 528027648 (503MB)
avail mem = 509431808 (485MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 05/15/02, BIOS32 rev. 0 @ 0xf1e60,
SMBIOS rev. 2.3 @ 0xf0040 (48 entries)
bios0: vendor Award Software, Inc. version "ASUS P4B533-V ACPI BIOS Revision
1002" date 05/15/2002
bios0: ASUSTeK Computer INC. P4B533-V
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP BOOT APIC
acpi0: wakeup devices PCI1(S4) PCI2(S4) UAR1(S4) USB0(S4) USB1(S4) USB2(S4)
US20(S4) AC97(S4) PCI0(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
ioapic0 at mainbus0: ap

Re: Unattended OpenBSD Installation

2010-11-14 Thread OpenBSD Geek
How can i test your 'redux' ?
I found that : http://www.hiqu.biz/
thanks for your replies

Cheers,

Wesley MOUEDINE ASSABY
www.mouedine.net


On Sun, 14 Nov 2010 11:31:52 -0700, Nick Bender  wrote:
> On Sun, Nov 14, 2010 at 10:10 AM, OpenBSD Geek 
> wrote:
>> Hi,
>> I read OpenBSD FAQ at
>> [url]http://www.openbsd.org/faq/fr/faq4.html#site[/url]
>> I understood well, that install.site/ Upgrade.site and of course
>> SiteXX.tgz is enabled at the end of the installation.
>>
>> My question, i boot on 4.7 RELEASE, choose "Install".
>> Is it possible to have an "true automatic installation" for example
don't
>> need to put mygate, myname, "root password" ... put all the answers in
a
>> script ? And so have an install without any interaction with the user ?
>>
>> I suppose not possible ? because all of that are in the "install.sub"
>> script (from bsd.rd)
> 
> You could have a look at http://nbender.com/install.netboot/install.html
> which
> is no longer current and was brittle and difficult to use.
> 
> I am currently working on  the next version which is much better - it
meets
> all your requirements. I'm calling it redux and I'm including the readme
> below.
> 
> What's left to do is additional testing, documentation, and updating for
> any
> changes in 4.8 (it is working now against 4.7).
> 
> -N
> 
> 
> 
> Welcome to redux, an OpenBSD automated installation framework.
> 
> redux enhances the standard OpenBSD installation procedure by
> enabling the following functionality:
> 
> 1. Record all choices made during an installation.
> 2. Enable an automated installation using recorded choices.
> 3. Allow interactive revision of a previously recorded
>installation session.
> 4. Provide support for network based fully automated
>installation using only tools provided by OpenBSD.
> 
> redux is ditributed as a Makefile, a set of patches to the
> standard installation scripts and a small number of additional
> installation scripts. Building the entire source tree is not
> required as redux uses an existing ditribution as the starting
> point. By default it assumes that the OpenBSD source tree is
> loaded in /usr/src and that the installation CD is mounted on
> /mnt (see the top of the makefile to adjust these locations).
> The output of the make process is a modified installation
> ramdisk which can be booted using pxeboot. The ramdisk could
> also be used to construct a boot CD which will be supported
> in a future release.
> 
> An effort has been made to minimize the changes to the default
> scripts to minimize ongoing maintenance as the base system
> evolves. A patch to the standard pxeboot program is also
> provided which enables additional network boot functionality
> for the i386 and amd64 architectures. redux has been tested on
> the i386 and amd64 architectures but should be usable on other
> architectures.



Re: Unattended OpenBSD Installation

2010-11-14 Thread Nick Holland
On 11/14/10 12:09, OpenBSD Geek wrote:
> Hi,
> I read OpenBSD FAQ at
> [url]http://www.openbsd.org/faq/fr/faq4.html#site[/url]
> I understood well, that install.site/ Upgrade.site and of course
> SiteXX.tgz is enabled at the end of the installation.
> 
> My question, i boot on 4.7 RELEASE, choose "Install".
> Is it possible to have an "true automatic installation" for example don't
> need to put mygate, myname, "root password" ... put all the answers in a
> script ? And so have an install without any interaction with the user ?
> 
> I suppose not possible ? because all of that are in the "install.sub"
> script (from bsd.rd)

did you actually read Stuart's response?

And of course, it's an open source system, as the interactive script can
install the system, it's obviously possible to write your own script to
do it automatically.  Not overly difficult, even.  Rough outline of one
way to do it:

Build a USB disk with a minimal OpenBSD install and all the desired
install files on it.
Write a script that runs on the USB disk and does the following:
* fdisk -iy desired disk
* disklabels, creating desired partitions
* newfs's the desired partitions
* mount them under (say) /mnt
* copy over kernels
* unpack desired *.tgz files
* install boot loader (faq14.html)
* copy over/create desired network config files
* copy over package files you want
* create an rc.firsttime file to install those packages on first native
boot.

Probably as easy to create your own script to do that as it is to learn,
configure and use someone else's "automatic install" script that makes
assumptions that don't quite match yours.

OpenBSD is really simple, no magic takes place in the install process
that you can't easily replicate.  The magic is making it work off one
floppy disk on any platform that takes floppies.

Nick.

> 
> Thanks.
> 
> On Sun, 14 Nov 2010 10:32:21 + (UTC), Stuart Henderson
>  wrote:
>> On 2010-11-14, OpenBSD Geek  wrote:
>>> Hi,
>>>
>>> I read FAQ, and found nothing about "install.site" script.
>>> And tried : man install.site, give me nothing.
>>>
>>> Is there someone that can explain me how to do a unattended
> installation
>>> ?
>> 
>>> I wish for example have this by default :
>>> - Keyboard "fr".
>>> - myname : "puffy"
>>> - DomainName : "secure.lan"
>>> - IPv4 : 10.10.10.1/24
>>> - mygate : 10.10.10.10/24
>>> - IPv6 : none
>>> - Root password : "betatest"
>>> - Create a user : "debug" member of "wheel"
>> 
>> you can do these parts by overwriting/adding to the configuration
>> files, see faq 4. you can also do things like adding lines to
>> /etc/rc.firsttime to install any packages you need.
>> 
>>> - use the whole disk and auto layout
>>> - Install all sets except -x* and -g*
>> 
>> this is beyond the scope of install.site/siteXX.tgz, these files
>> are for additional steps after the main installation is complete,
>> not a complete unattended installation.



Re: Adaptec 5805Z

2010-11-14 Thread Nick Holland
On 11/14/10 08:59, Kapetanakis Giannis wrote:
> Hi,
> 
> I'd like to ask if anyone is using Adaptec 5805Z sata/sas raid 
> controller on OpenBSD.
> Is this device tested/supported?
> 
> I guess not cause it's not mentioned anywhere on the man pages, aac(4) 
> etc or the supported hardware web page.
> 
> regards,
> 
> Giannis

Don't hold me to it, but I do believe that is EXACTLY the model involved
in the following events:

http://marc.info/?l=openbsd-misc&m=125783114503531&w=2
http://marc.info/?l=openbsd-misc&m=126775051500581&w=2
http://marc.info/?l=openbsd-misc&m=128779369427908&w=2

(Read 'em in order)

Adaptec: another way of saying "my data is not important"
Adaptec: unsafe on any platform.

Nick.



Re: Unattended OpenBSD Installation

2010-11-14 Thread Nick Bender
On Sun, Nov 14, 2010 at 10:10 AM, OpenBSD Geek  wrote:
> Hi,
> I read OpenBSD FAQ at
> [url]http://www.openbsd.org/faq/fr/faq4.html#site[/url]
> I understood well, that install.site/ Upgrade.site and of course
> SiteXX.tgz is enabled at the end of the installation.
>
> My question, i boot on 4.7 RELEASE, choose "Install".
> Is it possible to have an "true automatic installation" for example don't
> need to put mygate, myname, "root password" ... put all the answers in a
> script ? And so have an install without any interaction with the user ?
>
> I suppose not possible ? because all of that are in the "install.sub"
> script (from bsd.rd)

You could have a look at http://nbender.com/install.netboot/install.html which
is no longer current and was brittle and difficult to use.

I am currently working on  the next version which is much better - it meets
all your requirements. I'm calling it redux and I'm including the readme below.

What's left to do is additional testing, documentation, and updating for any
changes in 4.8 (it is working now against 4.7).

-N



Welcome to redux, an OpenBSD automated installation framework.

redux enhances the standard OpenBSD installation procedure by
enabling the following functionality:

1. Record all choices made during an installation.
2. Enable an automated installation using recorded choices.
3. Allow interactive revision of a previously recorded
   installation session.
4. Provide support for network based fully automated
   installation using only tools provided by OpenBSD.

redux is ditributed as a Makefile, a set of patches to the
standard installation scripts and a small number of additional
installation scripts. Building the entire source tree is not
required as redux uses an existing ditribution as the starting
point. By default it assumes that the OpenBSD source tree is
loaded in /usr/src and that the installation CD is mounted on
/mnt (see the top of the makefile to adjust these locations).
The output of the make process is a modified installation
ramdisk which can be booted using pxeboot. The ramdisk could
also be used to construct a boot CD which will be supported
in a future release.

An effort has been made to minimize the changes to the default
scripts to minimize ongoing maintenance as the base system
evolves. A patch to the standard pxeboot program is also
provided which enables additional network boot functionality
for the i386 and amd64 architectures. redux has been tested on
the i386 and amd64 architectures but should be usable on other
architectures.



ESXi client / NFS server performance

2010-11-14 Thread Steven Surdock
Greetings, I'm attempting to use an OBSD 4.8-stable machine as an NFS
server for storing snapshots from an ESXi 3.5 server.  Unfortunately my
NFS performance seems relatively poor at about 55 Mbps (6 MBps).  Both
machines are linked up at 1 Gbps via an HP ProCurve 1850G and I'm
writing to wd0.  I've looked at disk i/o, upped
net.inet.tcp.recvspace/sendspace (NFS session is using TCP) and done my
share of googling, but I'm at a bit of a loss on how to figure out where
my problem lies.  Any pointers would be appreciated.

##/etc/fstab:
...
/dev/wd0g /home ffs rw,nodev,nosuid,softdep 1 2

##dmesg:

OpenBSD 4.8-stable (GENERIC) #0: Mon Oct 25 13:02:04 EDT 2010
r...@builder03:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) D CPU 2.80GHz ("GenuineIntel" 686-class) 2.80
GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID
,CX16,xTPR
real mem  = 1064726528 (1015MB)
avail mem = 1037348864 (989MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 08/02/07, BIOS32 rev. 0 @ 0xf0010,
SMBIOS rev. 2.5 @ 0xfd5f0 (21 entries)
bios0: vendor American Megatrends Inc. version "V5.6" date 08/02/2007
bios0: MICRO-STAR INTERNATIONAL CO.,LTD MS-7267
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC MCFG SLIC OEMB
acpi0: wakeup devices PS2K(S4) PS2M(S4) EUSB(S4) MC97(S4) P0P4(S4)
P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4) P0P9(S4) USB0(S1) USB1(S1) USB2(S1)
USB3(S1) P0P2(S4) P0P1(S4) SLPB(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (P0P4)
acpiprt2 at acpi0: bus -1 (P0P5)
acpiprt3 at acpi0: bus -1 (P0P6)
acpiprt4 at acpi0: bus -1 (P0P7)
acpiprt5 at acpi0: bus -1 (P0P8)
acpiprt6 at acpi0: bus -1 (P0P9)
acpiprt7 at acpi0: bus 2 (P0P2)
acpicpu0 at acpi0
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
bios0: ROM list: 0xc/0xaa00! 0xcb000/0x1200
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945G Host" rev 0x02
vga1 at pci0 dev 2 function 0 "Intel 82945G Video" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xe000, size 0x1000
inteldrm0 at vga1: apic 2 int 16 (irq 10)
drm0 at inteldrm0
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01:
apic 2 int 16 (irq 10)
azalia0: codecs: Realtek ALC883
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01: apic 2 int
16 (irq 10)
pci1 at ppb0 bus 1
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2 int
23 (irq 5)
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2 int
19 (irq 11)
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 2 int
18 (irq 7)
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: apic 2 int
16 (irq 10)
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 2 int
23 (irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xe1
pci2 at ppb1 bus 2
dc0 at pci2 dev 1 function 0 "ADMtek AN983" rev 0x11: apic 2 int 17 (irq
10), address 00:04:5a:54:a7:5b
acphy0 at dc0 phy 1: AC_UNKNOWN 10/100 PHY, rev. 0
ami0 at pci2 dev 2 function 0 "AMI MegaRAID" rev 0x02: apic 2 int 18
(irq 7)
ami0: AMI MegaRAID i4, 64b/lhc, FW N661, BIOS v1.01, 16MB RAM
ami0: 4 channels, 0 FC loops, 1 logical drives
scsibus0 at ami0: 1 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct
fixed
sd0: 476938MB, 512 bytes/sec, 976769024 sec total
re0 at pci2 dev 4 function 0 "Realtek 8169SC" rev 0x10: RTL8169/8110SCd
(0x1800), apic 2 int 20 (irq 11), address 00:16:17:d9:9f:a3
rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2
ichpcib0 at pci0 dev 31 function 0 "Intel 82801GB LPC" rev 0x01: PM
disabled
pciide0 at pci0 dev 31 function 1 "Intel 82801GB IDE" rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 1: 
wd0: 16-sector PIO, LBA48, 476940MB, 976773168 sectors
wd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 5
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 31 function 2 "Intel 82801GB SATA" rev 0x01: DMA,
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide1: using apic 2 int 19 (irq 11) for native-PCI interrupt
wd1 at pciide1 channel 0 drive 0: 
wd1: 16-sector PIO, LBA48, 152627MB, 312581808 sectors
wd1(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 6
wd2 at pciide1 channel 1 drive 1: 
wd2: 16-sector PIO, LBA48, 381554MB, 781422768 sectors
wd2(pciide1:1:1): using PIO mode 4, Ultra-DMA mode 6
ichii

Re: pf logs - no packet header data (4.8)

2010-11-14 Thread Otto Moerbeek
On Sun, Nov 14, 2010 at 06:27:38PM +0100, Johan Helsingius wrote:

> Hi!
> 
> Setting up a firewall with 4.8, I was rather surprised
> to see that I don get any logged info from the blocked
> packets (beyond the fact that they were blocked).
> 
> I assume I am missing some silly little thing...
> 
> # tcpdump -n -e -ttt -i pflog0
> tcpdump: listening on pflog0, link-type PFLOG
> Nov 14 18:24:28.487932 rule 5/(match) block in on xl0: [|ip]
> Nov 14 18:24:39.836219 rule 5/(match) block in on xl0: [|ip]
> Nov 14 18:24:41.776013 rule 5/(match) block in on xl0: [|ip]
> Nov 14 18:24:50.566842 rule 5/(match) block in on xl0: [|ip]
> 
> Cheers,
> 
>   Julf

Increase your snaplen using -s

-Otto



pf logs - no packet header data (4.8)

2010-11-14 Thread Johan Helsingius
Hi!

Setting up a firewall with 4.8, I was rather surprised
to see that I don get any logged info from the blocked
packets (beyond the fact that they were blocked).

I assume I am missing some silly little thing...

# tcpdump -n -e -ttt -i pflog0
tcpdump: listening on pflog0, link-type PFLOG
Nov 14 18:24:28.487932 rule 5/(match) block in on xl0: [|ip]
Nov 14 18:24:39.836219 rule 5/(match) block in on xl0: [|ip]
Nov 14 18:24:41.776013 rule 5/(match) block in on xl0: [|ip]
Nov 14 18:24:50.566842 rule 5/(match) block in on xl0: [|ip]

Cheers,

Julf



Re: Unattended OpenBSD Installation

2010-11-14 Thread OpenBSD Geek
Hi,
I read OpenBSD FAQ at
[url]http://www.openbsd.org/faq/fr/faq4.html#site[/url]
I understood well, that install.site/ Upgrade.site and of course
SiteXX.tgz is enabled at the end of the installation.

My question, i boot on 4.7 RELEASE, choose "Install".
Is it possible to have an "true automatic installation" for example don't
need to put mygate, myname, "root password" ... put all the answers in a
script ? And so have an install without any interaction with the user ?

I suppose not possible ? because all of that are in the "install.sub"
script (from bsd.rd)

Thanks.

On Sun, 14 Nov 2010 10:32:21 + (UTC), Stuart Henderson
 wrote:
> On 2010-11-14, OpenBSD Geek  wrote:
>> Hi,
>>
>> I read FAQ, and found nothing about "install.site" script.
>> And tried : man install.site, give me nothing.
>>
>> Is there someone that can explain me how to do a unattended
installation
>> ?
> 
>> I wish for example have this by default :
>> - Keyboard "fr".
>> - myname : "puffy"
>> - DomainName : "secure.lan"
>> - IPv4 : 10.10.10.1/24
>> - mygate : 10.10.10.10/24
>> - IPv6 : none
>> - Root password : "betatest"
>> - Create a user : "debug" member of "wheel"
> 
> you can do these parts by overwriting/adding to the configuration
> files, see faq 4. you can also do things like adding lines to
> /etc/rc.firsttime to install any packages you need.
> 
>> - use the whole disk and auto layout
>> - Install all sets except -x* and -g*
> 
> this is beyond the scope of install.site/siteXX.tgz, these files
> are for additional steps after the main installation is complete,
> not a complete unattended installation.



Re: My pf.conf and an nmap scan

2010-11-14 Thread Peter N. M. Hansteen
Kevin Chadwick  writes:

> I'd say drop mode saves some resources in case of dos and does slow down
> the scan. I don't see timeouts for users connecting to the wrong place
> as a big problem at all, though the messages may help them
> very occasionally.

For the drop vs return issue there seems to be two schools that never
quite agree, but for the DOS cases, the adaptive timeouts will help.
For the bruteforcers, there's always overload tables and various forms
of special treatment.

> I wonder whether a labrea/stutter type option for pf would be cool in
> some cases?

a tiny queue and pass with some negligible value for probability?

- Peter

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: My pf.conf and an nmap scan

2010-11-14 Thread Kevin Chadwick
On Fri, 12 Nov 2010 17:29:53 -0500
Chris Smith  wrote:

> On Fri, Nov 12, 2010 at 5:06 PM, David Astua  wrote:
> > Check this:
> > http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-reject
> 
> Good article. "Stealth" mode is highly overrated. I generally use
> return except in the case of bogons.
> 

I'd say drop mode saves some resources in case of dos and does slow down
the scan. I don't see timeouts for users connecting to the wrong place
as a big problem at all, though the messages may help them
very occasionally.

I wonder whether a labrea/stutter type option for pf would be cool in
some cases?



ath0 in cardbus didn't resume in 4.8

2010-11-14 Thread Sergey Bronnikov
Hello!

I have installed 4.8 release on my IBM T43 recently.
Suspend works great, but my atheros wi-fi card didn't resume and following 
lines appears after resuming:

cbb0: bad Vcc request. sock_ctrl 0xff8f, sock_status 0x
ath0 detached
cbb0: bad Vcc request. sock_ctrl 0xff88, sock_status 0x

On release page for 4.8 are present following words:
*  ACPI-based suspend/resume works on most machines with Intel/ATI video. 
Machines using NVidia graphics will not resume the graphics. cardbus(4) 
and pcmcia(4) will still have some problems, too.  

So I suggest that it is known issue for 4.8 release... 

dmesg before suspend:

OpenBSD 4.8 (GENERIC) #136: Mon Aug 16 09:06:23 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.73GHz ("GenuineIntel" 686-class) 799 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
real mem  = 459763712 (438MB)
avail mem = 442286080 (421MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 05/29/07, BIOS32 rev. 0 @ 0xfd740, SMBIOS 
rev. 2.33 @ 0xe0010 (64 entries)
bios0: vendor IBM version "70ET69WW (1.29 )" date 05/29/2007
bios0: IBM 1871FYG
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT TCPA APIC MCFG BOOT
acpi0: wakeup devices LID_(S3) SLPB(S3) UART(S3) EXP0(S4) EXP1(S4) EXP2(S4) 
EXP3(S4) PCI1(S4) DOCK(S4) USB0(S3) USB1(S3) USB3(S3) USB7(S3) AC9M(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (EXP0)
acpiprt2 at acpi0: bus -1 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus -1 (EXP3)
acpiprt5 at acpi0: bus 4 (PCI1)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpipwrres0 at acpi0: PUBS
acpitz0 at acpi0: critical temperature 99 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "IBM-92P1087" serial 11515 type LION oem "SANYO"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: DOCK not docked (0)
bios0: ROM list: 0xc/0xf600! 0xcf800/0x1600 0xd1000/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0: Enhanced SpeedStep 799 MHz: speeds: 1733, 1333, 1066, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82915GM Host" rev 0x03
vga1 at pci0 dev 2 function 0 "Intel 82915GM Video" rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xb000, size 0x1000
inteldrm0 at vga1: apic 1 int 16 (irq 11)
drm0 at inteldrm0
"Intel 82915GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
ppb0 at pci0 dev 28 function 0 "Intel 82801FB PCIE" rev 0x03: apic 1 int 20 
(irq 11)
pci1 at ppb0 bus 2
bge0 at pci1 dev 0 function 0 "Broadcom BCM5751M" rev 0x11, BCM5750 B1 
(0x4101): apic 1 int 16 (irq 11), address 00:11:25:d5:f4:19
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
ppb1 at pci0 dev 28 function 2 "Intel 82801FB PCIE" rev 0x03: apic 1 int 22 
(irq 11)
pci2 at ppb1 bus 3
uhci0 at pci0 dev 29 function 0 "Intel 82801FB USB" rev 0x03: apic 1 int 16 
(irq 11)
uhci1 at pci0 dev 29 function 1 "Intel 82801FB USB" rev 0x03: apic 1 int 17 
(irq 11)
uhci2 at pci0 dev 29 function 2 "Intel 82801FB USB" rev 0x03: apic 1 int 18 
(irq 11)
uhci3 at pci0 dev 29 function 3 "Intel 82801FB USB" rev 0x03: apic 1 int 19 
(irq 11)
ehci0 at pci0 dev 29 function 7 "Intel 82801FB USB" rev 0x03: apic 1 int 19 
(irq 11)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb2 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xd3
pci3 at ppb2 bus 4
cbb0 at pci3 dev 0 function 0 "TI PCI1510 CardBus" rev 0x00: apic 1 int 16 (irq 
11)
iwi0 at pci3 dev 2 function 0 "Intel PRO/Wireless 2200BG" rev 0x05: apic 1 int 
21 (irq 11), address 00:12:f0:ea:e4:65
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 5 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
auich0 at pci0 dev 30 function 2 "Intel 82801FB AC97" rev 0x03: apic 1 int 22 
(irq 11), ICH6 AC97
ac97: codec id 0x41445374 (Analog Devices AD1981B)
ac97: codec features headphone, 20 bit DAC, No 3D Stereo
audio0 at auich0
ichpcib0 at pci0 dev 31 function 0 "Intel 82801FBM LPC" rev 0x03: PM disabled
pciide0 at pci0 dev 31 function 2 "Intel 82801FBM SATA" rev 0x03: DMA, channel 
0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0

Re: net.inet.tcp sysctl's

2010-11-14 Thread Ben Aitchison
On Sat, Nov 06, 2010 at 03:47:54PM +0100, Claudio Jeker wrote:
> On Sat, Nov 06, 2010 at 02:13:46PM +0100, Jan Stary wrote:
> > For some time now, I have been using the following sysctl's
> > mentioned in FAQ 6.6.4, which sped up my network traffic
> > considerably:
> > 
> > net.inet.tcp.recvspace
> > net.inet.tcp.sendspace
> > net.inet.udp.recvspace
> > net.inet.udp.sendspace
> > 
> > Now that I have reinstalled with current/amd64, the tcp ones
> > seem to have disappeared (while the udp ones are still there).
> > 
> > Am I missing something?
> > 
> 
> No. The TCP ones are gone, enjoy fast downloads without pushing buttons.
> The automatic TCP windowscaling in -current makes the global tcp.recvspace
> and tcp.sendspace superfluous.


I've found that receiving traffic from Linux hosts with timestamps turned
off has decreased in performance with the new window scaling.  Is this because
the RTT cannot be determined.  Or an oversight?

The thing is in general timestamps don't seem to improve things a lot, and take
up an extra 12 bytes if you're otherwise not using TCP options.

I was doing tcpdumps etc, and found that basically the window size doesn't raise
above 16k like the old default.  But in general I've been setting TCP window 
size
manually for a long time.

I also noticed that now OpenBSD seems to be faster at sending data than Linux to
my home ADSL link from a closeish connection. :)

Also I was wondering if making the initial cwnd window size be tunable as been
taken into consideration.  As well as being able to run-time tune the maximum
window size above 256k. (or below)

I poked around in the source a little.  And I noticed that I could tune maximum
window size up to 1024k and could change the minimum window size up.  But I am 
at
a loss to understand if it's possible to use > 64k window size on hosts without
timestamps (because I saw the window size set being advertised directly before 
it
is known whether there was window scaling or not) and whether memory pressure
could lead to issues from bigger buffers.  ie does something else have to be
raised assuming one has sufficient memory and bandwidth/latency.

In my own testing I noticed a speed jump from 14 to 31 megabit going from a 256k
to 1024k maximum window size.  Which to me seems significant.  

Ben.



Adaptec 5805Z

2010-11-14 Thread Kapetanakis Giannis

Hi,

I'd like to ask if anyone is using Adaptec 5805Z sata/sas raid 
controller on OpenBSD.

Is this device tested/supported?

I guess not cause it's not mentioned anywhere on the man pages, aac(4) 
etc or the supported hardware web page.


regards,

Giannis



Re: scrotwm hangs X after update to 4.8

2010-11-14 Thread William Graeber
On Wed, Nov 3, 2010 at 11:24, Gregory Edigarov  wrote:
> It now seems like 4.7's X on 4.8 base system (yes I know it's bad and
> unsupported but that's where I left after all) works perfectly with DRI
> turned off. However, there were hungups when I've been trying to run
> 4.7's with DRI, AND 4.8's X whether I turn DRI on or off.

In my case, upgrading to current has solved the issue (as far as I can
tell after a few hours' use) as long as I don't suspend the system -
then I get some weird artifacts upon resume, although no crashes.



Re: Unattended OpenBSD Installation

2010-11-14 Thread Stuart Henderson
On 2010-11-14, OpenBSD Geek  wrote:
> Hi,
>
> I read FAQ, and found nothing about "install.site" script.
> And tried : man install.site, give me nothing.
>
> Is there someone that can explain me how to do a unattended installation ?

> I wish for example have this by default :
> - Keyboard "fr".
> - myname : "puffy"
> - DomainName : "secure.lan"
> - IPv4 : 10.10.10.1/24
> - mygate : 10.10.10.10/24
> - IPv6 : none
> - Root password : "betatest"
> - Create a user : "debug" member of "wheel"

you can do these parts by overwriting/adding to the configuration
files, see faq 4. you can also do things like adding lines to
/etc/rc.firsttime to install any packages you need.

> - use the whole disk and auto layout
> - Install all sets except -x* and -g*

this is beyond the scope of install.site/siteXX.tgz, these files
are for additional steps after the main installation is complete,
not a complete unattended installation.



[ACPI] ASUS AT3GC-I

2010-11-14 Thread Benjamin GUILLER
Hello world,

I am using an ASUS AT3GC-I motherboard.
I have installed OpenBSD 4.8 i386 on it.

Everything is well except the ACPI support, indeed, when I press the
power button (while the OS is running), the OS put itself into
suspend mode (the hard-drive stops and CPU powers off).

But I would like that when I press the power button (again, while the
OS is running) the OS starts the shutdown procedure, like on
OpenBSD 4.7.

Regards