Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread ML mail
Thanks to all of you for this interesting discussion. My OpenBSD firewall will 
only be doing PF as I totally agree that a firewall should have the least 
userland application running as possible of course if your budget permits it. 
So far I have around 340 rules (as the number of lines in the output of a pf 
-sr) and a state table of around 12-20k entries depending the time of the day. 
As per your recommendations I will go with a higher CPU frequency and less 
cores as packet filtering still only takes place on one single core. I might 
also experiment if I should use bsd.mp or the standard non SMP bsd.

I also agree with Nick that CPU is of course not the only criteria but the rest 
I have luckily already sorted out :) For example by using nice and modern Intel 
10 Gbit/s NICs, CompactFlash industrial grade flash storage, redundant setup 
with 2 firewalls and CARP, etc. OpenBSD does a great job here, I don't even 
want to imagine the price of such a setup with C***o hardware.

Cheers



Re: OpenBSD Tablet-ish

2015-02-19 Thread Luis Coronado
sharp zaurus?

Sent from my iPad not running obsd :)

 On 19/2/2015, at 13:15, Jack Woehr jwo...@softwoehr.com wrote:
 
 What's the smallest, most tablet-ish device I can put OpenBSD on? Want to 
 travel and stay connected.
 
 -- 
 Jack Woehr   # There's too much emphasis on things
 Box 51, Golden CO 80402  #  like pawn structure in modern chess.
 http://www.softwoehr.com #  Checkmate ends the game. - N. Shor



Re: OpenBSD Tablet-ish

2015-02-19 Thread Christopher Barry
On Thu, 19 Feb 2015 13:23:47 -0600
Luis Coronado lcoron...@ticoit.com wrote:

sharp zaurus?

Sent from my iPad not running obsd :)

 On 19/2/2015, at 13:15, Jack Woehr jwo...@softwoehr.com wrote:
 
 What's the smallest, most tablet-ish device I can put OpenBSD on?
 Want to travel and stay connected.
 
 -- 
 Jack Woehr   # There's too much emphasis on things
 Box 51, Golden CO 80402  #  like pawn structure in modern chess.
 http://www.softwoehr.com #  Checkmate ends the game. - N. Shor


AFAICT, only the BI-L10 does networking, according to wikipedia.

--
Regards,
Christopher Barry

Random geeky fortune:
Slowly and surely the unix crept up on the Nintendo user ...



OpenBSD Tablet-ish

2015-02-19 Thread Jack Woehr

What's the smallest, most tablet-ish device I can put OpenBSD on? Want to 
travel and stay connected.

--
Jack Woehr   # There's too much emphasis on things
Box 51, Golden CO 80402  #  like pawn structure in modern chess.
http://www.softwoehr.com #  Checkmate ends the game. - N. Shor



Re: OpenBSD firefox useragent Facebook

2015-02-19 Thread Stuart Henderson
On 2015-02-19, Erling Westenvik erling.westen...@gmail.com wrote:
 Since yesterday I've tried installing -current, then 5.6 and finally
 5.5, on another workstation. I've also tried different network
 connections and disabling PF. And I've tried Chrome, Seamonkey and
 xombrero. Tagging in Facebook comments simply doesn't work in any
 browser on any OpenBSD computer I have, but works fine on any Windows
 computer.

Have you reported this to facebook? There's a link on
https://www.facebook.com/help/191905394245544, I'm sure they would
like to fix things so you can continue to contribute to their face
recognition database ;)



Re: OpenBSD Tablet-ish

2015-02-19 Thread Robert
On Thu, 19 Feb 2015 13:23:47 -0600
Luis Coronado lcoron...@ticoit.com wrote:
 sharp zaurus?

Anything that can be acquired outside of a museum? ;)

Has someone tested OpenBSD on one of the current (Atom/Windows-based) 8-10 
tablets?
E.g., Lenovo Yoga 2 or Ideapad
They seem to have a BIOS that can be configured; maybe Secure Boot can be 
disabled...

Or any other suggestion for:
* 8-10, ~1920x1200
* Wi-Fi
* LTE / 3G
* ~ 0,5kg

(I'm currently using an X61s, but even that feels a bit bulky...)

regards,
Robert



APC Power Backup Solutions - Limited Stock

2015-02-19 Thread Elbert Smith
View Online ( http://admin.firstshop.co.za/Communication/ups-apc/index.html )

( https://www.facebook.com/firsttech.shop? )

( https://plus.google.com/+FirstshopCoZaonline/posts?review=1 )

( https://twitter.com/FirsttechShop )

( http://www.linkedin.com/company/first-technology )

( http://www.firstshop.co.za/ )

Electricity
blackouts have become a reality.

By attaching a
UPS to your computer gives you the peace of mind to finish those
critical tasks. Safely shut down your computer without losing
your unsaved work.

( http://www.firstshop.co.za/apc-back-ups-500ci-ups-BX500CI-p-21533 )

APC Back-UPS 500CI - UPS - 300 Watt - 500 VA ( 
http://www.firstshop.co.za/apc-back-ups-500ci-ups-BX500CI-p-21533 )

View Now ( http://www.firstshop.co.za/apc-back-ups-500ci-ups-BX500CI-p-21533 )

( http://www.firstshop.co.za/apc-back-ups-cs-325-BK325I-p-19145 )

APC Back-UPS CS 325 - UPS - 210 Watt - 350 VA ( 
http://www.firstshop.co.za/apc-back-ups-cs-325-BK325I-p-19145 )

View Now ( http://www.firstshop.co.za/apc-back-ups-cs-325-BK325I-p-19145 )

( http://www.firstshop.co.za/apc-back-ups-bx650ci-ups-BX650CI-ZA-p-12836 )

APC Back-UPS BX650CI - UPS ( 
http://www.firstshop.co.za/apc-back-ups-bx650ci-ups-BX650CI-ZA-p-12836 )

View Now ( 
http://www.firstshop.co.za/apc-back-ups-bx650ci-ups-BX650CI-ZA-p-12836 )

( http://www.firstshop.co.za/apc-back-ups-650va-ups-BX650CI-AF-p-15647 )

APC Back-UPS 650VA - UPS ( 
http://www.firstshop.co.za/apc-back-ups-650va-ups-BX650CI-AF-p-15647 )

View Now ( http://www.firstshop.co.za/apc-back-ups-650va-ups-BX650CI-AF-p-15647 
)

( http://www.firstshop.co.za/apc-back-ups-800-ups-BX800CI-ZA-p-19152 )

APC Back-UPS 800 - UPS ( 
http://www.firstshop.co.za/apc-back-ups-800-ups-BX800CI-ZA-p-19152 )

View Now ( http://www.firstshop.co.za/apc-back-ups-800-ups-BX800CI-ZA-p-19152 )

( http://www.firstshop.co.za/apc-smart-ups-sc-420va-SC420I-p-19310 )

APC Smart-UPS SC 420VA ( 
http://www.firstshop.co.za/apc-smart-ups-sc-420va-SC420I-p-19310 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-sc-420va-SC420I-p-19310 )

( http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-ZA-p-19150 )

APC Back-UPS 1100 - UPS ( 
http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-ZA-p-19150 )

View Now ( http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-ZA-p-19150 
)

( http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-p-13067 )

APC Back-UPS 1100 - UPS ( 
http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-p-13067 )

View Now ( http://www.firstshop.co.za/apc-back-ups-1100-ups-BX1100CI-p-13067 )

( http://www.firstshop.co.za/apc-back-ups-pro-900-BR900GI-p-12207 )

APC Back-UPS Pro 900 - UPS - 540 Watt - 900 VA ( 
http://www.firstshop.co.za/apc-back-ups-pro-900-BR900GI-p-12207 )

View Now ( http://www.firstshop.co.za/apc-back-ups-pro-900-BR900GI-p-12207 )

( http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750I-p-20324 )

APC Smart-UPS 750 LCD - UPS - 500 Watt - 750 VA ( 
http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750I-p-20324 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750I-p-20324 )

( http://www.firstshop.co.za/apc-smart-ups-c-1000va-SMC1000I-p-20315 )

APC Smart-UPS C 1000VA LCD - UPS - 600 Watt - 1000 VA ( 
http://www.firstshop.co.za/apc-smart-ups-c-1000va-SMC1000I-p-20315 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-c-1000va-SMC1000I-p-20315 )

( http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000I-p-20316 )

APC Smart-UPS 1000 LCD - UPS - 700 Watt - 1000 VA ( 
http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000I-p-20316 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000I-p-20316 )

( http://www.firstshop.co.za/apc-smart-ups-c-1500va-SMC1500I-p-19316 )

APC Smart-UPS C 1500VA LCD - UPS - 980 Watt - 1500 VA ( 
http://www.firstshop.co.za/apc-smart-ups-c-1500va-SMC1500I-p-19316 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-c-1500va-SMC1500I-p-19316 )

( http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750RMI2U-p-20325 )

APC Smart-UPS 750 LCD - UPS - 500 Watt - 750 VA ( 
http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750RMI2U-p-20325 )

View Now ( http://www.firstshop.co.za/apc-smart-ups-750-lcd-SMT750RMI2U-p-20325 
)

( http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000RMI2U-p-20317 )

APC Smart-UPS 1000 LCD - UPS - 700 Watt - 1000 VA ( 
http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000RMI2U-p-20317 )

View Now ( 
http://www.firstshop.co.za/apc-smart-ups-1000-lcd-SMT1000RMI2U-p-20317 )

( http://www.firstshop.co.za/apc-smart-ups-3000-lcd-SMT3000RMI2U-p-19319 )

APC Smart-UPS 3000 LCD - UPS - 2.7 kW - 3000 VA ( 
http://www.firstshop.co.za/apc-smart-ups-3000-lcd-SMT3000RMI2U-p-19319 )

View Now ( 
http://www.firstshop.co.za/apc-smart-ups-3000-lcd-SMT3000RMI2U-p-19319 )

( http://www.firstshop.co.za/apc-smart-ups-rt-ups-SURTD3000XLI-p-15465 )

APC Smart-UPS RT - UPS - 2.1 kW - 3000 VA ( 
http://www.firstshop.co.za/apc-smart-ups-rt-ups-SURTD3000XLI-p-15465 )

View Now ( 

Re: openbsd x2goclient

2015-02-19 Thread Joseph Oficre
There is the link to download core
http://rghost.net/private/6w74TMCmG/4d2da8398332941fb4c7d3ab86f6ea69

2015-02-19 12:07 GMT+03:00 Koko Wijatmoko k...@wijatmoko.name:

 You should post it to misc@, not private to me.

 On Thu, 19 Feb 2015 12:32:23 +0400
 Joseph Oficre seran...@gmail.com wrote:

  Oh, sorry, forgot about that.
  There is the link to download
  http://rghost.net/private/6w74TMCmG/4d2da8398332941fb4c7d3ab86f6ea69
 
  2015-02-19 11:27 GMT+03:00 Koko Wijatmoko k...@wijatmoko.name:
 
   On Thu, 19 Feb 2015 12:20:38 +0400
   Joseph Oficre seran...@gmail.com wrote:
  
But when i try to connect i get segmentation fault. Core file
attached below. Can someone help me to solve it, please?
   
   this list is not allowed to attach a file.
   put it somewhere else, and share the url here.
  
[demime 1.01d removed an attachment of type
application/octet-stream which had a name of x2goclient.core]



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Lars

On 19.02.2015 10:51, Peter Hessler wrote:


:choose the CPU with higher Frequency and less cores or for a CPU with
:lower frequency but more cores?

Higher frequency.  Period.



That is why I chose an i3-4000 as they go up to 3,8Ghz. i5-4000 only go 
up to 3,5Ghz. If you want to go even faster you will need to buy i7-4000 
with 4Ghz. But this one is 3 times the price of the i3. If you put the 
i3 on a board with C22x chipset, you can also use ECC RAM with the i3.


my 2ct

Lars



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Peter Hessler
On 2015 Feb 18 (Wed) at 22:30:31 + (+), ML mail wrote:
:Hi,
:
:Stupid question but if you would have to choose between two different
:Intel CPUs for an OpenBSD firewall using 4 to 6 Intel NICs with all /24
:networks behind and around 50-60 Mbit/s average traffic would you rather

Either one is perfectly fine for your traffic load.  You only have to
care once you get multi-gbit/s traffic (or over half a million pps) on
your system.

However.


:choose the CPU with higher Frequency and less cores or for a CPU with
:lower frequency but more cores?

Higher frequency.  Period.

Right now, network and PF processing is limited to CPU0.  You want that
as fast as possible.

Additionally, you want as fast memory transfers (from CPU to RAM) as
possible.

That will give you the most performance.



-- 
I call them as I see them.  If I can't see them, I make them up.
-- Biff Barf



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Martin Schröder
2015-02-19 10:58 GMT+01:00 Alexander Salmin alexan...@salmin.biz:
 Good luck, when you have time I also recommend that you read this.
 https://calomel.org/network_performance.html

The consensus here seems to be to warn against any tweaks etc. by calomel.



Re: Performance Counters

2015-02-19 Thread Boudewijn Dijkstra

Op Wed, 18 Feb 2015 10:15:26 +0100 schreef Sai Prajeeth cspraje...@gmail.com:

Is there any command that will let me access the processor's performance
counters?? I am looking for something like Linux's perf / FreeBSDs pmcstat
that will help me get the IPC (Instructions per cycle) of the system.


$ apropos 'performance counter'
pctr(1) - display CPU performance counters
pctr(4/amd64) - driver for CPU performance counters
pctr(4/i386) - driver for CPU performance counters
uperf(4/sparc64) - performance counters driver


--
(Remove the obvious prefix to reply privately.)
Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/



Re: Installing OpenBSD 5.6 using a USB Flash drive

2015-02-19 Thread Raimo Niskanen
On Wed, Feb 18, 2015 at 05:30:29PM +0100, Alexander Hall wrote:
 On February 18, 2015 11:43:56 AM CET, Markus Kolb open...@tower-net.de 
 wrote:
 Am 2015-02-17 17:27, schrieb A Y:
  dmesg|grep ^.d0 returns only sd0
  sysctl hw.disknames returns sd0 and rd0
  
  my machine is a 10.1 inch netbook Lenovo E10-30 running Intel Celeron
 
  N2830
  Dual Core 64 bit. Do you think I should have used amd64 installation 
  instead
  of i386?
 
 Will depend mostly on your available RAM.
 i386 is 32 bit.
 
 Either way, I see no reason not to run amd64 on that processor.

Won't i386 use less memory making it more efficient up to about 2 GB of RAM
which this machine has?

Of course, if RAM would be added you would regret not having installed
amd64...

 
 /Alexander 
 
 
 See https://en.wikipedia.org/wiki/RAM_limit#32-bit_x86_RAM_limit

-- 

/ Raimo Niskanen, Erlang/OTP, Ericsson AB



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Alexander Salmin
Good luck, when you have time I also recommend that you read this.
https://calomel.org/network_performance.html

On 2015-02-19 08:05:54, ML mail wrote:
 Thanks to all of you for this interesting discussion. My OpenBSD firewall 
 will only be doing PF as I totally agree that a firewall should have the 
 least userland application running as possible of course if your budget 
 permits it. So far I have around 340 rules (as the number of lines in the 
 output of a pf -sr) and a state table of around 12-20k entries depending 
 the time of the day. As per your recommendations I will go with a higher CPU 
 frequency and less cores as packet filtering still only takes place on one 
 single core. I might also experiment if I should use bsd.mp or the standard 
 non SMP bsd.
 
 I also agree with Nick that CPU is of course not the only criteria but the 
 rest I have luckily already sorted out :) For example by using nice and 
 modern Intel 10 Gbit/s NICs, CompactFlash industrial grade flash storage, 
 redundant setup with 2 firewalls and CARP, etc. OpenBSD does a great job 
 here, I don't even want to imagine the price of such a setup with C***o 
 hardware.
 
 Cheers



Anyone using a Supermicro X10SBA (Celeron J1900)?

2015-02-19 Thread Michael-John Turner
Hi

Is anyone running OpenBSD successfully on a Supermicro X10SBA board? It's a
Celeron J1900-based system. Specs are here:
http://www.supermicro.co.uk/products/motherboard/celeron/X10/X10SBA.cfm

I see that the Intel I210 NICs are supported by em(4) but I haven't managed
to find any reports of anyone using the board with OpenBSD and as it's a
Bay Trail-based system (which I know have been problematic for various
OSes) I'd like to be doubly sure before buying.

Thanks :)

Cheers, MJ
-- 
Michael-John Turner * m...@mjturner.net * http://mjturner.net/



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Markus Kolb

Am 2015-02-19 10:51, schrieb Peter Hessler:



:choose the CPU with higher Frequency and less cores or for a CPU with
:lower frequency but more cores?

Higher frequency.  Period.

Right now, network and PF processing is limited to CPU0.  You want that
as fast as possible.

Additionally, you want as fast memory transfers (from CPU to RAM) as
possible.

That will give you the most performance.


Is it as simple as Higher frequency.?
Shouldn't there be a view on the instruction sets mostly used in network 
traffic handling and cycle usage of these instructions?

Or is this equivalent at the up-to-date processors?
If not, it is possible that lower frequency is faster.



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Stuart Henderson
On 2015-02-19, Nick Holland n...@holland-consulting.net wrote:
 On 02/18/15 17:30, ML mail wrote:
 Hi,

 Stupid question but if you would have to choose between two different
 Intel CPUs for an OpenBSD firewall using 4 to 6 Intel NICs with all
 /24 networks behind and around 50-60 Mbit/s average traffic would you
 rather choose the CPU with higher Frequency and less cores or for a
 CPU with lower frequency but more cores?
 ...
 actually, I'd ask more useful questions.
 Realistically, most modern fast CPUs (let's leave out special cases 
 like the Intel Atom, though even that might do it for you) will do the 
 job just fine.

Modern Atoms (avoton, rangeley) will do just fine for this amount
of normal traffic. If the ruleset is super-complicated or if there
are very high PPS counts (which is by *far* more important than
absolute bandwidth) _or_ if there is a reasonable chance of that
happening during the expected life of the machine, then you might
need faster.

Just choosing between the two suggested CPUs and taking only the
basic description of workload into account I'd probably choose the
lower-power one.

  Or asked differently, which are the importants criteria to look at
 first for a CPU intended to be used in an OpenBSD firewall?

 Discussing the merits of a CPU that's 95% idle vs. one that's 90% idle 
 really misses a few points.  If I were looking for a box, I'd look at 
 more important issues:
 (in no particular order.  And your criteria WILL differ from mine)
 * How fast a machine boots.
 * Availability of repair and upgrade parts
 * Low cost, so I can get a second machine and CARP 'em together.
 * General usability of the system and support by OpenBSD
 * Good bus structure for application
 * Well-supported NICs
 * Power consumption.
 * Quiet
 * Simple

Availability of out-of-band console access. Working IPMI SOL with a
dedicated NIC as a minimum, but preferably a standard serial port.

Non-idiotic rack mounting hardware.



Re: Help needed: pkg_add dropps connections

2015-02-19 Thread Stuart Henderson
On 2015-02-18, Stefan Wollny stefan.wol...@web.de wrote:
 Am 02/18/15 um 17:08 schrieb Stuart Henderson:
 On 2015-02-18, Stefan Wollny stefan.wol...@web.de wrote:
 Could mss 1460 be the core of the issue? I have the following:
 
 ~ $ sudo cat /etc/pf.conf | grep mss match in all scrub (no-df
 random-id max-mss 1440)
 
 ~ $ sudo cat /etc/sysctl.conf | grep mss 
 net.inet.tcp.mssdflt=1440
 
 Neither of these make sense on a typical laptop, and they make me
 query what else you might have changed on the system.

Oh, so I see where you got these now.

PLEASE IGNORE CALOMEL DOT ORG, THE SITE GIVES BAD ADVICE.

 What does pfctl -si say?
 
 When you get the no route to host, what does e.g. route -n get
 8.8.8.8 say? (i.e. some host on the internet). Are you able to
 ping your fritzbox or the proxy-server at that time?
 

 Hi Stuart,

 to answer your question: No, the line is dead - I can't ping anything.

Well, I asked several questions, in the hope of trying to find out what's
actually going on rather than working around by bouncing the connections off
another machine. Oh well.

 But I just received off-list the suggestion from Gene that the
 environment variables might not being passed on to root. I followed
 his advice like so:

Yes various people had already mentioned that about sudo on-list too ;)



Re: Installing OpenBSD 5.6 using a USB Flash drive

2015-02-19 Thread Stuart Henderson
On 2015-02-18, A Y afyous...@hotmail.com wrote:
 I downloaded -current snapshot and used to install and guess
 what!
 I T   W O R K E D
 I am just so happy after spending 13 (yes thirteen) days of full time trying
 everything to make this work.

Good stuff. Now that it's working, it might be interesting to follow-up with
a list post including the dmesg which might give us clues as to why 5.6 didn't
work :-)

 As I said before, I spent all my life working on Windows and this is the first
 time I work on a non-Windows environment. Even the machine, I bought it 13
 days ago. So every thing was new to me.
 I would never have done it without your help, so thank you:

Good job for sticking at it; installation isn't usually this difficult.



Re: openbsd x2goclient

2015-02-19 Thread Joseph Oficre
Yeah, i've sent him letter too, but my second question is why is no
official x2goclient in ports :c It hurts me so much...

i got this, btw
#0  0x1ebf62404f7d in SessionButton::lessThen () from
/usr/local/bin/x2goclient
#1  0x1ebf62406ea5 in SessionButton::lessThen () from
/usr/local/bin/x2goclient
#2  0x1ec1cd691597 in QThreadPrivate::start () from
/usr/local/lib/libQtCore.so.9.0
#3  0x1ec1fe61997e in _rthread_start (v=Variable v is not available.
) at /usr/src/lib/librthread/rthread.c:145
#4  0x1ec260a2659b in __tfork_thread () at
/usr/src/lib/libc/arch/amd64/sys/tfork_thread.S:75
#5  0x in ?? ()
(gdb)

so its some kind of code problem, as i see

2015-02-19 15:53 GMT+03:00 Stuart Henderson s...@spacehopper.org:

 On 2015-02-19, Joseph Oficre seran...@gmail.com wrote:
  Hello.
  I have a question here. Why is x2goclient still unsupported? I
 mean..it's
  pretty free and i use x2go instead of NX.
  The only thing why i still dont use OpenBSD on my desktop is x2goclient.
  So once i've found this
  https://github.com/jasperla/openbsd-wip/tree/master/x11/x2goclient
  Successfully compiled (just need to change lrelease to lrelease4.
 
  But when i try to connect i get segmentation fault. Core file attached
  below. Can someone help me to solve it, please?
 
  [demime 1.01d removed an attachment of type application/octet-stream
 which had a name of x2goclient.core]

 Don't send core dumps. They are useless without the source code and
 exact binary you are running, and may contain sensitive information.
 A backtrace might give clues.

 gdb /path/to/program /path/to/file.core
 bt

 However as this for something on openbsd-wip you are probably better
 off talking to the person who added it there.



Re: ix(4) X710-DA4

2015-02-19 Thread Jonathan Gray
On Thu, Feb 19, 2015 at 10:11:36AM +0200, Or Elimelech wrote:
 Hi,
 
 I???m purchasing 2 new firewalls and I wonder if the ix(4) driver supports 
 X710-DA4
 
 Have anyone tried this in production?
 
 Thanks

Someone needs to port Intel's ixl/i40e driver from FreeBSD before those
cards will work.



Re: netstat output shuffles (new feature?)

2015-02-19 Thread Stuart Henderson
On 2015-02-18, patrick keshishian pkesh...@gmail.com wrote:
 it is due to new qsort code in netstat.

 ... so never mind.

Yep, big changes in netstat to avoid the need for setgid kmem.



Re: openbsd x2goclient

2015-02-19 Thread Stuart Henderson
On 2015-02-19, Joseph Oficre seran...@gmail.com wrote:
 Hello.
 I have a question here. Why is x2goclient still unsupported? I mean..it's
 pretty free and i use x2go instead of NX.
 The only thing why i still dont use OpenBSD on my desktop is x2goclient.
 So once i've found this
 https://github.com/jasperla/openbsd-wip/tree/master/x11/x2goclient
 Successfully compiled (just need to change lrelease to lrelease4.

 But when i try to connect i get segmentation fault. Core file attached
 below. Can someone help me to solve it, please?

 [demime 1.01d removed an attachment of type application/octet-stream which 
 had a name of x2goclient.core]

Don't send core dumps. They are useless without the source code and
exact binary you are running, and may contain sensitive information.
A backtrace might give clues.

gdb /path/to/program /path/to/file.core
bt

However as this for something on openbsd-wip you are probably better
off talking to the person who added it there.



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Ted Unangst
Markus Kolb wrote:
 Am 2015-02-19 10:51, schrieb Peter Hessler:
 
 
  :choose the CPU with higher Frequency and less cores or for a CPU with
  :lower frequency but more cores?
  
  Higher frequency.  Period.
  
  Right now, network and PF processing is limited to CPU0.  You want that
  as fast as possible.
  
  Additionally, you want as fast memory transfers (from CPU to RAM) as
  possible.
  
  That will give you the most performance.
 
 Is it as simple as Higher frequency.?
 Shouldn't there be a view on the instruction sets mostly used in network 
 traffic handling and cycle usage of these instructions?
 Or is this equivalent at the up-to-date processors?
 If not, it is possible that lower frequency is faster.

Every iX-3xxx is about the same in terms of IPC. Same for iX-4xxx, etc.

But some models do have AES-NI and some don't. This will clearly matter if
you're also doing IPsec or so.

Also, last I checked for desktop chips, i3 was 2 core hyperthreaded
(4 threads) while i5 was quad core not-hyper (still 4 threads). OpenBSD still
isn't really aware of hyperthreaded, so you'll get better, more consistent
performance from the i5. The i7 then goes to four cores, 8 threads, which is
less than ideal for openbsd.

There's also some variation in the availability of various VT extensions.

Last two points probably don't matter much for a pure firewall passing
packets, but the few hundred mhz gained may not be a worthwhile trade for
flexibilty if you ever intend to repurpose the box.



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Stuart Henderson
On 2015-02-19, Alexander Salmin alexan...@salmin.biz wrote:
 Good luck, when you have time I also recommend that you read this.
[snip link to calomel]

Half of that page is obsolete. It keeps jumping between megabytes/sec and
megabits/sec which is confusing. Various things are recommended without
explaining that they are a trade-off or can cause problems. There are
completely pointless things like talking about TTLs. It includes tweaks
which may improve performance of an end host (but have trade-offs) in
a page mostly talking about routers, other tweaks which are nothing
to do with networking and in some cases dangerous.

Still, at least re-reading this makes me see where a user in another
recent mailing list thread got the idea to mess around with mssdflt.



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Peter Hessler
On 2015 Feb 19 (Thu) at 10:58:21 +0100 (+0100), Alexander Salmin wrote:
:Good luck, when you have time I also recommend that you read this.
:https://   calomel.org [snip dangerous url]
:

don't follow *any* recommendation from that site


-- 
All I want is a warm bed and a kind word and unlimited power.
-- Ashleigh Brilliant



Re: Installing OpenBSD 5.6 using a USB Flash drive

2015-02-19 Thread Stuart Henderson
On 2015-02-19, Raimo Niskanen raimo+open...@erix.ericsson.se wrote:
 On Wed, Feb 18, 2015 at 05:30:29PM +0100, Alexander Hall wrote:
 On February 18, 2015 11:43:56 AM CET, Markus Kolb open...@tower-net.de 
 wrote:
 Am 2015-02-17 17:27, schrieb A Y:
  dmesg|grep ^.d0 returns only sd0
  sysctl hw.disknames returns sd0 and rd0
  
  my machine is a 10.1 inch netbook Lenovo E10-30 running Intel Celeron
 
  N2830
  Dual Core 64 bit. Do you think I should have used amd64 installation 
  instead
  of i386?
 
 Will depend mostly on your available RAM.
 i386 is 32 bit.
 
 Either way, I see no reason not to run amd64 on that processor.

 Won't i386 use less memory making it more efficient up to about 2 GB of RAM
 which this machine has?

Yes, also i386 will make better use of cache on the cpu which means some
software will be faster.

However amd64 provides a larger virtual address space which has security
benefits (better ASLR). It also has more registers which means other software
will be faster.

 Of course, if RAM would be added you would regret not having installed
 amd64...

Yes to this too.

It is a trade-off.



ix(4) X710-DA4

2015-02-19 Thread Or Elimelech
Hi,

I’m purchasing 2 new firewalls and I wonder if the ix(4) driver supports 
X710-DA4

Have anyone tried this in production?

Thanks



openbsd x2goclient

2015-02-19 Thread Joseph Oficre
Hello.
I have a question here. Why is x2goclient still unsupported? I mean..it's
pretty free and i use x2go instead of NX.
The only thing why i still dont use OpenBSD on my desktop is x2goclient.
So once i've found this
https://github.com/jasperla/openbsd-wip/tree/master/x11/x2goclient
Successfully compiled (just need to change lrelease to lrelease4.

But when i try to connect i get segmentation fault. Core file attached
below. Can someone help me to solve it, please?

[demime 1.01d removed an attachment of type application/octet-stream which had 
a name of x2goclient.core]



Re: openbsd x2goclient

2015-02-19 Thread Koko Wijatmoko
On Thu, 19 Feb 2015 12:20:38 +0400
Joseph Oficre seran...@gmail.com wrote:

 But when i try to connect i get segmentation fault. Core file
 attached below. Can someone help me to solve it, please?
 
this list is not allowed to attach a file.
put it somewhere else, and share the url here.

 [demime 1.01d removed an attachment of type application/octet-stream
 which had a name of x2goclient.core]



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Dmitrij D. Czarkoff
Stuart Henderson said:
 Half of that page is obsolete. 
[...]
 Various things are recommended without explaining that they are a 
 trade-off or can cause problems. There are
 It includes tweaks which may improve performance of an end host (but
 have trade-offs) in a page mostly talking about routers, other
 tweaks which are nothing to do with networking and in some cases
 dangerous.

It would be nice if someone with expertise could write a detailed
explanation of the issues with that article...

-- 
Dmitrij D. Czarkoff



Re: openbsd x2goclient

2015-02-19 Thread Dmitrij D. Czarkoff
Joseph Oficre said:
 I'm using release system + stable ports.
 Hmm, so u recommend me to use current? I can try it..

I don't promise that it will work (I don't even know what exactly the
software in question is), but I may assure you that ports for -current
may fail with -stable, and ports that are too current to be in -current
more so.  Actually, some of ports from openbsd-wip are not submitted
because they still wait some changes in base or ports.

-- 
Dmitrij D. Czarkoff



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Martin Schröder
2015-02-19 16:33 GMT+01:00 Dmitrij D. Czarkoff czark...@gmail.com:
 It would be nice if someone with expertise could write a detailed
 explanation of the issues with that article...

Thou art not supposed to twiddle with your config.



Re: openbsd x2goclient

2015-02-19 Thread Joseph Oficre
I'm using release system + stable ports.
Hmm, so u recommend me to use current? I can try it..

2015-02-19 18:14 GMT+03:00 Dmitrij D. Czarkoff czark...@gmail.com:

 Joseph Oficre said:
  ) at /usr/src/lib/librthread/rthread.c:145

 FWIW what version of OpenBSD are you using?  If the answer is not
 exactly recent snapshot, you should probably try it there, as all of
 the openbsd-wip ports tree development happens on -current.

 --
 Dmitrij D. Czarkoff



Re: openbsd x2goclient

2015-02-19 Thread Ted Unangst
Joseph Oficre wrote:
 Yeah, i've sent him letter too, but my second question is why is no
 official x2goclient in ports :c It hurts me so much...
 
 i got this, btw
 #0  0x1ebf62404f7d in SessionButton::lessThen () from
 /usr/local/bin/x2goclient
 #1  0x1ebf62406ea5 in SessionButton::lessThen () from

Obviously should be spelled lessThan. :(



Re: Help needed: pkg_add dropps connections

2015-02-19 Thread Stuart Henderson
On 2015/02/19 15:02, Stefan Wollny wrote:
 Sorry for top-posting: The web-mailer I have to use at present is
 pretty dump... :-(
 Now that you mention it, I remember vaguely that I saw it on that site
 too, a lng time ago. But this sysctl.conf-setting I found on
 bsdnow.tv:
 http://www.bsdnow.tv/tutorials/openbsd-router
  
 Thank you for (again) pinpointing to this being no good advice. I am
 not shure where I read the hint on pf.conf's max-mss to meet the
 sysctl.conf-entry. If this is BS should I delete the entry in both
 conf-files or only in the sysctl.conf?

On an end-host I would remove them both.

On a router, you might need scrub (max-mss), it can be useful where
the upstream interface has restricted MTU (often happens with vpn
and pppoe interfaces depending on the configuration).



Re: OpenBSD firefox useragent Facebook

2015-02-19 Thread Tero Koskinen

Hi,

19.2.2015, 19:53, Erling Westenvik kirjoitti:

On Wed, Feb 18, 2015 at 02:52:28PM -0500, trondd wrote:

And what do you think your user agent is when you connect through
those other gateways?  ipchicken.com should tell you.


I'm aware what my user agent is. However, I started to wonder whether my
user agent string might confuse Facebook.


Have you tried to change the user agent? For example with
User Agent Switcher extension:
https://addons.mozilla.org/en/firefox/addon/user-agent-switcher/

And a year ago one person had MTU problem with Facebook:
http://marc.info/?l=openbsd-miscm=138058804118691w=2

Yours,
 Tero



Re: Short path to making Android APKs under OpenBSD?

2015-02-19 Thread trondd
On 2/19/15, Alan Corey alan01...@gmail.com wrote:

 Can't it be done with make or cmake?

Perhaps...  We use maven, where I work.  The benefit of Android Studio
(besides an IDE, if you want one) is the emulators which you don't
need at the packaging phase.



Dial Cellular connection on boot amd64

2015-02-19 Thread Cristián Edwards
Hello,

I have a umsm modem, that connects to the internet with pppd, need to
always dial up the connection on boot.

Added a simple hostname.if, like this:

 # cat /etc/hostname.ppp0

dhcp
!pppd call ac875

This approach does work, but it feels weird because it does not really uses
dhcp. Also I get this on the start:

starting network
ppp0: no link ... sleeping

How this should be achieved correctly?
Version: 5.6

Regards,

Cristian



Re: Dial Cellular connection on boot amd64

2015-02-19 Thread Adam Thompson

On 2015-02-19 03:28 PM, Cristián Edwards wrote:

Hello,

I have a umsm modem, that connects to the internet with pppd, need to
always dial up the connection on boot.

Added a simple hostname.if, like this:

  # cat /etc/hostname.ppp0

dhcp
!pppd call ac875

This approach does work, but it feels weird because it does not really uses
dhcp. Also I get this on the start:

starting network
ppp0: no link ... sleeping

How this should be achieved correctly?
Version: 5.6

Regards,

Cristian

If I'm not mistaken, you want up instead of dhcp to get rid of that 
message.
However, there's no explicit support for ppp in /etc/netstart so I think 
your approach is otherwise probably the best way to do it.


--
-Adam Thompson
 athom...@athompso.net
 +1 (204) 291-7950 - cell
 +1 (204) 489-6515 - fax



Re: OpenBSD Tablet-ish

2015-02-19 Thread Jack Woehr

Robert wrote:

On Thu, 19 Feb 2015 13:23:47 -0600
Luis Coronado lcoron...@ticoit.com wrote:

sharp zaurus?

Anything that can be acquired outside of a museum? ;)




Thanks everyone, Luis, Christopher, Robert, for all the ideas, and keep 'em 
coming if anyone has any more.

I may not be able reply if any q's are asked until Monday, thanks again..

--
Jack Woehr   # There's too much emphasis on things
Box 51, Golden CO 80402  #  like pawn structure in modern chess.
http://www.softwoehr.com #  Checkmate ends the game. - N. Short



Soekris 6501-70 mSATA and OpenBSD

2015-02-19 Thread Markus Rosjat

Hi there,

I have a new Soekris 6501-70 and a KingSpec 8gb mSATA drive. I can 
install OpenBSD 5.5 over PXE but after reboot
it keeps hanging at the entry point msg. I actually did some research 
befor I ordered the mSATA device because I know Soekris 6501
has some isuess with them but KingSpec was one of the devices that seem 
to have no trouble with booting up.
So simple question is there something I miss here that needs to be done 
befor I reboot after a fresh install to get the Soekris up and

running?

Regards

--
Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de

G+H Webservice GbR Gorzolla, Herrmann
Königsbrücker Str. 70, 01099 Dresden

http://www.ghweb.de
fon: +49 351 8107220   fax: +49 351 8107227

Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you 
print it, think about your responsibility and commitment to the ENVIRONMENT



Re: OpenBSD Tablet-ish

2015-02-19 Thread Raimundo Santos
Hello,

Lenovo Thinkpad x201 works well for me.

On 19 February 2015 at 17:15, Jack Woehr jwo...@softwoehr.com wrote:

 What's the smallest, most tablet-ish device I can put OpenBSD on? Want to
 travel and stay connected.

 --
 Jack Woehr   # There's too much emphasis on things
 Box 51, Golden CO 80402  #  like pawn structure in modern chess.
 http://www.softwoehr.com #  Checkmate ends the game. - N. Shor



Re: OpenBSD Tablet-ish

2015-02-19 Thread Raimundo Santos
On 19 February 2015 at 21:19, Carl Trachte ctrac...@gmail.com wrote:


 It's definitely not a tablet, but it's way more portable than a
 desktop or full sized laptop.  Surprisingly, for it's size, it's easy
 to take apart and deal with.

It is my choice because ot its little weight: most of it is my 5 hours
battery.

But it is not that new: a first generation core i5, AFAIK. Besides that, it
is a very good hardware and interacts well with OpenBSD.

Best regards.
Raimundo Santos



Re: ix(4) X710-DA4

2015-02-19 Thread Or Elimelech
Thanks but I need it ASAP

I will pass, I ordered X520 instead.


 On Feb 19, 2015, at 2:08 PM, Jonathan Gray j...@jsg.id.au wrote:
 
 On Thu, Feb 19, 2015 at 10:11:36AM +0200, Or Elimelech wrote:
 Hi,
 
 I???m purchasing 2 new firewalls and I wonder if the ix(4) driver supports 
 X710-DA4
 
 Have anyone tried this in production?
 
 Thanks
 
 Someone needs to port Intel's ixl/i40e driver from FreeBSD before those
 cards will work.



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread David Higgs
On Thu, Feb 19, 2015 at 10:33 AM, Dmitrij D. Czarkoff
czark...@gmail.com wrote:
 Stuart Henderson said:
 Half of that page is obsolete.
 [...]
 Various things are recommended without explaining that they are a
 trade-off or can cause problems. There are
 It includes tweaks which may improve performance of an end host (but
 have trade-offs) in a page mostly talking about routers, other
 tweaks which are nothing to do with networking and in some cases
 dangerous.

 It would be nice if someone with expertise could write a detailed
 explanation of the issues with that article...


It shouldn't be any developer's responsibility to refute or confirm
unofficial guidance found anywhere else.  Unnecessary configuration
tweaks frequently confuse and discourage those who would otherwise
help you troubleshoot legitimate issues, either because they have
caused the problem in the first place or have introduced red herrings.

The defaults are suitable as defaults.  If and when a default no
longer makes sense, it will likely be changed.  If a default is not
appropriate for YOUR personal needs, it is YOUR responsibility to
figure out what needs fixing or changing.  Refer to the official FAQs,
manuals, source, mailing list archives, etc to figure out what to do
-- prior to asking questions.

--david



Re: Performance Counters

2015-02-19 Thread Sai Prajeeth
Does pctr count events for all CPUs or just 1 CPU? I cant seem to find any
good documentation for pctr other than its man page. I tried it and the
values it gives are differing too much.

I am counting INST_RET and CPU_CLK_UNHALTED. The ratio of these 2 gives the
IPC and i am getting very varied results for the same run of the program.

Also is there any explanation of what the unit masks are for the specific
functions (-m command line option) ?

Thanks

On Thu, Feb 19, 2015 at 3:13 PM, Boudewijn Dijkstra 
sp4mtr4p.boudew...@indes.com wrote:

 Op Wed, 18 Feb 2015 10:15:26 +0100 schreef Sai Prajeeth 
 cspraje...@gmail.com:

 Is there any command that will let me access the processor's performance
 counters?? I am looking for something like Linux's perf / FreeBSDs pmcstat
 that will help me get the IPC (Instructions per cycle) of the system.


 $ apropos 'performance counter'
 pctr(1) - display CPU performance counters
 pctr(4/amd64) - driver for CPU performance counters
 pctr(4/i386) - driver for CPU performance counters
 uperf(4/sparc64) - performance counters driver


 --
 (Remove the obvious prefix to reply privately.)
 Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/



Re: openbsd x2goclient

2015-02-19 Thread Dmitrij D. Czarkoff
Joseph Oficre said:
 ) at /usr/src/lib/librthread/rthread.c:145

FWIW what version of OpenBSD are you using?  If the answer is not
exactly recent snapshot, you should probably try it there, as all of
the openbsd-wip ports tree development happens on -current.

-- 
Dmitrij D. Czarkoff



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Adam Thompson

On 2015-02-19 06:26 AM, Stuart Henderson wrote:

Modern Atoms (avoton, rangeley) will do just fine for this amount
of normal traffic. If the ruleset is super-complicated or if there
are very high PPS counts (which is by *far* more important than
absolute bandwidth) _or_ if there is a reasonable chance of that
happening during the expected life of the machine, then you might
need faster.


Somewhat OT, but I've heard the pfSense developers over at Netgate have 
done amazing things with Rangeley CPUs (i.e. actually useful w/10Gbps 
NICs).  In general, what I'm hearing in the embedded world is that 
QuickAssist is a really, really nice feature *if* you can figure out how 
to use it properly.  Reminds me of the buzz surrounding the Cell 
processor when it came out.


--
-Adam Thompson
 athom...@athompso.net



Short path to making Android APKs under OpenBSD?

2015-02-19 Thread Alan Corey
Somewhere I read that Android now only officially supports their own
Android Studio.  Eclipse might work but needs to be newer than even
OpenBSD 5.6's version.  Gradle might work but seems to need Groovy,
there seems to be no end to the bloatware.  Android Studio is a 1 gig
download and wants 4 gigs of RAM to run.

Can't it be done with make or cmake?  This reminds me of the gobs of
software for etext publishing when an epub file is just a zip file
with a certain directory structure inside.  An APK file is just a zip
file.  I don't need easy and GUI, I can follow a checklist or write
something that does it for me.  I've written some Java but I'd rather
use c and maybe GTK.

-- 
Credit is the root of all evil.  - AB1JX



Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread Adam Thompson

On 2015-02-18 07:07 PM, System Administrator wrote:

Actually, at this time and the near future, passing traffic (i.e. the
kernel network stack) happens entirely on CPU0. The network gurus *are*
working on making the network layer multiprocessor capable, but my
impression from watching the tech@ list is that this goal is still some
ways off. At the present time, only userland applications can and do
make use of the additional CPU cores.


According to the very first reports to come out of the s2k15 hackathon, 
mpi@  dlg@ *just* did a bunch of the critical work to get that started.

http://undeadly.org/cgi?action=articlesid=20150218085759mode=expandedcount=0

If I've got my timeline right, we're already post-5.7-freeze, so I 
assume 5.8 is probably when us mere users will see a partially-SMP 
network stack.


--
-Adam Thompson
 athom...@athompso.net
 +1 (204) 291-7950 - cell
 +1 (204) 489-6515 - fax



Re: OpenBSD firefox useragent Facebook

2015-02-19 Thread Erling Westenvik
On Wed, Feb 18, 2015 at 02:52:28PM -0500, trondd wrote:
 And what do you think your user agent is when you connect through
 those other gateways?  ipchicken.com should tell you.

I'm aware what my user agent is. However, I started to wonder whether my
user agent string might confuse Facebook.

Some time before Christmas I updated -current on my laptop. From that
moment on I could no longer tag people in comments. The main reason I
suspected this had to caused by some bug in OpenBSD, was that tagging
kept on working on my main workstation also running -current.

Being somewhat dependent on being able to tag people on Facebook, I
waited as long as I could before updating -current on my workstation.
Finally I had to do an update and from that moment on, tagging no longer
worked. (In the meanwhile, I also had to replace the harddrive on my
laptop and did a fresh install of -current. Still no success.)

Since yesterday I've tried installing -current, then 5.6 and finally
5.5, on another workstation. I've also tried different network
connections and disabling PF. And I've tried Chrome, Seamonkey and
xombrero. Tagging in Facebook comments simply doesn't work in any
browser on any OpenBSD computer I have, but works fine on any Windows
computer.

I know this is silly, and I feel stupid, but this is important to me
and I welcome ANY advice.

(Not using Facebook is not such an advice. My daily work is related to
and dependent on Facebook. And no – I'm not getting paid to post
pictures of kittens. ; )

 This might have to do with which Facebook CDN node you might be
 hitting and DNS caching.

Sounds plausible except for the fact that everything works fine from  
Windows computers within the same environment.

Erling



trouble with a large disk

2015-02-19 Thread Ed Ahlsen-Girard
I have a brand spanking new 3TB disk (Seagate ST3000) and it is not
behaving. fdisk -i runs and runs and eventually the console goes black
except for an immovable mouse pointer. sshd is killed, have to manually
power down. If power on with the disk attached (usb) an on, an odd
message appears and the probing stops. Odd message at end of dmesg
below.

-- 

Edward Ahlsen-Girard
Ft Walton Beach, FL

OpenBSD 5.7-beta (GENERIC.MP) #852: Tue Feb 10 16:31:16 MST 2015
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2094530560 (1997MB)
avail mem = 2034905088 (1940MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf06d0 (43 entries)
bios0: vendor American Megatrends Inc. version 0504 date 10/05/2009
bios0: ASUSTeK Computer INC. P-P5G41
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET GSCI SSDT
acpi0: wakeup devices P0P2(S4) P0P3(S4) P0P1(S4) UAR1(S4) PS2K(S4) PS2M(S4) 
USB0(S4) USB1(S4) USB2(S4) USB3(S4) EUSB(S4) MC97(S4) P0P4(S4) P0P5(S4) 
P0P6(S4) P0P7(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz, 2933.72 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,XSAVE,NXE,LONG,LAHF,PERF
cpu0: 3MB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 271MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz, 2991.97 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,XSAVE,NXE,LONG,LAHF,PERF
cpu1: 3MB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (P0P2)
acpiprt2 at acpi0: bus -1 (P0P3)
acpiprt3 at acpi0: bus 3 (P0P4)
acpiprt4 at acpi0: bus -1 (P0P5)
acpiprt5 at acpi0: bus 2 (P0P6)
acpiprt6 at acpi0: bus 1 (P0P7)
acpicpu0 at acpi0: C2, C1, PSS
acpicpu1 at acpi0: C2, C1, PSS
aibs0 at acpi0 RTMP RVLT RFAN GGRP GITM SITM
aibs0: FSIF: invalid package
acpibtn0 at acpi0: PWRB
cpu0: Enhanced SpeedStep 2933 MHz: speeds: 2936, 2670, 2403, 2136, 1870, 1603 
MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel G41 Host rev 0x03
vga1 at pci0 dev 2 function 0 Intel G41 Video rev 0x03
intagp0 at vga1
agp0 at intagp0: aperture at 0xe000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1920x1080
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
Intel G41 Video rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: msi
azalia0: codecs: Realtek ALC888
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: msi
pci1 at ppb0 bus 3
ppb1 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01: msi
pci2 at ppb1 bus 2
re0 at pci2 dev 0 function 0 Realtek 8168 rev 0x02: RTL8168C/8111C (0x3c00), 
msi, address 48:5b:39:c5:63:95
rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2
ppb2 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01: msi
pci3 at ppb2 bus 1
vendor VIA, unknown product 0x3401 (class serial bus subclass Firewire, rev 
0x00) at pci3 dev 0 function 0 not configured
vendor VIA, unknown product 0x401a (class mass storage subclass 
miscellaneous, rev 0x00) at pci3 dev 0 function 1 not configured
sdhc0 at pci3 dev 0 function 2 vendor VIA, unknown product 0x401b rev 0x00: 
apic 2 int 19
sdhc0 at 0x10: can't map registers
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 2 int 23
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 2 int 19
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: apic 2 int 18
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: apic 2 int 16
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: apic 2 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xe1
pci4 at ppb3 bus 4
pcib0 at pci0 dev 31 function 0 Intel 82801GB LPC rev 0x01
pciide0 at pci0 dev 31 function 1 Intel 82801GB IDE rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA, channel 0 
configured 

Re: OpenBSD firefox useragent Facebook

2015-02-19 Thread Erling Westenvik
On Thu, Feb 19, 2015 at 08:45:06PM +, Stuart Henderson wrote:
 On 2015-02-19, Erling Westenvik erling.westen...@gmail.com wrote:
 Since yesterday I've tried installing -current, then 5.6 and finally
 5.5, on another workstation. I've also tried different network
 connections and disabling PF. And I've tried Chrome, Seamonkey and
 xombrero. Tagging in Facebook comments simply doesn't work in any
 browser on any OpenBSD computer I have, but works fine on any Windows
 computer.
 
 Have you reported this to facebook? There's a link on
 https://www.facebook.com/help/191905394245544, I'm sure they would
 like to fix things so you can continue to contribute to their face
 recognition database ;)

Thanks, but the link is not relevant. Tagging people in photos works
just fine. So does tagging (mentioning) peoples names in posts. It's
just tagging (mentioning) peoples names in comments that ain't working
(anymore).

I'll try to dig into some html and javascript before sending a report. A
problem that seems to exist only when visiting Facebook from a rather
obscure operating system, probably won't get much attention. ;)

Erling



Re: OpenBSD firefox useragent Facebook

2015-02-19 Thread Nick Holland
On 02/18/15 09:32, Erling Westenvik wrote:
 Not sure if this belongs in @misc or @ports - if any! - but I'll give
 the former a shot.
 
 All below applies to amd64/current-installations of mine.
 
 The last few months, I've been unable to tag other people when
 commenting on Facebook. I've tried resetting Firefox, disabling add-ons,
 deleting old profiles, reinstalling the browser, and even doing a fresh
 install of Firefox on a new OpenBSD installation. All to now avail.
 
 I suspect the user agent setting to be the culprit and have tried
 experimenting with various strings. Some of them enables me to tag other
 people, but messes up other things.
 
 Would anyone using Facebook be so kind as to provide me with a working
 user agent string for Firefox (35.0) ?
 
 Thanks,
 
 Erling
 
 PS. Just checked and neither Seamonkey nor Chrome will let me tag people
 in comments. This is getting weird...
 

I've noticed this as well lately.  It's obviously a change on FB's side,
not on OpenBSD's side (since you have gone back to old versions to
verify the problem still happens on versions I know it didn't).
Curiously, I think I have noticed it impacting my (completely stock)
android phone, too, though that may just mean it is over due for a reboot.

I'm not losing any sleep over it, however.  I seem to have low
expectations for people coding not-stupidly.

Nick.