Re: What hardware spec would I need to push 20 gigabit of network traffic on an OpenBSD server?

[Some Developer]

On 27/10/15 19:24, Adam Thompson wrote:

On 15-10-25 03:46 AM, Some Developer wrote:

I'm just wondering what hardware spec I'd need push 20 gigabits of
network traffic on an OpenBSD server?


Short answer:  It's not generally possible today, at least for your use
case.

Medium answer:  Contact Esdenera Networks to find out.  They manage to
do it somehow.  I'm sure they'll be happy to make it happen for you in
exchange for suitable amounts of money...


Longer answer:

Network performance research numbers have presented by gnn at various
conferences over the last year or so, and they consistently showed that
OpenBSD, while performing well for a single-threaded stack, fell badly
behind in multi-core, and wasn't able to keep up to 10Gbps.  The OpenBSD
team is (currently, AFAIK) working on making the network stack
multi-threaded, or at least not giant-locked, which should (eventually)
dramatically increase performance scalability.

On top of that, there are substantial optimizations possible; research
in the FreeBSD camp (and experience under OpenBSD as well) has shown
that seemingly-similar hardware can perform radically differently.
Drivers make a big difference.

You talk about storing the data - *writing* data to disk at 10Gbps
(sustained) is currently in the realm of high-energy physics, with
multi-million-dollar budgets for the storage arrays.  A 7200rpm disk can
charitably be said to write at up to 100MBytes/sec, but that's not
necessarily sustained speed, so minimum 10-unit array assuming 100%
ideal throughput, which doesn't actually exist in the real world.  More
likely you'd have to buy a large HDS array to get that kind of
throughput.  Plus, that's about 2.5PB (yes, PETAbytes) of data every
month.  Are you building this for the NSA?!?

You do realize that this means you're now trying to push *30* Gbits/sec
on a single server, right?  (10 in, 10 out, 10 logged) Even Netflix, who
spend a ridiculous amount of time doing optimization, have only recently
gotten FreeBSD servers with tons of custom code and tweaks to pass the
65Gbps-per-socket mark.

Lastly, Gbits/sec isn't the bottleneck.  The bottleneck is
packets-per-second.  If you're pushing 10Gbps worth of 1500-byte
packets, then this is possible today. (Not sure about 30Gbps.)  If
you're trying to push 10Gbps worth of 64-byte packets on commodity
hardware, forget about this pipe dream for another few years until the
fully-MP network stack is finished and optimized.

Good luck... but you might want to consider doing this on a Juniper MX
series or Cisco ASR instead - those platforms can at least maybe do the
tunnelling part for around $250k, then feed the output into a 10GE
switch with port mirroring (~$10k), then a Network Flight Recorder or
similar to actually capture that much data (~$150k).

-Adam


Thank you for the reply. I see now that my request was wildly unrealistic.

Basically I'm trying to write a business plan and am trying to plan for 
the worst case scenario so I don't fall over if traffic somehow spikes 
to such levels. My expected level of traffic is probably in the 300 
megabits a second range but the incoming links from my upstream provider 
are 10GbE so I need to have some plan just in case I get a spike of 10 
gigabits (as unlikely as that may be I still need to plan for it).


I haven't ruled out the possibility of using Cisco / Juniper for some of 
my requirements but obviously would like to use OpenBSD if possible 
because I've used it in the past and it includes everything that I need 
and best of all the documentation is excellent.


I can drop the logging requirement pretty easily. That isn't really 
important at all.


I wonder what other people do when they are disaster planning for their 
new services? At the same time I wonder how the internet backbone is 
handled. As far as I am aware they handle speeds of about 100 gigabits a 
second so the hardware / software must be available for handling such 
speeds. I just guess they are ridiculously expensive to buy and maintain 
(well outside my budget anyway).

Re: Qemu error on OpenBSD 5.8

[ilyes aiouaz]

Hi,
I modified the value of :

default:\
:datasize-max=4G:\
:datasize-cur=4G:\
:maxproc-max=512:\
:maxproc-cur=256:\
:openfiles-cur=1024:\

staff:\
:datasize-cur=4G:\
:datasize-max=infinity:\
:maxproc-max=512:\
:maxproc-cur=256:\

And now, All apps work perfectly

Thanks all for your support,


Le 10/26/15 11:20, ilyes aiouaz a écrit :

Le 10/26/15 10:34, Jan Lambertz a écrit :

When you do:

open xterm
ulimit -d 2000
start vm from this xterm

same error ?


Yes, Qemu work now without any problem.

Re: Getting Error on Implementation

[Ville Valkonen]

On 28 October 2015 at 04:58, Yasir Israr  wrote:

> Hello..
>
> Getting installation problem on OpenBSD 5.8 in Dell R630 Server.
>
>
>
> -
>
> Regards,
>
> Yasir Israr
>
>
>
> ORION SOLUTIONS || ISO 9001-2008 Certified
>
> 1st Floor 14/18 Elign Road
>
> Civil Lines, Allahabad
>
> 9795610614  ≡ mobile|  
> ya...@orionsolutions.co.in
>
>   www.orionsolutions.co.in
>
>
Hi,

you really think people will be able to solve the problem without any
further information?

--
Regards,
Ville

Re: LPR/LPD does not run filters

[Christian Weisgerber]

On 2015-10-27, Jona Joachim  wrote:

> Well, specifying 'lp' instead of 'rm' does make it run filters, but the job
> is not sent to the printer, even when I use the port@host format from
> the man page. As soon as I set 'rm', filters are no longer executed.

Yes, that's the way lpd(8) has always worked.

-- 
Christian "naddy" Weisgerber  na...@mips.inka.de

Re: passive mode ftp pf.conf OpenBSD 5.6 i386

[Giancarlo Razzolini]

Em 28-10-2015 08:08, Marcus MERIGHI escreveu:
> Giancarlo, do you know of any software that does DAV the way ftpds do
> FTP? 

No, I don't. I mentioned DAV for the simpler setups.

> I've been looking for options recently and was baffled about the lack
> thereof. 

Nginx has a simple module, apache has a full solution, don't know about
lighthttpd.

>
> DAV service is usually built into a HTTPd (apache2, nginx, lighttpd)
> as a module. The server runs as non-root user (fortunately).
> No way to setuid to the user that just entered username/password.

Do you really need to setuid things to the user?

>
> Additionally, HTTPds hopefully run chrooted. Not much room for separate
> user spaces. 
>
> I'm afraid there is no real (Web)DAVd. 
> (Apart from davenport, which is tomcat+davenport+samba. wow.)
>
> Bye (and thanks in advance), Marcus

Don't try to implement the same thing ftp does on top of other
protocols. That being said, using OpenSSH you can have everything ftp
has even better. You can even chroot every user to his/her home. With
the benefit of, you know, talking ssh protocol, instead of ftp.

Cheers,
Giancarlo Razzolini

Build Error at dig.c

[Heiko Zimmermann]

Hello OpenBSD team,

in the snapshot from today and yesterday I always get this error:

cc -O2 -pipe-o dig  dig.o dighost.o  ../../lib/lwres/liblwres.a
../../lib/dns/libdns.a  -lcrypto  ../../lib/bind9/libbind9.a
../../lib/isc/libisc.a  ../../lib/isccfg/libisccfg.a
dig.o: In function `dash_option':
dig.c:(.text+0x423): undefined reference to `isc_net_disableipv4'
dig.c:(.text+0x452): undefined reference to `isc_net_disableipv6'
dig.c:(.text+0xb3e): undefined reference to `isc_net_disableipv6'
dig.c:(.text+0xb7a): undefined reference to `isc_net_disableipv4'
collect2: ld returned 1 exit status
*** Error 1 in usr.sbin/bind/obj/bin/dig (Makefile:353 'dig')
*** Error 1 in usr.sbin/bind/obj/bin/dig (Makefile:163 'all')
*** Error 1 in usr.sbin/bind/obj/bin (Makefile:100 'subdirs')
*** Error 1 in usr.sbin/bind/obj (Makefile:102 'subdirs')
*** Error 1 in usr.sbin/bind (Makefile.bsd-wrapper:25 'all')
*** Error 1 in usr.sbin (:48 'all')
*** Error 1 in . (:48 'all')
*** Error 1 in /usr/src (Makefile:82 'build')


I did it so:

cd /usr/src
cvs -d anon...@anoncvs.ca.openbsd.org:/cvs -q up -Pd

cp /bsd /bsd.old
cd /usr/src
make clean
cd /usr/src/sys/arch/amd64/conf/
config GENERIC.MP
cd ../compile/GENERIC.MP
make clean && make depend && make && make install
reboot

cd /usr/src
rm -rf /usr/obj/*
make obj
cd /usr/src/etc && env DESTDIR=/ make distrib-dirs
cd /usr/src
make build


Machine: OpenBSD ... 5.8 GENERIC.MP#63 amd64

How can I fix this?
Thank you in advance.

Regards,
Heiko

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Benny Lofgren]

On 2015-10-28 15:32, Michael McConville wrote:
> Andrei-Marius Radu wrote:
>>
>> Is there anyone else who thinks this is needed/a good idea ?
> 
> For what it's worth, I was porting htop recently and I think I remember
> it being painful to work without KERN_CPTIME2. I'd have to look back
> (and look at this diff), though.

+1 on this, I would definitely find this useful.

Michael, as far as I can tell KERN_CPTIME2 is already in the kernel. As
I understand it, it is just support for access via sysctl(8) that is
lacking. But maybe htop uses that rather than sysctl(3)? Doesn't seem
likely though.


Regards,
/Benny

New httpd with slowcgi not running Perl scripts

[daniel.san...@metavista.com.br]

List: openbsd-misc
Subject: New httpd with slowcgi not running Perl scripts

Hi openbsd-misc readers !

I have installed the OpenBSD 5.8.
In chroot mode the new httpd started with slowcgi and perl.
But perl isn't running to get dynamic pages.

I can see process httpd working and the slowcgi socket
"/run/slowcgi.sock" to interface with fastcgi.

Some tests, in command line, I have the perl working in chroot:
---
# chroot -u www /var/www /cgi-bin/test.pl
Content type: text/html

hello world#
---

Now with the browser doing requests, I have access to static pages.
But when I request perl script I have the download of that file.
It's like perl isn't handling Perl scripts.
In http logs I can see "HTTP STATUS 200" for both cases.

My /etc/httpd.conf is something like this ...
---
ext_addr="*"

server "default" {
   listen on $ext_addr port 80
 }
  location "/cgi-bin/*" {
 fastcgi
 root "/"
 }
types {
 include "/usr/share/misc/mime.types"
}
---

My /etc/rc.conf is ...
---
httpd_flags=""
slowcgi_flags=""
---

My test script is ...
---
#!/usr/bin/perl
print "Content type: text/html\n\n";
print "hello world";
---

Then, do you have any suggestions to solve this problem ?

Thank you !

[]s,

Daniel Santos

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Andrei-Marius Radu]

Hi Michael,

On Wed, Oct 28, 2015, at 03:32 PM, Michael McConville wrote:
> 
> For what it's worth, I was porting htop recently and I think I remember
> it being painful to work without KERN_CPTIME2. I'd have to look back
> (and look at this diff), though.

top(1) and symon (and probably others) already use KERN_CPTIME2 so I
thought it's the way to go.

> 
> This should probably go to the tech@ list, by the way.

I didn't want to spam tech@ with my small patch without any feedback
first :)

Thanks,
Andrei.

Re: OpenBSD 5.8 and IPv6 forwarding doesn't seem to be working

[Giancarlo Razzolini]

Em 28-10-2015 02:29, Daniel Corbe escreveu:
> But I can't ping out or do anything on the client:
>
> C:\Users\dcorbe>ping ipv6.cybernode.com
>
> Pinging ipv6.cybernode.com [2001:470:1:1b9::31] with 32 bytes of data:
> Control-C
> ^C
> C:\Users\dcorbe>tracert 2601:5ce:101:5350:21e:37ff:fed6:ad
>
> Tracing route to 2601:5ce:101:5350:21e:37ff:fed6:ad over a maximum of 30
> hops
>
>   1  Destination host unreachable.
>
> Trace complete.

You probably have the same issue I ran into. Please run tcpdump on
your external if. You will see the packets leaving your internal net.
And, if you have control over the remote host being pinged, you can even
see the packets getting there. But, no replies ever get back. Your CPE
do not know about you delegating the prefix to your internal machines.
So, you should be seeing ndp neighbour discovery messages in your
external interface. Since OpenBSD do not proxy the ndp messages to your
internal lan, the packets get dropped by the CPE.

At first, I used a bridge to solve this. But filtering on them is a
nightmare. So, know I'm using a ULA prefix on my internal network and
natting (I know) ipv6 packets to my external lan address. I will try to
port some of the ndp proxy solutions available to OpenBSD. Everyone I
found are linux centric. OpenBSD ndp(8) has proxy functionality. I
couldn't make it work, and you also need to add entries host by host to it.

Cheers,
Giancarlo Razzolini

Re: OpenBSD 5.8 and IPv6 forwarding doesn't seem to be working

[lists]

On 10/28/2015 8:41 AM, Giancarlo Razzolini wrote:
> Em 28-10-2015 02:29, Daniel Corbe escreveu:
>> But I can't ping out or do anything on the client:
>>
>> C:\Users\dcorbe>ping ipv6.cybernode.com
>>
>> Pinging ipv6.cybernode.com [2001:470:1:1b9::31] with 32 bytes of data:
>> Control-C
>> ^C
>> C:\Users\dcorbe>tracert 2601:5ce:101:5350:21e:37ff:fed6:ad
>>
>> Tracing route to 2601:5ce:101:5350:21e:37ff:fed6:ad over a maximum of 30
>> hops
>>
>>   1  Destination host unreachable.
>>
>> Trace complete.
> 
> You probably have the same issue I ran into. Please run tcpdump on
> your external if. You will see the packets leaving your internal net.
> And, if you have control over the remote host being pinged, you can even
> see the packets getting there. But, no replies ever get back. Your CPE
> do not know about you delegating the prefix to your internal machines.
> So, you should be seeing ndp neighbour discovery messages in your
> external interface. Since OpenBSD do not proxy the ndp messages to your
> internal lan, the packets get dropped by the CPE.
> 
> At first, I used a bridge to solve this. But filtering on them is a
> nightmare. So, know I'm using a ULA prefix on my internal network and
> natting (I know) ipv6 packets to my external lan address. I will try to
> port some of the ndp proxy solutions available to OpenBSD. Everyone I
> found are linux centric. OpenBSD ndp(8) has proxy functionality. I
> couldn't make it work, and you also need to add entries host by host to it.
> 
> Cheers,
> Giancarlo Razzolini
> 

I dont think rtadvd is running and allowing his devices to use SLAAC.

I would check to make sure your device are generating an IPv6 address in
the correct prefix.


Jim

Re: OpenBSD 5.8 and IPv6 forwarding doesn't seem to be working

[Giancarlo Razzolini]

Em 28-10-2015 11:55, lists escreveu:
> I dont think rtadvd is running and allowing his devices to use SLAAC.

It is. At least from the information he provided.

>
> I would check to make sure your device are generating an IPv6 address in
> the correct prefix.

The prefix is different from the one in its external interface, but that
doesn't mean that he isn't getting a valid prefix through PD. He might
have configured its dhcpv6 client to assign a IA_NA to its external if,
and the CPE got him one from a different prefix. But it sure need to be
checked. OP, please take a look into that. If your CPE doesn't have the
internal lan prefix, you can't expect it to work.

Cheers,
Giancarlo Razzolini

Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Andrei-Marius Radu]

Hello,

I wanted to make per cpu utilization graphs (using some perl scripts)
so I ended up making this small patch (against -current) for sysctl(8)
to add support for KERN_CPTIME2.

The per cpu utilization graphs problem can be solved in other ways, for
example I found this old symon thread:
marc.info/?l=openbsd-misc=116655627129555=2 however I think having
KERN_CPTIME2 support is good anyway.

Is there anyone else who thinks this is needed/a good idea ?

--
Andrei.

Index: src/sbin/sysctl/sysctl.c
===
RCS file: /cvs/src/sbin/sysctl/sysctl.c,v
retrieving revision 1.211
diff -u -p -u -r1.211 sysctl.c
--- src/sbin/sysctl/sysctl.c18 Apr 2015 18:28:37 -  1.211
+++ src/sbin/sysctl/sysctl.c28 Oct 2015 13:55:08 -
@@ -215,6 +215,7 @@ int sysctl_emul(char *, char *, int);
 #ifdef CPU_CHIPSET
 int sysctl_chipset(char *, char **, int *, int, int *);
 #endif
+int sysctl_cptime2(char *, char **, int *, int, int *);
 void vfsinit(void);

 char *equ = "=";
@@ -412,6 +413,9 @@ parse(char *string, int flags)
special |= LONGARRAY;
lal = CPUSTATES;
break;
+   case KERN_CPTIME2:
+   sysctl_cptime2(string, , mib, flags,
);
+   return;
case KERN_SEMINFO:
len = sysctl_seminfo(string, , mib, flags,
);
if (len < 0)
@@ -2759,6 +2763,80 @@ sysctl_emul(char *string, char *newval,
return (0);


+}
+
+int
+sysctl_cptime2(char *string, char **bufpp, int mib[], int flags, int
*typep)
+{
+   int local_mib[2], ncpu, i, cpu;
+   size_t len;
+   u_int64_t cp_time2[CPUSTATES];
+   char *second, *third;
+   const char *errstr;
+
+   local_mib[0] = CTL_HW;
+   local_mib[1] = HW_NCPU;
+   len = sizeof(ncpu);
+   if (sysctl(local_mib, 2, , , NULL, 0) == -1) {
+   err(1, "%s can't get number of cpus (hw.ncpu)", string);
+   return (0);
+   }
+
+   len = sizeof(cp_time2);
+   second = strchr(string, '.');
+   if (!second) {
+   errx(1, "%s: can't get mib second level name", string);
+   return (0);
+   }
+   second++;
+   third = strchr(second, '.');
+   if (!third) {
+   for (i = 0; i < ncpu; i++) {
+   mib[2] = i;
+   if (sysctl(mib, 3, _time2, , NULL, 0) ==
-1) {
+   warn("%s.%d can't get cpu states",
string, i);
+   continue;
+   }
+
+   printf("%s.%d=%ld,%ld,%ld,%ld,%ld\n", string, i,
+   cp_time2[CP_USER],
+   cp_time2[CP_NICE],
+   cp_time2[CP_SYS],
+   cp_time2[CP_INTR],
+   cp_time2[CP_IDLE]
+   );
+   }
+   }
+   else {
+   third++;
+   if (ncpu > 1) {
+   cpu = strtonum(third, 0, ncpu - 1, );
+   }
+   else {
+   cpu = strtonum(third, 0, 0, );
+   }
+   if (errstr) {
+   errx(1, "%s: third level '%s' %s", string,
third,
+   errstr);
+   return (0);
+   }
+
+   mib[2] = cpu;
+   if (sysctl(mib, 3, _time2, , NULL, 0) == -1) {
+   warn("%s.%d can't get cpu states", string, i);
+   return (0);
+   }
+
+   printf("%s=%ld,%ld,%ld,%ld,%ld\n", string,
+   cp_time2[CP_USER],
+   cp_time2[CP_NICE],
+   cp_time2[CP_SYS],
+   cp_time2[CP_INTR],
+   cp_time2[CP_IDLE]
+   );
+   }
+
+   return (1);
 }

 static int
Index: src/sbin/sysctl/sysctl.8
===
RCS file: /cvs/src/sbin/sysctl/sysctl.8,v
retrieving revision 1.187
diff -u -p -u -r1.187 sysctl.8
--- src/sbin/sysctl/sysctl.83 Oct 2015 09:17:13 -   1.187
+++ src/sbin/sysctl/sysctl.828 Oct 2015 13:55:08 -
@@ -153,6 +153,7 @@ and a few require a kernel compiled with
 .It kern.malloc.kmemnames Ta string Ta no
 .It kern.malloc.kmemstat. Ta string Ta no
 .It kern.cp_time Ta struct Ta no
+.It kern.cp_time2 Ta struct Ta no
 .It kern.nchstats Ta struct Ta no
 .It kern.forkstat Ta struct Ta no
 .It kern.nselcoll Ta integer Ta no

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Michael McConville]

Andrei-Marius Radu wrote:
> Hello,
> 
> I wanted to make per cpu utilization graphs (using some perl scripts)
> so I ended up making this small patch (against -current) for sysctl(8)
> to add support for KERN_CPTIME2.
> 
> The per cpu utilization graphs problem can be solved in other ways, for
> example I found this old symon thread:
> marc.info/?l=openbsd-misc=116655627129555=2 however I think having
> KERN_CPTIME2 support is good anyway.
> 
> Is there anyone else who thinks this is needed/a good idea ?

For what it's worth, I was porting htop recently and I think I remember
it being painful to work without KERN_CPTIME2. I'd have to look back
(and look at this diff), though.

This should probably go to the tech@ list, by the way.

Thanks!

> Index: src/sbin/sysctl/sysctl.c
> ===
> RCS file: /cvs/src/sbin/sysctl/sysctl.c,v
> retrieving revision 1.211
> diff -u -p -u -r1.211 sysctl.c
> --- src/sbin/sysctl/sysctl.c18 Apr 2015 18:28:37 -  1.211
> +++ src/sbin/sysctl/sysctl.c28 Oct 2015 13:55:08 -
> @@ -215,6 +215,7 @@ int sysctl_emul(char *, char *, int);
>  #ifdef CPU_CHIPSET
>  int sysctl_chipset(char *, char **, int *, int, int *);
>  #endif
> +int sysctl_cptime2(char *, char **, int *, int, int *);
>  void vfsinit(void);
> 
>  char *equ = "=";
> @@ -412,6 +413,9 @@ parse(char *string, int flags)
> special |= LONGARRAY;
> lal = CPUSTATES;
> break;
> +   case KERN_CPTIME2:
> +   sysctl_cptime2(string, , mib, flags,
> );
> +   return;
> case KERN_SEMINFO:
> len = sysctl_seminfo(string, , mib, flags,
> );
> if (len < 0)
> @@ -2759,6 +2763,80 @@ sysctl_emul(char *string, char *newval,
> return (0);
> 
> 
> +}
> +
> +int
> +sysctl_cptime2(char *string, char **bufpp, int mib[], int flags, int
> *typep)
> +{
> +   int local_mib[2], ncpu, i, cpu;
> +   size_t len;
> +   u_int64_t cp_time2[CPUSTATES];
> +   char *second, *third;
> +   const char *errstr;
> +
> +   local_mib[0] = CTL_HW;
> +   local_mib[1] = HW_NCPU;
> +   len = sizeof(ncpu);
> +   if (sysctl(local_mib, 2, , , NULL, 0) == -1) {
> +   err(1, "%s can't get number of cpus (hw.ncpu)", string);
> +   return (0);
> +   }
> +
> +   len = sizeof(cp_time2);
> +   second = strchr(string, '.');
> +   if (!second) {
> +   errx(1, "%s: can't get mib second level name", string);
> +   return (0);
> +   }
> +   second++;
> +   third = strchr(second, '.');
> +   if (!third) {
> +   for (i = 0; i < ncpu; i++) {
> +   mib[2] = i;
> +   if (sysctl(mib, 3, _time2, , NULL, 0) ==
> -1) {
> +   warn("%s.%d can't get cpu states",
> string, i);
> +   continue;
> +   }
> +
> +   printf("%s.%d=%ld,%ld,%ld,%ld,%ld\n", string, i,
> +   cp_time2[CP_USER],
> +   cp_time2[CP_NICE],
> +   cp_time2[CP_SYS],
> +   cp_time2[CP_INTR],
> +   cp_time2[CP_IDLE]
> +   );
> +   }
> +   }
> +   else {
> +   third++;
> +   if (ncpu > 1) {
> +   cpu = strtonum(third, 0, ncpu - 1, );
> +   }
> +   else {
> +   cpu = strtonum(third, 0, 0, );
> +   }
> +   if (errstr) {
> +   errx(1, "%s: third level '%s' %s", string,
> third,
> +   errstr);
> +   return (0);
> +   }
> +
> +   mib[2] = cpu;
> +   if (sysctl(mib, 3, _time2, , NULL, 0) == -1) {
> +   warn("%s.%d can't get cpu states", string, i);
> +   return (0);
> +   }
> +
> +   printf("%s=%ld,%ld,%ld,%ld,%ld\n", string,
> +   cp_time2[CP_USER],
> +   cp_time2[CP_NICE],
> +   cp_time2[CP_SYS],
> +   cp_time2[CP_INTR],
> +   cp_time2[CP_IDLE]
> +   );
> +   }
> +
> +   return (1);
>  }
> 
>  static int
> Index: src/sbin/sysctl/sysctl.8
> ===
> RCS file: /cvs/src/sbin/sysctl/sysctl.8,v
> retrieving revision 1.187
> diff -u -p -u -r1.187 sysctl.8
> --- src/sbin/sysctl/sysctl.83 Oct 2015 09:17:13 -   1.187
> +++ src/sbin/sysctl/sysctl.828 Oct 2015 13:55:08 -
> @@ -153,6 +153,7 @@ and a few require a kernel compiled with
>  .It 

Re: top crash - pledge issue?

[Ricardo Mestre]

Hi,

Revision 1.81 from kern_pledge.c still doesn't solve the issue, miblen 
should be changed to 2 since machine.c from top(1) code is:


268 } else {
269 int cp_time_mib[] = {CTL_KERN, KERN_CPTIME};
270 long cp_time_tmp[CPUSTATES];
271
272 size = sizeof(cp_time_tmp);
273 if (sysctl(cp_time_mib, 2, cp_time_tmp, , NULL, 0) < 0)
274 warn("sysctl kern.cp_time failed");

By applying the patch below top(1) works again:

Index: kern_pledge.c
===
RCS file: /cvs/src/sys/kern/kern_pledge.c,v
retrieving revision 1.81
diff -u -p -u -r1.81 kern_pledge.c
--- kern_pledge.c   28 Oct 2015 02:12:54 -  1.81
+++ kern_pledge.c   28 Oct 2015 07:44:20 -
@@ -908,7 +908,7 @@ pledge_sysctl_check(struct proc *p, int
if (miblen == 2 &&  /* kern.loadavg */
mib[0] == CTL_VM && mib[1] == VM_LOADAVG)
return (0);
-   if (miblen == 3 &&  /* kern.cptime */
+   if (miblen == 2 &&  /* kern.cptime */
mib[0] == CTL_KERN && mib[1] == KERN_CPTIME)
return (0);
if (miblen == 3 &&  /* kern.cptime2 */

Best regards,
Ricardo Mestre

On 27/10/2015 19:37, Ricardo Mestre wrote:

Hi people,

I can confirm this regress, just updated the kernel and top and had 
the same issue, but this diff seems to solve it, I just don't know if 
it's the right place to put it or not:


Index: kern_pledge.c
===
RCS file: /cvs/src/sys/kern/kern_pledge.c,v
retrieving revision 1.80
diff -u -p -u -r1.80 kern_pledge.c
--- kern_pledge.c   26 Oct 2015 17:52:19 -  1.80
+++ kern_pledge.c   27 Oct 2015 19:32:09 -
@@ -911,6 +911,9 @@ pledge_sysctl_check(struct proc *p, int
if (miblen == 3 &&  /* 
kern.cptime2 */

mib[0] == CTL_KERN && mib[1] == KERN_CPTIME2)
return (0);
+   if (miblen == 2 &&  /* kern.cp_time */
+   mib[0] == CTL_KERN && mib[1] == KERN_CPTIME)
+   return (0);
}

if ((p->p_p->ps_pledge & PLEDGE_PS)) {

Best regards,
Ricardo Mestre

On 27/10/2015 19:00, Mike wrote:

OpenBSD 5.8-current (GENERIC) #1: Tue Oct 27 12:31:10 EDT 2015
m...@otest.24cl.home:/usr/src/sys/arch/amd64/compile/GENERIC


I didn't see anything in current.html that may affect this.

I downloaded the Oct 20 snapshot.  Then I updated the source to current
this morning.  After the build, top crashes immediately upon invocation.

# top
Abort (core dumped)


In messages.log, I see two lines:

Oct 27 14:52:22 otest /bsd: top(12603): sysctl 2: 1 40 -2129088583 -1
981777920 -255

Oct 27 14:52:22 otest /bsd: top(12603): syscall 202 "stdio"


which looks like it may be pledge output.

If I need to do something else to track this let me know.  I can make
the core dump available to download, if needed.

thx.

Re: passive mode ftp pf.conf OpenBSD 5.6 i386

[Marcus MERIGHI]

grazzol...@gmail.com (Giancarlo Razzolini), 2015.10.23 (Fri) 20:09 (CEST):
> p.s.: Please let FTP run its course and die! I beg you. Every time an
> admin starts a ftp server, a puppy dies. Consider using SSH. Or, if you
> must, DAV.

Giancarlo, do you know of any software that does DAV the way ftpds do
FTP? 
I've been looking for options recently and was baffled about the lack
thereof. 

DAV service is usually built into a HTTPd (apache2, nginx, lighttpd)
as a module. The server runs as non-root user (fortunately).
No way to setuid to the user that just entered username/password.

Additionally, HTTPds hopefully run chrooted. Not much room for separate
user spaces. 

I'm afraid there is no real (Web)DAVd. 
(Apart from davenport, which is tomcat+davenport+samba. wow.)

Bye (and thanks in advance), Marcus

> !DSPAM:562a7929263863582710418!

Re: New httpd with slowcgi not running Perl scripts

[Sebastien Marie]

Hi Daniel,

On Wed, Oct 28, 2015 at 12:24:01PM -0200, daniel.san...@metavista.com.br wrote:
> 
> My /etc/rc.conf is ...
> ---
> httpd_flags=""
> slowcgi_flags=""
> ---
> 
> My test script is ...
> ---
> #!/usr/bin/perl
> print "Content type: text/html\n\n";

I think you want:

print "Content-Type: text/html\n\n";

> print "hello world";
> ---

-- 
Sebastien Marie

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Michael McConville]

Benny Lofgren wrote:
> On 2015-10-28 15:32, Michael McConville wrote:
> > Andrei-Marius Radu wrote:
> >>
> >> Is there anyone else who thinks this is needed/a good idea ?
> > 
> > For what it's worth, I was porting htop recently and I think I
> > remember it being painful to work without KERN_CPTIME2. I'd have to
> > look back (and look at this diff), though.
> 
> +1 on this, I would definitely find this useful.
> 
> Michael, as far as I can tell KERN_CPTIME2 is already in the kernel.
> As I understand it, it is just support for access via sysctl(8) that
> is lacking. But maybe htop uses that rather than sysctl(3)? Doesn't
> seem likely though.

Right, my bad. It must have been something else in htop's FreeBSD or
Linux code that I had to work around.

Re: New httpd with slowcgi not running Perl scripts

[daniel.san...@metavista.com.br]

Hello Sebastien,

Yes, I mean with "-" ...
print "Content-Type: text/html\n\n";

Thanks for your supoort.



On 10/28/2015 1:43 PM, Sebastien Marie wrote:
> Hi Daniel,
>
> On Wed, Oct 28, 2015 at 12:24:01PM -0200, daniel.san...@metavista.com.br 
> wrote:
>> My /etc/rc.conf is ...
>> ---
>> httpd_flags=""
>> slowcgi_flags=""
>> ---
>>
>> My test script is ...
>> ---
>> #!/usr/bin/perl
>> print "Content type: text/html\n\n";
> I think you want:
>
> print "Content-Type: text/html\n\n";
>
>> print "hello world";
>> ---

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

[Andrei-Marius Radu]

Thank you both for your comments.

An updated patch, in the first one I missed handling the -n flag :(

# ./sysctl kern.cp_time
kern.cp_time=23725,0,189448,89073,27969981
# ./sysctl kern.cp_time2
kern.cp_time2.0=30675,0,204640,342526,27687398
kern.cp_time2.1=13907,0,119539,2129,28140911
kern.cp_time2.2=19826,0,162028,3620,28090129
kern.cp_time2.3=30492,0,271589,8022,27962123
# ./sysctl kern.cp_time2.0
kern.cp_time2.0=30675,0,204640,342527,27687581
# ./sysctl kern.cp_time2.1
kern.cp_time2.1=13907,0,119539,2129,28141226
# ./sysctl kern.cp_time2.2
kern.cp_time2.2=19826,0,162029,3620,28090527
# ./sysctl kern.cp_time2.3
kern.cp_time2.3=30493,0,271594,8022,27962683
# ./sysctl kern.cp_time2.4
sysctl: kern.cp_time2.4: third level '4' too large
# ./sysctl hw.ncpu
hw.ncpu=4
# ./sysctl kern.cp_time2.-1
sysctl: kern.cp_time2.-1: third level '-1' too small
# ./sysctl kern.cp_time2.a
sysctl: kern.cp_time2.a: third level 'a' invalid
# ./sysctl kern.cp_time2.
sysctl: kern.cp_time2.: third level '' invalid
# ./sysctl kern.cp_time2.0.0.0
sysctl: kern.cp_time2.0.0.0: third level '0.0.0' invalid
# ./sysctl -n kern.cp_time2
30678,0,204669,342565,27691239
13907,0,119546,2129,28144816
19827,0,162053,3620,28094016
30495,0,271635,8023,27965986
# ./sysctl -n kern.cp_time2.0
30678,0,204669,342573,27691470
# ./sysctl -a 2>&1 | egrep -i cp_time
kern.cp_time=23728,0,189500,89091,27977016
kern.cp_time2.0=30680,0,204701,342594,27694212
kern.cp_time2.1=13907,0,119553,2129,28147846
kern.cp_time2.2=19828,0,162082,3621,28097021
kern.cp_time2.3=30499,0,271666,8023,27968987
# ./sysctl -A 2>&1 | egrep -i cp_time
kern.cp_time=23729,0,189504,89092,27977436
kern.cp_time2.0=30681,0,204707,342597,27694629
kern.cp_time2.1=13908,0,119554,2129,28148270
kern.cp_time2.2=19828,0,162088,3621,28097441
kern.cp_time2.3=30500,0,271671,8023,27969406

-- 
Andrei.

Index: src/sbin/sysctl/sysctl.c
===
RCS file: /cvs/src/sbin/sysctl/sysctl.c,v
retrieving revision 1.211
diff -u -p -u -r1.211 sysctl.c
--- src/sbin/sysctl/sysctl.c18 Apr 2015 18:28:37 -  1.211
+++ src/sbin/sysctl/sysctl.c28 Oct 2015 16:18:43 -
@@ -215,6 +215,7 @@ int sysctl_emul(char *, char *, int);
 #ifdef CPU_CHIPSET
 int sysctl_chipset(char *, char **, int *, int, int *);
 #endif
+int sysctl_cptime2(char *, char **, int *, int, int *);
 void vfsinit(void);

 char *equ = "=";
@@ -412,6 +413,9 @@ parse(char *string, int flags)
special |= LONGARRAY;
lal = CPUSTATES;
break;
+   case KERN_CPTIME2:
+   sysctl_cptime2(string, , mib, flags,
);
+   return;
case KERN_SEMINFO:
len = sysctl_seminfo(string, , mib, flags,
);
if (len < 0)
@@ -2759,6 +2763,84 @@ sysctl_emul(char *string, char *newval,
return (0);


+}
+
+int
+sysctl_cptime2(char *string, char **bufpp, int mib[], int flags, int
*typep)
+{
+   int local_mib[2], ncpu, i, cpu;
+   size_t len;
+   u_int64_t cp_time2[CPUSTATES];
+   char *second, *third;
+   const char *errstr;
+
+   local_mib[0] = CTL_HW;
+   local_mib[1] = HW_NCPU;
+   len = sizeof(ncpu);
+   if (sysctl(local_mib, 2, , , NULL, 0) == -1) {
+   err(1, "%s can't get number of cpus (hw.ncpu)", string);
+   return (0);
+   }
+
+   len = sizeof(cp_time2);
+   second = strchr(string, '.');
+   if (!second) {
+   errx(1, "%s: can't get mib second level name", string);
+   return (0);
+   }
+   second++;
+   third = strchr(second, '.');
+   if (!third) {
+   for (i = 0; i < ncpu; i++) {
+   mib[2] = i;
+   if (sysctl(mib, 3, _time2, , NULL, 0) ==
-1) {
+   warn("%s.%d can't get cpu states",
string, i);
+   continue;
+   }
+
+   if (!nflag)
+   (void)printf("%s.%d=", string, i);
+   (void)printf("%ld,%ld,%ld,%ld,%ld\n",
+   cp_time2[CP_USER],
+   cp_time2[CP_NICE],
+   cp_time2[CP_SYS],
+   cp_time2[CP_INTR],
+   cp_time2[CP_IDLE]
+   );
+   }
+   }
+   else {
+   third++;
+   if (ncpu > 1) {
+   cpu = strtonum(third, 0, ncpu - 1, );
+   }
+   else {
+   cpu = strtonum(third, 0, 0, );
+   }
+   if (errstr) {
+   errx(1, "%s: third level '%s' %s", string,
third,
+   errstr);
+   return (0);
+   }
+
+   mib[2] = 

Re: Fixes to donor list

[ropers]

On 26 October 2015 at 21:26, Tae Wong  wrote:

> The page is located at http://www.openbsd.org/donations.html
>
> Duplicate donors to remove:
> (...)
> Have some names not capitalized.
> (...)
> I [don't] know if someone can create a patch
>

Yah, okay, I'll do it, seeing that I've long not been generally useful to
the project, but maybe this is, in the *tiniest* of ways.

(If this message doesn't end with a joke, then this diff got truncated. NB:
The list is supposedly chronological, but parts are clearly alphabetical,
probably because a bunch of entries that didn't have date info got added to
this list in one fell swoop. Still, I tried to take care to keep the
*first* mention of a donor name in place, and I tried to preserve the
layout. It probably doesn't matter much, because this list is dated, as it
says right there on the page, but anyway. Feel free to ignore this diff if
it isn't useful. @Tae Wong: Just in case: Do you want me to tell you how to
make a diff like this?)

--- donations.html.orig2015-10-28 16:28:35.0 +0100
+++ donations.html2015-10-28 18:49:00.0 +0100
@@ -84,7 +84,7 @@

 
 The following is a chronological list of people and organizations who
-contributed direct to OpenBSD, OpenSSH, and our related projects during the
+contributed directly to OpenBSD, OpenSSH, and our related projects during
the
 early years (1997 - 2011).  Nowadays this is updated less frequently, as
 contributions are primarily managed by the
 http://www.openbsdfoundation.org/contributors.html;>OpenBSD
Foundation.
@@ -225,7 +225,6 @@
 Chris Hancock
 Kazuhisa Ichikawa
 Jos Polman
-Mike DuFresne
 Art Freeman
 Ho Soo Khim
 Jim Lawson
@@ -811,7 +810,7 @@
 Vincent Szopa
 Jonathan M. Prigot
 Erich Petzwinkler
-Steven Lindell
+Steven Rex Lindell
 David T. Brady
 P. D. P. Pennock
 Huy Vu
@@ -819,7 +818,7 @@
 Theodore Coolidge
 Markus Minihold
 Lars Josephsen
-James Zuelow
+James F Zuelow Jr
 Antonio Borba
 Gilles Lacarriere
 Don Phillips
@@ -961,7 +960,6 @@
 Andy Keep
 http://www.reputable.com/;>Reputable
Systems
 Howard Benson
-Steve Lindell
 Al Carruth
 Gordon Grieder
 Dan Herrera
@@ -1413,7 +1411,6 @@
 Hannu Liljemark
 Rob Pierce
 Chad A. Musson
-S. R. Lindell
 Lars Cleary
 Mark A. Rottler
 http://www.weirdnet.nl/openbsd/;>Paul de
Weerd
@@ -1583,7 +1580,6 @@
 Eric Brown
 Bruno Scap
 Daniel R. Haney
-S. Rex Lindell
 Eric Pancer
 William E. Friedman
 Matthew Gregan
@@ -1979,7 +1975,6 @@
 Marcello Morsello
 Kevin Reay
 Ed Mulligan
-Vandenheede Bjorn
 Mark Dowe
 Duane A. Damiano
 Daniel Wade
@@ -2140,7 +2135,7 @@
 Roger Neth Jr
 Jeff Moss
 Teemu Schaabl
-J Valentijn
+Jasper Valentijn
 Joel Knight
 Kazuo Takimoto
 Sime Reig i Pellej
@@ -2485,9 +2480,9 @@
 Eddie Penninkhof
 Kevin Caswick
 Tyler Spaeth
-
 Lesley Mays
 Chak Man Yeung
+
 Christopher Connor
 Andrew Sveikauskas
 Jeffrey Muse
@@ -3236,7 +3231,6 @@
 http://www.wildpackets.com;>WildPackets,
Inc.
 Alexander Scott
 Tom Barnes
-James F. Zuelow
 Guillaume Desrat
 Nils Jensen
 ATN, Inc.
@@ -3696,8 +3690,8 @@
 http://www.bwi.com/;>BWI
 Chris Bagnadov
 Calyptix Security
-
 http://www.reedmedia.net/;>Reed Media
Services
+
 http://www.meinberg.de/;>Meinberg Funkuhren
GmbH
 Jurjen Oskam
 Travers Buda
@@ -3747,7 +3741,6 @@
 Seth Milliken
 Chad M Gross
 Brian P Bilbrey
-Luis J Cortes Jr
 Jonathan E Franks
 Nathaniel T Moore
 Peter J Fraser
@@ -3763,17 +3756,15 @@
 Vidar Jrgensen
 Jesse L Charbneau
 Cemil Degirmenci
-Dario M Gomez Vidal
 William  Okerstrom
 Anders stergaard
 Mark J Stralka
 Henrik S Martin
 Carl Rigney
-James F Zuelow
 Frdric Nadeau
 Matthew Branton
 Kevin J. Stone
-D. B. Quayle
+Douglas B. Quayle
 Michael Hornung
 Paul DeStefano
 Juan Fuentes
@@ -3814,19 +3805,15 @@
 Dan Ramaley
 Peter Hansen
 Joseph A Carchidi
-James F Zuelow Jr
 David Kaye
 Ryan Fernandez
 R. Krieger
 Jim Lippard
 Nicholas Brenckle
 Gene Yoo
-Vaissiere Alexandre
 Jens Erik Holtegaard
-Jasper Valentijn
 Terje Sten Bjerkseth
 Michael Lechtermann
-Tournier Romain
 Michael Wolman
 EPTE Oy
 Andreas Frischknecht
@@ -3968,7 +3955,6 @@
 Jimmie Eriksson
 Robert Bronson
 George Bristol
-Douglas B. Quayle
 http://www.gfu.net;>GFU Cyrus AG
 Vladimir Bogodist
 Tom Hendrix
@@ -3987,7 +3973,7 @@
 Lawrence Hughes
 Brent Seidel
 Kyle George
-http://www.blackhats.es/;>Borja Tarras
Hueso
+http://www.blackhats.es/;>Borja Manuel
Tarras Hueso
 Gilles Risch
 Stefan Marx
 http://www.upc.hu/;>UPC Hungary Ltd.
@@ -3996,7 +3982,7 @@
 http://www.kuppo.nl;>Cindy and Adriaan
 William Boshuck
 mailto:warch...@spoofed.org;>Patrick Clochesy
-Sren Aurehj
+Sren Kajander Aurehj
 Glenn Kennedy
 Roman Tishkin
 Dannatu AG
@@ -4012,7 +3998,6 @@
 http://louhevly.com;>Lou Hevly
 Kevin Turner
 Thomas Dettbarn
-J. Valentijn
 LaDerrick Honeycutt
 Bo Granlund
 Hudson Kingery
@@ -4059,7 +4044,7 @@
 http://www.canadianwebhosting.com;>Canadian
Web Hosting
 Predrag Punosevac
 Curt Leuch
-Eero Volotinen
+Eero T Volotinen
 Peter Brett
 http://startek.ch/;>StarTek
 http://www.forumjunkies.net;>Forum 

Re: Fixes to donor list

[Theo de Raadt]

I've said it before; I'll repeat myself.

I am not going to change the record of past donations.  The list is
not updated anymore.  For one, you are introducing errors that cannot
be confirmed.  It is not clear if "James Zuelow" is "James F Zuelow
Jr", or if there is a different "James [Patrick] Zuelow" who contributed.
Your assumptions will not be verified by me going through 20 years of
offline email.  We all have better things to do.

So these changes will not be done, and I hope I don't receive more diffs
like this in the future.

> On 26 October 2015 at 21:26, Tae Wong  wrote:
> 
> > The page is located at http://www.openbsd.org/donations.html
> >
> > Duplicate donors to remove:
> > (...)
> > Have some names not capitalized.
> > (...)
> > I [don't] know if someone can create a patch
> >
> 
> Yah, okay, I'll do it, seeing that I've long not been generally useful to
> the project, but maybe this is, in the *tiniest* of ways.
> 
> (If this message doesn't end with a joke, then this diff got truncated. NB:
> The list is supposedly chronological, but parts are clearly alphabetical,
> probably because a bunch of entries that didn't have date info got added to
> this list in one fell swoop. Still, I tried to take care to keep the
> *first* mention of a donor name in place, and I tried to preserve the
> layout. It probably doesn't matter much, because this list is dated, as it
> says right there on the page, but anyway. Feel free to ignore this diff if
> it isn't useful. @Tae Wong: Just in case: Do you want me to tell you how to
> make a diff like this?)
> 
> --- donations.html.orig2015-10-28 16:28:35.0 +0100
> +++ donations.html2015-10-28 18:49:00.0 +0100
> @@ -84,7 +84,7 @@
> 
>  
>  The following is a chronological list of people and organizations who
> -contributed direct to OpenBSD, OpenSSH, and our related projects during the
> +contributed directly to OpenBSD, OpenSSH, and our related projects during
> the
>  early years (1997 - 2011).  Nowadays this is updated less frequently, as
>  contributions are primarily managed by the
>  http://www.openbsdfoundation.org/contributors.html;>OpenBSD
> Foundation.
> @@ -225,7 +225,6 @@
>  Chris Hancock
>  Kazuhisa Ichikawa
>  Jos Polman
> -Mike DuFresne
>  Art Freeman
>  Ho Soo Khim
>  Jim Lawson
> @@ -811,7 +810,7 @@
>  Vincent Szopa
>  Jonathan M. Prigot
>  Erich Petzwinkler
> -Steven Lindell
> +Steven Rex Lindell
>  David T. Brady
>  P. D. P. Pennock
>  Huy Vu
> @@ -819,7 +818,7 @@
>  Theodore Coolidge
>  Markus Minihold
>  Lars Josephsen
> -James Zuelow
> +James F Zuelow Jr
>  Antonio Borba
>  Gilles Lacarriere
>  Don Phillips
> @@ -961,7 +960,6 @@
>  Andy Keep
>  http://www.reputable.com/;>Reputable
> Systems
>  Howard Benson
> -Steve Lindell
>  Al Carruth
>  Gordon Grieder
>  Dan Herrera
> @@ -1413,7 +1411,6 @@
>  Hannu Liljemark
>  Rob Pierce
>  Chad A. Musson
> -S. R. Lindell
>  Lars Cleary
>  Mark A. Rottler
>  http://www.weirdnet.nl/openbsd/;>Paul de
> Weerd
> @@ -1583,7 +1580,6 @@
>  Eric Brown
>  Bruno Scap
>  Daniel R. Haney
> -S. Rex Lindell
>  Eric Pancer
>  William E. Friedman
>  Matthew Gregan
> @@ -1979,7 +1975,6 @@
>  Marcello Morsello
>  Kevin Reay
>  Ed Mulligan
> -Vandenheede Bjorn
>  Mark Dowe
>  Duane A. Damiano
>  Daniel Wade
> @@ -2140,7 +2135,7 @@
>  Roger Neth Jr
>  Jeff Moss
>  Teemu Schaabl
> -J Valentijn
> +Jasper Valentijn
>  Joel Knight
>  Kazuo Takimoto
>  Sime Reig i Pellej
> @@ -2485,9 +2480,9 @@
>  Eddie Penninkhof
>  Kevin Caswick
>  Tyler Spaeth
> -
>  Lesley Mays
>  Chak Man Yeung
> +
>  Christopher Connor
>  Andrew Sveikauskas
>  Jeffrey Muse
> @@ -3236,7 +3231,6 @@
>  http://www.wildpackets.com;>WildPackets,
> Inc.
>  Alexander Scott
>  Tom Barnes
> -James F. Zuelow
>  Guillaume Desrat
>  Nils Jensen
>  ATN, Inc.
> @@ -3696,8 +3690,8 @@
>  http://www.bwi.com/;>BWI
>  Chris Bagnadov
>  Calyptix Security
> -
>  http://www.reedmedia.net/;>Reed Media
> Services
> +
>  http://www.meinberg.de/;>Meinberg Funkuhren
> GmbH
>  Jurjen Oskam
>  Travers Buda
> @@ -3747,7 +3741,6 @@
>  Seth Milliken
>  Chad M Gross
>  Brian P Bilbrey
> -Luis J Cortes Jr
>  Jonathan E Franks
>  Nathaniel T Moore
>  Peter J Fraser
> @@ -3763,17 +3756,15 @@
>  Vidar Jrgensen
>  Jesse L Charbneau
>  Cemil Degirmenci
> -Dario M Gomez Vidal
>  William  Okerstrom
>  Anders stergaard
>  Mark J Stralka
>  Henrik S Martin
>  Carl Rigney
> -James F Zuelow
>  Frdric Nadeau
>  Matthew Branton
>  Kevin J. Stone
> -D. B. Quayle
> +Douglas B. Quayle
>  Michael Hornung
>  Paul DeStefano
>  Juan Fuentes
> @@ -3814,19 +3805,15 @@
>  Dan Ramaley
>  Peter Hansen
>  Joseph A Carchidi
> -James F Zuelow Jr
>  David Kaye
>  Ryan Fernandez
>  R. Krieger
>  Jim Lippard
>  Nicholas Brenckle
>  Gene Yoo
> -Vaissiere Alexandre
>  Jens Erik Holtegaard
> -Jasper Valentijn
>  Terje Sten Bjerkseth
>  Michael Lechtermann
> -Tournier Romain
>  Michael Wolman
>  EPTE Oy
>  Andreas Frischknecht
> @@ -3968,7 +3955,6 @@
>  Jimmie Eriksson
>  

Re: What hardware spec would I need to push 20 gigabit of network traffic on an OpenBSD server?

[Adam Thompson]

Thank you for the reply. I see now that my request was wildly 
unrealistic.

Not "wildly", just unrealistic unless you have a massive budget.

Basically I'm trying to write a business plan and am trying to plan 
for the worst case scenario so I don't fall over if traffic somehow 
spikes to such levels. My expected level of traffic is probably in the 
300 megabits a second range but the incoming links from my upstream 
provider are 10GbE so I need to have some plan just in case I get a 
spike of 10 gigabits (as unlikely as that may be I still need to plan 
for it).
I would suggest simply limiting your incoming traffic... and paying for 
less bandwidth.  Most providers are quite happy to sell you, e.g. 4Gbps 
capacity on a 10Gbps physical line.  That moves the problem back a layer 
to the "someone else's problem" domain.


I haven't ruled out the possibility of using Cisco / Juniper for some 
of my requirements but obviously would like to use OpenBSD if possible 
because I've used it in the past and it includes everything that I 
need and best of all the documentation is excellent.
I think you might be able to do 10Gbps of L2TP traffic on Linux or 
FreeBSD (on commodity hardware) if you use one of the highly-optimized 
networking stacks that are available (e.g. DPDK). But even they won't 
handle it gracefully.
I'm not even certain that Cisco or Juniper gear will decapsulate L2tP 
traffic at that rate.


I can drop the logging requirement pretty easily. That isn't really 
important at all.


I wonder what other people do when they are disaster planning for 
their new services? At the same time I wonder how the internet 
backbone is handled. As far as I am aware they handle speeds of about 
100 gigabits a second so the hardware / software must be available for 
handling such speeds. I just guess they are ridiculously expensive to 
buy and maintain (well outside my budget anyway).

You build-to-budget.
The 100Gbps backbones/routers you hear about are a) few and far between, 
b) insanely expensive (multi-millions of dollars), and c) only shuttling 
packets as-is from one port to another.
Everyone else just buys what they can afford, and then they take steps 
(like throttling) to ensure their servers don't fall over.  Of course, a 
lot of people just let their servers fall over, too...


Also: load-balancers.

-Adam

Re: Minor fix for events.html: closing a tag

[lists]

> On Wed, 28 Oct 2015 12:51:27 -0600 (MDT) Giovanni Bechis
>  wrote:
> 
> > CVSROOT:/cvs
> > Module name:www
> > Changes by: giova...@cvs.openbsd.org2015/10/28 12:51:27
> > 
> > Modified files:
> > .  : events.html 
> > 
> > Log message:
> > I will give 2 talks at OpenSourceDay at the university of Udine, Italy
> > 
> >   
> 
> Hi Giovanni,
> 
> Spotted this a while back and thought it may be a mistype that would
> be corrected on follow up updates, please see if this fixes anything.

Readjustment to match www/events.html r1.1007

Regards,
Anton Lazarov

$ diff -u events.html{.orig,}
--- events.html.origThu Oct 29 00:01:59 2015
+++ events.html Thu Oct 29 00:02:43 2015
@@ -69,7 +69,7 @@
 
 http://events.linuxfoundation.org/events/linuxcon-europe;>LinuxCon 
Europe 2015,
 October 5-7, 2015, Dublin, Ireland.
-Giovanni Bechis gave a talk about http://www.snb.it/downloads/opensmtpd-LinuxCon2015.pdf;>OpenSMTPD
+Giovanni Bechis gave a talk about http://www.snb.it/downloads/opensmtpd-LinuxCon2015.pdf;>OpenSMTPD
 
 
 

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

[Michael McConville]

> Is there any opinion, policy or conclusion about newer & easier MAC
> implementation like Tomoyo or SMACK?

$ man pledge

That said, pledge is for trusted programs exposed to untrusted remote
input, which differs from MAC frameworks meant to tame sketchy binaries.

Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

[김운하]

I just finished 'Absolute OpenBSD 2nd edtion'
 and drank too much OpenBSD kool-aid.

I have some linux experience.
(which helped a lot  flattening learning curve for OpenBSD)
I am doing research if there is any missing functionality
preventing me changing server OS from Linux to OpenBSD.

I found softdep which can be a good substitute for journaling filesystem.
But, I got to know that MAC(Mandatory Access Control) is not there,
based on 'new functionality == new bug' philosophy of OpenBSD.

I also have bad memory with SELinux, 
and I fully understand and agree to no-no to the old & complex MAC.

But, some experience with recent MAC like Tomoyo Linux and SMACK, 
I got to know that MAC don't have to be that complex,
Any newbie (including me) can set up whole system security policy 
by himself(or herself) easily and safely.
And, such a easy and accessible MAC can help minimizing 
the damage after breach as a last resort.

I read newbie question and answer about MAC(mandatory access control) at
http://marc.info/?l=openbsd-misc=118351513004163=2

>I would like to know
>from you why OpenBSD does not implement this type of mechanism.

STFA! or JFGI!
About the third or fourth hit will tell you.
Doing your own research before asking here is strongly recommended.


So, I googled.
site:marc.info openbsd mandatory access control
site:gmane.org openbsd mandatory access control
site:marc.info openbsd tomoyo
site:gmane.org openbsd tomoyo
without any particulary helpful search result.
Maybe, MAC is out of interest in OpenBSD world for too long time?

Is there any opinion, policy or conclusion about 
newer & easier MAC implementation like Tomoyo or SMACK?

I know newbie question like this is not recommended.
But, I did my homework before this question.

If you are fed up with newbie questions like this,
any short hint or web link will be very appreciated.

UnHa Kim [IMAGE]

Minor fix for events.html: closing a tag

[lists]

On Wed, 28 Oct 2015 12:51:27 -0600 (MDT) Giovanni Bechis
 wrote:

> CVSROOT:  /cvs
> Module name:  www
> Changes by:   giova...@cvs.openbsd.org2015/10/28 12:51:27
> 
> Modified files:
>   .  : events.html 
> 
> Log message:
> I will give 2 talks at OpenSourceDay at the university of Udine, Italy
> 
> 

Hi Giovanni,

Spotted this a while back and thought it may be a mistype that would
be corrected on follow up updates, please see if this fixes anything.

Regards,
Anton Lazarov

$ diff -u events.html{.orig,} 
--- events.html.origWed Oct 28 22:56:28 2015
+++ events.html Wed Oct 28 22:55:44 2015
@@ -62,7 +62,7 @@
 
 http://events.linuxfoundation.org/events/linuxcon-europe;>LinuxCon 
Europe 2015,
 October 5-7, 2015, Dublin, Ireland.
-Giovanni Bechis gave a talk about http://www.snb.it/downloads/opensmtpd-LinuxCon2015.pdf;>OpenSMTPD
+Giovanni Bechis gave a talk about http://www.snb.it/downloads/opensmtpd-LinuxCon2015.pdf;>OpenSMTPD
 
 
 

Re: compulab fitlet, non-working intel i211 ethernet, help requested

[Jonathan Gray]

On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote:
> i like these little boxes; they are silent and stable and perfect for plenty
> of my projects. this new version promises to be better than the several fit2
> machines i have scattered around customer sites, affording more cores and
> memory.
> 
> the man page for em shows the i211 to be supported. this machine uses that
> chip, and it is even reported by the kernel - but still does not work. is it
> possible that its specific id is simply missing from the driver, or is there
> more to it than that?
> 
> i booted the computer via pxe, so the ethernet is clearly working. it
> shipped with linux, and networking worked there too.
> 
> of course it'd be nice for all the other bits to be in working order as
> well, but at the moment ethernet is the most important for my purposes.
> 
> please let me know what i can do to get this working, or how i can assist
> otherwise.

If you can get the dmesg output of a kernel built with the following
diff it should indicate where the problem is:

Index: sys/dev/pci/if_em_osdep.h
===
RCS file: /cvs/src/sys/dev/pci/if_em_osdep.h,v
retrieving revision 1.12
diff -u -p -r1.12 if_em_osdep.h
--- sys/dev/pci/if_em_osdep.h   5 Oct 2011 02:52:10 -   1.12
+++ sys/dev/pci/if_em_osdep.h   29 Oct 2015 03:27:36 -
@@ -44,7 +44,8 @@ POSSIBILITY OF SUCH DAMAGE.
 
 #define MSGOUT(S, A, B)printf(S "\n", A, B)
 #define DEBUGFUNC(F)   DEBUGOUT(F);
-#ifdef DBG
+//#ifdef DBG
+#if 1
#define DEBUGOUT(S) printf(S "\n")
#define DEBUGOUT1(S,A)  printf(S "\n",A)
#define DEBUGOUT2(S,A,B)printf(S "\n",A,B)

Re: Killing Rebound(8) in current hard locks system.

[Ted Unangst]

Gerald Hanuer wrote:
>  Hello misc@,
> 
>  Killing Rebound(8) in current hard locks system.

Thanks. We've found the cause of the bug. Now we're trying to find the bug. :)

compulab fitlet, non-working intel i211 ethernet, help requested

[Dewey Hylton]

i like these little boxes; they are silent and stable and perfect for plenty
of my projects. this new version promises to be better than the several fit2
machines i have scattered around customer sites, affording more cores and
memory.

the man page for em shows the i211 to be supported. this machine uses that
chip, and it is even reported by the kernel - but still does not work. is it
possible that its specific id is simply missing from the driver, or is there
more to it than that?

i booted the computer via pxe, so the ethernet is clearly working. it
shipped with linux, and networking worked there too.

of course it'd be nice for all the other bits to be in working order as
well, but at the moment ethernet is the most important for my purposes.

please let me know what i can do to get this working, or how i can assist
otherwise.

dmesg follows; sd1 is the thumb drive i used to store the dmesg output:


OpenBSD 5.8-current (RAMDISK_CD) #1392: Wed Oct 28 16:07:09 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD
real mem = 3934593024 (3752MB)
avail mem = 3813629952 (3636MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xecbf0 (62 entries)
bios0: vendor American Megatrends Inc. version "SBCFLT_0.08.04" date
06/27/2015
bios0: CompuLab fitlet
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG ASF! HPET WDRT SSDT SSDT SSDT
SSDT SSDT SSDT SSDT SSDT
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD A4 Micro-6400T APU + AMD Radeon R3 Graphics, 998.27 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPC
NT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPI
CSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu0: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line
16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, IBE
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 5 pa 0xfec0, version 21, 24 pins
ioapic1 at mainbus0: apid 6 pa 0xfec01000, version 21, 32 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (GFX_)
acpiprt2 at acpi0: bus -1 (GPP0)
acpiprt3 at acpi0: bus -1 (GPP1)
acpiprt4 at acpi0: bus -1 (GPP2)
acpiprt5 at acpi0: bus 1 (GPP3)
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 vendor "AMD", unknown product 0x1566 rev 0x00
vga1 at pci0 dev 1 function 0 vendor "ATI", unknown product 0x9854 rev 0x02
vga1: aperture needed
wsdisplay1 at vga1 mux 1: console (80x25, vt100 emulation)
vendor "ATI", unknown product 0x9840 (class multimedia subclass hdaudio, rev
0x00) at pci0 dev 1 function 1 not configured
pchb1 at pci0 dev 2 function 0 vendor "AMD", unknown product 0x156b rev 0x00
ppb0 at pci0 dev 2 function 5 "AMD AMD64 16h PCIE" rev 0x00: msi
pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 "Intel I211" rev 0x03: msiem0: Hardware
Initialization Failedem0: Unable to initialize the hardware
vendor "AMD", unknown product 0x1537 (class crypto subclass miscellaneous,
rev 0x00) at pci0 dev 8 function 0 not configured
xhci0 at pci0 dev 16 function 0 vendor "AMD", unknown product 0x7814 rev
0x11: msi
usb0 at xhci0: USB revision 3.0
uhub0 at usb0 "AMD xHCI root hub" rev 3.00/1.00 addr 1
ahci0 at pci0 dev 17 function 0 "AMD Hudson-2 SATA" rev 0x40: msi, AHCI 1.3
ahci0: port 1: 6.0Gb/s
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 1 lun 0:  SCSI3 0/direct
fixed naa.5001b44e703a2201
sd0: 61057MB, 512 bytes/sector, 125045424 sectors, thin
ehci0 at pci0 dev 18 function 0 "AMD Hudson-2 USB2" rev 0x39: apic 5 int 18
usb1 at ehci0: USB revision 2.0
uhub1 at usb1 "AMD EHCI root hub" rev 2.00/1.00 addr 1
ehci1 at pci0 dev 19 function 0 "AMD Hudson-2 USB2" rev 0x39: apic 5 int 18
usb2 at ehci1: USB revision 2.0
uhub2 at usb2 "AMD EHCI root hub" rev 2.00/1.00 addr 1
"AMD Hudson-2 SMBus" rev 0x42 at pci0 dev 20 function 0 not configured
"AMD Hudson-2 HD Audio" rev 0x02 at pci0 dev 20 function 2 not configured
"AMD Hudson-2 LPC" rev 0x11 at pci0 dev 20 function 3 not configured
sdhc0 at pci0 dev 20 function 7 vendor "AMD", unknown product 0x7813 rev
0x01: apic 5 int 16
sdhc0 at 0x10: can't map registers
pchb2 at pci0 dev 24 function 0 vendor "AMD", unknown product 0x1580 rev
0x00
pchb3 at pci0 dev 24 function 1 vendor "AMD", unknown product 0x1581 rev
0x00
pchb4 at pci0 dev 24 function 2 vendor "AMD", unknown product 0x1582 rev
0x00
pchb5 at pci0 dev 24 function 3 vendor "AMD", unknown product 0x1583 rev
0x00
pchb6 at pci0 dev 24 function 4 vendor "AMD", unknown product 0x1584 rev
0x00
pchb7 at pci0 dev 24 function 5 vendor "AMD", unknown product 0x1585 rev

Re: GPT instalboot

[Theo de Raadt]

> On Oct 28 12:55:27, s...@openbsd.org wrote:
> > usr.sbin/installboot: i386_softraid.c 
> > In sr_install_bootblk for i386, don't clobber 'part' in non-GPT case.
> > Found the hard way by reyk@.
> > stupid mistake stsp@
> > ok reyk@
> 
> On Oct 28 13:38:08, k...@openbsd.org wrote:
> > usr.sbin/installboot: i386_softraid.c 
> > Revert GPT change. Breaks non-GPT install/upgrade.
> > Found the hard way by reyk@
> 
> Is this related to today's snapshot making
> my old amd64 MacBook 'boot' into ERR M?

Yes.  Next snapshot is coming...

Re: GPT instalboot

[Jan Stary]

On Oct 28 12:55:27, s...@openbsd.org wrote:
>   usr.sbin/installboot: i386_softraid.c 
> In sr_install_bootblk for i386, don't clobber 'part' in non-GPT case.
> Found the hard way by reyk@.
> stupid mistake stsp@
> ok reyk@

On Oct 28 13:38:08, k...@openbsd.org wrote:
>   usr.sbin/installboot: i386_softraid.c 
> Revert GPT change. Breaks non-GPT install/upgrade.
> Found the hard way by reyk@

Is this related to today's snapshot making
my old amd64 MacBook 'boot' into ERR M?

Re: Mount ISO as read write

[dan mclaughlin]

On Wed, 28 Oct 2015 07:45:05 + (UTC) Mik J  wrote:
> Hello everyone,
> I asked this question on another list a long time ago.
> * I would like to mount an iso in order to add some files# ls -l /mnt
> drwxr-xr-x   2 root  wheel 512 May  3 15:31 iso# vnconfig svnd0 Image.iso
> # mount_cd9660 -o rw /dev/svnd0c /mnt/iso
> After the mount, it's read only# ls -l /mnt
> dr-xr-xr-x   1 root  wheel 512 May  3 15:31 iso
> The person who replied told me it was normal, cd9660 are always mounted as
> read only and suggested that I have to remake the iso
> * If that is correct, I would like to know how would I be able to remake
> this iso, and particularly keeping the boot options.
> When I want to make an OpenBSD iso I use -b i386/floppy58c.fs -c boot.catalog
> I would like to know how can I find which -b and -c options have been used by
> the person who made the iso in order to use it when I want to rebuild this iso
> Thanks
> 

you must be using a pretty old version of OpenBSD if you are using svnd0 (it is
just vnd0 now).

i don't know of a way to mount an iso9660 filesystem r/w either (makes sense
as it is for read-only media), but you can mount the iso image as you did
above, and then copy it into a new directory.

# mkdir newiso
# (cd /mnt/iso && tar cf - *) | tar xpf - -C newiso

now you can modify the version in the newiso directory.

i don't know how to get the parameters used on any random image, but the
command used to create the install cd image is:

mkhybrid -a -R -T -L -l -d -D -N -o /usr/src/distrib/i386/cdfs/obj/cd58.iso -v 
-v  -A "OpenBSD 5.8 i386 bootonly CD"  -P "Copyright (c) `date +%Y` Theo de 
Raadt, The OpenBSD project"  -p "Theo de Raadt "  -V 
"OpenBSD/i3865.8 boot-only CD"  -b 5.8/i386/cdbr -c 5.8/i386/boot.catalog  
/usr/src/distrib/i386/cdfs/obj/cd-dir

but i don't think it matters much which -b and -c options were used
originally. when you recreate the image you have to redo that anyway.

i'm not sure of your use of -b for a cd however. according to mkhybrid(8):

  This will work, for example, if the boot image is a LILO-based boot floppy.

but i've never tried that. i use cdbr as in the example above (which is from
the release(8) process, used to make the official releases). you can find cdbr
as /usr/mdec/cdbr, and can copy it to the newiso dir if you don't already have
a copy there.

Killing Rebound(8) in current hard locks system.

[Gerald Hanuer]

 Hello misc@,

 Killing Rebound(8) in current hard locks system.

 This is not a bug report.
 If this is known to devs please disregard.

 /bin/kill ( pid of root process )

 /bin/kill ( pid of worker process )
 or
 /sbin/shutdown -ph now
 With rebound(8) running.

 System hard locks.
 No cores or messages.
 Must manually power off.

 First seen in a current build 10/26/15 just after,
 https://marc.info/?l=openbsd-cvs=144586249701708=2
 https://marc.info/?l=openbsd-cvs=144586250101712=2

 Utilizing Rebound(8) on LAN machines to Unbound(8) at gateway
 since 10/17/15, has worked well.

 Regards,

  Gerald Hanuer

Mount ISO as read write

[Mik J]

Hello everyone,
I asked this question on another list a long time ago.
* I would like to mount an iso in order to add some files# ls -l /mnt
drwxr-xr-x   2 root  wheel 512 May  3 15:31 iso# vnconfig svnd0 Image.iso
# mount_cd9660 -o rw /dev/svnd0c /mnt/isoAfter the mount, it's read only# ls -l 
/mnt
dr-xr-xr-x   1 root  wheel 512 May  3 15:31 isoThe person who replied told 
me it was normal, cd9660 are always mounted as read only and suggested that I 
have to remake the iso
* If that is correct, I would like to know how would I be able to remake this 
iso, and particularly keeping the boot options.When I want to make an OpenBSD 
iso I use -b i386/floppy58c.fs -c boot.catalogI would like to know how can I 
find which -b and -c options have been used by the person who made the iso in 
order to use it when I want to rebuild this iso
Thanks

disklabel: ioctl DIOCGDINFO fails

[Jan Stary]

My nightly mail says:

Running security(8):
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device

I thought it's the the pledge "stdio" of disklabel(8),
but it's not, because "disklabel wd0" (and wd0c, and /dev/wd0c, ...)
fails the same way even with the pledge commented out.

Am I missing something obvious?

Jan

Re: disklabel: ioctl DIOCGDINFO fails

[Theo de Raadt]

>Running security(8):
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>disklabel: ioctl DIOCGDINFO: Inappropriate ioctl for device
>
>I thought it's the the pledge "stdio" of disklabel(8),
>but it's not, because "disklabel wd0" (and wd0c, and /dev/wd0c, ...)
>fails the same way even with the pledge commented out.
>
>Am I missing something obvious?

Your kernel is older than your userland.

Getting Error on Implementation

[Yasir Israr]

Hello..

Getting installation problem on OpenBSD 5.8 in Dell R630 Server.

 

-

Regards,

Yasir Israr

 

ORION SOLUTIONS || ISO 9001-2008 Certified

1st Floor 14/18 Elign Road

Civil Lines, Allahabad

9795610614  $B"a(B mobile|  
ya...@orionsolutions.co.in

  www.orionsolutions.co.in