sftp activity logging?
Hi All, I am setting an openbsd 7.3 stable system to serve files via ssh's sftp subsystem. Does openssh have a native way to audit what files were downloaded/uploaded with user/timestamp information? If not, are there any recommendations? Thanks in advance.
non-hardware 2fa options for openssh
Hi All, I want to secure an openssh server with two factor authentication and have seen the hardware token methods, most recently i've been seeing yubi/FIDO methods. Ideally I would like to avoid having to depend on a usb size device that could easily be lost. I looked around and found mention of google authenticator as an option, phones aren't much bigger than usb sticks but people protect their phone as if it was their soul, but the newest mention I can find is many years old. My question is there any recent documentation / information on setting up an openssh server with non-hardware based two factor authentication? This does NOT have to be google authenticator, any similar service will suffice. Any advice greatly appreciated Thanks in advance.
Re: PC Engines APU alternative for OpenBSD - 2022h2
On 9/28/22 14:03, Stuart Henderson wrote: On 2022-09-28, Sean Rider wrote: I have a 7.1 router/wg server running on a protectli FW4B and I've had no issues. Their customer service has been great too. https://protectli.com/vault-4-port/ Those appear to be old versions of the cheap chinese boxes I mentioned (because they have the now-hard-to-get em(4) instead of 2.5G igc(4)) but at about 2.5x the price I'd suggest looking into protecli devices, I have a 6 port that has worked flawlessly for years. https://protectli.com/ Thomas
Re: vlans don't come up at boot
On 12/24/20 12:33 PM, Stuart Henderson wrote: On 2020-12-24, myml...@gmx.com wrote: Hi, I have set up an openbsd router/firewall from the 2020/12/22 snapshot with a vlan associated with the em3 device and it's not coming up at boot time. (dmesg at the end of the post) First I created the interface files: # cat /etc/hostname.em0 dhcp # cat /etc/hostname.em3 inet 192.168.27.254 255.255.255.0 up # cat /etc/hostname.vlan44 inet 192.168.44.254 255.255.255.0 parent em3 vnetid 44 "up" happens when the address is configured. Your vlan id and parent interface must be set before it comes up. So I WAS missing something obvious...ughhh # cat /etc/hostname.vlan44 parent em3 vnetid 44 inet 192.168.44.254 255.255.255.0 Thanks a ton, works perfect now! Happy holidays!
vlans don't come up at boot
Hi,
I have set up an openbsd router/firewall from the 2020/12/22 snapshot
with a vlan associated with the em3 device and it's not coming up at
boot time. (dmesg at the end of the post)
First I created the interface files:
# cat /etc/hostname.em0
dhcp
# cat /etc/hostname.em3
inet 192.168.27.254 255.255.255.0
up
# cat /etc/hostname.vlan44
inet 192.168.44.254 255.255.255.0
parent em3
vnetid 44
(I also tried with "up" after the vnetid 44 line, same results)
I ran sh /etc/netstart and the vlan came up just fine.
lo0: flags=8049 mtu 32768
index 8 priority 0 llprio 3
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
inet 127.0.0.1 netmask 0xff00
em0: flags=808843 mtu 1500
lladdr 00:e0:67:18:01:ae
index 1 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
em1: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:af
index 2 priority 0 llprio 3
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 192.168.7.254 netmask 0xff00 broadcast 192.168.7.255
em2: flags=8802 mtu 1500
lladdr 00:e0:67:18:01:b0
index 3 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
em3: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:b1
index 4 priority 0 llprio 3
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 192.168.27.254 netmask 0xff00 broadcast 192.168.27.255
vlan44: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:b1
index 9 priority 0 llprio 3
encap: vnetid 44 parent em3 txprio packet rxprio outer
groups: vlan
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 192.168.44.254 netmask 0xff00 broadcast 192.168.44.255
pflog0: flags=141 mtu 33136
index 10 priority 0 llprio 3
groups: pflog
Subsequently pf rules loaded just fine as well:
# pfctl -vf /etc/pf.conf
bilqo = "block in log quick on"
piqo = "pass in quick on"
poo = "pass out on"
i = "inet"
pi = "proto icmp"
pt = "proto tcp"
pu = "proto udp"
ptu = "proto { tcp udp }"
pitu = "proto { icmp tcp udp }"
wan_if = "em0"
priv_if = "em1"
vlan_if = "em3"
vlan44_if = "vlan44"
icmp_types = "echoreq"
table const { 192.168.27.0/24 !192.168.27.254 }
table const { 192.168.44.0/24 !192.168.44.254 }
table { 0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 169.254.0.0/16
172.16.0.0/12 192.0.0.0/24 192.0.2.0/24 224.0.0.0/3 192.168.0.0/16
198.18.0.0/15 198.51.100.0/24 203.0.113.0/24 }
match out on egress from ! (egress:0) to any nat-to (egress:0) round-robin
block drop in log quick on em0 from to any
block drop log all
pass in quick on em3 inet proto icmp from to any icmp-type
echoreq
pass in quick on vlan44 inet proto icmp from to any
icmp-type echoreq
pass out on em0 all flags S/S
The problem comes when I reboot the machine, during the bootup sequence
I see the following: (I have the wan interface unplugged while testing
hence the "no link" and "sleeping")
pf enabled
net.inet.ip.forwardeing: 0 -> 1
starting network
em0: no link .. sleeping
ifconfig: SIOCAIFADDR: Device not configured
no IP address found for vlan44:network
/etc/pf.conf:29: could not parse host specification
pfctl: Syntax error in config file: pf roles not loaded
reordering libraries: done
.
login:
Now when I look at the interfaces, they all show up, but the vlan44
interface doesn't have an inet address set. Obviously that's what
causes the errors when loading pf.conf rules from the above error.
# ifconfig
lo0: flags=8049 mtu 32768
index 8 priority 0 llprio 3
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
inet 127.0.0.1 netmask 0xff00
em0: flags=808843 mtu 1500
lladdr 00:e0:67:18:01:ae
index 1 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
em1: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:af
index 2 priority 0 llprio 3
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 192.168.7.254 netmask 0xff00 broadcast 192.168.7.255
em2: flags=8802 mtu 1500
lladdr 00:e0:67:18:01:b0
index 3 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
em3: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:b1
index 4 priority 0 llprio 3
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 192.168.27.254 netmask 0xff00 broadcast 192.168.27.255
vlan44: flags=8843 mtu 1500
lladdr 00:e0:67:18:01:b1
index 9 priority 0 llprio 3
encap: vnetid 44 parent em3 txprio packet rxprio outer
groups: vlan
media: Ethernet autoselect (1000baseT full-duplex)
status: active
pflog0: flags=141 mtu 33136
index 10 priority 0 llprio
Re: how to mount phone?
On 7/14/20 2:46 AM, Antal Ispanovity wrote: On Mon, Jul 13, 2020 at 2:57 PM Justin Muir wrote: Hi, Just wishing to mount my phone to access photos. Here's the output from dmesg: ugen0 at uhub0 port 3 "Alcatel U50? Alcatel U50?" rev 2.00/3.10 addr 2 Any ideas on how this might be mounted?? I use the simple-mtpfs package. tia! As Antel suggested, simple-mtpfs, in packages, is a very easy way to actually mount your phone so it can be browsed like any other type of storage device. I haven't used android 7 for a long time and never this phone, so I don't know the procedure, but you will need to set the usb mode to file transfer instead of charging only or whatever options may be there. doas simple-mtpfs -o allow_other --device 1 /mnt/phone/
Old thread, but wondering if any updates?
I posted this way back in 2017 but i'm wondering if anything has changed... https://marc.info/?l=openbsd-misc=149613307021262=2 Is the 16Tb restriction been removed for full disk encryption? Thanks
deny unknown-clients
Hi All,
I'm running openbsd current and running dhcpd, on all of my subnets I
use "deny unknown-clients;" and comment out the range.
I have a wireless access point defined in one subnet (192.168.0.0/24),
but not in another (192.168.1.0/24). When I move the ethernet cable
from the interface where it's defined to the other interface, where it's
not defined, it still picks up an address, is this by design?
Clients that are not defined anywhere in the dhcpd.conf do get denied
addresses.
subnet 192.168.0.0 netmask 255.255.255.0 {
option routers 192.168.0.254;
option domain-name-servers 192.168.0.254;
# range 192.168.0.33 192.168.0.127;
deny unknown-clients;
host eap245 { hardware ethernet 78:da:d4:35:33:d0; fixed-address
192.168.0.1; }
}
subnet 192.168.1.0 netmask 255.255.255.0 {
option routers 192.168.1.254;
option domain-name-servers 192.168.1.254;
# range 192.168.1.33 192.168.1.127;
deny unknown-clients;
}
Thanks in advance.
Re: off-topic
On 12/30/19 6:09 AM, Gustavo Rios wrote: Is qmail dead ? Does anyone here use openbsd with qmail+ldap ? Hey Gustavo, qmail may not be dead, i suspect it is as most of the download links at the official site aren't reachable, not a good sign. I understand that people get attached to software, occupational hazzard,. That said, my recommendation is to bandon qmail, DJB is super smart guy! (has anyone heard from him lately???) qmail was great in it's hey day, just like djbdns. bu..qmail, from my experience is the most complicated MTA to date...:) others of the list have stated postfix is their go to, i've used it for years and it works wonderfully and still totally maintained, others opensmtpd, I switched to it, and not looking back.
for those looking for hardware to build an OBSD router/firewall
Hi All, I've been looking for hardware to replace my 15 year old i386 pc based openbsd firewall with 6 interfaces with something smaller and with less power draw for a while, a long while..:). I researched and saw things from lanner, axiomtek and portwell, but they were mad expensive. I have seen lots of other recommendations for ubiquit, netgate, APU and soekris etc, all with less than desirable specs. I found this protectli, 6 port intel based device. (wish they had an 8/10/12 port like ubiquiti) https://protectli.com/product/fw6c/ It works flawlessly with openbsd... Diving in a little bit deeper, I found that this thing is a rebranded Chinese product by a company called yanling. I bought from the US company because i'm not familiar with alibaba and the delivery time. You can get the same device here https://www.alibaba.com/product-detail/Yanling-7th-i5-7200u-Dual-Core_60781226010.html?spm=a2700.galleryofferlist.0.0.245b478f2nsJ3S for for 250 less. ps. they also have options with lesser cpus and less interfaces for much cheaper! Here's the dmesg: OpenBSD 6.6-current (GENERIC.MP) #613: Thu Jan 16 13:52:56 MST 2020 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8487612416 (8094MB) avail mem = 8217923584 (7837MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x8d318000 (86 entries) bios0: vendor American Megatrends Inc. version "5.12" date 07/08/2019 bios0: Protectli FW6 acpi0 at bios0: ACPI 6.1 acpi0: sleep states S0 S5 acpi0: tables DSDT FACP APIC FPDT MCFG SSDT FIDT SSDT HPET SSDT SSDT UEFI SSDT LPIT WSMT SSDT SSDT SSDT SSDT DBGP DBG2 DMAR ASF! acpi0: wakeup devices PS2K(S0) PS2M(S0) RP09(S0) PXSX(S0) RP10(S0) PXSX(S0) RP11(S0) PXSX(S0) RP12(S0) PXSX(S0) RP13(S0) PXSX(S0) RP01(S0) PXSX(S0) RP02(S0) PXSX(S0) [...] acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2395.20 MHz, 06-8e-09 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu0: 256KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 24MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu1: 256KB 64b/line 8-way L2 cache cpu1: smt 0, core 1, package 0 cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu2: 256KB 64b/line 8-way L2 cache cpu2: smt 1, core 0, package 0 cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu3: 256KB 64b/line 8-way L2 cache cpu3: smt 1, core 1, package 0 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 120 pins acpimcfg0 at acpi0 acpimcfg0: addr 0xe000, bus 0-255 acpihpet0
Re: Suricata from packages
On 1/21/20 1:05 PM, b2...@zonbie.net wrote: On 2020-01-18 07:08, Eric Zylstra wrote: On Jan 18, 2020, at 6:42 AM, Antoine Jacoutot wrote: On Fri, Jan 17, 2020 at 11:24:22PM -0600, Eric Zylstra wrote: OpenBSD 6.6 Generic.MP amd64 Stable. I installed suricata using pkg_add. Having trouble with starting it. $ doas rcctl start suricata …fails. No informative fail message, though. Run rcctl in debug mode. Notable that man rcctl(8) does not contain the word “debug”. I had to do a web search to confirm the -d argument was what I needed to get debug output. Greetings, I use Suricata from Packages for a while now. No real changes to configs. I don't use /etc/rc.d/suricata at all. To START suricata in live mode - Do this (as root): #suricata -v -c /etc/suricata/suricata.yaml -i em0 & (please substitute your collection I/F as needed. Mine is em0 as in the example above) Let that stew for a while but you can hit enter to get back to your prompt. To STOP suricata: pgrep suricata and kill -9 the pid returned. If I may add: Be sure to keep an eye on your logs as they will grow beyond bounds (/var/logs/suricata/). I generate eve.json at about 6GB in size in about 10 days. Regards, Zann side question, i'll post a new thread if people prefer: Suricata seems like a really interesting project but since it is associated with homeland, is it trusted by the OBSD community? Thanks.
Re: pfctl -T expire
On 1/23/20 7:17 PM, myml...@gmx.com wrote: Hi All, Thanks to Jesper and Stuart, i'm using max-pkt-rate not! I'm also using max-src-conn-rate and overload in conjunction with authpf and I'm worried that potentially valid traffic may get blocked. I'm wondering if it's a condoned/accepted/best practice to use cron with pfctl to expire table entries that are over a certain age. I promise I did google "cron pfctl -T expire" first and only came up with someone who wrote a script from 2014!!! Thanks in advance! Thanks to Jesper and Stuart, i'm using max-pkt-rate now!
pfctl -T expire
Hi All, Thanks to Jesper and Stuart, i'm using max-pkt-rate not! I'm also using max-src-conn-rate and overload in conjunction with authpf and I'm worried that potentially valid traffic may get blocked. I'm wondering if it's a condoned/accepted/best practice to use cron with pfctl to expire table entries that are over a certain age. I promise I did google "cron pfctl -T expire" first and only came up with someone who wrote a script from 2014!!! Thanks in advance!
Re: rate limit echo request
On 1/23/20 1:35 AM, Jesper Wallin wrote: Hi, Use the max-pkt-rate parameter instead. It does exactly what you think it does and is thoroughly covered in pf.conf(5) with examples and all. Regards Jesper Wallin On Wed, Jan 22, 2020 at 10:42:01PM -0700, myml...@gmx.com wrote: Hi, I'm just wondering if there is a way to rate limit icmp echo request. i.e. pings. I tried the following rule but it errors out with "syntax error" pass in quick on em1 inet proto icmp from 192.168.0.23 to 192.168.1.2 icmp-type echoreq (max-src-conn-rate 1/2, overload flush) I'm trying to avoid even standard pings and especially "ping -f". Additionally, I was wondering if there would be a way to block icmp that's over a certain size. "ping -s". Thanks in advance!!! Awesome, that worked great! Thanks much!
Re: install libreoffice OpenBSD 6.6
On 1/22/20 7:55 PM, Jovany Leandro G.C wrote: hello community, i recently install OpenBSD 6.6 and works great. now i try install libreoffice and throws: quirks-3.182 signed on 2020-01-22T10:10:52Z Can't install rasqal-0.9.33p2 because of libraries |library gmp.10.0 not found | not found anywhere Direct dependencies for rasqal-0.9.33p2 resolve to libgcrypt-1.8.5 raptor-2.0.15p2 pcre-8.41p2 e2fsprogs-1.42.12p5 mpfr-3.1.5.2p1 Full dependency tree is libxslt-1.1.33 e2fsprogs-1.42.12p5 libyajl-2.1.0 curl-7.66.0 libgpg-error-1.36p0 pcre-8.41p2 xz-5.2.4 libiconv-1.16p0 raptor-2.0.15p2 libgcrypt-1.8.5 libxml-2.9.9 gettext-runtime-0.20.1p0 mpfr-3.1.5.2p1 nghttp2-1.39.2 Can't install redland-1.0.17p6: can't resolve rasqal-0.9.33p2 Can't install libreoffice-6.3.2.2v0: can't resolve redland-1.0.17p6 Couldn't install libreoffice-6.3.2.2v0 rasqal-0.9.33p2 redland-1.0.17p6 what can i do? thanks any help Looks like you installed a snapshot and then waited a bit too long before you tried to install the package. If this is the case, check the snapshots//directory and the snapshots/Packages// directory and compare the dates. if they are the same, update your base system, then update any currently installed packages and finally install libreoffice.
Re: rate limit echo request
On 1/22/20 10:42 PM, myml...@gmx.com wrote: Hi, I'm just wondering if there is a way to rate limit icmp echo request. i.e. pings. I tried the following rule but it errors out with "syntax error" pass in quick on em1 inet proto icmp from 192.168.0.23 to 192.168.1.2 icmp-type echoreq (max-src-conn-rate 1/2, overload flush) I'm trying to avoid even standard pings and especially "ping -f". Additionally, I was wondering if there would be a way to block icmp that's over a certain size. "ping -s". Thanks in advance!!! Sorry, This is fresh install of snapshot from 10/17 on amd64 OpenBSD 6.6-current (GENERIC.MP) #613: Thu Jan 16 13:52:56 MST 2020 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8487612416 (8094MB) avail mem = 8217923584 (7837MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x8d318000 (86 entries) bios0: vendor American Megatrends Inc. version "5.12" date 07/08/2019 bios0: Protectli FW6 acpi0 at bios0: ACPI 6.1 acpi0: sleep states S0 S5 acpi0: tables DSDT FACP APIC FPDT MCFG SSDT FIDT SSDT HPET SSDT SSDT UEFI SSDT LPIT WSMT SSDT SSDT SSDT SSDT DBGP DBG2 DMAR ASF! acpi0: wakeup devices PS2K(S0) PS2M(S0) RP09(S0) PXSX(S0) RP10(S0) PXSX(S0) RP11(S0) PXSX(S0) RP12(S0) PXSX(S0) RP13(S0) PXSX(S0) RP01(S0) PXSX(S0) RP02(S0) PXSX(S0) [...] acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2395.20 MHz, 06-8e-09 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu0: 256KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 24MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu1: 256KB 64b/line 8-way L2 cache cpu1: smt 0, core 1, package 0 cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu2: 256KB 64b/line 8-way L2 cache cpu2: smt 1, core 0, package 0 cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2394.43 MHz, 06-8e-09 cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu3: 256KB 64b/line 8-way L2 cache cpu3: smt 1, core 1, package 0 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 120 pins acpimcfg0 at acpi0 acpimcfg0: addr 0xe000, bus 0-255 acpihpet0 at acpi0: 2399 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG0) acpiprt2 at acpi0: bus -1 (PEG1) acpiprt3 at acpi0: bus -1 (PEG2) acpiprt4 at acpi0: bus -1 (RP09) acpiprt5 at acpi0: bus -1 (RP10) acpiprt6 at acpi0: bus -1 (RP11) acpiprt7 at acpi0: bus -1 (RP12) acpiprt8 at acpi0: bus -1 (RP13) acpiprt9 at acpi0: bus 1 (RP01) acpiprt10 at acpi0: bus 2 (RP02) acpiprt11 at acpi0: bus 3 (RP03) acpiprt12 at acpi0: bus
rate limit echo request
Hi, I'm just wondering if there is a way to rate limit icmp echo request. i.e. pings. I tried the following rule but it errors out with "syntax error" pass in quick on em1 inet proto icmp from 192.168.0.23 to 192.168.1.2 icmp-type echoreq (max-src-conn-rate 1/2, overload flush) I'm trying to avoid even standard pings and especially "ping -f". Additionally, I was wondering if there would be a way to block icmp that's over a certain size. "ping -s". Thanks in advance!!!
Re: Can't locate OpenBSD/Quirks.pm in @INC
On 1/17/20 7:25 PM, Jordan Geoghegan wrote: On 2020-01-17 18:10, myml...@gmx.com wrote: HI, I downloaded the install66.fs snapshot today, 20200117, and did a fresh install. Even though I got the full install set, i used http from ftp.openbsd.org as the install source. Installation went fine but when I tried to install packages I get the above error. "# pkg_add -vn pftop quirks-3.216 signed on 2020-01-17T19:15:00Z quirks-3.216: ok Can't load quirk: Can't locate OpenBSD/Quirks.pm in @INC (you may need to install the OpenBSD::Quirks module) (@INC contains: /usr/local/libdata/perl5/site_perl/amd64-openbsd /usr/local/libdata/perl5/site_perl /usr/libdata/perl5/amd64-openbsd /usr/libdata/perl5) at /usr/libdata/perl5/OpenBSD/AddDelete.pm line 350. pftop-0.7p19: ok Merging manpages in /usr/local/man: /usr/local/man/man8/pftop.8 Extracted 252817 from 253475" [snip] I believe quirks gets automatically installed when you install your first package. AH HA, that seems to be the case. pkg_add -v pftop quirks-3.216 signed on 2020-01-17T19:15:00Z quirks-3.216: ok pftop-0.7p19: ok Extracted 252817 from 253475 I was just initially trying to see what would be installed without actually installing. I've run into issues before where the base system packages and the userland stuff, if they aren't labeled the same date have library issues. I was trying to make sure i'd avoid that. Thanks for the quick answer!
Can't locate OpenBSD/Quirks.pm in @INC
HI, I downloaded the install66.fs snapshot today, 20200117, and did a fresh install. Even though I got the full install set, i used http from ftp.openbsd.org as the install source. Installation went fine but when I tried to install packages I get the above error. "# pkg_add -vn pftop quirks-3.216 signed on 2020-01-17T19:15:00Z quirks-3.216: ok Can't load quirk: Can't locate OpenBSD/Quirks.pm in @INC (you may need to install the OpenBSD::Quirks module) (@INC contains: /usr/local/libdata/perl5/site_perl/amd64-openbsd /usr/local/libdata/perl5/site_perl /usr/libdata/perl5/amd64-openbsd /usr/libdata/perl5) at /usr/libdata/perl5/OpenBSD/AddDelete.pm line 350. pftop-0.7p19: ok Merging manpages in /usr/local/man: /usr/local/man/man8/pftop.8 Extracted 252817 from 253475" Any ideas? Thanks in advance. system dmesg: # dmesg OpenBSD 6.6-current (RAMDISK_CD) #586: Thu Jan 16 14:00:02 MST 2020 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD real mem = 8487612416 (8094MB) avail mem = 8226369536 (7845MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x8d318000 (86 entries) bios0: vendor American Megatrends Inc. version "5.12" date 07/08/2019 bios0: Protectli FW6 acpi0 at bios0: ACPI 6.1 acpi0: tables DSDT FACP APIC FPDT MCFG SSDT FIDT SSDT HPET SSDT SSDT UEFI SSDT LPIT WSMT SSDT SSDT SSDT SSDT DBGP DBG2 DMAR BGRT ASF! acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz, 2395.13 MHz, 06-8e-09 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 24MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE cpu at mainbus0: not configured cpu at mainbus0: not configured cpu at mainbus0: not configured ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 120 pins acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG0) acpiprt2 at acpi0: bus -1 (PEG1) acpiprt3 at acpi0: bus -1 (PEG2) acpiprt4 at acpi0: bus -1 (RP09) acpiprt5 at acpi0: bus -1 (RP10) acpiprt6 at acpi0: bus -1 (RP11) acpiprt7 at acpi0: bus -1 (RP12) acpiprt8 at acpi0: bus -1 (RP13) acpiprt9 at acpi0: bus 1 (RP01) acpiprt10 at acpi0: bus 2 (RP02) acpiprt11 at acpi0: bus 3 (RP03) acpiprt12 at acpi0: bus 4 (RP04) acpiprt13 at acpi0: bus 5 (RP05) acpiprt14 at acpi0: bus 6 (RP06) acpiprt15 at acpi0: bus -1 (RP07) acpiprt16 at acpi0: bus -1 (RP08) acpiprt17 at acpi0: bus -1 (RP17) acpiprt18 at acpi0: bus -1 (RP18) acpiprt19 at acpi0: bus -1 (RP19) acpiprt20 at acpi0: bus -1 (RP20) acpiprt21 at acpi0: bus -1 (RP21) acpiprt22 at acpi0: bus -1 (RP22) acpiprt23 at acpi0: bus -1 (RP23) acpiprt24 at acpi0: bus -1 (RP24) acpiprt25 at acpi0: bus -1 (RP14) acpiprt26 at acpi0: bus -1 (RP15) acpiprt27 at acpi0: bus -1 (RP16) acpiec0 at acpi0: not present acpicpu at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpitz at acpi0 not configured acpitz at acpi0 not configured acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001 acpicmos0 at acpi0 "PNP0C0E" at acpi0 not configured "INT33A1" at acpi0 not configured "PNP0C0C" at acpi0 not configured "PNP0C0B" at acpi0 not configured "PNP0C0B" at acpi0 not configured "PNP0C0B" at acpi0 not configured "PNP0C0B" at acpi0 not configured "PNP0C0B" at acpi0 not configured cpu0: using Skylake AVX MDS workaround pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 "Intel Core 7G Host" rev 0x02 "Intel HD Graphics 620" rev 0x02 at pci0 dev 2 function 0 not configured xhci0 at pci0 dev 20 function 0 "Intel 100 Series xHCI" rev 0x21: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 100 Series
Re: dell universal d6000 dock
anybody On 2/5/19 5:17 PM, myml...@gmx.com wrote: Hi, I am running current from Jan 21st on a dell latitude 7490 (dmesg below) and was hoping to get a usb-c dock connected so that I could use 2 display ports, the hdmi, eth and extra usb ports in one easy to disconnect usb-c connection. The hdmi seems to work ok but I get the following errors in /var/log/messages when I plug/unplug a display port. Feb 5 16:48:56 curry /bsd: uhub1 at uhub0 port 1 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.16 addr 5 Feb 5 16:48:56 curry apmd: battery status: high. external power status: connected. estimated battery life 95% Feb 5 16:48:57 curry /bsd: uhub2 at uhub1 port 2 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.17 addr 6 Feb 5 16:48:58 curry /bsd: uhub3 at uhub1 port 3 configuration 1 interface 0 "Genesys Logic USB2.0 Hub" rev 2.00/88.32 addr 7 Feb 5 16:48:59 curry /bsd: uhidev2 at uhub3 port 1 configuration 1 interface 0 "Bizlink D6000 Controller" rev 2.00/0.18 addr 8 Feb 5 16:48:59 curry /bsd: uhidev2: iclass 3/0, 1 report id Feb 5 16:48:59 curry /bsd: uhid4 at uhidev2 reportid 1: input=0, output=0, feature=1 Feb 5 16:48:59 curry /bsd: uhub4 at uhub0 port 13 configuration 1 interface 0 "GenesysLogic USB3.1 Hub" rev 3.10/88.16 addr 9 Feb 5 16:49:00 curry /bsd: uaudio0 at uhub4 port 1 configuration 1 interface 2 "DisplayLink Dell Universal Dock D6000" rev 3.10/31.27 addr 10 Feb 5 16:49:00 curry /bsd: uaudio0: audio descriptors make no sense, error=4 Feb 5 16:49:00 curry /bsd: ugen1 at uhub4 port 1 configuration 1 "DisplayLink Dell Universal Dock D6000" rev 3.10/31.27 addr 10 Feb 5 16:49:01 curry /bsd: uhub5 at uhub4 port 2 configuration 1 interface 0 "GenesysLogic USB3.1 Hub" rev 3.10/88.17 addr 11 Feb 5 16:49:01 curry /bsd: uhub2 detached Feb 5 16:49:01 curry /bsd: uhid4 detached Feb 5 16:49:01 curry /bsd: uhidev2 detached Feb 5 16:49:01 curry /bsd: uhub3 detached Feb 5 16:49:01 curry /bsd: uhub1 detached Feb 5 16:49:02 curry /bsd: uhub1 at uhub0 port 1 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.16 addr 5 Feb 5 16:49:03 curry /bsd: uhub2 at uhub1 port 2 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.17 addr 6 Feb 5 16:49:04 curry /bsd: uhub3 at uhub1 port 3 configuration 1 interface 0 "Genesys Logic USB2.0 Hub" rev 2.00/88.32 addr 7 Feb 5 16:49:05 curry /bsd: uhidev2 at uhub3 port 1 configuration 1 interface 0 "Bizlink D6000 Controller" rev 2.00/0.18 addr 8 Feb 5 16:49:05 curry /bsd: uhidev2: iclass 3/0, 1 report id Feb 5 16:49:05 curry /bsd: uhid4 at uhidev2 reportid 1: input=0, output=0, feature=1 Feb 5 16:49:53 curry /bsd: umass0 at uhub5 port 2 configuration 1 interface 0 "SanDisk Ultra" rev 3.00/1.00 addr 12 Feb 5 16:49:53 curry /bsd: umass0: using SCSI over Bulk-Only Feb 5 16:49:53 curry /bsd: scsibus4 at umass0: 2 targets, initiator 0 Feb 5 16:49:53 curry /bsd: sd2 at scsibus4 targ 1 lun 0: Ultra, 1.00> SCSI4 0/direct removable serial.07815581200212119554 Feb 5 16:49:53 curry /bsd: sd2: 29328MB, 512 bytes/sector, 60063744 sectors Feb 5 16:51:59 curry /bsd: error: [drm:pid69604:intel_dp_aux_wait_done] *ERROR* dp aux hw did not signal timeout (has irq: 1)! Feb 5 16:54:57 curry /bsd: error: [drm:pid69604:intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe B Feb 5 16:55:56 curry /bsd: WARNING !wm_changed failed at /usr/src/sys/dev/pci/drm/i915/intel_pm.c:3609 Feb 5 16:56:39 curry /bsd: uhub2 detached Feb 5 16:56:39 curry /bsd: uhid4 detached Feb 5 16:56:39 curry /bsd: uhidev2 detached Feb 5 16:56:39 curry /bsd: uhub3 detached Feb 5 16:56:39 curry /bsd: uhub1 detached Feb 5 16:56:39 curry /bsd: uaudio0 detached Feb 5 16:56:39 curry /bsd: ugen1 detached Feb 5 16:56:39 curry /bsd: sd2 detached Feb 5 16:56:39 curry /bsd: scsibus4 detached Feb 5 16:56:39 curry /bsd: umass0 detached Feb 5 16:56:39 curry /bsd: uhub5 detached Feb 5 16:56:39 curry /bsd: uhub4 detached Feb 5 16:56:40 curry apmd: battery status: high. external power status: not connected. estimated battery life 95% Feb 5 17:06:45 curry /bsd: error: [drm:pid69604:intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A Any thoughts? I have to return the dock in a couple of days but if there is any procedures or output that someone would like to see in the meantime, let me know. Thanks, Thomas OpenBSD 6.4-current (GENERIC.MP) #625: Mon Jan 21 22:20:46 MST 2019 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 17037066240 (16247MB) avail mem = 16511123456 (15746MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.1 @ 0xe (109 entries) bios0: vendor Dell Inc. version "1.7.2" date 11/26/2018 bios0: Dell Inc. Latitude
dell universal d6000 dock
Hi, I am running current from Jan 21st on a dell latitude 7490 (dmesg below) and was hoping to get a usb-c dock connected so that I could use 2 display ports, the hdmi, eth and extra usb ports in one easy to disconnect usb-c connection. The hdmi seems to work ok but I get the following errors in /var/log/messages when I plug/unplug a display port. Feb 5 16:48:56 curry /bsd: uhub1 at uhub0 port 1 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.16 addr 5 Feb 5 16:48:56 curry apmd: battery status: high. external power status: connected. estimated battery life 95% Feb 5 16:48:57 curry /bsd: uhub2 at uhub1 port 2 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.17 addr 6 Feb 5 16:48:58 curry /bsd: uhub3 at uhub1 port 3 configuration 1 interface 0 "Genesys Logic USB2.0 Hub" rev 2.00/88.32 addr 7 Feb 5 16:48:59 curry /bsd: uhidev2 at uhub3 port 1 configuration 1 interface 0 "Bizlink D6000 Controller" rev 2.00/0.18 addr 8 Feb 5 16:48:59 curry /bsd: uhidev2: iclass 3/0, 1 report id Feb 5 16:48:59 curry /bsd: uhid4 at uhidev2 reportid 1: input=0, output=0, feature=1 Feb 5 16:48:59 curry /bsd: uhub4 at uhub0 port 13 configuration 1 interface 0 "GenesysLogic USB3.1 Hub" rev 3.10/88.16 addr 9 Feb 5 16:49:00 curry /bsd: uaudio0 at uhub4 port 1 configuration 1 interface 2 "DisplayLink Dell Universal Dock D6000" rev 3.10/31.27 addr 10 Feb 5 16:49:00 curry /bsd: uaudio0: audio descriptors make no sense, error=4 Feb 5 16:49:00 curry /bsd: ugen1 at uhub4 port 1 configuration 1 "DisplayLink Dell Universal Dock D6000" rev 3.10/31.27 addr 10 Feb 5 16:49:01 curry /bsd: uhub5 at uhub4 port 2 configuration 1 interface 0 "GenesysLogic USB3.1 Hub" rev 3.10/88.17 addr 11 Feb 5 16:49:01 curry /bsd: uhub2 detached Feb 5 16:49:01 curry /bsd: uhid4 detached Feb 5 16:49:01 curry /bsd: uhidev2 detached Feb 5 16:49:01 curry /bsd: uhub3 detached Feb 5 16:49:01 curry /bsd: uhub1 detached Feb 5 16:49:02 curry /bsd: uhub1 at uhub0 port 1 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.16 addr 5 Feb 5 16:49:03 curry /bsd: uhub2 at uhub1 port 2 configuration 1 interface 0 "GenesysLogic USB2.1 Hub" rev 2.10/88.17 addr 6 Feb 5 16:49:04 curry /bsd: uhub3 at uhub1 port 3 configuration 1 interface 0 "Genesys Logic USB2.0 Hub" rev 2.00/88.32 addr 7 Feb 5 16:49:05 curry /bsd: uhidev2 at uhub3 port 1 configuration 1 interface 0 "Bizlink D6000 Controller" rev 2.00/0.18 addr 8 Feb 5 16:49:05 curry /bsd: uhidev2: iclass 3/0, 1 report id Feb 5 16:49:05 curry /bsd: uhid4 at uhidev2 reportid 1: input=0, output=0, feature=1 Feb 5 16:49:53 curry /bsd: umass0 at uhub5 port 2 configuration 1 interface 0 "SanDisk Ultra" rev 3.00/1.00 addr 12 Feb 5 16:49:53 curry /bsd: umass0: using SCSI over Bulk-Only Feb 5 16:49:53 curry /bsd: scsibus4 at umass0: 2 targets, initiator 0 Feb 5 16:49:53 curry /bsd: sd2 at scsibus4 targ 1 lun 0: Ultra, 1.00> SCSI4 0/direct removable serial.07815581200212119554 Feb 5 16:49:53 curry /bsd: sd2: 29328MB, 512 bytes/sector, 60063744 sectors Feb 5 16:51:59 curry /bsd: error: [drm:pid69604:intel_dp_aux_wait_done] *ERROR* dp aux hw did not signal timeout (has irq: 1)! Feb 5 16:54:57 curry /bsd: error: [drm:pid69604:intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe B Feb 5 16:55:56 curry /bsd: WARNING !wm_changed failed at /usr/src/sys/dev/pci/drm/i915/intel_pm.c:3609 Feb 5 16:56:39 curry /bsd: uhub2 detached Feb 5 16:56:39 curry /bsd: uhid4 detached Feb 5 16:56:39 curry /bsd: uhidev2 detached Feb 5 16:56:39 curry /bsd: uhub3 detached Feb 5 16:56:39 curry /bsd: uhub1 detached Feb 5 16:56:39 curry /bsd: uaudio0 detached Feb 5 16:56:39 curry /bsd: ugen1 detached Feb 5 16:56:39 curry /bsd: sd2 detached Feb 5 16:56:39 curry /bsd: scsibus4 detached Feb 5 16:56:39 curry /bsd: umass0 detached Feb 5 16:56:39 curry /bsd: uhub5 detached Feb 5 16:56:39 curry /bsd: uhub4 detached Feb 5 16:56:40 curry apmd: battery status: high. external power status: not connected. estimated battery life 95% Feb 5 17:06:45 curry /bsd: error: [drm:pid69604:intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A Any thoughts? I have to return the dock in a couple of days but if there is any procedures or output that someone would like to see in the meantime, let me know. Thanks, Thomas OpenBSD 6.4-current (GENERIC.MP) #625: Mon Jan 21 22:20:46 MST 2019 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 17037066240 (16247MB) avail mem = 16511123456 (15746MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.1 @ 0xe (109 entries) bios0: vendor Dell Inc. version "1.7.2" date 11/26/2018 bios0: Dell Inc. Latitude 7490 acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET SSDT SSDT HPET SSDT UEFI SSDT LPIT SSDT SSDT SSDT SSDT DBGP DBG2 SSDT SSDT MSDM SLIC NHLT TPM2
Re: mount_ffs Permission denied as root
On 1/1/19 11:53 PM, Otto Moerbeek wrote: On Tue, Jan 01, 2019 at 07:25:14PM -0700, myml...@gmx.com wrote: I just did a new install of current AMD64 from the 12/31/2018 snapshot and having some permission issues mounting a usb drive, as root. I have been able to mount other usb drives just fine. (Also tried with the 12/29 snapshots as well, same issue) #disklabel sd4 # /dev/rsd4c: type: SCSI disk: SCSI disk label: Survivor 3.0 duid: 70568afde7f5a241 flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 15542 total sectors: 249692160 boundstart: 64 boundend: 249682230 drivedata: 0 16 partitions: # size offset fstype [fsize bsize cpg] a: 249682144 64 4.2BSD 2048 16384 12958 c: 249692160 0 unused curry:/root:#mount -v /dev/sd4a /mnt/usb0 mount_ffs: /dev/sd4a on /mnt/usb0: Permission denied I don't see any kind of messages in the logs related to the error. device r/o switch is set to r/o? /mnt/usb0 is r/o? If that's not it, please ktrace the command and show kdump -Otto Hi Otto, There is no hw switch on this usb drive, I'm not sure why it's showing up as read only. I attached a ktrace for both the disklabel command as well as an ls on the drive after I was able to mount it read only. Thanks, Thomas ktrace-ls-mounted-ro.out Description: Binary data ktrace-disklabel.out Description: Binary data
Re: mount_ffs Permission denied as root
On 1/1/19 10:02 PM, Philip Guenther wrote: On Tue, Jan 1, 2019 at 6:27 PM myml...@gmx.com <mailto:myml...@gmx.com> mailto:myml...@gmx.com>> wrote: I just did a new install of current AMD64 from the 12/31/2018 snapshot and having some permission issues mounting a usb drive, as root. I have been able to mount other usb drives just fine. (Also tried with the 12/29 snapshots as well, same issue) #disklabel sd4 ... # size offset fstype [fsize bsize cpg] a: 249682144 64 4.2BSD 2048 16384 12958 c: 249692160 0 unused curry:/root:#mount -v /dev/sd4a /mnt/usb0 mount_ffs: /dev/sd4a on /mnt/usb0: Permission denied I don't see any kind of messages in the logs related to the error. What's the output of "fsck /dev/rsd4a" ? Philip Guenther I had to reboot the machine related to this and the drive attached as a different device but here's the output. 20190102-1407:root@curry:/root:#disklabel sd2 # /dev/rsd2c: type: SCSI disk: SCSI disk label: Survivor 3.0 duid: 70568afde7f5a241 flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 15542 total sectors: 249692160 boundstart: 64 boundend: 249682230 drivedata: 0 16 partitions: # size offset fstype [fsize bsize cpg] a: 249682144 64 4.2BSD 2048 16384 12958 c: 249692160 0 unused Fsck shows clean, I noticed however the (NO WRITE) bit at the end. 20190102-1408:root@curry:/root:#fsck /dev/sd2a ** /dev/rsd2a (NO WRITE) ** File system is clean; not checking I was able to get the drive mounted in read only mode after mounting one of the directories, of course the most important one, gives a bad file descriptor and doesn't recognize it as a directory. 20190102-1410:root@curry:/root:#mount -o ro /dev/sd2a /mnt/usb0 20190102-1410:root@curry:/root:#ls /mnt/usb0 root sata0 tbisch usb0 usb1 20190102-1410:root@curry:/root:#ls -l /mnt/usb0 ls: tbisch: Bad file descriptor total 16 drwx-- 8 root wheel 512 Dec 28 06:33 root drwxr-xr-x 2 root wheel 512 Dec 30 21:01 sata0 drwxr-xr-x 9 root wheel 1024 Dec 31 1979 usb0 drwxr-xr-x 2 root wheel 512 Dec 30 21:01 usb1 20190102-1410:root@curry:/root:#ls /mnt/usb0/tbisch/ ls: /mnt/usb0/tbisch/: Not a directory I tried unmounting and doing a fsck -f -y /dev/sd4a and it shows lots of errors, but doesn't give y for the answer as I thought the -y flag was supposed to do: 20190102-1413:root@curry:/root:#fsck -f -y /dev/sd2a ** /dev/rsd2a (NO WRITE) ** File system is already clean ** Last Mounted on /mnt/usb2 ** Phase 1 - Check Blocks and Sizes PARTIALLY ALLOCATED INODE I=25984 CLEAR? no UNKNOWN FILE TYPE I=25985 CLEAR? no UNKNOWN FILE TYPE I=25986 CLEAR? no UNKNOWN FILE TYPE I=25987 CLEAR? no UNKNOWN FILE TYPE I=25988 CLEAR? no UNKNOWN FILE TYPE I=25989 CLEAR? no UNKNOWN FILE TYPE I=25990 CLEAR? no UNKNOWN FILE TYPE I=25991 CLEAR? no UNKNOWN FILE TYPE I=25992 CLEAR? no UNKNOWN FILE TYPE I=25993 CLEAR? no UNKNOWN FILE TYPE I=25994 CLEAR? no UNKNOWN FILE TYPE I=25995 CLEAR? no UNKNOWN FILE TYPE I=25996 CLEAR? no UNKNOWN FILE TYPE I=25997 CLEAR? no PARTIALLY ALLOCATED INODE I=25998 CLEAR? no UNKNOWN FILE TYPE I=25999 CLEAR? no PARTIALLY ALLOCATED INODE I=26000 CLEAR? no UNKNOWN FILE TYPE I=26001 CLEAR? no UNKNOWN FILE TYPE I=26002 CLEAR? no UNKNOWN FILE TYPE I=26003 CLEAR? no UNKNOWN FILE TYPE I=26004 CLEAR? no UNKNOWN FILE TYPE I=26005 CLEAR? no UNKNOWN FILE TYPE I=26006 CLEAR? no UNKNOWN FILE TYPE I=26007 CLEAR? no UNKNOWN FILE TYPE I=26008 CLEAR? no and it keeps going. I unmounted the drive and tried to create an image of the drive, but it fails 20190102-1435:root@curry:/root:#time dd if=/dev/rsd2c of=/root/corsair.iso bs=1k dd: /dev/rsd2c: Input/output error 15958016+0 records in 15958016+0 records out 16341008384 bytes transferred in 7313.789 secs (2234274 bytes/sec) 122m03.94s real 0m16.54s user 6m36.66s system After this doing a disklabel fails: #disklabel sd2 disklabel: ioctl DIOCGDINFO: Input/output error Additionally I see the following in the /var/log/messages. Jan 2 13:52:52 curry /bsd: usb_insert_transfer: xfer=0xff025c1a35a0 not free
mount_ffs Permission denied as root
I just did a new install of current AMD64 from the 12/31/2018 snapshot and having some permission issues mounting a usb drive, as root. I have been able to mount other usb drives just fine. (Also tried with the 12/29 snapshots as well, same issue) #disklabel sd4 # /dev/rsd4c: type: SCSI disk: SCSI disk label: Survivor 3.0 duid: 70568afde7f5a241 flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 15542 total sectors: 249692160 boundstart: 64 boundend: 249682230 drivedata: 0 16 partitions: # size offset fstype [fsize bsize cpg] a: 249682144 64 4.2BSD 2048 16384 12958 c: 249692160 0 unused curry:/root:#mount -v /dev/sd4a /mnt/usb0 mount_ffs: /dev/sd4a on /mnt/usb0: Permission denied I don't see any kind of messages in the logs related to the error. dmesg below Thanks, Thomas OpenBSD 6.4-current (RAMDISK_CD) #528: Mon Dec 31 16:22:42 MST 2018 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD real mem = 8250834944 (7868MB) avail mem = 7996796928 (7626MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x9c7fd000 (65 entries) bios0: vendor LENOVO version "JBET70WW (1.34 )" date 06/15/2018 bios0: LENOVO 20BWS0S900 acpi0 at bios0: rev 2 acpi0: tables DSDT FACP SLIC ASF! HPET ECDT APIC MCFG SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT PCCT SSDT UEFI MSDM BATB FPDT UEFI DMAR acpiec0 at acpi0 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz, 2195.21 MHz, 06-3d-04 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,RDSEED,ADX,SMAP,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE cpu at mainbus0: not configured cpu at mainbus0: not configured cpu at mainbus0: not configured ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 40 pins acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG_) acpiprt2 at acpi0: bus 2 (EXP1) acpiprt3 at acpi0: bus 3 (EXP2) acpiprt4 at acpi0: bus -1 (EXP3) acpicpu at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpipwrres at acpi0 not configured acpitz at acpi0 not configured "PNP0C0D" at acpi0 not configured "PNP0C0E" at acpi0 not configured "PNP0A08" at acpi0 not configured "PNP0B00" at acpi0 not configured "PNP0C0A" at acpi0 not configured "PNP0C0A" at acpi0 not configured "ACPI0003" at acpi0 not configured "LEN0068" at acpi0 not configured "PNP0C14" at acpi0 not configured "PNP0C14" at acpi0 not configured "PNP0C14" at acpi0 not configured "INT340F" at acpi0 not configured pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 "Intel Core 5G Host" rev 0x09 vga1 at pci0 dev 2 function 0 "Intel HD Graphics 5500" rev 0x09 wsdisplay1 at vga1 mux 1: console (80x25, vt100 emulation) "Intel Core 5G HD Audio" rev 0x09 at pci0 dev 3 function 0 not configured xhci0 at pci0 dev 20 function 0 "Intel 9 Series xHCI" rev 0x03: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 9 Series MEI" rev 0x03 at pci0 dev 22 function 0 not configured em0 at pci0 dev 25 function 0 "Intel I218-LM" rev 0x03: msi, address 50:7b:9d:44:b3:4a "Intel 9 Series HD Audio" rev 0x03 at pci0 dev 27 function 0 not configured ppb0 at pci0 dev 28 function 0 "Intel 9 Series PCIE" rev 0xe3: msi pci1 at ppb0 bus 2 rtsx0 at pci1 dev 0 function 0 "Realtek RTS5227 Card Reader" rev 0x01: msi sdmmc0 at rtsx0: 4-bit, dma ppb1 at pci0 dev 28 function 1 "Intel 9 Series PCIE" rev 0xe3: msi pci2 at ppb1 bus 3 iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wireless AC 7265" rev 0x59, msi ehci0 at pci0 dev 29 function 0 "Intel 9 Series USB" rev 0x03: apic 2 int 23 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 "Intel 9 Series LPC" rev 0x03 at pci0 dev 31 function 0 not configured ahci0 at pci0 dev 31 function 2 "Intel 9 Series AHCI" rev 0x03: msi, AHCI 1.3 ahci0: port 0: 6.0Gb/s scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0: SCSI3 0/direct fixed naa.500080d9104c5081 sd0: 244198MB, 512 bytes/sector, 500118192 sectors, thin "Intel 9 Series SMBus" rev 0x03 at pci0 dev 31 function 3 not configured "Intel 9 Series Thermal" rev 0x03 at pci0 dev 31 function 6 not configured isa0 at mainbus0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard, using
