Re[2]: ARP poisonong. LIVE_MAC

2004-02-04 Thread Derek Marcotte
In-Reply-To: [EMAIL PROTECTED]

You want to deny physical connectivity to the LAN, from a
particular host, period.

You might try setting up a quasi-switch with bridge (kernel
option see LINT), plug a whole bunch of network cards in, and
downing the interfaces when they don't pay... It would be a full
duplex, dual speed-hub, which is probably fine, anyways... You'd
also need cross-over cables for all of the PCs becuase it's a
HOST to HOST connection.  I'd recommend the DLink DFE-570TX, but
I don't know that they make it anymore... Intel makes some good
multi-port adapters.  Also a PCI bus is limited to pushing 1056
Mbps (32-bits * 33Mhz), so you can really max out your system
(potentially 200Mbps/adapter) quickly...

The best option would be to go with something that is designed
for this sort of thing.  A Cisco catalyst (1900s and 2900s are
pretty cheap these days) is.  You can write a script that logs
into the switch, and ups and downs the port when they don't pay,
or their account is up to date.

Just a thought...  A dedicated switch would probably be the best
way to deal with this, since you are switching the traffic
anyways.

Alternatively, you can mess with ports/net/nemesis to craft ARP
packets, and so can the connected device, because they still have
physical access to the LAN.  Not to mention that they are still
capable of denying service to other customers via the exact same
method that you use, even though they are disabled.

Cheers,
Derek

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SCSI to IDE device bridges

2004-01-07 Thread Derek Marcotte
Hello,
I've checked the H/W compatibiltity list for 4.9 for any SCSI
to IDE bridges (IDE drive to SCSI bus), and I don't see any
mention of these type of devices.  I would think that they would
be supported though, because they should just appear as HDDs.  I
plan on at least to try one out, regardless of tainting the
ever pure SCSI bus with IDE devices.  A manufacturer and model
number that I'm looking is:

http://www.acard.com/eng/

AEC-7726H
(http://www.acard.com/eng/product/scside/aec-7726h.html)

I'm just wondering if any one has had any successes/failures with
these type of devices withing FreeBSD and can share their
experiences with me.  I'm not stuck on this vendor either, it's
just to give you an idea of what I'm looking for.  (Also if
anyone knows of a bridge that can support multiple IDE drives,
that would be pretty cool too)

As a side note, they mention FreeBSD in their compatibility list
on the ARS-2000FW, and ARS-2000HW products, but do not
specifically mention it under the AEC-7726H product line, but I
think it's because they've generalized their compatibility list.

Thanks Again!
Derek

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Poor SCSI disk preformance

2004-01-06 Thread Derek Marcotte
Hi Everyone,
I'm having difficulty getting my SCSI hard disks to preform
well.  I don't know what tools are available to help me diagnose
this issue, or if there are specific tweaks that I need to make.
Attached is the output from dmesg.

The reason why I say that performance is slow is that when I run
the following:

# dd if=/dev/zero of=/dev/da0 count=200 bs=128k
200+0 records in
200+0 records out
26214400 bytes transferred in 5.100589 secs (5139485 bytes/sec)

You can see that it doesn't transfer very fast.  If I do the
whole drive, I still get the same throughput.  It strikes me as
odd that an older ATA disk preforms better than the newer SCSI
disk.  I am under the impression that a standard run-of-the mill
ATA drive will do anywhere from 10-15 MB/s sequential transfer,
which is what I get when writing to an actual filesystem (with no
soft-updates):

# mount
/dev/ad0s1a on / (ufs, local)
/dev/ad0s1f on /tmp (ufs, local, soft-updates)
/dev/ad0s1g on /usr (ufs, local, soft-updates)
/dev/ad0s1e on /var (ufs, local, soft-updates)
procfs on /proc (procfs, local)

# dd if=/dev/zero of=/temp.234233 count=200 bs=128k
200+0 records in
200+0 records out
26214400 bytes transferred in 2.437368 secs (10755208 bytes/sec)

And with soft-updates:

# dd if=/dev/zero of=/usr/temp.234233 count=200 bs=128k
200+0 records in
200+0 records out
26214400 bytes transferred in 2.759680 secs (9499072 bytes/sec)

I also had (meaning it is not currently attached) a different
SCSI drive attached on the bus, with the same results.  Has
anyone any tips for this from a FreeBSD point of view?

TIA,
Derek
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.8-RELEASE #0: Thu Apr  3 10:53:38 GMT 2003
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
Timecounter i8254  frequency 1193182 Hz
CPU: Pentium II/Pentium II Xeon/Celeron (298.54-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0x660  Stepping = 0
  
Features=0x183f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real memory  = 134217728 (131072K bytes)
avail memory = 125378560 (122440K bytes)
Preloaded elf kernel kernel at 0xc051d000.
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 9 entries at 0xc00ede10
npx0: math processor on motherboard
npx0: INT 16 interface
pcib0: Intel 82443BX (440 BX) host to PCI bridge on motherboard
pci0: PCI bus on pcib0
agp0: Intel 82443BX (440 BX) host to PCI bridge mem 0x4400-0x47ff at device 
0.0 on pci0
pcib1: Intel 82443BX (440 BX) PCI-PCI (AGP) bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
pci1: ATI Mach64-GD graphics accelerator at 0.0 irq 11
fxp0: Intel Pro 10/100B/100+ Ethernet port 0x2400-0x241f mem 
0x4010-0x401f,0x4200-0x42000fff irq 11 at device 15.0 on pci0
fxp0: Ethernet address 00:08:c7:89:c4:28
inphy0: i82555 10/100 media interface on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ahc0: Adaptec 2940 Ultra SCSI adapter port 0x2000-0x20ff mem 0x4020-0x40200fff 
irq 11 at device 16.0 on pci0
aic7880: Ultra Wide Channel A, SCSI Id=7, 16/253 SCBs
isab0: Intel 82371AB PCI to ISA bridge at device 20.0 on pci0
isa0: ISA bus on isab0
atapci0: Intel PIIX4 ATA33 controller port 0x2440-0x244f at device 20.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: Intel 82371AB/EB (PIIX4) USB controller port 0x2420-0x243f irq 11 at device 
20.2 on pci0
usb0: Intel 82371AB/EB (PIIX4) USB controller on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
chip0: Intel 82371AB Power management controller port 0xfc00-0xfc0f at device 20.3 
on pci0
orm0: Option ROMs at iomem 
0xc-0xc7fff,0xc8000-0xc97ff,0xc9800-0xd07ff,0xe-0xe7fff on isa0
fdc0: NEC 72065B or clone at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: 1440-KB 3.5 drive on fdc0 drive 0
atkbdc0: Keyboard controller (i8042) at port 0x60,0x64 on isa0
atkbd0: AT Keyboard flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: PS/2 Mouse irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
vga0: Generic ISA VGA at port 0x3c0-0x3df iomem 0xa-0xb on isa0
sc0: System console at flags 0x100 on isa0
sc0: VGA 16 virtual consoles, flags=0x300
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: Parallel port at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
plip0: PLIP network interface on ppbus0
lpt0: Printer on ppbus0
lpt0: Interrupt-driven port
ppi0: Parallel I/O on ppbus0
ad0: 3093MB FUJITSU MPB3032ATU [6286/16/63] at ata0-master UDMA33
Waiting 15 seconds for SCSI devices to settle
Mounting root from ufs:/dev/ad0s1a
da0 at ahc0 

Re: Poor SCSI disk preformance

2004-01-06 Thread Derek Marcotte
 I wouldn't say that dd is the greatest benchmarking tool. You
may want to
 try benchmarks/rawio.
I'll check that out just for kicks, but I _actually want_ to
write zeros to the drive first, not just as a benchmark.  The
reasoning for this is that I'm trying to create a dedicated box
to format HDDs in parallel.  I wish to first zero the drives to
make data recovery without an electron microscope difficult.

Then, to test for bad sectors I do a checksum of the number of
zero bytes written to disk, and then I read back from the disk
and compare checksums. Not exactly an extensive test, and perhaps
there is a verify option or trick in dd that I'm not aware of.  I
think that this would catch any blatantly bad drives...

If not, there are 2 full disk operations that should be going
faster.

Actually, just for kicks:

# dd if=/dev/da0 of=/dev/null bs=128k 
[1] 1839
# iostat -K -w 1 da0
  tty da0 cpu
 tin tout  KB/t tps  MB/s  us ni sy in id
   1   42 64.00 607 37.92   1  0  1  0 98
   0   43 64.00 222 13.87   0  0  2  0 98
   0   43 64.00 223 13.92   0  0  0  2 98
   0   42 64.00 224 13.98   0  0  2  0 98
   0   43 64.00 222 13.86   0  0  3  0 97
   0   43 64.00 223 13.92   0  0  1  2 98
   0   43 64.00 223 13.92   0  0  2  1 97
   0   42 64.00 223 13.92   0  0  3  0 97
   0   43 64.00 223 13.92   0  0  1  0 99

Seems to give me the performance that I expect...


 Also, try monitoring diffferent types of transfers to
 and from another physical disk with iostat.
Actually, interestingly enough, when I copy a file, or do a
newfs_msdos I only get 0.06-0.89MB/s transfers, which is what
first tipped me off to the problems...  Obviously less
acceptable...

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Poor SCSI disk preformance [more on camcontrol please!]

2004-01-06 Thread Derek Marcotte
 Aha.  Check the WCE bit to see if your write cache is enabled
on the
 disk

Bingo:

# dd if=/dev/zero of=/dev/da0 bs=64k 
[1] 2253
# iostat -K -w 1 da0
  tty da0 cpu
 tin tout  KB/t tps  MB/s  us ni sy in id
   2   38  0.00   0  0.00   1  0  1  0 98
   0   43 64.00 223 13.91   0  0  8  1 91
   0   43 64.00 223 13.92   0  0  5  0 95
   0   43 64.00 223 13.92   0  0  8  1 91
   0   43 64.00 223 13.92   0  0  6  0 94
   0   42 64.00 223 13.92   0  0  5  1 94
   0   43 64.00 223 13.92   1  0  6  1 92

 Set it by running cmcontrol mode da0 -m 8 -e -P 2, and set
WCE: 1

I needed to modify your command slightly to:
camcontrol mode da0 -m 8 -e -P 0

I guess I don't have a page 2 for some reason...  This will
probably cause this bit to be reset on reboot as well, because it
is the current page?

Is it prudent to attempt to set the WCE:1 on all drives that get
attached?  I will be formatting a large number of greatly varying
drives, including ATA converted to SCSI type drives, and really
old, and really new drive types.

I've had a look at man camcontrol earlier, but I don't know
enough about the inner workings of SCSI for this to mean much to
me.  It seems to be pretty obscure (like how would I know to
enable features/specs to edit a modepage?), but extremely
powerful.  Where can I read more about this, is there a good
camcontrol FAQ/tutorial out there that explains what these
details actually mean/do?

Thanks for the help!
Derek

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Kernel load balancing

2003-07-15 Thread Derek Marcotte
Hi,
I have posted an ealier question to this effect that could
provide more context:

(wrapped)
http://docs.freebsd.org/cgi/getmsg.cgi?fetch=827757+0+archive/2003/freebsd-questions/20030713.freebsd-questions

I would like to know where I can find out if FreeBSD spreads the
network load across 2 interfaces of equal weight to the same
subnet, or if it just tries to push everything out the lowest
numbered interface.

Cheers,
Derek

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Kernel load balancing

2003-07-15 Thread Derek Marcotte
 Do you want to do trunking for extra bandwidth, for redundancy
in case of
 failure...what problem are you trying to solve?

Exactly... Both.  Ok, so let's make this a little more complex.
Here's how I envisioned this working.

Subnet A 192.168.0.0/24
Subnet B 192.168.1.0/24

Subnet C 192.168.2.0/30
Subnet D 192.168.2.4/30

Router 1
fxp0 192.168.0.1/24
fxp1 192.168.2.1/30
fxp2 192.168.2.5/30

Router 2
fxp0 192.168.1.1/24
fxp1 192.168.2.2/30
fxp2 192.168.2.6/30

router1 route add 192.168.1.0/24 192.168.2.2
router1 route add 192.168.1.0/24 192.168.2.6

router2 route add 192.168.0.0/24 192.168.2.1
router2 route add 192.168.0.0/24 192.168.2.5


(may wrap)
SubnetA---fxp0---router1fxp1 Subnet
C fxp1router2---fxp0---SubnetB


SubnetA---fxp0---router1fxp2 Subnet
D fxp2router2---fxp0---SubnetB


I intend to run Zebra and OSPF on routers 1 and 2.  Subnets A and
B are 100 Mbit/s networks.  Subnets C and D are 10 Mbit/s
networks, I would like to have a ~20 Mbit/s pipe when both lines
are up, but if one fails, it dumbs down to ten.  I am familiar
with OSPF enough to (hopefully :) make it through the routing and
failover, but I don't feel that Zebra will give me a 20 Mbit
pipe.

I am thinking about this in a routing frame of mind... Perhaps if
there is a way to just pair up the adapters at the ethernet
level it would be a simpler solution, but it would have to be
able to fail over without blinking...  I do not of such a
capacity in FreeBSD, but if there is one, I would love to hear
about it.

Does this help to clarify the situation?

Cheers,
Derek

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Yes, a quick routing question...

2003-07-08 Thread Derek Marcotte
It is possible.

I have 2 routers.  Each has 3 interfaces.

If :
I plug 2 interfaces on each to the other router,
the third interface on each is for the local subnet,
a route to the non-local subnet is added to each of the 2
interfaces on each router

Subnet A-A===B-Subnet B

Will the kernel load balance the traffic traveling between the 2
subnets over the 2 lines?

I have done some reading earlier about OSPF, and zebra, but it is
my understanding that the kernel needs to decide to load balance
when there are 2 routes of equal weight to the same subnet.

Thanks,
Derek


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]