Re: OS throws away large packets

2008-04-28 Thread Tom Judge

Mr Y wrote:

Hi all,

I'm trying to implement Large Recieve Offload for an Ethernet driver on
FreeBSD 6.3, but all my MTU packets are being thrown by the OS.
I'm using mbuf chains in this imlpementation, each mbuf is a cluster of
MCLBYTES bytes. They are linked by the m_next pointer.
The first packet being thrown away is 2945 bytes long. Wireshark shows the
packet that is being passed to the OS is correct.

Do I need to set some OS parameter to make it recieve mbuf chains?

Please help.



Hi Yony,

I seem to remember some discussion about this list last year see the 
following threads:


http://lists.freebsd.org/pipermail/freebsd-net/2007-September/015250.html
http://lists.freebsd.org/pipermail/freebsd-net/2007-September/015350.html

From my limited reading of these threads just now and possibly bad 
memory.  It would seem that the MRU to MTU relationship is defined in 
the nic driver rather than enforced further up the stack or at least 
that seamed to be the case with the bce driver.


Hope this is helpful,

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Nagios + 6.3-RELEASE == Hung Process

2008-01-02 Thread Tom Judge

Michael Butler wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marc G. Fournier wrote:

G'day ...

  Yesterday, I setup nagios to do some system monitoring ... installed the
latest version from ports into a jail, so that I could easily move it around
between machines as I upgrade, without losing data ... after about 30 minutes
running, I get a second nagios process running (fork?) that takes up ch CPU
time as is available, and just hangs there until I kill -9 it ...


[ .. ]


After searching the 'Net a bit, came across this thread:

http://www.nagiosexchange.org/nagios-users.34.0.html?tx_maillisttofaq_pi1%5Bmode%5D=1tx_maillisttofaq_pi1%5BshowUid%5D=7694

That recommends modifying libmap.conf with:

[/usr/local/bin/nagios]
libpthread.so.2 libthr.so.2
libpthread.so libthr.so


Thanks for pointing this out. I've had similar problems with nagios but
hadn't found a solution until I saw your pointer. Sadly, my expertise
with both thread libraries is sufficiently lacking that I have no clue
where to start looking for the cause :-(



I have also seen this issue, but have always put it down to the way that
we manage our nagios deployments with cfengine.  I will try to deploy
this change and monitor for the problem to see if it persists.

On a side note if you want to use broker modules with nagios from port
you need to change the following in the port Makefile in order to make
them load properly:

From:
USE_AUTOTOOLS=  autoconf:259
To:
SE_AUTOTOOLS=  autoconf:259 libltdl:15


I sent an email to the maintainer but got no response and my email did
not seem to have affected the last commit to upgrade to 2.10.


Tom

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Nagios + 6.3-RELEASE == Hung Process

2008-01-02 Thread Tom Judge

Jarrod Sayers wrote:

On 03/01/2008, at 1:56 AM, Tom Judge wrote:

I have also seen this issue, but have always put it down to the way that
we manage our nagios deployments with cfengine.  I will try to deploy
this change and monitor for the problem to see if it persists.


I hope I can confirm your frustrations.  There is a threading issue with 
Nagios when it's binaries are linked against libpthread(3) threading 
library, the default on recent FreeBSD 5.x releases and all 6.x 
releases. The issue is random and extremely difficult to track down with 
the symptoms being a second Nagios process sitting on the system hanging 
a CPU.  Be rest assured that I have been working on it, and have seen it 
on one system of mine.




Not sure if this is related at all but out of the 3 nagios deployments 
we have here I have only ever seen it on one (It currently has 2 nagios 
threads spinning CPU time atm).


The differences on that server are:

* It is amd64 compared to i386
* It also runs ndo2db from ndoutils 1.4b7

All the systems run 6.2-RELEASE-p5 and nagios-2.9_1, they are also all 
patched with gnu libltdl patch below.


Don't know if that info is of any use to you.

Changes have been submitted for net-mgmt/nagios-devel (aka Nagios 
3.0.r1)) to force the build process to link against libthr(3) where 
available, removing the need to map libpthread() out with 
/etc/libmap.conf.  If this goes well, as stated in the PR, i'll 
back-port it to net-mgmt/nagios (aka Nagios 2.10) in the next few days.


If anyone out there is running net-mgmt/nagios-devel and feels like 
trying it for me, see ports/119246 and drop me an email with a before 
and after ldd /usr/local/bin/nagios.



On a side note if you want to use broker modules with nagios from port
you need to change the following in the port Makefile in order to make
them load properly:

From:
USE_AUTOTOOLS=  autoconf:259
To:
SE_AUTOTOOLS=  autoconf:259 libltdl:15

I sent an email to the maintainer but got no response and my email did
not seem to have affected the last commit to upgrade to 2.10


I did receive that email and the changes went in with the last commit of 
net-mgmt/nagios-devel to test.  No issues have arisen so i'll be 
back-porting it to net-mgmt/nagios soon for you.  There also has been a 
rather large ports freeze which delayed the upgrade to Nagios 2.10, that 
PR was submitted on the 1st of November and committed on the 13th of 
December.  Unfortunately your email fell somewhere in the middle, 
apologies for not letting you know.




Thanks for this,  I currently maintain the patch on our build servers.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Service providers using Quagga

2007-09-14 Thread Tom Judge

Steve Bertrand wrote:

First off, sorry to cross-post, but *isp@ does not see much traffic.

I'm wondering if there are any network service providers here that run
any of their routing infrastructure within Quagga running on FreeBSD.

I'd like to know what software alternatives are deployed out in the
field, and how large a shop utilizes such software methods
instead/combined with standard hardware router offerings.

If this is a relatively common practice out there, what size environment
do you run it in, and at what level within your network?

Cheers,

Steve


Hi,

We are not strictly an ISP but we are using FreeBSD+Quagga on our VPN 
routers.  We currently only use the OSPF protocol in Quagga to manage 
redundant fault tollerant VPN links (Currently there are 40 tunnels in 
the backbone managed by quagga+ospf) between 6 sites across the globe. 
We will be testing the interoperability of quagga shortly when we deploy 
Dell layer 3 switches (Running OSPF) as the core switches of our 2 
largest sites.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to correctly use 2 on board nics

2007-06-05 Thread Tom Judge

Ivan Carey wrote:

Hello
I have a server board with 2 onboard nic's
I have set them up in rc.conf as follows

defaultrouter=192.168.1.1
network_interfaces=em0 em1 lo0
ifconfig_em0=inet 192.168.1.3 netmask 255.255.255.0
ifconfig_em1=inet 192.168.1.4 netmask 255.255.255.0

The question, is this the correct configuration?

If I have both nic's connected to the switch I can ping 192.168.1.1 and 
192.168.1.3 and 192.168.1.4


If I have only em0 connected I can ping 192.168.1.1 and 192.168.1.3

If I have only em1 connected I can ping 192.168.1.3.

What could the 2 onboard nic's be best used for. I was thinking that in 
the event on was to fail then the other would still be ok.


Any ideas would help.
Thanks,
Ivan



You may want to take a look at if_lacc.

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to correctly use 2 on board nics

2007-06-05 Thread Tom Judge

Ivan Carey wrote:

Tom Judge wrote:

Ivan Carey wrote:

Hello
I have a server board with 2 onboard nic's
I have set them up in rc.conf as follows

defaultrouter=192.168.1.1
network_interfaces=em0 em1 lo0
ifconfig_em0=inet 192.168.1.3 netmask 255.255.255.0
ifconfig_em1=inet 192.168.1.4 netmask 255.255.255.0

The question, is this the correct configuration?

If I have both nic's connected to the switch I can ping 192.168.1.1 
and 192.168.1.3 and 192.168.1.4


If I have only em0 connected I can ping 192.168.1.1 and 192.168.1.3

If I have only em1 connected I can ping 192.168.1.3.

What could the 2 onboard nic's be best used for. I was thinking that 
in the event on was to fail then the other would still be ok.


Any ideas would help.
Thanks,
Ivan



You may want to take a look at if_lacc.

Tom



What is if_lacc ?



My bad, sorry should be if_lagg.

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Reading temperature on DELL PE2850?

2007-06-05 Thread Tom Judge

Sten Daniel Soersdal wrote:
I'm contemplating setting sysctl machdep.cpu_idle_hlt=0 on my 4 core 
PE2850, but i am concerned that without HLT-ing would increase the 
temperature levels to dangerous levels.

Are there any ways for me to read temperatures from FreeBSD/DRAC4 ?



Have you tries using IPMI using the onboard base management controller?

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to correctly use 2 on board nics

2007-06-05 Thread Tom Judge

John Nielsen wrote:

Quoting Ivan Carey [EMAIL PROTECTED]:

I have a server board with 2 onboard nic's
I have set them up in rc.conf as follows

defaultrouter=192.168.1.1
network_interfaces=em0 em1 lo0
ifconfig_em0=inet 192.168.1.3 netmask 255.255.255.0
ifconfig_em1=inet 192.168.1.4 netmask 255.255.255.0

The question, is this the correct configuration?


Manually specifying network_interfaces is deprecated (take that line 
out). Putting both NIC's on the same subnet and segment but with 
different IP's like this may not be too useful..


If I have both nic's connected to the switch I can ping 192.168.1.1 
and 192.168.1.3 and 192.168.1.4


If I have only em0 connected I can ping 192.168.1.1 and 192.168.1.3

If I have only em1 connected I can ping 192.168.1.3.


That is because the route to 192.168.1.1 is associated with em0 at this 
point.


What could the 2 onboard nic's be best used for. I was thinking that 
in the event on was to fail then the other would still be ok.


For that to be most useful you'll want to set something up so they can 
share the same IP. The lagg(4) (link aggregation) virtual interface has 
already been mentioned, but I believe it is still only available in 
-CURRENT. Other possibilities might include attaching ifconfig scripts 
to link up/down events or [lack of] ping responses on one or both 
interfaces.


JN


I thought I saw if_lagg MFC'd to RELENG_6 a few weeks back on 
[EMAIL PROTECTED]  After checking cvsweb it is available in RELENG_6.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: looking for ethernet errors, collisions

2007-05-24 Thread Tom Judge

Chuck Swiger wrote:

On May 23, 2007, at 4:25 PM, RW wrote:

Well, there are plenty there on my sis0 interface (internal).

[EMAIL PROTECTED] ~]$ netstat -i
NameMtu Network   Address  Ipkts IerrsOpkts
Oerrs Coll
sis0   1500 Link#1  00:0a:e6:4a:56:c2 37989565  3980 36808783
5749 6492857
sis0   1500 192.168.1 kanga 12380344 -
9255757 -


What are collisions in this context?

Traditional ethernet collisions aren't possible on modern hardware,
since there's never more than one output writing to each twisted-pair.


Even though all modern NICs will happily do full-duplex operation when 
connected via a switch, people still use hubs rather than switches, 
sometimes  :-)  You can still get ethernet collisions on a hub.




In theory it is also possible to have collisions using a switch when the 
switches switching backplane is flooded.



Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Disk going bad?

2007-05-16 Thread Tom Judge

Jack Barnett wrote:

I think I have a disk going bad.  Is there any tools for freebsd
that'll check the disk and let me know if there is a hardware problem
or not?

(I'm getting ECC errors from my controller and trying to firgure out
if it's a bad controller or a bad drive [already checked the cables
and all that, so just have it down to these 2 peices of hardawre])

k, thanks!



You might want to have a look at smartmon-tools its in ports.  It may be 
able to do what you want.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Any FBSD Filesystem with Mandatory Locks?

2007-05-12 Thread Tom Judge

Philippe Laquet wrote:


Dear All,

I a trying to get HAVP (it works almost well, great software!) but I 
also need to use the streaming option and it needs a FS mounted with 
mandatory locks. I did not found any option with UFS(2) and also tried 
with ext2fs loaded but the mount_ext2fs does not support -o mand ... 
Any idea?...



My config : FBSD 6-STABLE
GENERIC Kernel
HAVP 0.85 (tuned makefile to compile the with STREAM function)

Tried with :
mdconfig -a -t malloc -s32m
mount_ext2fs -o mand /dev/md0 /tmp/havp (the mand option is not 
recognized)




I don't think that FreeBSD has mandatory file locks, I believe that all 
locks are advisory.  I may be wrong but this is what the section on 
file/descriptor locking in The Design And Implementation of the FreeBSD 
 Operating System seemed to suggest, this may have changed since 5.2 tho.


Tom

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Anti Spam

2007-04-21 Thread Tom Judge

Grant Peel wrote:

Hi all,

I am posting this question here because I know there are alot of ISPs using 
FreeBSD (including me) and am hoping to get feedback, either directly to me or 
to the list.

We are wrestling (as I am sure many are), with spam. Up until now we have been 
employing Spamassassin locally and using some 3rd party Anti-Spam servervices 
that are getting less and less reliable as the weeks go by.

We are considering two hardware solutions, Easyantispam and Barracuda. 
Barracuda is very expensive, so the most likely candidate is Easyantispam. Does 
anyone out there have thought on either or both of these? Usability? 
Reliability? Total Cost of ownership? Integration issues?

Any thoughts will be appreciated,

-Grant



I would recommend Postini (www.postini.com), it is not a hardware 
solution but they are cheep and the service is very good.  Also they are 
not a store and forward filtering company, they have a much more real 
time system that connects to your mail server as they receive the email 
so that the sending server gets the response from your server rather 
than from their server.


Tom J
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Port removal

2007-04-12 Thread Tom Judge

[EMAIL PROTECTED] wrote:

Steve,

On 4/12/07, Steve Bertrand [EMAIL PROTECTED] wrote:

Hi all,

On RELENG_6_2, I'm going to be installing chillisoft from ports.

However, when I first ran 'make', there was an initial configuration
window came up before compile. I selected the wrong options (I realized
this after the make was complete). I did not do a 'make install'.

I tried to 'make clean', distclean then I removed the entire port from
the ports system and re 'supped it and still, when I run make again, the
configuration dialog does not appear.

Am I missing something that I need to remove to put the port back to the
way it was before (so the config dialog will re-appear)?


#cd /var/db/ports
#ls
#rm -rf chilliwhatever

or edit options with an editor.



Did you try make config?

Tom
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dropped USB keyboard events

2007-03-21 Thread Tom Judge

Chris Jones wrote:

Hi folks--

I recently installed my first FreeBSD workstation after many years with 
NetBSD exclusively. Overall, I'm happy; but I'm seeing one particularly 
irritating bug.


At seemingly random intervals, the computer seems to stop listening for 
keyboard events for as long as a second at a time. Though I'm no speed 
demon at the keyboard, this can mean a few keystrokes that go missing 
before the computer catches up with me. Sometimes when it catches up, it 
will get a key which I pressed during the hiatus; and sometimes it will 
duplicate the last key I pressed before it stopped paying attention.


I've tried swapping to a different USB keyboard. I've tried plugging the 
keyboard in directly to the USB port, instead of via hubs. I've tried 
console mode instead of X. In all cases, the strange behavior is still 
present.


I'm using FreeBSD 6.2-RELEASE on a Dell Latitude D620 laptop. Here are 
the many lines of USB-relevant output from dmesg:




SNIP


I'd appreciate any advice on getting my lost keystrokes back.

Chris




I have seem similar problems with some PS2-USB converters that we where 
planning to use with some new servers.  It is almost like the Key Up 
event is being lost as keys will appear to be stuck down an repeat until 
the key is pressed again and the system recognises the key up.  I have a 
large number of these adapters that I would like to use any 
fix/information would be great.  I can provide any information that 
anyone would like to be able to diagnose this problem.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 3dm-2.04.00.035

2007-03-07 Thread Tom Judge

Don O'Neil wrote:

Does anyone have any working experiecne with the 3dm-2.04.00.035, 3ware RAID
controller monitoring daemon and web server? I installed the port on my
machine, edited the config file (changed passwords) and the daemon is
running, but I cannot connect to it on port 888 as per the config.

I'm running FreeBSD 6.1 and have a 3ware 7500 series card. I'm not even sure
if that one is supported or not, as there is no reference to v 2.04.00.035
(or anything 2.X) on 3wares web site.

Thanks!


You can't change the passwords in the config file, they are encrypted. 
The default passwords for both administrator and user are 3ware.  You 
need to set them back to the default values.  Also on i386 it is 
https://xxx.xxx.xxx.xxx:888/ on amd64 it is http://xxx.xxx.xxx.xxx:888/


Hope this helps

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sshd: PAM + key authentication

2007-03-04 Thread Tom Judge

Cédric Jonas wrote:

Hi all,

I set up a some sshd servers which authenticates their users through a
LDAP DB. To realize this, I used PAM. 
Everything ok until now. 


Then, via PAM (pam_filter) and the host attribute in the LDAP DB, I only
allowed logon on specifical hosts for some users.
After that, I tested this last functionality: I tried to login on a
disallowed host, and it fails - so it works as expected. For this test,
I used password authentication. Later, I tried the same test with key
authentication, and could log in...
After some more investigations, it seems sshd ignores PAM when someone
tries to log in with a key... is there some way to force sshd to
consider PAM in case of key authentication?

Thanks you,



There are some patches available for sshd that allow you to control both 
the SSH keys using an LDAP database and which users can log on to the 
ssh server (using both password/key based authentication i believe [I 
have never personally tested with password auth as our servers are set 
to key based auth only]).  I can send patches against 6.1/6.2 if required.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Serial Port Problems

2007-03-04 Thread Tom Judge

Dan D Niles wrote:

More Dell 2950 woes.

I use serial ports to manage my FreeBSD machines remotely.  I've never
had any problems until now.  I've installed FreeBSD 6.2 on a Dell 2950.

The install goes without problems over the serial port.  After the
reboot, I get the typical:

FreeBSD/i386 (test.host.net) (ttyd0)

login:

and I can log in just fine.  If I disconnect and come back later
(sometimes), or if I hit return without entering a login name (always)
it starts spitting out junk like:

nooo~:Woo{;6(|uww~now~nou})|t}}t9-

I can log in blind, but everything is scrambled.  Here is what I see
after logging in:

nooo~:ro}Zqsswv~?Nmswtl~:t|}}msr 1115?;5:3ontt}}t=Koy{{oo|
t(kk)19;??2077t|mefvwgSWdproogw~/Koy{{oo|
t(kk)17?=,1998,199;?=99,1998,199,1999=,199;,19;?,199==*  t|
merwggo~wsoot|meuowws{}}ofccmmoo~oio.lllr{oo|
wsrwen/NvwegSWd.?WMMESWe({_]p#3::fv{ijkon1331;:5?;30uUWc227?_wmooometovwegSWe-Jggvwesweokoogtugkikcmlswupv|,puesweuwwet|mefogrwwwsg?oo
 swgww{}taev{{mwsaonuuteuuedewrsuuannomu}oonforlllrwmmeswwsaswo*  
auth|ttz?/wnvwegSWnowo~mesww/--amwyycoow}|tt|meeWSUUaswgw}ooo* 
forywrrwmmessfo{swtassi}wwspteuuedfvwuuuo~}/oo 
t|mehiefoookaondfGQqdgw}mo~wsasweauz?/wwnvwegFnowo/aonl-* 
amooogw}|ht|meaimmooglm{ww,conbgeswesskmedbbggto*  h|tz?/wwnvwegSowowessko/. 
fft|medoocdm{wvrwu}oonhis*  
eeoniowumlmel,hm}wweamoawwmmcnmefomutuemon/ws{iswoogo/Kofyusw|llhiwweaaquuwwonorpronmmm,lmeswetukoet|meuutuutooojuomm-mg/,amooogw}taoyrwmmwwo~tewrmmwssggw,aedemmimli}}kss
 quuww}oontot|hquuww}oosFvwewWnowgmmimmoogi{w~. 
iofyuasngisrwihfvwegSWgwsdm{sw{ylmyu|,pueswerwggwrtotuehimwz??-omo}lpqggo. 
iofyuswenotfgiaw}|hmmoumlpqew,t}yue`mmonmoo//[ummyylouwwes{{{ow|ll89)torwmmo~vrt|meiowumlmuonaonmkoonoowuu}oonuu}mm}}.eem}t/ouwoootdoockiooget|i{slooonaonoogmmon/~uwww#

If I exit things go back to normal until I disconnect for a while or hit
return without a login name.

I tried loading an older FreeBSD to see if it was a hardware issue or a
FreeBSD issue, but my disks (mfi) aren't supported.

It seems like the speed of the tty is getting out of sync.

HELP! Any ideas?  


Thanks,

Dan


We have some PE2950's setup with serial consoles using IPMI over LAN. 
If you set the port in the BIOS to com2 and 57600 bps then you should be 
able to use ipmitool to access the console.  If you set the device hints 
correctly you will be able to have FreeBSD use this port as a serial 
console.


Tom


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Root devices changing on Dell 2950 with dual perc 5

2007-02-20 Thread Tom Judge

Dan D Niles wrote:

I just installed FreeBSD 6.2 on a Dell 2950.  I installed it on a raid 1
on the integrated Perc 5i.  The root device was /dev/mfid0s2a.

Then, I configured a raid 5 device on the Perc 5e.  Now, my root device
was /dev/mfid1s2a.   As a test, I configured an additional raid 1 device
on the Perc 5e.  Now my root device is /dev/mfid2s2a.

How do I get the internal raid device to be /dev/mfid0 and not change
every time I add an external raid device?

The machine BIOS lists the Perc 5i first, and the Perc BIOS lists the
Perc 5i as controller 0 and the Perc 5e as controller 1.

Any ideas how to fix this?

Thanks,

Dan



Not a true fix but you could take a look at geom label.  It will allow 
you to label each partition with a static device id.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PF Source routing of IPSEC tunnel ESP packets.

2007-02-08 Thread Tom Judge

Hi,

I am having some problems with source routing using PF,  I tried the PF 
mailing list but got no responses.



The network layout is available at: http://www.tomjudge.com/tmp/tunnels.png

From the diagram Host A and B both have there default gateway set as 
ISP A's router, and have a PF rule that should route traffic from ISP 
B's addresses to ISP B's router.  This seems to work for all traffic 
except the IPSEC ESP packets which always get transmitted to the default 
gateway that is set on the host.  It seems that they do not pass through 
the firewall or for some reason do not match the route-to rule.  Can 
anyone suggest a solution to this problem?


PF rule Host A: (First rule in rule set)

pass out quick on bge1 route-to ( bge1 112.0.0.1 ) inet from 112.0.0.2 
to ! 112.0.0.0/27 keep state


PF rule Host B: (First rule in rule set)

pass out quick on bge1 route-to ( bge1 114.0.0.1 ) inet from 114.0.0.2 
to ! 114.0.0.0/27 keep state



Thanks

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Clutz-Proof Logging

2007-01-05 Thread Tom Judge

Stan Halprin wrote:

747478Hi;
I know I'm a clutz but I'm sick and tired of doing some stupid thing that 
crashes my server, then trying to figure out what I did. Is there something out 
there that could log everything I did so that I could review it each time I 
shoot myself in the foot?
TIA
Stan



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___

freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


I have found that the sudosh port is very useful for this, you can use 
it as your shell.  It allows you to replay the full terminal session at 
a later date, including any special terminal control sequences such as 
ncurses etc..  It also alows you to adjust the replay speed and other 
useful features.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Tom Judge

Dan Mahoney, System Admin wrote:

Hey all,

I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card.  
It's a 1u system -- sticking extra things into PCI slots as a workaround 
is likely to be impossible.


I found this document on how to get it installed, in theory:

http://www.3ware.com/kb/article.aspx?id=14850

But with no floppy, this is probably going to involve either 
transplanting the card (and drive array) to another machine JUST to do 
the install (translated: a serious pain in the ass).


If someone could explain why any of the following aren't possible, I'd 
love to know:


1) Making this driver part of the boot-time probe.  I can understand not 
including every SOUND CARD and MULTI-PORT SERIAL CARD in the generic 
kernel, but could we at least include the rest of the STORAGE modules?


2) Giving the ability to load a kernel module from somewhere else (an 
http/ftp url, maybe?)


3) Adding the kldload command to the emergency holographic shell (I was 
able to do an NFS mount from within it, but had no way to load the driver).


4) Allowing non-standard modules to reside on the CD, instead of loading 
from floppy (i.e. I see there's a twa module in the base system, why 
aren't the .ko's sitting around easily-accessible for sysinstall?)


If I'm missing some really obvious way of doing this, please let me know.



Hi Dan,

I have installed FreeBSD on several systems with 9550 controllers.  The 
driver is available in sysinstall from 6.1 Release. (I installed from a 
6.1 Release CD)


Hope that helps

Tom

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: custom rc.d script not working

2006-12-05 Thread Tom Judge

Gobbledegeek wrote:

I  compiled quagga 0.99.5  from source (not  freebsd port) and  wrote  this
little  script in the /etc/rc.d/zebra  file.
---
#!/bin/sh

# PROVIDE: zebra
# REQUIRE: NETWORKING

. /etc/rc.subr

name=zebra
rcvar=${name}_enable
required_files=/usr/local/etc/${name}.conf
command=/usr/local/sbin/${name}
command_args=-d
pidfile=/var/run/${name}.pid
load_rc_config $name
run_rc_command $1
--

/etc/rc.conf has  zebra_enable=yes

However it only starts zebra  when  I execute  it manually from
command  line.  When I boot  freebsd, it  executes   and I see
message  in boot screen  that zebra  is starting, but on login I find
zebra isn't running.
all files in /usr/local/sbin/   for  zebra  executables are  owned  by
quagga/quagga user/group.

Once I  get this working, I  will ofcourse  add scripts for ospfd  and
bgpd and isisd..  but it beats me why this isn't  working...

This is  on  freebsd 6.2  RC1  i386.

Thanks very much in advance  for  your help...

PS:  Please  CC  me as I am not subscribed.




In the latest quagga port there is already an RC script ready for use. 
It gets installed to /usr/local/etc/rc.d/.


Tom J
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh over http

2006-11-29 Thread Tom Judge

Atom Powers wrote:

On 11/27/06, Ansar Mohammed [EMAIL PROTECTED] wrote:

Hello All,
Is there any ssh over http implementation available for freebsd?


That doesn't even make sense. SSH is a transport layer protocol, HTTP
is an application layer protocol.



Both HTTP and SSH are application level transports,  however both can be 
used to tunnel TCP connections.  Therefore it is possible to use ssh 
over http.  The windows putty client can use http proxies to make 
outbound connections as long as your http proxy is configured to allow 
CONNECT requests to port 22.  If you using squid for example with a 
defaultish config you will need to update your proxy server configuration.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hardware Console Redirection

2006-11-03 Thread Tom Judge

Brian A. Seklecki wrote:


Right, and the Dell PE uses com 2, or com1 (when properly counting 
from 0), ah la 0x2F8 which is logically connected to a serial port on 
the DRAC5 via the daughterboard connection.



The drac [345] Cards actually hook into or present a new vga adapter to
the system (this can be seen as an ati chipset on the drac 4 pci addin
cards) They also present a soft keyboard an mouse to the system via a
set of usb devices.   If you also use the bios console redirection the
bios is sent to the configured serial port.

FreeBSD fully supports the dell drac [345] cards (at least RELENG_6 does
which i guess means 7 does), I have a largs number of these cards
working perfectly in production.

Using the drac web interface you can send the system a scroll lock and
scroll back the system console as if you where using the physical
console. So there is no need to be conected all of the time.

On a side note it is advisable to put (device kbdmux) into your kernel
if you want to use both the physical console and the drac console
access, otherwise the usb devices provided by the drac disable the
physical keyboard.

If you have DRAC cards in you dell systems I would recomend the console
access in them over serial port redirection as it is much simpler to setup.

Tom



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Raid over NFS

2006-11-02 Thread Tom Judge

[EMAIL PROTECTED] wrote:

hi list!

I am actually seachring a solution for doing raid over NFS.
My need is to have 2 mail servers sharing the same storage.
For redundancy reason, I would like to have a duplicate partition (one on each
server accessible by NFS) and do a software RAID (mirroring) on the other.

Is there a well known and stable solution?
It looks like vinum is not able to do that.

I appreciate any return.

Thanks

Aymeric
  


We have just set up something very similar, using ggate and gmirror.  
one box mounts the mirrored volume directly while the other mounts it 
via nfs.  If the master box fails then the secondry box can mount the 
file system directly.


I used the following as a basis for the configuration and am adding in a 
heartbeat system so that the backup server can automatically take over 
from the master.


http://www.phunsites.net/wp/2006/08/11/realtime-file-system-replication-on-freebsd/

Tom

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: help increase process/kernel memory please

2006-10-31 Thread Tom Judge

Per olof Ljungmark wrote:

Hi,

I clearly have a problem figuring out how to increase the limits for 
memory available to a process and the kernel.


I'm running a Perl app that need lots of memory and I would like to 
make around 2G available to it, the box has 4G physical RAM.


Which knob(s) should be tweaked? System is running 6-STABLE from 
around 1st of October.


This is what I see when the process exits:
Out of memory during large request for 528384 bytes, total sbrk() is 
536416256 bytes


I'm depending on a solution to this and would be a really happy person 
if someone could please guide me.


Per olof

You should try setting kern.maxdsize in /boot/loader.conf and then 
reboot the system.  This sysctl sets the maximum data size of a running 
process you may also have to tune some of the limits using ulimit.  The 
example below sets the max data size to 1.5Gb:


kern.maxdsiz=1610612736


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: System monitoring

2006-10-20 Thread Tom Judge

riccardo_diago wrote:

hi all,
I'm newbie w/ freebsd.
i'm trying to install freebsd 6.1 to create a server only to monitoring
the others.
Anybody has experience with cacti and nagios?
or if u can suggest me other solution would be great. :-)

thanks in advance

Rik
  
I would highly recommend Nagios,  we have 3 monitoring servers deployed 
on 3 sites monitoring around 1200 services.  Nagios comes with a large 
number of plugins that can be used to monitor most basic services and it 
is very easy to throw together new plugins to monitor anything you want.


Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hard Drive Issues

2006-10-13 Thread Tom Judge

Richard McIntyre wrote:

I'm having a similar problem,
Oct 13 03:01:31 tco1 kernel: ad2: FAILURE - READ_DMA 
status=51READY,DSC,ERROR error=40UNCORRECTABLE LBA=181778119
Oct 13 07:11:15 tco1 kernel: ad2: FAILURE - READ_DMA 
status=51READY,DSC,ERROR error=40UNCORRECTABLE LBA=181778119


I'm assuming that particular sector on the drive is dying, I have 
backed everything up on the drive, can anyone give me more 
information, should the drive simply be replaced or is it possible 
that this is simply a TOC error and could be corrected by newfs to the 
drive?


I'm guessing it will need to be replaced, output of smartctl is below

Thanks
~Richard

Error 7742 occurred at disk power-on lifetime: 16036 hours (668 days + 
4 hours)
 When the command that caused the error occurred, the device was 
active or idle.


 After command completion occurred, registers were:
 ER ST SC SN CL CH DH
 -- -- -- -- -- -- --
 40 51 04 c7 b6 d5 ea  Error: UNC 4 sectors at LBA = 0x0ad5b6c7 = 
181778119


 Commands leading to the command that caused the error were:
 CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
 -- -- -- -- -- -- -- --    
 c8 00 04 c7 b6 d5 ea 00  15:22:37.737  READ DMA
 c8 00 04 9b b4 e1 ea 00  15:22:37.493  READ DMA
 c8 00 04 97 b4 e1 ea 00  15:22:37.251  READ DMA
 c8 00 04 a7 b4 e1 ea 00  15:22:37.002  READ DMA
 c8 00 04 a3 b4 e1 ea 00  15:22:36.761  READ DMA

Error 7741 occurred at disk power-on lifetime: 16032 hours (668 days + 
0 hours)
 When the command that caused the error occurred, the device was 
active or idle.


 After command completion occurred, registers were:
 ER ST SC SN CL CH DH
 -- -- -- -- -- -- --
 40 51 04 c7 b6 d5 ea  Error: UNC 4 sectors at LBA = 0x0ad5b6c7 = 
181778119


 Commands leading to the command that caused the error were:
 CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
 -- -- -- -- -- -- -- --    
 c8 00 04 c7 b6 d5 ea 00  11:08:40.154  READ DMA
 35 00 20 df ff 2b 40 00  11:08:40.145  WRITE DMA EXT
 35 00 20 1f d5 16 40 00  11:08:44.953  WRITE DMA EXT
 ca 00 20 3f c0 92 ef 00  11:08:40.258  WRITE DMA
 ca 00 20 df 85 81 ef 00  11:08:40.250  WRITE DMA

Error 7740 occurred at disk power-on lifetime: 16012 hours (667 days + 
4 hours)
 When the command that caused the error occurred, the device was 
active or idle.


 After command completion occurred, registers were:
 ER ST SC SN CL CH DH
 -- -- -- -- -- -- --
 40 51 04 c7 b6 d5 ea  Error: UNC 4 sectors at LBA = 0x0ad5b6c7 = 
181778119


 Commands leading to the command that caused the error were:
 CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
 -- -- -- -- -- -- -- --    
 c8 00 04 c7 b6 d5 ea 00  15:49:49.473  READ DMA
 c8 00 04 9b b4 e1 ea 00  15:49:49.220  READ DMA
 c8 00 04 97 b4 e1 ea 00  15:49:52.420  READ DMA
 c8 00 04 a7 b4 e1 ea 00  15:49:52.175  READ DMA
 c8 00 04 a3 b4 e1 ea 00  15:49:51.929  READ DMA

Error 7739 occurred at disk power-on lifetime: 16008 hours (667 days + 
0 hours)
 When the command that caused the error occurred, the device was 
active or idle.


 After command completion occurred, registers were:
 ER ST SC SN CL CH DH
 -- -- -- -- -- -- --
 40 51 04 c7 b6 d5 ea  Error: UNC 4 sectors at LBA = 0x0ad5b6c7 = 
181778119


 Commands leading to the command that caused the error were:
 CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
 -- -- -- -- -- -- -- --    
 c8 00 04 c7 b6 d5 ea 00  11:35:56.771  READ DMA
 35 00 20 bf e7 39 40 00  11:35:56.765  WRITE DMA EXT
 35 00 20 7f 6b 2e 40 00  11:35:56.749  WRITE DMA EXT
 35 00 20 3f 0d c7 40 00  11:35:56.740  WRITE DMA EXT
 35 00 20 1f 4f c1 40 00  11:35:56.732  WRITE DMA EXT

Error 7738 occurred at disk power-on lifetime: 15989 hours (666 days + 
5 hours)
 When the command that caused the error occurred, the device was 
active or idle.


 After command completion occurred, registers were:
 ER ST SC SN CL CH DH
 -- -- -- -- -- -- --
 40 51 04 c7 b6 d5 ea  Error: UNC 4 sectors at LBA = 0x0ad5b6c7 = 
181778119


 Commands leading to the command that caused the error were:
 CR FR SC SN CL CH DH DC   Powered_Up_Time  Command/Feature_Name
 -- -- -- -- -- -- -- --    
 c8 00 04 c7 b6 d5 ea 00  16:16:27.719  READ DMA
 c8 00 04 9b b4 e1 ea 00  16:16:27.468  READ DMA
 c8 00 04 97 b4 e1 ea 00  16:16:30.682  READ DMA
 c8 00 04 a7 b4 e1 ea 00  16:16:30.440  READ DMA
 c8 00 04 a3 b4 e1 ea 00  16:16:30.174  READ DMA


Looks like you disk is on its way out,  from the look of the above 
errors,  I would try dd'ing the disk onto a new disk the running an fsck 
to make sure everything is ok.  I wouldnt hold out much hope for 
recovering the data on that sector though.


Tom J

___