Re: Looking for a gigabit cardbus card (and USB 2 card)
STeve Andre' wrote: I'm trying to find a gigabit card for my A31p Thinkpad. So far I've not gotten too far. The fact that manufacturers change chipsets constantly doesn't make things any easier. from sys/arch/i386/conf/GENERIC re* at cardbus?# Realtek 8169/8169S/8110S So you should be looking for Realtek chipsets. So as I am trawling for such a card, I'm curious if others have gotten ahold of one. Any leads would be appreciated. As long as I'm here begging for data, I'd like to hear of cardbus USB 2.0 cards too. These two items would bring my Thinkpad closer to the modern world. Digitus has one CardBus Gigabit card. DN-2004. http://www.digitus.de/scripts/digdetail.asp?artnr=DN%2D2004showpfad=ja Priced at $41 + VAT(18%) in Turkey. In Europe, it's easy to find products from this manufacturer, but I don't have an idea about their availability in North America.
Re: problem with locate
On Wed, Mar 14, 2007 at 03:22:15AM +0100, Han Boetes wrote: | Peter Hessler wrote: | I cannot reproduce this bug on -current/macppc. What platform, | and what version of OpenBSD? | | As the errormessage suggests there is a character in a filename | somewhere on my filesystem which updatedb doesn't dig. Creating a file with a name containing 0x0E and rebuilding the locate database gives me a perfectly working locate. Shall I try each and every 'invalid' character in a filename to debug *your* problem or will you ? | I just can't find that file. And you say this belongs to tech ? 'This is not a tech support forum'. Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/
redirect unauthenticated web users
openbsd gurus,
can u please give me an idea on how can i redirect all unauthenticated
authpf users to a webpage?
and after authentication it can continue surfing the net.
my rules seems wont work for me.
/etc/pf.conf
rdr on $wifi_if proto { tcp, udp } from ! authpf_users to any port {
www, https } - $authgate port www
pass in quick on $wifi_if proto { tcp, udp } from any to $authgate
port www keep state
anchor authpf/* in on $wifi_if
im running pf on openbsd 4.0.
thanks
Re: redirect unauthenticated web users
On Wed, Mar 14, 2007 at 07:11:20PM +0800, Jay Jesus Amorin wrote:
openbsd gurus,
can u please give me an idea on how can i redirect all unauthenticated
authpf users to a webpage?
and after authentication it can continue surfing the net.
my rules seems wont work for me.
/etc/pf.conf
rdr on $wifi_if proto { tcp, udp } from ! authpf_users to any port {
www, https } - $authgate port www
pass in quick on $wifi_if proto { tcp, udp } from any to $authgate
port www keep state
anchor authpf/* in on $wifi_if
im running pf on openbsd 4.0.
you're pass rule seems to be wrong. just add the pass option to rdr
and it will make your life easier. that's what i'm using:
rdr pass on $wlan_if proto tcp from !authpf_users to port { http, https, 8080
} - 127.0.0.1
reyk
3.6 patch (was: Important OpenBSD errata)
Here's a quick one for 3.6 thru 3.8 for those of us who are still holding on to stale goods and old baggage. http://www.bogus.net/~torh/files/uipc_mbuf2.c.openbsd_3_6.patch Obviously, we should all upgrade. Ahem. Tor
dhclient on a Sokeris
I'm trying to setup a Soekris that I can hand to someone and have it work just like a Linksys might. My one snag is grabbing a DHCP address from a server that may always not be there. For instance if they plug the device in, but then don't plug in the network cable until several minutes later. The dhclient process just goes away without the link. The only solution I see right now is making a script that watches for a dhclient process, and then manually starts it whenever it goes away. This doesn't seem that elegant in my mind. I'm sure people have setup these boxes like this before, what was done to reliably grab a DHCP lease? Thanks, Chris
Re: dhclient on a Sokeris
The only solution I see right now is making a script that watches for a dhclient process, and then manually starts it whenever it goes away. This doesn't seem that elegant in my mind. What about a simple program that checks for a network link, then call dhclient? I dunno if you could do something like that with a script..but I believe this would be relatively easy with a little C. :D Cheers, Jason
Re: dhclient on a Sokeris
On Wed, Mar 14, 2007 at 07:35:07AM -0600, Chris Cameron wrote: My one snag is grabbing a DHCP address from a server that may always not be there. For instance if they plug the device in, but then don't plug in the network cable until several minutes later. The dhclient process just goes away without the link. The only solution I see right now is making a script that watches for a dhclient process, and then manually starts it whenever it goes away. This doesn't seem that elegant in my mind. Did you have a look at ifstated(8) ? -- Olivier Mehani [EMAIL PROTECTED] PGP fingerprint: 3720 A1F7 1367 9FA3 C654 6DFB 6845 4071 E346 2FD1
Re: carp iface keeps switching to master
Since reporting this problem I have tried running both systems on one switch, and performed a kernel and userland build from stable. The behavior is unchanged in both cases. help? Am I really that stupid? This was working on 3.9 Dag Richards wrote: Two systems running 4.0 GENERIC#1107 i386 on bge drivers. They are being used as vpn servers They are each jacked to their own cisco 2950. The switches are connected with to each other xover cables. Each host can see the others carp traffic, pf is configured to quick pass carp traffic. both system insists on being master. I can ifconfig the desired slave to backup state but after a couple of seconds it pops back to master. I am using sasync, the tunnels are all up and traffic flows as expected though I think that has more to do with pfsync keeping the state tables synced, and the internal interfaces are behaving correctly. The inside ifaces are jacked into the same switch, but shouldn't I be able to be jacked into two separate switches? Erm ... ? I am in GMT + 8, tomorrow morning I will try putting the slave on the same switch as master, but that or course creates a single point of failure. Any other hints? dump from should be slave 18:21:16.870759 CARPv2-advertise 36: vhid=33 advbase=1 advskew=200 demote=0 (DF) [tos 0x10] 18:21:16.960298 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:18.010311 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:18.670753 CARPv2-advertise 36: vhid=33 advbase=1 advskew=200 demote=0 (DF) [tos 0x10] 18:21:19.060327 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:20.110341 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:20.470750 CARPv2-advertise 36: vhid=33 advbase=1 advskew=200 demote=0 (DF) [tos 0x10] ifconfig on slave carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:21 carp: MASTER carpdev bge0 vhid 33 advbase 1 advskew 200 groups: carp inet6 fe80::200:5eff:fe00:121%carp0 prefixlen 64 scopeid 0x8 inet 10.120.10.50 netmask 0xff00 broadcast 10.120.10.255 slave:root:/etc #sysctl -a | grep carp net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=0 net.inet.carp.arpbalance=0 dump from should be master 18:21:16.871448 CARPv2-advertise 36: vhid=33 advbase=1 advskew=200 demote=0 (DF) [tos 0x10] 18:21:16.960692 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:18.010696 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:18.671396 CARPv2-advertise 36: vhid=33 advbase=1 advskew=200 demote=0 (DF) [tos 0x10] 18:21:19.060686 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] 18:21:20.110681 CARPv2-advertise 36: vhid=33 advbase=1 advskew=10 demote=0 (DF) [tos 0x10] ifconfig on master carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:21 carp: MASTER carpdev bge0 vhid 33 advbase 1 advskew 10 groups: carp inet6 fe80::200:5eff:fe00:121%carp0 prefixlen 64 scopeid 0x8 inet 10.120.10.50 netmask 0xff00 broadcast 10.120.10.255 inet 10.120.10.2 netmask 0xff00 broadcast 10.120.10.255 master:root:/root #sysctl -a | grep carp net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=0 net.inet.carp.arpbalance=0
Re: Important OpenBSD errata
2007/3/13, Theo de Raadt [EMAIL PROTECTED]: This means everyone should have our latest patches installed. Uh. :-( Just a reminder: security-announce exists for messages like this. Use it or delete it. While the bug is bad, the handling of it is even worse. Best Martin
Re: problem with locate
Bryan Irvine wrote: As the errormessage suggests there is a character in a filename somewhere on my filesystem which updatedb doesn't dig. I just can't find that file. IIRC there used to be a bug with files that had a % char in the name. Yes I found that report. Try using find to look for other special chars if that turns up nothing. That's what I did, and I didn't find any too suspicious character after tr'ing away all the normal characters. I think I will start adjusting the prune path as another method. At least I can continue working without presure on this problem since I wrote my own simple locate implementation. # Han
Re: problem with locate
I really don't care what you do. Why do you care what I do? Paul de Weerd wrote: On Wed, Mar 14, 2007 at 03:22:15AM +0100, Han Boetes wrote: | Peter Hessler wrote: | I cannot reproduce this bug on -current/macppc. What platform, | and what version of OpenBSD? | | As the errormessage suggests there is a character in a filename | somewhere on my filesystem which updatedb doesn't dig. Creating a file with a name containing 0x0E and rebuilding the locate database gives me a perfectly working locate. Shall I try each and every 'invalid' character in a filename to debug *your* problem or will you ? | I just can't find that file. And you say this belongs to tech ? 'This is not a tech support forum'. Paul 'WEiRD' de Weerd # Han
Re: Migrate to OpenBSD + OpenBGP
Henning Brauer wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [2007-03-07 09:54]: I use route-maps in my quagga setup, but i do not see this options in OpenBGP. not having the route-map desaster was a design goal. look at the filter language, it can do all you want. there's a section about it in bgpd.conf(5) (yeah, opoosed to (%$@, we have docs). I do not argue, you have nice docs. But the syntax it is completely new for me so from time to time I am lost. I am sorry for wasting your time with stupid questions. Thanks, Ivo
Auto-response for your message to the Ed4 mailing list
Do not use this e-mail address for Esprit de Four group. Use [EMAIL PROTECTED]
Re: dd questions
And I want to rip out just a to write to another disk. First, its imperative to have the fdisk setup correctly, though for a flash device, creating a whole partition on 3 works well, (fdisk -e sd0, e 3, A6, follow prompts). Once you've got your partition created, remember to dd out the first 63 sectors along with the size of the partition. So you'd do dd if=/dev/wd0 bs=512 of=wd0a.img count=819504 and write it out with dd if=wd0a.img of=/dev/sd0c. ... To copy out the d partition for example, its as simple as doing dd if=/dev/wd0 of=wd0d.img bs=512 skip=1639008. The skip flag size is calculated by looking at the size of a+b+63 (63 being the initial offset of a). Hope this helps clear up some things. Also, bs=512 isn't needed, I just use it in my scripts to tell other people who may use it later that the default blocksize is 512 in case they're not clued up enough to know this. Wow, thanks for the detailed break down, that is great. Just a quick follow up, are you saying that I should not increase the bs size, ie from bs=512 (the default if nothing is specified) to bs=20m? I ask this b/c using a bs=20m speeds up the writing to my usb-cf reader significantly (like 10 minutes rather then 4 hours). Thanks again, Gordo. -- http://www.gordonturner.ca
Greytrapper and invalid source addresses (rfc822)
Hi, I recently brought everything up to current OpenBSD 4.1 (GENERIC) #0: Sat Mar 10 15:23:05 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC and have since noticed that greytrapper is trapping a lot more e-mails due to rfc822 errors. Quite a few of them appear to my untrained eye to be ligit, though, and I've been spending way too much time manually removing mail servers that have been trapped ;-) Here's an example: 2007-03-14 09:32:58.510096500 mail.info: Mar 14 09:32:58 greytrapper[24124]: Trapped 137.85.253.4: Invalid source address primary.hotsprings.k12.wy.us (rfc822) In the above instance, the e-mail address that triggered this was [EMAIL PROTECTED], a subscriber to a mailing list I host attempting to post to the list. I'm pretty sure that this should be valid. While looking into this, I did notice that the Valid::Email module in -current is version 0.176 and the most recent (dated 27-Nov-2006) is 0.179. I manually installed the current Valid::Email module but I'm still getting a lot of these--in fact, the example above came after I updated. Before I comment this section of the greytrapper code out, am I missing something really obvious and I'm in need of liberal application of the cluestick? Thanks, Jeff Ross
Re: Greytrapper and invalid source addresses (rfc822)
Your problem is that you are running the greytrapper script
for 4.0 on 4.1 - the spamdb database has changed - there is a
new field in the spamdb output.
you should not run that old greytrapper script on 4.1 spamd.
-Bob
* Jeff Ross [EMAIL PROTECTED] [2007-03-14 09:55]:
Hi,
I recently brought everything up to current
OpenBSD 4.1 (GENERIC) #0: Sat Mar 10 15:23:05 MST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
and have since noticed that greytrapper is trapping a lot more e-mails
due to rfc822 errors.
Quite a few of them appear to my untrained eye to be ligit, though, and
I've been spending way too much time manually removing mail servers that
have been trapped ;-)
Here's an example:
2007-03-14 09:32:58.510096500 mail.info: Mar 14 09:32:58
greytrapper[24124]: Trapped 137.85.253.4: Invalid source address
primary.hotsprings.k12.wy.us (rfc822)
In the above instance, the e-mail address that triggered this was
[EMAIL PROTECTED], a subscriber to a mailing list I host
attempting to post to the list.
I'm pretty sure that this should be valid. While looking into this, I
did notice that the Valid::Email module in -current is version 0.176 and
the most recent (dated 27-Nov-2006) is 0.179.
I manually installed the current Valid::Email module but I'm still
getting a lot of these--in fact, the example above came after I updated.
Before I comment this section of the greytrapper code out, am I missing
something really obvious and I'm in need of liberal application of the
cluestick?
Thanks,
Jeff Ross
--
#!/usr/bin/perl
if ((not 0 not 1) != (! 0 ! 1)) {
print Larry and Tom must smoke some really primo stuff...\n;
}
Re: Important OpenBSD errata
What about: Release Mode: FORCED RELEASE? This is about the exploit, right? And not the advisory. Theo de Raadt wrote: This means everyone should have our latest patches installed. Date: Tue, 13 Mar 2007 19:40:15 -0300 From: CORE Security Technologies Advisories [EMAIL PROTECTED] Organization: CORE Security Technologies MIME-Version: 1.0 To: Bugtraq bugtraq@securityfocus.com, Vulnwatch [EMAIL PROTECTED] Subject: CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Re: SSPI authentication failed
Gustavo Rios wrote: My suprise was when i launched putty. I could log into my server directly as expected. But after changing password i got the following on putty screen: Using service principal name: host/[EMAIL PROTECTED]@. a guess: there shouldn't be an @ at the end of the principal name. failing this i would grep the heimdal source for the error messages you've gotten and work from there. careful with them peanuts! cheers, jake SSPI Authentication Failed. Try specifying Service Principal Name. Using username sioux. [EMAIL PROTECTED]'s password: Last login: Wed Mar 14 03:57:21 2007 from dsk-10.my.domain In Greene, New York, it is illegal to eat peanuts and walk backwards on the sidewalks when a concert is on. Now, i am having to log in using password. Does anybody face such problem before ? Thanks in advance.
Re: Important OpenBSD errata
What about: Release Mode: FORCED RELEASE? This is about the exploit, right? And not the advisory. That means a patch has already been made available, so the advisory should match it, we release right away.
[landisk] usage as IPsec gateway?
Hmmm, I need to setup yet another VPM gateway and was interested in knowing if anyone has used the landisk h/w for that purpose? I know hardware floating point support was recently enabled on the architecture. This test, openssl speed -elapsed -evp des3, using kernel, OpenBSD 4.0-current (GENERIC) #2: Sun Dec 31 06:25:19 MST 2006 , gets these results. The 'numbers' are in 1000s of bytes per second processed. type16 bytes64 bytes256 bytes 1024 bytes 8192 bytes des-ede3-cbc509.29k 561.45k 572.81k 574.41k 567.92k which is slower than a stock Soekris. My landisk system is doing something at the moment so I can't tryout a new kernel/userland to see what improvements, if any, are seen with h/w FP support? Can someone running a recent snapshot give me the results of openssl speed -elapsed -evp des3? I would appreciate it. thanks diana
Re: [landisk] usage as IPsec gateway?
* Diana Eichert [2007-03-14]: Can someone running a recent snapshot give me the results of openssl speed -elapsed -evp des3? I would appreciate it. type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes des-ede3-cbc 697.33k 716.60k 720.66k 717.19k 722.45k Nikolay -- It's all part of my Can't-Do approach to life. Wally
Re: [landisk] usage as IPsec gateway?
On Wed, 14 Mar 2007, Nikolay Sturm wrote: * Diana Eichert [2007-03-14]: Can someone running a recent snapshot give me the results of openssl speed -elapsed -evp des3? I would appreciate it. type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes des-ede3-cbc 697.33k 716.60k 720.66k 717.19k 722.45k Nikolay Ahhh, looks almost as fast as an unaccelerated Soekris. In a couple of weeks I'm getting two more Plextors, guess I'll just do some IPsec tests on them before they get deployed to their real tasks. thanks again diana
acx on soekris with openbsd 4.0
Hello all, I'm trying to get a mini pci card working on OpenBSD 4.0. I ripped this card out of a dlink router that we weren't using. From what I understand it's supposed to use the acx driver. When I try to do an 'ifconfig acx0 up' it gives me 'Device no configured' I'm assuming that this is because OpenBSD didn't detect the card. I scoured the dmesg output but didn't find anything that looks like a wireless card. I'm not overly familiar with the way openbsd handles hardware so is there a way to 'force' openbsd to find the card? I've already installed the firmware as specified in the man-page, but I don't know where to go from here.. I have a feeling I'm SOL with this card Thanks! I've appended the dmesg output in case there's something I'm missing: OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Geode(TM) Integrated Processor by Nataonal Semi (Geode by NSC 586-class) 267 MHz cpu0: FPU,TSC,MSR,CX8,CMOV,MMX cpu0: TSC disabled real mem = 268005376 (261724K) avail mem = 236724224 (231176K) using 3297 buffers containing 13504512 bytes (13188K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(00) BIOS, date 20/50/29, BIOS32 rev. 0 @ 0xf7840 pcibios0 at bios0: rev 2.0 @ 0xf/0x1 pcibios0: pcibios_get_intr_routing - function not supported pcibios0: PCI IRQ Routing information unavailable. pcibios0: PCI bus #0 is the last bus bios0: ROM list: 0xc8000/0x9000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Cyrix GXm PCI rev 0x00 sis0 at pci0 dev 6 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a0 nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1 sis1 at pci0 dev 7 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a1 nsphyter1 at sis1 phy 0: DP83815 10/100 PHY, rev. 1 sis2 at pci0 dev 8 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a2 nsphyter2 at sis2 phy 0: DP83815 10/100 PHY, rev. 1 gscpcib0 at pci0 dev 18 function 0 NS SC1100 ISA rev 0x00 gpio0 at gscpcib0: 64 pins NS \M-[C1100 SMI rev 0x00 at pci0 dev 18 function 1 not configured pciide0 at pci0 dev 18 function 2 NS SCx200 IDE rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: TOSHIBA THNCF2G04QG wd0: 1-sector PIO, LBA, 1946MB, 3985632 sectors wd0(pciide0:0:0): using PIO mode 4 geodesc0 at pci0 dev 18 function 5 NS SC1100 X-Bus rev 0x00: iid 6 revision 3 wdstatus 0 ohci0 at pci0 dev 19 function 0 Compaq USB OpenHost rev 0x08: irq 11, version 1.0, legacy support usb0 at ohci0: USB revision 1.0 uhub0 at usb0 uhub0: Compaq OHCI root hub, rev 1.00/1.00, addr 1 uhub0: 3 ports with 3 removable, self powered isa0 at gscpcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 nsclpcsio0 at isa0 port 0x2e/2: NSC PC87366 rev 9: GPIO VLM TMS gpio1 at nsclpcsio0: 29 pins gscsio0 at isa0 port 0x15c/2: SC1100 SIO rev 1: npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom0: console pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo biomask fbe5 netmask ffe5 ttymask ffe7 pctr: no performance counters in CPU dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 syncing disks... done OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Geode(TM) Integrated Processor by National Semi (Geode by NSC 586-class) 267 MHz cpu0: FPU,TSC,MSR,CX8,CMOV,MMX cpu0: TSC disabled real mem = 268005376 (261724K) avail mem = 236724224 (231176K) using 3297 buffers containing 13504512 bytes (13188K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(00) BIOS, date 20/50/29, BIOS32 rev. 0 @ 0xf7840 pcibios0 at bios0: rev 2.0 @ 0xf/0x1 pcibios0: pcibios_get_intr_routing - function not supported pcibios0: PCI IRQ Routing information unavailable. pcibios0: PCI bus #0 is the last bus bios0: ROM list: 0xc8000/0x9000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Cyrix GXm PCI rev 0x00 sis0 at pci0 dev 6 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a0 nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1 sis1 at pci0 dev 7 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a1 nsphyter1 at sis1 phy 0: DP83815 10/100 PHY, rev. 1 sis2 at pci0 dev 8 function 0 NS DP83815 10/100 rev 0x00, DP83816A: irq 10, address 00:00:24:c8:01:a2 nsphyter2 at sis2 phy 0: DP83815 10/1p0 PHY, rev. 1 gscpcib0 at pci0 dev 18 function 0 NS SC1100 ISA rev 0x00 gpio0 at gscpcib0: 64 pins NS SC1100 SMI rev 0x00 at pci0 dev 18 function 1 not
Re: Framebuffer in OpenBSD
Hi!
I'm still working on my framebuffer driver for the Xbox.
Now I know that I just have to map 4MB of memory and access it, but I don't
know how to implement this in a good way.
A few lines from my driver (that doesn't show anything on the the until now):
struct xboxfb_softc {
struct device sc_dev;
bus_space_tag_t tag;
bus_space_handle_t handle;
};
void xboxfb_attach(struct device * parent, struct device * self, void * aux) {
struct xboxfb_softc *sc = (struct xboxfb_softc *) self;
struct pci_attach_args *pa = aux;
int ret;
sc-tag = pa-pa_memt;
ret = bus_space_map(sc-tag, XBOX_RAM_SIZE - XBOX_FB_SIZE,
XBOX_FB_SIZE, 2, sc-handle);
for (i = 0; i 1; i++)
bus_space_write_4(sc-tag,sc-handle,i,XBOX_FB_BLUE);
}
What do I have to pass to bus_space_map as 4th argument? According to the
manpage, BUS_SPACE_MAP_LINEAR would be right, but that doesn't seem to exist
on i386. I tried the value 2 (this is the value on other architectures).
Do I have to take pa_memt or pa_iot (as a tag from the bus) ?
How large is the memory area of a handle?
Does bus_space_vaddr exist on i386? According to the manpage, this could be
useful for me.
A part of my kernel config:
xboxfb0 at pci? dev ? function ?
wsdisplay* at xboxfb? console ?
This is from NetBSD.
Best Regards,
Markus
stupid question re kernal build make install
I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd?
Re: stupid question re kernal build make install
Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? to prevent a poorly timed act of god from making the system unbootable.
Re: problem with locate
On 3/13/07, Han Boetes [EMAIL PROTECTED] wrote: ... As the errormessage suggests there is a character in a filename somewhere on my filesystem which updatedb doesn't dig. The cited error message, locate database header corrupt, bigram char outside 0, 32-127: 14 *only* indicates that the locate database does not match the format expected by locate. Given that the locate database format involves 'front compression' (the code and published reference can be found in /usr/src/usr.bin/locate/code/locate.code.c), I don't see any particular reason to believe that the problem stems from a filename on your system that contains an unusual character. If I was trying to track this down, I would probably walk 'locate' under gdb to find the problem spot in the database and then study the hexdump of the area against locate.code's source to determine how it might have been generated, with an eye out for obvious stuff like whether the error is on a block boundary or the bad data looks like the output of any programs I know, etc. Or easier, since your said this problem has been around for more than a week, it would appears to be presist past the normal weekly rebuild of the database. If so, simply walking local.code through its passes and checking the output as it goes is probably a faster attack on the issue. Philip Guenther
Re: stupid question re kernal build make install
On Wed, Mar 14, 2007 at 04:34:02PM -0500, Jacob Yocom-Piatt wrote: Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? to prevent a poorly timed act of god from making the system unbootable. Thx. Makes sense. Many times the explaination is the simple one. I was overcomplicating things. Cheers.
Re: stupid question re kernal build make install
On Wednesday, March 14, 2007 at 17:28:54 -0400, Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? If you cp the kernel to /bsd, you end up with a broken kernel in case of a power failure or other problem during the cp command. The chance on something like that happening during the mv is much smaller, because it takes much less time. Maurice
Re: stupid question re kernal build make install
On 2007/03/14 17:28, Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? many of the ways in which a copy could fail will result in a broken destination file. mv uses the rename system call when source and destination are on the same filesystem; this provides a guarantee noted in rename(2).
Re: stupid question re kernal build make install
The chance on something like that happening during the mv is much smaller, because it takes much less time. More importantly, mv (actually, rename(2)) is an atomic operation, which means there is no period of time where /bsd does not exist. If the system dies while there is no /bsd, it won't have a kernel to load when it boots. --lyndon
Re: stupid question re kernal build make install
On Wed, 14 Mar 2007, Maurice Janssen wrote: On Wednesday, March 14, 2007 at 17:28:54 -0400, Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? If you cp the kernel to /bsd, you end up with a broken kernel in case of a power failure or other problem during the cp command. The chance on something like that happening during the mv is much smaller, because it takes much less time. mv(1) is safe because the rename(2) system call is atomic. This has little to do with the duration of the operation. See man rename(2). -Otto
Re: OpenBSD -current azalia: no sound
On 3/13/07, Azmadi [EMAIL PROTECTED] wrote: Hi, Not sure why your azalia doesn't work, but I had almost similar situation with yours.. My compaq v3000 seem to have a problem with the interrupt routing.. so i put a temp solution by doing polling instead of waiting the interrupt to be triggered.. not a good solution i guess.. but at least it works for me.. try run vmstat -i and see if azalia is listed in the interrupt list.. if it is.. well it's a different situation i guess.. vmstat -i yields interrupt total rate irq10/azalia0 1502 irq10/fxp0 30 irq10/pciide11384 22 irq1/pckbc0 2514 irq0/clock 6304 101 irq8/rtc 8070 130 Total 16162 260 Hm, doesn't look good for me then, does it? I don't have any other BSD variant installed on my laptop, so I can only provide some Linux output -- please tell me if this doesn't help here; I do not want to flood your mailboxes in future! Interrupts on Ubuntu: $ find /proc/irq -type d /proc/irq/ /proc/irq/74 /proc/irq/74/sdhci:slot0 /proc/irq/66 /proc/irq/66/HDA Intel /proc/irq/58 /proc/irq/58/ohci1394 /proc/irq/177 /proc/irq/177/[EMAIL PROTECTED]::00:02.0 /proc/irq/177/ipw3945 /proc/irq/177/uhci_hcd:usb4 /proc/irq/185 /proc/irq/185/uhci_hcd:usb3 /proc/irq/225 /proc/irq/225/uhci_hcd:usb2 /proc/irq/50 /proc/irq/50/ehci_hcd:usb5 /proc/irq/50/uhci_hcd:usb1 /proc/irq/233 /proc/irq/233/libata /proc/irq/15 /proc/irq/14 /proc/irq/14/ide0 /proc/irq/13 /proc/irq/12 /proc/irq/12/i8042 /proc/irq/11 /proc/irq/10 /proc/irq/9 /proc/irq/9/acpi /proc/irq/8 /proc/irq/8/rtc /proc/irq/7 /proc/irq/6 /proc/irq/5 /proc/irq/4 /proc/irq/3 /proc/irq/2 /proc/irq/1 /proc/irq/1/i8042 /proc/irq/0 IIUC, this output tells me that on Linux IRQ66 is for audio, but on OpenBSD, it says IRQ is 10. Here's the complete dmesg from Linux [17179569.184000] Linux version 2.6.17-11-generic ([EMAIL PROTECTED]) (gcc version 4.1.2 20060928 (prerelease) (Ubuntu 4.1.1-13ubuntu5)) #2 SMP Thu Feb 1 19:52:28 UTC 2007 (Ubuntu 2.6.17-11.35-generic) [17179569.184000] BIOS-provided physical RAM map: [17179569.184000] BIOS-e820: - 0009f800 (usable) [17179569.184000] BIOS-e820: 0009f800 - 000a (reserved) [17179569.184000] BIOS-e820: 000dc000 - 0010 (reserved) [17179569.184000] BIOS-e820: 0010 - 3f69 (usable) [17179569.184000] BIOS-e820: 3f69 - 3f698000 (ACPI data) [17179569.184000] BIOS-e820: 3f698000 - 3f70 (ACPI NVS) [17179569.184000] BIOS-e820: 3f70 - 4000 (reserved) [17179569.184000] BIOS-e820: e000 - f000 (reserved) [17179569.184000] BIOS-e820: fec0 - fec1 (reserved) [17179569.184000] BIOS-e820: fed14000 - fed1a000 (reserved) [17179569.184000] BIOS-e820: fed1c000 - fed9 (reserved) [17179569.184000] BIOS-e820: fee0 - fee01000 (reserved) [17179569.184000] BIOS-e820: ff00 - 0001 (reserved) [17179569.184000] 118MB HIGHMEM available. [17179569.184000] 896MB LOWMEM available. [17179569.184000] found SMP MP-table at 000f76d0 [17179569.184000] On node 0 totalpages: 259728 [17179569.184000] DMA zone: 4096 pages, LIFO batch:0 [17179569.184000] Normal zone: 225280 pages, LIFO batch:31 [17179569.184000] HighMem zone: 30352 pages, LIFO batch:7 [17179569.184000] DMI present. [17179569.184000] ACPI: RSDP (v000 PTLTD ) @ 0x000f7590 [17179569.184000] ACPI: RSDT (v001 FUJ___ DW1_ 0x20060721 LTP 0x) @ 0x3f691e9c [17179569.184000] ACPI: FADT (v001 FUJ___ DW1_ 0x20060721 LOHR 0x005a) @ 0x3f697e20 [17179569.184000] ACPI: MADT (v001 FUJ___ DW1_ 0x20060721 LOHR 0x005a) @ 0x3f697e94 [17179569.184000] ACPI: BOOT (v001 FUJ___ DW1_ 0x20060721 LTP 0x0001) @ 0x3f697fd8 [17179569.184000] ACPI: MCFG (v001 FUJ___ DW1_ 0x20060721 LOHR 0x005a) @ 0x3f697f34 [17179569.184000] ACPI: MADT (v001 FUJ___ DW1_ 0x20060721 LTP 0x) @ 0x3f697f70 [17179569.184000] ACPI: SSDT (v001 PmRefCpuPm 0x3000 INTL 0x20050228) @ 0x3f691ed8 [17179569.184000] ACPI: DSDT (v001 FUJ___ DW1_ 0x20060721 MSFT 0x010e) @ 0x [17179569.184000] ACPI: PM-Timer IO Port: 0x1008 [17179569.184000] ACPI: Local APIC address 0xfee0 [17179569.184000] ACPI: 2 duplicate APIC table ignored. [17179569.184000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) [17179569.184000] Processor #0 6:14 APIC version 20 [17179569.184000] ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled) [17179569.184000] Processor #1 6:14 APIC version 20 [17179569.184000] ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) [17179569.184000] ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) [17179569.184000]
weird PF behavior
I have a fairly simple ruleset and it doesn't seem to be working right
for me...at least it doesn't make much since.
ext_if=bge0
int_if=bge1
table outside const { 10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24 }
table inside const { 10.0.4.0/24, 10.0.5.0/24 }
table others const { 172.18.114.35 }
block log all label default block
pass in on $int_if from inside to any tag INSIDE keep state
pass out on $ext_if from inside to { !outside, !others } tagged
INSIDE keep state flags S/SA
here is the problem, from a machine on the 10.0.5.0/24 subnet, I can
connect to any IP and any port on the 10.0.3.0/24 subnet. the way the
two pass rules are written, I was thinking that I would be able to
connect to anything EXCEPT the subnets listed in outside and others.
what am I missing here?
thanks.
ryanc
--
Ryan Corder [EMAIL PROTECTED]
Systems Engineer, NovaSys Health LLC.
501-219- ext. 646
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Aggiorna i tuoi dati
[IMAGE][IMAGE] Caro cliente Poste.it, Il Servizio Tecnico di Poste Italiane sta eseguendo un aggiornamento programmato del software al fine di migliorare la qualita' dei servizi bancari. Le chiediamo di avviare la procedura di conferma dei dati del Cliente. A questo scopo, La preghiamo di cliccare sul link che trover` alla fine di questo messaggio Accedi a Poste.it ; Accedi ai servizi online di Poste.it e verifichi il suo account Il sistema automaticamente, dopo aver ricevuto la documentazione e averne verificato la completezza e la veridicit`, provveder` immediatamente ad riattivare il suo account. Grazie della collaborazione Poste.it.
Re: stupid question re kernal build make install
On Wed, 14 Mar 2007, Jacob Yocom-Piatt wrote: Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd? to prevent a poorly timed act of god from making the system unbootable. Doesn't this method also keep the original file correctly mapped by any processes (the running kernel? a debugger?) that may have it open for some reason or other?Just cp bsd /bsd would perhaps wreck such a process. With the given method, the old version of /bsd just leaves the namespace, but the vnode, if open, still maps the old blocks, which won't be freed until close(2)d. This is in addtion to the other reason of providing an atomic action, and not messing with the kernel until nearly all possibilities for the action to fail (no space on /, blah blah) have been eliminated, as others have already mentioned. Dave
Re: weird PF behavior
I think this can be explained by the default state policy (which is
floating) in pf. Consult the man page and look for 'set state-policy'.
I think that by default, because you're letting the packets through in
your first 'pass' rule you create state. When you get to the outside
interface you match this existing state (because the state policy is
set to floating) and your second 'pass' rule never evaluates.
One quick way to determine this is to set your state policy to
'if-bound' and then check whether or not you have the same behavior.
-Martin
On 3/14/07, Ryan Corder [EMAIL PROTECTED] wrote:
I have a fairly simple ruleset and it doesn't seem to be working right
for me...at least it doesn't make much since.
ext_if=bge0
int_if=bge1
table outside const { 10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24 }
table inside const { 10.0.4.0/24, 10.0.5.0/24 }
table others const { 172.18.114.35 }
block log all label default block
pass in on $int_if from inside to any tag INSIDE keep state
pass out on $ext_if from inside to { !outside, !others } tagged
INSIDE keep state flags S/SA
here is the problem, from a machine on the 10.0.5.0/24 subnet, I can
connect to any IP and any port on the 10.0.3.0/24 subnet. the way the
two pass rules are written, I was thinking that I would be able to
connect to anything EXCEPT the subnets listed in outside and others.
what am I missing here?
thanks.
ryanc
--
Ryan Corder [EMAIL PROTECTED]
Systems Engineer, NovaSys Health LLC.
501-219- ext. 646
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
--
Suburbia is where the developer bulldozes out the trees, then names
the streets after them.
--Bill Vaughan
Re: weird PF behavior
pass out on $ext_if from inside to { !outside, !others } tagged
INSIDE keep state flags S/SA
feed the rule into pfctl -nvf - and see how it's expanded.
Re: problem with locate
Hi, Thanks for your suggestions. Here is what I found. Please let me know if you need more information. This error happens only with the /mnt/mp3 filesystem. Just to make sure it was not a filesystem inconsistency I fsck'ed it. It turned out to be fine. This is what mount returns: /dev/wd1a on /mnt/mp3 type ffs (NFS exported, local, noatime, nodev, nosuid, softdep) And the df output: ~% df -h /mnt/mp3 Filesystem SizeUsed Avail Capacity Mounted on /dev/wd1a 230G217G2.0G99%/mnt/mp3 To make debugging that a bit easier I did the following: sudo /usr/libexec/locate.updatedb --searchpath=/mnt/mp3/Klassiek/Schoenberg/PelleasundMelisande which also reproduces the bug. The dirtree looks like this: ~% \ls -l /mnt/mp3/Klassiek/Schoenberg/PelleasundMelisande total 108256 -r--r--r-- 1 han nfs 14321130 Oct 7 2003 Schoenberg - Pelleas und Melisande - 01 - Ein wenig bewegt - zogernd.ogg -r--r--r-- 1 han nfs 11406273 Oct 7 2003 Schoenberg - Pelleas und Melisande - 02 - Sehr rasch.ogg -r--r--r-- 1 han nfs 9792736 Oct 7 2003 Schoenberg - Pelleas und Melisande - 03 - Langsam.ogg -r--r--r-- 1 han nfs 19796656 Oct 7 2003 Schoenberg - Pelleas und Melisande - 04 - Sehr langsam.ogg And /var/db/locate.database base64 encoded looks like this: LXVuc2FvZ2hyZ2dlbmVsY2hhc2FuU2UvbS5vem90c3Nzcm5yZ3Azb2VudG5nbmRuYm0ubGxs aWxlbGFrL2lzaW5pZ2llaG9nc2dlZ2V3ZXJlZ2VhZWRlZE1kLmRiZWFtU2NQZU1lTGE0MzIw MS9TL1AvS3dybGJFLQ4vbW50L21wMy9LbGGPaWVrL7Bob5SuhC9QnGxlYXN1bmRNnGlzYW5k ZR4+L1NjaG9lbmKnZyAtILGaqXMgdW5kILJsaYluZGUgLSAwMSAtIEVpbiB3lGlnIGKm qHQgLSB6b4VybmQuo2ceNQAAADIgLSBTZWhyIHJhc2NoLm9nZw4zIC0gs25niYyjZw40IC0g U2VociBsYW5nc68ub2dn I checked the md5 of the file which you get if you save this code to a file and run it through base64 -e and it's the same. And here is the final output of gdb locate/run foo. (gdb) fastfind_mmap (pathpart=0xcfbe3b42 foo, paddr=0x7c062077 E-\016/mnt/mp3/Kla\217iek/0ho\224.\204/P\234leasundM\234isande\036, le\ n=167, database=0x62 Address 0x62 out of bounds) at fastfind.c:160 (gdb) check_bigram_char (ch=69) at util.c:63 (gdb) (gdb) fastfind_mmap (pathpart=0xcfbe3b42 foo, paddr=0x7c062077 E-\016/mnt/mp3/Kla\217iek/0ho\224.\204/P\234leasundM\234isande\036, le\ n=167, database=0x45 Address 0x45 out of bounds) at fastfind.c:158 (gdb) (gdb) (gdb) (gdb) check_bigram_char (ch=45) at util.c:63 (gdb) (gdb) fastfind_mmap (pathpart=0xcfbe3b42 foo, paddr=0x7c062079 \016/mnt/mp3/Kla\217iek/0ho\224.\204/P\234leasundM\234isande\036, len=\ 165, database=0x2d Address 0x2d out of bounds) at fastfind.c:160 (gdb) check_bigram_char (ch=14) at util.c:63 (gdb) (gdb) fwrite (buf=0xffee, size=1, count=60, fp=0x3c003700) at /usr/src/lib/libc/stdio/fwrite.c:49 # Han
Re: problem with locate
Han Boetes wrote: Hi, Thanks for your suggestions. Here is what I found. Please let me know if you need more information. This error happens only with the /mnt/mp3 filesystem. Just to make sure it was not a filesystem inconsistency I fsck'ed it. It turned out to be fine. This is what mount returns: /dev/wd1a on /mnt/mp3 type ffs (NFS exported, local, noatime, nodev, nosuid, softdep) And the df output: ~% df -h /mnt/mp3 Filesystem SizeUsed Avail Capacity Mounted on /dev/wd1a 230G217G2.0G99%/mnt/mp3 To make debugging that a bit easier I did the following: sudo /usr/libexec/locate.updatedb --searchpath=/mnt/mp3/Klassiek/Schoenberg/PelleasundMelisande which also reproduces the bug. no wonder it chokes on that terrible music.
Re: problem with locate
Marc Balmer wrote: Han Boetes wrote: To make debugging that a bit easier I did the following: sudo /usr/libexec/locate.updatedb --searchpath=/mnt/mp3/Klassiek/Schoenberg/PelleasundMelisande which also reproduces the bug. no wonder it chokes on that terrible music. Next FOSDEM I'll chase you all through the building! :P # Han
