Re: calling syscalls directly from asm

2007-07-15 Thread Marcus Watts
 Date:Sat, 14 Jul 2007 18:48:46 +0200
 To:  misc@openbsd.org
 From:Vincent GROSS [EMAIL PROTECTED]
 Subject: calling syscalls directly from asm
 
 Hi folks,
 
 I would like to call write(2) without going through the libc functions. I 
 wrote
 this little thing to test, it does not print anything, but friends say
 it works just
 fine with linux. I did check the addresses and operands in the resulting
 binary with objdump, everything has the correct values. What am I doing
 wrong ? Feel free to cluebat me to death if I missed some obvious point ...
...

I don't know what you hope to accomplish by avoiding the use of libc.
But if you really want to do that, you'll need to know that the system
call interface is completely different on linux than openbsd.

Here's assembly code to call write on linux:
.globl write
write:
pushl   %ebx
movl8(%esp),%ebx# fd
movl12(%esp),%ecx   # buffer
movl16(%esp),%edx   # count
movl$4,%eax # __NR_write
int $128
popl%ebx
testl   %eax,%eax
jl  cerror_
ret
cerror_:
negl%eax
movl%eax,errno
movl$-1,%eax
movl$-1,%edx
ret
In linux, parameters are passed in the registers,  the error code is returned
as a negative number.

Here's assembly code to call write on openbsd:
.globl write
write:
movl$4,%eax # SYS_write
int $128
jb  cerror_
ret
cerror_:
movl%eax,errno
movl$-1,%eax
movl$-1,%edx
ret
On OpenBSD, parameters are passed on the stack.  The kernel cleverly copies
stuff from the stack just where the C calling conventions left them, which
is why you don't see any code here to muck with that.  An error is indicated
by setting the carry flag.

Incidently, there are better ways to do hexadecimal conversion.
That is, assuming you really don't want to use libc.
For instance, consider how you might use this:
*--cp = 0123456789abcdef [ n  15 ];

-Marcus Watts



Re: mysql problem

2007-07-15 Thread Marcos Laufer
Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm

And now i have this configuration:

I start mysql with this script:

# cat /usr/local/bin/mysql.start
if [ -x /usr/local/bin/mysqld_safe ] ; then
su -c _mysql root -c '/usr/local/bin/mysqld_safe '  /dev/null 
echo -n ' mysql'
fi

That properly starts it with the correct login class.

My login.conf for mysql is:

_mysql:\
   # :openfiles=8192:\
:openfiles=infinity:\
:datasize=infinity:\
:maxproc=infinity:\
#:openfiles-cur=8192:\
:openfiles-cur=infinity:\
#:openfiles-max=1:\
:openfiles-max=infinity:\
:stacksize-cur=8M:

I want to set infinity on those now just for testing, if everything works
fine i will put some limits there.


My kern.maxfiles:

# sysctl kern.maxfiles
kern.maxfiles=2


And my.cnf has :

[mysqld]
socket = /var/www/logs/mysql/mysql.sock
old-passwords
tmpdir = /var/mysql/tmp
open_files_limit = 1
max_connections = 4096
sql-mode = MYSQL40
skip-name-resolve
table_cache = 5000
query_cache_size = 64M
thread_cache = 32
key_buffer = 128M
long_query_time = 5
thread_concurrency = 2
interactive_timeout=60
wait_timeout=60
connect_timeout=15
record_buffer=8M

basedir=/usr/local
datadir=/var/mysql

sort_buffer_size = 32M
read_buffer_size = 2M
read_rnd_buffer_size = 4M
myisam_sort_buffer_size = 64M

[mysql.server]
old-passwords

[mysqld_safe]
open-files=8192
open_files_limit = 1
max_connections = 4096

[mysqlcheck]
socket = /var/www/logs/mysql/mysql.sock

--

The server has more than 100 databases, it's been working fine for about a
year .
A couple of days ago i found that no database could be accessed . Errors
like this appear:
070714 16:15:57 [ERROR] /usr/local/libexec/mysqld: Can't find file:
'./ip041271_tan1/mos_weblinks.frm' (errno: 9)
070714 16:15:57 [ERROR] /usr/local/libexec/mysqld: Can't find file:
'./ip041271_tan1/mos_weblinks.frm' (errno: 9)

I restart the server and everything goes back to normal , but i reach my
limits if i execute a:

mysqlcheck -m -A -p


By the moment the limits are reached, i noticed that this values Open_files
and Opened_tables reached:

mysql show status like '%Open%';
++---+
| Variable_name  | Value |
++---+
| Com_ha_open| 0 |
| Com_show_open_tables   | 0 |
| Open_files | 2031  |
| Open_streams   | 0 |
| Open_tables| 1053  |
| Opened_tables  | 0 |
| Slave_open_temp_tables | 0 |
++---+
7 rows in set (0.00 sec)

or for example

mysql show status like 'open%';
+---+---+
| Variable_name | Value |
+---+---+
| Open_files| 2030  |
| Open_streams  | 0 |
| Open_tables   | 1077  |
| Opened_tables | 0 |
+---+---+
4 rows in set (0.00 sec)


I know i must be doing something wrong, but i just can't find out what .
I still don't know why i reach limits with mysqlcheck when i am setting
all those values right. I guess the limit i'm reaching is Open_files .
The question is , why?

Regards,
Marcos



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Otto Moerbeek
On Sun, 15 Jul 2007, Brandon Lee wrote:

 Hi Marco,
 
 There is no option to enable write cache via the PERC 5i/R controller
 or Bios.  From bios, i could only select the perfornance of the HDD as
 in Bypass, Quiet, Suggested and Performance.

I've seen this before. For some stupid reason you cannot enable the
write cache from the BIOS. What a collegue did is use a linux live CD
with a management program from LSI to enable it. After that all was
OK. 

-Otto

 
 -- 
 ./Brandon
 
 
 On 7/15/07, Marco Peereboom [EMAIL PROTECTED] wrote:
  I bet write cache is disabled.  I don't recall if you can enable it in
  the bios but have a look.
  
  On Sun, Jul 15, 2007 at 01:32:25AM +0800, Brandon Lee wrote:
   Hi,
  
   I have a DELL SC440 box with a DELL SAS 5i/R Raid controller.
   Installing OpenBSD 4.1 on the box, everything looks good except for
   the DELL SAS controller performance.
  
   Have tried to search the mailling list archive as well as build the
   latest current kernel but doesnt help.   Attached is the dmesg and
   bonie++ test on the RAID 1 virtual disk.
  
  
   --
   ./Brandon
   Version  1.03   --Sequential Output-- --Sequential Input-
  --Random-
   -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
  --Seeks--
   MachineSize K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP
  /sec %CP
   puffy.bsdway.n 512M  6893   3  7070   0  6306   1 59161  47 59821   5
  144.9   0
   --Sequential Create-- Random
  Create
   -Create-- --Read--- -Delete-- -Create-- --Read---
  -Delete--
 files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
  /sec %CP
1663   0 + +++   118   059   0 + +++
  152   0
  
  puffy.bsdway.net,512M,6893,3,7070,0,6306,1,59161,47,59821,5,144.9,0,16,63,0,+,+++,118,0,59,0,+,+++,152,0
  
  
  
   OpenBSD 4.1 (GENERIC.MP) #1225: Sat Mar 10 19:23:18 MST 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
   cpu0: Intel(R) Xeon(R) CPU 3050 @ 2.13GHz (GenuineIntel 686-class) 2.13
  GHz
   cpu0:
  FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,
   SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
   real mem  = 1071718400 (1046600K)
   avail mem = 970432512 (947688K)
   using 4278 buffers containing 53710848 bytes (52452K) of memory
   mainbus0 (root)
   bios0 at mainbus0: AT/286+ BIOS, date 03/28/07, BIOS32 rev. 0 @ 0xffe90,
  SMBIOS rev. 2.3 @ 0xf0450 (63 entries)
   bios0: Dell Inc. PowerEdge SC440
   apm0 at bios0: Power Management spec V1.2
   apm0: AC on, battery charge unknown
   apm0: flags 30102 dobusy 0 doidle 1
   pcibios0 at bios0: rev 2.1 @ 0xf/0x1
   pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfed10/256 (14 entries)
   pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GH LPC rev 0x00)
   pcibios0: PCI bus #6 is the last bus
   bios0: ROM list: 0xc/0x9000 0xc9000/0x6000 0xcf000/0x800
  0xcf800/0x2000! 0xd1800/0x2800
   acpi at mainbus0 not configured
   mainbus0: Intel MP Specification (Version 1.4)
   cpu0 at mainbus0: apid 0 (boot processor)
   cpu0: apic clock running at 265 MHz
   cpu1 at mainbus0: apid 1 (application processor)
   cpu1: Intel(R) Xeon(R) CPU 3050 @ 2.13GHz (GenuineIntel 686-class) 2.13
  GHz
   cpu1:
  FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,
   SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
   mainbus0: bus 0 is type PCI
   mainbus0: bus 1 is type PCI
   mainbus0: bus 2 is type PCI
   mainbus0: bus 3 is type PCI
   mainbus0: bus 4 is type PCI
   mainbus0: bus 5 is type PCI
   mainbus0: bus 6 is type PCI
   mainbus0: bus 7 is type ISA
   ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
   ioapic0: misconfigured as apic 0, remapped to apid 8
   pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
   pchb0 at pci0 dev 0 function 0 Intel E7230 MCH rev 0x00
   ppb0 at pci0 dev 1 function 0 Intel E7230 PCIE rev 0x00
   pci1 at ppb0 bus 1
   ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
   pci2 at ppb1 bus 2
   mpi0 at pci2 dev 8 function 0 Symbios Logic SAS1068 rev 0x01: apic 8 int
  16 (irq 11)
   scsibus0 at mpi0: 112 targets
   sd0 at scsibus0 targ 0 lun 0: Dell, VIRTUAL DISK, 1028 SCSI3 0/direct
  fixed
   sd0: 237464MB, 237464 cyl, 16 head, 128 sec, 512 bytes/sec, 486326272 sec
  total
   ppb2 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
   pci3 at ppb2 bus 3
   ppb3 at pci0 dev 28 function 4 Intel 82801G PCIE rev 0x01
   pci4 at ppb3 bus 4
   ppb4 at pci0 dev 28 function 5 Intel 82801G PCIE rev 0x01
   pci5 at ppb4 bus 5
   bge0 at pci5 dev 0 function 0 Broadcom BCM5754 rev 0x02, BCM5787 A2
  (0xb002): apic 8 int 17 (irq 10), address 00:1a:a0:25:98:f7
   brgphy0 at bge0 phy 1: BCM5787 10/100/1000baseT PHY, rev. 0
   uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 8 int

Re: mysql problem

2007-07-15 Thread Otto Moerbeek
On Sun, 15 Jul 2007, Marcos Laufer wrote:

 Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm

No you did not. You plugged in bigger numbers. That could very well be
your problem. Also there should be some correspondence to the numbers
in login.conf and my.cnf.

Another thing to watch out for: the login.conf syntax is extremely
unforgiving, an extra space or tab after a \ can ruin your day.

-Otto


 
 And now i have this configuration:
 
 I start mysql with this script:
 
 # cat /usr/local/bin/mysql.start
 if [ -x /usr/local/bin/mysqld_safe ] ; then
 su -c _mysql root -c '/usr/local/bin/mysqld_safe '  /dev/null 
 echo -n ' mysql'
 fi
 
 That properly starts it with the correct login class.
 
 My login.conf for mysql is:
 
 _mysql:\
# :openfiles=8192:\
 :openfiles=infinity:\
 :datasize=infinity:\
 :maxproc=infinity:\
 #:openfiles-cur=8192:\
 :openfiles-cur=infinity:\
 #:openfiles-max=1:\
 :openfiles-max=infinity:\
 :stacksize-cur=8M:
 
 I want to set infinity on those now just for testing, if everything works
 fine i will put some limits there.
 
 
 My kern.maxfiles:
 
 # sysctl kern.maxfiles
 kern.maxfiles=2
 
 
 And my.cnf has :
 
 [mysqld]
 socket = /var/www/logs/mysql/mysql.sock
 old-passwords
 tmpdir = /var/mysql/tmp
 open_files_limit = 1
 max_connections = 4096
 sql-mode = MYSQL40
 skip-name-resolve
 table_cache = 5000
 query_cache_size = 64M
 thread_cache = 32
 key_buffer = 128M
 long_query_time = 5
 thread_concurrency = 2
 interactive_timeout=60
 wait_timeout=60
 connect_timeout=15
 record_buffer=8M
 
 basedir=/usr/local
 datadir=/var/mysql
 
 sort_buffer_size = 32M
 read_buffer_size = 2M
 read_rnd_buffer_size = 4M
 myisam_sort_buffer_size = 64M
 
 [mysql.server]
 old-passwords
 
 [mysqld_safe]
 open-files=8192
 open_files_limit = 1
 max_connections = 4096
 
 [mysqlcheck]
 socket = /var/www/logs/mysql/mysql.sock
 
 --
 
 The server has more than 100 databases, it's been working fine for about a
 year .
 A couple of days ago i found that no database could be accessed . Errors
 like this appear:
 070714 16:15:57 [ERROR] /usr/local/libexec/mysqld: Can't find file:
 './ip041271_tan1/mos_weblinks.frm' (errno: 9)
 070714 16:15:57 [ERROR] /usr/local/libexec/mysqld: Can't find file:
 './ip041271_tan1/mos_weblinks.frm' (errno: 9)
 
 I restart the server and everything goes back to normal , but i reach my
 limits if i execute a:
 
 mysqlcheck -m -A -p
 
 
 By the moment the limits are reached, i noticed that this values Open_files
 and Opened_tables reached:
 
 mysql show status like '%Open%';
 ++---+
 | Variable_name  | Value |
 ++---+
 | Com_ha_open| 0 |
 | Com_show_open_tables   | 0 |
 | Open_files | 2031  |
 | Open_streams   | 0 |
 | Open_tables| 1053  |
 | Opened_tables  | 0 |
 | Slave_open_temp_tables | 0 |
 ++---+
 7 rows in set (0.00 sec)
 
 or for example
 
 mysql show status like 'open%';
 +---+---+
 | Variable_name | Value |
 +---+---+
 | Open_files| 2030  |
 | Open_streams  | 0 |
 | Open_tables   | 1077  |
 | Opened_tables | 0 |
 +---+---+
 4 rows in set (0.00 sec)
 
 
 I know i must be doing something wrong, but i just can't find out what .
 I still don't know why i reach limits with mysqlcheck when i am setting
 all those values right. I guess the limit i'm reaching is Open_files .
 The question is , why?
 
 Regards,
 Marcos



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Otto Moerbeek
On Sun, 15 Jul 2007, Otto Moerbeek wrote:

 On Sun, 15 Jul 2007, Brandon Lee wrote:
 
  Hi Marco,
  
  There is no option to enable write cache via the PERC 5i/R controller
  or Bios.  From bios, i could only select the perfornance of the HDD as
  in Bypass, Quiet, Suggested and Performance.
 
 I've seen this before. For some stupid reason you cannot enable the
 write cache from the BIOS. What a collegue did is use a linux live CD
 with a management program from LSI to enable it. After that all was
 OK. 
 
   -Otto

BTW, I found the instuctions from my collegue here. 
Quick translation form dutch:

Get linux drivers from dell site: mptlinux-3.02.83.12-5dkms.noarch.rpm
Put the drivers on a USB stick.
Boot knoppix live cd 
(http://ftp.knoppix.nl/os/Linux/distr/knoppix/KNOPPIX_V5.1.1CD-2007-01-04-EN.iso)

Then in knoppix:

sudo -s
mount /dev/sda1 (the USB stick)
cd /media/sda1
cp mptlinux-3.02.83.12-5dkms.noarch.rpm  /root
cd /root
alien -i mptlinux-3.02.83.12-5dkms.noarch.rpm
cd /ramdisk/usr/src/mtplinux-3.02.83/lsi
tar xvfz lsiutil.tgz
cd lsiutil
make
./lsiutil

choose controller (er is er maar een)
choose RAID functions 
choose change Volume settings
first option: Write Cache Enabled (Yes/No default No): Yes
remaining thing default
close and reboot.

ugly but it works.

-Otto



Re: calling syscalls directly from asm

2007-07-15 Thread Vincent GROSS

On 7/15/07, Marcus Watts [EMAIL PROTECTED] wrote:

 Date:Sat, 14 Jul 2007 18:48:46 +0200
 To:  misc@openbsd.org
 From:Vincent GROSS [EMAIL PROTECTED]
 Subject: calling syscalls directly from asm

 Hi folks,

 I would like to call write(2) without going through the libc functions. I 
wrote
 this little thing to test, it does not print anything, but friends say
 it works just
 fine with linux. I did check the addresses and operands in the resulting
 binary with objdump, everything has the correct values. What am I doing
 wrong ? Feel free to cluebat me to death if I missed some obvious point ...
...

I don't know what you hope to accomplish by avoiding the use of libc.
But if you really want to do that, you'll need to know that the system
call interface is completely different on linux than openbsd.

Here's assembly code to call write on linux:
.globl write
write:
pushl   %ebx
movl8(%esp),%ebx# fd
movl12(%esp),%ecx   # buffer
movl16(%esp),%edx   # count
movl$4,%eax # __NR_write
int $128
popl%ebx
testl   %eax,%eax
jl  cerror_
ret
cerror_:
negl%eax
movl%eax,errno
movl$-1,%eax
movl$-1,%edx
ret
In linux, parameters are passed in the registers,  the error code is returned
as a negative number.

Here's assembly code to call write on openbsd:
.globl write
write:
movl$4,%eax # SYS_write
int $128
jb  cerror_
ret
cerror_:
movl%eax,errno
movl$-1,%eax
movl$-1,%edx
ret
On OpenBSD, parameters are passed on the stack.  The kernel cleverly copies
stuff from the stack just where the C calling conventions left them, which
is why you don't see any code here to muck with that.  An error is indicated
by setting the carry flag.

Incidently, there are better ways to do hexadecimal conversion.
That is, assuming you really don't want to use libc.
For instance, consider how you might use this:
*--cp = 0123456789abcdef [ n  15 ];

-Marcus Watts


Okay, so I did missed a big, fat, screaming obvious point ...
Thanks a lot for your answers.

--
Vincent GROSS
GUIs normally make it simple to accomplish simple actions and
impossible to accomplish complex actions. --Doug Gwyn (22/Jun/91 in
comp.unix.wizards)



Re: DNS issues

2007-07-15 Thread Adriaan

On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:

Dear Readers;



#Default block policy
block log all


You have a nice block log all policy. How about using the debugging
capabilities of this policy?

Run tcpdump on the pflog0 interface to see the blocked packets.
  tcpdump -eni pflog0.

Unless you have a routing issue, this will give you all the clues you need.

=Adriaan=



Re: DNS issues

2007-07-15 Thread Stuart Henderson
On 2007/07/14 21:21, Braden Mailloux wrote:
 block in quick from urpf-failed

I would get a 'log' on here too

 A follow up, when running the route show command, the routing table prints 
 with excruciatingly slow speed, its been almost 8 minutes and it is still 
 going.

It looks up names, try -n



OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Falk Brockerhoff
Hello,

in the last weeks I played around a much with OpenBGPd, ifstated, vlans,
carp, pf and pfsync. I have some trouble, but could always fix the
problem or find a workaround. Because I don't have many I can do without
on the production site of my setup, I run my tests only with one eBGP
session.

Now I want to take my pair of routers in production state and went to
the datacenter last night. When I took up another two eBGP-Session I can
recognize two things:

Via one carped vlan I can reach two eBGP Neighbors. Both sessions came
up and the router is learning his fullfeed. But when I tried to reach a
target via this connection it fails! bgpctl sh rib looks fine. I can
see the target network, the diferent as-paths (and the choosen one) and
the ip of my next-hop.
But when I take a look at bgpcgl sh fib the mentioned gateway is _my_
local ip address as given in the bgpd.conf with local-address. Having a
look at the kernel routing table with route get ip shows me an route
with the correct interface, but without any gateway.

After finishing learning the three full feeds and a couple of minutes
the console of the box freezes! First I thought this is a hardware issue
and switched to another box - the same. No messages on the console,
nothing in the log files. Routing works fine for a some further minutes,
but not long.

Any ideas? I would be appreciative if you can give me a hint how to
solve this two problems!

Regards,

Falk



Re: OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Henning Brauer
* Falk Brockerhoff [EMAIL PROTECTED] [2007-07-15 11:55]:
 Any ideas? I would be appreciative if you can give me a hint how to
 solve this two problems!

did you pull the carp fix from -current that I pointed you to a few 
times? tha behaviour you describe isexactly what happens when carp 
mucks with routes w/o any indication o the routing socket.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Brandon Lee

Hi Otto,

Really thanks alot.  Will try it few hours later as im out.  Will
revert if this works for me! :)

--
./Brandon


On 7/15/07, Otto Moerbeek [EMAIL PROTECTED] wrote:


On Sun, 15 Jul 2007, Otto Moerbeek wrote:

 On Sun, 15 Jul 2007, Brandon Lee wrote:

  Hi Marco,
 
  There is no option to enable write cache via the PERC 5i/R controller
  or Bios.  From bios, i could only select the perfornance of the HDD as
  in Bypass, Quiet, Suggested and Performance.

 I've seen this before. For some stupid reason you cannot enable the
 write cache from the BIOS. What a collegue did is use a linux live CD
 with a management program from LSI to enable it. After that all was
 OK.

   -Otto

BTW, I found the instuctions from my collegue here.
Quick translation form dutch:

Get linux drivers from dell site: mptlinux-3.02.83.12-5dkms.noarch.rpm
Put the drivers on a USB stick.
Boot knoppix live cd 
(http://ftp.knoppix.nl/os/Linux/distr/knoppix/KNOPPIX_V5.1.1CD-2007-01-04-EN.iso)

Then in knoppix:

sudo -s
mount /dev/sda1 (the USB stick)
cd /media/sda1
cp mptlinux-3.02.83.12-5dkms.noarch.rpm  /root
cd /root
alien -i mptlinux-3.02.83.12-5dkms.noarch.rpm
cd /ramdisk/usr/src/mtplinux-3.02.83/lsi
tar xvfz lsiutil.tgz
cd lsiutil
make
./lsiutil

choose controller (er is er maar een)
choose RAID functions
choose change Volume settings
first option: Write Cache Enabled (Yes/No default No): Yes
remaining thing default
close and reboot.

ugly but it works.

-Otto




Re: OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Falk Brockerhoff
Henning Brauer schrieb:

 did you pull the carp fix from -current that I pointed you to a few 
 times? tha behaviour you describe isexactly what happens when carp 
 mucks with routes w/o any indication o the routing socket.

As far as I remember I'm running OpenBSD 4.1 GENERIC#320 on these boxes.
As everything works fine in the last couple of weeks, I didn't make an
update last night. I'll make an update and try it again, sorry for my
post before bringing the stuff up to date.

Regards,

Falk



Re: Disk encryption

2007-07-15 Thread Richard Storm

I am very interested in full disk encryption too.
I guess it comes slowly, since there now is mount_vnd in -current,
maybe could make use of it.
If you find out something, give me know :)



Re: Macbook on Openbsd

2007-07-15 Thread Richard Storm

The final:

MacBook 13 Core2Duo

*  OpenBSD 4.1-release partly works.
* Integrated 82945GM works fine with the 1280x800 wide screen,
after enabling the resolution using the x11/915resolution package by
invoking it in /etc/securelevel like:
/usr/local/sbin/915resolution 4d 1280 800 /dev/null
* Sound (azalia) works only in -current kernel, but no recording anyway
* Built in keyboard/trackpad gets recognized only in amd64 acpi enabled bsd.mp,
openbsd can be installed using external usb keyboard plugged in first USB port
* no APM support (no batery status, halt -p, no suspend).
* The onboard GigaBit NIC (msk) works fine.
* Wireless doesn't work (vendor Atheros, unknown product 0x0024).
* Enhanced SpeedStep works in -current (sysctl hw.setperf).
* hw.sensors.cpu0.temp0 works in -current.
* Infrared/bluetooth doesn't work.
http://stormrichard.bravehost.com/macbook/dmesg_amd64_aci_mp.txt
http://stormrichard.bravehost.com/macbook/xorg.conf



Re: OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Stuart Henderson
On 2007/07/15 13:47, Falk Brockerhoff wrote:
 Henning Brauer schrieb:
 
  did you pull the carp fix from -current that I pointed you to a few 
  times? tha behaviour you describe isexactly what happens when carp 
  mucks with routes w/o any indication o the routing socket.
 
 As far as I remember I'm running OpenBSD 4.1 GENERIC#320 on these boxes.

btw, this is not really useful information unless the machine arch is
known (and then it's only useful for snapshots, from the numbering
I guess you run an i386 snap, but pleases don't make people guess when
it's unnecessary :-)

Even with that information, it's only useful to people with a log of
build dates vs. numbers. (I guess developers may have this, others
usually don't). If it's a snapshot then `sysctl kern.version` is
probably good enough (though `dmesg` is always better, and less to
type :) if you build yourself then the checkout date and version
numbers of relevant files would be helpful.

N.B. I'm not picking on you, I just thought I'd jump on it as saying
GENERIC#foo would be an easy habit for other people to get into,
even though !!dmesg is less typing :-)



Re: OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Falk Brockerhoff
Stuart Henderson schrieb:

 N.B. I'm not picking on you, I just thought I'd jump on it as saying
 GENERIC#foo would be an easy habit for other people to get into,
 even though !!dmesg is less typing :-)

No problem, you're right. But at the moment the box is at the datacenter
and is switched off because of the freeze-problem. I could have
mentioned the arch, you're right with your assuming it its i386.

Later this day I will drive to the datacenter again and will update the
box. That's the time where I can copy all config-files and the
dmesg-output. But I could have wait being this done before posting to
the list.

Regards,

Falk



Allocate more memory than 512 MB with squid

2007-07-15 Thread Patrick Hemmen
Hi all,

I use the squid web-proxy on a OpenBSD 4.1 i386 machine with 1024 MB of 
RAM.
Squid can only allocate 512 MB of RAM. If squid tries to allocate more
than that, the process kills himself and starts automatically again with 
the following message in /var/log/messages.

FATAL: xcalloc: Unable to allocate 4096 blocks of 1 bytes!

Squid runs under the user _squid. This user is in the login class 
daemon in which the data size is set to infinity.
I also checked the file /usr/src/sys/arch/i386/include/vmparam.h where
I found the line.

#define MAXDSIZ   (1024*1024*1024) /* max data size */

Can anybody give me a hint where I can set the maximum RAM usage of one
process?

Thanks in advance
Patrick

[demime 1.01d removed an attachment of type application/x-pkcs7-signature which 
had a name of smime.p7s]



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Marco Peereboom
i'll look at this to see if we can add it to the driver.

On Sun, Jul 15, 2007 at 09:03:54AM +0200, Otto Moerbeek wrote:
 
 On Sun, 15 Jul 2007, Otto Moerbeek wrote:
 
  On Sun, 15 Jul 2007, Brandon Lee wrote:
  
   Hi Marco,
   
   There is no option to enable write cache via the PERC 5i/R controller
   or Bios.  From bios, i could only select the perfornance of the HDD as
   in Bypass, Quiet, Suggested and Performance.
  
  I've seen this before. For some stupid reason you cannot enable the
  write cache from the BIOS. What a collegue did is use a linux live CD
  with a management program from LSI to enable it. After that all was
  OK. 
  
  -Otto
 
 BTW, I found the instuctions from my collegue here. 
 Quick translation form dutch:
 
 Get linux drivers from dell site: mptlinux-3.02.83.12-5dkms.noarch.rpm
 Put the drivers on a USB stick.
 Boot knoppix live cd 
 (http://ftp.knoppix.nl/os/Linux/distr/knoppix/KNOPPIX_V5.1.1CD-2007-01-04-EN.iso)
 
 Then in knoppix:
 
 sudo -s
 mount /dev/sda1 (the USB stick)
 cd /media/sda1
 cp mptlinux-3.02.83.12-5dkms.noarch.rpm  /root
 cd /root
 alien -i mptlinux-3.02.83.12-5dkms.noarch.rpm
 cd /ramdisk/usr/src/mtplinux-3.02.83/lsi
 tar xvfz lsiutil.tgz
 cd lsiutil
 make
 ./lsiutil
 
 choose controller (er is er maar een)
 choose RAID functions 
 choose change Volume settings
 first option: Write Cache Enabled (Yes/No default No): Yes
 remaining thing default
 close and reboot.
 
 ugly but it works.
 
   -Otto



Re: print filter?

2007-07-15 Thread Brian Candler
On Sat, Jul 14, 2007 at 02:38:14PM -0400, Douglas Allan Tutty wrote:
 I'm familiar with apsfilter and actually just got it to work with this
 printer on my debian box with debian's stock gs-gpl.
 
 Part of my reason for asking on OBSD is that I'm exploring the larger
 issue of licensing.  I know that OBSD folk tend to prefer stuff with a
 BSD license rather than that GPL.

Only because they're in the business of making and distributing free
operating systems. GPL software makes it difficult to distribute compiled
binaries (because you must comply with GPL constraints on source
distribution), and in turn restricts people who are making and distributing
products derived from OpenBSD. BSD takes a very free definition of free,
which includes you are free to take this stuff and turn it into a product,
sell it, and not give your customers the source code. For example,
Microsoft took the Windows TCP/IP stack from BSD - they couldn't have used
the Linux one. So, the BSD licence is much more generous than GPL.

However, if you are an end-user, and don't intend packaging or selling your
own product which includes this functionality, then using GPL'd software is
fine. In some ways it's better for you, because if you got a binary
distribution and the original vendor goes bust, you should still have the
source and be able to maintain it yourself.

I agree that the apsfilter licence(*) is extremely unclear. However, it is
published on the Internet for anyone to download. Do you believe the author
would take you to court for not sending a postcard? Pragmatically, if the
software does want you want, I suggest you could take that (minimal) risk.

Or, just send the guy a postcard. He obviously likes them.

Regards,

Brian.

(*) 
http://www.apsfilter.org/cgi-bin/cvsweb.cgi/src/apsfilter/LICENSE?rev=1.5.2.3content-type=text/x-cvsweb-markupcvsroot=apsfilteronly_with_tag=RELENG_7



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Diana Eichert

On Sun, 15 Jul 2007, Otto Moerbeek wrote:


On Sun, 15 Jul 2007, Brandon Lee wrote:


Hi Marco,

There is no option to enable write cache via the PERC 5i/R controller
or Bios.  From bios, i could only select the perfornance of the HDD as
in Bypass, Quiet, Suggested and Performance.


I've seen this before. For some stupid reason you cannot enable the
write cache from the BIOS. What a collegue did is use a linux live CD
with a management program from LSI to enable it. After that all was
OK.


I use LSI FiberChannel cards at work and have seen similar issues where
a parameter can't be changed via the BIOS interface.  I ended up making a
FreeDOS boot CD so I could use the LSI management tool for things that
weren't available from the BIOS.

g.day



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Diana Eichert

On Sun, 15 Jul 2007, Marco Peereboom wrote:


i'll look at this to see if we can add it to the driver.


that would be cool



Re: OpenBGPd: RIB ok, FIB shows local-address instead of eBGP neighbor / Box freezes

2007-07-15 Thread Henning Brauer
* Falk Brockerhoff [EMAIL PROTECTED] [2007-07-15 13:47]:
 Henning Brauer schrieb:
 
  did you pull the carp fix from -current that I pointed you to a few 
  times? tha behaviour you describe isexactly what happens when carp 
  mucks with routes w/o any indication o the routing socket.
 
 As far as I remember I'm running OpenBSD 4.1 GENERIC#320 on these boxes.
 As everything works fine in the last couple of weeks, I didn't make an
 update last night. I'll make an update and try it again, sorry for my
 post before bringing the stuff up to date.

remember that the carp fix is not in -stable.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: DNS issues

2007-07-15 Thread Braden Mailloux

Stuart Henderson wrote:

On 2007/07/14 21:21, Braden Mailloux wrote:
  

block in quick from urpf-failed
  


I would get a 'log' on here too

  
A follow up, when running the route show command, the routing table prints 
with excruciatingly slow speed, its been almost 8 minutes and it is still 
going.



It looks up names, try -n



  

Dear Readers;

I've been using the log feature of pf and have found that, when 
attempting to access my webserver via dns, that pf does not block any 
traffic. I also added a log to my block in quick from urpf-failed and 
that has returned no hits in the log.
I posted my dmesg because, perhaps, the problem is hardware related (a 
broken ethernet card).  But, this seems less than hopeful as I'm able to 
connect to the dns server with ssh and can ping other computers on my 
network.
This is such an odd problem because other computers on my network have 
no problems reaching a DNS server, but this one server has been 
continually problematic in the past and present.


Thanks;
Braden.



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Brandon Lee
Hi Otto,

Here is the bonnie++ test result after i enabled the write cache.
Seems good but not too sure if that is the best performance.

any comments?  anyway the PERC 5i/R Raid Card is doing RAID 1 with 2
SATA II drives.

-- 
./Brandon



On 7/15/07, Otto Moerbeek [EMAIL PROTECTED] wrote:

 On Sun, 15 Jul 2007, Otto Moerbeek wrote:

  On Sun, 15 Jul 2007, Brandon Lee wrote:
 
   Hi Marco,
  
   There is no option to enable write cache via the PERC 5i/R controller
   or Bios.  From bios, i could only select the perfornance of the HDD as
   in Bypass, Quiet, Suggested and Performance.
 
  I've seen this before. For some stupid reason you cannot enable the
  write cache from the BIOS. What a collegue did is use a linux live CD
  with a management program from LSI to enable it. After that all was
  OK.
 
-Otto

 BTW, I found the instuctions from my collegue here.
 Quick translation form dutch:

 Get linux drivers from dell site: mptlinux-3.02.83.12-5dkms.noarch.rpm
 Put the drivers on a USB stick.
 Boot knoppix live cd 
 (http://ftp.knoppix.nl/os/Linux/distr/knoppix/KNOPPIX_V5.1.1CD-2007-01-04-EN.iso)

 Then in knoppix:

 sudo -s
 mount /dev/sda1 (the USB stick)
 cd /media/sda1
 cp mptlinux-3.02.83.12-5dkms.noarch.rpm  /root
 cd /root
 alien -i mptlinux-3.02.83.12-5dkms.noarch.rpm
 cd /ramdisk/usr/src/mtplinux-3.02.83/lsi
 tar xvfz lsiutil.tgz
 cd lsiutil
 make
 ./lsiutil

 choose controller (er is er maar een)
 choose RAID functions
 choose change Volume settings
 first option: Write Cache Enabled (Yes/No default No): Yes
 remaining thing default
 close and reboot.

 ugly but it works.

 -Otto
Version  1.03   --Sequential Output-- --Sequential Input- --Random-

-Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks--

MachineSize K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  /sec %CP

puffy2G 44136  24 48902  17 23327   7 51902  39 50587   7 132.4   0

--Sequential Create-- Random Create

-Create-- --Read--- -Delete-- -Create-- --Read--- -Delete--

  files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP

 16  1901  41 + +++ + +++  2519  56  6131 100 12760  99

puffy   
,2G,44136,24,48902,17,23327,7,51902,39,50587,7,132.4,0,16,1901,41,+,+++,+,+++,2519,56,6131,100,12760,99




Re: mysql problem

2007-07-15 Thread Daniel Ouellet

Marcos Laufer wrote:

Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm


Go back and read again many times over until you get it.

You didn't read it and you didn't pay attention to statement in bold 
either. I could tell you what to do to fix it, but then you wouldn't 
learn from it. If it wasn't explain there, I would be happy to tell you, 
but it is there and pretty clear as well.


You get the error #9 that is exactly explain there and instructions on 
how to address that is provided as well.


Read it please and you will see your mistake.

Just a hint in the text:

Remember, if you don't do this, it will use the default class! Same if 
you restart MySQL manually! Class are read and use on login


Hope this help you.

Also, there is reference to man pages there. You looked at them too right?

Best,

Daniel



Re: Secure Network File System - Or Lack Thereof

2007-07-15 Thread Edd Barrett

Hi,

Also AFS is i386 only.

--
Best Regards

Edd

---
http://students.dec.bournemouth.ac.uk/ebarrett



Re: mysql problem

2007-07-15 Thread Daniel Ouellet

Marcos Laufer wrote:

Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm


I also forgot to add this as well in my previous reply, also in the text 
of the document you have been pointed to.


So, be wise and change what you need to change for your setup! But only 
what you need to absolutely change. Don't go nuts and start turning 
knobs left and right. That may well be what you need to do on some other 
Unix, or variations of... But on OpenBSD the default setup is really 
good and is done as such to protect youself. The bottom line is: don't 
change what you don't need to change and know what you do and why!


So, just don't go put big numbers and any numbers anywhere to make it 
work. This will give you more problem in the future. Do what you need to 
do for your setup and just that. And more importantly, learn why you 
need to do them, it will help you in many others situations.


Best,

Daniel



Re: DNS issues

2007-07-15 Thread Adriaan

On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:


Dear Readers;

I've been using the log feature of pf and have found that, when
attempting to access my webserver via dns, that pf does not block any
traffic. I also added a log to my block in quick from urpf-failed and
that has returned no hits in the log.


The time that I had a similar issue, where tcpdump on pflog0 didn't
show anything, turned out to be a routing issue.
I had a authoritative-only  nameserver in a DMZ and forgot to set it's
default route to the IP address of the DMZ NIC of the OBSD firewall.
It didn't know how to route ihe replies to the outside and hence
nothing showed up on pflog0.

tcpdump is not limited to pflog0, you also can run it on a normal interface. ;)

SSH in on the nameserver and run tcpdump on it's NIC
  tcpdump -ni fxp0 port domain

Check if you see a DNS request coming in

=Adriaan=



Re: problem with locate

2007-07-15 Thread Steve Fairhead
 On Thu, 15 Mar 2007, Otto Moerbeek wrote: 

I see the problem. The problem occurs if top bigrams contain spaces. 
These are not handled correctly by awk. We'll have to use a field 
separator that can not be in a bigram. A tab is well suited, AFAKS. 

Try this. 
patch snipped


I've run into this same problem on 4.1 stable, fully patched:

 locate database header corrupt, bigram char outside 0, 32-127: 14 

It's been there some weeks now; the weekly script completes just fine with
no error messages, and the database exists. Deleting it and running weekly
manually does not change anything. Hardware is fine.

Did your patch not make it into 4.1, or have I a) run into a different
issue, or b) totally misunderstood the way new releases get built?

Steve
http://www.fivetrees.com



Re: problem with locate

2007-07-15 Thread Otto Moerbeek
On Sun, 15 Jul 2007, Steve Fairhead wrote:

  On Thu, 15 Mar 2007, Otto Moerbeek wrote: 
 
 I see the problem. The problem occurs if top bigrams contain spaces. 
 These are not handled correctly by awk. We'll have to use a field 
 separator that can not be in a bigram. A tab is well suited, AFAKS. 
 
 Try this. 
 patch snipped
 
 
 I've run into this same problem on 4.1 stable, fully patched:
 
  locate database header corrupt, bigram char outside 0, 32-127: 14 
 
 It's been there some weeks now; the weekly script completes just fine with
 no error messages, and the database exists. Deleting it and running weekly
 manually does not change anything. Hardware is fine.
 
 Did your patch not make it into 4.1, or have I a) run into a different
 issue, or b) totally misunderstood the way new releases get built?
 
 Steve
 http://www.fivetrees.com

As cna be easily checed using cvs
(http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/locate/locate/mklocatedb.sh)
this diff was committed after 4.1 was tagged.

-Otto



Re: DNS issues

2007-07-15 Thread Braden Mailloux

Adriaan wrote:

On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:


Dear Readers;

I've been using the log feature of pf and have found that, when
attempting to access my webserver via dns, that pf does not block any
traffic. I also added a log to my block in quick from urpf-failed and
that has returned no hits in the log.


The time that I had a similar issue, where tcpdump on pflog0 didn't
show anything, turned out to be a routing issue.
I had a authoritative-only  nameserver in a DMZ and forgot to set it's
default route to the IP address of the DMZ NIC of the OBSD firewall.
It didn't know how to route ihe replies to the outside and hence
nothing showed up on pflog0.

tcpdump is not limited to pflog0, you also can run it on a normal 
interface. ;)


SSH in on the nameserver and run tcpdump on it's NIC
  tcpdump -ni fxp0 port domain

Check if you see a DNS request coming in

=Adriaan=




  Dear Readers;

My nameserver's default route is set to the ip address of the DMZ nic. 
Also, when attempting to access my webserver via DNS from another site, 
no DNS queries came through to my server while monitoring the dump 
information on rl0 (my nameserver's nic).


Thanks;
Braden.



OT: looking for a videocard

2007-07-15 Thread Paul de Weerd
Hi,

I'm in the market for a new videocard (for a new workstation). I'm
looking for recommendations on what to buy given the following
requirements :

o MUST have two DVI outputs
o MUST be able to drive X with 2x 1600x1200
o MUST be PCIe-16
o SHOULD be passively cooled

An (obvious) non-requirement is fancy-smancy OpenGL support and other
look-at-me-mom-i'm-being-cool-features. Many xterms, some firefox and
a couple of mplayer'ed or VLC'ed video's is all I need.

Of course, the biggest requirement is that it MUST be supported in
OpenBSD/xenocara (-current is OK). An Open Source-friendly vendor is
preferred but I'm afraid the market is in quite a bad state at the
moment.

I had an ATI X1300Pro. It was everything I wanted except for the
OpenBSD-supportedness - I had to pass it off to someone else. I rather
not make the same mistake again, any suggestions ? First-hand
experience much appreciated.

Thanks,

Paul 'WEiRD' de Weerd

PS: The machine will probably run amd64 but I'm hoping that the
'supported by OpenBSD/xenocara'-requirement gets me hardware that is
pretty much arch-agnostic. If stuff is very much in development, I'd
settle for i386 as long as it works.

-- 
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 



Re: DNS issues

2007-07-15 Thread Braden Mailloux

Braden Mailloux wrote:

Adriaan wrote:

On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:


Dear Readers;

I've been using the log feature of pf and have found that, when
attempting to access my webserver via dns, that pf does not block any
traffic. I also added a log to my block in quick from urpf-failed and
that has returned no hits in the log.


The time that I had a similar issue, where tcpdump on pflog0 didn't
show anything, turned out to be a routing issue.
I had a authoritative-only  nameserver in a DMZ and forgot to set it's
default route to the IP address of the DMZ NIC of the OBSD firewall.
It didn't know how to route ihe replies to the outside and hence
nothing showed up on pflog0.

tcpdump is not limited to pflog0, you also can run it on a normal 
interface. ;)


SSH in on the nameserver and run tcpdump on it's NIC
  tcpdump -ni fxp0 port domain

Check if you see a DNS request coming in

=Adriaan=




  Dear Readers;

My nameserver's default route is set to the ip address of the DMZ nic. 
Also, when attempting to access my webserver via DNS from another 
site, no DNS queries came through to my server while monitoring the 
dump information on rl0 (my nameserver's nic).


Thanks;
Braden.




Dear Readers;

Ok, so I added these two lines to my pf.conf

rdr on rl0 proto udp from any to $pub_ns_a port domain - $ns_a
rdr on rl0 proto udp from any to $pub_ns_b port doman - $ns_b

Afterwards, while watching traffic on both my a and b server using 
tcpdump -ni  (my interface) port domain, my traffic now lights up with 
domain requests. But, I still cannot seem to get on the internet with my 
a server.


thanks;
Braden.



Re: fsck Segmentation fault on 4.1

2007-07-15 Thread Niko Itajarvi
Otto Moerbeek otto at drijf.net writes:

 
 On Fri, 13 Jul 2007, Marcos Laufer wrote:
 
  Otto,
  
  I know the cables are allright, i'm using them with other hard drive .
  And the hard drive is new , but i will format it and check if it
  shows up some errors.
  I hope it is hardware related , i would get kind of scared otherwise.
  Do you need me to try anything else with this filesystem?
 
 If possible (if it's not too large and the drive cooperates), I would
 like a dd of the partition. I'm always very interested in having an
 image of a filesystems on which fsck_ffs chokes. 
 
   -Otto
 


I have been getting the exact same error (CANNOT READ: BLK 64) on two different
servers since I updated them to 4.1. I can happily provide a dd of the partition
if it would help to resolve this.


-Niko
[EMAIL PROTECTED]



Re: problem with locate

2007-07-15 Thread Steve Fairhead
As cna be easily checed using cvs
(http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/locate/locate/mklocatedb.
sh)
this diff was committed after 4.1 was tagged.


Thanks and apologies; I am lacking in CVS-reading-fu. I shall patch and
report.

From CVS:
 Problem seen by Han Boetes and other people with too big mps3
collections; these typically contain lots of file names with spaces in them


Ah. Too big MP3 collections? Oops... guilty as charged. And yes, some of
the filenames are, err, different.

Steve
http://www.fivetrees.com



Re: SUN Fire x2200, anyone?

2007-07-15 Thread Toni Mueller
Hi,

On Wed, 20.06.2007 at 09:26:13 -0500, [EMAIL PROTECTED] [EMAIL PROTECTED] 
wrote:
 Did you ever get the x2200? I'm looking at buying one and was wondering
 what experience you had with OpenBSD on it.

yes, I got one, and no, no luck with it, yet. I'm about to return it as
the box seems to have hardware issues, too, so I can't really judge
right now, but will probably try to get a replacement for further
testing. Currently, I have a case open with SUN.

If anyone wants to help getting such a beast up, I'm very interested.


Best,
--Toni++



Re: DNS issues

2007-07-15 Thread Adriaan

On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:

Adriaan wrote:
 On 7/15/07, Braden Mailloux [EMAIL PROTECTED] wrote:

 Dear Readers;

 I've been using the log feature of pf and have found that, when
 attempting to access my webserver via dns, that pf does not block any
 traffic. I also added a log to my block in quick from urpf-failed and
 that has returned no hits in the log.

 The time that I had a similar issue, where tcpdump on pflog0 didn't
 show anything, turned out to be a routing issue.
 I had a authoritative-only  nameserver in a DMZ and forgot to set it's
 default route to the IP address of the DMZ NIC of the OBSD firewall.
 It didn't know how to route ihe replies to the outside and hence
 nothing showed up on pflog0.

 tcpdump is not limited to pflog0, you also can run it on a normal
 interface. ;)

 SSH in on the nameserver and run tcpdump on it's NIC
   tcpdump -ni fxp0 port domain

 Check if you see a DNS request coming in

 =Adriaan=



   Dear Readers;

My nameserver's default route is set to the ip address of the DMZ nic.
Also, when attempting to access my webserver via DNS from another site,
no DNS queries came through to my server while monitoring the dump
information on rl0 (my nameserver's nic).


Does tcpdump on the external NIC of your OpenBSD firewall show any DNS
requests coming in?

Doing a  A record seach for www.theamericanbray.com at
http://www.squish.net/dnscheck/
gives the following result:

50.0% of queries will end in failure at 64.142.102.9
(a.ns.theamericanbray.com) - query timed out
50.0% of queries will end in failure at 64.142.102.10
(b.ns.theamericanbray.com) - query timed out

Keep in mind that you have to perform test from the outside as
described in http://openbsd.unixtech.be/faq/pf/rdr.html#reflect

Did you do the tests suggested in  the section Checking addresses of
your computers of
http://cr.yp.to/djbdns/run-server.html ?

=Adriaan=



Re: problem with locate

2007-07-15 Thread Steve Fairhead
I said:
 Thanks and apologies; I am lacking in CVS-reading-fu. I shall patch and
report. 

Wahay! Works lovely. Thanks.

Steve
http://www.fivetrees.com



Multi terabyte filesystems

2007-07-15 Thread John Nietzsche

Dear list members,

is there plans for openbsd to support multi terabyte filesystems?
Which release should i expect to see such support?

Thanks in advance.



Re: OT: looking for a videocard

2007-07-15 Thread Ioan Nemes
Me to!  But NOT JUST PCIe-16.  I've got some older machines
which have no PCIe-16.

Ioan



 Paul de Weerd [EMAIL PROTECTED] 16/07/2007 07:07 
Hi,

I'm in the market for a new videocard (for a new workstation). I'm
looking for recommendations on what to buy given the following
requirements :

o MUST have two DVI outputs
o MUST be able to drive X with 2x 1600x1200
o MUST be PCIe-16
o SHOULD be passively cooled

An (obvious) non-requirement is fancy-smancy OpenGL support and other
look-at-me-mom-i'm-being-cool-features. Many xterms, some firefox and
a couple of mplayer'ed or VLC'ed video's is all I need.

Of course, the biggest requirement is that it MUST be supported in
OpenBSD/xenocara (-current is OK). An Open Source-friendly vendor is
preferred but I'm afraid the market is in quite a bad state at the
moment.

I had an ATI X1300Pro. It was everything I wanted except for the
OpenBSD-supportedness - I had to pass it off to someone else. I rather
not make the same mistake again, any suggestions ? First-hand
experience much appreciated.

Thanks,

Paul 'WEiRD' de Weerd

PS: The machine will probably run amd64 but I'm hoping that the
'supported by OpenBSD/xenocara'-requirement gets me hardware that is
pretty much arch-agnostic. If stuff is very much in development, I'd
settle for i386 as long as it works.

--
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/



Re: Multi terabyte filesystems

2007-07-15 Thread Ioan Nemes
Just curious, why do you need a terabyte of disk space (in one filesystem)???

Ioan



Ioan Nemes
0439-405-336
+61 2 9725-0236

 John Nietzsche [EMAIL PROTECTED] 16/07/2007 08:09 
Dear list members,

is there plans for openbsd to support multi terabyte filesystems?
Which release should i expect to see such support?

Thanks in advance.



Re: DELL PERC 5iR slow performance

2007-07-15 Thread Marco Peereboom
You pay for sata you get sata; no magic there.

On Mon, Jul 16, 2007 at 01:44:10AM +0800, Brandon Lee wrote:
 Hi Otto,
 
 Here is the bonnie++ test result after i enabled the write cache.
 Seems good but not too sure if that is the best performance.
 
 any comments?  anyway the PERC 5i/R Raid Card is doing RAID 1 with 2
 SATA II drives.
 
 -- 
 ./Brandon
 
 
 
 On 7/15/07, Otto Moerbeek [EMAIL PROTECTED] wrote:
 
 On Sun, 15 Jul 2007, Otto Moerbeek wrote:
 
  On Sun, 15 Jul 2007, Brandon Lee wrote:
 
   Hi Marco,
  
   There is no option to enable write cache via the PERC 5i/R controller
   or Bios.  From bios, i could only select the perfornance of the HDD as
   in Bypass, Quiet, Suggested and Performance.
 
  I've seen this before. For some stupid reason you cannot enable the
  write cache from the BIOS. What a collegue did is use a linux live CD
  with a management program from LSI to enable it. After that all was
  OK.
 
-Otto
 
 BTW, I found the instuctions from my collegue here.
 Quick translation form dutch:
 
 Get linux drivers from dell site: mptlinux-3.02.83.12-5dkms.noarch.rpm
 Put the drivers on a USB stick.
 Boot knoppix live cd 
 (http://ftp.knoppix.nl/os/Linux/distr/knoppix/KNOPPIX_V5.1.1CD-2007-01-04-EN.iso)
 
 Then in knoppix:
 
 sudo -s
 mount /dev/sda1 (the USB stick)
 cd /media/sda1
 cp mptlinux-3.02.83.12-5dkms.noarch.rpm  /root
 cd /root
 alien -i mptlinux-3.02.83.12-5dkms.noarch.rpm
 cd /ramdisk/usr/src/mtplinux-3.02.83/lsi
 tar xvfz lsiutil.tgz
 cd lsiutil
 make
 ./lsiutil
 
 choose controller (er is er maar een)
 choose RAID functions
 choose change Volume settings
 first option: Write Cache Enabled (Yes/No default No): Yes
 remaining thing default
 close and reboot.
 
 ugly but it works.
 
 -Otto
 
 

 Version  1.03   --Sequential Output-- --Sequential Input- 
 --Random-
 -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- 
 --Seeks--
 MachineSize K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP  /sec 
 %CP
 puffy2G 44136  24 48902  17 23327   7 51902  39 50587   7 132.40
 --Sequential Create-- Random 
 Create
 -Create-- --Read--- -Delete-- -Create-- --Read--- 
 -Delete--
   files  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec 
 %CP
  16  1901  41 + +++ + +++  2519  56  6131 100 12760  
 99
 puffy   
 ,2G,44136,24,48902,17,23327,7,51902,39,50587,7,132.4,0,16,1901,41,+,+++,+,+++,2519,56,6131,100,12760,99



Re: Multi terabyte filesystems

2007-07-15 Thread Nick Holland
John Nietzsche wrote:
 Dear list members,
 
 is there plans for openbsd to support multi terabyte filesystems?

there is desire.  There is work being done.

 Which release should i expect to see such support?

The release it is ready for.

What do you want someone to say?
For example, do you want me to say, It will be ready by 4.3?
If so, you have two choices:
  1) Base your decisions around it. (what if I'm wrong?  What
 if it isn't ready?  You are screwed.)
  2) Assume I'm an idiot, and don't believe me. (why did you ask?)

In short: there is no answer you can be given that will sanely make
your life better.

Here's your measure: when it's in -current, it will be in the next
-release, unless horrible problems are found that can't be fixed in
time for the release.  Whether or not it is ready for your app, that
you will have to decide by putting it to your own tests.

File system work is scary.  It requires a measure of brilliance and
optimism in a rare combination.  Usually when people have that much
brilliance, they look at the risks and run screaming in terror.


The question of why is quite valid.  Most applications I can
think of for multi-TB file systems could be better done with several
small file systems.  At work, we have an app that will create massive
amounts of data over its life span, running on an OS that DOES
support multi-TB partitions.  With less than 300GB in use currently,
people are starting to appreciate my advice to keep the partitions
well under 1TB in size...and 500GB is starting to look really,
really big.

Nick.



Re: [solved] mysql problem

2007-07-15 Thread Marcos Laufer
Otto ,

I did read it , many times. I did not just plugged in bigger
numbers, i'd like to think that i know what i'm doing here .
I increased the values acorrding to my hardware and mysql
status that needed to be increased in order to improve performance.
I made my login.conf and my.cnf correspond to each other also.
I found this links very useful, these provide ways to
monitor your mysql server, improve performance and some
ways to determine when to increase some values and when
to decrease some others. I know some users
will benefit from these:

http://hackmysql.com/mysqlreportguide
http://www.ibm.com/developerworks/linux/library/l-tune-lamp-3.html
http://www.mysqlperformanceblog.com


The link http://openbsdsupport.org/mysql.htm doesn't help on
how to improve mysql , but just how to start it and how to handle
descriptors properly. There's no problem on following those
instructions.

I happened to find out that the problem on this case was not related to
my configuration or openbsd itself, but to a modification on the
mysqld_safe script made by the previous administrator of this server,
i found this:

--
echo Starting $MYSQLD daemon with databases from $DATADIR

ulimit -a

echo ---

ulimit -n 2048  /dev/null 21   # FIX para open files

echo ---

ulimit -a
--

So that was the reason i couldn't complete a full mysqlcheck on all
databases,
i was limited by that ulimit on mysqld_safe which wouldn't let me open more
that 2048 files despite of what i configured in my.cnf.

Regards,


- Original Message - 
From: Otto Moerbeek [EMAIL PROTECTED]
To: Marcos Laufer [EMAIL PROTECTED]
Cc: misc@openbsd.org; [EMAIL PROTECTED]; Daniel Ouellet
[EMAIL PROTECTED]
Sent: Sunday, July 15, 2007 3:54 AM
Subject: Re: mysql problem


On Sun, 15 Jul 2007, Marcos Laufer wrote:

 Ok , i had followed the instructions at
http://openbsdsupport.org/mysql.htm

No you did not. You plugged in bigger numbers. That could very well be
your problem. Also there should be some correspondence to the numbers
in login.conf and my.cnf.

Another thing to watch out for: the login.conf syntax is extremely
unforgiving, an extra space or tab after a \ can ruin your day.

-Otto



 And now i have this configuration:

 I start mysql with this script:



Re: fsck Segmentation fault on 4.1

2007-07-15 Thread Otto Moerbeek
On Sun, 15 Jul 2007, Niko Itajarvi wrote:

 Otto Moerbeek otto at drijf.net writes:
 
  
  On Fri, 13 Jul 2007, Marcos Laufer wrote:
  
   Otto,
   
   I know the cables are allright, i'm using them with other hard drive .
   And the hard drive is new , but i will format it and check if it
   shows up some errors.
   I hope it is hardware related , i would get kind of scared otherwise.
   Do you need me to try anything else with this filesystem?
  
  If possible (if it's not too large and the drive cooperates), I would
  like a dd of the partition. I'm always very interested in having an
  image of a filesystems on which fsck_ffs chokes. 
  
  -Otto
  
 
 
 I have been getting the exact same error (CANNOT READ: BLK 64) on two 
 different
 servers since I updated them to 4.1. I can happily provide a dd of the 
 partition
 if it would help to resolve this.

yes, please. Something like 

dd if=/dev/rsd0a of=image bs=512

gzip the image and make it available to me.

Althoiugh I will be on vacation soo, dunno if I have time to check
things before that.

-Otto