Firefox pegging my CPU

2009-11-30 Thread Nick Guenther
I installed firefox35 on 4.6 and used it happily until yesterday when
it went crazy. It will still load pages but extremely slowly--to the
point of being unusable. I deleted my .mozilla directory--no luck. I
reinstalled it--no luck. I got rid of swfdec--no luck. Here's top(1):

load averages:  3.57,  3.41,  3.0203:01:56
62 processes:  60 idle, 2 on processor
CPU0 states: 24.1% user,  0.0% nice,  4.3% system,  5.9% interrupt, 65.7% idle
CPU1 states: 35.9% user,  0.0% nice,  6.4% system,  0.1% interrupt, 57.6% idle
Memory: Real: 170M/496M act/tot  Free: 1000M  Swap: 0K/2910M used/tot

  PID USERNAME PRI NICE  SIZE   RES STATE WAIT  TIMECPU COMMAND
 5413 kousu 630   52M   80M onproc/0  - 3:13 78.76%
firefox35-bin
 9499 _x11   20   20M   39M sleep/1   select8:04 29.98% Xorg
 5556 kousu  20 2468K 3812K sleep/1   select2:11 10.84% ssh
24095 kousu  20 9600K   18M sleep/1   poll  1:07  7.18% Terminal
15752 kousu  20  844K 1456K sleep/1   netio 0:16  0.98% sftp
 3515 kousu  20  920K 2152K sleep/1   select0:04  0.05% wmii
17588 kousu  20   19M   43M sleep/0   poll  0:07  0.00% liferea-bin
24351 kousu 180  592K  408K sleep/1   pause 0:09  0.00% sh
16769 kousu  20  544K 2088K sleep/1   poll  0:01  0.00% autocutsel
11276 kousu  20 1808K 4188K sleep/1   poll  0:00  0.00% gconfd-2
13162 kousu -60  636K  488K idle  piperd0:00  0.00% sh
28545 kousu  20 2168K 4600K sleep/0   poll  0:00  0.00% gconfd-2
25080 kousu  20  600K 1528K sleep/0   poll  0:00  0.00% top
28316 root   20  476K 1168K idle  select0:00  0.00% famd
11756 _pflogd40  604K  332K sleep/1   bpf   0:00  0.00% pflogd
 1948 kousu  30 1652K 3172K idle  ttyin 0:00  0.00% lynx
30910 kousu  20  484K  780K sleep/0   select0:00  0.00% ifstat
 6337 kousu  30  716K  580K idle  ttyin 0:00  0.00% ksh

Is anyone else seeing this? Any tips on how to debug it? Clearly
something has changed on my system because it was fine for a good
month until just now.

Thanks,
-Nick



Re: How to determine what ports are being used?

2009-11-30 Thread SJP Lists
2009/11/28 Christoph Leser le...@sup-logistik.de:
 1723 is PPTP. This uses GRE ( generic routing encapsulation ).

 You must allow this protocol.

 And, as far as I know, openBSD cannot NAT this protocol ( it is possible to
 nat GRE for pptp if you peek into the next higher level protocol ( ppp in this
 case ? ) but this is not implemented )

pf can NAT GRE, but I beleive only one session per endpoint.

http://monkey.org/openbsd/archive/misc/0403/msg01041.html



Re: Firefox pegging my CPU

2009-11-30 Thread Jacek Masiulaniec
Did you ktrace it?

On Mon, Nov 30, 2009 at 03:08:43AM -0500, Nick Guenther wrote:
 I installed firefox35 on 4.6 and used it happily until yesterday when
 it went crazy. It will still load pages but extremely slowly--to the
 point of being unusable. I deleted my .mozilla directory--no luck. I
 reinstalled it--no luck. I got rid of swfdec--no luck. Here's top(1):
 
 load averages:  3.57,  3.41,  3.0203:01:56
 62 processes:  60 idle, 2 on processor
 CPU0 states: 24.1% user,  0.0% nice,  4.3% system,  5.9% interrupt, 65.7% idle
 CPU1 states: 35.9% user,  0.0% nice,  6.4% system,  0.1% interrupt, 57.6% idle
 Memory: Real: 170M/496M act/tot  Free: 1000M  Swap: 0K/2910M used/tot
 
   PID USERNAME PRI NICE  SIZE   RES STATE WAIT  TIMECPU COMMAND
  5413 kousu 630   52M   80M onproc/0  - 3:13 78.76%
 firefox35-bin
  9499 _x11   20   20M   39M sleep/1   select8:04 29.98% Xorg
  5556 kousu  20 2468K 3812K sleep/1   select2:11 10.84% ssh
 24095 kousu  20 9600K   18M sleep/1   poll  1:07  7.18% Terminal
 15752 kousu  20  844K 1456K sleep/1   netio 0:16  0.98% sftp
  3515 kousu  20  920K 2152K sleep/1   select0:04  0.05% wmii
 17588 kousu  20   19M   43M sleep/0   poll  0:07  0.00% 
 liferea-bin
 24351 kousu 180  592K  408K sleep/1   pause 0:09  0.00% sh
 16769 kousu  20  544K 2088K sleep/1   poll  0:01  0.00% autocutsel
 11276 kousu  20 1808K 4188K sleep/1   poll  0:00  0.00% gconfd-2
 13162 kousu -60  636K  488K idle  piperd0:00  0.00% sh
 28545 kousu  20 2168K 4600K sleep/0   poll  0:00  0.00% gconfd-2
 25080 kousu  20  600K 1528K sleep/0   poll  0:00  0.00% top
 28316 root   20  476K 1168K idle  select0:00  0.00% famd
 11756 _pflogd40  604K  332K sleep/1   bpf   0:00  0.00% pflogd
  1948 kousu  30 1652K 3172K idle  ttyin 0:00  0.00% lynx
 30910 kousu  20  484K  780K sleep/0   select0:00  0.00% ifstat
  6337 kousu  30  716K  580K idle  ttyin 0:00  0.00% ksh
 
 Is anyone else seeing this? Any tips on how to debug it? Clearly
 something has changed on my system because it was fine for a good
 month until just now.
 
 Thanks,
 -Nick



Re: bgplg failed only from web not from CLI

2009-11-30 Thread ~Lst
On Mon, Nov 30, 2009 at 4:07 AM, Robert rob...@openbsd.pap.st wrote:
 On Mon, 30 Nov 2009 07:44:23 +1100
 Rod Whitworth glis...@witworx.com wrote:

 I don't think that he decided to put it there. That is where a clean
 install puts it.

 Oh, i see, my bad.

 Have a look at your own machine.

 Not there, my upgrades handle some directories differently, eg. /var/www
 does not get stuff that i dont need put into it.
 Your point still stands.

 You should see:
 $ ls -l /var/www/bin/bgpctl
 --  1 root  bin  197324 Mar  1  2009 /var/www/bin/bgpctl
 Note that there are no permissions by default but I got the OP to ls
 -l that file to make sure he had enabled them as required. He has.

 Apart from that, one should invoke the damn command with the correct
 path, which in this case is just /bin/. :)


Well gentlemen...
Right now, it looks like my bgplg has been running well, because of my
mistake that is the running of bgpd_flags in two places.

1. The bgpd_flags that is running via /etc/rc.conf.local
(bgpd_flags=-r /var/www/logs/bgpd.rsock - exactly like described in
the man pages).
2. Had been running too in /etc/rc.conf (bgpd_flags=).

Thanks for your kindly help, wasting your time and lot of patience
spare around here.


Rgds,
--
~Lst



Re: shutdown and reboot sometimes ignored?

2009-11-30 Thread Andris Raugulis
 On Sun, Nov 22, 2009 at 10:00:05PM +0100, Peter J. Philipp wrote:
  On Sun, Nov 22, 2009 at 09:20:46PM +0100, Toni Mueller wrote:
   Hi,
   
   for several releases of OpenBSD, I now have encountered the problem
   that I can say shutdown -r now, or halt, or reboot, and nothing
   appears to happen, except for some messages on the associated
   terminals.
   
   Sometimes, it works after saying it multiple times, and literally after
   minutes, and on otherwise idle boxen.
   
   Ideas about what I can do to pinpoint the problem, are most welcome!
  
  I had something like this on vmware when switching from workstation 6 to 
  workstation 7.  Basically what happened was that vic1 (second ethernet) was
  left in no carrier state on a vmnet that didn't exist.  When I finally 
  noticed it and made a proper vmnet for it, the reboot or halt problem went 
  away.
  
  Perhaps you have an interface in no carrier state?  
 
 That alone isn't enough - I frequently halt my laptop with no network
 cable attached (to re0), and never noticed any particularly long waits.

I had exactly the same issue - neither reboot nor shutdown worked (as in
shutdowning or rebooting the computer). Then I found this thread and
started to look at network interfaces. I had lost carrier to mos0. So I
tried to lookup or bring down the interface. ifconfig just hang at mos0
and didn't respond to ^C. And ^T said that it was usbsync state.

Then I just plugged mos0 out (as it is an usb network card) and reboot
immediately worked.

P.S. That's on 4.6, haven't tried -current.



x11 install

2009-11-30 Thread sophy life
Hello it is sophy.



Though postfix was installed from ports
The installation was not able to be normalized according to the
following messages.

python-2.5.4 uses X11, but /usr/X11R6 not found.

Python is output to the same message as the installation side.

X11, but /usr/X11R6 not found.

How should be installed an insufficient thing?



OT: FDE - Full disc encryption

2009-11-30 Thread Tomáš Bodžár
Hi all,

someone have or tested those new disks?

http://www.seagate.com/ww/v/index.jsp?locale=en-USname=dn_sec_intro_fdevgnextoid=1831bb5f5ed93110VgnVCM10f5ee0a0aRCRD

At least price is much more bigger :-)

-- 
http://www.openbsd.org/lyrics.html



Re: x11 install

2009-11-30 Thread Chris Bennett

sophy life wrote:

Hello it is sophy.



Though postfix was installed from ports
The installation was not able to be normalized according to the
following messages.

python-2.5.4 uses X11, but /usr/X11R6 not found.

Python is output to the same message as the installation side.

X11, but /usr/X11R6 not found.

How should be installed an insufficient thing?


  

Which version of OpenBSD are you using?
Did you install the X packages?

Chris Bennett

--
A human being should be able to change a diaper, plan an invasion,
butcher a hog, conn a ship, design a building, write a sonnet, balance
accounts, build a wall, set a bone, comfort the dying, take orders,
give orders, cooperate, act alone, solve equations, analyze a new
problem, pitch manure, program a computer, cook a tasty meal, fight
efficiently, die gallantly. Specialization is for insects.
  -- Robert Heinlein



Re: x11 install

2009-11-30 Thread sophy life
Thank you for the answer.


4.5 use of the version of OpenBSD.

X packages is not installed from the beginning.



carp and ospf issue

2009-11-30 Thread stan
I have a pair fo redundandt firewalls, using carp that i have recntly
upgraded from a raelly old version of OpenBSD (actually replaced, I built
new disks for these). I read that 4.6 would allow me to set up OSPF such
that it would advertise the shared address provided by carp. So, I have set
things up like this:

r...@phfw1:etc# cat ospfd.conf
# $OpenBSD: ospfd.conf,v 1.2 2005/02/06 20:07:09 norby Exp $

# macros
# password=secret

# global configuration
router-id 10.209.142.154
# fib-update no
# spf-delay 1
# spf-holdtime 5

# auth-key $password
# auth-type none
# hello-interval 10
# metric 10
# retransmit-interval 5
# router-dead-time 40
# router-priority 1
# transmit-delay 1
redistribute connected

# areas
area 0.0.0.XXX {
interface carp0 {
auth-type none
}
interface carp1 {
passive
auth-type none
}
}

Here is what ifconfig reprost for the carp devices on the current master:

carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:00:5e:00:01:0a
priority: 0
carp: MASTER carpdev bge0 vhid 10 advbase 1 advskew 0
groups: carp
inet 10.209.142.154 netmask 0xff80 broadcast 10.209.142.255
inet6 fe80::200:5eff:fe00:10a%carp0 prefixlen 64 scopeid 0x7
carp1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:00:5e:00:01:02
priority: 0
carp: MASTER carpdev em0 vhid 2 advbase 1 advskew 0
groups: carp
inet 170.85.106.143 netmask 0xff80 broadcast 170.85.106.255
inet6 fe80::200:5eff:fe00:102%carp1 prefixlen 64 scopeid 0x8

But ospfctl show interfaces is reprting:

r...@phfw1:etc# ospfctl show interfaces
Interface   AddressState  HelloTimer Linkstate  Uptimenc
ac
carp1   170.85.106.143/25  DOWN   -  master 00:00:00   0
0
carp0   10.209.142.154/25  DOWN   -  master 00:00:00   0
0

And the OSPF cloud, indeed does not think that there is a valid route to
the 170 network, which is the inside net.

What am I doing wrong, here?



-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?



Re: x11 install

2009-11-30 Thread Stuart Henderson
On 2009-11-30, sophy life sophy.a...@gmail.com wrote:
 Hello it is sophy.



 Though postfix was installed from ports
 The installation was not able to be normalized according to the
 following messages.

 python-2.5.4 uses X11, but /usr/X11R6 not found.

 Python is output to the same message as the installation side.

 X11, but /usr/X11R6 not found.

 How should be installed an insufficient thing?



http://www.openbsd.org/faq/faq4.html#AddFileSet



Re: carp and ospf issue

2009-11-30 Thread Jussi Peltola
This works for me:
# NB: if a carp address is the lowest IP you will get duplicate
# router-id's - maybe ospfd should ignore CARP interfaces when selecting
# the host id?

router-id 1.2.3.4 

area 0.0.0.0 {
interface gif0 { } # link to another site
interface gif1 { } # link to  another site
# ...
interface vr1  { } # link to CARP peer
interface carp1 { passive }
interface carp2 { passive }
interface carp3 { passive }
}
 
OSPF doesn't work over CARP interfaces. You need to connect to the rest
of the OSPF cloud over real interfaces, and the CARP-connected
networks should be stub networks where your actual hosts live. And CARP
interfaces must be passive.



Re: x11 install

2009-11-30 Thread Chris Bennett

sophy life wrote:

Thank you for the answer.


4.5 use of the version of OpenBSD.

X packages is not installed from the beginning.


  

You will need to install the X packages
See http://www.openbsd.org/faq/faq4.html#AddFileSet

Just don't choose to add anything other than the x* stuff and all will 
be okay.

Or you can download all of them and use tar and ldconfig

I strongly suggest that you read the entire FAQ.
Even if you don't understand it all.

--
A human being should be able to change a diaper, plan an invasion,
butcher a hog, conn a ship, design a building, write a sonnet, balance
accounts, build a wall, set a bone, comfort the dying, take orders,
give orders, cooperate, act alone, solve equations, analyze a new
problem, pitch manure, program a computer, cook a tasty meal, fight
efficiently, die gallantly. Specialization is for insects.
  -- Robert Heinlein



Re: carp and ospf issue

2009-11-30 Thread stan
On Mon, Nov 30, 2009 at 02:44:08PM +0200, Jussi Peltola wrote:
 This works for me:
 # NB: if a carp address is the lowest IP you will get duplicate
 # router-id's - maybe ospfd should ignore CARP interfaces when selecting
 # the host id?
 
 router-id 1.2.3.4 
 
 area 0.0.0.0 {
 interface gif0 { } # link to another site
 interface gif1 { } # link to  another site
 # ...
   interface vr1  { } # link to CARP peer
 interface carp1 { passive }
 interface carp2 { passive }
 interface carp3 { passive }
 }
  
 OSPF doesn't work over CARP interfaces. You need to connect to the rest
 of the OSPF cloud over real interfaces, and the CARP-connected
 networks should be stub networks where your actual hosts live. And CARP
 interfaces must be passive.
 
Sorry, I am still confused here. What I have is a pair of machines, each
machine has 3 physical interfaces. On each machine one is for the inside
network, one is for the outside network, and one is for phsync. The
inside network is a single subnet, and does not need to see OSPF routing,
as all of it's machines have a static default route to the CARP'd inside
interface. Both the inside and outside interfaces on both machines have
an equiv. CARP interface. So, there are 3 outside IP addresses. the CARP
address, and an individual address for the outside interface on each
machine. 

In a perfect world, the advertised OSPF route would be the CARP'd IP
address. What can't happen is to have the machines both advertise their
real physical interface addresses as duplicate routes to the inside
network, right? And what happens at failover, if the advertised route is
not that of the CARP interface?

What am I misunderstanding here?

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?



Re: Odd CARP issue with 4.6

2009-11-30 Thread Otto Moerbeek
On Thu, Nov 26, 2009 at 03:56:37PM +0100, Henning Brauer wrote:

 * Derek Buttineau de...@csolve.net [2009-11-26 15:07]:
  On 2009-11-25, at 6:23 PM, Henning Brauer wrote:
  
   check ifconfig -g carp on both
  
  
  Right now both are at:
  
  carp: carp demote count 0
  
  However, I did check that before I rebooted the backup unit and the master 
  was
  set to
  
  carp: carp demote count 1
  
  At first I thought that maybe pfsync was keeping the master from reverting
  while it synced state, but even after 24 hours the master hadn't taken back
  over from the slave.
 
 the one with the higher demote count always loses, regardless of
 advskew. now finding out which subsytem set the demote count might be
 nintrivial. pfsync is in the game, so is rc, and, depending on
 configuration, various daemons like bgpd and ospfd.

What I have observed on a 4.6 firewall pair:

Thge demote count stays on 1 for a while because the first bulk state
update request times out. Only the subsequent one succeeds. The timeout
is 20s by default, but grows if you have a larger max state number. 

The analysis is that the pfsync code triggers a bulk request on
the BSIOCSETPFSYNC ioctl, but at that moment the interface is not yet
up, the SIOCSIFFLAGS is done after that.

This happens if you have a line in hostname.pfsync0 like:

up syncif itf0

This gets rewritten by /etc/netstart, moving the up to the end.

A workaround (until dlg@ or somebody else finds a real fix) is to have
a newline after up, so that two ifconfig commands are issued by
netstart, one to up the interface, and next to set the syncif:

up
syncif itf0


-Otto



Re: Odd CARP issue with 4.6

2009-11-30 Thread Michiel van Baak
On 17:17, Mon 30 Nov 09, Otto Moerbeek wrote:
 On Thu, Nov 26, 2009 at 03:56:37PM +0100, Henning Brauer wrote:
 
  * Derek Buttineau de...@csolve.net [2009-11-26 15:07]:
   On 2009-11-25, at 6:23 PM, Henning Brauer wrote:
   
check ifconfig -g carp on both
   
   
   Right now both are at:
   
   carp: carp demote count 0
   
   However, I did check that before I rebooted the backup unit and the 
   master was
   set to
   
   carp: carp demote count 1
   
   At first I thought that maybe pfsync was keeping the master from reverting
   while it synced state, but even after 24 hours the master hadn't taken 
   back
   over from the slave.
  
  the one with the higher demote count always loses, regardless of
  advskew. now finding out which subsytem set the demote count might be
  nintrivial. pfsync is in the game, so is rc, and, depending on
  configuration, various daemons like bgpd and ospfd.
 
 What I have observed on a 4.6 firewall pair:
 
 Thge demote count stays on 1 for a while because the first bulk state
 update request times out. Only the subsequent one succeeds. The timeout
 is 20s by default, but grows if you have a larger max state number. 
 
 The analysis is that the pfsync code triggers a bulk request on
 the BSIOCSETPFSYNC ioctl, but at that moment the interface is not yet
 up, the SIOCSIFFLAGS is done after that.
 
 This happens if you have a line in hostname.pfsync0 like:
 
   up syncif itf0
 
 This gets rewritten by /etc/netstart, moving the up to the end.
 
 A workaround (until dlg@ or somebody else finds a real fix) is to have
 a newline after up, so that two ifconfig commands are issued by
 netstart, one to up the interface, and next to set the syncif:
 
   up
   syncif itf0

Thanks!
This is exactly what happens on our setup, and your workaround is
working great.

Cheers
-- 

Michiel van Baak
mich...@vanbaak.eu
http://michiel.vanbaak.eu
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x71C946BD

Why is it drug addicts and computer aficionados are both called users?



Re: bgplg failed only from web not from CLI

2009-11-30 Thread Alexander Hall
~Lst wrote:

 Well gentlemen...
 Right now, it looks like my bgplg has been running well, because of my
 mistake that is the running of bgpd_flags in two places.
 
 1. The bgpd_flags that is running via /etc/rc.conf.local
 (bgpd_flags=-r /var/www/logs/bgpd.rsock - exactly like described in
 the man pages).
 2. Had been running too in /etc/rc.conf (bgpd_flags=).

None of the above starts the daemon per se. They only tell the rc
scripts that you want to run the daemon, and how. The entry in
rc.conf.local overrides the one in rc.conf.

If your problem is solved, fine. I just do not think that what you
describe above would cause any problems, unless what you wanted was the
setting in rc.conf.

disclaimer: Comments applies only to the part inlined above. I did not
read the entire thread very thoroughly.

/Alexander

 Thanks for your kindly help, wasting your time and lot of patience
 spare around here.
 
 
 Rgds,
 --
 ~Lst



How to tweak the limit of RAM for a daemon started by a user?

2009-11-30 Thread Matthew Young
Hello,

Ive been reading at man login.conf and specifically the parameters for
  memoryuse . I have raised these for 1024MB for the specific user in
question as per blow


console:\
:ignorenologin:\
:datasize=infinity:\
:maxproc=infinity:\
:memoryuse=1024
:openfiles-cur=128:\
:stacksize-cur=8M:\
:localcipher=blowfish,8:\
:tc=default:

However, when it starts up it complains its unable to allocate more
then 512 of memory. even if I start it as root it gives the same
result.

What is the best way to debug this, and am  raising the memory
allocation correctly so that the user can run a daemon that can use
1GB of ram?

Thank you

Matt



Re: squid + squidclamav + squidGuard[Zombie].

2009-11-30 Thread Alessandro Baggi

John E.P. Hynes wrote:
Anyone has idea about this problem? It's a squidguard or squidclamav 
problem?
I've had the same problem, except I also get in the logs /bsd: file: 
table is full


Try sysctl kern.nfiles or pstat -T to see how many open file 
descriptors you have.  With either redirector, but not both, I end up 
with a sane amount (300-400 in my installation) but 3-4k with both, 
and setting kern.maxfiles to 32768 or some really high number seems 
only to slightly delay this.


-John




Hi john! thanks for the reply. I've tried another time, after 7/10 hours 
squidGuard processes become zombie...and the number of fd opened was 
567, after the zombing the number is 314... another issue?



thanks in advance.



Re: How to tweak the limit of RAM for a daemon started by a user?

2009-11-30 Thread Otto Moerbeek
On Mon, Nov 30, 2009 at 11:55:09AM -0600, Matthew Young wrote:

 Hello,
 
 Ive been reading at man login.conf and specifically the parameters for
   memoryuse . I have raised these for 1024MB for the specific user in
 question as per blow
 
 
 console:\
 :ignorenologin:\
 :datasize=infinity:\
 :maxproc=infinity:\
 :memoryuse=1024
 :openfiles-cur=128:\
 :stacksize-cur=8M:\
 :localcipher=blowfish,8:\
 :tc=default:
 
 However, when it starts up it complains its unable to allocate more
 then 512 of memory. even if I start it as root it gives the same
 result.
 
 What is the best way to debug this, and am  raising the memory
 allocation correctly so that the user can run a daemon that can use
 1GB of ram?

memoryuse only limits the amount of memory in core. datasize if the
paramater you are looking for.

First thing you want to check is if the user actually is in the
proper login class, see userinfo(8).

-Otto



df - du discrepancy

2009-11-30 Thread Charlie Farinella
I have an OpenBSD 4.4 machine running just a few things;
OSSEC, named and openvpn.

After it's been up for a few weeks I start seeing discrepancies between what df 
tells me is free space and how much space du reports as being used.  A few 
weeks ago I got 'disk full' errors and rebooted the thing which solved it for 
the moment, but not permanently.

Here is an example of what I'm seeing:

# df -h
Filesystem SizeUsed   Avail Capacity  Mounted on
/dev/sd0a  3.6G1.1G2.3G32%/

# du -sh *
2.0Kaltroot
4.5Mbin
44.0K   boot
6.6Mbsd
5.3Mbsd.rd
38.0K   dev
2.8Metc
94.0K   home
2.0Kipp.txt
6.0Klost+found
2.0Kmnt
2.0Kopenvpn-status.log
78.0K   root
10.7M   sbin
2.0Kstand
0B  sys
2.0Ktmp
505Musr
10.2M   var

This looks to me like there is a discrepancy of several hundred megabytes and 
each day I get an approximate 1% increase in the df used report.  How can I 
find out what's using this space and how can I prevent it?

thanks,

-- 
Charles Farinella
Appropriate Solutions, Inc.
603.924.6079



Re: df - du discrepancy

2009-11-30 Thread Theo de Raadt
 After it's been up for a few weeks I start seeing discrepancies
 between what df tells me is free space and how much space du reports
 as being used.  A few weeks ago I got 'disk full' errors and rebooted
 the thing which solved it for the moment, but not permanently.

From the newfs manual page:

 -m free-space
 The percentage of space reserved from normal users; the mini-
 mum free space threshold.  The default value used is 5%.  See
 tunefs(8) for more details on how to set this option.



Re: [PATCH] Fix interrupt handling in ral(4) for RT2661 under load

2009-11-30 Thread Roland Dreier
Hi Damien / OpenBSD devs,

Did anyone get a chance to look at this diff?  These fixes are the
difference for me between ral being usable as an AP and getting stuck
almost immediately under heavy load.  Is there anything I need to do
to get this committed?

Thanks,
  Roland



changing network configuration at different places

2009-11-30 Thread Moritz Herrmann

Hello misc,
I am using OBSD on my Laptop and as I use internet
connections at different places (home, work, university),
I always have to change my ip-adress and default route after startup.
To ease the pain a littlebit
I wrote three scripts that I run manually after startup:
#bin/sh
route delete default
ifconfig em0 inet 192.168.0.44 netmask 255.255.255.0
route add default 192.168.0.1

This works quite well, but I am getting tired of doing this 10 times a day,
so I reread the ifconfig manual and found the alias function.
I managed to add two aliases for my NIC, but still I have to configure the
default route every time.

Is there a way to add permanent default routes, so that the system 
automatically

uses the suitable gateway for the current subnet?

I tried something like route add 192.168.100.0/24 192.168.0.1, but it 
doesn't work.


Thank you in advance

Moritz



Re: df - du discrepancy

2009-11-30 Thread Otto Moerbeek
On Mon, Nov 30, 2009 at 11:41:34AM -0700, Theo de Raadt wrote:

  After it's been up for a few weeks I start seeing discrepancies
  between what df tells me is free space and how much space du reports
  as being used.  A few weeks ago I got 'disk full' errors and rebooted
  the thing which solved it for the moment, but not permanently.
 
 From the newfs manual page:
 
  -m free-space
  The percentage of space reserved from normal users; the mini-
  mum free space threshold.  The default value used is 5%.  See
  tunefs(8) for more details on how to set this option.

That is one source of lost space that isn't really lost. Another one
is a file that is removed but still open by a program. Those bytes
will only be reclaimed once the program closes its file descriptor.
fstat(8) can be used to hunt the file and the offending program.

-Otto



Re: [PATCH] Fix interrupt handling in ral(4) for RT2661 under load

2009-11-30 Thread viq
On Mon, Nov 30, 2009 at 10:56:29AM -0800, Roland Dreier wrote:
 Hi Damien / OpenBSD devs,

 Did anyone get a chance to look at this diff?  These fixes are the
 difference for me between ral being usable as an AP and getting stuck
 almost immediately under heavy load.  Is there anything I need to do
 to get this committed?

 Thanks,
   Roland

Does it do anything for 2860? I have that as an AP now and every once in
a while it stops working, I need to restart the interface.
--
viq

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: changing network configuration at different places

2009-11-30 Thread Bret S. Lambert
On Mon, Nov 30, 2009 at 09:16:47PM +0100, Moritz Herrmann wrote:
 Hello misc,
 I am using OBSD on my Laptop and as I use internet
 connections at different places (home, work, university),
 I always have to change my ip-adress and default route after startup.
 To ease the pain a littlebit
 I wrote three scripts that I run manually after startup:
 #bin/sh
 route delete default
 ifconfig em0 inet 192.168.0.44 netmask 255.255.255.0
 route add default 192.168.0.1
 
 This works quite well, but I am getting tired of doing this 10 times a day,
 so I reread the ifconfig manual and found the alias function.
 I managed to add two aliases for my NIC, but still I have to configure the
 default route every time.
 
 Is there a way to add permanent default routes, so that the system
 automatically
 uses the suitable gateway for the current subnet?

I'm pretty sure you're SOL on that, but you could give your script some
smarts and have it pull the default route from a file (I'm assuming
your potential universe of static routes is tiny) and do the
jiggery-pokery automagically.

IIRC, there was something on Undeadly lo these many moons ago which
did more or less that.

 
 I tried something like route add 192.168.100.0/24 192.168.0.1, but
 it doesn't work.
 
 Thank you in advance
 
 Moritz



Re: How to tweak the limit of RAM for a daemon started by a user?

2009-11-30 Thread Joachim Schipper
On Mon, Nov 30, 2009 at 11:55:09AM -0600, Matthew Young wrote:
 Hello,
 
 Ive been reading at man login.conf and specifically the parameters for
   memoryuse . I have raised these for 1024MB for the specific user in
 question as per blow
 
 
 console:\
 :ignorenologin:\
 :datasize=infinity:\
 :maxproc=infinity:\
 :memoryuse=1024
 ^^^
 :openfiles-cur=128:\
 :stacksize-cur=8M:\
 :localcipher=blowfish,8:\
 :tc=default:
 
 However, when it starts up it complains its unable to allocate more
 then 512 of memory. even if I start it as root it gives the same
 result.

In addition to Otto's comments, you are missing M:\ here.

Joachim



snmpd(8) - configuration

2009-11-30 Thread Farid Joubbi
Hi,

I have two questions about the snmpd base:

1. Is there a way to disable the write community? I do not want to
have snmp write enabled at all.

2. Is it possible to restrict snmp reads based on source address? I
want to allow snmp read from only one single machine.
(I know that I could do this with pf)


Thanks,
Farid



Re: [PATCH] Fix interrupt handling in ral(4) for RT2661 under load

2009-11-30 Thread Stuart Henderson
On 2009/11/30 20:33, viq wrote:
 On Mon, Nov 30, 2009 at 10:56:29AM -0800, Roland Dreier wrote:
  Hi Damien / OpenBSD devs,
 
  Did anyone get a chance to look at this diff?  These fixes are the
  difference for me between ral being usable as an AP and getting stuck
  almost immediately under heavy load.  Is there anything I need to do
  to get this committed?
 
  Thanks,
Roland
 
 Does it do anything for 2860? I have that as an AP now and every once in
 a while it stops working, I need to restart the interface.

It doesn't, it is separate code.



Re: bgplg failed only from web not from CLI

2009-11-30 Thread ~Lst
On Tue, Dec 1, 2009 at 12:10 AM, Alexander Hall alexan...@beard.se wrote:
 ~Lst wrote:

 Well gentlemen...
 Right now, it looks like my bgplg has been running well, because of my
 mistake that is the running of bgpd_flags in two places.

 1. The bgpd_flags that is running via /etc/rc.conf.local
 (bgpd_flags=-r /var/www/logs/bgpd.rsock - exactly like described in
 the man pages).
 2. Had been running too in /etc/rc.conf (bgpd_flags=).

 None of the above starts the daemon per se. They only tell the rc
 scripts that you want to run the daemon, and how. The entry in
 rc.conf.local overrides the one in rc.conf.

 If your problem is solved, fine. I just do not think that what you
 describe above would cause any problems, unless what you wanted was the
 setting in rc.conf.


Yup, you're right. I just don't realized that I'd been already started
the socket through the rc.conf.
It might be a `mistake' for a newbie like me, if you want to running
one thing in rc.conf.local it overrides the one in rc.conf.
Thanks.


Rgds,
--
~Lst



Loja21 - Actualização de Base de Dados / Database Update

2009-11-30 Thread Loja21 - Os gadgets mais incríveis!
www.loja21.pt|   ap...@loja21.pt
912519194 / 217272392



Re: changing network configuration at different places

2009-11-30 Thread Daniele Pilenga
On Mon, Nov 30, 2009 at 9:16 PM, Moritz Herrmann
herrmann.mor...@gmail.com wrote:
 Hello misc,
 I am using OBSD on my Laptop and as I use internet
 connections at different places (home, work, university),
 I always have to change my ip-adress and default route after startup.

I had the same problem and as I'm not in charge of the dhcp server anymore
(for a static assignment), I used a feature of dhclient(8): static leases.

In my dhclient.conf(5) I have this:

lease {
  fixed-address 172.16.123.222;
  option subnet-mask 255.255.255.0;
  option routers 172.16.123.1;
  option domain-name-servers 172.16.1.1;
  option domain-name example.com;
  renew 0 2012/12/31 23:59:59;
  rebind 0 2012/12/31 23:59:59;
  expire 0 2012/12/31 23:59:59;
}

This way, when I am in the 172.16.123/24 subnet, without a dhcp server
(or with a
reject clause in dhclient.conf), dhclient tries this lease and, if
it works, it is used.

You can have one for every network you connect to. Of course it is
simpler if those
network do not share the same characteristics... :-)

HTH.

Ciao,
D.



Re: bgplg failed only from web not from CLI

2009-11-30 Thread Stuart Henderson
On 2009-11-30, ~Lst slack...@gmail.com wrote:
 On Tue, Dec 1, 2009 at 12:10 AM, Alexander Hall alexan...@beard.se wrote:
 ~Lst wrote:

 Well gentlemen...
 Right now, it looks like my bgplg has been running well, because of my
 mistake that is the running of bgpd_flags in two places.

 1. The bgpd_flags that is running via /etc/rc.conf.local
 (bgpd_flags=-r /var/www/logs/bgpd.rsock - exactly like described in
 the man pages).
 2. Had been running too in /etc/rc.conf (bgpd_flags=).

 None of the above starts the daemon per se. They only tell the rc
 scripts that you want to run the daemon, and how. The entry in
 rc.conf.local overrides the one in rc.conf.

 If your problem is solved, fine. I just do not think that what you
 describe above would cause any problems, unless what you wanted was the
 setting in rc.conf.


 Yup, you're right. I just don't realized that I'd been already started
 the socket through the rc.conf.
 It might be a `mistake' for a newbie like me, if you want to running
 one thing in rc.conf.local it overrides the one in rc.conf.

treat rc.conf as a part of the OS, not a user config file - you should
leave it alone (except to upgrade it with the rest of the OS).

if you want to make any changes, copy the relevant lines to rc.conf.local
and edit as required.



Re: changing network configuration at different places

2009-11-30 Thread stan
On Mon, Nov 30, 2009 at 09:16:47PM +0100, Moritz Herrmann wrote:
 Hello misc,
 I am using OBSD on my Laptop and as I use internet
 connections at different places (home, work, university),
 I always have to change my ip-adress and default route after startup.
 To ease the pain a littlebit
 I wrote three scripts that I run manually after startup:
 #bin/sh
 route delete default
 ifconfig em0 inet 192.168.0.44 netmask 255.255.255.0
 route add default 192.168.0.1
 
 This works quite well, but I am getting tired of doing this 10 times a day,
 so I reread the ifconfig manual and found the alias function.
 I managed to add two aliases for my NIC, but still I have to configure the
 default route every time.
 
 Is there a way to add permanent default routes, so that the system 
 automatically
 uses the suitable gateway for the current subnet?
 
A long time agao, on a machine far away. I wrote a script that tried to
ping the default route for all of the networks I atached it to, and then
set up things for the network it was atached to, once it used this to
figure out which one it was one.

Worked well, but was a bit slow, as it had to wait for the pings to time
out.

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?



Re: carp and ospf issue

2009-11-30 Thread Jussi Peltola
Not knowing your network I can only guess you don't want to mix carp and
OSPF on the outside interfaces. OSPF will handle the fail-over.

CARP interfaces listed in ospfd.conf as passive will just work and get
advertised in OSPF when they are master.

You probably don't want redistribute connected; this will cause the
carp physical interface's route to be advertised even when the carp
interface is backup.



Re: carp and ospf issue

2009-11-30 Thread Stuart Henderson
On 2009-11-30, stan st...@panix.com wrote:
 Sorry, I am still confused here. What I have is a pair of machines, each
 machine has 3 physical interfaces. On each machine one is for the inside
 network, one is for the outside network, and one is for phsync. The
 inside network is a single subnet, and does not need to see OSPF routing,
 as all of it's machines have a static default route to the CARP'd inside
 interface.

so use interface carpXX { passive } for this one...

 Both the inside and outside interfaces on both machines have
 an equiv. CARP interface. So, there are 3 outside IP addresses. the CARP
 address, and an individual address for the outside interface on each
 machine. 

...and use the real interfaces for these, not the carp ones.
You shouldn't need carp on the outside interfaces.

 What can't happen is to have the machines both advertise their
 real physical interface addresses as duplicate routes to the inside
 network, right?

In 4.6 and earlier, only the carp master advertises the inside network.

In -current, both master and backup announce it, master with a low metric
so it's preferred, backup with a high metric. so the route isn't normally
used but it isn't totally lost when the routers failover.



A doinde reunimos al peloton,,, Mision la Muralla es la opcion

2009-11-30 Thread Mision La Muralla
En caso de no poder ver correctamente este correo favor de dar clic aqum

 
Este mensaje fue enviado para informacisn de nuestras promociones.  No 
pretendemos saturar su correo ni causarle molestias. Este mensaje de correo 
electrsnico no se considera SPAM, ya que cumple con lo establecido en el 
capmtulo VIII BIS de los lineamientos sobre comercio electrsnico publicados por 
la PROFECO, ademas de contener instrucciones y una forma electrsnica para 
notificar y solicitar la cancelacisn de su envmo y no continuar recibiindolo.   
  Si no desea recibir en un futuro estos mensajes favor de hacer clic en ( 
unsuscr...@pqstravel.com ) y sera removido de nuestra lista en 72 horas.  Si 
desea hacer llegar esta informacisn a otros agentes de viajes o particular,  
proporcisnenos sus direccisn de correo electrsnico HAGA CLIC AQUM  o envme sus 
sugerencias. Si desea informacisn sobre nuestros servios, contactenos a 
m...@pqstravel.com



Re: softraid RAID1 rebuild

2009-11-30 Thread Markus Bergkvist

Thanks. Worked like a charm.

/Markus

Marco Peereboom wrote:

since it is softraid you use the sd entry.

like bioctl -R /dev/sd3a sd2

On Sat, Nov 21, 2009 at 01:53:50AM +0100, Markus Bergkvist wrote:

Hi

I had to replace one of the drives in a softraid raid level 1 setup. 
How do I kick off a rebuild? This is apparently not the correct way, or 
something else is broken here...


# bioctl -c 1 -l /dev/sd0a,/dev/sd1a softraid0
# bioctl -ih 
softraid0 
Volume  Status   Size Device  
softraid0 0 Degraded 190G sd2 RAID1

  0 Online   190G 0:0.0   noencl sd0a
  1 Offline0B 0:1.0   noencl sd1a
# bioctl -R 0:0.0 
sd1a 
bioctl: BIOCINQ: Inappropriate ioctl for device


OpenBSD 4.6-current (GENERIC) #386: Thu Nov 19 12:17:55 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC

/Markus




IPSec Blues

2009-11-30 Thread Aaron Mason
Hi all,

I've been looking to mess around with IPSec for quite some time now,
and sadly all I've had is perpetual failure.

I found this guide - http://www.securityfocus.com/infocus/1859 - and
followed it apart from the NAT bits.  When the two endpoints try to
talk, they fall over in a heap.

The systems in use are both VMware VMs with three host-only networks -
one each for the local network and one for both to use as an
external network.

What I hope to achieve is this:

Host-only
(192.168.120.0/24)
   /|\
|
   \|/
 obsd-ipsec-left
(192.168.120.130/
  10.255.255.5)
   /|\
|
   \|/
 10.255.255.0/30
   /|\
|
   \|/
 obsd-ipsec-right
  (192.168.33.7/
  10.255.255.6)
   /|\
|
   \|/
Host-only
 (192.168.33.0/24)

After I ran isakmpd -K -d and used ipsecctl to set the config up, I
got these messages:

obsd-ipsec-left:
210739.768482 Default message_parse_payloads: reserved field non-zero: c9
210739.770193 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210739.60 Default message_parse_payloads: reserved field non-zero: b
210739.779268 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210739.801533 Default message_parse_payloads: reserved field non-zero: fc
210739.802865 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210746.767433 Default message_parse_payloads: reserved field non-zero: c9
210746.769181 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210746.772014 Default message_parse_payloads: reserved field non-zero: b
210746.773250 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210746.806677 Default message_parse_payloads: reserved field non-zero: fc
210746.807830 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210755.815875 Default message_parse_payloads: reserved field non-zero: c9
210755.817366 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210755.820174 Default message_parse_payloads: reserved field non-zero: b
210755.821603 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210755.857385 Default message_parse_payloads: reserved field non-zero: fc
210755.858449 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210806.813902 Default message_parse_payloads: reserved field non-zero: c9
210806.815241 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210806.817721 Default message_parse_payloads: reserved field non-zero: b
210806.819338 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED
210806.854645 Default message_parse_payloads: reserved field non-zero: fc
210806.856265 Default dropped message from 10.255.255.6 port 500 due
to notification type PAYLOAD_MALFORMED

obsd-ipsec-right:
210720.707482 Default responder_recv_HASH_SA_NONCE: peer proposed
invalid phase 2 IDs: initiator id 192.168.120.0/255.255.255.0,
responder id 192.168.33.0/255.255.255.0
210720.711177 Default dropped message from 10.255.255.5 port 500 due
to notification type INVALID_ID_INFORMATION
210720.714730 Default responder_recv_HASH_SA_NONCE: peer proposed
invalid phase 2 IDs: initiator id 10.255.255.5, responder id
192.168.33.0/255.255.255.0
210720.718172 Default dropped message from 10.255.255.5 port 500 due
to notification type INVALID_ID_INFORMATION
210720.721666 Default responder_recv_HASH_SA_NONCE: peer proposed
invalid phase 2 IDs: initiator id 10.255.255.5, responder id
10.255.255.6
210720.724001 Default dropped message from 10.255.255.5 port 500 due
to notification type INVALID_ID_INFORMATION
210727.752507 Default responder_recv_HASH_SA_NONCE: KEY_EXCH payload
without a group desc. attribute
210727.754909 Default dropped message from 10.255.255.5 port 500 due
to notification type NO_PROPOSAL_CHOSEN
210727.766740 Default responder_recv_HASH_SA_NONCE: KEY_EXCH payload
without a group desc. attribute
210727.768953 Default dropped message from 10.255.255.5 port 500 due
to notification type NO_PROPOSAL_CHOSEN
210727.798642 Default responder_recv_HASH_SA_NONCE: KEY_EXCH payload
without a group desc. attribute
210727.800977 Default dropped message from 10.255.255.5 port 500 due
to notification type NO_PROPOSAL_CHOSEN
210754.807254 Default transport_send_messages: giving up on exchange
from-192.168.33.0/24-to-192.168.120.0/24, no response from peer
10.255.255.5:500
210754.810248 Default transport_send_messages: giving up on exchange
from-192.168.33.0/24-to-192.168.120.0/24, no response from peer
10.255.255.5:500
210754.847582 Default transport_send_messages: giving up on exchange
from-10.255.255.6-to-10.255.255.5, no response from peer
10.255.255.5:500

The listing of ipsec.conf 

Re: Problem installing 4.6 on Toshiba Libretto 70CT

2009-11-30 Thread Fred Crowson
On 11/29/09, Stuart Henderson s...@spacehopper.org wrote:
 Here is the set of files involved with this commit;
 http://anoncvs.estpak.ee/cgi-bin/cgit/openbsd-src/commit/?id=7ca5b93e36fc8d27fe992c1deb942debc710aeea

 Note that you will also need to revert the change to the kernel
 configuration file.

 (Thanks Rivo for the useful things you run on your anoncvs mirror :-)

Hi Stuart,

Thanks for the link - I spent the weekend building kernels - but I've
not got it past 4.3-current as of 3 Apr 08 :~(

Hopefully this weekend coming I'll get round to get the libretto to
boot a new kernel.

Fred



ftp.lambdaserver.com

2009-11-30 Thread Neal Hogan
Hello,

I am the maintainer of the new oBSD mirror, ftp.lambdaserver.com
(Chicago), and I'm experiencing the proverbial technical
difficulties. Basically, the power cord to my modem fried (after 2+
years) and I'm awaiting a replacement (+ one). The ISP hassle is in
progress and I welcome any suggestions to avoid the di-opoly
(att/comcast) BS.

Thanks for your patience and I promise to keep such situations to a
minimum, in the future (live-n-learn). Please be assured that I am
committed to maintaining a stable mirror.

-Neal



Re: [PATCH] Fix interrupt handling in ral(4) for RT2661 under load

2009-11-30 Thread Roland Dreier
  Does it do anything for 2860? I have that as an AP now and every once in
  a while it stops working, I need to restart the interface.

No, the driver code is a completely different C file.  It's possible
there are analogous bugs for 2860 though, since the hardware and
driver are both closely related to 2661.

 - R.



Re: IPSec Blues

2009-11-30 Thread Aaron Mason
On Tue, Dec 1, 2009 at 10:28 AM, Aaron Mason simplersolut...@gmail.com
wrote:
 Hi all,

 I've been looking to mess around with IPSec for quite some time now,
 and sadly all I've had is perpetual failure.

 I found this guide - http://www.securityfocus.com/infocus/1859 - and
 followed it apart from the NAT bits.  When the two endpoints try to
 talk, they fall over in a heap.

 The systems in use are both VMware VMs with three host-only networks -
 one each for the local network and one for both to use as an
 external network.

 What I hope to achieve is this:

Host-only
 (192.168.120.0/24)
   /|\
|
   \|/
  obsd-ipsec-left
 (192.168.120.130/
  10.255.255.5)
   /|\
|
   \|/
  10.255.255.0/30
   /|\
|
   \|/
  obsd-ipsec-right
  (192.168.33.7/
  10.255.255.6)
   /|\
|
   \|/
Host-only
  (192.168.33.0/24)

 After I ran isakmpd -K -d and used ipsecctl to set the config up, I
 got these messages:

 snip

 The listing of ipsec.conf is as follows:

 obsd-ipsec-left:
 ike esp from 192.168.120.0/24 to 192.168.33.0/24 peer 10.255.255.6
 ike esp from 10.255.255.5 to 192.168.33.0/24 peer 10.255.255.6
 ike esp from 10.255.255.5 to 10.255.255.6

 obsd-ipsec-right:
 ike esp from 192.168.33.0/24 to 192.168.120.0/24 peer 10.255.255.5
 ike esp from 10.255.255.6 to 192.168.120.0/24 peer 10.255.255.5
 ike esp from 10.255.255.6 to 10.255.255.5

 ifconfig on each side:

 obsd-ipsec-left# ifconfig
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33200
priority: 0
groups: lo
inet 127.0.0.1 netmask 0xff00
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
 vic0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:0c:29:f6:20:76
priority: 0
media: Ethernet autoselect
status: active
inet6 fe80::20c:29ff:fef6:2076%vic0 prefixlen 64 scopeid 0x1
inet 192.168.120.130 netmask 0xff00 broadcast 192.168.120.255
 vic1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:0c:29:f6:20:80
priority: 0
media: Ethernet autoselect
status: active
inet 10.255.255.5 netmask 0xfffc broadcast 10.255.255.7
inet6 fe80::20c:29ff:fef6:2080%vic1 prefixlen 64 scopeid 0x2
 enc0: flags=0 mtu 1536
priority: 0
 pflog0: flags=141UP,RUNNING,PROMISC mtu 33200
priority: 0
groups: pflog

 obsd-ipsec-right# ifconfig
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33200
priority: 0
groups: lo
inet 127.0.0.1 netmask 0xff00
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
 vic0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:0c:29:e1:29:22
priority: 0
media: Ethernet autoselect
status: active
inet6 fe80::20c:29ff:fee1:2922%vic0 prefixlen 64 scopeid 0x1
inet 192.168.33.7 netmask 0xff00 broadcast 192.168.33.255
 vic1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:0c:29:e1:29:2c
priority: 0
media: Ethernet autoselect
status: active
inet 10.255.255.6 netmask 0xfffc broadcast 10.255.255.7
inet6 fe80::20c:29ff:fee1:292c%vic1 prefixlen 64 scopeid 0x2
 enc0: flags=0 mtu 1536
priority: 0
 pflog0: flags=141UP,RUNNING,PROMISC mtu 33200
priority: 0
groups: pflog


 pf.conf is the standard one on both sides.

 Any ideas? Both sides run OpenBSD 4.6 release and this was done on a
 fresh install with only bsd{,.rd}, base and etc.

 --
 Aaron Mason - Programmer, open source addict
 I've taken my software vows - for beta or for worse


Ok, I just reread the setup and realised that I set up both sides in
active mode...

I'll reopen this thread when I get my head together -.-

--
Aaron Mason - Programmer, open source addict
I've taken my software vows - for beta or for worse



Experimenting with softraid encryption

2009-11-30 Thread Brad Tilley
I wrote some notes about installing and experimenting with softraid
encryption on laptops. I was wondering if misc would have a read and
perhaps make suggestions or corrections to my approach? I appreciate
any feedback.

http://16systems.com/openbsd_softraid_encryption.txt

Brad



Re: ftp.lambdaserver.com

2009-11-30 Thread Neal Hogan
On Mon, Nov 30, 2009 at 7:06 PM, Neal Hogan nealho...@gmail.com wrote:
 Hello,

 I am the maintainer of the new oBSD mirror, ftp.lambdaserver.com
 (Chicago), and I'm experiencing the proverbial technical
 difficulties. Basically, the power cord to my modem fried (after 2+
 years) and I'm awaiting a replacement (+ one). The ISP hassle is in
 progress and I welcome any suggestions to avoid the di-opoly
 (att/comcast) BS.

 Thanks for your patience and I promise to keep such situations to a
 minimum, in the future (live-n-learn). Please be assured that I am
 committed to maintaining a stable mirror.

Update . . . our new power cord will be delivered on 12/02/09.

Again, I sincerely apologise for the inconvenience.


 -Neal



Cursos: TDAH y conductas inadecuadas/Metodología

2009-11-30 Thread Psicología Aplicada
IAPSA

Instituto Argentino de Psicologma Aplicada

Si no se muestra correctamente el contenido del mensaje (por ejemplo, si
los acentos estan sustituidos por otros smmbolos) puede ver la
informacisn aqum: www.iapsa.org


Intervenciones no farmacolsgicas en TDAH y en el manejo de conductas
inadecuadas

Dictado por: Dra. Alba Richaudeau (midica especialista en neuropsicologma
infantil) y Lic. Eduardo Iyaca (psicslogo)

Sabado 12 de diciembre, de 9 a 18 horas Jornada de 8 horas, dividida en
dos bloques, con una hora de receso.

Lugar: Ciudad de Buenos Aires

Costo: $230

Informes e inscripcisn: ia...@iapsa.org o TE 4863 3853

Programa:

Bloque 1

Revisisn de modelos actuales sobre la atencisn - Circuitos
neurobiolsgicos implicados en el TDAH - Redes atencionales - Escalas de
comportamiento - Escalas diagnssticas - Evaluacisn neuropsicolsgica:
Pruebas generales y especmficas -Tratamiento cognitivo - Fundamentos de
la rehabilitacisn - Programas de entrenamiento - Planificacisn de
programas - Analisis de los resultados.

Msdulo 1: Aspectos neurobiolsgicos y neuropsicolsgicos de la atencisn (50
min.)

Msdulo 2: Evaluacisn del TDAH (50 min.)

Msdulo 3: Tratamiento cognitivo (2 hs.)

Bloque 2

Taller de manejo de conductas inadecuadas (Tesrico y practico, 4 hs.) Mas
informacisn aqum.

Informes e inscripcisn: ia...@iapsa.org o TE 4863 3853

Se entregaran certificados de asistencia

Metodologma de la investigacisn en diseqos de caso znico


Dictado por: Licenciada Mariana Inis Arismendi, psicsloga. Ver CV

El objetivo del presente curso es proporcionar al terapeuta alternativas
metodolsgicas en la investigacisn de la eficacia de tratamientos e
intervenciones en terapias focalizadas. En el ambito clmnico es
restringido el acceso a grupos de pacientes con problematicas en comzn, y
por ello es infrecuente en nuestro medio la posibilidad de emplear
metodologma de diseqos de grupos en la investigacisn sobre la eficacia de
los tratamientos implementados. El uso de enfoques centrados en casos
znicos o de pocos sujetos (diseqos N=1 o N pequeqo) constituye una
alternativa valida para el estudio experimental del cambio en la terapia.
Mas informacisn aqum.

Dma y horario: Jueves 10 de diciembre, de 18 a 21 horas
Lugar: Ciudad de Buenos Aires

Costo: $70
Se entregaran certificados de asistencia
Informes e inscripcisn: ia...@iapsa.org o TE 4863 3853

-

IAPSA - Instituto Argentino de Psicologma Aplicada
www.iapsa.org | ia...@iapsa.org

Si no desea seguir recibiendo este boletmn puede desuscribirse
automaticamente enviando un mensaje con la palabra desuscribir en el
asunto a desuscri...@iapsa.org



Leiloes online a precos incriveis!!!

2009-11-30 Thread twingle
 NOTA INFORMATIVA: O presente email destina-se znica e exclusivamente a 
informar potenciais utilizadores e nco pode ser considerado SPAM. De acordo com 
a legislagco internacional que regulamenta o correio electrsnico, o email nco 
pode sera ser considerado SPAM quando incluir uma forma do receptor ser 
removido da lista do emissor. 
Se pretender nco receber mais estes emails clique AQUI.



Le vrai Rollup à prix imbattable - Offre temporaire

2009-11-30 Thread Rollup
 Le vrai Rollup




Madame, Monsieur,


Consciente de la volonti des entreprises de relancer leur activiti
commerciale, Rollup Belgium a souhaiti s'associer ` cette dimarche en
proposant une offre exceptionnelle sur ses prix, dij` les plus bas du marchi.


64 eur par rollup ` partir de 6 pihces


Cette offre est limitie dans le temps.
Voir conditions au bas de cette newsletter **.



 Principales caractiristiques

Impression digitale incluse
format de l'image: 85 x 200 cm
housse de transport comprise
upload direct de vos images
jusque 10 images diffirentes par commande



 Rappelez-vous !

Offre limitie dans le temps.


(**) Conditions d'application de cette offre:
Uniquement pour les commandes passies via le site
Uniquement pour les commandes dont les visuels sont chargis via le site
(upload direct)
Date limite de validiti: dimanche 13 dicembre 2009




 Rollup Belgium est une division de VTS s.a.
6041 Gosselies - Belgique
www.rollupbelgium.be

Pour vous disinscrire: envoyer un email avec UNSUBSCRIBE comme sujet `
unsubscr...@vedi.be. Merci



Re: Firefox pegging my CPU

2009-11-30 Thread Dope Ice Apollyon the Third
On Mon, Nov 30, 2009 at 5:02 AM, Jacek Masiulaniec
jac...@dobremiasto.net wrote:

 On Mon, Nov 30, 2009 at 03:08:43AM -0500, Nick Guenther wrote:
 I installed firefox35 on 4.6 and used it happily until yesterday when
 it went crazy. It will still load pages but extremely slowly--to the
 point of being unusable. I deleted my .mozilla directory--no luck. I
 reinstalled it--no luck. I got rid of swfdec--no luck. Here's top(1):

 load averages:  3.57,  3.41,  3.0203:01:56
 62 processes:  60 idle, 2 on processor
 CPU0 states: 24.1% user,  0.0% nice,  4.3% system,  5.9% interrupt, 65.7%
idle
 CPU1 states: 35.9% user,  0.0% nice,  6.4% system,  0.1% interrupt, 57.6%
idle
 Memory: Real: 170M/496M act/tot  Free: 1000M  Swap: 0K/2910M used/tot

   PID USERNAME PRI NICE  SIZE   RES STATE WAIT  TIMECPU
COMMAND
  5413 kousu 630   52M   80M onproc/0  - 3:13 78.76%
 firefox35-bin


 Did you ktrace it?

Nope (though I was considering it) but it's gotten better
mysteriously. Sorry for the noise.

-Nick