Re: Any good/bad experiences on OpenBSD4.6-release Dell R(2|4|6)10 or HP DL320 G6

2010-01-13 Thread a b
Hello J.C. and Marco,

Thank you both for taking the time to reply, very much
appreciated.

Most of my experience with HP stuff has been with the older
DL360 G4s which seem to work great.  But there have been many changes between
then and the G6 series, and I don't have any spare G6s to use for lab
experiments. ;-(





- Original Message 
From: J.C. Roberts
list-...@designtools.org
To: a b rclo...@yahoo.co.uk
Cc: misc@openbsd.org
Sent: Wed, 13 January, 2010 5:53:19
Subject: Re: Any good/bad experiences on
OpenBSD4.6-release  Dell R(2|4|6)10 or HP DL320 G6

On Tue, 12 Jan 2010
20:31:51 + (GMT) a b rclo...@yahoo.co.uk
wrote:

 Hello (again),
 

I'm planning to buy a couple of lower end servers for a PF 
 VPN termination
of a small network.
 
 Does anyone have any comments on OpenBSD

4.6-release on Dell R210/410/610 or HP DL320 G6 ?
 
 Looking back through
the
 archives, it seems people's experiences when using OpenBSD-release on

lower end servers was a bit patchy, although some seemed to resolve
 it by
using -current instead. However there has not been much
 talk recently
(unless I've missed it !) of 4.6 experiences and/or
 more recent servers.

 Looking
 forward to your feedback.
 

In September (i.e. 4.6-current
*after* the roll-up for the release), I
had OpenBSD running on a new Dell T610
at work for a couple of days
before the machine was re-purposed.
Unfortunately, I didn't have the
opportunity to really test much of anything,
and worse, I think I lost
the dmesg before sending it in (a dev will have to
check the dmesg
archive).


-- 
J.C. Roberts



OpenBSD CPU Load Calculation of a Process

2010-01-13 Thread Sebastian Spies
Hi,


I need a method to get the load of a process in percent of cpu time on a
per second basis, just like top on Linux does. Top on OpenBSD seems to
calculate the %cpu like ps. ps(1) states the following:

%cpuAlias: pcpu.  The CPU utilization of the process; this is
 a decaying average over up to a minute of previous (real)
 time.  Since the time base over which this is computed
 varies (since processes may be very young) it is possible
 for the sum of all %cpu fields to exceed 100%.


As I couldn't find something that does the calculation on a per second
basis, I started to write something on my own. For that reason I plan to
look at struct kinfo_proc2 field p_cpticks of libkvm, but this field
gives me some odd values, which I'm unable to interpret. Could you
please comment on the following code?

int main(int argc, char** argv)
{
kvm_t *kd;
struct kinfo_proc2 *info;
int cnt;

if(argc != 2)
{
printf(Please provide pid\n);
exit(1);
}


kd = kvm_open(NULL, NULL, NULL, KVM_NO_FILES, error);
if(!kd)
exit(1);

if(cnt != 1)
{
printf(No process found\n);
exit(1);
}

info = kvm_getproc2(kd, KERN_PROC_PID, atoi(argv[1]),
sizeof(struct kinfo_proc2), cnt);

printf(%x\n,(double)info-p_cpticks);

exit(0);
}

Strange value:

$ for((i=0;i4;i++)); do ./cpucalc 28175 ; done
6
6
6
6


Any help would be appreciated

--
Sebastian Spies  e-mail: sebastian.sp...@de-cix.net

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: problems with emails through pf

2010-01-13 Thread Stuart Henderson
On 2010-01-12, Dirk Mast condo...@gmail.com wrote:
 Dirk Mast wrote:

 Peter N. M. Hansteen wrote:

 the problem went away.  tcpdump output of successful and failing
 connetions would be instructive, along with the actual error messages,
 if any.

 Request to wiki (see those long timestamps), hope this helps_

 Jan 12 23:22:06.181513 PPPoE
 code Session, version 1, type 1, id 0x0580, length 114
 IP: 195.50.140.178.53  x.x.x.x.18336: 26867 2/0/1 CNAME
 rr.esams.wikimedia.org., A 91.198.174.2 (84)
 Jan 12 23:22:06.184287 PPPoE
 code Session, version 1, type 1, id 0x0580, length 62
 IP: x.x.x.x.51519  91.198.174.2.80: S 126511392:126511392(0) win
 5840 mss 1460,sackOK,timestamp 6393340 0,nop,wscale 7 (DF)


Your 'match in all scrub (no-df max-mss 1440)' is not affecting
the mss on these packets, take a close look at your ruleset to try
and work out why, though it might be as simple as removing 'in'..


 Peter N. M. Hansteen wrote:
 lscarne...@veltrac.com.br writes:
 
 My script is very simple (as you will see below), but by some reason,
 my machines behind the firewall can't send large emails, or emails
 with attached files.
 
 You don't offer any details of the other parts of the mail handling
 setup, but my first suspect would be content filtering of some kind
 kicks in noticeably only when there's attachments to be dechiphered.

If it's happening when sending everywhere, MTU/MSS problems are
more likely.


 My other suspect is that
 
 match in all scrub (no-df)
 
 somehow tickles the receiving end the wrong way.  Others have reported
 to me privately that going from 4.4 and
 
 scrub in all
 
 to 4.6 and
 
 match in all scrub (reassemble tcp)
 
 worked OK on most traffic, but slowed down some https traffic
 horribly.  Then some apparently random experimentation lead to trying
 different max-mss values and with
 
 match in all scrub (no-df max-mss 1440)
 
 the problem went away.  tcpdump output of successful and failing
 connetions would be instructive, along with the actual error messages,
 if any.

The sense of 'no-df' was inverted in 4.6, fixed in -current.


revision 1.120
date: 2009/09/01 15:51:06;  author: jsing;  state: Exp;  lines: +1 -1
Clear the IP_DF bit if no-df is enabled, not if it is not enabled.

Issue reported by Matthew Dempsky. Same fix suggested by fg...@.



Re: /bsd: acpitz1: Critical temperature, shutting down

2010-01-13 Thread Joachim Schipper
On Tue, Jan 12, 2010 at 09:49:11PM -0800, Don Scott wrote:
 My X60 overheated and did a clean shutdown while building devel/jdk/1.6.
 This is the first time there has been a heat related issue on this laptop.
 It's running the latest BIOS (version 2.18) and an i386 snapshot from
 January 5th.
snip
 I don't think this is openbsd related, but thought it would be interesting
 to post anyway (especially since acpi development is in progress).

For what it's worth, it's fairly easy to configure sensorsd to run
apm -L as soon as the temperature gets too high, and your choice of
apm {-H,-A,-C} as soon as it gets low enough.

Joachim



Re: Using OpenBSD with Amazon's Virtual Private Cloud, IPsec issue

2010-01-13 Thread Matt Dainty
* Stuart Henderson s...@spacehopper.org [2010-01-12 17:02:39]:
 Their examples are using route-based VPNs (http://kb.juniper.net/KB4124,
 RFC3884), I'm not sure whether this is entirely possible here with our
 ipsec (policy-based), but you could try setting up tunnels between the
 gif tunnel endpoints i.e. 1.2.3.4 and 72.21.209.225, and a second between
 1.2.3.4 and 72.21.209.193. These would take place of the tunnels between
 192.168.23/24 and 10/24 (traffic between these networks would be routed
 in the usual way, taking the gif interfaces as point-to-point links).

RFC3884 uses transport mode to secure the already encapsulated traffic
whereas I have to use tunnel mode. This is a shame as this method would
work fine on OpenBSD, I remember doing it previously with another network.

Any attempts to negotiate a transport mode SA are refused and when I tried
your suggestion of creating an SA between just the tunnel endpoints, it
was successfully negotiated but the packets just get dropped by the remote
end.

I'll post on Amazon's forums and see if there's any plan to support the
RFC3884 style way of doing this.

Cheers

Matt



CDCEP les desea una feliz Navidad y un próspero año nuevo.

2010-01-13 Thread CDYCEP
Puede realizar su pago a 6 MESES con tarjeta de cridito Banamex, City Bank,
BBV Bancomer, HSBC o American Express
CONTACTENOS a los tels: 01 (222) 2669168 al 70 o 2437740 / 2436505 / 2377494
- por correo electronico i...@laserpuebla.com
 www.laserpuebla.com


Si no desea recibir nuestra informacion por favor de click aqui con la
palabra
Remover

[demime 1.01d removed an attachment of type image/jpeg which had a name of gift 
card.jpg]



Problem with beaver editor and UTF-8/ISO-8859-2 encoding

2010-01-13 Thread Tomas Bodzar
Hi all,

if I open beaver from xterm and enter some text then I can see
this(after save of file) :

$ file some_file
some_file: ASCII text, with no line terminators

if I switch to cz keyboard then I can see this :

$ file cz_file
cz_file: UTF-8 Unicode text, with no line terminators

Same problem after '$ xterm -u8 -e luit'. For switching of keyboard I
use 'setxkbmap -layout us,cz -option
grp:shifts_toggle,grp_led:scroll'. When I try to open file with some
cz text then I can see this error from beaver :

Document cz_file cannont be opened.
This file is not valid UTF-8 and will not be displayed.

So how can I check what's wrong?

Thx

-- 
http://www.openbsd.org/lyrics.html



Da li se još uvek igrate?

2010-01-13 Thread E-topshop
If you have trouble seeing this mail, click here.

Top Shop

Top E-revija: 44, 12. januar 2010.
Najbolja praktiD
na reE!enja i saveti za bolji Eivot

PoD
etna | Budi fit! | Lepota | Zdrav Eivot

DomaDinstvo | Zabava i deca | Quelle katalog | Knjige

Top Shop

HIT TV proizvodi!

H2O mop ultra - univerzalni paroD
istaD


H2O mop ultra

Ab Tronic X2 - Pojas za stomak

Ab Tronic X2

FlavorWave Turbo Oven - turbo ...

FlavorWave Turbo Oven

Dry Cooker - tiganj

Dry Cooker

Celluless - anticelulit masaEer

Celluless

Da li se igrate?

Da li ste i Vi ljubitelj igara? Saznajte kako igre utiD
u na decu i
odrasle...

5 vaEnih stvari u razgovoru o bivE!im

Otkrivamo E!ta treba da preDutite svom novom partneru...

Lepo je biti bogat

Kako uE!tedeti novac i postati ekonomiD
niji. Saznajte kako najbrEe do
prvog miliona!

Nemojte se ulenjiti...

Kako se motivisati za veEbanje tokom zime? ProD
itajte viE!e o zimskom
fitnesu!

Da li se igrate?

Da li se igrate?

Saznajte viE!e o znaD
aju igara za decu i odrasle. Kako one utiD
u na
odrEavanje mentalnih, socijalnih, pa i emotivnih sposobnosti. Da li ste
jedan od onih koji uEiva u individualnim ili u druE!tvenim igrama?
Saznajte u koju grupu igraD
a spadate i E!ta to govori o Vama! [ViE!e
informacija]

Dorisb - kreativna igra i slagalica

b:

Izuzetno velik broj kombinacija

b:

Jednostavna za koriE!Denje, bazirana na logici i intuiciji

b:

Univerzalnost primene kod svih uzrasta (od 6 do 106 godina)

b:

Svaki igraD
 moEe da ispolji sopstvenu kreativnost i razvije intelekt
slaEuDi Doris ploD
ice

b:

Samo za Vas u ovom broju E-magazina uz uE!tedu od 500 dinara!

b:

Redovna cena: 3.990 RSD VaE!a cena 3.490 RSD

Primer 1

Primer 2

Primer 3

Doris - kreativna igra i slagalica

5 vaEnih stvari u razgovoru o ...

5 vaEnih stvari u razgovoru o bivE!im

Imate novog partnera i razgovarate o svojoj seksualnoj proE!losti. On/ona
vas pita D
uveno pitanje bKoliko si ih imao/imala do sad?b... E=ene
se uvek brinu za neku bznaD
ajnu bivE!ub, muE!karci, opet ne mare
toliko za broj, veD za ono E!to ste radili sa bivE!im partnerima. [ViE!e
informacija]

UEivajte u zimskim D
arolijama...

2 x Snuggie - Debe sa rukavima uz POPUST!

Body Massager - ruD
ni masaEer

Mamma's Cookie Cutters - Kalupi za kolaD
iDe

2 x Snuggie - 2 Debeta sa rukavima ...

Body Massager - ruD
ni masaEer

Mamma s Cookie Cutters - Kalupi ...

VaE!a uE!teda 25%

Komplet od 2 Debeta koje moEete nositi na sebi i nesmetano se koristiti
rukama

Ergonomski oblikovan RuD
ni masaEer je idealan za samo -masaEu.

Sami ili sa svojim detetom pravite najkreativnije kolaD
iDe sa ovim
setom od D
ak 30 delova!

Cena: 2.990 RSD
[ViE!e informacija]

Cena: 990 RSD
[ViE!e informacija]

Cena: 2.690 RSD
[ViE!e informacija]

Lepo je biti bogat 

Lepo je biti bogat

Skoro 70% svetske ekonomije se bazira na potroE!nji. Ako Eelimo da
saD
uvamo svetsku ekonomiju, moramo mudro troE!iti novac u vreme recesije
i potruditi se da ne dajemo novac uludo. Pogledajte 7 saveta koji De Vam
pomoDi da postane ekonomiD
niji i samim tim bogatiji. [ViE!e informacija]

Kupovina uz uE!tedu!

Kartica za Klub 5*

PAKET Alligator + Bake 'n' Fill

Bathroom Scale + POKLON BMI metar

Kartica za Klub 5*

PAKET Alligator + Bake n Fill

Bathroom Scale + POKLON BMI metar

VaE!a uE!teda 15%

VaE!a uE!teda 13%

Postanite D
lan Kluba odabranih i odmah zapoD
nite sa povoljnom
kupovinom!

Precizno isecite voDe i povrDe na kockice ili E!tapiDe +
najkreativniji kalupi za torte!

PrazniD
ni PAKETID - mrE!avite zdravo, pratite svoje treninge i dijete!

Cena: 1.890 RSD
[ViE!e informacija]

Cena: 3.890 RSD
[ViE!e informacija]

Cena: 2.590 RSD
[ViE!e informacija]

Nemojte se ulenjiti...

Nemojte se ulenjiti...

Da li su i vaE!e fiziD
ke aktivnosti u zimskom snu tokom hladnih meseci?
Ako jesu b promenite to! Postoji mnogo naD
ina da ostanete aktivni i
spreD
ite gojaznost i gubitak dobre forme u zimskom periodu. Otkrivamo
vam neke od njih... [ViE!e informacija]

Budite aktivni i zimi, veEbajte kod kuDe!

Hula Hoop Massage Ring - fitnes rekvizit

Transform12 - fitnes sprava

3 Minute Legs - fitnes za noge

Hula Hoop Massage Ring - fitnes ...

Transform12 - fitnes sprava

3 Minute Legs - fitnes za noge

Najzabavniji i najjednostavniji fitnes rekvizit za skidanje kliograma.

12 najvaEnijih treninga za celo telo, pomoDu samo jedne sprave.
UE!tedite vreme i novac!

E=elite mrE!avije, zategnute i oblikovane noge bez mnogo napora? - Evo
reE!enja!

Cena: 2.490 RSD
[ViE!e informacija]

Cena: 15.990 RSD
[ViE!e informacija]

Cena: 4.990 RSD
[ViE!e informacija]

Ovu elektronsku poE!tu primate, ukoliko ste svojevoljno ostavili svoju
e-mail adresu na nekom od sajtova Top Shop-a, uD
estvovali u naE!oj
poklon igri ili nagradnom kvizu ili se prijavili za e-D
asopis Top Shop-a
ili nekog od nasih brendova.

Ponude date u ovom e-mailu vaEe iskljuD
ivo za porudEbine upuDene
putem Interneta ili broja telefona 021 489 26 60.

Ukoliko ne Eelite viE!e da primate naE!e elektronske 

Re: obsd as domU?

2010-01-13 Thread bofh
On Wed, Jan 13, 2010 at 2:08 AM, Eric Furman ericfur...@fastmail.net wrote:
 On Wed, 13 Jan 2010 08:31 +0200, Ciprian Dorin, Craciun
 ciprian.crac...@gmail.com wrote:

 Sorry, but you guys from OpenBSD have proved that you can trust
 the skills of **some** developers to write an __supposed__ perfectly
 secure operating system, so why not trust other developers to write
 a __supposed__ secure software emulation with the help of hardware.
 (Let me say it more simply: we have trust in you, but why don't you
 have the disposition to trust in others?)

How did you guys... have proved that you can trust the skills turn
into we can trust virtualization developers.  Since when have the
virtualization developers demonstrated that tust?

  2.) If systems and application software runs fine on real hardware, but
  fails to run on emulated/virtualized hardware, then the problem is in
  the virtualization software. --In other words, take questions and
  complaints to the vendor of your virtualization software.

 Agree. This is the same as with software: if software runs
 perfectly on one version of OpenBSD, but not on another it does not
 mean that its the fault of the new version. (But Xen is not all about
 emulation, it cooperates with the guest kernel, so in this case the
 blame could be on both sides.)

 Wrong. If it works on real hardware and fails in virtualization
 the virtualization software is *always* to blame.

I think he's thinking of para virtualization, which open bsd doesn't do,
iirc.

  3.) Many of the benefits you gain by running a stable and secure
  operating system like OpenBSD are lost when you run it as a guest on
  top of some other insecure host operating system.

 This is only true if either:
 * there is a security bug in the virtualization software (highly
 improbable, and maybe easibly fixed);

 BWHAHHAHAHAHAHH. Have you ever actually worked with any
 virtualization software?
 There have been many documented security bugs in every virtualization
 software.
 Try Securityfocus or your favorite search engine.

I just finished sans 560 pen testing class.  We had some discussions
about day 0 exploits of guest-host bugs.  Highly improbably should
be changed to it's out there


--
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.
-- Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=30v_g83VHK4



Re: problems with emails through pf

2010-01-13 Thread Dirk Mast
Stuart Henderson wrote:

 On 2010-01-12, Dirk Mast condo...@gmail.com wrote:
 Dirk Mast wrote:

 Peter N. M. Hansteen wrote:

 the problem went away.  tcpdump output of successful and failing
 connetions would be instructive, along with the actual error messages,
 if any.

 Request to wiki (see those long timestamps), hope this helps_

 Jan 12 23:22:06.181513 PPPoE
 code Session, version 1, type 1, id 0x0580, length 114
 IP: 195.50.140.178.53  x.x.x.x.18336: 26867 2/0/1 CNAME
 rr.esams.wikimedia.org., A 91.198.174.2 (84)
 Jan 12 23:22:06.184287 PPPoE
 code Session, version 1, type 1, id 0x0580, length 62
 IP: x.x.x.x.51519  91.198.174.2.80: S 126511392:126511392(0) win
 5840 mss 1460,sackOK,timestamp 6393340 0,nop,wscale 7 (DF)
 
 
 Your 'match in all scrub (no-df max-mss 1440)' is not affecting
 the mss on these packets, take a close look at your ruleset to try
 and work out why, though it might be as simple as removing 'in'..

It seems it was as simple as removing in!

 91.198.174.3.80: S 4156933704:4156933704(0) win 5840 mss 
1440,sackOK,timestamp 3758621 0,nop,wscale 7



Re: thinkpad x200 wireless 5100 old issue

2010-01-13 Thread shwegime
On Wed, 13 Jan 2010, Vadim Zhukov wrote:

 On 13 January 2010 P3. 06:07:35 shweg...@gmail.com wrote:
 I just installed a snapshot and run it from a usb thumb.
 The 'iwn' has exactly the same issues (that is hanging after a minute
 or so of usage and working again after doing 'up down') as with
 -release, including the 'ping'
 hanging there and not giving the 'packet loss' error, which I cannot
 really understand since it worked just fine until a couple of days
 ago.

 any ideas?

 I can recommend you to show your pf.conf on the list, there was some work
 on PF too. Problems with ping could be related to PF changes. Of
 course, up-down means you need help from Damien Bergamini
 dam...@openbsd.org .

 --
  Best wishes,
Vadim Zhukov

 A: Because it messes up the order in which people normally read text.
 Q: Why is top-posting such a bad thing?
 A: Top-posting.
 Q: What is the most annoying thing in e-mail?


Well, this is my pf.conf. but I dare to think the problem is not there, 
since it worked fine until two days ago and I did non make changes to it. 
It is a very simple pf.conf for a desktop, comments welcomed
I will eventually write to Damien Bergamini.
Thanks.

# cat /etc/pf.conf
# interface
ext_if=iwn0

# tables
table brutes persist
table martians const persist { 127/8, 192.168/16, 172.16/12, 10/8, 0/8, 
169.254/16, 192.0.2/24, 240/4 }

# options
set block-policy drop
set loginterface $ext_if
set skip on lo0

# scrub
match in all scrub (no-df max-mss 1440)

# antispoof
antispoof for $ext_if

# block everything
block in log all
block out all

# block evil
block in quick on $ext_if from martians to any
block in quick from brutes to any

# allow ssh connections
pass in on $ext_if proto tcp from any to any port ssh keep state \
(max-src-conn-rate 2/10, overload brutes flush global)

# pass out all traffic
pass out on $ext_if inet all



Info Low Cost Seguro Automóvel desde 156,19 Euros Ano

2010-01-13 Thread ge...@ots.pt
OTS Low Cost AUTO
CORRETORES DE SEGUROSDESDE 1978   I N F O R M A G C O
T.  21 276 40 90   21 275 03 11
comerci...@ots.ptwww.ots.pt
  
Com uma carteira de clientes que se estende por todo o pams, disponibilizamos 
informagco que desejamos se revele de maior interesse.
 
SEGURO  AUTOMSVEL

   
TERCEIROS
 
LOW COST
Desde  156,19ANO
   Coberturas Obrigatsrias de Responsabilidade Civil  - 3.250.000,00 
   Assistjncia em Viagem Km 0
 
 
TERCEIROS + INCJNDIO + ROUBO + Q.I.VIDROS

Exemplo do prego que praticamos para o seguro de um 
VOLKSWAGEN POLO 1.2 COM O VALOR DE 15.223,00 
com um condutor experiente.
LOW COST
Desde  242,80ANO
Coberturas Obrigatsrias de Responsabilidade Civil - 3.250.000,00 
Incjndio, Raio ou Explosco
Furto ou Roubo
Quebra Isolada de Vidros
Ac. Pessoais - Ocupantes de viaturas
Assistjncia em Viagem Km 0
 
 
TERCEIROS + DANOS PRSPRIOS

Exemplo do prego que praticamos para o seguro de um 
VOLKSWAGEN POLO 1.2 COM O VALOR DE 15.223,00 
com um condutor experiente.
LOW COST
Desde  389,93ANO
Coberturas Obrigatsrias de Responsabilidade Civil -3.250.000,00 
Choque, Colisco, Capotamento 
Incjndio, Raio ou Explosco
Furto ou Roubo
Riscos da Natureza
Actos Maliciosos, 
Quebra Isolada de Vidros
Ac. Pessoais - Ocupantes de viaturas
Assistjncia em Viagem Km 0
Franquia de 2% em Danos Prsprios
 
 
Como subscrever:
 
Por E-mail, ou por Telefone deixe-nos o seu contacto. Na resposta adequamos o 
produto, pedimos elementos, retiramos duvidas, confirmamos o prego, anexamos a 
proposta de seguro para preenchimento, damos as instrugues necessarias e 
formalizamos o contrato.
 
As cotagues sco elaboradas on line e consideram dados do tomador, vemculo, 
histsricos, zonas de circulagco.
 
OTS - CORRETORES DE SEGUROS
ALMADACENTRO SULCRUZ DE PAUBARREIRO
21 276 40 9021 275 03 1121 224 42 9421 206 01 46
www.ots.pt 
ge...@ots.pt

 
Nota: Agradecemos que nos avise se nco desejar receber mais informagues.
Esta mensagem esta de acordo com a legislagco Europeia sobre o envio de 
mensagens comerciais. Destina-se unicamente a clientes, potenciais clientes e 
parceiros e nco pode ser considerada SPAM porque tem inclumdo contacto e 
instrugues para remogco da nossa lista de emails. Qualquer mensagem dever estar 
claramente identificada com os dados do emissor e dever proporcionar ao 
receptor a hipstese de ser removida da lista (Directiva 2000/31/CE do 
Parlamento Europeu; Relatsrio A5-0270/2001 do Parlamento Europeu).



Re: obsd as domU?

2010-01-13 Thread William Boshuck
On Wed, Jan 13, 2010 at 08:31:14AM +0200, Ciprian Dorin, Craciun wrote:

  Sorry, but you guys from OpenBSD have proved that you can trust
 the skills of **some** developers

viz., precisely those developers that are telling you to not trust
the virtualization hype/crap.  So, why not trust those developers?

 .. we have trust in you, but why don't you  have the disposition
  to trust in others?)

These developers have _earned_ (through careful hard work and
meticulously accurate documentation) the trust accorded them.
With respect to the others, this remains to be seen (and current
indications are not promising).



Re: HP/Dell RAID

2010-01-13 Thread Steve Shockley

On 1/11/2010 8:54 PM, Henning Brauer wrote:

ciss and work well in one sentence without a negation involved?


I have several, and haven't experienced any problems.  To which PR are 
you referring?  I have a bunch of HP hardware here, perhaps I can 
duplicate the problem and at least see if I can find a workaround.




Re: Removing pf_pool

2010-01-13 Thread Pascal Lalonde
On Wed, Jan 13, 2010 at 01:58:30PM +0900, Ryan McBride wrote:
 
 My first thought is to wonder why you're not running with a symmetrical
 cluster. But I realise that we are not always in control of such things,
 and one of PFs functions is to get help people work around bad network
 design.

Right on. We depend heavily on weights. We have a site that receives
many hits/sec, with a bunch of dual-quad cores behind, processing heavy
pages (which we have no control over ;-). Even though most have the same
amount of RAM and cores, a difference in the processor model will
require such a weight adjustment to prevent it from going overboard.
We're tight on resources, both computer and monetary ... a common story
I suppose.


 There are a few things you can do here to get a similar effect.
 
 2) Use the 'probability' keyword 
 
   pass quick on em0 inet proto tcp from any to 192.168.100.100 \
   probability 50% rdr-to 10.0.0.1
   pass quick on em0 inet proto tcp from any to 192.168.100.100 \
   probability 70% rdr-to 10.0.0.2
   pass quick on em0 inet proto tcp from any to 192.168.100.100 \
   rdr-to 10.0.0.3

I hadn't thought of this one. It might be a good solution for us.
Thanks for the tip.


 The changes just committed are actually cleanup that needs to happen if
 you want to see some more intelligent weighted load balancing in PF than
 these hacks. But that is still a far ways off, definately after 4.7.

Still, I'm very glad to hear that the idea has been floating around.

Thanks a lot,

-- 
Pascal



Re: obsd as domU?

2010-01-13 Thread Marco Peereboom
On Wed, Jan 13, 2010 at 08:55:33AM +0200, Ciprian Dorin, Craciun wrote:
 On Wed, Jan 13, 2010 at 8:43 AM, Bret S. Lambert bret.lamb...@gmail.com 
 wrote:
  How did lazy internet denizen gets told he's lazy turn into
  anything worth spending this much time on?
 
 I would like to personally apologize for criticizing you, Bret, of
 lmgtfy the other guy (which I didn't knew he also posted another
 question about OpenBSD and dom0, and he was also responded).
 
 But I wouldn't say that the discussion has turned into something
 not-worth discussing. I myself have learned a lot about the position
 of the OpenBSD developers regarding the possibility of ever using
 OpenBSD ontop of virtualization (not emulation) platforms (like Xen).
 (I had my hopes, but not any more... :) )

Virtualization is a toy sold as an enterprise solution.  The argument
goes like this: you need a domain controller and sequel server so you
need 2 machines.  So instead of paying for 2 machines you virtualize
them! OMGZOMG1ONe

What Mr. dingle berry insultant forgets to point out is that both tasks
will run like ass in a virtualized environment AND can be easily
combined on the same box.  Usually lost in the same conversation is
that you need both machines to be up at the same time too to be useful.

I have seen people virtualize a file server and domain controller on a
single machine.  Which is awesome because now you get free 30% loss of
IO performance. You know it keeps bandwidth use lower and latency
higher.  Exactly what lusers like.

Virtualization is great to develop kernel code and get an idea if it'd
work before moving on to real hardware (and fixing real bugs on real
hardware because virtualization failed to run right).

I like to play with old OS' as well so its neat for that but usually
doesn't work.  This really is in the toy section though.

 Thanks again for all the time and effort spent,
 Ciprian.
 
 P.S.: Maybe an entry in the FAQ about this topic will cut down all
 these questions about virtualization?

What's next?  Pokemon on OpenBSD FAQ entry?



net-snmp 64bit interface counters

2010-01-13 Thread Johan Karlsson
Hi,

Is there any way to get 64bit interface counters in net-snmp to work with
OpenBSD (preferably via ports)?

From the official net-snmp 5.4* changelog:

---
Solaris, FreeBSD, OpenBSD:
  - Experimental support for 64bit interface counters (ifXTable). Enable
via '--with-mib-modules=if-mib --enable-mfd-rewrites'.
---

I've synced the ports tree from -current and added --enable-mfd-rewrites to
the CONFIGURE_ARGS variable in the net-snmp (net-snmp-5.4.2.1p3) port's
Makefile.

But the compilation fails:

---
if-mib/data_access/interface_sysctl.c:186: error: `IFM_TOKEN' undeclared
(first use in this function)
if-mib/data_access/interface_sysctl.c:186: error: (Each undeclared identifier
is reported only once
if-mib/data_access/interface_sysctl.c:186: error: for each function it appears
in.)
if-mib/data_access/interface_sysctl.c:188: error: `IFM_TOK_STP4' undeclared
(first use in this function)
if-mib/data_access/interface_sysctl.c:189: error: `IFM_TOK_UTP4' undeclared
(first use in this function)
if-mib/data_access/interface_sysctl.c:193: error: `IFM_TOK_STP16' undeclared
(first use in this function)
if-mib/data_access/interface_sysctl.c:194: error: `IFM_TOK_UTP16' undeclared
(first use in this function)
*** Error code 1

Stop in /usr/ports/pobj/net-snmp-5.4.2.1/net-snmp-5.4.2.1/agent/mibgroup (line
96 of Makefile).
*** Error code 1

Stop in /usr/ports/pobj/net-snmp-5.4.2.1/net-snmp-5.4.2.1/agent (line 825 of
Makefile).
*** Error code 1

Stop in /usr/ports/pobj/net-snmp-5.4.2.1/net-snmp-5.4.2.1 (line 521 of
Makefile).
*** Error code 1

Stop in /usr/ports/net/net-snmp (line 2193 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/net/net-snmp (line 1448 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/net/net-snmp (line 1988 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/net/net-snmp (line 1478 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/net/p5-SNMP-Info (line 1625 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/net/p5-SNMP-Info (line 1478 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1
---

Any ideas?


Regards,

Johan



Re: obsd as domU?

2010-01-13 Thread Peter N. M. Hansteen
Marco Peereboom sl...@peereboom.us writes:

 I have seen people virtualize a file server and domain controller on a
 single machine.  Which is awesome because now you get free 30% loss of
 IO performance. You know it keeps bandwidth use lower and latency
 higher.  Exactly what lusers like.

Oh, try what a medium sized educational institution not too far from
here did: put several file servers on the same physical rig (sharing
one gigabit ethernet interface), then start whining when backups to
$elsewhere don't complete overhight.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: Using OpenBSD with Amazon's Virtual Private Cloud, IPsec issue

2010-01-13 Thread Stuart Henderson
On 2010-01-13, Matt Dainty m...@bodgit-n-scarper.com wrote:
 * Stuart Henderson s...@spacehopper.org [2010-01-12 17:02:39]:
 Their examples are using route-based VPNs (http://kb.juniper.net/KB4124,
 RFC3884), I'm not sure whether this is entirely possible here with our
 ipsec (policy-based), but you could try setting up tunnels between the
 gif tunnel endpoints i.e. 1.2.3.4 and 72.21.209.225, and a second between
 1.2.3.4 and 72.21.209.193. These would take place of the tunnels between
 192.168.23/24 and 10/24 (traffic between these networks would be routed
 in the usual way, taking the gif interfaces as point-to-point links).

 RFC3884 uses transport mode to secure the already encapsulated traffic
 whereas I have to use tunnel mode.

Take another look; IKE is done as for tunnel mode (i.e. it tells the
peer to use tunnel mode), but then it's setup as for transport mode,
with the gif header inserted. This is the same packet format as used
by tunnel mode, it's interoperable with tunnel mode on the other side
(see the end of section 4.2.3).

 Any attempts to negotiate a transport mode SA are refused

I think that to support it, isakmpd would need to be able to
negotiate a tunnel mode SA with the peer, but would need to
configure the local side as for transport mode.



Re: 802.11n cards for AP?

2010-01-13 Thread Hugo Osvaldo Barrera
ral works like a charm, I'm using an Encore ENLWI-N specifically if
you're interested, though it will only work in G mode ATM (as others
have already pointed out)

On Fri, Jan 1, 2010 at 21:16, Steven M. Caesare scaes...@caesare.com wrote:

 So... back in the 3.6ish days, I had a Prism-based 802.11b card that I
 used in my OpenBSD FW for a wireless access point. Worked like a charm
 until I relocated my FW, and could no longer get good RF coverage. Went
 with a consumer-based 802.11g AP configured as a bridge.



 That unit just died.



 I've found some cable/antenna assemblies that might allow me to remote
 an antenna to a good spot in the house for coverage, and I'm thus
 re-considering going with a FW based AP setup once again.



 According to the OpenBSD site, the following 802.11n devices are
 supported:



 athn

 iwn

 ral

 run



 However, it doesn't appear that they all support HostAP mode...



 Are there any favorites among the group for doing this? Better yet, any
 models of card known to use a particular chipset that will do HostAP?



 Thanks.



 -sc



Re: obsd as domU?

2010-01-13 Thread bofh
Of course it didn't!  What they should have done was put the backup
server on the same VM!!!  Problem solved!

On 1/13/10, Peter N. M. Hansteen pe...@bsdly.net wrote:
 Marco Peereboom sl...@peereboom.us writes:

 I have seen people virtualize a file server and domain controller on a
 single machine.  Which is awesome because now you get free 30% loss of
 IO performance. You know it keeps bandwidth use lower and latency
 higher.  Exactly what lusers like.

 Oh, try what a medium sized educational institution not too far from
 here did: put several file servers on the same physical rig (sharing
 one gigabit ethernet interface), then start whining when backups to
 $elsewhere don't complete overhight.

 --
 Peter N. M. Hansteen, member of the first RFC 1149 implementation team
 http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
 Remember to set the evil bit on all malicious network traffic
 delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



-- 
Sent from my mobile device

http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.
-- Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=30v_g83VHK4



Re: 4.6 reboots x336 ibm server(s)

2010-01-13 Thread Marcin
2010/1/12 FRLinux frli...@gmail.com:
 On Tue, Jan 12, 2010 at 6:05 PM, Marcin mig...@gmail.com wrote:
 However, it hangs later on just after printing out following lines:

 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 mem address conflict 0xff00/0x1000
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x0c
 Intel E7520 Error Reporting rev 0x0c at pci0 dev 0 function 1 not 
 configured
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c

 Yup, same error here, precisely at that line.

 Just to confirm that we have the same issue, can you try disabling
 ppb* on boot -c then see if it goes to the login prompt?


Was even worse for me here, as although disabling ppb* makes the
kernel go slightly further, it has a nasty side effect of disabling
scsi controllerl.

However, I have just checked out and compiled -current and can confirm
the issue is gone - machine booted and all network interfaces are
accessible.

Many thanks to everyone involved in fixing that!

Regards,
Marcin



Re: obsd as domU?

2010-01-13 Thread Chris Dukes
On Tue, Jan 12, 2010 at 10:41:15AM +0200, Ciprian Dorin, Craciun wrote:
 * any other options??? (anyone???)

If you are looking at OpenBSD in a production environment as
a firewall, ssl accelerator, or for protection from OS privilege
escalation when someone else finds and uses an exploit in your apps,
run it on bare metal.

If you are looking at virtualization to maximize hardware utilization,
look at the operating systems officially supported by the virtualization
software you choose.

If you are looking at Xen for virtualization because paravirtualization
might give a lower impact on performance, I would suggest checking
the performance impact between paravirtualization and VT extension
assisted virtualization on real workloads.

But look on the bright side... odds are whatever you are trying to
do is probably so full of holes at the application layer even with
all of OpenBSD's protections you'll still get sufficiently maliciously
pwned through several application exploits.
-- 
Chris Dukes



Promote Your Vacation Rental to 25 Million Travelers

2010-01-13 Thread TripAdvisor FlipKey
Forward this message to a friend: 
http://www.responsetrack.net/forward/?15MLO0EH8EQ


To view the HTML version of this email, go to 
http://www.responsetrack.net/viewemail/?15MLO0EH8EQ%2Dc7d9c7344f641c6f217a5e76a292e29b




 Promote Your Rental Property to Over
 25 Million Travelers
FREE 60 Day Trial 
Offer EXPIRES on January 31st, 2010
 


 [http://www.responsetrack.net/lnk/flipkey/17ag1/?15MLO0EH8EQ] List Your 
Property Today [http://www.responsetrack.net/lnk/flipkey/17ag1/?15MLO0EH8EQ] 


Reach 25 Million Travelers Monthly.
FlipKey is the exclusive provider of vacation rentals on TripAdvisor.com, which 
receives over 25 million visitors each month.  When you list on FlipKey, you 
are automatically listed on TripAdvisor.
FREE 60 Day Trial.
Get the best value with our special FREE 60 Day Trial with no long-term 
commitment. Offer expires January 31st, 2010.  We will send you a reminder 
email 7 days prior to your free trial expiration.  

UNLIMITED Photos: Professionally Showcase Your Home.
A listing includes a full property description, unlimited photos, link to your 
website, location map, availability calendar and much more.
Increase Bookings with Guest Reviews.
Guest reviews drive property rankings and lead to more qualified inquiries and 
higher conversion rates. 

[http://www.responsetrack.net/lnk/flipkey/17ag1/?15MLO0EH8EQ]
 It's only been a couple of weeks - but the results have been great so far. 
I've received 75 inquiries plus 10 to 12 calls - and already 6 bookings, with 
one taking two weeks.
- J. Scavona (Myrtle Beach, SC) 
List your property today 
[http://www.responsetrack.net/lnk/flipkey/17ag1/?15MLO0EH8EQ]  - and join the 
thousands of property owners who have taken advantage of our special, 
limited-time FREE 60 Day Trial. Don't delay as this offer expires on January 
31st, 2010. 
We look forward to working with you and helping you promote your vacation 
rental properties. 
Best Regards,
The FlipKey Team 
  
 
  

  


80 Summer St. Boston, MA 02110

We respect your online privacy. To opt-out from this list, please update your 
preferences: 
http://www.responsetrack.net/preferences/?15MLO0EH8EQ



Re: obsd as domU?

2010-01-13 Thread Chris Dukes
On Wed, Jan 13, 2010 at 07:54:46AM -0600, Marco Peereboom wrote:
 
 Virtualization is a toy sold as an enterprise solution.  The argument
 goes like this: you need a domain controller and sequel server so you
 need 2 machines.  So instead of paying for 2 machines you virtualize
 them! OMGZOMG1ONe
 
 What Mr. dingle berry insultant forgets to point out is that both tasks
 will run like ass in a virtualized environment AND can be easily
 combined on the same box.  Usually lost in the same conversation is
 that you need both machines to be up at the same time too to be useful.

Ah, but the dingle berry insultant was probably brought in because
management finally listened when they were told
1) The machines with the most compute power and memory are 
nearly completely idle file and backup servers.
2) The key compute heavy apps are running on 7 year old hardware
for which replacement parts are becoming nearly non-existant.
So the insultant picks the virtualization topology best suited
to bring a second insulting contract for performance detuning...
 
 I have seen people virtualize a file server and domain controller on a
 single machine.  Which is awesome because now you get free 30% loss of
 IO performance. You know it keeps bandwidth use lower and latency
 higher.  Exactly what lusers like.

We intentionally did this for an environment for application developers 
so they would find the performance issues with their applications sooner.

 
 Virtualization is great to develop kernel code and get an idea if it'd
 work before moving on to real hardware (and fixing real bugs on real
 hardware because virtualization failed to run right).

It also works rather well testlabs for software applications.
Faster reinstall turnarounds.  Smaller budget required for chairs and 
displays and KVM switches and work surfaces.  Higher homicide rates as
5 app developers pile into a cube that isn't large enough for one
person all looking at one tiny display for a problem involving 6 different
virtual machines and start accusing each other loudly (Previously
they had enough space to run and scatter).
 
 I like to play with old OS' as well so its neat for that but usually
 doesn't work.  This really is in the toy section though.

I find that it's useful to validating procedures before applied to production
and for working out a load balanced configuration.
-- 
Chris Dukes



Re: 4.6 reboots x336 ibm server(s)

2010-01-13 Thread Ted Unangst
On Tue, Jan 12, 2010 at 3:26 PM, FRLinux frli...@gmail.com wrote:
 However, it hangs later on just after printing out following lines:

 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 mem address conflict 0xff00/0x1000
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x0c
 Intel E7520 Error Reporting rev 0x0c at pci0 dev 0 function 1 not
 configured
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c

 Yup, same error here, precisely at that line.

 Just to confirm that we have the same issue, can you try disabling
 ppb* on boot -c then see if it goes to the login prompt?

One more time, for the record.  If the kernel hangs after printing out
a line, that's NOT the device that caused trouble.  The lines are
printed out mean I did this, not I'm about to do this.  This
should be obvious if you think about it, network cards print out their
MAC addresses.  How could the kernel do that if the device wasn't
attached yet?  [There are some more details, but that's the high
level.]

The reason disabling the last line /sometimes/ works is that if it's a
bus, you then prevent probing of all the attached devices.



Re: Removing pf_pool

2010-01-13 Thread Chris Dukes
On Tue, Jan 12, 2010 at 11:11:54PM -0500, Pascal Lalonde wrote:
[SNEEP]

Err, have you considered looking at relayd for this and
make the decision to punt to the lower powered boxes based off of
check http or check script.

There are plenty of knobs to tweak.

-- 
Chris Dukes



Re: obsd as domU?

2010-01-13 Thread Diana Eichert

Chuckle, try to troubleshoot a network issue when it is in a
virtual network.  Lots of fun, not.

diana



Re: obsd as domU?

2010-01-13 Thread Ted Unangst
On Wed, Jan 13, 2010 at 1:31 AM, Ciprian Dorin, Craciun
ciprian.crac...@gmail.com wrote:
Sorry, but you guys from OpenBSD have proved that you can trust
 the skills of **some** developers to write an __supposed__ perfectly
 secure operating system, so why not trust other developers to write
 a __supposed__ secure software emulation with the help of hardware.
 (Let me say it more simply: we have trust in you, but why don't you
 have the disposition to trust in others?)

A lot of OpenBSD's security comes from a model of bad things can and
will happen and trying to mitigate the damage, ala privilege
separation.  We don't assume the code is perfect, we assume it's NOT.
Combining virtual servers onto a single physical machine is the exact
opposite of that philosophy.



Re: 4.6 reboots x336 ibm server(s)

2010-01-13 Thread FRLinux
On Wed, Jan 13, 2010 at 4:28 PM, Ted Unangst ted.unan...@gmail.com wrote:
 The reason disabling the last line /sometimes/ works is that if it's a
 bus, you then prevent probing of all the attached devices.

Sorry, my formulation was not the most accurate. I meant that in my
case, when disabling the whole ppb*, it is the only way to get the
server booting to login prompt on 4.6, and as a side effect of
disabling devices on that bus, i have no network card available then.

Cheers,
Steph



Re: Yerevan, Aremenia and OpenBSD Users

2010-01-13 Thread nixlists
On Tue, Jan 12, 2010 at 11:14 AM, Mark Lumsden m...@cyodesigns.com wrote:
 Hi,

 Are there any OpenBSD users in Yerevan, Armenia? For work reasons, I'm
 moving there in a few days for probably the best part of six months. I
 know absolutely no-one there so it would be good to go for a beer with
 someone (do they have beer in Armenia?)

Most likely you'll be the first one. If there are any BSD users,
they're probably FreeBSD since it's the OS that was the first popular,
and still is - Yandex, etc., Unix in the former USSR during the
dot-bomb. That's right, FreeBSD, not Linux.

Beer production and demand has exploded in the republics of former
USSR in the last decade. I am sure Armenia is participating as well,
although traditionally AFAIK they drank and made mostly wine. That
whole stupid vodka stereotype no longer applies.

All they do now in the former USSR is drown in beer and make their
girlfriends cry (very beautiful girlfriends, assholes don't deserve
them). You'll see a lot of that - just walk through some parks...



Re: OpenBSD CPU Load Calculation of a Process

2010-01-13 Thread patrick keshishian
On Wed, Jan 13, 2010 at 2:07 AM, Sebastian Spies
sebastian.sp...@de-cix.net wrote:
[dd]
 Could you
 please comment on the following code?

 int main(int argc, char** argv)
 {
kvm_t *kd;
struct kinfo_proc2 *info;
int cnt;

if(argc != 2)
{
printf(Please provide pid\n);
exit(1);
}


kd = kvm_open(NULL, NULL, NULL, KVM_NO_FILES, error);
if(!kd)
exit(1);

if(cnt != 1)

Not related to what you are asking about, but, you are checking cnt
before it is set.


{
printf(No process found\n);
exit(1);
}

info = kvm_getproc2(kd, KERN_PROC_PID, atoi(argv[1]),
 sizeof(struct kinfo_proc2), cnt);

printf(%x\n,(double)info-p_cpticks);

exit(0);
 }



pf tables: memory

2010-01-13 Thread nixlists
Hi.

How do I know how much memory I need to have on a machine to load a
table from a file (I don't have much RAM)?
How much memory does a single ip address take in the table?
Do simple 'block quick' rule anchors use more or less memory than
tables (I presume more)?
I couldn't find this in the pf.conf man page, so I guess the answer is no,
but I'll ask anyway: can I somehow specify CIDR or some other way
instead of  the IP address list (one IP per line)
for a table to load from a file, or at the time I have to use a large
pf.conf include for that?
Why does pfctl take such a very long time loading tables?

Thanks.



USB mass storage performance problems with -current

2010-01-13 Thread Daniele Pilenga
Hello misc,

it's about some time now that I use an external USB drive as my
primary boot drive with OpenBSD, but I'm not satisfied with the
performances as I couldn't get over 10-12MB/s.

I don't think this to be a problem with the hardware as I have the
same issue with different pc/drives as well as better performance with
different OS.

I searched through the man pages as well as the mail archives and the
internet, but couldn't find any clues explaining me if I'm doing
something wrong.

Any ideas?

Thank you.
Ciao,
D.

ps. Here are the two systems' dmesgs, updated a few hours before build time.

# First system: HP Compaq nw9440 #

OpenBSD 4.6-current (GENERIC.MP) #13: Tue Jan 12 21:32:50 CET 2010
r...@stag.home:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 2.17 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR
real mem  = 3623251968 (3455MB)
avail mem = 3525091328 (3361MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @
0xf, SMBIOS rev. 2.4 @ 0xf3b77 (23 entries)
bios0: vendor Hewlett-Packard version 68YAF Ver. F.1C date 03/05/2008
bios0: Hewlett-Packard HP Compaq nw9440 (EY314EA#ABZ)
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP SLIC HPET APIC MCFG TCPA SSDT SSDT SSDT SSDT SSDT
acpi0: wakeup devices C09A(S5) C0F9(S3) C0FA(S3) C0FB(S3) C0FC(S3)
C103(S0) C22D(S0) C113(S5) C238(S5) C119(S5) C239(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 166MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 2.17 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpiprt0 at acpi0: bus 1 (C085)
acpiprt1 at acpi0: bus 2 (C09A)
acpiprt2 at acpi0: bus 8 (C103)
acpiprt3 at acpi0: bus 16 (C113)
acpiprt4 at acpi0: bus 32 (C119)
acpiprt5 at acpi0: bus 0 (C003)
acpiec0 at acpi0
acpicpu0 at acpi0: C2, C1, PSS
acpicpu1 at acpi0: C2, C1, PSS
acpipwrres0 at acpi0: C1F8
acpipwrres1 at acpi0: C207
acpipwrres2 at acpi0: C224
acpipwrres3 at acpi0: C22C
acpipwrres4 at acpi0: C334
acpipwrres5 at acpi0: C335
acpipwrres6 at acpi0: C336
acpipwrres7 at acpi0: C337
acpipwrres8 at acpi0: C338
acpipwrres9 at acpi0: C339
acpipwrres10 at acpi0: C33A
acpipwrres11 at acpi0: C33B
acpipwrres12 at acpi0: C33C
acpipwrres13 at acpi0: C33D
acpipwrres14 at acpi0: C33E
acpitz0 at acpi0: critical temperature 256 degC
acpitz1 at acpi0: critical temperature 102 degC
acpitz2 at acpi0: critical temperature 110 degC
acpitz3 at acpi0: critical temperature 105 degC
acpitz4 at acpi0: critical temperature 102 degC
acpitz5 at acpi0: critical temperature 110 degC
acpibat0 at acpi0: C1C5 model Primary serial 06762 2006/04/24 type
LIon oem Hewlett-Packard
acpibat1 at acpi0: C1C4 not present
acpiac0 at acpi0: AC unit online
acpibtn0 at acpi0: C24D
acpibtn1 at acpi0: C245
acpivideo0 at acpi0: C130
acpivout0 at acpivideo0: C14B
acpivout1 at acpivideo0: C14C
acpivout2 at acpivideo0: C14F
acpivout3 at acpivideo0: C150
bios0: ROM list: 0xc/0xdc00 0xd/0x1000 0xd1000/0x1800
cpu0: Enhanced SpeedStep 2162 MHz: speeds: 2167, 1667, 1333, 1000 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03
ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 vendor NVIDIA, unknown product 0x029b rev 0xa1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01:
apic 1 int 16 (irq 10)
azalia0: codecs: Analog Devices AD1981HD, Conexant/0x2bfa, using
Analog Devices AD1981HD
audio0 at azalia0
ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: apic 1
int 16 (irq 10)
pci2 at ppb1 bus 8
bge0 at pci2 dev 0 function 0 Broadcom BCM5753M rev 0x21, BCM5750 C1
(0x4201): apic 1 int 16 (irq 10), address 00:16:d4:0c:fc:f0
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: apic 1
int 17 (irq 10)
pci3 at ppb2 bus 16
wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02:
apic 1 int 17 (irq 10), MoW2, address 00:13:02:51:af:9d
ppb3 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01: apic 1
int 19 (irq 5)
pci4 at ppb3 bus 32
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 1
int 20 (irq 10)
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 1
int 22 (irq 11)
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: 

pf: reassemble tcp

2010-01-13 Thread nixlists
Hi.

I have

  match in all scrub (tcp reassemble no-df random-id max-mss 1440)

in my pf.conf (-current)

Unless I remove 'tcp reassemble', one of the web sites (it's a
Windows/IIS) site cannot communicate with me - it hangs loading a
page.

Any ideas?



Curso de Nóminas 2010

2010-01-13 Thread Capacitaci�n Contable
SERVICIOS VISISN HUMANA ; 

Visisn Humana (Consultorma en Recursos Humanos) tiene el agrado de
invitarlo al Curso Tesrico - Practico de Nsminas 2010que se llevara a
cabo en el mes de Enero de 2010. 

OBJETIVO: Conocer y saber aplicar correctamente las disposiciones legales
y fiscales para la elaboracisn de una nsmina.

El ejecutivo que tome este curso sabra elaborar una nsmina manual y de
esta manera poder hacer revisiones de su sistema de nsmina, para
verificar que los calculos y retenciones sean correctas.

DIRIGIDO A:

Encargados y Jefes de Nsmina, Contadores, Auditores y Gerentes de
Contabilidad, Jefes de Recursos Humanos y en general a toda persona que
esti interesada en conocer la materia.

TEMARIO:

  * Introduccisn

  * Abreviaturas

  * Marco legal (LISR, LFT, LSS, LINFONAVIT)

  * Obligaciones de los patrones y de los trabajadores

  * Tipos de ingreso que pueden percibir los trabajadores (Sueldos,
Salarios, Asimilados, Honorarios).

  * Que conceptos son gravados y cuales son excentos (Caso Practico)

  * Calculo de ISR en Sueldos y Salarios

  * IMSS (Marco Tesrico)

  * Ramas de Aseguramiento

  * Prestaciones de Previsisn Social

  * Tipos de Salario y Lmmites Salariales

  * Salario Base de Cotizacisn

  * INFONAVIT (Obligaciones Patronales)

  * Aviso de Retencisn y Pagos de Amortizadores

  * FONACOT

  * Retenciones y entero de las mismas.

GRUPOS REDUCIDOS

Incluye:

X Manual de cada curso

X Constancia emitida por agente capacitador registrado ante la STPS

X Coffee Break

GRUPO 1

SABADO 23 DE ENERO DE 2010

9:00 A 14:00 HRS.

COSTO NORMAL $1,500 MAS IVA

PROMOCISN CON PRONTO PAGO HASTA EL DMA 21 DE ENERO DE 2010

$800 MAS IVA

SEDE:

Visisn Humana

Dr. Barragan N: 560 Despacho 5 Col. Narvarte, Mixico D.F.

Tels. 4633 7752 (llamada local en el D.F.)

Fax: 3548 1624 (llamada local en el D.F.)

capacitac...@serviciosvisionhumana.com.mx

OTROS CURSOS:

Reclutamiento y Seleccisn de Personal

Reformas Fiscales 2010

Entrevista por Competencias

Clima Laboral

Evaluacisn del Desempeqo

Curso de Pruebas Psicolsgicas

Administracisn de Recursos Humanos

Introduccisn a la Grafologma en R.H.

SERVICIOS

Reclutamiento y Seleccisn de Personal

Evaluaciones Psicolsgicas

Estudios Socioeconsmicos

Desarrollo de Sistemas de Evaluacisn

Maquila de Nsmina

CONTACTO

capacitac...@serviciosvisionhumana.com.mx

www.serviciosvisionhumana.com.mx

Tel: (0155) 4633 7752

Fax: (0155) 3548 1624

ACEPTAMOS TODAS LAS TARJETAS DE CRIDITO Y DIBITO

(Excepto American Express)

Recuerde que esta informacisn le puede ser ztil en un futuro. Para darse
de baja responder con el tmtulo BORRAR.



Re: OpenBSD CPU Load Calculation of a Process

2010-01-13 Thread Aaron Mason
On Thu, Jan 14, 2010 at 7:28 AM, patrick keshishian pkesh...@gmail.com
wrote:
 On Wed, Jan 13, 2010 at 2:07 AM, Sebastian Spies
 sebastian.sp...@de-cix.net wrote:
 [dd]
 Could you
 please comment on the following code?

 int main(int argc, char** argv)
 {
kvm_t *kd;
struct kinfo_proc2 *info;
int cnt;

if(argc != 2)
{
printf(Please provide pid\n);
exit(1);
}


kd = kvm_open(NULL, NULL, NULL, KVM_NO_FILES, error);
if(!kd)
exit(1);

if(cnt != 1)

 Not related to what you are asking about, but, you are checking cnt
 before it is set.


{
printf(No process found\n);
exit(1);
}

info = kvm_getproc2(kd, KERN_PROC_PID, atoi(argv[1]),
 sizeof(struct kinfo_proc2), cnt);

printf(%x\n,(double)info-p_cpticks);

exit(0);
 }



And if you want to use this in a script, you might want to set a
different exit value for each error condition.  It's usually good
practice to send a numeric error code and let your script handle the
error itself.  By all means keep the message there, but don't make it
impossible to use in a script.

/offtopic

Try info-p_pctcpu instead.

--
Aaron Mason - Programmer, open source addict
I've taken my software vows - for beta or for worse



Re: Mini PCI Wireless Card

2010-01-13 Thread Benjamin Adams
Anyone try: http://www.kernel-panic.it/software/bowlfish/index.html

On Tue, Jan 12, 2010 at 10:04 AM, Mihajlo Manojlov miha...@cde.si wrote:
 Hi,

 what would you like to do with wifi? do you want to build an access point,
or do you just want to connect to wifi network?

 on this link, you can see which cards support Host AP mode:
 http://zythmer.acyclic.org/articles/OpenBSD_4.3_wifi.html

 For Soekris image, I would recommend you to install it yourself. All you
have to do is to boot soekris with the card you wish to install to, check
C/H/S settings and write them down, then put the card in your PC, boot OpenBSD
cd, in disklabel set C/H/S to the values you read before, and then install
like normal.
 I have done that on the pc-engines wrap box, but I think the same applies to
soekris too.

 bye

 -Original Message-
 From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
Benjamin Adams
 Sent: Tuesday, January 12, 2010 4:27 AM
 To: Luis Useche
 Cc: misc
 Subject: Re: Mini PCI Wireless Card

 Thanks will order one.
 Anyone have an img file for soekris net5501?
 Or where I can download one.
 Easier install.
 Thanks

 Ben
 On Mon, Jan 11, 2010 at 9:45 PM, Luis Useche use...@gmail.com wrote:
 I'm using an Intel PRO/Wireless 3945ABG successfully.

 Luis



 On Mon, Jan 11, 2010 at 9:25 PM, Benjamin Adams freebsdwo...@gmail.com
wrote:
 Anyone know a good card with 4.6 support?
 Thanks

 Ben



Re: Mini PCI Wireless Card

2010-01-13 Thread Aaron Mason
On Thu, Jan 14, 2010 at 10:26 AM, Benjamin Adams freebsdwo...@gmail.com wrote:
 Anyone try: http://www.kernel-panic.it/software/bowlfish/index.html

 On Tue, Jan 12, 2010 at 10:04 AM, Mihajlo Manojlov miha...@cde.si wrote:
 Hi,

 what would you like to do with wifi? do you want to build an access point,
 or do you just want to connect to wifi network?

 on this link, you can see which cards support Host AP mode:
 http://zythmer.acyclic.org/articles/OpenBSD_4.3_wifi.html

 For Soekris image, I would recommend you to install it yourself. All you
 have to do is to boot soekris with the card you wish to install to, check
 C/H/S settings and write them down, then put the card in your PC, boot OpenBSD
 cd, in disklabel set C/H/S to the values you read before, and then install
 like normal.
 I have done that on the pc-engines wrap box, but I think the same applies to
 soekris too.

 bye

 -Original Message-
 From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
 Benjamin Adams
 Sent: Tuesday, January 12, 2010 4:27 AM
 To: Luis Useche
 Cc: misc
 Subject: Re: Mini PCI Wireless Card

 Thanks will order one.
 Anyone have an img file for soekris net5501?
 Or where I can download one.
 Easier install.
 Thanks

 Ben
 On Mon, Jan 11, 2010 at 9:45 PM, Luis Useche use...@gmail.com wrote:
 I'm using an Intel PRO/Wireless 3945ABG successfully.

 Luis



 On Mon, Jan 11, 2010 at 9:25 PM, Benjamin Adams freebsdwo...@gmail.com
 wrote:
 Anyone know a good card with 4.6 support?
 Thanks

 Ben



I think it's unnecessary.  OpenBSD will happily fit in under 200mb
with just base*, etc* and man*.  If you're severely space-constrained,
it could be a good option, but for the most part it's overkill (and
unsupported in any case).

/offtopic

I've used Wistron DCMA81 11g cards before, they're pretty good.
Haven't tried to hostap one as yet, but I'll do that when I get the
time and hardware.

-- 
Aaron Mason - Programmer, open source addict
I've taken my software vows - for beta or for worse



Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Tue, Jan 5, 2010 at 2:32 PM, Henning Brauer lists-open...@bsws.de wrote:
 I really like the 275 - 420MBit/s change for 4.6 - current with pf.


Update: both machines run -current again this time. I think my initial
tcpbench results were poor because of running cbq queuing on 4.6. The
server has em NIC , the client has msk. Jumbo frames are set to 9000
on both, but don't make much difference. This is with a $20 D-link
switch.

tcpbench results:

pf disabled on both machines: 883 Mb/s

pf enabled on tcpbench server only - simple ruleset like the documentation
example: 619 Mb/s

pf enabled on both machines - the tcpbench client box has the standard
-current default install pf.conf: 585 Mb/s

pf enabled on just the tcpbench server: with cbq queuing enabled on
the internal interface as follows (for tcpbench only, not for real
network use) - no other queues defined on $int_if:

  altq on $int_if cbq bandwidth 1Gb queue { std_in, ssh_im_in, dns_in  }
  queue std_inbandwidth 999.9Mb cbq(default,borrow)

401 Mb/s

Why is that? cbq code overhead? The machine doesn't have enough CPU?
Or am I missing something? Admittedly it's an old P4.

After a while, during benching, even if pf is disabled on both
machines the throughput drops to 587 Mbit/s. The only way to bring it
back up to 883 Mb/s is to reboot the tcpbench client. Anyone know why?

Thanks!



Re: Lists of MDs and Dentists

2010-01-13 Thread Noelle Costello
Our Medical Doctor list has contact data for all American States and in many 
different specialties such as anesthesiology, cardiology,dermatology and 
emergency medicine.
This week only the list can be purchased at half price.

For details and samples please reply to this address 
kris...@choicemedicaldata.net. Should you wish to not be contacted again please 
contact Gertrude at rem...@choicemedicaldata.net



Re: HP/Dell RAID

2010-01-13 Thread Henning Brauer
* Steve Shockley steve.shock...@shockley.net [2010-01-13 14:34]:
 On 1/11/2010 8:54 PM, Henning Brauer wrote:
 ciss and work well in one sentence without a negation involved?
 
 I have several, and haven't experienced any problems.  To which PR
 are you referring?  I have a bunch of HP hardware here, perhaps I
 can duplicate the problem and at least see if I can find a
 workaround.

i'm referring to the swearing from the people working on that

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: Maximizing File/Network I/O

2010-01-13 Thread Henning Brauer
* nixlists nixmli...@gmail.com [2010-01-14 01:09]:
 On Tue, Jan 5, 2010 at 2:32 PM, Henning Brauer lists-open...@bsws.de wrote:
  I really like the 275 - 420MBit/s change for 4.6 - current with pf.
 
 
 Update: both machines run -current again this time. I think my initial
 tcpbench results were poor because of running cbq queuing on 4.6. The
 server has em NIC , the client has msk. Jumbo frames are set to 9000
 on both, but don't make much difference. This is with a $20 D-link
 switch.
 
 tcpbench results:
 
 pf disabled on both machines: 883 Mb/s
 
 pf enabled on tcpbench server only - simple ruleset like the documentation
 example: 619 Mb/s
 
 pf enabled on both machines - the tcpbench client box has the standard
 -current default install pf.conf: 585 Mb/s
 
 pf enabled on just the tcpbench server: with cbq queuing enabled on
 the internal interface as follows (for tcpbench only, not for real
 network use) - no other queues defined on $int_if:
 
   altq on $int_if cbq bandwidth 1Gb queue { std_in, ssh_im_in, dns_in  }
   queue std_inbandwidth 999.9Mb cbq(default,borrow)
 
 401 Mb/s
 
 Why is that? cbq code overhead? The machine doesn't have enough CPU?
 Or am I missing something? Admittedly it's an old P4.

test results on old P4 are unfortunately pretty much pointless.

 After a while, during benching, even if pf is disabled on both
 machines the throughput drops to 587 Mbit/s. The only way to bring it
 back up to 883 Mb/s is to reboot the tcpbench client. Anyone know why?

that seems weird. CPU throttling down becuase it overheated,
perhaps? could be some ressource issue in OpenBSD as well, but i've
never seen such behaviour

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: pf: reassemble tcp

2010-01-13 Thread Henning Brauer
* nixlists nixmli...@gmail.com [2010-01-13 22:56]:
 Hi.
 
 I have
 
   match in all scrub (tcp reassemble no-df random-id max-mss 1440)
 
 in my pf.conf (-current)
 
 Unless I remove 'tcp reassemble', one of the web sites (it's a
 Windows/IIS) site cannot communicate with me - it hangs loading a
 page.
 
 Any ideas?

yeah, don't use reassemble tcp. it's not perfect.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Wed, Jan 13, 2010 at 8:39 PM, Henning Brauer lists-open...@bsws.de
wrote:
 pf enabled on just the tcpbench server: with cbq queuing enabled on
 the internal interface as follows (for tcpbench only, not for real
 network use) - no other queues defined on $int_if:

   altq on $int_if cbq bandwidth 1Gb queue { std_in, ssh_im_in, dns_in  }
   queue std_inbandwidth 999.9Mb cbq(default,borrow)

 401 Mb/s

 Why is that? cbq code overhead? The machine doesn't have enough CPU?
 Or am I missing something? Admittedly it's an old P4.

 test results on old P4 are unfortunately pretty much pointless.

Why?

  cpu0: Intel(R) Pentium(R) 4 CPU 2.53GHz (GenuineIntel 686-class) 2.52 GHz

Isn't 2.52GHz fast enough for gigabit links? I know that's like half
that in P3 cycles, but still... What's the issue?

Thank you.



Re: Problem with beaver editor and UTF-8/ISO-8859-2 encoding

2010-01-13 Thread J.C. Roberts
On Wed, 13 Jan 2010 12:31:36 +0100 Tomas Bodzar
tomas.bod...@gmail.com wrote:

 Hi all,
 
 if I open beaver from xterm and enter some text then I can see
 this(after save of file) :
 
 $ file some_file
 some_file: ASCII text, with no line terminators
 
 if I switch to cz keyboard then I can see this :
 
 $ file cz_file
 cz_file: UTF-8 Unicode text, with no line terminators
 
 Same problem after '$ xterm -u8 -e luit'. For switching of keyboard I
 use 'setxkbmap -layout us,cz -option
 grp:shifts_toggle,grp_led:scroll'. When I try to open file with some
 cz text then I can see this error from beaver :
 
 Document cz_file cannont be opened.
 This file is not valid UTF-8 and will not be displayed.
 
 So how can I check what's wrong?
 
 Thx
 

Does `xterm -lc` work?

-- 



Re: pf: reassemble tcp

2010-01-13 Thread Ted
On Thu, Jan 14, 2010 at 12:46 PM, Henning Brauer lists-open...@bsws.dewrote:


  I have
 
match in all scrub (tcp reassemble no-df random-id max-mss 1440)
 
  in my pf.conf (-current)

 yeah, don't use reassemble tcp. it's not perfect.


How about fragment reassemble?

I'm using it on my OpenBSD 4.5 pf, with scrub to enable a NAT AV app to
work.
Reading the man pages I noticed fragment reassemble has changed to
set reassembleunder scrub for 4.6 or -current.

It also looks like it is turned on by default in 4.5, 4.6 or current.



Re: pf: reassemble tcp

2010-01-13 Thread Henning Brauer
* Ted t...@pobox.com [2010-01-14 05:03]:
 On Thu, Jan 14, 2010 at 12:46 PM, Henning Brauer lists-open...@bsws.dewrote:
 
 
   I have
  
 match in all scrub (tcp reassemble no-df random-id max-mss 1440)
  
   in my pf.conf (-current)
 
  yeah, don't use reassemble tcp. it's not perfect.
 
 
 How about fragment reassemble?

that is an entirely different beast and should always be on (hey,
surprise, it IS by default!)

reassemble tcp is not the best name really. it is not really
reassembly of anything.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: Maximizing File/Network I/O

2010-01-13 Thread Henning Brauer
* nixlists nixmli...@gmail.com [2010-01-14 03:21]:
  test results on old P4 are unfortunately pretty much pointless.
 
 Why?
 
   cpu0: Intel(R) Pentium(R) 4 CPU 2.53GHz (GenuineIntel 686-class) 2.52 GHz
 
 Isn't 2.52GHz fast enough for gigabit links? I know that's like half
 that in P3 cycles, but still... What's the issue?

cache

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: Problem with beaver editor and UTF-8/ISO-8859-2 encoding

2010-01-13 Thread Tomas Bodzar
I invoked 'xterm -lc' then 'setxkbmap -layout us,cz -option
grp:shifts_toggle,grp_led:scroll'.

$ beaver

entered some text in cz and save with name 'file'.

$ file file
file: UTF-8 Unicode text, with no line terminators

$ beaver file   (no error during opening)

Now I can see text, but diacritic characters are right of letters
instead of above them and one letter 'k' is even missing. gvim shows
garbage. It's same (output with badly placed diacritic) for these
options too :

$ luit -v -encoding 'UTF-8' beaver file
UTF-8, non-ISO-2022 encoding.

$ luit -v -encoding 'ISO 8859-2' beaver file
G0 is ASCII, G1 is Unknown (94), G2 is ISO 8859-2, G3 is Unknown (94).
GL is G0, GR is G2.

Maybe I'm missing something obvious or I'm interpreting info from man
pages in a bad way.





On Thu, Jan 14, 2010 at 3:50 AM, J.C. Roberts list-...@designtools.org wrote:
 On Wed, 13 Jan 2010 12:31:36 +0100 Tomas Bodzar
 tomas.bod...@gmail.com wrote:

 Hi all,

 if I open beaver from xterm and enter some text then I can see
 this(after save of file) :

 $ file some_file
 some_file: ASCII text, with no line terminators

 if I switch to cz keyboard then I can see this :

 $ file cz_file
 cz_file: UTF-8 Unicode text, with no line terminators

 Same problem after '$ xterm -u8 -e luit'. For switching of keyboard I
 use 'setxkbmap -layout us,cz -option
 grp:shifts_toggle,grp_led:scroll'. When I try to open file with some
 cz text then I can see this error from beaver :

 Document cz_file cannont be opened.
 This file is not valid UTF-8 and will not be displayed.

 So how can I check what's wrong?

 Thx


 Does `xterm -lc` work?

 --



VLANs, OpenBSD, Cisco HP

2010-01-13 Thread James Peltier
Hi have an OpenBSD -current installation as of today that I'm trying to get 
VLANs working on.  I have an link from a Cisco 6506 (interface 5/8) to a HP 
ProCurve 5408XL port B4.  The Cisco port 5/8 is configured to the following

set trunk 5/8 on dot1q vlan 301

on the HP ProCurve I have added the VLANs to the switch and ports and it works 
but not the way I would expect.

Port B4 has VLAN 301 tagged and A1 is the port on which the OpenBSD box is 
connected which is also tagged VLAN 301. 

On the OpenBSD box I have

/etc/hostname.em0
--
up

/etc/hostname.vlan301
--
inet 1.2.3.4 255.255.255.0 NONE vlandev em0 description Uplink 

/etc/mygate
--
1.2.3.254

So, here's what I don't expect and maybe my expectations are wrong, but 
anyways. This configuration doesn't work?!?  If I have

inet 1.2.3.4 255.255.255.0 NONE description Uplink 

in /etc/hostname.em0 it works.  Since the port is tagged on the Cisco and both 
HP ports I would have thought that you needed to have the VLAN 301 
configuration on OpenBSD as well to properly untag the ports?

Any help would be extremely useful as I'm trying to deploy this as a VLAN 
router.  I'm sure it's something really simple that I'm missing here.

---
James A. Peltier james_a_pelt...@yahoo.ca


  __
Looking for the perfect gift? Give the gift of Flickr! 

http://www.flickr.com/gift/



Re: Maximizing File/Network I/O

2010-01-13 Thread Tomas Bodzar
What shows 'systat vmstat' during your tests plus other windows like
mbufs and similar, what shows 'vmstat -m' and so on. It will say much
more about actual situation of whole system then tcpbench.

On Thu, Jan 14, 2010 at 12:49 AM, nixlists nixmli...@gmail.com wrote:
 On Tue, Jan 5, 2010 at 2:32 PM, Henning Brauer lists-open...@bsws.de
wrote:
 I really like the 275 - 420MBit/s change for 4.6 - current with pf.


 Update: both machines run -current again this time. I think my initial
 tcpbench results were poor because of running cbq queuing on 4.6. The
 server has em NIC , the client has msk. Jumbo frames are set to 9000
 on both, but don't make much difference. This is with a $20 D-link
 switch.

 tcpbench results:

 pf disabled on both machines: 883 Mb/s

 pf enabled on tcpbench server only - simple ruleset like the documentation
 example: 619 Mb/s

 pf enabled on both machines - the tcpbench client box has the standard
 -current default install pf.conf: 585 Mb/s

 pf enabled on just the tcpbench server: with cbq queuing enabled on
 the internal interface as follows (for tcpbench only, not for real
 network use) - no other queues defined on $int_if:

 B altq on $int_if cbq bandwidth 1Gb queue { std_in, ssh_im_in, dns_in B }
 B queue std_in B  B bandwidth 999.9Mb cbq(default,borrow)

 401 Mb/s

 Why is that? cbq code overhead? The machine doesn't have enough CPU?
 Or am I missing something? Admittedly it's an old P4.

 After a while, during benching, even if pf is disabled on both
 machines the throughput drops to 587 Mbit/s. The only way to bring it
 back up to 883 Mb/s is to reboot the tcpbench client. Anyone know why?

 Thanks!



Re: Maximizing File/Network I/O

2010-01-13 Thread Tomas Bodzar
very OT :

Is there some tool for inspection of CPU cache like this one
http://docs.sun.com/app/docs/doc/819-2240/cpustat-1m?l=ena=view ? I
found in man pages memconfig(8), but if I'm understand  it correctly
then it's just for setting.

On Thu, Jan 14, 2010 at 5:43 AM, Henning Brauer lists-open...@bsws.de
wrote:
 * nixlists nixmli...@gmail.com [2010-01-14 03:21]:
  test results on old P4 are unfortunately pretty much pointless.

 Why?

 B  cpu0: Intel(R) Pentium(R) 4 CPU 2.53GHz (GenuineIntel 686-class) 2.52
GHz

 Isn't 2.52GHz fast enough for gigabit links? I know that's like half
 that in P3 cycles, but still... What's the issue?

 cache

 --
 Henning Brauer, h...@bsws.de, henn...@openbsd.org
 BS Web Services, http://bsws.de
 Full-Service ISP - Secure Hosting, Mail and DNS Services
 Dedicated Servers, Rootservers, Application Hosting



Re: VLANs, OpenBSD, Cisco HP

2010-01-13 Thread James Peltier
--- On Thu, 1/14/10, James Peltier james_a_pelt...@yahoo.ca wrote:
 /etc/hostname.vlan301
 --
 inet 1.2.3.4 255.255.255.0 NONE vlandev em0 description
 Uplink 

Please note that I've typed this wrong and it actually has

inet 1.2.3.4 255.255.255.0 NONE vlan 301 vlandev em0 description Uplink 

in /etc/hostname.em0 and doesn't work. Just wanted to make sure people don't 
jump to the your sytax is wrong theory. ;)



Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Wed, Jan 13, 2010 at 11:43 PM, Henning Brauer lists-open...@bsws.de
wrote:
 * nixlists nixmli...@gmail.com [2010-01-14 03:21]:
  test results on old P4 are unfortunately pretty much pointless.

 Why?

   cpu0: Intel(R) Pentium(R) 4 CPU 2.53GHz (GenuineIntel 686-class) 2.52
GHz

 Isn't 2.52GHz fast enough for gigabit links? I know that's like half
 that in P3 cycles, but still... What's the issue?

 cache

What about it? Please elaborate.

Thanks!