Re: How to Replace twm with WindowMaker

2010-06-18 Thread Jan Stary
On Jun 18 13:43:59, Tito Mari Francis Esca??o wrote:
 Good day! I have just installed OpenBSD 4.7 complete with the X windowing
 system, verified it working with the twm default window manager, and I was
 able to install WindowMaker. Based on the documentation from
 http://openbsd.org/faq/faq11.html there's a guide on how to try a new window
 manager, but what I need is to replace the default twm with WindowMaker. Can
 anybody pls give me pointers? I may be googling erroneously, guidance would
 be gratefully appreciated. Thanks!

Obviously you have not read it:
http://openbsd.org/faq/faq11.html#CustomizingX



Re: How to Replace twm with WindowMaker

2010-06-18 Thread Tomas Bodzar
twm is not default window manager in OpenBSD. fvwm2 is default.

On Fri, Jun 18, 2010 at 7:43 AM, Tito Mari Francis EscaC1o
titomarifran...@gmail.com wrote:
 Good day! I have just installed OpenBSD 4.7 complete with the X windowing
 system, verified it working with the twm default window manager, and I was
 able to install WindowMaker. Based on the documentation from
 http://openbsd.org/faq/faq11.html there's a guide on how to try a new
window
 manager, but what I need is to replace the default twm with WindowMaker.
Can
 anybody pls give me pointers? I may be googling erroneously, guidance would
 be gratefully appreciated. Thanks!



Re: disk geometry issues when trying to set up encrypted partition

2010-06-18 Thread Han Boetes
Joachim Schipper wrote:
 The OpenBSD culture is not one of HOWTOs. You'll have to read
 the man pages and FAQ to get the information, I'm afraid.

The FAQ is just another word for HOWTOs.


# Han



Re: How to Replace twm with WindowMaker

2010-06-18 Thread Tito Mari Francis Escaño
Have read portions of that, thanks for pointing it out, but I need the
WindowMaker-specific command. On that documentation section, it focuses on
cwm as the replacement window manager. Aside from that, this is for my root
user, sorry if I left that detail out, there's no .xinitrc file for it.
Thanks again.

On Fri, Jun 18, 2010 at 2:17 PM, Jan Stary h...@stare.cz wrote:

 On Jun 18 13:43:59, Tito Mari Francis Esca??o wrote:
  Good day! I have just installed OpenBSD 4.7 complete with the X windowing
  system, verified it working with the twm default window manager, and I
 was
  able to install WindowMaker. Based on the documentation from
  http://openbsd.org/faq/faq11.html there's a guide on how to try a new
 window
  manager, but what I need is to replace the default twm with WindowMaker.
 Can
  anybody pls give me pointers? I may be googling erroneously, guidance
 would
  be gratefully appreciated. Thanks!

 Obviously you have not read it:
 http://openbsd.org/faq/faq11.html#CustomizingX



Re: How to Replace twm with WindowMaker

2010-06-18 Thread Tito Mari Francis Escaño
Alright, I got this solved following the guide. It turns out that I should
create the .xinitrc file with the word 'wmaker' in it and that does it.
Thanks for the pointers! Maybe this can be made more elaborate in the guide
that user may not find that file and they can create it.

On Fri, Jun 18, 2010 at 2:44 PM, Tito Mari Francis EscaC1o 
fran...@cxcglobal.com wrote:

 Have read portions of that, thanks for pointing it out, but I need the
 WindowMaker-specific command. On that documentation section, it focuses on
 cwm as the replacement window manager. Aside from that, this is for my root
 user, sorry if I left that detail out, there's no .xinitrc file for it.
 Thanks again.


 On Fri, Jun 18, 2010 at 2:17 PM, Jan Stary h...@stare.cz wrote:

 On Jun 18 13:43:59, Tito Mari Francis Esca??o wrote:
  Good day! I have just installed OpenBSD 4.7 complete with the X
 windowing
  system, verified it working with the twm default window manager, and I
 was
  able to install WindowMaker. Based on the documentation from
  http://openbsd.org/faq/faq11.html there's a guide on how to try a new
 window
  manager, but what I need is to replace the default twm with WindowMaker.
 Can
  anybody pls give me pointers? I may be googling erroneously, guidance
 would
  be gratefully appreciated. Thanks!

 Obviously you have not read it:
 http://openbsd.org/faq/faq11.html#CustomizingX



Re: How to Replace twm with WindowMaker

2010-06-18 Thread Tomas Bodzar
Why do you need X for your root user?

On Fri, Jun 18, 2010 at 8:44 AM, Tito Mari Francis EscaC1o
fran...@cxcglobal.com wrote:
 Have read portions of that, thanks for pointing it out, but I need the
 WindowMaker-specific command. On that documentation section, it focuses on
 cwm as the replacement window manager. Aside from that, this is for my root
 user, sorry if I left that detail out, there's no .xinitrc file for it.
 Thanks again.

 On Fri, Jun 18, 2010 at 2:17 PM, Jan Stary h...@stare.cz wrote:

 On Jun 18 13:43:59, Tito Mari Francis Esca??o wrote:
  Good day! I have just installed OpenBSD 4.7 complete with the X
windowing
  system, verified it working with the twm default window manager, and I
 was
  able to install WindowMaker. Based on the documentation from
  http://openbsd.org/faq/faq11.html there's a guide on how to try a new
 window
  manager, but what I need is to replace the default twm with WindowMaker.
 Can
  anybody pls give me pointers? I may be googling erroneously, guidance
 would
  be gratefully appreciated. Thanks!

 Obviously you have not read it:
 http://openbsd.org/faq/faq11.html#CustomizingX



Re: About ospfd

2010-06-18 Thread Gregory Edigarov
On Fri, 18 Jun 2010 09:17:40 +0800 (SGT)
Kabayan kab4...@yahoo.com wrote:

 Hi all,
 
 I'm using OpenBSD 4.7 (GENERIC.MP) #9: Mon Mar 15 03:09:48 WIT 2010 
 I got problem about ospf traffic, the default traffic is too high,
 almost all traffic got to the default queue.
 
 I have checked using tcpdump for pflog0 and client anchor and there
 is no problem with my pf configuration.

What's your problem exactly? You didn't show us the full info, and
we're the usual people here, so we do not have extra senses yet...

-- 
With best regards,
Gregory Edigarov



Re: Intel PRO/1000 QP on Dell R610 and OpenBSD 4.7

2010-06-18 Thread uhu
Sevan / Venture37 venture37 at gmail.com writes:

 
 On 4 June 2010 16:57, Joerg Streckfuss streckfuss at dfn-cert.de wrote:
  Okey, we tested the newest snapshot but the issue remains.
 
  Any other clue?
 
  Joerg
 
 fire up sendbug
 
 


Exactly the same problem here on 5 different HP machines with recent Intel
PRO/1000 dual and quad-port cards on OpenBSD 4.6 and 4.7.

Reassigning the interrupts in the BIOS-setup helps, but the error reappears
sporadically on reboot.

Is help needed with bug reporting? Is bugfixing already in progress?

Uwe



Re: disk geometry issues when trying to set up encrypted partition

2010-06-18 Thread Eric Furman
On Fri, 18 Jun 2010 07:05 +0200, Han Boetes h...@mijncomputer.nl
wrote:
 Joachim Schipper wrote:
  The OpenBSD culture is not one of HOWTOs. You'll have to read
  the man pages and FAQ to get the information, I'm afraid.
 
 The FAQ is just another word for HOWTOs.

The FAQ is not a HOWTO.
It is much more than that.
The FAQ and man pages give you the information
you need to think for yourself.
If you can't think for yourself then OpenBSD is not for you.



Re: disk geometry issues when trying to set up encrypted partition

2010-06-18 Thread Rod Whitworth
On Fri, 18 Jun 2010 07:08:01 -0400, Eric Furman wrote:

On Fri, 18 Jun 2010 07:05 +0200, Han Boetes h...@mijncomputer.nl
wrote:
 Joachim Schipper wrote:
  The OpenBSD culture is not one of HOWTOs. You'll have to read
  the man pages and FAQ to get the information, I'm afraid.
 
 The FAQ is just another word for HOWTOs.

The FAQ is not a HOWTO.
It is much more than that.
The FAQ and man pages give you the information
you need to think for yourself.
If you can't think for yourself then OpenBSD is not for you.


+1

Han is just another word for Troll

*** NOTE *** Please DO NOT CC me. I am subscribed to the list.
Mail to the sender address that does not originate at the list server is 
tarpitted. The reply-to: address is provided for those who feel compelled to 
reply off list. Thankyou.

Rod/
---
This life is not the real thing.
It is not even in Beta.
If it was, then OpenBSD would already have a man page for it.



Re: RDR problem

2010-06-18 Thread Stuart Henderson
On 2010-06-17, Alessandro Baggi alessandro.ba...@gmail.com wrote:
 Hi stuart. Thanks for the reply. Can you give me a valid example to 
 understand this directive?
 Reading man pages and on the web I understand that with match directive, 
 the quick keyword has no durable effect, and the match directive set on 
 the fly the values e not after last rule match such as pass. True?

 It is a valid ruleset?

 match on $ext proto tcp from any to any port 80  rdr-to $dmz-host port 80
 
 ...
 ...
 pass on $ext proto tcp from any to  $hostweb port 80 synproxy state

not valid, rdr-to needs a direction (in/out).

also see this: 

   Translation
[...]
 Subsequent rules will see packets as they look after any addresses and
 ports have been translated.  These rules will therefore have to filter
 based on the translated address and port number.

so for the pass rule you probably want $dmz-host not $hostweb.

 pass on $ext proto tcp from any to any port 80 rdr-to $dmz-host port 80

 I must not to put another filter rule for pass this service such as pf 
 of openbsd4.5?

you don't need a separate rule. you can either do it this way,
with 'rdr-to' directly on the pass rule, or you can use separate
match and pass rules, depending on what works best for you and
your ruleset.


 Another question, in my example I want that my internal request for my 
 internal site in dmz, are redirected versus dmz directly. Staying at my 
 understandig, the ruleset must be:

 #redirect packet for http versus squid
 match in on $int proto tcp from $int:network to any port 80 rdr-to 
 $int:0 port 3128
 # redirect  packet for  mydomain.ath.cd to dmz-host
 match in on $int proto tcp from $int:network to mydomain.ath.cx port 80 
 rdr-to $dmz-host port 80

 # pass all traffic for int network
 pass in on $int from $int:network to any 


 than, if the $int network client sends a request for mydomain.ath.cx the 
 first rule match, the second match and when the pass rule will be 
 processed, settings take place and then redirected?

from a quick read, i think so, but you can test this yourself
much more easily than i can.


 thanks in advance

 Stuart Henderson wrote:
 match is a modifier. the settings are remembered and applied to the
 pass rule lower in the ruleset which permits the traffic to go through.



 On 2010-06-17, Alessandro Baggi alessandro.ba...@gmail.com wrote:
   
 Hi misc.
 I've a openbsd 4.7 firewall with 3 nic, one for lan, one for wan and one 
 for dmz. On the same machine I've a squid proxy, and in dmz i've a web 
 server.
 My problem is when I get a request for the web server on dmz by a lan 
 client.
 In my ruleset I've this rdr rules for http request:

 match in on $int proto tcp from $int:network to any port 80 rdr-to 
 $int:0 port 3128

 and it works fine for all requests.

 When I make from a $int:network client an http request like 
 http://mydomain.ath.cx;, the proxy (working with rdr rule or browser 
 config) give me the web managment of my router.
 Then I've tried a first set:

 match in quick on $int proto tcp from $int:network to mydomain.ath.cx 
 port 80 rdr-to $apache port 80
 match in quick on $int proto tcp from $int:network to $int:0 port 3128 
 rdr-to $apache port 80
 match in on $int  proto tcp from $int:network to any port 80 rdr-to 
 $int:0 port 3128

 but the behaviour is the same.

 I've tried to modify my rdr rules into (second set):

 pass in quick on $int proto tcp from $int:network to mydomain.ath.cx 
 port 80 rdr-to $apache port 80
 pass in quick on $int proto tcp from $int:network to $int:0 port 3128 
 rdr-to $apache port 80
 match in on $int proto tcp from $int:network to any port 80 rdr-to 
 $int:0 port 3128

 and it works fine.

 I've tried third ruleset:

 match in on $int proto tcp from $int:network to any port 80 rdr-to 
 $int:0 port 3128
 match in on $int proto tcp from any to mydomain.ath.cx port 80 rdr-to 
 $apache port 80

 but doesn't work.

 My question is about these three ruleset.

 Why in the first ruleset match in quick rules, the key quick does not 
 affect the third rule of squid redirection?
 Why the pass rules works instead the match rules?
 Why in the third ruleset match in on $int...doesn't work? The rules 
 parsing is the last match rule?


 thanks in advance



Relayd multiple X-Forwaded-For IP's

2010-06-18 Thread Keith
There must be two upstream firewalls from our servers that are adding 
X-Forwarded-For IP addresses. We curently have


header change X-Forwarded-For to $REMOTE_ADDR

but this is not giving us the IP that we want so we are trying to figure 
out how to get the other IP from the header. Is there a way to do this 
in Relayd ?


Thanks
Keith



OpenBSD as a laptop OS

2010-06-18 Thread Jean-Francois
Hello All,

I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
x86.
It would be used as internet browser, mail client, multimedia, pciture  video 
, etc ...

My question is simple, is OpenBSD convenient enough for a daily usage ?
What are the experiences about that ?

Just to be sure, as of today, is ntfs experimental or working, or not ? for 
read ? for r/w ?

I will certainly do with gnome wm.

I know such question might not be very convenient to answer, this is just to 
be sure I can peacefully back-up my data and reinstall freshly without 
worrying about anything but being using a great os.

Thanks



Re: OpenBSD as a laptop OS

2010-06-18 Thread Tomas Bodzar
There is a nice thing called FAQ. It's MUST READ for everyone on any
OS before start. And you can find things like this one
http://www.openbsd.org/faq/faq1.html#Desktop inside.

On Fri, Jun 18, 2010 at 1:59 PM, Jean-Francois jfsimon1...@gmail.com wrote:
 Hello All,

 I am thinking about changing my OS to OpenBSD on my laptop, which is standard
 x86.
 It would be used as internet browser, mail client, multimedia, pciture  video
 , etc ...

 My question is simple, is OpenBSD convenient enough for a daily usage ?
 What are the experiences about that ?

 Just to be sure, as of today, is ntfs experimental or working, or not ? for
 read ? for r/w ?

 I will certainly do with gnome wm.

 I know such question might not be very convenient to answer, this is just to
 be sure I can peacefully back-up my data and reinstall freshly without
 worrying about anything but being using a great os.

 Thanks



Re: OpenBSD, nut-2.4.3 and USB UPS

2010-06-18 Thread Alexey Suslikov
With USB-attached UPS, nut requires correct permissions not only for
/dev/ugen0.* but also for /dev/usb* to perform bus scan.

I do believe that +DISPLAY for nut port should reflect this fact so
one will have a chance to succeed without USB_DEBUG dance.

Here is my results:

battery.charge: 100
battery.voltage: 27.20
battery.voltage.high: 27.20
battery.voltage.low: 20.20
battery.voltage.nominal: 24.0
beeper.status: enabled
device.type: ups
driver.flag.novendor: enabled
driver.name: blazer_usb
driver.parameter.pollinterval: 2
driver.parameter.port: /dev/ugen0
driver.parameter.productid: 5161
driver.parameter.subdriver: cypress
driver.parameter.vendorid: 0665
driver.version: 2.4.3
driver.version.internal: 0.03
input.current.nominal: 8.0
input.frequency: 50.1
input.frequency.nominal: 50
input.voltage: 230.6
input.voltage.fault: 230.6
input.voltage.nominal: 230
output.voltage: 227.3
ups.delay.shutdown: 30
ups.delay.start: 180
ups.load: 6
ups.productid: 5161
ups.status: FSD OL
ups.temperature: 25.0
ups.type: offline / line interactive
ups.vendorid: 0665

[eaton]
driver = blazer_usb
port = /dev/ugen0
vendorid = 0665
productid = 5161
subdriver = cypress
novendor
default.battery.voltage.high = 27.20
default.battery.voltage.low = 20.20

As you can see, I'm not using megatec_usb driver like
http://www.networkupstools.org/compat/stable.html recommends for my
UPS since blazer_usb has better implementation of Megatec/Q1 protocol.

Alexey

On Wed, Jun 16, 2010 at 00:59,  kell...@gmail.com wrote:
 Alexey Suslikov wrote (06/15/10 18:49):
 I'm complete out of insights with my Eaton NV 2000 which is supported
 (http://www.networkupstools.org/compat/stable.html) by megatec_usb
 driver.

 I don't know if this will be helpful, but this works for me:

 $ cat /etc/nut/ups.conf | grep -v ^#
 [apc]
driver = usbhid-ups
port = /dev/ttyU0
desc = APC Back-UPS ES 550

 $ cat /etc/rc.local | grep -v ^#
 if [ -x /usr/local/bin/upsdrvctl ]; then
export NUT_CONFPATH=/etc/nut
/usr/local/bin/upsdrvctl -u root start  /dev/null 21
/usr/local/sbin/upsd -u root  /dev/null 21
/usr/local/sbin/upsmon -u root  /dev/null 21
 fi

 I know this is a different situation from yours, but you might want to
 try some of the tricks that worked for me.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Jussi Peltola
Search the archives.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Chris Bennett

Jean-Francois wrote:

Hello All,

I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
x86.
It would be used as internet browser, mail client, multimedia, pciture  video 
, etc ...


My question is simple, is OpenBSD convenient enough for a daily usage ?
What are the experiences about that ?

Just to be sure, as of today, is ntfs experimental or working, or not ? for 
read ? for r/w ?


I will certainly do with gnome wm.

I know such question might not be very convenient to answer, this is just to 
be sure I can peacefully back-up my data and reinstall freshly without 
worrying about anything but being using a great os.


Thanks


  

The other comment about reading the FAQ is right.

However, there are no comments on experiences in the FAQ.

OpenBSD will take an older laptop that crawls under Windows and make it 
pleasantly useful.




Re: OpenBSD as a laptop OS

2010-06-18 Thread Andreas Kahari
See FAQ http://www.openbsd.org/faq/faq1.html#Desktop

I've been using OpenBSD (mostly on laptops) as my primary work station
for eight years.  I'm a software developer, and I don't do sound or
video as part of my work.  Also, I don't have any use for NTFS.

Andreas

On Fri, Jun 18, 2010 at 01:59:22PM +0200, Jean-Francois wrote:
 Hello All,
 
 I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
 x86.
 It would be used as internet browser, mail client, multimedia, pciture  
 video 
 , etc ...
 
 My question is simple, is OpenBSD convenient enough for a daily usage ?
 What are the experiences about that ?
 
 Just to be sure, as of today, is ntfs experimental or working, or not ? for 
 read ? for r/w ?
 
 I will certainly do with gnome wm.
 
 I know such question might not be very convenient to answer, this is just to 
 be sure I can peacefully back-up my data and reinstall freshly without 
 worrying about anything but being using a great os.
 
 Thanks
 

-- 
Andreas Kdhdri, Ensembl Software Developer
European Bioinformatics Institute (EMBL-EBI)
Wellcome Trust Genome Campus, Hinxton
Cambridge CB10 1SD, United Kingdom



Re: OpenBSD as a laptop OS

2010-06-18 Thread Mateusz Gierblinski
Simple answer: it can. I'm using OpenBSD as a desktop OS for my T40 and I'm
able to do anything I need.

2010/6/18 Jussi Peltola pe...@pelzi.net

 Search the archives.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Vijay Sankar

Jean-Francois wrote:

Hello All,

I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
x86.


I thought from your previous postings you already do all this and more.

It would be used as internet browser, mail client, multimedia, pciture  video 
, etc ...


It is perfect for everything, except your mileage may vary based on what 
you mean by multimedia, pciture  video, etc.




My question is simple, is OpenBSD convenient enough for a daily usage ?
What are the experiences about that ?


Its great! Works very well on my laptops and netbooks and desktops.



Just to be sure, as of today, is ntfs experimental or working, or not ? for 
read ? for r/w ?


Not part of the base install. You have to build a custom kernel and I 
believe it is experimental and read only.




I will certainly do with gnome wm.

I know such question might not be very convenient to answer, this is just to 
be sure I can peacefully back-up my data and reinstall freshly without 
worrying about anything but being using a great os.


Go for it :)



Thanks




--
Vijay Sankar, M.Eng., P.Eng.
ForeTell Technologies Limited
59 Flamingo Avenue, Winnipeg, MB, Canada R3J 0X6
Phone: (204) 885-9535, E-Mail: vsan...@foretell.ca



Re: OpenBSD does not detect connection ( no carrier ) to ASMI52 Leased Line modem

2010-06-18 Thread Siju George
On Tue, May 11, 2010 at 11:33 PM, Stuart Henderson s...@spacehopper.org wrote:

 Are you able to try any different types of NIC? (either a newer realtek
 card using the re(4) driver, or something like fxp, de, sk, bge, em).

 Alternatively, connecting the modem via a switch might work.



IT didnt work :-)

But now the netgear is also showing problem dropping packets and this
is what we got from the support team of the ISP.

=

Attached is the screen shot when the laptop was directly connected to
the modem and tested. We are getting 2 Mbps upload and download
consistently without producing any packet drop to the ping request
given to DNS.

ISSUE : Mismatch in negotiation settings with modem and CPE.

CPE : Netgear WIFI Router with no option to manage negotiation settings.

ASMI52 Modem is set to Auto OFF 100F.

This mismatch will lead link to migrate to half duplex mode and making
issues in upload stream.

Advised Mr. Joby to migrate CPE that supports to manage negotiation settings.

=

So it is auto negotiation problem as Reyk suggested at first but how
to get rid of it in OpenBSD NIC?

thanks

--Siju



Re: OpenBSD does not detect connection ( no carrier ) to ASMI52 Leased Line modem

2010-06-18 Thread Stuart Henderson
On 2010/06/18 05:13, Siju George wrote:
 On Tue, May 11, 2010 at 11:33 PM, Stuart Henderson s...@spacehopper.org 
 wrote:
 
  Are you able to try any different types of NIC? (either a newer realtek
  card using the re(4) driver, or something like fxp, de, sk, bge, em).
 
  Alternatively, connecting the modem via a switch might work.
 
 
 
 IT didnt work :-)
 
 But now the netgear is also showing problem dropping packets and this
 is what we got from the support team of the ISP.
 
 =
 
 Attached is the screen shot when the laptop was directly connected to
 the modem and tested. We are getting 2 Mbps upload and download
 consistently without producing any packet drop to the ping request
 given to DNS.
 
 ISSUE : Mismatch in negotiation settings with modem and CPE.
 
 CPE : Netgear WIFI Router with no option to manage negotiation settings.
 
 ASMI52 Modem is set to Auto OFF 100F.
 
 This mismatch will lead link to migrate to half duplex mode and making
 issues in upload stream.
 
 Advised Mr. Joby to migrate CPE that supports to manage negotiation settings.
 
 =
 
 So it is auto negotiation problem as Reyk suggested at first but how
 to get rid of it in OpenBSD NIC?
 
 thanks
 
 --Siju

Either the ASMI52 should be set to allow auto-negotiation, or
your nic should be set to force 100Mb full-duplex (media 100baseTX
mediaopt full-duplex).

I suggest you try a different NIC if you can't get your rl(4) to
establish link.



1 out of 3 hunks failed--saving rejects to kerberosV/src/lib/krb5/crypto.c.rej

2010-06-18 Thread Tony Berth
when trying to patch a new i386 installation with the first patch I get the
following:


# patch -p0  001_kerberos.patch
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--
|Apply by doing:
|   cd /usr/src
|   patch -p0  001_kerberos.patch
|
|Rebuild and install the Kerberos 5 library:
|   cd lib/libkrb5
|   make obj
|   make depend
|   make
|   make install
|
|And then rebuild and install the Kerberos 5 KDC:
|   cd ../../kerberosV/libexec/kdc
|   make obj
|   make depend
|   make
|   make install
|
|
|Index: kerberosV/src/lib/krb5/crypto.c
|===
|RCS file: /cvs/src/kerberosV/src/lib/krb5/crypto.c,v
|retrieving revision 1.10
|diff -p -u -p -u -r1.10 crypto.c
|--- kerberosV/src/lib/krb5/crypto.c6 Oct 2006 07:09:10 -   1.10
|+++ kerberosV/src/lib/krb5/crypto.c30 Mar 2010 17:17:43 -
--
Patching file kerberosV/src/lib/krb5/crypto.c using Plan A...
Hunk #1 succeeded at 3463 (offset 12 lines).
Hunk #2 failed at 3543.
Hunk #3 succeeded at 3607 (offset 7 lines).
1 out of 3 hunks failed--saving rejects to
kerberosV/src/lib/krb5/crypto.c.rej
done

-

Thanks

Tony



OpenBSD 4.4 : snmp for monitoring interfaces

2010-06-18 Thread Rioux, Christophe
Hi

We tried to implemant a monitoring on a OpenBSD 4.4; I get an error message:
index not found (monitoring via Cacti, means net-snmp). My Cacti server is
hosted on another server.

I check the OID per snmp: .1.3.6.1.2.1.2.2.1.1 (this OID search the interface,
and go down to the values)
* In the 4.3 version, I get a result
* in the 4.4 version, there is an error = that's why cacti doesn't work and
find any values.

The other possibility is to build my own querries to build my graphs, so I
check per snmpwalk the differences between a 4.3 version and 4.4 version. No
big differences. As result I got following informations:

SNMPv2-SMI::enterprises.64512.1.8.128.1.2.1 = STRING: all
SNMPv2-SMI::enterprises.64512.1.8.128.1.2.2 = STRING: bge0
SNMPv2-SMI::enterprises.64512.1.8.128.1.2.3 = STRING: bge1


SNMPv2-SMI::enterprises.64512.1.8.128.1.6.1 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.2 = Counter64: 43789127
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.3 = Counter64: 21828412
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.4 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.5 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.6 = Counter64: 10085339
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.7 = Counter64: 340191
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.8 = Counter64: 22794680
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.9 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.10 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.11 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.12 = Counter64: 1921
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.13 = Counter64: 0
SNMPv2-SMI::enterprises.64512.1.8.128.1.6.14 = Counter64: 0

In the snmp result, how can I know which are the right values ? I know there
is somewhere the download and upload dataflow, but where ?

Maybe somebody does this work before and can help me ?

Thanks for feedback
Christophe



Re: Intel PRO/1000 QP on Dell R610 and OpenBSD 4.7

2010-06-18 Thread wrh
The same issue here - with different hardware - Supermicro X8DTU and
it's built-in dual Intel 82576 nics.

Running 4.7-patch.

Fails to initialize most of the time at boot (always em1), now and
then it works (initializes and gets link after boot).  em0 rarely
fails to initialize, but also rarely negotiates the link.

Sounds similar to this bug report?
http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=6301


Thanks,
-Bill

dmesg/pcidump:
OpenBSD 4.7-stable (GENERIC) #0: Wed Jun 16 12:05:23 CDT 2010
r...@sway.co.green-lake.wi.us:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 3211264000 (3062MB)
avail mem = 3118342144 (2973MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0x9e000 (81 entries)
bios0: vendor American Megatrends Inc. version 2.0 date 05/28/2010
bios0: Supermicro X8DTU
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP APIC MCFG SLIT OEMB HPET SSDT EINJ BERT ERST HEST
acpi0: wakeup devices NPE1(S4) NPE2(S4) NPE3(S4) NPE4(S4) NPE5(S4)
NPE6(S4) NPE7(S4) NPE8(S4) NPE9(S4) NPEA(S4) P0P1(S4) USB0(S4)
USB1(S4) USB2(S4) USB5(S4) EUSB(S4) USB3(S4) USB4(S4) USB6(S4)
USBE(S4) GBE_(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4)
P0P9(S4) SLPB(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5520 @ 2.27GHz, 2267.09 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: apic clock running at 133MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 9 pa 0xfec8a000, version 20, 24 pins
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (NPE1)
acpiprt2 at acpi0: bus 2 (NPE3)
acpiprt3 at acpi0: bus -1 (NPE4)
acpiprt4 at acpi0: bus 3 (NPE5)
acpiprt5 at acpi0: bus -1 (NPE6)
acpiprt6 at acpi0: bus 4 (NPE7)
acpiprt7 at acpi0: bus -1 (NPE8)
acpiprt8 at acpi0: bus 5 (NPE9)
acpiprt9 at acpi0: bus -1 (NPEA)
acpiprt10 at acpi0: bus 6 (P0P1)
acpiprt11 at acpi0: bus -1 (P0P4)
acpiprt12 at acpi0: bus -1 (P0P5)
acpiprt13 at acpi0: bus -1 (P0P6)
acpiprt14 at acpi0: bus -1 (P0P7)
acpiprt15 at acpi0: bus -1 (P0P8)
acpiprt16 at acpi0: bus -1 (P0P9)
acpicpu0 at acpi0: C3, C3, C1, PSS
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
ipmi at mainbus0 not configured
cpu0: unknown i686 model 0x1a, can't get bus clock
cpu0: EST: PSS not yet available for this processor
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel 5520 Host rev 0x22
ppb0 at pci0 dev 1 function 0 Intel X58 PCIE rev 0x22
pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 Intel PRO/1000 (82576) rev 0x01: apic 9
int 4 (irq 15), address 00:25:90:02:f4:9c
em1 at pci1 dev 0 function 1 Intel PRO/1000 (82576) rev 0x01: apic 9
int 16 (irq 14)em1: Hardware Initialization Failedem1: Unable to
initialize the hardware
ppb1 at pci0 dev 3 function 0 Intel X58 PCIE rev 0x22
pci2 at ppb1 bus 2
ppb2 at pci0 dev 5 function 0 Intel X58 PCIE rev 0x22
pci3 at ppb2 bus 3
ppb3 at pci0 dev 7 function 0 Intel X58 PCIE rev 0x22
pci4 at ppb3 bus 4
mfi0 at pci4 dev 0 function 0 Symbios Logic SAS1078 rev 0x04: apic 9
int 6 (irq 15), SAS 8704ELP
mfi0: logical drives 1, version 11.0.1-0028, 128MB RAM
scsibus0 at mfi0: 1 targets
sd0 at scsibus0 targ 0 lun 0: LSI, MegaRAID 8704ELP, 1.40 SCSI3 0/direct fixed
sd0: 238418MB, 512 bytes/sec, 488280064 sec total
ppb4 at pci0 dev 9 function 0 Intel X58 PCIE rev 0x22
pci5 at ppb4 bus 5
Intel X58 IOxAPIC rev 0x22 at pci0 dev 19 function 0 not configured
Intel X58 Misc rev 0x22 at pci0 dev 20 function 0 not configured
Intel X58 GPIO rev 0x22 at pci0 dev 20 function 1 not configured
Intel X58 RAS rev 0x22 at pci0 dev 20 function 2 not configured
Intel X58 Throttle rev 0x22 at pci0 dev 20 function 3 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 0 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 1 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 2 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 3 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 4 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 5 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 6 not configured
Intel X58 QuickData rev 0x22 at pci0 dev 22 function 7 not configured
uhci0 at pci0 dev 26 function 0 Intel 82801JI USB rev 0x00: apic 8
int 16 (irq 15)
uhci1 at pci0 dev 26 function 1 Intel 82801JI USB rev 0x00: apic 8
int 21 (irq 7)
uhci2 at pci0 dev 26 function 2 Intel 82801JI USB rev 0x00: apic 8
int 19 (irq 11)
ehci0 at pci0 dev 26 function 7 Intel 82801JI USB 

Re: OpenBSD 4.4 : snmp for monitoring interfaces

2010-06-18 Thread Tomas Bodzar
From http://www.openbsd.org/security.html :

OpenBSD 4.5 and earlier releases are not supported anymore. The
following paragraphs only list advisories issued while they were
maintained; these releases are likely to be affected by the advisories
for more recent releases.

On Fri, Jun 18, 2010 at 4:31 PM, Rioux, Christophe cri...@viseo.net wrote:
 Hi

 We tried to implemant a monitoring on a OpenBSD 4.4; I get an error message:
 index not found (monitoring via Cacti, means net-snmp). My Cacti server is
 hosted on another server.

 I check the OID per snmp: .1.3.6.1.2.1.2.2.1.1 (this OID search the interface,
 and go down to the values)
 * In the 4.3 version, I get a result
 * in the 4.4 version, there is an error = that's why cacti doesn't work and
 find any values.

 The other possibility is to build my own querries to build my graphs, so I
 check per snmpwalk the differences between a 4.3 version and 4.4 version. No
 big differences. As result I got following informations:

 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.1 = STRING: all
 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.2 = STRING: bge0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.3 = STRING: bge1
 

 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.1 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.2 = Counter64: 43789127
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.3 = Counter64: 21828412
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.4 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.5 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.6 = Counter64: 10085339
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.7 = Counter64: 340191
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.8 = Counter64: 22794680
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.9 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.10 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.11 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.12 = Counter64: 1921
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.13 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.14 = Counter64: 0

 In the snmp result, how can I know which are the right values ? I know there
 is somewhere the download and upload dataflow, but where ?

 Maybe somebody does this work before and can help me ?

 Thanks for feedback
 Christophe



Re: RDR problem

2010-06-18 Thread Alessandro Baggi

Hi there.

There were different errors on the last email. For the first rdr-to I 
have lost the direction, and for the second rule host specification, the 
same with different host.

But today, reading these mail, I've another question:

the rdr-to rules does not accept only inbound packet?

thanks in advance
Stuart Henderson wrote:

On 2010-06-17, Alessandro Baggi alessandro.ba...@gmail.com wrote:
  
Hi stuart. Thanks for the reply. Can you give me a valid example to 
understand this directive?
Reading man pages and on the web I understand that with match directive, 
the quick keyword has no durable effect, and the match directive set on 
the fly the values e not after last rule match such as pass. True?


It is a valid ruleset?

match on $ext proto tcp from any to any port 80  rdr-to $dmz-host port 80

...
...
pass on $ext proto tcp from any to  $hostweb port 80 synproxy state



not valid, rdr-to needs a direction (in/out).

also see this: 


   Translation
[...]
 Subsequent rules will see packets as they look after any addresses and
 ports have been translated.  These rules will therefore have to filter
 based on the translated address and port number.

so for the pass rule you probably want $dmz-host not $hostweb.

  

pass on $ext proto tcp from any to any port 80 rdr-to $dmz-host port 80

I must not to put another filter rule for pass this service such as pf 
of openbsd4.5?



you don't need a separate rule. you can either do it this way,
with 'rdr-to' directly on the pass rule, or you can use separate
match and pass rules, depending on what works best for you and
your ruleset.


  
Another question, in my example I want that my internal request for my 
internal site in dmz, are redirected versus dmz directly. Staying at my 
understandig, the ruleset must be:


#redirect packet for http versus squid
match in on $int proto tcp from $int:network to any port 80 rdr-to 
$int:0 port 3128

# redirect  packet for  mydomain.ath.cd to dmz-host
match in on $int proto tcp from $int:network to mydomain.ath.cx port 80 
rdr-to $dmz-host port 80


# pass all traffic for int network
pass in on $int from $int:network to any 



than, if the $int network client sends a request for mydomain.ath.cx the 
first rule match, the second match and when the pass rule will be 
processed, settings take place and then redirected?



from a quick read, i think so, but you can test this yourself
much more easily than i can.


  

thanks in advance

Stuart Henderson wrote:


match is a modifier. the settings are remembered and applied to the
pass rule lower in the ruleset which permits the traffic to go through.



On 2010-06-17, Alessandro Baggi alessandro.ba...@gmail.com wrote:
  
  

Hi misc.
I've a openbsd 4.7 firewall with 3 nic, one for lan, one for wan and one 
for dmz. On the same machine I've a squid proxy, and in dmz i've a web 
server.
My problem is when I get a request for the web server on dmz by a lan 
client.

In my ruleset I've this rdr rules for http request:

match in on $int proto tcp from $int:network to any port 80 rdr-to 
$int:0 port 3128


and it works fine for all requests.

When I make from a $int:network client an http request like 
http://mydomain.ath.cx;, the proxy (working with rdr rule or browser 
config) give me the web managment of my router.

Then I've tried a first set:

match in quick on $int proto tcp from $int:network to mydomain.ath.cx 
port 80 rdr-to $apache port 80
match in quick on $int proto tcp from $int:network to $int:0 port 3128 
rdr-to $apache port 80
match in on $int  proto tcp from $int:network to any port 80 rdr-to 
$int:0 port 3128


but the behaviour is the same.

I've tried to modify my rdr rules into (second set):

pass in quick on $int proto tcp from $int:network to mydomain.ath.cx 
port 80 rdr-to $apache port 80
pass in quick on $int proto tcp from $int:network to $int:0 port 3128 
rdr-to $apache port 80
match in on $int proto tcp from $int:network to any port 80 rdr-to 
$int:0 port 3128


and it works fine.

I've tried third ruleset:

match in on $int proto tcp from $int:network to any port 80 rdr-to 
$int:0 port 3128
match in on $int proto tcp from any to mydomain.ath.cx port 80 rdr-to 
$apache port 80


but doesn't work.

My question is about these three ruleset.

Why in the first ruleset match in quick rules, the key quick does not 
affect the third rule of squid redirection?

Why the pass rules works instead the match rules?
Why in the third ruleset match in on $int...doesn't work? The rules 
parsing is the last match rule?



thanks in advance




Re: disk geometry issues when trying to set up encrypted partition

2010-06-18 Thread Joachim Schipper
On Thu, Jun 17, 2010 at 01:35:29PM +0200, Robert wrote:
 Joachim Schipper wrote:
 Easy enough, just create a softraid CRYPTO volume on top of a softraid
 RAID-0 volume. Do keep good backups, including of the key you use.
 
 I remember that I asked something similar a year ago and the answer
 was rather don't do it - is this still valid?
 (creating a softraid crypto on top of softraid 0/1)
 
 http://marc.info/?l=openbsd-miscm=125139976027774

It may well be. Good catch.

Joachim



Re: OpenBSD 4.4 : snmp for monitoring interfaces

2010-06-18 Thread Rioux, Christophe
I saw on internet, there are the same issue on 4.6 and 4.7, but nowhere the
answer how to

-Message d'origine-
From http://www.openbsd.org/security.html :

OpenBSD 4.5 and earlier releases are not supported anymore. The following
paragraphs only list advisories issued while they were maintained; these
releases are likely to be affected by the advisories for more recent
releases.

On Fri, Jun 18, 2010 at 4:31 PM, Rioux, Christophe cri...@viseo.net wrote:
 Hi

 We tried to implemant a monitoring on a OpenBSD 4.4; I get an error
message:
 index not found (monitoring via Cacti, means net-snmp). My Cacti
 server is hosted on another server.

 I check the OID per snmp: .1.3.6.1.2.1.2.2.1.1 (this OID search the
 interface, and go down to the values)
 * In the 4.3 version, I get a result
 * in the 4.4 version, there is an error = that's why cacti doesn't
 work and find any values.

 The other possibility is to build my own querries to build my graphs,
 so I check per snmpwalk the differences between a 4.3 version and 4.4
 version. No big differences. As result I got following informations:

 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.1 = STRING: all
 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.2 = STRING: bge0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.2.3 = STRING: bge1
 

 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.1 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.2 = Counter64: 43789127
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.3 = Counter64: 21828412
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.4 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.5 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.6 = Counter64: 10085339
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.7 = Counter64: 340191
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.8 = Counter64: 22794680
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.9 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.10 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.11 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.12 = Counter64: 1921
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.13 = Counter64: 0
 SNMPv2-SMI::enterprises.64512.1.8.128.1.6.14 = Counter64: 0

 In the snmp result, how can I know which are the right values ? I know
 there is somewhere the download and upload dataflow, but where ?

 Maybe somebody does this work before and can help me ?

 Thanks for feedback
 Christophe



Re: OpenBSD as a laptop OS

2010-06-18 Thread Peter N. M. Hansteen
Chris Bennett ch...@bennettconstruction.biz writes:

 OpenBSD will take an older laptop that crawls under Windows and make
 it pleasantly useful.

And it will make even newer laptops more useful to some of us.

The only thing I've pretty much given up on is flash.  No big loss
since removing the flashplayer plugin means firefox will crash
slightly less often and you're spared a lot of the less useful ads.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Peter Kay
OpenBSD is absolutely fine for browser, mail and pictures. Once you install
gnome, the GUI will generally be the same as most other gnome desktops.

Flash and NTFS are sticking points. Neither work particularly well.

I've had variable experiences with VLC for video - it lost sync on earlier
releases of OpenBSD and VLC but may have improved.

Really, the easiest way is just to try it out! You could always dual boot if
not sure.

Peter



Re: OpenBSD 4.4 : snmp for monitoring interfaces

2010-06-18 Thread Martin Pelikán
2010/6/18, Rioux, Christophe cri...@viseo.net:
 Hi

 We tried to implemant a monitoring on a OpenBSD 4.4; I get an error message:
 index not found (monitoring via Cacti, means net-snmp). My Cacti server is
 hosted on another server.

So do we, our cacti is 0.8.7e, from some redhat repository quite some
time ago. The monitored server runs 4.7-release with some minor
patches. Oh, and the OpenBSD snmpd. Everything works out of the box.

 In the snmp result, how can I know which are the right values ? I know there
 is somewhere the download and upload dataflow, but where ?

You don't need that. Push New Graph, then Create New Host,
Generic SNMP-enabled host, SNMPv1 and properly set up community
name. New Graph again, choose the host and your interfaces should be
listed down there, ready to make graphs on. As simple as that. Please
make sure you run the latest versions of all the software (or at least
those that work for me). And finally don't forget to block snmp from
those you don't expect the access from. Also, listen-on option in
snmpd.conf is quite picky - even if you have multiple address on one
interface, you need to specify the correct one.

What snmp server do you run, at least?

-- 
Martin Pelikan



Re: OpenBSD as a laptop OS

2010-06-18 Thread bofh
On Fri, Jun 18, 2010 at 2:49 PM, Peter Kay syllops...@syllopsium.co.uk wrote:

 I've had variable experiences with VLC for video - it lost sync on earlier
 releases of OpenBSD and VLC but may have improved.

Best part about VLC issues is that - you can use mplayer!  And if you
mplayer issues, you can use... VLC!  Heh.


-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.
-- Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=30v_g83VHK4




Re: OpenBSD as a laptop OS

2010-06-18 Thread VICTOR TARABOLA CORTIANO
 Hello All,

 I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
 x86.
 It would be used as internet browser, mail client, multimedia, pciture  
 video 
 , etc ...


There is software for multimedia manipulation that run on OpenBSD.
See if they are good for you.

 My question is simple, is OpenBSD convenient enough for a daily usage ?
 What are the experiences about that ?

I use OpenBSD exclusively as an desktop and I can do everything I want.



Re: OpenBSD as a laptop OS

2010-06-18 Thread VICTOR TARABOLA CORTIANO
 The only thing I've pretty much given up on is flash.  No big loss
 since removing the flashplayer plugin means firefox will crash
 slightly less often and you're spared a lot of the less useful ads.


Well, one can still try Gnash or Swfdec.

If one just wants to see videos on Youtube, one can still use sites
such as tinyogg and pwnyoutube to download the video and forget about
flash. That's my method.



Re: OpenBSD as a laptop OS

2010-06-18 Thread J Sisson
On Fri, Jun 18, 2010 at 4:04 PM, VICTOR TARABOLA CORTIANO 
vt...@c3sl.ufpr.br wrote:

  My question is simple, is OpenBSD convenient enough for a daily usage ?
  What are the experiences about that ?

 I use OpenBSD exclusively as an desktop and I can do everything I want.

 Same here.  OpenBSD makes for a very stable and capable desktop.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Noah Pugsley

VICTOR TARABOLA CORTIANO wrote:

The only thing I've pretty much given up on is flash.  No big loss
since removing the flashplayer plugin means firefox will crash
slightly less often and you're spared a lot of the less useful ads.



Well, one can still try Gnash or Swfdec.

If one just wants to see videos on Youtube, one can still use sites
such as tinyogg and pwnyoutube to download the video and forget about
flash. That's my method.



And yt or youtube-dl from ports. Also, the greasmonkey scripts or 
whatever for firefox work great for youtube, vimeo and a few others.




dhcpd knob

2010-06-18 Thread patric conant
Is there a line to be added to dhcpd.conf to tell dhcpd to attempt to update
bind9 with hostnames from dhcp client, BIND is configured to allow updates
from the lan, and dhcpd and BIND are running on the same machine, I've seen
other bind implementations that do this by default, and others still that
have a knob in dhcpd.conf, but nothing in dhcpd's man pages seem to say
either way.

-- 
/\ASCII Ribbon Campaign
\ /Respect for low technology.
X Keep e-mail messages readable by any computer system.
/ \Keep it ASCII.



Restart tries to boot from wrong disk, cold start is fine

2010-06-18 Thread Jeff Ross

Hi all,

I'm building the first of a pair of firewalls to do carp and I'm running 
into a little hitch in the gitalong.


These identical Silicon Mechanics iServ R200 servers have 1 72GB SCSI 
disk each (dmesg below) that I intend to use to store local copy backup 
files for pushing up to our Amazon S3 account.  I need about 40GB to 
hold those files now, so I thought I'd use the real hard drive for data 
only (except for a 500M altroot partition).


I installed the latest snapshot onto a 4GB SanDisk usb drive--no problem 
there.  During the install I made the whole 4GB OpenBSD, and the same 
for the 72 GB drive.


Warm reboots always fail because the server is tries to boot from the 
SCSI hard drive.  All I get is the No Active Partition message.


If I power the server down, though, it boots just fine to the SanDisk 
and everything works as it should until the next reboot.


I've gone through every option in the bios I can see--the SanDisk is 
chosen as the first bootable device, then the two onboard nics, and I 
don't even put the SCSI drive in at the 4th option.


Hopefully someone has an idea on how to work around this.  No floppy or 
CD drive to put in a bootable with an /etc/boot.conf file, so that's out 
unless that's the only way.


Jeff

OpenBSD 4.7-current (GENERIC.MP) #36: Thu Jun 10 00:25:28 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

real mem  = 3757522944 (3583MB)
avail mem = 3653287936 (3484MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfa380 (61 entries)

bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
PS2M(S4) P0PC(S4) SLPB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000 0xcc000/0x1000 0xcd000/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: apic 9 
int 2 (irq 6)

scsibus0 at mpi0: 16 targets, initiator 7
sd0 at scsibus0 targ 0 lun 0: IBM-ESXS, ST373307LC FN, B25F SCSI3 
0/direct fixed

sd0: 70006MB, 512 bytes/sec, 143374000 sec total
mpi0: target 0 Sync at 160MHz width 16bit offset 63 QAS 1 DT 1 IU 1
ppb2 at pci1 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci3 at ppb2 bus 2
em0 at pci3 dev 1 function 0 Intel PRO/1000MT (82546GB) rev 0x03: apic 
10 int 0 (irq 10), address 00:1b:21:15:6a:82
em1 at pci3 dev 1 function 1 Intel PRO/1000MT (82546GB) rev 0x03: apic 
10 int 1 (irq 11), address 00:1b:21:15:6a:83

ppb3 at pci0 dev 3 function 0 Intel E7520 PCIE rev 0x0c
pci4 at ppb3 bus 

Re: OpenBSD as a laptop OS

2010-06-18 Thread Jacob Meuser
On Fri, Jun 18, 2010 at 02:31:52PM -0700, Noah Pugsley wrote:
 VICTOR TARABOLA CORTIANO wrote:
 The only thing I've pretty much given up on is flash.  No big loss
 since removing the flashplayer plugin means firefox will crash
 slightly less often and you're spared a lot of the less useful ads.
 
 
 Well, one can still try Gnash or Swfdec.
 
 If one just wants to see videos on Youtube, one can still use sites
 such as tinyogg and pwnyoutube to download the video and forget about
 flash. That's my method.
 
 
 And yt or youtube-dl from ports. Also, the greasmonkey scripts or
 whatever for firefox work great for youtube, vimeo and a few others.

yeah, greasemonkey + youtube without flash auto is *way* better
than swfdec or gnash for watching/downloading videos.

http://userscripts.org/scripts/show/50771

-- 
jake...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



Determining if PF is enabled

2010-06-18 Thread C. Bensend
Hey folks,

   I'm writing a Nagios plugin to verify whether PF is enabled on a
host, and I'm a bit stumped as to how to do it.

   pfctl -d and pfctl -e will tell me if it's already enabled or
already disabled, but I don't want a setuid or sudo-enabled plugin
to be manipulating a host's firewall.

   I could look at the last modification time of /var/log/pflog,
but what if the ruleset does not log?

   I've been through the archives and through pfctl(8) a number of
times, but either I'm missing something or it's not as simple as I
would have expected.

   I'm literate in shell scripts and/or perl, so those would probably
be my preferred methods.  If it comes down to C, I can probably
muddle with some of the source from pfctl to get something working,
but I would appreciate any advice from the people that know much
better.

   Thoughts, anyone?

Thanks!

Benny


-- 
I can do for you is - what can not no girl!
-- Spam email subject, 2010-01-15



Re: Determining if PF is enabled

2010-06-18 Thread C. Bensend
I'm writing a Nagios plugin to verify whether PF is enabled on a
 host, and I'm a bit stumped as to how to do it.

pfctl -d and pfctl -e will tell me if it's already enabled or
 already disabled, but I don't want a setuid or sudo-enabled plugin
 to be manipulating a host's firewall.

I already got the answer off-list...  A quick 'pfctl -s info' will
display the status in the first line.  I can use sudo and a little
scripting to work out the rest.

I looked at the output of that command several times, but somehow
I managed to miss the very first line.  :/

Thanks, everyone!

Benny


-- 
I can do for you is - what can not no girl!
-- Spam email subject, 2010-01-15



Re: OpenBSD as a laptop OS

2010-06-18 Thread Paolo Reyes Balleza
Video playback is where I've had the most problems. NTFS support is read
only so as long as you're not dual booting I don't see this as a
problem.

Setting it up for the first time was a PITA but a good learning
experience though.

On Fri, 2010-06-18 at 13:59 +0200, Jean-Francois wrote:
 Hello All,
 
 I am thinking about changing my OS to OpenBSD on my laptop, which is standard 
 x86.
 It would be used as internet browser, mail client, multimedia, pciture  
 video 
 , etc ...
 
 My question is simple, is OpenBSD convenient enough for a daily usage ?
 What are the experiences about that ?
 
 Just to be sure, as of today, is ntfs experimental or working, or not ? for 
 read ? for r/w ?
 
 I will certainly do with gnome wm.
 
 I know such question might not be very convenient to answer, this is just to 
 be sure I can peacefully back-up my data and reinstall freshly without 
 worrying about anything but being using a great os.
 
 Thanks



Re: OpenBSD as a laptop OS

2010-06-18 Thread Matthew Szudzik
On Fri, Jun 18, 2010 at 11:12:44PM +, Jacob Meuser wrote:
  And yt or youtube-dl from ports. Also, the greasmonkey scripts or
  whatever for firefox work great for youtube, vimeo and a few others.
 
 yeah, greasemonkey + youtube without flash auto is *way* better
 than swfdec or gnash for watching/downloading videos.
 
 http://userscripts.org/scripts/show/50771

These prepackaged choices (yt, youtube-dl, and the greasemonkey script)
are all a little too bloated for my taste.  Did you notice that the
youtube-dl script

 http://bitbucket.org/rg3/youtube-dl/src/tip/youtube-dl

is over 2000 lines long!  That's longer than the Surf web browser (which
is under 1000 lines).

 http://hg.suckless.org/surf/file/e83fbd17d63a/surf.c

I would rather maintain my own 4 line shell script for downloading
youtube videos:

sed -n 's/[^v]*v.\([^'\'']*\).*/curl '\''http:\/\/www.youtube.com\/ge'\
't_video_info?video_id=\1'\'' ; echo/p' | sh | sed -n 's/.*video_id=\'\
'([^'\'']*\).*token=\([^%'\'']*\).*/curl -L -o '\''\1.mp4'\'' '\''ht'\
'tp:\/\/www.youtube.com\/get_video?video_id=\1\t=\2=\fmt=18'\''/p' | sh

The script takes URLs for youtube videos as standard input (one per
line), and downloads the mp4 files.  And if it doesn't do exactly what I
need, then I customize it.

Understanding youtube's API is easier than depending on somebody else's
code, in my opinion.



Re: OpenBSD as a laptop OS

2010-06-18 Thread Jacob Meuser
On Sat, Jun 19, 2010 at 12:06:00AM +, Matthew Szudzik wrote:
 On Fri, Jun 18, 2010 at 11:12:44PM +, Jacob Meuser wrote:
   And yt or youtube-dl from ports. Also, the greasmonkey scripts or
   whatever for firefox work great for youtube, vimeo and a few others.
  
  yeah, greasemonkey + youtube without flash auto is *way* better
  than swfdec or gnash for watching/downloading videos.
  
  http://userscripts.org/scripts/show/50771
 
 These prepackaged choices (yt, youtube-dl, and the greasemonkey script)
 are all a little too bloated for my taste.  Did you notice that the
 youtube-dl script
 
  http://bitbucket.org/rg3/youtube-dl/src/tip/youtube-dl
 
 is over 2000 lines long!  That's longer than the Surf web browser (which
 is under 1000 lines).
 
  http://hg.suckless.org/surf/file/e83fbd17d63a/surf.c
 
 I would rather maintain my own 4 line shell script for downloading
 youtube videos:
 
 sed -n 's/[^v]*v.\([^'\'']*\).*/curl '\''http:\/\/www.youtube.com\/ge'\
 't_video_info?video_id=\1'\'' ; echo/p' | sh | sed -n 's/.*video_id=\'\
 '([^'\'']*\).*token=\([^%'\'']*\).*/curl -L -o '\''\1.mp4'\'' '\''ht'\
 'tp:\/\/www.youtube.com\/get_video?video_id=\1\t=\2=\fmt=18'\''/p' | sh
 
 The script takes URLs for youtube videos as standard input (one per
 line), and downloads the mp4 files.  And if it doesn't do exactly what I
 need, then I customize it.
 
 Understanding youtube's API is easier than depending on somebody else's
 code, in my opinion.

perhaps, but clicking on buttons and seeing the video in the browser
(and having seeking and fullscreen controls, as well as choices for
which version of the video in there as well) is pretty convenient.

-- 
jake...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



EM_MIPS==LOONGSON?

2010-06-18 Thread Jordi Beltran Creix
Hi,

I was reading ELF headers from different arches when I found that for
Loongson binaries em_machine==EM_MIPS. However, elf(5) and
elf_abi.h-sys/exec_elf.h describe EM_MIPS as /* MIPS R3000
Big-Endian only */, whereas I think Loongson processors are little
endian(objdump says elf64-littlemips).

So, do these descriptions need to be changed or is it something else?



Re: 1 out of 3 hunks failed--saving rejects to kerberosV/src/lib/krb5/crypto.c.rej

2010-06-18 Thread Nick Holland
On 06/18/10 09:42, Tony Berth wrote:
 when trying to patch a new i386 installation with the first patch I get the
 following:
...
 Patching file kerberosV/src/lib/krb5/crypto.c using Plan A...
 Hunk #1 succeeded at 3463 (offset 12 lines).
 Hunk #2 failed at 3543.
 Hunk #3 succeeded at 3607 (offset 7 lines).
 1 out of 3 hunks failed--saving rejects to
 kerberosV/src/lib/krb5/crypto.c.rej
 done

you did something wrong.
You didn't tell us what you did, so that's the most I can^Wwill say.
For giggles, I just tested it against the 4.7 source, and (surprise!)
it worked just fine.

So, start with faq5, starting at the top, and work your way through at
least to 5.4 (10.15 would be a good read after 5.1-5.4) and see if you
can find what variation from the proper process that you felt was
harmless or what command you typed in blindly without understanding
what it meant and how it interacted with other things.

(and yes, I have a pretty good idea what you did, and understanding
faq5.html will set you straight.  Assuming you can pick and chose
which parts you read is how you got in trouble.  It is a dense read,
but pretty important to understanding what you were trying to do here.
 It is worth the time to understand...)

Nick.

/nfs1/test $ patch -p0 001_kerberos.patch
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--
|Apply by doing:
|   cd /usr/src
|   patch -p0  001_kerberos.patch
|
|Rebuild and install the Kerberos 5 library:
|   cd lib/libkrb5
|   make obj
|   make depend
|   make
|   make install
|
|And then rebuild and install the Kerberos 5 KDC:
|   cd ../../kerberosV/libexec/kdc
|   make obj
|   make depend
|   make
|   make install
|
|
|Index: kerberosV/src/lib/krb5/crypto.c
|===
|RCS file: /cvs/src/kerberosV/src/lib/krb5/crypto.c,v
|retrieving revision 1.10
|diff -p -u -p -u -r1.10 crypto.c
|--- kerberosV/src/lib/krb5/crypto.c6 Oct 2006 07:09:10 -
  1.10
|+++ kerberosV/src/lib/krb5/crypto.c30 Mar 2010 17:17:43 -
--
Patching file kerberosV/src/lib/krb5/crypto.c using Plan A...
Hunk #1 succeeded at 3451.
Hunk #2 succeeded at 3531.
Hunk #3 succeeded at 3600.
done



Re: Restart tries to boot from wrong disk, cold start is fine

2010-06-18 Thread Nick Holland
On 06/18/10 18:59, Jeff Ross wrote:
 Hi all,
 
 I'm building the first of a pair of firewalls to do carp and I'm running 
 into a little hitch in the gitalong.
 
 These identical Silicon Mechanics iServ R200 servers have 1 72GB SCSI 
 disk each (dmesg below) that I intend to use to store local copy backup 
 files for pushing up to our Amazon S3 account.  I need about 40GB to 
 hold those files now, so I thought I'd use the real hard drive for data 
 only (except for a 500M altroot partition).
 
 I installed the latest snapshot onto a 4GB SanDisk usb drive--no problem 
 there.  During the install I made the whole 4GB OpenBSD, and the same 
 for the 72 GB drive.
 
 Warm reboots always fail because the server is tries to boot from the 
 SCSI hard drive.  All I get is the No Active Partition message.
 
 If I power the server down, though, it boots just fine to the SanDisk 
 and everything works as it should until the next reboot.
 
 I've gone through every option in the bios I can see--the SanDisk is 
 chosen as the first bootable device, then the two onboard nics, and I 
 don't even put the SCSI drive in at the 4th option.
 
 Hopefully someone has an idea on how to work around this.  No floppy or 
 CD drive to put in a bootable with an /etc/boot.conf file, so that's out 
 unless that's the only way.

Well, obviously this is a hardware issue, not an OpenBSD issue, but a
work around may be fairly simple.  Disable the SCSI BIOS on the
system, and it won't be able to boot from the SCSI disk.  The only
question is, is your USB drive still there (to the bios) to boot.  The
problem may not be that the BIOS has a different warm boot vs. cold
boot boot order (yes, some do), but that the USB drive might have gone
missing to the BIOS on warm boot, so it picks something else to boot
from.  I've seen some pretty buggy BIOSs when it comes to booting off
USB devices...nothing surprises me here.

On some SATA and IDE interfaces which have given me booting issues, I
just peel the ROM chip off the board.  Assuming your SCSI interface is
on the main board, I don't think I'll suggest this solution. :)

However, you have made yourself a system of unnecessary complexity --
just skip the USB drive.  Your machines clearly need the SCSI drive to
be fully functional (note that if you pull sd0 (the SCSI disk) out,
sd1 (the USB drive) becomes sd0, and now your fstab won't work.  All
the flash disk has done is add a new failure point.

Also note that while you say you have an altroot setup in place, it is
obviously not set up properly, otherwise the altroot drive should be
booting when the system tries to boot from the HD (sounds like an
fdisk problem).  I tell people to test their altroot setup.  You did,
but it didn't work.

So..again, just create a 1g or 2g OS partition on your HDs, use the
rest as you had planned, and skip the USB flash disk.  The complexity
has already hurt you.  It will most likely do so again, AFTER it is in
production.

Nick.


 Jeff
 
 OpenBSD 4.7-current (GENERIC.MP) #36: Thu Jun 10 00:25:28 MDT 2010
  dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
 cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
 cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 real mem  = 3757522944 (3583MB)
 avail mem = 3653287936 (3484MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
 SMBIOS rev. 2.3 @ 0xfa380 (61 entries)
 bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
 bios0: SiMech R200
 acpi0 at bios0: rev 2
 acpi0: tables DSDT FACP APIC OEMB
 acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
 EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
 PS2M(S4) P0PC(S4) SLPB(S4)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: apic clock running at 200MHz
 cpu1 at mainbus0: apid 6 (application processor)
 cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
 cpu1: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 cpu2 at mainbus0: apid 1 (application processor)
 cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
 cpu2: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 cpu3 at mainbus0: apid 7 (application processor)
 cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
 cpu3: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
 ioapic1 at mainbus0: apid 11 

Running systat queues Leads to System Hang

2010-06-18 Thread Daniel Melameth
On my firewall at home, on occasion, running systat queues leaves me with an
unresponsive system.  pings are not returned and the keyboard at the console
is unresponsive.  Sometimes the command works fine and sometimes it does
not--though it does system the issue is more likely to occur when the system
has an uptime of more than a week or two.  I'm uncertain how to troubleshoot
this further and I have been unable to reproduce the issue on other
4.7-stable systems (though these other systems are not running the same
hardware and software).

Any ideas appreciated.



OpenBSD 4.7 (GENERIC) #0: Wed May 19 21:44:26 MDT 2010
dan...@meth.internal.melameth.com:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III (GenuineIntel 686-class) 446 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,
SSE
real mem  = 334458880 (318MB)
avail mem = 315371520 (300MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 10/12/01, BIOS32 rev. 0 @ 0xfbf92,
SMBIOS rev. 2.3 @ 0xec000 (45 entries)
bios0: vendor TOSHIBA version Version 2.60 date 10/12/2001
bios0: TOSHIBA Satellite Pro 4600
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 100%
apm0: AC on, battery charge high, estimated 2:12 hours
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf01c0/144 (7 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #5 is the last bus
bios0: ROM list: 0xc/0xc000 0xe/0x1!
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82815 Host rev 0x11
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xf000, size 0x240
ppb0 at pci0 dev 1 function 0 Intel 82815 AGP rev 0x11
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 Trident CyberBlade XP rev 0x63
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x03
pci2 at ppb1 bus 2
mem address conflict 0x1400/0x1000
mem address conflict 0x14001000/0x1000
fxp0 at pci2 dev 8 function 0 Intel 82562 rev 0x03, i82562: irq 11,
address 00:00:39:a4:df:32
inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
cbb0 at pci2 dev 13 function 0 Toshiba ToPIC100 CardBus rev 0x31: irq 11
cbb1 at pci2 dev 13 function 1 Toshiba ToPIC100 CardBus rev 0x31: irq 11
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 4 device 0 cacheline 0x0, lattimer 0x0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 5 device 0 cacheline 0x0, lattimer 0x0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 Intel 82801BAM LPC rev 0x03: 24-bit
timer at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801BAM IDE rev 0x03: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: TOSHIBA MK6026GAX
wd0: 16-sector PIO, LBA, 57231MB, 117210240 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TOSHIBA, DVD-ROM SD-C2502, 1313 ATAPI
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x03: irq 11
uhci1 at pci0 dev 31 function 4 Intel 82801BA USB rev 0x03: irq 11
auich0 at pci0 dev 31 function 5 Intel 82801BA AC97 rev 0x03: irq 11, ICH2
AC97
ac97: codec id 0x594d4800 (Yamaha YMF743-S)
ac97: codec features 18 bit DAC, No 3D Stereo
audio0 at auich0
Intel 82801BA Modem rev 0x03 at pci0 dev 31 function 6 not configured
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
usb0 at uhci0: USB revision 1.0
uhub0 at usb0 Intel UHCI root hub rev 1.00/1.00 addr 1
usb1 at uhci1: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
biomask ef6d netmask ef6d ttymask 
mtrr: Pentium Pro MTRR support
fxp1 at cardbus0 dev 0 function 0 Intel 8255x rev 0x09: irq 11, address
00:a0:c9:bc:ad:ad
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
fxp2 at cardbus1 dev 0 function 0 Intel 8255x rev 0x09: irq 11, address
00:03:47:18:1f:5d
inphy2 at fxp2 phy 1: i82555 10/100 PHY, rev. 4
root on wd0a swap on wd0b dump on wd0b
WARNING: / was not properly unmounted