Re: new kind of info organizer, on OpenBSD: OneModel

2016-01-28 Thread luke call
On 01/28/16 02:41, Craig Skinner wrote: > Have a dig about /usr/ports/productivity/ > > I use taskwarrior, which has tasksh. Thanks for the tip. Maybe I'm presenting OneModel in the wrong way. Its vision is much bigger than task management, but I'm not sure how to best make that clear to the

implementing circular queue for tcpdump logging

2016-01-28 Thread Alan McKay
Hi folks, Something I've done on other platforms e.g on a firewall is have tcpdump running and logging to disk. You know ahead of time how much disk space to allocate to this task, and there are command line options on tcpdump that you can adjust to accomplish this. So it will always occupy

Re: ipsec between three networks

2016-01-28 Thread Dewey Hylton
for us, ospf works fine. and in our testing, bgp was much slower to respond to network events. each of our sites has a pair of openbsd boxes clustered via carp. each site has two different isps. this adds up to quite a few different paths to/from each site. on multiple occasions, we've received

Re: implementing circular queue for tcpdump logging

2016-01-28 Thread sven falempin
syslog has memory buffer that rotates. (:name:size) pflogd can log, tcpump | logger is you want something else problem solved. On Thu, Jan 28, 2016 at 10:03 AM, Alan McKay wrote: > Hi folks, > > Something I've done on other platforms e.g on a firewall is have > tcpdump

Re: bandwidth usage limits with pf, etc.

2016-01-28 Thread Mihai Popescu
I was using trafshow from ports, it is not so geeky but it works. Maybe there are better tools.

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Ingo Schwarze
Hi, Antoine Jacoutot wrote on Thu, Jan 28, 2016 at 10:41:52AM +0100: > As mentioned in another thread already: > # ln -s /etc/rc.d/mydaemon /etc/rc.d/mydaemon2 > Then use mydaemon2_flags ... in rc.conf.local. This seems to be a recurring user question. Do you consider this addition useful? I

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Stuart Henderson
On 2016-01-28, Ingo Schwarze wrote: > I'd love to make the example more specific and document an actual > use case that frequently occurs in practice, but even though many > have said that such cases do occur, i can't think of any. For > example, for httpd(8), it looks like all

Re: Computer hangup : scsi_xfer pool exhausted!

2016-01-28 Thread Laurence Tratt
On Wed, Jan 27, 2016 at 10:31:28AM +, Sébastien Morand wrote: Hello Sébastien, > I have a computer hanging up every 4/5 days. It's no more accessible by > network and keyboard is not responding. The only message displayed in > console log is "scsi_xfer pool exhausted!" which is documented by

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Antoine Jacoutot
> # ln -s httpd httpd2 > > That's a terrible name. The next admin coming along will have no Duh, I was just making a point. > clue what this second httpd is needed for. As I said, I thing it'd be a worthful addition to the doc indeed. However I don't think this should go into rcctl. "I

Re: [SOLVED] with pain / was: APU2 WLE200NX ATHN0: Device timeout

2016-01-28 Thread Stuart Henderson
On 2016-01-27, Kapfhammer, Stefan wrote: > thanks for all the hints with the WiFi problem on an > (beta testing) APU2b4 with a Compex WLE200NX > wireless mini PCIE card. [..] > > At the time I bought the board, the mSATA SSD, WiFi card, pigtails and > dual antennas‎, PCengines had

Re: Squid slow in connecting to SSL

2016-01-28 Thread Stuart Henderson
On 2016-01-28, Kim Zeitler wrote: > currently I try to solve the phenomenon, that certain SSL sites are slow > when accessed via squid on OpenBSD. Mostly ownCloud in my case as well > as several web shops. The login screen alone taking minutes to load. I'm not seeing

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Claudio Jeker
On Thu, Jan 28, 2016 at 06:52:18PM +0100, Ingo Schwarze wrote: > Hi, > > Antoine Jacoutot wrote on Thu, Jan 28, 2016 at 10:41:52AM +0100: > > > As mentioned in another thread already: > > # ln -s /etc/rc.d/mydaemon /etc/rc.d/mydaemon2 > > Then use mydaemon2_flags ... in rc.conf.local. > > This

Solved. Daily cron error in 5.7

2016-01-28 Thread Luciano
Hello, I found the trick, it's not a system message, but a message of another server sent erroneously. Because my OpenBSD is a mail server. Sorry and thanks. Il 28/01/2016 10:22, Marcus MERIGHI ha scritto: > luis...@tin.it (giacomo), 2016.01.26 (Tue) 20:17 (CET): >> On 25.01.16, 13:02, Craig

Re: implementing circular queue for tcpdump logging

2016-01-28 Thread Lyndon Nerenberg
Has anyone done something like this with OpenBSD? I don't see anything obvious and was wondering what others might have done to accomplish this. Perhaps some kind of wrapper script ... We had the same issue a couple of months ago. I just brought over the tcpdump source from FreeBSD and

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Remi Locherer
On Thu, Jan 28, 2016 at 06:52:18PM +0100, Ingo Schwarze wrote: > Hi, > > Antoine Jacoutot wrote on Thu, Jan 28, 2016 at 10:41:52AM +0100: > > > As mentioned in another thread already: > > # ln -s /etc/rc.d/mydaemon /etc/rc.d/mydaemon2 > > Then use mydaemon2_flags ... in rc.conf.local. > > This

Re: rc.d and rtable

2016-01-28 Thread Vadim Zhukov
27 янв. 2016 г. 21:29 пользователь "Jiri B" написал: > > On Wed, Jan 27, 2016 at 01:40:14PM +0100, Antoine Jacoutot wrote: > > On Wed, Jan 27, 2016 at 06:47:57AM -0500, Jiri B wrote: > > > Would it be worth to extend rc.d for rtable knobs? > > > > > > -

Re: rc.d and rtable

2016-01-28 Thread Jiri B
On Thu, Jan 28, 2016 at 11:27:40AM +0300, Vadim Zhukov wrote: > [...] > The code looks like more or less fine (I'll do a more careful review a bit > later), but there are documentation bits missing. That was a POC, anyway I'm not very familiar with mandoc :/ j.

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Alexandre Ratchov
On Wed, Jan 27, 2016 at 10:51:50PM +0100, Reyk Floeter wrote: > > Well, we "tradionally" had setproctitle("[priv]") in the parent. I > changed the tradition to setproctitle("parent"). > > I have no objections with changing this in the parent (but keeping the > setproctitles in the children) to

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Jiri B
On Thu, Jan 28, 2016 at 09:49:32AM +0100, Alexandre Ratchov wrote: > $ ps ax |grep sndiod > 14501 ?? Ssp 0:00.00 sndiod: helper (sndiod) ^^ excuse my ignorance but what's purpose of repeating daemon name in brackets? j.

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Antoine Jacoutot
> Fine, this is what I suggested as the first option. > > But let's do it everywhere and not just for httpd - > don't use setproctitle in the parent process. > > It does make sense for many more privsep daemons, especially in combination > with rdomains (ntpd, iked, …). bgpd would probably not

Re: Daily cron error in 5.7

2016-01-28 Thread Marcus MERIGHI
luis...@tin.it (giacomo), 2016.01.26 (Tue) 20:17 (CET): > On 25.01.16, 13:02, Craig Skinner wrote: > > Hi Luciano, > > > > On 2016-01-24 Sun 19:52 PM |, Luciano wrote: > > > run-parts: /etc/cron.daily/logrotate exited with return code 1 > > ^ ^ what are these? >

Re: rc.d and rtable

2016-01-28 Thread Claudio Jeker
On Wed, Jan 27, 2016 at 09:47:04PM +0100, Antoine Jacoutot wrote: > > > rc.d framework is so nice... not sure if this is nice way but it > > > works. Maybe check for existing rtable is not great. > > > > If I see this correctly you add a foo_rtable variable to rc.conf.local. > > I think there is

Re: rc.d and rtable

2016-01-28 Thread Antoine Jacoutot
On Thu, Jan 28, 2016 at 03:50:33AM -0500, Jiri B wrote: > On Thu, Jan 28, 2016 at 11:27:40AM +0300, Vadim Zhukov wrote: > > [...] > > The code looks like more or less fine (I'll do a more careful review a bit > > later), but there are documentation bits missing. > > That was a POC, anyway I'm not

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Paolo Aglialoro
When this goes implemented, how will one start/stop/reload/check the single instance or all instances through /etc/rc.d/ ?

Squid slow in connecting to SSL

2016-01-28 Thread Kim Zeitler
Hello all currently I try to solve the phenomenon, that certain SSL sites are slow when accessed via squid on OpenBSD. Mostly ownCloud in my case as well as several web shops. The login screen alone taking minutes to load. I tested this also with squid running on a debian vm showing no

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Stuart Henderson
On 2016/01/28 08:50, Reyk Floeter wrote: > > On 27.01.2016, at 23:31, Stuart Henderson wrote: > > > > This does the trick. It probably doesn't make sense to run multiple > > copies of all of the privsep daemons though I see definite use cases > > for httpd, snmpd [v4 and v6

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Antoine Jacoutot
On Thu, Jan 28, 2016 at 10:29:56AM +0100, Paolo Aglialoro wrote: > When this goes implemented, how will one start/stop/reload/check the single > instance or all instances through /etc/rc.d/ ? You'll have a different rc.d script and associated rc.conf variables for each of your instances.

Re: new kind of info organizer, on OpenBSD: OneModel

2016-01-28 Thread Craig Skinner
Hi Luke, On 2016-01-27 Wed 18:20 PM |, luke call wrote: > > If you've ever used emacs org-mode, to-do list programs or the like, > this might be of interest. Have a dig about /usr/ports/productivity/ I use taskwarrior, which has tasksh. Cool. -- http://www.taskwarrior.org/

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Antoine Jacoutot
On Thu, Jan 28, 2016 at 10:45:31AM +0100, Kamil Cholewiński wrote: > On Thu, 28 Jan 2016, Paolo Aglialoro wrote: > > When this goes implemented, how will one start/stop/reload/check the single > > instance or all instances through /etc/rc.d/ ? > > I hate to repeat myself, but

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Kamil Cholewiński
On Thu, 28 Jan 2016, Paolo Aglialoro wrote: > When this goes implemented, how will one start/stop/reload/check the single > instance or all instances through /etc/rc.d/ ? I hate to repeat myself, but runit solves all of these problems cleanly, with no need for ps grepping,

Re: rc.d and rtable

2016-01-28 Thread Antoine Jacoutot
> > # ln -s /etc/rc.d/sshd /etc/rc.d/sshdt2 > > # rcctl enable ssht2 > > # rcctl set ssht2 flags -f /etc/ssh/wunder_config > > Aha, that is what I was looking for. So if this works I'm totally happy :) > Didn't know that you can just symlink rc scripts and everything will work. Yeah, this was

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread lists
Thu, 28 Jan 2016 18:52:18 +0100 Ingo Schwarze > I'd love to make the example more specific and document an actual > use case that frequently occurs in practice, but even though many > have said that such cases do occur, i can't think of any. I have this use case, and have not

"Available disks are: none" on Sony Vaio SVZ13115GGXI

2016-01-28 Thread Ben Alex
This laptop has 2 x Samsung 128 GB SSD drives and a RAID controller which reports as "Intel Rapid Storage Technology (Option ROM version 11.0.0.1339)". OpenBSD 5.7, 5.8 and current (20160125) installers each report "Available disks are: None". Available system BIOS settings (XHCI Mode, Execute

No more proxy on ftp(1)?

2016-01-28 Thread arrowscript
Hi, I just did the upgrade to 5.9 -current and found that socks connections don't work for ftp(1) and, of course, the perl scripts using it (pkg_add). Is this a expected behaviour? I'm using the "torsocks" wrapper to force socks to localhost:9050. This have something to do with new pledge

Re: new kind of info organizer, on OpenBSD: OneModel

2016-01-28 Thread Peter Hessler
On 2016 Jan 28 (Thu) at 08:56:18 -0700 (-0700), luke call wrote: :On 01/28/16 02:41, Craig Skinner wrote: :> Have a dig about /usr/ports/productivity/ :> :> I use taskwarrior, which has tasksh. : :Thanks for the tip. Maybe I'm presenting OneModel in the wrong :way. Its vision is much bigger than

Re: implementing circular queue for tcpdump logging

2016-01-28 Thread Alan McKay
On Thu, Jan 28, 2016 at 10:31 AM, sven falempin wrote: > syslog has memory buffer that rotates. (:name:size) > pflogd can log, tcpump | logger is you want something else > > problem solved. Thanks. I should have thought of pflogd! Looks like a modification of the

Re: No more proxy on ftp(1)?

2016-01-28 Thread Stuart Henderson
On 2016-01-29, arrowscr...@mail.com wrote: > Hi, > I just did the upgrade to 5.9 -current and found that socks connections don't > work for ftp(1) and, of course, the perl scripts using it (pkg_add). Is this > a expected behaviour? > I'm using the "torsocks" wrapper to

Re: No more proxy on ftp(1)?

2016-01-28 Thread arrowscript
Thanks. Yes, it does core dump on "Abort trap". Any idea on how I can force ftp(1) to socks5? The man page say nothing about proxy other than http or ftp, and I have not set a transparent proxy yet... Good to know that pledge is doing his job. So far, no other problem with the transition