Re: ping time fluctuates, any idea?
It does fixes the problem, thanks for the help! I'll make sure to include full dmesg next time Thanks, On Tue, Sep 10, 2019 at 12:23 PM Richard Procter < richard.n.proc...@gmail.com> wrote: > Hello, > > > On 9/09/2019, at 8:45 PM, Jihyun Yu wrote: > > > > It seems that time from ping command fluctuates. Here's a output from > ping > > command. > > [...snip ping with negative rtt...] > > This is symptomatic of unsynchronized time stamp counters (TSC). > > I would expect that setting: > > # sysctl kern.timecounter.hardware=acpihpet0 > > would fix your ping results, and probably improve your ntpd(8) > performance, too. > > There has been some work in this area on -current. > > best, > Richard. > > PS. Please make sure to include a complete dmesg next time - > half a dmesg is like half a photograph! > > > 00=2828 01=a1a1 02=f7f7 03=2020 04=d9d9 05=5b5b 06=0b0b 07=3030 > > isa0 at pcib0 > > isadma0 at isa0 > > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo > > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > > pckbd0 at pckbc0 (kbd slot) > > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > > pcppi0 at isa0 port 0x61 > > spkr0 at pcppi0 > > wbsio0 at isa0 port 0x2e/2: NCT6776F rev 0x33 > > lm1 at wbsio0 port 0x290/8: NCT6776F > > pci13 at mainbus0 bus 255 > > "Intel E5 QPI Link" rev 0x07 at pci13 dev 8 function 0 not configured > > vendor "Intel", unknown product 0x3c83 (class system subclass > > miscellaneous, rev 0x07) at pci13 dev 8 function 3 not configured > > vendor "Intel", unknown product 0x3c84 (class system subclass > > miscellaneous, rev 0x07) at pci13 dev 8 function 4 not configured > > "Intel E5 QPI Link" rev 0x07 at pci13 dev 9 function 0 not configured > > vendor "Intel", unknown product 0x3c93 (class system subclass > > miscellaneous, rev 0x07) at pci13 dev 9 function 3 not configured > > vendor "Intel", unknown product 0x3c94 (class system subclass > > miscellaneous, rev 0x07) at pci13 dev 9 function 4 not configured > > "Intel E5 PCU" rev 0x07 at pci13 dev 10 function 0 not configured > > "Intel E5 PCU" rev 0x07 at pci13 dev 10 function 1 not configured > > "Intel E5 PCU" rev 0x07 at pci13 dev 10 function 2 not configured > > "Intel E5 PCU" rev 0x07 at pci13 dev 10 function 3 not configured > > "Intel E5 Scratch" rev 0x07 at pci13 dev 11 function 0 not configured > > "Intel E5 Scratch" rev 0x07 at pci13 dev 11 function 3 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 12 function 0 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 12 function 1 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 12 function 2 not configured > > "Intel E5 SAD" rev 0x07 at pci13 dev 12 function 6 not configured > > "Intel E5 SAD" rev 0x07 at pci13 dev 12 function 7 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 13 function 0 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 13 function 1 not configured > > "Intel E5 Unicast" rev 0x07 at pci13 dev 13 function 2 not configured > > "Intel E5 Broadcast" rev 0x07 at pci13 dev 13 function 6 not configured > > "Intel E5 Home Agent" rev 0x07 at pci13 dev 14 function 0 not configured > > "Intel E5 Home Agent" rev 0x07 at pci13 dev 14 function 1 not configured > > "Intel E5 TA" rev 0x07 at pci13 dev 15 function 0 not configured > > "Intel E5 RAS" rev 0x07 at pci13 dev 15 function 1 not configured > > "Intel E5 TAD" rev 0x07 at pci13 dev 15 function 2 not configured > > "Intel E5 TAD" rev 0x07 at pci13 dev 15 function 3 not configured > > "Intel E5 TAD" rev 0x07 at pci13 dev 15 function 4 not configured > > "Intel E5 TAD" rev 0x07 at pci13 dev 15 function 5 not configured > > "Intel E5 TAD" rev 0x07 at pci13 dev 15 function 6 not configured > > "Intel E5 Thermal" rev 0x07 at pci13 dev 16 function 0 not configured > > "Intel E5 Thermal" rev 0x07 at pci13 dev 16 function 1 not configured > > "Intel E5 Error" rev 0x07 at pci13 dev 16 function 2 not configured > > "Intel E5 Error" rev 0x07 at pci13 dev 16 function 3 not configured > > "Intel E5 Thermal" rev 0x07 at pci13 dev 16 function 4 not configured > > "Intel E5 Thermal" rev 0x07 at pci13 dev 16 function 5 not configured > > "Intel E5 Error" rev 0x07 at pci13 dev 16 function 6 not configured > > "Intel E5 Error" rev 0x07 at pci13 dev 16 function 7 not configured > > "Intel E5 DDRIO" rev 0x07 at pci13 dev 17 function 0 not configured > > "Intel E5 R2PCIE" rev 0x07 at pci13 dev 19 function 0 not configured > > "Intel E5 PCIE Monitor" rev 0x07 at pci13 dev 19 function 1 not > configured > > "Intel E5 QPI" rev 0x07 at pci13 dev 19 function 4 not configured > > "Intel E5 QPI Link Monitor" rev 0x07 at pci13 dev 19 function 5 not > > configured > > "Intel E5 QPI Link Monitor" rev 0x07 at pci13 dev 19 function 6 not > > configured > > vmm0 at mainbus0: VMX/EPT > > uhub4 at uhub0 port 1 configuration 1 interface 0 "Intel Rate Matching > Hub" > > rev 2.00/0.00 addr 2 > > uhub5 at uhub3 port 1 configuration 1 interface 0 "Intel Rate Matching > Hub" > > rev 2.00/0.00
Re: DVD & how to overcome mkisofs
hi all . now i use openbsd snapshots(6.6) and manage to watch DVD . 1) mount /dev/cd0c /mnt 2)$ mplayer -v /mnt/VIDEO_TS/VTS_11_1.VOB | grep 'audio stream' ==> Found audio stream: 128 ==> Found audio stream: 129 3)mplayer /mnt/VIDEO_TS/VTS_11_1.VOB -aid 129 -nosub -- regards
Re: Iked and PKCS7
Tristan Pilat(cont...@tristanpilat.com) on 2019.09.09 10:02:32 +0200: > Hello all, > > It's the first time I'm trying to set up a site-to-site IKEv2 VPN with a > non OpenBSD device at the other side. I've been asked to provide a CSR, > then they sent me a PKCS7 certificate in return. > > Is there any way to install this kind of certificate with iked? If so, how > do I proceed? > > Thank you for your help. PKCS7 is just another format (actually one that can contain multiple certs in one container). Something like openssl pkcs7 -print_certs -in file.p7b -out file.pem can be used to convert it. /B
Re: arpwatch on OpenBSD vm misinterpreting data?
Paul Hanson wrote: > > That arpwatch notice just shows that there was a packet from an IP address > > that hadn't been seen before. What makes you think it's a spoofing attempt? > > The newly advertised IP used the same mac as the default gateway. > > > Something like this might be seen if e.g. a new IP address was added on the > > default gateway router. > > This would be the most "comforting" rationale though I would expect my > hosting provider to be more forthcoming about an infrastructure change. and precisely what does this have to do with OpenBSD?
Re: arpwatch on OpenBSD vm misinterpreting data?
> That arpwatch notice just shows that there was a packet from an IP address > that hadn't been seen before. What makes you think it's a spoofing attempt? The newly advertised IP used the same mac as the default gateway. > Something like this might be seen if e.g. a new IP address was added on the > default gateway router. This would be the most "comforting" rationale though I would expect my hosting provider to be more forthcoming about an infrastructure change. Additionally, traffic was observed via TCP80 and TCP443 testing the configuration of HTTP and TLS protocols. Leading me to believe the IP was not benign. > A tcpdump from the same time that the arpwatch notice was triggered might give > a clearer picture. Without knowing more about the network config I couldn't > say for sure, but it's quite possible that the hosting provider does protect > against arp shenanigans. Agreed that tcpdump would be useful though I would expect arpwatch to be just as reliable. I have no doubt my hosting provider has certain protections in place. I've been a customer for a number of months with this being the first alert. Thanks, Paul
Re: Question regarding server hardware
On 2019-09-07, James Huddle wrote: >> I recently purchased a Dell T-330 server that I had intended to >> install OpenBSD on and use as a serious web server. My goal was to >> have more control than would be (naturally) given with, say an AWS VM. >> And by control, I mean what is *not* running on the box - security-wise. >> >> Apparently, Dell ships these with an abundance of "security features" >> already on the box. And not a lot of obvious opt-outs. And a proclivity >> not not understand that "no means no" in regard to turning off these >> features. >> One of which used 60% of (one of 8) processors, all the time. Constantly >> running >> one of my processors at 60% - as long as it was powered up. >I don't think that is from some hidden "security feature". >Where is the CPU use showing up? Can you send output from "top -Sn", >"vmstat -i" and a complete dmesg? Is there something I could do (like top) to discover why my external HD turns itself on every 5 seconds after powering down the main box? -Jim On Tue, Sep 10, 2019 at 8:47 AM Stuart Henderson wrote: > On 2019-09-07, James Huddle wrote: > > I recently purchased a Dell T-330 server that I had intended to > > install OpenBSD on and use as a serious web server. My goal was to > > have more control than would be (naturally) given with, say an AWS VM. > > And by control, I mean what is *not* running on the box - security-wise. > > > > Apparently, Dell ships these with an abundance of "security features" > > already on the box. And not a lot of obvious opt-outs. And a proclivity > > not not understand that "no means no" in regard to turning off these > > features. > > One of which used 60% of (one of 8) processors, all the time. Constantly > > running > > one of my processors at 60% - as long as it was powered up. > > I don't think that is from some hidden "security feature". > Where is the CPU use showing up? Can you send output from "top -Sn", > "vmstat -i" and a complete dmesg? > > >
Re: athn bugs: usbd_free_xfer and fail HT-MCS
Stefan Sperling wrote: > In cases where you have to reboot the system, I believe you are seeing > effects from bugs in our USB stack, related to management of available > power on the bus. > > I don't have time or interest to dig into this, sorry. But this is an area > where we realy need some help. Several USB wifi drivers have had bugs filed > against them that look similar to this, and which tend to disappear when > using such devices on a different machine with a different USB chipset. Very true. Outside wireless also.
Re: documentation for building a new package?
Hi, Antal Ispanovity wrote on Tue, Sep 10, 2019 at 11:39:41AM +0200: > 2019-09-10 11:30 GMT+02:00, Mayuresh Kathe : >> what do i need to read regarding steps and procedure >> for building a new package and having it included in >> the openbsd repository? > If it is intended to be in ports: > https://www.openbsd.org/faq/ports/index.html Correct. > If you want your package to be included in the binary packages > then I don't know. In the vast majority of cases, that is automatic from a porter's perspective. Once a developer has committed the new port and linked it to the ports tree Makefiles, official bulk builds will automatically build the package(s) and distribute them via the official servers. There are rare exceptions of ports that do not produce packages in the official bulk builds - for example when the license does not permit distributing pre-compiled packages, or when they are marked as BROKEN. Yours, Ingo
Re: Question regarding server hardware
On 2019-09-07, James Huddle wrote: > I recently purchased a Dell T-330 server that I had intended to > install OpenBSD on and use as a serious web server. My goal was to > have more control than would be (naturally) given with, say an AWS VM. > And by control, I mean what is *not* running on the box - security-wise. > > Apparently, Dell ships these with an abundance of "security features" > already on the box. And not a lot of obvious opt-outs. And a proclivity > not not understand that "no means no" in regard to turning off these > features. > One of which used 60% of (one of 8) processors, all the time. Constantly > running > one of my processors at 60% - as long as it was powered up. I don't think that is from some hidden "security feature". Where is the CPU use showing up? Can you send output from "top -Sn", "vmstat -i" and a complete dmesg?
Re: arpwatch on OpenBSD vm misinterpreting data?
On 2019-09-09, Paul Hanson wrote: > TLDR; - Arpwatch new station alert showed arp spoofing attempt. Cloud > hosting provider is adamant that arpwatch is misinterpreting data. > > OpenBSD 6.5 vm running in a cloud hosting provider: > > WEB# uname -a > OpenBSD WEB 6.5 GENERIC.MP#3 amd64 > > Arpwatch installed: > > WEB# pkg_info arpwatch | grep Information > Information for inst:arpwatch-2.1a15p19 > > Received arpwatch notification: > > WEB# grep arpwatch /var/log/daemon > Aug 29 10:43:57 WEB arpwatch: new station 2.2.3.12 00:00:00:00:00:01 > > Checked arp table and found the mac address matched that of the default > gateway. > > WEB# arp -a > Host Ethernet AddressNetif ExpireFlags > 2.2.2.100:00:00:00:00:01vio0 9m30s > web22:22:22:22:22:22vio0 permanent l That arpwatch notice just shows that there was a packet from an IP address that hadn't been seen before. What makes you think it's a spoofing attempt? Something like this might be seen if e.g. a new IP address was added on the default gateway router. > Later watching arp traffic showed typical conversations between the > host and default gateway. No other arp traffic was observed. > > WEB# tcpdump -lnettt -i vio0 arp > > I'm interested to hear feedback from misc@ as I didn't get a response > from the arpwatch list. Is there a log or config I should check? > Perhaps another utility to consider? Is my cloud hosting provider > misinterpreting data? Do you suppose they had unplanned & unannounced > maintenance? Anything else? A tcpdump from the same time that the arpwatch notice was triggered might give a clearer picture. Without knowing more about the network config I couldn't say for sure, but it's quite possible that the hosting provider does protect against arp shenanigans.
Re: 6.6-beta (RAMDISK_CD) #281 hangs on fsck
> On 10 Sep 2019, at 10:03, Hrvoje Popovski wrote: > > On 9.9.2019. 11:39, David Gwynne wrote: >> This should be fixed in -current now. A snapshot should pick it up in a day >> or so. Sorry for the inconvenience. >> >> Cheers, >> dlg > > Hi, > > with new snapshot from 09-Sep-2019 bsd.rd and sysupgrade is working > normally with mfii.. Also confirmed from my end. Thanx for the quick turn around. Mischa
Re: documentation for building a new package?
On Tue, 10 Sep 2019, Mayuresh Kathe wrote: > what do i need to read regarding steps and procedure > for building a new package and having it included in > the openbsd repository? Read the porting guide: https://www.openbsd.org/faq/ports/guide.html Also good references are ports(7) and bsd.port.mk(5). This video was quite useful to me when I did my first update of a port: https://www.youtube.com/watch?v=z_TnemhzbXQ I would also ask on po...@openbsd.org if you have any questions. Cheers, -- Paco Esteban. 5818130B8A6DBC03
Re: athn bugs: usbd_free_xfer and fail HT-MCS
On Mon, Sep 09, 2019 at 03:08:42PM -0300, soiahf...@airmail.cc wrote: > New issue prompted today: > > athn0: device time out > athn0: firmware command 0x11 timed out > athn0: could not remove station 1 (-address-) from table > athn0: firmware command 0x14 timed out > athn0: firmware command 0x15 timed out > > I was unable to reconnect. Solved after physically removing the > usb adapter and restarting the network (sh /etc/network), unlike > the previous issue, which was only solved after rebooting the system. > Sometimes the interface mode keeps changing between OFDM48 and OFDM58, > even though I've forced the mode in hostname.athn0. > > Please let me know how I can bring more useful informations (debug) > to solve these issues i athn, hopefully before the new release. > In cases where you have to reboot the system, I believe you are seeing effects from bugs in our USB stack, related to management of available power on the bus. I don't have time or interest to dig into this, sorry. But this is an area where we realy need some help. Several USB wifi drivers have had bugs filed against them that look similar to this, and which tend to disappear when using such devices on a different machine with a different USB chipset.
Re: Meaning of 'OpenBSD -stable binary packages'
On 2019-09-10, Michael Hekeler wrote: > Hello all. > > I am running 6.5 STABLE. > This release was with PHP 7.1.28. So my webserver runs PHP 7.1.28. > > Today I wanted to install an additional PHP driver for postgresql and I > realized that there are only plugins for PHP versions 7.1.31 and 7.1.32 > (and 7.2.x + 7.3.x) available with pkg_add. > > So my question is if the new announced binary updates for packages means > that the released versions are gone? > Do I have to edit /etc/installurl to follow -stable without the updates > for packages? > Have I misunderstood the mail on the list about the binary updates... You have two options: 1. (recommended) - update your packages (pkg_add -u) to get updates for the security releases of PHP to 7.1.32 / etc. 2. (not recommended) - if you want to ignore the security fixes for packages and just use the ones present at release, you can set PKG_PATH in the environment to just include the release directory, PKG_PATH=(mirror)/pub/OpenBSD/6.5/packages/(arch)/ (obviously, filling in (mirror) and (arch) with the relevant mirror address and cpue architecture e.g. aarch64, amd64, ..).
Re: Impossible to remove a broken package on 6.5.
More specifically:
add an indirection to solving dependencies for pure pkg_delete, so that
we don't end up constructing full UpdateSets for no reason
Index: AddCreateDelete.pm
===
RCS file: /cvs/src/usr.sbin/pkg_add/OpenBSD/AddCreateDelete.pm,v
retrieving revision 1.43
diff -u -p -r1.43 AddCreateDelete.pm
--- AddCreateDelete.pm 27 Feb 2018 22:46:53 - 1.43
+++ AddCreateDelete.pm 10 Sep 2019 09:45:36 -
@@ -171,6 +171,13 @@ sub ntogo_string
$self->f("");
}
+sub solve_dependency
+{
+ my ($self, $solver, $dep, $package) = @_;
+ # full dependency solving with everything
+ return $solver->really_solve_dependency($self, $dep, $package);
+}
+
package OpenBSD::AddCreateDelete;
use OpenBSD::Error;
Index: PkgDelete.pm
===
RCS file: /cvs/src/usr.sbin/pkg_add/OpenBSD/PkgDelete.pm,v
retrieving revision 1.45
diff -u -p -r1.45 PkgDelete.pm
--- PkgDelete.pm10 Jul 2018 10:37:59 - 1.45
+++ PkgDelete.pm10 Sep 2019 09:45:36 -
@@ -131,6 +131,13 @@ sub deleteset_from_location
return
$self->deleteset->add_older(OpenBSD::Handle->from_location($location));
}
+sub solve_dependency
+{
+ my ($self, $solver, $dep, $package) = @_;
+ # simpler dependency solving
+ return $solver->find_dep_in_installed($self, $dep);
+}
+
package OpenBSD::DeleteSet;
sub setup_header
{
Index: Dependencies/SolverBase.pm
===
RCS file: /cvs/src/usr.sbin/pkg_add/OpenBSD/Dependencies/SolverBase.pm,v
retrieving revision 1.10
diff -u -p -r1.10 SolverBase.pm
--- Dependencies/SolverBase.pm 7 Jul 2018 06:25:53 - 1.10
+++ Dependencies/SolverBase.pm 10 Sep 2019 09:45:36 -
@@ -326,7 +326,8 @@ sub solve_dependency
$state->say("No cache hit on #1", $dep->{pattern});
}
- $self->really_solve_dependency($state, $dep, $package);
+ # we need an indirection because deleting is simpler
+ $state->solve_dependency($self, $dep, $package);
}
sub solve_depends
Re: documentation for building a new package?
On Tue, Sep 10, 2019 at 09:30:33AM +, Mayuresh Kathe wrote: > what do i need to read regarding steps and procedure > for building a new package and having it included in > the openbsd repository? Web site, porting information
Re: documentation for building a new package?
2019-09-10 11:30 GMT+02:00, Mayuresh Kathe : > what do i need to read regarding steps and procedure > for building a new package and having it included in > the openbsd repository? It it is intended to be in ports: https://www.openbsd.org/faq/ports/index.html If you want your package to be included in the binary packages then I don't know. > >
documentation for building a new package?
what do i need to read regarding steps and procedure for building a new package and having it included in the openbsd repository?
Meaning of 'OpenBSD -stable binary packages'
Hello all. I am running 6.5 STABLE. This release was with PHP 7.1.28. So my webserver runs PHP 7.1.28. Today I wanted to install an additional PHP driver for postgresql and I realized that there are only plugins for PHP versions 7.1.31 and 7.1.32 (and 7.2.x + 7.3.x) available with pkg_add. So my question is if the new announced binary updates for packages means that the released versions are gone? Do I have to edit /etc/installurl to follow -stable without the updates for packages? Have I misunderstood the mail on the list about the binary updates...
Re: 6.6-beta (RAMDISK_CD) #281 hangs on fsck
On 9.9.2019. 11:39, David Gwynne wrote: > This should be fixed in -current now. A snapshot should pick it up in a day > or so. Sorry for the inconvenience. > > Cheers, > dlg Hi, with new snapshot from 09-Sep-2019 bsd.rd and sysupgrade is working normally with mfii.. thank you ...
Re: Impossible to remove a broken package on 6.5.
On Fri, Sep 06, 2019 at 07:13:21AM -0700, Chris Cappuccio wrote: > Angelo Rossi [angelo.rossi.home...@gmail.com] wrote: > > > > # pkg_delete -v kicad > > Can't locate object method "updateset_with_new" via package > > "OpenBSD::PkgDelete::State" at /usr/libdata/perl5/OpenBSD/Dependencies.pm > > line 309. > > > > Your /usr/libdata/perl5/OpenBSD directory is corrupted, this should exist > in /usr/libdata/perl5/OpenBSD/PkgAdd.pm > > Your upgrade seems to have failed Nope, there was a specific scenario which got wrong. The problem has been fixed sometimes after 6.4, a few months ago. Updating pkg_* should be safe, independently of the rest of the system. Otherwise, just let kicad stay around until updating to 6.6 in a few months.
Re: Impossible to remove a broken package on 6.5.
On Fri, Sep 06, 2019 at 10:55:32AM +0200, Angelo Rossi wrote: > # pkg_delete -v kicad > Can't locate object method "updateset_with_new" via package > "OpenBSD::PkgDelete::State" at /usr/libdata/perl5/OpenBSD/Dependencies.pm > line 309. Update your pkg tools to -current, nothing bad will happen to the rest of your install.
