Chris wrote:
> I am trying to get the shell history with page-up but looks like it's
> not working.
Do you really mean page-up, not cursor-up?
--
Christian "naddy" Weisgerber na...@mips.inka.de
Theo de Raadt wrote:
> I have been in commuinication with a few people who have told me
> stories that Wim received donations, obviously meant for the OpenBSD
> project, collected at European conference tables -- and that this
> money has not made it to the OpenBSD project.
At all the European c
Dirk Mast wrote:
> perhaps this is just some stupid "where is the unmute button thing", but I
> don't get it working (no sound with aucat started or the other way).
>
> azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x02: apic 2
> int 22 (irq 14)
> azalia0: codecs: Realtek ALC885
On 2018-12-15, Mihai Popescu wrote:
> I want to modify the char used for pkg_add (and other pkg_ suite)
> progress bar from "*" to "|" but i am unable to figure out where is
> the actual code for this. I managed to found /usr/sbin/pkg_add but
> there are another links in there, and perl for me is
On 2018-12-28, Denis Fondras wrote:
>> I'm using OpenBSD 6.4 on a pcengines apu2 box as a router/firewall for a
>> CenturyLink DSL (pppoe) connection.
>>
>> [aaron@apu2] ~$ ndp -an
>> Neighbor Linklayer Address Netif ExpireS
>> Flags
>> ndp: ioctl(SIOCGNBRINFO_I
On 2019-01-04, Mihai Popescu wrote:
> Can someone tell me a font close to this to use for xterm in X?
ports/fonts/spleen
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2019-01-21, Radek wrote:
> ikev2 quick active esp from $local_gw to $remote_gw \
> from $local_lan to $remote_lan peer $remote_gw \
> ikesa auth hmac-sha1 enc aes-128 prf hmac-sha1 group modp1024 \
> childsa enc aes-128-ctr \
> psk "pass"
>
> That increased VPN throughput up to 750KB/s but it
On 2019-02-03, Stuart Henderson wrote:
>> If your CPU supports AES-NI, the kernel and base software will use it by
>> default.
>
> You do need to pick suitable ciphers though. And it is only supported
> on OpenBSD/amd64 not OpenBSD/i386.
Only the kernel support (IPsec, softraid crypto) is limite
Solene Rapenne:
> When using a bioctl crypto softraid, as blocks are encrypted
> on the disk, does it mean the system can detect if disk has
> been altered when reading a block?
No. Crypto softraid uses AES-XTS, which does not include any sort
of integrity or authentication check. (This would r
On 2019-03-08, "Peter J. Philipp" wrote:
> I'm wondering if this particular USB clock is supported in OpenBSD.
> https://www.meinbergglobal.com/english/products/usb-dcf77-clock.htm
> it's predecessor is the USB5131 model, which is supported under the
> umbg(4) driver.
(I hate "I don't know eithe
On 2019-03-09, Roderick wrote:
> The default changed, X does not receive Tcp connections.
In addition, the default /etc/pf.conf blocks connections to the
X11 server:
# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010
--
Christian "naddy"
Peter J. Philipp:
> Thanks for your reply. I mailed meinberg whether they give out datasheets to
> their products so that I can modify the driver. If I don't manage to make the
> new one working, is there interest by german or european developers to take
> on the hardware or money to buy their o
On 2019-03-15, Patrick Wildt wrote:
> CVSROOT: /cvs
> Module name: src
> Changes by: patr...@cvs.openbsd.org 2019/03/15 17:20:35
>
> Modified files:
> sys/dev/usb: xhci.c
>
> Log message:
> Improve and enable isochronous transfers in xhci(4). [...]
Wow, that appears to be the
On 2019-03-31, randy.hart...@gmail.com wrote:
> ssh-keygen's available hashes are md5, sha1, sha256, sha384, and
> sha512 (See digest-{openssl,libc}.c). ssh-keygen(1)'s man page
> shows valid fingerprint hashes as only md5 and sha256. All these
> hashes[1] were available when the man page decla
I don't remember if I ever posted it, but I've been using an "upgrade"
script to download bsd.rd, verify it, move it to /bsd, and reboot.
With florian@'s additions in -current, I have now extended the
script to download the sets and kick off an unattended upgrade.
In the best case, you simply run
Vijay Sankar:
> Tested it on a system running
I'm not asking for tests.
It's just a little script I find helpful to make use of the unattended
upgrade functionality that was added to -current. I posted the
script because somebody else might find it useful, too. Or use it
as a starting point or
On 2019-04-24, Christian Weisgerber wrote:
> With florian@'s additions in -current, I have now extended the
> script to download the sets and kick off an unattended upgrade.
... and this has now been supplanted by /usr/sbin/sysupgrade.
--
Christian "n
On 2019-04-27, Kevin Chadwick wrote:
> How difficult would it be to have a sysupgrade flag to
What sysupgrade and the unattended upgrade do is they automate an
upgrade with ALL DEFAULT settings. Like only pressing enter in the
installer's (U)pgrade mode.
If you want non-defaults, then you need
On 2019-04-27, Levente wrote:
> The headphone in question is the Platronics RIG 500 HD, which connects
> through the USB port (instead of 3.5mm jacks).
> mixerctl output is provided below along with dmesg.
Your headphones, which are really a USB audio adapter with attached
headphones, are a se
On 2019-04-27, Christian Weisgerber wrote:
> It is my theoretical understanding that USB audio gadgets typically
> come with a uhid(4) device, as does yours above, and you would use
> usbhidctl(1) to list and manipulate the available controls.
No, that is wrong.
Looking over uaudio
On 2019-05-09, Henry Bonath wrote:
> I'm not sure how many folks out there are PowerPC users, but I was
> just curious if anyone had an idea on if or when we might see those
> out in the mirrors.
The build has been running for 25 days so far, across two machines,
and the packages will be uploade
On 2019-05-09, Henry Bonath wrote:
> I figured that was the case, I suppose I was a little afraid that they
> weren't coming!
Each release, XY.html (so 65.html now) has a paragraph
Many pre-built packages for each architecture:
listing the architectures and the respective package count. If
On 2019-05-09, Christian Weisgerber wrote:
> The build has been running for 25 days so far, across two machines,
> and the packages will be uploaded once they are finished.
I just signed the packages. They'll become available in a day or so.
--
Christian "n
On 2019-05-14, Marc Espie wrote:
> We also have (had?) a speech synthesis system in
> audio/festival
We deleted that. Somebody would need to create a new port for a
more recent release.
> I don't think we have any other speech synthesis open source
> software in the ports tree.
There's audio/
The amd64 snapshot with BUILDINFO
Build date: 1559355853 - Sat Jun 1 02:24:13 UTC 2019
is very broken. Specifically, the boot loader is broken. If you
upgrade and the new boot(8) is installed, you may no longer be able
to boot the machine. Recovering from this will require booting
from a diff
On 2019-06-01, Christian Weisgerber wrote:
> The amd64 snapshot with BUILDINFO
> Build date: 1559355853 - Sat Jun 1 02:24:13 UTC 2019
> is very broken. Specifically, the boot loader is broken.
Sorry, I forgot to follow up: This has been fixed for more than a
day now.
--
Christi
On 2019-06-04, Patrick Wildt wrote:
> I'd love to have one as well...
I hadn't intended to buy a new laptop anytime soon, but the Thinkpad
X395 is tempting...
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2019-06-05, Andreas Kusalananda Kähäri wrote:
> When running under set -e, why does
> eval false || echo ok
> terminate the script with the execution of eval?
I think that's a bug.
> then why does the below behave differently?
> eval ! true || echo ok
That's actually the documented,
On 2019-06-10, mabi wrote:
> Bypassing the IPsec tunnel I get around 500 Mbit/s of bandwidth throughput
> which is quite satisfying. The bandwidth throughput over my IPsec tunnel
> achieves a max of 80 Mbit/s which I was sort of expecting with the default
> encryption settings (auth hmac-sha2-
mabi:
> Thanks for the tip regarding the cpu cost of the authentication algorithm.
> Now I was wondering how do you use the AES-GCM combo? I can't find any auth
> or enc parameters mentioning that combo.
enc aes-128-gcm etc.
--
Christian "naddy" Weisgerber na
mabi:
> > enc aes-128-gcm etc.
>
> That part for the "enc" parameter makes sense to me but what about the "auth"
> parameter?
No "auth". AES-GCM is an authenticated encryption algorithm, i.e.,
it handles both encryption and authentication at the same time.
Specifying an additional "auth" algor
mabi:
> Last question hopefully... Reading the iked.conf man page I conclude that all
> I need for that is to add to my ikev2 config is the following additional
> parameter:
>
> childsa enc aes-128-gcm
Correct.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2019-06-13, "Theo de Raadt" wrote:
>> I always considered that su is coming from _s_uper _u_ser. But maybe I
>> am wrong, I am not from old UNIX days.
>
> incorrect.
>
> NAME
> su - substitute user identity
Well, that's V7, which appears to have engaged in a bit of revisionism
together w
On 2019-07-03, jungle boogie wrote:
> $ ssh-keygen -t ed25519 -b 1000
> Bits has bad value 1000 (too large)
That's fine, that's a generic argument parsing error.
> $ ssh-keygen -t ed25519 -b 2
> key bits exceeds maximum 16384
That error makes no sense. ED25519 keys have a fixed le
On 2019-07-11, Ingo Schwarze wrote:
> Quite likely. I'm so clueless that right now, i can't even seem to get
> Compose to work even though i'm sure i had it working in the past.
I use "setxkbmap -option compose:ralt" and compose works as expected
for me in xterm.
Zwölf Boxkämpfer jagen Viktor
On 2019-07-13, "Jonathan Drews" wrote:
> Hi Folks: I need some recommendations on what brand of printers will
> work
> with Ghostscript (Postscript). The cartridges for my 15 year old HP
> Deskjet have gotten too expensive. I know Xerox makes some
> Postscript printers. Are there any other manuf
On 2016-09-07, Marko Cupać wrote:
> I noticed that locally originated email (such as daily outputs) ends up
> in my user's mailbox - /var/mail/, and not in root's. I never
> touched aliases file, never run newaliases.
>
> How is this enabled?
/root/.forward
This is created by the installer when
The 6.0 CD set and the songs CD arrived today (Germany).
The signatures check out.
#!/usr/bin/perl -w
use File::Find;
my %tree;
my %skip = qw(SHA256.sig 1 TRANS.TBL 1 boot.catalog 1 .slicemapfile 1);
find sub { push @{$tree{$File::Find::dir}}, $_ if -f && !$skip{$_} }, @ARG
On 2016-09-09, Theo Buehler wrote:
> I tried myself on a fresh install, added my user to wsrc, and I can
> confirm that I got permission errors (write permissions denied to
> /usr/src) which went away after logging out and logging in again.
Yes, you have to login again for the new group membersh
On 2016-09-13, "Peter J. Philipp" wrote:
> This interests me because I'm switching to Deutsche Telekom in february
> 2017. I did research back in
>
> march or april of 2016 on how to connect to Telekom with an allnet vdsl
> modem and I came across hints that Telekom uses vlan tagging. I made
>
On 2016-09-20, Jeff Ross wrote:
> Subject: i386 or amd64?
If the hardware supports it, run amd64.
> If I have 8GB, I for sure want to use it all.
You will need amd64 for that. But even if you have less memory,
the larger address space is beneficial. Also, AES-NI support is
only implemented f
On 2016-09-22, Eike Lantzsch wrote:
> PC Engines APU.2C2
> which is amd64, has far more RAM and three Gigabit-ports.
> Interfaces: Realtek 8168
Actually, the APU2C2 has Intel i211AT interfaces, em(4).
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-10-18, "Peter Janos" wrote:
> so having AllowTcpForwarding=NO would help.
>
> Why is it yes by default? someone requested it to be yes? does anybody know?
It has always been like this. OpenSSH inherited it from Ylønen-SSH.
In the beginning, OpenSSH didn't even have a configuration opti
On 2016-10-29, Mihai Popescu wrote:
> Folks, since we are at it, does anyone knows why 'OpenBSD' is spelled
> like that and not 'openbsd' . I was ponder that for a time, because I
> know you all hate camelCase notation.
> Is it ok open_bsd?
For better security:
set -A c l u; for i in o p e n b
On 2016-11-09, "Comète" wrote:
> I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C
> boxes connected with an Ethernet cable and an IPSEC VPN using IKEDv2. I get a
> maximum bandwidth of 66 Avg Mbps when IPSEC is enable which is, I think, very
> low for an AES-NI enabled pro
On 2016-11-21, Stuart Longland wrote:
> Other webkit-based browsers seem to be similarly affected. They fail
> installing because there's no gstreamer1-plugins-libav package
> available. `surf` was another I tried, with identical results. It's as
> if the package went AWOL, because it clearly
On 2016-11-21, Stuart Longland wrote:
>> No, gstreamer1-plugins-libav is a RUN_DEPENDS. The midori and surf
>> packages can be _built_ without it, just not installed.
>
> Fair enough, is there much point supplying a binary package that can't
> be installed?
No, but it's not as if this was int
On 2016-11-30, Glenn Faustino wrote:
> [x220@x220.thinkpad.local] $ dig www.openbsd.org
> ;; reply from unexpected source: 127.0.0.1#54, expected 8.8.8.8#53
> ;; reply from unexpected source: 127.0.0.1#54, expected 8.8.4.4#53
> ;; reply from unexpected source: 127.0.0.1#54, expected 8.8.8.8#53
>
On 2017-01-14, jungle boogie wrote:
> I'm noticing that when I reboot the machine, it doesn't boot past boot>
> unless I press enter. I do have a timeout set for 60 seconds, which
> allows me time to boot the bsd.rd file.
I cannot reproduce this (on amd64).
--
Christian "naddy" Weisgerber
How do you assemble a softraid volume manually?
You can detach it with bioctl -d. But how do you get it back?
Or in case it wasn't auto-assembled on boot.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2017-01-17, Jonathan Thornburg wrote:
> A much safer -- and easier -- approach is to take data
> directly from /dev/arandom and encode it as alphanumerics:
Yep.
> This makes use of the following script 'alphanumeric.encode', which
> should be somewhere in $PATH:
Or simply:
openssl rand -ba
On 2017-01-26, Tinker wrote:
> When reaching the "Which disk is your root disk?" question in the
> installer, it will suggest the first physical disk available, normally
> sd0 or wd0 .
>
> then, it could be a good idea to simply prefill this question with "sd1"
> (the softraid's device name) i
On 2017-01-26, Stefan Sperling wrote:
>> Summary:
>> I suggest that, for the "Which disk is your root disk?"'s question in the
>> installer, a logic should be added so that if a softraid has been set up,
>> then it should be used as default option (rather than the name of the first
>> physical di
On 2017-02-06, Tinker wrote:
> The following is for AMD64 though I'd guess that a similar approach
> would be possible on other platforms also.
>
> The boot sequence with MBR is:
>
> MBR: Load PBR (unencrypted)
>
> PBR: Load /boot (encrypted)
/boot is not encrypted. In fact, with r
On 2017-02-06, Tinker wrote:
> How use a HDD as crypto softraid root filesystem media, but put boot
> code and cryto softraid keydisk partition (and perhaps /boot file and/or
> kernel) on an USB disk?
Create a bootable OpenBSD area with two OpenBSD partitions on the
USB stick: 'a' with type 4.
On 2017-02-23, Marc Espie wrote:
> Talking from the ports side, ports and packages moved to SHA256
> back in 2007/2008.
To be expressly clear: Marc is referring to the ports and packages
infrastructure here. The packaged third-party software still
contains many uses of SHA1; some may be harmle
On 2017-03-03, Eric Huiban wrote:
> bioctl needs a mandatory bootable partition to act correctly even on
> disks not aimed to be bootable.
I find that very surprising.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2017-03-07, Roderick wrote:
> Disk are to be readable for many decades. Standard File System
> readable after moving the Disks to another computer, different
> hardware, perhaps with different OS.
*uncontrollable laughter*
--
Christian "naddy" Weisgerber
On 2017-03-09, Jonathan Thornburg wrote:
> Subject: FFS parameters for SSD filesystem?
You are overthinking this. The defaults are fine.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2017-03-11, Luke Small wrote:
> Is there a way to encrypt memory and keep the key on the CPU like a
> transparent partition so that if the ram cards are physically accessed, hey
> can't be read?
Not with OpenBSD and not at this time.
> Is it reasonable?
AMD thinks so. Last year they announ
On 2017-04-12, Jan Vlach wrote:
> I'm missing packages for mips64 (for EdgeRouter Lite/ octeon ) or
> sparc64 on official places:
Packages for alpha, mips64, mips64el, powerpc, and sparc64 are still
being built.
There's a choice. We can put the release on hold for everybody
until the slow arch
On 2017-04-19, Philip Guenther wrote:
> For a broader answer to the "why?", take a look at the patches under
> /usr/ports/ which add uses of the *_deterministic() calls.
For instance, take graphics/netpbm and look at its multitude of
image manipulation tools that take a -randomseed=integer argum
On 2017-04-19, Heiko wrote:
> I'm using current on amd64 (Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz,
> 3411.91 MHz)
>
> I noticed that with clang it needs 109 minutes for "make build" and
> before with gcc 32 minutes.
Not sure what you mean by "performance" in the subject. We're not
building anyt
On 2017-04-20, Heiko wrote:
> So I guess the main advantage is the license?
> Or is clang technically (binaries, debug) better?
OpenBSD does not live in a bubble. If it did, we could still be
using gcc 2.95. But it turns out people, including OpenBSD developers,
want to run third-party softwar
On 2014-11-04, Chris Cappuccio wrote:
>> I haven't seen any upgrades that removed these directories either:
>> /usr/include/g++/*-unknown-openbsd5.x
>> /usr/libdata/perl5/site_perl/*-openbsd/g++/*-unknown-openbsd5.x
>>
>> Is or was there any reason to keep these around, or was this intentional?
On 2014-11-04, Jonathan Thornburg wrote:
> It's as if the 'a' partition I created (which started at offset 64) was
> actually overlapping the disklabel metadata!
Well, it does.
On architectures that use the MBR partition scheme, the disklabel
is located in the second sector of the OpenBSD area.
On 2014-11-07, "System Administrator" wrote:
> In the description of the -b option:
> ...
> three elliptic curve sizes: 256, 384 or 521 bits.
>
> Is 521 correct
Yes. Those are ecdsa-sha2-nistp521 keys.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2014-11-11, Dave Anderson wrote:
> It's clearly possible to boot the new system from an install CD (or, if
> necessary, a USB stick with a full install on it) then fdisk and
> disklabel the new disk and newfs / dump|restore the partitions one by
> one, followed up by installboot, editing the d
On 2014-11-11, Adam Thompson wrote:
> I think you've already figured out the optimal way to do it... I would
> do a fresh minimal install on the target disk, then restore(8) over top
> of it, to avoid having to fiddle too much with installboot(8) etc.
If you overwrite /boot during restore, you
On 2014-11-22, Riley Baird
wrote:
> I have successfully setup the httpd(8) webserver, but only for static
> webpages. I have been unable to get cgi (perl) scripts to run.
You didn't mention it, so I'll point out that you need to run
slowcgi(8) to proxy between FastCGI and CGI scripts.
> Due to
On 2014-11-26, Maximilian Pichler wrote:
> When starting xmms the following error appears:
> xmms:/usr/local/lib/xmms/Input/libxmmsmad.so: undefined symbol '__guard_local'
> Cannot load specified object
Indeed, I can reproduce this. This plug-in is broken.
As a simple workaround, remove the xm
On 2014-11-27, Maximilian Pichler wrote:
> By the way, I also get:
> xmms:/usr/local/lib/xmms/Input/libxmmstremor.so: undefined symbol
> '__guard_local'
Thanks. I already found and fixed this right after xmms-mad by
grepping the build logs of all XMMS plug-ins for "-nostdlib".
>> As a simple w
On 2014-11-28, thev...@openmailbox.org wrote:
>> If say machine 192.168.0.2 and 192.168.0.3 needs unrestricted access to
>> the net, then wont it be as easy as "Joe" changing his machines IP
>> address to 192.168.0.2 to gain access without authentication?
>
> theoretically this is possible, but o
On 2014-11-28, Martin Hanson wrote:
> How does one secure against MAC/IP spoofing? Is there a way to prevent this.
1. You separate the traffic so that potential attackers cannot access
this network segment.
a. Physically: Run a wire.
b. Logically: Use a separate VLAN.
2. Authenticate w
On 2014-11-28, Ingo Schwarze wrote:
> For developers, the same is available in /cvs/CVSROOT/ChangeLog*.
For anybody mirroring the repository.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2014-11-29, frantisek holop wrote:
> is it true to say then, that ffs is entirely "utf8 safe",
> and/or that ffs is actually "an utf-8 encoded filesystem"
> as IIRC Mac OS is?
The former. Unix filesystems accept all bytes for filenames with
the exception of 0x2f, which serves as directory se
On 2014-11-29, frantisek holop wrote:
> $ touch »´ÁÉǑÄ«
> $ ls
> ??
If you need a locale-aware ls(1), use the one from the colorls package.
(Don't worry, colored output is entirely optional.)
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2014-11-29, Ingo Schwarze wrote:
> But Unicode must never be allowed near anything that might get
> executed as program code, including scripts in interpreted languages,
> including, but not limited to, the shell. In particular, that means
> trying to handle Unicode in filenames is a bad idea
On 2014-12-02, Riccardo Mottola wrote:
> I was pkg_add'ing some essential packages on a freshly installed SPARC
> machine. I noticed that several packages are missing. I thought it was
> the mirror, but they are missing on the master ftp too.
> I know that some packages might not build on sparc
On 2014-12-03, Riccardo Mottola wrote:
> install -c -o root -g bin -m 555 bzgrep bzmore bzdiff
> /usr/ports/pobj/bzip2-1.0.6/fake-sparc/usr/local/bin
> install -c -o root -g bin -m 444 bzip2.1 bzgrep.1 bzmore.1 bzdiff.1
> /usr/ports/pobj/bzip2-1.0.6/fake-sparc/usr/local/man/man1
> Segmentation
On 2014-12-03, Zé Loff wrote:
>> for some reason, this seems to have been for a while now; isakmpd will
>> simply quit running after initiating: ipsecctl -f /etc/ipsec.conf
>
> I am seeing the same behaviour (apparently a clean exit, no message
> whatsoever nor core file) on -current, with an ip
On 2014-12-03, Josh Grosse wrote:
>> This could be the bug fixed in src/sbin/isakmpd/ui.c rev 1.56.
>> Check your system logs for "isakmpd: backwards memcpy".
>
> It may not be that change, since it was only committed two days ago.
> I've
> seen the same symptoms in i386 snapshots from Nov 26 a
patrick keshishian:
> how do you guys deal with disk space with sparc machines?
> NFS?
Distfiles and packages on NFS, obj on local disk.
--
Christian "naddy" Weisgerber na...@mips.inka.de
"STeve Andre'":
> Every once in a while compiling xenocara, I get a fatal error when
> dealing with kdrive. [...]
> Since others aren't complaining about this it must be me. So then,
> how am I shooting myself (this time) ? Clue sticks? Error below.
> configure: error: source directory already
On 2014-12-04, Kaya Saman wrote:
> I am seeing this in the logs:
> Dec 4 09:35:33 Gamma-Ray isakmpd: backwards memcpy
> Dec 4 09:35:33 isakmpd: backwards memcpy
So your isakmpd is broken. Wait for the next snapshot or build one from
-current sources yourself.
--
Christian "naddy" Weisgerbe
On 2014-12-06, Nick Holland wrote:
>> I have a few questions about OpenBSD's trademark policy.
>
> Short answer: follow the license.
The license governs _copyright_. The _trademark_ is a wholly
different beast.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2014-12-22, Jonathan Thornburg wrote:
> However, 'man athn' says
>> The athn driver relies on the software 802.11 stack for both
>> encryption and decryption of data frames.
>
> Should I be worried about the CPU loading of software WPA2 crypto
> running on the (relatively slow) ALIX Geode proc
On 2014-12-24, Gregory Edigarov wrote:
> an interesting question has just come to my head:
> do you know of any shell that could complete from the terminal output of
> any of the previous command?
That would require serious contortions since the stdout/stderr
output of commands run from the she
Jonathan Thornburg:
> > I have no experience with that configuration, but I had a broadly
> > comparable setup where a Soekris net5501 (same CPU as the ALIX) did
> > IPsec for a .11g network.
>
> What was the bandwidth of that network?
.11g, "54 Mbit/s". Something like 2 Mbyte/s throughput into
My OpenBSD laptop, iwn(4), doesn't roam between my two access points.
It's a sorry sight when it struggles to push a signal through the
rebar floor instead of switching over to the other access point a
meter away.
Is this a limitation of OpenBSD's WLAN support or should I blame
the access points?
Zeljko Jovanovic:
> and there are another few missing:
>
> ZZE:Ponikve, Uzice, Serbia
> KVO:Morava, Kraljevo, Serbia
Wikipedia has Uzice-Ponikve as UZC.
Neither airport has regular flights, so I'm not sure we want to
list them.
--
Christian "naddy" Weisgerber na...@mip
I'm interested in what values people have in their /var/db/ntpd.drift
files.
To prevent a deluge: Looking over my own machines, I see that most
values are Xe-05, with a few Xe-04 and Xe-06. So that's the common
range, I don't care about that. But if you have machines with a
frequency accuracy ou
Mikolaj Kucharski:
> This year we will have positive leap second[1] I've recently got asked
> how OpenNTPD handles leap seconds and did anything change from 2012[2].
Nothing has changed. OpenNTPD does nothing with leap seconds.
I think the basic attitude is that (1) they're rare enough that we
c
On 2015-01-13, Stuart Henderson wrote:
> 1x e-03 (macppc mac mini)
Thanks to all who replied. Macs and Suns seem to be particularly
bad. I counted zeroes again and just realized that the combo of
ntp.org and ntp_adjtime() can only correct offsets up to 5e-4
(500 ppm). I wonder if our timekeep
On 2015-01-14, mar...@martinbrandenburg.com
wrote:
>> "Buying a CD" in my case includes a 5.000 mile trip through multiple
>> "five-eyes" nations, whose overzealous three letter agencies officially
>> intercept physical shipments to install backdoors and hardware implants.
>
> Where have you hea
On 2015-01-14, Ján Kušniar wrote:
> Even though it's running 54Mbit 802.11g, I can't get over ~15Mbit/s.
Uh, what figures do you expect? Those "54 Mbit/s" are raw modem
speed. You'll never get throughput anywhere close to that.
I get ~20 Mbit/s between my OpenBSD laptop with iwn(4) and a D-Li
On 2015-01-14, Stefan Sperling wrote:
> 15Mbit/s sounds as if it maxes out at 18Mbit/s (the highest QPSK rate)
> and never switches to OFDM rates (24 - 54 Mbit/s).
IEEE 802.11 still uses a shared medium and CSMA/CA, right? (Wikipedia
says so.) So the transfer between two nodes is effectively
h
On 2015-01-15, Jan Lambertz wrote:
> [http://www.fit-pc.com/web/products/fitlet/]
Enticing. On the minus side, I assume the BIOS won't be accessible
over serial, and I'm unclear just how fast the CPU will be under
load. On the plus side, the CPU has AES+CLMUL so it doesn't really
matter.
> as
On 2015-01-19, Remco wrote:
>> OpenBSD
>> # shutdown -ph 1501161730
>>
>> other BSDs
>> # shutdown -p 1501161730
>
> It makes sense to me to imply -h when specifying -p.
I'd love it, but for all I know somebody may have a strong opinion
against it.
On the one hand, "shutdown -hp" is inconsiste
On 2015-01-21, Alan McKay wrote:
> I know that Supermicro has some interesting side-by-sides starting at
> 2U, but I'm not aware of anything in 1U. Basically I'd like to have
> my redundant FW pairs take up less rack space.
There are various companies that produce 1U cases that can hold two
Soe
201 - 300 of 828 matches
Mail list logo
