synproxy and tcp window

2013-09-18 Thread Gabriel Linder
Hi, When using synproxy state, PF seems to set the TCP window size to zero in ACK packets. This breaks some network configurations, is this normal/desired ? With synproxy state, we have win 0 : 14:33:02.934065 0800 74: 37.161.129.131.45134 192.168.1.2.80: S 1330066024:1330066024(0) win 14600

Re: PF with gigabit voice/video streams

2011-06-07 Thread Gabriel Linder
On 06/03/11 20:48, Eric K. Miller wrote: I might start a capabilities war, but we've seen OpenBSD become CPU bound with about 150k packets per second with some pretty fast hardware. Funny, I have more than 300kpps. With pf enabled, of course. This is without PF running. I'm sure there are a

round-robin and sticky-address

2011-03-23 Thread Gabriel Linder
Previously : http://marc.info/?l=openbsd-miscm=127479158820937w=2 I am trying to make sticky-address work on 4.9-current, where this rule : pass in on $int_if from $int_net route-to { ($ispA_if $ispA_gw) ($ispB_if $ispB_gw) } round-robin sticky-address evaluates to : table

Re: network bandwith with em(4)

2011-02-25 Thread Gabriel Linder
On 02/24/11 19:28, RLW wrote: W dniu 2011-02-24 12:11, Patrick Lamaiziere pisze: Le Wed, 23 Feb 2011 22:09:18 +0100, Manuel Guesdonml+openbsd.m...@oxymium.net a icrit : | Did you try to increase the number of descriptor? | #define EM_MAX_TXD 256 | #define EM_MAX_RXD 256 | | I've tried up to

alc0 panic and splassert: assertwaitok: want -1 have 1

2011-01-27 Thread Gabriel Linder
When booting 4.9-beta/amd64 without a network cable plugged, I get a lot of splassert failures. After changing kern.splassert to 3 I was able to get the following trace (get with dmesg after a reboot) : OpenBSD 4.9-beta (GENERIC.MP) #786: Tue Jan 25 17:46:34 MST 2011

acpiec/acpitz problems on asus eeepc 1005PX

2011-01-24 Thread Gabriel Linder
On asus eeepc 1005PX acpiec fails to load, so a lot of acpi-related stuff fails. Most notably I have to disable acpitz to use the computer, but acpibat does not work and (un)plugging the AC adapter cause a hard reboot. Also, I have a lot of splassert: assertwaitok: want -1 have 1 when

Re: wd0 read timeouts - how to proceed?

2010-12-24 Thread Gabriel Linder
On 12/24/10 17:09, Chris Smith wrote: On Fri, Dec 24, 2010 at 5:00 AM, Webchargewebcha...@gmx.net wrote: Is this the actual disk or the controller/other hardware? If the hardware is smart aware installing smartmontools and running smartctl may give you a clue. atactl(8) works just fine.

Re: PF and States

2010-12-21 Thread Gabriel Linder
On 12/20/10 15:52, Kevin Wilcox wrote: On 19 December 2010 07:16, Henning Brauerlists-open...@bsws.de wrote: you're way off ;) I had 2 million during a DDoS. things got a bit slow but everything worked. Henning - out of curiosity, what were the specs on that hardware? It may be interesting

rdr-to counters, carpnodes

2010-09-13 Thread Gabriel Linder
Hi, I have a cluster of two pf firewalls running 4.8-current (GENERIC.MP) #382, using rdr-to to loadbalance traffic to some web servers. I have to keep a trace of packets and bytes each server get. I tried to enable counters on the table I use for my redirect rule but this does not work, is this

Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)

2010-08-03 Thread Gabriel Linder
aucat -d -d -d -d -d : [snip a lot of output when ok] mix(play): in mix(play): used = 1004/23296, done = 6848/6848 rsock(sock)=mix(play): fill blocked (inuse) rsock(sock)=mix(play): badd: done = 6848/6848, drop = 0 mix(play)-wsio(default): bzero(7852) rsock(sock)=mix(play): discard(1004)

aucat bug in 4.8-beta/i386 ?

2010-08-03 Thread Gabriel Linder
Hi, Mplayer hangs when playing music. After some search I found aucat was exiting, leaving mplayer alone. There are also a lot of cracks/pops in the audio stream (using headphones), this happens with and without aucat running. Without aucat the sound is total garbage after some time, this was

Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)

2010-08-03 Thread Gabriel Linder
On Tue, 3 Aug 2010 10:32:40 +0200 Alexandre Ratchov a...@caoua.org wrote: the device is spinning. Could you send a dmesg and confirm that if you run: The dmesg was in my first mail, which did not arrive yet :( I join a copy at the end of this mail. aucat -ddd -z 256 default: recording

Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)

2010-08-03 Thread Gabriel Linder
On Tue, 3 Aug 2010 11:21:02 +0200 Alexandre Ratchov a...@caoua.org wrote: does aucat exit if X is not running? and if you boot the GENERIC kernel? and if you neither use X, nor MP ? GENERIC.MP, X not running : aucat works (tried ~2 hours) GENERIC, X running : aucat works, so far (30 minutes

Re: One LAN, two ISPs, route-to and sticky-address

2010-05-25 Thread Gabriel Linder
On Thu, 22 Apr 2010 17:23:53 +0200 Gabriel Linder lin...@jeuxvideo.com wrote: Hi, I have two ISPs and a LAN. I need to load balance outgoing connections from the LAN between the ISPs. My router is running OpenBSD 4.6-stable, up-to-date

One LAN, two ISPs, route-to and sticky-address

2010-04-22 Thread Gabriel Linder
Hi, I have two ISPs and a LAN. I need to load balance outgoing connections from the LAN between the ISPs. My router is running OpenBSD 4.6-stable, up-to-date. - | | ISP 1 ---(isp1 box)---+-ext1_if |

Re: Acer Aspire One freeze with Atheros AR5424 on OpenBSD 4.5

2009-03-17 Thread Gabriel Linder
On Mon, 16 Mar 2009 13:25:55 -0400 Nick Holland n...@holland-consulting.net wrote: Alvaro Mantilla Gimenez wrote: Hello, I send this messages to b...@openbsd.org a few days ago. I don't know if this is the all the information the developers need. Anyway I would like to create this

Re: High interrupt count on OpenBSD 4.3/amd64 with driver azalia

2008-09-03 Thread Gabriel Linder
On Thu, 28 Aug 2008 10:49:48 +0200 Gabriel Linder [EMAIL PROTECTED] wrote: Hi, I use a desktop system powered by OpenBSD 4.3-stable with GENERIC.MP kernel (amd64, up to date as of now). I listen music with mplayer while I work, and sometime my system feel very slow. A top show that CPU0

Re: High interrupt count on OpenBSD 4.3/amd64 with driver azalia

2008-09-03 Thread Gabriel Linder
On Wed, 3 Sep 2008 10:37:28 +0200 Ariane van der Steldt [EMAIL PROTECTED] wrote: I think the interrupt load with a -current or -snapshot will be better. I can confirm your high interrupt load (my opteron has an interrupt load hovering between 70% and 80% in GENERIC.MP). Thanks for your

High interrupt count on OpenBSD 4.3/amd64 with driver azalia

2008-08-28 Thread Gabriel Linder
Hi, I use a desktop system powered by OpenBSD 4.3-stable with GENERIC.MP kernel (amd64, up to date as of now). I listen music with mplayer while I work, and sometime my system feel very slow. A top show that CPU0 is spending 80% time in interrupts, and leaving mplayer calm the system down. Is

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Gabriel Linder
On Tue, 13 May 2008 11:14:59 -0500 Sean Malloy [EMAIL PROTECTED] wrote: On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: I guess everyone by now has heard about the very serious libssl vulnerability on Debian/Ubuntu? Just making sure that the source is safe, thanks.

Great posters !

2007-11-30 Thread Gabriel Linder
Nope, this is not a spam ;) We ordered posters some time ago and they just appeared in a wall near me, I now have a Puffy watching my code and roaring if I use strcpy ;) Posters are great and high quality, thank you OpenBSD !