Re: netcat: bump BUFSIZE to 64k?

2022-12-20 Thread Marco Pfatschbacher
On Sun, Dec 18, 2022 at 06:40:45PM +0100, Claudio Jeker wrote: > > What confuses me is that atomicio() is not used in the main readwrite() > loop. There nc polls on both fds and then read/write depending on return > values. atomicio() is only used by atelnet() and socks_connect() which do > not d

Re: netcat: bump BUFSIZE to 64k?

2022-12-18 Thread Marco Pfatschbacher
On Sun, Dec 18, 2022 at 02:00:24PM +0100, Theo Buehler wrote: > This is the remaining bit of mpf's recent netcat diff. The commit log > shows that it was bumped to 64k in the past, but that was promptly > reverted due to concerns of buffer bloat caused by atomicio blocking > traffic in the other

netcat UDP behavior in verbose mode

2022-12-01 Thread Marco Pfatschbacher
The other day I was trying to send a syslog UDP packet via netcat. Out of habit I was running it with the -v flag and noticed that it corrupted my syslog packet with three 'X' characters. Turns out verbose mode enables udptest() which is meant to get feedback if the "connection" is successful and

Remove ls -C alias from /etc/ksh.kshrc

2018-05-15 Thread Marco Pfatschbacher
While doing some ad-hoc scripting on my command line, I noticed that ls(1) defaults to multi-column output, even if the output is piped to another command. The reason for this annoyance is simple: $ alias |grep ls ls='ls -CF' LS(1) -C Force multi-column output; this is the default when

Re: Export IPsec flows via snmpd(8)

2017-12-19 Thread Marco Pfatschbacher
On Tue, Dec 19, 2017 at 12:43:48PM +0100, Martin Pieuchot wrote: > I'd like to see some information about my tunnels in my NMS. Nice. I would find that very useful :) > The problem is that there's not standard MIB for this and most vendor > MIBs are huge and are not easy to implement. What about

Re: TCP support for snmpd(8)

2017-07-28 Thread Marco Pfatschbacher
ockaddr_storage *, in_port_t); +int snmpd_socket_af(struct sockaddr_storage *, in_port_t, int); u_long snmpd_engine_time(void); char *tohexstr(u_int8_t *, int); Index: snmpe.c === RCS file: /cvs/sr

Re: TCP support for snmpd(8)

2017-07-20 Thread Marco Pfatschbacher
On Wed, Jul 19, 2017 at 11:15:45AM +0200, Reyk Floeter wrote: > > > On 19.07.2017, at 10:16, Marco Pfatschbacher wrote: > > > > This adds TCP support to snmpd. > > I've added a tcp option to the "listen on" statement. > > The trap rece

TCP support for snmpd(8)

2017-07-19 Thread Marco Pfatschbacher
This adds TCP support to snmpd. I've added a tcp option to the "listen on" statement. The trap receiver will continue to bind to UDP addresses only. Tested against net-snmp, which has TCP support. Index: parse.y === RCS file: /cvs/sr

Re: support to view rc(8) startup skript output via dmesg -s

2014-12-10 Thread Marco Pfatschbacher
New diff after some feedback: Restrict this to root only, since there might be sensitive information in the output. e.g. fsck output revealing files. Thanks Theo. Use -s, since -c is already used in other BSDs. I did not go with -a, since that does sth. slightly different on FreeBSD. Thanks Olli.

support to view rc(8) startup skript output via dmesg -c

2014-12-07 Thread Marco Pfatschbacher
Hi, something that has often bothered me, is that once you hook up a console to a headless server, you've missed all the output. This makes it harder to diagnose bugs in rc(8) startup skripts from remote. Another thing i've missed is that fsck(8) output will just scroll by and is usually lost. Wh

Re: new OpenSSL flaws

2014-06-05 Thread Marco Pfatschbacher
On Thu, Jun 05, 2014 at 08:02:58PM +, Miod Vallat wrote: > > If you can't trust people to apply one-liner fixes correctly, can you > trust them for anything serious? I really don't like to point fingers, but... It is done by the same people that introduced the Debian random number bug back

Re: pax / tar exit code on truncated input

2014-04-04 Thread Marco Pfatschbacher
On Thu, Apr 03, 2014 at 05:19:45PM -0600, Theo de Raadt wrote: > Interesting. Can we take bath approaches? I don't see why we should not. > Is there a reason to not expose either error? I thought it might break some legacy stuff regarding tapes and such. But since no one spoke up... OK? > >

pax / tar exit code on truncated input

2014-04-03 Thread Marco Pfatschbacher
pax does not exit with an error if the processed archive is truncated: # (cd / && tar zcf - bsd | dd count=128 2>/dev/null | tar tzf -) bsd gzip: stdin: Input/output error tar: End of archive volume 1 reached gzip: stdout: Broken pipe tar: Failed write to archive volume: 1: Broken pipe # echo $? 0

Re: allow sending certain frames on trunkdevs for LLDP

2013-01-16 Thread Marco Pfatschbacher
On Wed, Jan 16, 2013 at 10:56:25PM +, Stuart Henderson wrote: > Daemons which send LLDP advertisements (e.g. ladvd and lldpd) need to > send frames on trunk member ports in order that the individual port can > be identified to the switch; currently there is a blanket restriction > on sending vi

Re: PATCH: failed spl lock release in fxp

2011-12-02 Thread Marco Pfatschbacher
On Fri, Dec 02, 2011 at 12:02:19PM +0100, Jan Klemkow wrote: > Hello, > > i have found an other failed error handling > with interrupt locking. Here is a diff which > should patch this. i don't think this compiles. your label is out: and the goto uses err. > bye, > Jan > > Index: fxp.c > ===

carp(4) ip-stealth balancing arp fix

2011-10-30 Thread Marco Pfatschbacher
If stealth balancing is used in setups where the carpdev does not share an IP in the same subnet as carp, ARP queries will be replied through the carp interface. arprequest() (which is also used to form replies) will use the MAC address of the carp interface as the ethernet source address. This wil

Re: carp destroy

2011-10-23 Thread Marco Pfatschbacher
On Fri, Oct 21, 2011 at 02:44:43PM +0200, Camiel Dobbelaar wrote: > Destroying a carp interface does not restore the demote count of the > carp group. > > Reason is that the interface is removed from the carp group by > if_clone_destroy() before carp_clone_destroy() is run. The second reason >

Re: carp ipv6 checksum fix

2011-10-05 Thread Marco Pfatschbacher
On Sun, Oct 02, 2011 at 04:44:46PM +0200, Stefan Sperling wrote: [...] > The problem is that the IPv6 input path uses IP6_EXTHDR_GET() to > obtain a pointer to the carp header when verifying the carp header's > checksum. IP6_EXTHDR_GET() internally uses m_pulldown(), which might > return a pointer

Re: remove PROMISC flag if carp device is destroyed

2011-09-06 Thread Marco Pfatschbacher
On Tue, Sep 06, 2011 at 02:19:09PM +0200, Stefan Rinkes wrote: > Hi, > > During some testing in a Carp-HA setup, we noticed that the PROMISC flag > on carpdevs never was removed when we destroyed the carp interface. > > Some investigation showed that a counter, which values defines if the > ifpro

Re: two minor carp and pfsync fixes

2011-07-03 Thread Marco Pfatschbacher
On Thu, Jun 23, 2011 at 11:33:50AM +1000, David Gwynne wrote: > > On 22/06/2011, at 3:52 AM, Stefan Rinkes wrote: > > > 2. If you are using IP balanced carp and set one of > >the interface to down, the mbufs still reach pf. > >Cause carp_ourether() returns NULL if the interface > >is

systat(1) support for thousands separators and byte to bit conversion

2011-03-15 Thread Marco Pfatschbacher
I wanted to have $ systat ifstat 1 to print meaningful numbers to measure live network throughput. With these two features you are now able to see sth like "MBit/s" in the ifstat view. "B" converts to Bits "," activates the thousands separator. Comments? OKs? Index: engine.c =

ifconfig emX debug

2011-03-08 Thread Marco Pfatschbacher
Instead of having to fiddle with em_display_debug_stats, why not have this configurable per interface with IFF_DEBUG? OK? Index: if_em.c === RCS file: /cvs/src/sys/dev/pci/if_em.c,v retrieving revision 1.249 diff -p -u -p -u -r1.249

Re: intel driver fix (PR6517)

2011-01-29 Thread Marco Pfatschbacher
On Sat, Jan 29, 2011 at 12:45:25PM +0100, Matthieu Herrb wrote: > Hi, > > More last minute X patches... > > mpf@ reported in PR6517 a problem with his 965GM chipset. No, I have an 865G. > He did some debugging and found that a patch to the kernel i915 drm > driver from one of the X.Org maint

Re: CARP hash vuln

2010-12-21 Thread Marco Pfatschbacher
On Tue, Dec 21, 2010 at 09:34:01AM +0100, David Coppa wrote: > On Tue, Dec 21, 2010 at 2:23 AM, Fernando Quintero > wrote: > > some comment? > > > > http://seclists.org/bugtraq/2010/Dec/200 > > I'm not able to provide a solution, but this is of course a bug that > needs to be fixed. If you look

Re: acpithinkpad(4) fan control

2010-11-29 Thread Marco Pfatschbacher
On Mon, Nov 29, 2010 at 03:23:58PM +0100, Christopher Zimmermann wrote: > Hi! > > I'd like to implement fan speed control for Thinkpads. It is documented > at http://www.thinkwiki.org/wiki/How_to_control_fan_speed#Hardware_specs > and linux also implements this (but with special case for TP 570, >

Re: Does pfsync support failover of pf 'route-to' state? (on CARP failover)

2010-11-10 Thread Marco Pfatschbacher
On Wed, Nov 10, 2010 at 05:13:19PM +0100, chefren wrote: > (Hm, saw no response after posting to misc@, manual cross-posting to t...@...) > > > Short question: does pfsync currently support fluent failover of a pf > established 'route-to' state, when a CARP failover happens? No, it doesn't. I ha

Re: disable wbng

2010-09-23 Thread Marco Pfatschbacher
On Wed, Sep 22, 2010 at 06:11:58PM +0200, Mike Belopuhov wrote: > there's nothing special about this driver. as it does usual iic_exec's, > i'm not sure what can be actually fixed there. so if nobody has any > idea what could be done about it, you have my okay to disable it > completely. It's no

Re: ifstated pidfile

2010-06-07 Thread Marco Pfatschbacher
On Mon, Jun 07, 2010 at 09:33:34AM +0200, Michael Lechtermann wrote: > Hi, > > >> Well, that makes sense. But what about not showing the arguments > >> ifstated was started with? Any reason to wipe them? It would really help > >> to identify the correct process when those are showed. > >> > >> Wha

Re: CARP load balancing

2009-10-15 Thread Marco Pfatschbacher
On Wed, Oct 14, 2009 at 11:15:05AM +0200, P-O Yliniemi wrote: > > > Thanks for this quick and easy solution. So instead of the old way of > configuring CARP (multiple interfaces with the same address on each > machine), we will have to use carpnodes, which when explained is much > more simple

Re: CARP load balancing

2009-10-12 Thread Marco Pfatschbacher
On Mon, Oct 12, 2009 at 01:24:49PM +0200, P-O Yliniemi wrote: > Hi, > > The CARP section (6.11) in the FAQ is incorrect (old), so I'm asking for > a solution here on the list. Hi, yes, the faq is outdated. see http://www.openbsd.org/faq/upgrade43.html#carp The manpage, however has all the in