Re: : : OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory
On Wed, Dec 17, 2008 at 07:34:07PM +0100, Markus Hennecke wrote:
Raimo Niskanen schrieb:
[config description]
But how to find a bigmem parameter I do not know, I have
no amd64 system. Try 'help' in the config editor.
And, as pointed out before:
If you search the archives, you'll find the clue you need to enable it
on your own system.
See also:
config(8)
options(4)
boot_config(8)
boot_i386(8)
boot(8)
So I read all that before and now I have to out me as plain stupid. I
still have no clue how to set bigmem to 1 using config(8). And as you
can see in this thread, it looks like I am not alone. Either I read over
it on more than one occasion, or there is no documentation describing it.
Sorry about that. I could only give you some pointers on how to use
UCK(config(8)) and have no amd64 system myself, so I deemed it probably
futile for me to try to find the bigmem parameter.
Then I assumed the rest of the clues _would_ be in the archives
but did not search myself. They still might be in the archives
but a later post in this thread suggests you can not do this with
config(8). You probably will have to compile a kernel.
I have searched the 4.4 kernel source tree and found:
$ find sys -type f | xargs grep -i bigmem
sys/arch/amd64/amd64/machdep.c:int bigmem = 1;
sys/arch/amd64/amd64/machdep.c: if (bigmem)
sys/arch/amd64/amd64/machdep.c: printf(Bigmem = %d\n, bigmem);
sys/arch/amd64/amd64/machdep.c: if (!bigmem (e1 = (1UL32))) {
sys/arch/amd64/amd64/machdep.c: } else if (bigmem (e1 = (1UL32)))
{
The revision of the file is 1.81 so that was just
before the release. In the cvsweb
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/amd64/amd64/machdep.c
it says bigmem was set to 0 for the release of 4.4, and it still is
(revision 1.85).
I can also not find a documented way to tweak it from config(8)
as it is stated on the comment line before int bigmem = 0;.
It is probably daft simple or untrue. But changing the line to
int bigmem = 1; in the source code will certainly do the trick.
Kind regards,
Markus
--
/ Raimo Niskanen, Erlang/OTP, Ericsson AB
Re: Users of Opera -- Stability?
On Thu, Dec 18, 2008 at 08:41:05AM +0530, Amarendra Godbole wrote: On Wed, Dec 17, 2008 at 7:25 AM, Aaron W. Hsu arcf...@sacrideo.us wrote: Hey All, I wanted to check with any users here that are using the opera web browser. Can you please mention what Window Manager you use? I am trying to understand why Opera is unstable for me, but not for other people. If you can report the stability of running Opera, that would be great too. Does not work for me on Fluxbox -- it locks up the moment it starts. I am using an Intel dual-core CPU (IBM Thinkpad X60). The only reason why I continue using FF on OpenBSD! :-| The MP part is the issue. opera is non functional with MP.
Re: package integrity, security and checks. .... where are they ?
On Wed, Dec 17, 2008 at 10:46:10AM -0600, Matthew Weigel wrote: Like Marc said, signing packages when the process doesn't protect the integrity of the signatures, the source used to compile the binaries that are signed, and the binaries themselves, you are providing a misleading sense of security instead of an actual benefit. We have hopes to protect the part of the process that we can trust eventually, e.g., the parts internal to OpenBSD. This requires a master key, dependent keys for packages signers, and that's about it. Plus some process to revoke stuff. Everything is there already in the packages, except the signature proper: all files are checksummed (with sha256), all meta-information is written in the packing-list, so we just need to sign the packing-list itself. I have talked about this a few times already: we can do just-in-time signature checking. If you look closely at the pkg_* code, you'll see tendrils of the work in progress. What do you think PackingElement::DigitalSignature is for ?
Re: Soekris equivalent
On 2008-12-18, Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch wrote: On Wed, 2008-12-17 at 20:56 +0100, Marc Balmer wrote: ALIX boards serve me well. See www.pcengines.ch. I can second that. Alix boards have served me as a robust drop-in replacement for Soekris while being cheaper at the same time (maybe not for non-Swiss customers, though). They don't support 1GB of RAM as was the original requirement though.
Re: Soekris equivalent
On Wed, Dec 17, 2008 at 02:38:43PM -0500, Christopher Sean Hilton wrote: Is anyone aware of an equivalent for the Soekris Net 5501-70. I'm looking to prototype an OpenBSD border gateway that offers web proxy capabilities through squid cache but squid is a bit of a memory hog and I'd like to have something with a Gig of RAM. Power footprint is a consideration which is why the Soekris is at the top of the list. I started off looking at Soekris but, to be honest, thought they were expensive given their lack of horsepower. After a lot of hunting, I ended up with a Tranquil (http://www.tranquilpc.co.uk/) T7, which is a passively cooled Intel Atom solution. Depending on where you site it, you might want to fiddle with its positioning to maximise its ability to cool itself (I found that if I floor mounted it, raising it half an inch above the floor meant it ran much cooler; I suspect the available wall mount would have a similar beneficial effect), It works fine with OpenBSD, draws very little power, can be ordered in a bare bones version (sans OS etc.), and is very well engineered. As with most Atom machines, it's a little sparse on the peripherals, but adding a USB NIC or two would probably do the trick for most gateway purposes. Laurie -- http://tratt.net/laurie/ -- Personal http://fetegeo.org/ -- Free text geocoding http://convergepl.org/ -- The Converge programming language
OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory
Enabling bigmem=1: -real mem = 3734757376 (3561MB) -avail mem = 3624775680 (3456MB) +real mem = 4271632384 (4073MB) +avail mem = 4148350976 (3956MB) Also, from sys/arch/amd64/amd64/machdep.c: /* Tweakable by config(8) */ How? 2008/12/16 Toni Mueller openbsd-m...@oeko.net: Hello, On Mon, 15.12.2008 at 15:47:06 +0100, Paul de Weerd we...@weirdnet.nl wrote: On Mon, Dec 15, 2008 at 10:40:44PM +0800, C. Soragan Ong wrote: | I am using OpenBSD 4.4 and is having problem detecting 4GB ram. Below is the | dmesg Well, all memory is found (see the spdmem entries in your dmesg), but these messages suggest that he has 4GB of RAM installed in his machine, right? not all of it is supported by the default kernel. You'll have to enable bigmem and compile a new kernel yourself. I thought that 4GB of RAM *are* supported in the default kernel? But apart from that, I'm having a quite similar problem with a completely different machine. It turns out that very much RAM is eaten, depending on various BIOS settings. I haven't figured out how to tune it, but currently I'm losing some 700+MB this way (really AWFUL!). I have found out that enabling PXE eats some 20MB per NIC on which it is enabled, though. Kind regards, --Toni++
Re: Incorrect output from pftop on OpenBSD 4.4
I too have noticed this; I switched over to using the systat views because of it. In the systat views, the number of states for each rule screen behaves oddly. It displays the high-water mark for the number of states for each rule... rather than the current number of states. I don't know if this is the expected behavior or not, though. The man page doesn't specify (that I've noticed). -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Bryan Chapman Sent: Wednesday, December 17, 2008 8:41 PM To: misc@openbsd.org Subject: Re: Incorrect output from pftop on OpenBSD 4.4 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthias Kilian wrote: On Wed, Dec 17, 2008 at 09:25:32AM -0800, valgray wrote: I have an odd problem with pftop 0.7 on OpenBSD 4.4 system. The output from it looks like: pfTop: Up State 1-4/4, View: default, Order: none, Cache: 1 17:10:12 PR DIR SRC DEST STATE AGE EXP PKTS BYTES tcp In 192.168.42.167:60317 192.168.42.168:22 ESTABLISHED:ESTABLISHED 48701986m 35320631m 1574144K 6189571K [...] I think most (if not all) functions of pftop are now included in systat(1), at least in -current. Is this working correctly for anyone? I am experiencing the same issues. I thought it might have been a bad install, but a rebuild of - -stable from source didn't solve the problem. Bryan Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJSbgjoDXHdCrcby8RAvihAJ0dmizIFh8xhJrJpRXkOql8gCQ+0gCeNA9Q Fkg9XofvnRHBpsKHIGHSjBI= =RstX -END PGP SIGNATURE-
Re: Soekris equivalent
I've seen various references to PoC (AKA Piece of Crap) generic motherboards. None of these are good comparisons to either the PC Engines or Soekris boards because of their limited serial port boot rom access. Anyone who has ever worked with PC BIOS serial port redirection knows how crappy it is. my quickly devaluing US$.02 worth diana
Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory
On Thu, Dec 18, 2008 at 2:01 AM, Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch wrote: On Wed, 2008-12-17 at 14:52 -0500, Ted Unangst wrote: On Tue, Dec 16, 2008 at 7:43 AM, C. Soragan Ong sora...@guox.net wrote: so let say put set bigmem=1 into /etc/boot.conf will activate the bigmem? correct me if i am wrong, i am new with openbsd :) the only permanent way to set that is to change the source and recompile. Is there a non-permanent way? boot -d, then change it in ddb before continuing.
Re: Soekris equivalent
I love my crusoe, no moving parts and less than 1A: OpenBSD 4.4-beta (GENERIC) #976: Fri Jul 11 16:41:38 MDT 2008 pvalc...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Transmeta(tm) Crusoe(tm) Processor TM5800 (GenuineTMx86 586-class) 732 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,CX8,SEP,CMOV,SER,MMX real mem = 251146240 (239MB) avail mem = 234598400 (223MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 10/10/03, BIOS32 rev. 0 @ 0xfa2b0, SMBIOS rev. 2.3 @ 0xf0800 (31 entries) bios0: vendor Phoenix Technologies, LTD version 786W2 v1.07 date 10/10/2003 bios0: Hewlett-Packard hp t5000 series acpi0 at bios0: rev 0 acpi0: tables DSDT FACP acpi0: wakeup devices PCI0(S5) LAN0(S5) USB0(S4) USB1(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpiprt0 at acpi0: bus 0 (PCI0) acpicpu0 at acpi0: C3, C2 acpibtn0 at acpi0: PWRB bios0: ROM list: 0xc/0x8000 0xc8000/0xa000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Transmeta LongRun Northbridge rev 0x03 Transmeta Mem1 rev 0x00 at pci0 dev 0 function 1 not configured Transmeta Mem2 rev 0x00 at pci0 dev 0 function 2 not configured em0 at pci0 dev 11 function 0 Intel PRO/1000MT (82546GB) rev 0x03: irq 11, address 00:04:23:ab:6e:68 em1 at pci0 dev 11 function 1 Intel PRO/1000MT (82546GB) rev 0x03: irq 10, address 00:04:23:ab:6e:69 vga1 at pci0 dev 13 function 0 ATI Rage XL rev 0x27 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pcib0 at pci0 dev 17 function 0 VIA VT8231 ISA rev 0x10 pciide0 at pci0 dev 17 function 1 VIA VT82C571 IDE rev 0x06: ATA100, channel 0 configured to compatibility, channel 1 configured to compatibility wd0 at pciide0 channel 0 drive 0: 256MB ATA Flash Disk wd0: 1-sector PIO, LBA, 245MB, 501760 sectors wd0(pciide0:0:0): using PIO mode 4 pciide0: channel 1 ignored (disabled) uhci0 at pci0 dev 17 function 2 VIA VT83C572 USB rev 0x1e: irq 5 uhci1 at pci0 dev 17 function 3 VIA VT83C572 USB rev 0x1e: irq 5 viaenv0 at pci0 dev 17 function 4 VIA VT8231 PMG rev 0x10: failed to map PM I/O space vr0 at pci0 dev 18 function 0 VIA RhineII-2 rev 0x51: irq 15, address 00:0b:cd:6d:81:ae ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 5: OUI 0x004063, model 0x0032 isa0 at pcib0 isadma0 at isa0 com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 VIA UHCI root hub rev 1.00/1.00 addr 1 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 VIA UHCI root hub rev 1.00/1.00 addr 1 biomask 71ed netmask fded ttymask umass0 at uhub1 port 2 configuration 1 interface 0 SMI Corporation USB DISK rev 2.00/11.00 addr 2 umass0: using SCSI over Bulk-Only scsibus0 at umass0: 2 targets, initiator 0 sd0 at scsibus0 targ 1 lun 0: , , 1100 SCSI0 0/direct removable sd0: 991MB, 126 cyl, 255 head, 63 sec, 512 bytes/sec, 2030592 sec total uhidev0 at uhub0 port 1 configuration 1 interface 0 Tripplite B015-000 R0.74 USB to PS2 adapter. rev 1.10/1.00 addr 2 uhidev0: iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes, country code 3 wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub0 port 1 configuration 1 interface 1 Tripplite B015-000 R0.74 USB to PS2 adapter. rev 1.10/1.00 addr 2 uhidev1: iclass 3/1 ums0 at uhidev1: 5 buttons, Z dir wsmouse0 at ums0 mux 0 softraid0 at root root on wd0a swap on wd0b dump on wd0b On Wed, Dec 17, 2008 at 02:38:43PM -0500, Christopher Sean Hilton wrote: Is anyone aware of an equivalent for the Soekris Net 5501-70. I'm looking to prototype an OpenBSD border gateway that offers web proxy capabilities through squid cache but squid is a bit of a memory hog and I'd like to have something with a Gig of RAM. Power footprint is a consideration which is why the Soekris is at the top of the list. -- Chris Chris Hilton tildeChris -- http://myblog.vindaloo.com email -- chris/at/vindaloo/ dot/com .~~.--.~ ~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~.--.~~. I'm on the outside looking inside, What do I see? Much confusion, disillution, all around me. -- Ian McDonald / Peter Sinfield
Re: Soekris equivalent
On Thu, Dec 18, 2008 at 10:26 AM, Marco Peereboom sl...@peereboom.us wrote: I love my crusoe, no moving parts and less than 1A: Wasn't it kinda expensive in the beginning (definitely more than a soekris iirc) and even more expensive as museum pieces nowadays? -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk This officer's men seem to follow him merely out of idle curiosity. -- Sandhurst officer cadet evaluation. Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted. -- Gene Spafford learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related
Re: : OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory
On Thu, Dec 18, 2008 at 09:32:57AM -0500, Ted Unangst wrote: On Thu, Dec 18, 2008 at 2:01 AM, Stephan A. Rickauer stephan.ricka...@ini.phys.ethz.ch wrote: On Wed, 2008-12-17 at 14:52 -0500, Ted Unangst wrote: On Tue, Dec 16, 2008 at 7:43 AM, C. Soragan Ong sora...@guox.net wrote: so let say put set bigmem=1 into /etc/boot.conf will activate the bigmem? correct me if i am wrong, i am new with openbsd :) the only permanent way to set that is to change the source and recompile. Is there a non-permanent way? boot -d, then change it in ddb before continuing. Right then, to conclude... It seems the comment /* Tweakable by config(8) */ in sys/arch/amd64/amd64/machdep.c is in error. The variable can not be changed from config(8), neither before kernel compilation nor on a compiled kernel. And it can also not be changed from UKC via boot -c. But it can certainly be changed by editing the line in sys/arch/amd64/amd64/machdep.c to int bigmem = 1; and then compiling a kernel. And it can be temporarily changed via boot -d as stated above by Ted. Objections, anyone? -- / Raimo Niskanen, Erlang/OTP, Ericsson AB
Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory
On Thu, Dec 18, 2008 at 08:30:48PM +0900, Jordi Beltran Creix wrote: Enabling bigmem=1: -real mem = 3734757376 (3561MB) -avail mem = 3624775680 (3456MB) +real mem = 4271632384 (4073MB) +avail mem = 4148350976 (3956MB) Also, from sys/arch/amd64/amd64/machdep.c: /* Tweakable by config(8) */ How? That diff was never commited. Config needs to know about it before it can change it. -0- -- There is a green, multi-legged creature crawling on your shoulder.
Re: Soekris equivalent
No idea; it was a gift. Love it though; soekris, not so much. On Thu, Dec 18, 2008 at 10:49:56AM -0500, bofh wrote: On Thu, Dec 18, 2008 at 10:26 AM, Marco Peereboom sl...@peereboom.us wrote: I love my crusoe, no moving parts and less than 1A: Wasn't it kinda expensive in the beginning (definitely more than a soekris iirc) and even more expensive as museum pieces nowadays? -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk This officer's men seem to follow him merely out of idle curiosity. -- Sandhurst officer cadet evaluation. Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted. -- Gene Spafford learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related
Pokloni za sve koji veruju u Deda Mraza
Top Shop Top E - revija: 31, 18. decembar 2008 Najbolja praktiD na reE!enja i saveti za bolji Eivot PoD etna l Budi fit! l Lepota l Zdravlje l DomaDinstvo l Knjige l IgraD ke l Zabava i deca Pokloni za svakoga! Samo do 31. 12. po aktuelnim cenama ... Pokloni za svakoga Uz svaki ponuDeni proizvod u ovom e-magazinu POKLON - po dve Deda Mraz kapice! Test - da li biste prevarili partnera? SveEe prazniD ne SMS D estitke 7 saveta za zdravije praznike Kako bezbolno preEiveti Eurke? Proverite sebe - da li vam se moEe verovati i da li ste spremni da prevarite? Nudimo vam SMS D estitke drugaD ije od onih koje su kruEile prethodnih godina! ProD itajte kako najlakE!e da izbegnete prejedanje za praznike i ipak odrEite dobru liniju. Saveti pomoDu kojih Dete saD uvati zdrav razum dok pijete ili flertujete u novogodiE!njoj noDi. Da li biste prevarili partnera? Da li biste prevarili partnera? - Proverite testom! U vreme praznika sve je opuE!teno. UEivamo u slobodnim danima, putovanjima i proslavama i sve je nekako podreDeno uEivanju. Otkrijte, ukoliko ste u braku ili vezi, da li biste bili spremni da reskirate i ljubavnu avaturu. ReE!ite test! [viE!e] PREDSTAVLJAMO: Novi proizvodi za Novu Godinu - uz poklon kapice! Dream Rest Mighty Putty Smart Lidz Dream Rest Mighty Putty Smart Lidz Krevet na naduvavanje sa podesivom visinom uzglavlja. Dovoljan je samo jedan pritisak na dugme! Plastelin smola savrD ena za sve popravke u kuDi. Trajno zatvara rupe na cevima, ventilima, alatu... OdgovarajuDi vakkumski poklopci za svaku E!erpu i D iniju. Ne morate viE!e da koristite tanjiriDe i folije! Cena: 9.990,00 RSD [ViE!e l PoruD ite odmah ] Cena: 2.790,00 RSD [ViE!e l PoruD ite odmah] Cena: 2.790,00 RSD [ViE!e l PoruD ite odmah ] SMS poruke SveEe prazniD ne SMS D estitke Ukoliko Dete velikom broju prijatelja i poznanika Novu Godinu D estitati SMS porukama, a nemate ideja ni inspiracije da smiE!ljate posebnu baE! za svakoga... Pred vama su predlozi za prazniD ne SMS Eelje. [viE!e] Posetite prazniD ni e-Top Shop... lako do poklona za celu porodicu! Stariji MuE!karci E=ene MaliE!ani Zdravi praznici 7 saveta za zdravije praznike Vreme praznika nam donosi i prazniD nu trpezu sa svim teE!kim jelima, koja nikako ne moEemo da izbegnemo. KoliD ine prazniD ne hrane su u svakoj kuDi bar dvostruko veDe od potreba D lanova porodice... [viE!e] Obradujte svoje najbliEe i poklonite im osmeh ... uz poklon kapice! Rovus Garment Steamer Flexi Mop H2O Steam Mop Rovus Garment Steamer Flexi Mop H20 Steam Mop Peglanje parom je do 5 puta efikasnije do klasiD nog peglanja i produEava vek tkanine. DEoger sa drE!kom koja se savija i sa ugraDenim svetlom efikasno D isti sve vrste podova ! ParoD istaD za sve vrste podova. SavrE!eno D isti podovi za zdraviji Eivot. Unesite sjaj u svoj dom. Cena: 5.990,00 RSD [ViE!e l PoruD ite odmah ] Cena: 2.790,00 RSD [ViE!e l PoruD ite odmah] Cena: 8.490,00 RSD [ViE!e l PoruD ite odmah ] NovogodiE!nja Eurka Kako bezbolno preEiveti prazniD ne Eurke? Ne treba biti depresivan, Dudljiv ili previE!e povuD en dok se svi super zabavljaju. Ipak, budite svesni da novogodiE!nje Eurke kriju odreDene zamke... Otkrivamo vam koje i kako ih izbeDi.[viE!e] NovogodiE!nji pokloni i uz najpopularnije Top Shop proizvode... Ab Trainer Advance Table Mate Leg Magic Ab Trainer Advance Table Mate 4 Kids Leg Magic VeEbajte trbuE!ne miE!iDe, a istovremeno masirajte leDa uz najnoviju fitnes spravu. Obezbedite svom detetu sopstveni kutak za igranje D ak i ako vam je stan mali. Dovoljno je samo 13 minuta dnevno da doDete do savrE!enih nogu i D vrstog stomaka! Cena: 6.990,00 RSD [ViE!e l PoruD ite odmah ] Cena: 2.490,00 RSD [ViE!e l PoruD ite odmah] Cena:6.990,00 RSD [ViE!e l PoruD ite odmah ] Ovu elektronsku poE!tu primate, ukoliko ste svojevoljno ostavili svoju e-mail adresu na nekom od sajtova Top Shop-a, uD estvovali u naE!oj poklon igri ili nagradnom kvizu ili se prijavili za e-D asopis Top Shop-a ili nekog od nasih brendova. Ponude date u ovom e-mailu vaEe iskljuD ivo za porudEbine upuDene putem Interneta ili broja telefona 021 489 26 60. Ponude vaEe do 31. 12. 2008. ili do isteka zaliha. Ukoliko ne Eelite viE!e da primate naE!e elektronske poruke, za odjavljivanje sa naE!e e-mailing liste, kliknite ovde. Studio Moderna d.o.o., Bulevar vojvode Stepe 30, 21000 Novi Sad, Tel: 021 489 29 00, Fax: 021 489 26 08, E-mail: i...@news.e-topshop.tv [IMAGE]If you would no longer like to receive our emails please unsubscribe by clicking here.
Re: Soekris equivalent
the same site that has the atom based board from msi also has a jetway board. http://www.logicsupply.com/products/nc92_230_lf with add on, it can do 4 10/100/1000 network attachments.
Re: Soekris equivalent
Hello, FYI: We deployed 25 of the jetway boards as thin clients. We had many problems and have recently replaced the last one. I would stay away from these. -G _ From: Anathae Townsend [mailto:atowns...@nucleus.com] To: misc@openbsd.org Sent: Thu, 18 Dec 2008 12:37:23 -0600 Subject: Re: Soekris equivalent the same site that has the atom based board from msi also has a jetway board. http://www.logicsupply.com/products/nc92_230_lf with add on, it can do 4 10/100/1000 network attachments.
verify installed packages' binaries integrity ?
(Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have corrupted mtree files, can i ask pkg manager to say if any referenced file has a different checksums than recorded. (+CONTENTS file has md5 and size) i know, this does not concern any base binaries which are the stuff that matter the most, but else ... If no mtree, i think the last option is comparing with binaries from CD hoping they didn't changed. thanks Regards
Re: verify installed packages' binaries integrity ?
Hi all. i think, that, you can use chkrootkit for this, you can see more about this software in their home page or in google. if you want to know more about this software, see the home page: http://www.chkrootkit.org/ bye. 2008/12/18, jul jul_...@yahoo.fr: (Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have corrupted mtree files, can i ask pkg manager to say if any referenced file has a different checksums than recorded. (+CONTENTS file has md5 and size) i know, this does not concern any base binaries which are the stuff that matter the most, but else ... If no mtree, i think the last option is comparing with binaries from CD hoping they didn't changed. thanks Regards
Re: Capturing kernel debugger output without serial console
On Wed, 17 Dec 2008, Stuart Henderson wrote: Are your userland and kernel in sync? I update bsd and bsd.rd along with the other sets from each snapshot, so if that works, then yes. Regards, -Lars
Re: verify installed packages' binaries integrity ?
Hi again. Well, reading the file $PORTSDIR/infrastructure/mk/bsd.port.mk, i can see that you can get if a binarie is compromised by: cksum -b -a sha256 /usr/local/bin/program and see if this is equal to the +CONTETS file, if not, then, the binary maybe compromised ( i think, but not sure ). Sorry for my bad english. bye. 2008/12/18, Guillermo Bernaldo de Quiros Maraver debug...@gmail.com: Hi all. i think, that, you can use chkrootkit for this, you can see more about this software in their home page or in google. if you want to know more about this software, see the home page: http://www.chkrootkit.org/ bye. 2008/12/18, jul jul_...@yahoo.fr: (Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have corrupted mtree files, can i ask pkg manager to say if any referenced file has a different checksums than recorded. (+CONTENTS file has md5 and size) i know, this does not concern any base binaries which are the stuff that matter the most, but else ... If no mtree, i think the last option is comparing with binaries from CD hoping they didn't changed. thanks Regards
Miss Maureen Mobio
You are invited to Miss Maureen Mobio. By your host Maureen Mobio: Date: Thursday December 18, 2008 Time: 7:00 pm - 8:00 pm (GMT +00:00) Location: Dearest one,Nice to meet you, I just want to use this chance and ask for a favour and also to let you know that am interested to invest my fund in your country so if you wish to help me out then do reply me and back with your full information such as your full name, telephone and address for me to give you more details regarding this opportunity. Regards,Miss Maureen Mobio Will you attend? RSVP to this invitation at: http://calendar.yahoo.com/mmaureen555?v=126a1=0iid=RxAzjstdmRuQ%40MZ08hAt%40EdaqNfo%402SGigid=dx%409Psx%40iBqU%40NaMTxdfEWlaeNgkAN3v5hA4px%40%40 Copyright ) 2008 All Rights Reserved www.yahoo.com Privacy Policy: http://privacy.yahoo.com/privacy/us Terms of Service: http://docs.yahoo.com/info/terms/
Re: verify installed packages' binaries integrity ?
Guillermo Bernaldo de Quiros Maraver wrote on 18/12/08 20:30: i think, that, you can use chkrootkit for this, you can see more about this software in their home page or in google. thanks, but that's not what i am looking for. chkrootkit checks only a known list of binaries (mostly base i think) to see if there is a trace of infection. i'm looking to check if stuff installed on the machine has been changed. it's really about a local step on packages' binaries integrity to confirm or not suspicion of compromission. after you can compare to distant referenced packages, dd disk and forensic it. Regards
Re: verify installed packages' binaries integrity ?
On 2008-12-18, jul jul_...@yahoo.fr wrote: a small question, is there any way to check integrity of installed packages'binaries ? yes, by (ab)using pkg_create: for i in `find /var/db/pkg -name +CONTENTS`; do pkg_create -nf $i /dev/null done
Re: Capturing kernel debugger output without serial console
Thanks! On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb boot crash The ddb output can be found in the dmesg saved in the core dump. See the -M and -N options of dmesg(8). That puts the dumps in /var/crash. crash(8) mentions a little about how to retrieve information from the dump: http://www.openbsd.org/cgi-bin/man.cgi?query=crash e.g. ps -N /var/crash/bsd.0 -M /var/crash/bsd.0.core -O paddr e.g. dmesg -N /var/crash/bsd.1 What is the expected (if any) output of dmesg -M core ? I'm getting only a one liner: dmesg: kvm_read: (d09cd000) How is ddb trace output retrieved from the saved kernel and core? Regards, -Lars
OpenBSD 4.4 segfault/hard lock on retrieving MJPEG using lighttpd
Hello, I've been through diagnosing this problem with the folks on the lighttpd forum (see http://redmine.lighttpd.net/boards/2/topics/show/398), but have been stymied at every attempt to diagnose the cause, and will need some help from those more enlightened than myself. A basic summary of our story to this point: -I bought an ethernet webcam with a built in webserver (linksys dcs-910) -I added an entry in my lighttpd.conf to serve content from the camera on my domain's external IPs -Everything works fine, until I try and retrieve the MJPEG file through the lighttpd proxy -There is a segfault, and the lighttpd process disappears without logging any errors -I compiled the latest version of lighttpd with debug symbols, and ran in gdb. Still segfaults and dumps me out of gdb to the command line -I ran lighttpd in pmdb, and set it to ignore PIPE signals. It locks the system HARD. -I tried enabling core-dumps in lighttpd, but none were produced with the segfault. Checked ulimit to make sure they were enabled. Anyone have a clue? I'm running 4.4 on a PC-Engines Alix 2c3 with the generic kernel. Thanks! -Brian
Re: Capturing kernel debugger output without serial console
On Wed, 17 Dec 2008, Josh Grosse wrote: ... * ddb boot crash The ddb output can be found in the dmesg saved in the core dump. ... It may be useful to add that setting systctl ddb.panic=0 will automatically save the core dump, saving a step and some time. Regards, -Lars
Re: mod_gzip not compressing files
Doh! facepalm After sleeping on this overnight I've discovered a misconfigured server. All working as desired now. Apologies for the noise. On 12/18/2008, Jeremy Bowen jer...@smartpoint.co.nz wrote: I have a problem with mod_gzip not compressing output from httpd My System is: OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC I'm running the stock httpd however it is not chrooted httpd_flags = -u -DSSL # httpd -v Server version: Apache/1.3.29 (Unix) I've installed mod_gzip as a package: # pkg_info mod_gzip Information for inst:mod_gzip-1.3.26.1ap2 I have copied the sample mod_gzip.conf into /var/www/conf/modules and have stopped and started apache. I've tested that mod_gzip is recognised by the server by fetching http://www.smartpoint.co.nz/mod_gzip_status which returns: mod_gzip is available... mod_gzip_version = 1.3.26.1a mod_gzip_on = Yes I'm attempting to test this from: http://www.whatsmyip.org/mod_gzip_test/ Unfortunately indicates that none of my files/traffic is being gzip'ed. In /var/www/conf/modules/mod_gzip.conf I've enabled mod_gzip_keep_workfiles Yes Minimum file-size: 500 Max: 50 I have commented out any mod_gzip_item_exclude entries. There are no working files in /tmp. Nor are there any entries in /var/www/logs/mod_gzip.log I'm running with Virtual hosting if that makes a difference. I've even tried telnetting to port 80 to fetch a suitable text or html file and issuing an: Accept-Encoding: gzip command but that also fails to gzip the file. (I successfully get the uncompressed file though). Any ideas on how to debug this would be greatly appreciated. Thanks in advance Jeremy
Re: verify installed packages' binaries integrity ?
On Thu, Dec 18, 2008 at 08:48:12PM +0100, Guillermo Bernaldo de Quiros Maraver wrote: | Hi again. | | Well, reading the file $PORTSDIR/infrastructure/mk/bsd.port.mk, i can | see that you can get if a binarie is compromised by: | | cksum -b -a sha256 /usr/local/bin/program and see if this is equal to | the +CONTETS file, if not, then, the binary maybe compromised ( i | think, but not sure ). So if I break into your machine, I have to remember fixing all the +CONTENTS files for any local binaries I've changed ? And you're going to check this with the tools that are already there ? Maybe that's an easier solution then, I'll just let it ignore whatever I have changed. Seriously, if you suspect a machine to have been compromised, take it offline, create an image of the filesystems on the disk (making sure never to write to the disk) for later analysis perhaps but afterwards *completely* wipe it, reinstall and restore from your backups. Cheers, Paul 'WEiRD' de Weerd -- [++-]+++.+++[---].+++[+ +++-].++[-]+.--.[-] http://www.weirdnet.nl/
OpenBSD 4.4-current Panic when adjacent Switch is rebooted
Hi misc@, on recent kernel, my OpenBSD Bridge/Router seems to get panic when its adjacent switch is rebooted. The switch is Cisco 3550-12T. I need to change it's MTU which required the ciscoz reloaded. Cisco bridge protocol is spanning-tree mode rapid-pvst The OBSD machine it self is acting as BGP router, PF enabled, and bridge. Any inputs would be appreciated. panic: rtfree 2 Stopped at Debugger+0x4: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddbPID PPID PGRPUID S FLAGS WAIT COMMAND 29700 1 29700 0 3 0x4082 ttyin getty 9888 1 9888 0 3 0x4080 ttyin getty 17609 1 17609 0 3 0x40180 selectsendmail 7221 1 1 0 3 0x4080 ttyopngetty 3370 1 3370 0 3 0x4082 ttyin getty 29197 1 29197 0 3 0x4082 ttyin getty 4362 1 4362 0 3 0x4082 ttyin getty 13554 1 13554 0 3 0x4082 ttyin getty 10632 1 10632 0 30x80 selectcron 22677 1 22677 32767 3 0x180 nanosleep expiretable 18268 1 18268 0 30x80 selectsshd 22611 1 22611 0 3 0x180 selectinetd 31938 15025 15025 75 3 0x180 poll bgpd 12368 15025 15025 75 2 0x100bgpd *15025 1 15025 0 7 0bgpd 8440 31901 31901 91 3 0x180 kqreadsnmpd 31901 1 31901 0 30x80 kqreadsnmpd 14442 29981 4836 83 3 0x180 poll ntpd 29981 4836 4836 83 3 0x180 poll ntpd 4836 1 4836 0 30x80 poll ntpd 12379 17834 17834 74 3 0x180 bpf pflogd 17834 1 17834 0 30x80 netio pflogd 26460 15000 15000 73 3 0x180 poll syslogd 15000 1 15000 0 30x88 netio syslogd 18 0 0 0 30x100200 bored crypto 17 0 0 0 30x100200 aiodoned aiodoned 16 0 0 0 30x100200 syncerupdate 15 0 0 0 30x100200 cleaner cleaner 14 0 0 0 30x100200 reaperreaper 13 0 0 0 30x100200 pgdaemon pagedaemon 12 0 0 0 30x100200 pftm pfpurge 11 0 0 0 30x100200 usbevtusb4 10 0 0 0 30x100200 usbevtusb3 9 0 0 0 30x100200 usbevtusb2 8 0 0 0 30x100200 usbevtusb1 7 0 0 0 30x100200 usbtskusbtask 6 0 0 0 30x100200 usbevtusb0 5 0 0 0 30x100200 acpi_idle acpi0 4 0 0 0 30x100200 bored syswq 3 0 0 0 30x100200idle0 2 0 0 0 30x100200 kmalloc kmthread 1 0 1 0 3 0x4080 wait init 0 -1 0 0 3 0x80200 scheduler swapper ddb Debugger(d25ce158,d1ac3300,4,ddb0a828,d25ce100) at Debugger+0x4 panic(d06eac16,d25ce178,d1ac3300,0,0) at panic+0x55 rtfree(ddb0a828,30,0,d1ac3300) at rtfree+0xbd route_output(dde38d00,d77c2e18,0,dd211d50,d0202235) at route_output+0x341 raw_usrreq(d77c2e18,9,dde38d00,0,0) at raw_usrreq+0xf2 route_usrreq(d77c2e18,9,dde38d00,0,0) at route_usrreq+0xe8 sosend(d77c2e18,0,dd211ea8,dde38d00,0) at sosend+0x357 soo_write(d77be4d4,d77be4f0,dd211ea8,d7963000) at soo_write+0x1c dofilewritev(d789c98c,6,d77be4d4,cfbfb680,4) at dofilewritev+0xeb sys_writev(d789c98c,dd211f68,dd211f58,cfbfb680,d789c98c) at sys_writev+0x47 syscall() at syscall+0x24e --- syscall (number 121) --- 0xd9703d1: OpenBSD 4.4-current (GENERIC) #52: Thu Dec 18 22:46:20 WIT 2008 r...@border-lf.mygreenlinks.net:/usr/src/sys/arch/i386/compile/GENERIC RTC BIOS diagnostic error ffixed_disk,invalid_time cpu0: Intel(R) Pentium(R) D CPU 3.00GHz (GenuineIntel 686-class) 3.01 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,S SE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR real mem = 1069002752 (1019MB) avail mem = 1025409024 (977MB) RTC BIOS diagnostic error ffixed_disk,invalid_time mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 09/13/07, SMBIOS rev. 2.4 @ 0x3fbe4000 (42 entries) bios0: vendor Intel Corporation version S3000.86B.02.00.0048.042920081306 date 04/29/2008 bios0: Intel S3000AH acpi0 at bios0: rev 0 acpi0: tables DSDT SLIC FACP APIC WDDT MCFG ASF! SSDT SSDT SSDT SSDT SSDT HEST BERT ERST EINJ
Re: verify installed packages' binaries integrity ?
On Thu, Dec 18, 2008 at 08:04:05PM +0100, jul spoke thusly: (Note: it is not related to packages integrity when installing) a small question, is there any way to check integrity of installed packages'binaries ? i explain: in the case, i fear my host is compromised and i forgot or have corrupted mtree files, can i ask pkg manager to say if any referenced file has a different checksums than recorded. (+CONTENTS file has md5 and size) i know, this does not concern any base binaries which are the stuff that matter the most, but else ... If no mtree, i think the last option is comparing with binaries from CD hoping they didn't changed. thanks Regards A simple alternative way to check the integrity of files is at: https://calomel.org/ids_mtree.html I use ids.sh out of a nightly cronjob cuss myself out every time I forget to run the script with 'generate' after changing something, as it doesn't miss anything. At least it hasn't yet. ;) And the plus is, it's done with mtree which is in base instead of using something third-party having to fart around with another conf file. Denny White -- /\ASCII Ribbon Campaign \ /Respect for low technology. X Keep e-mail messages readable by any computer system. / \Keep it ASCII. === GnuPG key : 0x1644E79A | http://wwwkeys.nl.pgp.net Fingerprint: D0A9 AD44 1F10 E09E 0E67 EC25 CB44 F2E5 1644 E79A ===
Novo Website!
http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgdJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgdJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgRJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgVJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgdJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgdJUE0HAgQGVQ%3D%3D http://www.inaccount.info/newsletters/lt.php?id=N0UABVpYCgdJUE0HAgQGVQ%3D%3D div align=centerfont face=arial size=-2 color=#ffEmail registado na mailing list: bmisc@openbsd.org/b Para deixar de receber os nossos emails, clique http://www.inaccount.info/newsletters/lt.php?id=N0VNBx9SAwYEVQ%3D%3D -- Powered by PHPlist, www.phplist.com --
Re: mod_gzip not compressing files
Jeremy Bowen wrote: Doh! facepalm After sleeping on this overnight I've discovered a misconfigured server. All working as desired now. Too embarrassing to share for the archives? :-9 Apologies for the noise. On 12/18/2008, Jeremy Bowen jer...@smartpoint.co.nz wrote: I have a problem with mod_gzip not compressing output from httpd My System is: OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC I'm running the stock httpd however it is not chrooted httpd_flags = -u -DSSL # httpd -v Server version: Apache/1.3.29 (Unix) I've installed mod_gzip as a package: # pkg_info mod_gzip Information for inst:mod_gzip-1.3.26.1ap2 I have copied the sample mod_gzip.conf into /var/www/conf/modules and have stopped and started apache. I've tested that mod_gzip is recognised by the server by fetching http://www.smartpoint.co.nz/mod_gzip_status which returns: mod_gzip is available... mod_gzip_version = 1.3.26.1a mod_gzip_on = Yes I'm attempting to test this from: http://www.whatsmyip.org/mod_gzip_test/ Unfortunately indicates that none of my files/traffic is being gzip'ed. In /var/www/conf/modules/mod_gzip.conf I've enabled mod_gzip_keep_workfiles Yes Minimum file-size: 500 Max: 50 I have commented out any mod_gzip_item_exclude entries. There are no working files in /tmp. Nor are there any entries in /var/www/logs/mod_gzip.log I'm running with Virtual hosting if that makes a difference. I've even tried telnetting to port 80 to fetch a suitable text or html file and issuing an: Accept-Encoding: gzip command but that also fails to gzip the file. (I successfully get the uncompressed file though). Any ideas on how to debug this would be greatly appreciated. Thanks in advance Jeremy
