Re: HEADS UP: fast ipsec committed

2003-01-24 Thread Mike Tancsa
At 09:11 AM 24/01/2003 -0800, Sam Leffler wrote:

 At 09:39 PM 1/23/2003 -0800, Sam Leffler wrote:
 I just commited my Fast IPsec support.  This is an implementation of
the
 IPsec protocols that makes use of the kernel crypto framework.  What this
 means is that if you have a hardware crypto card it will automatically be
 used by the protocols.  If you don't have crypto hardware you will use
the
 host cpu as before.

 Hi,
  Apart from FAST_IPSEC and OpenSSL 0.9.7, what parts (if any) of
 FreeBSD would currently make sure of the crypto hardware ?

With OpenSSL you get lots of applications.  I'm not sure if Kerberos also
benefits.  In the kernel there's nothing else at the moment but that's not
to say that things like gbde couldn't use it.  I also intend to use it to do
AES for wireless security protocols.



Thanks for the info!  Just to confirm/clarify, without FAST_IPSEC enabled, 
none of the crypto hardware is used in IPSEC, correct ?

---Mike 


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message


Re: HEADS UP: fast ipsec committed

2003-01-24 Thread Sam Leffler
 At 09:11 AM 24/01/2003 -0800, Sam Leffler wrote:
   At 09:39 PM 1/23/2003 -0800, Sam Leffler wrote:
   I just commited my Fast IPsec support.  This is an implementation
of
 the
   IPsec protocols that makes use of the kernel crypto framework.  What
this
   means is that if you have a hardware crypto card it will
automatically be
   used by the protocols.  If you don't have crypto hardware you will
use
 the
   host cpu as before.
  
   Hi,
Apart from FAST_IPSEC and OpenSSL 0.9.7, what parts (if any)
of
   FreeBSD would currently make sure of the crypto hardware ?
 
 With OpenSSL you get lots of applications.  I'm not sure if Kerberos also
 benefits.  In the kernel there's nothing else at the moment but that's
not
 to say that things like gbde couldn't use it.  I also intend to use it to
do
 AES for wireless security protocols.


 Thanks for the info!  Just to confirm/clarify, without FAST_IPSEC enabled,
 none of the crypto hardware is used in IPSEC, correct ?

Correct.  Also, you can control the use of h/w crypto with the
net.inet.ipsec.crypto_support sysctl: set it -1 to get s/w only, 1 for h/w
only, or 0 (default) to take the best available crypto support.

Sam


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: LSI (nee AMI) MegaRAID on Compaq ML310

2003-01-24 Thread James Long
Please pardon the top-posted follow-up to my own message, but I want to
get the solution into the archives.

Many thanks to emoore for providing a driver update disk containing
mide-4.7.ko to add support for the LSI Logic MegaRAID embedded RAID
controller under FreeBSD 4.7-RELEASE.

dmesg now shows:

[snip]
avail memory = 255733760 (249740K bytes)
Preloaded elf kernel kernel at 0xc054e000.
Preloaded userconfig_script /boot/kernel.conf at 0xc054e09c.
Preloaded elf module mide.ko at 0xc054e0ec.
[snip]
pcib0: ServerWorks host to PCI bridge(unknown chipset) on motherboard
pci0: PCI bus on pcib0
mide1: LSILogic MegaRAID IDE port 
0x2030-0x203f,0x2028-0x202b,0x2020-0x2027,0x2018-0x201b,0x2010-0x2017 irq 5 at device 
2.0 on pci0
mide1: LSILogic MegaRAID IDE BIOS 2.5.03181648
mide1: LD 0 RAID1 status = ONLINE   sectors = 78161263 
capacity = 38164 MB drives = 2
bge0: Broadcom BCM5702X Gigabit Ethernet, ASIC rev. 0x1002 mem 0xf7ff-0xf7ff 
irq 10 at device 3.0 on pci0
bge0: Ethernet address: 00:08:02:ef:b8:56
miibus0: MII bus on bge0
brgphy0: BCM5703 10/100/1000baseTX PHY on miibus0
brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX, 1000baseTX-FDX, 
auto
[snip]
pcib128: ServerWorks host to PCI bridge(unknown chipset) on motherboard
pci128: PCI bus on pcib128
pcib1: Host to PCI bridge on motherboard
pci1: PCI bus on pcib1
eisa0: EISA bus on motherboard
mainboard0: CPQ0728 (System Board) on eisa0 slot 0
orm0: Option ROMs at iomem 0xc-0xc7fff,0xc8000-0xc8fff,0xee000-0xe on isa0
[snip]
da0 at mide1 bus 0 target 0 lun 0
da0: LSILogic LD  0  MegaRAID  Fixed Direct Access SCSI-2 device 
da0: 100.000MB/s transfers (16bit), Tagged Queueing Enabled
da0: 38164MB (78161265 512 byte sectors: 255H 63S/T 4865C)
Mounting root from ufs:/dev/da0s1a

On Mon, Jan 20, 2003 at 02:08:29PM -0800, James Long wrote:
 I have a Compaq ProLiant ML310, with an integrated ATA RAID controller
 controlling two 40G Seagate ST340016A drives.
 
 From some Googling, I have learned:
 
 The ML310 uses the ServerWorks GC SL chipset -- see
 http://h18004.www1.hp.com/products/servers/proliantml310/description.html
 
 ServerWorks appears to be in cahoots with LSI -- see
 http://www.enterprisestorageforum.com/hardware/news/article/0,,10559_1480661,00.html
 
 LSI bought AMI's MegaRAID technology -- see
 http://people.freebsd.org/~msmith/RAID/ami/notes.html
 
 My dmesg shows some unidentified hardware, but does not recognize the RAID
 controller as an amr device.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Tamarack Gigabit Ethernet driver needed (v_id=0x13f0, d_id=0x1021)

2003-01-24 Thread Alexandr Kovalenko
[Excuse me for such huge crosspost, I just don't know which list is more
appropriate for this question]

I'm running FreeBSD 4.7-RELEASE-p3

I need driver for ${Subject} ethernet controller.

I have found one:
http://www.icplus.com.tw/Data/driver/TC902X_FreeBSD.zip

(you have to do little trick to get the actual driver:
download .zip file, extract it, rename Readme.txt to rio.tgz, then
extract it. Only then you will get actual driver source).

It does not work, it says:

rio0: Tamarack TC902x Based 10/100/1000 Ethernet Adapter port 0x3000-0x30ff mem 
0xf5021000-0xf50211ff irq 11 at device 11.0 on pci2
rio0: Ethernet address: 00:50:fc:48:9b:da
rio0: MII without any phy!
device_probe_and_attach: rio0 attach returned 6

Could it be fixed and if yes, then how?

Thank you!

-- 
NEVE-RIPE, will build world for food
Ukrainian FreeBSD User Group
http://uafug.org.ua/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



problem with fxp interface in promisc mode

2003-01-24 Thread soloviova
Hello!
Can anybody help me? Please, look at send-pr:
http://www.freebsd.org/cgi/query-pr.cgi?pr=47432

Shortly, my problem is:

FreeBSD 4.7-RELEASE-p2 with fxp and xl interface. Running tcpdump or trafshow on fxp 
interface causes the fatal trap 12 message, and system goes down. It happens on fxp 
interface, but not on xl interface

If someone have any ideas about it or similar symptoms, please, tell me.
Thank you. 

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: problem with fxp interface in promisc mode (fwd)

2003-01-24 Thread Maxim Konovalov

Polina asked me to forward her letter to -stable because she doesn't
have a reverse name resolution for her ip address at the moment and
can't send it to the maillist herself

-- 
Maxim Konovalov, [EMAIL PROTECTED], [EMAIL PROTECTED]

-- Forwarded message --
Date: Fri, 24 Jan 2003 22:01:40 +0300
From: Polina Soloviova [EMAIL PROTECTED]
To: Maxim Konovalov [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: problem with fxp interface in promisc mode

Fri, Jan 24, 2003 at 07:30:53PM +0300 you wrote:

 Could you please show ident /usr/src/sys/dev/fxp/if_fxp.c output on
 the problem host? This bug was probably fixed in rev.1.110.2.27.


1.110.2.25

yes, I know now, that problem fixed, and I must update my source tree
thank you

 --
 Maxim Konovalov, [EMAIL PROTECTED], [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



RE: Tamarack Gigabit Ethernet driver needed (v_id=0x13f0, d_id=0x1021)

2003-01-24 Thread Paul A. Howes

From that error, it would appear that the NIC requires MIIBUS code.  Did
you compile your kernel with device miibus in the configuration file?

--
Paul A. Howes

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Alexandr
Kovalenko
Sent: Friday, January 24, 2003 1:37 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Tamarack Gigabit Ethernet driver needed (v_id=0x13f0,
d_id=0x1021)


[Excuse me for such huge crosspost, I just don't know which list is more
appropriate for this question]

I'm running FreeBSD 4.7-RELEASE-p3

I need driver for ${Subject} ethernet controller.

I have found one:
http://www.icplus.com.tw/Data/driver/TC902X_FreeBSD.zip

(you have to do little trick to get the actual driver:
download .zip file, extract it, rename Readme.txt to rio.tgz, then
extract it. Only then you will get actual driver source).

It does not work, it says:

rio0: Tamarack TC902x Based 10/100/1000 Ethernet Adapter port
0x3000-0x30ff mem 0xf5021000-0xf50211ff irq 11 at device 11.0 on pci2
rio0: Ethernet address: 00:50:fc:48:9b:da
rio0: MII without any phy!
device_probe_and_attach: rio0 attach returned 6

Could it be fixed and if yes, then how?

Thank you!

-- 
NEVE-RIPE, will build world for food
Ukrainian FreeBSD User Group
http://uafug.org.ua/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: Tamarack Gigabit Ethernet driver needed (v_id=0x13f0, d_id=0x1021)

2003-01-24 Thread Alexandr Kovalenko
Hello, Paul A. Howes!

On Fri, Jan 24, 2003 at 05:13:41PM -0500, you wrote:

 From that error, it would appear that the NIC requires MIIBUS code.  Did
 you compile your kernel with device miibus in the configuration file?

Yes, I did.

 I'm running FreeBSD 4.7-RELEASE-p3
 
 I need driver for ${Subject} ethernet controller.
 
 I have found one:
 http://www.icplus.com.tw/Data/driver/TC902X_FreeBSD.zip
 
 (you have to do little trick to get the actual driver:
 download .zip file, extract it, rename Readme.txt to rio.tgz, then
 extract it. Only then you will get actual driver source).
 
 It does not work, it says:
 
 rio0: Tamarack TC902x Based 10/100/1000 Ethernet Adapter port
 0x3000-0x30ff mem 0xf5021000-0xf50211ff irq 11 at device 11.0 on pci2
 rio0: Ethernet address: 00:50:fc:48:9b:da
 rio0: MII without any phy!
 device_probe_and_attach: rio0 attach returned 6
 
 Could it be fixed and if yes, then how?

-- 
NEVE-RIPE, will build world for food
Ukrainian FreeBSD User Group
http://uafug.org.ua/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: problem with fxp interface in promisc mode (fwd)

2003-01-24 Thread Manfred Petz
On Fri, 24 Jan 2003, Maxim Konovalov wrote:

|
| Fri, Jan 24, 2003 at 07:30:53PM +0300 you wrote:
| 
|  Could you please show ident /usr/src/sys/dev/fxp/if_fxp.c output on
|  the problem host? This bug was probably fixed in rev.1.110.2.27.
| 
|
| 1.110.2.25
|
| yes, I know now, that problem fixed, and I must update my source tree
| thank you
|

I got the same version. Thank you.

pm

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



make depend failing for 'find' - is anyone else seeing this?

2003-01-24 Thread Brian Dean
Freshly checked out sources and a clean /usr/obj, is anyone else
seeing this?

Thanks,
-Brian

=== usr.bin/find
yacc -d -o getdate.c /usr/src/usr.bin/find/../../contrib/cvs/lib/getdate.y
yacc: 10 shift/reduce conflicts
rm -f .depend
mkdep -f .depend -a-I/usr/src/usr.bin/find/../../gnu/usr.bin/cvs/lib 
-DHAVE_CONFIG_H  /usr/src/usr.bin/find/find.c /usr/src/usr.bin/find/function.c 
/usr/src/usr.bin/find/ls.c /usr/src/usr.bin/find/main.c /usr/src/usr.bin/find/misc.c 
/usr/src/usr.bin/find/operator.c /usr/src/usr.bin/find/option.c getdate.c
/usr/src/usr.bin/find/../../contrib/cvs/lib/getdate.y:19: config.h: No such file or 
directory
mkdep: compile failed
*** Error code 1

Stop in /usr/src/usr.bin/find.
*** Error code 1

Stop in /usr/src/usr.bin.
*** Error code 1

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: HEADS UP: fast ipsec committed

2003-01-24 Thread Daniel O'Connor
On Sat, 2003-01-25 at 03:41, Sam Leffler wrote:
 With OpenSSL you get lots of applications.  I'm not sure if Kerberos also
 benefits.  In the kernel there's nothing else at the moment but that's not
 to say that things like gbde couldn't use it.  I also intend to use it to do
 AES for wireless security protocols.

What about /dev/random? The hifn chips have a random number generator on
board, although I've no idea how good it is.

PS nice work :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: HEADS UP: fast ipsec committed

2003-01-24 Thread Sam Leffler
 On Sat, 2003-01-25 at 03:41, Sam Leffler wrote:
  With OpenSSL you get lots of applications.  I'm not sure if Kerberos
also
  benefits.  In the kernel there's nothing else at the moment but that's
not
  to say that things like gbde couldn't use it.  I also intend to use it
to do
  AES for wireless security protocols.

 What about /dev/random? The hifn chips have a random number generator on
 board, although I've no idea how good it is.

Right.  If the crypto h/w has a RNG on it then the entropy is automatically
fed to the system PRNG.  This can be a big win since it allows you to
disable IRQ entropy harvesting which is too expensive for a production
environment.

Sam


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



Re: HEADS UP: fast ipsec committed

2003-01-24 Thread Daniel O'Connor
On Sat, 2003-01-25 at 13:44, Sam Leffler wrote:
 Right.  If the crypto h/w has a RNG on it then the entropy is automatically
 fed to the system PRNG.  This can be a big win since it allows you to
 disable IRQ entropy harvesting which is too expensive for a production
 environment.

Ahh, very nice.

Maybe I should just read the code 8-)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message



make world crashing

2003-01-24 Thread Holt Grendal
Hello all,

My make world is randomly crashing. ie.:

Jan 24 21:55:02 gren /kernel: pid 45494 (as), uid 0: exited on signal 11 (core dumped)
Jan 24 22:33:44 gren /kernel: pid 69117 (cpp0), uid 0: exited on signal 11 (core 
dumped)
Jan 24 22:58:24 gren /kernel: pid 13571 (as), uid 0: exited on signal 11 (core dumped)

I have replaced the motherboard, cpu and ram with new
equipment and this still happens.

What else could be wrong? Power Supply? Its a SCSI system
so perhaps the SCSI Controller (but we have no problems
with the hard disks)?

Any ideas?

H.


__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-stable in the body of the message