Re: Problems with auditd -- resolved

2006-09-18 Thread Ganbold

Robert Watson wrote:


Dear all,

I've just comitted a fix to syscalls.master and regenerated the 
remaining system call files, which should correct the auditctl: 
Invalid Argument error being returned by auditd.  In short order, this 
fix should be on the cvsup mirrors -- please let me know if it 
resolves the problem you were experiencing.


Hi,

After installing and running auditd I don't see any log files for auditd:

daemon# ls -l /var/audit/
total 0
-r--r-  1 root  audit  0 Sep 18 14:23 20060918052316.20060918060339
-r--r-  1 root  audit  0 Sep 18 15:03 20060918060339.not_terminated

I have custom /etc/security/audit_control and audit_user files.

daemon# more /etc/security/audit_control
#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_control#3 $
# $FreeBSD: src/contrib/openbsm/etc/audit_control,v 1.2.2.1 2006/09/02 
10:46:00 rwatson Exp $

#
dir:/var/audit
flags:all
minfree:20
naflags:lo

#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_user#3 $
# $FreeBSD: src/contrib/openbsm/etc/audit_user,v 1.2.2.1 2006/09/02 
10:46:00 rwatson Exp $

#
#root:lo:no
root:all:no

I'm bit confused here I thought auditd should log all activities, but I 
don't see any log files.
Am I doing something wrong here or my understanding regarding auditd is 
wrong?


thanks in advance,

Ganbold




Thanks,

Robert N M Watson
Computer Laboratory
University of Cambridge
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]





___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


ath0 weak connectivity

2006-09-18 Thread Dmitry Karasik

Hi,

Has anyone experienced problems with ath0 giving bad connectivity on
6.1-STABLE? My wireless card reported as Atheros 5212 rapidly loses
connectivity if I move it more than 2-3 meters away from the access
point, but the same notebook connects well from under windows.

I tried both kernel with both old device ath_rate_sample and ath_rate_onoe,
tried to play with AP's settings, changed transmit rate and beacon
interval, nothing helps. One interesting thing though is that ifconfig ath0
scan reports my station as configured to 119ms beacon interval, while
it is set to 100ms actually.

Anything else I can try?

-- 
Sincerely,
Dmitry Karasik

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Robert Watson

On Mon, 18 Sep 2006, Ganbold wrote:


#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_user#3 $
# $FreeBSD: src/contrib/openbsm/etc/audit_user,v 1.2.2.1 2006/09/02 10:46:00 
rwatson Exp $

#
#root:lo:no
root:all:no

I'm bit confused here I thought auditd should log all activities, but I 
don't see any log files. Am I doing something wrong here or my understanding 
regarding auditd is wrong?


Your configuration looks right to me, and should be generating a ridiculous 
number of audit records.  Could you try rebooting and logging in again? 
audit_user entries take effect only as of login, similar to /etc/group 
settings, etc.  How are you logging into the system?


On my local RELENG_6 system, with the recent auditctl(2) fix, I'm using the 
following global settings to audit programs run by authenticated users:


  dir:/var/audit
  flags:lo,+ex
  minfree:20
  naflags:lo

It seems to be working properly.  User space login/logout auditing won't work 
in RELENG_6 until the MFC of Christian's recent tweaks to pipe preselection, 
which will occurr in a few days (and hence should appear in BETA2).


Robert N M Watson
Computer Laboratory
University of Cambridge
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Ganbold

Robert Watson wrote:

On Mon, 18 Sep 2006, Ganbold wrote:


#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_user#3 $
# $FreeBSD: src/contrib/openbsm/etc/audit_user,v 1.2.2.1 2006/09/02 
10:46:00 rwatson Exp $

#
#root:lo:no
root:all:no

I'm bit confused here I thought auditd should log all activities, but 
I don't see any log files. Am I doing something wrong here or my 
understanding regarding auditd is wrong?


Your configuration looks right to me, and should be generating a 
ridiculous number of audit records.  Could you try rebooting and 
logging in again? audit_user entries take effect only as of login, 
similar to /etc/group settings, etc.  How are you logging into the 
system?

This is my desktop system and I updated today to latest RELENG_6.

daemon# uname -an
FreeBSD daemon.micom.mng.net 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #6: 
Mon Sep 18 12:56:04 ULAST 2006 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GDAEMON  i386


I tried to restart several times auditd using /etc/rc.d/auditd script.

daemon# /etc/rc.d/auditd restart
Trigger sent.
Starting auditd.
daemon# /etc/rc.d/auditd restart
Trigger sent.
auditd already running? (pid=2065).
daemon# /etc/rc.d/auditd restart
Error sending trigger: Operation not supported by device
Starting auditd.
daemon# /etc/rc.d/auditd restart
Trigger sent.
auditd already running? (pid=2095).
daemon# /etc/rc.d/auditd restart
Error sending trigger: Operation not supported by device
Starting auditd.
daemon# /etc/rc.d/auditd restart
Trigger sent.
Starting auditd.
daemon# ps ax | grep audit
  10  ??  DL 0:00.00 [audit_worker]
2141  ??  Ss 0:00.01 /usr/sbin/auditd
2143  p3  RV 0:00.00 grep audit (csh)
daemon# ps ax | grep audit
  10  ??  DL 0:00.00 [audit_worker]
2141  ??  Ss 0:00.01 /usr/sbin/auditd

Strange, there are still no logs in /var/audit dir :( Even tried to use 
your config, no success.
However when I logged on to my desktop from console to itself (ssh -l 
tsgan localhost) it starts logging.

But why it is not logging when I'm on console?



On my local RELENG_6 system, with the recent auditctl(2) fix, I'm 
using the following global settings to audit programs run by 
authenticated users:


  dir:/var/audit
  flags:lo,+ex
  minfree:20
  naflags:lo

It seems to be working properly.  User space login/logout auditing 
won't work in RELENG_6 until the MFC of Christian's recent tweaks to 
pipe preselection, which will occurr in a few days (and hence should 
appear in BETA2).

I see.

thanks,

Ganbold



Robert N M Watson
Computer Laboratory
University of Cambridge
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]





___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Robert Watson


On Mon, 18 Sep 2006, Ganbold wrote:

Strange, there are still no logs in /var/audit dir :( Even tried to use your 
config, no success. However when I logged on to my desktop from console to 
itself (ssh -l tsgan localhost) it starts logging. But why it is not logging 
when I'm on console?


Are you using xdm/kdm/gdm/etc or /usr/bin/login?  I'm not sure that the 
various GUI login managers associated with X11 ship with BSM support compiled 
in by default, although given that they also run on Solaris, it is likely they 
support it.


Robert N M Watson
Computer Laboratory
University of Cambridge
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ARRRRGH! Guys, who's breaking -STABLE's GMIRROR code?!

2006-09-18 Thread Oliver Fromme
Michael Abbott wrote:
  Roland Smith wrote:
   Martin Nilsson wrote:
Hans Lambermont wrote:
.. or just stop calling it STABLE and call it RELENG_6 instead
   
   That's a good idea, IMHO. When I started with FreeBSD I found the
   difference between the branch names and cvs tags confusing.
  
  Let me second that.  I hadn't realised that STABLE==RELENG_n (where n is 
  the current version number) until very recently, and I've seen the STABLE 
  isn't stable thing crop up over and over again over the last few years, 
  both on mailing lists and IRC.

Actually, FreeBSD has three types of branches:

 - current a.k.a. HEAD
 - X-stable a.k.a. RELENG_X
 - X.Y security branch a.k.a. RELENG_X_Y

I think it would be better to rename the 2nd one RELENG
(instead of STABLE), because that's exactly what it is:
the release-engineering branch from which the releases are
derived.

The term STABLE would be much better suitable for the
3rd type of branches which are currently called security
branches.  Thus we would have:

 - current
 - releng
 - stable

Then the names match exactly what the branches are:
current is the current head of experimental development,
releng is the release engineering branch, and stable
is the stable branch for people who want to track only
security fixes and the most critical stuff.

Such appropriate naming would certainly prevent a lot of
confusion.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

The last good thing written in C was
Franz Schubert's Symphony number 9.
-- Erwin Dieterich
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Ganbold

Robert Watson wrote:


On Mon, 18 Sep 2006, Ganbold wrote:

Strange, there are still no logs in /var/audit dir :( Even tried to 
use your config, no success. However when I logged on to my desktop 
from console to itself (ssh -l tsgan localhost) it starts logging. 
But why it is not logging when I'm on console?


Are you using xdm/kdm/gdm/etc or /usr/bin/login?  I'm not sure that 
the various GUI login managers associated with X11 ship with BSM 
support compiled in by default, although given that they also run on 
Solaris, it is likely they support it.
Ok, I'm using gnome and gnome-terminal, and it is not logging. Probably 
gnome-terminal is not compiled with BSM support.

Auditd logs when I go to console using ctrl+alt+f2 combination from X.
Thanks for clarifying this.

Ganbold



Robert N M Watson
Computer Laboratory
University of Cambridge





___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ARRRRGH! Guys, who's breaking -STABLE's GMIRROR code?!

2006-09-18 Thread Dave Horsfall
On Mon, 18 Sep 2006, Oliver Fromme wrote:

[...]

 Then the names match exactly what the branches are: current is the 
 current head of experimental development, releng is the release 
 engineering branch, and stable is the stable branch for people who 
 want to track only security fixes and the most critical stuff.

Which is pretty well what OpenLDAP does; over there, HEAD is bleeding 
edge, RELEASE is the latest version, and STABLE is, well, stable as 
understood by most humans...

See http://www.openldap.org/software/download/

-- Dave
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Robert Watson


On Mon, 18 Sep 2006, Ganbold wrote:


Robert Watson wrote:


On Mon, 18 Sep 2006, Ganbold wrote:

Strange, there are still no logs in /var/audit dir :( Even tried to use 
your config, no success. However when I logged on to my desktop from 
console to itself (ssh -l tsgan localhost) it starts logging. But why it 
is not logging when I'm on console?


Are you using xdm/kdm/gdm/etc or /usr/bin/login?  I'm not sure that the 
various GUI login managers associated with X11 ship with BSM support 
compiled in by default, although given that they also run on Solaris, it is 
likely they support it.
Ok, I'm using gnome and gnome-terminal, and it is not logging. Probably 
gnome-terminal is not compiled with BSM support. Auditd logs when I go to 
console using ctrl+alt+f2 combination from X. Thanks for clarifying this.


Basically, at login, the audit subsystem determins what new audit properties 
are required for the login session and assigns them to the process, which 
consists of both the audit identifier associated with the user, and the 
preselection mask.  Events associated with non-authenticated sessions (which 
is what gdm logins will count as) should still get audited using the 
properties for the global naflags setting, so if you want to audit events 
associated with gdm you can set naflags to include more events.  This will 
also be what audits things like web server activity, so it may result in 
significant numbers of events being audited as part of that also.


We will need to add audit extensions to new login mechanisms, such as 
xdm/kdm/gdm, or enable them if already present but not enabled on FreeBSD by 
default.  OpenSSH, for example, already included BSM support due to Solaris 
and Mac OS X BSM, so we just enabled it by switching a flag in the compile 
(and also fixed a bug in it!).  We should probably talk to the maintainers of 
these ports about investigating creating or enabling BSM support.


Robert N M Watson
Computer Laboratory
University of Cambridge
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [Q] multisync irmc/irmc_bluetooth plugins

2006-09-18 Thread Dennis Melentyev

2006/9/18, Henrik Brix Andersen [EMAIL PROTECTED]:

On Sun, Sep 17, 2006 at 10:55:24PM +0200, Pav Lucistnik wrote:
 Plus, Multisync is dead in water, project abandoned...

Not completely true. Multisync in its current form is abandoned, but
a new version based on the OpenSync framework
(http://www.opensync.org/) is in the works.


Thanks, will check it.

--
Dennis Melentyev
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Too dumb to mount as non privileged user

2006-09-18 Thread norbert
Hello,

using a 6.2-PRERELEASE I am not able to let a normal user mount a cdrom.
I have tried the following:

o vfs.usermount=1 to sysctl.conf
o added group usermounters
o added user to usermounters
o own acd0 root:usermounters to devfs.conf
o perm acd0 0660 to devfs.conf
o created directory with ownership of non privileged user
o reboot

Trying to mount as user to the users own directory yields 'operation not 
permitted' error.

So I changed the ownerships to 0666 but this didn't help either.
I doublechecked sysctl, groups and ownerships. Can please anybody give me a 
hint?

TIA

Norbert
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too dumb to mount as non privileged user

2006-09-18 Thread George Potapov
On Monday 18 September 2006 15:12, [EMAIL PROTECTED] wrote:

 So I changed the ownerships to 0666 but this didn't help either.
 I doublechecked sysctl, groups and ownerships. Can please anybody give me a
 hint?

IIRC the mount point directory must be owned by the user attempting the mount.

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too dumb to mount as non privileged user

2006-09-18 Thread Jona Joachim
[EMAIL PROTECTED] wrote:
 Hello,
 
 using a 6.2-PRERELEASE I am not able to let a normal user mount a cdrom.
 I have tried the following:
 
 o vfs.usermount=1 to sysctl.conf
 o added group usermounters
 o added user to usermounters
 o own acd0 root:usermounters to devfs.conf
 o perm acd0 0660 to devfs.conf
 o created directory with ownership of non privileged user
 o reboot
 
 Trying to mount as user to the users own directory yields 'operation not 
 permitted' error.
 
 So I changed the ownerships to 0666 but this didn't help either.
 I doublechecked sysctl, groups and ownerships. Can please anybody give me a 
 hint?

Make sure the cd9660 kernel module is loaded before you mount a CD as
user. The first time you mount a CD the module is loaded but a user is
not allowed to load a kernel module. You may want to load the module
during boot time by putting a corresponding entry in /boot/loader.conf

--jona
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


cron+nsswitch+winbind = wierd thing

2006-09-18 Thread Andriy Gapon

Recently I had rebooted my server after a long uptime and after reboot
cron didn't run any jobs. This is what I found in its log (time, host
and pid are stripped):
NSSWITCH(nss_method_lookup): winbind, group, setgrent, not found
NSSWITCH(nss_method_lookup): winbind, group, getgrent_r, not found
NSSWITCH(nss_method_lookup): winbind, group, endgrent, not found
NSSWITCH(nss_method_lookup): winbind, passwd, endpwent, not found

I have winbind for passwd and group in my nsswitch.conf, of course, and
everything else except for cron worked properly. E.g. I could run 'pw
showgroup -a' and it returned both local and windows groups.
After I restarted cron and it started to work normally again.

I suspect that cron couldn't find nss_winbind.so for some reason (which
is in /usr/local/lib). I thought that this might have been because cron
was started before rc.d/ldconfig ran and added /usr/local/lib, but
according to dmesg cron was started after ldconfig. So I am out of ideas
now.

-- 
Andriy Gapon
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too dumb to mount as non privileged user

2006-09-18 Thread Norbert Kaufmann
Jona Joachim wrote:
 Make sure the cd9660 kernel module is loaded before you mount a CD as
 user. The first time you mount a CD the module is loaded but a user is
 not allowed to load a kernel module. You may want to load the module
 during boot time by putting a corresponding entry in /boot/loader.conf
 
 --jona

Thanks, that's it!

Norbert
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ath0 weak connectivity

2006-09-18 Thread Radu Adrian Zdrinca

I have had similar problems with the driver. The signal quality in
Windows is higher. But there are other problems. For example, when I
start Limewire I have to wait for about 3 minutes before it loads. I
am sure this is a problem with ath interface.

On 9/18/06, [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:

Send freebsd-stable mailing list submissions to
   freebsd-stable@freebsd.org

To subscribe or unsubscribe via the World Wide Web, visit
   http://lists.freebsd.org/mailman/listinfo/freebsd-stable
or, via email, send a message with subject or body 'help' to
   [EMAIL PROTECTED]

You can reach the person managing the list at
   [EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than Re: Contents of freebsd-stable digest...


Today's Topics:

  1. Re: Problems with auditd -- resolved (Cristiano Deana)
  2. Re: Attention Julian Stacey (Wilko Bulte)
  3. [Q] multisync irmc/irmc_bluetooth plugins (Dennis Melentyev)
  4. Re: Polling and em0 (Eugene Kazarinov)
  5. Re: Attention Julian Stacey  (Julian H. Stacey)
  6. Re: Polling and em0 (Robert Watson)
  7. Re: agh!  Guys, who's breaking -STABLE's gmirror code?!
 (Jo Rhett)
  8. Re: Attention Julian Stacey (Jase Thew)
  9. Re: [Q] multisync irmc/irmc_bluetooth plugins (Pav Lucistnik)
 10. Re: [Q] multisync irmc/irmc_bluetooth plugins
 (Henrik Brix Andersen)
 11. Re: RELENG_6 power button ignored after halt if ACPI enabled
 (Mark Kirkwood)
 12. Re: bge watchdog timeouts still happening (Ronald Klop)
 13. Re: Problems with auditd -- resolved (Ganbold)
 14. ath0 weak connectivity (Dmitry Karasik)
 15. Re: Problems with auditd -- resolved (Robert Watson)
 16. Re: Problems with auditd -- resolved (Ganbold)
 17. Re: Problems with auditd -- resolved (Robert Watson)
 18. Re: AGH! Guys, who's breaking -STABLE's GMIRROR code?!
 (Oliver Fromme)
 19. Re: Problems with auditd -- resolved (Ganbold)
 20. Re: AGH! Guys, who's breaking -STABLE's GMIRROR code?!
 (Dave Horsfall)
 21. Re: Problems with auditd -- resolved (Robert Watson)
 22. Re: [Q] multisync irmc/irmc_bluetooth plugins (Dennis Melentyev)
 23. Too dumb to mount as non privileged user ([EMAIL PROTECTED])
 24. Re: Too dumb to mount as non privileged user (George Potapov)
 25. Re: Too dumb to mount as non privileged user (Jona Joachim)


--

Message: 1
Date: Sun, 17 Sep 2006 17:08:25 +0200
From: Cristiano Deana [EMAIL PROTECTED]
Subject: Re: Problems with auditd -- resolved
To: Robert Watson [EMAIL PROTECTED]
Cc: Joerg Pernfuss [EMAIL PROTECTED], Ganbold
   [EMAIL PROTECTED],[EMAIL PROTECTED]
Message-ID:
   [EMAIL PROTECTED]
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

2006/9/17, Robert Watson [EMAIL PROTECTED]:

 I've just comitted a fix to syscalls.master and regenerated the remaining
 system call files, which should correct the auditctl: Invalid Argument error
 being returned by auditd.  In short order, this fix should be on the cvsup
 mirrors -- please let me know if it resolves the problem you were
 experiencing.

auditd up and running, tnx Robert.

I will submit more information.


--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/


--

Message: 2
Date: Sun, 17 Sep 2006 17:48:36 +0200
From: Wilko Bulte [EMAIL PROTECTED]
Subject: Re: Attention Julian Stacey
To: Maxim Konovalov [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], Julian H. Stacey [EMAIL PROTECTED],
   [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=us-ascii

On Sun, Sep 17, 2006 at 12:49:43PM +0400, Maxim Konovalov wrote..
 On Sun, 17 Sep 2006, 02:31-0600, Scott Long wrote:

  Julian H. Stacey wrote:
 
   [EMAIL PROTECTED]
  
  
   Message-id: [EMAIL PROTECTED]
   From: Kris Kennaway [EMAIL PROTECTED]
  
  
   lol, that's the stupidest thing I've heard all week.
  
  
   Inflamatory.  Refered to postmaster.
  
 
  Julian, meet Kris.  Kris has been the head of the FreeBSD ports team for
  a large number of years.  He's also written and presented several papers
  on FreeBSD performance, among many other hobbies and interests.  He's a
  pretty laid back and fun guy, with a sharp sense of humor.
 
  Kris, meet Julian.  Julian has been a FreeBSD user, contributor, and
  advocate since before there was such a such a thing as 'FreeBSD', or
  even 'http' for that matter.  I've never met him in person, but based on
  the many years worth of emails I've seen from him, he seems like a
  pretty decent and smart fellow.
 
  Julian, meet Paul Saab.  Paul was a key FreeBSD developer for many years
  at Yahoo.  He's worked on many areas of the FreeBSD codebase, and has
  been instrumental in gaining and coordinating support for FreeBSD from
  many corporate vendors.  He also runs mu.org as a hobby and as an
  informal hosting service for many FreeBSD developers, including Kris.
  He might also one day 

Re: ARRRRGH! Guys, who's breaking -STABLE's GMIRROR code?!

2006-09-18 Thread Stephen Clark

Oliver Fromme wrote:


Michael Abbott wrote:
 Roland Smith wrote:
  Martin Nilsson wrote:
   Hans Lambermont wrote:
   .. or just stop calling it STABLE and call it RELENG_6 instead
  
  That's a good idea, IMHO. When I started with FreeBSD I found the

  difference between the branch names and cvs tags confusing.
 
 Let me second that.  I hadn't realised that STABLE==RELENG_n (where n is 
 the current version number) until very recently, and I've seen the STABLE 
 isn't stable thing crop up over and over again over the last few years, 
 both on mailing lists and IRC.


Actually, FreeBSD has three types of branches:

- current a.k.a. HEAD
- X-stable a.k.a. RELENG_X
- X.Y security branch a.k.a. RELENG_X_Y

I think it would be better to rename the 2nd one RELENG
(instead of STABLE), because that's exactly what it is:
the release-engineering branch from which the releases are
derived.

The term STABLE would be much better suitable for the
3rd type of branches which are currently called security
branches.  Thus we would have:

- current
- releng
- stable

Then the names match exactly what the branches are:
current is the current head of experimental development,
releng is the release engineering branch, and stable
is the stable branch for people who want to track only
security fixes and the most critical stuff.

Such appropriate naming would certainly prevent a lot of
confusion.

Best regards
  Oliver

 


I agree!

My $.02
Steve

--

They that give up essential liberty to obtain temporary safety, 
deserve neither liberty nor safety.  (Ben Franklin)


The course of history shows that as a government grows, liberty 
decreases.  (Thomas Jefferson)




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with auditd -- resolved

2006-09-18 Thread Cristiano Deana

2006/9/18, Robert Watson [EMAIL PROTECTED]:


 I'm bit confused here I thought auditd should log all activities, but I
 don't see any log files. Am I doing something wrong here or my understanding
 regarding auditd is wrong?

Your configuration looks right to me, and should be generating a ridiculous
number of audit records.


just try few minutes with fw. works for me.

tnx Robert  Co.

--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS query performance

2006-09-18 Thread Marcelo Gardini do Amaral

Hello Mike,

 Although it sounds silly, could you try recompiling 6.1 and 7.0 with a 
 non-SMP kernel and see how they perform?  That would at least tell us if 
 it's a general performance problem in 6.x and 7.x, or if SMP is somehow 
 hurting performance in this case.

I have this numbers spread over my e-mails. Just putting they together:


OS  q/s
--- ---

FreeBSD 6.1 SMP 14953

FreeBSD 6.1 UP  15516

FreeBSD 7.x SMP 15323

FreeBSD 7.x UP  16200


FreeBSD 4.11 SMP34977

FreeBSD 4.11 UP 33926


I think is a general problem in 6.x and 7.x. UP kernel is always a
little bit better, but I can't see big changes tweaking from SMP to
UP.

On the other hand, with the same hardware, 4.11 is twice better in
performance.

-- 
Att.,

Marcelo Gardini

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Polling and em0

2006-09-18 Thread Dmitry Morozovsky
On Sun, 17 Sep 2006, Eugene Kazarinov wrote:

EK  dell1# cat /dev/zero | dd bs=1m | nc dell2 3000
EK  ^C0+18456 records in
EK  0+18455 records out
EK  1209466880 bytes transferred in 12.459299 secs (97,073,429 bytes/sec)
EK 
EK 
EK Do you meen that from 6.2 I dont need polling for fastest performance?

We had opposite experience, at least in situation when 1 Gbps RELENG_6 router 
have to route a LOT of small packets from a few thousands of residential 
ethernet customers... 

We have bge instead of em though. Maybe it's time to experiment further now.

Sincerely,
D.Marck [DM5020, MCK-RIPE, DM3-RIPN]

*** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- [EMAIL PROTECTED] ***

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


mod_php4 unavaible

2006-09-18 Thread rvenne

hi list

I've updated php4 this morning, and my web site using lost php module. 
the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
removed, and I don't know how to get it workind,


some ideas?
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread Dominic Marks

[EMAIL PROTECTED] wrote:

hi list

I've updated php4 this morning, and my web site using lost php module. 
the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
removed, and I don't know how to get it workind,


From /usr/ports/UPDATING

20060506:
  AFFECTS: users of PHP
  AUTHOR: [EMAIL PROTECTED]

  The old PHP slave ports (phpN-cli, phpN-cgi and mod_phpN) were removed
  in favour of unified PHP ports that allow building any combination of
  PHP SAPIs (cli, cgi and apache module).
  The PHP CGI binary was renamed to php-cgi, so you should update
  the path in your script. To simplify the update process, *only* for
  this release a 'php' compatibility symlink to php-cgi will be created
  if you don't select the CLI SAPI.
  Before the upgrade you *should* run 'make config' in lang/php4 or
  lang/php5 to configure the SAPIs you want to install.
  As a consequence the default binary packages include the CLI and the
  FastCGI SAPIs.

Dominic


some ideas?
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread Luca Morettoni
On 18/09/2006 15.39, [EMAIL PROTECTED] wrote:
 hi list
 
 I've updated php4 this morning, and my web site using lost php module.
 the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been
 removed, and I don't know how to get it workind,
 
 some ideas?

from /usr/ports/UPDATING:

20060506:
  AFFECTS: users of PHP
  AUTHOR: [EMAIL PROTECTED]

  The old PHP slave ports (phpN-cli, phpN-cgi and mod_phpN) were removed
  in favour of unified PHP ports that allow building any combination of
  PHP SAPIs (cli, cgi and apache module).
  The PHP CGI binary was renamed to php-cgi, so you should update
  the path in your script. To simplify the update process, *only* for
  this release a 'php' compatibility symlink to php-cgi will be created
  if you don't select the CLI SAPI.
  Before the upgrade you *should* run 'make config' in lang/php4 or
  lang/php5 to configure the SAPIs you want to install.
  As a consequence the default binary packages include the CLI and the
  FastCGI SAPIs.

-- 
Luca Morettoni luca(AT)morettoni(DOT)net - http://morettoni.net
GUFI staff/core member luca(AT)gufi(DOT)org - http://gufi.org
AIP/ITCS member #2589 | FreeSBIE developer luca(AT)FreeSBIE(DOT)org
Thawte notary (15 points) - http://www.thawte.com

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread Oleg Dambaev

[EMAIL PROTECTED] wrote:

hi list

I've updated php4 this morning, and my web site using lost php module. 
the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
removed, and I don't know how to get it workind,


some ideas?
As far as I know, php builds own modules called usually libphp(version 
number).so and places it in $PREFIX$/$MODULES$ dir of your apache.

Did you used --with-apxs=... option while building?
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread Patrick M. Hausen
Hi!

 I've updated php4 this morning, and my web site using lost php module. 
 the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
 removed, and I don't know how to get it workind,

See /usr/ports/lang/php4

HTH,

Patrick M. Hausen
Leiter Netzwerke und Sicherheit
-- 
punkt.de GmbH Internet - Dienstleistungen - Beratung
Vorholzstr. 25Tel. 0721 9109 -0 Fax: -100
76137 Karlsruhe   http://punkt.de
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread Javier Henderson


On Sep 18, 2006, at 9:39 AM, [EMAIL PROTECTED] wrote:


hi list

I've updated php4 this morning, and my web site using lost php  
module. the php4 is unavailble on my system. /usr/ports/www/ 
mod_php4 has been removed, and I don't know how to get it workind,


some ideas?


The php4 module isn't build by default anymore.

Reinstall php4:

make reinstall -DWITH_APACHE

-jav

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: network performance problem

2006-09-18 Thread Robert Watson


On Wed, 13 Sep 2006, Ingo wrote:

I`ve some problems with the network performance on my Soekris NET 4801. 
(Freebsd 6.1 release-p3)


When I start netio on the soekris and do a netio localhost, I get about 
8.4 MB/sec, and when I start with netio 192.168.0.11(it´s localhost 
address) I get only ~2.3 MB/sec. That´s what top says when I do:


What does route get 192.168.0.11 return?

What happens if you force the localhost MTU from whatever the default is (most 
likely 16k) to the same as the ethernet interface?


Robert N M Watson
Computer Laboratory
University of Cambridge



localhost
CPU states:  2.3% user,  0.0% nice, 72.5% system, 25.2% interrupt,  0.0% idle

192.168.0.11
CPU states:  1.2% user,  0.0% nice, 46.3% system, 52.5% interrupt,  0.0% idle

As you can see, the interrupt load is more than doubled when I use the Ip 
address, and

I´ve no idea why.


Here are some other throughput results of the soekris:

openbsd# ftp 192.16.8.0.20  2.0 MB/sec
openbsd# iperf localhost 1.4 Mbit/sec
openbsd# iperf 192.168.0.11(it´s localhost address) 1.4 Mbit/sec
openbsd# netperf localhost 70MB/sec
openbsd# netperf 192.168.0.11(it´s localhost address) 70MB/sec

freebsd# ftp 192.168.0.20  2.3 MB/sec
Freebsd# iperf localhost 45 Mbit/sec
Freebsd# iperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec
Freebsd# netperf localhost 67 Mbit/sec
Freebsd# netperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec


What causes the difference between localhost and the ip address on Freebsd?
On Openbsd there is no diffenerce at all.


Greetings
--
Erstellt mit Operas revolutionärem E-Mail-Modul: http://www.opera.com/mail/
___
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to 
[EMAIL PROTECTED]___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: mod_php4 unavaible

2006-09-18 Thread Jussi, Petteri Nummikko
[EMAIL PROTECTED] wrote:
 hi list
 
 I've updated php4 this morning, and my web site using lost php module.
 the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been
 removed, and I don't know how to get it workind,
 
 some ideas?
 ___
 freebsd-stable@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-stable
 To unsubscribe, send any mail to [EMAIL PROTECTED]

You can compile apache module from /usr/ports/lang/php4.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible

2006-09-18 Thread rvenne

Patrick M. Hausen wrote:


Hi!

 

I've updated php4 this morning, and my web site using lost php module. 
the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
removed, and I don't know how to get it workind,
   



See /usr/ports/lang/php4

HTH,

Patrick M. Hausen
Leiter Netzwerke und Sicherheit
 

I'll post in the right list next time, and tell whether it's ok after 
checks.


--
Richard VENNE
www.dental-on-line.com
Phone: 01 43 27 94 24
fax: 01 43 27 66 85

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mod_php4 unavaible [resolved]

2006-09-18 Thread rvenne

Patrick M. Hausen wrote:


Hi!

 

I've updated php4 this morning, and my web site using lost php module. 
the php4 is unavailble on my system. /usr/ports/www/mod_php4 has been 
removed, and I don't know how to get it workind,
   



See /usr/ports/lang/php4

HTH,

Patrick M. Hausen
Leiter Netzwerke und Sicherheit
 


sudo make deinstall  sudo make reinstall -DWITH_APACHE
sudo libtool --finish /usr/ports/lang/php4/work/php-4.4.4/libs
sudo /usr/local/etc/rc.d/030.apache2.sh reload
works well

thanks for all


--
Richard VENNE
www.dental-on-line.com
Phone: 01 43 27 94 24
fax: 01 43 27 66 85

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ath0 weak connectivity

2006-09-18 Thread Sam Leffler
Dmitry Karasik wrote:
 Hi,
 
 Has anyone experienced problems with ath0 giving bad connectivity on
 6.1-STABLE? My wireless card reported as Atheros 5212 rapidly loses
 connectivity if I move it more than 2-3 meters away from the access
 point, but the same notebook connects well from under windows.
 
 I tried both kernel with both old device ath_rate_sample and ath_rate_onoe,
 tried to play with AP's settings, changed transmit rate and beacon
 interval, nothing helps. One interesting thing though is that ifconfig ath0
 scan reports my station as configured to 119ms beacon interval, while
 it is set to 100ms actually.
 
 Anything else I can try?
 

ifconfig ath0 scan doesn't report your local configuration, it triggers
a scan and reports the scan results.  If your local station thinks the
beacon internal is 119ms when it's really 100ms then something is very
confused but it's unlikely to cause bad connectivity (unless you're
operating the station in power save mode which isn't currently possible).

I do not understand what bad connectivity means.  If you provide
information like the mac+phy revs for the card, hal version, and
statistics from programs like athstats then it might be possible to
identify what's wrong.  Otherwise look at turning on debugging at the
net80211 layer with wlandebug.  Both athstats and wlandebug are found in
src/tools/tools (under net80211 and ath respectively).

Sam
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ath0 weak connectivity

2006-09-18 Thread Sam Leffler
Radu Adrian Zdrinca wrote:
 I have had similar problems with the driver. The signal quality in
 Windows is higher. But there are other problems. For example, when I
 start Limewire I have to wait for about 3 minutes before it loads. I
 am sure this is a problem with ath interface.

How do you know the signal quality in Windows is higher?

I know nothing about Limewire and cannot say why you think problems with
it are related to ath.  Regardless, read my response to the original
poster; I can't offer advise w/o meaningful information.

Sam
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


aac0 command timeouts

2006-09-18 Thread Vivek Khera
Today one of my admins noticed the following errors on a 6.0-REL-p4  
system (Sun X4100) with an Adaptec 2230SLP RAID card:


aac0: COMMAND 0x80841700 TIMEOUT AFTER 36 SECONDS
aac0: COMMAND 0x80846160 TIMEOUT AFTER 36 SECONDS
aac0: COMMAND 0x80843370 TIMEOUT AFTER 36 SECONDS
aac0: COMMAND 0x80841700 TIMEOUT AFTER 56 SECONDS
aac0: COMMAND 0x80846160 TIMEOUT AFTER 56 SECONDS
aac0: COMMAND 0x80843370 TIMEOUT AFTER 56 SECONDS

They were all logged at the same timestamp in /var/log/messages.

The card is hooked up to a Dell 14-disk hot-swap array with U320  
drives and backplane.


I poked around and found some references to this on the mailing lists  
for FreeBSD 4.x and 5.1, with references to should be fixed in 5.2,  
but that seemed to be relating to the system locking up at boot.  I  
don't have that problem.


Some messages also indicate that it could be a firmware issue and  
updating firmware solved it for them.  This worries me since this  
system was built new last January so should have recent firmware in  
the drives.


Is this still a problem for other folks?

Also, what utilities can I use on FreeBSD 6 to probe  the drives for  
firmware.  I know with the LSI controllers the LSI command line  
utilities give you this info, but the Adaptec aaccli program  
doesn't have a way to find this out.


Also what strategy do people use for updating the firmware on drives  
hooked up to RAID cards?  The last time I tried this the updating  
program (dos boot CD) was unable to see the physical drives past the  
card.




Re: ath0 weak connectivity

2006-09-18 Thread Emil Stoyanov

Radu Adrian Zdrinca wrote:

I have had similar problems with the driver. The signal quality in
Windows is higher. But there are other problems. For example, when I
start Limewire I have to wait for about 3 minutes before it loads. I
am sure this is a problem with ath interface.

If I recall correctly, Limewire is java-based p2p app and java on Linux 
and FreeBSD requires a bit more resources than on Windows (according to 
SUN's recommendations i read the last time). I guess this is due to 
different strategies for memory management in the implementation of Java 
VM. It depends on what machines you are running java - on slower ones, 
or such with less memory, the time for loading java vm, and the time for 
allocation of memory for bigger apps may vary quite a lot, but 3 minutes 
looks like more problem of slow dns resolving, if many peers are 
connecting to you, etc..


I suppose this is not related to problems with driver, but anything is 
possible, just better testing and more investigations can prove that..


Cheers,
Emil

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: network performance problem

2006-09-18 Thread Ingo

Hi,


heres the output of route get 192.168.0.11:

localhost# route get 192.168.0.11
   route to: 192.168.0.11
destination: 192.168.0.0
   mask: 255.255.255.0
  interface: sis0
  flags: UP,DONE,CLONING
 recvpipe  sendpipe  ssthresh  rtt,msecrttvar  hopcount  mtu  
expire
   0 0 0 0 0 0  1500
-69



I set the lo0 interface as you recommended from 16384 to 1500.
Now I have the same thoughput as with the IP (~2.3MB/s).

Shouldn´t FreeBSD recognize, that it is it´s local address, like openbsd  
does?



Greetings


Am 18.09.2006, 15:52 Uhr, schrieb Robert Watson [EMAIL PROTECTED]:



On Wed, 13 Sep 2006, Ingo wrote:


I`ve some problems with the network performance on my Soekris NET 4801.
(Freebsd 6.1 release-p3)

When I start netio on the soekris and do a netio localhost, I get  
about

8.4 MB/sec, and when I start with netio 192.168.0.11(it´s localhost
address) I get only ~2.3 MB/sec. That´s what top says when I do:


What does route get 192.168.0.11 return?

What happens if you force the localhost MTU from whatever the default is  
(most

likely 16k) to the same as the ethernet interface?

Robert N M Watson
Computer Laboratory
University of Cambridge



localhost
CPU states:  2.3% user,  0.0% nice, 72.5% system, 25.2% interrupt,   
0.0% idle


192.168.0.11
CPU states:  1.2% user,  0.0% nice, 46.3% system, 52.5% interrupt,   
0.0% idle


As you can see, the interrupt load is more than doubled when I use the  
Ip

address, and
I´ve no idea why.


Here are some other throughput results of the soekris:

openbsd# ftp 192.16.8.0.20  2.0 MB/sec
openbsd# iperf localhost 1.4 Mbit/sec
openbsd# iperf 192.168.0.11(it´s localhost address) 1.4 Mbit/sec
openbsd# netperf localhost 70MB/sec
openbsd# netperf 192.168.0.11(it´s localhost address) 70MB/sec

freebsd# ftp 192.168.0.20  2.3 MB/sec
Freebsd# iperf localhost 45 Mbit/sec
Freebsd# iperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec
Freebsd# netperf localhost 67 Mbit/sec
Freebsd# netperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec


What causes the difference between localhost and the ip address on  
Freebsd?

On Openbsd there is no diffenerce at all.


Greetings
--
Erstellt mit Operas revolutionärem E-Mail-Modul:  
http://www.opera.com/mail/

___
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to
[EMAIL PROTECTED]



___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: network performance problem

2006-09-18 Thread Robert Watson

On Mon, 18 Sep 2006, Ingo wrote:


heres the output of route get 192.168.0.11:

localhost# route get 192.168.0.11
 route to: 192.168.0.11
destination: 192.168.0.0
 mask: 255.255.255.0
interface: sis0
flags: UP,DONE,CLONING
recvpipe  sendpipe  ssthresh  rtt,msecrttvar  hopcount  mtu 
expire

 0 0 0 0 0 0  1500   -69

I set the lo0 interface as you recommended from 16384 to 1500. Now I have 
the same thoughput as with the IP (~2.3MB/s).


Shouldn´t FreeBSD recognize, that it is it´s local address, like openbsd 
does?


What MTU does OpenBSD use on its loopback interface as compared to the 
network interface?


Robert N M Watson
Computer Laboratory
University of Cambridge




Greetings


Am 18.09.2006, 15:52 Uhr, schrieb Robert Watson [EMAIL PROTECTED]:



On Wed, 13 Sep 2006, Ingo wrote:


I`ve some problems with the network performance on my Soekris NET 4801.
(Freebsd 6.1 release-p3)

When I start netio on the soekris and do a netio localhost, I get 
about

8.4 MB/sec, and when I start with netio 192.168.0.11(it´s localhost
address) I get only ~2.3 MB/sec. That´s what top says when I do:


What does route get 192.168.0.11 return?

What happens if you force the localhost MTU from whatever the default is 
(most

likely 16k) to the same as the ethernet interface?

Robert N M Watson
Computer Laboratory
University of Cambridge



localhost
CPU states:  2.3% user,  0.0% nice, 72.5% system, 25.2% interrupt,  0.0% 
idle


192.168.0.11
CPU states:  1.2% user,  0.0% nice, 46.3% system, 52.5% interrupt,  0.0% 
idle


As you can see, the interrupt load is more than doubled when I use the Ip
address, and
I´ve no idea why.


Here are some other throughput results of the soekris:

openbsd# ftp 192.16.8.0.20  2.0 MB/sec
openbsd# iperf localhost 1.4 Mbit/sec
openbsd# iperf 192.168.0.11(it´s localhost address) 1.4 Mbit/sec
openbsd# netperf localhost 70MB/sec
openbsd# netperf 192.168.0.11(it´s localhost address) 70MB/sec

freebsd# ftp 192.168.0.20  2.3 MB/sec
Freebsd# iperf localhost 45 Mbit/sec
Freebsd# iperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec
Freebsd# netperf localhost 67 Mbit/sec
Freebsd# netperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec


What causes the difference between localhost and the ip address on 
Freebsd?

On Openbsd there is no diffenerce at all.


Greetings
--
Erstellt mit Operas revolutionärem E-Mail-Modul: 
http://www.opera.com/mail/

___
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: network performance problem

2006-09-18 Thread Ingo

OpenBSD uses on sis0 MTU=1500
and lo0= MTU=33224


Am 18.09.2006, 20:56 Uhr, schrieb Robert Watson [EMAIL PROTECTED]:


On Mon, 18 Sep 2006, Ingo wrote:


heres the output of route get 192.168.0.11:

localhost# route get 192.168.0.11
 route to: 192.168.0.11
destination: 192.168.0.0
 mask: 255.255.255.0
interface: sis0
flags: UP,DONE,CLONING
recvpipe  sendpipe  ssthresh  rtt,msecrttvar  hopcount  mtu
expire
 0 0 0 0 0 0   
1500   -69


I set the lo0 interface as you recommended from 16384 to 1500. Now I  
have

the same thoughput as with the IP (~2.3MB/s).

Shouldn´t FreeBSD recognize, that it is it´s local address, like openbsd
does?


What MTU does OpenBSD use on its loopback interface as compared to the
network interface?

Robert N M Watson
Computer Laboratory
University of Cambridge




Greetings


Am 18.09.2006, 15:52 Uhr, schrieb Robert Watson [EMAIL PROTECTED]:



On Wed, 13 Sep 2006, Ingo wrote:

I`ve some problems with the network performance on my Soekris NET  
4801.

(Freebsd 6.1 release-p3)

When I start netio on the soekris and do a netio localhost, I get
about
8.4 MB/sec, and when I start with netio 192.168.0.11(it´s localhost
address) I get only ~2.3 MB/sec. That´s what top says when I do:


What does route get 192.168.0.11 return?

What happens if you force the localhost MTU from whatever the default  
is

(most
likely 16k) to the same as the ethernet interface?

Robert N M Watson
Computer Laboratory
University of Cambridge



localhost
CPU states:  2.3% user,  0.0% nice, 72.5% system, 25.2% interrupt,   
0.0%

idle

192.168.0.11
CPU states:  1.2% user,  0.0% nice, 46.3% system, 52.5% interrupt,   
0.0%

idle

As you can see, the interrupt load is more than doubled when I use  
the Ip

address, and
I´ve no idea why.


Here are some other throughput results of the soekris:

openbsd# ftp 192.16.8.0.20  2.0 MB/sec
openbsd# iperf localhost 1.4 Mbit/sec
openbsd# iperf 192.168.0.11(it´s localhost address) 1.4 Mbit/sec
openbsd# netperf localhost 70MB/sec
openbsd# netperf 192.168.0.11(it´s localhost address) 70MB/sec

freebsd# ftp 192.168.0.20  2.3 MB/sec
Freebsd# iperf localhost 45 Mbit/sec
Freebsd# iperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec
Freebsd# netperf localhost 67 Mbit/sec
Freebsd# netperf 192.168.0.11 (it´s localhost address) 19 Mbit/sec


What causes the difference between localhost and the ip address on
Freebsd?
On Openbsd there is no diffenerce at all.


Greetings
--
Erstellt mit Operas revolutionärem E-Mail-Modul:
http://www.opera.com/mail/
___
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to
[EMAIL PROTECTED]





___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


isc-dhcpd and jails bound to an aliased ip

2006-09-18 Thread Russell Jackson
Attempting to run isc-dhcpd (using USE_SOCKETS) inside a jail
bound to an aliased ip does not appear to work. The process never seems
to recieve any broadcast traffic; however, it does see unicast traffic
as would be expected. I'm not sure how to debug this since one cannot
run tcpdump in the jail to see what traffic is getting there obviously.

It works fine if I change the jail to bind to the primary ip on the
interface. Not surprisingly, it also works fine if I run it outside of a
jail using BPF. Changing the broadcast addresses on the aliases does not
seem to change anything.

It is just that the kernel will not deliver broadcasts to jails on ip
aliases as I suspect? Yes, I now I have a zombied jail in the jls
listing. There are no processes with a JID of 2 running, and I'm
reluctant to reboot the machine because it's in production.

If I have to run the jail on the primary ip address, that's okay. I
would just prefer to have it running in a seperate jail and still have
ssh running on the standard port (less confusing to users).

Relevant configuration:

em0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=bRXCSUM,TXCSUM,VLAN_MTU
inet6 fe80::213:72ff:fe4b:70e7%em0 prefixlen 64 scopeid 0x1 
inet 136.168.1.5 netmask 0x broadcast 136.168.255.255
inet 136.168.1.8 netmask 0x broadcast 136.168.1.8
inet 136.168.1.91 netmask 0x broadcast 136.168.1.91
ether 00:13:72:4b:70:e7
media: Ethernet autoselect (1000baseTX full-duplex)
status: active

# global jail knobs
jail_enable=YES
jail_list=ns1 netstat
jail_set_hostname_allow=NO

# ns1 jail
jail_ns1_rootdir=/usr/jail/ns1
jail_ns1_hostname=ns1.csub.edu
jail_ns1_ip=136.168.1.91
jail_ns1_exec_start=/bin/sh /etc/rc
jail_ns1_devfs_enable=YES
jail_ns1_mount_enable=YES

# netstat jail
jail_netstat_rootdir=/usr/jail/netstat
jail_netstat_hostname=netstat.csub.edu
jail_netstat_ip=136.168.1.8
jail_netstat_exec_start=/bin/sh /etc/rc
jail_netstat_devfs_enable=YES
jail_netstat_mount_enable=YES

   JID  IP Address  Hostname  Path
 8  136.168.1.91ns1.csub.edu  /usr/jail/ns1
 4  136.168.1.8 netstat.csub.edu  /usr/jail/netstat
 2  136.168.1.91ns1.csub.edu  /usr/jail/ns1

Thanks,
-- 
Russell A. Jackson [EMAIL PROTECTED]
Network Analyst
CSUB Network Services
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELENG_6 Livelock

2006-09-18 Thread John Baldwin
On Sunday 17 September 2006 02:05, Frode Nordahl wrote:
 On 17. sep. 2006, at 04.42, John Baldwin wrote:
 
  On Saturday 16 September 2006 16:55, Frode Nordahl wrote:
  On 16. sep. 2006, at 22.22, Frode Nordahl wrote:
 
  On 16. sep. 2006, at 22.09, John Baldwin wrote:
 
  On Saturday 16 September 2006 07:02, Frode Nordahl wrote:
  Hello,
 
  FreeBSD localhost.localdomain 6.2-PRERELEASE FreeBSD 6.2- 
  PRERELEASE
  #1: Wed Sep 13 00:10:04 CEST 2006  
  [EMAIL PROTECTED]:/
  usr/obj/usr/src/sys/PT  i386
 
  After running some stress tests for 3 days, I wanted to remove  
  some
  large directories.
 
  Do you have a coredump?  I assume you do from your debug  
  output.  Can
  you download http://www.FreeBSD.org/~jhb/gdb/gdb6, fire up kgdb,  
  and
  once in kgdb, do 'source /path/to/gdb6' and then run 'ps' and reply
  with the output from that?
 
  I am sorry, I have not. I tried to call doadump, but there was no
  dumpdevice configured :-(
 
  Somehow I have convinced myself that this was turned on by default
  now, so I have not enabled it explicitly in rc.conf. Is there any
  way to tell DDB what dumpdevice to use directly?
 
  I will configure a dumpdevice and try really hard to make it happen
  again.
 
  I was able to reproduce the livelock again, and this time I had the
  system armed with dumpon :-)
 
  Here is the output you requested:
  (kgdb) ps
 pid  ppid  pgrp   uid   state   wmesg wchancmd
  2535  2499  2535 0  R+  CPU  0  rm
  2534  2499  2534 0  L+ *Giant0xc6704580 rm
  2533  2499  2533 0  L+ *Giant0xc6704580 rm
  2532  2499  2532 0  R+  rm
  2531  2499  2531 0  L+ *Giant0xc6704580 rm
  2499  2496  2499 0  Ss+ ttyin0xc655d810 bash
  2496   784  2496 0  Rs  sshd
 
  Ok, do 'lockchain 2534' in kgdb (with gdb6 sourced) and let me see the
  output from that.
 
 (kgdb) lockchain 2534
 thread 100038 (pid 2534, rm) blocked on lock 0xc09e6800 Giant
 thread 100091 (pid 2535, rm) running on CPU 0

Ok, do 'proc 2535' followed by 'where'

-- 
John Baldwin
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ath0 weak connectivity

2006-09-18 Thread Radu Adrian Zdrinca

I'm sorry that I don't have freebsd on my system to do more testing
but I'm pretty sure it's the ath0 interface that's causing the issue.
When the interface is down limewire starts normally but when it's up
it takes about 3 minutes to load. I have tried upgrading to stable but
it's still the same issue. I will try to reinstall to do some more
testing.

On 9/18/06, Emil Stoyanov [EMAIL PROTECTED] wrote:

Radu Adrian Zdrinca wrote:
 I have had similar problems with the driver. The signal quality in
 Windows is higher. But there are other problems. For example, when I
 start Limewire I have to wait for about 3 minutes before it loads. I
 am sure this is a problem with ath interface.

If I recall correctly, Limewire is java-based p2p app and java on Linux
and FreeBSD requires a bit more resources than on Windows (according to
SUN's recommendations i read the last time). I guess this is due to
different strategies for memory management in the implementation of Java
VM. It depends on what machines you are running java - on slower ones,
or such with less memory, the time for loading java vm, and the time for
allocation of memory for bigger apps may vary quite a lot, but 3 minutes
looks like more problem of slow dns resolving, if many peers are
connecting to you, etc..

I suppose this is not related to problems with driver, but anything is
possible, just better testing and more investigations can prove that..

Cheers,
Emil



___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELENG_6 Livelock

2006-09-18 Thread Frode Nordahl


On 18. sep. 2006, at 22.14, John Baldwin wrote:


On Sunday 17 September 2006 02:05, Frode Nordahl wrote:

On 17. sep. 2006, at 04.42, John Baldwin wrote:


On Saturday 16 September 2006 16:55, Frode Nordahl wrote:

On 16. sep. 2006, at 22.22, Frode Nordahl wrote:


On 16. sep. 2006, at 22.09, John Baldwin wrote:


On Saturday 16 September 2006 07:02, Frode Nordahl wrote:

Hello,

FreeBSD localhost.localdomain 6.2-PRERELEASE FreeBSD 6.2-
PRERELEASE
#1: Wed Sep 13 00:10:04 CEST 2006
[EMAIL PROTECTED]:/
usr/obj/usr/src/sys/PT  i386

After running some stress tests for 3 days, I wanted to remove
some
large directories.


Do you have a coredump?  I assume you do from your debug
output.  Can
you download http://www.FreeBSD.org/~jhb/gdb/gdb6, fire up kgdb,
and
once in kgdb, do 'source /path/to/gdb6' and then run 'ps' and  
reply

with the output from that?


I am sorry, I have not. I tried to call doadump, but there was no
dumpdevice configured :-(

Somehow I have convinced myself that this was turned on by default
now, so I have not enabled it explicitly in rc.conf. Is there any
way to tell DDB what dumpdevice to use directly?

I will configure a dumpdevice and try really hard to make it  
happen

again.


I was able to reproduce the livelock again, and this time I had the
system armed with dumpon :-)

Here is the output you requested:
(kgdb) ps
   pid  ppid  pgrp   uid   state   wmesg wchancmd
2535  2499  2535 0  R+  CPU  0  rm
2534  2499  2534 0  L+ *Giant0xc6704580 rm
2533  2499  2533 0  L+ *Giant0xc6704580 rm
2532  2499  2532 0  R+  rm
2531  2499  2531 0  L+ *Giant0xc6704580 rm
2499  2496  2499 0  Ss+ ttyin0xc655d810 bash
2496   784  2496 0  Rs  sshd


Ok, do 'lockchain 2534' in kgdb (with gdb6 sourced) and let me  
see the

output from that.


(kgdb) lockchain 2534
thread 100038 (pid 2534, rm) blocked on lock 0xc09e6800 Giant
thread 100091 (pid 2535, rm) running on CPU 0


Ok, do 'proc 2535' followed by 'where'


(kgdb) proc 2535
(kgdb) where
#0  doadump () at pcpu.h:165
#1  0xc04733bb in db_fncall (dummy1=1016, dummy2=0, dummy3=-319658232,
dummy4=0xecf2670c @g??) at /usr/src/sys/ddb/db_command.c:492
#2  0xc04731c0 in db_command (last_cmdp=0xc09cb624, cmd_table=0x0,
aux_cmd_tablep=0xc092a838, aux_cmd_tablep_end=0xc092a854)
at /usr/src/sys/ddb/db_command.c:350
#3  0xc0473288 in db_command_loop () at /usr/src/sys/ddb/db_command.c: 
458
#4  0xc0474e95 in db_trap (type=3, code=0) at /usr/src/sys/ddb/ 
db_main.c:221

#5  0xc0696203 in kdb_trap (type=3, code=0, tf=0xecf2684c)
at /usr/src/sys/kern/subr_kdb.c:473
#6  0xc089140c in trap (frame=
  {tf_fs = -319684600, tf_es = -1066860504, tf_ds = -1064304600,  
tf_edi = 249, tf_esi = -967491584, tf_ebp = -319657844, tf_isp =  
-319657864, tf_ebx = -963122944, tf_edx = 0, tf_ecx = -1056878592,  
tf_eax = 34, tf_trapno = 3, tf_err = 0, tf_eip = -1066836089, tf_cs =  
32, tf_eflags = 130, tf_esp = -319657816, tf_ss = -1064914410}) at / 
usr/src/sys/i386/i386/trap.c:594

#7  0xc087f49a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#8  0xc0695f87 in kdb_enter (msg=0x22 Address 0x22 out of bounds)
at cpufunc.h:60
#9  0xc086b216 in siointr1 (com=0xc6554000) at /usr/src/sys/dev/sio/ 
sio.c:1522
#10 0xc086aff4 in siointr (arg=0xc6554000) at /usr/src/sys/dev/sio/ 
sio.c:1391
#11 0xc0883491 in intr_execute_handlers (isrc=0xc63854c4,  
iframe=0xecf268f8)

at /usr/src/sys/i386/i386/intr_machdep.c:233
---Type return to continue, or q return to quit---
#12 0xc0885852 in lapic_handle_intr (frame=
  {if_vec = 56, if_fs = 8, if_es = 40, if_ds = 40, if_edi = 36,  
if_esi = -961899520, if_ebp = -319657648, if_ebx = -873832448, if_edx  
= 100875, if_ecx = 3111, if_eax = 40, if_eip = -1065518606, if_cs =  
32, if_eflags = 643, if_esp = 40, if_ss = 40}) at /usr/src/sys/i386/ 
i386/local_apic.c:606

#13 0xc087f853 in Xapic_isr1 () at apic_vector.s:110
#14 0xc07d79f2 in ufsdirhash_adjfree (dh=0xc6aa9400, offset=1593184,  
diff=-16)

at /usr/src/sys/ufs/ufs/ufs_dirhash.c:917
#15 0xc07d6478 in ufsdirhash_build (ip=0xc8b3018c)
at /usr/src/sys/ufs/ufs/ufs_dirhash.c:246
#16 0xc07d84b1 in ufs_lookup (ap=0xecf26a7c)
at /usr/src/sys/ufs/ufs/ufs_lookup.c:192
#17 0xc08a28b8 in VOP_CACHEDLOOKUP_APV (vop=0x28, a=0x18a0b) at  
vnode_if.c:150

#18 0xc06c985e in vfs_cache_lookup (ap=0x28) at vnode_if.h:82
#19 0xc08a2847 in VOP_LOOKUP_APV (vop=0xc09b5840, a=0xecf26b18)
at vnode_if.c:99
#20 0xc06cde31 in lookup (ndp=0xecf26ba0) at vnode_if.h:56
#21 0xc06cd6d2 in namei (ndp=0xecf26ba0) at /usr/src/sys/kern/ 
vfs_lookup.c:211

#22 0xc06dbe93 in kern_lstat (td=0xc697e900,
path=0x18a0b Address 0x18a0b out of bounds, pathseg=100875,
sbp=0xecf26c74) at /usr/src/sys/kern/vfs_syscalls.c:2147
#23 0xc06dbe2f in lstat (td=0xc697e900, uap=0xecf26d04)
at /usr/src/sys/kern/vfs_syscalls.c:2130
---Type return to 

ufs - fsck_ffs problem

2006-09-18 Thread noctua
Hola,

I'm running 6.1, and experiening some problems with my RAID array.  Using a
3ware escalade, some corruption to the file system has occurred during a
power outage.  The raw hardware of the filesystem is fine -- at least as far
as the 3ware device is concerned.

At any rate, I issued:

fsho# fsck_ffs -n -b 160 /dev/da0c
Alternate super block location: 160
** /dev/da0c
** Last Mounted on 
** Phase 1 - Check Blocks and Sizes
fsck_ffs: cannot alloc 2641372856 bytes for inoinfo

I found some code by Einstein: 
http://www.atm.tut.fi/list-archive/freebsd-stable-2005/msg04212.html
which seems to get past the problem.  But, I'm certainly concerned about the
sanctity of my data, and have committed no suggested changes by the program,
as witnessed below:

Alternate super block location: 160
** /dev/da0c (NO WRITE)
** Last Mounted on
** Phase 1 - Check Blocks and Sizes
UNKNOWN FILE TYPE I=2
CLEAR? no

PARTIALLY ALLOCATED INODE I=62
CLEAR? no

PARTIALLY ALLOCATED INODE I=75
CLEAR? no

PARTIALLY ALLOCATED INODE I=110
CLEAR? no

512903222015925405 BAD I=129
2363463046329258390 BAD I=129
-4878472826699975618 BAD I=129
-3101413049108763758 BAD I=129
-4942707920151290579 BAD I=129
8570194651996646049 BAD I=129
2315016788075931432 BAD I=129
-1520079671300232671 BAD I=129
-8795335986215733707 BAD I=129
-4534688454961916277 BAD I=129
5406555421949755135 BAD I=129
EXCESSIVE BAD BLKS I=129
CONTINUE? yes

PARTIALLY TRUNCATED INODE I=130
SALVAGE? no

.  and this will go on forever, finding billions of problems.

I'm at a loss.  The file system cannot be that corrupt.  Any advice?

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]