[Leaf-user] CPU loading monitor
Is anyone aware of a CPU monitor for LRP that I could use to see what my box is doing? Thanks. Kevin ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] CPU loading monitor
Has anyone made an lrpStat.lrp? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of KP Kirchdörfer Sent: Tuesday, December 18, 2001 3:31 PM To: [EMAIL PROTECTED]; Leaf-User (E-mail) Subject: Re: [Leaf-user] CPU loading monitor Am Dienstag, 18. Dezember 2001 21:58 schrieb Kevin Kropf: Is anyone aware of a CPU monitor for LRP that I could use to see what my box is doing? lrpStat from http://leaf.sourceforge.net/devel/hejl Read there about using the C-program lrpStat instead of stat.sh, which is used in weblet from dachstein. kp ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] CPU loading monitor
I get the following error: # top top: error in loading shared libraries libncurses.so.4: cannot open shared object file: No such file or directory Help... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Hadley Sent: Tuesday, December 18, 2001 8:49 PM To: [LEAF-user] Subject: Re: [Leaf-user] CPU loading monitor Not that im aware of, though I do know that I a have a top (which can watch CPU usage among other things) package on my site under the packages section ( http://leaf.sourceforge.net/devel/khadley/ ) and yes, I am doing shameless advertising ;-) -Kenneth Hadley - Original Message - From: Kevin Kropf [EMAIL PROTECTED] To: [EMAIL PROTECTED]; Leaf-User (E-mail) [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 5:32 PM Subject: RE: [Leaf-user] CPU loading monitor Has anyone made an lrpStat.lrp? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of KP Kirchdörfer Sent: Tuesday, December 18, 2001 3:31 PM To: [EMAIL PROTECTED]; Leaf-User (E-mail) Subject: Re: [Leaf-user] CPU loading monitor Am Dienstag, 18. Dezember 2001 21:58 schrieb Kevin Kropf: Is anyone aware of a CPU monitor for LRP that I could use to see what my box is doing? lrpStat from http://leaf.sourceforge.net/devel/hejl Read there about using the C-program lrpStat instead of stat.sh, which is used in weblet from dachstein. kp ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Process show command no detail on Dachstein
Any thoughts as to why I do not get a more detailed output on dachstein-rc2-1680.exe? # ps aux PID Uid Stat Command 1 root Sinit 2 root S[kflushd] 3 root S[kupdate] 4 root S[kswapd] 5 root S[keventd] 981 root S/usr/sbin/dhclient eth0 1143 root S/sbin/syslogd -m 240 1145 root S/sbin/klogd 1149 root S/usr/sbin/inetd 1152 root S/usr/sbin/sshd 1155 root S/usr/sbin/watchdog 1158 root S/usr/sbin/cron 1167 root S/usr/sbin/dhcpd eth1 1170 daemon S/usr/sbin/dnscache 1171 root S/sbin/getty 38400 tty1 1172 root S/sbin/getty 38400 tty2 1173 root S/usr/sbin/sshd 1175 root S-sh 1183 root Rps aux ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Datchstein CD 1.0.2 and pppoe
Just a note of experience, to get the scripts to pick up the ip address assigned by the pppoe server I had to put a 15 second delay after adsl-start in network.conf. This was on EigerStein2BETA.exe. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Steinkuehler Sent: Saturday, December 15, 2001 7:19 AM To: [EMAIL PROTECTED] Subject: Re: [Leaf-user] Datchstein CD 1.0.2 and pppoe In Dachstein cd, the pppoe package contains an init script which calls adsl-start I used to call adsl-start from the if_up function in the network.conf but now that Charles has some support for pppoe , I try to follow him closely. I'm not sure it wouldn't be better to call adsl-start from if_up, and make ppp0 an interface configured by the standard newtork scripts. I only support one PPPoE connection, and it's in France (I'm in the US), so I don't really like to 'experiment' with the system (it's too easy to leave it in a state where it won't connect to the network at all). This also means I don't see any of the issues caused by the various ISP's doing PPPoE...I only deal with one ISP, and a test-network using the Roaring Penguin PPPoE server. I'm open to suggestions on how best to integrate PPPoE support to the existing network config scripts... Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Squid package??
I poked around a bit and found that the Oxygen version does not include squidGuard. How hard would it be to put up the latest version that includes squidGuard? Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Douthitt Sent: Wednesday, December 12, 2001 10:30 AM To: LEAF Users List Subject: Re: [Leaf-user] Squid package?? Todd Pearsall wrote: I grabbed it from the Oxygen packages, but I don't know and can't currently check what version it is. It's the same one. I've compiled Squid 2.4 STABLE3 to run under glibc 2.0; it should work in any system. I also compiled it with SNMP enabled. It requires the libm library, and libcrypt. It does NOT need libnsl (I removed it...) It's a big package - the squid binary (stripped) is about 477k, and the compressed package is about 311k. The cache will be at /usr/cache. The package, if you want it, is at http://leaf.sourceforge.net/pub/oxygen/packages/squid.lrp. If you have any problems, let me know. ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Squid package??
I do not know as I am new to squid etc... It (squidGuard) was included in the squid-2.lrp I used and had instructions on how to use it. http://users.bart.nl/~nelemans/squid/squid.html I assumed someone did the research and thought it best to do this. What is your experience and opinion? What is Squirm? Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Douthitt Sent: Wednesday, December 12, 2001 11:45 AM To: LEAF Users List Subject: Re: [Leaf-user] Squid package?? Kevin Kropf wrote: I poked around a bit and found that the Oxygen version does not include squidGuard. How hard would it be to put up the latest version that includes squidGuard? squidGuard is a separate product. It'll take some doing, since it requires libdb. Some questions though: why use squidGuard when you have the redirection capabilities in Squid? Why use squidGuard instead of Squirm? ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] Squid redirect dachstein floppy
I am not that familiar with ipchains and was hoping for a little more detail. I put together the following command from the info on the squid FAQ: $IPCH -A input -p tcp -d 0/0 80 -j REDIRECT 3128 However I am not sure what else is needed and where to put it in ipfilter.conf Thanks for any help on this. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David Douthitt Sent: Tuesday, December 11, 2001 5:32 PM To: LEAF Users List Subject: Re: [Leaf-user] Squid redirect dachstein floppy Kevin Kropf wrote: I have Squid running on dachstein-rc2-1680.exe and would like to redirect all internal port 80 requests to the default Squid port of 3128 on the LRP box. I have read through the archives and found very little of use. What is the best way to do this? This is in the Squid FAQ - in fact, it's an entire section (#17); go to the Squid home page at http://www.squid-cache.org/ . ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] 3Com PCI 3c905-tx
Try: http://leaf.sourceforge.net/devel/cstein/files/kernels/Dachstein-normal/modu les/net/3c59x.o Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Reginald R. Richardson Sent: Monday, December 10, 2001 10:27 PM To: Mailing List __Leaf ([EMAIL PROTECTED]) Subject: [Leaf-user] 3Com PCI 3c905-tx Does anyone know where I can find driver for a 3Com PCI 3c905-tx, or what compatable driver I can use...for DachStein Thnks reggie ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] PPPoE DNS problem, Help please.
I am using EigerStein_contrib_img_pppoe-beta0.4.exe I am having trouble getting the nameservers from my ISP known by LRP. Example ping www.yahoo.com yields: ping: unknown host www.yahoo.com What else must I do? I would like the address's picked up from ppp so when they change I don't have to do anything. I have set:USEPEERDNS=yes in etc/ppp/ppp0e.conf # cat /etc/resolv.conf # This file was generated by /etc/rcS.d/S39network. It may be overwritten! search private.network nameserver 192.168.1.254 nameserver 127.0.0.1 FYI I have found that to get this image to connect to a Bell ADSL modem on startup I had to create a file called /etc/ppp/firewall-masq and back it up with the ppp stuff. Thanks Regards, Kevin ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] PPPoE interface IP address
I am using EigerStein_contrib_img_pppoe-beta0.4.exe
I am having trouble getting the network.conf script to pick up the PPPoE
address from the ISP and defining $EXTERN_IP for the rest of the script. I
think it may be a timing issue, as I can run the part of the script that
extracts the $EXTERN_IP after the LRP is booted and it is OK. The
$EXTERN_IP ends up getting defined as 192.168.254.254 which messes up the
port forwarding stuff.
The portion of network.conf is below. How could I remedy this?
Thanks,
Kevin
###
# ADSL-Startup (not pretty but it works)
###
adsl-start
###
# IP Filter setup - can pull in settings from above
###
# Set up the basic type of filtering. Can be one of (none|router|firewall)
# You must load the ip_masq_* modules to enable full IP masquerading, and
# ip_masq_portfw if you want to forward external ports pop-3, mtp, www
# to internal machines below.
IPFILTER_SWITCH=firewall
# This set of variables is used with both sets of filters
SNMP_BLOCK=YES # Block all SNMP (YES/NO)
# List of IP Nos used for SNMP management
SNMP_MANAGER_IPS=
# Fair Queuing support
# List of Mark values
MRK_CRIT=1 # Critical traffic, routing, DNS
MRK_IA=2# Interactive traffic - telnet, ssh, IRC
# List of traffic types and maps to mark
values
# Setting this variable turns on the
# fairq chain
CLS_FAIRQ=${MRK_CRIT}_89_0/0 ${MRK_CRIT}_udp_0/0_route
${MRK_CRIT}_tcp_0/0_bgp
${MRK_CRIT}_tcp_0/0_domain ${MRK_CRIT}_udp_0/0_domain
${MRK_IA}_tcp_0/0_telnet $
{MRK_IA}_tcp_0/0_ssh
# This set of variables is used with the basic routing filter setup
# This set of variables is used with a basic IP masquerading firewall setup
#Notation - IP addresses/masklen
#
# NOTE: Do NOT turn on the DMZ network or ANY external port masquerading/
# port forwarding when EXTERN_DYNADDR is on because some security
# leaks will result. You may also want to limit the external open
# ports to domain (UDP) for DNS. Anyhow, these features are not that
# usable unless you have a static external address
#
#EXTERN_IF=eth0 # External Interface
EXTERN_IF=ppp0# External Interface
# Start of changes by Charles Steinkuehler for DHCP
#
# Added for DHCP support
# Setting this to YES causes the script to read EXTERN_IP directly from
# the interface
EXTERN_DHCP=YES # - YES/NO
# The interface to configure via dhcp
IF_DHCP=$EXTERN_IF
# If YES, your firewall filters use 0/0 for your IP address, instead of your
# actual IP address. Set this to NO for typical ethernet setups, even if
you
# are using DHCP
# External Address dynamically assigned
EXTERN_DYNADDR=YES # - YES/NO
# -- OR --
#EXTERN_IP=0.0.0.0 # External Interface IP number
# If external interface is DHCP, read the IP address
# This should probably be moved to the init.d network script, but it seemed
# I put it here for now, as it is more obvious what it is doing, in case it
# messes something else up.
if [ $EXTERN_DHCP = YES ] || \
[ $EXTERN_DHCP = Yes ] || \
[ $EXTERN_DHCP = yes ]; then
# This computes the IP address of $EXTERN_IF
# Grep extracts just the line(s) with IP address information from the
output
# of ip addr. The first sed gets rid of all but the first line (in case
# there are several IP addresses for some reason), and next sed extracts
# just the IP address in dot quad notation.
EXTERN_IP=`ip addr list label $EXTERN_IF | \
grep inet | \
sed '1!d' | \
sed 's/^[^.0-9]*\([.0-9]*\).*$/\1/'`
# Debugging - Remove if you like
echo Extern IP: $EXTERN_IP
# If the external address is not configured, use a bogus address for the
# external interface to prevent a bunch of (harmless) errors that spit out
# when the IPCHAINS script is called.
if [ x$EXTERN_IP = x ]; then
EXTERN_IP=192.168.254.254
fi
fi
___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Ram disk full on EigerStein2BETA.exe
I have a full ram disk after 3 days, and I think it may be from the file below? What is it and why is it so large? I seams to contain a bunch of control characters. # dir -l w*-rw-r- 1 root root 2764800 Dec 3 10:10 wtmp Thanks Kevin
[Leaf-user] Hits on port 53.
Has anybody out their seen the following, hits on port 53? Their is about 100 entries like this in a few seconds then nothing? This only happens now and again, once or twice a week. I am using EigerStein2BETA.exe. Sample: Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 216.34.68.2:15209 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=248 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 64.14.200.154:59888 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=244 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 128.242.105.34:38500 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=246 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 203.208.128.70:62137 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=245 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 64.78.235.14:57670 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=245 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 64.37.200.46:34818 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=245 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 216.220.39.42:14956 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=247 (#44) Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0 PROTO=6 216.35.167.58:19075 24.80.151.202:53 L=44 S=0x00 I=0 F=0x T=243 (#44) Dec ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] How not to log a deny'ed packet/ip address
Is this available in EigerStein2BETA.exe? I did not see this variable in the network.conf file. Can I just add it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Steinkuehler Sent: Thursday, November 29, 2001 6:45 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Leaf-user] How not to log a deny'ed packet/ip address I've got a rogue 10.x.x.x/32 server polling my Dachstein firewall twice every 16 seconds for a dhcp server and a port 80 scan every 2 minutes. I can't find any info in the archives and sites about dropping (not logging) these packets when they are deny'ed. The packets (webtrash) I am looking to stop logging are being denied by rules 10, 12, and 41. What is the syntax or change I need to make to quit logging these. Other than this, Dachstein is perfect, already surviving two DoS attacks without a reboot to date. There is a SILENT_DENY setting in network.conf. Extract details of the packets you don't want logged from your existing log files, and add them to SILENT_DENY to stop logging them. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] NIC module problem (Dachstien)
That did the trick, however on a side note the pci-scan must be loaded before the other modules. (8390 ne2k-pci) Thanks for the quick reply. Great job on the release! Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Steinkuehler Sent: Tuesday, November 20, 2001 7:52 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Leaf-user] NIC module problem (Dachstien) I have just tried the Dachstien image (dachstein-rc2-1680.exe) and when the drivers load for the NIC's I get the errors: insmod: unresolved symbol pci_drv_unregister insmod: unresolved symbol pci_drv_register I am using 8390.o and ne2k-pci.o that are included in the image. I have been using EigerStein2BETA.exe with the same hardware and it is has been working fine. You need to add the pci-scan module... Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
RE: [Leaf-user] ES2B Dachstien and Rogers@home
I was told by Shaw, which is equivelent to @home in Canada to do the power down reset as such to my Terayon modem: 1) unplug the cable connection to the modem, wait a moment. 2) power down the modem 3) reconnect the cable 4) power up the modem. Good luck, Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ray Olszewski Sent: Tuesday, November 20, 2001 12:08 PM To: Simon Bolduc; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Leaf-user] ES2B Dachstien and Rogers@home Just a blue-sky thought here ... there used to be reports, back on the LRP lists, that, in some cases, clearing a MAC address required more than a simple modem reset. Some people reported needing to power-down (as in unplug from the wall socket) the modem for 5 minutes, presumably to clear some equivalent of the CMOS a PC uses to hold state between boots. If your reset of the modem hasn't been this thorough, you might try this approach and see if it helps. At 02:03 PM 11/20/01 -0500, Simon Bolduc wrote: I too am with @home, as is a friend of mine, we both upgraded to the current release of dachstein and while he is experiencing the same problem as you, I am not. He has tried different NICs, reconfiguring etc. This could potentially be an issue with your modem caching your MAC address (though a reset of the modem should repair this if that is the problem - and it doesn't) - or perhaps the headend modem caching the MAC. Just out of curiousity is your modem a blue Terayon Modem - made out of plastic, kinda looks like a shark's fin?? that is the type my friend has, - and is different than my type of modem. It could also be a rogue dhcp server as the resolution of a traceroute seems a little odd for the DHCP address. [old stuff deleted] -- Never tell me the odds!--- Ray Olszewski-- Han Solo Palo Alto, CA[EMAIL PROTECTED] ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
