Install math/cfitsio Port

2009-06-03 Thread MANI
Hi misc,

I am trying to make KDE4 from Ports on my OpenBSD 4.5 release box, but
I encountered Checksum mismatch error in /usr/ports/math/cfitsio:

# make install
===  Checking files for cfitsio-3.006p0
 Fetch ftp://heasarc.gsfc.nasa.gov/software/fitsio/c/cfitsio3006.tar.gz
cfitsio3006.tar.gz: No such file or directory.
 Fetch ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//cfitsio3006.tar.gz
 (SHA256) cfitsio3006.tar.gz: FAILED
 Checksum mismatch for cfitsio3006.tar.gz. (sha256)
Make sure the Makefile and checksum file (/usr/ports/math/cfitsio/distinfo)
are up to date.  If you want to fetch a good copy of this
file from the OpenBSD main archive, type
make REFETCH=true [other args].
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1853 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 2006 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1432 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1972 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1462 of
/usr/ports/infrastructure/mk/bsd.port.mk).


*

$ dmesg

attached ...
OpenBSD 4.5 (GENERIC.MP) #108: Sat Feb 28 14:58:58 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM) Duo CPU T2450 @ 2.00GHz (GenuineIntel 686-class) 2 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,TM2,xTPR
real mem  = 1063415808 (1014MB)
avail mem = 1019949056 (972MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 02/08/07, BIOS32 rev. 0 @ 0xfd5f0, SMBIOS 
rev. 2.4 @ 0xdc010 (17 entries)
bios0: vendor Phoenix Technologies LTD version R0100J4 date 02/08/2007
bios0: Sony Corporation VGN-N370E
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC HPET MCFG SLIC APIC BOOT SSDT SSDT SSDT SSDT
acpi0: wakeup devices PWRB(S4) PXS1(S3) PXS2(S3) PXS3(S3) PXS4(S3) USB1(S3) 
USB2(S3) USB3(S3) USB4(S3) USB7(S3) LANC(S3)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 132MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) Duo CPU T2450 @ 2.00GHz (GenuineIntel 686-class) 2 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,TM2,xTPR
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEGP)
acpiprt2 at acpi0: bus 2 (RP01)
acpiprt3 at acpi0: bus 4 (RP02)
acpiprt4 at acpi0: bus 6 (RP03)
acpiprt5 at acpi0: bus -1 (RP04)
acpiprt6 at acpi0: bus 8 (PCIB)
acpiec0 at acpi0
acpicpu0 at acpi0: C3, C2
acpicpu1 at acpi0: C3, C2
acpitz0 at acpi0: critical temperature 90 degC
acpitz0: TZ00: failed to read _AC0
acpitz1 at acpi0: critical temperature 90 degC
acpitz1: TZ01: failed to read _AC0
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT0 type LiOn oem Sony Corp.
acpibtn0 at acpi0: LID0
acpibtn1 at acpi0: PWRB
acpivideo at acpi0 not configured
bios0: ROM list: 0xc/0x1! 0xdc000/0x4000! 0xe/0x1800!
cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130f2c06000f2c
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 2000 MHz (1404 mV): speeds: 2000, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03
vga1 at pci0 dev 2 function 0 Intel 82945GM Video rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xc000, size 0x1000
inteldrm0 at vga1: apic 1 int 16 (irq 7)
drm0 at inteldrm0
Intel 82945GM Video rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: apic 1 int 
22 (irq 4)
azalia0: codecs: Realtek ALC262, Conexant/0x2c06, using Realtek ALC262
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x02: apic 1 int 17 
(irq 3)
pci1 at ppb0 bus 2
mskc0 at pci1 dev 0 function 0 Marvell Yukon 88E8036 rev 0x16, Yukon-2 FE 
(0x1): apic 1 int 16 (irq 7)
msk0 at mskc0 port A: address 00:13:a9:c6:c4:6c
eephy0 at msk0 phy 0: 88E3082 10/100 PHY, rev. 3
ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x02: apic 1 int 16 
(irq 7)
pci2 at ppb1 bus 4
ppb2 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x02: apic 1 int 18 
(irq 11)
pci3 at ppb2 bus 6
wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02: apic 1 int 
18 (irq 11), MoW1, address 00:19:d2:96:64:28
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB 

Re: Can't get tls on smtpd to work right, just can't connect to server using tls.

2009-06-03 Thread Daniel Ouellet

Gilles Chehade wrote:

Daniel Ouellet a icrit :

Hi,

I am having problem testing this and my be I am missing something 
simple, so any pointers would be appreciates.


To test this I created the cert as describe in man 8 starttls as 
follow and below are all the steps I did without success so far:



[...]

Yes, for some reason you will not succeed having ssl/tls work by 
following the starttls
man page. Current workaround until I spot what's wrong, is to follow the 
same procedure

than for generating certificates for web servers in ssl(8), this will work.

I'm currently doing some ssl related work in smtpd so it's likely I'll 
have news soon.


Many thanks for the advise!

I will try that and see.

Great work by the way, I really love it so far!

I got use to update it every few days and more in the last week. (;

Best

Daniel



Re: Can't get tls on smtpd to work right, just can't connect to server using tls.

2009-06-03 Thread Gilles Chehade

Daniel Ouellet a icrit :

Gilles Chehade wrote:

Daniel Ouellet a icrit :

Hi,

I am having problem testing this and my be I am missing something 
simple, so any pointers would be appreciates.


To test this I created the cert as describe in man 8 starttls as 
follow and below are all the steps I did without success so far:



[...]

Yes, for some reason you will not succeed having ssl/tls work by 
following the starttls
man page. Current workaround until I spot what's wrong, is to follow 
the same procedure
than for generating certificates for web servers in ssl(8), this will 
work.


I'm currently doing some ssl related work in smtpd so it's likely 
I'll have news soon.


Many thanks for the advise!

I will try that and see.

Great work by the way, I really love it so far!

I got use to update it every few days and more in the last week. (;

Best

Daniel

For the record, people testing smtpd need to be aware that some of the 
changes we work
on are likely to change the format of the messages we store in queue in 
a way that can
break compatibility with a previous revision. Remember, it is not 
production ready.


I would recommend that testers:

1- read smtpd related commit logs before they update their smtpd
2- always flush the entire mail queue before an update and make sure 
there is no mails

  remaining in queue. this is done using smtpctl show queue and
  smtpctl schedule XXX with XXX being the message id.

Gilles



Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Mikolaj Kucharski miko...@kucharski.name wrote:
 Can anyone give me example of embedded system (Soekris-like) which is
 known to handle PF traffic + VPN traffic at MBit/s throughput, and
 packets per second level, generated by home users browsing web,
 skyping, playing games on-line (low latency), at the same time.
 *Fanless* and which can run OpenBSD of course.

 I hope I'm not too demanding, is there anything like that?

pcengines alix and soekris 5501 are quite a lot faster than the
soekris 45xx. if you're doing a lot of VPN traffic then something
with one of the VIA processors that has hardware AES will cope
better, but they're quite a lot more expensive than an alix
and I don't have personal experience to recommend a particular
box.

packets-per-second affects things a lot more than bandwidth use.
I don't know what skype uses in terms of PPS, and I guess on-line
games could vary by quite a lot.

running tcpbench with this layout: server - alix (routed) - laptop,
and varying MTU (route add laptop -mtu 128 on the host running the
tcpbench sender), then measuring CPU on the alix while this happens:

MTU 1500; 25% idle, throughput 70Mb/s
MTU 1024;  5% idle, throughput 60Mb/s
MTU 512;   0% idle, throughput 33Mb/s
MTU 128;   0% idle, throughput 10Mb/s

(without vpn). you might be able to run a comparison on your
hardware and see how it compares, see whether you think it'll be
enough of an improvement, or if you'll need something faster.


 On Tue, Jun 02, 2009 at 11:10:14PM +, Stuart Henderson wrote:
 you're probably overloading the CPU. try -current, sis(4) has
 MCLGETI now which should mitigate things a bit. still, that's a
 lot of load you're putting on a little 486 which will almost
 certainly be restricting your throughput.

 Thanks Stuart.



Re: Install math/cfitsio Port

2009-06-03 Thread Stuart Henderson
reply-to set to po...@.

In gmane.os.openbsd.misc, MANI wrote:
 Hi misc,

 I am trying to make KDE4 from Ports on my OpenBSD 4.5 release box, but
 I encountered Checksum mismatch error in /usr/ports/math/cfitsio:

the cfitsio port could use an update (upstream ftp has only newer versions
now) but in the meantime I've added a mirror.

 Fetch ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//cfitsio3006.tar.gz
 (SHA256) cfitsio3006.tar.gz: FAILED
 Checksum mismatch for cfitsio3006.tar.gz. (sha256)

ugh.

bob? please would you replace this with
http://spacehopper.org/mirrors/cfitsio3006.tar.gz. thank you.



PF performance problem

2009-06-03 Thread BARDOU Pierre
Hello,

I have performance issues on a OpenBSD 4.4 firewall.
CPU load is OK (always below 50%), but system load is always between 1 and
1.5, it may go up to 2 sometimes.

I suspected an I/O problem on the HDD because of pflogd, so I shut it down and
the system load is always as high.

Could you tell me what should I upgrade to solve this ?
And what Debug: Urgent means ?

Thank you


Stats of PF :
# pfctl -si
Status: Enabled for 29 days 15:27:29  Debug: Urgent

State Table  Total Rate
  current entries16592
  searches 3611345993314099.9/s
  inserts286242425  111.8/s
  removals   286225833  111.8/s
Counters
  match  794705461  310.3/s
  bad-offset 00.0/s
  fragment   60.0/s
  short  00.0/s
  normalize2720.0/s
  memory 00.0/s
  bad-timestamp  00.0/s
  congestion  64940.0/s
  ip-option 120.0/s
  proto-cksum10.0/s
  state-mismatch1075430.0/s
  state-insert   109660.0/s
  state-limit   180.0/s
  src-limit  00.0/s
  synproxy   00.0/s


dmesg :
# cat /var/run/dmesg.boot
OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 1073053696 (1023MB)
avail mem = 1029165056 (981MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90,
SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
bios0: vendor Dell Computer Corporation version A04 date 09/22/2005
bios0: Dell Computer Corporation PowerEdge 1850
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR HPET MCFG
acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5) VPR1(S5)
PICH(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PALO)
acpiprt2 at acpi0: bus 2 (DOBA)
acpiprt3 at acpi0: bus 3 (DOBB)
acpiprt4 at acpi0: bus 4 (PBLO)
acpiprt5 at acpi0: bus 8 (VPR0)
acpiprt6 at acpi0: bus 5 (PBHI)
acpiprt7 at acpi0: bus 6 (PXB1)
acpiprt8 at acpi0: bus 7 (PXB2)
acpiprt9 at acpi0: bus 9 (PICH)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x800 0xcc800/0x1000
0xcd800/0x2600 0xd/0x1800 0xec000/0x4000!
ipmi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel IOP332 PCIE-PCIX rev 0x06
pci2 at ppb1 bus 2
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0x08: irq 7
scsibus0 at mpi0: 16 targets, initiator 7
em0 at pci2 dev 12 function 0 Intel PRO/1000MT (82546EB) rev 0x01: irq 10,
address 00:11:0a:64:32:74
em1 at pci2 dev 12 function 1 Intel PRO/1000MT (82546EB) rev 0x01: irq 11,
address 00:11:0a:64:32:75
ppb2 at pci1 dev 0 function 2 Intel IOP332 PCIE-PCIX rev 0x06
pci3 at ppb2 bus 3
ami0 at pci3 dev 11 function 0 Symbios Logic MegaRAID rev 0x01: irq 3
ami0: Dell 520, 64b/lhc, FW 351S, BIOS v1.10, 64MB RAM
ami0: 1 channels, 0 FC loops, 1 logical drives
scsibus1 at ami0: 40 targets, initiator 40
sd0 at scsibus1 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total
scsibus2 at ami0: 16 targets, initiator 16
safte0 at scsibus2 targ 6 lun 0: PE/PV, 1x2 SCSI BP, 1.0 SCSI2 3/processor
fixed
ppb3 at pci0 dev 4 function 0 Intel E7520 PCIE rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci0 dev 5 function 0 Intel E7520 PCIE rev 0x09
pci5 at ppb4 bus 5
ppb5 at pci5 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci6 at ppb5 bus 6
em2 at pci6 dev 7 function 0 Intel PRO/1000MT (82541GI) rev 0x05: irq 11,
address 00:14:22:21:61:6d
ppb6 at pci5 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci7 at ppb6 bus 7
em3 at pci7 dev 8 function 0 Intel PRO/1000MT (82541GI) rev 0x05: irq 3,
address 00:14:22:21:61:6e
ppb7 at pci0 dev 6 function 0 Intel E7520 PCIE rev 0x09
pci8 at ppb7 bus 8
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: irq 11
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: irq 10
uhci2 at pci0 dev 29 function 2 

Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent

PF works like a charm. Without doubt.
Despite of that, PF don't require the HD and the main bottlenecks are de 
CPU and memory (and NIC and the driver, of course).


I suspect an error in your PF logging system.

PD. 'Urgent' means the same words says: urgent. If you see some message 
related to PF in your /var/log/messages you should considerate it 
important (it's urgent!). See at pfctl man pages, -x flag.


--
Thanks,
Jordi Espasa Clofent



Re: PF performance problem

2009-06-03 Thread Michiel van Baak
On 12:02, Wed 03 Jun 09, BARDOU Pierre wrote:
 Hello,
 
 I have performance issues on a OpenBSD 4.4 firewall.
 CPU load is OK (always below 50%), but system load is always between 1 and
 1.5, it may go up to 2 sometimes.

Is the system really slow ? Or are you basing this 'performance issue'
on the loadavg number ?

On some setups we have loadavg of around 10 and dont notice any
performance impact.

 
 I suspected an I/O problem on the HDD because of pflogd, so I shut it down and
 the system load is always as high.
 
 Could you tell me what should I upgrade to solve this ?
 And what Debug: Urgent means ?
 
 Thank you
 
 
 Stats of PF :
 # pfctl -si
 Status: Enabled for 29 days 15:27:29  Debug: Urgent
 
 State Table  Total Rate
   current entries16592
   searches 3611345993314099.9/s
   inserts286242425  111.8/s
   removals   286225833  111.8/s
 Counters
   match  794705461  310.3/s
   bad-offset 00.0/s
   fragment   60.0/s
   short  00.0/s
   normalize2720.0/s
   memory 00.0/s
   bad-timestamp  00.0/s
   congestion  64940.0/s
   ip-option 120.0/s
   proto-cksum10.0/s
   state-mismatch1075430.0/s
   state-insert   109660.0/s
   state-limit   180.0/s
   src-limit  00.0/s
   synproxy   00.0/s
 
 
 dmesg :
 # cat /var/run/dmesg.boot
 OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
 H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 real mem  = 1073053696 (1023MB)
 avail mem = 1029165056 (981MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90,
 SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
 bios0: vendor Dell Computer Corporation version A04 date 09/22/2005
 bios0: Dell Computer Corporation PowerEdge 1850
 acpi0 at bios0: rev 0
 acpi0: tables DSDT FACP APIC SPCR HPET MCFG
 acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5) VPR1(S5)
 PICH(S5)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpihpet0 at acpi0: 14318179 Hz
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpiprt1 at acpi0: bus 1 (PALO)
 acpiprt2 at acpi0: bus 2 (DOBA)
 acpiprt3 at acpi0: bus 3 (DOBB)
 acpiprt4 at acpi0: bus 4 (PBLO)
 acpiprt5 at acpi0: bus 8 (VPR0)
 acpiprt6 at acpi0: bus 5 (PBHI)
 acpiprt7 at acpi0: bus 6 (PXB1)
 acpiprt8 at acpi0: bus 7 (PXB2)
 acpiprt9 at acpi0: bus 9 (PICH)
 acpicpu0 at acpi0
 bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x800 0xcc800/0x1000
 0xcd800/0x2600 0xd/0x1800 0xec000/0x4000!
 ipmi at mainbus0 not configured
 cpu0 at mainbus0
 pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 Intel IOP332 PCIE-PCIX rev 0x06
 pci2 at ppb1 bus 2
 mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0x08: irq 7
 scsibus0 at mpi0: 16 targets, initiator 7
 em0 at pci2 dev 12 function 0 Intel PRO/1000MT (82546EB) rev 0x01: irq 10,
 address 00:11:0a:64:32:74
 em1 at pci2 dev 12 function 1 Intel PRO/1000MT (82546EB) rev 0x01: irq 11,
 address 00:11:0a:64:32:75
 ppb2 at pci1 dev 0 function 2 Intel IOP332 PCIE-PCIX rev 0x06
 pci3 at ppb2 bus 3
 ami0 at pci3 dev 11 function 0 Symbios Logic MegaRAID rev 0x01: irq 3
 ami0: Dell 520, 64b/lhc, FW 351S, BIOS v1.10, 64MB RAM
 ami0: 1 channels, 0 FC loops, 1 logical drives
 scsibus1 at ami0: 40 targets, initiator 40
 sd0 at scsibus1 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
 sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total
 scsibus2 at ami0: 16 targets, initiator 16
 safte0 at scsibus2 targ 6 lun 0: PE/PV, 1x2 SCSI BP, 1.0 SCSI2 3/processor
 fixed
 ppb3 at pci0 dev 4 function 0 Intel E7520 PCIE rev 0x09
 pci4 at ppb3 bus 4
 ppb4 at pci0 dev 5 function 0 Intel E7520 PCIE rev 0x09
 pci5 at ppb4 bus 5
 ppb5 at pci5 dev 0 function 0 Intel PCIE-PCIE rev 0x09
 pci6 at ppb5 bus 6
 em2 at pci6 dev 7 function 0 Intel PRO/1000MT (82541GI) rev 0x05: irq 11,
 address 00:14:22:21:61:6d
 ppb6 at pci5 dev 0 function 2 Intel PCIE-PCIE rev 0x09
 pci7 at ppb6 bus 7
 em3 at 

Re: PF performance problem

2009-06-03 Thread Richard Toohey

On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:


Hello,

I have performance issues on a OpenBSD 4.4 firewall.
CPU load is OK (always below 50%), but system load is always  
between 1 and

1.5, it may go up to 2 sometimes.


[cut]

And what is the actual *problem*?

What is pf failing to do?

Or are you just worried about the numbers?  Search the archives for  
high load ...


http://marc.info/?l=openbsd-miscm=122607853731136w=3

HTH.



Re: proper test for 64bitness of platform?

2009-06-03 Thread Stuart Henderson
On 2009-06-01, Ted Walther t...@enumera.com wrote:
 On Mon, Jun 01, 2009 at 12:51:31PM +, Stuart Henderson wrote:
On 2009-06-01, Ted Walther t...@enumera.com wrote:
 I'm preparing a port of newLISP.  Is there a simple test I can run to
 find out if the host platform is 64bit?  A #define has to be set in the
 code according to whether the platform is 64bit or not.

We set _LP64 and __LP64__ variables on 64-bit arch.

$ cpp -dM /dev/null | grep LP64
#define _LP64 1
#define __LP64__ 1

 Thank you Stuart.  It looks like all platforms with gcc support these
 two defines.  Is there any reason to prefer one or another?  Google
 found a netbsd post where someone said to prefer _LP64, then another
 person said that is only for kernel use, use __arch64__ in userland.

I'm not sure which is preferred, but __LP64__ seems slightly more 
common in the wild.



Re: Wireless help, please

2009-06-03 Thread Stuart Henderson
On 2009-06-02, Ben Goren b...@trumpetpower.com wrote:
 On 2009 Jun 2, at 10:00 AM, Stuart Henderson wrote:

 On 2009-06-02, K K kka...@gmail.com wrote:
 On Tue, Jun 2, 2009 at 7:32 AM, Ben Goren b...@trumpetpower.com  
 wrote:
 Anybody else have any suggestions? Nick?

 I have similar problems with a 'rum' USB stick in AP mode using WPA.

 See the man page for specific know issues with using this chipset in
 Host AP mode.

 Can anybody suggest a readily available USB2 Wireless-G adapter which
 works well as an AP?


 USB wireless adapters do not work well as APs.

 The only ones where we support this at all are ural and rum, and
 though they can be useful in a sticky situation where it's all you
 have available, they don't make good access points.

 With that in mind...are any of these ``wireless bridge'' devices worth  
 considering? I have a spare PC Ethernet card for this laptop.

 This is one of Amazon's top hits for the sort of thing I'm thinking  
 of. If anybody has any suggestions on the matter, I'd appreciate it

 http://www.amazon.com/Linksys-WET610N-Wireless-N-Ethernet-Dual-Band/dp/B001QVQ7JU/ref=sr_1_2?ie=UTF8s=electronicsqid=1243962805sr=1-2

 or: http://tinyurl.com/oe3nsg

heh, that one looks like it should make toast too.

You can use any old access point. Wireless bridges are for client-mode
i.e. connecting a machine that has wired ethernet only, to another AP.



Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
The only problem I noticed is an abnormally long ping (usually 0.3ms,
sometimes -3 or 4 times a day says nagios- up to 30ms).

I am worried about the numbers since this firewall is higly critical.
Since it protects Citrix hosted applications, I will get instantly killed if
delays are too long...

--
Cordialement,
Pierre BARDOU

-Message d'origine-
De : Richard Toohey [mailto:richardtoo...@paradise.net.nz]
Envoyi : mercredi 3 juin 2009 12:50
@ : BARDOU Pierre
Cc : misc@openbsd.org
Objet : Re: PF performance problem

On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:

 Hello,

 I have performance issues on a OpenBSD 4.4 firewall.
 CPU load is OK (always below 50%), but system load is always
 between 1 and
 1.5, it may go up to 2 sometimes.

[cut]

And what is the actual *problem*?

What is pf failing to do?

Or are you just worried about the numbers?  Search the archives for
high load ...

http://marc.info/?l=openbsd-miscm=122607853731136w=3

HTH.



Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent

BARDOU Pierre escribis:

The only problem I noticed is an abnormally long ping (usually 0.3ms,
sometimes -3 or 4 times a day says nagios- up to 30ms).


M... maybe it's not a PD-related issue. Check your network.
Despite of that, check the ICMP rules; use tcpdumo(1) also to debug it.


I am worried about the numbers since this firewall is higly critical.
Since it protects Citrix hosted applications, I will get instantly killed if
delays are too long...


I use PF in front of networks segments of web-hosting company. An I 
sleep very well...


--
Thanks,
Jordi Espasa Clofent



Re: syntax error in xenocara stable code

2009-06-03 Thread Siju George
Hi,

Ichecked out fresh CVS source an it compiles fine. Thanks

Siju


On Tue, Jun 2, 2009 at 2:09 PM, Siju George sgeorge...@gmail.com wrote:
 Hi,

 I was updating my OpenBSD 4.5 release to 4.5 stable.

 While building xenocara I got this error.


 /usr/X11R6/include/pixman-1/pixman.h:102: error: syntax error before
pixman_fix
 ed_32_32_t
 /usr/X11R6/include/pixman-1/pixman.h:102: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_32_32_t'
 /usr/X11R6/include/pixman-1/pixman.h:102: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:103: error: syntax error before
pixman_fix
 ed_48_16_t
 /usr/X11R6/include/pixman-1/pixman.h:103: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_48_16_t'
 /usr/X11R6/include/pixman-1/pixman.h:103: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:104: error: syntax error before
pixman_fix
 ed_1_31_t
 /usr/X11R6/include/pixman-1/pixman.h:104: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_1_31_t'
 /usr/X11R6/include/pixman-1/pixman.h:104: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:105: error: syntax error before
pixman_fix
 ed_1_16_t
 /usr/X11R6/include/pixman-1/pixman.h:105: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_1_16_t'
 /usr/X11R6/include/pixman-1/pixman.h:105: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:106: error: syntax error before
pixman_fix
 ed_16_16_t
 /usr/X11R6/include/pixman-1/pixman.h:106: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_16_16_t'
 /usr/X11R6/include/pixman-1/pixman.h:106: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:107: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:107: warning: type defaults to `int' in
dec
 laration of `pixman_fixed_t'
 /usr/X11R6/include/pixman-1/pixman.h:107: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:135: error: syntax error before
uint16_t
 /usr/X11R6/include/pixman-1/pixman.h:143: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:154: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:159: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:243: error: syntax error before
int16_t
 /usr/X11R6/include/pixman-1/pixman.h:249: error: syntax error before
int16_t
 /usr/X11R6/include/pixman-1/pixman.h:345: error: syntax error before
int32_t
 /usr/X11R6/include/pixman-1/pixman.h:351: error: syntax error before
int32_t
 /usr/X11R6/include/pixman-1/pixman.h:418: error: syntax error before '*'
token
 /usr/X11R6/include/pixman-1/pixman.h:429: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:430: error: syntax error before '*'
token
 /usr/X11R6/include/pixman-1/pixman.h:437: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:452: error: syntax error before '*'
token
 /usr/X11R6/include/pixman-1/pixman.h:453: error: syntax error before
uint32_t
 /usr/X11R6/include/pixman-1/pixman.h:453: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:456: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:463: error: syntax error before
pixman_ind
 ex_type
 /usr/X11R6/include/pixman-1/pixman.h:463: warning: type defaults to `int' in
dec
 laration of `pixman_index_type'
 /usr/X11R6/include/pixman-1/pixman.h:463: warning: data definition has no
type o
 r storage class
 /usr/X11R6/include/pixman-1/pixman.h:469: error: syntax error before
uint32_t
 /usr/X11R6/include/pixman-1/pixman.h:582: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:585: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:587: error: syntax error before
pixman_fix
 ed_t
 /usr/X11R6/include/pixman-1/pixman.h:589: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:593: error: syntax error before
uint32_t
 /usr/X11R6/include/pixman-1/pixman.h:594: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:614: error: syntax error before '*'
token
 /usr/X11R6/include/pixman-1/pixman.h:615: warning: type defaults to `int' in
dec
 laration of `pixman_image_set_filter'
 /usr/X11R6/include/pixman-1/pixman.h:615: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:620: error: syntax error before
int16_t
 /usr/X11R6/include/pixman-1/pixman.h:621: warning: function declaration
isn't a
 prototype
 /usr/X11R6/include/pixman-1/pixman.h:625: error: syntax error before
pixman_rea
 d_memory_func_t
 /usr/X11R6/include/pixman-1/pixman.h:626: warning: function declaration
isn't a
 prototype
 

OpenBSD as a storage SAN

2009-06-03 Thread Friedrich Locke
Dear gentleman/madam,

i would like to use openbsd in order to build a SAN solution, i.e.,
one that provides block access to the box's disks.
I want to build a SAN, not a NAS. Is it possible?

Thank in advance.



Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
Thanks everybody for the help.
I will stop worrying about the system load and wait a noticeable
performance problem before asking for help :)

I set pfctl -x urgent, and now I'm waiting for something in
/var/log/messages...

--
Cordialement,
Pierre BARDOU



tpb startup

2009-06-03 Thread Jeremy Chase
Hello,

tpb works just fine on my IBM t42p, but I am having difficulty getting
it to start automatically. I am using xdm and xfce and have tried
starting it from .xsession and rc.local. When putting it in rc.local,
but tpb just exits if there is no X session it can attach to.

If I try this with .xsession; tpb will run as a daemon, but the
buttons don't work.

$ cat .xsession
/usr/local/bin/tpb -d --thinkpad=/usr/sbin/zzz
exec startxfce4

Thanks for your thoughts,
Jeremy



Re: IPSEC'd states fail after upgrade to 4.5

2009-06-03 Thread (private) HKS
On Sun, May 31, 2009 at 2:16 PM, (private) HKShks.priv...@gmail.com wrote:
 On Sun, May 31, 2009 at 1:58 PM, (private) HKS hks.priv...@gmail.com
wrote:
 I have two networks: an office and a datacenter. The office has a
 single router (dmesg below) that I upgraded to 4.5 today. The
 datacenter has two routers running 4.4. The datacenter routers share a
 CARP address. The locations communicate over a gif tunnel protected by
 IPsec.

 After upgrading to 4.5 today, connections made across this tunnel are
 dropped after about 30 seconds.

 For instance, I ssh into a my datacenter backup server from my
 workstation. A state is created, traffic passes normally - until about
 30 seconds later when the state is terminated. This does not happen
 for traffic passed out to the net outside this tunnel.

 The only weirdness I've been able to quantify is the state that is
created:

 # pfctl -vvs state | grep -A 2 workstaiton | grep -A 2 server
 all tcp server:22 - workstation:2733   ESTABLISHED:ESTABLISHED
   [1948621377 + 65119]  [2814490494 + 17520]
   age 00:00:27, expires in 23:59:43, 76:93 pkts, 5756:11189 bytes, rule 25
 all tcp workstation:2733 - server:22   SYN_SENT:CLOSED
   [2814490494 + 4294964697]  [0 + 65535]
   age 00:00:27, expires in 00:00:03, 76:0 pkts, 5756:0 bytes, rule 203

 Once that SYN_SENT:CLOSED state's expiration counter reaches zero, my
 newly upgraded firewall starts blocking traffic from my workstation to
 the server.

 When pf debugging is set to misc, I get the following sort of message
 in my syslog (these were pulled from two different examples - the
 ports do match when it happens):

 May 31 12:05:47 router /bsd: pf: loose state match: TCP out wire:
 server:22 workstation:2105 stack: - [lo=1243591892 high=1243591894
 win=65535 modulator=0] [lo=0 high=65535 win=1 modulator=0] 2:0 PA
 seq=1243591893 (1243591893) ack=0 len=28 ackskew=0 pkts=2:0
 dir=out,fwd

 I'm at a loss. My pf.conf is pretty huge, so I inserted a pass quick
 from workstation to server at the top above my block log
 policy. Same thing.

 I'm not sure what else is even needed to troubleshoot this. Can anyone
 give me some ideas?

 -HKS


 OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
 cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 real mem  = 2146795520 (2047MB)
 avail mem = 2067582976 (1971MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
 0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
 bios0: vendor Dell Computer Corporation version A07 date 04/25/2008
 bios0: Dell Computer Corporation PowerEdge 2850
 acpi0 at bios0: rev 0
 acpi0: tables DSDT FACP APIC SPCR HPET MCFG
 acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
 VPR1(S5) PICH(S5)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: apic clock running at 199MHz
 cpu at mainbus0: not configured
 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
 ioapic0: misconfigured as apic 0, remapped to apid 2
 ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
 ioapic1: misconfigured as apic 0, remapped to apid 3
 ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
 ioapic2: misconfigured as apic 0, remapped to apid 4
 ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
 ioapic3: misconfigured as apic 0, remapped to apid 5
 acpihpet0 at acpi0: 14318179 Hz
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpiprt1 at acpi0: bus 1 (PALO)
 acpiprt2 at acpi0: bus 2 (DOBA)
 acpiprt3 at acpi0: bus 3 (DOBB)
 acpiprt4 at acpi0: bus 4 (PBLO)
 acpiprt5 at acpi0: bus 5 (PBHI)
 acpiprt6 at acpi0: bus 6 (PXB1)
 acpiprt7 at acpi0: bus 7 (PXB2)
 acpiprt8 at acpi0: bus 8 (VPR1)
 acpiprt9 at acpi0: bus 9 (PXC1)
 acpiprt10 at acpi0: bus 10 (PXC2)
 acpiprt11 at acpi0: bus 11 (PICH)
 acpicpu0 at acpi0
 bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
 0xcd000/0x2200 0xec000/0x4000!
 ipmi at mainbus0 not configured
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 Intel IOP332 PCIE-PCIX rev 0x06
 pci2 at ppb1 bus 2
 ami0 at pci2 dev 14 function 0 Dell PERC 4e/Di rev 0x06: apic 3 int 14
(irq 7)
 ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
 ami0: 2 channels, 0 FC loops, 1 logical drives
 scsibus0 at ami0: 40 targets
 sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
 sd0: 139900MB, 512 bytes/sec, 286515200 sec total
 scsibus1 at ami0: 16 targets
 safte0 at scsibus1 targ 6 lun 0: PE/PV, 1x6 SCSI BP, 1.0 SCSI2
 3/processor fixed
 scsibus2 at ami0: 16 

Agere ET1310 not working

2009-06-03 Thread Renaud Allard
Hello,

I have just bought a Fabia FX5621 board which has amongst others, two
Agere ET1310 interfaces. I configured one interface and it negotiated
correctly with my switch at 1000mbps full duplex. However, I am not able
to ping the interface from anywhere else and I am not able to ping from
the interface either. The ARP table seems always empty. I used tcpdump
to sniff the traffic while pinging and doing some broadcasts and saw
nothing in the tcpdump output.
Has someone else noticed this kind of behavior with this chipset?

here is my dmesg:
OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Eden Processor 1000MHz (CentaurHauls 686-class) 1 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR
real mem  = 1039757312 (991MB)
avail mem = 997048320 (950MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/16/09, BIOS32 rev. 0 @ 0xf0010,
SMBIOS rev. 2.5 @ 0xfc390 (47 entries)
bios0: vendor American Megatrends Inc. version 080014 date 01/16/2009
acpi at bios0 function 0x0 not configured
mpbios0 at bios0: Intel MP Specification 1.4
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
cpu0: apic clock running at 99MHz
mpbios0: bus 0 is type PCI
mpbios0: bus 1 is type PCI
mpbios0: bus 128 is type PCI
mpbios0: bus 129 is type PCI
mpbios0: bus 130 is type PCI
mpbios0: bus 131 is type ISA
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 3, 24 pins
pcibios0 at bios0: rev 3.0 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5780/336 (19 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0x1106 product 0x3287
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #130 is the last bus
bios0: ROM list: 0xc/0xfe00
cpu0: unknown Enhanced SpeedStep CPU, msr 0x04090a0904000a09
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 1333 MHz (844 mV): speeds: 1333, 533 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 VIA CN700 Host rev 0x00
viaagp0 at pchb0: v3
agp0 at viaagp0: aperture at 0xe000, size 0x1000
pchb1 at pci0 dev 0 function 1 VIA CN700 Host rev 0x00
pchb2 at pci0 dev 0 function 2 VIA CN700 Host rev 0x00
pchb3 at pci0 dev 0 function 3 VIA PT890 Host rev 0x00
pchb4 at pci0 dev 0 function 4 VIA CN700 Host rev 0x00
pchb5 at pci0 dev 0 function 7 VIA CN700 Host rev 0x00
ppb0 at pci0 dev 1 function 0 VIA VT8377 AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 VIA S3 Unichrome PRO IGP rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ral0 at pci0 dev 8 function 0 Ralink RT2561S rev 0x00: apic 1 int 16
(irq 11), address 00:12:0e:61:49:24
ral0: MAC/BBP RT2561C, RF RT5225
rl0 at pci0 dev 9 function 0 Realtek 8139 rev 0x10: apic 1 int 16 (irq
11), address 00:04:a7:08:9a:c6
rlphy0 at rl0 phy 0: RTL internal PHY
rl1 at pci0 dev 10 function 0 Realtek 8139 rev 0x10: apic 1 int 17
(irq 10), address 00:04:a7:08:9a:c5
rlphy1 at rl1 phy 0: RTL internal PHY
rl2 at pci0 dev 11 function 0 Realtek 8139 rev 0x10: apic 1 int 18
(irq 5), address 00:04:a7:08:9a:c4
rlphy2 at rl2 phy 0: RTL internal PHY
rl3 at pci0 dev 12 function 0 Realtek 8139 rev 0x10: apic 1 int 19
(irq 3), address 00:04:a7:08:9a:c3
rlphy3 at rl3 phy 0: RTL internal PHY
ahci0 at pci0 dev 15 function 0 vendor VIA, unknown product 0x6287 rev
0x20: apic 1 int 21 (irq 10), AHCI 1.0
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0: ATA, ST9500325AS, 0001 SCSI3 0/direct fixed
sd0: 476940MB, 512 bytes/sec, 976773168 sec total
pciide0 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x07: DMA,
channel 0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
wd0 at pciide0 channel 1 drive 0: ELITE PRO CF CARD 16GB
wd0: 1-sector PIO, LBA, 15391MB, 31522176 sectors
wd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 16 function 0 VIA VT83C572 USB rev 0x91: apic 1 int
20 (irq 11)
ehci0 at pci0 dev 16 function 4 VIA VT6202 USB rev 0x90: apic 1 int 22
(irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 VIA EHCI root hub rev 2.00/1.00 addr 1
viapm0 at pci0 dev 17 function 0 VIA VT8251 ISA rev 0x00
iic0 at viapm0
spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-6400CL5
pchb6 at pci0 dev 17 function 7 VIA VT8251 VLINK rev 0x00
ppb1 at pci0 dev 19 function 0 VIA VT8251 PCIE rev 0x00
pci2 at ppb1 bus 128
ppb2 at pci2 dev 0 function 0 VIA VT8251 PCIE rev 0x00
pci3 at ppb2 bus 130
et0 at pci3 dev 0 function 0 ATT/Lucent ET1310 rev 0x01: apic 1 int
17 (irq 11), address 00:04:a7:04:e6:a4
etphy0 at et0 phy 0: ET1011 10/100/1000baseT PHY, rev. 2
ppb3 at pci2 dev 0 function 1 VIA VT8251 PCIE rev 0x00
pci4 at ppb3 bus 129
et1 at pci4 dev 0 function 0 ATT/Lucent ET1310 rev 0x03: apic 1 int
16 (irq 11), address 00:04:a7:04:e5:5e

PF dropping packets that match state

2009-06-03 Thread (private) HKS
Yet another bizarre state problem that will probably turn out to be
being somehow braindead.

office - gw1 - (INTERNET) - gw2 - datacenter

My office and datacenter routers talk via IPSEC encrypted gif tunnels.
Most everything works.

From any host on the office network, I can SSH to the internal
interfaces on gw2. I cannot, however, SSH to the external interfaces
(carp or physical). The traffic is routed properly, neatly traverses
the gif tunnel and is accepted by gw2. The reply takes the same path
but is blocked by gw1's default block policy.

The state is created on gw1 as CLOSED:SYN_SENT:
# pfctl -vvss | grep -A 2 host | grep -A 2 gw2
all tcp gw2:8022 - host:50831   CLOSED:SYN_SENT
   [0 + 1]  [1095549348 + 2]
   age 00:00:02, expires in 00:01:58, 1:0 pkts, 60:0 bytes, rule 24

But the replies are rejected:
# tcpdump -eeni pflog0 'host host'
tcpdump: listening on pflog0, link-type PFLOG
10:05:30.836901 rule 0/(match) block in on gif0: gw2.8022 
host.50831: R 0:0(0) ack 1095549349 win 0 (DF)
10:05:34.042631 rule 0/(match) block in on gif0: gw2.8022 
host.50831: R 0:0(0) ack 1 win 0 (DF)
10:05:37.243616 rule 0/(match) block in on gif0: gw2.8022 
host.50831: R 0:0(0) ack 1 win 0 (DF)
10:05:43.452693 rule 0/(match) block in on gif0: gw2.8022 
host.50831: R 0:0(0) ack 1 win 0 (DF)

To address any pf issues, I inserted a pass quick from host to
gw2 at the top of my ruleset. Nothing. It works just fine to SSH
from gw1 to gw2's external interface.

What am I overlooking here?

dmesg of 4.5 machine follows.

-HKS

OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 2146795520 (2047MB)
avail mem = 2067582976 (1971MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
bios0: vendor Dell Computer Corporation version A07 date 04/25/2008
bios0: Dell Computer Corporation PowerEdge 2850
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR HPET MCFG
acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
VPR1(S5) PICH(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
ioapic1: misconfigured as apic 0, remapped to apid 3
ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
ioapic2: misconfigured as apic 0, remapped to apid 4
ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
ioapic3: misconfigured as apic 0, remapped to apid 5
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PALO)
acpiprt2 at acpi0: bus 2 (DOBA)
acpiprt3 at acpi0: bus 3 (DOBB)
acpiprt4 at acpi0: bus 4 (PBLO)
acpiprt5 at acpi0: bus 5 (PBHI)
acpiprt6 at acpi0: bus 6 (PXB1)
acpiprt7 at acpi0: bus 7 (PXB2)
acpiprt8 at acpi0: bus 8 (VPR1)
acpiprt9 at acpi0: bus 9 (PXC1)
acpiprt10 at acpi0: bus 10 (PXC2)
acpiprt11 at acpi0: bus 11 (PICH)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
0xcd000/0x2200 0xec000/0x4000!
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel IOP332 PCIE-PCIX rev 0x06
pci2 at ppb1 bus 2
ami0 at pci2 dev 14 function 0 Dell PERC 4e/Di rev 0x06: apic 3 int 14 (irq 7)
ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
ami0: 2 channels, 0 FC loops, 1 logical drives
scsibus0 at ami0: 40 targets
sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
sd0: 139900MB, 512 bytes/sec, 286515200 sec total
scsibus1 at ami0: 16 targets
safte0 at scsibus1 targ 6 lun 0: PE/PV, 1x6 SCSI BP, 1.0 SCSI2
3/processor fixed
scsibus2 at ami0: 16 targets
ppb2 at pci1 dev 0 function 2 Intel IOP332 PCIE-PCIX rev 0x06
pci3 at ppb2 bus 3
ppb3 at pci0 dev 4 function 0 Intel E7520 PCIE rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci0 dev 5 function 0 Intel E7520 PCIE rev 0x09
pci5 at ppb4 bus 5
ppb5 at pci5 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci6 at ppb5 bus 6
em0 at pci6 dev 7 function 0 Intel PRO/1000MT (82541GI) rev 0x05:
apic 4 int 0 (irq 11), address 00:11:43:d9:17:36
ppb6 at pci5 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci7 at ppb6 bus 7
em1 at pci7 dev 8 function 0 Intel PRO/1000MT (82541GI) rev 0x05:
apic 4 int 1 (irq 3), address 00:11:43:d9:17:37
ppb7 at pci0 dev 6 function 0 Intel E7520 PCIE rev 0x09
pci8 at ppb7 bus 

Re: PF dropping packets that match state

2009-06-03 Thread (private) HKS
On Wed, Jun 3, 2009 at 11:18 AM, (private) HKShks.priv...@gmail.com wrote:
 Yet another bizarre state problem that will probably turn out to be
 being somehow braindead.

 office - gw1 - (INTERNET) - gw2 - datacenter

 My office and datacenter routers talk via IPSEC encrypted gif tunnels.
 Most everything works.

 From any host on the office network, I can SSH to the internal
 interfaces on gw2. I cannot, however, SSH to the external interfaces
 (carp or physical). The traffic is routed properly, neatly traverses
 the gif tunnel and is accepted by gw2. The reply takes the same path
 but is blocked by gw1's default block policy.

 The state is created on gw1 as CLOSED:SYN_SENT:
 # pfctl -vvss | grep -A 2 host | grep -A 2 gw2
 all tcp gw2:8022 - host:50831   CLOSED:SYN_SENT
   [0 + 1]  [1095549348 + 2]
   age 00:00:02, expires in 00:01:58, 1:0 pkts, 60:0 bytes, rule 24

 But the replies are rejected:
 # tcpdump -eeni pflog0 'host host'
 tcpdump: listening on pflog0, link-type PFLOG
 10:05:30.836901 rule 0/(match) block in on gif0: gw2.8022 
 host.50831: R 0:0(0) ack 1095549349 win 0 (DF)
 10:05:34.042631 rule 0/(match) block in on gif0: gw2.8022 
 host.50831: R 0:0(0) ack 1 win 0 (DF)
 10:05:37.243616 rule 0/(match) block in on gif0: gw2.8022 
 host.50831: R 0:0(0) ack 1 win 0 (DF)
 10:05:43.452693 rule 0/(match) block in on gif0: gw2.8022 
 host.50831: R 0:0(0) ack 1 win 0 (DF)

 To address any pf issues, I inserted a pass quick from host to
 gw2 at the top of my ruleset. Nothing. It works just fine to SSH
 from gw1 to gw2's external interface.

 What am I overlooking here?

 dmesg of 4.5 machine follows.

 -HKS

 OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
 cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
 real mem  = 2146795520 (2047MB)
 avail mem = 2067582976 (1971MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
 0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
 bios0: vendor Dell Computer Corporation version A07 date 04/25/2008
 bios0: Dell Computer Corporation PowerEdge 2850
 acpi0 at bios0: rev 0
 acpi0: tables DSDT FACP APIC SPCR HPET MCFG
 acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
 VPR1(S5) PICH(S5)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: apic clock running at 199MHz
 cpu at mainbus0: not configured
 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
 ioapic0: misconfigured as apic 0, remapped to apid 2
 ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
 ioapic1: misconfigured as apic 0, remapped to apid 3
 ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
 ioapic2: misconfigured as apic 0, remapped to apid 4
 ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
 ioapic3: misconfigured as apic 0, remapped to apid 5
 acpihpet0 at acpi0: 14318179 Hz
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpiprt1 at acpi0: bus 1 (PALO)
 acpiprt2 at acpi0: bus 2 (DOBA)
 acpiprt3 at acpi0: bus 3 (DOBB)
 acpiprt4 at acpi0: bus 4 (PBLO)
 acpiprt5 at acpi0: bus 5 (PBHI)
 acpiprt6 at acpi0: bus 6 (PXB1)
 acpiprt7 at acpi0: bus 7 (PXB2)
 acpiprt8 at acpi0: bus 8 (VPR1)
 acpiprt9 at acpi0: bus 9 (PXC1)
 acpiprt10 at acpi0: bus 10 (PXC2)
 acpiprt11 at acpi0: bus 11 (PICH)
 acpicpu0 at acpi0
 bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
 0xcd000/0x2200 0xec000/0x4000!
 ipmi at mainbus0 not configured
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 Intel IOP332 PCIE-PCIX rev 0x06
 pci2 at ppb1 bus 2
 ami0 at pci2 dev 14 function 0 Dell PERC 4e/Di rev 0x06: apic 3 int 14
(irq 7)
 ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
 ami0: 2 channels, 0 FC loops, 1 logical drives
 scsibus0 at ami0: 40 targets
 sd0 at scsibus0 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
 sd0: 139900MB, 512 bytes/sec, 286515200 sec total
 scsibus1 at ami0: 16 targets
 safte0 at scsibus1 targ 6 lun 0: PE/PV, 1x6 SCSI BP, 1.0 SCSI2
 3/processor fixed
 scsibus2 at ami0: 16 targets
 ppb2 at pci1 dev 0 function 2 Intel IOP332 PCIE-PCIX rev 0x06
 pci3 at ppb2 bus 3
 ppb3 at pci0 dev 4 function 0 Intel E7520 PCIE rev 0x09
 pci4 at ppb3 bus 4
 ppb4 at pci0 dev 5 function 0 Intel E7520 PCIE rev 0x09
 pci5 at ppb4 bus 5
 ppb5 at pci5 dev 0 function 0 Intel PCIE-PCIE rev 0x09
 pci6 at ppb5 bus 6
 em0 at pci6 dev 7 function 0 Intel PRO/1000MT (82541GI) rev 0x05:
 apic 4 int 0 (irq 11), address 00:11:43:d9:17:36
 ppb6 at pci5 dev 0 function 2 Intel PCIE-PCIE rev 0x09
 pci7 at ppb6 bus 7
 em1 at 

Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Mic J
Discussed many times. :) check archives for many interesting repsonses.

But some of the developers has some work wishlist of what the want to do
have done.
Or some used to have.

Otherwise their is lots of ports, that could be interesting, if it
doesnt have to
be base system work (wine might include both).

Also i would like wireshark ;) but thats a contreversial subject.

If its base systems check the netbsd wishlist,
http://www.netbsd.org/contrib/projects.html
And see if some of it applies to OpenBSD.

Personally i'm working on a editor that could supplant the obsolete vi/vim/nvi.
editor, I'm modelling it after this notepad thing...


Mic



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Christiano Farina Haesbaert
2009/6/2 Ted Unangst ted.unan...@gmail.com

 This comes up from time to time and the more I think about it, the
 more I believe that if you don't know what you want to do but somebody
 tells you, you won't be very good at it.  Partially because you lack
 motivation, but also because if the problem you're solving has never
 affected you, then you probably won't understand it.

 Anyway, if you still feel like doing something, practically everyday
 someday requests some feature on the mailing list.


Couldn't agree more, but for the first steps this does not apply.
It's far easier to start in a project when you have someone telling you what
needs to be done,
the first step is the hardest, if we could ease it, the rest would come
naturally.

I strongly believe the bug tracking should be that list.

Would be great if the devs would open more bugs, even things that aren't
critical, it could be
very small things that they lack the time to do it, at the same time it
would work as an entry
point for that part of the project. Could be things like:
Clean code at foo.c : Take a look at foo.c and remove/clean all the
redundant code
Port driver y from xbsd : We need support for cards blablablabla

It's hard to know what you wan't to do when you barely know what needs to be
done and
what could be done.

--
Christiano Farina Haesbaert



Re: Flapping VPN under load on Soekris

2009-06-03 Thread Lordsporkton

--
From: Mikolaj Kucharski miko...@kucharski.name
Sent: Tuesday, June 02, 2009 5:56 PM
To: misc@openbsd.org
Cc: miko...@kucharski.name
Subject: Re: Flapping VPN under load on Soekris


Can anyone give me example of embedded system (Soekris-like) which is
known to handle PF traffic + VPN traffic at MBit/s throughput, and
packets per second level, generated by home users browsing web,
skyping, playing games on-line (low latency), at the same time.
*Fanless* and which can run OpenBSD of course.

I hope I'm not too demanding, is there anything like that?

On Tue, Jun 02, 2009 at 11:10:14PM +, Stuart Henderson wrote:

you're probably overloading the CPU. try -current, sis(4) has
MCLGETI now which should mitigate things a bit. still, that's a
lot of load you're putting on a little 486 which will almost
certainly be restricting your throughput.


Thanks Stuart.

--
best regards
q#




How many megs of throughput are you trying to push? and what encryption are 
you using?
I have a p2 at 400mhz with 128ram that can push 5+ megs of aes256 traffic 
and I don't notice any problems, and I have no offload card
I know this isnt embedded but its overall system specs are similar to a 
soakris


If you are purely looking for another system, you might check out alix 
boards

http://www.pcengines.ch/alix.htm

Lawrence



Re: OpenBGPD and MRT format dumps read by bgpdump

2009-06-03 Thread Claudio Jeker
On Sat, May 30, 2009 at 11:34:45PM +0200, Claudio Jeker wrote:
 On Tue, May 26, 2009 at 11:24:29AM -0400, Brian Mengel wrote:
  Greetings,
  
  I've just put together a simple server with the goal of using OpenBGPD
  to collect MRT format BGP table dumps.  I'm using:
  
  OpenBGPD 4.4
  OpenBSD 4.5
  libbgpdump-1.4.99.8 (on a separate Linux server)
  
  bgpdump parses the dumped table from OpenBGPD, and displays individual
  routes, but the AS path for each route is reported as an error and
  various unknown attributes are also reported.  The server is peering
  with a Cisco 7600 series router.  I have tried configuring the server
  as an IBGP peer, an IBGP peer to a route reflector and as an EBGP peer
  with the same general results.
  
 
 Your acctually the first mentioning this problem on the list. MRT dumps
 are broken since some time because we dump the aspath in 4-byte format
 instead of 2-byte one. I started fixing this but it is not the most
 important thing on my list (only the 3rd on my bgpd todo list).
 

Doh. I already fixed it in -current. -current will dump in 2-byte but adds
a ATTR_AS4_PATH for 4-byte pathes. The part that is still open is to
support the new mrt formats.

-- 
:wq Claudio



Re: OpenBSD as a storage SAN

2009-06-03 Thread ropers
2009/6/3 Friedrich Locke friedrich.lo...@gmail.com:
 Dear gentleman/madam,

 i would like to use openbsd in order to build a SAN solution, i.e.,
 one that provides block access to the box's disks.
 I want to build a SAN, not a NAS. Is it possible?

 Thank in advance.

I'm no expert, and I've never worked with SANs, but since the defining
characteristic of a SAN is that it makes remote storage devices appear
locally attached to the OS, let me ask:

Do you want remote storage devices appear locally attached to other
OpenBSD servers, or to what kind of server?

Granted, depending on the protocol used/design of your SAN it may not
matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
OS-agnostic, but still I'm curious, and sort of trying to understand
where you're going with this.

Also --and I apologize if this is too trivial-- if I were asked to
implement a SAN, I would first of all try to be specific and see what
protocol would be required, or, if I were able/expected to build a new
SAN from scratch and choose a protocol/decide how to implement it
myself, then I'd try to figure out what makes the short list, and in
this case, if any of those programs/drivers are available for, or can
be ported to OpenBSD. I'd e.g. look at this list:
http://en.wikipedia.org/wiki/Storage_area_network#Network_types
and google for those technologies in the misc archives (haven't done
this, but I'm not the one gunning for a SAN).
So precisely what SAN technologies/software/hardware are you trying to
use with OpenBSD?

For what it's worth, the opposite --accessing an existing SAN from
OpenBSD-- seems to have been discussed in the past:
http://marc.info/?t=12351424634r=1w=2

regards,
--ropers



Re: Agere ET1310 not working

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Renaud Allard ren...@allard.it wrote:
 I have just bought a Fabia FX5621 board which has amongst others, two
 Agere ET1310 interfaces. I configured one interface and it negotiated
 correctly with my switch at 1000mbps full duplex. However, I am not able
 to ping the interface from anywhere else and I am not able to ping from
 the interface either. The ARP table seems always empty. I used tcpdump
 to sniff the traffic while pinging and doing some broadcasts and saw
 nothing in the tcpdump output.
 Has someone else noticed this kind of behavior with this chipset?

watch systat vmstat then ping -f it from another machine.
what irq is triggering? is it associated with the et(4)?
is it the same for both et? 

 rl0 at pci0 dev 9 function 0 Realtek 8139 rev 0x10: apic 1 int 16 (irq
 11), address 00:04:a7:08:9a:c6
 rlphy0 at rl0 phy 0: RTL internal PHY

wow, pretty unusual to see rl(4) on a PCIE board... do those all work ok?



On 2009-06-03, Renaud Allard ren...@allard.it wrote:
 Hello,

 I have just bought a Fabia FX5621 board which has amongst others, two
 Agere ET1310 interfaces. I configured one interface and it negotiated
 correctly with my switch at 1000mbps full duplex. However, I am not able
 to ping the interface from anywhere else and I am not able to ping from
 the interface either. The ARP table seems always empty. I used tcpdump
 to sniff the traffic while pinging and doing some broadcasts and saw
 nothing in the tcpdump output.
 Has someone else noticed this kind of behavior with this chipset?

 here is my dmesg:
 OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: VIA Eden Processor 1000MHz (CentaurHauls 686-class) 1 GHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR
 real mem  = 1039757312 (991MB)
 avail mem = 997048320 (950MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 01/16/09, BIOS32 rev. 0 @ 0xf0010,
 SMBIOS rev. 2.5 @ 0xfc390 (47 entries)
 bios0: vendor American Megatrends Inc. version 080014 date 01/16/2009
 acpi at bios0 function 0x0 not configured
 mpbios0 at bios0: Intel MP Specification 1.4
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
 cpu0: apic clock running at 99MHz
 mpbios0: bus 0 is type PCI
 mpbios0: bus 1 is type PCI
 mpbios0: bus 128 is type PCI
 mpbios0: bus 129 is type PCI
 mpbios0: bus 130 is type PCI
 mpbios0: bus 131 is type ISA
 ioapic0 at mainbus0: apid 1 pa 0xfec0, version 3, 24 pins
 pcibios0 at bios0: rev 3.0 @ 0xf/0x1
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5780/336 (19 entries)
 pcibios0: no compatible PCI ICU found: ICU vendor 0x1106 product 0x3287
 pcibios0: Warning, unable to fix up PCI interrupt routing
 pcibios0: PCI bus #130 is the last bus
 bios0: ROM list: 0xc/0xfe00
 cpu0: unknown Enhanced SpeedStep CPU, msr 0x04090a0904000a09
 cpu0: using only highest and lowest power states
 cpu0: Enhanced SpeedStep 1333 MHz (844 mV): speeds: 1333, 533 MHz
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 VIA CN700 Host rev 0x00
 viaagp0 at pchb0: v3
 agp0 at viaagp0: aperture at 0xe000, size 0x1000
 pchb1 at pci0 dev 0 function 1 VIA CN700 Host rev 0x00
 pchb2 at pci0 dev 0 function 2 VIA CN700 Host rev 0x00
 pchb3 at pci0 dev 0 function 3 VIA PT890 Host rev 0x00
 pchb4 at pci0 dev 0 function 4 VIA CN700 Host rev 0x00
 pchb5 at pci0 dev 0 function 7 VIA CN700 Host rev 0x00
 ppb0 at pci0 dev 1 function 0 VIA VT8377 AGP rev 0x00
 pci1 at ppb0 bus 1
 vga1 at pci1 dev 0 function 0 VIA S3 Unichrome PRO IGP rev 0x01
 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
 wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
 ral0 at pci0 dev 8 function 0 Ralink RT2561S rev 0x00: apic 1 int 16
 (irq 11), address 00:12:0e:61:49:24
 ral0: MAC/BBP RT2561C, RF RT5225
 rl0 at pci0 dev 9 function 0 Realtek 8139 rev 0x10: apic 1 int 16 (irq
 11), address 00:04:a7:08:9a:c6
 rlphy0 at rl0 phy 0: RTL internal PHY
 rl1 at pci0 dev 10 function 0 Realtek 8139 rev 0x10: apic 1 int 17
 (irq 10), address 00:04:a7:08:9a:c5
 rlphy1 at rl1 phy 0: RTL internal PHY
 rl2 at pci0 dev 11 function 0 Realtek 8139 rev 0x10: apic 1 int 18
 (irq 5), address 00:04:a7:08:9a:c4
 rlphy2 at rl2 phy 0: RTL internal PHY
 rl3 at pci0 dev 12 function 0 Realtek 8139 rev 0x10: apic 1 int 19
 (irq 3), address 00:04:a7:08:9a:c3
 rlphy3 at rl3 phy 0: RTL internal PHY
 ahci0 at pci0 dev 15 function 0 vendor VIA, unknown product 0x6287 rev
 0x20: apic 1 int 21 (irq 10), AHCI 1.0
 scsibus0 at ahci0: 32 targets
 sd0 at scsibus0 targ 0 lun 0: ATA, ST9500325AS, 0001 SCSI3 0/direct fixed
 sd0: 476940MB, 512 bytes/sec, 976773168 sec total
 pciide0 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x07: DMA,
 channel 0 configured to compatibility, channel 1 configured to compatibility
 pciide0: channel 0 disabled (no drives)
 wd0 at pciide0 

Re: OpenBSD as a storage SAN

2009-06-03 Thread Friedrich Locke
I am planing this:

With iSCSI i would like to implement on OpenBSD server (target) and
various boxes linux, win and openbsd too, i.e., they (the clients)
would be the initiators.

That simple like that.

So, the question is: Does OBSD support iSCSI (both target and initiator)?

I am really in need of that, may some one help me?

Thanks in advance.

On Wed, Jun 3, 2009 at 3:18 PM, ropers rop...@gmail.com wrote:
 2009/6/3 Friedrich Locke friedrich.lo...@gmail.com:
 Dear gentleman/madam,

 i would like to use openbsd in order to build a SAN solution, i.e.,
 one that provides block access to the box's disks.
 I want to build a SAN, not a NAS. Is it possible?

 Thank in advance.

 I'm no expert, and I've never worked with SANs, but since the defining
 characteristic of a SAN is that it makes remote storage devices appear
 locally attached to the OS, let me ask:

 Do you want remote storage devices appear locally attached to other
 OpenBSD servers, or to what kind of server?

 Granted, depending on the protocol used/design of your SAN it may not
 matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
 OS-agnostic, but still I'm curious, and sort of trying to understand
 where you're going with this.

 Also --and I apologize if this is too trivial-- if I were asked to
 implement a SAN, I would first of all try to be specific and see what
 protocol would be required, or, if I were able/expected to build a new
 SAN from scratch and choose a protocol/decide how to implement it
 myself, then I'd try to figure out what makes the short list, and in
 this case, if any of those programs/drivers are available for, or can
 be ported to OpenBSD. I'd e.g. look at this list:
 http://en.wikipedia.org/wiki/Storage_area_network#Network_types
 and google for those technologies in the misc archives (haven't done
 this, but I'm not the one gunning for a SAN).
 So precisely what SAN technologies/software/hardware are you trying to
 use with OpenBSD?

 For what it's worth, the opposite --accessing an existing SAN from
 OpenBSD-- seems to have been discussed in the past:
 http://marc.info/?t=12351424634r=1w=2

 regards,
 --ropers



Re: OpenBSD as a storage SAN

2009-06-03 Thread Lars Nooden
OpenAFS is part of the base distro.

Regards
-Lars



Re: OpenBSD as a storage SAN

2009-06-03 Thread Chris Kuethe
On Wed, Jun 3, 2009 at 2:02 PM, Lars Nooden lars.cura...@gmail.com wrote:
 OpenAFS is part of the base distro.

no it isn't.

the arla afs *client* is, but the afs server (milko) isn't. openafs is in ports.


-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?



Re: OpenBSD as a storage SAN

2009-06-03 Thread Artur Grabowski
Lars Nooden lars.cura...@gmail.com writes:

 OpenAFS is part of the base distro.

Where?

//art



Re: OpenBSD as a storage SAN

2009-06-03 Thread Theo de Raadt
 On Wed, Jun 3, 2009 at 2:02 PM, Lars Nooden lars.cura...@gmail.com wrote:
  OpenAFS is part of the base distro.
 
 no it isn't.
 
 the arla afs *client* is, but the afs server (milko) isn't. openafs is in 
 ports.

arla != openafs

openafs doesn't stand a chance of getting into the base because it is fake-free.



Re: OpenBSD as a storage SAN

2009-06-03 Thread Noah Pugsley

iscsi support does not exist yet. Maybe try FreeBSD or OpenSolaris.

Friedrich Locke wrote:

I am planing this:

With iSCSI i would like to implement on OpenBSD server (target) and
various boxes linux, win and openbsd too, i.e., they (the clients)
would be the initiators.

That simple like that.

So, the question is: Does OBSD support iSCSI (both target and initiator)?

I am really in need of that, may some one help me?

Thanks in advance.

On Wed, Jun 3, 2009 at 3:18 PM, ropers rop...@gmail.com wrote:

2009/6/3 Friedrich Locke friedrich.lo...@gmail.com:

Dear gentleman/madam,

i would like to use openbsd in order to build a SAN solution, i.e.,
one that provides block access to the box's disks.
I want to build a SAN, not a NAS. Is it possible?

Thank in advance.

I'm no expert, and I've never worked with SANs, but since the defining
characteristic of a SAN is that it makes remote storage devices appear
locally attached to the OS, let me ask:

Do you want remote storage devices appear locally attached to other
OpenBSD servers, or to what kind of server?

Granted, depending on the protocol used/design of your SAN it may not
matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
OS-agnostic, but still I'm curious, and sort of trying to understand
where you're going with this.

Also --and I apologize if this is too trivial-- if I were asked to
implement a SAN, I would first of all try to be specific and see what
protocol would be required, or, if I were able/expected to build a new
SAN from scratch and choose a protocol/decide how to implement it
myself, then I'd try to figure out what makes the short list, and in
this case, if any of those programs/drivers are available for, or can
be ported to OpenBSD. I'd e.g. look at this list:
http://en.wikipedia.org/wiki/Storage_area_network#Network_types
and google for those technologies in the misc archives (haven't done
this, but I'm not the one gunning for a SAN).
So precisely what SAN technologies/software/hardware are you trying to
use with OpenBSD?

For what it's worth, the opposite --accessing an existing SAN from
OpenBSD-- seems to have been discussed in the past:
http://marc.info/?t=12351424634r=1w=2

regards,
--ropers




Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Lordsporkton lordspork...@gmail.com wrote:
 I have a p2 at 400mhz with 128ram that can push 5+ megs of aes256 traffic 
 and I don't notice any problems, and I have no offload card
 I know this isnt embedded but its overall system specs are similar to a 
 soakris

400MHz P2 is a whole different kettle of fish.



Re: OpenBSD as a storage SAN

2009-06-03 Thread Janne Johansson

Lars Nooden wrote:

OpenAFS is part of the base distro.


No.
The base includes arla, an AFS client.



Re: arp table timeout / how to update automatically if foreign MAC changes?

2009-06-03 Thread Toni Mueller
Hi,

On Tue, 11.03.2008 at 15:59:24 +0100, smartTERRA NOC n...@smartterra.de wrote:
 I have found a workaround: heartbeat. Heartbeat uses (like carp on  
 OpenBSD) a virtual MAC address, so there is no problem with the arp  
 cache on the OpenBSD firewall.

how do I do this if the remote machines run OpenBSD, but can't run
CARP?

I tried to ping from the new machine to distribute the new MAC/IP
association, but to no avail. The OpenBSD gateway just ignored the
change and only learned the new address when I manually deleted the arp
entry.

TIA!


Kind regards,
--Toni++



Re: OpenBSD as a storage SAN

2009-06-03 Thread Lars Nooden
Chris Kuethe wrote:
 the arla afs *client* is,

That's the part I have most contact with.

 http://www.openbsd.org/cgi-bin/man.cgi?query=afsd
 http://www.openbsd.org/cgi-bin/man.cgi?query=afsd.conf

 ... but the afs server (milko) isn't. openafs is in ports.

Thanks.  I stand half-corrected. ;)

http://www.openbsd.org/4.5_packages/i386/openafs-1.4.7p5.tgz-long.html

Regards,
-Lars



Re: OpenBSD as a storage SAN

2009-06-03 Thread Anathae Townsend
 -Original Message-
 From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf
 Of Friedrich Locke
 Sent: Wednesday, June 03, 2009 6:11 AM
 To: misc@openbsd.org
 Subject: OpenBSD as a storage SAN
 
 Dear gentleman/madam,
 
 i would like to use openbsd in order to build a SAN solution, i.e.,
 one that provides block access to the box's disks.
 I want to build a SAN, not a NAS. Is it possible?
 
 Thank in advance.

Currently, there are no iSCSI implimentations in ports, AFAIK.  Marco is 
working on softraid (which, personally I like to call softscsi) and 
has some initial work done on iSCSI and AoE (ATA over Ethernet), but
neither is very ready for primetime.

Anathae



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Chris Bennett

Couldn't agree more, but for the first steps this does not apply.
It's far easier to start in a project when you have someone telling you what
needs to be done,
the first step is the hardest, if we could ease it, the rest would come
naturally.

I strongly believe the bug tracking should be that list.

Would be great if the devs would open more bugs, even things that aren't
critical, it could be
very small things that they lack the time to do it, at the same time it
would work as an entry
point for that part of the project. Could be things like:
Clean code at foo.c : Take a look at foo.c and remove/clean all the
redundant code
Port driver y from xbsd : We need support for cards blablablabla

It's hard to know what you wan't to do when you barely know what needs to be
done and
what could be done.

--
Christiano Farina Haesbaert


  
I'm very motivated to help out. I'm very eager to do something useful 
when I have free time, which comes in big bunches together. I don't need 
something glamorous or sexy.
I know very well that I am like the little kid among the grown-ups, as 
it were!
So it would be very helpful for people like me who aren't programming 
gods to have someone take us by the hand and tell us what we should do 
to help!


I see lots of stuff digging around that I don't understand and I don't 
even know if it's good stuff or just leftover legacy stuff that I should 
ignore.


Chris Bennett

--
A human being should be able to change a diaper, plan an invasion,
butcher a hog, conn a ship, design a building, write a sonnet, balance
accounts, build a wall, set a bone, comfort the dying, take orders,
give orders, cooperate, act alone, solve equations, analyze a new
problem, pitch manure, program a computer, cook a tasty meal, fight
efficiently, die gallantly. Specialization is for insects.
  -- Robert Heinlein



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Henning Brauer
* Chris Bennett ch...@bennettconstruction.biz [2009-06-04 00:23]:
 I'm very motivated to help out.

make a udp mode in tcpbench
make the tcpbench server side non-forking non-blocking and report
useful summary stats
make tcpbench able to send to a bunch of IPs in a round-robin fashion
(like it does now for multiple connections to one server), and the
server to listen on a bunch of IPs

it is all reasonably simple. I have asked for it before, and now, a
year later, it has not been done. I bet it won't change in a year. But
that pessimism is just lack of information, so prove me wrong.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Paul M

Gosh, when was vi obsoleted.
I must have missed that.


paulm


On 4/06/2009, at 4:33 AM, Mic J wrote:


Discussed many times. :) check archives for many interesting repsonses.

But some of the developers has some work wishlist of what the want to 
do

have done.
Or some used to have.

Otherwise their is lots of ports, that could be interesting, if it
doesnt have to
be base system work (wine might include both).

Also i would like wireshark ;) but thats a contreversial subject.

If its base systems check the netbsd wishlist,
http://www.netbsd.org/contrib/projects.html
And see if some of it applies to OpenBSD.

Personally i'm working on a editor that could supplant the obsolete 
vi/vim/nvi.

editor, I'm modelling it after this notepad thing...


Mic




Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Matthew Dempsky
On Wed, Jun 3, 2009 at 4:45 PM, Paul M l...@no-tek.com wrote:
 Gosh, when was vi obsoleted.

Fri Feb 25 19:08:45 2000 UTC, according to
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/mg/Makefile

:)



DHCP proxy or packet rewriting

2009-06-03 Thread Rob Campbell
Hello,

I am somewhat new to OpenBSD, but have been using various *nix systems
for many years.  I recently wanted to use OpenBSD for a DHCP server with
static IP assignments based on a MAC address.  The problem is the MAC I
want to use for the static assignment is in the ethernet headers, not
the MAC which is sent as part of the DHCP protocol.  This is because an
end-user device is sending it's MAC address in the DHCP packet, but I
want the assignment to use the MAC from my equipment which forwards the
packet.  The best option would be if my equipment supported something
like DHCP option 82, or another way to modify the packet, but that is
not available.

I can think of two possible solutions:
1. Modify dhcpd to allow this ability
2. Create a pf rule to rewrite the packet
3. Create a DHCP proxy similar to tftp-proxy

With option 1, I would have to make changes to dhcpd.  That could cause
problems with maintaining a fork or when upgrading.  I have not found a
way to do option 2 from reading about pf.  I believe it would be
possible with iptables in Linux through the mangle rules, but I have
not looked into that yet.  Option 3 seems like the cleanest way, but I
don't know if the proxy would have access to the ethernet headers.

It is also possible that there is another way to do this, which I have
overlooked.  If that is the case, please let me know.  Otherwise, any
input or insights into these options would be greatly appreciated.

-- 
Rob Campbell



Re: PF performance problem

2009-06-03 Thread patrick keshishian
On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey
richardtoo...@paradise.net.nz wrote:
 On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:

 Hello,

 I have performance issues on a OpenBSD 4.4 firewall.
 CPU load is OK (always below 50%), but system load is always between 1 and
 1.5, it may go up to 2 sometimes.

 [cut]

 And what is the actual *problem*?

 What is pf failing to do?

 Or are you just worried about the numbers? B Search the archives for high
 load ...

just for the record, i have seen a server where its typical load
floats around 0.10 or so, but then something will happen and the
plateau will get bumped to 1.10 and remain there. this was an 4.5
system.

I have not identified what event caused this. I've seen similar
issue with a couple of linux boxes at work where the load avg plateau
will keep rising: it'll hover around ~3, then say ~6 then ~13. i don't
think the issues are related, but could be caused by similar bugs in
kernel.

All systems continue to be responsive and it only seems that the
reported load avg value is just bumped by a base value. It is
definitely odd.

--patrick


 http://marc.info/?l=openbsd-miscm=122607853731136w=3



pf scrub error on upgrade to snapshot-1

2009-06-03 Thread Duncan Patton a Campbell
Howdy List?

I just upgraded to the snapshot-1 because the current, June 3, goes into
an error on encountering a scsi raid.  So I dropped back to the May 31
and now pf doesn't like the scrub syntax..

pfctl -f pf.conf 
pf.conf:63: syntax error
pfctl: Syntax error in config file: pf rules not loaded

on

scrub in all
or
scrub in on ext_if_vr0 all

as line 63.  If commented out, everything seems (so far) to work as before.

Following is the dmesg for this machine.  

Thanks,

Dhu


OpenBSD 4.5-current (GENERIC.MP) #18: Sun May 31 10:35:36 MDT 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3.04 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
real mem  = 2146988032 (2047MB)
avail mem = 2067677184 (1971MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/04/06, BIOS32 rev. 0 @ 0xfb180, SMBIOS 
rev. 2.3 @ 0xf0100 (39 entries)
bios0: vendor Award Software International, Inc. version F10 date 01/04/2006
bios0: Gigabyte Technology Co., Ltd. 8I945P-G
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP MCFG APIC
acpi0: wakeup devices PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5) PEX5(S5) 
HUB0(S5) USB0(S1) USB1(S1) USB2(S1) USB3(S1) USBE(S1) AC97(S5) MC97(S5) 
AZAL(S5) PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3.02 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX0)
acpiprt2 at acpi0: bus -1 (PEX1)
acpiprt3 at acpi0: bus 3 (PEX2)
acpiprt4 at acpi0: bus -1 (PEX3)
acpiprt5 at acpi0: bus -1 (PEX4)
acpiprt6 at acpi0: bus -1 (PEX5)
acpiprt7 at acpi0: bus 4 (HUB0)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpibtn0 at acpi0: PWRB
bios0: ROM list: 0xc/0xd000 0xd/0x5800
cpu0: Enhanced SpeedStep disabled by BIOS
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82945G Host rev 0x81
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: apic 2 int 
16 (irq 7)
azalia0: RIRB time out
azalia0: codecs: Realtek ALC882
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: apic 2 int 16 
(irq 7)
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 vendor PLX, unknown product 0x8111 rev 0x21
pci2 at ppb1 bus 2
ohci0 at pci2 dev 0 function 0 NEC USB rev 0x43: apic 2 int 16 (irq 7), 
version 1.0
ohci1 at pci2 dev 0 function 1 NEC USB rev 0x43: apic 2 int 17 (irq 4), 
version 1.0
ehci0 at pci2 dev 0 function 2 NEC USB rev 0x04: apic 2 int 18 (irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 NEC EHCI root hub rev 2.00/1.00 addr 1
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 NEC OHCI root hub rev 1.00/1.00 addr 1
usb2 at ohci1: USB revision 1.0
uhub2 at usb2 NEC OHCI root hub rev 1.00/1.00 addr 1
ppb2 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01: apic 2 int 18 
(irq 5)
pci3 at ppb2 bus 3
bge0 at pci3 dev 0 function 0 Broadcom BCM5789 rev 0x11, BCM5750 B1 (0x4101): 
apic 2 int 18 (irq 5), address 00:14:85:15:50:b5
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 2 int 23 
(irq 3)
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 2 int 19 
(irq 10)
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: apic 2 int 18 
(irq 5)
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: apic 2 int 16 
(irq 7)
ehci1 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: apic 2 int 23 
(irq 3)
usb3 at ehci1: USB revision 2.0
uhub3 at usb3 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xe1
pci4 at ppb3 bus 4
ahc0 at pci4 dev 0 function 0 Adaptec AHA-2940U2 U2 rev 0x00: apic 2 int 20 
(irq 11)
scsibus0 at ahc0: 16 targets, initiator 7
sd0 at scsibus0 targ 0 lun 0: FUJITSU, MAN3184MP, 0108 SCSI3 0/direct fixed
sd0: 17522MB, 512 bytes/sec, 35885448 sec total
vr0 at pci4 dev 1 function 0 VIA VT6105 RhineIII rev 0x86: apic 2 int 19 (irq 
10), address 00:15:e9:87:4a:38
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 4: OUI 0x004063, 
model 0x0034
vga1 at pci4 dev 2 function 0 ATI Radeon 9200 PRO rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: apic 2 int 18 (irq 5)
drm0 at radeondrm0
ATI Radeon 9200 PRO Sec rev 0x01 at pci4 dev 2 function 1 not configured
ichpcib0 

Re: pf scrub error on upgrade to snapshot-1

2009-06-03 Thread James Records
the new match keyword is what your looking for:

http://www.openbsd.org/faq/current.html#20090406

J

On Wed, Jun 3, 2009 at 10:36 PM, Duncan Patton a Campbell 
campb...@neotext.ca wrote:

 Howdy List?

 I just upgraded to the snapshot-1 because the current, June 3, goes into
 an error on encountering a scsi raid.  So I dropped back to the May 31
 and now pf doesn't like the scrub syntax..

 pfctl -f pf.conf
 pf.conf:63: syntax error
 pfctl: Syntax error in config file: pf rules not loaded

 on

 scrub in all
 or
 scrub in on ext_if_vr0 all

 as line 63.  If commented out, everything seems (so far) to work as before.

 Following is the dmesg for this machine.

 Thanks,

 Dhu


 OpenBSD 4.5-current (GENERIC.MP) #18: Sun May 31 10:35:36 MDT 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
 cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3.04 GHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
 real mem  = 2146988032 (2047MB)
 avail mem = 2067677184 (1971MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 01/04/06, BIOS32 rev. 0 @ 0xfb180,
 SMBIOS rev. 2.3 @ 0xf0100 (39 entries)
 bios0: vendor Award Software International, Inc. version F10 date
 01/04/2006
 bios0: Gigabyte Technology Co., Ltd. 8I945P-G
 acpi0 at bios0: rev 0
 acpi0: tables DSDT FACP MCFG APIC
 acpi0: wakeup devices PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5) PEX5(S5)
 HUB0(S5) USB0(S1) USB1(S1) USB2(S1) USB3(S1) USBE(S1) AC97(S5) MC97(S5)
 AZAL(S5) PCI0(S5)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: apic clock running at 200MHz
 cpu1 at mainbus0: apid 1 (application processor)
 cpu1: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3.02 GHz
 cpu1:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
 ioapic0: misconfigured as apic 0, remapped to apid 2
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpiprt1 at acpi0: bus 1 (PEX0)
 acpiprt2 at acpi0: bus -1 (PEX1)
 acpiprt3 at acpi0: bus 3 (PEX2)
 acpiprt4 at acpi0: bus -1 (PEX3)
 acpiprt5 at acpi0: bus -1 (PEX4)
 acpiprt6 at acpi0: bus -1 (PEX5)
 acpiprt7 at acpi0: bus 4 (HUB0)
 acpicpu0 at acpi0
 acpicpu1 at acpi0
 acpibtn0 at acpi0: PWRB
 bios0: ROM list: 0xc/0xd000 0xd/0x5800
 cpu0: Enhanced SpeedStep disabled by BIOS
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel 82945G Host rev 0x81
 azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: apic 2
 int 16 (irq 7)
 azalia0: RIRB time out
 azalia0: codecs: Realtek ALC882
 audio0 at azalia0
 ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: apic 2 int 16
 (irq 7)
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 vendor PLX, unknown product 0x8111 rev 0x21
 pci2 at ppb1 bus 2
 ohci0 at pci2 dev 0 function 0 NEC USB rev 0x43: apic 2 int 16 (irq 7),
 version 1.0
 ohci1 at pci2 dev 0 function 1 NEC USB rev 0x43: apic 2 int 17 (irq 4),
 version 1.0
 ehci0 at pci2 dev 0 function 2 NEC USB rev 0x04: apic 2 int 18 (irq 5)
 usb0 at ehci0: USB revision 2.0
 uhub0 at usb0 NEC EHCI root hub rev 2.00/1.00 addr 1
 usb1 at ohci0: USB revision 1.0
 uhub1 at usb1 NEC OHCI root hub rev 1.00/1.00 addr 1
 usb2 at ohci1: USB revision 1.0
 uhub2 at usb2 NEC OHCI root hub rev 1.00/1.00 addr 1
 ppb2 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01: apic 2 int 18
 (irq 5)
 pci3 at ppb2 bus 3
 bge0 at pci3 dev 0 function 0 Broadcom BCM5789 rev 0x11, BCM5750 B1
 (0x4101): apic 2 int 18 (irq 5), address 00:14:85:15:50:b5
 brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
 uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 2 int 23
 (irq 3)
 uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 2 int 19
 (irq 10)
 uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: apic 2 int 18
 (irq 5)
 uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: apic 2 int 16
 (irq 7)
 ehci1 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: apic 2 int 23
 (irq 3)
 usb3 at ehci1: USB revision 2.0
 uhub3 at usb3 Intel EHCI root hub rev 2.00/1.00 addr 1
 ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xe1
 pci4 at ppb3 bus 4
 ahc0 at pci4 dev 0 function 0 Adaptec AHA-2940U2 U2 rev 0x00: apic 2 int
 20 (irq 11)
 scsibus0 at ahc0: 16 targets, initiator 7
 sd0 at scsibus0 targ 0 lun 0: FUJITSU, MAN3184MP, 0108 SCSI3 0/direct
 fixed
 sd0: 17522MB, 512 bytes/sec, 35885448 sec total
 vr0 at pci4 dev 1 function 0 VIA VT6105 RhineIII rev 0x86: apic 2 int 19
 (irq 10), address 00:15:e9:87:4a:38
 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 4: OUI
 0x004063, model 0x0034
 vga1 at pci4 dev 2 function 0 ATI Radeon