Re: Problem with NFS server performances

[Bret S. Lambert]

On Thu, Jun 25, 2009 at 07:49:21PM +0200, Gregory Colpart wrote:
> Hello,
> 
> Sum-up:
> ---
> 
> We try to use NFS server in different machines and network
> environments and we have very poor performances. Our main test
> is creating a big tar archive on local NFS server. With NFS
> server on OpenBSD 4.5: speed result is about 500 Kbit/s for NFS
> Linux clients, and about 2 Mbit/s for NFS OpenBSD clients.
> 
> Details:
> 
> 
> Two years ago we deploy a NFS server with OpenBSD 4.0 on DELL
> PowerEdge 1900 server (RAID 5 with PERC 5/i on SCSI disks,
> Broadcom BCM5708 network card, see dmesg in attachment). NFS
> clients are machines on the same local network (Linux, SunOS,
> etc.). No problem was reported. We upgrade to 4.1, all was
> always right. But after upgrading to 4.2, users begin to be
> unhappy during big files transfers or big tarball creations (note
> we are not really sure they did these operations before). Then we
> try to optimize NFS (trying differents options - tcp/udp for
> example - for clients or increasing nfsd number for server) and
> change hardware (use another network card, another wires, another
> switches). Always very slow... while there are no problem with
> SunOS or Linux NFS servers. Moreover connections to OpenBSD NFS
> server are often locked with classical messages:
> nfs: server FOO not responding, still trying
> nfs: server FOO OK
> During the creation of a big tarball, nfsd process are often in
> run state "D" (disk wait). We verify disk performances but they
> are pretty good in local filesystem. We upgrade to 4.3. Same
> behaviour. 4.4 too. In another office, we try with a
> different machine (see dmesg in attachment) with OpenBSD 4.5 on a
> new network environment. It's a little better, but too slow
> again.
> 
> Example when creating a big tar archive.
> With OpenBSD NFS client, it's not too bad:
> 
> obsd-nfs-client:/mnt/nfs% du -sh test/
> 1.5G
> obsd-nfs-client:/mnt/nfs% tar cf test.tar test/
> during about 1.5 hours...
> 
> With Linux NFS client, it's too slow:
> 
> linux-nfs-client:/mnt/nfs% du -sh test/
> 1.5G
> linux-nfs-client:/mnt/nfs% tar cf test.tar test/
> during about 7 hours...
> 
> We are aware some sysadmins use OpenBSD NFS server with success
> (we find happy users in openbsd-misc archives). But we don't.
> Have you ideas for us ?

It would be much easier to help if you included your mount options
on both clients.

> 
> Regards,
> -- 
> Gregory Colpart   GnuPG:1024D/C1027A0E
> Evolix - Informatique et Logiciels Libres http://www.evolix.fr/
> OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
> dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz ("GenuineIntel" 686-class) 1.60 GHz
> cpu0: 
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,TM2,CX16,xTPR
> real mem  = 1068400640 (1018MB)
> avail mem = 1024663552 (977MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 09/12/08, BIOS32 rev. 0 @ 0xffe90, 
> SMBIOS rev. 2.5 @ 0x3fb9c000 (67 entries)
> bios0: vendor Dell Inc. version "2.5.0" date 09/12/2008
> bios0: Dell Inc. PowerEdge 1900
> acpi0 at bios0: rev 2
> acpi0: tables DSDT FACP APIC SPCR HPET MCFG WD__ SLIC ERST HEST BERT EINJ TCPA
> acpi0: wakeup devices PCI0(S5)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpihpet0 at acpi0: 14318179 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus 6 (PEX2)
> acpiprt2 at acpi0: bus 7 (UPST)
> acpiprt3 at acpi0: bus 8 (DWN1)
> acpiprt4 at acpi0: bus 9 (DWN2)
> acpiprt5 at acpi0: bus 10 (PE2X)
> acpiprt6 at acpi0: bus 11 (PEX3)
> acpiprt7 at acpi0: bus 12 (PEX4)
> acpiprt8 at acpi0: bus 1 (PEX5)
> acpiprt9 at acpi0: bus 2 (PE2P)
> acpiprt10 at acpi0: bus 13 (PEX6)
> acpiprt11 at acpi0: bus 4 (SBEX)
> acpiprt12 at acpi0: bus 15 (COMP)
> acpicpu0 at acpi0
> bios0: ROM list: 0xc/0x9000! 0xc9000/0x5400 0xec000/0x4000!
> ipmi at mainbus0 not configured
> cpu0 at mainbus0
> pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
> pchb0 at pci0 dev 0 function 0 "Intel 5000P Host" rev 0x92
> ppb0 at pci0 dev 2 function 0 "Intel 5000 PCIE" rev 0x92
> pci1 at ppb0 bus 6
> ppb1 at pci1 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
> pci2 at ppb1 bus 7
> ppb2 at pci2 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
> pci3 at ppb2 bus 8
> ppb3 at pci2 dev 1 function 0 "Intel 6321ESB PCIE" rev 0x01: irq 5
> pci4 at ppb3 bus 9
> ppb4 at pci1 dev 0 function 3 "Intel 6321ESB PCIE-PCIX" rev 0x01
> pci5 at ppb4 bus 10
> ppb5 at pci0 dev 3 function 0 "Intel 5000 PCIE" rev 0x92
> pci6 at ppb5 bus 11
> ppb6 at pci0 dev 4 function 0 "Intel 5000 PCIE" rev 0x92
> pci7 at ppb6 bus 12
> ppb7 at pci0 dev 5 function 0 "Intel 5000 PCIE" rev 0x92
> pci8 at ppb7 bus 1
> ppb8 at pci8 dev 0 function 0 "Intel IOP333 PCIE-PCIX" rev 0x00
> pci9 at ppb8 bus 2
> mfi0 at pci9 dev 14 function 0 "Dell PERC 5" rev 0x00: irq 6, 0x1f031028
> mfi0: logi

Rentabilize o seu negócio invista em publicidade

[Sadoprint]

Empresa Lmder na Produgco de Cartues de Visita

Cartues de Visita 4/0 Cores

1000 unidades 59,90 

Folhetos A6 4/0 Cores

1000 unidades 89,90 

Folhetos DL 4/0 Cores

1000 unidades 94,90 

Papiis de Carta 4/0 Cores

1000 unidades 69,90 

Envelopes DL

1000 unidades 89,90 

Autocolantes

1000 unidades 64,90 

A estes valores deve de ser acrescentado o IVA de 20%

Prazo de Entrega 48 Horas

Entregas em todo o Pams

Rapidez | Qualidade | Pregos Imbatmveis

Orgamentos

sadopr...@gmail.com

MisterBabel.com vous offre un iPod - Free iPod

[MisterBabel.com]

Pour jtre s{r de recevoir tous nos emails, ajoutez-nous ` votre carnet
d'adresses.

Si ce mail ne s'affiche pas correctement, suivez ce lien (
http://www.omkg.net/D1/Q22j5jQ/QhyE37rUq/QnJyMcaNmx8.aspx )
MISTERBABEL.COM



Offre estivale   

Summer special offer

Oferta de
verano

Zomeraanbod   



  







   Traduction professionnelle

 Toutes
langues - Tous domaines

 7/24 - Demandez un devis (
mailto:cont...@misterbabel.com?subject=demande%20de%20devis )
Professionnal translation

 Any language - Any subject

 7/24 - Ask for a
quote ( mailto:cont...@misterbabel.com?subject=quote%20request )
Traduccisn profesional

 Todos los idiomas - Todos los campos

 7/24 - Pida un
presupuesto ( mailto:cont...@misterbabel.com?subject=presupuesto )
Professionele vertalingen

 Alle talen - Alle onderwerpen

 7/24 - Vraag een
offerte ( mailto:cont...@misterbabel.com?subject=offerte ) 





 Si
vous ne souhaitez plus recevoir de messages de la part de MisterBabel, cliquez
ici ( http://www.omkg.net/D1/Q22j5jQ/QhyE47bUs/QnJyMcaNmx8.aspx ) 

 click
here ( http://www.omkg.net/D1/Q22j5jQ/QhyEF7dUt/QnJyMcaNmx8.aspx )  to
unsuscribe

 Si no desea seguir recibiendo informacisn de parte de
MisterBabel, pulse aqum (
http://www.omkg.net/D1/Q22j5jQ/QhyED7fUu/QnJyMcaNmx8.aspx ) 

 Klik hier (
http://www.omkg.net/D1/Q22j5jQ/QhyEE7gUv/QnJyMcaNmx8.aspx )  als u geen
berichten meer wilt ontvangen van MisterBabel.

Re: Updates to several OpenBSD hosts

[Joachim Schipper]

On Thu, Jun 25, 2009 at 07:28:58PM +, Stuart Henderson wrote:
> On 2009-06-25, Urban Hillebrand  wrote:
> > Joachim Schipper wrote:
> >> You should create ports from your personalized postfix and clamav
> >> installations, which will make it a lot easier to install them and
> >> ensure you can easily keep all your hosts on an updated version.
> >
> > This is good advice, didn't think about creating my own ports for
> > this.
> 
> in many, but not all, cases, ports from -current will work. even when
> they can't be used directly they will help a lot.
> 
> if you can get all the systems to the same OS revision, consider
> having a package build master which all the machines query for latest
> versions. pkg_add with PKG_PATH=scp://foo/bar/ works nicely and if
> you control the packages going to that location you can consider
> running "pkg_add -u -Fupdate,updatedepends" or similar from cron.

On the same note, PKG_CACHE may be useful for downloaded packages (see
pkg_add(1)). There is no real bandwidth advantage, but it may make
administration easier (you can always just install every updated
package, since it has been tested on the test server where pkg_add was
first run.)

Joachim

P.S. I was somewhat surprised to find pkg_add in section 1 instead of in
8 (especially since e.g. sysmerge is in section 8). If someone has a
spare moment to enlighten me, I would be very grateful.

Re: Updates to several OpenBSD hosts

[Stuart Henderson]

On 2009-06-25, Urban Hillebrand  wrote:
>>
>> You should create ports from your personalized postfix and clamav
>> installations, which will make it a lot easier to install them and
>> ensure you can easily keep all your hosts on an updated version.
>
> This is good advice, didn4t think about creating my own ports for this.

in many, but not all, cases, ports from -current will work. even when
they can't be used directly they will help a lot.

if you can get all the systems to the same OS revision, consider
having a package build master which all the machines query for latest
versions. pkg_add with PKG_PATH=scp://foo/bar/ works nicely and if
you control the packages going to that location you can consider
running "pkg_add -u -Fupdate,updatedepends" or similar from cron.

É Verão...

[Brinde & Companhia]

Se nco conseguir visualizar esta newsletter p.f. clique aqui |   Para
remover o seu email da n/ base de dados clique aqui

Clique na imagem para enviar Pedido de Orgamento

Email enviado para: misc@openbsd.org

O presente email destina-se znica e exclusivamente a informar clientes ou
potenciais clientes brinde-companhia.com e nco deve ser considerado SPAM.
Se inadvertidamente i receptor desta mensagem e nco pretende receber mais
informagues clique aqui ou reenvie-nos este email com o assunto REMOVER.
Deve efectuar o pedido de anulagco pelo enderego de email que se encontra
na nossa base de dados, de outra forma ficaremos impossibilitados de o
fazer.
Este email esta em conformidade com o decreto/lei 67/98 de 26 Outubro,
artigos 10 e 11 (Regulagco do tratamento automatizado de dados).
[IMAGE]

Problem with NFS server performances

[Gregory Colpart]

Hello,

Sum-up:
---

We try to use NFS server in different machines and network
environments and we have very poor performances. Our main test
is creating a big tar archive on local NFS server. With NFS
server on OpenBSD 4.5: speed result is about 500 Kbit/s for NFS
Linux clients, and about 2 Mbit/s for NFS OpenBSD clients.

Details:


Two years ago we deploy a NFS server with OpenBSD 4.0 on DELL
PowerEdge 1900 server (RAID 5 with PERC 5/i on SCSI disks,
Broadcom BCM5708 network card, see dmesg in attachment). NFS
clients are machines on the same local network (Linux, SunOS,
etc.). No problem was reported. We upgrade to 4.1, all was
always right. But after upgrading to 4.2, users begin to be
unhappy during big files transfers or big tarball creations (note
we are not really sure they did these operations before). Then we
try to optimize NFS (trying differents options - tcp/udp for
example - for clients or increasing nfsd number for server) and
change hardware (use another network card, another wires, another
switches). Always very slow... while there are no problem with
SunOS or Linux NFS servers. Moreover connections to OpenBSD NFS
server are often locked with classical messages:
nfs: server FOO not responding, still trying
nfs: server FOO OK
During the creation of a big tarball, nfsd process are often in
run state "D" (disk wait). We verify disk performances but they
are pretty good in local filesystem. We upgrade to 4.3. Same
behaviour. 4.4 too. In another office, we try with a
different machine (see dmesg in attachment) with OpenBSD 4.5 on a
new network environment. It's a little better, but too slow
again.

Example when creating a big tar archive.
With OpenBSD NFS client, it's not too bad:

obsd-nfs-client:/mnt/nfs% du -sh test/
1.5G
obsd-nfs-client:/mnt/nfs% tar cf test.tar test/
during about 1.5 hours...

With Linux NFS client, it's too slow:

linux-nfs-client:/mnt/nfs% du -sh test/
1.5G
linux-nfs-client:/mnt/nfs% tar cf test.tar test/
during about 7 hours...

We are aware some sysadmins use OpenBSD NFS server with success
(we find happy users in openbsd-misc archives). But we don't.
Have you ideas for us ?

Regards,
-- 
Gregory Colpart   GnuPG:1024D/C1027A0E
Evolix - Informatique et Logiciels Libres http://www.evolix.fr/
OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz ("GenuineIntel" 686-class) 1.60 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,TM2,CX16,xTPR
real mem  = 1068400640 (1018MB)
avail mem = 1024663552 (977MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/12/08, BIOS32 rev. 0 @ 0xffe90, SMBIOS 
rev. 2.5 @ 0x3fb9c000 (67 entries)
bios0: vendor Dell Inc. version "2.5.0" date 09/12/2008
bios0: Dell Inc. PowerEdge 1900
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP APIC SPCR HPET MCFG WD__ SLIC ERST HEST BERT EINJ TCPA
acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 6 (PEX2)
acpiprt2 at acpi0: bus 7 (UPST)
acpiprt3 at acpi0: bus 8 (DWN1)
acpiprt4 at acpi0: bus 9 (DWN2)
acpiprt5 at acpi0: bus 10 (PE2X)
acpiprt6 at acpi0: bus 11 (PEX3)
acpiprt7 at acpi0: bus 12 (PEX4)
acpiprt8 at acpi0: bus 1 (PEX5)
acpiprt9 at acpi0: bus 2 (PE2P)
acpiprt10 at acpi0: bus 13 (PEX6)
acpiprt11 at acpi0: bus 4 (SBEX)
acpiprt12 at acpi0: bus 15 (COMP)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0x9000! 0xc9000/0x5400 0xec000/0x4000!
ipmi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 5000P Host" rev 0x92
ppb0 at pci0 dev 2 function 0 "Intel 5000 PCIE" rev 0x92
pci1 at ppb0 bus 6
ppb1 at pci1 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
pci2 at ppb1 bus 7
ppb2 at pci2 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
pci3 at ppb2 bus 8
ppb3 at pci2 dev 1 function 0 "Intel 6321ESB PCIE" rev 0x01: irq 5
pci4 at ppb3 bus 9
ppb4 at pci1 dev 0 function 3 "Intel 6321ESB PCIE-PCIX" rev 0x01
pci5 at ppb4 bus 10
ppb5 at pci0 dev 3 function 0 "Intel 5000 PCIE" rev 0x92
pci6 at ppb5 bus 11
ppb6 at pci0 dev 4 function 0 "Intel 5000 PCIE" rev 0x92
pci7 at ppb6 bus 12
ppb7 at pci0 dev 5 function 0 "Intel 5000 PCIE" rev 0x92
pci8 at ppb7 bus 1
ppb8 at pci8 dev 0 function 0 "Intel IOP333 PCIE-PCIX" rev 0x00
pci9 at ppb8 bus 2
mfi0 at pci9 dev 14 function 0 "Dell PERC 5" rev 0x00: irq 6, 0x1f031028
mfi0: logical drives 1, version 5.2.2-0072, 256MB RAM
scsibus0 at mfi0: 1 targets, initiator 64
sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct fixed
sd0: 475648MB, 60636 cyl, 255 head, 63 sec, 512 bytes/sec, 974127104 sec total
ppb9 at pci8 dev 0 function 2 "Intel IOP333 PCIE-PCIX" rev 0x00
pci10 at ppb9 bus 3
ppb10 at pci0 dev 6 function 0 "Intel 5000 PCIE x8" rev 0x92
pci11 at ppb10 bus 13
p

Re: random crashes on a firewall with OpenBSD 4.5-stable

[Daniel Gracia Garallar]

Oh and maybe bad RAM; I've hit some nasty errors with these faulty 
DIMMs... :/


ComC(te escribiC3:

Hi,

we are using the last OpenBSD 4.5-stable release on an old Compaq 
Proliant ML350 as a firewall with spamd. But we encounter randomly some 
system crashes (once a week or two weeks). The system always displays 
the same message:


uvm_fault (0xd080d9e00x0,0,1) -> e

kernel: page fault trap, code=0

Stopped at cac_pci_l0_intr_pending+0xb
push 0x34 (%eax)

What do you think it could be ? I thought about maybe a hardware problem 
but where exactly...


I join my dmesg below

Thanks for your advice !

OpenBSD 4.5-stable (GENERIC) #9: Sun May 17 22:59:17 CEST 2009
r...@arwen.saintlo.fr:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III CPU family 1266MHz ("GenuineIntel" 
686-class) 1.27 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE 


real mem  = 267988992 (255MB)
avail mem = 250839040 (239MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xf, 
SMBIOS rev. 2.3 @ 0xec000 (31 entries)

bios0: vendor Compaq version "D11" date 01/29/2002
bios0: Compaq ProLiant ML350 G2
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR
acpi0: wakeup devices PBTN(S5)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 3 (boot processor)
cpu0: apic clock running at 132MHz
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 11, 16 pins
ioapic0: misconfigured as apic 0, remapped to apid 8
ioapic1 at mainbus0: apid 2 pa 0xfec01000, version 11, 16 pins
ioapic1: misconfigured as apic 0, remapped to apid 2
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (PCI1)
acpicpu0 at acpi0
acpitz0 at acpi0: critical temperature 31 degC
acpibtn0 at acpi0: PBTN
bios0: ROM list: 0xc/0x8000 0xc8000/0x1800 0xc9800/0x1800 
0xcb000/0x1800 0xcc800/0x4000! 0xd0800/0x1800 0xee000/0x2000!

pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "ServerWorks CNB20LE Host" rev 0x06
pchb1 at pci0 dev 0 function 1 "ServerWorks CNB20LE Host" rev 0x06
pci1 at pchb1 bus 2
em0 at pci1 dev 1 function 0 "Intel PRO/1000T (82544GC)" rev 0x02: apic 
2 int 0 (irq 5), address 00:02:b3:b9:0d:a4
em1 at pci1 dev 2 function 0 "Intel PRO/1000T (82544GC)" rev 0x02: apic 
2 int 2 (irq 15), address 00:02:b3:b9:0d:7d
re0 at pci1 dev 3 function 0 "D-Link Systems DGE-528T" rev 0x10: 
RTL8169/8110SB (0x1000), apic 2 int 4 (irq 15), address 00:1c:f0:6f:38:7e

rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 3
cac0 at pci1 dev 4 function 0 "DEC Compaq SMART RAID 42xx" rev 0x01: 
apic 2 int 6 (irq 11), Smart Array 431

scsibus0 at cac0: 1 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct 
fixed

sd0: 34727MB, 512 bytes/sec, 71122560 sec total
re1 at pci1 dev 5 function 0 "D-Link Systems DGE-528T" rev 0x10: 
RTL8169/8110SB (0x1000), apic 2 int 8 (irq 15), address 00:1c:f0:62:eb:12

rgephy1 at re1 phy 7: RTL8169S/8110S PHY, rev. 3
fxp0 at pci0 dev 1 function 0 "Intel 8255x" rev 0x08, i82559: apic 2 int 
10 (irq 5), address 00:02:a5:44:33:f7

inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
ahc0 at pci0 dev 2 function 0 "Adaptec AHA-3960D U160" rev 0x01: apic 2 
int 11 (irq 11)

scsibus1 at ahc0: 16 targets, initiator 7
ahc1 at pci0 dev 2 function 1 "Adaptec AHA-3960D U160" rev 0x01: apic 2 
int 11 (irq 11)

scsibus2 at ahc1: 16 targets, initiator 7
st0 at scsibus2 targ 6 lun 0:  SCSI2 
1/sequential removable
fxp1 at pci0 dev 4 function 0 "Intel 8255x" rev 0x08, i82559: apic 2 int 
13 (irq 10), address 00:08:02:45:29:64

inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
vga1 at pci0 dev 5 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Compaq Netelligent ASMC" rev 0x00 at pci0 dev 6 function 0 not configured
piixpm0 at pci0 dev 15 function 0 "ServerWorks CSB5" rev 0x92: polling
iic0 at piixpm0
iic0: addr 0x28 00=a0 01=10 02=03 03=01 04=7f 05=04 06=03 07=00 08=00 
09=00 0b=00 0c=03 0d=41 0e=02 0f=00 10=00 11=05 18=3a 19=10 20=ff 21=ff 
28=00 29=00 2a=04 2b=00 2c=00 2d=00 2e=00 30=00 31=00 32=00 38=00 39=00 
3a=00 3b=00 3c=00 3d=00 3e=00 40=08 41=08 42=80 48=03 49=03 4a=03 50=00 
51=80 58=00 59=00 60=f0 61=f0 68=af 69=af 70=ff 71=00 78=ff 79=ff 80=2b 
81=37 82=ff 88=f0 89=f0 8a=f0 90=3c 91=46 92=ff 98=37 99=41 9a=ff a0=22 
a1=2d a2=80 a8=ff a9=ff b0=00 b1=00 b8=06 b9=00 words 00=a0a0 01=1010 
02=0303 03=0101 04=7f7f 05=0404 06=0303 07=

spdmem0 at iic0 addr 0x50: 256MB SDRAM registered ECC PC133CL2
pciide0 at pci0 dev 15 function 1 "ServerWorks CSB5 IDE" rev 0x92: DMA
atapiscsi0 at pciide0 channel 0 drive 0
scsibus3 at atapiscsi0: 2 targets
cd0 at scsibus3 targ 0 lun 0:  ATAPI 5/cdrom 
removable

cd0(pciide0:0:0): using PIO mode 4, DMA mode 2
ohci0 at pci0 dev 15 function 2 "ServerWorks OSB4/CSB5 USB" rev 0x05: 
apic 8 int 10 (irq 10), version 1.0, legacy support

pchb2 at pci0 

random crashes on a firewall with OpenBSD 4.5-stable

[Comète]

Hi,

we are using the last OpenBSD 4.5-stable release on an old Compaq 
Proliant ML350 as a firewall with spamd. But we encounter randomly some 
system crashes (once a week or two weeks). The system always displays 
the same message:


uvm_fault (0xd080d9e00x0,0,1) -> e

kernel: page fault trap, code=0

Stopped at cac_pci_l0_intr_pending+0xb
push 0x34 (%eax)

What do you think it could be ? I thought about maybe a hardware problem 
but where exactly...


I join my dmesg below

Thanks for your advice !

OpenBSD 4.5-stable (GENERIC) #9: Sun May 17 22:59:17 CEST 2009
r...@arwen.saintlo.fr:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III CPU family 1266MHz ("GenuineIntel" 
686-class) 1.27 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

real mem  = 267988992 (255MB)
avail mem = 250839040 (239MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xf, 
SMBIOS rev. 2.3 @ 0xec000 (31 entries)

bios0: vendor Compaq version "D11" date 01/29/2002
bios0: Compaq ProLiant ML350 G2
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR
acpi0: wakeup devices PBTN(S5)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 3 (boot processor)
cpu0: apic clock running at 132MHz
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 11, 16 pins
ioapic0: misconfigured as apic 0, remapped to apid 8
ioapic1 at mainbus0: apid 2 pa 0xfec01000, version 11, 16 pins
ioapic1: misconfigured as apic 0, remapped to apid 2
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (PCI1)
acpicpu0 at acpi0
acpitz0 at acpi0: critical temperature 31 degC
acpibtn0 at acpi0: PBTN
bios0: ROM list: 0xc/0x8000 0xc8000/0x1800 0xc9800/0x1800 
0xcb000/0x1800 0xcc800/0x4000! 0xd0800/0x1800 0xee000/0x2000!

pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "ServerWorks CNB20LE Host" rev 0x06
pchb1 at pci0 dev 0 function 1 "ServerWorks CNB20LE Host" rev 0x06
pci1 at pchb1 bus 2
em0 at pci1 dev 1 function 0 "Intel PRO/1000T (82544GC)" rev 0x02: apic 
2 int 0 (irq 5), address 00:02:b3:b9:0d:a4
em1 at pci1 dev 2 function 0 "Intel PRO/1000T (82544GC)" rev 0x02: apic 
2 int 2 (irq 15), address 00:02:b3:b9:0d:7d
re0 at pci1 dev 3 function 0 "D-Link Systems DGE-528T" rev 0x10: 
RTL8169/8110SB (0x1000), apic 2 int 4 (irq 15), address 00:1c:f0:6f:38:7e

rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 3
cac0 at pci1 dev 4 function 0 "DEC Compaq SMART RAID 42xx" rev 0x01: 
apic 2 int 6 (irq 11), Smart Array 431

scsibus0 at cac0: 1 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct fixed
sd0: 34727MB, 512 bytes/sec, 71122560 sec total
re1 at pci1 dev 5 function 0 "D-Link Systems DGE-528T" rev 0x10: 
RTL8169/8110SB (0x1000), apic 2 int 8 (irq 15), address 00:1c:f0:62:eb:12

rgephy1 at re1 phy 7: RTL8169S/8110S PHY, rev. 3
fxp0 at pci0 dev 1 function 0 "Intel 8255x" rev 0x08, i82559: apic 2 int 
10 (irq 5), address 00:02:a5:44:33:f7

inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
ahc0 at pci0 dev 2 function 0 "Adaptec AHA-3960D U160" rev 0x01: apic 2 
int 11 (irq 11)

scsibus1 at ahc0: 16 targets, initiator 7
ahc1 at pci0 dev 2 function 1 "Adaptec AHA-3960D U160" rev 0x01: apic 2 
int 11 (irq 11)

scsibus2 at ahc1: 16 targets, initiator 7
st0 at scsibus2 targ 6 lun 0:  SCSI2 
1/sequential removable
fxp1 at pci0 dev 4 function 0 "Intel 8255x" rev 0x08, i82559: apic 2 int 
13 (irq 10), address 00:08:02:45:29:64

inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
vga1 at pci0 dev 5 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Compaq Netelligent ASMC" rev 0x00 at pci0 dev 6 function 0 not configured
piixpm0 at pci0 dev 15 function 0 "ServerWorks CSB5" rev 0x92: polling
iic0 at piixpm0
iic0: addr 0x28 00=a0 01=10 02=03 03=01 04=7f 05=04 06=03 07=00 08=00 
09=00 0b=00 0c=03 0d=41 0e=02 0f=00 10=00 11=05 18=3a 19=10 20=ff 21=ff 
28=00 29=00 2a=04 2b=00 2c=00 2d=00 2e=00 30=00 31=00 32=00 38=00 39=00 
3a=00 3b=00 3c=00 3d=00 3e=00 40=08 41=08 42=80 48=03 49=03 4a=03 50=00 
51=80 58=00 59=00 60=f0 61=f0 68=af 69=af 70=ff 71=00 78=ff 79=ff 80=2b 
81=37 82=ff 88=f0 89=f0 8a=f0 90=3c 91=46 92=ff 98=37 99=41 9a=ff a0=22 
a1=2d a2=80 a8=ff a9=ff b0=00 b1=00 b8=06 b9=00 words 00=a0a0 01=1010 
02=0303 03=0101 04=7f7f 05=0404 06=0303 07=

spdmem0 at iic0 addr 0x50: 256MB SDRAM registered ECC PC133CL2
pciide0 at pci0 dev 15 function 1 "ServerWorks CSB5 IDE" rev 0x92: DMA
atapiscsi0 at pciide0 channel 0 drive 0
scsibus3 at atapiscsi0: 2 targets
cd0 at scsibus3 targ 0 lun 0:  ATAPI 5/cdrom 
removable

cd0(pciide0:0:0): using PIO mode 4, DMA mode 2
ohci0 at pci0 dev 15 function 2 "ServerWorks OSB4/CSB5 USB" rev 0x05: 
apic 8 int 10 (irq 10), version 1.0, legacy support

pchb2 at pci0 dev 15 function 3 "ServerWorks CSB5 LPC" rev 0x00
usb0 at ohci0: USB revision 1.0
uhub0 at usb0 "ServerWo

Recomendo-lhe o comsualicenca.com

[jorgealmeida]

 
Ola!, Esta i uma mensagem do seu amigo, Jorge Almeida, que ja esta a
beneficiar das vantagens do comsualicenga.com,

Convido-o a registar-se gratuitamente no comsualicenca.com onde alim de
GANHAR DINHEIRO lendo e-mails ou mensagens SMS relativos `s suas areas
de interesse, tambim gozara de excelentes ofertas e promogues
comerciais, que lhe permitirco POUPAR dinheiro, e podera MULTIPLICAR os
seus ganhos recomendando o servigo aos seus amigos.

Registe-se ja clicando neste link
http://www.comsualicenca.com/registrar.asp?ref=jorgealme...@netvisao.pt
!

Espero que em breve adira a este servigo.
Cumprimentos,

Jorge Almeida atravis da equipa de comsualicenca.com
comsualicenca.com i uma marca registada de Iniciativas Virtuales, S.A.

Re: Updates to several OpenBSD hosts

[Urban Hillebrand]

Hi,

On Wed, Jun 24, 2009 at 10:13:21AM +0200, Joachim Schipper wrote:
[...]
> If you want to go the whole hog, cfengine/puppet may be useful. But
> you're likely content to just keep a single configuration up to date,
> in
> which case simpler measures may suffice.

I plan to look into cfengine (didn4t know about puppet, thx) - however,
I think configuration files are not a problem. Changes there are always
documented and everything is backed up on a central location,  so it
will be
easy to do this manually.

> You can use release(8) to construct updated tarballs for the base
> system. Create these on a secure system, sftp them to anywhere you
> need,
> and unpack. Binary patches are possible, but probably more effort than
> they're worth for a comparatively small setup like yours.

Ok.

> I'd be inclined to go with snapshots, but you'll need to follow the
> process at least a little and test at least a little. On the other
> hand,
> if you go with -stable, you should make sure your ports are kept up to
> date, which isn't guaranteed.

This is the reason why I plan to look into snapshots at all. I got into
quite a mess with my mixture between stable OS, and newer versions of
programs (like ClamAV, which needs frequent updates). I guess snapshots
will keep everything in sync.

> Remote upgrades should be possible in either case.
>
> You can use sysmerge to check for and resolve differences between the
> installed files and the etcXY.tgz and xetcXY.tgz files. This is very
> useful when upgrading systems.
> As for keeping the configuration in sync, you may want to consider
> your
> favourite version control system. You will, obviously, need some
> per-host customizations: these may be best represented as branches. Or
> not.
>
> You should create ports from your personalized postfix and clamav
> installations, which will make it a lot easier to install them and
> ensure you can easily keep all your hosts on an updated version.

This is good advice, didn4t think about creating my own ports for this.

> Otherwise, it seems pretty sensible. You might be better off if you
> could convince those organizations to trust in a single mailhost run
> by
> you, though.

This is not an option unfortunatly, however, the different mail
configurations were never a problem.

Thanks for your advice, really appreciated!

Urban

Re: assigning more than 493 MB memory for qemu virtual machines

[Siju George]

On Wed, Jun 24, 2009 at 5:05 PM,  wrote:
> ulimit -a
>

Thankyou so much for all who replied i changed the values

  :datasize-max=2048M:\
  :datasize-cur=2048M:\

under default:\ in /etc/login.conf

and it works :-)

--Siju

m_abook_query and lbdb

[Michael]

Is there a reason m_abook_query is not part of lbdb for openbsd or was
it an oversight?
I'm using 4.5-stable.
Thanks.

Re: spamd nixspam.gz not found

[Rod Whitworth]

On Thu, 25 Jun 2009 10:26:48 +0200, Peter N. M. Hansteen wrote:

>or did I thoroughly miss a clue?

No.  did. I forgot (until reading your note) that pkg_add mentioned
using that capability some time in the past.

I tried doing ftp to the page (must have been some trace of memory
there) but omitted the http:// prefix.

Thanx for the heads up.
R/
PS: Will I see you at EuroBSD Con this year?
*** NOTE *** Please DO NOT CC me. I  subscribed to the list.
Mail to the sender address that does not originate at the list server is 
tarpitted. The reply-to: address is provided for those who feel compelled to 
reply off list. Thankyou.

Rod/
/earth: write failed, file system is full
cp: /earth/creatures: No space left on device

pflow question/problem

[Artem Teslenko]

Hi there!

Please assist in resolve following problem:

I've users network which using internet via openbsd gateway with
configured pptp and pflow

Scheme:

INTERNET <-> | PPTPD + PFLOW OpenBSD gw| <-> |Clients network|

pflow interface configured for sending netflow packets to another system
with billing software.
Problem in next: pflow does not send any netflow packets until user
connection not have state TIME_WAIT:TIME_WAIT

Example:
1. User starts to download a big file:
all tcp x.x.x.x:80 <- 192.168.1.44:60185 ESTABLISHED:ESTABLISHED
[223863667 + 422200] wscale 7  [1510002866 + 6912] wscale 6
age 00:01:04, expires in 24:00:00, 6446:10723 pkts, 360634:15916141
bytes, rule 3, pflow

2. After downloading of file:
all tcp x.x.x.x:80 <- 192.168.1.44:60185 TIME_WAIT:TIME_WAIT
[230697591 + 376248] wscale 7  [1510002867 + 6912] wscale 6
age 00:01:39, expires in 00:01:24, 9234:15482 pkts, 513222:22997533
bytes, rule 3, pflow

Only after action 2 pflow will send netflow packet to billing.
It's possible to send netflow independ of connection state?
Why 'expires' value = 24:00:00 while connection state is
ESTABLISHED:ESTABLISHED?

Thanks a lot. Sorry for english.

Re: spamd nixspam.gz not found

[Peter N. M. Hansteen]

On Thu, Jun 25, 2009 at 04:55:57PM +1000, Rod Whitworth wrote:

> >> /usr/local/bin/wget -q www.openbsd.org/spamd/nixspam.gz
[ snip ]

> to. I'd really rather ftp the file but it is not available that way.

ftp works from here - 

pe...@skapet:~$ ftp http://www.openbsd.org/spamd/nixspam.gz
Trying 129.128.5.191...
Requesting http://www.openbsd.org/spamd/nixspam.gz
100% 
|***|
   255 KB00:03
Successfully retrieved file.

or did I thoroughly miss a clue?

- P

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: spamd nixspam.gz not found

[Rod Whitworth]

Some interspersed new text. IMPORTANT for anybody copying scripts.

On Wed, 24 Jun 2009 05:19:07 -0700, patrick keshishian wrote:

>On Wed, Jun 24, 2009 at 4:33 AM, Rod Whitworth wrote:
>> On Wed, 24 Jun 2009 07:57:16 -0300, Jose Fragoso wrote:
>>
>>>Hi,
>>>
>>>Actually, it is still there. But the format has changed
>>>and spamd is not being able to handle it because the IP
>>>address is now in the second column, like in:
>>>
>>>2009-06-24T12:28+0200 117.199.144.132
>>>
>>>So, for the time being, the best thing to do is to use
>>>wrapper script.
>>>
>>>Regards,
>>>
>>
>> Yep.
>> Some time ago I ran into probs using the okean lists and I recently was
>> bitten by this one.
>>
>> My solution was/is to set up spamd.conf to find those data by using the
>> 'file method'.
>> I do this because a failed fetch leaves the relevant filter without
>> data.
>>
>> So I have cronjobs to fetch the data and format it if necessary, as in:
>> 26 B  B  B 14 B  B  B * B  B  B  * B  B  B  * B  B  B  /root/bin/okean
>> that only needs to be updated once a day as it is slow to change.
>> and:
>> 31 B  B  B * B  B  B  * B  B  B  * B  B  B  * B  B  B  /root/bin/nixpix
>> so that:
>> 37 B  B  B * B  B  B  * B  B  B  * B  B  B  * B  B  B 
>/usr/libexec/spamd-setup
>> works properly.
>>
>> okean:
>> #!/bin/sh
>> ftp -o /var/db/china.txt http://www.okean.com/chinacidr.txt
>> ftp -o /var/db/korea.txt http://www.okean.com/koreacidr.txt
>>

THIS ONE CHANGES:
>> nixpix:
>> #!/bin/sh
>> cd /root/data
>> rm -f nixspam
>> /usr/local/bin/wget -q www.openbsd.org/spamd/nixspam.gz
>> if [ $? -eq 0 ] ; then
>> B  B  B  B gunzip nixspam.gz
>> B  B  B  B cut -d " " -f 2 nixspam >/var/db/nixspam
>> fi
>> exit
The cut line now becomes: 
cut -d " " -f 1 nixspam >/var/db/nixspam
because the format has reverted to having the IP address in the first
field.

>>
>> spamd.conf points at the outputs of those scripts.
>>
>> If any of those fetches fails, the previous data is still in place to
>> maintain spamd when it runs each hour.
>
>Umm... you are explicitly doing and 'rm -f nixspam' in your script before
>wget.

Yes. Note that the operation is taking place in /root/data/ and the
output goes to /var/db/ so I am not killing my list that is used by
spamd-setup. Easy to miss when you didn't write it ;-)
I could have done wget with a -O  I suppose, but I chose not
to. I'd really rather ftp the file but it is not available that way.
>
>--patrick
>
Rod/


*** NOTE *** Please DO NOT CC me. I  subscribed to the list.
Mail to the sender address that does not originate at the list server is 
tarpitted. The reply-to: address is provided for those who feel compelled to 
reply off list. Thankyou.

Rod/
/earth: write failed, file system is full
cp: /earth/creatures: No space left on device