Re: Number of static IP addresses needed for CARP
Jeff Ross jr...@openvistas.net wrote: What can one then use for the IP addresses for the $ext_if of the firewalls? For connection testing. With only one IP assigned to the CARP interface. When it is in BACKUP state you do not have an address on the network and as such you can't check connectivity from the BACKUP host. For me with 25 vlans on production firewalls this is vital. For a home network where IPs cost extra I would not care.
existing mht file format converter ?
Hi, I'm looking for some mht converter that can put a .mht file into pure html files , and also has abilities to handle unicodes .. So anyone know some cool stuffs that could help ? I know opera could read those shits , besides i found this project: http://www.loganowen.com/mht-rip/ It just received segment fault and dead .. would take some time to debug if no better solution came up ;-) Thanks in advance ! -- Best Regards, Aaron Lewis - PGP: 0xDFE6C29E ( http://keyserver.veridis.com ) Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E
Re: 1gbit LAN/NIC performance, queue speed bug?
W dniu 2010-11-18 06:27, Tomas Bodzar pisze: How about output of 'vmstat -i' and screen of default systat (systat vmstat) r...@router-test (/root)# vmstat -i interrupt total rate irq0/clock4836013 100 irq83/em0 2771337 57 irq83/bge0 10 irq81/pciide047900 irq85/ichiic0 1720443 Total 7784185 160 http://erydium.pl/upload/vmstat.gif http://erydium.pl/upload/systat.gif best regards, RLW
Amenitie Solutions UNA EXCELENTE PROMO
200 Cofias para baqo cocidas envasadas en bolsitas de POLIPROPILENO E IMPRESAS CON SU LOGOTIPO + 200 Kit paquelitos tissue (3 paquelitos) IMPRESOS CON SU LOGOTIPO + 200 Vanity Pack (2 discos desmaquillantes,2 hisopos y lima para uqas)IMPRESOS CON SU LOGOTIPO + 500 Etiquetas impresas full color Med oval 35 x 25 mm CON SU LOGOTIPO TOTAL FINAL IVA INCLUIDO $ 476,50 Como siempre nuestras PAGINAS WEB estan a su disposicion . www.jaboncitos.com.ar www.amenities01.com.ar Un Saludo Cordial. Si no desea recibir mas excelentes propuestas por favor RESPONDER CON ASUNTO ( REMOVER ) A ESTA DIRECCION jaboncitosamenit...@yahoo.com.ar
virtualhost and httpd -U output
Good day! I'm OpenBSD's newbie, that live in strange country,called Ukraine. I have an OpenBSD 4.7 and uncomment httpd_flags=. Section VirtualHost in httpd.conf looks like this: ## NameVirtualHost *:80 VirtualHost *:80 ServerAdmin ad...@xxx.com.ua DocumentRoot /var/www/users/xxx.com.ua ServerName xxx.com.ua ServerAlias www.xxx.com.ua CustomLog logs/xxx.com.ua-access_log common ErrorLog logs/xxx.com.ua-error_log # TransferLog |rotatelogs /var/www/logs/xxx.com.ua-access_log 86400 /VirtualHost VirtualHost *:80 ServerAdmin ad...@yyy.com.ua DocumentRoot /var/www/users/yyy.com.ua ServerName yyy.com.ua ServerAlias www.yyy.com.ua CustomLog logs/yyy.com.ua-access_log common ErrorLog logs/yyy.com.ua-error_log /VirtualHost VirtualHost *:80 ServerAdmin ad...@zzz.org.ua DocumentRoot /var/www/users/zzz.org.ua ServerName zzz.org.ua ServerAlias www.zzz.org.ua CustomLog logs/zzz.org.ua-access_log common ErrorLog logs/zzz.org.ua-error_log /VirtualHost ### Everything is fine and each site is open by their domain name in browser from any place, and access/error for each site is loggin in different log-file. But..I want to see something else in httpd -U output that I have: # httpd -U [Thu Nov 18 12:03:19 2010] [warn] VirtualHost *:80 overlaps with VirtualHost *:80, the first has precedence, perhaps you need a NameVirtualHost directive [Thu Nov 18 12:03:19 2010] [warn] VirtualHost *:80 overlaps with VirtualHost *:80, the first has precedence, perhaps you need a NameVirtualHost directive [Thu Nov 18 12:03:19 2010] [warn] NameVirtualHost *:80 has no VirtualHosts What is the trouble? Sorry for bad English. Thanks.
RAMDISK_CD-based MP kernel hangs when activating secondary CPUs (4.8)
We use a custom i386 RAMDISK_CD kernel: basically we add most options from GENERIC and GENERIC.MP. Upgrading from 4.6 to 4.8, this kernel hangs forever after: root on rd0a swap on rd0b dump on rd0b The problem turns out to be MP; activation of the secondary processors. The custom kernel works fine on a single-core machine, and a recompiled kernel without config lines option MULTIPROCESSOR cpu* at mainbus? also works fine everywhere. -- The problem can be reproduced by simply adding those two MP config lines to the standard RAMDISK_CD kernel config. -- Experiments with adding printf()s on a Dell 1950 (2 CPUs, 8 cores) suggest that the hang happens during: cpu_boot_secondary(cpu_info[2]) pmap_tlb_shootrange() i386_fast_ipi() But treat that as an inconclusive hint: we don't know whether the printf()s are 100% reliable, and VirtualBox (2 CPU, IOAPIC) seems to make it past that point and hang somewhere after init_main() has entered its intentional infinite waiting loop, and another computer (Core 2 Duo) doesn't hang but reboots immediately around that point. -- Are we overlooking an option/driver that's needed for MP on i386? Or is this a kernel regression from 4.6 -- 4.8? +++chefren
Re: virtualhost and httpd -U output
You probably have another NameVirtualHost *:80 directive set in another included config file. You can also check http://httpd.apache.org/docs/2.2/vhosts/name-based.html for more information.
Re: Number of static IP addresses needed for CARP
On 2010-11-18, Jan Johansson janj+open...@wenf.org wrote: Jeff Ross jr...@openvistas.net wrote: What can one then use for the IP addresses for the $ext_if of the firewalls? For connection testing. With only one IP assigned to the CARP interface. When it is in BACKUP state you do not have an address on the network and as such you can't check connectivity from the BACKUP host. For me with 25 vlans on production firewalls this is vital. For a home network where IPs cost extra I would not care. Also useful when you want to connect out externally from whichever firewall isn't master. (e.g. dns lookups, ntp, fixing problems from remote locations...)
softraid - best practice?
Just had a problem with softraid on a 4.6 box. No, I don't ask to solve it, it needed urgent replacement, and so I did. What I would like to ask for, is advice on best practices for softraid under OpenBSD, to prevent similar things from happening again; getting hints on how to set it up better, and mostly: how to recover it better. What happened, was that some slices in a softraid simply went away after some power surge. In detail: sd1 and sd2 were set to RAID, and the ensuing RAID1 (sd3) sliced up into a number of /usr/, /var, /home/, /var/www, /var/mail, swap. After the reboot after a power surge, two of the slices (/var/mail, sd3g and /home, sd3h) were simply unavailable, couldn't be 'mount -a'-ed at reboot, and the system fell back to '/' only being mounted (on sd0). Strangely, though, disklabel sd3 showed the slices, as sd3g, sd3h. But they could not be accessed at all; and were not visible under /dev/. Still, an unexpected bahaviour as far as I am concerned, even more so since sysctl and bioctl showed an 'OK' and 'Online' softraid. I tried a few things, like fsck_ffs on these two disappeared slices, as well as the 'good' ones. The good ones were good, also with fsck_ffs -f. But the two gone missing were just not available (as devices). Then I made, I guess, a big mistake, and instead of ripping out one of the drives, I bioctl -d -ed sd3; leaving 2 drives with RAID file system on them. Over. Now, please, any suggestions on how to do better next time something like this happens? Thanks in advance, Uwe
ALIX CF card
I installed 4.7 to a CF card via usb connector on HP D530. I then inserted CF card into a new ALIX system with serial console. Boot process hangs with both bsd.sp and bsd.rd (see below). What is my next step in determining the problem here? PC Engines ALIX.2 v0.99h 640 KB Base Memory 261120 KB Extended Memory 01F0 Master 044A ULTIMATE CF CARD 16GB Phys C/H/S 16383/16/63 Log C/H/S 1856/255/63 LBA Using drive 0, partition 3. Loading... probing: pc0 com0 com1 pci mem[640K 255M a20=on] disk: hd0+ OpenBSD/i386 BOOT 3.02 boot boot bsd.rd booting hd0a:bsd.rd: 5864788+916112 [52+221040+208132]=0x6e0600 entry point at 0x200120
Re: 1gbit LAN/NIC performance, queue speed bug?
this is very illuminating. it says that initially, tcp send/receive window is your bottleneck. when you increase them to 131072, the cpu becomes your bottleneck and remains that way no matter what else you tweak (idle drops to 0.0% and stays there). the next question is, of course, why is your cpu spending all its time in system and interrupt? is it doing unnecessary work, or is the work necessary and your cpu just isn't fast enough? I don't have ready answers to these questions. -ken Hello, I see, that while I am testing network speed by iperf, 100% CPU is being used, but is that normal for default install of OpenBSD 4.8 with default pf.conf?? I have second computer exactly like that one (IBM ThinkCentre A51P), on which i am running this tests but with P4 3Ghz CPU 2mb cache (not celeron 2.8) and the same is happening (100% CPU). LAN interface is Intel PRO/1000 PT Desktop Adapter (PCIe, model: EXPI9300PTBLK) and this is the only pcie adapter in computer (maybe broadcom integrated nic is also pcie but is not used) So the conclusion might be: - there is problem with my Intel NIC model/cheapset - there is problem with em driver - there is problem with my hardware (I need serwer motherboard with pcie and pci 64bit 66mhz) - I need faster CPU than P4 3GHz ?? or - there is a problem with iperf :) How about measuring with something else? Did you try tcpbench? Or something even simpler, like scp-ing from /dev/null to /dev/null? With pf and queues enabled you can monitor the B/S rate.
Re: softraid - best practice?
On Thursday 18 November 2010, Uwe Dippel wrote: Just had a problem with softraid on a 4.6 box. No, I don't ask to solve it, it needed urgent replacement, and so I did. What I would like to ask for, is advice on best practices for softraid under OpenBSD, to prevent similar things from happening again; getting hints on how to set it up better, and mostly: how to recover it better. What happened, was that some slices in a softraid simply went away after some power surge. In detail: sd1 and sd2 were set to RAID, and the ensuing RAID1 (sd3) sliced up into a number of /usr/, /var, /home/, /var/www, /var/mail, swap. After the reboot after a power surge, two of the slices (/var/mail, sd3g and /home, sd3h) were simply unavailable, couldn't be 'mount -a'-ed at reboot, and the system fell back to '/' only being mounted (on sd0). Strangely, though, disklabel sd3 showed the slices, as sd3g, sd3h. But they could not be accessed at all; and were not visible under /dev/. The /dev directory is not automatically populated - if sd3g and sd3h were not present then it sounds like you were missing device nodes. Running MAKEDEV for sd3 would have probably resolved this. Still, an unexpected bahaviour as far as I am concerned, even more so since sysctl and bioctl showed an 'OK' and 'Online' softraid. This means that the softraid metadata was intact and that the volume was correctly assembled. I tried a few things, like fsck_ffs on these two disappeared slices, as well as the 'good' ones. The good ones were good, also with fsck_ffs -f. But the two gone missing were just not available (as devices). Then I made, I guess, a big mistake, and instead of ripping out one of the drives, I bioctl -d -ed sd3; leaving 2 drives with RAID file system on them. Over. The `bioctl -d` command is non-destructive for softraid - it will detach the softraid volume and you should be able to reconstruct it again with `bioctl -c`. Now, please, any suggestions on how to do better next time something like this happens? Without further information it is hard to tell what has actually occurred - if you have indeed lost device nodes then it is likely that fsck reported that it made corrections to sd0a (possibly even after it asked you to confirm those changes). Regardless of any hardware or software RAID you will still potentially face filesystem level problems with sudden power outages - the best solution is probably to get yourself a good UPS. -- Stop assuming that systems are secure unless demonstrated insecure; start assuming that systems are insecure unless designed securely. - Bruce Schneier
Re: openbsd 4.8 CD
Just to let know that i had a contact and they send me again the cd and the mug (the first shipping was lost). have a great day everyone - Mail Original - De: secucatc...@free.fr C: misc@openbsd.org EnvoyC): Mercredi 17 Novembre 2010 11h45:39 GMT +01:00 Amsterdam / Berlin / Berne / Rome / Stockholm / Vienne Objet: openbsd 4.8 CD hi everyone does people have some problem with the shipping of obsd 4.8 cd with openbsdeurope ? i order the cd and the mug, i received a mail that the shipping was dispatched in october. I hadn't receive anything, and they still don't answer my emails. Thanks
Re: ALIX CF card
http://tothelasttribe.com/blog/2009/04/building-a-firewall-pfsense-on-an-alix-2d3/ http://blog.innerewut.de/2005/05/14/openbsd-3-7-on-wrap On 16:24 Thu 18 Nov , Sergey Bronnikov wrote: it is not a hang. Just disabled output to serial console. You should add lines: set tty com0 stty com0 57600 to /etc/boot.conf On 07:31 Thu 18 Nov , Frank Bax wrote: I installed 4.7 to a CF card via usb connector on HP D530. I then inserted CF card into a new ALIX system with serial console. Boot process hangs with both bsd.sp and bsd.rd (see below). What is my next step in determining the problem here? PC Engines ALIX.2 v0.99h 640 KB Base Memory 261120 KB Extended Memory 01F0 Master 044A ULTIMATE CF CARD 16GB Phys C/H/S 16383/16/63 Log C/H/S 1856/255/63 LBA Using drive 0, partition 3. Loading... probing: pc0 com0 com1 pci mem[640K 255M a20=on] disk: hd0+ OpenBSD/i386 BOOT 3.02 boot boot bsd.rd booting hd0a:bsd.rd: 5864788+916112 [52+221040+208132]=0x6e0600 entry point at 0x200120 -- sergeyb@ -- sergeyb@
Re: ALIX CF card
What is your serial setup? you user cu(1)? On 11/18/10 09:31, Frank Bax wrote: I installed 4.7 to a CF card via usb connector on HP D530. I then inserted CF card into a new ALIX system with serial console. Boot process hangs with both bsd.sp and bsd.rd (see below). What is my next step in determining the problem here? PC Engines ALIX.2 v0.99h 640 KB Base Memory 261120 KB Extended Memory 01F0 Master 044A ULTIMATE CF CARD 16GB Phys C/H/S 16383/16/63 Log C/H/S 1856/255/63 LBA Using drive 0, partition 3. Loading... probing: pc0 com0 com1 pci mem[640K 255M a20=on] disk: hd0+ OpenBSD/i386 BOOT 3.02 boot boot bsd.rd booting hd0a:bsd.rd: 5864788+916112 [52+221040+208132]=0x6e0600 entry point at 0x200120 -- Sending from my Computer.
Re: ALIX CF card
it is not a hang. Just disabled output to serial console. You should add lines: set tty com0 stty com0 57600 to /etc/boot.conf On 07:31 Thu 18 Nov , Frank Bax wrote: I installed 4.7 to a CF card via usb connector on HP D530. I then inserted CF card into a new ALIX system with serial console. Boot process hangs with both bsd.sp and bsd.rd (see below). What is my next step in determining the problem here? PC Engines ALIX.2 v0.99h 640 KB Base Memory 261120 KB Extended Memory 01F0 Master 044A ULTIMATE CF CARD 16GB Phys C/H/S 16383/16/63 Log C/H/S 1856/255/63 LBA Using drive 0, partition 3. Loading... probing: pc0 com0 com1 pci mem[640K 255M a20=on] disk: hd0+ OpenBSD/i386 BOOT 3.02 boot boot bsd.rd booting hd0a:bsd.rd: 5864788+916112 [52+221040+208132]=0x6e0600 entry point at 0x200120 -- sergeyb@
Re: virtualhost and httpd -U output
Adam M. Dutko P?P8QP5Q: You probably have another NameVirtualHost *:80 directive set in another included config file. You can also check http://httpd.apache.org/docs/2.2/vhosts/name-based.html for more information. I check httpd.conf and can't find another NameVirtualHost *:80 directive, and another files with that directive. but I have commented #DocumentRoot /var/www/htdocs and #ServerName xxx.com.ua directives and nothing change in httpd-U output command.
Re: RAMDISK_CD-based MP kernel hangs when activating secondary CPUs (4.8)
On Thu, Nov 18, 2010 at 12:08:11PM +0100, chefren wrote: We use a custom i386 RAMDISK_CD kernel: basically we add most options from GENERIC and GENERIC.MP. Upgrading from 4.6 to 4.8, this kernel hangs forever after: root on rd0a swap on rd0b dump on rd0b The problem turns out to be MP; activation of the secondary processors. The custom kernel works fine on a single-core machine, and a recompiled kernel without config lines option MULTIPROCESSOR cpu* at mainbus? also works fine everywhere. -- The problem can be reproduced by simply adding those two MP config lines to the standard RAMDISK_CD kernel config. It is likely that this is an 'option SMALL_KERNEL' interaction, however realize this is a configuration that OpenBSD isn't likely to support. Dale Rahn dr...@dalerahn.com
Re: RAMDISK_CD-based MP kernel hangs when activating secondary CPUs (4.8)
On 18-11-10 15:33, Dale Rahn wrote: It is likely that this is an 'option SMALL_KERNEL' interaction, Thank you for this idea, we will study it carefully. however realize this is a configuration that OpenBSD isn't likely to support. Clear and no problem! +++chefren
Re: snapshot upgrade won't skip fsck
On 11/18/10 06:58, Otto Moerbeek wrote: On Wed, Nov 17, 2010 at 09:48:57PM +, Peter Miller wrote: I upgraded to a more current snapshot the other day and after fsck ran on the root partition, it asked if i wanted to fsck the other partitions. I typed no, but it ran anyways, causing a failure and therefore aborting the install because some disks were missing. I have 2 usb hard drives in my /etc/fstab. I don't have these drives with me all the time, and had them unplugged during my upgrade (so i didn't inadvertently install to one of them). I tried to upgrade a couple times, but i have to comment out my usb drives before i can successfully run the upgrade. The upgrade asked me whether or not I wanted to fsck the other partitions, so i figure it should at least obey my answer. OpenBSD 4.8-current (GENERIC.MP) #627: Fri Nov 12 23:00:53 MST 2010 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP relevant section of fstab i commented out in order to upgrade # my drives 5dbd5372ca23d268.d /mnt/Dane ffs rw,nodev,nosuid,softdep 0 0 93b2b19e02be3f39.d /mnt/Cook ffs rw,nodev,nosuid,softdep 0 0 -- Later Peter The installer only asks if you want to do a *forced* fsck ora non-forced. The fsck is always done for all devices in fstab. The only differences is whether -y is used or not. -Otto That makes sense now, thanks. The wording just leaves some room for interpretation. I really thought it was a choice to fsck or not, instead of a choice to run fsck with the -y option or not. Peter, I looked into 'noauto' but i prefer to have my drives auto-mounted the 95% of the time i'm using my computer vs the few times i do an upgrade. I'll just comment them out.. easy enough. -- Later Peter
em(4) detailed errors
Hi, Is there a way to get detailed em(4) device errors without having to recompile kernel with EM_DEBUG ? I try to find in-errors reason(s) but netstat only gives errors as a sum of dropped_pkts + stats.rxerrc + stats.crcerrs + sc-stats.algnerrc +... as far as I can see :-( Manuel
Re: 1gbit LAN/NIC performance, queue speed bug?
W dniu 2010-11-18 13:42, Schvberle Daniel pisze: So the conclusion might be: - there is problem with my Intel NIC model/cheapset - there is problem with em driver - there is problem with my hardware (I need serwer motherboard with pcie and pci 64bit 66mhz) - I need faster CPU than P4 3GHz ?? or - there is a problem with iperf :) How about measuring with something else? Did you try tcpbench? Or something even simpler, like scp-ing from /dev/null to /dev/null? With pf and queues enabled you can monitor the B/S rate. there is no tcpbench in packages for 4.8 and for debian linux 1. transferring file by scp from router-test to linux machine: transfer speed: 16.1MB/s ~ 128.8 Mbits/s r...@router-test (/root)# top load averages: 1.59, 1.05, 0.67 28 processes: 2 running, 25 idle, 1 on processor CPU states: 33.3% user, 0.0% nice, 47.9% system, 14.2% interrupt, 4.6% idle Memory: Real: 11M/80M act/tot Free: 405M Swap: 0K/759M used/tot r...@router-test (/root)# systat queue 2 usersLoad 1.49 0.99 0.74 Thu Nov 18 16:27:25 2010 QUEUE BW SCH PR PKTS BYTES DROP_P DROP_B QLEN BORR SUSP P/S B/S root_em0 1000M cbq 0 10M 14G 0 0000 122 17M q_lan950M cbq 10M 14G 0 0000 122 17M 2. transferring file back from linux machine to router-test: transfer speed: 19.9MB/s ~ 159.2 Mbits/s r...@router-test (/root)# top load averages: 1.13, 0.95, 0.69 25 processes: 1 running, 23 idle, 1 on processor CPU states: 40.1% user, 0.0% nice, 33.5% system, 26.3% interrupt, 0.0% idle Memory: Real: 11M/80M act/tot Free: 405M Swap: 0K/759M used/tot 3. as comparison transfer speed between two debian boxes: - tested by iperf: 940 Mbits/sec - transfering file by scp: 42.6MB/s ~ 340.8 Mbits/s top: Tasks: 81 total, 1 running, 80 sleeping, 0 stopped, 0 zombie Cpu(s): 1.8%us, 13.8%sy, 0.0%ni, 79.0%id, 0.0%wa, 1.0%hi, 4.3%si, 0.0%st Mem: 1028836k total, 924868k used, 103968k free,23800k buffers Swap: 1951856k total,51524k used, 1900332k free, 617788k cached best regards RLW
Re: 1gbit LAN/NIC performance, queue speed bug?
2010/11/18 RLW seran...@o2.pl: there is no tcpbench in packages for 4.8 and for debian linux Because it's in base: /usr/bin/tcpbench ciao, david
Re: snapshot upgrade won't skip fsck
On Thu, Nov 18, 2010 at 09:26:55AM +, Peter Miller wrote: On 11/18/10 06:58, Otto Moerbeek wrote: On Wed, Nov 17, 2010 at 09:48:57PM +, Peter Miller wrote: I upgraded to a more current snapshot the other day and after fsck ran on the root partition, it asked if i wanted to fsck the other partitions. I typed no, but it ran anyways, causing a failure and therefore aborting the install because some disks were missing. I have 2 usb hard drives in my /etc/fstab. I don't have these drives with me all the time, and had them unplugged during my upgrade (so i didn't inadvertently install to one of them). I tried to upgrade a couple times, but i have to comment out my usb drives before i can successfully run the upgrade. The upgrade asked me whether or not I wanted to fsck the other partitions, so i figure it should at least obey my answer. OpenBSD 4.8-current (GENERIC.MP) #627: Fri Nov 12 23:00:53 MST 2010 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP relevant section of fstab i commented out in order to upgrade # my drives 5dbd5372ca23d268.d /mnt/Dane ffs rw,nodev,nosuid,softdep 0 0 93b2b19e02be3f39.d /mnt/Cook ffs rw,nodev,nosuid,softdep 0 0 -- Later Peter The installer only asks if you want to do a *forced* fsck ora non-forced. The fsck is always done for all devices in fstab. The only differences is whether -y is used or not. Make that -f -Otto That makes sense now, thanks. The wording just leaves some room for interpretation. I really thought it was a choice to fsck or not, instead of a choice to run fsck with the -y option or not. Peter, I looked into 'noauto' but i prefer to have my drives auto-mounted the 95% of the time i'm using my computer vs the few times i do an upgrade. I'll just comment them out.. easy enough. -- Later Peter
Re: RAMDISK_CD-based MP kernel hangs when activating secondary CPUs (4.8)
On 18-11-10 15:33, Dale Rahn wrote: It is likely that this is an 'option SMALL_KERNEL' interaction, however realize this is a configuration that OpenBSD isn't likely to support. We looked at it and, unfortunately, that can't be the cause. Standard RAMDISK_CD sets that option, but our custom kernel does not. Anyone who has further ideas on this? +++chefren On Thu, Nov 18, 2010 at 12:08:11PM +0100, chefren wrote: We use a custom i386 RAMDISK_CD kernel: basically we add most options from GENERIC and GENERIC.MP. Upgrading from 4.6 to 4.8, this kernel hangs forever after: root on rd0a swap on rd0b dump on rd0b The problem turns out to be MP; activation of the secondary processors. The custom kernel works fine on a single-core machine, and a recompiled kernel without config lines option MULTIPROCESSOR cpu* at mainbus? also works fine everywhere. -- The problem can be reproduced by simply adding those two MP config lines to the standard RAMDISK_CD kernel config.
Re: 1gbit LAN/NIC performance, queue speed bug?
W dniu 2010-11-18 16:52, David Coppa pisze: 2010/11/18 RLWseran...@o2.pl: there is no tcpbench in packages for 4.8 and for debian linux Because it's in base: /usr/bin/tcpbench ciao, david I removed Intel NIC and run test on broadcom integrated Gbit NIC to see if there is problem with em driver bge0 at pci1 dev 11 function 0 Broadcom BCM5705K rev 0x03, BCM5705 A3 (0x3003): apic 1 int 16 (irq 5), address XX:XX:XX:XX:XX:XX brgphy0 at bge0 phy 1: BCM5705 10/100/1000baseT PHY, rev. 2 1. pf enabled, queue 950mbit, qlimit 500 iperf test: 410 Mbits/sec r...@router-test (/root)# top load averages: 0.95, 0.53, 0.26 23 processes: 1 running, 21 idle, 1 on processor CPU states: 1.2% user, 0.0% nice, 84.4% system, 14.4% interrupt, 0.0% idle Memory: Real: 8972K/42M act/tot Free: 443M Swap: 0K/759M used/tot 2. test made between two OpenBSD 4.8 boxes (there is no tcpbench for debian) transfers by tcpbench: Conn: 1 Mbps: 399.972 Peak Mbps: 406.093 Avg Mbps: 399.972 133996 45932008 370.419 100.00% Conn: 1 Mbps: 370.419 Peak Mbps: 406.093 Avg Mbps: 370.419 134999 46833528 373.920 100.00% Conn: 1 Mbps: 373.920 Peak Mbps: 406.093 Avg Mbps: 373.920 136074 43531224 323.953 100.00% Conn: 1 Mbps: 323.953 Peak Mbps: 406.093 Avg Mbps: 323.953 137002 41013960 353.950 100.00% Conn: 1 Mbps: 353.950 Peak Mbps: 406.093 Avg Mbps: 353.950 137996 50500448 406.442 100.00% Conn: 1 Mbps: 406.442 Peak Mbps: 406.442 Avg Mbps: 406.442 r...@router-test (/root)# top (while running tcpbench) load averages: 1.26, 0.80, 0.49 22 processes: 1 running, 20 idle, 1 on processor CPU states: 0.0% user, 0.0% nice, 77.2% system, 15.6% interrupt, 7.2% idle Memory: Real: 8752K/43M act/tot Free: 442M Swap: 0K/759M used/tot r...@router-test (/root)# systat queue (while running tcpbench) 2 usersLoad 0.82 0.69 0.51 Thu Nov 18 17:13:10 2010 QUEUE BW SCH PR PKTS BYTES DROP_P DROP_B QLEN BORR SUSP P/S B/S root_bge01000M cbq 0 7300K 10G 0 0000 314 47M q_lan950M cbq 7300K 10G 0 0000 314 47M Now back on Intel NIC 1. pf enabled, queue 950mbit, qlimit 500 iperf test: 347 Mbits/sec 2. transfers by tcpbench: Conn: 1 Mbps: 328.701 Peak Mbps: 336.374 Avg Mbps: 328.701 29002 41936224 335.490 100.00% Conn: 1 Mbps: 335.490 Peak Mbps: 336.374 Avg Mbps: 335.490 30001 41394096 331.484 100.00% Conn: 1 Mbps: 331.484 Peak Mbps: 336.374 Avg Mbps: 331.484 30999 39930144 320.402 100.00% Conn: 1 Mbps: 320.402 Peak Mbps: 336.374 Avg Mbps: 320.402 32003 42171560 336.363 100.00% Conn: 1 Mbps: 336.363 Peak Mbps: 336.374 Avg Mbps: 336.363 33001 41970888 336.440 100.00% Conn: 1 Mbps: 336.440 Peak Mbps: 336.440 Avg Mbps: 336.440 34002 38258208 305.760 100.00% Conn: 1 Mbps: 305.760 Peak Mbps: 336.440 Avg Mbps: 305.760 r...@router-test (/root)# top (whiel runing tcpbench) load averages: 1.20, 0.59, 0.25 24 processes: 1 running, 22 idle, 1 on processor CPU states: 0.2% user, 0.0% nice, 75.6% system, 21.2% interrupt, 3.0% idle Memory: Real: 8904K/43M act/tot Free: 442M Swap: 0K/759M used/tot r...@router-test (/root)# systat queue (while running tcpbench) 2 usersLoad 0.57 0.54 0.28 Thu Nov 18 17:25:26 2010 QUEUE BW SCH PR PKTS BYTES DROP_P DROP_B QLEN BORR SUSP P/S B/S root_em0 1000M cbq 0 2963K 4381M 0 0000 279 42M q_lan950M cbq 2963K 4381M 0 0000 279 42M so... the same machine, different NIC, different testing programs, same behavior (~50% of defined queue speed, very high CPU usage) the only thing i can try now is moving intel nic and hdd to other computer with pcie slot and run test on it to see is it hardware (motherboard) problem. best regards, RLW
Re: 1gbit LAN/NIC performance, queue speed bug?
On Thu, Nov 18, 2010 at 05:29:41PM +0100, RLW wrote: W dniu 2010-11-18 16:52, David Coppa pisze: 2010/11/18 RLWseran...@o2.pl: there is no tcpbench in packages for 4.8 and for debian linux Because it's in base: /usr/bin/tcpbench ciao, david I removed Intel NIC and run test on broadcom integrated Gbit NIC to see if there is problem with em driver bge0 at pci1 dev 11 function 0 Broadcom BCM5705K rev 0x03, BCM5705 A3 (0x3003): apic 1 int 16 (irq 5), address XX:XX:XX:XX:XX:XX brgphy0 at bge0 phy 1: BCM5705 10/100/1000baseT PHY, rev. 2 1. pf enabled, queue 950mbit, qlimit 500 iperf test: 410 Mbits/sec r...@router-test (/root)# top load averages: 0.95, 0.53, 0.26 23 processes: 1 running, 21 idle, 1 on processor CPU states: 1.2% user, 0.0% nice, 84.4% system, 14.4% interrupt, 0.0% idle Memory: Real: 8972K/42M act/tot Free: 443M Swap: 0K/759M used/tot 2. test made between two OpenBSD 4.8 boxes (there is no tcpbench for debian) transfers by tcpbench: Conn: 1 Mbps: 399.972 Peak Mbps: 406.093 Avg Mbps: 399.972 133996 45932008 370.419 100.00% Conn: 1 Mbps: 370.419 Peak Mbps: 406.093 Avg Mbps: 370.419 134999 46833528 373.920 100.00% Conn: 1 Mbps: 373.920 Peak Mbps: 406.093 Avg Mbps: 373.920 136074 43531224 323.953 100.00% Conn: 1 Mbps: 323.953 Peak Mbps: 406.093 Avg Mbps: 323.953 137002 41013960 353.950 100.00% Conn: 1 Mbps: 353.950 Peak Mbps: 406.093 Avg Mbps: 353.950 137996 50500448 406.442 100.00% Conn: 1 Mbps: 406.442 Peak Mbps: 406.442 Avg Mbps: 406.442 r...@router-test (/root)# top (while running tcpbench) load averages: 1.26, 0.80, 0.49 22 processes: 1 running, 20 idle, 1 on processor CPU states: 0.0% user, 0.0% nice, 77.2% system, 15.6% interrupt, 7.2% idle Memory: Real: 8752K/43M act/tot Free: 442M Swap: 0K/759M used/tot r...@router-test (/root)# systat queue (while running tcpbench) 2 usersLoad 0.82 0.69 0.51 Thu Nov 18 17:13:10 2010 QUEUE BW SCH PR PKTS BYTES DROP_P DROP_B QLEN BORR SUSP P/S B/S root_bge01000M cbq 0 7300K 10G 0 000 0 314 47M q_lan950M cbq 7300K 10G 0 000 0 314 47M Now back on Intel NIC 1. pf enabled, queue 950mbit, qlimit 500 iperf test: 347 Mbits/sec 2. transfers by tcpbench: Conn: 1 Mbps: 328.701 Peak Mbps: 336.374 Avg Mbps: 328.701 29002 41936224 335.490 100.00% Conn: 1 Mbps: 335.490 Peak Mbps: 336.374 Avg Mbps: 335.490 30001 41394096 331.484 100.00% Conn: 1 Mbps: 331.484 Peak Mbps: 336.374 Avg Mbps: 331.484 30999 39930144 320.402 100.00% Conn: 1 Mbps: 320.402 Peak Mbps: 336.374 Avg Mbps: 320.402 32003 42171560 336.363 100.00% Conn: 1 Mbps: 336.363 Peak Mbps: 336.374 Avg Mbps: 336.363 33001 41970888 336.440 100.00% Conn: 1 Mbps: 336.440 Peak Mbps: 336.440 Avg Mbps: 336.440 34002 38258208 305.760 100.00% Conn: 1 Mbps: 305.760 Peak Mbps: 336.440 Avg Mbps: 305.760 r...@router-test (/root)# top (whiel runing tcpbench) load averages: 1.20, 0.59, 0.25 24 processes: 1 running, 22 idle, 1 on processor CPU states: 0.2% user, 0.0% nice, 75.6% system, 21.2% interrupt, 3.0% idle Memory: Real: 8904K/43M act/tot Free: 442M Swap: 0K/759M used/tot r...@router-test (/root)# systat queue (while running tcpbench) 2 usersLoad 0.57 0.54 0.28 Thu Nov 18 17:25:26 2010 QUEUE BW SCH PR PKTS BYTES DROP_P DROP_B QLEN BORR SUSP P/S B/S root_em0 1000M cbq 0 2963K 4381M 0 000 0 279 42M q_lan950M cbq 2963K 4381M 0 000 0 279 42M so... the same machine, different NIC, different testing programs, same behavior (~50% of defined queue speed, very high CPU usage) the only thing i can try now is moving intel nic and hdd to other computer with pcie slot and run test on it to see is it hardware (motherboard) problem. No the problem is altq. Altq(4) was written when 100Mbps was common and people shaped traffic in the low megabit range. It seems to hit a wall when doing hundreds of megabits. Guess someone needs to run a profiling kernel and see where all that time is spent and then optimize altq(4). -- :wq Claudio
OpenBSD EOF characer?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm learning C and this is the program: #include stdio.h main() { double nc; for (nc = 0; gechar() != EOF; ++nc); printf(%.0f\n, nc); } But I just realized I don't know how to do EOF. I tried Ctrl+D but it just ends the program without displaying any output like printf says. How do I properly EOF so that it doesn't end the program but have the particular function read EOF? -BEGIN PGP SIGNATURE- Charset: UTF8 Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 3.0 wpwEAQMCAAYFAkzlWEcACgkQbgTt4mVjs5Oy5AP/eRNnn7XZ/lpd3oD0x2s9/U/6otU1 gy0aGDUCTFG6ReUrWxiR9aheTb11PGXvBjUVu+VlOQ1i2tSGl+rnX/v3Cz72jfkMYTzl V6eglODf0gay2LKrdjMPrv/yyBYhaYN7juWC3bBxtw0Ma+mrFJQ3jZSkvWQrxO6+3s37 nQUgPTc= =BuMa -END PGP SIGNATURE-
Re: 1gbit LAN/NIC performance, queue speed bug?
W dniu 2010-11-18 17:41, Claudio Jeker pisze: No the problem is altq. Altq(4) was written when 100Mbps was common and people shaped traffic in the low megabit range. It seems to hit a wall when doing hundreds of megabits. Guess someone needs to run a profiling kernel and see where all that time is spent and then optimize altq(4). Its nice to hear from OpenBSD developer on this matter. I am wondering who is gonna be that someone? ;) and when it could happen? Claudio can you add this problem as a bug to fix maybe in next release? best regards, RLW
Re: OpenBSD EOF characer?
On Thu, Nov 18, 2010 at 11:45:59AM -0500, Joy Puglisi wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm learning C and this is the program: #include stdio.h main() { double nc; for (nc = 0; gechar() != EOF; ++nc); printf(%.0f\n, nc); } But I just realized I don't know how to do EOF. I tried Ctrl+D but it just ends the program without displaying any output like printf says. How do I properly EOF so that it doesn't end the program but have the particular function read EOF? A Ctrl-D on a new line should (and does) do the job. -Otto
Computadoras Armadas - Diseño - Gamers - Hogar - Oficina y mas..
[IMAGE][IMAGE][IMAGE][IMAGE][IMAGE][IMAGE][IMAGE][IMAGE]En caso de no querer recibir mas este correo por favor presione AQUI .
Re: OpenBSD EOF characer?
On 11/18/10 17:45, Joy Puglisi wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm learning C and this is the program: #includestdio.h main() { double nc; for (nc = 0; gechar() != EOF; ++nc); This doesn't compile. try getchar() and Ctrl-D does the job. printf(%.0f\n, nc); } But I just realized I don't know how to do EOF. I tried Ctrl+D but it just ends the program without displaying any output like printf says. How do I properly EOF so that it doesn't end the program but have the particular function read EOF?
unscribe
Gnome running slow
Hi, I experience a dsktop running quite slow, I have seen it running well sometimes. Gnome is simply slow and I have no idea why, after login, it is not always that slow, sometimes is runs well. Apparently, with top I see Xorg consuming many resources. I have no idea how to solve this. Do you have any experience with this ? Thanks
Re: An OpenBSD smartphone
You're looking at this from a programmer's perspective and not from a business one. let's look at the basic Unix-like/descended systems: All were developed because each founder- or founders- saw a niche, necessity, or challenge. Nokia, Google, and Apple are business entities whose purpose is to create revenue by selling products or services. You're going to wait until 15,000 or more people demand/ask for pf on a smart phone? Neither the mainframe nor the desktop nor the cell phone were created because the public wanted them. Look at advertising and how it works. 1) Create a need for a product by using two or more of the appeals. Culture, society, ethnicity, family, etc. 2) PR is important. If you're a programmer and you want the product out: 1) I'm not sure how ARM is but I do know that the company designs chips. 2) You'll have to build the system and take gtk and qt sources to build on it. What won't sell to the public is the conversations on the mailing lists or between programmers. What will sell are key points such as: 1) It is two to four times faster than other smartphones and uses half of the memory. People like it when extra shit runs smooth on their tablets and phones. 2) It can be used as a router for other devices and still work as a phone. What? I can make a call, browse the web, and still hook up my netbook? 3) The system is stable. Your personal information remains as such. 4) And for the hackers... You can do what you want with it. The programmers are for support, development, and design. Yes, I am a business major. I have experience in selling futures. I am certified in management. You can see this as a business opportunity and a challenge or you can continue as before. Those of you who do have a working understanding of the basic business model will have no trouble following this post.
Re: Number of static IP addresses needed for CARP
-Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Stuart Henderson On 2010-11-18, Jan Johansson janj+open...@wenf.org wrote: Jeff Ross jr...@openvistas.net wrote: What can one then use for the IP addresses for the $ext_if of the firewalls? ... Also useful when you want to connect out externally from whichever firewall isn't master. (e.g. dns lookups, ntp, fixing problems from remote locations...) True, but you can always use ifstated to modify the default gateway on the backup FW to point to the internal address of the active FW. Assuming you have assigned addresses on the physical LAN interfaces. That doesn't help with any sort of remote access to the backup FW, however. As said, it is nice to have IP's on the external interfaces, but not required. -Steve S.
killing states in pf
Hello, Using pf on -current doing nat and I want to kill all of the states related to a specific internal IP address but I'm having an issue doing so. I have as an example (79.39.147.11 is outside IP from ISP): # pfctl -ss |grep '1\.100' all tcp 79.39.147.11:53190 (192.168.1.100:58853) - 67.2.45.22:12510 ESTABLISHED:ESTABLISHED all tcp 79.39.147.11:62777 (192.168.1.100:40664) - 26.217.28.131:25794 ESTABLISHED:ESTABLISHED all tcp 79.39.147.11:58425 (192.168.1.100:39548) - 33.127.87.221:24324 ESTABLISHED:ESTABLISHED None of the wildcard scenarios associated with internal address will kill the above states: pfctl -k 192.168.1.100 -k 0.0.0.0/0 pfctl -k 0.0.0.0/0 -k 192.168.1.100 I can use: pfctl -k 79.39.147.11 -k 67.2.45.22 or: pfctl -k 0.0.0.0/0 -k 67.2.45.22 each connected outside IP address must be specifically specified. Not so bad if it was only 3 addresses but that's not the case. I'm not even quite sure what those states mean - why is the internal address in (). If memory serves (be kind it doesn't always) the old pf had states like: all tcp 192.168.1.100:58853 - 67.2.45.22:12510 all tcp 67.2.45.22:12510 - 192.168.1.100 where the internal address didn't show up in parens, and it was easy to kill all of the states related to a specific internal IP address. It seems that is now impossible (at least I haven't figured it out yet). Thanks for any assistance, Chris
Re: Number of static IP addresses needed for CARP
On Thu, Nov 18, 2010 at 2:15 PM, Steven Surdock ssurd...@engineered-net.com wrote: -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Stuart Henderson On 2010-11-18, Jan Johansson janj+open...@wenf.org wrote: Jeff Ross jr...@openvistas.net wrote: What can one then use for the IP addresses for the $ext_if of the firewalls? ... Also useful when you want to connect out externally from whichever firewall isn't master. (e.g. dns lookups, ntp, fixing problems from remote locations...) True, but you can always use ifstated to modify the default gateway on the backup FW to point to the internal address of the active FW. Assuming you have assigned addresses on the physical LAN interfaces. That doesn't help with any sort of remote access to the backup FW, however. B As said, it is nice to have IP's on the external interfaces, but not required. -Steve S. Or, on both machines you could forward port 3 to the internal port 22 of one firewall and 4 to internal port 22 of the other. That way you could get to either machine but only use one external IP.
Relooker votre site, valoriser votre image !
SIvous n'arrivez paa ` lire ce mail correctement - http://www.nos- realisations.com/entree.htm Refondre, reloocker, refaire. Pour que votre site, votre boutique soient vus autrement. Vous dimarquer en valorisant votre image. Nos rialisations sont nos meilleurs arguments. Voir un apergu de nos refontes Un site Internet, une boutique de qualiti. Une charte graphique unique. Un diveloppement sur mesure, cli en main. En visualisant nos exemples, ayez une idie rielle de leurs qualitis. Voir un apergu de nos rialisations Nous sommes une viritable agence de criations et de conseils, et non pas revendeur de sites Internet pricongus. Toutes nos conceptions et chartes graphiques sont criies par nos infographistes et ridacteurs. Elles vous garantissent ainsi l'originaliti et votre efficaciti sur Internet. Obtenir des renseignements, un devis SIvous n'arrivez paa ` lire ce mail correctement - http://www.nos- realisations.com/entree.htm refontes est iditi par Vonao RCS Paris 482 741 303 * Pour ne plus recevoir ce message cliquer sur le lien suivant: http://www.stat-enreg-1.com/out/desinscrquestion.php? u=79b=Cc=15292m=m...@openbsd.orglng=fr **
Re: OpenBSD EOF characer?
Even should this not be trolling, its still not a very interesting topic for misc@openbsd.org readers. Please ask questions like this elsewhere. /Alexander On 11/18/10 17:45, Joy Puglisi wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm learning C and this is the program: #include stdio.h main() { double nc; for (nc = 0; gechar() != EOF; ++nc); printf(%.0f\n, nc); } But I just realized I don't know how to do EOF. I tried Ctrl+D but it just ends the program without displaying any output like printf says. How do I properly EOF so that it doesn't end the program but have the particular function read EOF? -BEGIN PGP SIGNATURE- Charset: UTF8 Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 3.0 wpwEAQMCAAYFAkzlWEcACgkQbgTt4mVjs5Oy5AP/eRNnn7XZ/lpd3oD0x2s9/U/6otU1 gy0aGDUCTFG6ReUrWxiR9aheTb11PGXvBjUVu+VlOQ1i2tSGl+rnX/v3Cz72jfkMYTzl V6eglODf0gay2LKrdjMPrv/yyBYhaYN7juWC3bBxtw0Ma+mrFJQ3jZSkvWQrxO6+3s37 nQUgPTc= =BuMa -END PGP SIGNATURE-
Re: 1gbit LAN/NIC performance, queue speed bug?
On 2010-11-18, RLW seran...@o2.pl wrote: W dniu 2010-11-18 17:41, Claudio Jeker pisze: No the problem is altq. Altq(4) was written when 100Mbps was common and people shaped traffic in the low megabit range. It seems to hit a wall when doing hundreds of megabits. Guess someone needs to run a profiling kernel and see where all that time is spent and then optimize altq(4). Its nice to hear from OpenBSD developer on this matter. I am wondering who is gonna be that someone? ;) and when it could happen? The someone running a profiling kernel to identify the hot spots could be you. cd /sys/arch/arch/config config -p kernelname build a kernel from the ../compile/kernelname.PROF directory in the usual way kgmon -b to start profiling (generate some traffic) kgmon -h to stop profiling kgmon -p to dump stats gprof /bsd gmon.out to read stats... Assuming you're interested in routed traffic (rather than queuing traffic generated on a box itself), make sure you run the traffic source and sink on other machines routing through the altq box, don't source/sink traffic on the altq box itself.
Book of PF 2nd Ed. Kindle edition validity
Hi, I just wanted to confirm if the Kindle edition for Book of PF (2nd ed.) available on Amazon is a valid one, since the reviews in there are for the 1st ed, and there's no information about it on the OpenBSD website. Hope someone could confirm this. Thanks.
Re: Book of PF 2nd Ed. Kindle edition validity
On Fri, Nov 19, 2010 at 12:04:34PM +0530, Mohit Chawla wrote: I just wanted to confirm if the Kindle edition for Book of PF (2nd ed.) available on Amazon is a valid one, since the reviews in there are for the 1st ed, and there's no information about it on the OpenBSD website. Hope someone could confirm this. Just buy the ebook from oreilly.com - the have epub, mobi and pdf. The mobi file works fine with the Kindle (and is indeed the 2nd edition). Best, oxo