7 Factores de Éxito para Ejecutivos de Clase Mundial, 25 de Enero 2011 en D.F.
[IMAGE] !Promociones Especiales para grupos! Coach Ejecutivo: Mtro. Gerardo Coronado Lspez. Pms Capacitacisn Efectiva de Mixico presenta: 7 Factores de Ixito para ejecutivos de Clase Mundial Experto Consultor Mtro. Gerardo Coronado Lspez Empresa Registrada ante la STPS Reg. COLG640205CP30005 Smguenos en twit...@pmscapacitacion o bien en Facebook PMS de Mixico Mayores informes responda este correo electrsnico con los siguientes datos. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: Y en breve le haremos llegar la informacisn completa del evento. O bien comunmquense a nuestros telifonos un ejecutivo con gusto le atendera Tels. (33) 8851-2365, (33)8851-2741. Copyright (C) 2010, PMS Capacitacisn Efectiva de Mixico S.C. Derechos Reservados. PMS de Mixico, El logo de PMS de Mixico son marcas registradas. ADVERTENCIA PMS de Mixico no cuenta con alianzas estratigicas de ningzn tipo dentro de la Republica Mexicana. NO SE DEJE ENGAQAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas comerciales e imagenes son propiedad de sus respectivas corporaciones y se utilizan con fines informativos solamente. Este Mensaje ha sido enviado a misc@openbsd.org como usuario de Pms de Mixico o bien un usuario le refiris para recibir este boletmn. Como usuario de Pms de Mixico, en este acto autoriza de manera expresa que Pms de Mixico le puede contactar vma correo electrsnico u otros medios. Si usted ha recibido este mensaje por error, haga caso omiso de el y reporte su cuenta respondiendo este correo con el subject BAJA7FACTORES Unsubscribe to this mailing list, reply a blank message with the subject UNSUBSCRIBE BAJA7FACTORES Tenga en cuenta que la gestisn de nuestras bases de datos es de suma importancia y no es intencisn de la empresa la inconformidad del receptor. [demime 1.01d removed an attachment of type image/jpeg which had a name of 7 factores de exito.jpg]
Re: multicore processors gain
2011/1/7 Mihai Popescu B.S. : > families. I don't know what SMP is about. There's a great site since the beginning of the millenium: http://en.wikipedia.org/wiki/SMP And you should read and follow http://www.catb.org/~esr/faqs/smart-questions.html HTH. HAND Martin
Re: Writing to remote tape
Jeff Ross wrote: > Since I posted I've found rshd and started it through inetd and now I'm > just getting permission denied errors. > > Perhaps the better question is how can I make that work over ssh? Set RSH=ssh in the environment. -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: Writing to remote tape
On 01/07/11 15:08, Ted Unangst wrote: On Fri, Jan 7, 2011 at 5:00 PM, Jeff Ross wrote: Since I posted I've found rshd and started it through inetd and now I'm just getting permission denied errors. Perhaps the better question is how can I make that work over ssh? I believe exporting RSH=ssh should work. Yes, indeed it does. Thanks Ted! Jeff !DSPAM:4d278f09237972063685328!
Re: Writing to remote tape
On Fri, Jan 7, 2011 at 5:00 PM, Jeff Ross wrote: > Since I posted I've found rshd and started it through inetd and now I'm just > getting permission denied errors. > > Perhaps the better question is how can I make that work over ssh? I believe exporting RSH=ssh should work.
Re: Writing to remote tape
On 01/07/11 14:44, Johan Beisser wrote: I prefer to tar(1)... That's all fine and well but doesn't address the question at all. I have a learning story about how easy it is to type tar "c"zvf instead of tar "x"zvf and in a split second wipe out a huge tar backup file but I'll let you make that one for yourself. Contrast that to "dump" and "restore" and I don't care how late it is or how long you've been rebuilding a server, you are not likely to confuse the two. Since I posted I've found rshd and started it through inetd and now I'm just getting permission denied errors. Perhaps the better question is how can I make that work over ssh? Thanks, Jeff On 1/7/11, Jeff Ross wrote: Hi, I have 2 servers that get backed up to tape. I was scping the daily dump files to the server with the tape attached but now I no longer have hard disk room to do that. So I read the man page for rdump/dump and that led me to rmt but I have been unable to make this work. It fails with a connection refused error, and I could not glean from the rmt manpage why. jr...@dukkha:/home/jross $ sudo sh -x /etc/scripts/tape_backup.sh Password: + dump -0a -f nirvana.internal:/dev/nrst0 /dev/sd0a nirvana.internal: Connection refused + exit nirvana does have pf enabled, but it uses a pass all ruleset. So I next wrote a quick shell script that pushes the dump data across the lan with ssh and uses dd to write it to the tape drive. #!/bin/sh #section 1 --/ dump -0a -f - /dev/sd0a | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 2 --/cvs dump -0a -f - /dev/sd1g | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 3 --/home dump -0a -f - /dev/sd0k | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 4 --/profiles dump -0a -f - /dev/sd1b | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 5 --/shared dump -0a -f - /dev/sd1d | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 6 --/stars dump -0a -f - /dev/sd1e | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 7 --/bookkeeping dump -0a -f - /dev/sd0n | ssh nirvana "dd of=/dev/nrst0 bs=1024" #done ssh nirvana mt rewoffl After a little trial and error this works, with one caveat--when a tape fills up the section it is working on aborts rather than calling for the second tape as a local dump-to-tape would. I can manually split this into two sections but that won't scale. Thanks in advance for any cluesticks or hints! Jeff Ross
Re: Writing to remote tape
I prefer to tar(1)... On 1/7/11, Jeff Ross wrote: > Hi, > > I have 2 servers that get backed up to tape. I was scping the daily > dump files to the server with the tape attached but now I no longer have > hard disk room to do that. > > So I read the man page for rdump/dump and that led me to rmt but I have > been unable to make this work. It fails with a connection refused > error, and I could not glean from the rmt manpage why. > > jr...@dukkha:/home/jross $ sudo sh -x /etc/scripts/tape_backup.sh > Password: > + dump -0a -f nirvana.internal:/dev/nrst0 /dev/sd0a > nirvana.internal: Connection refused > + exit > > nirvana does have pf enabled, but it uses a pass all ruleset. > > So I next wrote a quick shell script that pushes the dump data across > the lan with ssh and uses dd to write it to the tape drive. > > #!/bin/sh > #section 1 --/ > dump -0a -f - /dev/sd0a | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 2 --/cvs > dump -0a -f - /dev/sd1g | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 3 --/home > dump -0a -f - /dev/sd0k | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 4 --/profiles > dump -0a -f - /dev/sd1b | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 5 --/shared > dump -0a -f - /dev/sd1d | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 6 --/stars > dump -0a -f - /dev/sd1e | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #section 7 --/bookkeeping > dump -0a -f - /dev/sd0n | ssh nirvana "dd of=/dev/nrst0 bs=1024" > #done > ssh nirvana mt rewoffl > > After a little trial and error this works, with one caveat--when a tape > fills up the section it is working on aborts rather than calling for the > second tape as a local dump-to-tape would. > > I can manually split this into two sections but that won't scale. > > Thanks in advance for any cluesticks or hints! > > Jeff Ross > > -- Sent from my mobile device
Writing to remote tape
Hi, I have 2 servers that get backed up to tape. I was scping the daily dump files to the server with the tape attached but now I no longer have hard disk room to do that. So I read the man page for rdump/dump and that led me to rmt but I have been unable to make this work. It fails with a connection refused error, and I could not glean from the rmt manpage why. jr...@dukkha:/home/jross $ sudo sh -x /etc/scripts/tape_backup.sh Password: + dump -0a -f nirvana.internal:/dev/nrst0 /dev/sd0a nirvana.internal: Connection refused + exit nirvana does have pf enabled, but it uses a pass all ruleset. So I next wrote a quick shell script that pushes the dump data across the lan with ssh and uses dd to write it to the tape drive. #!/bin/sh #section 1 --/ dump -0a -f - /dev/sd0a | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 2 --/cvs dump -0a -f - /dev/sd1g | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 3 --/home dump -0a -f - /dev/sd0k | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 4 --/profiles dump -0a -f - /dev/sd1b | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 5 --/shared dump -0a -f - /dev/sd1d | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 6 --/stars dump -0a -f - /dev/sd1e | ssh nirvana "dd of=/dev/nrst0 bs=1024" #section 7 --/bookkeeping dump -0a -f - /dev/sd0n | ssh nirvana "dd of=/dev/nrst0 bs=1024" #done ssh nirvana mt rewoffl After a little trial and error this works, with one caveat--when a tape fills up the section it is working on aborts rather than calling for the second tape as a local dump-to-tape would. I can manually split this into two sections but that won't scale. Thanks in advance for any cluesticks or hints! Jeff Ross
Re: multicore processors gain
* Benny Lvfgren [2011-01-07 20:45]: > On 2011-01-07 19.54, Ted Unangst wrote: > >>experiment with parallel ports building on a 64-way sparc64 T2 went. > >>With 32 build jobs it looked like this: > >> 0.8%Int 48.9%Sys 6.0%Usr 0.0%Nic 44.3%Idle > >> around that all the time > >My understanding is that the T2 is closer to an 8-way machine. If we > >could recognize the real cores and balance appropriately, 8 build jobs > >shouldn't be too bad. > >At least with a 4-core 8-thread i7 processor, make -j 8 scales reasonably > >well. > > Just to illustrate, a quick test on my 8-core (2 cpu x 4 core) > Supermicro AMD box (compile a GENERIC.MP kernel): > > # make clean && make depend > # time make > ... > 3m26.78s real 2m43.73s user 0m35.08s system > > # make clean && make depend > # time make -j8 > ... > 0m47.40s real 2m52.75s user 3m1.70s system > > On a first glance it doesn't scale all that well, about 4,4 times > quicker real time when running eight compiler tasks simultaneously > compared to the single one. > > But the server isn't idle to begin with (it is run in quite heavy > production), and this sort of test is of course not processor-only. > Also, both tests were run with the MP kernel, so even the > single-task test would probably utilize several kernels at times. indeed - your test has some flaws. but still, the scaling it shows isn't all that bad - and keep in mind that cores typically share a bit more than seperate CPUs. this can have advantages or disadvantages. the box i have in mind does two things that matter for this discussion: -takes backups for/from many servers -does dns & webalizer on webserver logfiles (many many, from many webservers) the backup sounds I/O-heavy - and of course kinda is. but the biggest load is gzip. the backup stuff i wrote myself over many years, it has a nifty scheduler that parallelizes nicely. the webserver logfile processing suffers from dns latency (local cache of course, but still). massive massive massive parallel processing (i wrote that stuff, too) drives it to a point where all CPUs are almost 100% busy (well, see below). the backup runs for about 3 hours with all CPUs busy. the webserver logfile thing usually like 2 hours, but only one hour with everything busy, afterwards only the big logs are still being processed and the latency is the limiting factor. the box used to be a dual xeon 2.2 (the older, p4-based heating plate), with hyperthreading, so 4 logical CPUs with ami RAID 5. the backup scales almost perfect, more than 3.5x faster with the 4 logical CPUs vs just one. webserver log processing gives the same picture. since wednesday it is an intel E7500, 2.93GHz, 2 cores, a sata disk to boot from and two big sata disks, softraid raid 1. it is slightly faster than the previous one. pls note that i can only give estimates, since backup and webserver log processing performance are influenced by external factors. and since somebody is going to ask - the seperate boot disk (that holds OS and everything, just not the raw data) is there to make it easy to replace the data disks by bigger ones. so for these tasks, we scale perfectly fine. throwing more than one cpu (core) at a database server running just one mysqld instance is not going to help right now. that's likely to change with rthreads so. throwing more than one core at a firewall (without much proxy stuff in userland) hurts more than it helps right now. guess my point is clear. we scale fine for many (I'd even say the most) tasks. we scale miserably for some others. yes, our SMP can be improved, but it isn't bad. heck, what cannot be improved? -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting
Tap chi noi tieng the gioi, cuc hot khong the bo qua!!
every thing i do i do it for you!
Re: multicore processors gain
On 2011-01-07 20.45, Benny LC6fgren wrote: Also, both tests were run with the MP kernel, so even the single-task test would probably utilize several kernels at times. *duh* Meant to say "...utilize several cores...", not kernels. /B -- internetlabbet.se / work: +46 8 551 124 80 / "Words must Benny LC6fgren/ mobile: +46 70 718 11 90 / be weighed, / fax:+46 8 551 124 89/not counted." /email: benny -at- internetlabbet.se
Re: multicore processors gain
On 2011-01-07 19.54, Ted Unangst wrote: experiment with parallel ports building on a 64-way sparc64 T2 went. With 32 build jobs it looked like this: 0.8%Int 48.9%Sys 6.0%Usr 0.0%Nic 44.3%Idle around that all the time My understanding is that the T2 is closer to an 8-way machine. If we could recognize the real cores and balance appropriately, 8 build jobs shouldn't be too bad. At least with a 4-core 8-thread i7 processor, make -j 8 scales reasonably well. Just to illustrate, a quick test on my 8-core (2 cpu x 4 core) Supermicro AMD box (compile a GENERIC.MP kernel): # make clean && make depend # time make ... 3m26.78s real 2m43.73s user 0m35.08s system # make clean && make depend # time make -j8 ... 0m47.40s real 2m52.75s user 3m1.70s system On a first glance it doesn't scale all that well, about 4,4 times quicker real time when running eight compiler tasks simultaneously compared to the single one. But the server isn't idle to begin with (it is run in quite heavy production), and this sort of test is of course not processor-only. Also, both tests were run with the MP kernel, so even the single-task test would probably utilize several kernels at times. Regards, /Benny dmesg below: 8<8<8<8<8<8< (cut) OpenBSD 4.7 (GENERIC.MP) #130: Wed Mar 17 20:48:50 MDT 2010 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 3756720128 (3582MB) avail mem = 3650265088 (3481MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xfb980 (77 entries) bios0: vendor American Megatrends Inc. version "080014" date 10/13/2008 bios0: Supermicro H8DMT acpi0 at bios0: rev 0 acpi0: tables DSDT FACP APIC MCFG OEMB SRAT EINJ BERT ERST HEST SSDT acpi0: wakeup devices PS2K(S4) PS2M(S4) NSMB(S4) USB0(S4) USB2(S1) NMAC(S5) NMAD(S5) P0P1(S4) HDAC(S4) BR10(S4) BR15(S4) SLPB(S4) PWRB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Quad-Core AMD Opteron(tm) Processor 2376, 2312.18 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu0: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu0: apic clock running at 201MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Quad-Core AMD Opteron(tm) Processor 2376, 2311.86 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu1: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu2 at mainbus0: apid 2 (application processor) cpu2: Quad-Core AMD Opteron(tm) Processor 2376, 2311.86 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu2: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu2: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu2: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu3 at mainbus0: apid 3 (application processor) cpu3: Quad-Core AMD Opteron(tm) Processor 2376, 2311.86 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu3: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu3: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu3: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu4 at mainbus0: apid 4 (application processor) cpu4: Quad-Core AMD Opteron(tm) Processor 2376, 2311.86 MHz cpu4: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu4: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu4: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative cpu4: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative cpu5 at mainbus0: apid 5 (application processor) cpu5: Quad-Core AMD Opteron(tm) Processor 2376, 2311.86 MHz cpu5: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu5: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way
Bonne Année Web Média
WEB MEDIA vous souhaite une agriable et joyeuse annie ! Profitez de nos offres avantageuses Votre site internet cli en main pour 280 euros Formule PACK artisan-commergant comprenant : Recherche et dipot d'un nom de domaine pertinent pour votre site internet (optimisi pour le rifirencement), Hibergement de votre site internet auprhs de notre partenaire hosteur.com, (l'hibergement est inclus dans cette offre pour la premihre annie anniversaire, les autres annies sont ` rhgler directement ` l'hebergeur par le client), Criation de votre site internet comprenant la rialisation de la charte graphique Criation d'une page accueil, Criation d'une page de prisentation de vos produits ou prestations, Insertion de diaporama photo Criation d'un formulaire contact avec formulaire mail, Giolocalisation de votre enseigne Googlemaps et discription de vos horaires d'ouverture adresse et contacts tiliphoniques, Une soumission de rifirencement aux moteurs de recherche et annuaires Frangais. Un tutoriel d'utilisation de votre site internet et ` votre disposition sur votre site internet backoffice (espace de gestion de votre site internet), une gestion simple de votre site internet avec un iditeur de texte facile comme Word, vous modifiez sans difficultis vos pages et informations de votre site. Une assistance tiliphonique est assurie pendant un an, pour ripondre ` vos questions et support technique. Profitez de cette offre maintenant en cliquant ici ! Condition de rhglement de l'offre promo : rialisation d'un devis, rhglement ` la commande. Boostez votre site avec notre formule de rifirencement pour 200 euros Formule de rifirencement comprenant : Un audit de votre site, Rapport de positionnement, Optimisation de votre site pour le rifirencement, suggestion de 15 mots ou expressions clis, Soumission de votre site pour le rifirencement aux moteurs de recherche et annuaires Frangais, Suivi et optimisation de votre site sur 6 mois, Rapport mensuel de positionnement, Cette formule ne garantit pas de prisence en premihre page Google. Un devis peut jtre rialisi pour un rifirencement avec risultat. Exemple de travaux de rifirencement : E-boutique en construction Shop marine Expression cli : Radeau container 8 Personnes type 2 cotier > risultat en premihre page Google (1hre annonce) : Radeau container 8 Personnes type 2 > risultat en premihre page Google (1hre annonce) : Radeau container 8 Personnes > risultat en premihre page Google (2hme annonce) : Radeau container > risultat en premihre page Google (1, 2hme et 3hme annonce) Profitez de cette offre maintenant en cliquant ici ! Condition de rhglement de l'offre promo : rialisation d'un devis, rhglement ` la commande. Si vous ne souhaitez plus recevoir notre lettre d'information, cliquez sur le lien ci-dessous. * Pour ne plus recevoir ce message cliquer sur le lien suivant: http://www.stat-enreg-1.com/out/desinscrquestion.php?u=28189&b=H&c=153394&m=m...@openbsd.org&lng=fr **
Re: Another carp problem.
On 01/06/2011 05:54 PM, Johan Fredin wrote: On 2 jan 2011, at 10:42, Alessandro Baggi wrote: Hi list and happy new year to all. Now, I've solve temporarly this problem using ifstated, and master and backup work fine. For pfsync nic, in past I had used a dedicated nic for pfsync but now cause xl0 for wan, rl0 for lan and rl1 for dmz, I must use rl0 only 3 nic. I've read on OpenBSD FAQ that we can use the same iface, but using IPSec. Best regards For now it's only testing, but in future Hi Alessandro, As you say, it shouldn't be an issue to use a "non-dedicated" NIC for the pfsync/carp traffic. But your issue doesn't really have anything to do with pfsync, since it seems to be purely a carp issue. What does your PF rules look like for the carp traffic? I saw in an earlier post that you pass everything out, but are you also letting the carp traffic in on both nodes? /Johan Hi johan, for this problem I've reduced my pf.conf to: pass in all pass out all on fw1 and fw2 and carp interfaces communicate beetwen them, same with the entire pf rule set. I've tried also to set the slave as master and viceversa, but the problem persists. I've solved this problem with ifstated, and using "macro relevation" when a iface become down, ifstated set advskew to 254 (demoted) and my backup become the master. Then, it seems to be that preempt is not setted up to 1 on master and slave. do you think the same? thanks in advance
Re: multicore processors gain
On Fri, Jan 7, 2011 at 1:18 PM, Christian Weisgerber wrote: > I guess Landry doesn't read this list, or he could tell you how his > experiment with parallel ports building on a 64-way sparc64 T2 went. > With 32 build jobs it looked like this: > > 0.8%Int 48.9%Sys 6.0%Usr 0.0%Nic 44.3%Idle > around that all the time My understanding is that the T2 is closer to an 8-way machine. If we could recognize the real cores and balance appropriately, 8 build jobs shouldn't be too bad. At least with a 4-core 8-thread i7 processor, make -j 8 scales reasonably well.
Re: pf and DNS
Thus said Girish Venkatachalam on Fri, 07 Jan 2011 16:26:01 +0530: > Due to this , whatever IP address pf(4) knows at the time of ruleset > loading alone works. Use pfctl and a cronjob to periodically update a table. Kludgey, sure... Andy
Re: multicore processors gain
Henning Brauer wrote: > you're wrong. my OpenBSD SMP boxes (no, no 48 cores) do very well. > as long as the load is userland-driven we scale fine. I guess Landry doesn't read this list, or he could tell you how his experiment with parallel ports building on a 64-way sparc64 T2 went. With 32 build jobs it looked like this: 0.8%Int 48.9%Sys 6.0%Usr 0.0%Nic 44.3%Idle around that all the time -- Christian "naddy" Weisgerber na...@mips.inka.de
Re: multicore processors gain
On Fri, Jan 7, 2011 at 10:49 AM, Adam M. Dutko wrote: > rthreads -- > http://www.informatik.uni-augsburg.de/~ungerer/rthreads/RThreads.html The above paper has nothing to do with what's called being rthreads in OpenBSD. A more appropriate paper from 1995 would be this one, except OpenBSD uses a system call named rfork instead of sfork. http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.25.8012
Re: pf and DNS
On Fri, 2011-01-07 at 16:26 +0530, Girish Venkatachalam wrote: > On Fri, Jan 7, 2011 at 2:43 PM, Martin Schrvder wrote: > >> > >> And consequently pf which does not know a thing about domains does not help > us. > > > > What exactly is the problem you want to solve? > > > > Sorry for having been abstract. > > Here is the detailed explanation. > > One domain translates to around 100 IP addresses. Yeah, it happens. If you look those IPs up via ARIN's whois[1] server you'll see that they are only a handful of netblocks and you can shove them into a PF table as needed. Have fun maintaining the tables. Because 1) You'll forget to update them periodically 2) You'll be SOL when there is a data center or network issue and suddenly everything is going to another netblock. > > But pf does not agree to using a domain and doing the domain to IP > translation on the fly. If you want to filter based on hostnames instead of IPs, you're going to have to filter based on packet content instead of packet headers. This means either a user space proxy, or have your internal DNS servers claim to be authoritative for those domains[2]. Oh, and if you do go the DNS route, you *WILL* forget to update periodically and you *WILL* be SOL when servers move around. > > Due to this , whatever IP address pf(4) knows at the time of ruleset > loading alone works. > > And I do not want to use a userland proxy. Yeah, and I do not want oodles of hot new blog articles on topics that were interesting and 10-15 years ago... But I know there's no chance of that happening. > > How to do it? In your case I think you should cough up lots money to one of the companies selling a firewall that does deep packet analysis. Perhaps someone here would be kind enough to mention one that's the most expensive appliance that's just an off the shelf PC running *BSD and a transparent squid proxy with pretty GUI front end. Or you could have looked in /usr/ports/www/squid/Makefile and seen that squid in ports is already configured to be usable as a transparent proxy with the aid of pf(4). Grouchy as always, Chris Dukes [1] Around since 1982 although it's changed a bit since then. [2] If you go back to 1995 or so you'll find misguided IT managers using this approach to block big name R rated magazine sites while employees continued to grab increasingly nasty porn with no problems.
Re: multicore processors gain
Yes, it will use all your cores. I don't understand your question about "blade" servers, but they are just a different form factor of the essentially the same hardware. If the hardware is supported SMP should work just fine. PS: SMP is what lets you use all your cores: http://en.wikipedia.org/wiki/Symmetric_multiprocessing -- Jeremy Chase http://twitter.com/jeremychase On Fri, Jan 7, 2011 at 9:53 AM, Mihai Popescu B.S. wrote: > Hi folks, > > I will reformulate the question. Sorry for this, but it sleeps off topic. > > So, I'm interested about Intel Core 2 Duo family and i3, i5, i7 > families. I don't know what SMP is about. > I remember UNIX has no threads, just processes spawn by fork(). > > Having this in mind, will a processor from upper categories help me > and how - by using all its cores or just some extra L2 or L3 cache. > Are there some differences in the way OpenBSD runs on a processor from > upper categories and some "blade" server with many stand alone > processors. > > Many thanks.
Re: multicore processors gain
> A lot has changed since 1995. pthreads -- https://computing.llnl.gov/tutorials/pthreads/ rthreads -- http://www.informatik.uni-augsburg.de/~ungerer/rthreads/RThreads.html and etc.
Re: multicore processors gain
On Fri, Jan 7, 2011 at 9:53 AM, Mihai Popescu B.S. wrote: > I remember UNIX has no threads, just processes spawn by fork(). A lot has changed since 1995.
Re: Newbie Network/PF Question
On 1/6/2011 at 10:40 AM Mike. wrote: |On 1/5/2011 at 2:56 PM Axton wrote: | ||On Wed, Jan 5, 2011 at 10:14 AM, Mike. wrote: || ||> On 1/4/2011 at 10:57 PM Josh Smith wrote: ||> ||> | ||> |pass in on $int_if0 # pass all incomming traffic on our internal ||> interface ||> |pass in on $int_if1 # pass all incomming traffic on our internal ||> interface from the test network ||> = ||> ||> ||> ||> ||> I have two internal subnetworks, one for standard frames and one for ||> jumbo frames. ||> ||> Instead of the two rules you cite, I use the following: ||> ||> ||> ||> ||> # macros ||> std_if = "em1" ||> jum_if = "em0" ||> loc_if = "lo0" ||> ||> ||> # let internal traffic flow unimpeded ||> pass quick on $loc_if ||> pass quick on $std_if ||> pass quick on $jum_if ||> ||> ||"set skip" is probably more efficient. | = | | |It's a very light-duty firewall, but I'll read up on your suggestion |anyway. | |Thanks. = I read through the documentation, and it looks like I cannot use 'set skip' on my firewall. Set skip bypasses all pf processing for the interface noted, and I need for pf to perform the ftp proxy processing on those two interfaces. So I'll keep the pass quick rules. Thanks again for your comment, though. I learned something as I researched it.
Re: multicore processors gain
Hi folks, I will reformulate the question. Sorry for this, but it sleeps off topic. So, I'm interested about Intel Core 2 Duo family and i3, i5, i7 families. I don't know what SMP is about. I remember UNIX has no threads, just processes spawn by fork(). Having this in mind, will a processor from upper categories help me and how - by using all its cores or just some extra L2 or L3 cache. Are there some differences in the way OpenBSD runs on a processor from upper categories and some "blade" server with many stand alone processors. Many thanks.
Bonne Année Web Média
WEB MEDIA vous souhaite une agriable et joyeuse annie ! Profitez de nos offres avantageuses Votre site internet cli en main pour 280 euros Formule PACK artisan-commergant comprenant : Recherche et dipot d'un nom de domaine pertinent pour votre site internet (optimisi pour le rifirencement), Hibergement de votre site internet auprhs de notre partenaire hosteur.com, (l'hibergement est inclus dans cette offre pour la premihre annie anniversaire, les autres annies sont ` rhgler directement ` l'hebergeur par le client), Criation de votre site internet comprenant la rialisation de la charte graphique Criation d'une page accueil, Criation d'une page de prisentation de vos produits ou prestations, Insertion de diaporama photo Criation d'un formulaire contact avec formulaire mail, Giolocalisation de votre enseigne Googlemaps et discription de vos horaires d'ouverture adresse et contacts tiliphoniques, Une soumission de rifirencement aux moteurs de recherche et annuaires Frangais. Un tutoriel d'utilisation de votre site internet et ` votre disposition sur votre site internet backoffice (espace de gestion de votre site internet), une gestion simple de votre site internet avec un iditeur de texte facile comme Word, vous modifiez sans difficultis vos pages et informations de votre site. Une assistance tiliphonique est assurie pendant un an, pour ripondre ` vos questions et support technique. Profitez de cette offre maintenant en cliquant ici ! Condition de rhglement de l'offre promo : rialisation d'un devis, rhglement ` la commande. Boostez votre site avec notre formule de rifirencement pour 200 euros Formule de rifirencement comprenant : Un audit de votre site, Rapport de positionnement, Optimisation de votre site pour le rifirencement, suggestion de 15 mots ou expressions clis, Soumission de votre site pour le rifirencement aux moteurs de recherche et annuaires Frangais, Suivi et optimisation de votre site sur 6 mois, Rapport mensuel de positionnement, Cette formule ne garantit pas de prisence en premihre page Google. Un devis peut jtre rialisi pour un rifirencement avec risultat. Exemple de travaux de rifirencement : E-boutique en construction Shop marine Expression cli : Radeau container 8 Personnes type 2 cotier > risultat en premihre page Google (1hre annonce) : Radeau container 8 Personnes type 2 > risultat en premihre page Google (1hre annonce) : Radeau container 8 Personnes > risultat en premihre page Google (2hme annonce) : Radeau container > risultat en premihre page Google (1, 2hme et 3hme annonce) Profitez de cette offre maintenant en cliquant ici ! Condition de rhglement de l'offre promo : rialisation d'un devis, rhglement ` la commande. Si vous ne souhaitez plus recevoir notre lettre d'information, cliquez sur le lien ci-dessous. * Pour ne plus recevoir ce message cliquer sur le lien suivant: http://www.stat-enreg-1.com/out/desinscrquestion.php?u=28189&b=H&c=153343&m=m...@openbsd.org&lng=fr **
Re: pf and DNS
On Fri, Jan 07, 2011 at 05:50:25AM -0500, Eric Furman wrote: > > On Fri, Jan 07 2011 at 59:07, Girish Venkatachalam wrote: > > > Many websites these days "Akamize" or do whatever that gives them a > > > different IP address > > > everytime you access it. > Don't use stupid shit like "Akamize". Problem solved. > Stop making people laugh at you. That's not really up to the OP - he's talking about websites using content delivery networks like Akamai, which tend to play games with DNS (to point people at "nearby" servers, for instance). The OP has very little control over these sites... Joachim -- TFMotD: gpioctl (8) - control GPIO devices http://www.joachimschipper.nl/
Re: pf and DNS
On Fri, Jan 7, 2011 at 2:43 PM, Martin Schrvder wrote: >> >> And consequently pf which does not know a thing about domains does not help us. > > What exactly is the problem you want to solve? > Sorry for having been abstract. Here is the detailed explanation. One domain translates to around 100 IP addresses. But pf does not agree to using a domain and doing the domain to IP translation on the fly. Due to this , whatever IP address pf(4) knows at the time of ruleset loading alone works. And I do not want to use a userland proxy. How to do it? -Girish -- Gayatri Hitech http://gayatri-hitech.com gir...@gayatri-hitech.com
Re: pf and DNS
Don't use stupid shit like "Akamize". Problem solved. Stop making people laugh at you. On Fri, 07 Jan 2011 10:25 +0100, "Claer" wrote: > On Fri, Jan 07 2011 at 59:07, Girish Venkatachalam wrote: > > I try to use OpenBSD wherever I can and in the firewall I have > > installed in a big jewel store > > here I have the following problem. > > > > Many websites these days "Akamize" or do whatever that gives them a > > different IP address > > everytime you access it. > > > > And consequently pf which does not know a thing about domains does not help > > us. > > > > I want a solution which can address this. > Use a proxy according your application protocol (like squid for http) > and do the applicative filtering on it. > > > What I currently do is add an entry manually to /etc/hosts and ask > > everyone in the network > > to us my DNS. > > > It is crappy and bereft with 100s of problems. > > > > First thing is that it does not allow us to use "Akamaizer" and load > > balancing feature offered by them. > > > > And it is not a good idea to change on every computer... > > > > Is there a better idea? > Proxification will mostly require modifications on the client's side but > it could be simplified with proxy.pac distribution. If you go the socks > way, you won't have any choice but to install a proxy client on each > computer. > > Claer
extent_alloc_region: can't allocate region descriptor
hi there, with the latest snapshot my dmesg has changed regarding bios0: (inside vmware player) bios0: ROM list: 0xc/0x8000extent_alloc_region: can't allocate region descriptor :12 0xc8000/0x1e00!extent_alloc_region: can't allocate region descriptor :12 0xca000/0x1000extent_alloc_region: can't allocate region descriptor :12 0xdc000/0x4000!extent_alloc_region: can't allocate region descriptor :12 0xe/0x4000!extent_alloc_region: can't allocate region descriptor :12 0xee200/0x1e00!extent_alloc_region: can't allocate region descriptor :12 is this something i should worry about? the ramdisk dmesg doesn't have it. both dmesgs included. OpenBSD 4.8-current (RAMDISK_CD) #263: Thu Jan 6 22:31:30 MST 2011 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/RAMDISK_CD cpu0: Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz ("GenuineIntel" 686-class) 2.17 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,SSE3,SSSE3 real mem = 536375296 (511MB) avail mem = 520654848 (496MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 12/31/09, BIOS32 rev. 0 @ 0xfd780, SMBIOS rev. 2.4 @ 0xe0010 (98 entries) bios0: vendor Phoenix Technologies LTD version "6.00" date 12/31/2009 bios0: VMware, Inc. VMware Virtual Platform acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S4 S5 acpi0: tables DSDT FACP BOOT APIC MCFG SRAT acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 65MHz ioapic0 at mainbus0: apid 1 pa 0xfec0, version 11, 24 pins acpiprt0 at acpi0: bus 0 (PCI0) bios0: ROM list: 0xc/0x8000 0xc8000/0x1e00! 0xca000/0x1000 0xdc000/0x4000! 0xe/0x4000! 0xee200/0x1e00! pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x01 ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x01 pci1 at ppb0 bus 1 pcib0 at pci0 dev 7 function 0 "Intel 82371AB PIIX4 ISA" rev 0x08 pciide0 at pci0 dev 7 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility pciide0: channel 0 disabled (no drives) atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: ATAPI 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 "Intel 82371AB Power" rev 0x08 at pci0 dev 7 function 3 not configured "VMware Virtual Machine Communication Interface" rev 0x10 at pci0 dev 7 function 7 not configured vga1 at pci0 dev 15 function 0 "VMware Virtual SVGA II" rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) mpi0 at pci0 dev 16 function 0 "Symbios Logic 53c1030" rev 0x01: apic 1 int 17 (irq 11) scsibus1 at mpi0: 16 targets, initiator 7 sd0 at scsibus1 targ 0 lun 0: SCSI2 0/direct fixed sd0: 8192MB, 512 bytes/sec, 16777216 sec total mpi0: target 0 Sync at 160MHz width 16bit offset 127 QAS 1 DT 1 IU 1 ppb1 at pci0 dev 17 function 0 "VMware Virtual PCI-PCI" rev 0x02 pci2 at ppb1 bus 2 vic0 at pci2 dev 0 function 0 "AMD 79c970 PCnet-PCI" rev 0x10: apic 1 int 18 (irq 10), address 00:0c:29:4d:c7:5b "Ensoniq AudioPCI97" rev 0x02 at pci2 dev 2 function 0 not configured ehci0 at pci2 dev 3 function 0 "VMware Virtual EHCI" rev 0x00: apic 1 int 17 (irq 11) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "VMware EHCI root hub" rev 2.00/1.00 addr 1 uhci0 at pci2 dev 4 function 0 "Intel 82371AB USB" rev 0x00: apic 1 int 18 (irq 10) usb1 at uhci0: USB revision 1.0 uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1 ppb2 at pci0 dev 21 function 0 "VMware Virtual PCIE-PCIE" rev 0x01 pci3 at ppb2 bus 3 ppb3 at pci0 dev 21 function 1 "VMware Virtual PCIE-PCIE" rev 0x01 pci4 at ppb3 bus 4 ppb4 at pci0 dev 21 function 2 "VMware Virtual PCIE-PCIE" rev 0x01 pci5 at ppb4 bus 5 ppb5 at pci0 dev 21 function 3 "VMware Virtual PCIE-PCIE" rev 0x01 pci6 at ppb5 bus 6 ppb6 at pci0 dev 21 function 4 "VMware Virtual PCIE-PCIE" rev 0x01 pci7 at ppb6 bus 7 ppb7 at pci0 dev 21 function 5 "VMware Virtual PCIE-PCIE" rev 0x01 pci8 at ppb7 bus 8 ppb8 at pci0 dev 21 function 6 "VMware Virtual PCIE-PCIE" rev 0x01 pci9 at ppb8 bus 9 ppb9 at pci0 dev 21 function 7 "VMware Virtual PCIE-PCIE" rev 0x01 pci10 at ppb9 bus 10 ppb10 at pci0 dev 22 function 0 "VMware Virtual PCIE-PCIE" rev 0x01 pci11 at ppb10 bus 11 ppb11 at pci0 dev 22 function 1 "VMware Virtual PCIE-PCIE" rev 0x01 pci12 at ppb11 bus 12 ppb12 at pci0 dev 22 function 2 "VMware Virtual PCIE-PCIE" rev 0x01 pci13 at ppb12 bus 13 ppb13 at pci0 dev 22 function 3 "VMware Virtual PCIE-PCIE" rev 0x01 pci14 at ppb13 bus 14 ppb14 at pci0 dev 22 function 4 "VMware Virtual PCIE-PCIE" rev 0x01 pci15 at ppb14 bus 15 ppb15 at pci0 dev 22 function 5 "VMware Virtual PCIE-PCIE" rev 0x01 pci16 at ppb15 bus 16 ppb16 at pci0 dev 22 function 6 "VMware Virtual PCIE-PCIE" rev 0x01 pci17 at ppb16 bus 17 ppb17 at pci0 dev 22 function 7 "VMware Virtual PCIE-PCIE" rev 0x01 pci18 at ppb17 bus 18 ppb18 at pci0 dev 23 f
Re: OpenBSD with PHP and MySQL
* rancor [2011-01-06 22:09]: > Please keep in mind that bigmem is unsupported and it may not work as > expected. right, i missed the bigmem part. whoever enables it and isn't a developer fixing issues is plain stupid. repeating myself: if it was fine it would be on by default. in fact, there wouldn't be a button at all. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting
Re: multicore processors gain
* Chris Cappuccio [2011-01-06 22:06]: > But, yeah, if you want to maximize your 48 core AMD box in a data center and > you don't see make -j48 as a practical application, OpenBSD may not be > "there" yet for you. I don't have anything with more than 4 cores, so it was > never really a concern for me :) you're wrong. my OpenBSD SMP boxes (no, no 48 cores) do very well. as long as the load is userland-driven we scale fine. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting
static during music playback after zzz
It seems after I sleep-wake cycle my laptop something screw happens so that play back of music -- specifically using mpg123 to play mp3 files -- after that point produces a fair amount of static. Here is an odd part. If I run aucat as such: $ aucat -d the static is almost nonexistent, while reducing one of the -d options makes the static more noticeable. Suggesting keeping aucat "busy" reduces static significantly(?). Any ideas? What other info would be useful? Thanks, --patrick Here is a diff from output from 'aucat -' before and after zzz: --- /tmp/before.zzz.txt Fri Jan 7 00:54:53 2011 +++ /tmp/after.zzz.txt Fri Jan 7 00:56:46 2011 @@ -15,7 +15,6 @@ sock/hel|rmsg|widl: using mode = 1 mpg0: overwritten slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mpg0(127)/off: changing volume to 127 -mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: SETPAR message mpg0/ini|rmsg|widl: using 16bits, 2 bytes per sample mpg0: buffer size = 11648, play = s16le,0:1,44100 @@ -42,7 +41,7 @@ rsock(sock): done wsock(sock): terminating... wsock(sock): done wsock(sock): freed -sock(sock|rRw): terminating... +sock(sock|rRwW): terminating... rsock(sock): freed sock(sock|rwZ): terminating... sock(sock|rwZ): destroyed full after: $ aucat - sio(default|): created default: recording s16le,0:1,44100 default: playing s16le,0:1,44100 mix(play): newout, will use 11648 fr default: block size is 2912 frames, using 4 blocks defa...@default: rec=0:1 play=0:1 vol=32768 listen(/tmp/aucat-1000/softaudio0|): created sock(sock|): created sock/hel|rmsg|widl: HELLO message sock/hel|rmsg|widl: hello from , mode = 1, ver 3 default: option found device requested sock/hel|rmsg|widl: using mode = 1 mpg0: overwritten slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mpg0(127)/off: changing volume to 127 mpg0/ini|rmsg|widl: SETPAR message mpg0/ini|rmsg|widl: using 16bits, 2 bytes per sample mpg0: buffer size = 11648, play = s16le,0:1,44100 mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: START message mpg0/sta|rmsg|widl: allocating 11648/23296 fr buffers, rmax = 93184 mpg0/sta|rmsg|widl: STOP message mpg0/run|rmsg|widl: attaching at 0 rsock(sock)->mix(play): setmaster: 32768/32768 syncing device, mix(play): todo = 0: lat = 0, sub(rec): lat = 0 rsock(sock)->mix(play): setting volume to 32768 mpg0/ini|rmsg|widl: freeing buffers rsock(sock)->mix(play): eof requested mix(play): running other streams mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: BYE message rsock(sock): terminating... rsock(sock): done wsock(sock): terminating... wsock(sock): done wsock(sock): freed sock(sock|rRwW): terminating... rsock(sock): freed sock(sock|rwZ): terminating... sock(sock|rwZ): destroyed device released starting device sio(default|): started sock(sock|): created sock/hel|rmsg|widl: HELLO message sock/hel|rmsg|widl: hello from , mode = 1, ver 3 default: option found device requested sock/hel|rmsg|widl: using mode = 1 mpg0: found slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mpg0(127)/off: changing volume to 127 mpg0/ini|rmsg|widl: SETPAR message mpg0/ini|rmsg|widl: using 16bits, 2 bytes per sample mpg0/ini|rmsg|widl: using playback channels 0..1 mpg0/ini|rmsg|widl: using 44100Hz sample rate, 2912 fr block size mpg0/ini|rmsg|widl: using 11648 buffer size mpg0: buffer size = 11648, play = s16le,0:1,44100 mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: GETPAR message mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: START message mpg0/sta|rmsg|widl: allocating 11648/23296 fr buffers, rmax = 93184 mpg0/sta|rmsg|widl: STOP message mpg0/run|rmsg|widl: attaching at -11648 rsock(sock)->mix(play): setmaster: 32768/32768 syncing device, mix(play): todo = 0: lat = 11648, sub(rec): lat = 0 rsock(sock)->mix(play): setting volume to 32768 mpg0/ini|rmsg|widl: freeing buffers rsock(sock)->mix(play): eof requested mix(play): running other streams mpg0/ini|rret|widl: RRET done mpg0/ini|rmsg|widl: BYE message rsock(sock): terminating... rsock(sock): done wsock(sock): terminating... wsock(sock): done wsock(sock): freed sock(sock|rRw): terminating... rsock(sock): freed sock(sock|rwZ): terminating... sock(sock|rwZ): destroyed device released sock(sock|): created sock/hel|rmsg|widl: HELLO message sock/hel|rmsg|widl: hello from , mode = 1, ver 3 default: option found device requested sock/hel|rmsg|widl: using mode = 1 mpg0: found slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mpg0(127)/off: changing volume to 127 mpg0/ini|rmsg|widl: SETPAR message mpg0/ini|rmsg|widl: using 16bits, 2 bytes per sample mpg0/ini|rmsg|widl: using playback channels 0..1 mpg0/ini|rmsg|widl: using 44100Hz sample rate, 2912 fr block size mpg0/ini|rmsg|widl: using 11648 buffer
Re: pf and DNS
On Fri, Jan 07 2011 at 59:07, Girish Venkatachalam wrote: > I try to use OpenBSD wherever I can and in the firewall I have > installed in a big jewel store > here I have the following problem. > > Many websites these days "Akamize" or do whatever that gives them a > different IP address > everytime you access it. > > And consequently pf which does not know a thing about domains does not help > us. > > I want a solution which can address this. Use a proxy according your application protocol (like squid for http) and do the applicative filtering on it. > What I currently do is add an entry manually to /etc/hosts and ask > everyone in the network > to us my DNS. > It is crappy and bereft with 100s of problems. > > First thing is that it does not allow us to use "Akamaizer" and load > balancing feature offered by them. > > And it is not a good idea to change on every computer... > > Is there a better idea? Proxification will mostly require modifications on the client's side but it could be simplified with proxy.pac distribution. If you go the socks way, you won't have any choice but to install a proxy client on each computer. Claer
Re: pf and DNS
2011/1/7 Girish Venkatachalam : > Many websites these days "Akamize" or do whatever that gives them a > different IP address > everytime you access it. > > And consequently pf which does not know a thing about domains does not help > us. What exactly is the problem you want to solve? Best Martin