Re: ss20's wanted for ports builds

2012-07-19 Thread noah pugsley
For fucks sake, just donate already! \
You know you use this shit every day \
I am an absolutely poor loser, I had $18 US (dollars, yech! Real men use
gold or rupees) \
after getting smokes and tall cans (corey, trevor, let's go!) and I just
donated $5. \

If I have to smoke resin until I go recycle cans again y'all can do better
than me.\

--destitute asshole

>Thank you for your OpenBSD Order! In case of problems or questions about
this order, \
>please contact aus...@openbsd.org Order number 2012/7/19-20:6:50-15264:
Your order \
>currently is: -> USD $5.00 [DON] DONATION to the OpenBSD Project -> Total:
USD \
>$5.00 + Shipping.



Re: ss20's wanted for ports builds

2012-07-19 Thread Kirill Bychkov
On Thu, July 19, 2012 18:42, Erling Westenvik wrote:
> On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer
> wrote:
>> What do you mean with "ss20"?
>
> Actually a good question. At least for those old enough to remember the
> Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
> seem to find any on ebay though but maybe someone in Russia can provide
> shell access?

well, even forget to find it in exUSSR ;)
AND NO SHELL ACCESS!!! Only buttons-buttons-buttons!!! If you have luck to
find some.
> --
> Cheers,
> Erling
>
> () ascii ribbon campaign - against html e-mail
> /\



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Courtney R. Spencer
On Wed, Jul 18, 2012 at 10:17 PM, David Diggles  wrote:
> Hmmm, ok...  hpn-ssh looks like the go.
>
> http://www.psc.edu/index.php/hpn-ssh
> http://www.nren.nasa.gov/hpn_ssh.html
> http://www.hpsc.csiro.au/userguides/faq/ssh.php#hpn-ssh


hpn-ssh is a very good solution

Along with network buffer tweaks, I routinely use it on BSD, Solaris
and Linux hosts
over long haul private gig and 100meg links to approach the speeds one can
achieve with rcp or rsyncd.

It may not solve your CPU pegging, but in practice where such issues do not
exist, it takes a minute for the sending host to prime the pipe.  The settings
I begin setting higher than the defaults are:

net.inet.tcp.sendspace
net.inet.tcp.recvspace
net.inet.tcp.recvbuf_max
net.inet.tcp.sendbuf_max

There are likely more settings to change and  I'd be interested to see them.

Courtney



Unicast CARP and static arp entries

2012-07-19 Thread Lee Verberne
A power supply failed in my 2-node OpenBSD 5.1 unicast CARP cluster
recently.  After the failure I noticed that the carp demote counter was
being increased by output errors:

carp: carp0 demoted group carp by 1 to 1 (> snderrors)

I tracked this back to the surviving node being unable to arp for the
ethernet address of its carppeer.  At least, adding static permanent arp
entries stopped the Oerrs on carp0.

I'm planning on adding static arp entries as a best-practice now any
time I use unicast CARP.  I didn't see any documentation or list traffic
on this topic, though, so I thought I'd ask what others do.  Am I
missing something or is this ill-advised?

Thanks,
-lee



Re: Polish encoding on console in x window

2012-07-19 Thread Wojciech Puchar

LC_ALL and LC_LOCALE didnt work (works only in bash and i get strange signs
LC_ALL environment variable are not defining console but program behaviour 
(like messages in Polish)




Polish encoding on console in x window

2012-07-19 Thread Tomasz Marszal
Hi Group.
I have a question to polish users how to set up polish encoding in terminal
in x windows in Open BSD 5.1 i386.
LC_ALL and LC_LOCALE didnt work (works only in bash and i get strange signs
instead of polish dialect signs. Setting wsconsctl keyboard.encoding=pl
also dont give wanted result.

Best Regards 
Tomek Marszal



Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar
Lets be honest with ouselves sir, with your temper is a nuclear weapon really 
a good idea?



for sure better than in government hands



Re: ss20's wanted for ports builds

2012-07-19 Thread Dag Richards

Theo de Raadt wrote:

On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer wrote:

What do you mean with "ss20"?

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles.


I'd like one of those too.




Lets be honest with ouselves sir, with your temper is a nuclear weapon 
really a good idea?



--
IS-IS sleeps.
BGP peers are quiet.
Something must be wrong.



Proximo Jueves... Tratados de Libre Comercio en Panama y su Impacto en los Negocios

2012-07-19 Thread Lic. Ericka Lopez Caballero
Novedades en los Tratados de Libre Comercio en Panamá y su Impacto en los
Negocios
Panama 26 de julio, 2012
Los Tratados de Libre Comercio están cambiando la forma de hacer negocios hoy
día y en todas las empresas se debe conocer las normas y herramientas que los
conforman, para evitar estar en desventaja comercial, perdiendo competitividad
y afectando sus resultados.
Quality Training Panamá le ofrece la oportunidad de conocer, los Tratados de
Libre Comercio vigentes y en proceso de negociación dentro de la agenda
comercial de Panamá, preparándolos adecuadamente para la utilización de estos
instrumentos.  La falta de conocimiento de estos acuerdos puede provocar
pérdidas directas en las empresas quitándoles la oportunidad de reducir los
costos, redefinir su comercialización y un rediseño del sistema de logística.
Asista a este seminario y regrese a su empresa con el conocimiento básico para
comprender estos tratados y una "caja de herramientas" para el mejor
aprovechamiento de estas oportunidades y retos. Incluyendo….
- Conocimiento general de la Agenda Comercial de Panamá.
- Comprensión de los accesos a mercados de exportación e importación.
- Reconocimiento de las normas de origen de los productos negociados.
- Oportunidades de negocios en las compras gubernamentales.
- Información de las Normas de Inversión.
- Conocimiento de las Reglas de Negocios en servicios.
- Herramientas para el uso de los Beneficios Arancelarios.
- Implicaciones de los diferentes Tratados Comerciales vigentes.
- Agenda Comercial a futuro.
Reciba en este momento el folleto completo!
Únicamente responda con su Nombre, Puesto, Empresa y Teléfono, o Comuníquese
al (507) 279-1083 / 279-0258 / 279-0887 en donde con gusto le atenderé.
Reciba un muy cordial saludo!
Lic. Ericka López Caballero
Líder de Proyectos
Para des suscribirse de estas invitaciones, solo responda este correo con el
SUBJECT des suscribir y automáticamente quedará fuera de nuestras listas.
Este correo ha sido enviado enviado a: misc@openbsd.org

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
Trtados_libre_comercio.jpg]



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread frantisek holop
hmm, on Thu, Jul 19, 2012 at 02:25:18AM -0700, Fil DiNoto said that
> I noticed a huge difference in SCP speeds by changing the client.

client weirdness is a topic of its own.

for example: total commander sftp plugin.  on my home network:

1. start the transfer: speed around 160 KB/s
2. cancel the transfer
3. start again and click on "resume": speed around 2MB/s


-f
-- 
room temperature iq.



Propuesta

2012-07-19 Thread I-A
Ver con Audio

http://www.youtube.com/watc h?v=X06Ng8K1tmA



Re: power button halt vs reboot(8) and halt(8)

2012-07-19 Thread frantisek holop
hmm, on Fri, Jul 13, 2012 at 11:58:40PM +0200, frantisek holop said that
> the reason i ask is, that fairly often, reboot(8) and halt(8)
> "hangs" (X disappears, but there is only black screen,
> and the console never appears, no "syncing disks" message),
> but pressing the power button turns off the machine
> without fail every time.  another one of those mysteries..

i would like to add a minor correction, the power button
can also fail as i have experienced later.  but its success
rate seems to be higher.

as suspend does not work on this netbook at the moment,
i will be able to keep statistics about the failures..

-f
-- 
a day without sunshine is like night.



Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles.


I'd like one of those too.



to avoid transport just choose a target and it will be delivered directly.



Proximo Miercoles - Tecnicas Modernas para Administrar Flotillas de Transporte Terrestre

2012-07-19 Thread Lic. Ericka Lopez Caballero
Técnicas Modernas para Administrar Flotillas de Transporte Terrestre
Panama 25 de julio, 2012

Al finalizar el curso, los participantes contarán con los elementos necesarios
para administrar de manera eficiente una flotilla de Transporte Terrestre.

Obtenga herramientas clave para supervisar y controlar el cumplimiento de:
-Rutas e itinerarios programados.
-Consumo de combustible.
-Horas de llegada - salidas a las escalas programadas.
-Políticas de velocidades y paradas.
-Resguardo de vehículo en lugar y horario programado.
-Control de personal.
-Reducción de costos de operación y mantenimiento.

Reciba en este momento el folleto completo!

Únicamente responda con su Nombre, Puesto, Empresa y Teléfono, o Comuníquese
al 800 5001 / (507) 279-1083 / 279-0258 / 279-0887 en donde con gusto le
atenderé.

Reciba un muy cordial saludo!

Lic. Ericka López Caballero
Líder de Proyectos

Para des suscribirse de estas invitaciones, solo responda este correo con el
SUBJECT des suscribir y automáticamente quedará fuera de nuestras listas.
Este correo ha sido enviado a:



Re: ss20's wanted for ports builds

2012-07-19 Thread ropers
On 19 July 2012 17:15, Theo de Raadt  wrote:
>> On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer 
>> wrote:
>> > What do you mean with "ss20"?
>>
>> Actually a good question. At least for those old enough to remember the
>> Soviet era SS-20 intermediate-range ballistic nucelar missiles.
>
> I'd like one of those too.

http://en.wikipedia.org/wiki/SS-20#Decommissioning



Re: ss20's wanted for ports builds

2012-07-19 Thread Theo de Raadt
> On 07/19/12 10:42, Erling Westenvik wrote:
> > On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer 
> > wrote:
> >> What do you mean with "ss20"?
> >
> > Actually a good question. At least for those old enough to remember the
> > Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
> > seem to find any on ebay though but maybe someone in Russia can provide
> > shell access?
> >
> 
> I don't have any ss-20 missiles, but I do have a SS5/170(turbosparc). 
> Not, sure whether that would be useful or not.  If it's too slow, it 
> could possibly be adapted to control your centrifuge farm.

I am trying to use only ss20 machines in the rack, so that I can move
parts back and forth easily.



Re: ss20's wanted for ports builds

2012-07-19 Thread Theo de Raadt
> On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer 
> wrote:
> > What do you mean with "ss20"?
> 
> Actually a good question. At least for those old enough to remember the
> Soviet era SS-20 intermediate-range ballistic nucelar missiles.

I'd like one of those too.



Re: ss20's wanted for ports builds

2012-07-19 Thread Brian McCafferty

On 07/19/12 10:42, Erling Westenvik wrote:

On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer wrote:

What do you mean with "ss20"?


Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?



I don't have any ss-20 missiles, but I do have a SS5/170(turbosparc). 
Not, sure whether that would be useful or not.  If it's too slow, it 
could possibly be adapted to control your centrifuge farm.




Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

Ontopic: just a noob question, can you use a tcp lb or similar to spread
the load? Thinking relayd and whatever the shared interface is called. Or
are limited to one machine?


from the topic it seems that network itself and tcp transport isn't a 
problem here.




Re: ss20's wanted for ports builds

2012-07-19 Thread Wojciech Puchar

What do you mean with "ss20"?


Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?
actually shell access is enough for single use. But let's leave that 
weapons to Theo, but i ask for little tactical ones at 1kT range or so. 
feel free to send me an offer. please include transport and activation. I would 
send you my prefered target list.



Seriously, sorry if it's stupid question, but cannot one just run qemu to 
emulate sparcstation (qemu can do this). It would probably be faster than 
real hardware.


Or qemu emulation isn't like real hardware in catching bugs in OpenBSD 
that are CPU dependant?




Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

You should avoid every large corporation touching your private data.


But... they're free :)

Great quote I forgot where from: "when you don't know what the product is -- the 
product is you"


this is what i was talking about. But thanks for citation - it compressed 
my multisentence explanation in a one liner.




Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Joakim Dellrud
Ontopic: just a noob question, can you use a tcp lb or similar to spread
the load? Thinking relayd and whatever the shared interface is called. Or
are limited to one machine?

Off topic some do not have the will to setup their own mail server. And
they read or reg everything anyway...
On Jul 19, 2012 4:51 PM, "Peter Laufenberg"  wrote:



Re: ss20's wanted for ports builds

2012-07-19 Thread Erling Westenvik
On Mon, Jul 16, 2012 at 08:45:30PM +0200, [B&G-Consulting] Elmar Bschorer wrote:
> What do you mean with "ss20"?

Actually a good question. At least for those old enough to remember the
Soviet era SS-20 intermediate-range ballistic nucelar missiles. Can't
seem to find any on ebay though but maybe someone in Russia can provide
shell access?

-- 
Cheers,
Erling

() ascii ribbon campaign - against html e-mail  

/\  



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Peter Laufenberg
>> My yahoo account separates out the many list mails. I sometimes feel a
>Th problem is not yahoo but all such services. Yahoo, gmail, hotmail, 
>@wp.pl etc... are all here to control people. nothing else.
>
>You should avoid every large corporation touching your private data.

But... they're free :)

Great quote I forgot where from: "when you don't know what the product is -- 
the product is you"

-- p



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

Believe me that will change one day. Never had a trusted employee
poached by a competitor for example?


I just dare to say even greatest software will not solve it.
But believing it will make a danger

Once more i propose moving off list, and you've sent me something 
privately as my logs shows but still from @yahoo.


Please use NORMAL mail account.

In which case I'd have to use my OpenBSD mail server to talk off list.


So do it.


My yahoo account separates out the many list mails. I sometimes feel a
Th problem is not yahoo but all such services. Yahoo, gmail, hotmail, 
@wp.pl etc... are all here to control people. nothing else.


You should avoid every large corporation touching your private data.

Using for mailing lists isn't bad as it's not private.



Re: [Bulk] Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Kevin Chadwick
On Thu, 19 Jul 2012 13:47:12 +0200 (CEST)
Wojciech Puchar wrote:

> depends on assumption. For every business i work i assume that co-workers 
> doesn't harm and that's agreed with the boss.
>

Believe me that will change one day. Never had a trusted employee
poached by a competitor for example?

> 
> I am not paranoid. If in any company you must fear that coworker is a 
> security danger then something is definitely wrong with that company and 
> it is not my job as an admin to fix it.
> 

I disagree completely. I don't fear it because I cover those risks.


> That's my opinion, i propose going off list.
> 
> And not with "free" email like @yahoo.co.uk about which you should be 10 
> times more feared than over your untrusty coworkers.
> 
> my .procmailrc redirect all "free" emails like this to /dev/null.


In which case I'd have to use my OpenBSD mail server to talk off list.
My yahoo account separates out the many list mails. I sometimes feel a
bit harsh on Yahoo though as I stopped using their web search when
Microsoft took it over.


I'd use ssh over rsh every time except maybe to see if the throughput
increased.



Re: [SOLVED] Re: How can I send SMS from a umsm(4) usb stick?

2012-07-19 Thread Manolis Tzanidakis
Just installed the package in another system and saw that the install-message
already mentions the permissions fix. Sorry for the noise :).

-- 
Manolis Tzanidakis
mtzanidakis [at] gmail [dot] com
http://mtzanidakis.com/


On Thursday, July 19, 2012 at 4:22 PM, Manolis Tzanidakis wrote:

> On Tue (10/07/12), Stuart Henderson wrote:
> > > On Tue, Jul 10, 2012 at 3:59 PM, Manolis Tzanidakis
> > > mailto:mtzanida...@gmail.com)> wrote:
> > > > Hello,
> > > > I'd like to setup a monitoring system that sends SMS messages when
> > > > something is wrong.
> > > > I'm looking for the simplest possible way to send a message from cli,
> > > > something like:
> > > > $ echo "Doomsday is coming!" | sendsms +1234567890
> > > 
> > 
> > 
> > 
> > > smstools package should do the trick...
> 
> After a busy week I finally took some time to try smstools and I'd like
> to report that it works.
> The port's predefined defaults for /etc/smsd.conf are sane; I only
> changed this line:
> 
> device = /dev/cuaU0
> 
> to find my 3g modem. There are some permissions issues though, easily 
> fixed, like eg.:
> 
> # usermod -G dialer _smsd
> 
> to let the daemon access the device. I guess this could be the default
> on a future version of the port, since all tty0? and ttyU? devices
> have uucp:dialer ownership. Or at least include this information in the
> port's install-message. I'm CC'ing this to the ports@ list for further
> discussion..
> 
> And the permissions of /var/spool/sms need some tweaking to allow 
> non-root users to send sms, but I guess this is sysadmin's work.
> 
> Anyway, thanks again for the suggestions. Hope this helps someone else
> too.
> 
> -- 
> Manolis Tzanidakis
> http://mtzanidakis.com/
> mtzanidakis[at]gmail[dot]com



[SOLVED] Re: How can I send SMS from a umsm(4) usb stick?

2012-07-19 Thread Manolis Tzanidakis
On Tue (10/07/12), Stuart Henderson wrote:
> > On Tue, Jul 10, 2012 at 3:59 PM, Manolis Tzanidakis
> > wrote:
> >> Hello,
> >> I'd like to setup a monitoring system that sends SMS messages when
> >> something is wrong.
> >> I'm looking for the simplest possible way to send a message from cli,
> >> something like:
> >> $ echo "Doomsday is coming!" | sendsms +1234567890
>
> > smstools package should do the trick...

After a busy week I finally took some time to try smstools and I'd like
to report that it works.
The port's predefined defaults for /etc/smsd.conf are sane; I only
changed this line:

device = /dev/cuaU0

to find my 3g modem. There are some permissions issues though, easily 
fixed, like eg.:

# usermod -G dialer _smsd

to let the daemon access the device. I guess this could be the default
on a future version of the port, since all tty0? and ttyU? devices
have uucp:dialer ownership. Or at least include this information in the
port's install-message. I'm CC'ing this to the ports@ list for further
discussion..

And the permissions of /var/spool/sms need some tweaking to allow 
non-root users to send sms, but I guess this is sysadmin's work.

Anyway, thanks again for the suggestions. Hope this helps someone else
too.

-- 
Manolis Tzanidakis
http://mtzanidakis.com/
mtzanidakis[at]gmail[dot]com



Re: gimp 2.8 on OpeBSD -current

2012-07-19 Thread Giovanni Bechis
Fred Crowson  wrote:
> Hi misc@
> 
> I'm getting the following errors when running gimp-2.8.0p0 on OpenBSD
> -current (Jun 28 i386 snapshot):
> 
I worked on this during g2k12, it has been fixed in gimp-2.8.0p1.
 Cheers



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Christian Weisgerber
David Diggles  wrote:

> I am looking for ways to speed up scp over 10GigE.
> With parallel transfer of 4x 8GB files, I get
> the following test results with various ciphers.
> 
> These tests maxed out 4 cores with encryption overhead.

Assuming that crypto actually is your bottleneck, here are a few
hints:

First, use a faster MAC: -m umac...@openssh.com

> SSH Options: [-o Cipher=arcfour]
> SSH Options: [-o Cipher=blowfish]

These only apply to the SSH1 protocol and are ignored otherwise.

> SSH Options: [-o Ciphers=arcfour]
> SSH Options: [-o Ciphers=blowfish-cbc]
> SSH Options: [-o Ciphers=aes256-ctr]
> SSH Options: [-o Ciphers=3des-cbc]

There are really three interesting ciphers: aes128-ctr, aes128-cbc,
and arcfour128.

aes128-ctr is the default and already plenty fast.

aes128-cbc used to be the default until a security problem with the
way CBC mode is used in the SSH2 protocol was discovered.  In
principle it isn't any faster than aes128-ctr, but in practice it
may be since it uses OpenSSL's optimized EVP_aes_128_cbc() function
while aes128-ctr relies on calls to the low-level AES_encrypt()
primitive.

arcfour128 is the fastest cipher supported.  (Plain "arcfour" may
be a tad faster, but has known security problems.)

-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

I regularly do use rsh and rcp in my work.
and ssh/scp when needed (public network)


Do you work with a small trusted group, because many attacks come from
co-workers.


depends on assumption. For every business i work i assume that co-workers 
doesn't harm and that's agreed with the boss.


With different assumption i would not just design everything different but 
actually lock every single person in separate room, controlling every more 
(because someone may just go to other room) etc...



I am not paranoid. If in any company you must fear that coworker is a 
security danger then something is definitely wrong with that company and 
it is not my job as an admin to fix it.


That's my opinion, i propose going off list.

And not with "free" email like @yahoo.co.uk about which you should be 10 
times more feared than over your untrusty coworkers.


my .procmailrc redirect all "free" emails like this to /dev/null.



Re: [Bulk] Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Kevin Chadwick
> I regularly do use rsh and rcp in my work.
> and ssh/scp when needed (public network)

Do you work with a small trusted group, because many attacks come from
co-workers.

-- 


 Why not do something good every day and install BOINC.




Re: ssh tunneling with -D option

2012-07-19 Thread Paolo Aglialoro
Thank you Aaron

On Thu, Jul 19, 2012 at 3:39 AM, Aaron Mason wrote:

> On Thu, Jul 19, 2012 at 9:07 AM, Paolo Aglialoro 
> wrote:
>
> > Issuing the following:
> > # dsocks.sh lynx google.com > /dev/null 2>&1
> >
>
> Fixed that for you.  Pipe stdout to /dev/null, then pipe stderr to
> stdout.  If you do it the other way, stderr will still appear on
> stdout.
>
>
> --
> Aaron Mason - Programmer, open source addict
> I've taken my software vows - for beta or for worse



Special Edition H3G

2012-07-19 Thread noreplay
Questo messaggio contiene immagini grafiche. Se non lo visualizzi
correttamente clicca qui. 



Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Fil DiNoto
I noticed a huge difference in SCP speeds by changing the client.

For example the client WinSCP is much slower than FileZilla.

I am uncertain if there is any significant difference between SCP and
SFTP protocols (I think SCP2 is SFTP). I know both are handled by the
SSH server.

On Thu, Jul 19, 2012 at 1:38 AM, Wojciech Puchar
 wrote:
> maybe off topic but what is MAXPHYS set in compiled kernel?
>
> every BSD flavor i've seen sets it way too low for modern drives.
> 2MB is smallest IMHO value that make sense on modern drives.
>
> you may experience lots of seeking when reading 4 files from same disk
>
>
>
> On Thu, 19 Jul 2012, David Diggles wrote:
>
>> On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:
>>>
>>>
>>> have you also tried -o 'Compression no'?
>>>
>>
>> I have now.  No real difference;
>>
>> SSH Options: [-o Ciphers=arcfour -o Compression=no]
>> 64.68132476895114469583 MB/s
>> 63.56096147431307883010 MB/s
>> 61.69097005503488103824 MB/s
>> 61.41473507203868873527 MB/s
>>
>> Data in the range of many terabytes, possibly up to petabytes are
>> expected to go over the link, so the hpn-ssh patch used by HPC sites
>> looks like the most viable for this - thanks, Michael.
>>
>> Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
>> encryption overhead.  Both client and server are 8 core.  There
>> was no other load at the time of testing, so half cores are
>> available to service disk and network load.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

maybe off topic but what is MAXPHYS set in compiled kernel?

every BSD flavor i've seen sets it way too low for modern drives.
2MB is smallest IMHO value that make sense on modern drives.

you may experience lots of seeking when reading 4 files from same disk


On Thu, 19 Jul 2012, David Diggles wrote:


On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:


have you also tried -o 'Compression no'?



I have now.  No real difference;

SSH Options: [-o Ciphers=arcfour -o Compression=no]
64.68132476895114469583 MB/s
63.56096147431307883010 MB/s
61.69097005503488103824 MB/s
61.41473507203868873527 MB/s

Data in the range of many terabytes, possibly up to petabytes are
expected to go over the link, so the hpn-ssh patch used by HPC sites
looks like the most viable for this - thanks, Michael.

Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
encryption overhead.  Both client and server are 8 core.  There
was no other load at the time of testing, so half cores are
available to service disk and network load.




Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Wojciech Puchar

I am looking for ways to speed up scp over 10GigE.
With parallel transfer of 4x 8GB files, I get
the following test results with various ciphers.



is it local network? why do you encrypt at all?


The data itself is not sensitive and does not really need
to be encrypted, although "security" policy between the organisations
involved may prohibit disabling of encryption. :-/


nonsense. it seems like linux style mantras "use ssh, it is secure, rest 
is not".


I regularly do use rsh and rcp in my work.
and ssh/scp when needed (public network)


Your results are already very good, i don't thing you can go much better.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread David Diggles
On Thu, Jul 19, 2012 at 08:08:26AM +0200, Jan Stary wrote:
> 
> have you also tried -o 'Compression no'?
>

I have now.  No real difference;

SSH Options: [-o Ciphers=arcfour -o Compression=no]
64.68132476895114469583 MB/s
63.56096147431307883010 MB/s
61.69097005503488103824 MB/s
61.41473507203868873527 MB/s

Data in the range of many terabytes, possibly up to petabytes are
expected to go over the link, so the hpn-ssh patch used by HPC sites
looks like the most viable for this - thanks, Michael.

Dan, yes the 4 ssh processes were at 100% cpu, I guess with the
encryption overhead.  Both client and server are 8 core.  There
was no other load at the time of testing, so half cores are
available to service disk and network load.



Re: Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Dan Shechter
Hi David,

Do you see high CPU during transfer?

If you you don't see high CPU, it _could_ be related to round trip
time and window size.

HTH,
Bring order to your Private VLAN network: http://marathon-networks.com



On Thu, Jul 19, 2012 at 4:58 AM, David Diggles  wrote:
>
> encryption. :-/
>
> Any suggestions?  I have searched the list for "scp 10gigE"
> and only found the following post in 2004.



Re: "simple" PF rule? redirect port without touching address

2012-07-19 Thread Fil DiNoto
WHOA! that works!

I had no idea you could use the bitmask option like that! Thank You.

Although I haven't tested for any unwanted behavior...  I'll get back
to you if i find any.

On Mon, Jul 9, 2012 at 3:10 PM, Stuart Henderson  wrote:
> On 2012-07-09, Simon Perreault  wrote:
>> On 2012-07-09 10:17, Stuart Henderson wrote:
>>> On 2012-07-09, Fil DiNoto  wrote:
 But i was wondering if I could achieve something that would work for
 ALL the addresses behind the router as well without creating
 individual rules for each address. Something like this:

 pass in on egress proto tcp from $location1 to any port ssh rdr-to
 (original destination IP) port XXX22
>>>
>>> nope. easiest option for this is probably a userland proxy.
>>> not sure but I reckon relayd can probably do it.
>>
>> Not even with a bitmask pool?
>>
>> pass ... rdr-to 0.0.0.0/0 port XXX22 bitmask
>>
>> Simon
>>
>>
>
> Oh, that's twisted, I like it!



Re: Xvideo && intel(4)

2012-07-19 Thread Gregory Edigarov

On 07/18/2012 07:05 PM, Stuart Henderson wrote:

On 2012-07-16, Gregory Edigarov  wrote:

Hi,

My new home pc has this card:
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 2000" rev 0x09

is there anything I could try to get the full screen video playback working?

Try VLC which has fairly simple controls over output device (in
preferences / video settings / display). It all depends on how fast
your machine is and the type of video you're playing as to whether
it can keep up, but you might get something working. I'm having
mostly good luck with "X11 video output (XCB)" on an "Intel HD
Graphics 3000" but it's worth trying other settings too.

Thank you, Stuart. I will try it.

full dmesg:

thanks.