group dead??
is this group dead? 3e this mont last message
Re: xenocara not building on amd64-current
On Sat, Sep 08, 2012 at 10:58:55PM -0500, Emilio Perea wrote: On Tue, Sep 04, 2012 at 03:44:35AM -0400, Ted Unangst wrote: A lot of effort is expended trying to get snapshots out quickly after toolchain changes, precisely to make things easy for people. Even if you think you can figure out building from the source, the polite thing to do is to use the snapshots anyway. :) I am very grateful for the effort the developers put into the snapshots, so I don't mean this as criticism. But it is possible for somebody reading the thread to believe that the latest snapshot would allow xenocara to build. As far as I can tell, it does not (yet) on amd64. Afacit, it does build. What error are you getting ? Since I'm sure it will be fixed by another snapshot soon, this is no big deal. -- Matthieu Herrb
Re: group dead??
We are dead silent, waiting for 5.2 2012/9/9 Ton Muller spatie...@online.nl is this group dead? 3e this mont last message
Re: Snort not logging to alerts files
On Fri, Sep 07, 2012 at 11:54:07AM -0400, Bentley, Dain wrote: Hello Misc, I've installed Snort on OpenBSD 4.9 from source and everything installed fine. When I configure the following rules I see alerts generated: # cat /etc/snort/snort.conf include /etc/snort/rules/icmp.rules # cat /etc/snort/rules/icmp.rules alert icmp any any - any any (msg:ICMP Packet; sid:477; rev:3;) /usr/local/bin/snort --daq-dir /usr/local/lib/daq -c /etc/snort/snort.conf -l /var/log/snort -i fxp1 So when I ping the outside interface I get the following in /var/log/snort/alert [**] [1:477:3] ICMP Packet [**] [Priority: 0] 09/07-10:30:08.599075 xxx.xxx.xxx.xxx - xxx.xxx.xxx.xxx ICMP TTL:113 TOS:0x20 ID:25441 IpLen:20 DgmLen:28 Type:8 Code:0 ID:512 Seq:26063 ECHO So I now snort can see packets. Even though I have icmp blocked on the outside interface it still logs it. Why should snort not see them? snort sees packet which arrive at that interface. Packet filters handle packets later. When download and load the snort rules from the snort site nothing happens. The logfile sits empty. What do you expect? Do you have configured snort correctly? Are the rules you want to fire really enabled? Has anyone successfully installed snort on openbsd and logged data? Of course. Running recent snort on -current. Recently I send an update of the snort port to ports@. Maybe you could help test it, so we have a more up-to-date snort version in 5.3. Regards, Markus
ospf6d problem when a route already exists with a different nexthop
Hi,
When an ospf route already exists, ospf6d doesn't update the nexthop.
I have 6 routers (4 with openbsd 5.0, 2 with openbsd 4.9) running ospfd,
ospf6d and bgpd, routeur id is on lo1.
For some reason (see at end for a way to reproduce it), one of the router
(openbsd 5.0 one) have multiple ospf ipv6 routes still in fib (even if no more
ospf6d or bgpd process is running). For exemple:
root@core3: route -n get -inet6 :::a
route to: :::a
destination: :::a
gateway: fe80::5054:60ff:fe60:3a1%vlan216
interface: vlan216
if address: fe80::5054:60ff:fe60:348%vlan216
priority: 32 (ospf)
flags: UP,GATEWAY,HOST,DONE
use mtuexpire
4200 0 0
:::a is the loopback address of another router (the gateway is
obviously wrong as I've killed ospf6d and bgpd on the referenced host).
when starting ospf6d, a new route for :::a is found but ospf6d
find the previous one and don't change the nexthop. And when killing
ospf6d it doesn't remove it.
If I route delete -inet6 -host :::a
fe80::5054:60ff:fe60:3a1%vlan216, and restart ospf6d the problem disappear.
I've took a look at ospf6d/kroute.c and found this route is processed like
that:
kr_change(struct kroute *kroute)
{
struct kroute_node *kr;
int action = RTM_ADD;
kroute-rtlabel = rtlabel_tag2id(kroute-ext_tag);
if ((kr = kroute_find(kroute-prefix, kroute-prefixlen)) !=
NULL) {
=== goes here
if (!(kr-r.flags F_KERNEL))
action = RTM_CHANGE;
else { /* a non-ospf route already exists. not a problem */
=== goes here
if (!(kr-r.flags F_BGPD_INSERTED)) {
=== goes here
do {
kr-r.flags |= F_OSPFD_INSERTED;
kr = kr-next;
} while (kr);
=== exit (nexthop is unchanged)
return (0);
}
This problem occurs when the prefix is announced by different
ospf peers with a different nexthop. Exemple:
When starting ospf6d a first route is added learned from one ospf6d peer:
root@core3: route -n get -inet6 :::8
route to: :::8
destination: :::8
gateway: fe80::5054:60ff:fe60:365%vlan222
interface: vlan222
if address: fe80::5054:60ff:fe60:345%vlan222
priority: 32 (ospf)
flags: UP,GATEWAY,HOST,DONE
use mtuexpire
0 0 0
Next a second route is learned (gateway on fe80::5054:60ff:fe60:321%vlan213
which is the most direct route) but ospf6d doesn't update it.
Here some traces I've added in ospf6d:
MG kr_change: prefix :::8/128
MG send_rtmsg1: action 1, prefix :::8/128
MG send_rtmsg2: action 1, nexthop: fe80::5054:60ff:fe60:365
...
MG kr_change: prefix :::8/128
MG kr_change2: found prefix :::8/128
MG kr_change: prefix :::8/128 !FKERNEL
MG send_rtmsg1: action 3, prefix :::8/128
MG send_rtmsg2: action 3, nexthop: fe80::5054:60ff:fe60:321
send_rtmsg: action 1, prefix :::8/128: File exists
After killing ospf6d, (first/bad) route is still here:
root@core3:usr.sbin$ route -n get -inet6 :::8
route to: :::8
destination: :::8
gateway: fe80::5054:60ff:fe60:365%vlan222
interface: vlan222
if address: fe80::5054:60ff:fe60:345%vlan222
priority: 32 (ospf)
flags: UP,GATEWAY,HOST,DONE
use mtuexpire
28 0 0
I've retried multiple times and when the 1st learned route is the good one
(via vlan213) the route is well deleted when killing ospf6d.
I've tried to compare with ospfd and found that the following chnage seems to
handle nexthop change case:
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/ospfd/kroute.c.diff?r1=1.52;r2=1.53;f=h
May be common changes in ospfd weren't ported to ospf6d ?
Manuel
Curso Bimestral CONSULTORÍA de EMPRESAS FAMILIARES
Escuela Sistémica Argentina Institución dedicada a la formación, asistencia e investigación psicológica Curso Bimestral 2012 CONSULTORÍA de EMPRESAS FAMILIARES Docente a cargo: Laura Alvarez Dirigido a: Consultores, Dueños y Directores de empresas, alta y media gerencia, Terapeutas familiares y a todos los profesionales interesados en especializarse en la consultoría de Empresas Familiares, aprendiendo y profundizando sobre las complejas y diversas temáticas que atraviesan las Organizaciones Familiares. Objetivos: * Aprender a nivel teórico y práctico: herramientas, tácticas y técnicas de intervención aplicables a la consultoría de empresas Familiares. * Desarrollar destrezas y habilidades del rol del consultor. Facilitar cambios de conductas en las familias empresarias y equipos que se desempeñan en la organización, con la finalidad de contribuir de manera eficaz y satisfactoria al logro de los objetivos de la misma. * Trabajar, asesorar y orientara los directivos, empresarios, ejecutivos, empleados y profesionales, que forman parte de la empresa,en la resolución de conflictos interpersonales,en el armado y corrección del organigrama de puestos, tareas y funciones y en el diseño de capacitaciones a medida In Company. * Prevenir, analizar y resolver crisis de cambio y actualización empresaria. * Acompañar y asistir a la familia empresaria, en la resolución de conflictos familiares que afectan directamente sobre la empresa que dirigen. Día de cursado: Miércoles de 19 a 21 hs Inicio: 03 de octubre de 2012 / Duración: 9 clases Programa: MÓDULO 1: LA EMPRESA COMO SISTEMA SOCIAL, CLASIFICACIONES Y ÁREAS QUE LA COMPONEN. MÓDULO 2: VISIÓN SISTÉMICA DE LA EMPRESA FAMILIAR Y SUS ETAPAS EVOLUTIVAS MÓDULO 3: VALORES, CULTURA y ESTRATEGIA. VISIÓN y MISIÓN y ESTILOS DE DIRECCIÓN MÓDULO 4: FACTORES A TENER EN CUENTA CUANDO LA FAMILIA TRABAJA JUNTA. MÓDULO 5: LA FAMILIA EMPRESARIA EN CONSULTA MÓDULO 6: EL ROL DEL CONSULTOR Herramientas yMetodología de trabajo MÓDULO 7: RECURSOS Y TÉCNICAS DE INTERVENCIÓN APLICABLES: DISEÑO DE PLANILLAS CON TAREAS PARA TRABAJAR CON TODOS LOS RRHH QUE PARTICIPAN EN EL PROCESO DE CONSULTORÍA MÓDULO 8: REQUERIMIENTOS BÁSICOS para el armado de los EQUIPOS de trabajo. MÓDULO 9: ÓRGANOS DE GOBIERNO. MÓDULO 10: DISEÑO DE CAPACITACIÓN A MEDIDA COACHING Actividad arancelada Se entregará certificado de asistencia Escuela Sistémica Argentina Fray J. S. María de Oro 1843 (C1414DBC) Telf: (5411) 4774-2875/ 6112 / 4899-1053 www.escuelasistemica.com.ar
ПРАВО. КАДРЫ. ДЕЛОПРОИЗВОДСТВО
Êóðñû ïîâûøåíèÿ êâàëèôèêàöèè äëÿ êàäðîâèêîâ ÏÐÀÂÎ. ÊÀÄÐÛ. ÄÅËÎÏÐÎÈÇÂÎÄÑÒÂÎ http://khost.com.ua/9/mediapro1.html 17-22 ñåíòÿáðÿ 2012 ãîäà, ã. Êèåâ Ðåãèñòðàöèÿ http://khost.com.ua/9/zayavka.doc Ïîäðîáíåé: 0(44) 507-2228 ×èòàòü ïðîãðàììó Êàæäûé ó÷àñòíèê ïîëó÷èò ñâèäåòåëüñòâî ãîñ. îáðàçöà!  ïðîãðàììå: Ïðàâîâîå ðåãóëèðîâàíèå òðóäîâûõ îòíîøåíèé Êàäðîâîå äåëîïðîèçâîäñòâî îò À äî ß Ãëàâíîå î çàùèòå ïåðñîíàëüíûõ äàííûõ Ïåíñèîííûå âîïðîñû Ïîäãîòîâêà ê ïðîâåðêàì 1ñ äëÿ êàäðîâèêîâ Ñîöèàëüíîå ñòðàõîâàíèå Àòòåñòàöèÿ ðàáî÷èõ ìåñò ïî óñëîâèÿì òðóäà Óïðàâëåíèå ïåðñîíàëîì: ïîäáîð, ìîòèâàöèÿ, ðàçâèòèå Âðåìÿ îáó÷åíèÿ 72 àêàä. ÷àñà, ïí.-ïò., 09.00 - 16.00 22.09.12 - çà÷åòíîå òåñòèðîâàíèå, ïîëó÷åíèå ñâèäåòåëüñòâà. Çàíÿòèÿ ïðîõîäÿò â öåíòðå ãîðîäà, â Äîìå Êèíî. Êóðñû ïðîõîäÿò ïðè ïîääåðæêå: Íàöèîíàëüíûé ïåäàãîãè÷åñêèé óíèâåðñèòåò èìåíè Ì.Ï. Äðàãîìàíîâà Èíñòèòóò ïåðåïîäãîòîâêè è ïîâûøåíèÿ êâàëèôèêàöèèÆóðíàë «Äîâ³äíèê êàäðîâèêà»Âñåóêðàèíñêàÿ àññîöèàöèÿ êàäðîâèêîâ Ñòîèìîñòü ó÷àñòèÿ 2560 ãðí. (ñ ÍÄÑ)  ñòîèìîñòü âõîäÿò: ìàòåðèàëû ïå÷àòíûå è íà ýë. íîñèòåëå (ñ ó÷åòîì èçìåíåíèé â çàêîíîäàòåëüñòâå), ïèòàíèå, äåëîâûå àêñåññóàðû. Äëÿ ïîäïèñ÷èêîâ ÈÄ «ÌÅÄÈÀ-ÏÐλ ñêèäêà 5%! Ðåêîìåíäàöèè ïðîôåññèîíàëîâ! Åùå ñåìèíàðû Profosvita http://khost.com.ua/9/mediapro2.html [demime 1.01d removed an attachment of type image/jpeg which had a name of 19733424.jpg]
Re: Snort not logging to alerts files
I got it working fine. It's logging as expected. I have pf2snort installed and it seems to be working ok. I have portscans logging to portscan.log so I could just log the portscans to the alert file so snort2pf can see it I'll be super happy. Regards, Dain Bentley -Original Message- From: Markus Lude [markus.l...@gmx.de] Received: Sunday, 09 Sep 2012, 9:52am To: misc@openbsd.org [misc@openbsd.org] Subject: Re: Snort not logging to alerts files On Fri, Sep 07, 2012 at 11:54:07AM -0400, Bentley, Dain wrote: Hello Misc, I've installed Snort on OpenBSD 4.9 from source and everything installed fine. When I configure the following rules I see alerts generated: # cat /etc/snort/snort.conf include /etc/snort/rules/icmp.rules # cat /etc/snort/rules/icmp.rules alert icmp any any - any any (msg:ICMP Packet; sid:477; rev:3;) /usr/local/bin/snort --daq-dir /usr/local/lib/daq -c /etc/snort/snort.conf -l /var/log/snort -i fxp1 So when I ping the outside interface I get the following in /var/log/snort/alert [**] [1:477:3] ICMP Packet [**] [Priority: 0] 09/07-10:30:08.599075 xxx.xxx.xxx.xxx - xxx.xxx.xxx.xxx ICMP TTL:113 TOS:0x20 ID:25441 IpLen:20 DgmLen:28 Type:8 Code:0 ID:512 Seq:26063 ECHO So I now snort can see packets. Even though I have icmp blocked on the outside interface it still logs it. Why should snort not see them? snort sees packet which arrive at that interface. Packet filters handle packets later. When download and load the snort rules from the snort site nothing happens. The logfile sits empty. What do you expect? Do you have configured snort correctly? Are the rules you want to fire really enabled? Has anyone successfully installed snort on openbsd and logged data? Of course. Running recent snort on -current. Recently I send an update of the snort port to ports@. Maybe you could help test it, so we have a more up-to-date snort version in 5.3. Regards, Markus
Re: xenocara not building on amd64-current
On Sun, Sep 09, 2012 at 12:34:58PM +0200, Matthieu Herrb wrote: On Sat, Sep 08, 2012 at 10:58:55PM -0500, Emilio Perea wrote: I am very grateful for the effort the developers put into the snapshots, so I don't mean this as criticism. But it is possible for somebody reading the thread to believe that the latest snapshot would allow xenocara to build. As far as I can tell, it does not (yet) on amd64. Afacit, it does build. What error are you getting ? Sorry about the delay in responding! This is what I get: *** cc -O2 -pipe -I/usr/X11R6/include -I/usr/xenocara/app/fvwm/fvwm -I/usr/xenocara/app/fvwm/fvwm/.. -I/usr/xenocara/app/fvwm/fvwm/../libs -DFVWM_MODULEDIR=\/usr/X11R6/lib/X11/fvwm\ -DFVWMRC=\.fvwmrc\ -DFVWM_CONFIGDIR=\/usr/X11R6/lib/X11/fvwm\ -c /usr/xenocara/app/fvwm/fvwm/windows.c cc -o fvwm add_window.o bindings.o borders.o builtins.o colormaps.o colors.o complex.o decorations.o events.o focus.o functions.o fvwm.o fvwmdebug.o icons.o menus.o misc.o modconf.o module.o move.o placement.o read.o resize.o style.o virtual.o windows.o -L/usr/X11R6/lib -L/usr/xenocara/app/fvwm/fvwm/../libs/obj -lfvwm -lXpm -lXt -lICE -lSM -lXext -lX11 -lxcb -lXdmcp -lXau /usr/bin/ld: /usr/X11R6/lib/libfvwm.a(ClientMsg.o): relocation R_X86_64_32 can not be used when making a shared object; recompile with -fPIC /usr/X11R6/lib/libfvwm.a: could not read symbols: Bad value collect2: ld returned 1 exit status *** Error code 1 Stop in /usr/xenocara/app/fvwm/fvwm (line 95 of /usr/share/mk/bsd.prog.mk). *** Error code 1 Stop in /usr/xenocara/app/fvwm (line 48 of /usr/share/mk/bsd.subdir.mk). *** Error code 1 Stop in /usr/xenocara/app/fvwm (line 6 of Makefile). *** Error code 1 Stop in /usr/xenocara/app (line 48 of /usr/share/mk/bsd.subdir.mk). *** Error code 1 Stop in /usr/xenocara (line 39 of Makefile). *** Error code 1 Stop in /usr/xenocara (line 32 of Makefile).
Re: xenocara not building on amd64-current
On Sun, Sep 09, 2012 at 11:56:28PM -0500, Emilio Perea wrote: On Sun, Sep 09, 2012 at 12:34:58PM +0200, Matthieu Herrb wrote: On Sat, Sep 08, 2012 at 10:58:55PM -0500, Emilio Perea wrote: I am very grateful for the effort the developers put into the snapshots, so I don't mean this as criticism. But it is possible for somebody reading the thread to believe that the latest snapshot would allow xenocara to build. As far as I can tell, it does not (yet) on amd64. Afacit, it does build. What error are you getting ? Sorry about the delay in responding! This is what I get: *** cc -O2 -pipe -I/usr/X11R6/include -I/usr/xenocara/app/fvwm/fvwm -I/usr/xenocara/app/fvwm/fvwm/.. -I/usr/xenocara/app/fvwm/fvwm/../libs -DFVWM_MODULEDIR=\/usr/X11R6/lib/X11/fvwm\ -DFVWMRC=\.fvwmrc\ -DFVWM_CONFIGDIR=\/usr/X11R6/lib/X11/fvwm\ -c /usr/xenocara/app/fvwm/fvwm/windows.c cc -o fvwm add_window.o bindings.o borders.o builtins.o colormaps.o colors.o complex.o decorations.o events.o focus.o functions.o fvwm.o fvwmdebug.o icons.o menus.o misc.o modconf.o module.o move.o placement.o read.o resize.o style.o virtual.o windows.o -L/usr/X11R6/lib -L/usr/xenocara/app/fvwm/fvwm/../libs/obj -lfvwm -lXpm -lXt -lICE -lSM -lXext -lX11 -lxcb -lXdmcp -lXau /usr/bin/ld: /usr/X11R6/lib/libfvwm.a(ClientMsg.o): relocation R_X86_64_32 can not be used when making a shared object; recompile with -fPIC /usr/X11R6/lib/libfvwm.a: could not read symbols: Bad value ^^ Where does this library come from ? It's not installed by normal xenocara builds. Remove it and it should fix your issue. -- Matthieu Herrb
