Re: Interface input errors incrementing

2013-09-24 Thread Darren Spruell
On Tue, Sep 24, 2013 at 5:18 AM, Stuart Henderson  wrote:
> On 2013-09-24, Darren Spruell  wrote:
>> On Fri, Sep 20, 2013 at 12:13 PM, Alexey E. Suslikov
>> wrote:
 Any idea what the issue could be?
>>>
>>> could you provide netstat -s output after "several hours"?
>>
>> To circle back, errors started building again and below is netstat -s.
>> As Chris suggested I'll try a snapshot and see if issue surfaces
>> again.
>
> Are you certain your cabling and switch are OK?

No. I've got to swap them out to see but wanted to first check out the
firewall due to fact that rebooting it clears the issue for a few
days.

> What do you mean by "ethernet tap"?

One of these units:

http://auctionimages.s3.amazonaws.com/1936/20572/14577108.jpg

It sends a copy of network traffic from link between firewall and LAN
switch to an IDS sensor. I'll also need to verify it along with the
switch (it's a layer 1 device and passes through link negotiation but
could still introduce errors I believe).


+-++--++-+++
| cable modem || firewall || tap || switch |
+-++--++-+++
 | |
 | |
 | |  ++
 |  \.||
  \___| sensor |
  ||
  ++


-- 
Darren Spruell
phatbuck...@gmail.com



Re: Hard Freeze with Snapshots After Aug 19 on ThinkPad X1 Carbon

2013-09-24 Thread Bryan Vyhmeister
On Thu, Sep 19, 2013 at 01:28:08AM -0400, Gabriel Guzman wrote:
> Ok, been awhile, but I'm definitely still getting some freezes.  I'm
> unable to get a ddb report though as it seems that the kernel hasn't
> actually crashed.   It's a bit of a strange problem, and I'm at a loss
> as to how to provide more detail.   I'll throw in everything I've got.
> Here's the detailed version of what happens: 
> 
> Working normally, running programs, checking mail, browsing web, then
> unpredictably the system starts to hang.  Usually the pattern goes like
> this.  No more window updates in X but I'm still able to switch to a
> virtual tty(C1, C2, C3) however, if I attempt to login, I can type my
> username and password, but when I hit enter --- nothing.  I also noticed
> that if I have an ssh session to the machine from another machine, the
> shell is still responsive (i.e. I can hit enter and get a new prompt)
> but if I run anything, even an ls... the program doesn't run and I get
> blocked from doing anything else in that window.  Eventually pings stop
> responding as well, though if I have an open systat window I can see
> the CPU at 100% idle.  It's as if programs that have already been loaded
> into ram continue working, but nothing new can be loaded and executed.
> My only recourse once the pings all stop responding is to hold down the
> power button and restart the machine.
> 
> Anyone have any ideas on how to try and get more details?  If I had to
> guess... I'd guess buggy radeon firmware, but... what do I know?

I'm not sure what to tell you. My freezes all totally disappeared and I
haven't had any more since then. I'm wondering if this is related to
radeondrm or something like that. Hopefully someone who knows more can
chime in. Are they still continuing with the latest snapshots?

Bryan



Re: pure_ftpd other option(style) not work

2013-09-24 Thread Brian McCafferty

On 09/24/13 21:53, Fung wrote:


daemon="/usr/local/sbin/pure-ftpd"
daemon_flags="-o -A -B -H -u1000"



With -o set, is pure-uploadscript running?



Re: pure_ftpd other option(style) not work

2013-09-24 Thread Fung
today test pure-ftpd again in a fress install 

pf.conf is default, not touch anything in system
pure_ftpd other option(style) not work!


login as: root
root@10.0.0.163's password:
Last login: Tue Sep 24 17:42:39 2013 from 10.0.0.88
OpenBSD 5.4-current (GENERIC.MP) #61: Mon Sep 23 15:44:45 MDT 2013

Welcome to OpenBSD: The proactively secure Unix-like operating system.

Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code.  With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.

# cd /root
# vi .profile
# . /root/.profile

# pkg_add pure-ftpd
Ambiguous: choose package for pure-ftpd
 a   0: 
 1: pure-ftpd-1.0.36p2
 2: pure-ftpd-1.0.36p2-ldap
 3: pure-ftpd-1.0.36p2-ldap-virtual_chroot
 4: pure-ftpd-1.0.36p2-mysql
 5: pure-ftpd-1.0.36p2-mysql-virtual_chroot
 6: pure-ftpd-1.0.36p2-postgresql
 7: pure-ftpd-1.0.36p2-postgresql-virtual_chroot
 8: pure-ftpd-1.0.36p2-virtual_chroot
Your choice: 8
pure-ftpd-1.0.36p2-virtual_...:libiconv-1.14p0: ok
pure-ftpd-1.0.36p2-virtual_chroot: ok
The following new rcscripts were installed: /etc/rc.d/pure_ftpd
See rc.d(8) for details.


Just found a interesting thing  
/etc/rc.d/pure_ftpd is in "bin" group but all other scripts in rc.d in "wheel" 
group ?

# ls -l /etc/rc.d/pure_ftpd
-r-xr-xr-x  1 root  bin 228 Sep 20 22:36 pure_ftpd



# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 30359  0.0  0.0   788  1292 ??  Ss 9:31AM0:00.00 pure-ftpd: 
-pu   re-ftpd (SERVER) 
(pure-ftpd)
root 23216  0.0  0.0   448   904 p0  S+ 9:31AM0:00.00 grep ftpd

# ftp localhost
Trying 127.0.0.1...
Connected to localhost.
220-- Welcome to Pure-FTPd [privsep] [TLS] --
220-You are user number 1 of 50 allowed.
220-Local time is now 09:32. Server port: 21.
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
Name (localhost:root): ^C#


# vi /etc/rc.d/pure_ftpd#

# /etc/rc.d/pure_ftpd stop
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 15167  0.0  0.0   244   252 p0  R+/1   9:33AM0:00.00 grep ftpd

# /etc/rc.d/pure_ftpd start
pure_ftpd(ok)

# ps -auwx | grep ftpd
root 11999  0.0  0.0   716   980 ??  Ss 9:33AM0:00.00 
/usr/local/sbin/pure-ftpd -o -A -B -H -u1000
root 21498  0.0  0.0   252   224 p0  R+/1   9:33AM0:00.00 grep ftpd

# ftp localhost
Trying 127.0.0.1...
ftp: connect to address 127.0.0.1: Connection refused
Trying ::1...
ftp: connect: Connection refused
ftp> exit

# sysctl kern.version
kern.version=OpenBSD 5.4-current (GENERIC.MP) #61: Mon Sep 23 15:44:45 MDT 2013
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

# pkg_info
athn-firmware-1.1p0 firmware binary images for athn(4) driver
libiconv-1.14p0 character set conversion library
pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very secure 
FTP server
radeondrm-firmware-20130808 firmware binary images for radeondrm(4) driver


# cat /etc/pf.conf
#   $OpenBSD: pf.conf,v 1.52 2013/02/13 23:11:14 halex Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.

# increase default state limit from 10'000 states on busy systems
#set limit states 10

set skip on lo

# filter rules and anchor for ftp-proxy(8)
#anchor "ftp-proxy/*"
#pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021

# anchor for relayd(8)
#anchor "relayd/*"

block   # block stateless traffic
pass# establish keep-state

# rules for spamd(8)
#table  persist
#table  persist file "/etc/mail/nospamd"
#pass in on egress proto tcp from any to any port smtp \
#rdr-to 127.0.0.1 port spamd
#pass in on egress proto tcp from  to any port smtp
#pass in log on egress proto tcp from  to any port smtp
#pass out log on egress proto tcp to any port smtp


#block in quick from urpf-failed to any # use with care

# By default, do not permit remote connections to X11
block in on ! lo0 proto tcp to port 6000:6010




# cat /etc/rc.d/pure_ftpd
#!/bin/sh
#
# $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $

daemon="/usr/local/sbin/pure-ftpd"
daemon_flags="-o -A -B -H -u1000"

. /etc/rc.d/rc.subr

pexp="pure-ftpd: -pure-ftpd \(SERVER\)"
rc_reload=NO

rc_cmd $1



# fstat
USER CMD  PID   FD MOUNTINUM MODE   R/WSZ|DV
root fstat  22374 text /usr   181962 -r-xr-xr-x   r24440
root fstat  22374   wd /  103968 drwxr-xr-x   r 1536
root fstat  223740 /   78522 crw--w  rwttyp0
root fstat  223741 / 

Re: installboot invalid boot record signature, yaifo

2013-09-24 Thread Kenneth R Westerback
On Tue, Sep 24, 2013 at 09:31:52PM +0200, Jona Joachim wrote:
> Hi,
> I'm currently patching yaifo to make it work with -CURRENT. The build is
> going fine, however I'm stuck at an installboot error which I don't
> understand.
> 
> /usr/bin/sudo /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot
> /dev/rvnd0c
> boot: /mnt/boot proto: /usr/mdec/biosboot device: /dev/rvnd0c
> installboot: disklabel type unknown

Fascinating. This error occurs when d_type is 0 in the disklabel. i.e. it
hasn't been set to one of DTYPE_ST506, _ESDI, _FLOPPY, etc. As you seem 
to using vnd I would expect d_type to be set to DTYPE_VND. But 
somehow the disklabel you are reading does not have this field 
initialized.

Do you know how the disklabel was created?

 Ken

> /mnt/boot is 9 blocks x 8192 bytes
> fs block shift 1; part offset 0; inode block 32, offset 936
> master boot record (MBR) at sector 0
> installboot: invalid boot record signature (0x) @ sector 0
> 
> I don't understand why installboot fails here and I can't find a reference
> to the error.
> Can anybody explain to me what is going wrong?
> You can find the whole log attached.
> 
> Best regards,
> Jona
> 
> [demime 1.01d removed an attachment of type application/octet-stream which 
> had a name of make2.log]



Re: OSPF ABR/ASBR issue

2013-09-24 Thread Stijn

On 24/09/2013 11:58, Kapetanakis Giannis wrote:

On 24/09/13 12:24, mxb wrote:
I'v seen this issue, but it just magically disappeared then I 
re-configured ospfd and restarted on both ends.

I had an issue to see routes from area 0.0.0.0 on area 0.0.0.78.

Host A:
area 0.0.0.0 {

 interface vether0 { metric 5 }
 interface vether1 { metric 5 }

}

area 0.0.0.78 {

 interface vether2 { metric 10
…….
 }

 interface carp1 { passive }
 interface carp2 { passive }

 interface lo1 { metric 5 }
 interface vic2 { metric 10 }
}

Host B:
area 0.0.0.78 {

 interface vether2 { metric 10
   …….
 }

}


Host A is:
OpenBSD 5.4 (GENERIC.MP) #34: Sun Jul 21 22:07:08 MDT 2013
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Host B is:
OpenBSD 5.3 (GENERIC) #53: Tue Mar 12 18:15:44 MDT 2013
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC


As you can see, this setup works without any patch.
I tested to remove lo1 and see if routes to carped nets disappear. No 
luck. Routes are there.



//mxb

On 24 sep 2013, at 11:08, Kapetanakis Giannis 
 wrote:



On 24/09/13 12:02, Kapetanakis Giannis wrote:
Without this patch, routes to (lo2) and carpX:network where not 
distributed. regards, G

My e-mail client somehow f@cked up Claudio's patch,

Here is the link to hist original post
http://marc.info/?l=openbsd-misc&m=137038436926946&w=2

G


I think I'm talking about a different setup than yours.

Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7]

Cisco does not learn routes from 0.0.0.7 which are only local on OBSD 
(VLANs, carp, loopback etc).


If the setup is

Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7] --- Cisco2

Then Cisco1 learns the routes from 0.0.0.7. I guess they come from 
Cisco2.


G

With the last patch (05/06/13) I tested from Claudio, area 0.0.0.7 was 
announced in area 0.0.0.0 (using your first setup). Adding another OSD 
router (instead of Cisco2 in your second setup) also worked, however 
when I stopped OSPF on this second OBSD router area 0.0.0.7 was not 
announced anymore. Restarting the OSPF process on the first OBSD router 
brought area 0.0.0.7 back in.


So Cisco1 learns the routes from the first OBSD router; not the Cisco2 
(IIRC that isn't possible unless you have a virtual link from Cisco2 to 
Cisco1).


HTH,
Stijn



Re: Unable to open DVD device

2013-09-24 Thread Chris Bennett
On Tue, Sep 24, 2013 at 05:40:34PM +0500, dmitry.sensei wrote:
> No. Only for testing
> 24.09.2013 17:10  "Stuart Henderson"
> 
> ??:
> 
> > On 2013-09-24, dmitry.sensei  wrote:
> > > Try sudo mlayer or use xine
> >
> > Running mplayer as *root*? You're joking, right?
> 

So if there actually were a security problem in mplayer, you would be
the first to test it out for us?
Sounds helpful.



Re: pppoe over vlan problem

2013-09-24 Thread Henning Brauer
* Daniel Gillen  [2013-09-24 17:36]:
> After some debugging with tcpdump, I found out that from 5.0 to 5.1,
> OpenBSD introduced vlan priorisation support (IEEE 802.1p) and per
> default sets the vlan PCP field to the value 3.
> 
> Unfortunately, my ISP only allows connections when this field is set to 0 :(

what? you are kidding, right?

talk to the ISP and tell them they're on drugs. it is perfectly fine
to ignore the prio field, but requiring a specific value is absolutely
ridiculous. if they don't fix it, share who it is to warn people.

that said, resetting should hav worked, I have a vague idea where that
bug might sit; can't check deeper right now tho. oh how much i wish we
had a bug tracker.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services GmbH, http://bsws.de, Full-Service ISP
Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed
Henning Brauer Consulting, http://henningbrauer.com/



installboot invalid boot record signature, yaifo

2013-09-24 Thread Jona Joachim
Hi,
I'm currently patching yaifo to make it work with -CURRENT. The build is
going fine, however I'm stuck at an installboot error which I don't
understand.

/usr/bin/sudo /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot
/dev/rvnd0c
boot: /mnt/boot proto: /usr/mdec/biosboot device: /dev/rvnd0c
installboot: disklabel type unknown
/mnt/boot is 9 blocks x 8192 bytes
fs block shift 1; part offset 0; inode block 32, offset 936
master boot record (MBR) at sector 0
installboot: invalid boot record signature (0x) @ sector 0

I don't understand why installboot fails here and I can't find a reference
to the error.
Can anybody explain to me what is going wrong?
You can find the whole log attached.

Best regards,
Jona

[demime 1.01d removed an attachment of type application/octet-stream which had 
a name of make2.log]



Re: cvsync, rsync

2013-09-24 Thread Zé Loff
On Fri, Sep 20, 2013 at 04:17:51PM +0200, Janne Johansson wrote:
> 2013/9/20 
> 
> > Janne Johansson  wrote:
> >
> > > In practical terms, if I rsync a file from X to Y, and rsync says it is
> > > complete, how to verify the 4G files actually are equal?
> > > Given that rsync only knows that hash(A) was equal to hash(B) at the end,
> > > what do you propose to use for verification?
> >
> > In practical terms, it is indeed very unprobable that a file that
> > passed the last check is not the right one.
> >
> 
> Yes, but how to verify it?

Calculate the hashes reading the files backwards and compare them.
Can you all give it a rest now?

-- 



Re: slow console

2013-09-24 Thread Chris Cappuccio
Kevin Chadwick [ma1l1i...@yahoo.co.uk] wrote:
> > Under X, KMS performance should be faster on a lot of 
> > hardware. The whole point of KMS is to bring modern, better
> > supported drivers to OpenBSD (and get rid of the crappy X
> > security model).
> 
> I hope that's true but I think the most important point is that it is
> slower because it is so much slower.
> 
> In other words the terminal without KMS would likely be slowing down
> the operation anyway except you only noticed before when performance
> really mattered and so now you are working even faster with the
> arguable bonus that things may be more likely to be noticed as they fly
> by to shift -> page up to.
> 

The vt terminal is going to be slower with the current code. It
works completely differently now. The X terminal should not be.



pppoe over vlan problem

2013-09-24 Thread Daniel Gillen
Hi list

I recently upgraded my firewall from OpenBSD 5.0 to 5.3 (i386).
Unfortunately, after the upgrade process, my pppoe connection to my ISP
didn't work anymore.

I'm using kernel pppoe with the following setup:

/etc/hostname.xl1:
  up

/etc/hostname.vlan0:
  vlan 35 vlandev xl1 up

/etc/hostname.pppoe0:
inet 0.0.0.0 255.255.255.255 0.0.0.1 \
  pppoedev vlan0 \
  authproto pap authname "login" authkey "pass" \
  up
!/sbin/route add default -ifp pppoe0 0.0.0.1

After some debugging with tcpdump, I found out that from 5.0 to 5.1,
OpenBSD introduced vlan priorisation support (IEEE 802.1p) and per
default sets the vlan PCP field to the value 3.

Unfortunately, my ISP only allows connections when this field is set to 0 :(

As a work-around, I removed the setting of this field from the kernel
and now it works but I wonder if there isn't a better way to solve my issue.

According to the vlan(4) manpage, this should be fixable using a pf
rule. I tried all the following (with and without "out") but none worked :(

match out on vlan0 set prio 0
pass out on vlan0 set prio 0
match out on pppoe0 set prio 0
pass out on pppoe0 set prio 0

Any ideas are welcome.

Thx in advance

-- 
Unix _IS_ user friendly - it's just
selective about who its friends are!



Re: slow console

2013-09-24 Thread Kevin Chadwick
> Under X, KMS performance should be faster on a lot of 
> hardware. The whole point of KMS is to bring modern, better
> supported drivers to OpenBSD (and get rid of the crappy X
> security model).

I hope that's true but I think the most important point is that it is
slower because it is so much slower.

In other words the terminal without KMS would likely be slowing down
the operation anyway except you only noticed before when performance
really mattered and so now you are working even faster with the
arguable bonus that things may be more likely to be noticed as they fly
by to shift -> page up to.

-- 
___

'Write programs that do one thing and do it well. Write programs to work
together. Write programs to handle text streams, because that is a
universal interface'

(Doug McIlroy)
___



Re: IPSec endpoints won't talk to each other

2013-09-24 Thread Hugo Osvaldo Barrera
On 2013-09-24 09:44, James Griffin wrote:
> * Hugo Osvaldo Barrera  [2013-09-24 03:53:46
-0300]:
>
> > Hi,
> >
> > I've been experimenting a bit with IPSec and creating a VPN using it.
I've
> > been successful, but have encountered an odd issue.
> >
> > I've two hosts, linking two networks:
> >
> > Host A's /etc/iked.conf:
> > ikev2 active esp from 172.16.0.0/16 to 172.17.0.0/16 \
> >   peer 174.136.104.18 psk "a-test-key"
> >
> > Host B's /etc/iked.conf:
> > ikev2 esp from 172.17.0.0/16 to 172.16.0.0/16 \
> >   peer 190.210.108.249 psk "a-test-key"
> >
> > (Of course those are not the real keys).
> >
> > I can ssh 172.17.0.1 from the 172.16.0.0 network fine and viceversa.
> >
> > So far so good.
> >
> > BUT I can't establish any TCP connection from Host A to Host B's public
> > IP address and viceversa.
>
> So you can connect using internal addresses but not using public address.
Just a thought, but have you opened the necessary ports on your router? What
is your setup like?
>
> [ ... ]
>

They're both connected directly to the internet with no router in front
of them. With the tunnel disabled, everything works fine between both.

--
Hugo Osvaldo Barrera

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: Unable to open DVD device

2013-09-24 Thread dmitry.sensei
No. Only for testing
24.09.2013 17:10 пользователь "Stuart Henderson"

написал:

> On 2013-09-24, dmitry.sensei  wrote:
> > Try sudo mlayer or use xine
>
> Running mplayer as *root*? You're joking, right?



HIgh temperature Asus k52F

2013-09-24 Thread michael
Hello, I got an Asus K52F recently. I repair it, because the keyboard
and battery were dead. I also cleaned the dust and reapplied thermal
grease. 

On the dark side, on Linux, the temperature is at 45c at idle, on load
at 55c. On OpenBSD is near 64c idle and on load up to 85c. 

With the acpi everything is working: brightness, volume, suspend,
hotkeys. 

These are idle temps 

# sysctl hw.sensors 
hw.sensors.cpu0.temp0=65.00 degC
hw.sensors.cpu1.temp0=65.00 degC
hw.sensors.cpu2.temp0=65.00 degC
hw.sensors.cpu3.temp0=65.00 degC
hw.sensors.acpitz0.temp0=57.00 degC (zone temperature)
hw.sensors.acpiac0.indicator0=Off (power supply)
hw.sensors.acpibat0.volt0=10.80 VDC (voltage)
hw.sensors.acpibat0.volt1=10.65 VDC (current voltage)
hw.sensors.acpibat0.power0=25.95 W (rate)
hw.sensors.acpibat0.watthour0=48.39 Wh (last full capacity)
hw.sensors.acpibat0.watthour1=4.84 Wh (warning capacity)
hw.sensors.acpibat0.watthour2=0.48 Wh (low capacity)
hw.sensors.acpibat0.watthour3=23.33 Wh (remaining capacity), OK
hw.sensors.acpibat0.raw0=1 (battery discharging), OK
hw.sensors.acpibtn0.indicator0=On (lid open)
hw.sensors.itherm0.temp1=54.05 degC (Core 1)
hw.sensors.itherm0.temp4=57.00 degC (CPU/GPU Max temp)
hw.sensors.itherm0.temp9=57.00 degC (GPU/Memory controller abs.)
hw.sensors.itherm0.temp10=59.00 degC (PCH abs.)
hw.sensors.itherm0.power0=5.00 W (CPU power consumption) 

# apm 
Battery state: low, 47% remaining, 52 minutes life estimate
A/C adapter state: not connected
Performance adjustment mode: manual (933 MHz)
# sysctl hw.setperf 
hw.setperf=0 

# dmesg
OpenBSD 5.4-current (GENERIC.MP) #59: Tue Sep 17 08:43:41 MDT 2013
 t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 3050057728 (2908MB)
avail mem = 2960818176 (2823MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xec3d0 (77 entries)
bios0: vendor American Megatrends Inc. version "K52F.218" date
07/12/2011
bios0: ASUSTeK Computer Inc. K52F
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC DBGP ECDT SLIC MCFG HPET SSDT
acpi0: wakeup devices PEG4(S4) PEG5(S4) PEG6(S4) P0P1(S4) EHC1(S3)
USB1(S3) USB2(S3) USB3(S3) USB4(S3) EHC2(S3) USB5(S3) USB6(S3) USB7(S3)
HDEF(S4) RP01(S4) RP02(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz, 2394.35 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
cpu0: apic clock running at 132MHz
cpu1 at mainbus0: apid 4 (application processor)
cpu1: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz, 2393.99 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 2, package 0
cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz, 2393.99 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 1, core 0, package 0
cpu3 at mainbus0: apid 5 (application processor)
cpu3: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz, 2393.99 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 2, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiec0 at acpi0
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG1)
acpiprt2 at acpi0: bus -1 (PEG3)
acpiprt3 at acpi0: bus -1 (PEG5)
acpiprt4 at acpi0: bus 5 (P0P1)
acpiprt5 at acpi0: bus 1 (RP01)
acpiprt6 at acpi0: bus 2 (RP02)
acpiprt7 at acpi0: bus -1 (RP04)
acpiprt8 at acpi0: bus -1 (RP05)
acpiprt9 at acpi0: bus 4 (RP06)
acpiprt10 at acpi0: bus -1 (RP07)
acpiprt11 at acpi0: bus -1 (RP08)
acpiprt12 at acpi0: bus 3 (RP03)
acpicpu0 at acpi0: C3, C1, PSS
acpicpu1 at acpi0: C3, C1, PSS
acpicpu2 at acpi0: C3, C1, PSS
acpicpu3 at acpi0: C3, C1, PSS
acpitz0 at acpi0: critical temperature is 93 degC
acpiac0 at acpi0: AC unit offline
acpibat0 at acpi0: BAT0 model "K52F-44" serial type LIon oem "ASUSTek"
acpiasus at acpi0 not configured
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
cpu0: Enhanced SpeedStep 2394 MHz: speeds: 2399, 2266, 2133, 1

Re: Unable to open DVD device

2013-09-24 Thread Francois Pussault
> 
> From: Stuart Henderson 
> Sent: Tue Sep 24 14:08:16 CEST 2013
> To: 
> Subject: Re: Unable to open DVD device
> 
> 
> On 2013-09-24, dmitry.sensei  wrote:
> > Try sudo mlayer or use xine
> 
> Running mplayer as *root*? You're joking, right?
> 
Yes he said "or use xine" so it was a joke.


Cordialement
Francois Pussault
3701 - 8 rue Marcel Pagnol
31100 Toulouse 
France 
+33 6 17 230 820   +33 5 34 365 269 
fpussa...@contactoffice.fr



Re: Interface input errors incrementing

2013-09-24 Thread Stuart Henderson
On 2013-09-24, Darren Spruell  wrote:
> On Fri, Sep 20, 2013 at 12:13 PM, Alexey E. Suslikov
> wrote:
>>> Any idea what the issue could be?
>>
>> could you provide netstat -s output after "several hours"?
>
> To circle back, errors started building again and below is netstat -s.
> As Chris suggested I'll try a snapshot and see if issue surfaces
> again.

Are you certain your cabling and switch are OK?

What do you mean by "ethernet tap"?



Re: Unable to open DVD device

2013-09-24 Thread Stuart Henderson
On 2013-09-24, dmitry.sensei  wrote:
> Try sudo mlayer or use xine

Running mplayer as *root*? You're joking, right?



Re: Unable to open DVD device [fixed]

2013-09-24 Thread OpenBSD

On 09/24/13 11:30, OpenBSD wrote:

Hi Misc@,

With Sun 8 Sep Snapshot (OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep 8
15:28:55 MDT 2013 - dmesg below [1]) my Toshiba Portege Laptop is no
longer able to play DVD's, with errors about opening /dev/rcd0c:

port:fred ~> mplayer dvd://1
MPlayer SVN-r35910 (C) 2000-2013 MPlayer Team

Playing dvd://1.
libdvdread: Using libdvdcss version 1.2.13 for DVD access
libdvdread: Could not open /dev/rcd0c
Couldn't open DVD device: /dev/rcd0c (No such file or directory)
No stream found to handle url dvd://1
Exiting... (End of file)

The device is there:

port:fred ~> ls -la /dev/rcd*
crw-r-  1 root  operator   15,   0 Sep 11 15:04 /dev/rcd0a
crw-r-  1 root  operator   15,   2 Sep 11 15:04 /dev/rcd0c
crw-r-  1 root  operator   15,  16 Sep 11 15:04 /dev/rcd1a
crw-r-  1 root  operator   15,  18 Sep 11 15:04 /dev/rcd1c

port:fred ~> dmesg|grep -i dvd
cd0 at scsibus0 targ 2 lun 0:  ATAPI
5/cdrom removable

Any clues how I can further debug this?

Cheers

Fred


Hi Misc@

Upgrading to the latest snapshot, and setting -dvd-device /dev/cd0c worked.

Cheers

Fred

port:fred ~> dmesg|head
OpenBSD 5.4-current (GENERIC.MP) #61: Mon Sep 23 15:44:45 MDT 2013
t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8447131648 (8055MB)
avail mem = 8214151168 (7833MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xaafd (43 entries)
bios0: vendor TOSHIBA version "Version 3.60" date 01/24/2012
bios0: TOSHIBA TOSHIBA
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5



Re: slow console

2013-09-24 Thread Tomas Bodzar
On Tue, Sep 24, 2013 at 4:48 AM, Chris Cappuccio  wrote:

> Paul de Weerd [we...@weirdnet.nl] wrote:
> >
> > Probably the updates to your (now graphical) terminal.  Time is spent
> > updating the frame buffer.  Consider it a feature: you can now
> > (better) read along with what's happening ;)
> >
> > A workaround is to start processes that produce lots of output in a
> > shell that isn't constantly outputting to the actual display (e.g. in
> > a VT but switch away after starting, or in tmux but switch to another
> > window after starting...)
> >
>
> On most hardware, the text console under KMS really shouldn't
> be bad at all. Hardware that is very old but still supported
> by inteldrm will be much slower. It might be worth discussing
> text/VT console slowdowns with KMS on misc if you're using
> something newer than an intel 828xx video setup. Text mode
> performance is within the domain of the kernel's video code.
> Mark Kettenis tried some tricks that made text quite fast, but
> hung some chips, so the OpenBSD code was reverted to match Linux.
>
> Under X, KMS performance should be faster on a lot of
> hardware. The whole point of KMS is to bring modern, better
> supported drivers to OpenBSD (and get rid of the crappy X
> security model). If something performs worse under X+KMS,
> that may be worth discussing too. X performance depends on
> both the kernel and the X video driver. There are constant
> iterations happening here. It's nice to see regular updates of
> vendor-supported graphics code going into the tree.
>
> This stuff will keep evolving before the 5.5 release.
>
> KMS also gives people a chance to play with stuff like Wayland.
> Wayland which attempts to get rid of the inefficiencies of the
> X protocols.
>
>
This "may" help in long run for Nvidia graphics
http://lists.freedesktop.org/archives/nouveau/2013-September/014480.html



Re: Unable to open DVD device

2013-09-24 Thread OpenBSD

On 09/24/13 11:35, David Coppa wrote:

On Tue, Sep 24, 2013 at 12:30 PM, OpenBSD  wrote:

Hi Misc@,

With Sun 8 Sep Snapshot (OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep 8
15:28:55 MDT 2013 - dmesg below [1]) my Toshiba Portege Laptop is no longer
able to play DVD's, with errors about opening /dev/rcd0c:

port:fred ~> mplayer dvd://1
MPlayer SVN-r35910 (C) 2000-2013 MPlayer Team

Playing dvd://1.
libdvdread: Using libdvdcss version 1.2.13 for DVD access
libdvdread: Could not open /dev/rcd0c
Couldn't open DVD device: /dev/rcd0c (No such file or directory)
No stream found to handle url dvd://1
Exiting... (End of file)

The device is there:

port:fred ~> ls -la /dev/rcd*
crw-r-  1 root  operator   15,   0 Sep 11 15:04 /dev/rcd0a
crw-r-  1 root  operator   15,   2 Sep 11 15:04 /dev/rcd0c
crw-r-  1 root  operator   15,  16 Sep 11 15:04 /dev/rcd1a
crw-r-  1 root  operator   15,  18 Sep 11 15:04 /dev/rcd1c

port:fred ~> dmesg|grep -i dvd
cd0 at scsibus0 targ 2 lun 0:  ATAPI 5/cdrom
removable

Any clues how I can further debug this?


Add your user to the 'operator' group.



Sorry should have said:

port:fred ~> id
uid=1000(fred) gid=1000(fred) groups=1000(fred), 0(wheel), 5(operator), 
9(wsrc), 10(users), 20(staff), 67(www), 117(dialer)


And have tried sudo mplayer and vlc - I'll try xine and see if that 
makes a difference.


Cheers

Fred



Re: Unable to open DVD device

2013-09-24 Thread dmitry.sensei
Try sudo mlayer or use xine
24.09.2013 15:31 пользователь "OpenBSD" 
написал:

> Hi Misc@,
>
> With Sun 8 Sep Snapshot (OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep 8
> 15:28:55 MDT 2013 - dmesg below [1]) my Toshiba Portege Laptop is no longer
> able to play DVD's, with errors about opening /dev/rcd0c:
>
> port:fred ~> mplayer dvd://1
> MPlayer SVN-r35910 (C) 2000-2013 MPlayer Team
>
> Playing dvd://1.
> libdvdread: Using libdvdcss version 1.2.13 for DVD access
> libdvdread: Could not open /dev/rcd0c
> Couldn't open DVD device: /dev/rcd0c (No such file or directory)
> No stream found to handle url dvd://1
> Exiting... (End of file)
>
> The device is there:
>
> port:fred ~> ls -la /dev/rcd*
> crw-r-  1 root  operator   15,   0 Sep 11 15:04 /dev/rcd0a
> crw-r-  1 root  operator   15,   2 Sep 11 15:04 /dev/rcd0c
> crw-r-  1 root  operator   15,  16 Sep 11 15:04 /dev/rcd1a
> crw-r-  1 root  operator   15,  18 Sep 11 15:04 /dev/rcd1c
>
> port:fred ~> dmesg|grep -i dvd
> cd0 at scsibus0 targ 2 lun 0:  ATAPI
> 5/cdrom removable
>
> Any clues how I can further debug this?
>
> Cheers
>
> Fred
>
> [1] dmesg:
>
> OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep  8 15:28:55 MDT 2013
> dera...@amd64.openbsd.org:/**usr/src/sys/arch/amd64/**compile/
> GENERIC.MP
> real mem = 8447131648 (8055MB)
> avail mem = 8214159360 (7833MB)
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xaafd (43 entries)
> bios0: vendor TOSHIBA version "Version 3.60" date 01/24/2012
> bios0: TOSHIBA TOSHIBA
> acpi0 at bios0: rev 0
> acpi0: sleep states S0 S3 S4 S5
> acpi0: tables DSDT FACP HPET APIC MCFG ASF! TCPA BOOT SLIC SSDT SSDT SSDT
> SSDT
> acpi0: wakeup devices LANC(S4) HDEF(S3) RP02(S4) PXSX(S4) RP04(S4)
> PXSX(S4) USBB(S4) USBC(S4) EHC1(S4) EHC2(S4) PWRB(S4) LID_(S4)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpihpet0 at acpi0: 14318179 Hz
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.30 MHz
> cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,**MCE,CX8,APIC,SEP,MTRR,PGE,MCA,**
> CMOV,PAT,PSE36,CFLUSH,DS,ACPI,**MMX,FXSR,SSE,SSE2,SS,HTT,TM,**
> PBE,SSE3,PCLMUL,DTES64,MWAIT,**DS-CPL,VMX,SMX,EST,TM2,SSSE3,**
> CX16,xTPR,PDCM,PCID,SSE4.1,**SSE4.2,x2APIC,POPCNT,DEADLINE,**
> AES,XSAVE,AVX,NXE,LONG,LAHF,**PERF,ITSC
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> cpu0: apic clock running at 99MHz
> cpu1 at mainbus0: apid 1 (application processor)
> cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
> cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,**MCE,CX8,APIC,SEP,MTRR,PGE,MCA,**
> CMOV,PAT,PSE36,CFLUSH,DS,ACPI,**MMX,FXSR,SSE,SSE2,SS,HTT,TM,**
> PBE,SSE3,PCLMUL,DTES64,MWAIT,**DS-CPL,VMX,SMX,EST,TM2,SSSE3,**
> CX16,xTPR,PDCM,PCID,SSE4.1,**SSE4.2,x2APIC,POPCNT,DEADLINE,**
> AES,XSAVE,AVX,NXE,LONG,LAHF,**PERF,ITSC
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 1, core 0, package 0
> cpu2 at mainbus0: apid 2 (application processor)
> cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
> cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,**MCE,CX8,APIC,SEP,MTRR,PGE,MCA,**
> CMOV,PAT,PSE36,CFLUSH,DS,ACPI,**MMX,FXSR,SSE,SSE2,SS,HTT,TM,**
> PBE,SSE3,PCLMUL,DTES64,MWAIT,**DS-CPL,VMX,SMX,EST,TM2,SSSE3,**
> CX16,xTPR,PDCM,PCID,SSE4.1,**SSE4.2,x2APIC,POPCNT,DEADLINE,**
> AES,XSAVE,AVX,NXE,LONG,LAHF,**PERF,ITSC
> cpu2: 256KB 64b/line 8-way L2 cache
> cpu2: smt 0, core 1, package 0
> cpu3 at mainbus0: apid 3 (application processor)
> cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
> cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,**MCE,CX8,APIC,SEP,MTRR,PGE,MCA,**
> CMOV,PAT,PSE36,CFLUSH,DS,ACPI,**MMX,FXSR,SSE,SSE2,SS,HTT,TM,**
> PBE,SSE3,PCLMUL,DTES64,MWAIT,**DS-CPL,VMX,SMX,EST,TM2,SSSE3,**
> CX16,xTPR,PDCM,PCID,SSE4.1,**SSE4.2,x2APIC,POPCNT,DEADLINE,**
> AES,XSAVE,AVX,NXE,LONG,LAHF,**PERF,ITSC
> cpu3: 256KB 64b/line 8-way L2 cache
> cpu3: smt 1, core 1, package 0
> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
> acpimcfg0 at acpi0 addr 0xf800, bus 0-63
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (PEGP)
> acpiprt2 at acpi0: bus 1 (RP01)
> acpiprt3 at acpi0: bus 2 (RP02)
> acpiprt4 at acpi0: bus 4 (RP03)
> acpiprt5 at acpi0: bus -1 (RP04)
> acpiprt6 at acpi0: bus 5 (RP05)
> acpiprt7 at acpi0: bus 6 (RP06)
> acpiprt8 at acpi0: bus 7 (RP07)
> acpiprt9 at acpi0: bus -1 (RP08)
> acpiprt10 at acpi0: bus -1 (PCIB)
> acpicpu0 at acpi0: C1, PSS
> acpicpu1 at acpi0: C1, PSS
> acpicpu2 at acpi0: C1, PSS
> acpicpu3 at acpi0: C1, PSS
> acpipwrres0 at acpi0: PDOC
> acpitz0 at acpi0: critical temperature is 102 degC
> acpitoshiba0 at acpi0
> acpiac0 at acpi0: AC unit online
> acpibtn0 at acpi0: PWRB
> acpibtn1 at acpi0: LID_
> acpibat0 at acpi0: BAT1 model "G71C000E4410" serial 001888 type Li-ION
>   oem "0"
> acpidock0 at acpi0: DOCK not docked (0)
> cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2000, 1800, 1600,
> 1400, 1200, 1000, 800 MHz
> pci0 at mainbus0 bus 0
> pch

Re: Unable to open DVD device

2013-09-24 Thread David Coppa
On Tue, Sep 24, 2013 at 12:30 PM, OpenBSD  wrote:
> Hi Misc@,
>
> With Sun 8 Sep Snapshot (OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep 8
> 15:28:55 MDT 2013 - dmesg below [1]) my Toshiba Portege Laptop is no longer
> able to play DVD's, with errors about opening /dev/rcd0c:
>
> port:fred ~> mplayer dvd://1
> MPlayer SVN-r35910 (C) 2000-2013 MPlayer Team
>
> Playing dvd://1.
> libdvdread: Using libdvdcss version 1.2.13 for DVD access
> libdvdread: Could not open /dev/rcd0c
> Couldn't open DVD device: /dev/rcd0c (No such file or directory)
> No stream found to handle url dvd://1
> Exiting... (End of file)
>
> The device is there:
>
> port:fred ~> ls -la /dev/rcd*
> crw-r-  1 root  operator   15,   0 Sep 11 15:04 /dev/rcd0a
> crw-r-  1 root  operator   15,   2 Sep 11 15:04 /dev/rcd0c
> crw-r-  1 root  operator   15,  16 Sep 11 15:04 /dev/rcd1a
> crw-r-  1 root  operator   15,  18 Sep 11 15:04 /dev/rcd1c
>
> port:fred ~> dmesg|grep -i dvd
> cd0 at scsibus0 targ 2 lun 0:  ATAPI 5/cdrom
> removable
>
> Any clues how I can further debug this?

Add your user to the 'operator' group.



Unable to open DVD device

2013-09-24 Thread OpenBSD

Hi Misc@,

With Sun 8 Sep Snapshot (OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep 
8 15:28:55 MDT 2013 - dmesg below [1]) my Toshiba Portege Laptop is no 
longer able to play DVD's, with errors about opening /dev/rcd0c:


port:fred ~> mplayer dvd://1
MPlayer SVN-r35910 (C) 2000-2013 MPlayer Team

Playing dvd://1.
libdvdread: Using libdvdcss version 1.2.13 for DVD access
libdvdread: Could not open /dev/rcd0c
Couldn't open DVD device: /dev/rcd0c (No such file or directory)
No stream found to handle url dvd://1
Exiting... (End of file)

The device is there:

port:fred ~> ls -la /dev/rcd*
crw-r-  1 root  operator   15,   0 Sep 11 15:04 /dev/rcd0a
crw-r-  1 root  operator   15,   2 Sep 11 15:04 /dev/rcd0c
crw-r-  1 root  operator   15,  16 Sep 11 15:04 /dev/rcd1a
crw-r-  1 root  operator   15,  18 Sep 11 15:04 /dev/rcd1c

port:fred ~> dmesg|grep -i dvd
cd0 at scsibus0 targ 2 lun 0:  ATAPI 
5/cdrom removable


Any clues how I can further debug this?

Cheers

Fred

[1] dmesg:

OpenBSD 5.4-current (GENERIC.MP) #53: Sun Sep  8 15:28:55 MDT 2013
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8447131648 (8055MB)
avail mem = 8214159360 (7833MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xaafd (43 entries)
bios0: vendor TOSHIBA version "Version 3.60" date 01/24/2012
bios0: TOSHIBA TOSHIBA
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET APIC MCFG ASF! TCPA BOOT SLIC SSDT SSDT 
SSDT SSDT
acpi0: wakeup devices LANC(S4) HDEF(S3) RP02(S4) PXSX(S4) RP04(S4) 
PXSX(S4) USBB(S4) USBC(S4) EHC1(S4) EHC2(S4) PWRB(S4) LID_(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.30 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC

cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
cpu0: apic clock running at 99MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC

cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC

cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC

cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEGP)
acpiprt2 at acpi0: bus 1 (RP01)
acpiprt3 at acpi0: bus 2 (RP02)
acpiprt4 at acpi0: bus 4 (RP03)
acpiprt5 at acpi0: bus -1 (RP04)
acpiprt6 at acpi0: bus 5 (RP05)
acpiprt7 at acpi0: bus 6 (RP06)
acpiprt8 at acpi0: bus 7 (RP07)
acpiprt9 at acpi0: bus -1 (RP08)
acpiprt10 at acpi0: bus -1 (PCIB)
acpicpu0 at acpi0: C1, PSS
acpicpu1 at acpi0: C1, PSS
acpicpu2 at acpi0: C1, PSS
acpicpu3 at acpi0: C1, PSS
acpipwrres0 at acpi0: PDOC
acpitz0 at acpi0: critical temperature is 102 degC
acpitoshiba0 at acpi0
acpiac0 at acpi0: AC unit online
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: LID_
acpibat0 at acpi0: BAT1 model "G71C000E4410" serial 001888 type 
Li-ION   oem "0"

acpidock0 at acpi0: DOCK not docked (0)
cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2000, 1800, 1600, 
1400, 1200, 1000, 800 MHz

pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 3000" rev 0x09
intagp0 at vga1
agp0 at intagp0: aperture at 0xb000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1366x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 6 Series MEI" rev 0x04 at pci0 dev

Re: OSPF ABR/ASBR issue

2013-09-24 Thread Kapetanakis Giannis

On 24/09/13 12:24, mxb wrote:

I'v seen this issue, but it just magically disappeared then I re-configured 
ospfd and restarted on both ends.
I had an issue to see routes from area 0.0.0.0 on area 0.0.0.78.

Host A:
area 0.0.0.0 {

 interface vether0 { metric 5 }
 interface vether1 { metric 5 }

}

area 0.0.0.78 {

 interface vether2 { metric 10
…….
 }

 interface carp1 { passive }
 interface carp2 { passive }

 interface lo1 { metric 5 }
 interface vic2 { metric 10 }
}

Host B:
area 0.0.0.78 {

 interface vether2 { metric 10
   …….
 }

}


Host A is:
OpenBSD 5.4 (GENERIC.MP) #34: Sun Jul 21 22:07:08 MDT 2013
 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Host B is:
OpenBSD 5.3 (GENERIC) #53: Tue Mar 12 18:15:44 MDT 2013
 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC


As you can see, this setup works without any patch.
I tested to remove lo1 and see if routes to carped nets disappear. No luck. 
Routes are there.


//mxb

On 24 sep 2013, at 11:08, Kapetanakis Giannis  wrote:


On 24/09/13 12:02, Kapetanakis Giannis wrote:

Without this patch, routes to (lo2) and carpX:network where not distributed. 
regards, G

My e-mail client somehow f@cked up Claudio's patch,

Here is the link to hist original post
http://marc.info/?l=openbsd-misc&m=137038436926946&w=2

G


I think I'm talking about a different setup than yours.

Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7]

Cisco does not learn routes from 0.0.0.7 which are only local on OBSD 
(VLANs, carp, loopback etc).


If the setup is

Cisco1 --- [area: 0.0.0.0] --- [OBSD] --- [area: 0.0.0.7] --- Cisco2

Then Cisco1 learns the routes from 0.0.0.7. I guess they come from Cisco2.

G



Re: OSPF ABR/ASBR issue

2013-09-24 Thread mxb
I'v seen this issue, but it just magically disappeared then I re-configured 
ospfd and restarted on both ends.
I had an issue to see routes from area 0.0.0.0 on area 0.0.0.78.

Host A:
area 0.0.0.0 {

interface vether0 { metric 5 }
interface vether1 { metric 5 }

}

area 0.0.0.78 {

interface vether2 { metric 10
   …….
}

interface carp1 { passive }
interface carp2 { passive }

interface lo1 { metric 5 }
interface vic2 { metric 10 }
}

Host B:
area 0.0.0.78 {

interface vether2 { metric 10
  …….
}

}


Host A is:
OpenBSD 5.4 (GENERIC.MP) #34: Sun Jul 21 22:07:08 MDT 2013
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Host B is:
OpenBSD 5.3 (GENERIC) #53: Tue Mar 12 18:15:44 MDT 2013
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC


As you can see, this setup works without any patch.
I tested to remove lo1 and see if routes to carped nets disappear. No luck. 
Routes are there.


//mxb

On 24 sep 2013, at 11:08, Kapetanakis Giannis  wrote:

> On 24/09/13 12:02, Kapetanakis Giannis wrote:
>> Without this patch, routes to (lo2) and carpX:network where not distributed. 
>> regards, G 
> 
> My e-mail client somehow f@cked up Claudio's patch,
> 
> Here is the link to hist original post
> http://marc.info/?l=openbsd-misc&m=137038436926946&w=2
> 
> G



Re: OSPF ABR/ASBR issue

2013-09-24 Thread Kapetanakis Giannis

On 24/09/13 12:02, Kapetanakis Giannis wrote:
Without this patch, routes to (lo2) and carpX:network where not 
distributed. regards, G 


My e-mail client somehow f@cked up Claudio's patch,

Here is the link to hist original post
http://marc.info/?l=openbsd-misc&m=137038436926946&w=2

G



Re: cvsync, rsync

2013-09-24 Thread Jan Stary
On Sep 24 08:07:30, hru...@gmail.com wrote:
> On Fri, 20 Sep 2013, Johan Mellberg wrote:
> 
> > Your error in thinking is that if we have an extremely large set of strings,
> > a very large set is mapped to each hash value. Therefore you reason that a
> > collision is very likely. But if you are comparing two specific strings, the
> > likelihood of them hashing to the same value is EXTREMELY small (other
> > people replying have provided the numbers).
> 
> No. I do not reason like that. The collision is *by esperience* very seldom. 
> The estimation given by people, including Trigdell, are optimistic and 
> no upper bounds of the probability are given.
> 
> > Thus, if hash(A)=hash(B), A=B quite a bit more often than not.
> 
> No. You can prove (analytically, hence not empirical observation) 
> that the probability of A=B under the condition hash(A)=hash(B) 
> is close to zero.
> 
> Let us suppose, the hash function h maps X to Y, that Y have n elements,
> that X have m elements; that X_i is the subset of the elements of X
> mapped to the element i of Y, that the cardinality of X_i is m_i.
> X is the disjunct union of the n sets X_i, m is the sum of the n numbers
> m_i. We suppose that the elements of X are events, the probability is uniform
> distributed, hence, each element have probability 1/m.

> When speaking about collisions or about the probability of A=B, we are
> dealing with two elements of X, with pairs. We must concentrate on the
> product space X*X with m^2 elements, each with probability 1/m^2. For
> calculating probabilities we must count there the number of elements
> of subsets. For this purpose, we arrange the elements of X in a line,
> the elements of each X_i contigously, and we arrange the elements of
> X*X in a square whose sides are that arrange of the elements of X.
> In the diagonal of this square are the elements of the form (a,a). 
> The elements (a,b) with h(a)=h(b)=i are in smaller squares with m_i^2 
> elements and whose diagonal coincide with the diagonal of the big square.

I see you already got to page 7 of your set theory textbook,
but got the notation slightly wrong.

> The event A=B is a subset of the event h(A)=h(B) (collision).
> 
> The probability of A=B is m*(1/m^2) = 1/m.
> 
> The probability of h(A)=h(B) is (\sum m_i^2)*(1/m^2).
> 
> The probability of A=B under the condition h(A)=h(B) is the division
> of the above probabilities: m / (\sum m_i^2).
> 
> Let p=m/n. If h maps X to Y uniformly, then all m_i will be p. We observe
> m_i as p+(m_i - p):
> 
> m_i = p + (m_i - p)
> 
> m_i^2 = p^2 + 2*p*(m_i - p) + (m_i - p)^2
> 
> \sum m_i^2 = n*p^2 + 2*p*(\sum m_i - n*p) + \sum (m_i - p)^2
> 
>= m^2/n + \sum (m_i -p)^2 
> 
>>= m^2/n   (the equality holds only when all m_i=p, 
>i.e. h distributes X uniformly in Y.)
>  
> Conclusions:
> 
> (1) The probability of a collision, of h(A)=h(B), is hence *bigger or 
> equal* than 1/n, and only equal to it when h distributes X uniformly 
> in Y.
> 
> (2) The probability of A=B under the condition h(A)=h(B) is less than
> n/m, and only equal to it when h distributes X uniformly in Y. Hence,
> the probability is very small when m is much bigger than n.

Yes. There are, in fact, infinitely many possible inputs,
and only finitely many possible hashes; specifically,
2^128 for a 128bit hash function. So with a uniform
distribution, you will in fact get infinitely many
different inputs with the same hash.

But that's irrelevant to your original question,
because none of these colliding inputs
will ever be a file on your rsync server.

For example, you might have a file on your rsync server,
named ~/.signature, with the content "I am a fucking troll";
this file has a certain hash.

Now, you are right that there are infinitely many possible
files with a different content but the same hash. Note:
none of these will ever exist on your rsync server.
More precisely: the probability of that happening
is negligibly small.

Read the above until you completely understand it,
and then don't come back here.



Re: OSPF ABR/ASBR issue

2013-09-24 Thread Kapetanakis Giannis
On 05/06/13 01:16, Claudio Jeker wrote:
> On Mon, Jun 03, 2013 at 03:43:21PM +0300, Kapetanakis Giannis wrote:
>> >On 01/06/13 18:44, Claudio Jeker wrote:
>>> > >Can you give this diff a spin? Not much tested but the current way we
>>> > >define an area as active (having at least one active neighbor) is wrong.
>>> > >This changes the decision to have at least one active interface
>>> > >(not IF_STA_DOWN). Not sure if that will cause troubles with passive
>>> > >interfaces since those are not considered active.  At least it seems that
>>> > >RFC 3509 uses this to define active areas.
>>> > >
>>> > >Thanks
>> >
>> >Just tested this diff and it does not work in my case for passive
>> >interfaces (either carp or loopback).
>> >
>> >area 0.0.0.7 {
>> >stub
>> >interface carp8 {passive}
>> >interface lo1 {passive}
>> >}
>> >
>> >If I add carp8 or lo1 in area 0.0.0.0 then the routes are announced.
>> >
> Yeah, while the diff fixed the B flag it did not solve the problem that we
> skipped our own networks. This version should solve that (at least it does
> in my quick test).
>
> Needs lots of testing since this changes core parts of the route calculation.
> -- :wq Claudio Index: area.c 
> === 
> RCS file: /cvs/src/usr.sbin/ospfd/area.c,v retrieving revision 1.9 
> diff -u -p -r1.9 area.c --- area.c 7 Jan 2009 21:16:36 - 1.9 +++ 
> area.c 4 Jun 2013 20:58:05 - @@ -94,19 +94,24 @@ area_find(struct 
> ospfd_conf *conf, struc } void -area_track(struct area *area, int 
> state) +area_track(struct area *area) { - int old = area->active; + 
> int old = area->active; + struct iface *iface; - if (state & 
> NBR_STA_FULL) - area->active++; - else if (area->active == 0) - 
> fatalx("area_track: area already inactive"); - else - area->active--; 
> + area->active = 0; + LIST_FOREACH(iface, &area->iface_list, entry) { 
> + if (iface->state & IF_STA_DOWN) + continue; + area->active = 1; + 
> break; + } - if (area->active == 0 || old == 0) + if (area->active != 
> old) { + ospfe_imsg_compose_rde(IMSG_AREA_CHANGE, area->id.s_addr, 0, 
> + &area->active, sizeof(area->active)); ospfe_demote_area(area, old == 
> 0); + } } int @@ -116,7 +121,7 @@ area_border_router(struct ospfd_conf 
> *co int active = 0; LIST_FOREACH(area, &conf->area_list, entry) - if 
> (area->active > 0) + if (area->active) active++; return (active > 1); 
> Index: interface.c 
> === 
> RCS file: /cvs/src/usr.sbin/ospfd/interface.c,v retrieving revision 
> 1.75 diff -u -p -r1.75 interface.c --- interface.c 14 May 2012 
> 10:17:21 - 1.75 +++ interface.c 4 Jun 2013 20:58:05 - @@ 
> -136,8 +136,10 @@ if_fsm(struct iface *iface, enum iface_e if 
> (new_state != 0) iface->state = new_state; - if (iface->state != 
> old_state) + if (iface->state != old_state) { + 
> area_track(iface->area); orig_rtr_lsa(iface->area); + } if (old_state 
> & (IF_STA_MULTI | IF_STA_POINTTOPOINT) && (iface->state & 
> (IF_STA_MULTI | IF_STA_POINTTOPOINT)) == 0) Index: neighbor.c 
> === 
> RCS file: /cvs/src/usr.sbin/ospfd/neighbor.c,v retrieving revision 
> 1.46 diff -u -p -r1.46 neighbor.c --- neighbor.c 17 Jan 2013 10:07:56 
> - 1.46 +++ neighbor.c 4 Jun 2013 20:58:05 - @@ -204,7 +204,6 
> @@ nbr_fsm(struct nbr *nbr, enum nbr_event * neighbor changed from/to 
> FULL * originate new rtr and net LSA */ - area_track(nbr->iface->area, 
> nbr->state); orig_rtr_lsa(nbr->iface->area); if (nbr->iface->state & 
> IF_STA_DR) orig_net_lsa(nbr->iface); Index: ospfd.h 
> === 
> RCS file: /cvs/src/usr.sbin/ospfd/ospfd.h,v retrieving revision 1.91 
> diff -u -p -r1.91 ospfd.h --- ospfd.h 17 Jan 2013 10:07:56 - 1.91 
> +++ ospfd.h 4 Jun 2013 20:58:05 - @@ -104,6 +104,7 @@ enum 
> imsg_type { IMSG_NEIGHBOR_CAPA, IMSG_NETWORK_ADD, IMSG_NETWORK_DEL, + 
> IMSG_AREA_CHANGE, IMSG_DD, IMSG_DD_END, IMSG_DD_BADLSA, @@ -530,7 
> +531,7 @@ struct demote_msg { struct area *area_new(void); int 
> area_del(struct area *); struct area *area_find(struct ospfd_conf *, 
> struct in_addr); -void area_track(struct area *, int); +void 
> area_track(struct area *); int area_border_router(struct ospfd_conf 
> *); u_int8_t area_ospf_options(struct area *); Index: ospfe.c 
> === 
> RCS file: /cvs/src/usr.sbin/ospfd/ospfe.c,v retrieving revision 1.86 
> diff -u -p -r1.86 ospfe.c --- ospfe.c 22 Mar 2013 08:42:55 - 1.86 
> +++ ospfe.c 4 Jun 2013 20:58:05 - @@ -992,9 +992,9 @@ 
> orig_rtr_lsa(struct area *area) oeconf->border = border; 
> orig_rtr_lsa_all(area); } - if (oeconf->border) lsa_rtr.flags |= 
> OSPF_RTR_B; + /* TODO set V flag if a active virtual link ends here 
> and the * area is the transit area for this link. */ if (virtual) 
> Index: rde.c 
> ==

Re: IPSec endpoints won't talk to each other

2013-09-24 Thread James Griffin
* Hugo Osvaldo Barrera  [2013-09-24 03:53:46 -0300]:

> Hi,
> 
> I've been experimenting a bit with IPSec and creating a VPN using it. I've
> been successful, but have encountered an odd issue.
> 
> I've two hosts, linking two networks:
> 
> Host A's /etc/iked.conf:
> ikev2 active esp from 172.16.0.0/16 to 172.17.0.0/16 \
>   peer 174.136.104.18 psk "a-test-key"
> 
> Host B's /etc/iked.conf:
> ikev2 esp from 172.17.0.0/16 to 172.16.0.0/16 \
>   peer 190.210.108.249 psk "a-test-key"
> 
> (Of course those are not the real keys).
> 
> I can ssh 172.17.0.1 from the 172.16.0.0 network fine and viceversa.
> 
> So far so good.
> 
> BUT I can't establish any TCP connection from Host A to Host B's public
> IP address and viceversa.
 
So you can connect using internal addresses but not using public address. Just 
a thought, but have you opened the necessary ports on your router? What is your 
setup like?

[ ... ]



Re: pure_ftpd other option(style) not work

2013-09-24 Thread James Griffin
* Brad Smith  [2013-09-24 00:43:44 -0400]:

> On 23/09/13 11:07 PM, Fung wrote:
> >in current snapshots
> >
> >install pure_ftpd
> >
> >default /etc/rc.d/pure_ftpd is
> >---
> >#!/bin/sh
> >#
> ># $OpenBSD: pure_ftpd.rc,v 1.1 2011/04/25 09:26:47 sthen Exp $
> >
> >daemon="/usr/local/sbin/pure-ftpd"
> >daemon_flags="-A -B -H -u1000"
> >
> >. /etc/rc.d/rc.subr
> >
> >pexp="pure-ftpd: -pure-ftpd \(SERVER\)"
> >rc_reload=NO
> >
> >rc_cmd $1
> >--
> >
> ># /etc/rc.d/pure_ftpd start
> >
> ># ps -auwx | grep ftpd
> >root  8530  0.0  0.0   852  1264 ??  Is10:44AM0:00.00 pure-ftpd: 
> >-pure-ftpd (SERVER) (pure-ftpd)
> >
> >now user login work
> >
> >if  add other flags like "-o", for example , change  /etc/rc.d/pure_ftpd
> >
> >-daemon_flags="-A -B -H -u1000"
> >+daemon_flags="-o -A -B -H -u1000"
> >
> >
> >the daemon will start but nobody can login!
> >
> ># pkill ftpd
> ># /etc/rc.d/pure_ftpd start
> >pure_ftpd(ok)
> >
> >
> ># ps -auwx | grep ftpd
> >root 15587  0.0  0.0   676   964 ??  Is10:48AM0:00.00 
> >/usr/local/sbin/pure-ftpd -o -A -B -H -u1000
> >
> >
> ># ftp localhost
> >Trying 127.0.0.1...
> >ftp: connect to address 127.0.0.1: Connection refused
> >Trying ::1...
> >ftp: connect: Connection refused
> >ftp>
> >
> >
> >BTW, start pure-ftpd without rc.d script not work too
> >
> ># pkill ftpd
> ># /usr/local/sbin/pure-ftpd -A -B -H -u1000 -o
> ># ftp localhost
> >Trying 127.0.0.1...
> >ftp: connect to address 127.0.0.1: Connection refused
> >Trying ::1...
> >ftp: connect: Connection refused
> >ftp>
> >
> >
> >
> >
> >
> >
> ># sysctl kern.version
> >kern.version=OpenBSD 5.4-current (GENERIC) #55: Tue Sep 17 08:29:11 MDT 2013
> > t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
> >
> ># pkg_info | grep pure
> >pure-ftpd-1.0.36p2-virtual_chroot small, easy to set up, fast and very 
> >secure FTP server
> 
> The pure-ftpd package works fine out of the box with either the rc.d
> script or manually running the equivalent binary and command line
> parameters. There is something you have done on your system to cause
> it to not work. Does fstat show the sockets created by pure-ftpd
> once it has been started up? Are you running a modified PF rule set?

I think pf.conf would be a good place to start too.



Re: cvsync, rsync

2013-09-24 Thread hruodr
On Fri, 20 Sep 2013, Johan Mellberg wrote:

> Your error in thinking is that if we have an extremely large set of strings,
> a very large set is mapped to each hash value. Therefore you reason that a
> collision is very likely. But if you are comparing two specific strings, the
> likelihood of them hashing to the same value is EXTREMELY small (other
> people replying have provided the numbers).

No. I do not reason like that. The collision is *by esperience* very seldom. 
The estimation given by people, including Trigdell, are optimistic and 
no upper bounds of the probability are given.

> Thus, if hash(A)=hash(B), A=B quite a bit more often than not.

No. You can prove (analytically, hence not empirical observation) 
that the probability of A=B under the condition hash(A)=hash(B) 
is close to zero.

Let us suppose, the hash function h maps X to Y, that Y have n elements,
that X have m elements; that X_i is the subset of the elements of X
mapped to the element i of Y, that the cardinality of X_i is m_i.
X is the disjunct union of the n sets X_i, m is the sum of the n numbers
m_i. We suppose that the elements of X are events, the probability is uniform
distributed, hence, each element have probability 1/m.

When speaking about collisions or about the probability of A=B, we are
dealing with two elements of X, with pairs. We must concentrate on the
product space X*X with m^2 elements, each with probability 1/m^2. For
calculating probabilities we must count there the number of elements
of subsets. For this purpose, we arrange the elements of X in a line,
the elements of each X_i contigously, and we arrange the elements of
X*X in a square whose sides are that arrange of the elements of X.
In the diagonal of this square are the elements of the form (a,a). 
The elements (a,b) with h(a)=h(b)=i are in smaller squares with m_i^2 
elements and whose diagonal coincide with the diagonal of the big square.

The event A=B is a subset of the event h(A)=h(B) (collision).

The probability of A=B is m*(1/m^2) = 1/m.

The probability of h(A)=h(B) is (\sum m_i^2)*(1/m^2).

The probability of A=B under the condition h(A)=h(B) is the division
of the above probabilities: m / (\sum m_i^2).

Let p=m/n. If h maps X to Y uniformly, then all m_i will be p. We observe
m_i as p+(m_i - p):

m_i = p + (m_i - p)

m_i^2 = p^2 + 2*p*(m_i - p) + (m_i - p)^2

\sum m_i^2 = n*p^2 + 2*p*(\sum m_i - n*p) + \sum (m_i - p)^2

   = m^2/n + \sum (m_i -p)^2 

   >= m^2/n   (the equality holds only when all m_i=p, 
   i.e. h distributes X uniformly in Y.)
 
Conclusions:

(1) The probability of a collision, of h(A)=h(B), is hence *bigger or 
equal* than 1/n, and only equal to it when h distributes X uniformly 
in Y.

(2) The probability of A=B under the condition h(A)=h(B) is less than
n/m, and only equal to it when h distributes X uniformly in Y. Hence,
the probability is very small when m is much bigger than n.

These are my calculations, you may correct me, but the probability of
getting insults and diffamation are bigger.

--

On Tue, 24 Sep 2013, Janne Johansson wrote:

> I didn't seem to get an answer here.
>
> How would I know that the 4G wav-file I sent from one box to another is 100%
> identical?
>
> If we assume (and I think that is what you seem to claim) that we can't
> blindly trust hashing, but we will assume that no cosmic rays nor hard-drive
> bit failures can affect the contents, [...]

To much stories about cosmic rays and the age of the universe in relation
to the probability of collitions of functions that no one knows exactly.
Let the software be software, the hardware be hardware.

Rodrigo.