Re: [OpenIKED] Network traffic over VPN site-to-site tunnel stalls few times a day

2019-08-23 Thread Patrick Dohman
In my opinion your net5501’s system calls per interval are relatively high.
The (traps sys) column on my firewall hovers between 40 & 50 quite consistently.
My understanding is that system calls are things like program calls & library 
access.

In addition your net5501’s memory requests per second seem heavy.
You have fifty eight million 1024 bucket requests per second.
My firewall has a max of one hundred thousand 128 bucket requests per second.

Many commercial routers run a customized kernel & rely on a striped down 
user-land.
The kernel is also recompiled to run TCP/IP4 only & can no longer execute 
things like storage or virtualization.
The OpenBSD O.S includes all the user-land tools such as ping & top in addition 
to a standardized precompiled kernel. 
Regards
Patrick
.
> 
> 
> On Thu, 22 Aug 2019 19:12:55 -0500
> Patrick Dohman  wrote:
> 
>> Radek
>> 
>> I’ve found that fast networking is actually CPU & memory intensive. 
>> Pentium 4 and Xeon's are increasingly a necessity for stable firewalls in my 
>> opinion.
>> Keep in mind OpenBSD is a monolithic kernel & isn’t a one to one ratio with 
>> a commercial router.
>> 
>> What are your context switches & interrupts doing while the VPN is up & 
>> traffic is flowing?
>> 
>> vmstat -w 4
>> 
>> What is your memory high water mark during a peak traffic?
>> 
>> vmstat -m
>> 
>> Regards
>> Patrick
>> 
>>> On Aug 21, 2019, at 12:34 AM, radek  wrote:
>>> 
>>> Hello Patrick,
>>> I am sorry for the late reply.
>>> 
 Do you consider memory an issue?
>>> No, I do not. I have a bunch of old Soekris/net5501-70 and ALIX2d2/2d3, 
>>> that I use for VPN testing.
>>> Current testing set (6.5/i386) is net5501-70 <-> ALIX2d3
>>> Production set (6.3/i386) is net5501-70 <-> ALIX2d2
>>> Also have tried net5501-70 <-> net5501-70 - the same VPN problem occurs
>>> It is unlikely that every box has any hardware issue.
>>> 
 Unix load average can occasionally be deceiving.
>>> I did not know.
>>> 
>>>  net5501-70 
>>> $top -d1 | head -n 4
>>> load averages:  0.05,  0.01,  0.00RAC-fw65-test.PRAC 10:58:14
>>> 38 processes: 1 running, 35 idle, 1 dead, 1 on processor  up 3 days, 18:02
>>> CPU states:  0.5% user,  0.0% nice,  0.4% sys,  0.0% spin,  0.2% intr, 
>>> 98.8% idle
>>> Memory: Real: 18M/267M act/tot Free: 222M Cache: 97M Swap: 0K/256M
>>> 
>>>  ALIX2d3 
>>> $top -d1 | head -n 4
>>> load averages:  0.00,  0.00,  0.00mon65.home 07:30:05
>>> 37 processes: 1 running, 35 idle, 1 on processor  up 13:46
>>> CPU states:  0.3% user,  0.0% nice,  1.1% sys,  0.0% spin,  0.4% intr, 
>>> 98.3% idle
>>> Memory: Real: 125M/223M act/tot Free: 14M Cache: 47M Swap: 73M/256M
>>> 
>>> 
>>> 
 What is the speed of your memory?
 What make of Ethernets are you running?
>>> Dmesgs below
>>> 
>>>  net5501-70 
>>> OpenBSD 6.5 (GENERIC) #2: Tue Jul 23 23:08:46 CEST 2019
>>>   r...@syspatch-65-i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
>>> real mem  = 536363008 (511MB)
>>> avail mem = 511311872 (487MB)
>>> mpath0 at root
>>> scsibus0 at mpath0: 256 targets
>>> mainbus0 at root
>>> bios0 at mainbus0: date 20/80/26, BIOS32 rev. 0 @ 0xfac40
>>> pcibios0 at bios0: rev 2.0 @ 0xf/0x1
>>> pcibios0: pcibios_get_intr_routing - function not supported
>>> pcibios0: PCI IRQ Routing information unavailable.
>>> pcibios0: PCI bus #0 is the last bus
>>> bios0: ROM list: 0xc8000/0xa800
>>> cpu0 at mainbus0: (uniprocessor)
>>> cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD" 586-class) 
>>> 500 MHz, 05-0a-02
>>> cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX,MMXX,3DNOW2,3DNOW
>>> mtrr: K6-family MTRR support (2 registers)
>>> amdmsr0 at mainbus0
>>> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
>>> 0:20:0: io address conflict 0x6100/0x100
>>> 0:20:0: io address conflict 0x6200/0x200
>>> pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x33
>>> glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
>>> vr0 at pci0 dev 6 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 11, 
>>> address 00:00:24:cb:4f:cc
>>> ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
>>> 0x004063, model 0x0034
>>> vr1 at pci0 dev 7 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 5, 
>>> address 00:00:24:cb:4f:cd
>>> ukphy1 at vr1 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
>>> 0x004063, model 0x0034
>>> vr2 at pci0 dev 8 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 9, 
>>> address 00:00:24:cb:4f:ce
>>> ukphy2 at vr2 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
>>> 0x004063, model 0x0034
>>> vr3 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 12, 
>>> address 00:00:24:cb:4f:cf
>>> ukphy3 at vr3 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 
>>> 0x004063, model 0x0034
>>> glxpcib0 at pci0 dev 20 function 0 "AMD CS5536 ISA" rev 0x03: rev 3, 32-bit 
>>> 3579545Hz timer, watchdog, gpio, i2c
>>> gpio0 at glxpcib0: 32 pins
>>> iic0 at glxpcib0
>>> pciide0 at pci0 dev 

mixing clang C++ and GNU C++ ?

2019-08-23 Thread j

Hi all,

I'm trying some boost library examples, on amd64, using -current.  When
building with clang it works ok, but using eg++ results in load-time
failure:


snaptest66$ timlibs="-I/usr/local/include -L/usr/local/lib 
-lboost_timer"


snaptest66$ ec++ -o tcs.fastgx $timlibs  -Ofast timed_chaotic_system.cpp
snaptest66$ ./tcs.fastgx
tcs.fastgx:/usr/local/lib/libestdc++.so.19.0: /usr/lib/libc++abi.so.1.0 
: WARNING: symbol(_ZTVN10__cxxabiv129__pointer_to_member_type_infoE) 
size mismatch, relink your program
tcs.fastgx:/usr/local/lib/libestdc++.so.19.0: /usr/lib/libc++abi.so.1.0 
: WARNING: symbol(_ZTVN10__cxxabiv117__pbase_type_infoE) size mismatch, 
relink your program

...etcabout a dozen similar symbols
Segmentation fault (core dumped)
snaptest66$ ldd tcs.fastgx
tcs.fastgx:
StartEnd  Type  Open Ref GrpRef Name
0e2785f57000 0e2785f6a000 exe   20   0  
tcs.fastgx
0e29b65b 0e29b65ba000 rlib  01   0  
/usr/local/lib/libboost_timer.so.9.0
0e2a2178f000 0e2a21958000 rlib  01   0  
/usr/local/lib/libestdc++.so.19.0
0e2987145000 0e2987174000 rlib  05   0  
/usr/lib/libm.so.10.1
0e2a29dd 0e2a29ec4000 rlib  01   0  
/usr/lib/libc.so.95.1
0e2a5c1eb000 0e2a5c1f5000 rlib  01   0  
/usr/local/lib/libboost_chrono.so.9.0
0e29a762d000 0e29a7634000 rlib  02   0  
/usr/local/lib/libboost_system.so.9.0
0e29b5bc8000 0e29b5ca4000 rlib  03   0  
/usr/lib/libc++.so.3.0
0e29be4d8000 0e29be51a000 rlib  04   0  
/usr/lib/libc++abi.so.1.0
0e2a5884c000 0e2a58859000 rlib  03   0  
/usr/lib/libpthread.so.26.1
0e2a2c0f3000 0e2a2c0f3000 ld.so 01   0  
/usr/libexec/ld.so



which is to say both clang libc++ and libc++abi and gcc libestdc++ are
linked.

Using purely clang c++ works ok:

snaptest66$ c++ -o tcs.fastx $timlibs  -Ofast timed_chaotic_system.cpp
snaptest66$ ./tcs.fastx
10  0.9050831.28992e-05 -14.5717
...etc...known good output...


Is this even possible (should I stop now) or is it something I am
doing incorrectly?

thanks

John



snaptest66$ sysctl kern.version
kern.version=OpenBSD 6.6-beta (GENERIC.MP) #242: Fri Aug 23 09:06:40 MDT 
2019

dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP



snaptest66$ pkg_info
boost-1.66.0p6  free peer-reviewed portable C++ source libraries
bzip2-1.0.8 block-sorting file compressor, unencumbered
flang-8.0.0.20190801 LLVM Fortran compiler passes and runtime library
flang-driver-8.0.0.20190621p0 LLVM Fortran compiler driver
g++-8.3.0p3 GNU compiler collection: C++ compiler
g95-8.3.0p3 GNU compiler collection: f95 compiler
gcc-8.3.0p3 GNU compiler collection: core C compiler
gcc-libs-8.3.0p3GNU compiler collection: support libs
gettext-runtime-0.20.1p0 GNU gettext runtime libraries and programs
gmp-6.1.2p3 library for arbitrary precision arithmetic
icu4c-64.2p0International Components for Unicode
intel-firmware-20190618p0v0 microcode update binaries for Intel CPUs
libaio_compat-5.2.2 port of POSIX asynchronous I/O routines from 
DragonFly BSD

libexecinfo-0.3p2v0 clone of backtrace facility found in the GNU libc
libffi-3.2.1p5  Foreign Function Interface
libiconv-1.16p0 character set conversion library
libmpc-0.9p2complex numbers math library
libomp-8.0.0p1  LLVM OpenMP runtime
libpgmath-8.0.0.20190801 LLVM Fortran math library
mpfr-3.1.5.2p1  library for multiple-precision floating-point 
computations

python-2.7.16p1 interpreted object-oriented programming language
python-3.7.4interpreted object-oriented programming language
quirks-3.173exceptions to pkg_add rules
sqlite3-3.29.0  embedded SQL implementation
xz-5.2.4LZMA compression and decompression tools



backing up ldapd data

2019-08-23 Thread Allan Streib
With OpenLDAP slapd I would run slapcat periodically to dump out the
directory in LDIF format for backup.

What is the best approach for backing up ldapd?

Thanks,

Allan



Re: unexpected behavior with static route inserted

2019-08-23 Thread Sebastian Benoit
Benjamin Girard(benjamin.gir...@kambi.com) on 2019.08.22 12:35:08 +:
> Hi,
> 
> 
> I have the following machine with two interfaces like this:
> 
> root@fw:~ # cat /etc/hostname.vlan10
> vlan 10 vlandev vio0

shoudl be 'vnetid 10 parent vio0'

> inet 10.0.0.1 255.255.255.0 NONE
> up
> 
> root@fw:~ # cat /etc/hostname.vlan23
> vlan 23 vlandev vio0

should be 'vnetid 23 parent vio0'

> inet 172.30.133.83 255.255.255.240 NONE
> !route add 10.0.0.10/32 172.30.133.84
> up
> 
> now the problem is that if i start pinging 10.0.0.10 before my vlan23 is up 
> and has inserted the static route, the openbsd machine will insert another 
> route like this:
> 
> root@fw:~ $ route -n show | grep 10.0.0.10
> 10.0.0.10link#12UHLc   0   78 - 3 vlan10
> 
> then if I netstart vlan23 the static route will be inserted but with a lower 
> priority:
> 
> kmbops@fw:~ $ route -n show | grep 209.43.38.6
> 10.0.0.10link#12UHLc   0   78 - 3 vlan10
> 10.0.0.10172.30.133.84  UGHS   00 - 8 vlan23
> 
> Eventually this first route inserted will disappear if i stop pinging the
> ip, or will not at all exist in the first place if i don't try to reach
> that ip before inserting the static route, but my question is: Is it the
> expected behavior?

Yes.

> Why does this route get inserted while there is already a route for the
> full 10.0.0.0/24 subnet existing anyway?

Simplified, this is how the network stack stores the information that it is
trying to find the link-local address of 10.0.0.10 on that link (by sending
arp requests).

If you run OpenBSD 6.5 or newer, you can try to solve your problem by
renaming the vlan23 hostname.if file:

 mv /etc/hostname.vlan23 /etc/hostname.vlan1

Then it will be created before vlan10, and things should just work.



Re: dhcrelay

2019-08-23 Thread Sebastian Benoit
shadrock uhuru(niyal...@gmail.com) on 2019.08.23 18:46:32 +0100:
> hi eveyone
> if i have a dhcp server in subnet A connected to interface em0 (lan) and
> subnet B connected to interface iwn0 (wireless zone) on the router
> with dhcrelay -i em0 running on the router should the wireless subnet be
> able?? to get its dhcp address from the dhcp server on the lan ?

No, you would need to run 

   dhcrelay -i iwn0 

to do that.



Re: Erratically losing connection on usb port from UPS unit

2019-08-23 Thread Walter Alejandro Iglesias
Hi Boudewijn,

In article  Boudewijn Dijkstra 
 wrote:
> Op Wed, 21 Aug 2019 15:06:17 +0200 schreef Walter Alejandro Iglesias
> :
> > [...]
> >
> > It has been working for days (with and without NUT) apparently without
> > problems except for three times in which the usb signal from the ups got
> > cut, apparently for no reason.  I get this message in console:
> >
> >   upd0 detached
> >   uhidev0 detached
> 
> I have a similar recurring message, also very erratically, mean period is
> about a month:
> 
> ugen0 detached
> ugen0 at uhub1 port 2 "American Power Conversion Smart-UPS 1000 FW:UPS
> 09.2 / ID=18" rev 2.00/1.06 addr 2
> 
> > While using NUT I got "stale" messages from upsmon when that happened.
> 
> I'm using apcupsd, I also get messages for these occurrences.
> 
> 

I don't know if also in your case but in mine, once that happens, the
connection doesn't get back, what means, from then on, the ups stays
unmonitored.

Another problem I bumped into (this is my first experience with a UPS
unit) is before purchasing this device I'd assumed that to wake up the
machine once the AC was back would suffice activating the "auto power on
when AC is plugged" BIOS option.  Wrong. :-)  Then I tried a router with
dd-wrt software that comes with a wol daemon, it didn't work either.
Routing a wol packet from the internet (adding static arp entries in the
router as they teach in some forums) wasn't either possible.

What makes me conclude: if you can't rely on the machine will be shut
down properly and it's so difficult (automatically or remotely), to get
the machine powered back, what in the Hell a UPS is useful for?



Re: Erratically losing connection on usb port from UPS unit

2019-08-23 Thread Walter Alejandro Iglesias
On Wed, Aug 21, 2019 at 03:06:17PM +0200, Walter Alejandro Iglesias wrote:
> On the Internet some NUT users mention issues with libusb.  There is an
> old tutorial about using NUT in OpenBSD that advices to install
> libusb-compat but, given the current nut package doesn't install it as a
> dependency I assumed it's not longer necessary.

Here I said something wrong, nut *does* install libusb-compat as a
dependency.



Re: USB camera has "no usable YUV encodings"

2019-08-23 Thread Jan Stary
> Thanks for the tips. Here is what they do
> on video1 (the USB microscope camera).

During these tests, this appeared in the messages:

uvideo1 at uhub0 port 1 configuration 1 interface 0 "Alcor Micro MikrOkularHD" 
rev 2.00/0.00 addr 4
video1 at uvideo1
uvideo1: could not open VS pipe: IOERROR
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255
uvideo1: could not SET probe request: TIMEOUT
xhci0: wrong trb index (4134157312) max is 255

Can somebody please advice on what these mean?

Jan



Re: USB camera has "no usable YUV encodings"

2019-08-23 Thread Jan Stary
On Aug 23 15:38:17, m...@patrick-wildt.de wrote:
> Try using ffmpeg on /dev/video1

On Aug 23 15:56:00, s...@spacehopper.org wrote:
> >   $ doas video -f /dev/video1 -v 
> >   doas (h...@dell.stare.cz) password: 
> >   video: /dev/video1 has no usable YUV encodings
> >
> > The device itself works, in that "doas cat /dev/video1 > /tmp/video.raw"
> > spews out data, presumably frames captured by the camera. I can even
> > play that back with "video -i /tmp/video.raw", but it's garbage,
> > not being in one of the "YUV encodings". file(1) says
> >
> > /tmp/video.raw: JPEG image data, JFIF standard 1.01,
> > baseline, precision 0, 4360x720
> >
> > so is it some format based on a sequence of jpges?
> > (Please excuse my video ignorance.)
> 
> MJPEG? that's possible.
> 
> Try some of these:

Thanks for the tips. Here is what they do
on video0 (the built-in laptop webcam) and
on video1 (the USB microscope camera).

> ffplay -f video4linux2 /dev/video0

Works, even without the -f video4linux2 (which seems to be default);
looks much like what video(1) does.

(Is -f video4linux a catch-all codec
to recognize any format it knows?)

$ ffplay -f video4linux2 /dev/video1
[...]
[video4linux2,v4l2 @ 0x1f74a6354800] Cannot find a proper format for
codec 'none' (id 0), pixel format 'none' (id -1)
Assertion *codec_id != AV_CODEC_ID_NONE failed at libavdevice/v4l2.c:815
Abort trap (core dumped) 

> gst-launch-1.0 v4l2src \! xvimagesink

I have libv4l-1.16.6 and gstreamer-plugins-good-0.10.31p25v0
- is there something else I need to run this?

> mplayer tv:// 

Works, looks like video(1), but full-screen
(which is how my mplayer is configured).

$ mplayer -tv device=/dev/video1 tv://
MPlayer SVN-r38138 (C) 2000-2019 MPlayer Team

Playing tv://.
TV file format detected.
Selected driver: v4l2
 name: Video 4 Linux 2 input
 author: Martin Olschewski 
 comment: first try, more to come ;-)
v4l2: your device driver does not support VIDIOC_G_STD ioctl, VIDIOC_G_PARM was 
used instead.
Selected device: MikrOkularHD
 Capabilities:  video capture  read/write  streaming
 supported norms:
 inputs: 0 = Camera Terminal;
 Current input: 0
 Current format: MJPEG
v4l2: ioctl set format failed: Invalid argument
v4l2: ioctl set mute failed: Invalid argument
v4l2: 0 frames successfully processed, 0 frames dropped.

It does not play, but it recognizes the device
and apparently, it is a MJPEG stream. Thanks.

> mpv tv://

Displays 640x480 worth of garbage.

Playing: tv://
[tv] Selected driver: v4l2
[tv]  name: Video 4 Linux 2 input
[tv] your device driver does not support VIDIOC_G_STD ioctl, VIDIOC_G_PARM was 
used instead.
[tv] Selected device: Integrated_Webcam_HD
[tv]  Capabilities:  video capture  read/write  streaming
[tv]  supported norms:
[tv]  inputs: 0 = Camera Terminal;
[tv]  Current input: 0
[tv]  Current format: RGB24
[tv] tv.c: norm_from_string(pal): Bogus norm parameter, setting default.
[tv] ioctl enum norm failed: Inappropriate ioctl for device
[tv] Error: Cannot set norm!
[tv] Selected input hasn't got a tuner!
[tv] ioctl set mute failed: Invalid argument
(+) Video --vid=1 (rawvideo 640x480 30.000fps)
[gpu] 640x480 yuv420p


$ mpv  --tv-device=/dev/video1 tv:// 
Playing: tv://
[tv] Selected driver: v4l2
[tv]  name: Video 4 Linux 2 input
libv4l2: error setting pixformat: Invalid argument
[tv] your device driver does not support VIDIOC_G_STD ioctl,
VIDIOC_G_PARM was used instead.
[tv] Selected device: MikrOkularHD
[tv]  Capabilities:  video capture  read/write  streaming
[tv]  supported norms:
[tv]  inputs: 0 = Camera Terminal;
[tv]  Current input: 0
[tv]  Current format: MJPEG
libv4l2: error setting pixformat: Invalid argument
[tv] ioctl set format failed: Invalid argument
[tv] ioctl set mute failed: Invalid argument
[tv] 0 frames successfully processed, 0 frames dropped


Knowing I have a mjpeg stream, I will try
to massage the cmdlines some more.

Thanks again for the tips,

Jan



dhcrelay

2019-08-23 Thread shadrock uhuru
hi eveyone
if i have a dhcp server in subnet A connected to interface em0 (lan) and
subnet B connected to interface iwn0 (wireless zone) on the router
with dhcrelay -i em0 running on the router should the wireless subnet be
able  to get its dhcp address from the dhcp server on the lan ?



Re: video(1) permissions

2019-08-23 Thread joshua stein
On Fri, 23 Aug 2019 at 15:59:19 -, Stuart Henderson wrote:
> On 2019-08-23, Jan Stary  wrote:
> > This is current/amd64 on a Dell Latitude E5570 (dmesg below).
> > It has this integrated camera which I am trying to use with video(1):
> >
> > uvideo0 at uhub0 port 11 configuration 1 interface 0 
> > "CN0J8NNP7248765RBBM6A00 Integrated_Webcam_HD" rev 2.00/54.13 addr 3
> > video0 at uvideo0
> >
> > Running just plain 'video' says
> > video: /dev/video: Permission denied
> >
> > Does that mean video(1) has to be run inside doas(1)?
> > Or is there, say, a group to add myself too, as with
> > e.g. operator to run shutdown? Doesn't seem so:
> >
> > ls -l /dev/video*  
> > lrwxr-xr-x  1 root  wheel 6 Jun 14  2017 /dev/video -> video0
> > crw---  1 root  wheel   44,   0 Aug 19 16:47 /dev/video0
> > crw---  1 root  wheel   44,   1 Aug 19 16:47 /dev/video1
> 
> You can just chown it, or you can use fbtab(5).

xenocara doesn't work with fbtab:

[...]
if (d->windowPath != NULL)  {
/* XXX not working because of pledge() */
Debug("login_fbtab %s %d\n", d->windowPath, geteuid());
login_fbtab(d->windowPath, pwd->pw_uid, pwd->pw_gid);
}

So unfortunately you still need to add such things to 
/etc/X11/xenodm/{Give,Take}Console.



Re: Max Speed: configuration in smnpd.conf for display in mrtg

2019-08-23 Thread Stuart Henderson
On 2019-08-22, Daniel Ouellet  wrote:
> Hi,
>
> Wonder if anyone would know the answer for this.
>
> I try to figure out what is the entry needed in the snmpd.conf for the
> specific display that would show in mrtg when the scan is done.
>
> In short the display as
>
> Max Speed:1000.0 Mbits/s
>
> to be display as for example
>
> Max Speed:150.0 Mbits/s
>
> I have all other variable set properly for what's needed, but can't
> figure this one out.
>
> IN Cisco router you can just do
>
> bandwidth 15
>
> for example to do this
>
> In smtpd.conf I can do
>
> system location "Your city location"
>
> But I haven't been able to figure what's the entry for the display of
> the bandwidth itself oppose to the Interface speed.
>
> I thought this would do:
>
> system ifSpeed "150"
>
> but it doesn't and I really can't figure this one out.
>
> The man page does provide plenty but come short for this one.
>
> I process all the stats from an OpenBSD server and the router I query
> are mostly Cisco but many are also OpenBSD too.
>
> Any clue stick?
>
> Many thanks
>
> Daniel
>
>

I think you need to just configure MaxBytes in mrtg config for the port.

Looking at snmpd.conf(5) and looking up the oid you might think of trying
this,...

oid 1.3.6.1.2.1.2.2.1.5.$ifindex name ifSpeed read-only integer 123456

(replace $ifindex with the correct index for the port), but it doesn't
actually work, snmpd doesn't allow overriding an existing oid in this way.




Re: video(1) permissions

2019-08-23 Thread Stuart Henderson
On 2019-08-23, Jan Stary  wrote:
> This is current/amd64 on a Dell Latitude E5570 (dmesg below).
> It has this integrated camera which I am trying to use with video(1):
>
> uvideo0 at uhub0 port 11 configuration 1 interface 0 "CN0J8NNP7248765RBBM6A00 
> Integrated_Webcam_HD" rev 2.00/54.13 addr 3
> video0 at uvideo0
>
> Running just plain 'video' says
> video: /dev/video: Permission denied
>
> Does that mean video(1) has to be run inside doas(1)?
> Or is there, say, a group to add myself too, as with
> e.g. operator to run shutdown? Doesn't seem so:
>
> ls -l /dev/video*  
> lrwxr-xr-x  1 root  wheel 6 Jun 14  2017 /dev/video -> video0
> crw---  1 root  wheel   44,   0 Aug 19 16:47 /dev/video0
> crw---  1 root  wheel   44,   1 Aug 19 16:47 /dev/video1

You can just chown it, or you can use fbtab(5).

> Copying the user's ~/.Xauthority to be root's ~/.Xauthority
> makes it work, and up comes my mug staring into the camera.

Better not to run codecs as root, even if they are simple ones.




Re: USB camera has "no usable YUV encodings"

2019-08-23 Thread Stuart Henderson
On 2019-08-23, Jan Stary  wrote:
> This is current/amd64 on a Dell Latitude E5570 (dmesg below).
> I am trying to use a USB camera (bought with a microscope,
> to display the miracles of paramecium life on the laptop).
>
> https://www.bresser.de/en/Astronomy/Accessories/BRESSER-MikrOkular-Full-HD-eyepiece-camera.html
>
> uvideo1 at uhub0 port 1 configuration 1 interface 0 "Alcor Micro
> MikrOkularHD" rev 2.00/0.00 addr 4
> video1 at uvideo1
>
> While video(1) works with the laptop's integrated camera (video0),
> it doesn't work with this USB camera (video1):
>
>   $ doas video -f /dev/video1 -v 
>   doas (h...@dell.stare.cz) password: 
>   video: /dev/video1 has no usable YUV encodings
>
> The device itself works, in that "doas cat /dev/video1 > /tmp/video.raw"
> spews out data, presumably frames captured by the camera. I can even
> play that back with "video -i /tmp/video.raw", but it's garbage,
> not being in one of the "YUV encodings". file(1) says
>
> /tmp/video.raw: JPEG image data, JFIF standard 1.01,
>   baseline, precision 0, 4360x720
>
> so is it some format based on a sequence of jpges?
> (Please excuse my video ignorance.)

MJPEG? that's possible.

Try some of these:

ffplay -f video4linux2 /dev/video0
gst-launch-1.0 v4l2src \! xvimagesink
mplayer tv:// 
mpv tv://

If you want to record, and ffplay works, you should at least be able to use 
ffmpeg
and write a file with a standard container format.




Re: IPv6 problems

2019-08-23 Thread Fernando Gont
On 22/8/19 21:11, list wrote:
> Hi,
> 
> I might be missing something right here
> 
> I have the output of "route show" attached, because I cannot paste it in
> here in a formatted form.
> 
> 
> This is super annoying.
> 
> Just wanna get the damn thing running.


Your default route is wrong. Namely:

defaultff02::2%vio0   UGS01 - 8
vio0

If your provider says that the default router is on fe80::1, then the
default route should be:

defaultfe80::1%vio0   UGS01 - 8
vio0


Thanks,
-- 
Fernando Gont
e-mail: ferna...@gont.com.ar || fg...@si6networks.com
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1





Re: IPv6 problems

2019-08-23 Thread Bastien Durel
Le jeudi 22 août 2019 à 20:11 +0200, list a écrit :
> Hi,
> 
> I might be missing something right here
> 
> I have the output of "route show" attached, because I cannot paste it
> in
> here in a formatted form.
> 
> 
> This is super annoying.
> 
> Just wanna get the damn thing running.
> 
ff02::2 is a multicast address, it's not intended to be used as a route
gateway.
It's only a way to discover routers.

for example:

fremen# ping6  ff02::2%em1
PING ff02::2%em1 (ff02::2%em1): 56 data bytes
64 bytes from fe80::6366:1356:e19:f361%em1: icmp_seq=0 hlim=64 time=0.114 ms
64 bytes from fe80::225:22ff:fe1e:bb7%em1: icmp_seq=0 hlim=64 time=0.320 ms 
(DUP!)
64 bytes from fe80::6366:1356:e19:f361%em1: icmp_seq=1 hlim=64 time=0.082 ms
64 bytes from fe80::225:22ff:fe1e:bb7%em1: icmp_seq=1 hlim=64 time=0.293 ms 
(DUP!)

Here fe80::6366:1356:e19:f361 is the LL address of em1, so
fe80::225:22ff:fe1e:bb7%em1 is the router on the other side of link.

-- 
Bastien



Re: [OpenIKED] Network traffic over VPN site-to-site tunnel stalls few times a day

2019-08-23 Thread radek
Hello Patrick,

> I’ve found that fast networking is actually CPU & memory intensive.
In my case it is 40/4 Mbps at both ends. Not so fast.

> Pentium 4 and Xeon's are increasingly a necessity for stable firewalls in my 
> opinion.
I will run the same VPN confs on apu1d and PC with Pentium D 820 and check if 
it works more stable.

> Keep in mind OpenBSD is a monolithic kernel & isn’t a one to one ratio with a 
> commercial router.
Could you explain it in other way?

> What are your context switches & interrupts doing while the VPN is up & 
> traffic is flowing?
> 
> vmstat -w 4
>
> What is your memory high water mark during a peak traffic?
> 
> vmstat -m

My testing 6.5 setup looks like this:
net5501-70 - no LAN clients
ALIX2d3 - my home router - two laptops connected directly to ALIX
There is no a significant traffic over VPN, just 3 ping packets every 32 sec, 
generated by monitoring script.
What is more, in the middle of the night (when home laptops were turned off) my 
script also restarted iked.
Date: Fri, 23 Aug 2019 03:43:58 +0200 (CEST)

01. if traffic is not flowing
ALIX$ ifstat -i vr0 -i enc0 
   vr0 enc0   
 KB/s in  KB/s out   KB/s in  KB/s out
0.13  0.27  0.00  0.00
0.06  0.14  0.00  0.00
0.63  0.14  0.00  0.00
0.42  0.14  0.00  0.00

ALIX$ vmstat -w 4
 procsmemory   pagedisk traps  cpu
 r   s   avm fre  flt  re  pi  po  fr  sr wd0  int   sys   cs us sy id
 1  57  192M 20M8   0   0   0   0 117   1  25831   71  0  1 99
 0  58  192M 20M4   0   0   0   0   0   0  23024   31  0  0 100
 1  57  192M 20M2   0   0   0   0   0   0  23023   32  0  0 100
 0  58  192M 20M2   0   0   0   0   0   0  23021   31  0  0 100
 0  58  192M 20M2   0   0   0   0   0   0  23025   33  0  0 100
 0  58  192M 20M2   0   0   0   0   0   0  22919   29  0  0 100
 0  58  192M 20M2   0   0   0   0   0   0  23024   33  0  1 99

net5501$ vmstat -w 4
 procsmemory   pagedisk traps  cpu
 r   s   avm fre  flt  re  pi  po  fr  sr wd0  int   sys   cs us sy id
 1  58   19M218M   24   0   0   0   0   0   0  229   148   28  0  1 99
 0  59   19M218M4   0   0   0   0   0   0  230   156   28  0  0 100
 0  59   19M218M2   0   0   0   0   0   0  230   154   28  0  0 100
 0  59   19M218M2   0   0   0   0   0   0  229   154   25  0  0 100
 0  59   19M218M2   0   0   0   0   0   0  229   154   25  0  0 100
 0  59   19M218M  171   0   0   0   0   0   0  232   158   42  0  2 98
 0  59   19M218M2   0   0   0   0   0   0  230   154   27  0  0 100
 0  59   19M218M2   0   0   0   0   0   0  231   157   28  0  0 100
 0  59   19M218M2   0   0   0   0   0   0  229   154   26  0  0 100


02. if traffic is flowing from ALIX to net5501
ALIX$ nc -N -s 172.16.1.254 10.0.17.254 1234 < 100MB.test
net5501$ nc -l 1234 > /dev/null

ALIX$ ifstat -i vr0 -i enc0
   vr0 enc0   
 KB/s in  KB/s out   KB/s in  KB/s out
   29.59579.75 17.39549.12
   30.15580.07 17.19549.56
   29.43578.51 17.40548.09
   32.87535.13 19.61506.97
   30.23581.61 17.47551.02
   29.90581.63 17.61551.04
   30.08580.03 17.40549.53

ALIX$ vmstat -w 4
 procsmemory   pagedisk traps  cpu
 r   s   avm fre  flt  re  pi  po  fr  sr wd0  int   sys   cs us sy id
 1  58  192M 19M8   0   0   0   0 117   1  25831   71  0  1 99
 0  59  192M 19M4   0   0   0   0   0   0  573   519  950  1 23 77
 0  59  192M 19M2   0   0   0   0   0   0  573   532  953  0 22 78
 0  59  192M 19M2   0   0   0   0   0   0  574   521  955  2 19 79
 0  59  192M 19M2   0   0   0   0   0   0  574   517  951  0 25 75
 0  59  192M 19M2   0   0   0   0   0   0  571   535  956  1 22 77
 0  59  192M 19M2   0   0   0   0   0   0  576   522  960  0 22 77


net5501$ vmstat -w 4
 procsmemory   pagedisk traps  cpu
 r   s   avm fre  flt  re  pi  po  fr  sr wd0  int   sys   cs us sy id
 1  59   20M218M   24   0   0   0   0   0   0  229   147   28  0  1 99
 0  60   20M218M4   0   0   0   0   0   0  651  1433 1575  1 28 72
 0  62   21M216M  143   0   0   0   0   0   0  647  1404 1567  0 28 72
 0  60   20M218M   31   0   0   0   0   0   0  648  1476 1593  0 25 75
 2  58   20M218M2   0   0   0   0   0   0  647  1429 1571  0 25 75
 0  60   20M218M2   0   0   0   0   0   0  651  1492 1602  0 25 75
 0  60   20M218M2   0   0   0   0   0   0  648  1442 1579  0 25 74
 0  60   20M218M2   0   0   0   0   0   0  646  1312 1587  1 27 73


ALIX$ vmstat -m
Memory statistics by bucket size
Size   In Use   Free   Requests  HighWater  Couldfree
   

USB camera has "no usable YUV encodings"

2019-08-23 Thread Jan Stary
This is current/amd64 on a Dell Latitude E5570 (dmesg below).
I am trying to use a USB camera (bought with a microscope,
to display the miracles of paramecium life on the laptop).

https://www.bresser.de/en/Astronomy/Accessories/BRESSER-MikrOkular-Full-HD-eyepiece-camera.html

uvideo1 at uhub0 port 1 configuration 1 interface 0 "Alcor Micro
MikrOkularHD" rev 2.00/0.00 addr 4
video1 at uvideo1

While video(1) works with the laptop's integrated camera (video0),
it doesn't work with this USB camera (video1):

  $ doas video -f /dev/video1 -v 
  doas (h...@dell.stare.cz) password: 
  video: /dev/video1 has no usable YUV encodings

The device itself works, in that "doas cat /dev/video1 > /tmp/video.raw"
spews out data, presumably frames captured by the camera. I can even
play that back with "video -i /tmp/video.raw", but it's garbage,
not being in one of the "YUV encodings". file(1) says

/tmp/video.raw: JPEG image data, JFIF standard 1.01,
baseline, precision 0, 4360x720

so is it some format based on a sequence of jpges?
(Please excuse my video ignorance.)

The specification says "UVC" standard, which by
https://en.wikipedia.org/wiki/USB_video_device_class
means would support _some_ UVC-compliant format.

Am I out f luck? Is there a way to capture what this camera sees,
beside video(1), in some "raw" format? Something _is_ comming out.

This is the result of "doas cat /dev/video1 > /tmp/video.raw":
http://stare.cz/.tmp/video.raw

TIA for any hint.

Jan


OpenBSD 6.6-beta (GENERIC.MP) #0: Mon Aug 19 17:13:12 CEST 2019
h...@dell.stare.cz:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 16810340352 (16031MB)
avail mem = 16288194560 (15533MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xeac10 (107 entries)
bios0: vendor Dell Inc. version "1.5.0" date 04/22/2016
bios0: Dell Inc. Latitude E5570
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET SSDT LPIT SSDT SSDT SSDT DBGP 
DBG2 SSDT UEFI SSDT SSDT SLIC ASF!
acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) 
RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) 
RP13(S4) PXSX(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2295.51 MHz, 06-5e-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC skew=0 observed drift=0
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
TSC skew=4
cpu1: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2294.67 MHz, 06-5e-03
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC skew=4 observed drift=0
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
TSC skew=1
cpu2: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2294.67 MHz, 06-5e-03
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC skew=1 observed drift=0
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
TSC skew=-80
cpu3: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2294.67 MHz, 06-5e-03
cpu3: 

Re: Erratically losing connection on usb port from UPS unit

2019-08-23 Thread Boudewijn Dijkstra
Op Wed, 21 Aug 2019 15:06:17 +0200 schreef Walter Alejandro Iglesias  
:

[...]

It has been working for days (with and without NUT) apparently without
problems except for three times in which the usb signal from the ups got
cut, apparently for no reason.  I get this message in console:

  upd0 detached
  uhidev0 detached


I have a similar recurring message, also very erratically, mean period is  
about a month:


ugen0 detached
ugen0 at uhub1 port 2 "American Power Conversion Smart-UPS 1000 FW:UPS  
09.2 / ID=18" rev 2.00/1.06 addr 2



While using NUT I got "stale" messages from upsmon when that happened.


I'm using apcupsd, I also get messages for these occurrences.



--
Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/



Re: pkg_add -u fails on nonexistant package

2019-08-23 Thread Marc Espie
On Thu, Aug 22, 2019 at 07:40:28AM -0500, Jordon wrote:
> Thanks - that fixed it.  I figured there was some cleanup or maintenance that 
> needed to be done - i just didn't know how to do it.  In running pkg_check, i 
> did get a lot of these:

Packages normally don't need maintenance.  What you're seeing looks like a
very unclean unmount at some point or a failing disk.

pkg_check will recover the best it can from these. It was originally written
for other developers, who tend to crash their testing kernels a lot... 
shouldn't happen THAT much for non kernel developers/crash-test bunnies.



startx

2019-08-23 Thread Jan Stary
https://www.openbsd.org/faq/faq11.html says

  The recommended way to run X is with the xenodm(1) display manager.
  It offers some important security benefits over the traditional
  startx(1) command. 

https://www.openbsd.org/faq/upgrade65.html says

  The Xorg binary is no longer installed setuid, so startx(1) can no
  longer be used by non-root users. The xenodm(1) display manager has
  to be used instead.

So should the faq be updated?
(Fell free to change the wording to something good)

Jan


--- faq11.html.orig Fri Aug 23 08:30:22 2019
+++ faq11.html  Fri Aug 23 08:32:26 2019
@@ -68,7 +68,10 @@ information in /usr/X11R6/README on the i
 The recommended way to run X is with the
 https://man.openbsd.org/xenodm;>xenodm(1) display manager.
 It offers some important security benefits over the traditional
-https://man.openbsd.org/startx;>startx(1) command.
+https://man.openbsd.org/startx;>startx(1) command:
+the Xorg binary is no longer installed setuid,
+so https://man.openbsd.org/OpenBSD-6.5/startx;>startx(1)
+can no longer be used by non-root users.
 
 
 If https://man.openbsd.org/xenodm;>xenodm(1) wasn't enabled



video(1) permissions

2019-08-23 Thread Jan Stary
This is current/amd64 on a Dell Latitude E5570 (dmesg below).
It has this integrated camera which I am trying to use with video(1):

uvideo0 at uhub0 port 11 configuration 1 interface 0 "CN0J8NNP7248765RBBM6A00 
Integrated_Webcam_HD" rev 2.00/54.13 addr 3
video0 at uvideo0

Running just plain 'video' says
video: /dev/video: Permission denied

Does that mean video(1) has to be run inside doas(1)?
Or is there, say, a group to add myself too, as with
e.g. operator to run shutdown? Doesn't seem so:

ls -l /dev/video*  
lrwxr-xr-x  1 root  wheel 6 Jun 14  2017 /dev/video -> video0
crw---  1 root  wheel   44,   0 Aug 19 16:47 /dev/video0
crw---  1 root  wheel   44,   1 Aug 19 16:47 /dev/video1

When run as 'doas video',

No protocol specified
video: cannot open display :0

Copying the user's ~/.Xauthority to be root's ~/.Xauthority
makes it work, and up comes my mug staring into the camera.

hans@dell:~$ doas video -v
doas (h...@dell.stare.cz) password:
video device /dev/video:
  encodings: yuy2
  frame sizes (width x height, in pixels) and rates (in frames per second):
160x120: 30
320x180: 30
320x240: 30
424x240: 30
640x360: 30
640x480: 30
  controls: brightness, contrast, saturation, hue, gain, gamma, sharpness
Xv adaptor 0, GLAMOR Textured Video:
  encodings: yv12
  max size: 1920x1080
using yuy2 encoding
using frame size 640x480 (614400 bytes)
using default frame rate
run time: 0.850648 seconds
frames grabbed: 26
frames played: 25
played fps: 28.213788

Question: is this the right way to do it,
i.e. to give video the permissions needed to actually capture video?

(Lastly, does any of this belong to
https://www.openbsd.org/faq/faq13.html ?)

Jan


OpenBSD 6.6-beta (GENERIC.MP) #0: Mon Aug 19 17:13:12 CEST 2019
h...@dell.stare.cz:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 16810340352 (16031MB)
avail mem = 16288194560 (15533MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xeac10 (107 entries)
bios0: vendor Dell Inc. version "1.5.0" date 04/22/2016
bios0: Dell Inc. Latitude E5570
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET SSDT LPIT SSDT SSDT SSDT DBGP 
DBG2 SSDT UEFI SSDT SSDT SLIC ASF!
acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) 
RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) 
RP13(S4) PXSX(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2295.51 MHz, 06-5e-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC skew=0 observed drift=0
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
TSC skew=4
cpu1: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2294.67 MHz, 06-5e-03
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC skew=4 observed drift=0
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
TSC skew=1
cpu2: Intel(R) Core(TM) i5-6440HQ CPU @ 2.60GHz, 2294.67 MHz, 06-5e-03
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
tsc_timecounter_init: TSC