Re: problems with carp and vlans
Hi, thank you all, it seems to work now. just for the records, my configuration: master carp interfaces are configured like this: vhid 1 pass foo carpdev vlan3 192.168.0.1 192.168.0.255 netmask 255.255.255.0 up and the backup interfaces are configured like this: vhid 1 pass foo carpdev vlan3 advskew 20 192.168.0.1 192.168.0.255 netmask 255.255.255.0 up net.inet.carp.preempt=1 darn, after reading the carp man page again, there it is stated how it works. I only remembered the advskew description from the ifconfig man page, there it is only mentioned to skew the advbase, no word about take over all interfaces with net.inet.carp.preempt=1 enabled. nevertheless, thanks a lot for all replies. --- Urspr|ngliche Nachricht --- Von: Marco Pfatschbacher [EMAIL PROTECTED] An: Otto Moerbeek [EMAIL PROTECTED] Kopie: Lars Weste [EMAIL PROTECTED], misc@openbsd.org Betreff: Re: problems with carp and vlans Datum: Thu, 20 Apr 2006 18:07:40 +0200 On Thu, Apr 20, 2006 at 05:42:20PM +0200, Otto Moerbeek wrote: On Thu, 20 Apr 2006, Lars Weste wrote: Hi, yes, i am running 3.8 -stable, and the backup has a higher advbase than err, for preemption to work, the advskew should be higher on the backup. At least, that is what carp(4) says. Yes, actually you should have have an identical advbase, but an higher advskew on the backup. If the master box looses one of its links, it bumps the advskew to 240 so that the backup has a chance to take over all carp interfaces. the master. Nevertheless, my problem doesn't seem to be the vlan interface itself, it is just a general problem keep the interfaces in sync, as ryan describes here: http://www.countersiege.com/doc/ifstated/ That document describes the carp behaviour at the time of 3.5. Ever since then, it takes care for about that by itself. so I am wondering whether I have to use ifstated, and to check all interfaces, or whether there is some new feature, that will do the trick. The latter. Ifstated is useful for some more advanced monitoring or reporting cases. -- Feel free - 10 GB Mailbox, 100 FreeSMS/Monat ... Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail
Re: Keep carp interfaces in sync, WAS: problems with carp and vlans
Hi list, someone suggested I shall wait for the 3.9, see below. I googled a the whole day for a solution, and found this: http://www.countersiege.com/doc/ifstated/ where ryan describes my problem exactly. will openbsd 3.9 carp be able to keep the interfaces in sync without ifstated? I read the changelog so far, but did not found any evidence. I also read through the manual pages on openbsd.org (these are always for -current, or not?) but have not found anything that might solve the problem without carp. Can someone clarify if it will work with 3.9 without ifstated? thanks a lot lars Try a 3.9 kernel and 3.9 ifconfig binary and see what happens i'm using 3.9-current from the snapshots right now to great effect Lars Weste [EMAIL PROTECTED] wrote: Hi, I have some problems with carp and vlans, at least I think so. I found this: http://archives.neohapsis.com/archives/openbsd/cvs/2005-04/0996.html so my assumption may be wrong, as I use openbsd 3.8. I have four physical interfaces in my two firewalls, one for pfsync, one to the Internet, DMZ and LAN. At the LAN interface seven VLAN interfaces are configured. The Internet and DMZ interfaces are on em(4) and the pfsync and LAN vlans on a bge(4) interface. When I remove one of the Internet or DMZ cables, all Interfaces on both firewalls behave as expected, the Interface where the cable is removed, goes to state INIT, the others become backup. When I do this with the LAN interface, then all carp interfaces for the seven vlans go to master state, but the two remaining carp interfaces for the Internet and DMZ stay in backup mode. my configuration on both hosts: net.inet.carp.preempt=1 net.inet.carp.allow=1 net.inet.carp.arpbalance=0 hostname.carp0 !ifconfig em0 up vhid 1 carpdev em0 172.16.0.1 172.16.0.255 netmask 255.255.255.0 up hostname.carp1 !ifconfig em1 up vhid 1 carpdev em1 172.16.1.1 172.16.1.255 netmask 255.255.255.0 up hostname.carp2 !ifconfig bge0 up !ifconfig vlan0 create !ifconfig vlan0 vlan 3 vlandev bge0 up vhid 1 carpdev vlan0 192.168.0.1 192.168.1.255 netmask 255.255.254.0 up hostname.carp3 up to hostname.carp9 (only the vlan interface numbers and ip addresses are different) !ifconfig vlan1 create !ifconfig vlan1 vlan 4 vlandev bge0 up vhid 1 carpdev vlan0 192.168.2.1 192.168.3.255 netmask 255.255.254.0 up I also tried to use the em interfaces for the vlan devices, with the same result, the interfaces do not stay in sync. assume the following: i remove a cable from the backup host from the carp interfaces, doesn't matter which one. The carp interface goes into init state, then i plug it back in, and the interface goes into backup state. but with a chance of about 1 of 5 the interface changes its state from backup to master, but the other interfaces stay in backup mode. The second host has all interfaces as master but the one as backup where at the first host the corresponding interface is in master mode. I also tried with different vhid's on all interfaces, but with no different results. Anybody knows how to keep the carp interfaces on the vlan devices in same state with the carp interfaces bound to the physical interfaces? Any hint would be greatly appreciated. lars -- Analog-/ISDN-Nutzer sparen mit GMX SmartSurfer bis zu 70%! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
pf and pmtu discovery
Hi, with scrub in all set at the firewall, will openbsd handle icmp packets of type unreach code needfrag automatically, because of the statefulness? as far as i know, icmp packtes like port/host/network unreachable are allowed by the keep state statements, does this also apply for the need fragment codes of icmp unreachable messages? or shall I have to add a rule to allow these packets explicitly? thanks lars -- GMX Produkte empfehlen und ganz einfach Geld verdienen! Satte Provisionen f|r GMX Partner: http://www.gmx.net/de/go/partner
Re: Keep carp interfaces in sync, WAS: problems with carp and vlans
Hi, hostname.carp2 !ifconfig bge0 up !ifconfig vlan0 create !ifconfig vlan0 vlan 3 vlandev bge0 up vhid 1 carpdev vlan0 192.168.0.1 192.168.1.255 netmask 255.255.254.0 I use the seperate hostname.if files instead of loading raw ifconfig commands. /etc/netstart does start physical interfaces, then vlans and finally carp. From memory: hostname.em0 up hostname.em2 inet 10.0.0.1 255.255.255.0 NONE hostname.vlan100 vlan 100 vlandev em0 up hostname.carp100 vhid 100 carpdev vlan100 inet 192.168.1.254 255.255.255.0 NONE hostname.carp204 vhid 204 carpdev em2 inet 10.0.0.100 255.255.255.0 NONE Can someone clarify if it will work with 3.9 without ifstated? I'm running my routers from a 3.9 snapshot generated a couple days before 3.9 was tagged in CVS, and I've had no problems with carp on vlan on em. Did the failover tests and everything worked extremely well. One of the coworkers was online from home and didn't notice that I had pulled cables. I have had some network issues with bge interfaces, but I only have those in an NFS server so it's quite a different traffic pattern. You may want to try forcing speed and duplex, that fixed one of my bge problems. I have no speed issues, the autonegotiation works fine for me. It is just when I unplug one of cables of one of the three carp interfaces, sometimes not all are switched to master or backup, sometimes only one, or two. Well, if I had stopped my testing after the first three cable unpluggings, then everything were perfect, but some try later i noticed the interfaces became out of sync. that is my problem: http://www.countersiege.com/doc/ifstated/ and i cannot find anything in the changelogs... where it states it is fixed in 3.9. I already ordered CD's from Wim some weeks ago, just waiting. lars -- Analog-/ISDN-Nutzer sparen mit GMX SmartSurfer bis zu 70%! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Re: Keep carp interfaces in sync, WAS: problems with carp and vlans
Hi, with scrub in all set at the firewall, will openbsd handle icmp packets of type unreach code needfrag automatically, because of the statefulness? as far as i know, icmp packtes like port/host/network unreachable are allowed by the keep state statements, does this also apply for the need fragment codes of icmp unreachable messages? or shall I have to add a rule to allow these packets explicitly? citating pf.conf(5): ... STATEFUL INSPECTION ... ICMP messages fall into two categories: ICMP error messages, which always refer to a TCP or UDP packet, are matched against the referred to connec- tion. If one keeps state on a TCP connection, and an ICMP source quench message referring to this TCP connection arrives, it will be matched to the right state and get passed. ... Thanks, I must have overlooked it, i thought only these unreachable messages will be part of a state. but on the other side I found this: http://kerneltrap.org/node/579 regarding Linux NFS and openbsd pf and scrub. After reading that, I assume that I will not need to add an explicit rule for the needfrag ICMP packets, only if I will run into some trouble, I might exclude a bit traffic from scrubbing. thanks lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl
Re: pf and pmtu discovery
Hi, sent the message with the wrong subject, therefore here again. with scrub in all set at the firewall, will openbsd handle icmp packets of type unreach code needfrag automatically, because of the statefulness? as far as i know, icmp packtes like port/host/network unreachable are allowed by the keep state statements, does this also apply for the need fragment codes of icmp unreachable messages? or shall I have to add a rule to allow these packets explicitly? citating pf.conf(5): ... STATEFUL INSPECTION ... ICMP messages fall into two categories: ICMP error messages, which always refer to a TCP or UDP packet, are matched against the referred to connec- tion. If one keeps state on a TCP connection, and an ICMP source quench message referring to this TCP connection arrives, it will be matched to the right state and get passed. ... Thanks, I must have overlooked it, i thought only these unreachable messages will be part of a state. but on the other side I found this: http://kerneltrap.org/node/579 regarding Linux NFS and openbsd pf and scrub. After reading that, I assume that I will not need to add an explicit rule for the needfrag ICMP packets, only if I will run into some trouble, I might exclude a bit traffic from scrubbing. thanks lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl -- Analog-/ISDN-Nutzer sparen mit GMX SmartSurfer bis zu 70%! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Re: PF/CARP load balancing
Hi, Say the webservers are named internally 10.0.0.1 and 10.0.0.2. Is it possible to create two CARP interfaces, say 10.0.0.3 and 10.0.0.4, where server 10.0.0.1 is master of CARP 10.0.0.3 and 10.0.0.2 is master of CARP 10.0.0.4. Then, use rdr load balancing on the firewall to hit the .3/.4 CARP addresses, instead of the server addresses. At first glance this looks like it would work - if either server dies the other will take over master of both IPs and pf will not care. My only thought is it might complicate SSL connections which are per-IP, but then it shouldn't be a problem to make the same SSL virtual host respond to the two CARP addresses (or however many more CARP pairs I need to create for other sites). Does this sound workable, or will I need to resort to something like Pound on the webservers? It might work, but carp itself has a basic load balance (based on hashes of the source IP) in itself. works well with ssl and the like. look for the arpbalance feature. So I think you do not really need to do rdr packets to the webservers itself. lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl
Re: problems with carp and vlans
Hi, yes, i am running 3.8 -stable, and the backup has a higher advbase than the master. Nevertheless, my problem doesn't seem to be the vlan interface itself, it is just a general problem keep the interfaces in sync, as ryan describes here: http://www.countersiege.com/doc/ifstated/ so I am wondering whether I have to use ifstated, and to check all interfaces, or whether there is some new feature, that will do the trick. lars --- Urspr|ngliche Nachricht --- Von: Marco Pfatschbacher [EMAIL PROTECTED] An: Lars Weste [EMAIL PROTECTED] Kopie: misc@openbsd.org Betreff: Re: problems with carp and vlans Datum: Thu, 20 Apr 2006 15:01:30 +0200 Hi, did you remember to configure the backup machine with a higher advskew / advbase? Are you running -stable? I'm not aware of any other problems in 3.8 that might cause this. On Wed, Apr 19, 2006 at 08:59:01AM +0200, Lars Weste wrote: Hi, I have some problems with carp and vlans, at least I think so. I found this: http://archives.neohapsis.com/archives/openbsd/cvs/2005-04/0996.html so my assumption may be wrong, as I use openbsd 3.8. I have four physical interfaces in my two firewalls, one for pfsync, one to the Internet, DMZ and LAN. At the LAN interface seven VLAN interfaces are configured. The Internet and DMZ interfaces are on em(4) and the pfsync and LAN vlans on a bge(4) interface. When I remove one of the Internet or DMZ cables, all Interfaces on both firewalls behave as expected, the Interface where the cable is removed, goes to state INIT, the others become backup. When I do this with the LAN interface, then all carp interfaces for the seven vlans go to master state, but the two remaining carp interfaces for the Internet and DMZ stay in backup mode. my configuration on both hosts: net.inet.carp.preempt=1 net.inet.carp.allow=1 net.inet.carp.arpbalance=0 hostname.carp0 !ifconfig em0 up vhid 1 carpdev em0 172.16.0.1 172.16.0.255 netmask 255.255.255.0 up hostname.carp1 !ifconfig em1 up vhid 1 carpdev em1 172.16.1.1 172.16.1.255 netmask 255.255.255.0 up hostname.carp2 !ifconfig bge0 up !ifconfig vlan0 create !ifconfig vlan0 vlan 3 vlandev bge0 up vhid 1 carpdev vlan0 192.168.0.1 192.168.1.255 netmask 255.255.254.0 up hostname.carp3 up to hostname.carp9 (only the vlan interface numbers and ip addresses are different) !ifconfig vlan1 create !ifconfig vlan1 vlan 4 vlandev bge0 up vhid 1 carpdev vlan0 192.168.2.1 192.168.3.255 netmask 255.255.254.0 up I also tried to use the em interfaces for the vlan devices, with the same result, the interfaces do not stay in sync. assume the following: i remove a cable from the backup host from the carp interfaces, doesn't matter which one. The carp interface goes into init state, then i plug it back in, and the interface goes into backup state. but with a chance of about 1 of 5 the interface changes its state from backup to master, but the other interfaces stay in backup mode. The second host has all interfaces as master but the one as backup where at the first host the corresponding interface is in master mode. I also tried with different vhid's on all interfaces, but with no different results. Anybody knows how to keep the carp interfaces on the vlan devices in same state with the carp interfaces bound to the physical interfaces? Any hint would be greatly appreciated. lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl -- Analog-/ISDN-Nutzer sparen mit GMX SmartSurfer bis zu 70%! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
problems with carp and vlans
Hi, I have some problems with carp and vlans, at least I think so. I found this: http://archives.neohapsis.com/archives/openbsd/cvs/2005-04/0996.html so my assumption may be wrong, as I use openbsd 3.8. I have four physical interfaces in my two firewalls, one for pfsync, one to the Internet, DMZ and LAN. At the LAN interface seven VLAN interfaces are configured. The Internet and DMZ interfaces are on em(4) and the pfsync and LAN vlans on a bge(4) interface. When I remove one of the Internet or DMZ cables, all Interfaces on both firewalls behave as expected, the Interface where the cable is removed, goes to state INIT, the others become backup. When I do this with the LAN interface, then all carp interfaces for the seven vlans go to master state, but the two remaining carp interfaces for the Internet and DMZ stay in backup mode. my configuration on both hosts: net.inet.carp.preempt=1 net.inet.carp.allow=1 net.inet.carp.arpbalance=0 hostname.carp0 !ifconfig em0 up vhid 1 carpdev em0 172.16.0.1 172.16.0.255 netmask 255.255.255.0 up hostname.carp1 !ifconfig em1 up vhid 1 carpdev em1 172.16.1.1 172.16.1.255 netmask 255.255.255.0 up hostname.carp2 !ifconfig bge0 up !ifconfig vlan0 create !ifconfig vlan0 vlan 3 vlandev bge0 up vhid 1 carpdev vlan0 192.168.0.1 192.168.1.255 netmask 255.255.254.0 up hostname.carp3 up to hostname.carp9 (only the vlan interface numbers and ip addresses are different) !ifconfig vlan1 create !ifconfig vlan1 vlan 4 vlandev bge0 up vhid 1 carpdev vlan0 192.168.2.1 192.168.3.255 netmask 255.255.254.0 up I also tried to use the em interfaces for the vlan devices, with the same result, the interfaces do not stay in sync. assume the following: i remove a cable from the backup host from the carp interfaces, doesn't matter which one. The carp interface goes into init state, then i plug it back in, and the interface goes into backup state. but with a chance of about 1 of 5 the interface changes its state from backup to master, but the other interfaces stay in backup mode. The second host has all interfaces as master but the one as backup where at the first host the corresponding interface is in master mode. I also tried with different vhid's on all interfaces, but with no different results. Anybody knows how to keep the carp interfaces on the vlan devices in same state with the carp interfaces bound to the physical interfaces? Any hint would be greatly appreciated. lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl
dhcp option 82
Hi, I do not think so, but does the openbsd dhcpd can handle dhcp requests that contain that option 82, that can be added by dhcp relays on switches to the originating dhcp request from the client. haven't found anything on that in the manual, so I want to make sure that i am right, or better wrong, before exchanging my dhcpd with isc-dhcpd. cheers lars -- Echte DSL-Flatrate dauerhaft f|r 0,- Euro*! Feel free mit GMX DSL! http://www.gmx.net/de/go/dsl
Kernelpanic: Re: upl(4) interface not working
Hi, i had an other ethernet interface configured and the default route via the other interface. I removed this hostname.if and restarted. then i did the following: # ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up # route add default 10.200.200.2 # ping 10.200.200.1 PING 10.200.200.1 (10.200.200.1): 56 data bytes upl0: watchdog timeout panic: uhci_abort_xfer: not in process context Stopped at Debugger+0x4: leave RUN at least... will send the output and further infos to bugs@, so I assume there is a larger problem with this device. greetings lars -- Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
upl(4) interface not working
Hi list, first I was happy to find this upl(4) device. after connecting it to the usb port, the device shows up as: upl0 at uhub0 port 2 upl0: Prolific Technology Inc. PL2302 Host-Host Interface, rev 1.00/0.01, addr 2 I configured it on the first machine: ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.255 up and on the second host: ifconfig upl0 inet 10.200.200.2 10.200.200.1 netmask 255.255.255.255 up ifconfig upl0 on host 1 shows: upl0: flags=8d1UP,POINTTOPOINT,RUNNING,NOARP,SIMPLEX mtu 1024 inet 10.200.200.1 -- 10.200.200.2 netmask 0x ifconfig upl0 on host 2 shows: upl0: flags=8d1UP,POINTTOPOINT,RUNNING,NOARP,SIMPLEX mtu 1024 inet 10.200.200.2 -- 10.200.200.1 netmask 0x I am unable to ping either end of the point-to-point from both hosts. Also when I try to sniff the connection with tcpdump, then I see the following error message: tcpdump -n -i upl0 tcpdump: Failed to open bpf device for upl0: Device not configured the upl(4) manual page is not that much descriptive about how to use this interface, it more or less only refers to ifconfig(8) I think i have missed sth. obvious? Anybody can point me into the right direction? greetings Lars -- Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Re: upl(4) interface not working
Hi Sebastian, Henning, --- Urspr|ngliche Nachricht --- Von: Sebastian Schmitzdorff [EMAIL PROTECTED] An: misc@openbsd.org Kopie: Lars Weste [EMAIL PROTECTED] Betreff: Re: upl(4) interface not working Datum: Wed, 01 Mar 2006 15:15:07 +0100 I'm not much of an network expert but wouldn't it help to use a /31 (255.255.255.254) instead of a /32 (255.255.255.255) mask? sebastian I tried with ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up I also tried without netmask, same result. the routing looks like the following: netstat -rn Destination Gateway Flags Refs Use MtuInterface Default ... 10.200.200.2 10.200.200.1 UH 0 0 -upl0 ... I cannot ping 10.200.200.1 nor 10.200.200.2 from this host. So I assume it must sth. else. greetings Lars -- Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Re: upl(4) interface not working
Hi all, On Wednesday 01 March 2006 21:09, Lars Weste wrote: I configured it on the first machine: ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.255 up Wrong netmask. point-to-point links usually use 255.255.255.252 (a /30). I tried with different netmasks, /30, /31, /32, /0 and without specifying a netmask. As mentioned in a previous mail, the interface shows up as configured, also the routing table looks good to me. ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up ping 10.200.200.1 the ping command returns with no route to host... I am unable to ping the local ip on the local upl0 interface. Regardless which netmask i have configured, shouldn't I be able to ping the local configured IP? I plugged the cable into a linux host, the device was recognized as the following: Mar 2 07:26:03 linux kernel: usb 4-1: new full speed USB device using uhci_hcd and address 2 Mar 2 07:26:03 linux /etc/hotplug.d/usb/50-usb.hotplug[16124]: cat: /sys//devices/pci:00/:00:1d.3/usb4/4-1/product: No such file or directory Mar 2 07:26:04 linux kernel: usb0: register usbnet at usb-:00:1d.3-1, Prolific PL-2301/PL-2302, f6:d5:9f:cb:1a:5c Mar 2 07:26:04 linux kernel: usbcore: registered new driver usbnet Mar 2 07:26:10 linux ifup: No configuration found for usb0 This was a suse linux host, so yast came up, asking whether I want to configure the new network card. Linux takes the device as a network card, not as a point-to-point device. after assigning a ip address I was able to ping the local ip of the usb device. I am a bit clueless why it is in linux a ordinary network interface and in openbsd a point-to-point interface. greetings lars -- Feel free mit GMX FreeMail! Monat f|r Monat 10 FreeSMS inklusive! http://www.gmx.net
Ethernet via USB cable
Hi list, I am trying to setup a network between two OpenBSD 3.8 hosts via a USB interface. I wanted to use the Interface as a pfsync device. I thought it have read somewhere it is possible but cannot remember where, so when I issue a: apropos usb | grep -i ether I feel I will need a USB Ethernet interface, just coupling two hosts via a USB cable doesn't work. The most promising manual page revealed that way is the cdce(4), but there is a Prolific and Zaurus mentioned and I belive this is only working with these devices. So do I need special USB Ethernet hardware to configure a network between two OpenBSD hosts connected together via USB, if not, which manpage did I missed? greets lars -- DSL-Aktion wegen gro_er Nachfrage bis 28.2.2006 verldngert: GMX DSL-Flatrate 1 Jahr kostenlos* http://www.gmx.net/de/go/dsl
Re: openbsd on irix
Hi, You take it out of context. OpenBSD/sgi is a fully featured 64 bit port and will thus only run on systems based on 64 bit processors, i.e. R4000 and up. Currently only O2s are supported which start at r5k. The port could be enhanced to support older machines based around r4k processors but this has not yet been done. thanks for making this clear to me. lars -- Lust, ein paar Euro nebenbei zu verdienen? Ohne Kosten, ohne Risiko! Satte Provisionen f|r GMX Partner: http://www.gmx.net/de/go/partner
how to load debugging symbols into gdb
Hi, I have a problem debugging a core file of a web application server with the gdb. The application server is written in objective c, running in a GNUstep environment, the binary is compiled with debugging information and is not stripped. when I try to examine the file I load it with gdb -c core-file then in gdb I issue a symbol-file /usr/local/sbin/ogo-webui-1.1 this will load the symbols of the file. then I looked with ldd /usr/local/sbin/ogo-webui-1.1 which shared libraries are loaded. (well every output of ldd differs because of the randomness :) then in gdb I did add-symbol-file ... for each shared library I saw in the ldd output, well I skipped to tell gdb the address because I did not find out where these are because of the randomness. whatever I tried, when I issue a bt in gdb, then I get lots of: #0 0x0fd6e61c in ?? () #1 0x241aba78 in ?? () #2 0x08760d2c in ?? () #3 0x087619b2 in ?? () #4 0x7d984e40 in ?? () #5 0x0007d990 in ?? () #6 0x in ?? () #7 0x8bb1f000 in ?? () #8 0x8bb1f000 in ?? () #9 0x8bb1f000 in ?? () #10 0x2fd6500c in ?? () #11 0x2fd66898 in ?? () #12 0x221ef039 in ?? () #13 0x221f70c0 in ?? () #14 0xcfbf61e8 in ?? () #15 0x0fd6f987 in ?? () is there a way to find out at which starting points the shared libraries were loaded as the application crashed? tried ldd, nm, objdump on the core file, but without luck. Do I have to disable the randomness for testing/debugging? If yes, where do I have to disable it, -fno-stack-protection, /etc/malloc.conf, syctl kern.stackgap_random, anything else? when I load a core file of the application in linux, and issue a symbol-file command, then not only the symbols of the given binary but also from all shared libraries are loaded automatically. Then issuing a bt command in gdb shows me all the information I want. Does this somehow work in the openbsd gdb? i am a bit clueless now, so what can I do to find out why the application crashed in openbsd? greets lars -- Telefonieren Sie schon oder sparen Sie noch? NEU: GMX Phone_Flat http://www.gmx.net/de/go/telefonie