Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread peter
 Kyle == Kyle  k...@attitia.com writes:

Kyle Must remember to hit Reply to All Yes, the mail server *is*
Kyle the box. It also serves DHCP and DNS. But I didn't think they
Kyle were all that heavy.

So, connexions to the  (imap? smtp?) mail server time out.  Can you run
wireshark on the server, and see what's happening?  Does the server
have a correct route to the clients?

If it's smtp, then try telnet from a client to the server (telnet
192.168.1.1 25) on the inside of the firewall, while watching top on
the firewall.  What does the load look like?  Does the telnet session
time out?  During which part of the connexion?

It could be your firewall rules are broken, and replies are being
dropped or something.  Wireshark will tell you.
--
Dr Peter Chubb  http://www.gelato.unsw.edu.au  peterc AT gelato.unsw.edu.au
http://www.ertos.nicta.com.au   ERTOS within National ICT Australia
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread elliott-brennan
Hi all,

I have Mythbuntu running on

a 3Ghz P4
1.5G RAM,
500G HDD,
two PVR-150 video cards
and a 128mb nVidia card.

On the odd occasion the machine decides to reboot,
for no particular reason. Tonight, for instance,
my wife was watching the ABC and the machine just
borked and rebooted. She wasn't 'doing' anything
and the machine was doing nothing but showing the
TV...no additional work.

It's done this irregularly (eg. not every day and
not at the same time) and I can't work out a pattern.

Last week I had serious problems getting it to
stay alive for more than 10 minutes. I finally
replaced the BIOS battery and it was fine.

Can anyone suggest something I should look at?

Thanks in advance.

Regards,

Patrick

-- 
Registered GNU/Linux User 368634

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread Jake Anderson

elliott-brennan wrote:

Hi all,

I have Mythbuntu running on

a 3Ghz P4
1.5G RAM,
500G HDD,
two PVR-150 video cards
and a 128mb nVidia card.

On the odd occasion the machine decides to reboot,
for no particular reason. Tonight, for instance,
my wife was watching the ABC and the machine just
borked and rebooted. She wasn't 'doing' anything
and the machine was doing nothing but showing the
TV...no additional work.

It's done this irregularly (eg. not every day and
not at the same time) and I can't work out a pattern.

Last week I had serious problems getting it to
stay alive for more than 10 minutes. I finally
replaced the BIOS battery and it was fine.

Can anyone suggest something I should look at?

Thanks in advance.

Regards,

Patrick

  

Anything interesting in the logs?
otherwise, potentially ram, or given its a little old, motherboard 
capacitors.

Last week was also really hot which would affect things somewhat badly.

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread Kevin Shackleton
ditto that and check seating  cooling (ie blow out dust from CPU
heatsink, re-apply that nice carcinogenic heatsink compound you get from
nerd shops).  There's a product CRC Switch Cleaner Lubricant which
greatly improves contact problems though I suspect in the longer term
you get more dust stuck down.

Kevin.

On Fri, 2009-02-20 at 22:24 +1100, Jake Anderson wrote:
 elliott-brennan wrote:
  On the odd occasion the machine decides to reboot,


 Anything interesting in the logs?
 otherwise, potentially ram, or given its a little old, motherboard 
 capacitors.
 Last week was also really hot which would affect things somewhat badly.
 

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread elliott-brennan
Hi Ben,

I'm running a brand new Zalman CNPS7700 CPU fan
along with a brand new Seasonic S12II 430W PSU
with a 120mm fan in the machine.

I checked the box when it keeled over while my
wife was watching the telly and it was rather hot.
It could be the box is not pushed far enough back
in the TV cabinet (big mother which holds
everything) so the air may not have been able to
move around properly regardless of the fans. I've
moved it right to the back (I had already cut a
hole out of the rear of the cabinet to allow the
box to vent properly - wife was not amused).

I'm running memtest86+ at the moment and will
check what it says tomorrow morning.

The machine has generally been running well and so
these odd self-reboots are quite odd.

... it would be difficult to determine I guess,
until it
 completely fails.

Sad but true.

Thanks for the advice.

Regards,

Patrick


Ben's Linux wrote:
 Hi,
 
 Just a simple thought.
 
 Try a Live CD  for a while and see if it happens.
 
 If it does not then its not your hard drive and related software but
 your motherboard , RAM or power supply.
 
 Obviously if it still happens change the power supply or RAM and prove it.
 
 Just a thought as it would be difficult to determine I guess, until it
 completely fails.
 
 Ben
 
 - Original Message - From: elliott-brennan
 m...@elliott-brennan.id.au
 To: slug@slug.org.au
 Sent: Friday, February 20, 2009 10:02 PM
 Subject: [SLUG] Mythbuntu box shutting down at random
 
 
 Hi all,

 I have Mythbuntu running on

 a 3Ghz P4
 1.5G RAM,
 500G HDD,
 two PVR-150 video cards
 and a 128mb nVidia card.

 On the odd occasion the machine decides to reboot,
 for no particular reason. Tonight, for instance,
 my wife was watching the ABC and the machine just
 borked and rebooted. She wasn't 'doing' anything
 and the machine was doing nothing but showing the
 TV...no additional work.

 It's done this irregularly (eg. not every day and
 not at the same time) and I can't work out a pattern.

 Last week I had serious problems getting it to
 stay alive for more than 10 minutes. I finally
 replaced the BIOS battery and it was fine.

 Can anyone suggest something I should look at?

 Thanks in advance.

 Regards,

 Patrick

 -- 
 Registered GNU/Linux User 368634

 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html 
 
 

-- 
Registered GNU/Linux User 368634
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread elliott-brennan
Hi Jake

   
 Anything interesting in the logs?
 otherwise, potentially ram, or given its a little old, motherboard
 capacitors.
 Last week was also really hot which would affect things somewhat badly.
 
 

I've had a look at the capacitors (physical view)
and they seem fine (superficial, I know).

I'm running a brand new Zalman CNPS7700 CPU fan
along with a brand new Seasonic S12II 430W PSU.

Regarding logs, if you mean:

/var/log/messages

I'm not quite sure what I'm looking for to be
honest and I'm loath to post the whole thing -
it's s bloody big.

Any hints as to what specifically to look for :))

Regards,

Patrick


-- 
Registered GNU/Linux User 368634
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Draft paper submission deadline extended: SETP-09

2009-02-20 Thread John Edward
Draft paper submission deadline extended: SETP-09
 
The deadline for draft paper submission at the 2009 International Conference on 
Software Engineering Theory and Practice (SETP-09) (website: 
http://www.PromoteResearch.org ) is extended due to numerous requests from the 
authors. The conference will be held during July 13-16 2009 in Orlando, FL, 
USA. We invite draft paper submissions. The conference will take place at the 
same time and venue where several other international conferences are taking 
place. The other conferences include:
· International Conference on Artificial Intelligence and Pattern 
Recognition (AIPR-09) 
· International Conference on Automation, Robotics and Control Systems 
(ARCS-09)
· International Conference on Bioinformatics, Computational Biology, 
Genomics and Chemoinformatics (BCBGC-09) 
· International Conference on Enterprise Information Systems and Web 
Technologies (EISWT-09)
· International Conference on High Performance Computing, Networking 
and Communication Systems (HPCNCS-09) 
· International Conference on Information Security and Privacy (ISP-09)
· International Conference on Recent Advances in Information Technology 
and Applications (RAITA-09)
· International Conference on Theory and Applications of Computational 
Science (TACS-09)
· International Conference on Theoretical and Mathematical Foundations 
of Computer Science (TMFCS-09)
 
The website http://www.PromoteResearch.org contains more details.
 
Sincerely
John Edward
Publicity committee
 



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Kyle

It's all good. Keep the thoughts coming please.

I actually use IMAP over SSL. But for good measure Telnetted (and 
Wiresharked) over both my SSL IMAP port and 25. Both responses come back 
PDQ. And Wireshark shows traffic moving from one host to the other and 
return. I'm pretty confident of my iptables setup as I have refined that 
over a period of years.


Both NIC's in full-duplex (albeit negotiated down to 100Mbps for the 
switch behind the router.)


Is there anything in sysctl.conf I can mess with other than the single; 
'net.ipv4.ip_forward = 1' param which will help?


If I switch off ipv6, will that help?


Kind Regards

Kyle



pe...@chubb.wattle.id.au wrote:


So, connexions to the  (imap? smtp?) mail server time out.  Can you run
wireshark on the server, and see what's happening?  Does the server
have a correct route to the clients?

If it's smtp, then try telnet from a client to the server (telnet
192.168.1.1 25) on the inside of the firewall, while watching top on
the firewall.  What does the load look like?  Does the telnet session
time out?  During which part of the connexion?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread James Polley
On Sat, Feb 21, 2009 at 8:39 AM, Kyle k...@attitia.com wrote:
 It's all good. Keep the thoughts coming please.

 I actually use IMAP over SSL.

you can use openssl s_client in place of telnet to connect -
http://www.jaharmi.com/2007/09/26/using_openssl_securely_connect_your_imap_account
has a guide.

 But for good measure Telnetted (and
 Wiresharked) over both my SSL IMAP port and 25. Both responses come back
 PDQ. And Wireshark shows traffic moving from one host to the other and
 return. I'm pretty confident of my iptables setup as I have refined that
 over a period of years.

 Both NIC's in full-duplex (albeit negotiated down to 100Mbps for the switch
 behind the router.)

 Is there anything in sysctl.conf I can mess with other than the single;
 'net.ipv4.ip_forward = 1' param which will help?

 If I switch off ipv6, will that help?

 
 Kind Regards

 Kyle



 pe...@chubb.wattle.id.au wrote:

 So, connexions to the  (imap? smtp?) mail server time out.  Can you run
 wireshark on the server, and see what's happening?  Does the server
 have a correct route to the clients?

 If it's smtp, then try telnet from a client to the server (telnet
 192.168.1.1 25) on the inside of the firewall, while watching top on
 the firewall.  What does the load look like?  Does the telnet session
 time out?  During which part of the connexion?

 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: UPDATE [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread Kevin Shackleton
On Sat, 2009-02-21 at 07:47 +1100, elliott-brennan wrote:
 I'm assuming this is a not a RAM problem and more like a HDD

Wouldn't a HDD failure come up as a message on the console?

The fact it happens cold and you have a new heatsink suggests it's not a
thermal problem.

I'd strip the components down (remove cards, RAM and CPU) and re-seat
them all.

Though it does sound like a mobo problem I wonder if the power supply
unit is doing it's job properly.  Maybe you could swap that out with
another?

Kevin.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Kyle

Not sure I understand you there James.

I telnet-ed in to test Peter's theories below. But for good measure, I 
just tried with openssl as a command too and that responds immediately.


I just don't get it. One host behind the server/router is a MAC on OSX 
with 4GB, another WinXP with 2GB. The WinXP host is by far the worst. 
But irrespective the MAC is not exactly blindingly quick either. (Both 
wired connections)



Kind Regards

Kyle



James Polley wrote:


you can use openssl s_client in place of telnet to connect -
http://www.jaharmi.com/2007/09/26/using_openssl_securely_connect_your_imap_account
has a guide.


But for good measure Telnetted (and
Wiresharked) over both my SSL IMAP port and 25. Both responses come back
PDQ. And Wireshark shows traffic moving from one host to the other and
return. I'm pretty confident of my iptables setup as I have refined that
over a period of years.



pe...@chubb.wattle.id.au wrote:

So, connexions to the  (imap? smtp?) mail server time out.  Can you run
wireshark on the server, and see what's happening?  Does the server
have a correct route to the clients?

If it's smtp, then try telnet from a client to the server (telnet
192.168.1.1 25) on the inside of the firewall, while watching top on
the firewall.  What does the load look like?  Does the telnet session
time out?  During which part of the connexion?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Chris

Just out of curiosity, what is your IMAP backend? e.g. LDAP, etc

Chris

On 21/02/2009, at 9:59 AM, Kyle k...@attitia.com wrote:


Not sure I understand you there James.

I telnet-ed in to test Peter's theories below. But for good measure,  
I just tried with openssl as a command too and that responds  
immediately.


I just don't get it. One host behind the server/router is a MAC on  
OSX with 4GB, another WinXP with 2GB. The WinXP host is by far the  
worst. But irrespective the MAC is not exactly blindingly quick  
either. (Both wired connections)


--- 
-

Kind Regards

Kyle



James Polley wrote:

you can use openssl s_client in place of telnet to connect -
http://www.jaharmi.com/2007/09/26/using_openssl_securely_connect_your_imap_account
has a guide.

But for good measure Telnetted (and
Wiresharked) over both my SSL IMAP port and 25. Both responses  
come back
PDQ. And Wireshark shows traffic moving from one host to the other  
and
return. I'm pretty confident of my iptables setup as I have  
refined that

over a period of years.



pe...@chubb.wattle.id.au wrote:
So, connexions to the  (imap? smtp?) mail server time out.  Can  
you run

wireshark on the server, and see what's happening?  Does the server
have a correct route to the clients?

If it's smtp, then try telnet from a client to the server (telnet
192.168.1.1 25) on the inside of the firewall, while watching top  
on
the firewall.  What does the load look like?  Does the telnet  
session

time out?  During which part of the connexion?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Chris
Sorry I meant authentication and account information backend. If they  
are stored in a remote ldap server and the traffic is slow to that  
server, in my experience it can cause clients to get bad responses.  
Also can you take off SSL and see if it is faster?


Perhaps check syslog for errors on the IMAP server. And supply your  
private key to wireshark to see the plain traffic.


On 21/02/2009, at 9:59 AM, Kyle k...@attitia.com wrote:


Not sure I understand you there James.

I telnet-ed in to test Peter's theories below. But for good measure,  
I just tried with openssl as a command too and that responds  
immediately.


I just don't get it. One host behind the server/router is a MAC on  
OSX with 4GB, another WinXP with 2GB. The WinXP host is by far the  
worst. But irrespective the MAC is not exactly blindingly quick  
either. (Both wired connections)


--- 
-

Kind Regards

Kyle



James Polley wrote:

you can use openssl s_client in place of telnet to connect -
http://www.jaharmi.com/2007/09/26/using_openssl_securely_connect_your_imap_account
has a guide.

But for good measure Telnetted (and
Wiresharked) over both my SSL IMAP port and 25. Both responses  
come back
PDQ. And Wireshark shows traffic moving from one host to the other  
and
return. I'm pretty confident of my iptables setup as I have  
refined that

over a period of years.



pe...@chubb.wattle.id.au wrote:
So, connexions to the  (imap? smtp?) mail server time out.  Can  
you run

wireshark on the server, and see what's happening?  Does the server
have a correct route to the clients?

If it's smtp, then try telnet from a client to the server (telnet
192.168.1.1 25) on the inside of the firewall, while watching top  
on
the firewall.  What does the load look like?  Does the telnet  
session

time out?  During which part of the connexion?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread jam
On Saturday 21 February 2009 02:31:08 slug-requ...@slug.org.au wrote:
 I'm running a brand new Zalman CNPS7700 CPU fan
 along with a brand new Seasonic S12II 430W PSU
 with a 120mm fan in the machine.

 I checked the box when it keeled over while my
 wife was watching the telly and it was rather hot.
 It could be the box is not pushed far enough back
 in the TV cabinet (big mother which holds
 everything) so the air may not have been able to
 move around properly regardless of the fans. I've
 moved it right to the back (I had already cut a
 hole out of the rear of the cabinet to allow the
 box to vent properly - wife was not amused).

 I'm running memtest86+ at the moment and will
 check what it says tomorrow morning.

 The machine has generally been running well and so
 these odd self-reboots are quite odd.

 ... it would be difficult to determine I guess,

 until it
  completely fails.
 Sad but true.

When the machine fails, or at your leisure reboot, enter the BIOS screen, 
Health and check the temperatures.

My myth machine (DNS, MAIL, WWW, DHCP) is on 24/7 so I was paranoid about 
power consumption. It runs cool, and by stopwatch at the meter it is 30W.
Right now Perth is 30C (it's only 9:15) and CPU temp is 39C

Last time (long ago) I checked a P4 it was over 130W so say 100W extra == 870 
KwH pa == $105. Easy to justify a new mobo at $80 ish and my 2 DVICO tuner 
backend worked fine with a sempron processor ($25 ish) although I use a
model name  : AMD Athlon(tm) X2 Dual Core Processor BE-2300
because DB stuff is quicker (myth uses the DB a lot so after years you get the 
occasional 2 sec pause when skipping)

James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] February SLUG Monthly Meeting - this Friday

2009-02-20 Thread Sridhar Dhanapalan
== Call for Speakers ==

We are looking for speakers for our next meetings on Friday 27
March and beyond. Our meetings are held on the last Friday of every
month.

Please let the Committee (commit...@slug.org.au) know if you
can help out.


== February SLUG Monthly Meeting ==

You can read the full version of this announcement on the Web at
 http://slug.org.au/node/111

When:
 18.30 - 20.30, Friday, 27 February, 2009

We start at 18.30 but we ask that people arrive 15 minutes early so we
can all get into the building and start on time. Please do not arrive
before 18.00, as it may hinder business activities for our host!

Appropriate signage and directions will be posted on the building.

Where:
 Atlassian[0], 173-185 Sussex Street, Sydney
 (corner of Sussex and Market Street)

Entry is via the rear on Slip Street. There are stairs going down along
the outside of building from Sussex St to near the entrance. A map of
the area and directions can be found here[1].


= Talks =

Still shimmering with amniotic goop, Jamie Wilkinson unplugs and
emerges from the motherly confines of his work to give two talks on a
topic of such pedantic detail that it warms his heart as a Systems
Administrator. Having spent the better part of a year exploring the
way time is distributed across large computer networks, now with the
passing of both a leap second and an arbitrary sequence of digits on
the UNIX clock it seems well past due that we talk about Linux and
time at SLUG.


** General Talk **
Jamie Wilkinson: 'A Brief History of (UNIX) Time'

In this general talk he'll talk about how we got the timescales we
have now; the difference between GMT, UTC, UT1, and TAI; why
leapseconds affect your computer; why 1234567890 is boring, and lots
of other random trivia about clocks.


** In-Depth Talk **
Jamie Wilkinson: 'Time Management for Systems Administrators'

We'll explore how the Network Time Protocol works, on the wire and
inside your computer, and how we can build tools to measure and
improve the accuracy of a time synchronisation network using NTP.


** SLUGlets **
General discussion and QA about Linux, free software and open source.


= Meeting Schedule =

See here[2] for an explanation of the segments.

 * 18.15: Open Doors
 * 18.30: Announcements, News, Introductions
 * 18.45: General Talk
 * 19.30: Intermission
 * 19.45: Split into two groups for:
   o In-Depth Talk
   o SLUGlets
 * 20.30: Dinner

Dinner is at Golden Harbour Restaurant, in Chinatown. We will be having
the $24 Banquet[3], but we will be collecting $25 per head for ease of
accounting and to cover a tip. We will be taking numbers during the
break to confirm the reservation size. If you have any particular
dietary requirements (e.g. vegetarian), or if you would prefer to order
separately, let us know beforehand. Dinner is a great way to socialise
and learn in a relaxed atmosphere :)

We hope to see you there!


[0] http://www.atlassian.com
[1] http://tinyurl.com/35fxes
[2] http://www.slug.org.au/meetings/meetingformat
[3] http://www.goldenharbour.com.au/specials.html



-- 
Bring choice back to your computer.
http://www.linux.org.au/linux
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Martin Visser
Kyle, a few things.

Firstly you talk about 15Kbps. In my mind this reads as 15 thousand bits
per second. This is slower than dialup speeds. (A little b is always bits
*not* bytes, which is B in communication speek). Even if you meant 15 000
bytes per second (which equate to 150 000 is slow). So I am not sure what
you really mean here.

Secondly as you seem to have different experience with different
applications there is some value in splitting up your testing. The first
thing I would do is make sure you are good getting good throughput (goodput)
up and down. Your ISP probably has a webserver that will network-wise be
close to you (not on the big-bad internet). You want to do a download from
there. For instance Internode has a number of files on their mirror (which
will be unmetered) specifically for this purpose -
http://mirror.internode.on.net/pub/test/10meg.test. Your ISP may have
something similar ( I know iiNet does) or even other largeish files like
windows security updates that available there for easy update. To test
upload speed, your ISP might have provided you with limited personal web
space. You get one of those large files and then try uploading it. Firefox
reports goodput, but you could also use something like wget. If something
seems wrong, you can do a packet capture with wireshark you can get an idea
of things like retransmissions, fragmenting and the like.

Finally, even with good throughput you may have other application issues.
For instance if you app needs to do a DNS look or go elsewhere to verify
some credentials before the transfer you can have problems. For instance
sshd in its default configuration often causes issues for users because it
wants to do a reverse DNS lookup on the address of the connecting client. If
your primary DNS can't give that answer (because it is a private
unregistered address) then it can take some time to traverse multiple DNS
servers before eventually giving up. Similar if your traffic is protected by
SSL/TLS and the certificate presented has CRL (certificate revocation list)
specified and for some reason it can't access the CRL server it could take
15 seconds or more to time out. To determine if such issues exist you can
examine logs for the applications, (which often report that such timeouts,
or use wireshark again to infer from the request/response sequence as to
whether your app is getting the right answers in a timely manner or not.

I'm not saying you have either of this issues, but it is important to try
and separate out the layers - the lower ones (physical through transport)
would be covered by the first tests, and then more detailed log/protocol
examination would let you see any application layer issues.

Regards, Martin

martinvisse...@gmail.com


On Sat, Feb 21, 2009 at 10:44 AM, Chris chris.zhang@gmail.com wrote:

 Sorry I meant authentication and account information backend. If they are
 stored in a remote ldap server and the traffic is slow to that server, in my
 experience it can cause clients to get bad responses. Also can you take off
 SSL and see if it is faster?

 Perhaps check syslog for errors on the IMAP server. And supply your private
 key to wireshark to see the plain traffic.


 On 21/02/2009, at 9:59 AM, Kyle k...@attitia.com wrote:

  Not sure I understand you there James.

 I telnet-ed in to test Peter's theories below. But for good measure, I
 just tried with openssl as a command too and that responds immediately.

 I just don't get it. One host behind the server/router is a MAC on OSX
 with 4GB, another WinXP with 2GB. The WinXP host is by far the worst. But
 irrespective the MAC is not exactly blindingly quick either. (Both wired
 connections)

 
 Kind Regards

 Kyle



 James Polley wrote:

 you can use openssl s_client in place of telnet to connect -

 http://www.jaharmi.com/2007/09/26/using_openssl_securely_connect_your_imap_account
 has a guide.

 But for good measure Telnetted (and
 Wiresharked) over both my SSL IMAP port and 25. Both responses come back
 PDQ. And Wireshark shows traffic moving from one host to the other and
 return. I'm pretty confident of my iptables setup as I have refined that
 over a period of years.



 pe...@chubb.wattle.id.au wrote:

 So, connexions to the  (imap? smtp?) mail server time out.  Can you run
 wireshark on the server, and see what's happening?  Does the server
 have a correct route to the clients?

 If it's smtp, then try telnet from a client to the server (telnet
 192.168.1.1 25) on the inside of the firewall, while watching top on
 the firewall.  What does the load look like?  Does the telnet session
 time out?  During which part of the connexion?

  --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: 

Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Kyle
Lots of help coming in here, for which I am eternally grateful. Thank 
you all.


Chris,

Yeah, nope. I've scoured the maillog and there's no errors there.

IMAP Backend is local file based.

The conversation seems to have migrated to the mail server, but its not 
just that. As mentioned HTTP calls through the box take their time 
coming up too.


Martin,

thanks the detailed response.

Yes, James Polley pulled me on that earlier too. Sorry. A case of 
mis-capitalisation (or dropped zeroes). I can never remember which is 
which there. The modem is reporting a 15559Kbps/1219Kbps Down/Up 
connection and I'm not more than 1Km from the exchange (So I suspect 
Netcomm have it wrong too, because I read that as 15 Megabytes per 
second). As mentioned Noise Margin: ~9dB, Attentuation: ~26dB. Modem 
connects over PPPoA and I have set MTU to 1492 all the way through the 
chain (LAN hosts, Linux eth1, eth0, Modem LAN, WAN).


I am with internode and the 10Meg test you offered lands literally in a 
blip.


Keeping it simple with HTTP (using Firefox),  a site like smh.com.au 
(where I visit daily, so if there's any local caching going on, it's 
cached and I reckon internode would likely be caching smh.com.au) takes 
a minimum 11 secs to load and regularly 20+ secs.  This is from behind 
the linux box. However, if I attempt to load smh.com.au from the linux 
box, it loads in 3secs flat. I don't have squid or any proxying server 
running myself - at least not that I have personally configured.


Same token; Firefox on linux to load www.telegraaf.nl (a miscellaneous 
EU website) 13.7secs. Firefox on an OSX MAC (4GB RAM) behind the linux 
box (with only switch in between) 27+ secs before it got anywhere near 99%.


It just seems the Linux box is the bottleneck. Especially when if I 
_first try to connect either with HTTP _or_ IMAP, I get timeouts. It's 
like the box takes time to wake up from something.


Just to recap.  The machine is all-in-one;

Postfix/Dovecot/Spamassasin/Amavisd/Clamav mail server.
DHCP, DNS server
LAN Router
Firewall

By all accounts memory seems to be working as it should and is not 
overloaded.

CPU Load rarely goes above 30-40%
DHCP licences work and zones are updated with no errors
DNS calls from cli return almost instantaneously. nslookup some domain 
in the EU which I happen to know exists and the server instance of 
'named' comes back almost instantaneously with a response.
I can ping servers I know are located in the EU and get avg. 340ms 
responses.

Relevant iptables rules look like;

# IMAP(S)
-A chain-IN -p tcp -m tcp --dport 993 -m state --state NEW -j ACCEPT

# HTTP(S)
-A chain-IN -m tcp -p tcp --dport 80 -m state --state NEW -j ACCEPT
-A chain-IN -m tcp -p tcp --dport 443 -m state --state NEW -j ACCEPT


The more I read from you good folk, the more inclined I am to believe I 
have indeed done the right thing with the linux box and it may not be 
the linux routing processes itself. But I've only the one Linksys SD-208 
switch between linux and the rest of the network and all reviews I've 
read about the linksys are good. It's run well for a number of years now.




Kind Regards

Kyle

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Michael Chesterton


On 21/02/2009, at 3:04 PM, Kyle wrote:

Keeping it simple with HTTP (using Firefox),  a site like smh.com.au  
(where I visit daily, so if there's any local caching going on, it's  
cached and I reckon internode would likely be caching smh.com.au)  
takes a minimum 11 secs to load and regularly 20+ secs.  This is  
from behind the linux box. However, if I attempt to load smh.com.au  
from the linux box, it loads in 3secs flat. I don't have squid or  
any proxying server running myself - at least not that I have  
personally configured.


Does it sit there for 11 seconds, then load all of a sudden, or does  
it start loading right from

the start?

I'm wondering if firefox is doing IPv6 lookups and failing. If you  
want to test, disable IPv6 in firefox (about:config) or use the same  
nameservers as the linux router


--

http://chesterton.id.au/blog/
http://barrang.com.au/


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Mythbuntu box shutting down at random

2009-02-20 Thread Rev Simon Rumble
This one time, at band camp, elliott-brennan wrote:

 I checked the box when it keeled over while my
 wife was watching the telly and it was rather hot.
 It could be the box is not pushed far enough back
 in the TV cabinet (big mother which holds
 everything) so the air may not have been able to
 move around properly regardless of the fans. I've
 moved it right to the back (I had already cut a
 hole out of the rear of the cabinet to allow the
 box to vent properly - wife was not amused).

Install the lm-sensors and sensord package.  Then (as root) run 
sensors-detect.  It'll test for available temperature sensors on your 
machine and set up the appropriate lines in /etc/modules.conf to load 
the right modules (first time you'll need to modprobe them yourself).

Then type sensors to see all the output.  For example, here's part of my 
output:
adm1023-i2c-2-18
Adapter: SMBus I801 adapter at dcd0
Board Temp:  +37.0°C  (low  = -128.0°C, high = +127.0°C)  
CPU Temp:+41.0°C  (low  = -128.0°C, high = +105.0°C)  

Fiddle around with /etc/sensors3.conf to set maximum temperatures, and 
actions when the maximums are exceeded (like, get it to send you an 
email?).

-- 
Rev Simon Rumble si...@rumble.net
www.rumble.net

The Tourist Engineer
Because geeks travel too.
http://engineer.openguides.org/

 Famous remarks are very seldom quoted correctly.
- Simeon Strunsky
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Need a lesson in routing [WAS: memory]

2009-02-20 Thread Kyle

... OK!!!

That is indeed what it does Michael, when it doesn't timeout. I had 
previously read up on F'Fox and turned on the various turbocharging 
options, but hadn't thought of ipv6.


So I changed network.dns.disableIPv6 to true on the hosts behind the 
switch and Wow! That's a bit more like what I might expect.


ipv6 has always been a bit of a black box I've tried to avoid as long as 
possible. Guess I need to start reading up on it.  Or disabling it!


Allow me here to thank each and every one of you that have put up with 
my ignorance to assist in debugging this issue.


I'm not convinced that's all there is to it just yet. For instance, the 
Linux box is still an order of magnitude faster to load a page, 
network.dns.disableIPv6 is true by default in T'Bird on the hosts which 
still timeout on initial connection and all hosts are only using the 
linux box itself as name server.


But where we are now will go a long way to dispersing aggravation in the 
local browsing community.


Thanks again.

ipv6 . mumble, groan, must read . pain in th. mumble, groan, 
ipv6



Kind Regards

Kyle



Michael Chesterton wrote:



Does it sit there for 11 seconds, then load all of a sudden, or does it 
start loading right from

the start?

I'm wondering if firefox is doing IPv6 lookups and failing. If you want 
to test, disable IPv6 in firefox (about:config) or use the same 
nameservers as the linux router



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html