Re: pfctl problem with osfp parser

2023-05-25 Thread Alexandr Nedvedicky
Hello, On Thu, May 25, 2023 at 08:12:38PM +0300, wrote: > Thank you for looking, then another question: will you develop this > functional, or it will stay as is? I need to get familiar with fingerprints first. As Stuart said it's not just being used by pf but also

Re: Sparc64 livelock/system freeze w/cpu traces

2023-05-25 Thread Kurt Miller
On May 22, 2023, at 2:27 AM, Claudio Jeker wrote: > I have seen these WITNESS warnings on other systems as well. I doubt this > is the problem. IIRC this warning is because sys_mount() is doing it wrong > but it is not really an issue since sys_mount is not called often. Yup. I see that now that

Re: pfctl problem with osfp parser

2023-05-25 Thread Иван Иванов
Thank you for looking, then another question: will you develop this functional, or it will stay as is? чт, 25 мая 2023 г. в 18:54, Stuart Henderson : > On 2023/05/25 17:40, Alexandr Nedvedicky wrote: > > Hello, > > > > I took a look at signatures: > > >

Re: pfctl problem with osfp parser

2023-05-25 Thread Stuart Henderson
On 2023/05/25 17:40, Alexandr Nedvedicky wrote: > Hello, > > I took a look at signatures: > > https://tools.netsa.cert.org/p0f/p0f.fp.2012032901 signatures file (pf.os), > > This change is not about updating parser it looks like it will > also require to update matching stuff in kernel. I have

Re: pfctl problem with osfp parser

2023-05-25 Thread Alexandr Nedvedicky
Hello, I took a look at signatures: > https://tools.netsa.cert.org/p0f/p0f.fp.2012032901 signatures file (pf.os), This change is not about updating parser it looks like it will also require to update matching stuff in kernel. I have not looked at all details yet. below is fingerprint entry

Re: "No O/S" after installing on old ALIX

2023-05-25 Thread Paul de Weerd
Hi all, Just to close the loop on this issue for other people running into this issue in the future. With many thanks to Ken Westerback (krw@), this was found to be a small issue in how fdisk wrote the partition entry in the MBR. So these entries are stored in two formats, CHS (pre-historic)