Re: Report:snortsnarf 3.4

2015-07-31 Thread tuyosi
Hi all . i look at http://centossrv.com/snort.shtml pkg_add p5-Time-modules-2006.0814p0 download SnortSnarf-1.0.tar.gz and tar xvzf SnortSnarf-1.0.tar.gz no need make or so , simply ./snortsnarf.pl . but two errors appear . correct them by comment # . at last shell script

Re: doas.conf: omitting [as root] allows me to run a command as everybody? [resolved]

2015-07-31 Thread Hikari Boulders
On 07/28/2015 09:35 AM, Theo Buehler wrote: On Mon, Jul 27, 2015 at 10:44:00PM +0200, Alexander Hall wrote: On July 27, 2015 3:22:13 PM GMT+02:00, Theo Buehler t...@math.ethz.ch wrote: On Mon, Jul 27, 2015 at 03:13:55PM +0200, Marc Espie wrote: On Mon, Jul 27, 2015 at 02:40:53PM +0200, Theo

Re: Intel Atom?

2015-07-31 Thread Quartz
Off-the-shelf yes, home no, it's just a specialized setup with some odd requirements. We're fine with paying for good quality components but there's no need to overpay for something that offers a bunch of stuff we don't need, especially when we're going to be building several of these. I'm just

Intel C61X / C22X Chipset Support

2015-07-31 Thread Joe Crivello
Does anyone have any experience with running OpenBSD on the Intel C61X or C22X series chipsets? These chipsets are used frequently by Super Micro in their newer line of very common and (relatively) affordable rack mountable servers. In particular I am also curious if the SATA ports would be

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Giancarlo Razzolini
Em 31-07-2015 03:07, Peter Hessler escreveu: this is a real problem for real people. Which was pretty much solved with PKP [0]. As I mentioned, custom CA's have their uses, but in the end, they are just one more thing waiting to bite you in the ass. You can pretend to have a decent OPSEC for a

Re: rdomain with BGP dynamic route

2015-07-31 Thread XU, YANG (YANG)
Adam, That's good suggestion, thanks and I will give it a try. I plan to use OpenBSD as a PE from a service provider point of view, I guess that's not a popular use case. Regards, -Yang -Original Message- From: Adam Thompson [mailto:athom...@athompso.net] Sent: Thursday, July 30,

Re: Intel Atom?

2015-07-31 Thread Mihai Popescu
What's your useful idea to bring to other readers? Since the thread is already broken and dead, I would like to ask who the hell are you lists-wrant-com user? I use to read the threads on marc and most of them (maybe all) are interrupted by emails from this address. The answers are meaningless,

bsd.rd path

2015-07-31 Thread Zoran Kolic
Updated to lattest shapshot from yesterday. The path pointed to 5.8 directory, which did not exist. I changed it to correct one, pub/OpenBSD/snapshots/amd64 and installed just fine. I need more time to see what makes me think that graphics acts a bit different on this snapshot. Best regards all

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Juan Francisco Cantero Hurtado
On Fri, Jul 31, 2015 at 03:52:32PM +0500, Артур Истомин wrote: On Fri, Jul 31, 2015 at 10:51:38AM +0200, Juan Francisco Cantero Hurtado wrote: On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: Is it supported? I mean exactly USB-N10 NANO, not USB-N10 Yes.

Re: rdomain with BGP dynamic route

2015-07-31 Thread Adam Thompson
Then you should have been at BSDCan last month! Olivier Cochard-Labbé of Orange(?) is deploying something like this but using FreeBSD (http://www.bsdcan.org/2015/schedule/events/555.en.html), and Peter Hessler talked at length about rdomains in OpenBSD

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Christian Weisgerber
On 2015-07-31, Joe Crivello josephcrive...@gmail.com wrote: Does anyone have any experience with running OpenBSD on the Intel C61X or C22X series chipsets? My main amd64 box at home is a Dell PowerEdge T20 with a C226 chipset. In particular I am also curious if the SATA ports would be

Re: bsd.rd path

2015-07-31 Thread Raf Czlonka
On Fri, Jul 31, 2015 at 05:14:15PM BST, Zoran Kolic wrote: Updated to lattest shapshot from yesterday. The path pointed to 5.8 directory, which did not exist. I changed it to correct one, pub/OpenBSD/snapshots/amd64 and installed just fine. I need more time to see what makes me think that

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Joe Crivello
Awesome! Thanks so much. So C22X gets detected as an Intel 8 series chipset then (which makes sense). We are initially thinking about using a couple of Super Micro 5018D-MR servers with Intel X520 cards as routers, so the lack of onboard Ethernet support is not a problem for us. That said, if

dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread Aaron Poffenberger
OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar 8 11:04:17 MDT 2015 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 17121136640 (16327MB) avail mem = 16661458944 (15889MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev.

Re: Intel Atom?

2015-07-31 Thread lists
looking forward to your dmesg then

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread Stuart Henderson
On 2015-07-31, Aaron Poffenberger a...@hypernote.com wrote: bios0: Supermicro X10SLM+-LN4F this might be interesting for some misc readers, but don't forget to send it to dmesg@ as well.

Show us your /etc/profile

2015-07-31 Thread listas-it
Hello everybody How do you customize your environment? What aliases or custom functions do you use? Here's my /etc/profile I think you can find one or two interesting things in it. Show us yours! (in case wordwrapping breaks long lines: http://pastie.org/10322761)

Re: rdomain with BGP dynamic route

2015-07-31 Thread XU, YANG (YANG)
The presentations were impressive, I wish I knew earlier and went there. Thanks again, -Yang -Original Message- From: Adam Thompson [mailto:athom...@athompso.net] Sent: Friday, July 31, 2015 2:09 PM To: XU, YANG (YANG) y...@research.att.com Cc: misc@openbsd.org Subject: Re: rdomain

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
one more thing waiting to bite you in the ass Correct, and resource wasteful maintainership is not that valuable to end users who stumble in their feet anyway. If trying to solve it, please show a solution that is not burning developer time, as it will get abandoned soon or later, there is no

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread lists
bios0: Supermicro X10SLM+-LN4F this might be interesting for some misc readers, but don't forget to send it to dmesg@ as well. This is interesting indeed. Can you please try a recent snapshot and dmesg too? Thank you.

Re: Show us your /etc/profile

2015-07-31 Thread lists
Hello everybody Hello, anonymous. How do you customize your environment? Reading man pages mostly, and teraforming using (brain) farts. What aliases or custom functions do you use? On the blog over 15 pages across several years, just kidding. Here's my /etc/profile I think you can find

Re: bsd.rd path

2015-07-31 Thread lists
Updated to lattest shapshot from yesterday. The path pointed to 5.8 directory, which did not exist. I changed it to correct one, pub/OpenBSD/snapshots/amd64 and installed just fine. https://marc.info/?m=142554965809503 Can be dealt with by PXE boot, by providing this in the

Re: dmesg: Intel Xeon E3-1246 - SuperMicro X10SLM+-LN4F with LSI SAS9211-8i

2015-07-31 Thread lists
bios0: Supermicro X10SLM+-LN4F this might be interesting for some misc readers, but don't forget to send it to dmesg@ as well. Can you please try a recent snapshot and dmesg too? Maker: http://www.supermicro.com/products/motherboard/Xeon/C220/X10SLM_-LN4F.cfm Related:

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Peter Hessler
this is a real problem for real people. On 2015 Jul 31 (Fri) at 02:33:00 +0300 (+0300), li...@wrant.com wrote: :Congrats to raising another time wasting topic for a public commentary. : -- Love thy neighbor as thyself, but choose your neighborhood. -- Louise Beal

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
everyone on the carousel? why not rework the trust model.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
this is a real problem for real people. so, expecting a real solution, uhm yes, it's a potion of soluble metal.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Sebastien Marie
On Thu, Jul 30, 2015 at 09:17:23PM +, Stuart Henderson wrote: Some software allows you to set a different certificate file; other software doesn't. Patching everything in ports that verifies SSL certs to allow the user to specify an alternative file would just be insane. And of course

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Benny Lofgren
On 2015-07-30 23:17, Stuart Henderson wrote: On 2015-07-30, Vadim Zhukov persg...@gmail.com wrote: 2015-07-30 20:16 GMT+03:00 Stuart Henderson s...@spacehopper.org: cert.pem is pretty much a required file, we can't just move it to examples/. For people who don't touch it, it's a simple

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Peter N. M. Hansteen
On Fri, Jul 31, 2015 at 05:02:47AM +0500, ?? ?? wrote: Is it supported? I mean exactly USB-N10 NANO, not USB-N10 I don't know specifically, but I've found from picking up pretty much at random cheapo 80211n USB warts (as in, inserted they're barely visible at all), a

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Joel Rees
2015/07/31 15:33 li...@wrant.com: everyone on the carousel? why not rework the trust model. Okay, I'll play. What threat models do we want to address uhm, at the library level?

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Артур Истомин
On Fri, Jul 31, 2015 at 10:51:38AM +0200, Juan Francisco Cantero Hurtado wrote: On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: Is it supported? I mean exactly USB-N10 NANO, not USB-N10 Yes. https://wikidevi.com/wiki/ASUS_USB-N10_Nano

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Bill Buhler
If you are doing it right your CA private key is on a different machine without network connectivity. -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Giancarlo Razzolini Sent: Friday, July 31, 2015 9:34 AM To: Peter Hessler; li...@wrant.com Cc:

Re: newfs_ext2fs vs e2fsprogs package mke2fs

2015-07-31 Thread Alexander Hall
On 07/30/15 16:42, Joel Rees wrote: Which is preferred, newfs_ext2fs or mke2fs from the e2fsprogs package? I'd certainly go for what's in base unless there is some functionality missing from it. If there are bugs we want to know about them. /Alexander Joel Rees Computer memory is just

Re: Intel C61X / C22X Chipset Support

2015-07-31 Thread Hrvoje Popovski
On 31.7.2015. 19:42, Joe Crivello wrote: Awesome! Thanks so much. So C22X gets detected as an Intel 8 series chipset then (which makes sense). We are initially thinking about using a couple of Super Micro 5018D-MR servers with Intel X520 cards as routers, so the lack of onboard Ethernet

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Stuart Henderson
On 2015-07-31, Benny Lofgren bl-li...@lofgren.biz wrote: So I borrowed an idea from how the Courier MTA/IMAP/POP3 server manages some of its configuration files: The system could check whether /etc/ssl/cert.pem (or whatever path any particular application provides) is a regular file, in which

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Stuart Henderson
On 2015-07-30, Vadim Zhukov persg...@gmail.com wrote: Well, I see four scenarios: 1. Using the defaults supplied with OpenBSD only. Typical for home/personal use. 2. Use the defaults supplied with OpenBSD, and one or more additional CAs. Typical for corporate use. 3. Use personal set of

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread lists
Sorry for wasting yout time. there is still stutter on disk activity on mp amd64 which is mostly in media players depending on gtk libs, it is embarrassing to say the least.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
What threat models do we want to address The one addressing your maintenance of the certification infrastructure.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
We have directories like this (but without removing locally-added files). Finally some body addressed file management, meaning a template system or formalisation is about to be forming. The single-file approach at least makes things simple for the majority who don't edit the file though, and

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Alexandre Ratchov
On Fri, Jul 31, 2015 at 03:05:40AM +0200, Alexander Shendi wrote: Hi, after rebooting the GENERIC.MP kernel supplied with the 5.8 snapshot I had been using previously everything works fine. I don't actually know why -- I'll assume it was a hardware glitch. Sorry for wasting yout time.

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread lists
Perhaps cert.pem should just move to examples/ with no default in /etc/ssl. No. (I know you're ironic.)

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Juan Francisco Cantero Hurtado
On Fri, Jul 31, 2015 at 05:02:47AM +0500, Артур Истомин wrote: Is it supported? I mean exactly USB-N10 NANO, not USB-N10 Yes. https://wikidevi.com/wiki/ASUS_USB-N10_Nano http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/urtwn.4 -- Juan Francisco Cantero Hurtado http://juanfra.info

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Alexandre Ratchov
On Fri, Jul 31, 2015 at 11:53:31AM +0300, li...@wrant.com wrote: Sorry for wasting yout time. there is still stutter on disk activity on mp amd64 which is mostly in media players depending on gtk libs, it is embarrassing to say the least. You mean that audio on a mostly idle box, with

Re: Audio problems with OpenBSD-current/amd64 on Acer C720p Chromebook

2015-07-31 Thread Gregor Best
On Fri, Jul 31, 2015 at 11:53:31AM +0300, li...@wrant.com wrote: [...] there is still stutter on disk activity on mp amd64 which is mostly in media players depending on gtk libs, it is embarrassing to say the least. [...] I've seen something similar when my cvsync cronjob kicks in. I can