Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-09 Thread Marco Prause
On 08.04.19 06:25, David Gwynne wrote: > OK. I made a start on this. Have a look for "sfp module info and diagnostics" > on tech@, or click on https://marc.info/?l=openbsd-tech&m=155469738013008&w=2 > > We don't have an em(4) here with optics, but a diff doesn't look too bad if > you're willing

Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-04 Thread Marco Prause
On 05.04.19 02:54, David Gwynne wrote: > you have em(4) with sfp? yepp, e.g. in the following appliances : http://www.lannerinc.com/network-appliances/x86-rackmount-network-appliances/?option=com_content&view=article&id=1683:nca-4210&catid=25:rackmount There are 2 SFP slots onboard and we are

Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-04 Thread Marco Prause
I second that +1 for ix, but em would also be nice ;-) On 03.04.19 00:40, Tom Smyth wrote: > +1 for me also :) ix :) > > On Tue, 2 Apr 2019 at 23:38, Stuart Henderson wrote: > >> :-) >>

Re: Are there open source firewall distributions which are built on top of OpenBSD?

2019-03-14 Thread Marco Prause
>> A standard OpenBSD installation is somewhat susceptible to power failures >> though. Especially fail/back/fail again during the startup procedure while >> it's relinking libraries in random order. Not saying it can't be used but >> some thought is needed if you know that it's *likely* to be po

Re: OpenBSD 6.4-stable + current "freezes" after 4h [not]

2019-01-15 Thread Marco Prause
Re, On 14.01.19 18:40, Theo de Raadt wrote: > We accept reasonable bug reports from systems with a few changes. You do NOT > have > a few changes, you have a huge pile of them, and therefore you are > 'responsible > for all the pieces'. ... > Almost assuredly you are being burned by your own ch

Re: OpenBSD 6.4-stable + current "freezes" after 4h

2019-01-14 Thread Marco Prause
Am 14. Januar 2019 16:40:48 MEZ schrieb Theo de Raadt : >It sure looks like you have a pile of your own changes which are highly >unconventional, >and you are very far away from a stock OpenBSD configuration. Well, that's right so far, because I have decided to use the tool resflash to create

Re: OpenBSD 6.4-stable + current "freezes" after 4h

2019-01-14 Thread Marco Prause
Just a small follow-up to my previous email: I've just had a look at the hardware, that causes the problem before I've exchanged it with the new one, that now also produce the problem. This server seems to have the same hardware-setup then the server1, I mentioned the email before, which is not f

Re: OpenBSD 6.4-stable + current "freezes" after 4h

2019-01-14 Thread Marco Prause
Hi Stuart, thanks for having a look at this. > Is it the same or different hardware type and BIOS version for the > working and hanging machines? (maybe diff the two dmesgs) > > Same or different filesystem mount options? (Are you using softdep?) it's (nearly) the same hardware. But thanks to

OpenBSD 6.4-stable + current "freezes" after 4h

2019-01-14 Thread Marco Prause
Hi all @misc, 1st things 1st : sorry for my long description, but : after upgrading from 6.3-stable to 6.4-stable (and later also current) in our integration stage, I've met a strange problem. I run OpenBSD in a hub-and-spoke vpn architecture in round about 14 distributed datacenters. 6.3-stabl

Re: Connecting two bridges for tagged + untagged traffic

2017-05-30 Thread Marco Prause
Re, just for the records and to stop anyone wasting time into this issue: It looks like it's woking now, when I use pair-interfaces to connect the two bridges and use one pair as parent-interface for a new vlan-interface with the same vlan-id. ---cut--- # ifconfig bridge bridge0: flags=41

Connecting two bridges for tagged + untagged traffic

2017-05-30 Thread Marco Prause
Hi, I've got a question concerning the usage of tagged and untagged traffic with two bridges. Maybe there's a better way to reach that goal, but I need to connect e.g. switches to my OpenBSD server over a so called trunk-port (all traffic should be tagged witch vlan-id 123 for example) This work

Re: No free discspace after deleting files

2016-09-27 Thread Marco Prause
Re, well as mentioned fstat didn't show any open filehandles or inodes, but fsck was a bit more chatty : # fsck /dev/sd0a ** /dev/rsd0a (NO WRITE) ** Last Mounted on /flash ** Phase 1 - Check Blocks and Sizes ** Phase 2 - Check Pathnames ** Phase 3 - Check Connectivity ** Phase 4 - Check Refere

Re: No free discspace after deleting files

2016-09-27 Thread Marco Prause
No, there are no links and process that have the files opened. Or better : I do not see any with fstat. Maybe there's any other programs for this purpose I do not know at the moment ? Am 27. September 2016 08:29:06 MESZ, schrieb Raul Miller : Do any processes have those files open? Did you

No free discspace after deleting files

2016-09-26 Thread Marco Prause
Hi all, I met an interesting problem while deleting files that makes me curious. After deleting two files for preparing an update in a flashrd-setup (openbsd.vnd + bsd) I would have expected the ~1,2 GB beeing freed. The files are gone - so far so good, but the disc space is not free. I know th

Re: Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-08-12 Thread Marco Prause
Hi, I just wanted to keep you in loop concerning my "8 Port Module" problem. To make a long story short: One jumper on the motherboard did fix the issue \o/ I've just changed : two x8 signals into one x8, two x4 signals with the PCIe slot and tadaa all interfaces are present. So, sor

Re: Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-07-25 Thread Marco Prause
6 um 22:20 schrieb Chris Cappuccio: >> Marco Prause [marco-obsdm...@prause.eu] wrote: >> >>> em1: flags=18802 mtu 1500 >>> lladdr 00:90:0b:4b:54:0f >>> priority: 0 >>> media: Ethernet autoselect (none) >>> status: no car

Re: Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-07-25 Thread Marco Prause
Concerning my chipset problem, I'm compiling current at the moment, because the msi-x feature sounds very promising in this case. Cheers, Marco Am 24.07.2016 um 22:20 schrieb Chris Cappuccio: > Marco Prause [marco-obsdm...@prause.eu] wrote: > >> em1: flags=18802 mtu 1500 >

Re: Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-07-22 Thread Marco Prause
Re, > So, I've just adjusted my build scripts and jenkins-job and hit the > build button a few minutes ago to build a 5.9 stable image (yes it's not > current, but I didn't see any changes in plus.html concerning em > interfaces or pci stuff, but this will be the next step. just as a short actua

Re: Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-07-20 Thread Marco Prause
Hi Nick, Am 20.07.2016 um 14:08 schrieb Nick Holland: > On 07/20/16 05:17, Marco Prause wrote: >> Hi @Misc, >> >> I am quite happy to test a 8 Port interface-Card in a 1U Appliance. >> >> Unfortunately at the moment I just see 4 of the 8 interfaces - did >&g

Network Interface "Intel I350 Fiber" 8 Port Module shows only 4 Ports

2016-07-20 Thread Marco Prause
Hi @Misc, I am quite happy to test a 8 Port interface-Card in a 1U Appliance. Unfortunately at the moment I just see 4 of the 8 interfaces - did anybody already have some experience with this NICs and this behavior ? The spec lists the chipset as : 8 GbE SFP Fiber 2 x Intel I350-AM4 A

Re: OpenBGPD traps and triggers

2016-06-30 Thread Marco Prause
Hi Bill, I don't know, if you saw some lines in the logfile concerning this. But if you did, maybe youn can use logfmon or something like this for alerting ? Marco Am 30. Juni 2016 20:30:25 MESZ, schrieb Bill Buhler : >Hi, > > > >I've been through the man pages a couple of times and am not see

Re: 1U / 2 Computers? For redundant FW pair

2015-01-22 Thread Marco Prause
ithout any testing on UDP or different datagram payloads and so forth. All on OpenBSD flashrd 5.5 build on stable (2014-04-05). Regards, Marco Am 21.01.2015 um 18:01 schrieb Christian Weisgerber: > On 2015-01-21, Marco Prause wrote: > >> Also when using ipsec in this test-setup,

Re: 1U / 2 Computers? For redundant FW pair

2015-01-21 Thread Marco Prause
Hi Alan, some time ago I've had a look at them. Supermicro still seem to have 1U Twin-Server in their List. Unfortunately I can't say anything about running them - they are still on my "wishlist". On the other hand - does anybody know alternatives ? Just in case of not ending up in some kind of

Re: DNSSEC-query with DO-bit through libc ?

2015-01-07 Thread Marco Prause
Happy new year everyone, Am 16.09.2014 um 00:55 schrieb Stuart Henderson: > On 2014-09-15, Marco Prause wrote: >> Looking at lib/libc/net/res_query.c > > Try libc/asr/res_query.c .. > thanks again, Stuart, for this hint. Just a short follow-up to this thread : I've re

Re: unbound

2014-09-19 Thread Marco Prause
Am 19.09.2014 um 12:28 schrieb Krzysztof Strzeszewski: ... > I want add my global domain in my serwer dns unbound... How to do? I > don't add local domain: > > local-data: "example.com 10800 IN A local_IP" > > but I want add mu global domain end record A for public_IP in global > network. > > I

Re: DNSSEC-query with DO-bit through libc ?

2014-09-16 Thread Marco Prause
Am 16.09.2014 um 00:55 schrieb Stuart Henderson: > On 2014-09-15, Marco Prause wrote: >> Looking at lib/libc/net/res_query.c > > Try libc/asr/res_query.c .. Thanks for the hint - I'd have a look at, but sadly it doesn't help me understanding, what's going on.

Re: [Bulk] DNSSEC-query with DO-bit through libc ?

2014-09-15 Thread Marco Prause
Am 15.09.2014 um 15:58 schrieb Kevin Chadwick: > On Mon, 15 Sep 2014 12:59:46 +0200 > Marco Prause wrote: > >> Does anyone already met some familiar issue and maybe have some >> workarounds ? Or can anyone verify / falsify my libc-theory ? > > I'd look into whethe

DNSSEC-query with DO-bit through libc ?

2014-09-15 Thread Marco Prause
Hi, while playing around with DANE-enabled postfix, I've been running in some problems (maybe) concerning with postfix's usage of libc / res_query.c At the moment it seems to me, libc (or something around) is cutting off the necessary DO-Bit in the dns-queries. While asking the local dnssec-awar