Re: Missing vlan interfaces in OPENBSD-PF-MIB::pfIfTable

imit? > - Does the bug also show up on another machine? > > martijn@ > > On Wed, 2025-01-15 at 09:58 +0100, Marc Boisis wrote: >> Hello, >> >> Yesterday updated my router to 7.6 and the 64 interfaces limit reappeared. >> I downloaded the 7.6 sources , and the

Re: Missing vlan interfaces in OPENBSD-PF-MIB::pfIfTable

wrote: > > moving to tech@ > > On Tue, 2024-06-11 at 15:38 +0200, Marc Boisis wrote: >> Like Kapetanakis I have the 64 interface desc empty: >>> snmpget -v2c -c public 127.0.0.1 OPENBSD-PF-MIB::pfIfDescr.64 >> OPENBSD-PF-MIB::pfIfDescr.64 = STRING: >> >

Re: Log nat translation

On 8 Nov 2024, at 17:05, Stuart Henderson wrote: > > On 2024-11-07, Marc Boisis wrote: >> >> Hello, >> >> In openBSD 7.3 and before we used tcpdump on pfsync0 to log NAT translation >> . >> Since 7.4 , tcpdump only show "16:57:17.115752 PFSYNCv

Log nat translation

Hello, In openBSD 7.3 and before we used tcpdump on pfsync0 to log NAT translation . Since 7.4 , tcpdump only show "16:57:17.115752 PFSYNCv69 len 1488" Have you got a solution to log NAT translation since OpenBSD 7.4 ? Marc

Re: Pf congestion troubleshooting

Hi, thank you very much for your help, it was a NAS sending 4000pps of "arp who-as" to all of this clients. Marc > On 13 Sep 2024, at 12:16, Peter N. M. Hansteen wrote: > > Hi, > > As Tom mentioned, one of the least resource consuming ways to identify sources > and volumes of the traffic seen

Pf congestion troubleshooting

Hello, We are experiencing congestion issues with PF and I would like some help finding the cause. Here is what i have been able to gather so far: ROOT:host:/root > pfctl -sm stateshard limit 60 src-nodes hard limit6 frags hard limit12000 tableshar

Re: Missing vlan interfaces in OPENBSD-PF-MIB::pfIfTable

gt; wrote: > > On Tue, 2024-06-11 at 14:56 +0300, Kapetanakis Giannis wrote: >> On 10/06/2024 18:43, Marc Boisis wrote: >>> Hello, >>> >>> I've a 7.5 openBSD router, when I'm asking OPENBSD-PF-MIB I have only 64 >>> physicals and carp in

Missing vlan interfaces in OPENBSD-PF-MIB::pfIfTable

Hello, I've a 7.5 openBSD router, when I'm asking OPENBSD-PF-MIB I have only 64 physicals and carp interfaces but not my 45 vlan interfaces. My /etc/snmpd.conf ROOT:amdrg2:/root > cat /etc/snmpd.conf listen on 127.0.0.1 snmpv2c read-only community public "pfctl -sI" list all interfaces (carp

[Kea-users] ip-reservations-unique and lease conflict

Hello, In migration from ISC-dhcp to kea, we are using "ip-reservations-unique: false" according to deliver same ip to wifi or wired interface. When switching form wire to wifi, I'm unable to get an ip with this error: kea-dhcp4.log.1:2022-10-03 09:39:00.018 WARN [kea-dhcp4.alloc-engine/3724674

Re: [Kea-users] update-static-leases off

7;t bothered looking into if it > can be done. > > > Oscar > > Marc Boisis writes: > >> Hello, >> >> I'm migrating from ISC DHCP to KEA and I want not doing ddns update for >> static reservation, I made this with "update-static-leases off&

[Kea-users] update-static-leases off

Hello, I'm migrating from ISC DHCP to KEA and I want not doing ddns update for static reservation, I made this with "update-static-leases off". How can I configure this with kea ? Marc -- ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc

[ceph-users] native linux distribution host running ceph container ?

Hi, We have a containerised ceph cluster in version 16.2.4 (15 hosts, 180 osds) deployed with ceph-ansible. Our host run on centos 7 (kernel 3.10) with ceph-deamon docker image based on centos 8. I cannot find in the documentation which native distribution is recommended, should it be the same

[ceph-users] iscsi and iser

Hi, I would like to know if you support iser in gwcli like the traditional targetcli or if this is planned in a future version of ceph ? Thanks Marc ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@c

[ceph-users] Re: rbd map on octopus from luminous client

it works Thanks > On 17 Sep 2020, at 15:17, Ilya Dryomov wrote: > > On Thu, Sep 17, 2020 at 1:56 PM Marc Boisis <mailto:marc.boi...@univ-lr.fr>> wrote: >> >> >> Hi, >> >> I had to map a rbd from an ubuntu Trusty luminous client on an octop

[ceph-users] rbd map on octopus from luminous client

Hi, I had to map a rbd from an ubuntu Trusty luminous client on an octopus cluster. client dmesg : feature set mismatch, my 4a042a42 < server's 14a042a42, missing 1 I downgrade my osd tunable to bobtail but it still doesn't work ceph osd crush show-tunables { "choose_loca

[ceph-users] ceph-ansible replicated crush rule

Hello, With ceph-ansible the default replicated crush rule is : { "rule_id": 0, "rule_name": "replicated_rule", "ruleset": 0, "type": 1, "min_size": 1, "max_size": 10, "steps": [ { "op": "take", "item": -1,

[Kea-users] duplicate host reservation

Hi, With dhcpd  I had reservations for all mac adresses of my computer with the same IP (ex: wifi and ethernet) : host solunewifi { hardware ethernet 78:4f:43:7a:52:f1; fixed-address 10.1.11.61; } host solune { hardware ethernet 68:5b:35:8c:d1:fe; fixed-address 10.1.11.61; } It seems I can't do

Re: [rancid] DELL N1500

It works thanks On 18 Mar 2020 at 15:52 +0100, Bjørn Skobba , wrote: > On 18 Mar 2020, at 15:21, Marc Boisis wrote: > > > > Hi, > > I need to backup some Dell N1500 switch with rancid. > > I try with dnos9, dns10, dell type but I always have "End of run not f

[rancid] DELL N1500

Hi, I need to backup some Dell N1500 switch with rancid. I try with dnos9, dns10, dell type but I always have "End of run not found" does anyone have a solution ? ___ Rancid-discuss mailing list Rancid-discuss@www.shrubbery.net https://www.shrubbery.ne

Re: [Pdns-users] dns update across dnsdist

t subnet (8) Option Length: 8 Option Data: 00012a011e18 Family: IPv4 (1) Source Netmask: 32 Scope Netmask: 0 Client Subnet: 10.1.30.24 On 11 Feb 2020 at 11:33 +0100, Remi Gacogne via Pdns-users , wrote: > Hi Marc, > > On 2/10/20 10:42 PM, Marc Boisis via Pdns-users wrote: >

[Pdns-users] dns update across dnsdist

Hi, Here is my config: [isc-dhcp] dns update>[dnsdist--->pdns authoritative] the isc dhcp server(v4.4.2) send a dns update query with a tsig key(hmac-md5). (I see it with tcpdump/wireshark). When the authoritative get the request, it said : "UPDATE (9470) from 127.0.0.1 for my-domain.com:

[Pdns-users] lua function to forward query to another server

Hi, Is it possible to forward query to another server in LUA ? here is an example : function postresolve(dq) m = newDS() m:add({'toto.fr'}) if ( (m:check(dq.qname))) and (dq.rcode == pdns.NXDOMAIN) )) then print("forward to my other dns server") end return true; end __

Re: [Kea-users] Kea 1.6 Configuration Backend

, > > # Use MySQL hosts database backend to store reservations in a database. > "hosts-database": { > "type": "mysql", > "host": "__MYSQL_HOST__", > "name": "__MYSQL_DB__", > "user": &quo

[Kea-users] Kea 1.6 Configuration Backend

Where can I find where to put dhcp4 parameters in mysql configuration backend ? (which table ? values...). ___ Kea-users mailing list Kea-users@lists.isc.org https://lists.isc.org/mailman/listinfo/kea-users

[Pdns-users] recursor protobufServer error

I want to send all logs to a local tcp port. My recursor version is 4.1.12 In my recursor.conf lua-config-file=/opt/powerdns/rec/etc/recursor-conf.lua cat recursor-conf.lua protobufServer("127.0.0.1:4242", 2, 100, 1, 32, 128, false, true) This give the error: " Unable to load Lua script from '/

[ceph-users] performance exporting RBD over NFS

Hi, I want to export rbd over nfs in a 10Gb network. Server and Client are DELL R620 with 10Gb nics. rbd cache is disabled ont the server. NFS server write bandwith on his rbd is 1196MB/s NFS client write bandwith on the rbd export is only 233MB/s. NFS client write bandwith on a "local-server

[ceph-users] a big cluster or several small

Hi, Hello, Currently we have a 294 OSD (21 hosts/3 racks) cluster with RBD clients only, 1 single pool (size=3). We want to divide this cluster into several to minimize the risk in case of failure/crash. For example, a cluster for the mail, another for the file servers, a test cluster ... Do

Re: [ceph-users] Infernalis: best practices to start/stop

ing should work: > > systemctl start ceph-osd* > > On 26/11/15 12:46, Marc Boisis wrote: >> >> Hi, >> >> I want to know what are the best practices to start or stop all OSDs of a >> node with infernalis. >> Before with init, we used « /etc/init.d/c

[ceph-users] Infernalis: best practices to start/stop

Hi, I want to know what are the best practices to start or stop all OSDs of a node with infernalis. Before with init, we used « /etc/init.d/ceph start » now with systemd I have a script per osd : "systemctl start ceph-osd@171.service" Where is the global one ? Thanks in advance! __

Re: [ceph-users] problem with rbd map

v/rbd0 ROOT:bjorn:/root > > Le 12 mars 2015 à 13:42, Ilya Dryomov a écrit : > > On Thu, Mar 12, 2015 at 3:33 PM, Marc Boisis wrote: >> I’m trying to create my first ceph disk from a client named bjorn : >> >> [ceph@bjorn ~]$ rbd create foo --size 512000 -m helga -k &g

Re: [ceph-users] problem with rbd map

In dmesg: [ 5981.113104] libceph: client14929 fsid cd7dd0a4-075c-4317-8aed-0758085ea9d2 [ 5981.115853] libceph: mon0 10.10.10.64:6789 session established My systems are RHEL 7 with 3.10.0-229.el7.x86_64 kernel > > On Thu, Mar 12, 2015 at 3:33 PM, Marc Boisis wrote: >> I’m trying

[ceph-users] problem with rbd map

I’m trying to create my first ceph disk from a client named bjorn : [ceph@bjorn ~]$ rbd create foo --size 512000 -m helga -k /etc/ceph/ceph.client.admin.keyring [ceph@bjorn ~]$ sudo rbd map foo --pool pool_ulr_1 --name client.admin -m helga.univ-lr.fr -k /etc/ceph/ceph.client.admin.keyring rbd:

[corosync] Infiniband and ethernet

Hello, The two members of my cluster are connected by infiniband and ethernet. According to make a robust system, I’d like to use two rings, one with infiniband and one with ethernet. The directive transport: udpu/iba is global, how can I mix the two transports mode ? thanks ___

Re: [Ntop] empty web interface

flows are really emitted trough zmq socket ? Marc Boisis-Delavaud Direction du Système d'Information Université de La Rochelle marc.boi...@univ-lr.fr | 05 46 45 82 14 Le 8 janv. 2014 à 22:05, Steve Clark a écrit : > Hi, > > This worked for us: > sudo ./ntopng -l -s -i npr

Re: [Ntop] empty web interface

Hello Can anyone gave me an idea or a method to show if ntopng receive or not flow send by nprobe ? Le 7 janv. 2014 à 14:40, Marc Boisis a écrit : > Hello, > > I want to show in ntop my flows emitted by an openbsd router with PF packet > filter. > > Ntopng and probe are

[Ntop] empty web interface

Hello, I want to show in ntop my flows emitted by an openbsd router with PF packet filter. Ntopng and probe are installed on SLES server. Nprobe is launched like this : nprobe --zmq tcp://127.0.0.1:5556 -i none -n none --collector-port 2055 -V 9 -b 2 07/Jan/2014 14:27:43 [plugin.c:161] No plu

[Lustre-discuss] removing ost

Hello, I want to remove an ost from my lustre filsystem. My version is 1.8.4. I've deactivated home-OST0004 on my mds lctl > dl 0 UP mgc MGC10.149.0.2@o2ib d00cdda9-5757-d58d-c5a5-073225015995 5 1 UP mdt MDS MDS_uuid 3 2 UP lov home-mdtlov home-mdtlov_UUID 4 3 UP mds home-MDT home-MDT0

HP-Command-String in sql accounting

Hello, I've enabled command accounting of my HP procure switches. The information is sent to radius : rad_recv: Accounting-Request packet from host 10.10.0.138 port 1274, id=79, length=128 Acct-Session-Id = "00280016" Acct-Status-Type = Interim-Update Service-Type = NA

[pfSense Support] slow captive portal

Hello, I'm using pfsense as captive portal in our university, but the time to get the authentication page is very long (20-30s). My version is 1.2.3, load average is around 0,2, the only thing is a lot of error in lighttpd.error.log: 2010-05-06 16:01:08: (connections.c.292) SSL: 1 error:140760

overwrite ldap dynamic vlan assigment

ot;ssid=eduroam" then Tunnel-Private-Group-Id:0 = "40" What is the best method to do it ? Merci de penser à la planète! N'imprimez pas inutilement les documents transmis par courrier électronique. --- Marc Boisis-Delavaud tel: 05 46 45 82 14

Re: attributes lost

N'imprimez pas inutilement les documents transmis par courrier électronique. ------- Marc Boisis-Delavaud tel: 05 46 45 82 14 Centre de Ressources Informatiques Université de La Rochelle --- - List info/subscribe/unsubs

Re: attributes lost

l-Type:0 = VLAN Someone use this capability ? how ? Le 14 avr. 08 à 11:06, Alan DeKok a écrit : Marc Boisis-Delavaud wrote: Hello, When I authenticate in PEAP, my ldap attributes (ex Tunnel-Private-Group-Id) aren't send to the client, why ? See use_tunneled_reply in eap.conf.

attributes lost

Hello, When I authenticate in PEAP, my ldap attributes (ex Tunnel-Private- Group-Id) aren't send to the client, why ? Here is my debug: rlm_ldap: looking for reply items in directory... rlm_ldap: LDAP attribute radiusClass as RADIUS attribute Class = 0x4f553d61646d696e3b rlm_ldap: LDAP att

Re: proxy.conf and virtual_server

Le 1 avr. 08 à 12:18, Alan DeKok a écrit : Marc Boisis-Delavaud wrote: I have two virtual server which listen on the same IP. According to realm in proxy.conf, I wich to proxy on virtual1 or virtual2. Is it possible to write this in proxy.conf ? realm toto { "proxy to virtual_s

proxy.conf and virtual_server

Hello, I have two virtual server which listen on the same IP. According to realm in proxy.conf, I wich to proxy on virtual1 or virtual2. Is it possible to write this in proxy.conf ? realm toto { "proxy to virtual_server" = virtual1 } - List info/subscribe/unsubscribe? See http://www.f

cisco wlse patch

Hello, Have you a patch for cisco wlse leap authentication, working for freeradius 2.0 ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Oscar-users] different node for login

Hello I'm concvepting a new cluster with Oscar, In all exemple I have read, the master node act as login node and adminisration node. For security reason, I want to know how separate login node from administration node with oscar? --- Marc Boisis-Del

[Nagios-users] notification delay

Hello, I want Nagios notifiy me only if the problem is during more than 10 min. I want not receive mail if the problem is during less. How can I do that ? - This SF.net email is sponsored by DB2 Express Download DB

[Oscar-users] custom post-install

Hello, I want to know how making a post install script to customize my client image (modify file for example) ? - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express an

simultaneous-use per NAS

Hello, Is it possible to "allow only one authentication per NAS" but "not allow many authentication on the same NAS" per user ? ex: toto authenticate on NAS1 and NAS2 simultaneous toto can't authenticate two times on NAS1 simultaneous - List info/subscribe/unsubscribe? See http://www.fre

authentication according to nas ip adress

Hello How can I do this with freeradius: If auth request come from NAS1 use ldap1 if auth request come from NAS2 use ldap2 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Nagios-users] monitor bsd by snmp

I want to monitor load and disk space of free/open BSD machine by snmp. The plugins "check_snmp_load" from http://www.manubulon.com/nagios/ doesn't work with BSD. Is there anyone on the list who monitor bsd by snmp and how ? Thanks ---

[Nagios-users] check_dhcp on vlan interface

Hello My nagios server run on openbsd. I have one physical network interface (pcn0) with no ip. Upon pcn0, I have 5 vlan interfaces . This is an extract of ifconfig pcn0: flags=8843 mtu 1500 lladdr 00:50:56:a7:5c:4a media: Ethernet autoselect (autoselect) inet6 fe80::

Re: [pfSense Support] file server

same hardware. And I know the risks !! Thanks -- ----- Marc Boisis-Delavaud Tel: (33) 04 67 14 14 14 CINES - Montpellier - - To unsubscribe, e-mail: [EMAIL PROTECTED] For addi

[pfSense Support] file server

Hello, Since pure-ftpd has been removed from available packages, is there a solution to make a file server, is it possible to enable scp for example or something else ? - To unsubscribe, e-mail: [EMAIL PROTECTED] For addition

Two masters synchronised

a. Say me if I dream or is it possible ? -- - Marc Boisis-Delavaud Tel: (33) 04 67 14 14 14 CINES - Montpellier -

Re: force eap-type

Kostas Kalevras a écrit : On Tue, 22 Feb 2005, Marc Boisis wrote: Hello world I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate. Is it possible and how ? I think you just need to map the EAP-Type attribute to an ldap attribute in

force eap-type

Hello world I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate. Is it possible and how ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html