> On 4/2/2012 11:43 AM, Joe Greco wrote:
> > As a user, you can't win. If you don't report
> > a problem, you get criticized. If you report a problem but can't figure
> > out how to reproduce it, you get criticized. If you can reproduce it
> >
> On 03/30/2012 07:41, Joe Greco wrote:
> >> On 3/29/2012 7:01 AM, Joe Greco wrote:
> >>>> On 3/28/2012 1:59 PM, Mark Felder wrote:
> >>>>> FreeBSD 8-STABLE, 8.3, and 9.0 are untested
> >>>>
> >>>> As much as I'm sens
> On Fri, 30 Mar 2012 09:44:47 -0500, Joe Greco wrote:
> > Have you migrated these hosts, or were they installed in-place and
> > never moved?
> > fwiw the apparent integrity of things on the VM is consistent with
> > our experience too.
>
> VMMotion and Storag
> On Thu, 29 Mar 2012 19:27:31 -0500, Joe Greco wrote:
>
> > It also doesn't explain the experience here, where one VM basically
> > crapped out but only after a migration - and then stayed crapped out.
> > It would be interesting to hear about your datastore, how bu
> On 3/29/2012 7:01 AM, Joe Greco wrote:
> >> On 3/28/2012 1:59 PM, Mark Felder wrote:
> >>> FreeBSD 8-STABLE, 8.3, and 9.0 are untested
> >>
> >> As much as I'm sensitive to your production requirements, realistically
> >> it's not li
t's some sort of corruption with the vmfs3 and thin
provisioned disk format, but it'd be interesting to know if that's
totally off-track.
... JG
--
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
"We call it the 'one bite at the apple' rule. G
> On Thursday 29 March 2012 17:49:30 Joe Greco wrote:
> > > On Thursday 29 March 2012 15:42:42 Joe Greco wrote:
> > > > > Hi,
> > >
> > > Do both 32- and 64-bit versions of FreeBSD crash?
> >
> > We've only seen it happen on one vir
> On Thursday 29 March 2012 15:42:42 Joe Greco wrote:
> > > Hi,
>
> Do both 32- and 64-bit versions of FreeBSD crash?
We've only seen it happen on one virtual machine. That was a 32-bit
version. And it's not so much a crash as it is a "disk I/O hang".
Th
ly told him to run a
newer version without any such version being realistically
available.
WTF?
You want people not to use releases that "came out over a year
ago"? The generally sensible solution to that is to release
RELEASEs more than once every fourteen or fifteen months.
...
at having been said, if anyone has any brilliant ideas about what
would constitute useful further steps to isolate this, I can look at
recovering the faulty VM from backup and seeing if it still exhibits
the problem.
... JG
--
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.
> On 2009-Jun-13 15:55:29 -0500, Joe Greco wrote:
> >Adding a SIL3112A gives us the SATA.
>
> These are known to cause data corruption (check the archives). I
> wouldn't trust anything that has passed through a SIL chip without
> independent validation.
Well, as
> On 2009-Jun-13 15:55:29 -0500, Joe Greco wrote:
> >Adding a SIL3112A gives us the SATA.
>
> These are known to cause data corruption (check the archives). I
> wouldn't trust anything that has passed through a SIL chip without
> independent validation.
I already
512 Jun 8 14:14 x
Oh, and just to add some pain and agony to the puzzle ... it all seems
to work fine on 6.1-RELEASE/amd64 ... and 7.0-RELEASE/amd64. But on a
different machine. Which is where I'm doing my extraction.
So I'm not sure what to make of this.
... JG
--
Joe Greco
I'm seeing a huge number of SCSI errors on a new pair of Tyan S2882UG3N
boards. Dual Opteron 250, 6GB RAM (PAE), and a few drives. I originally
did this under 4.10R but moved to 4.11-PRE from the jp snap server, to
no good end.
Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 198
No. I've been contemplating home automation stuff, but LonWorks is a bit on
the too heavy (and expensive) side... although I might be interested in any
works in progress.
--
... Joe
-------
Joe Greco - Sy
this.
A larger B/F size also allows a larger C/G, so I'm wondering if this is
still true (both for FreeBSD 3.5 stable and 4.2 stable).
Comments?
--
... Joe
---
Joe Greco - Systems Administrator
f).
In general, all I really care about keeping current is the applications I
run on the machines, since those tend to be visible (and exploitable) to
the world.
--
... Joe
---
Joe Greco - Systems Administrator
process in order to make the
tty log out".
--
... Joe
-------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
ot;
a suid process of some sort that happens to be running on a tty owned by
the user - which can happen. But, again, it relies on proper attention by
programs to dying upon close of std{out,in}.
--
... Joe
---
Joe Gre
y predictable uses, this is probably a lot simpler
and a lot more foolproof.
--
... Joe
---
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI
s
> help a lot. RAID hardware/software is definitely the right way to
> deal when you go to the next level.
>
> Warner
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-hackers" in the body of the message
>
--
... Joe
---
off += sizeof(buffer);
}
}
I don't even guarantee that it's correct, but I do use it with some
success... vinum takes an entire drive offline when it sees an error,
and I use this to scan for and fix errors before turning the drive back
on.
--
... Joe
> On Fri, Aug 18, 2000 at 06:16:09PM +0100, Jonathan Laventhol wrote:
> > Hello Folks --
> >
> > Anybody built a file server with approx 1000 Gbyte or more?
> > Or even 200 Gbyte?
>
> Joe Greco did this for a news machine last year. He used several wide
>
-
... Joe
-------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscribe: send mail to [EMAIL PROTECTED]
with &q
ll
it as being fairly simple...
I looked and XFree86 doesn't seem to support the Sun format, but running
through moused would be just as good, I think, and easier to hack on.
--
... Joe
-------
Joe Greco - Systems Adm
. It adds no
functionality to ifconfig, yet it eats up the magical "argc == 1" catchall.
It seems to be a keystroke-saver, in which case I propose we change the
name of "ifconfig" to simply "i" :-)
--
... Joe
--------
o located in East Lansing)
--
... Joe
-------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscribe:
> At 03:22 PM 6/21/00 -0500, Joe Greco wrote:
> >Either seems to work, but the if_de driver does not properly support full
> >duplex.
>
> is that for all cards, or just some?
For the specific card you mentioned. I still use the SMC 9334BDT's (dual
Tulip 21143) here a
Either seems to work, but the if_de driver does not properly support full
duplex.
--
... Joe
---
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI
filesystem issues, I may be able
to shanghai one for a month or two and provide access to it. I may even be
able to push it over the 2TB mark (barely). I do not have the
qualifications or need to be doing this myself, though, alas.
72GB disks will be available later this year. Expect
a lot of space.
In 2040, I may consider a yottabyte (YB) to be a lot of space.
That's a lottabytes. But I'll probably be too old to care.
... Joe
---
Joe Greco - Systems Administrator [EM
> On Tuesday, 15 February 2000 at 3:40:58 -0600, Joe Greco wrote:
> > So I wanted to vinum my new 1.9TB of disks together just for chuckles, and
> > it went OK up to the newfs..
> >
> > S play.p0.s0State: up PO:0 B Size: 46 GB
> &
o. You'll be pleased
to know that there are even more people than you know who are actively
interested in what's going on, though, including some folks like Russell
who have some really similar visions to mine as to where things need to
go in the future. Diablo is g
in. The Kingston DS400 will do 9 devices, but
to do more, you then have to have another chassis with only 6 (for example).
Eats up space real quick :-(
... Joe
-------
Joe Greco - Systems Administrator
fore 1 TB
> filesystems are common. Won't the filesystem need to be 64-bitted for
> that?
I would guess. Matt Dillon commented on this already, though, and is much
better suited to having an opinion about it.
... Joe
-------
rious
applications, just like the Diablo server is a storage appliance for Usenet
articles. It's not exactly a filesystem, but it's similar in that it is a
fit-for-purpose model to do the required task.
Thanks for Diablo, Matt.
... Joe
> Joe Greco wrote:
> > So I wanted to vinum my new 1.9TB of disks together just for chuckles, and
> > it went OK up to the newfs..
> >
> > S play.p0.s0State: up PO:0 B Size: 46 GB
> > S play.p0.s1State: up PO
te filesystem folks
are out there.
... Joe
-----------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscribe:
to then, all I see are
kernel messages, and garbage where userland stuff is spitting up output.
How in the world do I even figure out the next debugging step? :-)
... Joe
---
Joe Greco - Systems Administrator
s (26 c/g, 52.00MB/g, 256 i/g)
super-block backups (for fsck -b #) at:
32, 106528, 213024, 319520, 426016, 532512, 639008, 745504, 852000, 958496,
... Joe
---
Joe Greco - Systems Administrator [EM
ople who use this feature of IPFW that have an opinion one way
> or the other should speak up.
>
> A group of two very opinionated people doesn't make a consensus, or
> necessarily the 'right' decision. :) :) :)
... Joe
--
ing output presents a problem for you, perhaps some other
alternative is possible. I'm not quite sure what it would be.
... Joe
-------
Joe Greco - Systems Administrator jgr...@ns.sol.net
Solar
net.inet.ip.fw.verbose: 1
net.inet.ip.fw.verbose_limit: 0
# sysctl -w net.inet.ip.fw.verbose_limit=999
net.inet.ip.fw.verbose_limit: 0 -> 999
"Any more questions?" :-)
... Joe
---
Joe Greco - Systems Admin
not the logging
throttle should be engaged, and therefore you can EITHER:
1) Set a global VERBOSE_LIMIT mechanism and:
a) allow your logging counter to be reset, or
b) allow your limit to be raised to re-enable logging
2) Set a rule-oriented VERBOSE_LIMIT mechanism and allow each
f IPFW that have an opinion one way
> or the other should speak up.
>
> A group of two very opinionated people doesn't make a consensus, or
> necessarily the 'right' decision. :) :) :)
... Joe
---
Joe Greco - Systems Administr
ing output presents a problem for you, perhaps some other
alternative is possible. I'm not quite sure what it would be.
... Joe
-------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solar
this to 0, but
you then become vulnerable to the DoS attacks we have all been arguing
about. In other words, it simply disables VERBOSE_LIMIT.
Useful, as I said, if you have a low VERBOSE_LIMIT and you are getting
some attack that you want to monitor firsthand in more detail...
... Joe
ctl, the VERBOSE_LIMIT variable may be
altered.
... Joe
-------
Joe Greco - Systems Administrator jgr...@ns.sol.net
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscri
fw.verbose: 1
net.inet.ip.fw.verbose_limit: 0
# sysctl -w net.inet.ip.fw.verbose_limit=999
net.inet.ip.fw.verbose_limit: 0 -> 999
"Any more questions?" :-)
... Joe
---
Joe Greco - Systems Administrator
after the kernel stopped
it be an issue". I feel the answer is no.
> Yes, it's nice to do. But, the point of high securelevel is to avoid
> *ANYTHING* (even useful things) that might compromise the integrity of
> the system. And, the IPFW counters constitute part of the in
not the logging
throttle should be engaged, and therefore you can EITHER:
1) Set a global VERBOSE_LIMIT mechanism and:
a) allow your logging counter to be reset, or
b) allow your limit to be raised to re-enable logging
2) Set a rule-oriented VERBOSE_LIMIT mechanism and allow each
this to 0, but
you then become vulnerable to the DoS attacks we have all been arguing
about. In other words, it simply disables VERBOSE_LIMIT.
Useful, as I said, if you have a low VERBOSE_LIMIT and you are getting
some attack that you want to monitor firsthand in more detail...
... Joe
ctl, the VERBOSE_LIMIT variable may be
altered.
... Joe
-------
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsub
uot;. I feel the answer is no.
> Yes, it's nice to do. But, the point of high securelevel is to avoid
> *ANYTHING* (even useful things) that might compromise the integrity of
> the system. And, the IPFW counters constitute part of the integrity of
> the system. Is it part of the
#x27;s counter is still at 0 and the limit is at
100,000... do you see the potential for damage, or need I point out #3-9?
What you describe would be fine if there was a single global VERBOSE_LIMIT,
but in that event I'm not sure what difference there would be between doing
this limit-
#x27;s counter is still at 0 and the limit is at
100,000... do you see the potential for damage, or need I point out #3-9?
What you describe would be fine if there was a single global VERBOSE_LIMIT,
but in that event I'm not sure what difference there would be between doing
this limit-
#x27;t trust something in the kernel, then you just can't trust
anything at all.
> > Well, the 'right' thing is clear: pull the limit count out of the
> > accounting count. This solves both the problem of zeroing accounting
> > counters and potentially messing with other thin
hen you just can't trust
anything at all.
> > Well, the 'right' thing is clear: pull the limit count out of the
> > accounting count. This solves both the problem of zeroing accounting
> > counters and potentially messing with other things, and also of letting
> > people do anything 'negative
>
> But, then again if we're in securelevel 3, we shouldn't let *anyone* do
> anything to the system, since we're paranoid about anything negative
> happening to my system.
>
> In other words, I'm not sure what is the 'right' thing to do here.
Well,
urelevel 3, we shouldn't let *anyone* do
> anything to the system, since we're paranoid about anything negative
> happening to my system.
>
> In other words, I'm not sure what is the 'right' thing to do here.
Well, the 'right' thing is clear: pull the
a per-rule log counter as well,
but what you are telling me makes it sound more attractive to have a global
logging counter.
Comments?
... Joe
---
Joe Greco - Systems Administrator jgr...@ns.sol.net
Solaria Public Access UNIX - Milwaukee, W
ule's counter,
so basically once you are up and running, you get to log IPFW_VERBOSE_LIMIT
events and then you lose logging (ideally I'd zero nonzero rules once every
N minutes).
Comments?
... Joe
-------
Joe
a per-rule log counter as well,
but what you are telling me makes it sound more attractive to have a global
logging counter.
Comments?
... Joe
---
Joe Greco - Systems Administrator [EMAIL PROTECTED]
Solaria Public Access UNIX - Milwaukee, WI 414/342-4847
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
ule's counter,
so basically once you are up and running, you get to log IPFW_VERBOSE_LIMIT
events and then you lose logging (ideally I'd zero nonzero rules once every
N minutes).
Comments?
... Joe
-------
Joe
f text through two functions and a for()
loop... I thought briefly about trying to do it with strncat but I
gagged a bit at the obtuse way it would have needed to have been done.
... Joe
---
Joe Greco - Systems Administr
f text through two functions and a for()
loop... I thought briefly about trying to do it with strncat but I
gagged a bit at the obtuse way it would have needed to have been done.
... Joe
---
Joe Greco - Systems Administr
66 matches
Mail list logo
