Re: TCPDUMP bandwidth capability

2004-12-07 Thread chip
On Mon, 6 Dec 2004 18:59:17 -0800 (PST), asdfasdfasd asdfds <[EMAIL PROTECTED]> wrote: > Hello, > > For those who use TCPDUMP, how much bandwidth have you > been able to monitor with it without dropping packets? > I've seen it said that BSD is much better for this > type of thing than Linux, but

Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

2004-12-07 Thread Iasen Kostov
Sorry for that much posts but something weird is going on ... I left bridge for a while (more than route/arp cache period) and then the stopped. Same happens when you clear the arp cache as I find out. And as I expected arps didn't get from the bridge to the host (wherever who-has ot is-on). A

Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

2004-12-07 Thread Iasen Kostov
Iasen Kostov wrote: Iasen Kostov wrote: Tony Ackerman wrote: What is the purpose of putting em1 in promiscuous mode below? Is the required or did you just notice the issue with this configuration? There was a change added some months ago in order to allow the bridging of vlans. In order for vlan

Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

2004-12-07 Thread Iasen Kostov
Iasen Kostov wrote: Tony Ackerman wrote: What is the purpose of putting em1 in promiscuous mode below? Is the required or did you just notice the issue with this configuration? There was a change added some months ago in order to allow the bridging of vlans. In order for vlan briding to work the

Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

2004-12-07 Thread Iasen Kostov
Tony Ackerman wrote: What is the purpose of putting em1 in promiscuous mode below? Is the required or did you just notice the issue with this configuration? There was a change added some months ago in order to allow the bridging of vlans. In order for vlan briding to work the interface had to hav

Re: UCARP support for FreeBSD

2004-12-07 Thread Jeremie Le Hen
> i need to implement gateway redundancy for our server farm. I found > UCARP ( http://www.ucarp.org ) as a potential solution, but it is > written it is tested successfully only on Linux, OpenBSD and NetBSD. > > Did anybody have luck with it under FreeBSD ? I've just disc

Re: UCARP support for FreeBSD

2004-12-07 Thread Patrick Tracanelli
Vladimir Terziev wrote: Hi, i need to implement gateway redundancy for our server farm. I found UCARP ( http://www.ucarp.org ) as a potential solution, but it is written it is tested successfully only on Linux, OpenBSD and NetBSD. Did anybody have luck with it under FreeBSD ? Try

Re: Another bug with netmasked aliases (with fix)

2004-12-07 Thread Max Laier
On Tue, Dec 07, 2004 at 04:59:32PM +0200, Ruslan Ermilov wrote: > Hi Max, > > I played today with "netmasked aliases", and found what > appears to be another bug. > > Adding an alias to the Ethernet interface with the same > netmask results in this address not being pingable from > this host -- i

Re: Load Balancing

2004-12-07 Thread Roman Kurakin
NiY wrote: Greetings! I have yet to find a definitive answer on this subject, so I was hoping someone would let me know the official way to go about this, or if it's even possible. We have two ADSL services coming into out building. We would like to use them both on one network, using a multi-homed

Another bug with netmasked aliases (with fix)

2004-12-07 Thread Ruslan Ermilov
Hi Max, I played today with "netmasked aliases", and found what appears to be another bug. Adding an alias to the Ethernet interface with the same netmask results in this address not being pingable from this host -- it just spits ARP requests to the wire and never hears back (most Ethernets are s

Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

2004-12-07 Thread Iasen Kostov
Iasen Kostov wrote: Robert Watson wrote: On Sat, 27 Nov 2004, Kevin Day wrote: I recently upgraded to 5.3 on a system, and manually upgraded src/sys/dev/em/* to the latest RELENG_5 versions. (1.44.2.4 of if_em.c) I'm able to reproduce problems using the below configuration is 6.x also, and

Re: UCARP support for FreeBSD

2004-12-07 Thread Vladimir Terziev
I know it, but it is for FreeBSD 5.x . My gateways run FreeBSD 4.10 and i don't have plans to upgrade them for now. Vladimir On Tue, 7 Dec 2004 14:34:13 +0100 Max Laier <[EMAIL PROTECTED]> wrote: > On Tuesday 07 December 2004 14:31, Vladimir Terziev wrote: > > Hi, > > > > i need t

Re: UCARP support for FreeBSD

2004-12-07 Thread Max Laier
On Tuesday 07 December 2004 14:31, Vladimir Terziev wrote: > Hi, > > i need to implement gateway redundancy for our server farm. I found UCARP > ( http://www.ucarp.org ) as a potential solution, but it is written it is > tested successfully only on Linux, OpenBSD and NetBSD. > > Did anybody have

UCARP support for FreeBSD

2004-12-07 Thread Vladimir Terziev
Hi, i need to implement gateway redundancy for our server farm. I found UCARP ( http://www.ucarp.org ) as a potential solution, but it is written it is tested successfully only on Linux, OpenBSD and NetBSD. Did anybody have luck with it under FreeBSD ?

[no subject]

2004-12-07 Thread Sami
Hi, (sorry for last long mail) I have problem with D.o.S and DD.o.S attacks. I wonder if someone already wrote/know about a module that works like pop_before_smtp, it watches /var/log/security and if it sees that in the past 30 seconds many packets were received to an IP it unbinds its (ifconfig

WATCHING DDOS ATTACKS

2004-12-07 Thread RoyalShells Admin
Hi, I have problem with D.o.S and DD.o.S attacks. I wonder if someone already wrote/know about a module that works like pop_before_smtp, it watches /var/log/security and if it sees that in the past 30 seconds many packets were received to an IP it unbinds its (ifconfig em0 ip delete), and track

Re: (review request) ipfw and ipsec processing order foroutgoingpackets

2004-12-07 Thread Ari Suutari
Hi, But I may be missing something because I can see no way in firewall rules to distinguish between the before IPSec processing hook and the after IPSec processing one. Could you clarify this for me please ? There is a keyword "ipsec" in ipfw2, which matches if packet has emerged from ipsec