CPU usage monitoring

Hi all, Is there any way to monitor CPU usage (preference through snmp) on an OpenBSD box ? LoadAverage is reported through netsnmp, but this does not report real CPU usage. As a newbie, I didn't find an easy way to do this. Thanks for tips. BR, -- Sylvain COUTANT ADVISEO

Interrupts handling in SMP

migrate to mp kernel with 2 or 4 CPUs ? Thanks for tips. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGP nexthop

as nexthop was declared invalid, routes to this AS were not installed. I think this could have created a loop : our upstream provider was sending packets for this customer's routes. As we hadn't routes installed for customer's prefix, we were sending back the packets to upstream

Re: OpenBGP nexthop

sessions. Would that fit most of "usual" cases ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGP crashes

. Usually where bgpd has some work to do or when the box has more traffic ... Any idea ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

[Update] OpenBGP crashes

I forgot to see it but just before, there is also : Apr 12 16:48:29 x bgpd[31105]: neighbor x.x.x.x (x): prefix limit reached -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGPd max-prefix

. How could I have reached 10 announced prefixes ? What I imagine is that for a few seconds I did announce all the routes I received from my customer before the max-prefix did cut the session ? Would this be possible that max-prefix is not synchronously checked ? BR, -- Sylvain COUTANT AD

Re: OpenBGPd max-prefix

> well, your 2 plus the 5 from your other customers plus the > $max-prefix The 5 is the $max_prefix. We have just only one BGP customer. Total is 7. I should never have announced more than 7 routes in any case. -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/ Te

OpenBGP+CARP : OpenBGP does not see CARP going into master state

t;depend on carp3" for one eBGP neighbour in this case. Is this kind of a bug or do I miss something ? It's my first round with this configuration, I could have forgot one important thing ... Thanks in advance for any help. Regards and happy Xmas. -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

're in a *failover* case. Session going down for 10 seconds is better than session going down until someone brings it back up ... Regards, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

> * Sylvain Coutant <[EMAIL PROTECTED]> [2005-12-26 11:29]: > > OpenBGPd looks fine for eBGP and iBGP links as long as it does not > > "depend on carp". > > definately "works for me" Good. I was not very it was used in production somewhere ;-) I

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

and have even better failover ... Best wishes ;=) -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGPd filters

. ! If someone can explain me what I'm missing - any help welcome ;-) -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGP Communities

Hi again, How can one see community tags associated to a route ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP & IPv6

} } Any idea what I've done wrong again ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd filters

session and restarted it, they were then dropped. BTW, all tags (localpref, etc.) manipulations require to clear the session and even to restart bgpd itself. Could this be included in the doc so one wouldn't have to search for hours on some settings change ? Thanks for your reply. -- Sylvain

Re: OpenBGP & IPv6

Hi, > Try: > > announce IPv4 unicast > announce IPv6 unicast Nothing does :( -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd filters

> Yes they need the session up/down to be applyed I'm not sure, but some of them (I think localpref defined in a group) require the whole daemon to be restarted. Regards, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP & IPv6

> Both Cisco based equipmentthere must be something else wrong in the > configuration... Any idea what could be "else" ? ;-) BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP & IPv6

clear), IPv4 is always the only capability announced. I believe I need to kill bgpd and restart it for the change in the configuration to take effect. I can't for now. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP & IPv6

nexthop which does not exist. Its IPv4 address is nothing I know about (and is not the first 32 bits of a v6 address). -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd filters

ed ... I didn't try to delete the neighbour, reload and add back. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd and TTL Security Check (RFC 3682)

P MD5 or IPSec... IPsec is not widely supported and md5 causes timeout detection problems. TTL security check is a way to have a small but quite efficient protection. Obviously, everyone will prefer one or the other way, but there are arguments for TTL check as for others. BR, -- Sylvain COUTAN

3.8/64 bits/snmp

counters in 32 bits OIDs. It looks it's long time known problems but we were unable to find a workaround. Any idea ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: 3.8/64 bits/snmp

is less than 4 GB but our monitor rejects larger values ... > The problem is with net-snmp. Beyond this I haven't chased it down. But not on all platform. Netsnmp 5 works great with OpenBSD i386 or Ubuntu amd64. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGP Communities manipulations

t previous communities. Is there a way to *add* a new community to the path without wiping previous ones ? BTW, does someone have a complex community manipulation conf file to send me (in private) so I can learn tips from it ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGP Communities manipulations

> There is a "feature" in 3.8 that let you only set one community per AS. > This is fixed in -current. OK. BTW, how one could remove community tags ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGPd-current & IPv6

re installed to the kernel while more than 600 are received. BTW, there is a zebra daemon running. It is not problem for IPv4, could it be for IPv6 ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

OpenBGPd-current & memory

to 6 communities attributes ;-) Any guess what cause such a high memory load on my first box ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd-current & memory

ep it turned on, what will be the memory overhead ? Currently my memory load goes up every hour (between 1 and 2 MB per hour). Will this stop at some point and how could try to approximate the final load ? Thanks for your help. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd-current & memory

d one iBGP ! At some point, I'll reset the sessions or restart the server to try to approx. the amount of memory lost due to fragmentation. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd-current & memory

> that indeed smells like a bug somewhere. How could I try to track this down ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd-current & memory

e this ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/

Re: OpenBGPd-current & memory

0 references 3670 BGP attributes entries using 143K of memory and holding 167371 references 3669 BGP attributes using 24.1K of memory RIB using 66.2M of memory > Any idea about how I should handle this ? ... ;) BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ h

pf/carp load balancing on 4 firewalls

SRV2 Once again, how will spanning tree handle this case with the same MAC announced from the 4 firewalls ? My guess is packets from SRV1 will be dispatched to FW1* because the cost will be lower. Same for SRV2/FW2*. Could some help me understand how this setup could behave in real ... BR,

Re: pf/carp load balancing on 4 firewalls

firewalls, but I would like to keep server<=>firewalls traffic as much local as possible. > If you have a relationship with the vendor, ask them. Not still sure of the vendor. Should be 3COM. > Or simply try > it out and report back! I don't have the hardware, I must