devil-linux-discuss — General Mailing List for all discussions

Re: [Devil-Linux-discuss] Problem with non standard FTP port

[Heiko Z. <he...@zu...>]

On Tue, November 13, 2007 12:01, xy zy wrote:
> Hi everyone!
>
>
> I have problem with non standard ftp port.
>
>
> I have Devil 1.2.8 and I use Shorewall to configure firewall. I tried to

You should also consider upgrading to the latest version, 1.2.8 is quite old.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [Devil-Linux-discuss] Problem with non standard FTP port

[Bruce S. <bw...@ar...>]

> I rebooted it, but nothing happened.

Did you run 'save-config' before you rebooted?

 - BS

[Devil-Linux-discuss] Problem with non standard FTP port

[xy zy <big...@fr...>]

Hi everyone!

I have problem with non standard ftp port.

I have Devil 1.2.8 and I use Shorewall to configure firewall. I tried to co=
nfigure my router to accept FTP port on 2100 to the NET zone, and made chan=
ge in /etc/modules.conf and /etc/shorewall/modules as shorewall.net mention=
ed, but it's not working.=20

Changes:

/etc/modules.conf

option ip_conntrack_ftp ports=3D21,2100
option ip_nat_ftp ports=3D21,2100
=20
/etc/shorewall/modules

loadmodule ip_conntrack_ftp ports=3D21,2100
loadmodule ip_nat_ftp ports=3D21,2100

/etc/shorewall/rules

ACCEPT    loc   net    tcp 2100

=20
I rebooted it, but nothing happened.

Could You help me to resolve this problem?


Thanks,


Boki
=0A=0AP=C1RATLAN AKCI=D3 MOST!
Mos=F3g=E9pek,mosogat=F3g=E9pek, be=E9p=EDthet=F5 g=E9pek
ORSZ=C1GOS kisz=E1ll=EDt=E1ssal az AEGshop.hu-t=F3l
http://ad.adverticum.net/b/cl,1,6022,222445,270525/click.prm

Re: [Devil-Linux-discuss] adding network drivers

[Matthew H. <mat...@va...>]

I'll keep plugging away with my build environment then.

Boooooo!

Hehehe

-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
Heiko Zuerker
Sent: 13 November 2007 15:40
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] adding network drivers


On Tue, November 13, 2007 09:15, Matthew Hattersley wrote:
> Just for quick deployment purpose, is there any chance of having a dev
> iso image which has the kernel source tree in it, that way you could
> compile additional drivers from the fly from a ram disk. Of course you
> couldn't deploy the modules into /lib/modules.... but you could insmod
> /etc/modules.

The design of DL doesn't allow this.
The ISO does not contain any tools required to compile and link
programs,
neither does it include any include files.

--=20

Regards
  Heiko Zuerker
  http://www.devil-linux.org



------------------------------------------------------------------------
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] adding network drivers

[Heiko Z. <he...@zu...>]

On Tue, November 13, 2007 09:15, Matthew Hattersley wrote:
> Just for quick deployment purpose, is there any chance of having a dev
> iso image which has the kernel source tree in it, that way you could
> compile additional drivers from the fly from a ram disk. Of course you
> couldn't deploy the modules into /lib/modules.... but you could insmod
> /etc/modules.

The design of DL doesn't allow this.
The ISO does not contain any tools required to compile and link programs,
neither does it include any include files.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [Devil-Linux-discuss] adding network drivers

[Bruce S. <bw...@ar...>]

Are these drivers/modules in the latest 2.6 kernel?  If so, you may want
to try the 1.3-beta version of DL.

 - BS


On Tue, 2007-11-13 at 15:15 +0000, Matthew Hattersley wrote:
> Just for quick deployment purpose, is there any chance of having a dev
> iso image which has the kernel source tree in it, that way you could
> compile additional drivers from the fly from a ram disk. Of course you
> couldn't deploy the modules into /lib/modules.... but you could insmod
> /etc/modules. 
> 
> Am I making sense? 
> 
> Cheers
> 
> Mat
> 
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf Of
> Heiko Zuerker
> Sent: 13 November 2007 14:58
> To: dev...@li...
> Subject: Re: [Devil-Linux-discuss] adding network drivers
> 
> 
> On Mon, November 12, 2007 15:28, joh...@gm... wrote:
> > i have searched the archives and shutter to ask but how may i add nic
> > drivers? is it as simple as finding were the thumb drive is mounted,
> cp
> > files to usr dir ... running make etc then running the save config? if
> so
> >  how do i access the files I have stored on my thumdrive? thanks and
> > sorry for the newb question I really tried.
> >
> Unfortunately it's not that simple. We can only support the addition of
> any kind of software (including network drivers) via our build system.
> 
> See our documentation (
> http://www.devil-linux.org/documentation/1.2.x/ch03.html ) for details
> on
> how to use it.
> 
> 

Re: [Devil-Linux-discuss] adding network drivers

[Matthew H. <mat...@va...>]

Just for quick deployment purpose, is there any chance of having a dev
iso image which has the kernel source tree in it, that way you could
compile additional drivers from the fly from a ram disk. Of course you
couldn't deploy the modules into /lib/modules.... but you could insmod
/etc/modules.=20

Am I making sense?=20

Cheers

Mat

-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
Heiko Zuerker
Sent: 13 November 2007 14:58
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] adding network drivers


On Mon, November 12, 2007 15:28, joh...@gm... wrote:
> i have searched the archives and shutter to ask but how may i add nic
> drivers? is it as simple as finding were the thumb drive is mounted,
cp
> files to usr dir ... running make etc then running the save config? if
so
>  how do i access the files I have stored on my thumdrive? thanks and
> sorry for the newb question I really tried.
>
Unfortunately it's not that simple. We can only support the addition of
any kind of software (including network drivers) via our build system.

See our documentation (
http://www.devil-linux.org/documentation/1.2.x/ch03.html ) for details
on
how to use it.


--=20

Regards
  Heiko Zuerker
  http://www.devil-linux.org



------------------------------------------------------------------------
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] adding network drivers

[Heiko Z. <he...@zu...>]

On Mon, November 12, 2007 15:28, joh...@gm... wrote:
> i have searched the archives and shutter to ask but how may i add nic
> drivers? is it as simple as finding were the thumb drive is mounted, cp
> files to usr dir ... running make etc then running the save config? if so
>  how do i access the files I have stored on my thumdrive? thanks and
> sorry for the newb question I really tried.
>
Unfortunately it's not that simple. We can only support the addition of
any kind of software (including network drivers) via our build system.

See our documentation (
http://www.devil-linux.org/documentation/1.2.x/ch03.html ) for details on
how to use it.


-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

[Devil-Linux-discuss] adding network drivers

[<joh...@gm...>]

i have searched the archives and shutter to ask but how may i add nic 
drivers? is it as simple as finding were the thumb drive is mounted, cp 
files to usr dir ... running make etc then running the save config? if so 
how do i access the files I have stored on my thumdrive? thanks and sorry 
for the newb question I really tried.

[Devil-Linux-discuss] mppc-mppe patch

[Serge L. <fi...@in...>]

Hi,

I'm going to adopt mppe-mppc patch for 2.6.23 but I have not found the source. :-(
If anybody has them I'll be very grateful if you would send them to me directly
(not to list).

--
Sincerely,
Serge Leschinsky

Re: [Devil-Linux-discuss] [BULK] Re: RAM Usage

[Mgr. M. J. <mai...@vc...>]

Hello.

I can confirm memory allocation problem of net-snmpd too. I restart=20
net-snmpd in cron once a week and it is enought on router with 512MB ram =

and whole DL in ramdisk.

Jiri Motycka


John Jore napsal(a):
> Frank,
> Thank you very much for this. My DL box was having problems last night =
and a reboot solved it. and it was low on memory with INIT constantly re-=
spawning. And I too use net-snmpd.
>=20
> In your experience, was it enough to restart snmpd and would adding thi=
s to a cron job once a month potentially be enough to avoid restarting th=
e entire DL?
>=20
>=20
> Regards,
> John Jore
>=20
>=20
>=20
> ________________________________________
> From: dev...@li... [devil-linux-di=
scu...@li...] On Behalf Of Frank Weis [Frank.Weis@=
cte.lu]
> Sent: 07 November 2007 07:28
> To: dev...@li...
> Subject: Re: [Devil-Linux-discuss] [BULK] Re:  RAM Usage
>=20
> On Tuesday 06 November 2007 20:28:07 Serge Leschinsky wrote:
>> Hi Matthew,
>>
>> Matthew Hattersley wrote:
>>> We have around 150 DL boxes out in the wild now, and there may be a
>>> small problem that keeps happening. Under heavy load the boxes will
>>> start running low on RAM, at which point we get malloc errors for som=
e
>>> daemons running on the unit. First thing to go is usual snmpd, which
>>> isn't a major issue. But further down the line we start loosing thing=
s
>>> like ssh, and in some cases even more crtical processes.
>> That's weird! I've just finished troubleshooting of terrible memory le=
aks
>> in our application (not DL related) and faced that net-snmp 5.4.0 eats=

>> memory with greate speed (especially libsnmp). The release notes for 5=
=2E4.1
>> show that some leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH 16169=
12],
>> [PATCH 1592706]). I think we may update net-snmp to 5.4.1 but I've not=

>> checked yet if the update really solves our problem (and I can't guara=
ntee
>> it solves your problem).
>=20
> I can confirm the memory leakage in net-snmpd. At the time I discovered=
 it I
> googled around a bit, and it seemed to be a well known problem with
> net-snmpd.
>=20
> snmpd eats up to 90% of memory on my DLs (256 MB RAM), and then stuff s=
tarts
> to fail. I obviously notice it when ssh fails.
>=20
> As a workaround, I just restart snmpd on all my DLs every once in a whi=
le....
> MRTG handles this nicely, and I don't loose to much information.
>=20
> It looks like the problem occurs mostly/sooner on boxes that run ipsec =
tunnels
> too.
>=20
> Matthew: wow, 150 DLs. How do you manage them?
>=20
> Have a nice day,
>=20
> Frank
> --
> _______________________________________________
>  Centre de Technologie de l'Education
>  29 avenue John F. Kennedy
>  L-1855 Luxembourg-Kirchberg
>  email: Fra...@ct...
>  t=E9l.: +352 478-5973
>  fax: +352 333797
>  _______________________________________________
>=20
> -----------------------------------------------------------------------=
--
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.=

> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>=20
> -----------------------------------------------------------------------=
--
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.=

> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] [BULK] Re: [BULK] Re: RAM Usage

[Frank W. <Fra...@ct...>]

Hi John,

I restart snmpd more or less once a week. Once a month is definately not=20
enough for some of mine (presumably those that run ipsec tunnels)

Regards,

=46rank

On Wednesday 07 November 2007 11:27:41 John Jore wrote:
> Frank,
> Thank you very much for this. My DL box was having problems last night and
> a reboot solved it. and it was low on memory with INIT constantly
> re-spawning. And I too use net-snmpd.
>
> In your experience, was it enough to restart snmpd and would adding this =
to
> a cron job once a month potentially be enough to avoid restarting the
> entire DL?
>
>
> Regards,
> John Jore
>
>
>
> ________________________________________
> From: dev...@li...
> [dev...@li...] On Behalf Of Frank We=
is
> [Fra...@ct...] Sent: 07 November 2007 07:28
> To: dev...@li...
> Subject: Re: [Devil-Linux-discuss] [BULK] Re:  RAM Usage
>
> On Tuesday 06 November 2007 20:28:07 Serge Leschinsky wrote:
> > Hi Matthew,
> >
> > Matthew Hattersley wrote:
> > > We have around 150 DL boxes out in the wild now, and there may be a
> > > small problem that keeps happening. Under heavy load the boxes will
> > > start running low on RAM, at which point we get malloc errors for some
> > > daemons running on the unit. First thing to go is usual snmpd, which
> > > isn't a major issue. But further down the line we start loosing things
> > > like ssh, and in some cases even more crtical processes.
> >
> > That's weird! I've just finished troubleshooting of terrible memory lea=
ks
> > in our application (not DL related) and faced that net-snmp 5.4.0 eats
> > memory with greate speed (especially libsnmp). The release notes for
> > 5.4.1 show that some leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH
> > 1616912], [PATCH 1592706]). I think we may update net-snmp to 5.4.1 but
> > I've not checked yet if the update really solves our problem (and I can=
't
> > guarantee it solves your problem).
>
> I can confirm the memory leakage in net-snmpd. At the time I discovered it
> I googled around a bit, and it seemed to be a well known problem with
> net-snmpd.
>
> snmpd eats up to 90% of memory on my DLs (256 MB RAM), and then stuff
> starts to fail. I obviously notice it when ssh fails.
>
> As a workaround, I just restart snmpd on all my DLs every once in a
> while.... MRTG handles this nicely, and I don't loose to much information.
>
> It looks like the problem occurs mostly/sooner on boxes that run ipsec
> tunnels too.
>
> Matthew: wow, 150 DLs. How do you manage them?
>
> Have a nice day,
>
> Frank
> --
> _______________________________________________
>  Centre de Technologie de l'Education
>  29 avenue John F. Kennedy
>  L-1855 Luxembourg-Kirchberg
>  email: Fra...@ct...
>  t=E9l.: +352 478-5973
>  fax: +352 333797
>  _______________________________________________
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss



=2D-=20
_______________________________________________
 Centre de Technologie de l'Education
 29 avenue John F. Kennedy
 L-1855 Luxembourg-Kirchberg
 email: Fra...@ct...
 t=E9l.: +352 478-5973
 fax: +352 333797
 _______________________________________________

Re: [Devil-Linux-discuss] [BULK] Re: RAM Usage

[Matthew H. <mat...@va...>]

We manage with snmp. DOH!!!!!!

Ah well, not to worry. Plus Nagios, Cacti, and lots of custom scripting.

Its all fun and games.

I also have a problem with the sk98lin driver being OLD and not =
supporting the newer NIC's but that's another story.

Thankyou all for the info though. I'll slap a daily restart into cron. =
PHEW.

Cheers

Mat

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
Frank Weis
Sent: 07 November 2007 07:28
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] [BULK] Re: RAM Usage

On Tuesday 06 November 2007 20:28:07 Serge Leschinsky wrote:
> Hi Matthew,
>
> Matthew Hattersley wrote:
> > We have around 150 DL boxes out in the wild now, and there may be a
> > small problem that keeps happening. Under heavy load the boxes will
> > start running low on RAM, at which point we get malloc errors for =
some
> > daemons running on the unit. First thing to go is usual snmpd, which
> > isn't a major issue. But further down the line we start loosing =
things
> > like ssh, and in some cases even more crtical processes.
>
> That's weird! I've just finished troubleshooting of terrible memory =
leaks
> in our application (not DL related) and faced that net-snmp 5.4.0 eats
> memory with greate speed (especially libsnmp). The release notes for =
5.4.1
> show that some leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH =
1616912],
> [PATCH 1592706]). I think we may update net-snmp to 5.4.1 but I've not
> checked yet if the update really solves our problem (and I can't =
guarantee
> it solves your problem).

I can confirm the memory leakage in net-snmpd. At the time I discovered =
it I=20
googled around a bit, and it seemed to be a well known problem with=20
net-snmpd.=20

snmpd eats up to 90% of memory on my DLs (256 MB RAM), and then stuff =
starts=20
to fail. I obviously notice it when ssh fails.

As a workaround, I just restart snmpd on all my DLs every once in a =
while....=20
MRTG handles this nicely, and I don't loose to much information.

It looks like the problem occurs mostly/sooner on boxes that run ipsec =
tunnels=20
too.

Matthew: wow, 150 DLs. How do you manage them?=20

Have a nice day,

Frank
--=20
_______________________________________________
 Centre de Technologie de l'Education
 29 avenue John F. Kennedy
 L-1855 Luxembourg-Kirchberg
 email: Fra...@ct...
 t=E9l.: +352 478-5973
 fax: +352 333797
 _______________________________________________

-------------------------------------------------------------------------=

This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] [BULK] Re: RAM Usage

[John J. <jo...@jo...>]

Frank,
Thank you very much for this. My DL box was having problems last night and =
a reboot solved it. and it was low on memory with INIT constantly re-spawni=
ng. And I too use net-snmpd.

In your experience, was it enough to restart snmpd and would adding this to=
 a cron job once a month potentially be enough to avoid restarting the enti=
re DL?


Regards,
John Jore



________________________________________
From: dev...@li... [devil-linux-discus=
s-b...@li...] On Behalf Of Frank Weis [Fra...@ct...=
]
Sent: 07 November 2007 07:28
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] [BULK] Re:  RAM Usage

On Tuesday 06 November 2007 20:28:07 Serge Leschinsky wrote:
> Hi Matthew,
>
> Matthew Hattersley wrote:
> > We have around 150 DL boxes out in the wild now, and there may be a
> > small problem that keeps happening. Under heavy load the boxes will
> > start running low on RAM, at which point we get malloc errors for some
> > daemons running on the unit. First thing to go is usual snmpd, which
> > isn't a major issue. But further down the line we start loosing things
> > like ssh, and in some cases even more crtical processes.
>
> That's weird! I've just finished troubleshooting of terrible memory leaks
> in our application (not DL related) and faced that net-snmp 5.4.0 eats
> memory with greate speed (especially libsnmp). The release notes for 5.4.=
1
> show that some leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH 1616912]=
,
> [PATCH 1592706]). I think we may update net-snmp to 5.4.1 but I've not
> checked yet if the update really solves our problem (and I can't guarante=
e
> it solves your problem).

I can confirm the memory leakage in net-snmpd. At the time I discovered it =
I
googled around a bit, and it seemed to be a well known problem with
net-snmpd.

snmpd eats up to 90% of memory on my DLs (256 MB RAM), and then stuff start=
s
to fail. I obviously notice it when ssh fails.

As a workaround, I just restart snmpd on all my DLs every once in a while..=
..
MRTG handles this nicely, and I don't loose to much information.

It looks like the problem occurs mostly/sooner on boxes that run ipsec tunn=
els
too.

Matthew: wow, 150 DLs. How do you manage them?

Have a nice day,

Frank
--
_______________________________________________
 Centre de Technologie de l'Education
 29 avenue John F. Kennedy
 L-1855 Luxembourg-Kirchberg
 email: Fra...@ct...
 t=E9l.: +352 478-5973
 fax: +352 333797
 _______________________________________________

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] [BULK] Re: RAM Usage

[Frank W. <Fra...@ct...>]

On Tuesday 06 November 2007 20:28:07 Serge Leschinsky wrote:
> Hi Matthew,
>
> Matthew Hattersley wrote:
> > We have around 150 DL boxes out in the wild now, and there may be a
> > small problem that keeps happening. Under heavy load the boxes will
> > start running low on RAM, at which point we get malloc errors for some
> > daemons running on the unit. First thing to go is usual snmpd, which
> > isn't a major issue. But further down the line we start loosing things
> > like ssh, and in some cases even more crtical processes.
>
> That's weird! I've just finished troubleshooting of terrible memory leaks
> in our application (not DL related) and faced that net-snmp 5.4.0 eats
> memory with greate speed (especially libsnmp). The release notes for 5.4.1
> show that some leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH 1616912],
> [PATCH 1592706]). I think we may update net-snmp to 5.4.1 but I've not
> checked yet if the update really solves our problem (and I can't guarantee
> it solves your problem).

I can confirm the memory leakage in net-snmpd. At the time I discovered it =
I=20
googled around a bit, and it seemed to be a well known problem with=20
net-snmpd.=20

snmpd eats up to 90% of memory on my DLs (256 MB RAM), and then stuff start=
s=20
to fail. I obviously notice it when ssh fails.

As a workaround, I just restart snmpd on all my DLs every once in a while..=
=2E.=20
MRTG handles this nicely, and I don't loose to much information.

It looks like the problem occurs mostly/sooner on boxes that run ipsec tunn=
els=20
too.

Matthew: wow, 150 DLs. How do you manage them?=20

Have a nice day,

=46rank
=2D-=20
_______________________________________________
 Centre de Technologie de l'Education
 29 avenue John F. Kennedy
 L-1855 Luxembourg-Kirchberg
 email: Fra...@ct...
 t=E9l.: +352 478-5973
 fax: +352 333797
 _______________________________________________

Re: [Devil-Linux-discuss] RAM Usage

[Serge L. <fi...@in...>]

Hi Matthew,

Matthew Hattersley wrote:

> 
> We have around 150 DL boxes out in the wild now, and there may be a
> small problem that keeps happening. Under heavy load the boxes will
> start running low on RAM, at which point we get malloc errors for some
> daemons running on the unit. First thing to go is usual snmpd, which
> isn't a major issue. But further down the line we start loosing things
> like ssh, and in some cases even more crtical processes. 
That's weird! I've just finished troubleshooting of terrible memory leaks in our
application (not DL related) and faced that net-snmp 5.4.0 eats memory with
greate speed (especially libsnmp). The release notes for 5.4.1 show that some
leaks were fixed in 5.4.1 (  [BUG 1619827],[PATCH 1616912], [PATCH 1592706]). I
think we may update net-snmp to 5.4.1 but I've not checked yet if the update
really solves our problem (and I can't guarantee it solves your problem).

-- 
Sincerely,
Serge Leschinsky

Re: [Devil-Linux-discuss] RAM Usage

[Bruce S. <bw...@ar...>]

Sounds like something may have a memory leak.  When the memory starts
getting low (and before things start aborting), I'd check to see if a
certain process is using a ton of memory.

Maybe run 'top' and sort it by memory usage ("M" key).  It wouldn't hurt
to run that periodically to see if a process is slowly using more and
more memory.

Once we figure out where the memory is going, we can try to find  a
solution to the problem.

 - BS


> Hi Guys,
> 
> 
> We have around 150 DL boxes out in the wild now, and there may be a
> small problem that keeps happening. Under heavy load the boxes will
> start running low on RAM, at which point we get malloc errors for some
> daemons running on the unit. First thing to go is usual snmpd, which
> isn't a major issue. But further down the line we start loosing things
> like ssh, and in some cases even more crtical processes. 
> 
> Ok I know this is pretty much the problem with running things from RAM
> disks, but is there a way to ensure that network/tcp connections cannot
> steal all the RAM etc and effectively reserve RAM for the OS?
> 
> BTW we aren't being tight with the RAM, most of these boxes have 512Mb
> or a 1GB, which should be able for effectively routing traffic and some
> traffic aggregation.
> 
> I welcome any ideas on this front.
> 
> Cheers
> 
> Mat

[Devil-Linux-discuss] RAM Usage

[Matthew H. <mat...@va...>]

Hi Guys,


We have around 150 DL boxes out in the wild now, and there may be a
small problem that keeps happening. Under heavy load the boxes will
start running low on RAM, at which point we get malloc errors for some
daemons running on the unit. First thing to go is usual snmpd, which
isn't a major issue. But further down the line we start loosing things
like ssh, and in some cases even more crtical processes.=20

Ok I know this is pretty much the problem with running things from RAM
disks, but is there a way to ensure that network/tcp connections cannot
steal all the RAM etc and effectively reserve RAM for the OS?

BTW we aren't being tight with the RAM, most of these boxes have 512Mb
or a 1GB, which should be able for effectively routing traffic and some
traffic aggregation.

I welcome any ideas on this front.

Cheers

Mat

Re: [Devil-Linux-discuss] troubles whit ssh

[Eli H. <el...@se...>]

On Friday 02 November 2007 06:10:55 pm victor nikiforenko wrote:
> Hi Eli
>
> When i typing i make a mistake:
> > Starting SSHD: Could not load host key:
> >          /etc/ssh/ssh_rsa_key
>
> realy is /etc/ssh/ssh_host_rsa_key and the error is
> because whe i do it whit my personalized key i use
> other name and thank you i can see the error
> "> AuthorizedKeysFile      /etc/ssh/ssh_host_rsa_key"
> but i continue whit the problem when i conect from ha
> remote host i can in whitout a public key.
>
> Thank a lot for your help
>
> Vitor Arango Nikiforenko
>

Victor,

The "Could not load private key" error you mentioned would be caused by:

- bad permissions on the private key file (should be owned by root and chmod 
0600)
- no key file
- key has a passphrase (see below)

When you used the 'ssh-keygen' command, were you intending to create a new 
server host key or a new client key?

I suspect what happened is that you created a new server key file with a 
passphrase. Is this correct? If this is what happened, you need to create a 
new ssh_host_rsa_key without a passphrase.

*IF* you think this is correct, runnig this command on your DL box will fix 
it:

ssh-keygen -t rsa -f /etc/ssh/sshd_host_rsa_key -N ""

-eli

Re: [Devil-Linux-discuss] troubles whit ssh

[victor n. <vic...@ya...>]

Hi Eli 

When i typing i make a mistake:

> Starting SSHD: Could not load host key:
>          /etc/ssh/ssh_rsa_key
realy is /etc/ssh/ssh_host_rsa_key and the error is
because whe i do it whit my personalized key i use
other name and thank you i can see the error 
"> AuthorizedKeysFile      /etc/ssh/ssh_host_rsa_key"
but i continue whit the problem when i conect from ha
remote host i can in whitout a public key.

Thank a lot for your help

Vitor Arango Nikiforenko


--- Eli Heady <el...@se...> wrote:

> On Friday 02 November 2007 02:42:37 pm victor
> nikiforenko wrote:
> > Hello List
> >
> > First at all excuse me for my pour english.
> > I'm curently use a Devil-Linux 1.2.13 like
> firewall
> > whit DMZ on Compaq evo PIV whit 1152MB ram.
> >
> > The problem is: i try to use it whit hostkey but
> when
> > i start it and try to conect from a remote pc whit
> ssh
> > it don't ask me for a pub hostkey, and another
> problem
> > is whit keygen, i creatit whit "ssh-keygen -b 2048
> -t
> > rsa"
> > in this step evry works fine but when i add it to
> > sshd_config and restart ssh, ssh show me:
> >
> > Starting SSHD: Could not load host key:
> >          /etc/ssh/ssh_rsa_key
> > Disabling protocol version 2. Could not load host
> key
> > sshd: no hostkeys available -- exiting.
> >
> > my sshd_conf is:
> >
> > Port 22
> > Protocol 2
> > Ciphers aes256-cbc
> > HostKey /etc/ssh/ssh_host_rsa_key
> > SyslogFacility AUTH
> > LogLevel INFO
> > PermitRootLogin yes
> > StrictModes yes
> > MaxAuthTries 3
> > RSAAuthentication yes
> > PubkeyAuthentication yes
> > AuthorizedKeysFile      /etc/ssh/ssh_host_rsa_key
> > PasswordAuthentication yes
> > PermitEmptyPasswords no
> > ChallengeResponseAuthentication yes
> > PrintLastLog yes
> > Banner /etc/ssh/sshd-banner
> > Subsystem       sftp    /usr/libexec/sftp-server
> >
> > Thanks a lot
> >
> 
> 
> Hi Victor,
> 
> Is this a typo?
> 
> > Starting SSHD: Could not load host key:
> >          /etc/ssh/ssh_rsa_key
> 
> 
> Or did you copy directly from the console?
> "/etc/ssh/ssh_rsa_key" is not 
> listed in your sshd_config excerpt. If sshd is
> really trying to 
> use "ssh_rsa_key", make sure it exists in /etc/ssh/
> 
> Also, you are specifying the server HostKey and
> AuthorizedKeysFile as the same 
> file. I don't think it will work like that.
> 
> Read up on man sshd, man sshd_config ... 
> 
> You can adjust the logging level in the config:
> 
> LogLevel DEBUG
> 
> Restart sshd then watch the log messages while you
> try to log in  --  syslog 
> prints to tty10  (Alt+F10) [I think, at least ... I
> don't remember the 
> default, I've changed mine to logfile]
> 
> hth,
> eli
> 
>
-------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? 
> Stop.
> Now Search log events and configuration files using
> AJAX and a browser.
> Download your FREE copy of Splunk now >>
> http://get.splunk.com/
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
>
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Re: [Devil-Linux-discuss] troubles whit ssh

[Eli H. <el...@se...>]

On Friday 02 November 2007 02:42:37 pm victor nikiforenko wrote:
> Hello List
>
> First at all excuse me for my pour english.
> I'm curently use a Devil-Linux 1.2.13 like firewall
> whit DMZ on Compaq evo PIV whit 1152MB ram.
>
> The problem is: i try to use it whit hostkey but when
> i start it and try to conect from a remote pc whit ssh
> it don't ask me for a pub hostkey, and another problem
> is whit keygen, i creatit whit "ssh-keygen -b 2048 -t
> rsa"
> in this step evry works fine but when i add it to
> sshd_config and restart ssh, ssh show me:
>
> Starting SSHD: Could not load host key:
>          /etc/ssh/ssh_rsa_key
> Disabling protocol version 2. Could not load host key
> sshd: no hostkeys available -- exiting.
>
> my sshd_conf is:
>
> Port 22
> Protocol 2
> Ciphers aes256-cbc
> HostKey /etc/ssh/ssh_host_rsa_key
> SyslogFacility AUTH
> LogLevel INFO
> PermitRootLogin yes
> StrictModes yes
> MaxAuthTries 3
> RSAAuthentication yes
> PubkeyAuthentication yes
> AuthorizedKeysFile      /etc/ssh/ssh_host_rsa_key
> PasswordAuthentication yes
> PermitEmptyPasswords no
> ChallengeResponseAuthentication yes
> PrintLastLog yes
> Banner /etc/ssh/sshd-banner
> Subsystem       sftp    /usr/libexec/sftp-server
>
> Thanks a lot
>


Hi Victor,

Is this a typo?

> Starting SSHD: Could not load host key:
>          /etc/ssh/ssh_rsa_key


Or did you copy directly from the console? "/etc/ssh/ssh_rsa_key" is not 
listed in your sshd_config excerpt. If sshd is really trying to 
use "ssh_rsa_key", make sure it exists in /etc/ssh/

Also, you are specifying the server HostKey and AuthorizedKeysFile as the same 
file. I don't think it will work like that.

Read up on man sshd, man sshd_config ... 

You can adjust the logging level in the config:

LogLevel DEBUG

Restart sshd then watch the log messages while you try to log in  --  syslog 
prints to tty10  (Alt+F10) [I think, at least ... I don't remember the 
default, I've changed mine to logfile]

hth,
eli

Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto

[Heiko Z. <he...@zu...>]

On Fri, November 2, 2007 15:16, Serge Leschinsky wrote:
> Dmitry Komarov wrote:
>
>
>>
>> But I'm not sure if this will not break openssl functionality on
>> systems without padlock.... Should be tested.
> The patch was checked in. My checks have assured me that openssl
> functionality is not broken - ssh and openvpn were sensors.
>
> Heiko, I believe the padlock support should be added to 1.2 after some
> defense period to avoid problem with crypto in production system. Correct?

If it doesn't cause any other troubles I agree that it would be a good
addition.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto

[Serge L. <fi...@in...>]

Dmitry Komarov wrote:

> 
> But I'm not sure if this will not break openssl functionality on systems 
> without padlock.... Should be tested.
The patch was checked in. My checks have assured me that openssl functionality
is not broken - ssh and openvpn were sensors.

Heiko, I believe the padlock support should be added to 1.2 after some defense
period to avoid problem with crypto in production system. Correct?

--
Sincerely,
Serge Leschinsky

[Devil-Linux-discuss] troubles whit ssh

[victor n. <vic...@ya...>]

Hello List

First at all excuse me for my pour english.
I'm curently use a Devil-Linux 1.2.13 like firewall
whit DMZ on Compaq evo PIV whit 1152MB ram.

The problem is: i try to use it whit hostkey but when
i start it and try to conect from a remote pc whit ssh
it don't ask me for a pub hostkey, and another problem
is whit keygen, i creatit whit "ssh-keygen -b 2048 -t
rsa"
in this step evry works fine but when i add it to
sshd_config and restart ssh, ssh show me:

Starting SSHD: Could not load host key:             
         /etc/ssh/ssh_rsa_key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.

my sshd_conf is:

Port 22
Protocol 2
Ciphers aes256-cbc
HostKey /etc/ssh/ssh_host_rsa_key
SyslogFacility AUTH
LogLevel INFO
PermitRootLogin yes
StrictModes yes
MaxAuthTries 3
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile      /etc/ssh/ssh_host_rsa_key
PasswordAuthentication yes
PermitEmptyPasswords no
ChallengeResponseAuthentication yes
PrintLastLog yes
Banner /etc/ssh/sshd-banner
Subsystem       sftp    /usr/libexec/sftp-server

Thanks a lot

Victor Arango Nikiforenko


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Re: [Devil-Linux-discuss] VIA C3/C7 PadLock hardware crypto

[Dmitry K. <dm...@dz...>]

On Thursday 01 November 2007 21:43:24 Serge Leschinsky wrote:
> Hi,
>
> Dmitry Komarov wrote:
> > Hi,
> >
> > so that really confirms the fact we need this OpenSSL patchset, as you
> > can see from my previous message, similar C7 board gives 10 times higher
> > performance with Gentoo and OpenSSL padlock patches applied...
>
> Well, is it enough to apply the following patch? I mean I looked through
> the mentioned page but haven't understood clearly how we should compile
> padlock engine =C2=A0- static or shared. So I'm going to apply only one p=
atch -
> it's in the attachment because it was shrunk a bit. If the patch doesn't
> break the openssl functionality I'll check in it in a day (after minimal
> preliminary checking).

The page also says:

=3D=3D cut =3D=3D
Once you get bored with patching heaps of client programs have a look at th=
is=20
patch from Cecilia: openssl-0.9.8e-engine.diff, 2007-07-20 01:38
"The openssl-0.9.8e patch will make the ssl-library to load the padlock=20
engine. This means, if you apply the openssl-0.9.8e patch, you do not have =
to=20
apply any other patches or modifications, since every time the ssl-library =
is=20
called, the padlock-engine is initialized by the ssl-library."
In other words - Patch for OpenSSL to always load PadLock engine.
=3D=3D cut =3D=3D

But I'm not sure if this will not break openssl functionality on systems=20
without padlock.... Should be tested.