- Roundtable - muug.ca

LACP breaking ARP?
by Wyatt Zacharias 13 May '16

13 May '16

Following up on my question to the roundtable at Tuesday's meeting, I did some more troubleshooting yesterday, and traced the problem down to the LACP link between the switch and the backup appliance. Running packet captures on both the backup appliance and the windows client, I can see that ARP packets are being lost on the LACP link. When I ping from the windows client to the appliance, I see the arp request and reply at the appliance, but the reply never makes it to the windows client. Pinging the other direction, appliance to windows client I see the arp requests at the appliance, but they never make it to the windows client and go unanswered. The backup appliance only does LACP with XOR source+dest mac, so I configured the switch to match. If I change the load balance algorithm to anything else on the switch the link goes down entirely, so it appears to be the right choice. Could this be just a config problem with LACP? In any case, I gave up on LACP specifically and switched the appliance to use round-robin and left the ports un-bonded on the switch which is working fine. -- Wyatt Zacharias

1 0

hardvare inventory systems ?
by Grigory Shamov 12 May '16

12 May '16

Hi All, Do you know if there is a free hardware inventory system for Linux that would automatically get HW changes from, say, lshw? To track things like disk and server replacements. -- Grigory Shamov Westgrid/ComputeCanada Site Lead University of Manitoba E2-588 EITC Building, (204) 474-9625

2 1

embedded linux hw question
by Trevor Cordes 12 May '16

12 May '16

I'm still working on that embedded linux print server I've mentioned before. I've gotten it to power on, fans spin, nic blinks, hdd spins, hdd light blinks (but not as much as I'd like). But it doesn't talk on the network at all. I'm flying blind and it would be really handy if I could find a port on this thing to get serial console or vga out. Unfortunately, this thing is super proprietary and I can't get any google hits on relevant pcb part numbers. Maybe there's some standard pin naming someone out there knows? Here's the connectors I can find that look promising: 10-pin ISPJTAG (google says it's for flash programming) 10-pin SX (no idea, but I tried putting a serial on it, nada) 14-pin P1 (no pins, just holes) 34-pin unlabelled there are also a few 2-pin jumper connectors: ICEBOOT MFG0 MFG1 SMBUS (no pins) RST Are any of these remotely useful for getting console or vga? It really seems like I'm getting somewhere but linux isn't booting completely, that's my guess. Looks like it's embedded Intel CPUs. The company that made the PCB is "Electronics for Imaging", from 2001. (It goes with a very expensive printer.)

2 1

Get The Edge
by North Forge 11 May '16

11 May '16

View this email in your browser (http://us13.campaign-archive2.com/?u=20291a8d0c2cd7c80ca9d8299&id=70980633c…) http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8… GET THE EDGE The North Forge Edge (http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8…) is your place to share opportunities, education, events and employment news with the community. It’s easy to submit an item for the publication – just add the details in the online form found here (http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8…) . The Edge will be published monthly, or with a frequency determined by the timing and number of submissions. Please invite partners to also make use of this communication tool by submitting through the online form. Entries will be reviewed for relevance and may be edited for length and clarity. The Edge also allows community members to manage their email subscriptions from North Forge Technology Exchange, all from one convenient location. FOLLOW US TO FIND OUT HOW WE'RE MAKING INNOVATION WORK FOR MANITOBA. http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8… http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8… http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8… http://northforge.us13.list-manage.com/track/click?u=20291a8d0c2cd7c80ca9d8… SMART PARK NORTH FORGE 200-135 INNOVATION DR WINNIPEG, MB R3T 6A8 Canada EXCHANGE 301-321 MCDERMOT AVE WINNIPEG, MB R3A 0A3 FABRICATION LAB 125 ADELAIDE ST WINNIPEG, MB R3A 0W4 http://northforge.us13.list-manage2.com/track/click?u=20291a8d0c2cd7c80ca9d… ============================================================ Copyright © 2016 NORTH FORGE TECHNOLOGY EXCHANGE, All rights reserved. You are receiving this email because you opted in at one of our websites. You can ** update your preferences (http://northforge.us13.list-manage.com/profile?u=20291a8d0c2cd7c80ca9d8299&…) or ** unsubscribe from this list (http://northforge.us13.list-manage.com/unsubscribe?u=20291a8d0c2cd7c80ca9d8…) Email Marketing Powered by MailChimp http://www.mailchimp.com/monkey-rewards/?utm_source=freemium_newsletter&utm…

1 0

Humble Bundle - only until noon today!
by Trevor Cordes 11 May '16

11 May '16

(Or maybe 1pm...) As discussed at the meeting last night, the No Starch Press 13-book ebook name-your-own-price Humble "Hacking" Bundle is available here: https://www.humblebundle.com/books/no-starch-hacking-books And I wanted to drop a note to let everyone know that if you're interested, you must act *now* because the deal ends at around noon today (May 11). All the details are at the web site above. (Aside: Maybe these bundles are a good idea for publishers/charities; this one has grossed almost $1M US so far!)

1 0

IPv6 in Manitoba
by Vijay Sankar 03 May '16

03 May '16

I have had an IPv6 tunnel working through Hurricane Electric since 2011 or so but increasingly it is not usable due to changes in security stances at the destination sites. Ideally I would like to have a /48 subnet with addresses that allow use of DNS etc.. Checked with tech support at MTS and Shaw but both said IPv6 is not available through them. So I am wondering what others are doing. Really appreciate any advice or suggestions about IPv6 providers in Winnipeg. Thank you very much, Vijay -- Vijay Sankar, M.Eng., P.Eng. ForeTell Technologies Limited vsankar(a)foretell.ca

4 4

MUUG Meeting, May 10, 7:30pm -- Double Daemon Dash
by Gilbert Detillieux 03 May '16

03 May '16

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, May 10. The meeting topic for this month is as follows: Now in 3-D! (Double Daemon Dash) In this case we mean that this meeting will feature a Double Daemon Dash (DDD) instead of one DD and one regular presentation: In Wyatt's Daemon-Dash segment he will be presenting the Squid caching proxy server daemon. Squid is a full featured proxy daemon with support for http, https, and ftp. Wyatt will show the quickest way to have Squid up and running on a new server, and how to keep it secure. Paul Sierks will present on DavMail. The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ****************************************************************** Please note our *NEW* meeting location for this month: *Room 3M60* (3rd floor) Manitoba Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ****************************************************************** For more information about MUUG, and its monthly meetings, check out their web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.mb.ca> c/o Gilbert E. Detillieux Web: http://www.muug.mb.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 1

Re: [RndTbl] Roundtable Digest, Vol 137, Issue 1
by Vijay Sankar 01 May '16

01 May '16

Quoting roundtable-request(a)muug.mb.ca: > Send Roundtable mailing list submissions to > roundtable(a)muug.mb.ca > > To subscribe or unsubscribe via the World Wide Web, visit > http://www.muug.mb.ca/mailman/listinfo/roundtable > or, via email, send a message with subject or body 'help' to > roundtable-request(a)muug.mb.ca > > You can reach the person managing the list at > roundtable-owner(a)muug.mb.ca > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Roundtable digest..." > > Today's Topics: > > 1. IPv6 in Manitoba (Vijay Sankar) > 2. Re: IPv6 in Manitoba (Robert Keizer) > 3. Re: IPv6 in Manitoba (Adam Thompson) > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 01 May 2016 10:55:51 -0500 > From: Vijay Sankar <vsankar(a)foretell.ca> > To: roundtable(a)muug.mb.ca > Subject: [RndTbl] IPv6 in Manitoba > Message-ID: > <20160501105551.Horde.74GXIMIcwaEZgxNlNJBLU4-(a)server3.foretell.ca> > Content-Type: text/plain; charset="utf-8"; Format="flowed"; > DelSp="Yes" > > I have had an IPv6 tunnel working through Hurricane Electric since 2011 or > so but increasingly it is not usable due to changes in security stances at > the destination sites. Ideally I would like to have a /48 subnet with > addresses that allow use of DNS etc.. Checked with tech support at MTS and > Shaw but both said IPv6 is not available through them. > > So I am wondering what others are doing. Really appreciate any advice or > suggestions about IPv6 providers in Winnipeg. > > Thank you very much, > > Vijay > -- > Vijay Sankar, M.Eng., P.Eng. > ForeTell Technologies Limited > vsankar(a)foretell.ca >

1 0

process accouting, fields meaning?
by Grigory Shamov 27 Apr '16

27 Apr '16

Hi All, Following up on the Adam's old presentation on Linux process accounting. Does anyone know the meaning of fields in the pacct file? The utility dump-acct dumps it in a plaintext lines separated by | . Like this: sh | 0.0| 0.0| 11.0| 0| 0|107328.0| 19284 3258|Tue Apr 26 04:17:07 2016 First three floats are runtimes, then UID|GID; last is the date it ended. Googling brought me "memory" and "io" for the two other fields but I am still at loss. What is memory here? And why io is two numbers (read/write? Which is which?) Does anyone know? (I am trying to avoid reading the sources of dump-acct or system headers). Thanks! -- Grigory Shamov Westgrid/ComputeCanada Site Lead University of Manitoba E2-588 EITC Building, (204) 474-9625

2 2

web access abuse of lisa
by Trevor Cordes 26 Apr '16

26 Apr '16

I noticed stomething strange. Lisa's web hits (as per access logs) were through the roof since around the site changeover date. Weird. I glanced at them and noticed we're getting tons of hits from just 1 user: 216.98.56.20 - - [24/Apr/2016:05:20:11 -0500] "GET /pub/epel/6/x86_64/repodata/repomd.xml HTTP/1.1" 301 332 "-" "urlgrabber/3.9.1 yum/3.2.29" All the same! Of 8434659 total current access.log hits, 8243763 (97.7%) were this same guy! Many per second! For a couple of weeks now (but not before that!). An ip lookup says this is Ubisoft in Montreal. Looks like someone has a misconfig on their box. Should we contact them about fixing this? If have added that IP to an iptables DROP rule on lisa. I just did this now and they sent 49 more hits and then stopped. Their runaway ps must have been looking for success before continuing. I guess I'll leave it in for a while then we can take it out? Looks like this IP has hit the new server but only a few times; i.e. normal looking access. Perhaps when the switchover occurred and the redirects were put in place it made their client go mental... Maybe it never dropped its http connection this whole time! Lastly, fail2ban-server is often in the top 5 ps's in top on lisa, but I don't see any fail2ban rule in iptables? Does it only create a rule once it gets something to put in? I thought it made a blank table that it filled up as needed, not no table at all. Maybe it's not working?

1 0