- Discuss - lists.centos.org

About liveCd installation...
by Tolun ARDAHANLI 25 Dec '09

25 Dec '09

Hi List; I didn't found the installation from Centos5.4 LiveCD. Does not have any installation script inside this distribution? or How can I start to install LiveCd to HDD? Thanks a lot... Sincerely, Tolun ARDAHANLI Computer Engineer web: www.ardahanli.net E-mail: tolun(a)ardahanli.net Icq:326600

2 1

SOLVED -Re: OT: How can I tell if a web site is now blocking IPs from my country?
by Lanny Marcus 25 Dec '09

25 Dec '09

On Sun, Dec 6, 2009 at 4:22 PM, Lanny Marcus <lmmailinglists(a)gmail.com> wrote: > I have always been able to browse, without any problems, > http://www.mobile-review.com/index-en.shtml but for the past 2 or 3 > days, Mozilla Firefox just hangs "connecting to ...." How can I tell > if they have started blocking IP addresses from Colombia? <snip> After using the traceroute servers, I was pretty sure this was a connectivity problem. There seemed to be a problem with a router in Russia (the web site is in Moscow). I reported the problem to a man at mobile-review.com and the problem went away. :-) Lanny -------------------------------------- Magazine subscriptions Largest discount Credit/Debit Card Check Pay Pal http://lowcostmagazines.com/

1 0

kvm-shell
by Michael Kress 25 Dec '09

25 Dec '09

Hi, I don't know if that already exists somewhere ... I've written it for me and wanted to share it with you. It's minimal kvm shell for end users - it allows them to start/stop/reboot their own kvm guests. http://www.michael-kress.de/2009/12/kvm-shell/ kvm-shell should run on all platforms. Have fun. Regards Michael -- Michael Kress, kress(a)hal.saar.de

1 0

[OT] Urgent request
by tdukes＠sc.rr.com 24 Dec '09

24 Dec '09

Help, Our server at work is down. The video memory is out. Its an old IBM PC300PL, 6892-12U, running SCO. If anyone happens to a stick of this type memory and would be willing to sell it, please let me know. Below are the requirements for the video memory: The video memory interface is controlled by an S3 TRIO 3D graphics controller. The amount of SGRAM shipped with the video subsystem is 4MB in the PC 300PL computers, and 2MB in the PC 300GL computers. The video memory module used in the PC 300PL (Types 6862 and 6892) is 2 MB 512K X32, with 100MHz SGRAM. The video memory module used in the PC 300GL (Types 6275 and 6285) is 2 MB 256K X32, with 100MHz SGRAM. The PC 300GL (Types 6275 and 6285) can be upgraded from 2 MB SGRAM to 4 MB SGRAM with a 2 MB SGRAM SODIMM. The SODIMM can be plugged into the SODIMM socket on the system board. I know, this machine should have been scraped a long time ago. TIA

16 25

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i ame checking this thanks, Manu -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Kai Schaetzl Verzonden: donderdag 24 december 2009 15:32 Aan: centos(a)centos.org Onderwerp: Re: [CentOS] attack Obviously, if you are running several vhosts and plesk you likely have other logs to check. Also, one can usually see the origin of the mail injection in the maillog (e.g. complaints about setting to an unsafe sender) or in the outgoing messages. At runtime you can see the connects with full URLs on the apache status page. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Inquiry:yum?
by hadi motamedi 24 Dec '09

24 Dec '09

Dear All I want to add "yum" to my CentOS 5.2 so I downloaded the rpm package from the www.pbone.net . But I didn't have success in installing it so please let me know if there is another way to accomplish this job ? Thank you in advance

12 31

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i have Check my tmp directory and subdirectorys for std, udp.pl no file exist. Also i have check /etc/passwd and /etc/shadow for unusual users. regards -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Thomas Dukes Verzonden: donderdag 24 december 2009 13:08 Aan: 'CentOS mailing list' Onderwerp: Re: [CentOS] attack > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Manu Verhaegen > Sent: Thursday, December 24, 2009 7:04 AM > To: CentOS mailing list > Subject: Re: [CentOS] attack > > at the moment everiting is solved i have block the IP adress > but i d'ont have found the script > So you are the attacker. Happened to me a couple weeks ago. Check your tmp directory and subdirectory for std, udp.pl. Also check /etc/passwd and /etc/shadow for unusual users. Should be at the very bottom of those files. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] attack
by david＠pnyet.web.id 24 Dec '09

24 Dec '09

Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. ------Original Message------ From: Manu Verhaegen Sender: centos-bounces(a)centos.org To: centos(a)centos.org ReplyTo: CentOS mailing list Subject: [CentOS] attack Sent: Dec 24, 2009 6:31 PM Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Warm regards, David --------------------- ./nobody

1 0

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

at the moment everiting is solved i have block the IP adress but i d'ont have found the script >----- Oorspronkelijk bericht ----- >Van : david(a)pnyet.web.id [mailto:david@pnyet.web.id] >Verzonden : donderdag , december 24, 2009 01:07 PM >Aan : 'CentOS mailing list' >Onderwerp : Re: [CentOS] attack > >Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. > >------Original Message------ >From: Manu Verhaegen >Sender: centos-bounces(a)centos.org >To: centos(a)centos.org >ReplyTo: CentOS mailing list >Subject: [CentOS] attack >Sent: Dec 24, 2009 6:31 PM > >Hi, > >My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. > >Regards, > maverh > > > > > > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > > >Warm regards, >David >--------------------- >./nobody >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > >

2 1

attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh

4 3

partitioning order and IO performance
by Carlos Santana 24 Dec '09

24 Dec '09

Hi, Does mount point specification while partitioning (order in which I specify /, /boot, swap etc..) affect performance? I am not sure about the syntax, but I guess one can also specify address/block range while partitioning. Does it affect IO performance? Probably a stupid question, but just curious.. Any insights? Thanks, CS.

7 11

OT:Which filesystem to use with large files
by carlopmart 24 Dec '09

24 Dec '09

Hi all, Recently I have installed a centOS 5.4 server to use as a home NAS server. I need to use large files (8GB minimum) inside of it to serve via iSCSI services. Which filesystem do you recommends me to reach maximum performance: xfs, ext3, ext4, gfs2 ....?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

4 9

donations
by Jerry Geis 24 Dec '09

24 Dec '09

The donation page does not seem up to date: *Monetary* CentOS is currently reviewing our cash donation program. If you are looking to make a cash dontation to the CentOS Project, please check back here after August 15th, 2009. I sent an email to the webmaster but did not get a reply. I thought I would post. Anything new on this? Thanks, Jerry

2 1

/dev/video* permissions
by Boris Epstein 23 Dec '09

23 Dec '09

Hi all, Does anybody know where those permissions are controlled? I've looked in /etc/udev and everywhere else I could think of and thus far I have seen not a hint... Thanks in advance for all your help. Boris.

1 0

fully automatic installation FAI?
by David Mehler 23 Dec '09

23 Dec '09

Hello, Is anyone running a software package called FAI for Fully Automatic Installation on a CentOS server? I was wondering if there were any issues to running it? Thanks. Dave.

2 1

CentOS 5 and Fedora Core
by Matt 23 Dec '09

23 Dec '09

If memory serves me correctly I was told CentOS 4.x was based on Fedora Core 3. So when finding a rpm I always looked for one for Fedora Core 3 and then it seemed to install ok on CentOS 4. Is CentOS 5 the same way and if so what Core is it based on? Matt

5 4

eME627-5082 laptop and Linux?
by Scott Ehrlich 23 Dec '09

23 Dec '09

Anyone have experience with this laptop running C5 5.4 32 or 64-bit? Any known problems/issues? Thanks. Scott

1 0

iptables ... *BSD pf ... pfSense
by Götz Reinicke - IT Koordinator 23 Dec '09

23 Dec '09

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router" Has any of the firewall guys on the list ever tested this distri? What do you think? Right now we run a iptables Shorewall system and had no problems so far, but having a "managed" firewall distri which rocks whould be an alternative. Cheers, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

4 3

advanced routing, 2isp
by David Hláčik 23 Dec '09

23 Dec '09

Guys, please I have no luck with this. I have 2 ISPS. I have working configuration with ip route a 2 routing tables in a way, that matching local subnet uses second provider while all the others are using the first one - main. The main problem I am having is, that I am unable to reach my router via public ip address of that second ISP. This is my default routing table [root@sx1 cron.hourly]# ip route show table main 194.228.196.39 dev ppp0 proto kernel scope link src 90.178.76.117 10.123.50.101 dev ppp2 proto kernel scope link src 10.123.50.1 10.123.50.100 dev ppp1 proto kernel scope link src 10.123.50.1 213.194.242.0/24 dev eth1 proto kernel scope link src 213.194.242.198 10.123.20.0/24 dev eth0 proto kernel scope link src 10.123.20.1 10.123.10.0/24 dev eth0 proto kernel scope link src 10.123.10.11 10.123.11.0/24 dev eth0.8 proto kernel scope link src 10.123.11.1 10.123.42.0/24 dev eth0.5 proto kernel scope link src 10.123.42.1 10.123.123.0/24 dev eth0.7 proto kernel scope link src 10.123.123.1 10.123.40.0/24 dev eth0.4 proto kernel scope link src 10.123.40.1 10.123.30.0/24 dev eth0 proto kernel scope link src 10.123.30.1 10.123.44.0/24 dev eth0.6 proto kernel scope link src 10.123.44.1 169.254.0.0/16 dev eth0.8 scope link default via 213.194.242.1 dev eth1 As you can see , my default provider has gateway 213.192.252.1 , connected via eth1 . This works fine for me. Second configuration is ip rule based, when subnet 10.123.123.0/24 goes to routing table adsl [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default [root@sx1 cron.hourly]# ip route show table adsl 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.123.0/24 dev eth0.7 scope link src 10.123.123.1 default via 194.228.196.39 dev ppp0 As you can see in this case, all trafic goes via ppp0 (my second internet provider connected via ppp0 - adsl ppoe). This works fine. What I want to achieve is, now being able to ping /access/whatever to my server via second public IP address of my adsl provider (90.178.76.117). To achieve this i have added iptables rule, which marks all packets comming via ppp0 (iptables -t mangle -A PREROUTING -i ppp0 -j MARK --set-mark 0x1). And created another routing table named adsl-vpn [root@sx1 cron.hourly]# ip route show table adsl-vpn 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.10.0/24 dev eth0 scope link src 10.123.10.11 default via 194.228.196.39 dev ppp0 Now i have added ip rule, which for all packets marked as 1 , which are the ones which came trough ppp0 = my second ISP, uses table adsl-vpn [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn <--- this one 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default Well, now I should be able definitely to ping my server from outside, but it does not works Pinging from windows machine in outside world : C:\Users\boss>ping 90.178.76.117 Pinging 90.178.76.117 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for 90.178.76.117: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), If i will tcpdump my ppp0 interface on my router I see the ICMP echo requests are comming [root@sx1 cron.hourly]# tcpdump -i ppp0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 09:08:27.743789 IP adsl-dyn118.78-98-105.t-com.sk > gw2.cz.polarion.com: ICMP echo request, id 1, seq 72, length 40 But, echo responses from my server NOT, instead of that, responses are comming out of eth1 interface , which is my first ISP! [root@sx1 cron.hourly]# tcpdump -i eth1 |grep ICMP tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes 09:09:30.451706 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 73, length 40 09:09:35.409704 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 74, length 40 This means that either mange is not working or ip rule is not working . Please help, David

1 0

iptables -m connlimit
by Helmut Drodofsky 23 Dec '09

23 Dec '09

Hi, to the use of connlimit, I have found http://lists.centos.org/pipermail/centos/2008-June/059656.html Is there something new with centos 5.3 or 5.4? Helmut

1 0

SOLVED - Re: Frustrations with MySQL loss, tcpdump, netstat, etc
by Slack-Moehrle 22 Dec '09

22 Dec '09

Hi Guys, OK, I figured out the problem, It would seem that Comcast spelling my DNS entry wrong would do it! I have done this a zillion times, I was totally stumped as to what I would be missing this time. Thanks everyone for their help. -Jason ----- Original Message ----- From: "Kai Schaetzl" <maillists(a)conactive.com> To: centos(a)centos.org Sent: Tuesday, December 22, 2009 9:31:19 AM Subject: Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc MySQL is *not* listening on TCP 3306 since *long* unless you tell it to in the my.cf. It uses a local Unix socket by default. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

NMS Opinions
by Joseph L. Casale 22 Dec '09

22 Dec '09

A recent post that mentioned Zabbix inspired me to have a look at them again while I was waiting on something as it’s been a while since I looked at them. Currently, I was using Nagios but had to start using Munin to add some functionality I needed and don’t want to continue down this road of supporting umpteen different packages. Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these have to say. HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems to be down☺ Maybe they a monitoring solution, heh… Any opinions appreciated! jlc

6 10

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

In-Reply-To: <4B30F618.6060809(a)kinzesberg.de> On: Tue, 22 Dec 2009 17:38:48 +0100, "Dirk H. Schulz" <dirk.schulz(a)kinzesberg.de> wrote: > That is a new "phenomenon" I also ran into. You now have to > adjust memory values. > > I have added to my /etc/modprobe.conf > "options ipt_recent ipt_pkt_list_tot=75" > Now I can use hitcount values of 50 (did not test if the above > is sufficient for higher values). I found this on the net so I deduce that you would be safe up to a hitcount value of 75. > [PATCH] netfilter: ipt_recent: sanity check hit count > From: Daniel Hokka Zakrisson > Date: Sat Mar 15 2008 - 10:11:05 EST > > If a rule using ipt_recent is created with a hit count greater > than ip_pkt_list_tot, the rule will never match as it cannot > keep track of enough timestamps. This patch makes ipt_recent > refuse to create such rules. > > With ip_pkt_list_tot's default value of 20, . . . Thanks for the lead. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Hi All, Hi All, MySQL 5.0.77 on CentOS 5.4 MySQL is running, my Wordpress stuff is working, but I cannot connect to the server from my house. This server is in my house, however, but on a public IP, behind a firewall, etc. I checked my hardware firewall (a dedicated UnTangle system) and that is successfully allowing the passage. I know this because the firewall shows: 2009-12-22 6:29:41 am passed <my IP>:35606 <server IP>:3306 I checked the firewall (system-config-securitylevel-tui) on the server and that has 3306:tcp allowed. When I try to connect I get an error (4) which when I google says: "Interrupted System call" I have tried using the MySQL Workbench and other client software. If I look in /var/log/mysqld.log I dont see anything but the fact the server started. I tried stopping mysql with /etc/init.d/mysqld stop Then starting with mysqld_safe --init-file=/tmp/code.txt & Where code.txt contains: UPDATE mysql.user SET Password=PASSWORD('mypassword') WHERE User='root'; GRANT ALL ON mysql.* to 'root'@'127.0.0.1'; GRANT ALL ON mysql.* TO 'root'@'localhost'; GRANT ALL ON mysql.* TO 'root'@'my home IP'; FLUSH PRIVILEGES; commit; and I still cannot connect. But the database starts and this code executes because If I go to the console and run /usr/bin/mysql -u root -p and use this password from the update statement that password gets me in. So, on my server I run tcpdump host <my ip> and I dont think I see anything where 3306 is coming through. if I run a test MySQL connection from the MySQL Workbench and they run netstat on my server and I dont see a entry where 3306 is used in what netstat is dumping. What am I doing wrong? What can I check for? I am stumped! -Jason

5 7

Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Rick, > have you tried to telnet to port 3306 of the machine where the mysql > server is located, from your home machine? if so, what do you get? > If you're successful you'll get a connect bit that includes a string > that will show your mysql server version number. if you don't have > mysql access you'll likely see a mysqld reject of some nature. if > there's a network issue you'll just get a hang or you could get an > unreachable error. Yup, it works: $ telnet 173.13.167.209 3306 Trying 173.13.167.209... Connected to mail.mailnewsrss.com. Escape character is '^]'. 4 5.0.77aWqQ!OMq,slG]|xft5L[fConnection closed by foreign host.

2 1

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

Is the maximum permitted value for --hitcount documented anywhere? I reliably get a iptables-restore error when I specify a hitcount value greater than 20 but I cannot find any mention of there being a maximum value. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CENTOS 5.3 "kernel segfault at ..."
by mcclnx mcc 22 Dec '09

22 Dec '09

We have CENTOS 5.3 on DELL server. Recently I saw /var/log/messages have following pop-up: Dec 19 11:31:45 ORA2 kernel: oracle[18900]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff8eff2c60 error 4 Dec 19 11:31:49 ORA2 kernel: oracle[18902]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007ffff5e12a80 error 4 Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff228684d0 error 4 Anyone know why? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

routing with 2 ISPs
by David Hláčik 22 Dec '09

22 Dec '09

Hello guys, Sorry to bothering you. I had a small network with one ISP and firewall. eth1 -> Is connected to my ISP eth0 + eth0.1 , eth0.2 and etc are my local networks. All my network accesses internet via eth1. My routing table looks like the following : 213.194.242.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 10.123.20.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.11.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.8 10.123.42.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.5 10.123.123.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.7 10.123.40.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.4 10.123.30.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.44.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.6 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0.8 0.0.0.0 213.194.242.1 0.0.0.0 UG 0 0 0 eth1 Recently I have added secon provider via ADSL. ADSL modem is connected via eth0.8 . Using adsl-setup I have created ppp interface ppp0. Now I want to achieve the following : Computers from local network range 10.123.123.0/24 (eth0.7) should access internet using my second internet provider via ppp0. I believe that for that I need to use advanced networking and iproute package. I will add the second routing table named "adsl" and configure routing via ppp0 there. Together with that i need to set in iptables , nat table to masquerade all ips going out via ppp0. I believe I need to use ip command for this. And the finally my questions are : 1) Is there a good tutorial / howto for using iproute on the internet, except of the LARTC.org 2) Can i utilize by tools of CentOS, to have my configuration (with second routing table, using ip ) somehow stored - to be permanent when I will do machine restart? I mean there are networking-scripts /etc/sysconfing/network-scripts which can handle, IP assigment, virtual LANS, aliases even static routes. Can they handle advanced routing as well? Thank you milion times. David Hlacik

3 4

xm mem-set on an F11 xen guest
by Scot P. Floess 22 Dec '09

22 Dec '09

I just tried to change the memory for my F11 xen guest from 512 to 1024. After executing: xm mem-set workstation 1024 xm list shows the memory still being 512. Anyone else see this behavior before? I tried other values as well - but the memory is still what it was when I created the VM... I'm running CentOS 5.4 on an i386... Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros

2 2

Munin CGI Graphs
by Joseph L. Casale 21 Dec '09

21 Dec '09

Anyone here running Munin w/ the CGI graphs? I must have missed something in the munin wiki as its creating the correct html, yet the only errors I get are apache suggesting it can't find the files for the png's? The cgi script has all the perl modules it requires installed. Thanks, jlc

3 4

scp copy remote files does NOT copy link?
by mcclnx mcc 21 Dec '09

21 Dec '09

We have CENTOS 5.3 on DELL servers. I tried to us following command to copy remote files system to local: scp -rp oracle@ORA2:/home/app/oracle/10.2 . After SCP finish copy, I found some files on source file system using "link" but on target file systems it change to "physical file". Does there has way scp not change "link" setup? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

8 10

What determines default kernel after update?
by Les Mikesell 21 Dec '09

21 Dec '09

I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel, but after the last update noticed that grub was set to default to the non-PAE version although both were installed. Does anyone know how boot default is supposed to be determined? -- Les Mikesell lesmikesell(a)gmail.com

2 3

disk at 101% - but it isn't
by Alan McKay 21 Dec '09

21 Dec '09

Hey folks, Is there any way to get this to report the proper values again? The disk did fill up but we removed a good 60G of data but it still shows full [root@price-two:/]# df -h Filesystem Size Used Avail Use% Mounted on /dev/sda3 131G -64Z 131G 101% / /dev/sda1 99M 9.7M 84M 11% /boot /dev/sdb1 269G 60G 196G 24% /data none 4.0G 0 4.0G 0% /dev/shm -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 1

minimal set of packages for gnome desktop
by Janez Kosmrlj 21 Dec '09

21 Dec '09

Does anybody know what is the minimal set of packages, you have to install, to make gnome desktop work.

2 1

Cannot see samba in win Neighborhood
by Matias Morawicki 21 Dec '09

21 Dec '09

Hello u all, sorry to bring this issue back again, but I´ve been searching and trying all the advices suggested in previous posts and I still can´t see the samba server in the win network neighborhood. I can see the samba shares from win via net view \\servername but if I issue a plain "net view" samba won´t show up. only the win machines, the same i can see on the Neighborhood... and when I select local master = no Samba would stay without master! I issue smbclient -L servername -U% and the master section remains empty. It´s like samba is not being able to "talk" to the rest of the workgroup. (of course they are all in the same workgroup) I´m using "wins support = yes" and I´ve set the DHCP to set the clients to use the samba server as wins server.I´ve checked the win clients and they get the correct conf. I´ve tried stopping iptables, disabling Selinux, different smb.conf from the simple examples of t first chapters of samba by example, to plenty of options... that´s why I´m not including my smb.conf, because I´ve tried many variations, always with the same results. I tried a basic samba configuration in a ubuntu server in another box just to test, anf the win clients were able to see it in the neigbohood... so I guess the issue is on my Centos box. I tried the same smb.conf from that working ubuntu-samba and didn´t make it on the Centos... Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened with the default samba, so I´ve upgraded just in case...) I hope someone can point me some directions... thanks in advance!! Matias

3 2

storage servers crashing, hair being pulled out!
by Gordon McLellan 21 Dec '09

21 Dec '09

I have a trio of servers that like to reboot during high disk / network IO operations. They don't appear to panic, as I have kernel.panic = 0 in sysctl.conf. The syslog just shows normal messages, like samba complaining about browse master and then just syslogd starting up. The machines seem to crash when I'm not near the console, usually when I'm trying to pull data off them to another machine running backups. But, they've also crashed trying to copy data off them to other servers (via iscsi). Also, they have crashed being on the receiving end of data via nfs. Two of the servers are linked using drbd and heartbeat, the third is stand alone. Centos 5.4 x86-64 is the flavor of linux on all of them, pretty much vanilla except for the drbd/iscsi stuff. I want to go after the motherboard manufactorer, since I'm more willing to suspect three mobos in a bad lot than three CPUs, especially since one cpu is completely different than the other two. The other variable is the two machines running drbd have promise raid cards in them. I also have the same raid card in my personal server at home. That server also has a nack of crashing during heavy disk IO to the raid volume. The entire OS doesn't crash, just the raid volume, and the only way to bring it back is a reboot. I'm really at a loss on what to do next... Any suggestions? Gordon The hardware config of the drbd servers: Tyan i3210 ICH9 mobo Intel C2D 7500 cpu 4GB A-Data ram Promise ex8650 raid Supermicro 742TQ-865 chassis (865w psu) 8x 1Tb western digital green power drives The third machine: Tyan i3210 ICH9 mobo Intel C2Q 9400 cpu 8GB Mushkin ram dmraid 5 Antec something or other chassis 550W PC Power and Cooling PSU 7x 250gb seagate 7200's

6 7

RHEL 6 won't support Itanic, will support PowerPC, though
by Timo Schoeler 21 Dec '09

21 Dec '09

Hi list, after some discussion on #IRC on PowerPC I was waiting for some commitment on supported architectures in RHEL 6. As I just learnt, Itanic will be dumped, but there will be a PowerPC release: http://www.theregister.co.uk/2009/12/18/redhat_rhel6_itanium_dead/ Best, Timo (happy PowerPC enthusiast :)

3 3

College student printer for CentOS 5.4 x86_64?
by David McGuffey 21 Dec '09

21 Dec '09

Oldest son came back from college and wants a printer for his Dell laptop. I built it with CentOS 5.3 x86_64 several months ago and will upgrade it to 5.4 The Cannon printer he now has (bought with the laptop and Vista through the university book store), doesn't seem to have linux drivers. I built the machine with Vista and CentOS in dual-boot, so he could manage his iTunes and use the printer under Vista. He does almost all his college work under CentOS. Most of his papers are submitted electronically, but occasionally he has to print one. What would the community recommend? His needs are simple...mostly B&W papers. On rare occasions he needs to print a paper with color photos/graphs embedded. Not looking to spend a lot, just enough to satisfy the requirement. DaveM

12 17

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

>Some months ago there was discussions about 10 gbit performance with >Linux. Some guys were pushing over 70 Gbit/sec through a single linux >box. 70 Gbit/sec ? Maybe with port aggravation it's possible. Can you give some more info about that guys. To achieve that hight throughput maybe it's necessary to cut most of the OS and the kernel, leaving only the necessary. I'm very interested to read more information about the experiment. regards p.s here you can see 10 Gbit/s experiment http://haproxy.1wt.eu/10g.html

2 1

Inquiry:How to recognize the assigned device for attached usb memory?
by hadi motamedi 21 Dec '09

21 Dec '09

Dear All I have attached usb memory to my CentOS 5.2 server and I want to add it to my /etc/fstab . Can you please let me know how can I recognize it from my"/dev/?" list ? Thank you in advance

1 0

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

I will explain more deeply. I need to deploy a firewall(s) in front of web server farm because I need to do billing - I will use CentOS with iptables + ipset to store a list if my clients so when client doesn't pay his server's IP is out of the list and he can't access the web server. Second - I know that iptables is very heavy and it's not recommended to use it in gigabit firewall but I don't have a choice as far as I know only ipset works with iptables. I don't know can pf store 500 IPs in one list. Ipset is written for that purpose. I can't find information is there linux or BSD distribution with effective firewall that uses optimized algorithm to store hundreds of IPs and to forward huge traffic. Any idea? regards I'll second damn near everything nate said, and hopefully add a tidbit or two. If you're new to BSD, you may want to consider the pfsense project in the aforementioned active-active configuration. It gives you a nice, intuitive gui to manage your failover firewalls, if you insist on putting a firewall in front of your web servers. Better to secure the box, leave only the ports you need open on the public interfaces, and don't firewall them. Also, I'd strongly consider running your firewalls with no disk at all. A Live CD, CF card or USB Flash to boot off of, remote syslog and one less subsystem (disks) to buy/fail makes for some mighty cheap 1U servers. A single dual-core with core speeds above 3.0Ghz and 4GB of RAM is to pass Gb @ line rate - ethernet overhead. Truth be told, it's already being done on much less than that. You can also load balance your traffic, albiet somewhat primitively with it. If you really want massive throughput, consider toying around with extremely expensive 10G gear, size RAM appropriately, and see how PF performs under multi-processor, high-core speed. but if you're handling over a Gb of traffic and you can't split the application into multiple farms, that's the best move. Akamai, for instance, runs 10G to each rack, each rack has around 20-24 servers, and they run GB to the server. pfsense.org has extensive information about hardware requirements, features, and what you're looking to do. https://calomel.org/network_performance.html is an excellent BSD firewall performance site. One thing to note, you are claiming to want to deploy this as a passive bridge. You cannot do what you want to do running anything in bridge mode. The packets need to route somehow. Get a /29 from your colo provider and ask to have your existing block routed through it once you've tested it. Another option for a seamless failover, is to alias a different range of IP's to the server interfaces, put a /29 and whatever netblock you want to end up being your public IP block on the PFSense hardware. When you're convinced everything's working through rigorous testing, put a test domain up pointing to that block, modify virtualhost entries on the servers to respond to that domain with your production web site, and test some more. Once you're convinced that's working perfectly, make the changes in DNS to point your production domain at the IP's you want, and failover will happen with DNS convergence. Peter On Fri, Dec 18, 2009 at 9:06 AM, nate centos(a)linuxpowered.net > wrote: sadas sadas wrote: > > Hi, > I want to configure CentOS on powerful server with gigabit > adapters as transparent bridge and deploy it in front of server farm. > Can you tell how to optimize the OS for hight packet processing? What > configurations I need to do to achieve very hight speeds and thousands of > packets? iptables makes a TERRIBLE firewall, use pf instead http://www.openbsd.org/faq/pf/index.html Also consider how your going to provide redundancy, if you have a web server farm you want to protect them with at least two firewalls, not one. http://www.openbsd.org/faq/pf/carp.html I haven't used CARP myself but did setup a pair of pf firewalls about 5 years ago in a large network in bridging mode, the layer 3 fault tolerance was provided by OSPF on the core switches, the firewalls were active-active(with pfsync) since they were layer 2 only. Maybe someday linux will fix the overly complex iptables system to something that is more manageable, not holding my breath though. If you want really high speed(say multi GbE) though you'll want/need to go with an appliance based solution. Also since your referring to a web server farm, it is perfectly acceptable to not use firewalls these days, if you have a good load balancer that serves the same role as a firewall in that it only passes traffic that you specifically configure it to pass. Also in high traffic environments the performance of load balancers destroys most firewalls, making investing in a high end firewall a very expensive proposition. I've worked for the better part of the last 10 years with companies who did not have firewalls in front of their web servers for this reason, it didn't make sense $ wise, because the benefit wasn't there, and the added complexity, and performance implications wasn't worth it either. Talk to most load balancing companies and they'll tell you this themselves. nate

7 10

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

What about NetBSD? I heard that NetBSD has the best network stack out there. Maybe NetBSD with pf is the best choice? >>> I can't find information is there linux or BSD distribution with effective >>> firewall that uses optimized algorithm to store hundreds of IPs and to >>> forward huge traffic. Any idea? >> >> Hundreds? >> >> http://www.openbsd.org/faq/pf/tables.html >> >> "A table is used to hold a group of IPv4 and/or IPv6 addresses. Lookups >> against a table are very fast and consume less memory and processor time >> than lists. For this reason, a table is ideal for holding a large group of >> addresses as the lookup time on a table holding 50,000 addresses is only >> slightly more than for one holding 50 addresses. Tables can be used in the >> following ways: >> >> * source and/or destination address in filter, NAT, and redirection rules. >> * translation address in NAT rules. >> * redirection address in redirection rules. >> * destination address in route-to, reply-to, and dup-to filter rule >> options." >> >> nuff said ? >> >> I love linux, I've been using it for almost 15 years now, I absolutely >> hate iptables(and ipchains, and ipfwadm). By contrast I absolutely >> hate everything about OpenBSD except for pf(which I love, ipfw and >> ipf aren't too bad either, at least for the era), so I use OpenBSD >> for firewalls, and linux for everything else. > >I can back this; during 2009, I deployed a bunch of load balancers >running OpenBSD (using pf, carpd, and relayd). I used to be a super die >hard BSD guy, but through the years and having used/deployed/propagated >NetBSD, then FreeBSD, then OpenBSD, then NetBSD again, I took one of my >usual once-a-year looks at GNU/Linux (this time, it was CentOS, after >having worked with RHEL for some years), I got settled here. > >Long story short: I'd really recommend OpenBSD for your task. iptables >really sucks. I recently deployed some machines running several virtual >instances (however still the cheapest *proven* way to get several IP >stacks in Linux) doing L2 routing, I threw iptables off of that machines >because it just can't handle stuff at that rate. OpenBSD rocks, I even >have a setup running (active-active, load balanced) at about 40Mbps >using Alix boards [0] -- they rock, and they are no way busy. > >OpenBSDs documentation is the best out there, it's documentational >quality is what I really really badly miss in the Linux world. However, >the community is a bunch of (sorry in advance) assholes. But this is >well known throughout the internet, so: You have been warned. Great >product, totally lame vendor. ;) > >Timo > >[0] -- http://pcengines.ch/alix.htm > >> nate >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos >

9 9

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

>I've been using Linux (CentOS5) on gigabit firewalls, for thousands of >users. No problems. > >Just make sure ip_conntrack_max is big enough, so you don't run out of >connections. > >There are other things to tune to optimize the performance, but it's >certainly doable with linux+iptables. > >-- Pasi > Would you provide us information about how the firewalls are configured, the hardware, the total bandwidth passing the firewall in each direction and the connections in the busiest hours. regards

1 0

Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

Hi, I want to configure CentOS on powerful server with gigabit adapters as transparent bridge and deploy it in front of server farm. Can you tell how to optimize the OS for hight packet processing? What configurations I need to do to achieve very hight speeds and thousands of packets?

7 6

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 20 Dec '09

20 Dec '09

What solution for gigabit firewall can you suggest? Witch OS and packet filter is capable to atcheave hight performance and gigabit speeds? >Les Mikesell wrote: >> Timo Schoeler wrote: >>>> What about NetBSD? I heard that NetBSD has the best network stack out >>>> there. Maybe NetBSD with pf is the best choice? >>> NetBSD is a very nice OS, I personally like it most (out of all BSDs out >>> there); however, as can be read on >>> >>> http://www.netbsd.org/docs/network/pf.html >>> >>> there's the 'usual lag': OpenBSD implements feature X in 4.6, wait some >>> time to see it implemented elsewhere. >>> >>> One of the biggest strengths of OpenBSD is that it's really a completely >>> rounded piece of work. Keep it that way. pf will perform best on >>> OpenBSD, with all the nice features it has. >> >> Has anyone used Firewall Builder to create a complex set of iptables >> rules? Or compared performance where it built the same thing for >> linux/iptables and bsd/pf? >> > > >Are you joking? That piece of crap just puts everything into one single >chain. I never EVER use Firewall Builder after I saw the results the >first time. > >For a BRIDGING firewall, there is absolutely NO WAY that Linux/netfilter >can keep up with OpenBSD/pf. I doubt that Linux/netfilter can even reach >half the performance of OpenBSD/pf. >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos >

4 6

Supsend/hibernate on Samsung NC10
by Mathieu Baudier 20 Dec '09

20 Dec '09

Hi, I cannot have suspend and hibernate working on a Samsung NC10 (netbook) running CentOS 5.4 i386. When I try suspending/hibernating the screen becomes black (with a few logs, like "shrinking memory" for hibernate) and then the computer hangs and I have to force a shutdown with the power button. This wiki page seems to say that it should work out of the box: http://wiki.centos.org/HowTos/Laptops/Samsung/NC10 I tried to add the kernel arguments described here, to no avail: http://lists.centos.org/pipermail/centos/2007-June/040633.html Anyhow the problems doesn't seem to be the resume but rather getting into the suspended/hibernated state. When I log after a failed attempt, GNOME shows a popup saying that apparently we failed to recover from a suspend/hibernate state and that this may be a driver problem. A few more information about my settings which may be useful: - the root filesystem is installed on an LVM - I use the NetworkManager and not the network service - I disabled bluetooth (in order to remove all unused devices that may impact this problem) - [mbaudier@localhost ~]$ lshal | grep suspen org.freedesktop.Hal.Device.SystemPowerManagement.method_execpaths = {'hal-system-power-suspend', 'hal-system-power-suspend-clear-error', 'hal-system-power-hibernate', 'hal-system-power-hibernate-clear-error', 'hal-system-power-shutdown', 'hal-system-power-reboot', 'hal-system-power-set-power-save'} (string list) power_management.can_suspend_to_disk = true (bool) power_management.can_suspend_to_ram = true (bool) power_management.can_suspend = true (bool) Thanks in advance if somebody can tell me how I can analyse further / solve this. Cheers, Mathieu

2 1

mdadm help
by James Bensley 20 Dec '09

20 Dec '09

Hey List, So I had a 4 drive software RAID 5 set up consisting of /dev/sdb1, /dev/sdc1, /dev/sdd1 and /dev/sde1. I reinstalled my OS and after the reinstall I made the mistake of re-assembling the array incorrectly by typing "sudo mdadm --assemble /dev/md0 /dev/sdb /dev/sdc /dev/sdd /dev/sde" in a moment of stupidity. Obviously this didn't work and the array wouldn't mount and after a short period I realised my mistake and re-issuing the same command but specifying each drive partition (sdb1, sdc1 etc) instead of the drives (sdb, sdc etc) meant the raid would assembled and mount just dandy. My problem is that when I issue "sudo mdadm -E --scan" I get the following results: ARRAY /dev/md0 level=raid5 num-devices=4 UUID=fde94900:3f3f3bf6:e368bf24:bd0fce41 ARRAY /dev/md0 level=raid5 num-devices=4 UUID=3a2f1919:52f73b40:e368bf24:bd0fce41 These entries aren't in mdadm.conf but mdadm keeps picking up my first mistake and tries to make a raid out of my four drives and not the four partitions (the bottom line is the four UUIDs for the partitions on each drive, the top line is the four UUID for the drives). So now every time I restart the machine, the array isn't mounted because mdadm (I guess) doesn't know what to do as it has two sets of devices defined as /dev/md0. I can issues "sudo mdadm --stop /dev/md0" and "sudo mdadm --remove /dev/md0" and then re-assemble specifying the four partitions and carry on as normal but I can't work out how to tell mdadm to "forget" about the the top line of those results, if that makes any sence? I have removed the entries from fstab and from mdadm.conf so when I boot up the machine doesn't automatically try and mount the incorrect device but I still can't remove the top line from the results of "mdadm -E --scan" no matter what I do. I have rebooted and issued the command "sudo mdadm --assemble /dev/md1 /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1" and I can mount my array as normal but I was hoping that now there wouldn't be a clash in the results of "sudo mdadm -E --scan" (which there isn't, the second lines says "/dev/md1"), meaning that after a reboot the array would mount properly but that isn't the case. It is still trying to assemble the top line. Does anyone have any idea how I can rectify this? Thanks for reading. -- Regards, James ;) Ted Turner - "Sports is like a war without the killing." - http://www.brainyquote.com/quotes/authors/t/ted_turner.html

1 1

Removable drive configuration
by Bob McConnell 20 Dec '09

20 Dec '09

I have a box running CentOS 5.3 with two Dataport removable drive bays installed on the second IDE interface (/dev/hdc and hdd). I want to configure it so I can plug in and mount various drives at different times, including different size drives. So far it will only recognize the first drive I plug in, and only if I boot the box after inserting the drive. Is there any way to set it up so I can mount different size drives freely without having to reboot each time? Thank you, Bob McConnell N2SPP

3 2

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 20 Dec '09

20 Dec '09

The syntax is not a problem. The problem is in the performance. I suppose that if I configure OpenBSD to process the in/out packets only to layer 2 the performance will be much more than linux with iptables. >> I don't know jack about IPSet, but I know enabling or disabling hosts in >> bare stock PF without the gui in front of it is about as easy as it gets. > >IPTALES is the same; > >iptables -A [INPUT/FORWARD] -d -j [REJECT/DROP] > >> The PF configuration file syntax was designed from the ground up to be >> sane, unlike iptables, which typically needs some decent sysadmin scripting >> or using fwbuilder to make any good sense of. > >I beg to differ here. IPTABLES is not that hard when you understand it. Like >anything else, once you know what you are doing it isn't that hard. And no, >I have never used any GUI program to configure my firewalls. > >> There is no finer opensource firewall product on the market, in terms of >> performance, ease of configuration and use, and other issues. > >This is all subjective to the user. I would say that PF is a nightmare and >IPTABLES is easier to use. > >> If you're not opposed to vi, for what you're looking to accomplish, moving >> to BSD and pf is a no-brainer. PF can definitely handle a list of 500 >> hosts and anything else you've mentioned. It's absolutely capable, easier, >> and in general, for anything that involves packet filtering at all, about >> as good as it gets. > >Again this is all subjective to the user. > > >-- > >Regards >Robert > >Linux User #296285 >http://counter.li.org >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos >

4 4

xen domu not starting
by Peter Peltonen 20 Dec '09

20 Dec '09

After running out of swap and memory and freezing, a domU called web02 won't start up. Both dom0 and domU are running CentOS release 5.4. dom0's kernel is 2.6.18-164.el5xen and I'm running the stock xen from CentOS: xen-3.0.3-94.el5 After issuing 'xen create web02' I see the following in the xen console: Inode-cache hash table entries: 65536 (order: 6, 262144 bytes) vmalloc area: ee000000-f4ffe000, maxmem 2d800000 Memory: 1031328k/1056768k available (1478k kernel code, 16784k reserved, 548k data, 132k init, 311296k highmem) Checking if this processor honours the WP bit even in supervisor mode... Ok. Security Scaffold v1.0.0 initialized SELinux: Initializing. selinux_register_security: Registering secondary module capability Capability LSM initialized as secondary Mount-cache hash table entries: 512 (order: 0, 4096 bytes) CPU: L1 I cache: 32K, L1 D cache: 32K CPU: L2 cache: 6144K Enabling fast FPU save and restore... done. Enabling unmasked SIMD FPU exception support... done. Checking 'hlt' instruction... OK. CPU 1 irqstacks, hard=c0344000 soft=c0324000 Brought up 1 CPUs checking if image is initramfs... it is Freeing initrd memory: 1232k freed Grant table initialized NET: Registered protocol family 16 Initializing CPU#1 Brought up 2 VCPUs But after that it just hangs. SSH won't respond either. 'xm list' shows: web02 25 1023 2 -b---- 0.9 All I see in dom0's xend log is: Dec 20 13:18:10 kr kernel: device vif25.0 entered promiscuous mode Dec 20 13:18:10 kr kernel: ADDRCONF(NETDEV_UP): vif25.0: link is not ready Dec 20 13:18:12 kr kernel: blkback: ring-ref 8, event-channel 9, protocol 1 (x86_32-abi) Dec 20 13:18:12 kr kernel: ADDRCONF(NETDEV_CHANGE): vif25.0: link becomes ready Dec 20 13:18:12 kr kernel: xenbr0: topology change detected, propagating Dec 20 13:18:12 kr kernel: xenbr0: port 5(vif25.0) entering forwarding state In dom0's /var/log/messages I see: Dec 20 13:18:12 kr kernel: blkback: ring-ref 8, event-channel 9, protocol 1 (x86_32-abi) Dec 20 13:18:12 kr kernel: ADDRCONF(NETDEV_CHANGE): vif25.0: link becomes ready Dec 20 13:18:12 kr kernel: xenbr0: topology change detected, propagating Dec 20 13:18:12 kr kernel: xenbr0: port 5(vif25.0) entering forwarding state xm dmesg reports nothing unusual except these at the end: (XEN) mm.c:649:d22 Error getting mfn 3b6 (pfn 55555555) from L1 entry 00000000003b6025 for dom22 (XEN) mm.c:3341:d22 ptwr_emulate: fixing up invalid PAE PTE 00000000003b6025 But I've no idea when those messages have been created. I've disabled selinux in dom0. Other domUs are running fine, although I haven't tried rebooting them. Any ideas what could be wrong with the domU? Regards, Peter

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss