Discuss

discuss@lists.centos.org

34753 discussions

Monitoring OpenVPN TUNs with MRTG
by Eduardo Grosclaude 04 Oct '09

04 Oct '09

I want to check some client OpenVPN TUN interfaces with MRTG running at my VPN server, so I have to specify their OID interface numbers in mrtg.cfg. The problem is, these numbers are dynamic, as they may change whenever OpenVPN restarts for any reason... so, how can I write stanzas such as Target[somehostvpninterface] : ifInOctets.X&ifOutOctets.X:public@ <SOMEHOST.IP> without wiring up the X interface number into cfg file? Or, is there any method to keep X from changing at the clients? Any hints appreciated! -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

2 1

[Slightly OT] Data Preservation - More
by ML 03 Oct '09

03 Oct '09

Hi All, As it turns out these boxes are Red Hat Enterprise Linux and not Windows!. I am not sure how the person who asked me to do the work does not know what he had! I guess he was the CEO though! So I think this process becomes simpler. I should just be able to insert the live cd and do a cp -r on / to the destination USB drive, correct? -ML

5 11

Excessive NFS operations
by lhecking＠users.sourceforge.net 03 Oct '09

03 Oct '09

Reading the "waiting IOs" thread made me remember I have a similar problem that has been here for months, and I have no sulution yet. A single CentOS 5.2 x86_64 machine here is overloading our NetApp filer with excessive NFS getattr, lookup and access operations. The weird thing is that the number of these operations increases over time. I have an mrtg graph (which I didn't want to attach here) showing e.g. 200 NFS Ops on Monday, measured with filer-mrtg, going up to, e.g. 1200 in a straight line within days. nfsstat -l on the filer proves beyond doubt that the load is caused by this particular machine. dstat shows me which NFS operations are causing it. date/time | null gatr satr look aces ... 10-09 12:22:52| 0 0 0 0 0 10-09 12:22:53| 0 525 0 602 602 10-09 12:22:54| 0 1275 0 1464 1438 10-09 12:22:55| 0 0 0 0 0 10-09 12:22:56| 0 0 0 0 0 10-09 12:22:57| 0 0 0 0 0 10-09 12:22:58| 0 238 0 270 270 10-09 12:22:59| 0 1461 0 1663 1660 10-09 12:23:00| 0 205 0 133 114 10-09 12:23:01| 0 0 0 0 0 10-09 12:23:02| 0 1 0 0 0 10-09 12:23:03| 0 0 0 0 0 10-09 12:23:04| 0 1411 0 1574 1574 10-09 12:23:05| 0 498 0 465 466 10-09 12:23:06| 0 0 0 0 0 10-09 12:23:07| 0 0 0 0 0 10-09 12:23:08| 0 0 0 0 0 10-09 12:23:09| 0 1082 0 1178 1192 10-09 12:23:10| 0 790 0 885 865 This behaviour is somehow tied to the Gnome desktop. I have other machines running CentOS 5.2 x86_64 (at init level 3) which don't show this behaviour. I also have CentOS 5.2 i386 machines which don't show it either. None of the other machines on the lan show it - RHEL3 32 and 64bit, Solaris. What I'd need is a monitoring tool than can tie the NFS ops to process ids or applications. lsof isn't nearly as helpful here as I thought. I even copied this workstation user's files to another account, logged in and ran the same apps - and couldn't reproduce it. Ideas? Essentially, this makes CentOS 64bit undeployable in our environemnt.

12 29

du vs df size difference
by Ryan Pugatch 02 Oct '09

02 Oct '09

Hi all, Curious issue.. looking in to how much disk space is being used on a machine (CentOS 5.3). When I compare the output of du vs df, I am seeing a 12GB difference with du saying 8G used and df saying 20G used. # du -hcx / 8.0G total # df -h / Filesystem Size Used Avail Use% Mounted on /dev/xvda3 22G 20G 637M 97% / I recognize that in most cases du and df are not going to report the same but I am concerned about having a 12GB disparity. Does anyone have any thoughts about this or reason as to why there is a big difference? I have read a few articles online about it and none have really shown such a large difference. Thanks Ryan Pugatch Systems Administrator, TripAdvisor

14 27

Re: [CentOS] Asterisk and VOIP was Re: CentOS for non-tech user
by rb4centos＠gmail.com 02 Oct '09

02 Oct '09

-----Original Message----- From: Brian Mathis The difference is that CentOS is a general-purpose OS that can be used for many things, and has a much bigger installed base. That makes it more of a target and would likely be included in scanning tools. A custom OS running on a PBX might also have vulnerabilities, but it's also probably not a big target because of the diversity of systems out there and relative limited utility one would have if such a system were compromised. That you tend to tend to think of it as an "appliance" running the phone system does not change the fact that it's actually a full-blown server OS with the same issues as other servers. But if you're not connected to the Internet none of of this means anything. CentOS/Asterisk *would* be an appliance under these conditions. There are no "server" vulnerabilities because you're not connected to a LAN. Apologies if this is unreadable. I'm typing on my Centro and I do that very often.

6 7

Re: [CentOS] GnuPG for CentOS 5.3?
by lhecking＠users.sourceforge.net 02 Oct '09

02 Oct '09

> IMO the default install of gpg is good enough. Remember, you break it, you > get to keep the pieces. "Good enough" is in the eye of the beholder. If you want to use gpg-agent and pinentry, you need gpg2.

2 1

GnuPG for CentOS 5.3?
by Dick Roth 02 Oct '09

02 Oct '09

Good Morning-- I'm looking to shore up security in my system and with communications. Can you point me to the proper version of GnuPG for CentOS 5.3 (Final)? Thanks, Dick -- "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." --Benjamin Franklin 1755

3 2

Reply to ICMP echo request (type 8) on different (ethernet) interface
by Timo Schoeler 02 Oct '09

02 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I have a weird (?) problem here on a setup running CentOS 5.3 x86_64 (and OpenVZ, and some home-brew L2TP daemons, RIPd, BGPd, etc). There's a (VE in OpenVZ speak) virtual machine that has two ethernet interfaces, seen as eth0 and eth1, respectively. Those live in VLANs, but it's not important here. The thing is that on eth1 the default route lives, while on eth0 all traffic comes in. So, sending a ping to the IP address of eth0 tcpdump shows that the echo request (type 8) packet arrives on the machine. However, the machine does _not_ send an echo reply (type 0) back to the machine that pings eth0, maybe because it would have to emerge from eth1. One exception (an obvious one) is that IPs on the /29 where eth0 lives on _can_ ping eth0 and receive an answer -- this is because the packets don't have to take 'the default route', which lives on the other interface, eth1. This seems to me like decent behaviour. However, I really need eth0 to be able to be pinged from the outside world, it's totally okay for me that eth1 would 'answer' and send the echo replies instead of eth0. Is there anything I can tweak (via sysctl or whatever)? TIA, Timo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/ iD8DBQFKxOC0O/2mgkVVV7kRAgjGAJ9B292FpBzUSS3rpUcZgPE+utWn5wCglptc dNUSD4i4iF4KaAiG1+jFdeg= =QTM+ -----END PGP SIGNATURE-----

2 2

Problems getting scanner to work from xsane (from Gnome Menu or GIMP)
by Robert Heller 01 Oct '09

01 Oct '09

We have a networked HP OfficeJet All-In-One. I have the scanner working with the CentOS 5.3, except xsane is ignoring SANE_DEFAULT_DEVICE. scanimage does however take this environment variable just fine: server1.wendellfreelibrary.org% scanimage -L No scanners were identified. If you were expecting something different, check that the scanner is plugged in, turned on and detected by the sane-find-scanner tool (if appropriate). Please read the documentation which came with this software (README, FAQ, manpages). default device is `hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253' server1.wendellfreelibrary.org% scanimage -T scanimage: scanning image of size 638x1125 pixels at 24 bits/pixel scanimage: acquiring RGB frame, 8 bits/sample scanimage: reading one scanline, 1914 bytes... PASS scanimage: reading one byte... PASS scanimage: stepped read, 2 bytes... PASS scanimage: stepped read, 4 bytes... PASS scanimage: stepped read, 8 bytes... PASS scanimage: stepped read, 16 bytes... PASS scanimage: stepped read, 32 bytes... PASS scanimage: stepped read, 64 bytes... PASS scanimage: stepped read, 128 bytes... PASS scanimage: stepped read, 256 bytes... PASS scanimage: stepped read, 512 bytes... PASS scanimage: stepped read, 1024 bytes... PASS scanimage: stepped read, 2048 bytes... PASS scanimage: stepped read, 2047 bytes... PASS scanimage: stepped read, 1023 bytes... PASS scanimage: stepped read, 511 bytes... PASS scanimage: stepped read, 255 bytes... PASS scanimage: stepped read, 127 bytes... PASS scanimage: stepped read, 63 bytes... PASS scanimage: stepped read, 31 bytes... PASS scanimage: stepped read, 15 bytes... PASS scanimage: stepped read, 7 bytes... PASS scanimage: stepped read, 3 bytes... PASS server1.wendellfreelibrary.org% echo "$SANE_DEFAULT_DEVICE" hpaio:/net/Officejet_Pro_L7700?ip=192.168.1.253 xsane just pops up a little window "scanning for devices", the "no devices available". I believe I have things properly setup with cups: In /etc/cups/printers.conf: <Printer Officejet_Color> Info Location Printer Area #DeviceURI socket://192.168.1.253:9100 DeviceURI hp:/net/Officejet_Pro_L7700?ip=192.168.1.253 State Idle StateTime 1211313246 Accepting Yes Shared Yes JobSheets none none QuotaPeriod 0 PageLimit 0 KLimit 0 OpPolicy default ErrorPolicy retry-job </Printer> -- Robert Heller -- Get the Deepwoods Software FireFox Toolbar! Deepwoods Software -- Linux Installation and Administration http://www.deepsoft.com/ -- Web Hosting, with CGI and Database heller(a)deepsoft.com -- Contract Programming: C/C++, Tcl/Tk

3 4

Printing problems with Firefox
by Robert Heller 01 Oct '09

01 Oct '09

I have been having problems printing web pages with Firefox under CentOS 4.8: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.14) Gecko/2009091009 CentOS/3.0.14-1.el4.centos Firefox/3.0.14 What happens is that some of the text is 'scrambled' (looks like somehow something is messed up with the font encoding of whatever font is being used). Sometimes the postscript (or PDF) code being generated is broken (the ghostscript print filter crashes because the postscript is broken or incomplete. For one page I get the console message "could not load glyph 321". When I print to a file and select 'PDF' format, I get sometimes PDF files that ghostview (gv-3.6.2-2.el4)/ghostscript (ghostscript-7.07-33.11.el4) find errors with. Xpdf (xpdf-3.00-20.el4) also does not like these PDF files (lots of errors of various sorts). Even Adobe's acroread does not like them sometimes. Sometimes, with enough fussing with I can get the PDF files to print. Sometimes I end up taking a screen shot with gimp of the Adobe acroread window and print that. :-( I have done two things: 1) Created a fresh profile and re-populated with my bookmarks, passwords, and addons. No difference. 2) Created a fresh profile and did not re-populate with with anything (basically a 'vanila' profile). I still have problems. It appears that there is some system setting or some package I have loaded (I have a bunch of packages from rpmforge and epel installed). I also have some extra fonts installed. I am not sure what the problem is. I have Seamonkey installed and Seamonkey *seems* to print at least some pages properly (not extensively tested). I like firefox and have it all setup the way I like. Everything *except* printing works just fine. Firefox *used* to print just fine. I *think* the problem with printing started with Firefox 3.0.<mumble>, but I am not sure exactly. Oh, I *don't* run either the Gnome or KDE desktop environment -- I use a plain window manager only (FVWM in MWM mode). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Download the Model Railroad System http://www.deepsoft.com/ -- Binaries for Linux and MS-Windows heller(a)deepsoft.com -- http://www.deepsoft.com/ModelRailroadSystem/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss