Hi list.

I've been offered a Blade 2000 with an XVR-1000 graphics card, and was
hoping to run 4.4-current on it. Ideally would like to use it with X, but
can't seem to find any definitive information about whether this graphics
card works with xenocara.

Anyone have any experience with it? Does it work, and if so, how does it
perform?

(FWIW, I'm planning on using a Dell 2408WFP 24" TFT with the DVI connector
on the XVR-1000)

Cheers...

Hi Geoff,

Thanks for the reply, no I don't think it's the box, DMESG below.

Ok some test output where the IP pinged is the far end of a /30 subnet
on a dedicated 1G line rate router port of a 7609 cisco, sup 720 etc..

If I do a flood PING

# time ping -c 1000 -f 80.65.xxx.xxx
PING 80.65.xxx.xxx (80.65.xxx.xxx): 56 data bytes
--- 80.65.xxx.xxx ping statistics ---
1000 packets transmitted, 1000 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.241/0.279/10.349/0....

Hi Folks,

Looking for a bit of insight from you guys in the know.

I've deployed a 4.3 box as a pen test / scanning tool for our network. One of
the toys I've put on is HPING from the packages collection.

Ok so here's the problem if I do a 'hping -c 10000 -i u100 -1 xx.xx.xx.xx' I
generate a rather unimpressive 50pps. Issuing the same command on a gentoo box
(sorry) I get 9000+ pps.

In both cases HPING is v2.00.xx something. I've tried HPING3 but the result is
the same.

So HPING on OBSD is...

Most application protocols running on TCP are quite vulnerable to DoS,
but nobody has seemed to care so far...

This is simply the naphta attack. They don't really need to "use syn
cookies". They could simply ACK any SYN/ACK they receive, and that's it.

The attack is not new, and they are not proposing any counter-measures.

It doesn't mean does this does not need attention... but they are not
making any new contribution to the issue.

Kind regards,

--
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

According to a podcast I listened to, this is not what they try to
do. And even then, brute force attacks against SYN cookies have
already been discussed in the past. (although I agree that it usually
requires hard googling to spot the right documentation)

Kind regards,

--
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

That would be Shalunov's netkill attack, which aims at exhausting
memory by tying it to both PCBs and socket send buffers.

--
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

A little bit less vage info can be found here

http://tinyurl.com/3hv3kf

--

Stephan A. Rickauer

-----------------------------------------------------------
Institute of Neuroinformatics Tel +41 44 635 30 50
University / ETH Zurich Sec +41 44 635 30 52
Winterthurerstrasse 190 Fax +41 44 635 30 53
CH-8057 Zurich Web www.ini.uzh.ch

On Wed, Oct 01, 2008 at 03:58:22PM +0200, Claudio Jeker wrote:
| On Wed, Oct 01, 2008 at 03:31:00PM +0200, Stephan A. Rickauer wrote:
| > On Wed, 2008-10-01 at 14:52 +0200, Leon Dippenaar wrote:
| > > Hi there,
| > >
| > > is there any weight to this new story on slashdot
| > > http://it.slashdot.org/it/08/10/01/0127245.shtml
| > >
| > > about a new attacker possible to break any tcp stack? Sounds rather
| > > shady, so here I am, perhaps you guys have y...

On Wed, Oct 1, 2008 at 4:22 PM, Duncan Patton a Campbell

When I read the pseudo article, I had the impression that the server
does not have to implement SYN cookies. Their sockstress program uses
(client) SYN cookies to estabilish a lot of TCP connections with
minimal own resources...

Cheers,

Dries

Hi,

int main()
{
int i;
short int *screen = (short int *) 0xB8000;
char msg[]="Hello World";

for(i=0; msg[i] != '\0'; *(screen++) = 0x1F00 | msg[i], ++i);
for(;;);
return 0;
}

When i compiled i got a very big main.bin file more then 960MByte, so i
tried to change the char vector with only a char and it works fine. I
think the problem was the buffer overflow protector system that take the
.nodata segment in other address, or something like that... (readelf -S
main)

So how ...

What does USE_SOCKETS do for you? Perhaps there's another way to
do things that would let you use OpenBSD's dhcpd. (In -current and
4.4 we now support DHCP failover too, by the way).

Hi,

recommended procedure (if you can do this): Get a serial console and
run 'script' before you connect (or otherwise activate logging for your
terminal program). That way, you won't lose what you already have if

A better way should be to say

# echo 'set image /bsd.mp' > /etc/boot.conf

Kind regards,
--Toni++

What about a VPN? You can filter on vpn ip's.

--
Giancarlo Razzolini
http://lock.razzolini.adm.br
Linux User 172199
Red Hat Certified Engineer no:804006389722501
Verify:https://www.redhat.com/certification/rhce/current/
Moleque Sem Conteudo Numero #002
OpenBSD Stable
Ubuntu 8.04 Hardy Heron
4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85

I think he's asking for how to read package descriptions without
downloading everything. But pkg_info has to download the entirety of
each package first because a package is a compressed archive file.

If you are looking for package descriptions, install the ports tree
and read the Makefiles. Also, if you are lazy/not on an OpenBSD box,
most of the descriptions are available at
http://www.openbsd.org/4.3_packages/.

-Nick

*LOL*

There are some "semi-finished" ports floating around in the archives.
You might want to make a stab at it, too.

Kind regards,
--Toni++

USAGE
esd [options]

-d DEVICE force esd to use sound device DEVICE
-b run server in 8 bit sound mode
-r RATE run server at sample rate of RATE
-as SECS free audio device after SECS of inactivity
-unix use unix domain sockets instead of tcp/ip
-tcp use tcp/ip sockets instead of unix domain
-public make tcp/ip access public (other than localhost)
-promiscuous start un...

Hi,

this doesn't have to mean much.

I recently wanted to install OpenBSD on a machine which also claimed to
have all file systems clean, but emitted spurious error messages in
white-on-blue on the screen nevertheless. Running fsck -f on the file
system revealed that it *was* corrupted, and trying to repair it
failed, repeatedly, always with the same error messages. I concluded
that the drive was bad.

Kind regards,
--Toni++

from pf.conf(5):

user <user>
This rule only applies to packets of sockets owned by the specified
user. For outgoing connections initiated from the firewall, this is the
user that opened the connection. For incoming connections to the
firewall itself, this is the user that listens on the destination port.
For forwarded connections, where the firewall is not a connection
endpoint, the user and group are unknown.

don't know if that could be useful for your purpose, but it sounds a ...