#arpnetworks 2009-10-02,Fri

If you really hate both your body and sleep, I recommend the uberman polyphasic sleep schedule.
25 minutes every four hours.
It's all you need, really.

[08:53]

sroute

Sounds interesting. This quote however is what I expected to find quickly: "It is important to note that there are no studies as to the long-term physical or physiological impact of this sleep cycle. I really don't know if this cycle is causing long-term damage to myself or not, and if this concerns you, I wouldn't attempt the cycle. "

[08:56]

ballen

heh

[08:56]

mike-burns

That's pretty accurate.

[08:56]

sroute

It seems that as a general rule it isn't nice to fool with Mother Nature.

[08:56]

mike-burns

I blogged my attempt at it here: http://fucksleep.wordpress.com/

[08:56]

sroute

Quote is from here: http://www.kuro5hin.org/story/2002/4/15/103358/720

[08:57]

mike-burns

Yeah.
One thing you'd discover if you attempted such a schedule is that you now have way more time in the day than you'd expect, and not enough energy to use it. So you quickly read everything about it.

[08:57]

sroute

As I age I'm finding I need more but I still attempt to work the hours I used to.
Kitchen guys are here. Gotta run

[08:59]

ballen

k bye

[08:59]

..... (idle for 21mn)

***

ballen is now known as ballen|away

[09:20]

.... (idle for 19mn)

ballen|away is now known as ballen

[09:39]

........ (idle for 35mn)

ballen is now known as ballen|away

[10:14]

....... (idle for 33mn)

ballen|away is now known as ballen

[10:47]

....... (idle for 30mn)

jeev

Oct 2 04:24:23 www kernel: ad0: TIMEOUT - WRITE_DMA retrying (1 retry left) LBA=6384687
heh
i never expected that on a vps

[11:17]

***

ballen has quit IRC (Read error: 113 (No route to host))

[11:20]

......... (idle for 41mn)

dbgi

[12:01]

.... (idle for 17mn)

***

Thorgrimr has quit IRC (anthony.freenode.net irc.freenode.net)
up_the_irons has quit IRC (anthony.freenode.net irc.freenode.net)
toddf has quit IRC (anthony.freenode.net irc.freenode.net)
nerdd has quit IRC (anthony.freenode.net irc.freenode.net)
timburke has quit IRC (anthony.freenode.net irc.freenode.net)
sroute has quit IRC (anthony.freenode.net irc.freenode.net)
baklava has quit IRC (anthony.freenode.net irc.freenode.net)
jester1 has quit IRC (anthony.freenode.net irc.freenode.net)
cablehead has quit IRC (anthony.freenode.net irc.freenode.net)
Qsource has quit IRC (anthony.freenode.net irc.freenode.net)
Rada has quit IRC (anthony.freenode.net irc.freenode.net)
mike-burns has quit IRC (anthony.freenode.net irc.freenode.net)
visinin has quit IRC (anthony.freenode.net irc.freenode.net)
heavysixer has quit IRC (anthony.freenode.net irc.freenode.net)
vtoms has quit IRC (anthony.freenode.net irc.freenode.net)
Nat_UB has quit IRC (anthony.freenode.net irc.freenode.net)
obsidieth has quit IRC (anthony.freenode.net irc.freenode.net)
up_the_irons has joined #arpnetworks
visinin has joined #arpnetworks
vtoms has joined #arpnetworks
heavysixer has joined #arpnetworks
sroute has joined #arpnetworks
mike-burns has joined #arpnetworks
nerdd has joined #arpnetworks
Rada has joined #arpnetworks
timburke has joined #arpnetworks
toddf has joined #arpnetworks
Thorgrimr has joined #arpnetworks
cablehead has joined #arpnetworks
obsidieth has joined #arpnetworks
baklava has joined #arpnetworks
Qsource has joined #arpnetworks
jester1 has joined #arpnetworks
Nat_UB has joined #arpnetworks
irc.freenode.net sets mode: +o up_the_irons

[12:18]

visinin has quit IRC ("adetr")

[12:24]

.... (idle for 15mn)

bithash has joined #arpnetworks

[12:39]

.... (idle for 17mn)

jeev

getting annoying brute forces
probably gonna change ssh port

[12:56]

nerdd

You could also just use restrictions in /etc/hosts.allow - those denied won't even get a chance to authenticate

[13:05]

jeev

never read about it
thought hosts.allow was of known things
ips and what not

[13:06]

nerdd

You can both allow and deny hosts access in hosts.allow - e.g. allow connections from only your ip and denying it from all others
Or you can install denyhosts, that monitors /var/log/auth.log and based on rules you configure add and remove ips in the hosts.allow

[13:08]

bithash

jeev: you could also try bruteblock, its a nifty little tool that can be custom configured to add IPs to to the firewall based on parameters set by you.

[13:13]

jeev

using bruteblock
but it's a million random ips
coming slowly
yea i know neerd
i'll just change the port, i dont care

[13:18]

bithash

[13:19]

nerdd

I've got to check bruteblock out - I didn't know about that. Sounds cool

[13:20]

bithash

nerdd: I also use it for apache
but I assume you are using ipfw

[13:21]

nerdd

I've actually never tried using ipfw for anything yet

[13:23]

bithash

[13:24]

...... (idle for 25mn)

***

heavysixer has quit IRC ()

[13:49]

...... (idle for 25mn)

bithash has left

[14:14]

heavysixer has joined #arpnetworks
vtoms has quit IRC ("Leaving.")
sroute has quit IRC (anthony.freenode.net irc.freenode.net)
Thorgrimr has quit IRC (anthony.freenode.net irc.freenode.net)
up_the_irons has quit IRC (anthony.freenode.net irc.freenode.net)
toddf has quit IRC (anthony.freenode.net irc.freenode.net)
nerdd has quit IRC (anthony.freenode.net irc.freenode.net)
timburke has quit IRC (anthony.freenode.net irc.freenode.net)
jester1 has quit IRC (anthony.freenode.net irc.freenode.net)
cablehead has quit IRC (anthony.freenode.net irc.freenode.net)
heavysixer has quit IRC (anthony.freenode.net irc.freenode.net)
Qsource has quit IRC (anthony.freenode.net irc.freenode.net)
Rada has quit IRC (anthony.freenode.net irc.freenode.net)
mike-burns has quit IRC (anthony.freenode.net irc.freenode.net)
Nat_UB has quit IRC (anthony.freenode.net irc.freenode.net)
obsidieth has quit IRC (anthony.freenode.net irc.freenode.net)
baklava has quit IRC (anthony.freenode.net irc.freenode.net)
up_the_irons has joined #arpnetworks
heavysixer has joined #arpnetworks
sroute has joined #arpnetworks
mike-burns has joined #arpnetworks
nerdd has joined #arpnetworks
Rada has joined #arpnetworks
timburke has joined #arpnetworks
toddf has joined #arpnetworks
Thorgrimr has joined #arpnetworks
cablehead has joined #arpnetworks
obsidieth has joined #arpnetworks
Nat_UB has joined #arpnetworks
jester1 has joined #arpnetworks
Qsource has joined #arpnetworks
irc.freenode.net sets mode: +o up_the_irons
baklava has joined #arpnetworks

[14:19]

............... (idle for 1h12mn)

ballen has joined #arpnetworks

[15:39]

ballen

oh hi

[15:39]

......... (idle for 40mn)

***

bithash has joined #arpnetworks

[16:19]

heavysixer has quit IRC ()

[16:28]

bithash has left

[16:42]

.................... (idle for 1h37mn)

BeBoo_ has joined #arpnetworks

[18:19]

BeBoo_

can anyone give me the default name servers? I need to set up my forwarders?
scratch the last ?

[18:20]

Nat_UB

BeBoo...u find them?

[18:20]

BeBoo_

find what? i need them. i changed my resolv.conf and never wrote down the IPs

[18:21]

ballen

ballen shrugs, uses OpenDNS

[18:21]

Nat_UB

BeBoo...I only have one...sent via PM

[18:22]

BeBoo_

thanks

[18:23]

Nat_UB

Nat_UB uses OpenDNS typically...haven't modified this VPS yet

[18:23]

BeBoo_

but wouldn't resolutions be quicker if it stayed on the same network rather than leaving the network to go to opendns?
i'm sure the time difference would be negligable

[18:24]

ballen

actually I found it was faster to use opendns

[18:25]

Nat_UB

Depends on how fast / overloaded the local might get...

[18:25]

BeBoo_

i use opendns here at home... was just thinking it might be better to keep it local, is all
thanks =]

[18:26]

Nat_UB

Only use IP's...eliminates DNS slowness

[18:26]

BeBoo_

of course

[18:27]

jeev

why not run your own cache

[18:36]

ballen

jeev: if you don't want to use the memory

[18:37]

jeev

i see
sometimes i dont think
i really need to make time to redo some of my servers, secure, passwords and all
i have maybe 75 outdated servers now
security ones.

[18:38]

dbgi

lala

[18:41]

Nat_UB

Eric Clapton?

[18:42]

...... (idle for 29mn)

***

heavysixer has joined #arpnetworks

[19:11]

heavysixer has quit IRC ()

[19:21]

BeBoo_

anyone good with bash scripting? I have a simple question if i may

[19:28]

ballen

shoot

[19:28]

BeBoo_

i'm not sure it's possible with bash but i'm hoping. I know i can echo stuff out. if there a way to... delete what was just echoed and reuse the line?
sorry if i confuse you... not sure how to reword it
Like, i want to echo "Configuring..." then replace that with "Building..."
without using like 10 lines

[19:29]

ballen

so
is Configuring... a variable
or stored as a var

[19:31]

BeBoo_

it could be
i know how to set vars
thats not what i am asking, tho
i'm talking about output.

[19:31]

ballen

ohhh
so you literally want a way

[19:32]

sroute

jeev: to stop brute force implement pf -- firewall. I have it on all my servers, except for those that sit behind a firewall themselves. Easy.

[19:32]

ballen

for echo "Configuring..." to output building...

[19:32]

BeBoo_

no
-_-

[19:32]

ballen

sigh...

[19:32]

BeBoo_

lemme try it this way...
user runs the script...

[19:32]

ballen

[19:33]

BeBoo_

echo "Welcome! Gonna build..."
then i would echo "Configuring..."

[19:33]

sroute

here's the relevant line for pf config - automatically shoves offenders into a block table after four attempts within a certain period of time
pass in quick proto { tcp, udp } from any to any port ssh flags S/SA keep state (max-src-conn 15, max-src-conn-rate 4/30, overload <ssh-offenders> flush )

[19:33]

BeBoo_

when it's done instead of echoing "Building..." below COnfiguring... i want it to replace that line
remove configuring... and repalce it with building....

[19:33]

ballen

ohhhh
yea no idea how to do that

[19:34]

BeBoo_

k
i don't even know what to call it
lol

[19:34]

ballen

replacing text inline on the terminal
without a new line

[19:34]

BeBoo_

yeahh there ya go
yess

[19:35]

ballen

maybe stty?
not sure though
but would be worth checking

[19:35]

BeBoo_

ooo
that looks promising
BeBoo_ reads

[19:36]

***

N00B_ has joined #arpnetworks

[19:37]

N00B_

hey anyone in here ever use ns? i have a quick question..

[19:37]

BeBoo_

ns as in...?

[19:38]

N00B_

network simulator
ns-2/3

[19:38]

BeBoo_

not me sorry

[19:39]

N00B_

but you know networking...right?
it may seem trivial but i'm having some trouble understanding something..
Just a quick question: i'm running the most basic setup of 2 computers with a single link. Lets say i have a link delay of 1000ms running on a 1Mbps, packet of 500 and packet time every 0.005 seconds. What role exactly is the link delay playing in this situation?

[19:39]

ballen

ballen shrugs

[19:41]

N00B_

what channel is this?

[19:41]

ballen

Arp Networks is a VPS, hosting, and colo provider

[19:41]

N00B_

r u guys into sales or something?

[19:41]

ballen

hah no

[19:42]

up_the_irons

N00B_: read your networking book and learn something; no pasting homework questions ;)

[19:42]

N00B_

lol

[19:43]

up_the_irons

ballen: a name like "arp networks" has got me college text book questions emailed to me over the years, I know how this goes :)

[19:43]

N00B_

yu guys are doing VPS...surely...surely you know what a link delay might do

[19:43]

ballen

surely
we do

[19:43]

N00B_

..secret society..

[19:44]

up_the_irons

sroute: i like that pf command
up_the_irons writes it down

[19:44]

N00B_

..okay cool :)

[19:45]

up_the_irons

sroute: i do the same thing on my VM host machines, every VM is actually already protected (after 10 SYN's for SSH within a minute, you're blocked for 1 minute)

[19:45]

ballen

up_the_irons: why not just turn off password auth
and not worry about it

[19:45]

up_the_irons

ballen: it is, but this is for downstream VMs
can't be sure every customer turns off password auth

[19:46]

ballen

ahh

[19:46]

BeBoo_

keys are the devil
;x

[19:46]

up_the_irons

a way to help them protect themselves

[19:46]

ballen

so you have some built in firewall rules that protects us all
well not built-in
you know what i mean

[19:46]

up_the_irons

yeah
i saw a certain pattern of traffic disappear after i did that
it was all the brute force scans

[19:48]

ballen

yep
omni-present
on the tubes

[19:48]

up_the_irons

TOOBS

[19:48]

N00B_

...bodyboarding?

[19:49]

***

BeBoo_ has quit IRC (Remote closed the connection)
BeBoo_ has joined #arpnetworks
heavysixer has joined #arpnetworks

[19:50]

jeev

up_the_irons
you dont set kern.hz for customers ?
it slows down ones CPU but..
it's suggested in bsd's manual for freebsd guest

[20:02]

up_the_irons

link?

[20:02]

ballen

thats it set to now by default in 7.2
thought they fixed that

[20:03]

jeev

http://www.freebsd.org/doc/en/books/handbook/virtualization-guest.html
pretty much mentioned for every type

[20:03]

up_the_irons

i don't set kern.hz, for the record

[20:03]

jeev

i've done tests with and witout
without

[20:03]

ballen

sysctl -a | grep kern.hz
kern.hz: 1000

[20:03]

jeev

The most important step is to reduce the kern.hz tunable to reduce the CPU utilization of FreeBSD under the Parallels environment. This is accomplished by adding the following line to /boot/loader.conf:
kern.hz=100
Without this setting, an idle FreeBSD Parallels guest OS will use roughly 15% of the CPU of a single processor iMac�. After this change the usage will be closer to a mere 5%.
guess it allows you to sell more

[20:03]

ballen

I believe there is some issues with setting it lower
performance wise

[20:04]

jeev

yea

[20:04]

ballen

up_the_irons

[20:04]

jeev

client loses performance

[20:04]

ballen

[20:04]

jeev

my wht benchmark went from 78 to 58
on my own server

[20:05]

ballen

up_the_irons how much does an idle VM take right now on the CPU

[20:05]

jeev

root 7535 2.1 26.1 1188252 1060452 pts/1 Sl+ 09:10 14:24 qemu-system-x86_64 disk0.qcow2 -vga std -net nic,model=e1000,macaddr=00:11:22:33:44:55 -net tap -monitor stdio -vnc :2 -smp 1 -m 1024
root 8223 14.8 26.1 1191268 1061392 pts/3 Sl+ 18:38 13:02 qemu-system-x86_64 disk1.qcow2 -vga std -net nic,model=e1000,macaddr=00:11:22:33:44:56 -net tap -monitor stdio -vnc :3 -smp 1 -m 1024
not sure why mine does that
none are being used

[20:05]

up_the_irons

ballen: not a whole lot

[20:06]

jeev

virtualization rules

[20:06]

ballen

up_the_irons: I wouldn't worry about it then, I've messed with it a bit in my VMware install and I don't notice much

[20:06]

up_the_irons

ballen: yeah i'm not feeling any pain with the current setting and no one has complained == not an issue ;)

[20:07]

ballen

http://unilogiclabs.com/signup - Invite Code: arp_networks what I've been working on
feel free to play

[20:07]

up_the_irons

jeev: but thanks for bringing it up, it might be important later on

[20:07]

ballen

Supposidly in 8.0 kern.hz will be set back to 100

[20:08]

up_the_irons

thanks, checking it out!

[20:08]

ballen

there I made an idea that explains it a bit
ugh... damn bugs

[20:11]

***

Nat_UB has quit IRC (anthony.freenode.net irc.freenode.net)
obsidieth has quit IRC (anthony.freenode.net irc.freenode.net)
Nat_UB has joined #arpnetworks
heavysixer has quit IRC ()
N00B_ has quit IRC ("(Quit: Because i have. ok?)")
obsidieth has joined #arpnetworks

[20:14]

...... (idle for 25mn)

visinin has joined #arpnetworks

[20:45]

ballen

up_the_irons: get what the app is all about?

[20:45]

BeBoo_

ballen: i think i found it... using a carriage return will place the cursor back to the beginning but i somehow have to clear the line

[20:50]

ballen

heh
cool, let me know if you get it

[20:51]

BeBoo_

sure

[20:51]

visinin

BeBoo_: what are you trying to do?

[20:51]

BeBoo_

visinin: as ballen put it: <ballen> replacing text inline on the terminal
i want to reuse the line instead of using newlines

[20:52]

visinin

gotcha

[20:53]

BeBoo_

i am using a carriage return to bring the cursor to the beginning and it works

[20:53]

visinin

yeah, that's the best way to do it

[20:53]

BeBoo_

but if the next like is short, it looks weird

[20:53]

visinin

well yeah

[20:53]

BeBoo_

i need to find a way to clear the rest of the line

[20:53]

visinin

i've done this before, let me dig up how i did it

[20:53]

BeBoo_

i might just use spaces for the time
ooo
BeBoo_ grins

[20:53]

visinin

okay
let me try something real quick, think i found it

[20:56]

***

heavysixer has joined #arpnetworks

[21:07]

mike-burns

BeBoo_: So far as I know (which isn't much) you need ncurses to do what you want.
However the r idea is promising. Maybe 'echo -n' is what you want, too.

[21:10]

visinin

nah you don't
basically
ugh, this pastebin is garbage
printf("e[K"); /* this escape code erases from the right-side of the cursor to the end of the line */

[21:10]

BeBoo_

mike-burns: already am using -en
but if the second line is shorter than the first it looks weird

[21:11]

visinin

ah, you're doing this with bash?

[21:11]

BeBoo_

like blah blahah
yes
printf works in bash
doesn't it?

[21:11]

visinin

that escape sequence might not
hold on just a sec

[21:12]

BeBoo_

[21:12]

visinin

you should be able to just
echo -ne "033[K"
that'll clear the rest of the line
yeah, that works!

[21:12]

BeBoo_

lemme try it
omg i love you visinin
lol

[21:18]

visinin

:D!

http://ascii-table.com/ansi-escape-sequences-vt-100.php

keep that around

[21:19]

BeBoo_

bookmarked =]

[21:19]

visinin

excellent!

[21:19]

BeBoo_

so 033 is escape ?

[21:19]

visinin

yeah
and you can like change color with it too

[21:20]

BeBoo_

i know how to do colors

[21:20]

visinin

yeah

[21:20]

BeBoo_

just nothing else
but now i do
=]
it's a stupid little script too
i'm making a simple script that downloads the eggie source, configures and builds it

[21:20]

jeev

http://lubbock.craigslist.org/rnr/1403715949.html

[21:28]

.... (idle for 18mn)

***

[FBI] starts logging #arpnetworks at Fri Oct 02 21:46:49 2009
[FBI] has joined #arpnetworks

[21:46]

jeev

jeev runs

[21:46]

BeBoo_

z0mg

[21:59]

ballen

wonder where he's been

[22:00]

.... (idle for 16mn)

***

visinin has quit IRC ("sleeeeeep")

[22:16]

sroute

back... up_the_irons cool that you are doing that. That might explain why I see relatively few hits on my arp VM as opposed to my own hardware elsewhere.

[22:18]

..... (idle for 23mn)

BeBoo_

yay my script works nicely now
i'm happy =]

[22:41]

ballen

nice

[22:42]

BeBoo_

it downloads, configures and installs eggdrop without any interaction

[22:42]

ballen