#arpnetworks 2010-10-18,Mon

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***LT has joined #arpnetworks [01:33]
............................................. (idle for 3h44mn)
phlux has joined #arpnetworks
phlux is now known as Guest91630
cmeiklejohn has quit IRC (Ping timeout: 272 seconds)
cmeiklejohn has joined #arpnetworks
Guest85322 has quit IRC (Read error: Connection reset by peer)
[05:17]
Lefty has quit IRC (Read error: Connection reset by peer)
BarberRonny has quit IRC (Read error: Connection reset by peer)
Lefty has joined #arpnetworks
RonnyBarber has joined #arpnetworks
[05:25]
............ (idle for 57mn)
cmeiklejohn has quit IRC (Quit: leaving)
cmeiklejohn has joined #arpnetworks
[06:23]
.............. (idle for 1h9mn)
vcsanyone alive
ipv6 still down
[07:33]
mattx86again? (not that I'd know) [07:36]
vcsyep [07:36]
jpalmervcs:
--- ipv6.google.com ping statistics ---
3 packets transmitted, 2 received, 33% packet loss, time 2001ms
from arp.
[07:36]
vcsjpalmer: last night, i saw everyone on ipv6 her on irc timeout
many friends ipv6 went down too
traceroute6 to ipv6.l.google.com (2001:4860:8011::63) from 2607:f2f8:a5c0::13, 64 hops max, 12 byte packets
1 * * *
[07:36]
jpalmervcs: oh, since you were in this channel, I assumed you meant.. ipv6 at arp was down [07:37]
vcs2 * * v440.r4.lax2.trit.net 0.89 ms
3 2001:450:2002:de::1 1.28 ms 1.109 ms 1.309 ms
4 2001:4860:1:1:0:ddd:0:6 155.087 ms 155.254 ms 155.155 ms
5 2001:4860::1:0:607 161.527 ms 156.539 ms 153.532 ms
6 2001:4860:0:1::137 162.971 ms 153.774 ms 156.663 ms
Terminated
[07:37]
jpalmerdude, pastebin. [07:37]
vcslol sorry
jpalmer: thats odd
i have to ping and traceroute before it came back up o.O
[07:37]
jpalmertraceroute and ping6 both work for me from ARP to ipv6.google.com [07:38]
vcsheh
im still getting mad packet loss
107 packets transmitted, 21 packets received, 80.4% packet loss
[07:39]
jpalmerit's probably one of OpenBSD's "security" paranoias :P "he'n not using IPv6 much, lets shut it down so I don't get hacked!" [07:40]
vcserrr
there were no problems till last night
:P
when everyones ipv6 died
OpenBSD is not that paranoid
its not like it runs SELinux :P
Did you know that SELinux is not compatible with any relational datbase system? Random fact :P
[07:40]
jpalmerone sec, I'll ping6 -c 100 [07:41]
***nerdd has joined #arpnetworks [07:41]
jpalmerreally? I have tons of mysql servers with SELinux enabled. [07:41]
vcswell you have to tweak it to make it work [07:41]
jpalmerI did nothing. [07:41]
vcsheh, must be a CentOS/Ubuntu thing [07:42]
***nerdd_ has quit IRC (Read error: Operation timed out) [07:42]
vcsim forced to use those for work [07:42]
jpalmermy mysql servers are Cent [07:42]
vcsare you using php?
i always get access denied using php mysql
if SELInux is on centos
get the same thing with mssql also
[07:42]
jpalmer--- ipv6.google.com ping statistics ---
100 packets transmitted, 100 received, 0% packet loss, time 99170ms
[07:43]
vcso.O
maybe ill give her a reboot
[07:43]
jpalmervcs: no, I don't use php (and, if I could migrate from mysql, to postgresql, I'd be thrilled) but no php. [07:44]
***vcs has quit IRC (Remote host closed the connection) [07:44]
vcs has joined #arpnetworks [07:53]
vcsheh still no good
traceroute results to the box: http://pastebin.com/31jGP62P
[07:53]
jpalmerwhat is your ipv6 address? I'll ping6 -c you. [08:04]
vcsinet6 2607:f2f8:a5c0::2 prefixlen 48
i have not changed anything (firewall/network settings)
everything had been working great since i setup ipv6
[08:06]
jpalmer? you there man :) [08:13]
jpalmervcs: sorry, at work. let me ping6 you.
From 2607:f2f8:a060::1 icmp_seq=2 Destination unreachable: Address unreachable
[08:15]
vcshmmm [08:16]
jpalmertraceroute to 2607:f2f8:a5c0::2 (2607:f2f8:a5c0::2), 30 hops max, 40 byte packets 1 2607:f2f8:a060::1 (2607:f2f8:a060::1) 1.623 ms 1.465 ms 1.381 ms 2 2607:f2f8:a060::1 (2607:f2f8:a060::1) 2566.203 ms !H 2999.831 ms !H *
nasty paste. but, it appears to be some kind of routing issue.
[08:18]
LTmaybe just the particular kvm box you're on vcs? would log a ticket for up_the_irons if I were you [08:19]
vcskk [08:19]
jpalmervcs: and, I lied. on the box I'm pinging you from... it's mysql, and php on Cent. didn't have to do anything with SElinux
php-cli though, not via apache/lighty/nginx
[08:20]
vcsahh
well php-*sql HATES selinux
haha
i wasted 6 hours one day trying to figure out why i was getitng access denied on a LAMP Instal of CentOS
[08:21]
jpalmerdid audit2allow help? [08:22]
vcsi did not realize it was SELinux
till i fixed it
lol
i thought my setup was common
LAMP seems to be pretty standard
but i guess not enough to be supported out of the box
[08:22]
jpalmersetenforce 0, do the thing that wasn't working, audit2allow -a, setenforce 1, load the selinux stuff you got as a result.. profit.. [08:23]
vcsheh
well i will do that next time
thanks for the tip
its still absolutely pathetic that LAMP does not work by default
[08:23]
jpalmeranytime you have anything odd, setenforce 0, and see if it works. If so, it's SElinux.
well, once you understand SElinux, it's actually a good thing.
[08:23]
vcsseeing as the latest kernel root exploit bypassed it
i really dont think its very useful in general
[08:24]
jpalmerwell, the kernel is lower than selinux. so yea. it's more for defending against processes. [08:25]
vcsOpenBSD has a different way of doing that
and I think its gives less trouble in general
[08:25]
jpalmeryeah, I'm a longtime fbsd admin [08:25]
vcslinux should stay in embedded devices where it belongs :P [08:25]
jpalmer*shrug* every OS has it's strengths and weaknesses.
jpalmer doesn't get into the OS debates. they are pretty pointless IMO
[08:26]
vcsI guess FBSD and OBSD have spoiled me [08:26]
jpalmermy personal opinion, as a well rounded admin, I have to be functional in any OS I come across (within reason) as such, I'll use windows, bsd, linux, osx. Each has it's good points. Each has it's bad. [08:27]
vcsyeah
i do agree, and I run just about all those besides OSX
linux has great virtualization
in my view thats its main strength on the server
[08:28]
jpalmerI think there is a special place in hell for OSX developers. ;) [08:29]
vcs;)
objective C# makes me suicidal
err C
whatever that call that hunk of garbage
[08:29]
....... (idle for 31mn)
***Tadaka has joined #arpnetworks [09:00]
heavysixer has quit IRC (Quit: BAMPF!) [09:10]
LT has quit IRC (Quit: Leaving) [09:21]
...... (idle for 29mn)
nakano is now known as nakano_
nakano_ is now known as nakano
[09:50]
.... (idle for 16mn)
buraglio_ has left [10:06]
....... (idle for 31mn)
vmmello has joined #arpnetworks [10:37]
..... (idle for 20mn)
dxtr has quit IRC (Changing host)
dxtr has joined #arpnetworks
[10:57]
.... (idle for 15mn)
vcsup_the_irons: you may want to take a look at ipv6 on kvr13.arpnetworks.com
i filed a support ticket
but alot of people had ipv6 drop out last night
[11:12]
up_the_ironsvcs: IPv6 is identical across all hosts. I do see my HE peer having dropped (about 2 hours ago, but may have dropped also earlier)
HE provides the majority of my IPv6 routes
[11:13]
vcsahhh, so its an upstream issue [11:13]
dxtrup_the_irons: http://imgur.com/V35fF.jpg
:/
[11:14]
up_the_ironshuh?:) [11:14]
dxtrMy foot
.. at work
[11:14]
up_the_ironsfrost bite? [11:14]
dxtrIt's cold here but not THAT cold :D
I fell in my stairs this morning
Missed a step, hit it the edge with my toes
And I fell forward
[11:15]
.... (idle for 16mn)
up_the_ironsouch [11:31]
vcsso up_the_irons: i need to wait till HE fixes their route?
its not a big deal since its not ipv4 hehe
[11:32]
up_the_ironsvcs: you are still having issues? I can get both in / out with IPv6 on my own VM [11:33]
vcshmmm
yeah i am still having packet loss, let me try disabling my firewall
[11:33]
up_the_irons$ ping6 ipv6.l.google.com
PING ipv6.l.google.com(lax04s01-in-x63.1e100.net) 56 data bytes
64 bytes from lax04s01-in-x63.1e100.net: icmp_seq=1 ttl=58 time=1.60 ms
64 bytes from lax04s01-in-x63.1e100.net: icmp_seq=2 ttl=58 time=1.32 ms
64 bytes from lax04s01-in-x63.1e100.net: icmp_seq=3 ttl=58 time=1.53 ms
--- ipv6.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2031ms
rtt min/avg/max/mdev = 1.322/1.489/1.609/0.125 ms
[11:33]
vcs5 packets transmitted, 0 packets received, 100.0% packet loss
hmmm thats with my firewall off, and those settings used to work
its been acting funny since last night, my friend spits was also having problems starting then
all the sudden all my ipv6 connections dropped off
[11:34]
up_the_ironsvcs: add your hostname to the ticket so I can login later and check it out
vcs: if you deleted the 'arpnetworks' user you'll have to give me some login
[11:35]
vcsok
i only use public key auth most of the time so it was pointless leaving that user
ill get you setup
up_the_irons thats odd
i pinged my box from a different location
and IMMEDIATLEY after
ipv6 start working again
o.O
[11:36]
***vcs` has joined #arpnetworks [11:42]
up_the_ironsvcs: that user had ssh keys in it ;) [11:43]
vcsvcs slaps himself in the face [11:43]
up_the_ironsi also, do not use password auth for anything [11:45]
***vcs has quit IRC (Quit: leaving)
vcs` is now known as vcs
[11:45]
up_the_ironsvcs: that's weird ipv6 fixed itself after pinging [11:46]
vcsup_the_irons: this is not the first time it fixed itself that way [11:46]
up_the_ironsheh [11:46]
vcsits quite odd haha
but as long as its fixed, im happy
[11:46]
up_the_ironsi don't like to see it broken, but it's fun when it fixes itself :) [11:47]
vcsmaybe its some funky OpenBSDism [11:47]
dxtrHm.. How does it work in FreeBSD, can regular users sniff traffic? [11:49]
***vcs has quit IRC (Quit: later)
vcs has joined #arpnetworks
[11:51]
vcs has quit IRC (Quit: later)
vcs has joined #arpnetworks
[12:00]
vcshmm up_the_irons, ipv6 is fading in and out
im getting 49 packets transmitted, 16 packets received, 67.3% packet loss
[12:01]
***vcs has quit IRC (Client Quit)
vcs has joined #arpnetworks
[12:02]
vcshmm
ill set password auth for the arp networks account
[12:04]
jpalmervcs: the VPS I used to test your connectivity, is also on kvr13 [12:04]
vcshmmm [12:05]
***vcs has quit IRC (Client Quit)
vcs has joined #arpnetworks
[12:07]
vcshmmm i think pf may have been doing that
not sure why
but im getting 0% packet loss now with it off
[12:08]
dxtr0% is really bad [12:08]
vcslol [12:09]
jpalmervcs: told you, it was that overparanoid security feature of openbsd. it decided that randomly blocking packets and downing interfaces was better for the ultimate security of your machine :P [12:09]
vcs:P [12:09]
***vcs has quit IRC (Client Quit)
vcs has joined #arpnetworks
vcs has quit IRC (Excess Flood)
vcs has joined #arpnetworks
vcs has quit IRC (Excess Flood)
schmir has joined #arpnetworks
[12:10]
.... (idle for 16mn)
vcs has joined #arpnetworks
vcs has quit IRC (Client Quit)
vcs has joined #arpnetworks
[12:32]
vcsok
well it looks like my problems
were due to not accounting for ipv6 in pf :X
[12:38]
up_the_ironsvcs: noob
;)
[12:39]
vcsup_the_irons: true :P
to ipv6, yes
luckly pf has a nice logging mechanism
that makes fine tuning easy
[12:39]
up_the_ironscool [12:44]
dxtrup_the_irons: My toes hurt.
:(
[12:48]
vcsauch [12:48]
up_the_ironsdxtr: sorry to hear that [12:48]
dxtrup_the_irons: I will need huge amounts of opiates - right now [12:49]
vcslol [12:51]
........ (idle for 38mn)
***bharatak has joined #arpnetworks [13:29]
schmir has quit IRC (Remote host closed the connection) [13:35]
vmmello has quit IRC (Quit: Leaving) [13:43]
bharatakgreets, does anyone know if the default openbsd image has been patched? [13:46]
up_the_ironsbharatak: you might be looking for: http://support.arpnetworks.com/faqs/vps/openbsd-hangs-at-setting-tty-flags-when-i-use-a-custom-kernel [13:47]
bharatakI didnt do anything, yet - was just wondering if I need to patch [13:49]
up_the_ironsbharatak: you will need to disable mpbios, but that's it [13:49]
bharatakis your default image already patched? I understand I have to disable mpbios when I patch [13:50]
up_the_ironsbharatak: no, just mpbios is disabled [13:50]
dxtrDo we happen to havea doctor in here? Regular people on IRC isn't very accurate in diagnosing my toes [13:50]
bharatakok - thks - i may wait for the new release anyway
dxtr, depends on what kind of doctor you're looking for
[13:50]
dxtrbharatak: You know one of those with a white coat and stuff [13:51]
bharataki know the ones with the long white coats, arms tied behind the back [13:52]
dxtrThat's not a doctor I think [13:53]
bharatakmaybe that's my trouble
good luck...
[13:53]
***bharatak has quit IRC (Quit: leaving) [13:55]
awyeah_ has joined #arpnetworks
azmarco_ has joined #arpnetworks
heidar has quit IRC (Quit: brb)
awyeah has quit IRC (*.net *.split)
azmarco has quit IRC (*.net *.split)
[14:08]
........ (idle for 38mn)
jdoestill no sign of my ipv6 shirt :( [14:53]
dxtr:( [14:54]
jdoeanyone else have theirs show up? [14:54]
vcslol [14:55]
***wallshot1 has joined #arpnetworks
wallshot1 is now known as wallshot
[14:56]
......... (idle for 43mn)
wallshot has quit IRC (Quit: Leaving.) [15:40]
richardquisumbin has joined #arpnetworks [15:50]
richardquisumbin has quit IRC () [15:58]
............................... (idle for 2h31mn)
j3m has quit IRC (Read error: Operation timed out) [18:29]
j3m has joined #arpnetworks [18:34]
................ (idle for 1h17mn)
fink has joined #arpnetworks [19:51]
............... (idle for 1h11mn)
fink has quit IRC (Read error: Connection reset by peer)
Ehtyar has quit IRC (Remote host closed the connection)
[21:02]
............. (idle for 1h3mn)
nakano is now known as nakano_ [22:07]
........ (idle for 35mn)
Tadaka has quit IRC (Quit: Computer has gone to sleep) [22:42]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)