[00:23] *** EhtyarWRK has quit IRC (Quit: Never look down on someone unless you're helping them up.) [00:26] Huh? I have higher latency to ARP than maxamillion did, and VNC is fine for me. I can't see that he's going to be happy anywere, especially since 82ms of his 116ms ping times were internal to his WiMAX provider. [00:29] same here, i'm always 170-180ms (UK) and VNC works fine [00:37] Woah you get that good from UK? [00:37] 210 to Australia... It's improved actually. [00:53] 210 seems very high [00:53] it should be more like 170 for australia? [00:53] DDevine: yeah, 170-180 isn't too bad (about 15ms of that is my broadband connection) [00:54] http://traceroute.optusnet.com.au/?args=www.arpnetworks.com [00:54] dsl is about 10 msec latency on top of that i imagine [00:57] actually 3g could give you 210 too [01:08] mercutio: Could be my wifi. [01:12] DDevine: I'm also in the UK and get 140ms on IPv6 and 170ms on IPv4 to ARP, 15ms of each being my DSL [01:12] So bob^^'s latency seems about right from here [01:15] my latency from work (I work for an ISP) is only 150msec [01:15] (that's direct from the core of our network though) [01:16] and i get 154ms from home on v6 (via an HE tunnel) [01:19] bob^^: Same here. 150ms on v4 from a machine in THN, 130ms on v6. (I also work for an ISP :) [01:22] :D [01:23] 145ms out of our network in THE on v6 :( [01:23] interesting, the vast majority of that 145ms occurs inside HE's network [01:24] are you a linx member plett? :) [01:25] bob^^: We are indeed. AS20712 Andrews & Arnold [01:25] Who are you? Do we peer with you? :) [01:25] i think we do, yes :) [01:25] AS25178, Keycom PLC [01:25] Yep, we have v4 and v6 sessions at LINX :) [01:26] we do indeed, small world :) [01:26] are you going to the next linx meeting? [01:26] About a month's time? Windsor? [01:26] yup that's the one [01:27] I think so, yes. I've registered myself, but we generally don't know who's going until closer to the time [01:27] i'm down to go too - fingers crossed there's enough of us left in the office :) [01:28] We're based in Bracknell, which is a 20 min train ride from Windsor [01:28] ahh not bad at all - we're in Stafford, though I live in Stratford on Avon [01:29] bit further for the guys i work with, not so far for me :) [01:31] if you end up going give me a shout - i'll come say hi [01:31] Will do :) [01:32] hang on - was it you guys who had 'the internet' at one linx meeting a while ago? [01:34] bob^^: Yeah, that would be us :) [01:34] :) [01:34] More specifically that would be our MD, Adrian [01:34] yeah, that's right - he did a talk on v6, was interesting [01:34] more specifically about v6 capable CPEs iirc [01:35] Yes, that's one of our common rants. Everything else in the chain from an end user to (say) facebook is IPv6 capable. It's just their DSL router that isn't. [01:35] yeah, it's quite frustrating [01:36] more frustrating how few ISPs can actually deliver v6 to the house [01:36] i'm with Be, no sign of v6 yet at all annoyingly [01:36] They are starting to be produced though. We have a £100+ "Billion 7800N" which works fine with IPv6, but at that price it's not one we can just give away to every new customer [01:37] i've heard zyxel have quite a bit of v6 capable stuff now including a few home routers [01:38] They like to say that they have. The difficulty we have getting hold of them says otherwise. [01:38] bob: zyxel are still around? [01:38] i thought they made weird modems [01:38] yeah, zyxel make all sorts of stuff [01:38] weird dialup modems that is [01:38] i never see anything zyxel around these days [01:38] plett: ahh, not tried actually getting one :) [01:39] nor us robotics [01:39] US Robotics got bought up by 3com [01:39] years ago [01:39] ahh [01:39] :) [01:39] that's a name i've not heard for a long time [01:39] * bob^^ digs out his courier [01:39] v.everything [01:39] :) [01:40] mercutio: i just bought a zyxel nas for home (their kit isn't brilliant but it's alright for home imho) [01:40] i've never seen a home nas that was any good [01:40] this one has two bays and does raid etc - only had it a couple of days but so far so good [01:41] not gonna set the world alight with it's feature set or performance, but good enough for me :) [01:41] bob^^: We have a "ZyXEL P-2612HNU-F1" here in the office for testing, which they sent us this week. It came with an european plug, as they haven't made a UK model yet, required a beta firmware flashing to it to make it even claim to do v6, and then doesn't work. [01:41] oh, that's promising then! [01:43] speaking of ipv6 [01:43] whatever happened to the internet having larger muts [01:43] mtus [01:43] what with ipv6 having higher overhead and all [01:43] surely it's time for it to get bumped up a bit [01:43] *** LT has joined #arpnetworks [01:43] It's stupid though, as all the manufacturers of cheap routers use the same chipsets, and use the chipset manufacturer's canned "build me a firmware" GUI wizard thingy. And that wizard has supported v6 for about 3 years now, but nobody ever ticks the box to enable it [01:44] hah, i didn't know that [01:44] plett: real [01:44] maybe they don't do it in hardware [01:44] larger address family != larger mtu [01:44] do cheap adsl modems do checksum offloading etc? [01:44] toddf: i know [01:44] our customers are all connected over ethernet so (apart from a few on DSL) thankfully we don't have to worry too much :) [01:44] but because it's using up more overhead [01:44] and that it's not in serious production use [01:45] surely it's about time for mtus to rise in size [01:45] Yeah. If you've ever wondered why the user interface on cheap routers all look very similar, it's because they _are_ all the same. The "manufacturer" just copies the reference hardware design, cutting as many corners as they can get away with, and then uploads their logo and brandname into the firmware wizard, and ships it :) [01:45] i dunno the few modems i've used the gui on have all been radically different [01:45] dlink, linksys, tp-link [01:45] mercutio: I think you oversimplify the task at getting everybody to participate in the larger mtu crowd [01:45] mercutio: jumbo frames would be the only option, and not everything supports them [01:46] (assuming ethernet is the technology being used, obv) [01:46] toddf: well i'm not saying it's easy, but it's not easy to get ipv6 going either [01:46] (and in our case everything core is based on ethernet) [01:46] mercutio: Cheap DSL modems/routers do everything in software. These days they are a single IC with combined CPU, ethernet and DSL, but there's still no offloading etc [01:46] mercutio: there are larger mtus, they're called jumbograms, and if all os's behaved sanely, you'd set max mtu of your hardware, and 'discover' (path mtu) the max mtu available per remote host, end of story [01:46] mercutio: IPv6 is pleanty easy, I've been doing it for 10+ years [01:47] toddf: well lots of dsl has mtu < 1500 [01:47] mss clamping kind of helps [01:47] toddf: but it's not really serious yet [01:47] mercutio: PPPoE has a default of 1492, unless you have modern enough kit to support RFC4638 [01:47] discovering max mtu is the key to anything greather than and less than standard mtu size [01:47] plett: even in pppoa 1492 is pretty common [01:47] ob [01:47] on [01:47] and then there's ipsec etc [01:47] mpls [01:48] people running mpls on 1500 byte networks [01:48] etc [01:48] mercutio: you can say its not serious, but I use it daily for 90% of my traffic, so however you define serious is up to you [01:48] toddf: 90%?! [01:48] what do you do over ipv6? [01:48] mercutio: Really? My only experience with DSL is in .uk , but here all PPPoA is clean 1500 [01:48] plett: here pppoa is common [01:48] mercutio: everything. dns64 / nat64 / even tunnel afs over v6 back to my fileservers, smtp, www, dns, imap, ping, ... etc etc [01:49] but the telecoms provider was routing over pppoe afterwards [01:49] you'd think they'd just raise the mtu on the ethernet segments [01:49] but like when i look at traffic on the net in general [01:49] that's not particularly straightforward [01:49] lots of people have mtus of 160 etc [01:49] you'd have to ensure that everyone you connected to ran the same jumboframe size (again, assuming ethernet) [01:50] and that all your kit supported it (not all kit supports jumbo by a long way) [01:50] bob: yeah a bit doesn't [01:50] maybe it's hopeless [01:50] but it seems weird to have 10 gigabit ethernet etc around, and 1500 byte mtus [01:50] and even 100 mbit ethernet could handle bigger mtus [01:51] increasing mtu would probably be many times more difficult than trying to implement v6 end-to-end :) [01:51] most gigabit stuff handles jumboframes [01:51] yup you can do jumbo on 100mbit on some kit (extreme networks kit has done jumbo for years) [01:51] mercutio: Here, the telco is most often BT. They do PPPoA on the tails from the EU to the exchange, and then trunk it over PPPoE in their backhaul network. They use a 1600 byte MTU for that, which easily fits the 1500 MTU + PPPoE header [01:51] plett: well yeh that's the sensible way :) [01:52] to my mind the biggest issue with adsl these days is the upload speed though [01:52] and annex-m isn't supported here [01:52] that's a problem with more than just adsl [01:52] mercutio: There are lots of other ways that DSL is deployed, and most of them are less sensible :) [01:52] you can congest it really easily [01:53] my line is annex m'd but i still only get 1.2mbit up [01:53] bob: real [01:53] bob: i get 1.2 mbit up without annex m [01:53] exactly [01:53] it's not as good as you'd think [01:53] what do you get without annex m? [01:53] i actually need to re-route some cables here, only recently moved in to this flat and the phone point is miles away from the modem (no power near the phone point) [01:53] just under 1mbit [01:53] mercutio: bob^^ said he is on Be at home. They don't use PPP at all. The ethernet coming out of the DSL modem goes straight onto your LAN, and the default gateway for your desktop machine is on the other end of the cable in the exchange. [01:53] bob: i have the same problem [01:54] so i'm using extension cable [01:54] indeed plett [01:54] it kills 1mbit off my down sync rate [01:54] plett: oh weird [01:54] Be has been pretty good for me so far - we use them sometimes (buying through Cerberus) for backup links in work [01:54] so it's like bridged plett? [01:54] like cable etc usually is [01:55] i did actually consider going with AA plett :) [01:55] bob^^: Good good :) [01:55] for the amount my line is used it was a little pricey though :( [01:55] (bandwidth hungry housemate0 [01:55] bob: you "needed" it though? [01:56] ? [01:56] oh it's used a lot you mean? [01:56] i thoughtyou meant it was hardly used [01:56] oh no, my broadband is pretty heavily used [01:56] i use a lot of upload (i back everything up to a colo box at work, etc) [01:57] mercutio: I don't know much about how cable is set up. I didn't think it bridged the EU's LAN out to the cable head-end, at least not here in .uk [01:57] plett: here they used to have one huge big arp domain [01:57] i used to have cable in my old flat [01:57] enough to overload most routers [01:57] well most of the shit routers that people tend to use [01:57] the ones that top out < 30 mbit [01:58] there's no cable reselling here [01:58] but ther eis for dsl [01:58] so cable is expensive [01:58] but better technology [01:58] ilke i think they upgraded to docsis 3 [01:58] cable here is priced similarly to dsl on average but we only have one cable provider and no resellers [01:59] i don't know why there's so many people keen on ftth [01:59] when docsis 3 is good [01:59] and has existing cable [01:59] cheaper etc [01:59] not much of the UK has cable [01:59] bob: why are you on dsl then? [01:59] ahh ok [01:59] there's cable in the town i live in [01:59] but not down my street [01:59] when i had a little look on the web at cable in UK it looked good [01:59] there was virginmedia? [01:59] that's always the problem with cable [01:59] and like 50 mbit [01:59] calbe [01:59] yeah, that's it [01:59] yup [02:00] mercutio: What makes you think cable is a better technology? [02:00] it's a good service actually - i used to have the 20mbit cable product, worked great [02:00] plett: then what? [02:00] I assumed you meant better than DSL [02:00] oh cable is more reliable than dsl [02:00] like [02:00] most people have old shitty wiring [02:00] line faults etc are common [02:00] dsl routers are usuaally shit [02:01] cable has those issues too tbh [02:01] Ahh. Okay [02:01] and break reasonably often [02:01] yeah it doesn't seem to be as often [02:01] and it can support higher bandwidth [02:01] twice i had to have engineers out to 'fix' the coax between my house and the street cab [02:01] bob: oh real? [02:01] i've had cable twice [02:01] err three times [02:01] four times? [02:01] shit [02:01] but in 6 years total of DSL, had an engineer out once and he had to replace the line... because.......... [02:01] i've moved around a lot [02:01] (And this is a great story) [02:01] bob^^: To be fair, no copper in a cable network is going to be much older than 1960. I've seen phone lines that must be 100+ years old :) [02:01] anyway, the only problems were with the isp doing transparent proxying [02:02] and with the aforemented arp domain issues [02:02] there was a fracture somewhere in my line - on hot days the cable expanded and for some reason the fracture 'fractured more' and i lost sync [02:02] whereas i've had dsl in multiple places too [02:02] so during the summer there were afternoons where i'd get no service :) [02:02] and had problems with drop outs line noise, problems when it rains etc etc [02:02] plett: very true - and cable won't have the MK-style alumninium lines either ;) [02:03] ripping off the bell wire here can be a big improvement [02:03] and docsis 3 can do 100mbit+ [02:03] ftth can do anything at all though [02:03] ftth is expensive though [02:03] bob^^: Ironically, it's the older phone lines that are more reliable for DSL - over the years as copper prices have increased, the wires have got thinner and thinner :) [02:03] fttc i agree though i don't really see the point - surely easier to concentrate on ftth [02:03] it costs a lot of money to run the fibre etc [02:03] so if ther'es already cable [02:03] yeah plett, very true! [02:03] it seems pointless to run fibre [02:03] i could get 50mbit down 25mbit up with docsis 3 today. I just don't want to pay $384/mo for it. [02:04] some of our customers are on 50mbit down/50mbit up [02:04] here they're doing vdsl [02:04] which uhh [02:04] ...but they're delivered over straight ethernet so that's pretty easy and cheap to do :) [02:04] hasn't ahppened properly yet [02:04] mercutio: DOCSIS 3 can do 100Mb, until a second person in the same broadcast domain (typically several thousand houses) wants to use it at the same time. At that point you have to share your 100Mb :) [02:04] yeah, our FTTC is vdsl for the last mile [02:04] and there were plans for fibre i think, but people are concentrated on available bandwidth rather than performance/reliability/latency/international transit etc etc [02:05] plett: it does over 100Mb total though doesn't it? [02:05] cable here was 15mbit [02:05] it was always pretty good for those speeds nationally [02:05] international it was fucked [02:05] especially if used web [02:05] because it hit a transparent proxy with small window sizes [02:06] which tended to get evening peformance degredation etc etc [02:06] leading to the "bittorrent is fast but web is slow" dilemma. [02:06] which also happens on congested networks without shaping/qos [02:07] so peopla re like - can pull line rate with bittorrent - it must be the remote servers. [02:07] is transparent proxying used in the UK? [02:07] Depends on the ISP [02:08] In our case, we don't do any proxying, filtering or shaping. IP packets in == IP packets out [02:08] i reckon it actually makes sense for international stuff [02:08] it used to happen on cable here mercutio, but i think they've (mostly?) stopped now [02:08] plett: we're the same [02:08] much easier and fairer imho [02:08] Indeed [02:08] fairer? [02:08] you pay an ISP to transit packets from A to B [02:09] if they interfere with the packets in-flight that doesn't seem very fair [02:09] hmm [02:09] what do you think about explicit proxies? [02:09] i don't see the point these days [02:09] ihmo, there is no need for proxying today [02:09] because cdns are used more? [02:10] because transit/peering are so cheap and content is normally local through a CDN [02:10] heh [02:10] transit is expensive here [02:10] the things that really eat bandwidth aren't cachable anyway... eg youtube [02:10] i'm in new zealand [02:10] it's cheaper to just buy more connectivity than to build a proxy cluster [02:10] ahh, that would be an issue then :) [02:10] lt: google provide caches [02:11] actually that's true, they do indeed [02:11] bob: i think there can be higher performance, when it's done proeprly. [02:11] google will happily drop a cache node in to your network if you meet some criteria and don't mind giving them half a rack and some power [02:11] yaeh it's some amount of sustained traffic, depending on your country [02:11] i disagree, i'm really not a fan of proxying at all [02:11] lowest in south america i seem to recall [02:11] highest in US [02:12] well they brand it as a cache... but isn't it really just a cdn node? [02:12] LT: it's a cache [02:12] it forwards along to the closest peer [02:12] http://ggcadmin.google.com/ggc [02:12] unless it's already downloaded it before then sends it direct to user [02:12] blurry.... a cache that only works for google stuff, is kinda different to a traditional cache [02:12] it's a smart idea [02:13] I don't see it's much different from an akamai box [02:13] LT: it's pretty similar? [02:13] yeah, it's not really [02:13] It's more of a dynamic CDN [02:13] oh [02:13] it's the same as akamai [02:13] just for different content [02:13] however - if google+ catches on, it might be good for users and for ISPs [02:13] it really depends if you have peering to a google node directly or not [02:13] whether it's worthwhile [02:13] yeah [02:14] ilke don't google peer over linx for you guys? [02:14] yeah. it's sensible enough... but I got the impression you were talking about sticking all http through a proxy, which is a slightly different beast [02:14] We already peer with Google at LINX and LoNAP, so already have zero bandwidth costs for traffic to them [02:14] hehe [02:14] i can't remember if we peer with google or not [02:14] we peer with a GGC on MaNAP [02:14] (or whatever it's called today) [02:14] they have an open policy don't they? [02:14] bob^^: Edge-IX, I think [02:15] yes, we peer with google on linx now too [02:15] so yeah, our traffic to google is free too [02:15] that's the one, Edge-IX :) [02:15] that said [02:15] if you were starting to congest your peering link [02:15] And, for UK networks, Google server content from their Ireland datacentre, so it's relatively low latency too [02:15] you could get google cache [02:15] mercutio: you'd just get a private interconnect [02:16] bob: oh true [02:16] that's another way to go [02:16] it'd be nice if google was in nz :) [02:16] they must have a presence there? or in australia? [02:16] australia [02:16] nz<-> australia connectivity isn't amazingly cheap [02:17] it's the same monopolistic cable that runs to US [02:17] just different segment on it [02:17] hmm, it is interesting to see different peoples opinions [02:18] i've been working on an explicit proxy mesh system to accelerate web browsing [02:18] by routing to a proxy near the end destination [02:18] and keeping persistent connections open to the proxies [02:18] reduces latency etc etc [02:19] In the case of NZ, international traffic is always going to be expensive and high latency, just because of geography and the speed of light. The only way round that is to either serve content from local servers, or do caching [02:19] plett: yeah - but - i've found that NZ<->UK is extra shit [02:20] it goes via the US [02:20] mercutio: It mostly goes via USA? [02:20] Yeah [02:20] and so it's like 260 msec minimum [02:20] but [02:20] web sites won't send you more than like 4k of data in one round-trip-time [02:20] so it's like .. 4k.. 8k. . 16k.. [02:20] etc etc [02:20] assuming no packet loss [02:20] The other route would be via Asia, and taking an over-land route to europe [02:20] but on top of that in my testing, it seems some uk sites are slow etc too [02:20] plett: asia routing is /messy/ [02:21] Indeed [02:21] plett: that's the way planes fly though [02:21] so sometime in the distant future it may work that way [02:21] I'm not surprised that the BGP hop count is lower for traffic via USA than via Asia [02:21] in my testing, i've found that guardian.co.uk is faster on average than bbc.co.uk [02:21] but then i've tried curl frm a uk host to bbc.co.uk [02:21] and i find weird 200 msec delays etc [02:22] seemingly randomly [02:22] strange [02:22] even with a 2msec ping or something [02:22] oh is that not normal? [02:22] plett: There is a lot of countries in APAC... lots of hops. [02:22] mercutio: I've not seen that here [02:22] plett: things don't go in a direct line [02:22] oh, i only have one uk host [02:22] so maybe it's that host [02:23] but latency doesn't seem to spike [02:23] time curl --compressed http://www.bbc.co.uk/> /dev/null [02:23] like what's that say for you? [02:23] real 0m0.083s [02:23] user 0m0.004s [02:23] sys 0m0.000s [02:23] oh that's fast [02:24] right now i got 1 second, 113 msec, 130 msec, 60 msec, 131 msec, 130 msec [02:24] from nz it's way worse though [02:24] That's from my desktop in the office, which is gig-e or higher all the way to the bbc [02:24] 1.981, 1.920 [02:24] 1981 msec that is [02:25] for what, 25k of data [02:25] then you have all the images etc etc [02:25] From my DSL at home: [02:25] real 0m0.179s [02:25] user 0m0.008s [02:25] sys 0m0.008s [02:25] 0.016u 0.008s 0:00.18 5.5%288+1668k 0+0io 1pf+0w [02:25] (from work) [02:26] from my proxy is 990 msec, 726 msec [02:26] i think bbc has low ttl [02:26] on dns [02:26] from home dsl: [02:26] real 0m0.315s [02:26] user 0m0.000s [02:26] sys 0m0.020s [02:26] hmm [02:26] 315 msec is ok [02:26] (i'm using my connection atm to watch f1 free practise over iplayer too!) [02:27] 2 seconds isn't :) [02:27] wow your guys times look diff to me [02:27] curl --compressed http://www.bbc.co.uk/ > /dev/null 0.01s user 0.00s system 7% cpu 0.130 total [02:27] like mine just shows on one line [02:28] i suppose that's bash [02:28] my colo is freebsd and my desktop at home is ubuntu [02:29] probably just differences in 'time' [02:29] Differences in the time command, I would expect. My examples were both Ubuntu [02:29] hmm i get the same on linux and openbsd [02:29] this was freebsd: 0.016u 0.008s 0:00.18 5.5%288+1668k 0+0io 1pf+0w [02:29] linux being ubuntu [02:29] it must be the shell i think [02:29] i'm using zsh [02:29] yeh freebsd is hard to read [02:29] csh on freebsd, bash on ubuntu [02:29] not if you know what you're looking at hehe [02:29] yeh i rekcon it's the shell [02:30] * bob^^ loves freebsd [02:30] heh i usd freebsd 10 years ago [02:30] for a bit [02:30] then i ran into probelms with it and switched to openbsd [02:30] oh, time -p on freebsd should give a POSIX comliant output [02:30] as a desktop [02:30] etc etc [02:30] i went to freebsd cos i thought it was meant to make a better desktop or something [02:30] nah, no way [02:30] but i actually found openbsd worked better as a desktop even [02:30] i shifted cos freebsd corrupted data on me though [02:31] it's not designed for desktop at all - it's usable, but far from ideal if you want multimedia [02:31] yeah, it didn't [02:31] that'll have been hardware [02:31] :) [02:31] mm [02:31] it was like a k6-2 or somtehing [02:31] i think it's cos i was using ata66 [02:31] and it had some timing problem or something [02:31] but seriously openbsd was a lot simpler than freebsd [02:32] like i was meant to update freebsd with cvsup [02:32] and openbsd was cvs [02:32] openbsd and freebsd are pretty similar from a config point of view [02:32] and updating openbsd proved much simpler [02:32] freebsd is cvs too - cvsup just makes it easier [02:32] and like i had to setup networking or something [02:32] (plus there's freebsd-update now!) [02:32] and like manpages on openbsd were MUCH better [02:32] yeah, freebsd won't hold your hand [02:32] i found freebsd way more complicated [02:32] openbed had /etc/rc.conf [02:32] etc [02:32] and you could read the files [02:32] so does freebsd :/ [02:32] and they made sense [02:33] then freebsd seemed to do similar things [02:33] but have like 3x as much stuff [02:33] :) [02:33] but yeah, i've been meaning to try freebsd again now [02:33] freebsd-update? Does that mean you can finally do binary updates? [02:33] that i'm more used to it [02:33] yeah plett [02:33] usd to these things [02:33] freebsd's had that for a while now [02:33] but freebsd wouldn't run in virtualbox [02:34] virtualbox had some issues with freebsd but i think they're sorted now [02:34] hmm i think i was trying 8.2? [02:34] it was quite recently [02:34] it may have been a beta [02:34] hmm [02:35] maybe i should dl again now [02:35] i have vmware on this machien aynway [02:35] i should try netbsd out again too [02:35] ah, i think it was virtualbox that was fixed [02:35] netbsd confused me a bit 10 years ago i remember [02:35] yeah, netbsd is not particularly obvious [02:35] but vmware will work out of the box? [02:35] i was suprrised that openbsd was obvious tbh [02:35] yeah - though there were issues with vmware and timing on freebsd [02:36] i like didn't want to try it at first because it was designed towards security [02:36] no idea if those are fixed, i never actually had them but i know people who did [02:36] and i wanted speed [02:36] but i actually foudn openbsd faster than freebsd [02:36] for simple things like loadign xterms [02:36] bringing up man pages etc [02:36] not exactly heavy usage [02:36] you could tweak freebsd if you had the patience [02:37] but in general that isn't needed [02:37] now if xterms come up slowly there must be some kind of hardware problems [02:37] or a scheduling issue if the box is doing other stuff too [02:37] oh or linux with it's screwed up hard-disk stuff now days [02:37] or that :) [02:37] linux always feels 'laggy' to me compared to freebsd [02:37] have you used linux recently? [02:37] yeah, i use ubuntu on all my desktops [02:37] i've used it on more than one machine [02:37] but i don't use it on servers [02:37] and you extract a huge tarball [02:38] or mocve lots of files or aynthing [02:38] on a desktop [02:38] and it'll drag like hell [02:38] this ubuntu box has an ssd so i don't really notice disk access now hehe [02:38] like i don't know how they let that happen? [02:38] ah this box has ssd too [02:38] <3 ssd [02:38] yeh ssd is ok [02:38] i dunno i also have 16 gig ram now [02:38] i just upgraded [02:38] it's crepey in a way [02:38] this desktop only has 2gb, i REALLY need more [02:38] i got so used to things going really slowly all the time [02:39] with linux? [02:39] yeah [02:39] i used linux ona laptop with 2gb fo ra while [02:39] recently [02:39] it's not bad, it just sometimes feels like it could use a bit more [02:39] it had dual boot windows 7 [02:39] seriosuly windows 7 was better on 2gb ram than linux by far [02:39] i've got two spare slots and ram is cheap for another 2gb so i'll order it when i get paid [02:39] like it'd keep going into swap hell [02:39] ddr3? [02:39] i'm also keen to stop this box swapping given it's swap is on ssd [02:39] nah, ddr2 i think - this thing is a bit on the old side :) [02:40] ahh yip [02:40] that's why i upgraded [02:40] amd x2 5600+ [02:40] cos ddr3 ram is way cheaper [02:40] yeah [02:40] i tried just jumpign frmo 4 gig to 6 gig [02:40] i want to upgrade before ddr2 goes up too much more [02:40] and then i tried using visual studio [02:40] i dunno how anyone copes with visual studio [02:40] it's so resource hungry [02:41] why not just get new mbd/cpu? [02:41] you know you can get really cheap sandybridge cpus [02:41] like there's ones even cheaper than i3 [02:41] dual core [02:41] just don't need the extra performance tbh [02:41] this thing will do me another couple of years at least [02:41] hmm [02:41] lower power use [02:41] most of my work i do on my laptop which has 4gb of ram anyway [02:41] oh yip [02:42] and it's all brand new (5 months old or sth) so it's alright for performance :) [02:42] i just want to buy an ssd for it nowt oo [02:42] yaeh [02:42] it gets like that doesn't it [02:42] you use non ssd computers [02:42] and you're like how do they cope [02:42] and then you realise you got an ssd 6 months ago [02:42] and had coped for years [02:42] hehe yeah [02:43] ahh shit [02:43] 4 gig? [02:43] i don't know what freebsd file i want [02:43] yeah [02:43] oh 4gig iso [02:43] for freebsd i meant [02:43] sec [02:43] nah - get the mini iso [02:44] what's pc98? [02:44] it'll download anything else you want during install, saves wasting bandwidth [02:44] is that like win98? [02:44] ahh cool [02:44] nah, it was a pc standard from 1998 [02:44] no one does it anymore [02:44] i386-bootonly? [02:44] except freebsd? [02:44] http://en.wikipedia.org/wiki/PC_System_Design_Guide [02:44] unless you're running on 64 bit hardware, yup [02:44] is 64 bit or 32 bit better for vmware? [02:44] it's i5-2500k [02:44] 32 bits for vmware i suspect [02:45] not honestly sure - i don't virtualise much tbh :/ [02:45] so should do either [02:45] i386 is probably smaller [02:45] leaner [02:45] wtf [02:45] can't find the dl link [02:46] oh there [02:46] http://torrents.freebsd.org:8080/stats.html?info_hash=e86c8124f8c942a3b3bff101b97d908bf26c5b73 [02:46] i see freebsd is staying professional looking [02:46] freebsd is pretty professional, it's used by a lot of large corporations [02:47] real? [02:47] oh yeah [02:47] i thought freebsd had kind of died for some reason [02:47] yahoo use it for example [02:47] ahh everyone says that on slashdot, it's not true at all [02:47] heh i remember people used to say freebsd was using for lots of porn sites [02:47] as examples of "heavy traffic web sites" [02:47] nah this isn't about slashdot [02:47] it's more i just never hear about anyone using freebsd [02:48] http://news.netcraft.com/archives/2011/07/08/most-reliable-hosting-company-sites-in-june-2011.html [02:48] i don't hear of much openbsd or opensolaris eitther [02:48] check out the top 10 most reliable hosts [02:48] using both openbsd and opensolaris at work [02:48] (and linux) [02:48] wow [02:48] how did windows get on that list? [02:48] hehe no idea [02:49] i've actually never heard of any of those providers [02:55] cool it's installing [02:56] they're all pretty big [02:57] yeh looked at top 40 and had heard of more of them [02:57] maybe just my luck [03:09] got it installed it didn't even setup ssh hmm [03:10] you missed a step during install then [03:10] because one of the questions is 'do you want to enable ssh login' towards the end [03:10] :) [03:11] oh [03:11] the installer screwed up [03:11] because i went to some options page [03:11] then i tried to eit [03:11] then somehow it trieed to isntall on top itself so i did exit [03:11] found it though [03:12] easy to enable after though [03:12] add sshd_enable="YES" to /etc/rc.conf [03:12] then /etc/rc.d/sshd start [03:12] it'll generate keys and fire it up [03:12] yeh [03:12] but now it won't let me ssh in [03:12] do you need to create a non-root user? [03:12] are you trying as root? [03:12] ys [03:12] only linux is stupid enough to let you ssh as root by default ;) [03:13] you can always edit /etc/ssh/sshd_config to allow root login if you're feeling brave [03:13] i don't think that's stupid [03:13] or it's a local box or whatever [03:13] well what's one username that exists on all unix-like systems? [03:13] root [03:13] that's a pretty easy start for an attacker [03:13] i can't su either [03:13] gah [03:13] so i need to add to wheel? [03:13] if you prevent logins on root then they also have to find the usernaem, which complicates things a lot [03:13] yeah [03:13] you need to be in wheel to su [03:13] most people will install sudo as soon as they're installed [03:13] then you don't need to be in wheel [03:14] how do i install sudo? [03:14] is there pkg_add [03:14] ? [03:14] # pkg_add sudo [03:14] pkg_add: can't stat package file 'sudo' [03:14] hmm [03:14] i suppose it needs to know where it is [03:14] pkg_add -r sudo [03:14] will fetch it remotely [03:14] ahh ocol [03:15] ok not too bad [03:15] or you can use ports (portsnap fetch extract && cd /usr/ports/security/sudo && make install clean) or something [03:15] yeh it said ports tree was over 400 megs [03:15] (you only need the portsnap fetch extract if you don't already have a ports tree :) [03:15] yeah, it's big, but VERY well worth having [03:15] i dunno [03:15] you can always download original source tarballs [03:16] i installed kernel source [03:16] sticking with ports is a smarter move [03:16] but that was all [03:16] meh, you won't really need kernel source [03:16] gah [03:16] it keeps going to ftp.freebsd.org [03:16] you can override that, sec [03:16] PACKAGEROOT iirc [03:16] ah, yeah: http://www.rainingpackets.com/pkg_add-specifying-a-mirror-server/ [03:16] no export command? [03:17] depends on your shell [03:17] setenv if you're still in csh [03:17] chsh -s if you want to change [03:17] # pkg_add -r zsh [03:17] Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.2-release/Lates t/zsh.tbz... Done. [03:17] Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.2-release/All/libiconv-1.13.1_1.tbz... Done. [03:17] Updating /etc/shells [03:17] # zsh [03:17] zsh: Command not found. [03:17] rehash [03:17] what's with that? [03:17] wait are you still running sh? [03:17] oh shit [03:17] wow [03:17] no idea [03:17] i have zsh now [03:17] # zsh [03:17] zsh: Command not found. [03:17] # rehash [03:17] # zsh [03:17] [Fri 11/07/22 22:19 NZST][pts/0][i386/freebsd8.0/8.2-RELEASE][4.3.10] [03:17] [03:17] csh [03:18] csh needs a rehash to reload paths [03:18] now do [03:18] which zsh [03:18] and chsh -s /path/to/zsh [03:18] however [03:18] *however* [03:18] cool [03:18] got it changed [03:18] do not do that for root [03:18] chsh -s zsh rowrked [03:18] leave root on csh or sh [03:18] why not? [03:18] because you may note that zsh has probably gone into /usr/local/bin [03:18] and not /bin [03:18] yeh it has [03:19] so copy it over? [03:19] as a result, if you end up needing to rescue, you may not be able to mount /usr/local [03:19] i'd rather have a shell that "export" works in [03:19] yeh it's just a test system [03:19] no don't copy it over, just don't use root [03:19] but maybe can find static compile of zsh [03:19] create yourself a user that has sudo [03:19] :/ [03:19] that's nasty [03:19] mm [03:19] i hate prefixed sudo over everything [03:19] i reckon sudo is less ecure [03:19] the chance of you needing a recovery shell are minimal, but on a production box it's a really smart idae [03:19] then just using root [03:20] that's a dirty linux hack [03:20] * bob^^ shrugs [03:20] i find sudo useful when i don't trust people [03:20] it can be locked down [03:20] hmm [03:20] giving someone root on the other hand cannot [03:20] i dunno i'd rather not give someone a shell i don't turst :) [03:21] well of course :) [03:21] sudo is less secure in that it's just the normal user's password which has to be leaked/stolen in order for an attacker to get root access, rather than both the user and the root password [03:21] i suppsoe there is that [03:21] but sometimes you have no choice [03:21] as long as sudo is locked down, it's handy [03:21] plett: yeh [03:21] and passwords? keys ;) [03:21] and also it encourages going frmo normal user to root [03:21] so if someone hacks into a normal user account they can get root [03:22] and when it's a box you don't use as a desktop or anything [03:22] But if you have to give someone root access, doing it via sudo allows you to lock it down greatly, and get a log of each time it's used [03:22] exactly [03:22] you may as well just ssh in as root [03:22] and not as root [03:22] I agree that sudo is insecure but I have been reliably informed that it can be locked down pretty tight [03:22] depending on what you're running [03:22] sudo has its uses [03:22] i don't believe in using it all the time (like, say, ubuntu tries to insist on) [03:22] that's pointless [03:22] now i can set this packageroot i suppose [03:23] I have witnessed peoples servers getting 'rooted' purely from sudo.. but then again those people were re-using passwords from public shell boxes on their own private server [03:23] go figure :) [03:23] ugh :) [03:23] it's amazing what goes on really [03:23] indeed [03:23] option is invoked. An example setting would be "ftp://ftp3.FreeBSD.org". [03:23] Personally I use sudo all the time on my personal boxes. I am the only user on the box, and my password is a secure one [03:23] hmm [03:23] ok that's not so hard [03:23] now i need to find close mirror [03:23] plett: i'm the same tbh [03:23] it's just me being lazy and not wanting to type two passwords too [03:24] bob^^: You can set sudo up as NOPASSWD, so it just does it without prompting for your password, if you wish ;) [03:24] that's how i have it :) [03:24] dirty, but i'm quite happy with it on my personal stuff with just me using it [03:26] wtf [03:26] vim is installing ruby? [03:27] and x stuff [03:27] argh [03:27] tcl, ruby, hicolor-icon theme [03:27] python, perl [03:28] vim-lite [03:28] is what you want [03:28] oh [03:28] and this is why you want the ports tree [03:28] i tried to google [03:28] you can customise stuff before it installs then [03:28] use ports. [03:28] SECURITY NOTE: The VIM software has had several remote vulnerabilities [03:28] discovered within VIM's modeline support. It allowed remote attackers to [03:28] execute arbitrary code as the user running VIM. All known problems [03:28] wow?! [03:29] y'know it seems pretty snappy [03:29] other than being a bit confusing [03:30] ok suppose should use ports tree [03:31] mercutio: it is very easy, just use this -> http://pastebin.com/XBCqFdWe ... save it as /etc/csup-ports.conf [03:32] then run [03:32] i found a tarball [03:32] csup /etc/csup-ports.conf [03:32] nah just do this [03:32] that's not cvsup is it? [03:32] i have bad memories of cvsup [03:32] no, it is csup [03:32] yeh forget cvsup [03:32] you don'tneed it [03:32] csup is in base [03:33] do what I said and it will download the ports tree painlessly [03:33] :) [03:33] should i extra tarball first? [03:33] or not bother? [03:33] forget the tarball [03:34] nesta: are you serious?! [03:34] portsnap [03:34] !! [03:34] portsnap fetch extract [03:34] ok downloading [03:34] job done [03:34] way quicker too [03:34] * nesta shrugs [03:34] different strokes [03:34] :) [03:34] hehe true enough :) [03:34] i dunno i'm not really in a rush [03:35] i've got curl and vim [03:35] and ssh [03:35] since portsnap arrived i haven't gone back, i love it :) [03:35] what more could i need? [03:35] this is why *nix rocks [03:35] many different paths [03:35] exactly [03:35] pick what you want and do it the way you like [03:35] actually i wanted tmux [03:35] have you guys tried tmux? [03:36] not personally but i've heard it's good [03:36] i still use screen [03:36] mercutio: What makes it better than screen? [03:36] plett: the code isn't dirty [03:36] it's in base isn't it? [03:36] I still <3 screen [03:36] it doesn't seem to be in freebsd base [03:36] it's in openbsd base [03:36] no bob^^ its not [03:36] ah, that's right, it's openbsd that ships with it [03:36] mercutio: do you code? [03:37] there was talk of putting it in freebsd on a mailing list a while back [03:37] nesta a little [03:37] I've not looked at the source for either, but screen works well enough for me [03:37] i used to code [03:37] then i got slack [03:37] i was trying to do some modifcations to squid today [03:37] i hate squid's code [03:37] but like seriously, when code is disgusting it makes me not want to use the program [03:37] tmux++ [03:38] used screen for years, but haven't used it once since i first installed tmux [03:38] actually some gnu code is pretty disgusting [03:38] jlg: ditto [03:38] i just used it in case my shells died normally with screen [03:38] but with tmux i find myselfa actually using multiple windows [03:38] once i got my .tmux.conf how i wanted it, it just rocks [03:38] i use it to run irssi [03:38] brb! [03:38] i liek it how it updates the line at the bottom with what's running in the shell [03:39] mercutio: yeah, makes it handy when you're waiting on something to finish [03:39] the visual notifications too [03:39] i dunno it just seems like it did what screen set out to do but properly and nicely and cleanly [03:39] oh yeah [03:39] * jlgaddis nods [03:39] like i always know hwen i have mail [03:39] cos it'll inverse the colours [03:40] years ago i used to be a text mode junky [03:40] and i had a computer without much resources [03:40] i still am =) [03:40] and i hated screen with a passion [03:40] but still used it because it was handy [03:40] i spend probably 90% of my time staring at terminals [03:40] but like you could seriously notice it slowing down and bloating up [03:40] back then i was like "why's curses so slow?" [03:41] i was like used to dos etc [03:41] where text was fast, then everything in text moed was slow [03:41] but some things way slowe than others [03:41] linux 2.1 sped up text mode a lot [03:41] jlg: oh i actualyl used to use text mode [03:41] not X [03:41] with terminals [03:41] then i shifted to ion [03:41] and X [03:42] but mostly so that i could use firefox occasionally [03:42] it wasn't firefox [03:42] netscape navigator [03:42] then mozilla [03:42] netscape navigator was really gay [03:42] motif is slow too [03:43] yep, on my linux box at home i just use an 80x50 console. when i need a gui (for chrome or something), i fire up awesome. [03:43] it looked better than tcl/tk [03:43] i'm a total cli nerd [03:43] jlg: ever heard of svgatextmode? [03:43] yeah [03:43] jlg: i rebound my keys [03:43] so i could have more virtual consoles [03:43] like 30 of them [03:43] and then i had single number pads keys to hop desktops [03:43] or alt-ctrl [03:44] modifieriers [03:44] to get 10 more on each [03:44] then like i hacked getty [03:44] to "autoload" programs [03:44] on various virtual desktops [03:44] virtual screens i should say [03:44] so like i booted my computer [03:44] and up would come 6 web browsing esesions [03:44] on like 78 9 [03:44] 4 5 6 [03:44] where 4 5 6 were google [03:45] 7 was like slashdot 8 was freshmeat, 9 was lwn or something [03:45] then 1 2 3 [03:45] would start shells in download directory [03:45] then like alt-1 to 9 etc [03:45] would start in ~/src [03:45] etc etc etc [03:45] it works well [03:45] worked [03:46] in the end i had the getty so you pressed enter to start a shell [03:46] cos shells took up ram etc [03:46] and soemtiems i closed them [03:46] cos i had a puny machine [03:47] then i wrote my own irc client [03:47] cos epic/bitchx etc were memory hogs [03:47] and took up like 2 megs+ [03:47] god [03:47] i started ranting there [03:48] 2 megs memory now days is like nothing [03:48] holy hell man, give your enter key a break! =) [03:48] hahah [03:48] i gotta go into scrollback to read what you said while i was gone for a minute :P [03:52] heh [03:53] i wonder what memory use is like these days [03:54] ben 21805 0.2 0.3 7896 2752 pts/9 S+ Jun19 102:30 epic4 mercutio irc.freenode.net [03:54] it didn't get much worse [03:54] wow, epic4 [03:54] i haven't seen that name in a long time [03:54] linux bloated up from libc5 to glibc [03:54] hmm it's what i used before i wrote my own irc client, and what i went back to [03:55] it's ok, not wonderful, not terrible [03:55] i used irssi once a little bit, it actually seemed ok [03:55] yeah, i moved from ircii to epic to irssi [03:55] epic, mutt, and vim are probably the programs i've used the longest [03:56] i moved ircii, epic, fade, epic [03:56] my irc client was called fade [03:56] it was real simple [03:56] heh, irssi, mutt, and vim are probably the three i use the most [03:56] like 28k binary or something [03:56] used readline [03:56] and other than that just as basic as you can get pretty much [03:57] no dcc, etc etc [03:57] always logged to a file set on command line [03:57] set nick and server name like in epic [03:57] just on command line [03:57] but it managed to make my machien swap less [03:58] what made you move to irssi? [03:59] nfi [03:59] it's been a long time ago [03:59] i used it for a brief moment and it seemed to have more sensible keys i seem to recall [03:59] gah i'm going to try it now [03:59] brb [03:59] *** mercutio has quit IRC (Quit: oops) [03:59] initially, i think it support for perl scripting [04:00] *** mercutio has joined #arpnetworks [04:00] i had to type /server irc.freenode.net ? [04:02] ben 17165 0.1 0.5 11128 4512 pts/9 S+ 23:02 0:00 irssi mercutio irc.freenode.net [04:02] and it does use a bit more ram [04:02] not that it really matters [04:09] jlgaddis 1705 0.0 1.1 54532 9064 pts/2 S+ May27 19:17 irssi [04:09] i'm in about 15 channels across 4 servers, though, if that makes a difference [04:09] rob 2938 0.0 1.1 16040 11012 p1 S+ 26Aug10 342:45.11 irssi [04:10] three servers and 16 channels total for me [04:10] bob^^: heh, reboot often? :P [04:10] nope [04:10] :) [04:11] what about this one: [04:11] 12:14PM up 1823 days, 38 mins, 2 users, load averages: 0.00, 0.00, 0.00 [04:12] oh you run one instance for multiple servers? [04:13] nope, that's just an old box we keep now for uptime records lol [04:13] oh you mean on irssi [04:13] yeah [04:14] i have three servers configured inside my irssi [04:14] anyway - got to go for lunch, back shortly [04:14] bob^^: 1942 days, as recorded when we shut it down: http://flickr.com/gp/plett/99B94r [04:15] I'm not sure whether to be more proud of the reliable power etc, or embarased that a box that old was still running [04:18] http://www.flickr.com/photos/jlgaddis/4340673033/in/photostream [04:18] we "found" that server one day [04:18] jlg: wow [04:18] can you call it a server when it runs windows? [04:18] nowhere near you guys and your 1800-1900 days, but i thought it was pretty damn impressive for a windows box [04:19] mercutio: according to our windows guys, yeah [04:27] bob^^: you use extreme stuff right? have you ever seen show odometers come out with crazy values for days in service? [05:26] LT: only when they've been up for crazy days ;) [05:27] but no, i don't think so - what switch? [05:27] plett: i know what you mean about being embarrased about boxes with uptimes like that :) [05:34] bob^^: as an example Slot-2 : X450a-24x 19713 Apr-28-2007 [05:35] hmm, no, that is odd though [05:35] i don't have any x450's though, only x350 and 48si these days :( [05:36] LT: [05:36] Switch : X350-24t 1141 Jun-05-2008 [05:36] which seems okay [05:36] all the x350's i have access to from here look reasonable [05:37] most of ours are right, just the odd one here and there. even in a single stack all purchased together there are some correct and some not [05:37] that's odd [05:37] have you reported to extreme? [05:37] (oh - different xos or anything like that maybe?) [05:38] can't stack them unless they're all the same version... 12.3.4 something or other [05:38] ahh okay, like a blackdiamond with two msms then [05:38] makes sense [05:40] pretty much... the code seems to think it is a chassis half the time, stack members even get called slots in most places [05:41] hah, not surprising i suppose, they're probably trying to keep the config sane [07:29] *** Tadaka has joined #arpnetworks [08:25] *** jpalmer has quit IRC (Quit: leaving) [08:29] *** DDevine has quit IRC (Ping timeout: 264 seconds) [08:30] *** ariel has left "Leaving" [08:41] *** DDevine has joined #arpnetworks [08:42] *** _id has quit IRC (Read error: Connection reset by peer) [08:44] *** _id has joined #arpnetworks [08:48] *** nerdd_ has joined #arpnetworks [08:50] *** LT has quit IRC (Quit: Leaving) [08:51] *** nerdd has quit IRC (Ping timeout: 276 seconds) [09:24] *** DDevine has quit IRC (Ping timeout: 260 seconds) [09:54] *** HighJinx has quit IRC (Ping timeout: 260 seconds) [10:37] *** HighJinx has joined #arpnetworks [11:27] so much interesting scrollback i'm going to have to read later... [11:27] my extreme: [11:27] Service First Recorded [11:27] Field Replaceable Units Days Start Date [11:27] --------------------------------------------------------------- [11:27] Switch : X350-48t 49 Jun-02-2011 [11:27] XGM2-1 : [12:37] *** jpalmer has joined #arpnetworks [12:37] up_the_irons: ping? [12:46] *** heavysixer has quit IRC (Remote host closed the connection) [13:12] *** jpalmer has quit IRC (Quit: leaving) [13:31] *** heavysixer has joined #arpnetworks [13:31] *** ChanServ sets mode: +o heavysixer [14:03] *** Tadaka has quit IRC (Quit: Computer has gone to sleep) [16:51] What constitutes as a "long-time customer?" [17:08] like, 10 billion years [18:22] *** jpalmer has joined #arpnetworks [19:10] *** RandalSchwartz has quit IRC (Ping timeout: 260 seconds) [19:33] *** phlux has quit IRC (Quit: ZNC - http://znc.in) [19:38] *** kennyz has quit IRC (Ping timeout: 260 seconds) [19:42] *** DDevine has joined #arpnetworks [19:46] *** HighJinx has quit IRC (Ping timeout: 260 seconds) [19:48] *** phlux has joined #arpnetworks [19:49] *** DDevine has quit IRC (Read error: Operation timed out) [19:49] *** phlux is now known as Guest39746 [19:59] hmm [19:59] I can't mount my second drive (/usr/ports) [20:00] mount -tauto /dev/ad1s1 /usr/ports says "Operation not supported by device" [20:00] any ideas? [20:00] *** Guest39746 is now known as phlux [20:04] ah..got it. [20:04] mount -r. [20:04] hmm or not [20:05] Ok..mount without any flags worked. [20:05] Bleh [21:06] *** amdprophet has joined #arpnetworks [21:07] are there any issues with kvr11? [21:17] up_the_irons: not able to VNC into kvr11 [21:17] up_the_irons: our vm seems to be down too [21:20] amdprophet: log into the portal, and boot your vps. [21:20] hard shutdown, wait 1 min, boot. [21:20] jpalmer: will try [21:23] jpalmer: that worked, thanks! [21:26] np [21:33] *** kennyz has joined #arpnetworks [22:24] *** Olipro has quit IRC (Ping timeout: 255 seconds) [22:26] *** Olipro has joined #arpnetworks [22:58] *** Olipro has quit IRC (Read error: Connection reset by peer) [23:00] *** Olipro has joined #arpnetworks