[05:50] *** raptelan has joined #arpnetworks [06:41] *** hive-mind has quit IRC (Remote host closed the connection) [06:42] *** hive-mind has joined #arpnetworks [07:45] m0unds: sorry for being a dick the other day [09:16] anybody have unscheduled reboots or the like on kvr26 5 days ago? [09:55] *** jamiem_ is now known as jm|laptop [10:38] phlux: no worries dude; didn't think you were being a dick [10:38] toddf: nope, pretty sure i'm on 26 and i have almost 60 days up [10:39] m0unds: vnc access info or portal would tell you which one you're on. so something about this specific system spontaneously rebooted 5 days ago, just ralized this morning of course [10:39] toddf: i know [10:39] was in the process of logging in, but had to bring my vpn up first [10:39] oh, sorry - 27 [10:39] not 26 [10:40] logging in? vpn? your kvm has a vpn before you can signon to it? [10:40] ... [10:40] i need internet access to get to the panel, right? [10:40] so..vpn [10:40] :) [10:40] portal.arpnetworks.com is std internet, you are perhaps somewhere you can't just do personal stuff I guess ;-) [10:40] exactly [10:41] our IS folks are nosy nosy nosy [10:41] m0unds: But IRC is fine? [10:41] they spend more time watching what people do than blocking stuff people shouldn't be using [10:41] irc is via ssh, which they don't care about [10:41] they literally only examine 443 and 80 tcp [10:41] it's terribad [10:42] they use one of these appliances: https://www.stbernard.com/products/web_security/default.asp [10:42] arpnetworks should permit alternate portal access at https://portal.arpnetworks.com:1337 [10:42] hahah [10:42] yeah [10:42] (note to up_the_irons: that was a joke, I don't see value, really) [10:45] that stbernard link's SSL cert doesn't match the domain... lol [10:45] yeah [10:45] it's horrible anyway [10:45] m0unds: ssl mitm? [10:45] so many ways to bypass its content inspection [10:45] i hope so [10:46] you can do something as simple as binding something in your hosts file and it'll skip right over [10:46] lol otherwise, that would mean lots of people blindly clicking through the "invalid ssl cert" warning [10:46] heh [10:46] yeah [10:47] just really crappy all around [10:47] they like "magic boxes" that do stuff you could do without spending a ton of cash [10:47] (Or they install a matching root CA in every system) [10:47] heh [10:48] the network admin doesn't understand ntp, so time is different on different domains because none of the DCs have a single authoritative time source [10:48] but... but... [10:48] * brycec starts scheming on how to exploit this and win big [10:48] so timeclocks are 2 mins ahead, our domain is 2 mins behind, slots time is 90 seconds ahead [10:49] every time another department reviews video and sees a time difference bw slots/player tracking and our video, the network admin will blame us for it [10:50] hahaha oh god I didnt' even think about that. [10:51] our time is synced w/a gps clock source [10:51] "iPrism" lol [10:51] yeah [10:51] badprism [10:51] hahaha [10:51] m0unds: And other stratum 1/2 hosts too, I hope [10:52] GPS is less reliable than NTP alone [10:52] (but don't worry, there's a magic box for NTP too) [10:52] regulations prohibit any external network comms w/this system [10:52] so i can't have any external source unfortunately [10:52] Except for GPS. GPS is external :P [10:53] external network comms though, not time slice comms :P [10:53] (And spoofable...) [10:53] It seems so alien to me in this day and age to have a network taht is completely isolated from the Internet. [10:54] haha [10:54] it's pretty common with industrial control systems and in surveillance networks that aren't IT-operated [10:55] getting less common i guess with control stuff, which is kinda bad since tons of those are really poorly architected security-wise [10:56] http://www.spectracomcorp.com/ProductsServices/TimingSynchronization/NetworkTimeServers/9483NetClockTimeServer/tabid/1439/Default.aspx this is similar to what we have, newer model though [10:57] Just get a lump of cesium. [10:58] m0unds: Yeah I understand there are some terrific reasons for air-gap'd networks. Still strange to me though when I encounter them. (Or when I have to design them - I take pool.ntp.org for granted) [10:58] Ooh pretty [10:58] in our case, i don't really understand why we need it separate except from IT's network [10:59] Because your IT isn't worth shit, apparently :P [10:59] we've got an ASA 5505 between us and them for getting point of sale data - micros just streams transaction log data to us [10:59] but that's the only connectivity allowed via regs [11:00] yeah, i kinda despise them. casino ops IT staff make about 30% more than i do, and they suck at everything they do :) [11:01] out of curiosity: is there something like DCF77 in nothern america? [11:01] http://en.wikipedia.org/wiki/DCF77 [11:01] Yes [11:01] DCF77 :: DCF77 is a German longwave time signal and standard-frequency radio station. It started service as a standard-frequency station on 1 January 1959. In June 1973 date and time information was added. Its primary and backup transmitter are located at 50°0′56″N 9°00′39″E in Mainflingen, about 25 km south-east of Frankfurt am Main, Germany. DCF77 is controlled by the Physikalisch-Technische Bundesanstalt (PTB), Germany's national... [11:01] Whatever the heck NIST blasts out [11:01] (among others) [11:02] "NIST's Boulder laboratories are best known for NIST‑F1, which houses an atomic clock. NIST‑F1 serves as the source of the nation's official time. From its measurement of the natural resonance frequency of caesium—which is used to define the second—NIST broadcasts time signals via longwave radio station WWVB near Fort Collins, Colorado, and shortwave radio stations WWV and WWVH, located near Fort Collins and Kekaha, Hawaii, ... [11:02] ... respectively.[10]" [11:03] Perhaps more info at time.gov [11:03] Tada http://www.nist.gov/pml/div688/grp40/wwvb.cfm [11:04] oh, nice [11:04] my watch syncs with wwvb [11:04] * m0unds is from boulder [11:05] just as an aside, haha [11:05] lol m0unds [11:05] the nist building at broadway and baseline is kinda funny looking [11:05] tons of radio antennas [11:05] My watch syncs with pool.ntp.org :P (via my phone) [11:06] haha [11:06] toddf: kvr26: [11:06] $ uptime [11:06] 10:58:56 up 653 days, 8:44, 3 users, load average: 2.03, 2.09, 2.15 [11:06] $ [11:07] kvr18 had an unexpected reboot [11:07] maybe you meant that [11:07] m0unds: On a related note, my car syncs with GPS. It also assumes all of Idaho is Mountain time, and annoyingly changes the timezone automatically if I leave "GPS Sync" enabled. [11:08] haha, whaaaaat? FANCY CAR [11:08] It is kinda fancy, and not "super expensive" (MSRP is somewhere around $25k) [11:08] aw, that'd be sad. manually changing the time zone on long road trips is part of the fun. [11:08] Now if only it didn't assume all of Idaho was one timezone. [11:11] up_the_irons: nope, this host is clearly kvr26. so either openbsd rebooted straight away, or the kvm process itself died and immediately came back. neither sound very plasuble. yet I have system logs that show nothing leading up to a dmesg spew in /var/log/messages saying / was not unmounted cleanly. *scratches head* [11:11] er [11:11] toddf: using virtio for NIC? [11:11] Clearly toddf should be leaving something connected to console.arpnetworks.com for logging :P [11:12] i've seen that happen to newer linux VMs with virtio on <= kvr26 [11:12] brycec: lol [11:12] kvr18 .. there ya go, I crosseyed my notes on which vms are on which kvr systems [11:12] sorry for the noise [11:12] haha [11:12] np [11:12] I do have another host on kvr26 with a very similar name [11:12] 1120 days of uptime on kvr18 :) [11:12] yeah [11:16] ugh. i thought my ssd in my workstation took a dump, but it appears as though it's not the ssd. ah-boo. [11:16] You're upset the SSD is apparently okay? [11:17] yeah, because other stuff is more expensive, lol [11:18] machine randomly hard crashed and the ssd disappeared. swapped it to another port, still wouldn't show up. [11:19] but it's working alright, connected via my little ext sata>usb thing [14:12] m0unds: ocz? :) [14:12] ocz, and other sandforce used to do weird stuff like that [14:15] haha, nope. samsung 840pro [14:16] 256GB size [14:20] weird [14:20] i wonder if it's the motherboard [14:20] i've seen onboard ethernet randomly die [14:22] other disks on the thing work fine [14:22] this won't work regardless of which sata3 port i use [14:23] tried a sata cable from another working disk, but taht didn't make any difference either [14:25] i'll try it in another system when i get home tonight, just didn't have time to do that before i left for work [16:25] do you have any sata2 ports? [16:25] although things like linux tell you if it's training down [16:26] not detecting at all seems like some kind of firmware bug? [16:26] not on that board, nope [16:27] it does seem like it might be firmware-related [16:28] was pricing stuff out, and i'm hopeful it's just the ssd and not a faulty mainboard or anything. ASUS' RMA process blows and I don't wanna spend more money on the AMD stuff [16:36] *** grepidemic has quit IRC (Ping timeout: 268 seconds) [16:38] *** grepidemic has joined #arpnetworks [17:24] mainboards cost about the same as ssd's :) [17:24] i haven't rma'ed with asus [17:25] i imagine if there were huge intel issues we'd hav heard about it [17:25] and i imagine it's not one of the original i5 boards with sata3 ports that die, as you'd then have sata 2 ports too [17:25] they sure do, but i also said i don't want to spend any more money on amd stuff [17:25] oh you're using amd board [17:26] i haven't touched anything amd in yeras [17:26] i remember via chipsets suck? [17:26] i dunno who makes chipsets for amd now [17:26] amd does [17:26] and has for years [17:26] since probably 2005 [17:26] oh [17:26] i had amd k6-2 500 [17:26] or something [17:26] k6-3 450? [17:26] i can't remember [17:27] but that would have been before 2005 [17:27] yea, i had one of those back in like 1997 or 1998 [17:27] and back then amd weren't making chipsets [17:27] oh hangon [17:27] i had athlon 64 [17:27] bah i dunno [17:27] but ok amd maek chipsets, intel makes chipsets [17:27] that was around when they started making their own chipsets, after all the nvidia screw-ups [17:27] nforce garbage [17:27] via and nvidia and so forth probably don't make chipsets at all anymore [17:28] haha [17:28] the nvidia and via were both crap [17:28] but intel had some lousy chipsets back then [17:28] yea [17:28] with cahce limitations etc [17:28] but newer intel and amd chipsets were both pretty good [17:28] amd beat intel to market with native usb3 and sata3 and stuff [17:28] they both do uefi now [17:29] cool [17:29] without needing add-on controllers (jmicro, marvel, etc) [17:29] usb3 is handy [17:29] yep [17:29] i have a usb3 hard-drive [17:29] 2.5" single cable, fast speeds [17:29] yea, my little sata > usb dongle is usb3 [17:29] i bought it to image my disk when i got an ssd for my macbook [17:30] yeah i was wondering about ssd imaging [17:30] is it easy to do it on macs and windows etc? [17:30] i forgot the name of the utility i used on the mac, but it was fast [17:30] haven't done it on windows yet [17:30] well, i do it at work [17:30] we use ghost for system images for recorders and such [17:30] * m0unds forgot about that [17:30] on linux i just use dd [17:31] but we use enterprise grade intel disks and we haven't had any fail yet, so it's just when we provision a new box that we do it [17:31] i'd still want to do it every now and then [17:31] even the disk doesn't fail the user could fail [17:32] well, these machines run 24/7 because they're recording video and don't have much, if any user interaction [17:32] they just run video chunkers and telemetry applications and chug away [18:14] *** xales has quit IRC (*.net *.split) [18:14] *** jcv has quit IRC (*.net *.split) [18:14] *** mike-burns has quit IRC (*.net *.split) [18:14] *** NiTeMaRe has quit IRC (*.net *.split) [18:14] *** twobithacker has quit IRC (*.net *.split) [18:14] *** staticsafe-znc has quit IRC (*.net *.split) [18:14] oh right [18:14] and so you can prob go back to scracth fine [18:16] yep, app servers build the configs and stuff - so we just drop the image on it, name the device and when the recording application starts back up, the app servers configure it and it's good to go [18:20] https://lists.dns-oarc.net/pipermail/dns-operations/2014-March/011417.html [18:27] http://www.titanfall.com/news/we-hate-cheaters-just-as-much-as-you-do [18:27] i like "the wimbledon of aimbot contests" [18:37] m0unds: Carbon Copy Cloner? [18:37] 17:28:46 < m0unds> i forgot the name of the utility i used on the mac, but it was fast [18:37] Also, Clonezilla ftw [18:37] brycec: that's the one [18:38] carbon copy cloner [18:50] I think the carbon copy cloner guy made a lot of sales to those of us who installed aftermarket ssds in mac laptops :) [18:50] yeah, for sure [18:50] *** xales has joined #arpnetworks [18:50] *** jcv has joined #arpnetworks [18:50] *** mike-burns has joined #arpnetworks [18:50] *** twobithacker has joined #arpnetworks [18:50] *** staticsafe-znc has joined #arpnetworks [18:50] *** hobana.freenode.net sets mode: +o mike-burns [18:51] also got trim enabler, because osx doesn't enable trim for non-oem disks [18:51] I actually emailed him to say kudos for his non-crippled shareware (well, adware) policy [18:51] dunno if it's still that way now [18:51] (about the sales policy, not the trim thing) [18:52] *** NiTeMaRe has joined #arpnetworks [19:46] m0unds: that sounds like it's going to be hilarious [19:46] i would totally watch a fight entirely with aimbots [19:53] yeah [20:11] It's more fun to mess with them if you have admin commands. [20:13] You could do things like fling them across the board. [20:13] i was always a fan of cexec commands in half-life mods [20:13] admin_cexec bind mouse1 "kill" [20:14] person clicks their fire button and they commit suicide [20:14] admin_cexec player bind mouse1 "kill" , rather [20:14] Or invert their axes, so that trying to turn left makes them turn right and vice versa. [20:14] admin_execall "speak sub team report to locker room for but inspection and whiskey i scream" was a server macro on our counter-strike server back in the day [21:10] *** Hien_ has quit IRC (Ping timeout: 246 seconds) [21:10] *** treshoem2 has quit IRC (Ping timeout: 246 seconds) [21:10] *** treshoem2 has joined #arpnetworks [21:10] *** Hien has joined #arpnetworks