ru.unix.bsd

 
 - RU.UNIX.BSD ------------------------------------------------------------------
 From : Vadim Goncharov                      2:5020/400     07 Nov 2005  13:47:55
 To : All
 Subject : router 4.11 -> 5.4 minor troubles
 -------------------------------------------------------------------------------- 
 

 Перевел маршрутизатор с 4.11-STABLE на 5.4-STABLE, все работает, правда есть
 несколько мелких, но раздражающих проблем.
 
 Во-первых, rpcbind зачем-то пытается использовать IPv6 (а ядро
 скомпилено без него). В стартовых скриптах ничего конфигурируемого не
 нашел по нему.
 
 Во-вторых, хотя конфиг не менялся (только пути к файлам),
 named (открыт не на весь мир, аобычно отправляет форвардерам)
 стал писать в логи пачки сообщений вида:
 
 Nov  7 00:00:02 router named[8026]: FORMERR resolving
 'ntp.tpu.ru/AAAA/IN': 212.73.124.2#53
 Nov  7 00:00:02 router named[8026]: FORMERR resolving
 '102.112.183.213.in-addr.arpa/PTR/IN': 212.7
 3.124.2#53
 Nov  7 00:00:02 router named[8026]: FORMERR resolving
 '102.96/27.112.183.213.in-addr.arpa/PTR/IN':
  212.73.124.2#53
 Nov  7 00:00:04 router named[8026]: FORMERR resolving
 'www.go.microsoft.akadns.net/A/IN': 212.73.1
 24.2#53
 Nov  7 00:00:05 router named[8026]: FORMERR resolving
 'lb1.www.ms.akadns.net/A/IN': 212.73.124.2#5
 3
 
 В-третьих, коннект к серверу по ssh c винды из PuTTY стал ощутимо
 медленнее, секунд 5 субъективно до выдачи приглашения логина. С DNS
 проблемы быть не должно - сервер тут же, на этом же хосте.
 
 Дальше следуют логи, слегка причесанный tcpdump:
 
 15:01:48.993401 IP nuclight.8291 > router.22: S 
 3527997156:3527997156(0) win 16384 <mss 1460,nop,nop,sackOK>
 ...
 15:01:49.167314 IP router.22 > nuclight.8291: P 642:922(280) ack 516
 15:01:49.305358 IP nuclight.8291 > router.22: . ack 922 win 16599
 ...
 15:01:50.799407 IP nuclight.8291 > router.22: P 516:788(272) ack 922
 15:01:50.899347 IP router.22 > nuclight.8291: . ack 788 win 65535
 15:01:50.917280 IP router.22 > nuclight.8291: P 922:1706(784) ack 788
 15:01:51.108301 IP nuclight.8291 > router.22: . ack 1706 win 17520
 15:01:52.953028 IP router.22 > nuclight.8291: . ack 856 win 65535
 15:01:52.953791 IP router.22 > nuclight.8291: P 1706:1758(52) ack 856
 15:01:53.111496 IP nuclight.8291 > router.22: . ack 1758 win 17468
 15:01:54.757095 IP nuclight.8291 > router.22: P 856:924(68) ack 1758 win 17468
 15:01:54.786223 IP router.22 > nuclight.8291: P 1758:1826(68) ack 924
 15:01:54.789805 IP nuclight.8291 > router.22: P 924:1024(100) ack 1826 win 17400
 15:01:54.822217 IP router.22 > nuclight.8291: P 1826:1894(68) ack 1024
 ...
 15:01:57.488306 IP nuclight.8291 > router.22: P 1024:1076(52) ack 1894 win 17332
 15:01:57.500614 IP router.22 > nuclight.8291: P 1894:1946(52) ack 1076
 
 Лог установления соединения в PuTTY:
 
 2005-11-07 15:01:38   Looking up host "router.avtf.net"
 2005-11-07 15:01:39   Connecting to 82.117.64.129 port 22
 2005-11-07 15:01:39   Server version: SSH-2.0-OpenSSH_3.8.1p1
 FreeBSD-20040419
 2005-11-07 15:01:39   We claim version: SSH-2.0-PuTTY-Release-0.57
 2005-11-07 15:01:39   Using SSH protocol version 2
 2005-11-07 15:01:39   Doing Diffie-Hellman group exchange
 2005-11-07 15:01:39   Doing Diffie-Hellman key exchange
 2005-11-07 15:01:43   Host key fingerprint is:
 2005-11-07 15:01:43   ssh-dss 1024
 df:5f:06:0e:c4:9b:e2:5f:ba:5c:64:96:f1:4d:0d:3c
 2005-11-07 15:01:43   Initialised AES-256 client->server encryption
 2005-11-07 15:01:43   Initialised AES-256 server->client encryption
 2005-11-07 15:01:43   Initialised HMAC-SHA1 client->server MAC algorithm
 2005-11-07 15:01:43   Initialised HMAC-SHA1 server->client MAC algorithm
 2005-11-07 15:01:48   Access granted
 2005-11-07 15:01:48   Opened channel for session
 2005-11-07 15:01:48   Allocated pty (ospeed 38400bps, ispeed 38400bps)
 2005-11-07 15:01:48   Started a shell/command
 
 Для сравнения, аналогичный на соседнем сервере с 4.11, где все быстро:
 
 2005-11-07 13:56:05   Looking up host "hostel.avtf.net"
 2005-11-07 13:56:06   Connecting to 82.117.64.190 port 22
 2005-11-07 13:56:07   Server version: SSH-1.99-OpenSSH_3.5p1
 FreeBSD-20030924
 2005-11-07 13:56:07   We claim version: SSH-1.5-PuTTY-Release-0.57
 2005-11-07 13:56:07   Using SSH protocol version 1
 2005-11-07 13:56:07   Received public keys
 2005-11-07 13:56:07   Host key fingerprint is:
 2005-11-07 13:56:07         1024
 53:fa:aa:46:97:4b:61:c1:af:1d:41:23:9d:d9:d2:bc
 2005-11-07 13:56:07   Encrypted session key
 2005-11-07 13:56:07   AES not supported in SSH1, skipping
 2005-11-07 13:56:07   Using Blowfish encryption
 2005-11-07 13:56:07   Trying to enable encryption...
 2005-11-07 13:56:07   Initialised Blowfish encryption
 2005-11-07 13:56:07   Installing CRC compensation attack detector
 2005-11-07 13:56:07   Successfully started encryption
 2005-11-07 13:56:10   Sent username "vadim"
 2005-11-07 13:56:13   Sending password with camouflage packets
 2005-11-07 13:56:13   Sent password
 2005-11-07 13:56:13   Authentication successful
 2005-11-07 13:56:13   Allocated pty (ospeed 38400bps, ispeed 38400bps)
 2005-11-07 13:56:13   Started session
 
 -- 
 WBR, Vadim Goncharov. ICQ#166852181       mailto:vadim_nuclight@mail.ru
 [Moderator of RU.ANTI-ECOLOGY][FreeBSD][http://antigreen.org][LJ:/nuclight]
 --- slrn/0.9.8.1 on FreeBSD 4.11/i386
  * Origin: Nuclear Lightning @ Tomsk, TPU AVTF Hostel (2:5020/400@fidonet)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор