From owner-freebsd-questions@FreeBSD.ORG Sun Feb 10 14:34:20 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 326CDCEF for ; Sun, 10 Feb 2013 14:34:20 +0000 (UTC) (envelope-from laszlo_danielisz@yahoo.com) Received: from nm1.bullet.mail.bf1.yahoo.com (nm1.bullet.mail.bf1.yahoo.com [98.139.212.160]) by mx1.freebsd.org (Postfix) with SMTP id DFCFACE for ; Sun, 10 Feb 2013 14:34:19 +0000 (UTC) Received: from [98.139.214.32] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 10 Feb 2013 14:34:17 -0000 Received: from [98.139.215.230] by tm15.bullet.mail.bf1.yahoo.com with NNFMP; 10 Feb 2013 14:34:17 -0000 Received: from [127.0.0.1] by omp1070.mail.bf1.yahoo.com with NNFMP; 10 Feb 2013 14:34:17 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 333489.8770.bm@omp1070.mail.bf1.yahoo.com Received: (qmail 70177 invoked by uid 60001); 10 Feb 2013 14:34:17 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1360506857; bh=YE+PPV/hsP8f40ilapvgQB0mR5/NkSrJJo4pxpWkhzY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=VfyKiNH2liYMz+EFPUuOgOV8l47agU4aRD4DtClcWhJaqmAZbdzeaAWJAY5twHFSLqLR5zTHXFVq+CAYBQwmmi/+vP7IJ0yhswsvd1mhcpPgegtJ7SqKnZqWvidzt53w9e4gmfCr55fEtM+LPNF2YjIFQB9wpLKlY9VSl5xmbPs= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=eqHDAywtybylgY+Nkhnqdse5rZiEZqsOaMiNixzZMPb3cFdm/DSrz80R+sqZK5InSnNcHbkdnaAv4mkcaUBmd/OO5+lK2R/lZx805Kx2/WQbvf7z+VWUQ4lUkHJ2P8jW5eL6YcBOkNpVOSQQwU3e2RfHX468c0qrKgAJcZVpinI=; X-YMail-OSG: sBTzxFUVM1mLrHTVnhdVeBMByYkZW3lsfXX6hCgUG.7b0qo cJX1PTwGx6hjDKADt3ppSf1yPxOktBxremZbAmhiO4UBLguVAZUcIjGRoSmn 8zTHEgwfr02uuLQuYFYQqYB8f_y2iWyyALrNSkTl_SysVZtq6f.1jgbqs4tX Rzj0jgZijnxap7eDwskfG.xvYgaH8uAud_DnO5725dDNtxGGlLxbtqnVCRQF tIqBjgJLJNFMEfrnNe8sm5DlbL6qOmnEEZ6ZVaDR7eYwhFC_VQB91.euIcBs Q47xaPD_3zWSJhWDokdRvaXIb8vsVkVbISR3y1knOQs3hRqyCAdXM5RSCCsc zap.6I03o1DYkJyvE9JwSfFkZjHvdYNK2vQ26VyFyyeMmWD0.j9jxdJhUxon LPGSVJZejDC4.cAppgAAwEtaZEk8RWoXDHEwFcVBD912LeY52tieai2vYMXw 8nhd9PrSJoMPaRpMB3BxXCPamX6FaHXx2wiB10MHUS7jpdHrrEtRBCGV99RA K4MjMA_PE.9cKqZbPwyOhOraF Received: from [89.133.20.225] by web160505.mail.bf1.yahoo.com via HTTP; Sun, 10 Feb 2013 06:34:17 PST X-Rocket-MIMEInfo: 001.001, CgpVaGgsIEkgZ290IGEgY291cGxlIG9mIGFuc3dlcnMgOikKVGh4IGV2ZXJ5Ym9keSEKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwogRnJvbTogTmlrb3MgVmFzc2lsaWFkaXMgPG52YXNzQGdteC5jb20.ClRvOiAiVGVza2UsIERldmluIiA8RGV2aW4uVGVza2VAZmlzZ2xvYmFsLmNvbT4gCkNjOiBEw6FuaWVsaXN6IEzDoXN6bMOzIDxsYXN6bG9fZGFuaWVsaXN6QHlhaG9vLmNvbT47IFBvbHl0cm9wb24gPGZyZWVic2RAZWR2YXguZGU.OyAiZnJlZWJzZC1xdWVzdGlvbnNAZnJlZWJzZC5vcmcBMAEBAQE- X-Mailer: YahooMailWebService/0.8.132.503 References: <1360479157.43293.YahooMailNeo@web160504.mail.bf1.yahoo.com> <20130210075713.e95310af.freebsd@edvax.de>, <511790C4.4070605@gmx.com> <13CA24D6AB415D428143D44749F57D7201EA6BC8@ltcfiswmsgmb21> <5117A5E3.6010503@gmx.com> Message-ID: <1360506857.11551.YahooMailNeo@web160505.mail.bf1.yahoo.com> Date: Sun, 10 Feb 2013 06:34:17 -0800 (PST) From: =?iso-8859-1?Q?D=E1nielisz_L=E1szl=F3?= Subject: Re: packages listing To: "freebsd-questions@freebsd.org" In-Reply-To: <5117A5E3.6010503@gmx.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: =?iso-8859-1?Q?D=E1nielisz_L=E1szl=F3?= List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Feb 2013 14:34:20 -0000 =0A=0AUhh, I got a couple of answers :)=0AThx everybody!=0A=0A=0A__________= ______________________=0A From: Nikos Vassiliadis =0ATo: "Te= ske, Devin" =0ACc: D=E1nielisz L=E1szl=F3 ; Polytropon ; "freebsd-questions@= freebsd.org" =0ASent: Sunday, February 10, = 2013 2:51 PM=0ASubject: Re: packages listing=0A =0AOn 2/10/2013 3:09 PM, Te= ske, Devin wrote:=0A> Just curious, why not use "pkg_info -Ra" instead of "= pkg_info -R '*'" ?=0A=0ABecause I didnt know -a;)=0A=0A=0A_________________= ______________________________=0Afreebsd-questions@freebsd.org mailing list= =0Ahttp://lists.freebsd.org/mailman/listinfo/freebsd-questions=0ATo unsubsc= ribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@FreeBSD.ORG Sun Feb 10 14:34:44 2013 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 8F5F7DA2 for ; Sun, 10 Feb 2013 14:34:44 +0000 (UTC) (envelope-from Devin.Teske@fisglobal.com) Received: from mx1.fisglobal.com (mx1.fisglobal.com [199.200.24.190]) by mx1.freebsd.org (Postfix) with ESMTP id 5FFF8DF for ; Sun, 10 Feb 2013 14:34:44 +0000 (UTC) Received: from smtp.fisglobal.com ([10.132.206.16]) by ltcfislmsgpa07.fnfis.com (8.14.5/8.14.5) with ESMTP id r1AEYh8M010607 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Sun, 10 Feb 2013 08:34:43 -0600 Received: from LTCFISWMSGMB21.FNFIS.com ([10.132.99.23]) by LTCFISWMSGHT05.FNFIS.com ([10.132.206.16]) with mapi id 14.02.0309.002; Sun, 10 Feb 2013 08:34:42 -0600 From: "Teske, Devin" To: Nikos Vassiliadis Subject: RE: vnet without epair Thread-Topic: vnet without epair Thread-Index: AQHOBt464Fa8DUsL5kqOlKb89O3Sd5hyJMWAgAAqfgD//8hg54ABPouA//+wx9GAAHqXAP//m/lBAAz9hAD//5vVRw== Date: Sun, 10 Feb 2013 14:34:42 +0000 Message-ID: <13CA24D6AB415D428143D44749F57D7201EA6C63@ltcfiswmsgmb21> References: <511671FA.3050801@a1poweruser.com> <511680AD.1040209@gmx.com>, <5116A452.6030104@a1poweruser.com> <13CA24D6AB415D428143D44749F57D7201EA6A3F@ltcfiswmsgmb21>, <511780DF.6010600@gmx.com> <13CA24D6AB415D428143D44749F57D7201EA6BAB@ltcfiswmsgmb21>, <5117A540.1060702@gmx.com> <13CA24D6AB415D428143D44749F57D7201EA6C2D@ltcfiswmsgmb21>, <5117A884.8020709@gmx.com> In-Reply-To: <5117A884.8020709@gmx.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.132.253.120] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.9.8327, 1.0.431, 0.0.0000 definitions=2013-02-10_04:2013-02-08,2013-02-10,1970-01-01 signatures=0 Cc: Fbsd8 , FreeBSD questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Feb 2013 14:34:44 -0000 On Sun, 10 Feb 2013, Nikos Vassiliadis wrote: > On 2/10/2013 3:56 PM, Teske, Devin wrote: > > > > Excellent! This is precisely what I was after when I wrote the vimage p= ackage and its contents. I'm familiar with IMUNES and netgraph fits the bil= l well (especially with "ngctl dot" being useful in providing visual confir= mation when you've achieved the desired network layout -- when "ngctl dot |= dot -Tsvg -o netgraph.svg" starts to look like your IMUNES graph, then you= know you're making progress toward having the right configuration). >=20 > You'll be soon hearing from me then! >=20 Here's some examples of "ngctl dot | dot -Tsvg -o" run on various ser= vers running my vimage package: http://druidbsd.sourceforge.net/download/warden0.jbsd.svg A server with two network interfaces (igb0 and igb1). igb0 is bridged to 5 = vimages (named "kps0a_dev", "kps64a_dev", "kws411a_dev", "kws411b_dev", and= "kws82a_dev"). Each vimage has a single bridge to the same igb0 interface = and are talking on a single subnet (see next example for more complex layou= t). Meanwhile, igb1 is used exclusively for the host machine (netgraph disp= lays this in a "disconnected" cluster because it's not in-use by the netgra= ph system). The "ngctl99755" element off to the right is the "ngctl" progra= m's connection to the netgraph system to dump the dot(1) output for the cre= ation of the SVG image itself. http://druidbsd.sourceforge.net/download/folsom.svg A server with 5 network interfaces (em0, em1, em2, igb0, igb1). igb0 is bri= dged between the host machine, a vimage named "stats" and a vimage named "b= eefcake". igb1 is bridged between the host machine, a vimage named "bafug1"= , and 6 other vimages. Of the 6 other vimages, the special one is "cfg0_vlb= xrich" which has 2 bridges to the same interface (the host machine's rc.con= f has vimage_cfg0_vlbxrich_bridges=3D"igb0 igb0") but is speaking different= subnets on each of the bridged interfaces within the jail (saying ifconfig= in that vimage produces two interfaces -- beside lo0 -- named ng0_cfg0_vlb= xri, and ng1_cfg0_vlbxri; these are configured to 2 different subnets in th= e jails's /etc/rc.conf). There are more vimages that can't be seen as netgr= aph does not show vimages that are using whole interfaces (a single PHY on = a quad-port NIC for example; or a tap/tun pair); however you can see the in= terfaces em0, em1, and em2. What's cute is that those vimages are often pur= posed as "high security" vimages and as-such we view it as a value-add that= they don't appear in the netgraph layout. (but to be honest, this is an ol= der output and I can't remember what those interfaces were used for -- our = vimage servers have grown and changed since then). http://druidbsd.sourceforge.net/download/bastion.svg A high security server (that was decommissioned last Friday) where each vim= age gets an entire PHY (read: netgraph is not used, whole interfaces are mo= ved into the vimages -- see /etc/rc.conf.d/vimage specifically vimage_examp= le_vnets). So naturally, this graph appears to be rather boring (all the in= terfaces are in the "disconnect" cluster) because netgraph isn't using the = interfaces. --=20 Devin _____________ The information contained in this message is proprietary and/or confidentia= l. If you are not the intended recipient, please: (i) delete the message an= d all copies; (ii) do not disclose, distribute or use the message in any ma= nner; and (iii) notify the sender immediately. In addition, please be aware= that any message addressed to our domain is subject to archiving and revie= w by persons other than the intended recipient. Thank you.