Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

No, that's from the Ethernet. MAC address is 20:CF:30:27:BA:17.

So this is from a different computer connected via ethernet (to a switch or the back of the router or something) and the laptop is connected via wireless with a wireless MAC of 20:CF:.. ?

Longinus00 fucked around with this message at 00:11 on Sep 15, 2013

Adbot
ADBOT LOVES YOU

hooah
Feb 6, 2006
WTF?

Longinus00 posted:

So this is from a different computer connected via ethernet (to a switch or the back of the router or something) and the laptop is connected via wireless with a wireless MAC of 20:CF:.. ?

The dump was created on the laptop while connected via Ethernet. The MAC I gave you was the wired MAC. Wireless is 74:F0:6D:49:7C:8E.

Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

The dump was created on the laptop while connected via Ethernet. The MAC I gave you was the wired MAC. Wireless is 74:F0:6D:49:7C:8E.

But you said the browsing the internet over ethernet works right? That would imply there's nothing wrong with your router. You should be capturing the wireless packets.

hooah
Feb 6, 2006
WTF?

Longinus00 posted:

But you said the browsing the internet over ethernet works right? That would imply there's nothing wrong with your router. You should be capturing the wireless packets.

Ok, so as I asked, how do I do that? I don't know what my wifi interface is called. I also don't know if I need to do the equivalent of unplugging the laptop for 30 seconds (turn off the wifi?) before starting the dump.

Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

Ok, so as I asked, how do I do that? I don't know what my wifi interface is called. I also don't know if I need to do the equivalent of unplugging the laptop for 30 seconds (turn off the wifi?) before starting the dump.

All the interfaces will be listed via ip link or if that doesn't work iwconfig. It should be called something like wlan0. To be on the safe side you can turn it off and on.

BlackMK4
Aug 23, 2006

wat.
Megamarm

Longinus00 posted:

Let's pimp cloudshark for a second.
http://cloudshark.org/captures/69204d4c8538

Is this taken from the the laptop you're having problems on? I'm assuming this is a capture of the wireless link? What's the MAC address of the laptop?

Cloudshark... thank you for this. :)

hooah
Feb 6, 2006
WTF?
Alright, here's the dump: https://dl.dropboxusercontent.com/u/3105927/tcpdump.dmp

Longinus00
Dec 29, 2005
Ur-Quan

http://cloudshark.org/captures/7b8e0c635175

Your router and your laptop are able to talk to each other fine.

code:
Destination: Azurewav_49:7c:8e (74:f0:6d:49:7c:8e)
Source: Netgear_7d:ac:c9 (10:0d:7f:7d:ac:c9)
Type: IP (0x0800) 

Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xe12feb3c
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
Client IP address: 0.0.0.0 (0.0.0.0)
Your (client) IP address: 192.168.1.2 (192.168.1.2)
Next server IP address: 0.0.0.0 (0.0.0.0)
Relay agent IP address: 0.0.0.0 (0.0.0.0)
Client MAC address: Azurewav_49:7c:8e (74:f0:6d:49:7c:8e)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP 
The problem is probably some configuration issue on your laptop or router somewhere.

hooah
Feb 6, 2006
WTF?

Longinus00 posted:

http://cloudshark.org/captures/7b8e0c635175

Your router and your laptop are able to talk to each other fine.

code:
Destination: Azurewav_49:7c:8e (74:f0:6d:49:7c:8e)
Source: Netgear_7d:ac:c9 (10:0d:7f:7d:ac:c9)
Type: IP (0x0800) 

Message type: Boot Reply (2)
Hardware type: Ethernet (0x01)
Hardware address length: 6
Hops: 0
Transaction ID: 0xe12feb3c
Seconds elapsed: 0
Bootp flags: 0x0000 (Unicast)
Client IP address: 0.0.0.0 (0.0.0.0)
Your (client) IP address: 192.168.1.2 (192.168.1.2)
Next server IP address: 0.0.0.0 (0.0.0.0)
Relay agent IP address: 0.0.0.0 (0.0.0.0)
Client MAC address: Azurewav_49:7c:8e (74:f0:6d:49:7c:8e)
Client hardware address padding: 00000000000000000000
Server host name not given
Boot file name not given
Magic cookie: DHCP 
The problem is probably some configuration issue on your laptop or router somewhere.

Ok, so where should I look next?

hooah
Feb 6, 2006
WTF?
Anyone?

evol262
Nov 30, 2010
#!/usr/bin/perl
The router handed back a DHCP request with options for gateway (192.168.1.1) DNS servers (192.168.1.1) and netmask (255.255.255.0). Does your interface take those results? ("ip link" should show the address and netmask, /etc/resolv.conf should show the DNS servers, route -n should show the gateway)

hooah
Feb 6, 2006
WTF?
Ok, ip link just gives me " mtu 1500 qdisc mq state UP mode DORMANT qlen 1000 link/ether 74:f0:... brd ff:ff:ff:ff:ff:ff" for the wlan interface. The conf file does say the nameserver is at 192.168.1.1, and the route command gives
code:
Destination  Gateway      Genmask        Flags Metric Ref    Use Iface
0.0.0.0      192.168.1.1  0.0.0.0        UG    0      0      0   wlan0
169.254.0.0  0.0.0.0      255.255.0.0    U     1000   0      0   wlan0
192.168.1.0  0.0.0.0      255.255.255.0  u     0      0      0   wlan0

evol262
Nov 30, 2010
#!/usr/bin/perl

hooah posted:

Ok, ip link just gives me " mtu 1500 qdisc mq state UP mode DORMANT qlen 1000 link/ether 74:f0:... brd ff:ff:ff:ff:ff:ff" for the wlan interface. The conf file does say the nameserver is at 192.168.1.1, and the route command gives
code:
Destination  Gateway      Genmask        Flags Metric Ref    Use Iface
0.0.0.0      192.168.1.1  0.0.0.0        UG    0      0      0   wlan0
169.254.0.0  0.0.0.0      255.255.0.0    U     1000   0      0   wlan0
192.168.1.0  0.0.0.0      255.255.255.0  u     0      0      0   wlan0

This means "0.0.0.0" means "any destination" and the "g" flag means gateway. This also means your default route is set.

Sorry, I meant "ip addr" for wlan0. What's the name of the laptop? Can you get a dump with "ping -c 192.168.1.1"?

hooah
Feb 6, 2006
WTF?

evol262 posted:

This means "0.0.0.0" means "any destination" and the "g" flag means gateway. This also means your default route is set.

Sorry, I meant "ip addr" for wlan0. What's the name of the laptop? Can you get a dump with "ping -c 192.168.1.1"?

Alright, here you go. I left ping running for ~30 seconds since debian apparently doesn't do the -c switch, but it keeps running by itself.

spankmeister
Jun 15, 2008






hooah posted:

Alright, here you go. I left ping running for ~30 seconds since debian apparently doesn't do the -c switch, but it keeps running by itself.

No that's just standard behaviour of ping on any distro, windows is the exception. :)

Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

Alright, here you go. I left ping running for ~30 seconds since debian apparently doesn't do the -c switch, but it keeps running by itself.

http://cloudshark.org/captures/938b4a08cb1b

There is no ICMP traffic in that capture. Was ping working for those 30 seconds?

hooah
Feb 6, 2006
WTF?

spankmeister posted:

No that's just standard behaviour of ping on any distro, windows is the exception. :)

I'd thought so, but was confused that he included that switch.

Longinus00
Dec 29, 2005
Ur-Quan
ping -c needs an argument. ping -c 192.168.1.1 is meaningless and was probably a typo.

Usage: ping [-LRUbdfnqrvVaAD] [-c count] ...

hooah
Feb 6, 2006
WTF?

Longinus00 posted:

http://cloudshark.org/captures/938b4a08cb1b

There is no ICMP traffic in that capture. Was ping working for those 30 seconds?

It was unsuccessful, from 192.168.1.9 (what? I checked, and ip addr still says 192.168.1.2), destination host unreachable.

evol262
Nov 30, 2010
#!/usr/bin/perl

hooah posted:

It was unsuccessful, from 192.168.1.9 (what? I checked, and ip addr still says 192.168.1.2), destination host unreachable.

Yes, I meant "-c 3 192.168.1.1". Typo.

"ip addr | grep 192.168.1.9"

Did you assign 192.168.1.9 to ethernet manually? Do you have another interface bound to 192.168.1.9?

"From 192.168.1.9..." means that address is assigned somewhere on your laptop. Can you post the output of "ip addr"?

Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

It was unsuccessful, from 192.168.1.9 (what? I checked, and ip addr still says 192.168.1.2), destination host unreachable.

Are you connected via ethernet and wireless at the same time?

Can you download an ubuntu/fedora/whatever live cd and see if you have internet if you boot off of that?

Longinus00 fucked around with this message at 21:10 on Sep 16, 2013

hooah
Feb 6, 2006
WTF?

evol262 posted:

Yes, I meant "-c 3 192.168.1.1". Typo.

"ip addr | grep 192.168.1.9"

Did you assign 192.168.1.9 to ethernet manually? Do you have another interface bound to 192.168.1.9?

"From 192.168.1.9..." means that address is assigned somewhere on your laptop. Can you post the output of "ip addr"?

I don't recall setting the .9 address manually; if I had, I would think I'd do something further from the addresses that already exist on my home network. Here's a pastebin with the output of ip addr. It seems that eth0 does indeed have an IP address of 192.168.1.9 (and a secondary of .10).


Longinus00 posted:

Are you connected via ethernet and wireless at the same time?

Can you download an ubuntu/fedora/whatever live cd and see if you have internet if you boot off of that?

No, I'm not connected to both simultaneously. I'm currently downloading Ubuntu to throw on a USB stick to see if it gets wireless.

Salt Fish
Sep 11, 2003

Cybernetic Crumb

hooah posted:

I don't recall setting the .9 address manually; if I had, I would think I'd do something further from the addresses that already exist on my home network. Here's a pastebin with the output of ip addr. It seems that eth0 does indeed have an IP address of 192.168.1.9 (and a secondary of .10).


No, I'm not connected to both simultaneously. I'm currently downloading Ubuntu to throw on a USB stick to see if it gets wireless.

Your pastebin indicates you are connected to both. Do you ifdown the appropriate interface when testing the other?

hooah
Feb 6, 2006
WTF?

Salt Fish posted:

Your pastebin indicates you are connected to both. Do you ifdown the appropriate interface when testing the other?

No, I just unplugged the cord. I just did "ifdown eth0" (assuming that's the proper use; never heard of that command before), and it output
code:
Listening on LPF/eth0/20:cf:...
Sending on   LPF/eth0/20:cf:...
Sending on   Socket/fallback
DHCPRELASE on eth0 to 192.168.1.1 port 67
It looks to me like my laptop released the eth0 IP address, and now I can get online. It seems that debian got confused when I simply unplugged the Ethernet cord. Is that what happened? If not, what happened?

Salt Fish
Sep 11, 2003

Cybernetic Crumb

hooah posted:

No, I just unplugged the cord. I just did "ifdown eth0" (assuming that's the proper use; never heard of that command before), and it output
code:
Listening on LPF/eth0/20:cf:...
Sending on   LPF/eth0/20:cf:...
Sending on   Socket/fallback
DHCPRELASE on eth0 to 192.168.1.1 port 67
It looks to me like my laptop released the eth0 IP address, and now I can get online. It seems that debian got confused when I simply unplugged the Ethernet cord. Is that what happened? If not, what happened?
I don't know whats going on because I've been glossing over most of the discussion about this issue. I see in the pastebin that the eth0 interface was actually down so I was basically guessing. ifup and ifdown toggle and interface state from up to down. In RH I would use this command to push changes made to the network-scripts/. I don't know anything about any other distro.

Kindly report on if the issue is resolved and reply to me with the same.

Salt Fish fucked around with this message at 21:59 on Sep 16, 2013

Longinus00
Dec 29, 2005
Ur-Quan

hooah posted:

No, I just unplugged the cord. I just did "ifdown eth0" (assuming that's the proper use; never heard of that command before), and it output
code:
Listening on LPF/eth0/20:cf:...
Sending on   LPF/eth0/20:cf:...
Sending on   Socket/fallback
DHCPRELASE on eth0 to 192.168.1.1 port 67
It looks to me like my laptop released the eth0 IP address, and now I can get online. It seems that debian got confused when I simply unplugged the Ethernet cord. Is that what happened? If not, what happened?

I noticed in your ip addr output eth0 is actually associated with two different ip addresses which is an unusual setting for a laptop.
code:
    inet 192.168.1.9/24 brd 192.168.1.255 scope global eth0
    inet 192.168.1.10/24 brd 192.168.1.255 scope global secondary eth0
Are you using network manager or are you doing everything the old fashioned way? My advice to you is to blow away whatever network settings your laptop currently has and just let it auto reconfigure because the settings it currently has are really confusing it.

NtotheTC
Dec 31, 2007


I'm new to linux, and trying to install Ubuntu 13.04 on an Acer V5 laptop is proving difficult. I've heard linux doesn't play nicely with ATI cards, and that would appear to be correct because when I try to start lightdm the screen just goes black and stays black, which I assumed meant I didn't have the correct drivers. I installed the latest AMD drivers but got a message about no supported adapters when I ran aticonfig. Any help on where to look next?

hooah
Feb 6, 2006
WTF?

Salt Fish posted:

I don't know whats going on because I've been glossing over most of the discussion about this issue. I see in the pastebin that the eth0 interface was actually down so I was basically guessing. ifup and ifdown toggle and interface state from up to down. In RH I would use this command to push changes made to the network-scripts/. I don't know anything about any other distro.

Kindly report on if the issue is resolved and reply to me with the same.

Report where? Here? Yes, everything's fine now.

I have a separate question. I downloaded and installed Chrome, but it doesn't show up in the applications menu. I can find a shortcut in /usr/bin, which points to /opt/google/chrome/google-chrome. How do I get it to show up in an easier-to-access location?

Salt Fish
Sep 11, 2003

Cybernetic Crumb

hooah posted:

Report where? Here? Yes, everything's fine now.

I have a separate question. I downloaded and installed Chrome, but it doesn't show up in the applications menu. I can find a shortcut in /usr/bin, which points to /opt/google/chrome/google-chrome. How do I get it to show up in an easier-to-access location?

Debian uses the "Gnome" Window manager. You'll want to google "how to add application to gnome application launcher".

Towner
Jun 18, 2006

Fuck this, I need beer

NtotheTC posted:

I'm new to linux, and trying to install Ubuntu 13.04 on an Acer V5 laptop is proving difficult. I've heard linux doesn't play nicely with ATI cards, and that would appear to be correct because when I try to start lightdm the screen just goes black and stays black, which I assumed meant I didn't have the correct drivers. I installed the latest AMD drivers but got a message about no supported adapters when I ran aticonfig. Any help on where to look next?

Just do an lspci for us from the command line. Probably is a Radeon but it's still not using the propriety driver and the cards too new for the open source one. When it boots and fails when starting the window manager just Alt+F2 and log into the machine from the command line. Not sure which driver you installed but try this latest beta driver which supposedly supports the very latest laptop cards, including one of the Radeon's in the V5.

code:
wget http://www2.ati.com/drivers/beta/amd-driver-installer-catalyst-13-6-beta-x86.x86_64.zip
unzip amd-driver-installer-catalyst-13-6-beta-x86.x86_64.zip
chmod u+x amd-driver-installer-catalyst-13-6-beta-x86.x86_64.run
sudo ./amd-driver-installer-catalyst-13-6-beta-x86.x86_64.run
Try starting lightdm after that sudo /etc/init.d/lightdm restart. You may want to reboot. Another thing to try is run dmesg. You should see Radeon, ATI or Catalyst text in that long load of messages somewhere showing the driver being loaded.

NtotheTC
Dec 31, 2007


Thanks, those steps worked. For the record it was a Radeon HD 8280.

spankmeister
Jun 15, 2008






Suspicious Dish is it true that RHEL 6.5 will get OpenSSL 1.0.1?

I'd really like to start supporting TLSv1.1 and 1.2 without having to roll my own OpenSSL. (Or waiting for 7).

evol262
Nov 30, 2010
#!/usr/bin/perl

spankmeister posted:

Suspicious Dish is it true that RHEL 6.5 will get OpenSSL 1.0.1?

I'd really like to start supporting TLSv1.1 and 1.2 without having to roll my own OpenSSL. (Or waiting for 7).

Asking for potentially private information: bad.
Dish isn't the only RH employee on SA.

But from a Summit keynote (and thus, public).

RH Summit Presentation posted:

Red Hat Enterprise Linux 6.5
Future Directions
● NSA Suite B Algorithms
● AES, ECDH, ECDSA, SHA256
● FIPS Certification
● Support for smart cards with openSSH
● CAC & PIV
● Shared System Certificates
● System-Wide trust store for Certificates
● Support TLS 1.2 with OpenSSL

You can also find some informative Bugzillas.

evol262 fucked around with this message at 18:54 on Sep 17, 2013

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe
To be honest, spankmeister, I have no idea where to even begin to find information about what random library we're going to ship in a minor update of RHEL6 internally, and whether some of this is public or not.

Our intranet is extremely disorganized and out of date (we seem to migrate to a new system every year), and evol262 is probably more aware of things like this than me.

I also forgot my OTP token at home today, and the new wiki system seems to require it, even when plugged into an ethernet jack.

Qtotonibudinibudet
Nov 7, 2011



Omich poluyobok, skazhi ty narkoman? ya prosto tozhe gde to tam zhivu, mogli by vmeste uyobyvat' narkotiki
Who knows bind? Will a slave server return a SERVFAIL if it can't complete a zone transfer?

spankmeister
Jun 15, 2008






Oh forgive my naivete. :) I forgot the usual "dont give out any info that's not public" disclaimer.

And I also forgot you worked there evol, apologies...

Thanks for the info, this makes me happy. Openssl isn't some random library really so this update will be a very positive thing! It means a LOT of web servers on the internet will start supporting TLSv1.2. Now if the browsers will catch up we can finally drop loving RC4.

evol262
Nov 30, 2010
#!/usr/bin/perl

Suspicious Dish posted:

Our intranet is extremely disorganized and out of date (we seem to migrate to a new system every year), and evol262 is probably more aware of things like this than me.
Complaints about the wiki notwithstanding, we don't really keep up on this either, which bites us a lot when some package is updated underneath us in Rawhide and suddenly all F20 builds throw backtraces. I just hit Google.

You must be the only person in the company without a software token.

spankmeister posted:

Oh forgive my naivete. :) I forgot the usual "dont give out any info that's not public" disclaimer.

And I also forgot you worked there evol, apologies...
No need to apologize for it at all. I haven't been here that long, and I got the information via Google like everyone else... Very little of what I do internally has any bearing on answers in this thread.

spankmeister posted:

Thanks for the info, this makes me happy. Openssl isn't some random library really so this update will be a very positive thing! It means a LOT of web servers on the internet will start supporting TLSv1.2. Now if the browsers will catch up we can finally drop loving RC4.
I know somebody (Rackspace?) was providing unofficial OpenSSL builds for RHEL6, but having official support is nice. You'd be surprised at the amount of software that still relies on openssl098whatever, though...

fivre posted:

Who knows bind? Will a slave server return a SERVFAIL if it can't complete a zone transfer?
If it's been so long that the SOA expiry from the master hit, yes.

spankmeister
Jun 15, 2008






"evol262" posted:

No need to apologize for it at all. I haven't been here that long, and I got the information via Google like everyone else... Very little of what I do internally has any bearing on answers in this thread.

I know somebody (Rackspace?) was providing unofficial OpenSSL builds for RHEL6, but having official support is nice. You'd be surprised at the amount of software that still relies on openssl098whatever, though...

Yeah I lost count of the times I've installed opens098e on 6 or opens097d (i think it was d, not sure) on 5 etc...

I don't use unofficial repos other than epel and rpmforge usually so rather than getting some unknown rpm for such an important lib I decided to roll my own using the FC20 SRPM. This works fine but I don't really feel like maintainig it for myself.

Cidrick
Jun 10, 2001

Praise the siamese
My team is mulling over setting up its own internal open-source Certificate Authority instead of getting ours sourced from the corporate mothership all the time. The only requirement is that it's open source since this isn't a funded project, but it'd be nice to have something simple and easy to use, preferably with some manner of web GUI so that our NOC can renew/sign/revoke certificates during off-hours.

Anyone have any recommendations? I've looked at Dogtag and TinyCA but I'm sure there's way more out there than I'm aware of.

Adbot
ADBOT LOVES YOU

Suspicious Dish
Sep 24, 2011

2020 is the year of linux on the desktop, bro
Fun Shoe
OK, spankmeister, I talked to a bunch of coworkers for the last few hours and they set me up with access to the internal systems for RHEL management, so I know now what RHEL6.5 is being composed of, and I have access to nightlies. I also found our wiki page for what components are approved to be upgraded, and they've assured me that this is public information, so if you have any more questions, I can actually answer them.

While I can't give schedule information on when RHEL6.5 is going into beta or general availability, we do have internal target dates, and you can subscribe to rhelv6-announce to know when something is being made public.

https://www.redhat.com/mailman/listinfo/rhelv6-announce

As you can see from the archives, it's an extremely low-volume, not-spammy-at-all mailing list, and there's a beta annoucement about 6.4 from last year:

https://www.redhat.com/archives/rhelv6-announce/2012-December/msg00000.html

So you will get some news at some point.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply