jmnbtslsQE any idea how kevent would handle tailing 1000 files at once?

polyex: Better than tailing logs would be a monitoring system.

mason how does that work other than tailing files itself?

polyex: Doesn't matter. If you have a thousand sources of data, then a dashboard where you can whack the red thing to see more is way better than the vain hope you'll see one of the thousand logs showing an error with your eyeballs.

mason ya i get you but you're ignoring what i'm asking

polyex: Absolutely not.

"doesn't matter"

genius

polyex: what do you mean about how it would handle? performance-wise?

jmnbtslsQE is kevent pretty efficient? like could you tail 1000 files without much system overhead or would it fall over?

like how heavy is it to 'watch' a file for changes under kevent

that number of files in and of itself would not be a problem at all, and you could probably use the simpler "legacy" interface (select) instead if you want

what about watching every file on the FS?

i don't have the expertise to speculate about that. i would guess that it would eventually become a problem depending on how much activity there is

Title: Chapter 19. Security Event Auditing | FreeBSD Documentation Portal

on a typical idle system without a major workload, it would not be a problem

damn that's cool

ty mason

polyex: It's notionally equivalent to Linux. I've not driven a custom endpoint myself, so I can't speak to how trivial it'd be to set up.

polyex: FWIW, I took your initial question as a desire to actually tail a large number of files.

ya

was just curious how efficient that is

Tail itself doesn't appear to use kevent: cgit.freebsd.org/src/tree/usr.bin/tail

Title: tail « usr.bin - src - FreeBSD source tree

why not i wonder

Because "tail -f" came earlier?

I see kqueue / kevent being used in the tail source.

yeah, the follow function in forward.c

Oh, blah. I stopped at read.c once I saw it looping over getc.

I only keep a source tree on my laptop which is off at the moment, so I didn't have grep handy.

i have a reproducible fluent bit seg fault bug i can't find a solution to. any help greatly appreciated: termbin.com/ntly

have you tried reporting to the fluent community?

i dont got github

and the issue isn't important enough to make one?

EULA

weird way of spelling yes

legal agreements to make accounts

polyex: you could always find a mailing list or a discord.

and the logging questions, and "tailing" multiple files.. there are services like prometheus that acould do a "dashboard" of outputs or you can have an aggregation of files to a cetnral place with tools like splunk.. but if your barrier to entry is EULA.. that may just be moot points

i have empty github

ketas: yes, the terms of service tie in the EULA if you have an account

well they do have terms, but why?

and terms can suck

well i can give a cynical answer

it is like why are there warns on palstic bags, please do not put over head as it may suffocate you

does github? :p

work like plastic bag

they have done weird shit indeed

well you could just install git and have your own repo

and an account is not requried to clone repos

unsure why i have account even

recently i moaned under some acme.sh bug

it's still there btw

acme.sh port will not work

i should notice maintainer maybe

i had to patch the tr-related code in :p

so then this goes to the situation, do you NOT have a github account and deal with the bug.. or you just suck it up and get the account to scratch an itch

i know the most nono thing github/ms did was to call everything people pushed there theirs and they feed that into their weird ai

but isn't anyone doing that

what's "free"

nothing stops any company from doing something similar with different platforms

it is a license that allows people to download, modify and use the code anyway they want..

now we have situation where almost all code is in github

kind of sad too

there is gitlab

We should all just trust our code to Microsoft - right?

what could possibly go wrong

first product that won't suck is vacuum cleaner

actually ms is funny company

has history and so on

"Nothing sucks like an Electrolux!"

they actually did that?

oh yeah

i think they were mentioned in an episode of madmen

the ads shown in madmen were real..

i hope they didn't use it for other products

a real good podcast about microsoft history: acquired.fm/episodes/microsoft

Title: Microsoft: The Complete History and Strategy

that is 4.5h long!

yeah

they make some real good episodes about company history.. they do awesome research on it

and sometimes people.. they did an epsidoe just on taylor swift and how she became the star she is and the business around her. fascinating

but i'll stop, this is not hte focus on this channel and i need to write up a presentation for work

indeed good

but i think those will work for some trip of other work

due extremely long

i have a reproducible fluent bit seg fault bug i can't find a solution to. any help greatly appreciated: termbin.com/ntly

polyex: Might be worth grabbing a ktrace to see where in the code it's choking.

Hi everyone

I habe a routing issue. net.inet.ip.forwarding=1 and routes are correct, pf is off. Still, it seems that no packets are forwarded, but silently dropped. Any idea how I could debug this (i.e., get the deceision why packets were dropped)?

"Ich habe" tell me you are german without telling me you are german

oh there wasn't ich either. I got too carried away when I read "habe"

b and v ALSO are right next to each other on the keyboard. </hint>

oh yeah, ur right

fat fingering huh

Happens, especially when you have to type on a notebook keyboard rather than a reasonable one ;)

yeah it sucks

Okay, OPNsense seems to be very broken. I just reverted the config to DHCP and everything works (although it doesn't do anything different). Will take this to OPNsense then.

I am no OPNsense expert or anything but seems like you have to configure static ip address (which I assume was the thing you were using since you said that you switched to DHCP) Can you check this link? docs.opnsense.org/manual/dhcp.html

they have a section on setting static ip. Seems like you have to change a configuration on somewhere. I am not sure if you have done it or not but if you didn't you might want to give it a try

Thanks for the pointer. However, that's DHCP server. I configured the interface from DHCP to static.

Regardless, it works now and I won't touch it. Won't be my responsibility for long anyway ;)

haha lol

I'm glad than ;)

looks like the FreeBSD 14.0 (amd64) PkgBase mirrors are all broken right now

the FreeBSD-acct package is missing

(at least that's the first one that pkg install -r base stumbles over

)

im trying to "/usr/bin/time -h make -j4 buildworld buildkernel kernconf=JIBSD". everything seemingly builds fine, but the output says "GENERIC completed"

I have placed this kernconf in sys/amd64/conf/JIBSD, and i used "ident JIBSD" and "makeoptions KERNEL=JIBSD" in there

sorry for the stupid question, but how do i figure out what's going on here?

concussious: i think the problem is KERNCONF instead of kernconf

it should say toward the top of the output which one it's using

Hi, I'

Hi, I'm fairly new to bsd world, I have a freebsd currently at home, trying to setup permanent ip alias I followed this and try with and without inet prefix but not able to make it work, my first ip is using DHCP is that the problem ?

Title: unixwerk: Setting IP Aliases under BSD

it works fine the manual way but I wanted to have it in /etc/rc.conf

jmnbtslsQE: that's exactly what it was. thank you so much.

lastshell: give this doc a try docs.freebsd.org/en/books/handbook/network/#config-network-connection

Title: Chapter 7. Network | FreeBSD Documentation Portal

thank you concussious

lastshell: the manual page explaining it is a bit "hidden" under the name rc.conf

run `man rc.conf` and search for _alias

or look it up online under man.freebsd.org/rc.conf

Title: rc.conf

crest I have this in /etc/rc.conf bsd.to/5jES but when I restar the netwotk the 2nd virtual ip is not showing

Title: dpaste/5jES (Plain Text)

do I need to put both ips static ?

combining static aliases and dhcp is a really bad idea even if it's technically possible

i would recommend using either all static addresses or all dynamic addresses per interface

at least for stateful things like dhcp

i would recommend setting the mask to all ones for the alias ips

e.g. ifconfig_re0_alias0="inet 192.168.0.21/32" # you don't have to use the old address + hex mask notation

the commands to apply fully will remove your default route so be careful applying them to remote systems

or at least wrap them like this: nohup sh -c 'service netif restart re0; service routing restart'

Title: dpaste/wh4D (Plain Text)

is the address already assigned?

try route -n get -inet 192.168.0.21

or just ifconfig | less and search for the address

are you on the same link as the system in question or have some form of out of band access (just reaching over to the old laptop used as lab machine, ipmi serial over lan)?

I had to reboo the router I have fix mac address ip for the freebsd ethernet

lastshell, 'arp -d' is a thing too.

so this worked for me now I have two IPs on my lazy freebsd dns (using dnsmasq) bsd.to/EEaV

Title: dpaste/EEaV (Plain Text)

thank you all

can I use the Makefile from a port to build a project on github? if so, how?

from github*

I want to try the latest state

Title: Chapter 5. Configuring the Makefile | FreeBSD Documentation Portal

thanks

lists.freebsd.org/archives/freebsd-hackers/2024-April/003195.html (and indeed the whole thread) makes for very interesting reading.

Title: Re: Stressing malloc(9)

< yamada> anyone running freebsd on the raspberry pi 5 ?

could you have freenas/truenas on a rpi5 with sata expander ? etc heh

what's the best intrusion detection system for freebsd? basically to know the instant a box has been hacked

polyex, ossec !?

nice ty. how do you like it?

polyex: freebsd has a whole security event auditing framework cf. docs.freebsd.org/en/books/handbook/book/#audit - which can be integrated with dtrace using audit_dtrace(4)

Title: FreeBSD Handbook | FreeBSD Documentation Portal

debdrup does it do everything ossec does or should i run both or?

it does part of what ossec does, with other parts of freebsd (like the mac framework, veriexec, and other things) doing other parts

if you've already got ossec on infrastructure and you're deploying freebsd, stick with that - if you're deploying from first principles, you're free to pick whichever looks mroe promising

ya greenfield. i'll start with freebsd native tech first ty!!

freebsds own systems has the advantage of tight integration in freebsd

ya that's what i want

jonah kowall come in the channel?

i wanna build a go app but i don't know how go works. github.com/open-telemetry/opentelemetry-collector. anyone know pls?