<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Pario TechnoBlob &#187; Network</title>
	<atom:link href="http://pario.no/category/network/feed/" rel="self" type="application/rss+xml" />
	<link>http://pario.no</link>
	<description>A cronological documentation test project, nothing serious, really!</description>
	<lastBuildDate>Thu, 26 Apr 2012 08:18:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Using Lsyncd to perform &#8220;live&#8221; syncronization of a local directory to a remote directory</title>
		<link>http://pario.no/2012/01/13/using-lsyncd-to-perform-live-syncronization-of-a-local-directory-to-a-remote-directory/</link>
		<comments>http://pario.no/2012/01/13/using-lsyncd-to-perform-live-syncronization-of-a-local-directory-to-a-remote-directory/#comments</comments>
		<pubDate>Fri, 13 Jan 2012 18:14:20 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[Scripting]]></category>
		<category><![CDATA[CentOS]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[lsyncd]]></category>
		<category><![CDATA[rsync]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[ssh-keygen]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1672</guid>
		<description><![CDATA[This post is a short HOWTO and describes how you can install and run lsyncd to perform a rsync syncronization from local to a remote server using SSH. Lsyncd is a daemon to continuously synchronize directory trees and relies on inotify. If you need real live syncronization DRBD might be a better alternative since it [...]]]></description>
			<content:encoded><![CDATA[<p>This post is a short HOWTO and describes how you can install and run <a href="http://code.google.com/p/lsyncd/">lsyncd</a> to perform a rsync syncronization from local to a remote server using SSH.<br />
Lsyncd is a daemon to continuously synchronize directory trees and relies on inotify. If you need real live syncronization DRBD might be a better alternative since it is a block level syncronization. </p>
<p><strong>Installing Lsyncd 2.0 from source on CentOS 6</strong><br />
Lsyncd is not included as a package in CentOS 6, so you need to download the source file from <a href="http://code.google.com/p/lsyncd/downloads/list">http://code.google.com/p/lsyncd/downloads/list</a>.<br />
You should have rsync, GCC and lua-devel installed on your system before you continue installing Lsyncd.</p>
<pre>
# yum install rsync lua-devel</pre>
<p>Unpack the lsyncd source file and run the following commands from the unpacked file</p>
<pre>
# configure
# make
# make install</pre>
<p>make install copies the compiled files and install them to the right directories in your system.</p>
<p>I need to configure a non password SSH communication between the two servers with a shared SSH key.<br />
On the source server run the following command to generate a SSH key, if you have not done this already.<br />
Remember to do this as the user you are going to perform the sync with.</p>
<pre>
# ssh-keygen</pre>
<p>Secure copy the generated SSH key from the source server to your target server</p>
<pre>
# scp ~/.ssh/id_rsa.pub root@remoteserver:/tmp</pre>
<p>On the target server you need to add the copied SSH key to your existing authorized keys file.<br />
Also remember to do this with the user you are going to connect with from the source server.</p>
<pre>
# cat /tmp/id_rsa.pub >> ~/.ssh/authorized_keys</pre>
<p>If you do not have this file, just create it using the touch command described below</p>
<pre>
# touch ~/.ssh/authorized_keys</pre>
<p>Test if you can ssh without a password from your source server to the target server.</p>
<p>I have made a config file, <strong>/root/scripts/lsyncd.conf</strong> that tells Lsyncd where to put the log- and statusfile. That it should be running as a daemon in the background, and a sync should occur after 900 seconds (15 minutes) if there have not been any filesystem changes and there should not be more than 6 parallell Lsyncd processes.</p>
<pre>
settings = {
   logfile      = "/tmp/lsyncd.log",
   statusFile   = "/tmp/lsyncd.status",
   nodaemon     = false,
   maxDelays    = 900,
   maxProcesses = 6,
}

sync{default.rsyncssh, source="/path/on/source/", host="hostnam.target.server.tld", targetdir="/path/on/target/"}</pre>
<p>To start lsyncd you run the command</p>
<pre>
# lsyncd /root/scripts/lsyncd.conf</pre>
<p>You should now see a Lsyncd process running as a daemon on your system. It performs a sync when you start and then waits for any filesystem changes or sync after 900 seconds.</p>
<p>If you would like Lsyncd to start at boot, just add the following line to the bottom of file <strong>/etc/rc.local</strong></p>
<pre>
lsyncd /root/scripts/lsyncd.conf</pre>
<p>You do now have a working secure rsync syncronization between two servers.</p>
<p><strong>What directories you are syncing</strong></p>
<pre>
# tail -f /tmp/lsyncd.status</pre>
<p><strong>What is happening now</strong></p>
<pre>
# tail -f /tmp/lsyncd.log</pre>
<script type="text/javascript">var wordpress_toolbar_urls = ["http:\/\/code.google.com\/p\/lsyncd\/","http:\/\/code.google.com\/p\/lsyncd\/downloads\/list"];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMTIvMDEvMTMvdXNpbmctbHN5bmNkLXRvLXBlcmZvcm0tbGl2ZS1zeW5jcm9uaXphdGlvbi1vZi1hLWxvY2FsLWRpcmVjdG9yeS10by1hLXJlbW90ZS1kaXJlY3RvcnkvPHdwdGI%2BVXNpbmcgTHN5bmNkIHRvIHBlcmZvcm0gJiM4MjIwO2xpdmUmIzgyMjE7IHN5bmNyb25pemF0aW9uIG9mIGEgbG9jYWwgZGlyZWN0b3J5IHRvIGEgcmVtb3RlIGRpcmVjdG9yeTx3cHRiPmh0dHA6Ly9wYXJpby5ubzx3cHRiPlBhcmlvIFRlY2hub0Jsb2I%3D";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2012/01/13/using-lsyncd-to-perform-live-syncronization-of-a-local-directory-to-a-remote-directory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Disable IPv6 on Ubuntu 11.10</title>
		<link>http://pario.no/2011/12/09/disable-ipv6-on-ubuntu-11-10/</link>
		<comments>http://pario.no/2011/12/09/disable-ipv6-on-ubuntu-11-10/#comments</comments>
		<pubDate>Fri, 09 Dec 2011 08:39:49 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[11.10]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[ipv6]]></category>
		<category><![CDATA[sysct]]></category>
		<category><![CDATA[sysctl.conf]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[ubuntu oneiric]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1662</guid>
		<description><![CDATA[This is a short HOWTO on disabling IP version 6 support on your ethernet devices like eth0 on Ubuntu 11.10. I guess you can do this on earlier version of Ubuntu as well. Add the following line to the end of the file /etc/sysctl.conf (as root or use sudo) net.ipv6.conf.all.disable_ipv6 = 1 Run the following [...]]]></description>
			<content:encoded><![CDATA[<p>This is a short HOWTO on disabling IP version 6 support on your ethernet devices like eth0 on Ubuntu 11.10.<br />
I guess you can do this on earlier version of Ubuntu as well.</p>
<p><il>
<li>Add the following line to the end of the file <strong>/etc/sysctl.conf</strong> (as root or use sudo)</p>
<li>
<pre>net.ipv6.conf.all.disable_ipv6 = 1</pre>
</li>
</li>
</ul>
<p>Run the following command to make this change effective immediately</p>
<pre># sudo sysctl -p</pre>
<p>A result from this command could be like this</p>
<pre>
net.ipv6.conf.all.disable_ipv6 = 1</pre>
<p>To check that IPv6 has been disabled or not, run the following command from your console window</p>
<pre>
# ip a | grep inet</pre>
<p>IPv6 has been disabled if this command does not return any IPv6 addresses.</p>
<script type="text/javascript">var wordpress_toolbar_urls = [];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMTEvMTIvMDkvZGlzYWJsZS1pcHY2LW9uLXVidW50dS0xMS0xMC88d3B0Yj5EaXNhYmxlIElQdjYgb24gVWJ1bnR1IDExLjEwPHdwdGI%2BaHR0cDovL3BhcmlvLm5vPHdwdGI%2BUGFyaW8gVGVjaG5vQmxvYg%3D%3D";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2011/12/09/disable-ipv6-on-ubuntu-11-10/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NetBackup 7.x port usage</title>
		<link>http://pario.no/2011/06/01/netbackup-7-x-port-usage/</link>
		<comments>http://pario.no/2011/06/01/netbackup-7-x-port-usage/#comments</comments>
		<pubDate>Wed, 01 Jun 2011 10:29:29 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Backup]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[nbu7]]></category>
		<category><![CDATA[netbackup]]></category>
		<category><![CDATA[symantec]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1533</guid>
		<description><![CDATA[If you are unsure what ports Symantec NetBackup 7.x master or media Windows server uses, just open the following file %SYSTEMROOT%\system32\drivers\etc\services The content in this file could be like this if you have not made any changes to the default configuration bpcd 13782/tcp bprd 13720/tcp vnetd 13724/tcp vopied 13783/tcp bpdbm 13721/tcp bpjobd 13723/tcp bpjava-msvc 13722/tcp [...]]]></description>
			<content:encoded><![CDATA[<p>If you are unsure what ports Symantec NetBackup 7.x master or media Windows server uses, just open the following file</p>
<pre>
%SYSTEMROOT%\system32\drivers\etc\services</pre>
<p>The content in this file could be like this if you have not made any changes to the default configuration</p>
<pre>
bpcd		13782/tcp
bprd		13720/tcp
vnetd		13724/tcp
vopied		13783/tcp
bpdbm		13721/tcp
bpjobd		13723/tcp
bpjava-msvc		13722/tcp
NB_dbsrv		13785/tcp
vmd		13701/tcp
tldcd		13711/tcp
tl8cd		13705/tcp
tl4d		13713/tcp
tlmd		13716/tcp
tlhcd		13717/tcp
acsd		13702/tcp</pre>
<script type="text/javascript">var wordpress_toolbar_urls = [];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMTEvMDYvMDEvbmV0YmFja3VwLTcteC1wb3J0LXVzYWdlLzx3cHRiPk5ldEJhY2t1cCA3LnggcG9ydCB1c2FnZTx3cHRiPmh0dHA6Ly9wYXJpby5ubzx3cHRiPlBhcmlvIFRlY2hub0Jsb2I%3D";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2011/06/01/netbackup-7-x-port-usage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Change ethernet settings using ethtool</title>
		<link>http://pario.no/2010/01/19/change-ethernet-settings-using-ethtool/</link>
		<comments>http://pario.no/2010/01/19/change-ethernet-settings-using-ethtool/#comments</comments>
		<pubDate>Tue, 19 Jan 2010 12:14:47 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[ethtool]]></category>
		<category><![CDATA[RedHat]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1283</guid>
		<description><![CDATA[Force network speed on a network card to 100 MBit Full Duplex and in the same time disable auto negotiation # ethtool -s eth0 speed 100 duplex full autoneg off These settings are active until you reboot the machine or restart the network. In order to keep this change on each system reboot, append the [...]]]></description>
			<content:encoded><![CDATA[<p>Force network speed on a network card to 100 MBit Full Duplex and in the same time disable auto negotiation</p>
<pre># ethtool -s eth0 speed 100 duplex full autoneg off</pre>
<p>These settings are active until you reboot the machine or restart the network.</p>
<p>In order to keep this change on each system reboot, append the following line in the following Redhat file <strong>/etc/sysconfig/network-scripts/ifcfg-eth0</strong></p>
<pre>ETHTOOL_OPTS="speed 100 duplex full autoneg off"</pre>
<p>An alternative tool to use to change the settings is <strong>mii-tool</strong>.</p>
<script type="text/javascript">var wordpress_toolbar_urls = [];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMTAvMDEvMTkvY2hhbmdlLWV0aGVybmV0LXNldHRpbmdzLXVzaW5nLWV0aHRvb2wvPHdwdGI%2BQ2hhbmdlIGV0aGVybmV0IHNldHRpbmdzIHVzaW5nIGV0aHRvb2w8d3B0Yj5odHRwOi8vcGFyaW8ubm88d3B0Yj5QYXJpbyBUZWNobm9CbG9i";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2010/01/19/change-ethernet-settings-using-ethtool/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>iptables connection tracking table full</title>
		<link>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/</link>
		<comments>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/#comments</comments>
		<pubDate>Mon, 05 Oct 2009 08:48:47 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[ubuntu jaunty]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1217</guid>
		<description><![CDATA[I&#8217;ve recently experienced that my workstation (Ubuntu Jaunty Jackalope, 9.04, x86_64) &#8220;hangs&#8221; periodically when my internet browser, Mozilla Firefox, has a lot of active tabs. In my case I had > 100 active tabs in more than 20 windows. I know I should have closed some of them but that is not an option right [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve recently experienced that my workstation (Ubuntu Jaunty Jackalope, 9.04, x86_64) &#8220;hangs&#8221; periodically when my internet browser, Mozilla Firefox, has a lot of active tabs.<br />
In my case I had > 100 active tabs in more than 20 windows. I know I should have closed some of them but that is not an option right now.</p>
<p>The problem reveiled itself doing a dmesg on my workstation</p>
<pre>
# dmesg

[1737157.057528] nf_conntrack: table full, dropping packet.
[1737157.160357] nf_conntrack: table full, dropping packet.
[1737157.260534] nf_conntrack: table full, dropping packet.
[1737157.361837] nf_conntrack: table full, dropping packet.
[1737157.462305] nf_conntrack: table full, dropping packet.
[1737157.564270] nf_conntrack: table full, dropping packet.
[1737157.666836] nf_conntrack: table full, dropping packet.
[1737157.767348] nf_conntrack: table full, dropping packet.
[1737157.868338] nf_conntrack: table full, dropping packet.
[1737157.969828] nf_conntrack: table full, dropping packet.
[1737162.214064] __ratelimit: 53 callbacks suppressed
</pre>
<p>This bahaviour looks like Denial-Of-Service and is caused by a full iptables connection_table.</p>
<p>The default size of the iptables connection tracing table is </p>
<pre>
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
65536</pre>
<p>The solution I went for was to double the size of connection table to 131072 and restarted firefox.</p>
<pre>
# echo "131072" > /proc/sys/net/ipv4/netfilter/ip_conntrack_max</pre>
<p>This value is a 32-bit integer so the table size can be quite large and you will need much more RAM before you can use this size.</p>
<p>To make this solution permanent I added the following line to <strong>/etc/sysctl.conf</strong></p>
<pre>
net.ipv4.netfilter.ip_conntrack_max = 131072</pre>
<p>You can test this by executing the following command </p>
<pre>
# sysctl -p
131072</pre>
<p>This command loads the <strong>/etc/sysctl.conf</strong> settings.</p>
<script type="text/javascript">var wordpress_toolbar_urls = [];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMDkvMTAvMDUvaXB0YWJsZXMtY29ubmVjdGlvbi10cmFja2luZy10YWJsZS1mdWxsLzx3cHRiPmlwdGFibGVzIGNvbm5lY3Rpb24gdHJhY2tpbmcgdGFibGUgZnVsbDx3cHRiPmh0dHA6Ly9wYXJpby5ubzx3cHRiPlBhcmlvIFRlY2hub0Jsb2I%3D";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

