From stoffj@taec.toshiba.com Thu May 7 01:35:10 2009 Received: from mailhost.taec.toshiba.com (mailhost.taec.toshiba.com [209.243.128.33]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n471Z41b022942 for ; Thu, 7 May 2009 01:35:10 GMT Received: from localhost.localdomain (IDENT:U2FsdGVkX18fGf5PfF0PeGQGklFXbCFFQyZxfoXmYIo@sekrit.taec.toshiba.com [209.243.166.44]) by mailhost.taec.toshiba.com (8.12.7/8.12.7) with ESMTP id n471Z3Uf005050; Wed, 6 May 2009 18:35:03 -0700 (PDT) Received: from localhost.localdomain (sekrit [127.0.0.1]) by localhost.localdomain (8.13.1/8.12.11) with ESMTP id n471Z2Fe013530; Wed, 6 May 2009 21:35:02 -0400 Received: (from stoffj@localhost) by localhost.localdomain (8.13.1/8.13.1/Submit) id n471Yv0H013527; Wed, 6 May 2009 21:34:57 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18946.15041.60210.189103@gargle.gargle.HOWL> Date: Wed, 6 May 2009 21:34:57 -0400 From: "John Stoffel" To: Zonker Subject: Re: Conserver through a proxy server? In-Reply-To: References: X-Mailer: VM 7.19 under Emacs 22.1.2 X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2009 01:35:10 -0000 Zonker> I find myself in a situation where I must access a Zonker> restricted network via a proxy server. Do you have a terminal server on the restricted network? And does it understand SSL? Zonker> Conserver here is a "normal" setup... many local Zonker> (in-building) console servers, and a few remote console Zonker> servers via the WAN, all using RAW connections to the console Zonker> server ports. Zonker> The new twist is that we need to manage ports on a secured Zonker> network. Using a VPN is not an option offered to us. The Zonker> Conserver host has a Production interface, and a backup net Zonker> interface. The host does not have a free card slot for an Zonker> additional Ethernet interface. (It would be politically Zonker> difficult to put secondary addressing on the Production net, Zonker> and it would be a security risk to overlay a new network on Zonker> the Backup network...) Hmm... can you get access to a host inside the restricted network to setup a conserver, then use something like 'stunnel' to setup a secure tunnel to it? How restricted is this network? They obviously don't seem to have a problem with you getting an IP address on there and adding a port to your server. Can you swap out an interface card on the Conserver host and put in a dual or quad port card in it's place? That would expand your options... God knows they should be cheap and easy to find these days for Solaris boxes, heck I might even have some for Sbus still kicking around, and I know I do for PCI. You only need 10/100, so a quad port HME card would work great. Obviously, I'm assuming a bunch about your hardware.... can you share more details? Zonker> It looks like I might be able to use IPTables to do this Zonker> (point to a proxy for a specific subnet), then I need to see Zonker> if I can get ports on the proxy to bounce me to the console Zonker> ports. Has anyone done it this way? How did that work out for Zonker> you? That seems fragile to me. Can you SSH into the restricted network? If you can, could you deploy a Digi CM32 in there with SSH turned on and some public/private SSH keys to be used by the conserver master box to access those ports? I also don't understand the difference between a proxy and a VPN solution, they're both the same... though thinking about it, if you can just route all your IP traffic from host CS (Console Server) to PH (proxy Host) to be routed to the RN (restricted Net) that should do the trick: route add net RN.IP.RAN.GE/SIZE gateway TH.IP.AD.DR 1 That might also do the trick, but doesn't address the question of how you punch through the firewall (restrictions) into the funky RN. Dunno... can you give more details? Thanks, John From consoleteam@gmail.com Thu May 7 02:16:44 2009 Received: from yx-out-2324.google.com (yx-out-2324.google.com [74.125.44.28]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n472GcDl024377 for ; Thu, 7 May 2009 02:16:44 GMT Received: by yx-out-2324.google.com with SMTP id 8so267157yxg.81 for ; Wed, 06 May 2009 19:16:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=B+AW5my09XAfr0xy4KcOMb8zWqQCZEabnR0bTseRViE=; b=PhYGqeIk+qhJ1p2PX9BUkEgnBie95WNWlQ4+9mErNKmKphICGkTEOI/vHhkuvWvYzf EJOXUc+pjZakHoiDvCDd6f7VwS2tUN2If+R2m6QtrX8jlyQR9O5Lft96CIgTrzmiFVCC eo5G8vDLoYS4ZmStSY3a9zax7yERlU7uZFu2U= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=u3Wg3Um6rWCD+tSOKXitAyIGlcUgklAtaHnlN0I/vngO2GFJ3WNHF0f58tJyyxKnUi uyFOlG7Fwp6FRsKJr/CLWdw+wMZPc71+qH9Km/AqTZ+HljhUArd7Ht++yhktjCil58cD QqypZSm5PXcrkldv8KxQeeSM4x5QwtpPzg9hs= MIME-Version: 1.0 Received: by 10.150.139.15 with SMTP id m15mr3564006ybd.22.1241662597577; Wed, 06 May 2009 19:16:37 -0700 (PDT) In-Reply-To: <18946.15041.60210.189103@gargle.gargle.HOWL> References: <18946.15041.60210.189103@gargle.gargle.HOWL> Date: Wed, 6 May 2009 19:16:37 -0700 Message-ID: Subject: Re: Conserver through a proxy server? From: Zonker To: John Stoffel Content-Type: multipart/alternative; boundary=000e0cd59cf00f3e090469491a81 X-Spam-Score: -2.311 () BAYES_00,HTML_MESSAGE X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2009 02:16:44 -0000 --000e0cd59cf00f3e090469491a81 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi John, Chris (and the group at large) Here's some more info...given that I can't talk about some specifics. :-) For simplicity, let's call my conserver the "Lab", and the other one is "Other"... The Other conserver shares a subnet with a group of console servers. There is no router there. (I found this out after my last message...) So, the Other conserver host has two legs, one for the Management Net, and the other to the console servers. * I was trying to get access to two console servers directly, to access one port on each, while the Other conserver would still have control of all the other ports. (I knew that there was no VPN gear terminating on that console server net. I was thinking I needed a proxy, so I could get through their router...but there isn't one.) OK, I can't get there from here. :-( ** Due to security policies, I can't get a non-person account on the Other conserver, so my monitoring host cannot try to access the Other conserver to do tests. :-( BUT, my Lab conserver CAN access hosts on the subnet with the two hosts that I care about, so I'm going to buy an 8-port BREAK-safe console server, and get another IP on that subnet. One of the hosts I care about is relatively critical to day-to-day operations, so I need a BREAK-safe answer. And, I also can't put another conserver on that host...when I need it (to diagnose a problem on that host), it may be unavailable. The second host will be a newer replacement for the first host. While it's not mission-critical YET, it will be critical before the other machine can be decommissioned (so, it's also not a good candidate to an alternate conserver host). Both servers are SUN hardware. I'm sorry that I've missed the LISA hallway track the past couple years. But if anyone will be laying over in the SF Bay Area sometime, let me know, and we'll try to catch up in person again. Best regards, -Z- On Wed, May 6, 2009 at 6:34 PM, John Stoffel wrote: > > Zonker> I find myself in a situation where I must access a > Zonker> restricted network via a proxy server. > > Do you have a terminal server on the restricted network? And does it > understand SSL? > > Zonker> Conserver here is a "normal" setup... many local > Zonker> (in-building) console servers, and a few remote console > Zonker> servers via the WAN, all using RAW connections to the console > Zonker> server ports. > > Zonker> The new twist is that we need to manage ports on a secured > Zonker> network. Using a VPN is not an option offered to us. The > Zonker> Conserver host has a Production interface, and a backup net > Zonker> interface. The host does not have a free card slot for an > Zonker> additional Ethernet interface. (It would be politically > Zonker> difficult to put secondary addressing on the Production net, > Zonker> and it would be a security risk to overlay a new network on > Zonker> the Backup network...) > > Hmm... can you get access to a host inside the restricted network to > setup a conserver, then use something like 'stunnel' to setup a secure > tunnel to it? > > How restricted is this network? They obviously don't seem to have a > problem with you getting an IP address on there and adding a port to > your server. > > Can you swap out an interface card on the Conserver host and put in a > dual or quad port card in it's place? That would expand your options... > > God knows they should be cheap and easy to find these days for Solaris > boxes, heck I might even have some for Sbus still kicking around, and > I know I do for PCI. You only need 10/100, so a quad port HME card > would work great. > > Obviously, I'm assuming a bunch about your hardware.... can you share > more details? > > Zonker> It looks like I might be able to use IPTables to do this > Zonker> (point to a proxy for a specific subnet), then I need to see > Zonker> if I can get ports on the proxy to bounce me to the console > Zonker> ports. Has anyone done it this way? How did that work out for > Zonker> you? > > That seems fragile to me. Can you SSH into the restricted network? > If you can, could you deploy a Digi CM32 in there with SSH turned on > and some public/private SSH keys to be used by the conserver master > box to access those ports? > > I also don't understand the difference between a proxy and a VPN > solution, they're both the same... though thinking about it, if you > can just route all your IP traffic from host CS (Console Server) to PH > (proxy Host) to be routed to the RN (restricted Net) that should do > the trick: > > route add net RN.IP.RAN.GE/SIZE gateway TH.IP.AD.DR 1 > > That might also do the trick, but doesn't address the question of how > you punch through the firewall (restrictions) into the funky RN. > > Dunno... can you give more details? > > Thanks, > John > -- ConsoleTeam - Support and training services for Conserver users. www.conserver.com/consoles/ consoleteam.blogspot.com --000e0cd59cf00f3e090469491a81 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable =A0 Hi John, Chris (and the group at large)

=A0 Here's some more= info...given that I can't talk about some specifics.=A0 :-)

=A0= For simplicity, let's call my conserver the "Lab", and the o= ther one is "Other"...

=A0 The Other conserver shares a subnet with a group of console servers= . There is no router there. (I found this out after my last message...) So,= the Other conserver host has two legs, one for the Management Net, and the= other to the console servers.

=A0=A0=A0 * I was trying to get access to two console servers directly,= to access one port on each, while the Other conserver would still have con= trol of all the other ports. (I knew that there was no VPN gear terminating= on that console server net. I was thinking I needed a proxy, so I could ge= t through their router...but there isn't one.) OK, I can't get ther= e from here. :-(

=A0=A0=A0 ** Due to security policies, I can't get a non-person acc= ount on the Other conserver, so my monitoring host cannot try to access the= Other conserver to do tests. :-(

=A0=A0=A0 BUT, my Lab conserver CA= N access hosts on the subnet with the two hosts that I care about, so I'= ;m going to buy an 8-port BREAK-safe console server, and get another IP on = that subnet.

=A0 One of the hosts I care about is relatively critical to day-to-day = operations, so I need a BREAK-safe answer. And, I also can't put anothe= r conserver on that host...when I need it (to diagnose a problem on that ho= st), it may be unavailable.

=A0 The second host will be a newer replacement for the first host. Whi= le it's not mission-critical YET, it will be critical before the other = machine can be decommissioned (so, it's also not a good candidate to an= alternate conserver host). Both servers are SUN hardware.

=A0 I'm sorry that I've missed the LISA hallway track the past = couple years. But if anyone will be laying over in the SF Bay Area sometime= , let me know, and we'll try to catch up in person again.

=A0=A0= =A0=A0 Best regards,

=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 -Z-

On= Wed, May 6, 2009 at 6:34 PM, John Stoffel <john.stoffel@taec.toshiba.com>= ; wrote:
RN.IP.RAN.GE/SIZE gateway TH.IP.AD.DR 1

That might also do the trick, but doesn't address the question of how you punch through the firewall (restrictions) into the funky RN.

Dunno... can you give more details?

Thanks,
John



--
ConsoleTeam - Su= pport and training services for Conserver users.
www.conserver.com/consoles/
consoleteam.blogspot.com
--000e0cd59cf00f3e090469491a81-- From stoffj@taec.toshiba.com Thu May 7 20:34:21 2009 Received: from mailhost.taec.toshiba.com (mailhost.taec.toshiba.com [209.243.128.33]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n47KYE5C005810 for ; Thu, 7 May 2009 20:34:21 GMT Received: from localhost.localdomain (IDENT:U2FsdGVkX19ceA9JTm/cLczoXufVJBmzRxcnkI3ep8A@sekrit.taec.toshiba.com [209.243.166.44]) by mailhost.taec.toshiba.com (8.12.7/8.12.7) with ESMTP id n47KYDUf014224; Thu, 7 May 2009 13:34:13 -0700 (PDT) Received: from localhost.localdomain (sekrit [127.0.0.1]) by localhost.localdomain (8.13.1/8.12.11) with ESMTP id n47KYCLp007616; Thu, 7 May 2009 16:34:12 -0400 Received: (from stoffj@localhost) by localhost.localdomain (8.13.1/8.13.1/Submit) id n47KY69W007613; Thu, 7 May 2009 16:34:06 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <18947.17854.831223.696351@gargle.gargle.HOWL> Date: Thu, 7 May 2009 16:34:06 -0400 From: "John Stoffel" To: Zonker Subject: Re: Conserver through a proxy server? In-Reply-To: References: <18946.15041.60210.189103@gargle.gargle.HOWL> X-Mailer: VM 7.19 under Emacs 22.1.2 X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2009 20:34:21 -0000 Zonker> Here's some more info...given that I can't talk about some Zonker> specifics. :-) Heh, security through obscurity. :] Zonker> For simplicity, let's call my conserver the "Lab", and the Zonker> other one is "Other"... Zonker> The Other conserver shares a subnet with a group of console Zonker> servers. There is no router there. (I found this out after my Zonker> last message...) So, the Other conserver host has two legs, Zonker> one for the Management Net, and the other to the console Zonker> servers. Zonker> * I was trying to get access to two console servers Zonker> directly, to access one port on each, while the Other Zonker> conserver would still have control of all the other ports. (I Zonker> knew that there was no VPN gear terminating on that console Zonker> server net. I was thinking I needed a proxy, so I could get Zonker> through their router...but there isn't one.) OK, I can't get Zonker> there from here. :-( Umm... why? If you've already got a conserver Other managing ports on that subnet, why the need for "Lab" to access "Other" ports? Zonker> ** Due to security policies, I can't get a non-person Zonker> account on the Other conserver, so my monitoring host cannot Zonker> try to access the Other conserver to do tests. :-( Zonker> BUT, my Lab conserver CAN access hosts on the subnet with Zonker> the two hosts that I care about, so I'm going to buy an 8-port Zonker> BREAK-safe console server, and get another IP on that subnet. Zonker> One of the hosts I care about is relatively critical to Zonker> day-to-day operations, so I need a BREAK-safe answer. And, I Zonker> also can't put another conserver on that host...when I need it Zonker> (to diagnose a problem on that host), it may be unavailable. Zonker> The second host will be a newer replacement for the first Zonker> host. While it's not mission-critical YET, it will be critical Zonker> before the other machine can be decommissioned (so, it's also Zonker> not a good candidate to an alternate conserver host). Both Zonker> servers are SUN hardware. So basically, it sounds like you're trying to setup a conserver for the production WAN network which is firewalled off. And manage it from your Lab network. Honestly, it doesn't make sense to make to do it this way, but I'm sure politics and management play into this. Zonker> I'm sorry that I've missed the LISA hallway track the past Zonker> couple years. But if anyone will be laying over in the SF Bay Zonker> Area sometime, let me know, and we'll try to catch up in Zonker> person again. Yeah, I agree. I'm bummed I've missed LISA in general the past few years. Maybe once this recession is over (and my kids are a little older) I'll be able to make these again. John From consoleteam@gmail.com Thu May 7 21:11:40 2009 Received: from mail-gx0-f158.google.com (mail-gx0-f158.google.com [209.85.217.158]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n47LBYqW007081 for ; Thu, 7 May 2009 21:11:40 GMT Received: by gxk2 with SMTP id 2so2045988gxk.3 for ; Thu, 07 May 2009 14:11:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=YWrxcpfguwx9awe7ZDcrVob2qzjE3haEKdq9Ge4Vy24=; b=DLHJGZMYcqFlH8TOXJD+RAaIlJXtCDlJ769XmoUEXw2iH50yh9e/twmxHcJZ4Iy6K3 LkXxDYlzeJVEi8S/36o905zytDhAaJP4c6Llky2IE3JMPJj0gZkxyrDAK4dLbao4SRr0 ZHKPaMISZAgKrknwCjkjJIUTzSQvsRC8LUVUI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=Z+TmwZTMv/pbuRwb9vCXPvLnjUQSlCm+GKQ/FuKGGtZRDKGD211ssqoYUhBS8CWIDV yiF+aFWxfJxqTDUXYBpVu75mIbjsJp3xIr6Zor0/qtuvE2Z83qGr4ikoIkuaXWaTG7N+ QTVP4b0b0c8Ero0cCRxFsZ8s6FyYcXa+1Zg3A= MIME-Version: 1.0 Received: by 10.150.139.15 with SMTP id m15mr5248488ybd.22.1241730693381; Thu, 07 May 2009 14:11:33 -0700 (PDT) In-Reply-To: <18947.17854.831223.696351@gargle.gargle.HOWL> References: <18946.15041.60210.189103@gargle.gargle.HOWL> <18947.17854.831223.696351@gargle.gargle.HOWL> Date: Thu, 7 May 2009 14:11:33 -0700 Message-ID: Subject: Re: Conserver through a proxy server? From: Zonker To: John Stoffel Content-Type: multipart/alternative; boundary=000e0cd59cf0e2bf7d046958f45c X-Spam-Score: -2.311 () BAYES_00,HTML_MESSAGE X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2009 21:11:40 -0000 --000e0cd59cf0e2bf7d046958f45c Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit On Thu, May 7, 2009 at 1:34 PM, John Stoffel wrote: > Zonker> For simplicity, let's call my conserver the "Lab", and the > Zonker> other one is "Other"... > > Zonker> The Other conserver shares a subnet with a group of console > Zonker> servers. There is no router there. (I found this out after my > Zonker> last message...) So, the Other conserver host has two legs, > Zonker> one for the Management Net, and the other to the console > Zonker> servers. > > Zonker> * I was trying to get access to two console servers > Zonker> directly, to access one port on each, while the Other > Zonker> conserver would still have control of all the other ports. (I > Zonker> knew that there was no VPN gear terminating on that console > Zonker> server net. I was thinking I needed a proxy, so I could get > Zonker> through their router...but there isn't one.) OK, I can't get > Zonker> there from here. :-( > > Umm... why? If you've already got a conserver Other managing ports on > that subnet, why the need for "Lab" to access "Other" ports? > To clarify: The two hosts serve one business unit, but managing the hardware and OS falls to a different unit. The basic answer is that there are two different operations groups, and both have picked Conserver as their tool of choice for managing remote access tot heir consoles. (As a result, I cannot 'merge' the two into a "distributed configuration", since each business unit has different staff, needing access to different sets of hosts.) If we could get past the politics of the two groups, I'd wager that nobody in either group (besides me) wants to consider being in charge of a combined Conserver config, handling user changes for both groups. :-| Given the politics (where " politics = time + $ " ), adding a $1200 console server seems the faster, practical option, and it can be re-deployed if/when the host(s) move to a different data center. -Z- -- ConsoleTeam - Support and training services for Conserver users. www.conserver.com/consoles/ consoleteam.blogspot.com --000e0cd59cf0e2bf7d046958f45c Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

On Thu, May 7, 2009 at 1:34 PM, John Sto= ffel <john.stoffel@taec.toshiba.com> wrote:
Zonker> =A0 For simplicity, let's call my conserver the "Lab&qu= ot;, and the
Zonker> other one is "Other"...

Zonker> =A0 The Other conserver shares a subnet with a group of console<= br> Zonker> servers. There is no router there. (I found this out after my Zonker> last message...) So, the Other conserver host has two legs,
Zonker> one for the Management Net, and the other to the console
Zonker> servers.

Zonker> =A0 =A0 * I was trying to get access to two console servers
Zonker> directly, to access one port on each, while the Other
Zonker> conserver would still have control of all the other ports. (I Zonker> knew that there was no VPN gear terminating on that console
Zonker> server net. I was thinking I needed a proxy, so I could get
Zonker> through their router...but there isn't one.) OK, I can't= get
Zonker> there from here. :-(

Umm... why? =A0If you've already got a conserver Other managing ports o= n
that subnet, why the need for "Lab" to access "Other" p= orts?

To clarify: The two hosts serve one business = unit, but managing the
hardware and OS falls to a different unit.
The basic answer is that there are two different operations groups, and b= oth
have picked Conserver as their tool of choice for managing remote accesstot heir consoles. (As a result, I cannot 'merge' the two into a &= quot;distributed
configuration", since each business unit has diffe= rent staff, needing access
to different sets of hosts.) If we could get past the politics of the two g= roups,
I'd wager that nobody in either group (besides me) wants to c= onsider being in
charge of a combined Conserver config, handling user ch= anges for both groups. :-|

Given the politics (where " politics =3D time + $ &q= uot; ), adding a $1200 console
server seems the faster, practical optio= n, and it can be re-deployed if/when
the host(s) move to a different da= ta center.

=A0=A0=A0=A0 -Z-

--
ConsoleTeam - Support and training servi= ces for Conserver users.
= www.conserver.com/consoles/
consoleteam.blogspot.com
--000e0cd59cf0e2bf7d046958f45c-- From pabutusa@gmail.com Fri May 8 19:32:21 2009 Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.31]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n48JWEnn025093 for ; Fri, 8 May 2009 19:32:20 GMT Received: by yw-out-2324.google.com with SMTP id 3so837078ywj.81 for ; Fri, 08 May 2009 12:32:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; bh=Ibk43l/kVoVNKTDrWQg2wb4ouhwO90TrqQwwAnmlqUI=; b=JfjEsa/DE8tVinrOlRx4i9GjjH/6AAAEoQDiVUu1TejJnwhKoLoC4h+2AwpTMU4/uI MsJtgysAvVoUisXyLtr/10QvHZoG6c9BoFeBbm37cxhxQ135bS5RSQwP6oK5Q3UJCv+4 bKeGX+Dg/Mmv4vmePNNP7yD8Sd0NEGkui5vkA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type:content-transfer-encoding; b=gDUjAFdpu0/OcpxYDBAaqb18/dbtsSVo+brWfKWkAGB4pJlaS5zBHXXx9O/3uBpRh9 HKaytt+S8pvN1dcWy3gBzq/j7FI+uiNkZ1zR/F38B6cAuTIpu7bQAQt2RJpX8tAEBOMf p/9WxKp9VvEYiR8RgMnJQYNmhLlnEO0gkOCK4= MIME-Version: 1.0 Sender: pabutusa@gmail.com Received: by 10.90.68.12 with SMTP id q12mr3143482aga.70.1241811133881; Fri, 08 May 2009 12:32:13 -0700 (PDT) Date: Fri, 8 May 2009 15:32:13 -0400 X-Google-Sender-Auth: 986ad89a709f7705 Message-ID: Subject: Conserver logfile mod .... From: Rob To: users@conserver.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 May 2009 19:32:21 -0000 I was looking to make a modification to the code and wondering if you can tell me where to start looking ..... I want to add an option so that EVERY LINE on the monitored console port is written to the log file PREFACED with a time stamp ..... What source file and what routine does the actual log writing ????? I'm thinking it's FileWrite in cutil.c ....... Thanks, --> Rob From bmccann@andmore.com Fri May 8 19:39:08 2009 Received: from hermod.andmore.com (hermod.andmore.com [12.160.186.111]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n48Jd20T025198 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=FAIL) for ; Fri, 8 May 2009 19:39:08 GMT Received: from hermod.andmore.com ([192.168.100.3]) by hermod.andmore.com ([192.168.100.3]) with mapi; Fri, 8 May 2009 15:39:01 -0400 From: "McCann, Brian" To: "'Rob'" , "'users@conserver.com'" Date: Fri, 8 May 2009 15:39:00 -0400 Subject: RE: Conserver logfile mod .... Thread-Topic: Conserver logfile mod .... Thread-Index: AcnQE8FBxUgrw7K1QhOqznjoVZSv1AAAM5sA Message-ID: <249E65CE1FE3FE42B8E7D93EA3B1A9F34148FCE3@hermod.andmore.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 May 2009 19:39:08 -0000 I like this idea...if you do make a patch, would you mind sharing it? --Brian -----Original Message----- From: users-bounces@conserver.com [mailto:users-bounces@conserver.com] On B= ehalf Of Rob Sent: Friday, May 08, 2009 3:32 PM To: users@conserver.com Subject: Conserver logfile mod .... I was looking to make a modification to the code and wondering if you can tell me where to start looking ..... I want to add an option so that EVERY LINE on the monitored console port is written to the log file PREFACED with a time stamp ..... What source file and what routine does the actual log writing ????? I'm thinking it's FileWrite in cutil.c ....... Thanks, --> Rob _______________________________________________ users mailing list users@conserver.com https://www.conserver.com/mailman/listinfo/users From bryan@stansell.org Sat May 9 21:00:17 2009 Received: from underdog.stansell.org (localhost [127.0.0.1]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n49L0H21021064 for ; Sat, 9 May 2009 21:00:17 GMT Received: (from bryan@localhost) by underdog.stansell.org (8.14.3/8.14.3/Submit) id n49L0E9s021062 for users@conserver.com; Sat, 9 May 2009 14:00:14 -0700 (PDT) Date: Sat, 9 May 2009 14:00:14 -0700 From: Bryan Stansell To: users@conserver.com Subject: Re: Conserver logfile mod .... Message-ID: <20090509210011.GE4995@underdog.stansell.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 May 2009 21:00:18 -0000 That functionality is already there. If a console has the "timestamp 1l;" option, you'll get a timestamp before each line. Bryan On Fri, May 08, 2009 at 03:32:13PM -0400, Rob wrote: > I was looking to make a modification to the code and wondering if you > can tell me where to start looking ..... I want to add an option so > that EVERY LINE on the monitored console port is written to the log > file PREFACED with a time stamp ..... > > What source file and what routine does the actual log writing ????? > I'm thinking it's FileWrite in cutil.c ....... > > Thanks, > > > --> Rob > _______________________________________________ > users mailing list > users@conserver.com > https://www.conserver.com/mailman/listinfo/users From pabutusa@gmail.com Sun May 10 01:46:43 2009 Received: from mail-gx0-f158.google.com (mail-gx0-f158.google.com [209.85.217.158]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4A1kbjw000115; Sun, 10 May 2009 01:46:43 GMT Received: by gxk2 with SMTP id 2so4445899gxk.3 for ; Sat, 09 May 2009 18:46:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=jUXwedolHYBwVcichU2O09PYyCYpH09HqQbjoVPL+JI=; b=luS+rFcOYDWazOoq9dPVF/8dhIUZK8EdZ2v/+sjRwdvxTRb6xDUsO3oNnm7tdr46Lx GXLT4iVP3/x139ypV/i52fnOafVRY7XF7IrRmNzZkmAzaLcc85zs9fZCvp547Yk8TaUK 0//fnUK8z5f00I6B8IQLcXwsuQZ9WtNHp/OtI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=p2o0zQhwAhq4r0sWe2apyg4JUOhm4SWnP3IwkMIPDy33/4ouQsSYpPjmXUgWSDG04Z Ks9O6XuP8GUuR6wKodERu/L4MlpQMErERzArbL4HIGsBS5SPeZ++78cJq+/Qaaaxbk8P T4C+Sb7rJdzGj8aANB+zOJW2jYRVMS0Jft+CI= MIME-Version: 1.0 Sender: pabutusa@gmail.com Received: by 10.90.70.6 with SMTP id s6mr950512aga.74.1241919996802; Sat, 09 May 2009 18:46:36 -0700 (PDT) In-Reply-To: <20090509210011.GE4995@underdog.stansell.org> References: <20090509210011.GE4995@underdog.stansell.org> Date: Sat, 9 May 2009 21:46:36 -0400 X-Google-Sender-Auth: 24b4ed63139ba460 Message-ID: Subject: Re: Conserver logfile mod .... From: Rob To: Bryan Stansell Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 May 2009 01:46:44 -0000 SWEET !! ... didn't see that in the MAN PAGE On Sat, May 9, 2009 at 5:00 PM, Bryan Stansell wrote: > That functionality is already there. =A0If a console has the > "timestamp 1l;" option, you'll get a timestamp before each line. > > Bryan > > On Fri, May 08, 2009 at 03:32:13PM -0400, Rob wrote: >> I was looking to make a modification to the code and wondering if you >> can tell me where to start looking ..... I want to add an option so >> that EVERY LINE on the monitored console port is written to the log >> file PREFACED with a time stamp ..... >> >> What source file and what routine does the actual log writing ????? >> I'm thinking it's FileWrite in cutil.c ....... >> >> Thanks, >> >> >> --> Rob >> _______________________________________________ >> users mailing list >> users@conserver.com >> https://www.conserver.com/mailman/listinfo/users > _______________________________________________ > users mailing list > users@conserver.com > https://www.conserver.com/mailman/listinfo/users > From pabutusa@gmail.com Thu May 28 18:36:58 2009 Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.28]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SIamhb016430 for ; Thu, 28 May 2009 18:36:58 GMT Received: by yw-out-2324.google.com with SMTP id 3so3051043ywj.81 for ; Thu, 28 May 2009 11:36:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; bh=purRYqA2EQR9ODc4WFl255c7VLihZnAeWFSbwdhKi5k=; b=xpwo/TWLUUNFJ4uVPNgtYyRJEnFloZyZV116pAnv5VGmsoZ0Cj1uTdbW10xkTKI16V /N1v+5S//HQX/rJCjzSiCCy/2VMI6pYXjgsJelVCOYwrCG/K5ZgXYD1ZvsmH/h5sk7sl 2K55UEoonQVPyZD7oQRruA1PESCUBr5nKHtMU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type:content-transfer-encoding; b=DMbWBnGDxy8YtpjBmuskz46TIBGJl9mD8g7i0nC5hH6P5/2WkZVInzLhC51hyIk79r +IVfncROlnYgRfbBMhnxQkxguICgoi1KSs2g39fBw8MsKHor1baoNDlT7z0dpCvYsaAA Ji8IiaAB2BEUnMEhpLf2gLafO7IDAcaDF5GPI= MIME-Version: 1.0 Sender: pabutusa@gmail.com Received: by 10.90.98.12 with SMTP id v12mr33562agb.81.1243535808114; Thu, 28 May 2009 11:36:48 -0700 (PDT) Date: Thu, 28 May 2009 14:36:48 -0400 X-Google-Sender-Auth: 0227ee08d7134ce2 Message-ID: Subject: How many consoles can conserver support?? From: Rob To: users@conserver.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 18:36:58 -0000 I know it's a loaded question .... but given I'm running conserver on a DUAL 3.2GHZ Xeon server with 4GB of memory ... how many consoles could I expect to support? None of my consoles are direct connect .... they are all connected via an IP based term server like a cisco 2500 .... What resources would limit me ... threads?? sockets ... memory?? Does anyone have any real life experience monitoring 100's of consoles??? Thanks, --> Rob From cpz@tuunq.com Thu May 28 18:45:37 2009 Received: from mail.tuunq.com (75-101-13-164.dsl.static.sonic.net [75.101.13.164]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SIjW2b016592 for ; Thu, 28 May 2009 18:45:37 GMT Received: from [127.0.0.1] (unknown [198.3.161.123]) by mail.tuunq.com (Postfix) with ESMTP id 476C57AD; Thu, 28 May 2009 11:45:31 -0700 (PDT) Message-ID: <4A1EDBC9.9090200@tuunq.com> Date: Thu, 28 May 2009 11:45:29 -0700 From: Carl Zwanzig User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: Rob Subject: Re: How many consoles can conserver support?? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 18:45:37 -0000 Rob wrote: > Does anyone have any real life experience monitoring 100's of consoles??? Maybe 6-7 years ago, we had a 400+ port setup on a single freebsd box. There were 256 consoles on a cyclades gigantic serial expander board and the rest on terminal servers. I don't recall any problems. z! From pabutusa@gmail.com Thu May 28 19:13:46 2009 Received: from mail-gx0-f158.google.com (mail-gx0-f158.google.com [209.85.217.158]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SJDeGQ017711 for ; Thu, 28 May 2009 19:13:46 GMT Received: by gxk2 with SMTP id 2so9602512gxk.3 for ; Thu, 28 May 2009 12:13:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to :content-type:content-transfer-encoding; bh=lZwaefIeAfQdjiSvplaZG7G/1/nqjoydrW5pxlxoyY0=; b=KDt2gAYxvGTGr/marJ5mHPLdb/5z0bsJ0iLfXVcaAcE8Lfs8t7I4veyJlyBumjqxx/ WSVmcwaYVKb16A0IOhPFAfTV/dzY59d82nuZVuwq7dQOqD3CGg3up+osdf2yduMQvcwJ XDNojiNlVJdMVKuHSW/ZaV3dlpSB2tvBqIeps= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; b=lnJlSID8bZTwvvb0S8OTyAGW2u8m6/x9m8cCchTN9pIHZTAUPvjaahxVCZpTzfchmn XT1vcZJMOFdd3dfIhp0RrD3hl753+DbJuN3UH3ISaJGJB16XpgObwL/2L4oHxSwyfT9h fIDZpz3zyqvEBfjx8mvI2SlrHjwbcBZ1FKopM= MIME-Version: 1.0 Sender: pabutusa@gmail.com Received: by 10.90.120.14 with SMTP id s14mr1311728agc.51.1243538019829; Thu, 28 May 2009 12:13:39 -0700 (PDT) In-Reply-To: <4A1EDBC9.9090200@tuunq.com> References: <4A1EDBC9.9090200@tuunq.com> Date: Thu, 28 May 2009 15:13:39 -0400 X-Google-Sender-Auth: ce80afd32732e94c Message-ID: Subject: Re: How many consoles can conserver support?? From: Rob To: users@conserver.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 19:13:46 -0000 That's the order of magnitude I was looking for ...... forgot to mention I'm running Linux ..... anyone with experience on that OS?? --> Rob On Thu, May 28, 2009 at 2:45 PM, Carl Zwanzig wrote: > Rob wrote: >> >> Does anyone have any real life experience monitoring 100's of consoles??? > > Maybe 6-7 years ago, we had a 400+ port setup on a single freebsd box. There > were 256 consoles on a cyclades gigantic serial expander board and the rest > on terminal servers. I don't recall any problems. > > z! > From john@iastate.edu Thu May 28 19:14:57 2009 Received: from mailhub-5.iastate.edu (mailhub-5.iastate.edu [129.186.140.15]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SJEphE017743 for ; Thu, 28 May 2009 19:14:57 GMT Received: from devirus-11.iastate.edu (devirus-11.iastate.edu [129.186.1.48]) by mailhub-5.iastate.edu (8.12.11.20060614/8.12.10) with SMTP id n4SJEol2028486; Thu, 28 May 2009 14:14:51 -0500 Received: from (despam-10.iastate.edu [129.186.140.80]) by devirus-11.iastate.edu with smtp id 550d_d1163858_4bbb_11de_b8c6_001372578af6; Thu, 28 May 2009 14:14:49 -0500 Received: from malison.ait.iastate.edu (malison.ait.iastate.edu [129.186.145.229]) by despam-10.iastate.edu (8.14.2/8.12.10) with ESMTP id n4SJEn1R028044; Thu, 28 May 2009 14:14:49 -0500 Received: from localhost (john@localhost) by malison.ait.iastate.edu (8.8.8/8.8.5) with SMTP id OAA31234; Thu, 28 May 2009 14:14:48 -0500 (CDT) To: Carl Zwanzig Subject: Re: How many consoles can conserver support?? In-reply-to: Your message of Thu, 28 May 2009 11:45:29 -0700. <4A1EDBC9.9090200@tuunq.com> Date: Thu, 28 May 2009 14:14:48 CDT Message-ID: <27926.1243538088@malison.ait.iastate.edu> From: John Hascall X-PMX-Version: 5.5.3.366731, Antispam-Engine: 2.7.0.366912, Antispam-Data: 2009.5.28.185837 X-ISUMailhub-test: Gauge=IIIIIII, Probability=8%, Report='BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_500_599 0, BODY_SIZE_7000_LESS 0, FROM_EDU_TLD 0, __BOUNCE_CHALLENGE_SUBJ 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __SANE_MSGID 0, __TO_MALFORMED_2 0' X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 19:14:57 -0000 > Rob wrote: > > Does anyone have any real life experience monitoring 100's of consoles??? > Maybe 6-7 years ago, we had a 400+ port setup on a single freebsd box. > There were 256 consoles on a cyclades gigantic serial expander board > and the rest on terminal servers. I don't recall any problems. At the moment we have exactly 400 hosts on ours. We are using a Dell 1950 running NetBSD 4.0 and through 9 48-port Cyclades terminal servers. It hardly breaks a sweat, I expect it could do a whole lot more. John From cfowler@outpostsentinel.com Thu May 28 19:24:43 2009 Received: from support.opsdc.com (support.opsdc.com [65.254.217.214]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SJOb01017922 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 28 May 2009 19:24:43 GMT Received: from [192.168.1.115] ([208.65.90.32]) (authenticated bits=0) by support.opsdc.com (8.14.2/8.14.2) with ESMTP id n4SJOXE9027416; Thu, 28 May 2009 15:24:35 -0400 Subject: Re: How many consoles can conserver support?? From: Chris Fowler To: Rob In-Reply-To: References: <4A1EDBC9.9090200@tuunq.com> Content-Type: text/plain Date: Thu, 28 May 2009 15:24:30 -0400 Message-Id: <1243538670.31396.117.camel@compaq> Mime-Version: 1.0 X-Mailer: Evolution 2.26.1 Content-Transfer-Encoding: 7bit X-Spam-Score: -0.74 () BAYES_20 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 19:24:43 -0000 On Thu, 2009-05-28 at 15:13 -0400, Rob wrote: > That's the order of magnitude I was looking for ...... forgot to > mention I'm running Linux ..... anyone with experience on that OS?? I have ran 7.2.X and I run 8.X now as a console manager for VMWare guests using UDS. On 7.2.X I experienced an odd problem that sometimes when conserver would read() from a serial port it would block. Now obviously select() did say it was okay to read but some strange occurrence blocked the read. I simply killed the daemon and restarted. I saw this happening by using strace to attach to the process and then seeing what fd it was blocking on then I would look in /proc//fd and see what serial port that was associated with. From slammert@panasas.com Thu May 28 19:43:43 2009 Received: from laguna.int.panasas.com (gw-ca.panasas.com [209.116.51.66]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SJhcBx018190 for ; Thu, 28 May 2009 19:43:43 GMT Received: from daytona.int.panasas.com ([172.17.28.41]) by laguna.int.panasas.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 28 May 2009 12:43:36 -0700 Received: from [172.17.133.253] ([172.17.133.253]) by daytona.int.panasas.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 28 May 2009 15:43:34 -0400 Message-ID: <4A1EE967.8030300@panasas.com> Date: Thu, 28 May 2009 15:43:35 -0400 From: Steve Lammert User-Agent: Thunderbird 2.0.0.21 (X11/20090318) MIME-Version: 1.0 To: Rob Subject: Re: How many consoles can conserver support?? References: <4A1EDBC9.9090200@tuunq.com> In-Reply-To: <4A1EDBC9.9090200@tuunq.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 28 May 2009 19:43:34.0651 (UTC) FILETIME=[96684CB0:01C9DFCC] X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 19:43:43 -0000 I have two Conserver installations, one managing nearly 1800 lines and the other nearly 1200. All lines are telnet-based (to Cyclades/Avocent terminal concentrators) on a private network, mostly at 9600 or 38400 baud. We replaced our old SPARCstation (Solaris 8) when it started to get a little pokey at 800-900 lines. Our current systems are early 64-bit Xeon (2-core) and aren't working very hard at all. I don't expect any need for further upgrades for some time to come. Hope this helps, S Carl Zwanzig wrote: > Rob wrote: >> Does anyone have any real life experience monitoring 100's of >> consoles??? > > Maybe 6-7 years ago, we had a 400+ port setup on a single freebsd box. > There were 256 consoles on a cyclades gigantic serial expander board > and the rest on terminal servers. I don't recall any problems. > > z! > _______________________________________________ > users mailing list > users@conserver.com > https://www.conserver.com/mailman/listinfo/users From Mark.Wedel@Sun.Com Thu May 28 20:16:05 2009 Received: from sca-ea-mail-1.sun.com (sca-ea-mail-1.Sun.COM [192.18.43.24]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SKFxQa019412 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Thu, 28 May 2009 20:16:05 GMT Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by sca-ea-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n4SKFxY4017278; Thu, 28 May 2009 20:15:59 GMT Received: from [129.146.108.170] (sleipner.SFBay.Sun.COM [129.146.108.170]) by jurassic-x4600.sfbay.sun.com (8.14.3+Sun/8.14.3) with ESMTP id n4SKFwu7282888; Thu, 28 May 2009 13:15:58 -0700 (PDT) Message-ID: <4A1EF0FC.7020502@Sun.Com> Date: Thu, 28 May 2009 13:15:56 -0700 From: Mark Wedel User-Agent: Thunderbird 2.0.0.21 (X11/20090505) MIME-Version: 1.0 To: Steve Lammert Subject: Re: How many consoles can conserver support?? References: <4A1EDBC9.9090200@tuunq.com> <4A1EE967.8030300@panasas.com> In-Reply-To: <4A1EE967.8030300@panasas.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 Cc: users@conserver.com X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 20:16:06 -0000 Steve Lammert wrote: > I have two Conserver installations, one managing nearly 1800 lines and > the other nearly 1200. All lines are telnet-based (to Cyclades/Avocent > terminal concentrators) on a private network, mostly at 9600 or 38400 baud. > > We replaced our old SPARCstation (Solaris 8) when it started to get a > little pokey at 800-900 lines. Our current systems are early 64-bit > Xeon (2-core) and aren't working very hard at all. I don't expect any > need for further upgrades for some time to come. On a T1000 I have 700 consoles - most are actually getting the console connection over ssh scripts to SP's of various systems. I'm not sure what the exact startup sequence of conserver is, but that is the most likely case of running into issues (hundreds of ssh or other init commands running at the same time) In the case of the 700 consoles, looks like memory utilization from conserver on those is around 200-400 MB. CPU utilization is pretty trivial. From john@iastate.edu Thu May 28 20:24:26 2009 Received: from mailhub-5.iastate.edu (mailhub-5.iastate.edu [129.186.140.15]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SKOKA9019543 for ; Thu, 28 May 2009 20:24:26 GMT Received: from devirus-10.iastate.edu (devirus-10.iastate.edu [129.186.1.47]) by mailhub-5.iastate.edu (8.12.11.20060614/8.12.10) with SMTP id n4SKOJJ3020731 for ; Thu, 28 May 2009 15:24:19 -0500 Received: from (despam-11.iastate.edu [129.186.140.81]) by devirus-10.iastate.edu with smtp id 485c_86275fc0_4bc5_11de_b35d_00137253420a; Thu, 28 May 2009 15:24:19 -0500 Received: from malison.ait.iastate.edu (malison.ait.iastate.edu [129.186.145.229]) by despam-11.iastate.edu (8.12.11.20060614/8.12.10) with ESMTP id n4SKOIqd029782 for ; Thu, 28 May 2009 15:24:18 -0500 Received: from localhost (john@localhost) by malison.ait.iastate.edu (8.8.8/8.8.5) with SMTP id PAA31443 for ; Thu, 28 May 2009 15:24:18 -0500 (CDT) To: users@conserver.com Subject: Re: How many consoles can conserver support?? In-reply-to: Your message of Thu, 28 May 2009 13:15:56 -0700. <4A1EF0FC.7020502@Sun.Com> Date: Thu, 28 May 2009 15:24:18 CDT Message-ID: <31424.1243542258@malison.ait.iastate.edu> From: John Hascall X-PMX-Version: 5.5.3.366731, Antispam-Engine: 2.7.0.366912, Antispam-Data: 2009.5.28.201100 X-ISUMailhub-test: Gauge=IIIIIII, Probability=8%, Report='BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_800_899 0, FROM_EDU_TLD 0, TO_NO_NAME 0, __BOUNCE_CHALLENGE_SUBJ 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __SANE_MSGID 0, __TO_MALFORMED_2 0' X-Spam-Score: -2.312 () BAYES_00 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 20:24:27 -0000 Mark Wedel wrote: > On a T1000 I have 700 consoles - most are actually getting the console > connection over ssh scripts to SP's of various systems. > > I'm not sure what the exact startup sequence of conserver is, but that > is the most likely case of running into issues (hundreds of ssh or > other init commands running at the same time) We use the 'raw socket' connection option for precisesly this reason. (And why Avocent fills me with grrrr for dropping this feature on their newer terminal servers!) John ------------------------------------------------------------------------------- John Hascall, john@iastate.edu Team Lead, NIADS (Network Infrastructure, Authentication & Directory Services) IT Services, The Iowa State University of Science and Technology From gregb_ka6max@hotmail.com Thu May 28 20:48:20 2009 Received: from col0-omc3-s13.col0.hotmail.com (col0-omc3-s13.col0.hotmail.com [65.55.34.151]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4SKmEnW019885 for ; Thu, 28 May 2009 20:48:19 GMT Received: from COL102-W32 ([65.55.34.136]) by col0-omc3-s13.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 28 May 2009 13:48:14 -0700 Message-ID: Content-Type: multipart/alternative; boundary="_ba30bd83-0ac5-4ab0-a790-88829349df95_" X-Originating-IP: [67.113.111.162] From: Greg Brown To: , conserver mailing list Subject: RE: How many consoles can conserver support?? Date: Thu, 28 May 2009 13:48:12 -0700 Importance: Normal In-Reply-To: <31424.1243542258@malison.ait.iastate.edu> References: Your message of Thu, 28 May 2009 13:15:56 -0700. <4A1EF0FC.7020502@Sun.Com> <31424.1243542258@malison.ait.iastate.edu> MIME-Version: 1.0 X-OriginalArrivalTime: 28 May 2009 20:48:14.0479 (UTC) FILETIME=[9EF711F0:01C9DFD5] X-Spam-Score: -2.311 () BAYES_00,HTML_MESSAGE X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2009 20:48:20 -0000 --_ba30bd83-0ac5-4ab0-a790-88829349df95_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Using tcp raw sockets works well for me on our private "back door" network.= When going through the production network or production WANs=2C it is bes= t to use SSH. =20 We use Xyplex terminal servers in 48 and 24 port varieties. They work grea= t. Had 150 consoles on one 7.2 Conserver. Keep daily logs on all traffic = and store off to archive each night at midnight. Scan the logs for problem= s and e-mail sysadmins based on which servers they take care of. =20 Greg Brown Computer Sciences Corp. San Diego=2C CA. =20 > To: users@conserver.com > Subject: Re: How many consoles can conserver support??=20 > Date: Thu=2C 28 May 2009 15:24:18 -0500 > From: john@iastate.edu >=20 >=20 >=20 > Mark Wedel wrote: > > On a T1000 I have 700 consoles - most are actually getting the console= =20 > > connection over ssh scripts to SP's of various systems. > >=20 > > I'm not sure what the exact startup sequence of conserver is=2C but tha= t > > is the most likely case of running into issues (hundreds of ssh or > > other init commands running at the same time) >=20 > We use the 'raw socket' connection option for precisesly this reason. > (And why Avocent fills me with grrrr for dropping this feature on their > newer terminal servers!) >=20 > John > -------------------------------------------------------------------------= ------ > John Hascall=2C john@iastate.edu > Team Lead=2C NIADS (Network Infrastructure=2C Authentication & Directory = Services) > IT Services=2C The Iowa State University of Science and Technology >=20 > _______________________________________________ > users mailing list > users@conserver.com > https://www.conserver.com/mailman/listinfo/users --_ba30bd83-0ac5-4ab0-a790-88829349df95_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Using tcp raw sockets works well for me on our private "back door" network.=  =3B When going through the =3Bproduction network or production WAN= s=2C it is best to use =3BSSH.
 =3B
We use Xyplex terminal servers in 48 and 24 port varieties. =3B They wo= rk great. =3B Had 150 consoles on one 7.2 Conserver. =3B Keep daily= logs on all traffic and store off to archive each night at midnight. = =3B Scan the logs for problems and e-mail sysadmins based on which servers = they take care of.
 =3B
Greg Brown
Computer Sciences Corp.
San Diego=2C CA.
 =3B
>=3B To: users@conserver.com
>=3B Su= bject: Re: How many consoles can conserver support??
>=3B Date: Thu= =2C 28 May 2009 15:24:18 -0500
>=3B From: john@iastate.edu
>=3B <= BR>>=3B
>=3B
>=3B Mark Wedel <=3BMark.Wedel@Sun.Com>=3B w= rote:
>=3B >=3B On a T1000 I have 700 consoles - most are actually g= etting the console
>=3B >=3B connection over ssh scripts to SP's of= various systems.
>=3B >=3B
>=3B >=3B I'm not sure what the = exact startup sequence of conserver is=2C but that
>=3B >=3B is the = most likely case of running into issues (hundreds of ssh or
>=3B >= =3B other init commands running at the same time)
>=3B
>=3B We u= se the 'raw socket' connection option for precisesly this reason.
>=3B= (And why Avocent fills me with grrrr for dropping this feature on their>=3B newer terminal servers!)
>=3B
>=3B John
>=3B ------= ------------------------------------------------------------------------->=3B John Hascall=2C john@iastate.edu
>=3B Team Lead=2C NIADS (Net= work Infrastructure=2C Authentication &=3B Directory Services)
>=3B= IT Services=2C The Iowa State University of Science and Technology
>= =3B
>=3B _______________________________________________
>=3B us= ers mailing list
>=3B users@conserver.com
>=3B https://www.conser= ver.com/mailman/listinfo/users
= --_ba30bd83-0ac5-4ab0-a790-88829349df95_-- From dclarkjr@wowway.com Sun May 31 03:50:28 2009 Received: from smtp.mail.wowway.com (smtp.wow.synacor.com [64.8.70.55]) by underdog.stansell.org (8.14.3/8.14.3) with ESMTP id n4V3oMR2002209 for ; Sun, 31 May 2009 03:50:28 GMT X-Spam-Rating: None X_CMAE_Category: 0,0 Undefined,Undefined X-CNFS-Analysis: v=1.0 c=1 a=eVzcpTy6uT6JCHBfP8EA:9 a=jhOl9_mQnik07NIkiAzRT7flGwsA:4 X-CM-Score: 0 X-Scanned-By: MIMEDefang 2.67 on 209.182.219.30 X-Scanned-by: Cloudmark Authority Engine Authentication-Results: smtp01.wow.synacor.com smtp.user=dclarkjr@wowway.com; auth=pass (LOGIN) Received: from [69.47.166.17] ([69.47.166.17:2771] helo=[172.16.1.198]) by smtp.mail.wowway.com (envelope-from ) (ecelerity 2.2.2.40 r(29895/29896)) with ESMTPA id 76/59-07637-E7EF12A4; Sat, 30 May 2009 23:50:22 -0400 Subject: conserver ? From: Don Clark To: users@conserver.com Content-Type: text/plain Date: Sat, 30 May 2009 23:50:21 -0400 Message-Id: <1243741821.5646.4.camel@dsktp1> Mime-Version: 1.0 X-Mailer: Evolution 2.26.1 Content-Transfer-Encoding: 7bit X-Spam-Score: -2.312 () BAYES_00 X-BeenThere: users@conserver.com X-Mailman-Version: 2.1.12 Precedence: list List-Id: Conserver Users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 May 2009 03:50:28 -0000 First let me start by I am new to conserver and I have it setup and working with the console client. But is there a way to setup conserver so I can ssh directly to a serial port? Or is there a console client for Windows(sorry but I have a few windows boxes)? A good example would be I what to ssh to /dev/ttyMI0, so I was thinking I would ssh to the conserver server on port 2000 and that port would direct me to /dev/ttyMI0 Thanks in advance, Don