Trond's place

Users of Microsoft WSUS, be it directly or indirectly through MECM, are having bad days.

I learned yesterday that Autodesk Revit uses MS SQL Server LocalDB, and the latter is sensitive towards 4K disk blocks.

Strelka failed to sync on Security Onion 3.1.0.

TL;DR, port-channels on the Dells needs portmode hybrid in addition to switchport to enable VLAN 1, and it helps to ignore “invalid” PVST-BPDUs by adding no spanning-tree pvst err-disable cause invalid-pvst-bpdu to the port-channels.

If your switch ports are part of a link aggregation group, and those interfaces are listed as suspended, check the LAG configuration on the other end.

I only saw this strange behaviour on my own laptop running a week old 16.0-CURRENT, but here’s one way of coping.

I migrated our 14.4-STABLE syslog server to a XCP-ng VM, and noticed local-unbound made loud complaints.

The user manual for Eaton 9PX3000iRT2U is missing one piece of information.

At ${WORK} we have a number of UPSs.

My internet provider told me a while ago that my old 4G router would be left in the dark after New Year.

Synth has frozen on more than one occasion while it was running commands like umount /var/synth/builders/synth-live/SL04/ccache and building more than one package at a time.

Windows Update in one of our Windows member servers running Windows Server 2022 threw error 0x8024401c after ingesting KB5070884.

The ZFS pool feature dynamic_gang_header must be enabled manually.

Two configuration files named Files.config must be edited if your Revit Server 2026 uses a separate NTFS volume for the user data.

At ${WORK}, we’ve been running Greenbone Vulnerability Management for some years.

Today, I had a go at the ETOPEN Suricata rules in Security Onion 2.4.150.

Kibana appeared dead after upgrading Security Onion from 2.4.120 to 2.4.130.

At ${WORK} we have a so-called “monster server” as our resident FreeBSD builder.

After surfing for a while I came across source 1 and source 2.

Git is at 2.47.1 and this happened as part of a routinegit -C /usr/src pull -j `nproc` --no-edit --no-ff -p andgit -C /usr/src rebase stable/14 stable/14+local: Maybe I should add a sleep command between git pull and git rebase.

After upgrading Brave to version 1.73.89 (Chromium 131.0.6778.69) and Google Chrome to version 131.0.6778.70, the web GUI of our Fortinet FortiGate is inaccessible.

mosh’s IPv6 support has been broken in Cygwin for a while.

If you have insufficient space for Security Onion’s /nsm filesystems, then consider adjusting these parameters in the SOC (Administration > Configuration): pcap > config > maxdirectoryfiles Setting this value to roughly 144000 files yields roughly 100 days

Up until quite recently, I’ve been using YTD Video Downloader in Windows for downloading YouTube videos, but even the paid version has issues.

Running the command sudo soup on your manager node gives you this warning: WARNING: If you run soup via an SSH session and that SSH session terminates, then any processes running in that session would terminate.

0 [main] mosh-client (21652) child_copy: cygheap read copy failed, 0x0..0x800029F60, done 0, windows pid 21652, Win32 error 299 Died at /usr/bin/mosh line 320.

I wish I did this change ages ago. 50 minutes of waiting on estimates turned into less than 20 seconds of waiting.

It is quite difficult getting “Windows 11, version 24H2 x64 2024-05D” installed in a virtual Windows 11 client.

At ${WORK}, we ordered one Lenovo ThinkPad P1 G6 (P/N 21FV000MMX) which came with 32 GiB of RAM.

NetBSD 9.4 is out.

For some reason a rebooted Security Onion manager node is perceived as a combined manager-search node (this is my hypothesis), filling up the /nsm filesystem with unnecessary, large amounts of data.

When the harddrives in the oldest virtualization server at $WORK died, I was virtually left without any test systems running the other BSDs and some select Linux distros.

Autodesk recently published the 2025 editions of their products.

While following the suggestions of https://github.com/jtesta/ssh-audit/wiki/FreeBSD and security/py-ssh-audit 3.2.0, I figured it’s better to make adjustments to the startup script in libexec/rc/rc.d/sshd.

I decided to play with FreeBSD 13.3-RC1 in VirtualBox.

We upgraded our Security Onion nodes today.

In the aftermath of KB5034441, I experimented with creating a 1 GiB large Windows Recovery Partition on a new Microsoft Windows 10 VM, ensuring enough free space for KB5034441 and hopefully any later versions of the “Windows Recovery Environment.”

If Zeek on your forward node (sensor) keeps restarting and its detailed status never changes from “health: starting,” to simply “healthy,” have a look at zeek.config.networks.HOME_NET in the Grid Configuration.

If you connect your Cisco Catalyst 9600 to equipment using fixed wire speeds, you may need to issue the speed nonegotiate command on affected switchports.

netdata was recently updated to 1.42.2 in the FreeBSD ports collection.

The Dell PERC H730 Adapter, a 12 Gbit/s SAS controller, in a Dell PowerEdge R330 server, complained about “L2/L3 Cache error was detected on the RAID controller.”

Det er ikke ofte jeg skriver på norsk.

I updated my laptop running FreeBSD current yesterday.

pkg audit has flagged Curl 7.87.0_1 as vulnerable for a week or so.

Upgrading MySQL from 5.7 to 8.0 was mostly uneventful.

You can’t configure nor download a newer version of the MySQL client using the FreeBSD ports collection while an older version is installed.

Sometimes old equipment fails in mysterious ways.

Caused by xen-guest-tools-4.16.1.

One thing has annoyed me for years, and that is the ports tree refusing me to configure and download newer versions of PHP and PostgreSQL while an older one is installed.

I reviewed some used Dell PowerEdge R720.