Reputation
1,473
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 8 11
Newest
 Yearling
Impact
~302k people reached

  • 0 posts edited
  • 0 helpful flags
  • 210 votes cast
Jun
1
answered Free alternative to NI Real-Time Hypervisor?
May
30
comment Storing and backing up 10 million files on Linux
Yup, locality is crucial. Look at your usage patterns. Most problems tend to follow the Pareto Principle (80% of processes hitting 20% of data), so if you could figure out which files need to be cached in RAM, or just put on a separate partition with a different layout of directories, so it takes less directory lookups or seeks, it would probably help a lot. Spreading the frequently accessed files on different spindles of disks so seeks could be done in parallel could also help. +1 for @nemo for bringing up locality of reference.
May
30
comment Disk full, du tells different. How to further investigate?
The size of a file and the amount of space it takes on a filesystem are two separate things. The smaller the files tend to be, the bigger the discrepancy between them. If you write a script that sums up the sizes of files and compare it to the du -s of the same subtree, you're going to get a good idea if that's the case here.
May
28
awarded  Yearling
May
26
comment Problem with Xen, xvda and sda
Why not mount them as xvda's then so it all agrees?
May
18
comment In tail -f, how do I filter out stuff that has certain keywords?
Yes, but they're merely symlinks to each other, not two different programs with some functional overlap. So wouldnt that be more of an 'addendum' (read: comment), not a full fledged answer? I've had downvotes for lesser offences...
May
17
comment different ACK behaviors (slowing down throughput?)
+1 for anyone that provides Dtrace code and output!
May
12
answered What are the benefits of a commercial distribution of Linux over a good sysadmin?
May
5
comment Is there a security concern exposing NTLM authentication over http or should it only be https?
'If you see it it's bad' is true. 'If you don't see it then it's good' is not necessarily true however. With challenge/response protocols you gotta study the protocol of what is being asked and how the response is generated, then seeing if you can obtain all the necessary information. en.wikipedia.org/wiki/NTLM#NTLMv2 has the details of what gets used. Time can be closely estimated, user and domain names can be determined, so the only truly random bit is 8byte random nonce, so that can probably be guessed in not too many tries.
May
5
answered Is there a security concern exposing NTLM authentication over http or should it only be https?
May
4
comment key efficiency 99.97% mysql
So does the high utilization of cache mean that everything that needs to be cached is cached? Or does it mean it's working well for what it's got, but it's maxed out and it needs more?
Apr
28
answered Stuck trying to track down the culprit for high CPU usage on a LAMP server
Apr
22
comment Connecting to MySQL securely - MySQL's SSL vs Stunnel vs SSH Tunneling
What kind of server/network architecture do you have? What kind of a scenario are you trying to prevent? If all your server-to-server communication is on a separate switch/VLAN, then you might not need anti-sniffing protection. As for performance, run openssl speed and pick ciphers that fit your needs for protection vs performance compromise.
Apr
20
answered How to determine which disk failed in a FreeNAS / ZFS setup
Apr
20
comment Nehalem vs Magny-Cours for VMWare/TS server
Take a look at the new Nehalem-EX and the chipsets they require; One system can house 2TB ram, 8 sockets, 10 cores (+HT).
Apr
20
comment Groups & User Conventions for *nix Server
So if a file gets deleted in this setup, how do you attribute who did it? Do you have some sort of version tracking on top of this layout?
Apr
20
answered Linux server distro where default server packages customized the least?
Apr
18
comment Is data always encrypted in IPv6 communications?
Thank you for clearly dismissing a horribly popular myth.
Apr
6
comment Filtering IPv6 ICMPv6 messages
You can't get rid of link-local, funny enough, because you need a starting point for the Neighbor Discovery process. In IPv4 you always have your MAC and you ARP out to get some IP. In IPv6 you always have your link-local and you do {Neighbor,Router} Solicitation to find your neighbors on the segment and a gateway out of your segment.
Apr
5
comment Filtering IPv6 ICMPv6 messages
Neighbor Discovery is basically your ARP replacement. So you're not gonna be able to resolve any hosts on your segment.