132 reputation
18
bio website
location Boston, MA
age
visits member for 3 years, 9 months
seen Nov 16 at 3:34

Sep
8
comment Can you get any program in Linux to print a stack trace if it segfaults?
@FernandoSilveira ok. Writing the answer this way hints to the reader that they should check what that path is.
Mar
10
comment Limiting outgoing connections by port to control nf_conntrack usage
Yes, I already created NOTRACK rules for some of the traffic few days back, but this question is looking to implement a quota. While adding NOTRACK and some of the other suggestions would improve my situation - I think they don't give me enough control (and I'm a control freak). +1 for effort and potential help for future visitors, but won't mark accept as does not answer
Mar
7
comment Delete a iptables chain with its all rules
@StevenMonday why not write as answer, this is the most useful one (alternative do this via file and edit file). Only thing it does not remove is complete tables ("raw" anyway)
Mar
6
comment Limiting outgoing connections by port to control nf_conntrack usage
@Slartibartfast The result may be a ratelimit. I'm looking to protect one subsystem of the system from failures in another subsystem. In this particular question I am looking to have a connlimit that applies to conntrack entries in any state, including TIME_WAIT.
Mar
6
awarded  Promoter
Mar
4
revised Limiting outgoing connections by port to control nf_conntrack usage
added 40 characters in body
Mar
4
comment Install Silently CCleaner without Chrome
When you do please add details like as links and how you found it
Mar
4
comment Limiting outgoing connections by port to control nf_conntrack usage
@AndrewB I am with you there, but this is not a webserver + mail server + DB + monitoring system. It just has the need to connect to more than one backend systems, as well as service customers at the front. While we intend to do our fine tuning, I claim that that if this feature existed, that it would have be considered, if nothing else, a good practice (like ulimit can be used to restrict resources for certain users/contexts)
Mar
4
comment Limiting outgoing connections by port to control nf_conntrack usage
@MichaelHampton Not saying that I won't, but this would just buy me more time, but I'm trying to ensure first is that if one application goes wild that it does not impact others ... In my system it is easy to distinguish between said apps by socket parameters.
Mar
4
asked Limiting outgoing connections by port to control nf_conntrack usage
Feb
5
awarded  Notable Question
Nov
8
accepted Clear machine-check event from /proc/sys/kernel/tainted
Nov
8
answered Clear machine-check event from /proc/sys/kernel/tainted
Nov
3
comment Clear machine-check event from /proc/sys/kernel/tainted
Looking here, lxr.linux.no/linux+v2.6.32.9/kernel/panic.c, and seeing where and how the static tainted_mask, I would say that this is not possible, but would still love to hear about any best-practices for this case
Nov
2
revised Clear machine-check event from /proc/sys/kernel/tainted
added 130 characters in body
Nov
2
comment Clear machine-check event from /proc/sys/kernel/tainted
@MichaelHampton - I tried to distinguish in my question good from bad hardware. I am under the impression that even good hardware will have these soft, correctable errors. If they happen infrequently its probably not bad (lets say once every other day). If they happen regularly/frequent then the hardware is probably bad. See mcelog.org/faq.html#2
Nov
2
asked Clear machine-check event from /proc/sys/kernel/tainted
Aug
29
comment How can I check from the command line if a reboot is required on RHEL or CentOS?
I suspect that certain other packages may require a reboot eben iof the kernel does not change (when I installed kexec-tools-2.0.0-258 on centos6.0 there was no memory reserved for the dump)
Jun
21
awarded  Popular Question
Dec
5
comment Why is my ethernet interface in promiscuous mode
@h0tw1r3 accepted as now I found logs that indicate interface going in/out of promisc mode with tcpdump (w/o -p) ...