Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 10
Newest
 Excavator
Impact
~21k people reached

May
12
awarded  Excavator
May
12
revised How do I measure disk thrashing on linux?
Dead link, this is what google had for kSar, though I didn't research deeply
May
12
suggested approved edit on How do I measure disk thrashing on linux?
May
12
comment Stateful matching of multicast responses in iptables
@pepoluan Isn't this dangerous to tell a device to accept all UDP traffic based on source address? It may be ok for internal net but not for a box in the wild, am I misreading?
Feb
19
comment Giving a process a specific name in GNU/Linux?
Some binaries won't work well if you do mostly embedded (busybox, dropbear)
Jan
13
awarded  Popular Question
Sep
8
comment Can you get any program in Linux to print a stack trace if it segfaults?
@FernandoSilveira ok. Writing the answer this way hints to the reader that they should check what that path is.
Mar
10
comment Limiting outgoing connections by port to control nf_conntrack usage
Yes, I already created NOTRACK rules for some of the traffic few days back, but this question is looking to implement a quota. While adding NOTRACK and some of the other suggestions would improve my situation - I think they don't give me enough control (and I'm a control freak). +1 for effort and potential help for future visitors, but won't mark accept as does not answer
Mar
7
comment Delete a iptables chain with its all rules
@StevenMonday why not write as answer, this is the most useful one (alternative do this via file and edit file). Only thing it does not remove is complete tables ("raw" anyway)
Mar
6
comment Limiting outgoing connections by port to control nf_conntrack usage
@Slartibartfast The result may be a ratelimit. I'm looking to protect one subsystem of the system from failures in another subsystem. In this particular question I am looking to have a connlimit that applies to conntrack entries in any state, including TIME_WAIT.
Mar
6
awarded  Promoter
Mar
4
revised Limiting outgoing connections by port to control nf_conntrack usage
added 40 characters in body
Mar
4
comment Install Silently CCleaner without Chrome
When you do please add details like as links and how you found it
Mar
4
comment Limiting outgoing connections by port to control nf_conntrack usage
@AndrewB I am with you there, but this is not a webserver + mail server + DB + monitoring system. It just has the need to connect to more than one backend systems, as well as service customers at the front. While we intend to do our fine tuning, I claim that that if this feature existed, that it would have be considered, if nothing else, a good practice (like ulimit can be used to restrict resources for certain users/contexts)
Mar
4
comment Limiting outgoing connections by port to control nf_conntrack usage
@MichaelHampton Not saying that I won't, but this would just buy me more time, but I'm trying to ensure first is that if one application goes wild that it does not impact others ... In my system it is easy to distinguish between said apps by socket parameters.
Mar
4
asked Limiting outgoing connections by port to control nf_conntrack usage
Feb
5
awarded  Notable Question
Nov
8
accepted Clear machine-check event from /proc/sys/kernel/tainted
Nov
8
answered Clear machine-check event from /proc/sys/kernel/tainted
Nov
3
comment Clear machine-check event from /proc/sys/kernel/tainted
Looking here, lxr.linux.no/linux+v2.6.32.9/kernel/panic.c, and seeing where and how the static tainted_mask, I would say that this is not possible, but would still love to hear about any best-practices for this case