bradoaks

#!/bin/bash

# As the "bufferbloat" folks have recently re-discovered and/or more widely
# publicized, congestion avoidance algorithms (such as those found in TCP) do
# a great job of allowing network endpoints to negotiate transfer rates that
# maximize a link's bandwidth usage without unduly penalizing any particular
# stream. This allows bulk transfer streams to use the maximum available
# bandwidth without affecting the latency of non-bulk (e.g. interactive)
# streams.

marcan

#!/boot/bzImage

# Linux kernel userspace initialization code, translated to bash
# (Minus floppy disk handling, because seriously, it's 2017.)
# Not 100% accurate, but gives you a good idea of how kernel init works
# GPLv2, Copyright 2017 Hector Martin <[email protected]>
# Based on Linux 4.10-rc2.

# Note: pretend chroot is a builtin and affects the current process
# Note: kernel actually uses major/minor device numbers instead of device name

grkvlt

This is a request to add the CA root certificate for Honest Achmed's Used Cars and Certificates.  The requested information as per the CA information checklist is as follows:

1. Name

Honest Achmed's Used Cars and Certificates

2. Website URL

www.honestachmed.dyndns.org

skreuzer

global:
  evaluation_interval: 15s
rule_files:
  - smokeping.rules
scrape_configs:
  - job_name: 'blackbox_icmp'
    metrics_path: /probe
    params:
      module: [icmp]
    scrape_interval: 1s

rwestphal

#         +---------+                                                 +---------+
#         |         |                                                 |         |
#         |   CE1   |                                                 |   CE2   |
#         |         |                                                 |         |
#         +---------+                                                 +---------+
#      ce1-eth0|                                                           |ce2-eth0
#              |                                                           |
# 172.16.1.0/24|                                                           |172.16.2.0/24
#              |                                                           |
#      rt1-eth0|         10.0.1.0/24                   10.0.3.0/24         |rt3-eth0

mutin-sa

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

rwestphal

ripd# conf t
ripd(config)# router rip
ripd(config-router)# network eth2
ripd(config-router)# show configuration candidate changes
@@ -14,6 +14,7 @@
  distance 25 172.16.1.0/24
  network eth0
  network eth1
+ network eth2
  redistribute ospf metric 3

rwestphal

#                                      +---------+
#                                      |         |
#                                      |   RT1   |
#                                      | 1.1.1.1 |-lo1 (2001:db8:1000::1/128)
#                                      |         |
#                                      +---------+
#                                           |rt1-eth0 (.1)
#                                           |
#                                           |10.0.1.0/24
#                                           |2001:DB8:1::/64

sdstrowes

tl;dr:

• mostly, hosts ignore the mss sent
• most of the interesting behaviour comes from the extremes: mss=1 and mss=1440
• setting mss=(an atypical value, say 1275 or 1411) ought to spot hosts that simply reflect MSS values
• setting mss=1024 apparently will spot a bunch of (Microsoft?) hosts returning MSS=956
• passively, mss=1220, 1360, 1410 may help identify CDN/non-CDN nodes inside yahoo/edgecast, google, facebook respectively

Longer version: captured SYN+ACK+MSS values:

Variation is less than I initially thought; just enough for me to notice

zingaburga

ARM’s Scalable Vector Extensions: A Critical Look at SVE2 For Integer Workloads

Scalable Vector Extensions (SVE) is ARM’s latest SIMD extension to their instruction set, which was announced back in 2016. A follow-up SVE2 extension was announced in 2019, designed to incorporate all functionality from ARM’s current primary SIMD extension, NEON (aka ASIMD).

Despite being announced 5 years ago, there is currently no generally available CPU which supports any form of SVE (which excludes the [Fugaku supercomputer](https://www.fujitsu.com/global/about/innovation/