Archive for March, 2006

Trend Micro Client-Server-Messaging-Security for SMB problems

Saturday, March 25th, 2006

I run CSMS for SMB in my organization. Not long ago I have lost all my settings. It means that using the web interface, I have gotten empty scan rules for my groups. All computers, actually, were scanning for an empty list of file extensions to scan, meaning no scanning at all. I tracked it down due to a complain made by one of my developers, claiming his laptop doesn’t scan any file.

Searching for the problem, it really showed to be the issue. I have re-created my scan rules, per group, however, they did not propogate to the clients. Few attempts here and there, including restart to the server’s mangement services, and I’ve gotten something even weirder – most of my computers were missing from the web management, and settings were not propogated.

Contacting TrendMicro’s support, I was told to restore an alternate httpdb directory. I’ve found this directory, and found that it has three backups on the system. I have taken one of them (which, regarding its date, was supposed to be a correct one), and replaced (backing up the older one, of course) the current httpdb directory. During this, of course, the master service is off.

It worked quite fine. I have it all up and running now, and my clients get propogated just as they should. I wonder, however, about the cause of it all. I think it all began when I have run disk-cleanup on this Windows Server. I lacked some space on C:, and disk-cleanup sure did help. However, TrendMicro seemed to have problems afterwards.

Next time I’ll run Disk-Cleanup, I would check CSMS settings carefully afterwards (and maybe back them up prior to the operation).

If anyone has some similar experiance with such a problem, please be kind enough to leave a comment here. I wish to investigate it further, as it poses a threat on my (and everyones) organization. Thanks!

Hitachi HW100 limitations

Sunday, March 19th, 2006

Not too long ago I have purchased a brand new Hitachi HW100 Workgroup Storage. 14+1 400GB SATA disks, dual-interface, each holding two fiber ports (2Gb/s LC). A nice machine. However, two limitations I have discovered are clouding my day:

1. It supports only Raid0 and Raid5. It will not allow me no-parity Raid, aka, Raid1. It is a pity, because my storage is meant for the lab, and not for production, and I wish to decide my own Raid level. That is why it’s 14+1 disks, and not 15. You must have a spare disk.

2. While not connected directly to hosts (Private Loop), only one port out of two ports in an interface works. It means I bought 4 ports, and actually got two. Why would I need four? I need to simulate multi-path, load balancing and utilize maximum flexibility when connecting this storage to my fiber network. After all, this network is all lab, no production network, and I need to maximize my output, with as little redundancy as possible.

These two limitations are somewhat hidden, and, especially the second one, was discovered only after I’ve questioned HDS’ support person. Pity. I will want to return it, and get a more capable one. I need to see what I can do with it.

Orinoco_pci finally working correctly!

Thursday, March 9th, 2006

After upgrading my laptop to kernel, hibernation worked flawlessly. Running my previous version of kernel –, I have had some hibernation instabilities. I’ve had some memory corruptions here and there, which would have required I reboot the machine. So far, and it’s been a while, I’m glad to say I had no reason to "reboot" my laptop, but only to hibernate and awake it. Works like a charm.

In my post here, I have complained of performance issues with Orinoco_pci module. Although I’ve had somewhat below the average speed in my LAN (I’ve got about 800KB/s, give or take, on my 802.11b network), using this line to reach an external server / address or even a web site was disastrous. Degraded performance, up to no connection at all. Ping was correct at all times, just as a simple wget to a rather close server (on my ISP’s server room) got timed-out, and drained to less than 2KB/s… Terrible.

In this kernel version, as I’m happy to say, I have tested the built-in orinoco, and finally it’s working just as it should. I get to use my full internet bandwidth, and I’m happy with it. Normal response times, and all. Now all I’ve got left is to make sure the internal LEDs work. On another day 🙂

Power Supply failure – the wrong type of failure

Sunday, March 5th, 2006

I’ve lost an external DAS (Direct Attached Storage) today. Not lost as in could not find, but lost due to power supply failure. I’ve been home, got a phone call saying all the company’s Unix storage, which is contained on a DAS including two 72GB HDDs in a mirror (DiskSuite on Solaris8) is not available. Remotely, I could not reach it. I/O Error on each request (ls, cd, etc). I’ve had to reach the place. There I’ve noticed lots of error messages generated by the kernel when trying to access the disks. After lots of games (I will not describe the procedure, but it included replacing external SCSI cable, disconnecting one of the disks, etc), I have replaced the DAS module, and put the older disks in it, making sure I use the same LUN the disks had before (for DiskSuite’s sake). 

Conclusion – Power Supply failure, but not an absolute failure. The lights remained working, and disks could spin-up, but when required to work, the power supply failed to give the disks the whole power capacity the disks required, resulting in read/write errors. Working, but just not quite.

Tracking the problem, and hacking a different SCSI DAS module required almost two hours of my life. I hope never to encounter such a problem again.

Kernel update –

Friday, March 3rd, 2006

Alongside a newer kernel, I’m enjoying a newer Software Suspend2 package. I am not crazy about betas, or RCs, so now I’m on the 2.2 stable. I have hibernated only once since I’ve upgraded kernel, but it went just fine on the first try, so I’m rather ok with it without setting a set of cover-it-all tests.

Here’s my kernel config, if anyone’s interested – config-

Also, you can get the latest swsusp2 and fbsplash from the right places, as described in my post here. It’s good I use this blog – it keeps my memories for me.