So, I'm labbing up a few new f5 boxes at work, and the initial configuration is done by the web interface.  I've been using the Epiphany browser on Debian.  Unfortunately, whenever I have to factory-default a box or use the same IP to connect to new box, (or any number of other common lab scenarios) the certificate serial number is reused or may go backwards.  So, Epiphany gives me the nice sec_error_reused_issuer_and_serial error and fails the SSL handshake.  Unfortunately, deleting the certs out of the certificate manager (Tools -> Manager Certificates) doesn't work.  The only way I've found to fix this is:

% rm ~/.gnome2/epiphany/mozilla/epiphany/cert8.db

This essentially starts the certificate cache/DB from scratch.  Not good, but the only option is to use another browser.

Hey developers, let's add a knob to just disable all the certificate checking for 'lab' and 'testing' work.  It's just really annoying for us IT folks trying to get work done!

So, in previous posts, I've stated that the PoP I've been using is down.  Unfortunately, the mid-January date for it to be brought back up up has come and gone.

Should I switch to Hurricane Electric?  They are close, too:

% traceroute -q1 tserv4.nyc4.ipv6.he.net.
traceroute to tserv4.nyc4.ipv6.he.net (209.51.161.14), 64 hops max, 52 byte packets
 1  voxel.prolixium.net (69.9.189.181)  0.545 ms
 2  0.ge1-4.dsr1.lga6.us.voxel.net (208.122.5.41)  0.439 ms
 3  0.te6-3.tsr1.lga3.us.voxel.net (208.122.5.229)  0.419 ms
 4  core1.nyc4.he.net (198.32.118.57)  0.460 ms
 5  tserv4.nyc4.ipv6.he.net (209.51.161.14)  0.365 ms

But I'd have to renumber everything from 2001:4830:122d::/48 to something else.  What a PITA.

I received a letter in the mail back on the 24th (dated the 21nd) of January, indicating that John J Delaney Dr was going to be renamed.

Apparently, not:

I'm thinking that:

1. Charlotte DOT realized it was a stupid idea.
2. Emergency organizations and businesses took a couple minutes to educate themselves on street names and locations.
3. Residents realized it was a stupid idea and complained.
4. Charlotte DOT couldn't come up with a new name for the street.
5. It was actually a joke that nobody got.

It's got to be one of those, right?  I don't know what to say.

I decided to encode (MP4/H.264/AAC) the seven hours of the inauguration that I recorded via MythTV.  Since the original transport stream is roughly 45GiB, my goal was to get it into an 8GiB size to fit onto a DL DVD-R disc.  I used HandBrake, and right before the 20 hour encode finished, it went bewm:

Muxing: this may take awhile...MP4ERROR: (m_size <= (uint64_t)0xFFFFFFFF): assert failure

Yeah, it didn't turn out right.  Should I bother trying again?

Update: Looks like there is some 4000 MiB file size limit.  Yuck.

So I was hanging in #IPv6 on freenode, today…

15:18 < jakllsch> anyone know tcpdump magic to display only router adverts?

That's simple, I figured:

ip6 and icmp6 and 'icmp6[icmptype] == 134'

According to the ICMPv6 type numbers, router advertisements are type 134.  But the expression doesn't work!  libpcap 0.9.8 in Debian doesn't seem to support this:

IPv6 upper-layer protocol is not supported by proto[x]

So, knowing that the IPv6 header is 40 bytes long, and that the type is the first byte in the ICMPv6 header, the solution is simple:

ip6 and icmp6 and 'ip6[40] = 134'

As an example:

% tcpdump -r hi.cap ip6 and icmp6 and 'ip6[40] = 134'
reading from file hi.cap, link-type EN10MB (Ethernet)
15:38:00.167264 IP6 fe80::204:23ff:fe5f:4cd8 > ip6-allnodes: ICMP6, router advertisement, length 56
15:38:05.348160 IP6 fe80::204:23ff:fe5f:4cd8 > ip6-allnodes: ICMP6, router advertisement, length 56

Cool, huh?  I'm sure I made your day.

Seriously, I don't get it:

Or, it might just be me fail.  My Zalman CNPS9500's fan had a loose bearing, so I went to replace it.  See the photo gallery.  I'm not going to say too much about it, but here's what I posted to IRC:

19:28 < prox> So, that was my junk last night.
19:28 < prox> I ended up actually buying another CNPS9500, cause I'm an idiot.
19:28 < prox> And I couldn't get to /any/ of the screws to take off the fan, since I wanted to do it w/out removing the heatsink, since it was such a PITA to get on in the first place.
19:29 < prox> I ended up with the bright idea of bending the metal arm that the fan was screwed on, taking it off that way, then doing the same to the one in my case.
19:29 < prox> And, of course, it never bent back correctly.
19:29 < prox> So I just ripped it off and went with the Intel :P
19:30 < prox> The title of that photo gallery should be 'prox fail'.

Now things are warmer, but MUCH quieter.  Intel has the variable speed fan.  Compare before and after:

Well, it snowed in Charlotte, today.  I almost slid off the road at one point, due to cloaked ice and lack of salt.  It was fun, I guess.. but I don't think the oncoming traffic thought so.  Anyway, I took a boring video as my car was warming up:

Some more photos are here.  Most of the snow is gone, now, but it's cooooold.