[00:17] error 25 anybody know what it is? [00:19] without more context, no, no way at all [01:00] hi, how can i change timezone ? [01:00] /etc/timezone [01:01] run the command tzselect [01:03] I have a cron job that puts all output into a file .. how can I then after that cron job runs, email that file to myself? [01:03] * * * * /foo/script.log > /tmp/file.log 2>&1 [01:04] can I do: * * * * /foo/script.log > /tmp/file.log 2>&1 ; cat /tmp/file.log | mailx -s "email" email@email.com ? [01:05] Bangers1, some metioned here the other day that there's a way to do it with postfix, but i can't remember what he said [01:05] Bangers1, i've always done it with the program sendemail though [01:06] i dont care what program I use, mailx or whatever... [01:06] My question might be cron syntax related? [01:07] Bangers1: well that cat is extra [01:08] pipe the output from script.log directrly to email :D [01:08] Bangers1: Doesn't cron email all output from jobs to the invoking user anyway? [01:10] That's true, but I still want that file written to the system for keeping in the future (output file is /tmp/file.log.$(date) [01:10] then use tee [01:10] Well, how about foo 2>&1 | tee -a mylog.log [01:11] why not set the MAIL= flag in your crontab ? [01:11] ah, we've established that *finishes reading up* [01:13] if I foo 2>&1 | tee -a mylog.log -- wont i be in the same position I was before? cron wont have any output to email me... [01:14] Oh, ignore me. tee copied output to the FD, and to stdout still [01:27] ok last question, why does this work? But adding the $(date) stops it from working? [01:27] WORKS 25 1 * * 5 /usr/bin/ssh user@server "ls -l" 2>&1 | tee /tmp/file.log | mailx -s "test" email@email.com [01:27] DOESNT WORK 25 1 * * 5 /usr/bin/ssh user@server "ls -l" 2>&1 | tee /tmp/file.log.$(date +'%F') | mailx -s "test" email@email.com [01:29] Bangers1: shot in the dark here, but are you 199% sure the syntax is correct? [01:30] Yep. it works in bash, but as a cron job it doesnt work [01:30] use the absolute path to date [01:31] hrm, the problem is cron uses 'sh' not bash for the input command, and my command isnt valid for sh [01:32] ah, yes, that too, heh [01:48] how can i check free desk space ? [01:48] disk [01:51] df [01:51] df -h is a little easier to read [01:53] ok, when i do rm -r dir/ , does the space free up ? i just deleted like 3 gb directory [01:53] and i think the disk space didnt change [01:53] orudie: Yes, it frees up, unless some other process has the files open. [01:54] In that case it will free up once that process closes the files concerned. [01:59] hi, are you able to set parameters with setenv.sh for tomcat6? (8.10 server obviously) === chmac7 is now known as chmac [03:23] no one around with tomcat6 and 8.10? [04:07] hi [04:11] anyone know the trick to getting the dual LSI Logic / Symbios Logic SAS1068 PCI-X Fusion-MPT SAS controllers to work with the MD3000 in 8.04 ? [05:04] hmm...just updated...trying to reboot to the new kernel.....shutdown -r now is doing nothing....says its going down to reboot..but 5 mins later and im still in the same session and it never rebooted [05:06] reboot and halt do the same thing....says its going down..but never does [05:11] nevermind, got it. it was multipath IO, needed to install and configure multipath-tools [05:15] New bug: #313249 in samba4 (universe) "samba problems (dup-of: 278864)" [Undecided,New] https://launchpad.net/bugs/313249 [05:31] Flannel: My thinking is an Ubuntu-based software port forward howto would be more apt than one for hardware routers. But maybe that's just me :) [05:35] Sorry, wrong channel :) [08:17] did anyone notice that unix time 1234567890 is on friday, 13. of february? :) [08:42] rofl. no i didnt [08:44] ivoks: nice [08:46] <_ruben> sweet :p [08:48] ivoks: let's call it "Happy 1234567890" day [08:49] <_ruben> ;) [08:50] wonder if unix time will end early ;) [08:51] in 2038 we'll have a problem [08:52] Yeah, about around by 65 years birthday. [08:52] my 65-year birthday I mean [08:53] mmm. near my 53rd iirc [08:54] Jan 19, 2038, and I'm born Jan 18 ;) [08:54] Just about the right time to retire. [09:11] :) [10:11] i don't have the directory /root/bin. can i just create it manually, or would this usually be autocreated by something else? [10:11] nothing would autocreate that [10:11] you can create it manually if you want [10:12] you can create a package that autocreates it [10:12] \o/ [10:12] thanks, guys. [10:13] * MenZa creates domas. [10:13] hi [10:13] I'm already here/there/somewhere! [10:13] someone could help me plz with pptp server ; ? [10:27] shiiiit, /me kicks forcedeth multiple times, more and more and more [10:27] domas ... [10:27] what [10:27] pptp server? just run it! [10:28] after connecting to it i get disconnected after exactly one min ;... [12:25] hello [12:27] i've read and applied https://help.ubuntu.com/8.04/serverguide/C/postfix.html and yet i get the error Jan 30 14:20:59 ozses postfix/smtpd[29010]: warning: cannot get private key from file /etc/ssl/private/smtpd.key / Jan 30 14:20:59 ozses postfix/smtpd[29010]: warning: TLS library problem: 29010:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:399: / Jan 30 14:20:59 ozses postfix/smtpd[29010]: can [12:27] not load RSA certificate and key data. how come? [13:31] New bug: #323158 in dhcp3 (main) "alt installer looping, dhcp request every second" [Undecided,New] https://launchpad.net/bugs/323158 [14:17] I have been trying for a bit now to get kvm 83 from jaunty into intrepid. Someone here suggested prevu to try and build an intrepid deb from jaunty. I read the documentation and followed the instructions. I am getting a problem satisfying deps. . Selecting previously deselected package pbuilder-satisfydepends-dummy. [14:17] pbuilder-satisfydepends-dummy depends on debhelper (>= 7.0.17ubuntu2); [14:17] I have tried prevu debhelper. Then prevu-update as directed in the docs. The error does not change. Any suggestions? [14:22] refnumzx: usually you have to modify control file or rules file in debian/ subdirectory of the source [14:22] refnumzx: they contain depencies and intrepid and jaunty depencies of course will be different...a little bit, but still [14:22] meh, more forcedeth crashes [14:22] domas: it still crashes? :) [14:23] * PecisDarbs remebers when it was introduced first....crashed as hell [14:23] PecisDarbs: "soft lockup" [14:23] domas: oohhh dear [14:23] meh, will just use vanilla 2.6.28.2 kernels [14:23] though... I did all workarounds mentioned in server manual [14:24] server was both receiving and pushing out a gigabit of traffic + 100MB/s i/o activity [14:24] and it locked up [14:26] PecisDarbs: i thought that is whatprevuwas ment to handle? i do not know how do modify those files as you describe [14:27] refnumzx: it is very important to have packages today or you can wait for a day or two? [14:27] refnumzx: It's really rather simple.. [14:27] refnumzx: I could try to build them, because I will play with KVM next few months anyway [14:27] refnumzx: Add a deb-src line to your sources.list for Jaunty [14:27] And run: [14:28] sudo apt-get build-dep kvm [14:28] apt-get source kvm [14:28] cd kvm-83+dfsg [14:28] sudo apt-get install fakeroot [14:28] dpkg-buildpackage -rfakeroot -b -uc -us [14:28] Done. [14:36] soren: there are a number of deb-src lines in the sources.list file. which do i need to add from the jaunty archive? [14:37] One with main in it [14:37] Something like [14:38] deb-src http://se.archive.ubuntu.com/ubuntu jaunty main [14:38] thanks. [14:47] hey guys. i was using screen in my shell i was brosing the net using elinks. it crashed on me so i killed the window it was in. now when i lauch screen it starts up and then when it asks you to hit enter and returns you to the shell it gives me a whole bunch of errors and doesnt work. any ideas? [14:58] i've read and applied https://help.ubuntu.com/8.04/serverguide/C/postfix.html and yet i get the error Jan 30 14:20:59 ozses postfix/smtpd[29010]: warning: cannot get private key from file /etc/ssl/private/smtpd.key / Jan 30 14:20:59 ozses postfix/smtpd[29010]: warning: TLS library problem: 29010:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:399: / Jan 30 14:20:59 ozses postfix/smtpd[29010]: can [14:58] not load RSA certificate and key data. how come? [15:00] Kartagis: Is it you who is posting to the postfix-users list about this same question. [15:01] ScottK, yes [15:01] Kartagis: Did you get your question answered then? [15:02] ScottK, I posted a reply to Wietse's post [15:02] hi, is it allowed to log apache errors to multiple locations? [15:03] If you gave a password when you made the cert, that's definitely a problem. [15:03] if somebody could look into bug 323158, I'd appreciate it; I'm very unfamiliar with the internals of dhclient [15:03] Launchpad bug 323158 in dhcp3 "alt installer looping, dhcp request every second" [Undecided,New] https://launchpad.net/bugs/323158 [15:03] in other words to have two ErrorLog directives [15:03] oooooh, I have a question! what are pros/cons of irqbalance? [15:04] as in, why would anyone not run it? [15:04] (or why it wouldn't be on by default on ubuntu server) [15:06] ScottK, it asked me a password, so i gave one [15:07] that's your problem. [15:07] Redo the cert and just leave it blank. [15:07] okay thanks [15:08] Kartagis: Please take a look at those docs and see what they lack that led you astray. Then file a bug against ubuntu-doc explaining what went wrong and what it needs to say that it didnt' [15:08] Kartagis: That way the next person to come along doesn't have the same problem. [15:08] sommer: ^^^ [15:13] ScottK, it gave me You must type in 4 to 8191 characters when i left the password blank [15:13] Odd. [15:13] Then there's something else about what you are asking it. [15:13] Did you see the posted link in that thread to the community docs page? [15:13] See if that invokes openssl any different. [15:14] I'm in a meeting right now, so I can't focus on it. [15:14] https://help.ubuntu.com/community/Postfix?action=recall&rev=43 ? [15:14] In about an hour I can probably help you get it sorted. [15:14] I think so. [15:14] i'll be back on Monday [15:14] or maybe this weekend [15:28] bbl ScottK, thanks [15:30] so, i'm trying to configure Amanda Backup client on Ubuntu 8.10... should I install xinetd? or should I be doing something else? [15:30] (well amanda server and client on the same machine) [15:30] how can I make ubuntu server automount my external USB drive like ubuntu desktop does? I tried usbmount but it doesn't automount the disk (its NTFS) [15:34] barduck: I think there is not the same support for ntfs as in the desktop [15:34] Im not sure, in the desktop is supported by fuse, never tried to mount ntfs in a desktop :D [15:35] jmedina: I can mount it manually without a problem. but I want it to automount it each time I plug the USB drive [15:35] probably with autofs [15:35] like in the old times :D [15:36] or using a udev script [15:36] hmmm...never used autofs, I will go google it. I read that usbmount is a light and easy sctipt that can do this [15:36] but I am not sure if it is supposed to work for ntfs [15:36] usbmount uses udev [15:37] i'd recommend that approach personally [15:37] I am not sure what to put in the usbmount.conf, fdisk says the filesystem is HPFS/NTFS but when I mount it df -T says is is fuseblk [15:37] Deeeps: yeap, udev is the new way [15:37] so if usbmount uses udev, it is supposed to work somehow ? [15:38] indeed, it's mounted using ntfs-3g, which is built around fuse [15:38] then you have fuse support :D much better [15:38] so fileststem would be ntfs or ntfs-3g [15:38] filesystem* [15:38] should try to put ntfs or ntfs-3g in usbmount.conf ? [15:38] yep [15:39] ok, will try. If that doesn't work, next thing is to write udev script for that particular drive ? [15:39] that would be my approach, yep [15:39] ok, I will try. gona be tough battle for me but I will give it a shot [15:40] thanks [15:42] udev just calls whatever in /etc/udev/rules.d/ for each change, right ? [15:42] i believe so === _AshTray- is now known as AshTray- [15:49] hey guys, how can i fetch my external ip from shell? [15:49] if ifconfig doesn't display it, `wget -q -O - http://whatismyip.org` should [15:50] ifconfig only displays my internal ip [15:50] i'm behind a router [15:50] same way you do on windows then, query a page for your ip, or query your router [15:50] i gave an example above [15:51] one way to store the IP somewhere for a script to use, would be: [15:51] Deeeps, y thx it worked ;) which would be the cmd to query the router? [15:51] MYIP=`wget -q -O - http://whatismyip.org` [15:52] dunno, depends on your router, read your router's manual to see if it provides any interfaces, otherwise you'd have to write a script to scrape the information out of it from http/telnet [16:21] anyone have experience running Amanda server and client on Ubuntu 8.10? I'm, wondering if I should install xinetd like this tutorial for Ubuntu 6.06 says: http://ubuntuforums.org/showthread.php?p=2470030 (it's the closest thing I can find to a tutorial on how to configure Amanda on Ubuntu. [16:28] i use bacula for backup [16:30] hi ivoks ! [16:31] mathiaz: hi [16:31] mathiaz: have you played with python-ldap in intrepid? [16:33] i think that's really broken [16:33] ivoks: yea, that's what i noticed was the native backup in Ubuntu... for some reason i'd rather wrestle with amanda.. maybe because i'm an idiot [16:34] MadChopr: FYI bacula is the supported backup solution in Ubuntu (it's in main) while amanda is in universe. [16:34] ivoks: I haven't. [16:34] mathiaz: thank for stating that... again, i don't know why i'm trying to use amanda, maybe because i'm an idiot :P [16:35] i get really strane errors with it [16:35] strange [16:35] mathiaz: i'm afraid that bacula isn't as scalable as amanda for one thing. [16:35] simple import ldap, sys [16:35] and 'for arg in sys.argv: print arg' [16:35] spits out total nonsene [16:35] nonsense [16:36] but it doesn't if i start python shell [16:36] MadChopr: how come it's not scalable? where would be the shortcomings? [16:36] MadChopr: that's really strange conclusion [16:36] MadChopr: bacula is far more flexibile :) [16:37] mathiaz, ivoks: from reading about the comparisons people have made between the two packages. [16:37] one of the arguments was that bacula uses mysql, and amanda uses postgres; [16:37] lol [16:37] bacula uses sqlite|sqlite3|mysql|postgre [16:37] whatever you want [16:37] ah didn't realize [16:38] amanda doesn't do backups over two tapes [16:38] it can't continue backup on another tape, when one is finished [16:38] only that makes it pale comparing to bacula [16:39] can bacula do many backups to one tape? [16:39] yes [16:39] ivoks: your python script example works well here [16:39] mathiaz: which version is that? [16:39] thanks ivoks, maybe i'm convinced... [16:40] ivoks: http://paste.ubuntu.com/111760/ [16:40] ivoks: on intrepid [16:40] odd [16:40] does bacula support windows98? [16:40] as a client? [16:40] i should join #bacula [16:41] * jmedina uses bacula with a tape library with 16 tapes [16:41] mathiaz: http://paste.ubuntu.com/111761/ [16:41] mathiaz: :) [16:41] MadChopr: it suppports windows [16:42] ivoks, thank you [16:42] ivoks: /home/ivoks/ldap.py <- ?? [16:42] ivoks: File "/home/ivoks/ldap.py", line 8, in [16:42] ivoks: is there a irc channel (looked on efnet and freenode and find nothing) [16:42] atleast in #bacula [16:42] mathiaz: right... and there's no 8 lines in the file :) [16:43] MadChopr: http://bacula.org/en/ [16:43] nevermind, i'm an idiot [16:43] :) [16:43] is there anything similar to redhats chkconfig? [16:43] ivoks: what's the content of /home/ivoks/ldap.py ? [16:44] I like to use chkconfig --list servicename to get a list about runleves this services is configured [16:44] aaaaaaaaaaaarrrrrrrrrrrr /me stupid [16:44] mathiaz: right.. it imported ldap from current directory :) [16:44] instead from library :) [16:45] jmedina: there is a chkconfig package in intrepid [16:46] do you guys have bacula configured with MySQL or Postgre ? [16:46] i have with mysql and sqlite [16:47] but i've tested with postgre [16:47] okay [16:47] I always used with mysql under slackware, gentoo, centos but in ubuntu I use sqlite [16:48] thanks ivoks and jmedina [16:49] I have a howto (in spanish) about bacula, it is the implementation for a customer [16:49] but there is no better documentation than the official [16:50] nice, i'll read through the ubuntu docs and the official... apt-get remove amanda'ing right now [16:52] bacula in ubuntu is works-out-of-the-box :) [16:52] ivoks: yeap I like that, and with dvd support integrated :D [16:52] jmedina: you use bacula in ubuntu? [16:52] ivoks: yeap, in dapper and hardy [16:52] so, how do you like it in hardy? [16:53] there was an update recently [16:53] ivoks: ti works fine, here is backing up only 4 servers, but with a customer is backing up 1 centos, 1 gentoo, 1 ubuntu, 2 windows (sap dbs) and about 50 linux desktops [16:54] I only remember a bug about the catalog [16:54] with another customer backing up 30 xen vm machines [16:54] which bug? [16:55] there was a but about the script that generates the catalog, I think it was something about permisions to the database [16:55] oh, right [16:55] im not sure, it was probably a year about [16:55] ago [16:55] that was fixed [16:55] path was wrong [16:56] but that was only with our new catalog-backup script [16:56] I only use hardy as server [16:56] yeap, that one [16:56] which catalog backup script do you use? ubuntu's awk or bacula's default? [16:56] ivoks: you are ubuntu developer? [16:56] we ship ubuntu script by default [16:56] ivoks: afaik awk [16:56] jmedina: i'm watching over bacula in ubuntu [16:57] good I still remember a but that created a 644 file in / in edgy or something [16:57] so, i'm interested in how people use it or do they use it at all [16:57] s/but/bug/ [16:57] since we don't get lots of feedback [16:58] 644? [16:58] i think edgy didn't have bacula supported [16:58] a file or dir named 644 or 755 in / [16:58] iirc, we support bacula since 7.10 or something like that? [16:59] well not sure if was edgy, I was backporting bacula from edgy or feisty to dapper [16:59] I think 1.39 was introduced in edgy [17:00] not sure [17:00] right... real bacula clean up was in 8.04 [17:00] that was first release with supported bacula, iirc [17:00] ivoks: what you mean with "supported" in main? [17:01] yes [17:01] ok [17:01] ivoks: I hope you can help me with this doubt [17:02] can I get a list of the packages I have installed from universe repository? [17:02] with some scripting, yes [17:02] :S [17:03] i'm not aware of any program that can do that for you [17:03] I want to get a list because I need to know which packages are not "supported" and probably work with them to introduce it to main or something [17:04] MadChopr: u should also look at BackupPC: http://www.howtoforge.com/linux_backuppc [17:08] dayo__: thanks will look into it... why did you mention it? [17:24] MacChopr: u thought u were talking about bacula for creating backups? [17:32] ivoks: where can I suscribe to see bacula changes? [17:32] in ubuntu? [17:32] there's /usr/share/doc/bacula-*/changelog.gz :) [17:34] :D, mm I was thinking about pending bugs, new proposed changes and like that [17:35] jmedina: grep-status -sPackage -FSection universe [17:35] on launchpad [17:36] maxb: ? [17:36] https://edge.launchpad.net/ubuntu/+source/bacula [17:36] 17:02 < jmedina> can I get a list of the packages I have installed from universe repository? [17:37] but what you mean with that sentence? [17:37] hey guys, i want to restrict on my ssh-server the connection-attempts to 3... how can i do it? in /etc/ssh/sshd_config maybe "MaxAuthTries 3" ? [17:38] i know about fail2ban, just wandering if it is possible this way too [17:38] dou213: that wont stop attackers [17:38] or robots [17:38] they can retry auth [17:38] jmedina, u mean "MaxAuthTries 3"? [17:39] or fail2ban? [17:39] maxaut.. [17:39] hmm... damn, so fail2ban is better yes? [17:40] well I better change the port and only allow key based auth [17:40] with that I forget about brute force attacks [17:40] dou213: You can do it in iptables. [17:41] ScottK, how? [17:41] that is another option with the LIMIT target [17:41] thx jmedina [17:41] match [17:41] yeah. that [17:41] dunno what u guys are talking, maybe some insight? :) [17:42] or preferable documentation links [17:45] dou213: http://www.cyberciti.biz/tips/howto-limit-linux-syn-attacks.html [17:46] that is using iptables using recent match and limit [17:46] and here another http://www.debian-administration.org/articles/187 [17:46] there is also the port knocking option using iptables :D [17:47] I implement it using shorewall [17:48] jmedina, thx for ur trouble [17:48] * dou213 is reading.. [17:59] maxb: where do I have to grep for those fields? [18:00] I gave you an exact command line to run [18:19] if i may ask, a good tutorial (one which you already checked out) to install a web server (apache) and database server (mysql) ? but pls make sure u checked it (followed it urself) [18:20] <_ruben> dou213: sudo apt-get install lamp-server^ ... done .. apache2+mysql+php all ready to go [18:20] _ruben, nice tutorial :D:D [18:21] ok thx [18:21] taskselect and select LAMP [18:21] <_ruben> which is the same [18:23] thx, i was kinda looking for something like this: http://www.howtoforge.com/perfect-server-ubuntu-8.10 [18:23] was interested if anyone has followed such a tutorial and can recommend one [18:24] perfect ubuntu server runs just mysql!!!! [18:24] * ScottK is fairly certain anything perfect doesn't have mysql in it. [18:25] i've unleashed pandora's box :P [18:25] :( [18:26] usually people who have never properly used mysql say so! :) [18:28] \o/ found some fedora box, deadlocked immediately: http://p.defau.lt/?N82mJbAJ31bLoJBb5lbNmA [18:28] jmedina: tasksel* [18:31] maxb: thanks, I thought grep-status was mispelled [18:38] domas: I am not a SQL/RDBMS heavy weight, but I've work on projects with people that were. Pretty universally they prefer Postgresql. [18:40] guys, would it be safe to remove apparmor? [18:40] dou213: yes. no. [18:40] in the tutorial i sent u, they advice to do that [18:40] ScottK: :) my major field is web database heavyweights [18:40] ScottK: there PG is nonexisting, and MySQL is everywhere [18:40] one of my customers have a 800GB DB and they use postgresql [18:40] domas, so it depends... [18:41] dou213: nothing will break, though security will become a bit worse :) [18:41] they said they tested everthing even running psql under aix, but it performed better under linux [18:41] dou213: Why do you want to do that? [18:41] well, some our customers have thousands of mysql servers :) [18:41] ScottK, it's an advice i've read on this tutorial : they say if not removed, ISPconfig won't work [18:42] dou213: doesn't make sense... [18:42] dou213: by default there're nearly no apparmor profiles [18:42] only few packages come with those [18:42] kinda thought that too ... that's why i asked [18:43] damn, I was forced to deploy vanilla kernels, now don't have apparmor :( [18:43] on database boxes [18:43] no need, of course %) [18:45] http://www.howtoforge.com/perfect-server-ubuntu-8.10-p3 ---> at the end [18:46] dou213: I can certify that guide author is an idiot! [18:46] * domas ducks [18:46] a) it is very easy to find out when apparmor blocks anything, because thats what audit logs are for [18:47] shit :( [18:47] b) apparmor is one of best security practices out there for net-facing systems [18:48] hmm... domas, if i wanna reinstall apparmor as it was before: sudo apt-get install apparmor apparmor-utils ? [18:48] I understand managing selinux is way more complicated [18:48] * kees loves apparmor [18:48] kees: you're security engineer, you have to. [18:48] domas: hah, no, plenty of people hate AA. :) [18:49] kees: I'm working now on a project to wrap whole codebase into proper AA profiles, with proper hats, etc [18:49] not me! [18:49] Urgh. The guide author is doubly silly for recommending manual use of update-rc.d [18:49] domas: nice! [18:49] I <3 AA [18:49] kees: well, 'our codebase' in my hobby project [18:49] dou213: your apt-get will re-install the AA tools, yes, but you need the kernel support compiledin [18:49] but it is huge codebase [18:50] kees, that means? [18:50] i already did : "/etc/init.d/apparmor stop [18:50] update-rc.d -f apparmor remove" [18:52] anyway, apparmor makes sense when you use it [18:52] it will not do anything by itself [18:52] (except for few packages that put in profiles) [18:53] oh so i get it i can remove it, since i won't use it [18:54] *shrug* [18:54] without making the webserver and ssh-server insecure [18:54] ? [18:54] let me show you an example of an apparmor profile [18:54] I'm not entirely happy with it yet, but.. [18:57] http://p.defau.lt/?xovyedW457Rpz94srZHShg [18:57] you can see that for quite complex codebase I can narrow execution a lot [18:57]