Re: 30GB file transfers using scp

From: Atro Tossavainen (atossava_at_cc.helsinki.fi)
Date: 10/02/03

  • Next message: Roumen Petrov: "Re: Regression tests with x509"
    To: secureshell@securityfocus.com
    Date: Thu, 2 Oct 2003 09:18:50 +0300 (EEST)
    
    

    Rob,

    > I would like to keep them off but the transfer speeds are around 600K/s
    > using scp. Much too slow for the window of opportunity. The scp/ssh
    > man pages state that blowfish is faster than 3des but when used, the
    > destination server returns:
    >
    > pash-2.05$ /usr/local/bin/scp -p -c blowfish arc1db04.dbf
    > root@172.21.230.11:/tmp
    > Executing ssh2 failed. Command:' ssh2 -l root -x -a -o clearallforwardings
    > yes -o passwordprompt %U@%H's password: -o nodelay yes -o
    > authenticationnotify yes -o ciphers blowfish 172.21.230.11 -s sftp' System
    > error message: 'Permission denied'

    Do you only get the error message when specifying the Blowfish cipher?

    I mean, do you get it if you explicitly specify the 3DES cipher, too?

    SSH2 (both SSH Corp and OpenSSH) also includes support for the "arcfour"
    cipher, which should be much faster than 3DES, too. If you don't get an
    error message when explicitly specifying the 3DES cipher, try arcfour.

    Which versions of SSH are you talking about, anyway? Are the client
    and the server both running the same version of SSH?

    > Can scp be configured to use no encryption for transfers?

    Older versions of SSH could be configured to allow the "none" cipher
    (not for transfers separately, but for _everything_ in a session, which
    would pretty much eliminate the point of using SSH for anything). This
    no longer appears to be the case in OpenSSH 3.7.1p2 (good riddance!).

    > Is my only option to use rcp?

    Probably not. I would try to find out what's breaking your scp first.

    -- 
    Atro Tossavainen (Mr.)               / The Institute of Biotechnology at
    Systems Analyst, Techno-Amish &     / the University of Helsinki, Finland,
    +358-9-19158939  UNIX Dinosaur     / employs me, but my opinions are my own.
    < URL : http : / / www . helsinki . fi / %7E atossava / >
    File attachments NOT welcome unless agreed to beforehand.
    

  • Next message: Roumen Petrov: "Re: Regression tests with x509"

    Relevant Pages

    • Re: Is SSH worth it??
      ... > We would be using SSH and SCP. ... SCP for automated scripts. ... > client will not be prompted for a password. ... remote machine, but imho it is better to swap client+server and give ...
      (Security-Basics)
    • RE: SCP and MVS data sets?
      ... SCP and MVS data sets? ... Is it possible that the open function is different in SCP? ... You can also do the following weirdness to use ssh to copy a z/OS legacy ...
      (bit.listserv.ibm-main)
    • Re: why does scp not use all my cores on a multi-cpu machine?
      ... When I ran my little test earlier, I observed that while I typed scp, both ... scp and ssh got "energized" and in fact ssh used more time than scp. ... Now since encrypting and transmitting has some elements of paralellity ... Right -- ssh, et. al. is an I/O bound process, so long as the network ...
      (comp.os.linux.misc)
    • Re: linux to linux scp in batch mode: how?
      ... reason why it works now is because of the dsa key. ... > been configured automatically when I set up ssh, I would imagine that I am ... >> I have ssh and scp up and running on my two Redhat 7.2 Linux machines, ... >> between the machines. ...
      (comp.security.ssh)
    • Re: Using SSH or SCP in REXX under TSO
      ... Using SSH or SCP in REXX under TSO ... Does z/OS sftp have a BINARY subcommand? ...
      (bit.listserv.ibm-main)