Re: Monitoring service that has a human component?

2018-12-11 Thread Heath Jones
Hi David - Just a bit of insight from my own experience: Common issues when monitoring (and the associated escalation processes) don't work and similar issues are seen as you described: - Inconsistent HTTP response codes across services and service layers (nginx vs the backend tomcat), means you c

Re: A New TransAtlantic Cable System

2010-10-04 Thread Heath Jones
> By the way, my recollection is the undersea regenerators do purely optical > regeneration. > There is no O-E conversions undersea, only at the landing stations and > terrestrial components. I'm not clever enough to know of some way that you could do optical regeneration without converting the

Re: A New TransAtlantic Cable System

2010-10-04 Thread Heath Jones
What's that quote again...? Oh, that's it: "The more you know, the more you know you don't." It feels very appropriate now :) Cheers Patrick for that great info & to everyone who contacted me off-list also! > A halfway-decent description of the physics of how this is done, is > covered in Neal S

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
>> What's that quote again...? >> Oh, that's it: "The more you know, the more you know you don't." >> It feels very appropriate now :) > I was wondering for quite some time if there was a scientific term for that > effect, since many of us seem to run into the opposite quite often. It turns > out

Re: Anyone can share the Network card experience

2010-10-05 Thread Heath Jones
It depends on the speed of the PCI slot. In saying that, you are only trying to transfer 1Gb/s. http://en.wikipedia.org/wiki/PCI_Express Note the thoughts on there about full duplex.. "PCI Express 1.0a In 2003, PCI-SIG introduced PCIe 1.0a, with a data rate of 250 MB/s and a transfer rate of 2.5 G

Re: Anyone can share the Network card experience

2010-10-05 Thread Heath Jones
> For 10Gbit we use Intel cards for production service machines,  and > ConnextX/Intel in the HPC cluster. Greg - I've not been exposed to 10G on the server side.. Does the server handle the traffic load well (even with offloading) - that's a LOT of web requests / app queries per second! Or are

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
> Erbium Doped Fiber Amplifiers (EDFAs) do not re-shape or re-time the signals > (the last 2 R's in 3R -- re-amplification, re-shaping, and re-timing) Thanks Chris - even more reading to do :) It's interesting stuff that's for sure. This is also pretty cool: http://en.wikipedia.org/wiki/Chirp

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
>> Would it be possible to extract via PLL or similar the source clock >> and use that to modulate the amplifier power? > Although you can amplify just a single wavelength with an EDFA (has to be in > the 1550nm range, not 1310nm), most deployments are using EDFAs in a DWDM > environment.  The C

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-06 Thread Heath Jones
> Certainly, fine folks at Reliance Globalcom Services, Inc. could tell > us who is paying them to connect these hijacked blocks to their network, > but I rather doubt that they are actually going to come clean and do > that. Ron, I haven't been following this anti-spam stuff much since it went po

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-06 Thread Heath Jones
>>1) Is spamming from within the US criminal activity? > > Sadly, it appears not. > > In many cases it is however actionable.  (And in other cases involving > actual criminal activity, e.g. as prohibited by 18 USC 1030, `Fraud and > related activity in connection with computers', it may, I think, b

Re: reachability problems Europe->US?

2010-10-07 Thread Heath Jones
>Seems to be only source-prefix-based, but several ISPs in europe are affected. Can you post source and destination IP's ?

Re: reachability problems Europe->US?

2010-10-07 Thread Heath Jones
>>> Seems to be only source-prefix-based, but several ISPs in europe are >>> affected. > source: 131.220.0.0/16, 212.201.68.0/22, 212.201.72.0/21, > destination: 65.122.178.73, 63.228.223.104 > traceroute to 65.122.178.73 (65.122.178.73), 30 hops max, 40 byte packets >  1  er-rz-gig-3-3.stw-bonn.de

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Heath Jones
>> Well, anyway, here's three more hijacked blocks that they (AS6517) >> are routing.  This is in addition to the 75 such blocks I've already >> reported.  (I guess that makes 78 hijacked blocks for them, in total.) > > Out of curiosity, are you also reporting these blocks to Spamhaus?  I expect >

Re: reachability problems Europe->US?

2010-10-07 Thread Heath Jones
>... random traffic (into) their network via our transit link gets black-holed. So for the same source & destination, sometimes it works, sometimes it doesn't?

Re: reachability problems Europe->US?

2010-10-07 Thread Heath Jones
time things broke they appeared to be black-holing > roughly 1/4 of what we were sending them. > > > Thanks, > John van Oppen > Spectrum Networks / AS 11404 > > > -Original Message- > From: Thomas Schmid [mailto:sch...@dfn.de] > Sent: Thursday, October 07, 2

Re: neglected route-servers

2010-10-11 Thread Heath Jones
> If anyone from TWTelecom is here, it's probably time to swap out that NPE300 > for something with more than 256MB RAM. It's running out of RAM and > resetting all the BGP sessions before they finish getting full routes. And they have CDP turned on for you?

Re: neglected route-servers

2010-10-11 Thread Heath Jones
> You can telnet into it and watch the sessions come up, the memory run out, > and the sessions reset. -smacks self over head with fish- I thought you were referring to your eBGP peer. duh.

Re: Pica8 - Open Source Cloud Switch

2010-10-19 Thread Heath Jones
> We are starting to distribute Pica8 Open Source Cloud Switches : > http://www.pica8.com/ Seeing as you claim they are opensource, could you please point to the documentation of the hardware? Specifically, I am looking for information regarding the FPGA/ASIC's used for forwarding & circuit diagra

Re: Pica8 - Open Source Cloud Switch

2010-10-19 Thread Heath Jones
> We have dedicated servers.  You get a 10 GHz 24-core CPU with 1TB of > RAM.  That's pretty clear and familiar to server geeks. Is that 10 as in Ten?

Re: Traffic Burstiness Survey

2012-09-10 Thread Heath Jones
Hi Monia, 'Burst' is a very broad term. It would be useful to clarify to what you are referring.. I can think of a few possibilities: - Data Transmission: The length of an uninterrupted flow of information. - Traffic Engineering: The ability for traffic to temporarily exceed it's allocated (avera

Odd BGP AS Path

2010-09-22 Thread Heath Jones
Hi all, Probably a silly question, but can anyone explain to me this: 3561 3356 9031 {35821,35821,35821,35821} i To explain it a bit better, I'm looking at real routing information from routeviews (#3). According to RFC 4271 (9.2.2.2 Aggregating Routing Information): > For the purpose of aggrega

Re: Odd BGP AS Path

2010-09-22 Thread Heath Jones
> please support draft-wkumari-deprecate-as-sets-00.txt I just noticed that then - looking through idr list archives. I'll give it a read.. What is the best way to support, just email the list? Cheers

Re: Facebook Issues/Outage in Southeast?

2010-09-23 Thread Heath Jones
> I can ping them but not access them over Cogent here in Tysons Corner, > Virginia - looks like a server issue to me. Want to see something funnier: http://downrightnow.com/ Exactly the same as what your seeing for facebook. Working icmp, broken http. I wonder if 10^234 people are all trying to

Re: large icmp packet issue

2010-09-26 Thread Heath Jones
> How can i be sure even if a device blocks my ping , it might have policy > blocking ping at it at all. Correct in a lot of cases and that is why icmp should not be used by itself when diagnosing issues. >> I am having problem getting ping to work to a specific destination host when >> using larg

Re: Routers in Data Centers

2010-09-26 Thread Heath Jones
I'm more than interested in developing a much cheaper, hardware forwarding router.. I think there is a lot of room for innovation - especially at the target market in this thread. If anyone wants to work with me on this, just let me know! I've got a tonne of ideas and a bit of free time.. NetFPGA

Re: Routers in Data Centers

2010-09-26 Thread Heath Jones
> But it seems, that NetFPGA has not enough memory to hold a full view > (current 340k routes). It's just a development platform for prototyping designs, not something you would use in production... I want to use it to implement and test ideas that I have, and play with some different forwarding a

Re: Software-based Border Router

2010-09-27 Thread Heath Jones
Do jitter sensitive applications have problems at all running? What would you say is the point at which people should be looking for a hardware forwarding solution? Differences: - Hardware forwarding - Interface options - Port density - Redundancy - Power consumption - Service Provider stuff - MPL

Re: Software-based Border Router

2010-09-27 Thread Heath Jones
Oh, support contract!!? > Differences: > - Hardware forwarding > - Interface options > - Port density > - Redundancy > - Power consumption > - Service Provider stuff - MPLS TE? VPLS? VRF?? > > Any others? >

Re: Software-based Border Router

2010-09-28 Thread Heath Jones
He must have meant the actual chassis/box/case... > Vyatta has hardware forwarding?  Real hardware forwarding?  Where? >> -Original Message- >> From: Curtis Maurand [mailto:cmaur...@xyonet.com] >>   Vyatta has support contracts.  If you want hardware, they've got that, too.

Re: AS11296 -- Hijacked?

2010-09-28 Thread Heath Jones
Out of curiosity, what led you to this conclusion? > Evidence strongly suggests that AS11296 together with all of the IPv4 > space it is currently announcing routes for, i.e.: > have all been hijacked.  I will be reporting this formally to ARIN today, > via their helpful fraud reporting web form.

Re: AS11296 -- Hijacked?

2010-09-28 Thread Heath Jones
Sep 2010 12:49:12 -0700 (PDT) In-Reply-To: <63619.1285701...@tristatelogic.com> References: <63619.1285701...@tristatelogic.com> Date: Tue, 28 Sep 2010 20:49:12 +0100 Message-ID: Subject: Re: AS11296 -- Hijacked? From: Heath Jones To: "Ronald F. Guilmette" Cc: nanog@nanog.

Re: AS11296 -- Hijacked?

2010-09-29 Thread Heath Jones
>>Out of curiosity, what led you to this conclusion? > > A number of factors, actually. > Although I had started to type up a lengthy and elaborate response to > your eminently reasonable question, on second thought, I don't think > that I actually want to go into detail on this case, as anything I

Re: AS11296 -- Hijacked?

2010-09-29 Thread Heath Jones
> As to his decision to block Gmail (or any other freemail provider), > everyone with sufficient knowledge in the field knows that these > operations are prolific and habitual sources of spam (via multiple > vectors, not just SMTP; Google accounts for more Usenet spam hitting > my filters than all

Re: Software-based Border Router

2010-09-29 Thread Heath Jones
What's the real-world power consumption and heat like? 455 days shows some pretty good reliability! Cheers for the info Curtis

Re: AS11296 -- Hijacked?

2010-09-29 Thread Heath Jones
> Bottom line, there is more to it than someone just popping up on a list > saying something. If you have the time to go and investigate all of that yourself, its good to know you've thought about the metrics you would use. Sometimes, people do this thing called 'referencing'. Its basically where

Re: RIP Justification

2010-09-29 Thread Heath Jones
IPVPN arrangement with multiple sites & no redundancy for each small site. RIP to advertise networks from each site towards cloud, quick and easy.

Re: RIP Justification

2010-09-29 Thread Heath Jones
Jesse - just to clarify, are you talking about v1 or v2? There is also a proposal for v3.. In my previous post, I was assuming v2.

Re: AS11296 -- Hijacked?

2010-09-29 Thread Heath Jones
Robert, I dont think you quite get it. Don't worry, you don't seem to be alone. The point here is simple. If someone posts making a recommendation for every AS to filter some prefixes, not provide any references by default, its not helpful. When questioned about the rationale, if said person then

Re: RIP Justification

2010-09-29 Thread Heath Jones
This is why they need a 'like' button on nanog!! :) > I once had cause to write a RIP broadcast daemon while on-site with a > client; they had some specific brokenness with a Novell server and some > other gear that was "fixed" by a UNIX box, a C compiler, and maybe 20 > or 30 minutes of programmi

Re: AS11296 -- Hijacked?

2010-09-29 Thread Heath Jones
> This is not what the Team Cymru Bogons list for? > http://www.team-cymru.org/Services/Bogons/ I just had a very quick look at that site and it seems at first glance to just be providing information on unallocated prefixes/ASs.. They are prefixes/ASs that spammers can and do use, but if you have

BGP next-hop

2010-09-30 Thread Heath Jones
Hi all, Is there an easy way to see which iBGP routes are not being selected due to next-hop not being in IGP? Before and after IGP route added shown below, note both are marked as valid.. -- BEFORE IGP-- AS5000_LA#show ip bgp BGP table version is 5, local router ID is 10.0.0.5 Status codes: s s

Re: BGP next-hop

2010-09-30 Thread Heath Jones
Cheers Jeff. I thought i'd give that a go, but it doesnt seem to be working for some reason! (This is without next-hop in IGP) AS5000_LA#show ip bgp BGP table version is 3, local router ID is 10.0.0.5 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r

Re: RIP Justification

2010-09-30 Thread Heath Jones
On 30 September 2010 22:11, Jack Carrozzo wrote: > As it was explained to me, the main difference is that you can have $lots of > prefixes in IS-IS without it falling over, whereas Dijkstra is far more > resource-intensive and as such OSPF doesn't get too happy after $a_lot_less > prefixes. Those

Re: BGP next-hop

2010-09-30 Thread Heath Jones
>> show bgp ipv4 unicast 100.10.0.0/16 why-chosen >> Would be insanely useful. > Been in JUNOS "show route" since day one, and IMHO is easily in the top > 10 list of why I still buy Juniper instead of Cisco despite all the > $%^&*ing bugs these days. Its interesting, I was heavy into cisco years

Re: RIP Justification

2010-09-30 Thread Heath Jones
Haha It's all good :) You are right about IS-IS being less resource intensive than OSPF, and that it scales better! On 30 September 2010 23:50, Jack Carrozzo wrote: > >> >> Both OSPF and IS-IS use Dijkstra. IS-IS isn't as widely used because >> of the ISO addressing. Atleast thats my take on it

Re: BGP next-hop

2010-09-30 Thread Heath Jones
> it seems it gets the bgp route for 147.28.0.0/16 and then can not > resolve the next hop.  it would not recurse to the default exit. > > of course it was solved by >    ip route 147.28.0.0  255.255.0.0  42.666.77.11 > but i do not really understand in my heart why i needed to do this. Neither do

Re: AS11296 -- Hijacked?

2010-10-01 Thread Heath Jones
On 1 October 2010 06:47, Ronald F. Guilmette wrote: > I hope this may ally some of the concern that has been expressed > about me not being more forthcomeing about the details of this case. Cheers Ron for coming forth with your reasoning, it is appreciated. Your bit of trust in me/us has gone a l

Re: RIP Justification

2010-10-01 Thread Heath Jones
>> RIPv2 is great for simple route injection. I'm talking really simple, >> just to avoid statics. > And there, my friend, is the crux of the matter. There's almost no place > imagineable where injecting routes from RIPv2 is superior to statics. Well, let me stimulate your imagination.. IPVPN cl

Re: BGP next-hop

2010-10-01 Thread Heath Jones
> Section 9.1.2.1 of RFC 4271 seems to address this. > A few points from that section: >  - The BGP NEXT_HOP can not recursively resolve (directly or indirectly) > through the BGP route. >  - Only the longest matching route should be considered when resolving the > BGP NEXT_HOP. >  - Do not consi

Re: ARIN Fraud Reporting Form ... Don't waste your time

2010-10-01 Thread Heath Jones
Come one mate, there's no need to be just outright insulting people. Sure everyone disagrees on some things, but still... Lets play out this scenario then. What would you recommend ARIN actually do? I don't mean 'take a stance' or 'have an opinion', but rather what process should in your mind they

Re: RIP Justification

2010-10-01 Thread Heath Jones
On 1 October 2010 12:19, Tim Franklin wrote: > Or BGP.  Why not? Of course, technically you could use almost any routing protocol. OSPF and IS-IS would require more configuration and maintenance, BGP even more still. I think this is a pretty good example though of how RIPv2 is probably the most

Re: A New TransAtlantic Cable System

2010-10-01 Thread Heath Jones
> http://finance.yahoo.com/news/Hibernia-Atlantic-to-bw-3184701710.html?x=0&.v=1 > Roderick S. Beck > Director of European Sales > Hibernia Atlantic Sales spam - but still - very close to minimum possible latency! 3471 miles @ 186,282 miles/s * 1.5 in glass * 2 round trip = 55.9ms.

Re: A New TransAtlantic Cable System

2010-10-01 Thread Heath Jones
> Yeah, I wonder when we're gonna see cable that's pumped down to a vacuum in > the center? :) Start pumping.. :) Actually, to my surprise, the refractive index in air is quite close to a vacuum - so I figured we could set up a laser link between NY and London, with 'yo mama' sitting in a boat in

Re: RIP Justification

2010-10-01 Thread Heath Jones
> Tim hit the nail on the head. Maintaining statics on a large network would > become a huge problem. Human error will eventually occur. The network > scenario I am speaking of is DSL/Cable type setups, where a customer could > move from router to router(DSLAM/CMTS) due to capacity re-combines.

Re: A New TransAtlantic Cable System

2010-10-02 Thread Heath Jones
On 2 October 2010 10:52, Rod Beck wrote: > Is that a straight line calculation or did you take into account that a > straight line is not the shortest path on a curved surface? Well that is pretty obvious to most, but no - I didn't go to the effort of factoring in curvature of the earth - especia

Re: ARIN IP/AS Assignment

2010-10-02 Thread Heath Jones
On 2 October 2010 08:17, Imran Moin wrote: > Hello All, > > I was wondering how long it is taking ARIN these days to assign new IP block > and AS Number. We are a new startup and looking to build our network over > the next few months. I think they are a bit preoccupied at the moment... ;) ps.

Re: router lifetime

2010-10-02 Thread Heath Jones
> How long do you keep a router in production? > What is your cycle for replacement of equipment? Hi Franck It really depends on the type of network you are running, the rate at which new features & bandwidth are required, and the availability of software and hardware upgrades. Also, in a lot of

Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.

2011-05-18 Thread Heath Jones
I wonder if this is possible: - Take a hash of the original file. Keep a counter. - Generate data in some sequential method on sender side (for example simply starting at 0 and iterating until you generate the same as the original data) - Each time you iterate, take the hash of the generated data.

Re: Had an idea - looking for a math buff to tell me if it's possible

2011-05-18 Thread Heath Jones
data up until the actual data. It's not even a storage issue, as once you have incremented the data you don't need to store old data or hash values - just the counter. No massive hash tables. It's a CPU issue. Heath On 19 May 2011 00:42, wrote: > On Thu, 19 May 2011 00:26:2

Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.

2011-05-18 Thread Heath Jones
data up until the actual data. It's not even a storage issue, as once you have incremented the data you don't need to store old data or hash values - just the counter. No massive hash tables. It's a CPU issue. On 19 May 2011 00:42, wrote: > On Thu, 19 May 2011 00:26:26 BST,

Re: Had an idea - looking for a math buff to tell me if it's possible

2011-05-18 Thread Heath Jones
> My point here is it IS possible to transfer just a hash and counter value > and effectively generate identical data at the remote end. Nope. Let's use phone numbers as an example. I want to send you the phone > number 540-231-6000. The hash function is "number mod 17 plus 5". So > 5402316000

Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.

2011-05-18 Thread Heath Jones
Ha! I was wondering this the whole time - if the size of the counter would make it a zero sum game. That sux! :) On 19 May 2011 03:52, Brett Frankenberger wrote: > On Thu, May 19, 2011 at 12:26:26AM +0100, Heath Jones wrote: > > I wonder if this is possible: > > > >