Re: Local root zone (Was NYTimes: Egypt Leaders Found ‘Off’ Switch for Internet)

[Randy Bush]

>>> I don't think that the Egyptian shutdown of domain names had much
>>> effect
>> what shutdown of egyptian domain names?
>> randy, who has a server which serves them
> there's an interesting point to be made about the geographic
> administrative and political distribution of secondaries being
> essential to insuring their survivability.
> Oddly your name is on bcp 16.

clearly a forgery

randy

RE: Christchurch New Zealand

[George Bonser]

> From: Marshall Eubanks 
> Sent: Monday, February 21, 2011 9:29 PM
> To: Mark Foster
> Cc: nanog@nanog.org
> Subject: Re: Christchurch New Zealand
> 
> Here is an animated seismic map
> 
> http://www.christchurchquakemap.co.nz/today
> 
> Marshall

According to one article I read this evening, liquefaction was a more
significant factor in this quake than in the last one.

Re: Christchurch New Zealand

[b nickell]

prayers.hopes. anything i can do  I will

On 2/21/11, Marshall Eubanks  wrote:
> Here is an animated seismic map
>
> http://www.christchurchquakemap.co.nz/today
>
> Marshall
>
> On Feb 21, 2011, at 10:46 PM, Mark Foster wrote:
>
>> Folks on Twitter should search for hashtag #eqnz.
>>
>> Major news sites in NZ:
>>
>> www.stuff.co.nz
>> www.nzherald.co.nz
>> www.tvnz.co.nz
>> www.3news.co.nz
>>
>> Plenty of Vids, Stills and some Streaming available.
>>
>> Can confirm the reports of multiple casualties.  TV News is live
>> broadcasting reports of many folks trapped within buildings, largely
>> because of things like stairwells collapsing, etc. A few buildings have
>> been hit pretty hard, with some notable collapses, damage to vehicles,
>> etc.
>>
>> The 111 network (911 equiv) is experiencing problems in the South Island,
>> folks are being asked to stay the phones (etc) except for genuine
>> emergencies.
>>
>> Urban Search and Rescue teams in NZ are based in Christchurch, Palmerston
>> North and Auckland. I gather all three teams are stood-to, and an offer
>> from Australia for additional USAR resource has been accepted.  CD
>> Emergency has been declared and the Military are already getting involved.
>>
>> Christchurch experienced a major quake (magnitude 7.2) in September last
>> year, which received a lot of press as its effects were widespread and
>> severe - but there was little loss of life.  This quake, magnitute 6.3,
>> hit much closer to the CBD and during a business day, so the casualty
>> count is much higher.  Being a more shallow quake, much closer to town,
>> but also lesser in magnitude, my uneducated view based on media coverage
>> is that the effects are not as widespread, but where they're felt, are
>> very significant.
>>
>> Mark.
>> (in Auckland, some 1000 km away...)
>>
>> On Tue, 22 Feb 2011, Daniel Richards wrote:
>>
>>> There aren't any major international cables to the south island. The big
>>> one is the southern Cross cable that lands on either side of Auckland,
>>> which is the north of the North Island, which is operating normally.
>>>
>>> KAREN (The Kiwi Advanced Research Network) core in the south island is
>>> still operating, but most of the member sites in Christchurch are down:
>>> http://karen.net.nz/news-earthquake-network-update/
>>>
>>> News is reporting deaths now, sadly.
>>>
>>> On 22/02/11 16:04, Marshall Eubanks wrote:
 There has been a bad Earthquake in Christchurch New Zealand with reports
 of
 fatalities.
 http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater
 Telecom New Zealand reports "Heavy damage" to their Christchurch
 building, but no deaths there.
 Is there any report of issues with the undersea cables to / from the
 South Island ?
 Regards
 Marshall
 P.S. On a more personal note,
 Google has a people finder up @
 http://christchurch-2011.person-finder.appspot.com/
 There is a DFAT # - 1300 555 135 - for people outside of NZ to call.
 Telecom New Zealand has asked people to stay off of the wireless network
 except for true emergencies.
>>>
>>>
>>>
>>
>>
>
>
>


-- 
-B

Re: Christchurch New Zealand

[Marshall Eubanks]

Here is an animated seismic map 

http://www.christchurchquakemap.co.nz/today

Marshall

On Feb 21, 2011, at 10:46 PM, Mark Foster wrote:

> Folks on Twitter should search for hashtag #eqnz.
> 
> Major news sites in NZ:
> 
> www.stuff.co.nz
> www.nzherald.co.nz
> www.tvnz.co.nz
> www.3news.co.nz
> 
> Plenty of Vids, Stills and some Streaming available.
> 
> Can confirm the reports of multiple casualties.  TV News is live broadcasting 
> reports of many folks trapped within buildings, largely because of things 
> like stairwells collapsing, etc. A few buildings have been hit pretty hard, 
> with some notable collapses, damage to vehicles, etc.
> 
> The 111 network (911 equiv) is experiencing problems in the South Island, 
> folks are being asked to stay the phones (etc) except for genuine emergencies.
> 
> Urban Search and Rescue teams in NZ are based in Christchurch, Palmerston 
> North and Auckland. I gather all three teams are stood-to, and an offer from 
> Australia for additional USAR resource has been accepted.  CD Emergency has 
> been declared and the Military are already getting involved.
> 
> Christchurch experienced a major quake (magnitude 7.2) in September last 
> year, which received a lot of press as its effects were widespread and severe 
> - but there was little loss of life.  This quake, magnitute 6.3, hit much 
> closer to the CBD and during a business day, so the casualty count is much 
> higher.  Being a more shallow quake, much closer to town, but also lesser in 
> magnitude, my uneducated view based on media coverage is that the effects are 
> not as widespread, but where they're felt, are very significant.
> 
> Mark.
> (in Auckland, some 1000 km away...)
> 
> On Tue, 22 Feb 2011, Daniel Richards wrote:
> 
>> There aren't any major international cables to the south island. The big one 
>> is the southern Cross cable that lands on either side of Auckland, which is 
>> the north of the North Island, which is operating normally.
>> 
>> KAREN (The Kiwi Advanced Research Network) core in the south island is still 
>> operating, but most of the member sites in Christchurch are down: 
>> http://karen.net.nz/news-earthquake-network-update/
>> 
>> News is reporting deaths now, sadly.
>> 
>> On 22/02/11 16:04, Marshall Eubanks wrote:
>>> There has been a bad Earthquake in Christchurch New Zealand with reports of
>>> fatalities.
>>> http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater
>>> Telecom New Zealand reports "Heavy damage" to their Christchurch building, 
>>> but no deaths there.
>>> Is there any report of issues with the undersea cables to / from the South 
>>> Island ?
>>> Regards
>>> Marshall
>>> P.S. On a more personal note,
>>> Google has a people finder up @
>>> http://christchurch-2011.person-finder.appspot.com/
>>> There is a DFAT # - 1300 555 135 - for people outside of NZ to call.
>>> Telecom New Zealand has asked people to stay off of the wireless network 
>>> except for true emergencies.
>> 
>> 
>> 
> 
> 

Re: Local root zone (Was NYTimes: Egypt Leaders Found ‘Off’ Switch for Internet)

[Joel Jaeggli]

On 2/16/11 5:37 PM, Randy Bush wrote:
>> I don't think that the Egyptian shutdown of domain names had much
>> effect
> 
> what shutdown of egyptian domain names?
> 
> randy, who has a server which serves them

there's an interesting point to be made about the geographic
administrative and political distribution of secondaries being essential
to insuring their survivability.

Oddly your name is on bcp 16.

Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Chris Grundemann]

On Mon, Feb 21, 2011 at 19:08, Dan Wing  wrote:

> Its title, filename, abstract, and introduction all say the problems
> are specific to NAT444.  Which is untrue.

I just re-read the filename, abstract and introduction, and I disagree
that any of those say that the problems are specific to NAT444. They
all do state that these problems are present in NAT444, but not that
it's the only technology/scenario/configuration where you might find
them.

More importantly, I am unsure the point of this argument. Are you
trying to say that the items listed as broken in the draft are not
actually broken? Because in my experience they are. IMHO, the fact
that they are also broken in other (similar) scenarios is not evidence
that they are not broken in this one. On the contrary, this scenario
seems to be evidence to the brokenness in the others (until we get a
chance to test and document them all - are you volunteering? ;).

Cheers,
~Chris


> -d
>
>
>




-- 
@ChrisGrundemann
weblog.chrisgrundemann.com
www.burningwiththebush.com
www.theIPv6experts.net
www.coisoc.org

Re: Christchurch New Zealand

[Marshall Eubanks]

On Feb 21, 2011, at 10:46 PM, Mark Foster wrote:

> Folks on Twitter should search for hashtag #eqnz.
> 
> Major news sites in NZ:
> 
> www.stuff.co.nz
> www.nzherald.co.nz
> www.tvnz.co.nz
> www.3news.co.nz
> 
> Plenty of Vids, Stills and some Streaming available.
> 
> Can confirm the reports of multiple casualties.  TV News is live broadcasting 
> reports of many folks trapped within buildings, largely because of things 
> like stairwells collapsing, etc. A few buildings have been hit pretty hard, 
> with some notable collapses, damage to vehicles, etc.
> 
> The 111 network (911 equiv) is experiencing problems in the South Island, 
> folks are being asked to stay the phones (etc) except for genuine emergencies.
> 
> Urban Search and Rescue teams in NZ are based in Christchurch, Palmerston 
> North and Auckland. I gather all three teams are stood-to, and an offer from 
> Australia for additional USAR resource has been accepted.  CD Emergency has 
> been declared and the Military are already getting involved.
> 
> Christchurch experienced a major quake (magnitude 7.2) in September last 
> year, which received a lot of press as its effects were widespread and severe 
> - but there was little loss of life.  This quake, magnitute 6.3, hit much 
> closer to the CBD and during a business day, so the casualty count is much 
> higher.  Being a more shallow quake, much closer to town, but also lesser in 
> magnitude, my uneducated view based on media coverage is that the effects are 
> not as widespread, but where they're felt, are very significant.

The 2010 quake was 10 km deep, which is not that deep. It was 40 km away from 
Christchurch, however. This quake's epicenter is at Lyttelton, which is 
apparently only 12 km away, and so it isn't too surprising the damage is 
heaver. (That depends a lot on the property of the bedrock and sediments, and 
whether there is any seismic wave reflection and focusing going on.)

Regards
Marshall

> 
> Mark.
> (in Auckland, some 1000 km away...)
> 
> On Tue, 22 Feb 2011, Daniel Richards wrote:
> 
>> There aren't any major international cables to the south island. The big one 
>> is the southern Cross cable that lands on either side of Auckland, which is 
>> the north of the North Island, which is operating normally.
>> 
>> KAREN (The Kiwi Advanced Research Network) core in the south island is still 
>> operating, but most of the member sites in Christchurch are down: 
>> http://karen.net.nz/news-earthquake-network-update/
>> 
>> News is reporting deaths now, sadly.
>> 
>> On 22/02/11 16:04, Marshall Eubanks wrote:
>>> There has been a bad Earthquake in Christchurch New Zealand with reports of
>>> fatalities.
>>> http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater
>>> Telecom New Zealand reports "Heavy damage" to their Christchurch building, 
>>> but no deaths there.
>>> Is there any report of issues with the undersea cables to / from the South 
>>> Island ?
>>> Regards
>>> Marshall
>>> P.S. On a more personal note,
>>> Google has a people finder up @
>>> http://christchurch-2011.person-finder.appspot.com/
>>> There is a DFAT # - 1300 555 135 - for people outside of NZ to call.
>>> Telecom New Zealand has asked people to stay off of the wireless network 
>>> except for true emergencies.
>> 
>> 
>> 
> 
> 

Re: raw bgp traffic

[Arturo Servin]

here:

http://www.ripe.net/data-tools/stats/ris/ris-raw-data


-as

On 22 Feb 2011, at 00:21, Patrick W. Gilmore wrote:

> On Feb 21, 2011, at 8:58 PM, Javier Godinez wrote:
> 
>> Does anyone know where I can get real/raw BGP traffic, maybe in pcap
>> format? I just need maybe a few days of raw data for an inline
>> analysis tool I am developing.
> 
> I believe  has some info, but I don't know if it 
> is "raw".
> 
> RIPE RIS may also have data, I don't remember.
> 
> -- 
> TTFN,
> patrick
> 

Re: Christchurch New Zealand

[Mark Foster]

Folks on Twitter should search for hashtag #eqnz.

Major news sites in NZ:

www.stuff.co.nz
www.nzherald.co.nz
www.tvnz.co.nz
www.3news.co.nz

Plenty of Vids, Stills and some Streaming available.

Can confirm the reports of multiple casualties.  TV News is live 
broadcasting reports of many folks trapped within buildings, largely 
because of things like stairwells collapsing, etc. A few buildings have 
been hit pretty hard, with some notable collapses, damage to vehicles, 
etc.


The 111 network (911 equiv) is experiencing problems in the South Island, 
folks are being asked to stay the phones (etc) except for genuine 
emergencies.


Urban Search and Rescue teams in NZ are based in Christchurch, Palmerston 
North and Auckland. I gather all three teams are stood-to, and an offer 
from Australia for additional USAR resource has been accepted.  CD 
Emergency has been declared and the Military are already getting involved.


Christchurch experienced a major quake (magnitude 7.2) in September last 
year, which received a lot of press as its effects were widespread and 
severe - but there was little loss of life.  This quake, magnitute 6.3, 
hit much closer to the CBD and during a business day, so the casualty 
count is much higher.  Being a more shallow quake, much closer to town, 
but also lesser in magnitude, my uneducated view based on media coverage 
is that the effects are not as widespread, but where they're felt, are 
very significant.


Mark.
(in Auckland, some 1000 km away...)

On Tue, 22 Feb 2011, Daniel Richards wrote:

There aren't any major international cables to the south island. The big one 
is the southern Cross cable that lands on either side of Auckland, which is 
the north of the North Island, which is operating normally.


KAREN (The Kiwi Advanced Research Network) core in the south island is still 
operating, but most of the member sites in Christchurch are down: 
http://karen.net.nz/news-earthquake-network-update/


News is reporting deaths now, sadly.

On 22/02/11 16:04, Marshall Eubanks wrote:

There has been a bad Earthquake in Christchurch New Zealand with reports of
fatalities.

http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater

Telecom New Zealand reports "Heavy damage" to their Christchurch building, 
but no deaths there.


Is there any report of issues with the undersea cables to / from the South 
Island ?


Regards
Marshall

P.S. On a more personal note,
Google has a people finder up @

http://christchurch-2011.person-finder.appspot.com/

There is a DFAT # - 1300 555 135 - for people outside of NZ to call.

Telecom New Zealand has asked people to stay off of the wireless network 
except for true emergencies.

Re: Christchurch New Zealand

[Daniel Richards]

There aren't any major international cables to the south island. The big 
one is the southern Cross cable that lands on either side of Auckland, 
which is the north of the North Island, which is operating normally.


KAREN (The Kiwi Advanced Research Network) core in the south island is 
still operating, but most of the member sites in Christchurch are down: 
http://karen.net.nz/news-earthquake-network-update/


News is reporting deaths now, sadly.

On 22/02/11 16:04, Marshall Eubanks wrote:

There has been a bad Earthquake in Christchurch New Zealand with reports of
fatalities.

http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater

Telecom New Zealand reports "Heavy damage" to their Christchurch building, but 
no deaths there.

Is there any report of issues with the undersea cables to / from the South 
Island ?

Regards
Marshall

P.S. On a more personal note,
Google has a people finder up @

http://christchurch-2011.person-finder.appspot.com/

There is a DFAT # - 1300 555 135 - for people outside of NZ to call.

Telecom New Zealand has asked people to stay off of the wireless network except 
for true emergencies.

Re: Christchurch New Zealand

[Andrew Kirch]

On 2/21/2011 10:04 PM, Marshall Eubanks wrote:
> There has been a bad Earthquake in Christchurch New Zealand with reports of 
> fatalities. 
>
> http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater
>
> Telecom New Zealand reports "Heavy damage" to their Christchurch building, 
> but no deaths there.
>
> Is there any report of issues with the undersea cables to / from the South 
> Island ? 
>
> Regards
> Marshall
>
> P.S. On a more personal note, 
> Google has a people finder up @
>
> http://christchurch-2011.person-finder.appspot.com/
>
> There is a DFAT # - 1300 555 135 - for people outside of NZ to call.
>
> Telecom New Zealand has asked people to stay off of the wireless network 
> except for true emergencies. 
>
>
I'm currently chatting with a close friend via kinect.co.nz.  She lives
on the very south tip of the south island.  The damage in christchurch
is extensive, and devastating, including damage to hospitals and
emergency response equipment.  They're having a really rough day down there.

Andrew

Christchurch New Zealand

[Marshall Eubanks]

There has been a bad Earthquake in Christchurch New Zealand with reports of 
fatalities. 

http://www.facebook.com/photo.php?fbid=10150099324847752&set=a.125583977751.103665.119452527751&theater

Telecom New Zealand reports "Heavy damage" to their Christchurch building, but 
no deaths there.

Is there any report of issues with the undersea cables to / from the South 
Island ? 

Regards
Marshall

P.S. On a more personal note, 
Google has a people finder up @

http://christchurch-2011.person-finder.appspot.com/

There is a DFAT # - 1300 555 135 - for people outside of NZ to call.

Telecom New Zealand has asked people to stay off of the wireless network except 
for true emergencies. 

Re: Contact for APEWS.org?

[Michael J Wise]

On Feb 21, 2011, at 3:41 PM, Kate Gerry wrote:

> We've been advised by a client that they're incorrectly listing a /15.

What do your LOGS say?
What did the BOUNCE say?

Aloha,
Michael.
-- 
"Please have your Internet License http://kapu.net/~mjwise/
 and Usenet Registration handy..."

Re: Contact for APEWS.org?

[Suresh Ramasubramanian]

Nobody with half a brain uses it, especially not on a production
network rather than "man, his girlfriend and the family dog running a
linux box on a dsl line"

Ignore would be the best advice.

On Tue, Feb 22, 2011 at 2:11 AM, Kate Gerry  wrote:
> We've been advised by a client that they're incorrectly listing a /15. The 
> listing is:
>
> (E-431420) 96.44.0.0/15
>
> According to their FAQ they only take delistings via newsgroups and Google 
> News isn't co-operating with me in regards to them. Meanwhilst we're affected 
> with our range 96.44.128.0/18.
>
> --
> Kate
> QuadraNet, Inc
> 530 W 6th Street #901
> Los Angeles, CA 90014
> k...@quadranet.com
>
>
>
>



-- 
Suresh Ramasubramanian (ops.li...@gmail.com)

Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

[Manish Karir]

Hi Oleg,

You are correct.  We got our default values mixed up.  We will correct this on 
the blog post.

Thanks.
-manish


> Hello,
> 
> > http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets
> 
> Quote from the link:
> 
> > Note that in the 37/8, most traffic comes from TTLs around 100. These are 
> > Linux hosts.
> > The smaller humps are at ~32 (Windows) and ~250 (Solaris).
> 
> I don't agree. TTL around 100 is most probably Windows hosts with initial TTL 
> of 128.
> Everything below 64 can be Linux or FreeBSD. ~250 can be Solaris host but 
> Cisco
> IOS also set initial TTL to 255.
> 
> -- 
> wbr, Oleg.
> 

Re: raw bgp traffic

[Patrick W. Gilmore]

On Feb 21, 2011, at 8:58 PM, Javier Godinez wrote:

> Does anyone know where I can get real/raw BGP traffic, maybe in pcap
> format? I just need maybe a few days of raw data for an inline
> analysis tool I am developing.

I believe  has some info, but I don't know if it is 
"raw".

RIPE RIS may also have data, I don't remember.

-- 
TTFN,
patrick

RE: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Dan Wing]

> >> http://tools.ietf.org/html/draft-donley-nat444-impacts-01
> > That document conflates problems of NAT444 with problems of NAT44
> > with problems of bandwidth starvation with problems of CGN.
> 
> it may require a delicate palate to differentiate the different flavors
> of 

Running out of bandwidth for Netflix is pretty distinct from
the flavor of fried gNAT.

-d

RE: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Dan Wing]

> -Original Message-
> From: Owen DeLong [mailto:o...@delong.com]
> Sent: Monday, February 21, 2011 12:59 PM
> To: Dan Wing
> Cc: 'Chris Grundemann'; 'Benson Schliesser'; 'NANOG list'; 'ARIN-PPML
> List'
> Subject: Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6
> naysayer...)
> 
> 
> On Feb 21, 2011, at 12:37 PM, Dan Wing wrote:
> 
> >> -Original Message-
> >> From: arin-ppml-boun...@arin.net [mailto:arin-ppml-boun...@arin.net]
> On
> >> Behalf Of Chris Grundemann
> >> Sent: Thursday, February 17, 2011 5:55 PM
> >> To: Benson Schliesser
> >> Cc: NANOG list; ARIN-PPML List
> >> Subject: Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6
> >> naysayer...)
> >>
> >> On Thu, Feb 10, 2011 at 14:17, Benson Schliesser
> >>  wrote:
> >>
> >>> If you have more experience (not including rumors) that suggests
> >> otherwise, I'd very much like to hear about it.  I'm open to the
> >> possibility that NAT444 breaks stuff - that feels right in my gut -
> but
> >> I haven't found any valid evidence of this.
> >>
> >> In case you have not already found this:
> >> http://tools.ietf.org/html/draft-donley-nat444-impacts-01
> >
> > That document conflates problems of NAT444 with problems of NAT44
> > with problems of bandwidth starvation with problems of CGN.
> >
> > For details, see my comments at
> > http://www.ietf.org/mail-archive/web/behave/current/msg09027.html
> > and see Reinaldo Penno's comments at
> > http://www.ietf.org/mail-archive/web/behave/current/msg09030.html
> >
> > -d
> 
> The document describes problems that will exist in NAT444 environments.
> It does not state that these problems would be specific to NAT444, but,
> NAT444 will cause or exacerbate each of the problems described.

To the contrary.

Its title, filename, abstract, and introduction all say the problems
are specific to NAT444.  Which is untrue.

> Yes, the problems may have other underlying root causes, but, they
> will all be present in a NAT444 environment, even if they were not
> present in the same environment prior to deployment of NAT444.
> 
> 
> Let me put it this way...
> 
> IPv4 has a TITANIC lack of numeric addresses and has been
> stretched beyond its limits for some time now.
> 
> IPv6 is a life boat.
> 
> NAT is a seat cushion used for floatation.
> 
> NAT444 (and other NAT-based extensions) are deck chairs.
> 
> Attempting to improve them beyond their current states is
> an effort to rearrange the deck chairs.

-d

Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Randy Bush]

>> http://tools.ietf.org/html/draft-donley-nat444-impacts-01
> That document conflates problems of NAT444 with problems of NAT44 
> with problems of bandwidth starvation with problems of CGN.

it may require a delicate palate to differentiate the different flavors
of 

randy

raw bgp traffic

[Javier Godinez]

Deal NANOG,

Does anyone know where I can get real/raw BGP traffic, maybe in pcap
format? I just need maybe a few days of raw data for an inline
analysis tool I am developing.


Thank you,
Javier

Re: BGP Failover Question

[Charles Gucker]

On Mon, Feb 21, 2011 at 4:10 PM, Chris Wallace
 wrote:
>This isn't the first time we have seen this issue with our various providers, 
>how can I prevent issues like this from happening in the future?

Quick question, are you running with a default route from your
provider?   If so, you're better off either finding another provider,
or upgrading the router (if necessary) to carry a full table.   If
they do something to partition their network, you will see the
decrease in routes learned from them, provided you see those routes
and not the default route as asked above.

charles

Re: BGP Failover Question

[Seth Mattinen]

On 2/21/2011 13:44, Max Pierson wrote:
>>Save yourself the headache and find a new provider that knows how to
> handle BGP
> 
> I've had this happen with providers that do know how to handle BGP. Just
> because you peer with 3356, 701, etc, doesn't mean operators can't make
> a mistake. I've even seen this happen due to some wierd BGP behavior
> caused by some cool new "features". 
> 
> IMHO, better to plan for it and deploy it as a policy (by whatever means).
> 


On a predictable schedule? That's where I drew the line: they were
"fixing" something that was not "normal" to them every two months that
resulted in the problem the OP described. Yes, mistakes happen, but
identical repeating mistakes don't count in my book. I would expect my
providers to document changes and whoever is making changes to consult
it when they see a deviation from common config.

~Seth

Re: Graph Utils (Open-Source)

[Max Pierson]

>The GD 'C' package has great Perl interfaces called GD, and GD:Graph

I'm test driving GD as well. Trying out a few other tools that were
mentioned here also. Trying to get a feel for which I like best.

Thanks for all of the replies!

On Mon, Feb 21, 2011 at 3:24 PM, Joe Loiacono  wrote:

>
> Max Pierson  wrote on 02/21/2011 04:15:46 PM:
>
>
> > Unfortunately, I'm not savvy with Java at all, so the really cool viz
> API's
> > wont work for me (there's just something about Java ... I simply can't
> get
> > into it and I see alot of Java based apps that are resource hogs). I was
> > looking at mostly using some simple Perl + PHP (or even Python) for the
> > graph generation. My own cacti if you will, just not as feature filled
> > but template driven.
>
>
> The GD 'C' package has great Perl interfaces called GD, and GD:Graph. Easy
> to work with ...
>
> GD: http://search.cpan.org/~lds/GD-2.30/GD.pm
>
> GD:Graph: http://search.cpan.org/~bwarfield/GDGraph-1.44/
>
> Joe

Re: Contact for APEWS.org?

[Andrew Kirch]

On 2/21/2011 4:37 PM, William Pitcock wrote:
> Hi,
> Nobody in their right mind uses APEWS when there are more legitimate
> DNSBLs around like Spamhaus, AHBL, DroneBL, etc.
>
> Your client is unlikely having any problem with this listing.  But, if
> you really want to bother, my advice is get a Supernews account and go
> for it.
>
> William
>

Most likely, given the toxic environment on USENET's NANAE, you'll
simply be derided, mocked, or harassed by the inhabitants there instead
of getting any sort of valid de-listing advice.

Andrew

Re: BGP Failover Question

[Max Pierson]

>Save yourself the headache and find a new provider that knows how to handle
BGP

I've had this happen with providers that do know how to handle BGP. Just
because you peer with 3356, 701, etc, doesn't mean operators can't make a
mistake. I've even seen this happen due to some wierd BGP behavior caused by
some cool new "features".

IMHO, better to plan for it and deploy it as a policy (by whatever means).

M

On Mon, Feb 21, 2011 at 3:35 PM, Seth Mattinen  wrote:

> On 2/21/2011 13:10, Chris Wallace wrote:
> > I am looking for some help with an issue we recently had with one of our
> BGP peers recently.  I currently have two DIA providers each terminated into
> their own edge router and I am doing iBGP to exchange routes between the two
> edge routers.  Last week Provider A made a policy change "somewhere" in
> their network in the middle of the day causing traffic to stop routing.  Of
> course this connection happens to be the preferred route for the majority of
> our inbound and outbound traffic.  I never saw our physical link go down and
> never saw our peer drop therefore BGP did not stop advertising routes, this
> caused most of our customers traffic to go nowhere.  In order to fix the
> issue I had to manually shutdown the peer till Provider A confirmed the
> change they made had been reverted.  This isn't the first time we have seen
> this issue with our various providers, how can I prevent issues like this
> from happening in the future?
> >
>
>
> I had a provider like that a long time ago; it was an ATG T1 (which was
> fine) but when they were bought by Eschelon the exact problem you're
> describing would happen every other month like clockwork. The first time
> was forgivable. The second time I was annoyed. After the third I was
> angry, unplugged it, and told them to stuff it because apparently they
> didn't know how to deal with BGP.
>
> You can't prevent it from happening. You can only come up with band-aids
> to notify you. Save yourself the headache and find a new provider that
> knows how to handle BGP. What happens if the other circuit is not
> available (outage, planned maintenance, etc.) at the same time the
> problem one decides to black hole you? If you're facing the same
> repeating problem they are obviously not the best fit for you.
>
> ~Seth
>
>

Re: Contact for APEWS.org?

[William Pitcock]

Hi,

On Mon, 21 Feb 2011 12:41:57 -0800
Kate Gerry  wrote:

> We've been advised by a client that they're incorrectly listing
> a /15. The listing is:
> 
> (E-431420) 96.44.0.0/15
> 
> According to their FAQ they only take delistings via newsgroups and
> Google News isn't co-operating with me in regards to them. Meanwhilst
> we're affected with our range 96.44.128.0/18.

Nobody in their right mind uses APEWS when there are more legitimate
DNSBLs around like Spamhaus, AHBL, DroneBL, etc.

Your client is unlikely having any problem with this listing.  But, if
you really want to bother, my advice is get a Supernews account and go
for it.

William

Re: BGP Failover Question

[Seth Mattinen]

On 2/21/2011 13:10, Chris Wallace wrote:
> I am looking for some help with an issue we recently had with one of our BGP 
> peers recently.  I currently have two DIA providers each terminated into 
> their own edge router and I am doing iBGP to exchange routes between the two 
> edge routers.  Last week Provider A made a policy change "somewhere" in their 
> network in the middle of the day causing traffic to stop routing.  Of course 
> this connection happens to be the preferred route for the majority of our 
> inbound and outbound traffic.  I never saw our physical link go down and 
> never saw our peer drop therefore BGP did not stop advertising routes, this 
> caused most of our customers traffic to go nowhere.  In order to fix the 
> issue I had to manually shutdown the peer till Provider A confirmed the 
> change they made had been reverted.  This isn't the first time we have seen 
> this issue with our various providers, how can I prevent issues like this 
> from happening in the future?
> 


I had a provider like that a long time ago; it was an ATG T1 (which was
fine) but when they were bought by Eschelon the exact problem you're
describing would happen every other month like clockwork. The first time
was forgivable. The second time I was annoyed. After the third I was
angry, unplugged it, and told them to stuff it because apparently they
didn't know how to deal with BGP.

You can't prevent it from happening. You can only come up with band-aids
to notify you. Save yourself the headache and find a new provider that
knows how to handle BGP. What happens if the other circuit is not
available (outage, planned maintenance, etc.) at the same time the
problem one decides to black hole you? If you're facing the same
repeating problem they are obviously not the best fit for you.

~Seth

Re: BGP Failover Question

[Max Pierson]

I would simply monitor PPS on those links and set a threshold which will
kick off an alert at least. If your scripting savvy, other tools such as IP
SLA and EEM on Cisco could be used to automate the failover. Juniper also
has a similar scripting tool that can probably do the same. I've had this
happen before and is a real pain.

Regards,
M

On Mon, Feb 21, 2011 at 3:10 PM, Chris Wallace wrote:

> I am looking for some help with an issue we recently had with one of our
> BGP peers recently.  I currently have two DIA providers each terminated into
> their own edge router and I am doing iBGP to exchange routes between the two
> edge routers.  Last week Provider A made a policy change "somewhere" in
> their network in the middle of the day causing traffic to stop routing.  Of
> course this connection happens to be the preferred route for the majority of
> our inbound and outbound traffic.  I never saw our physical link go down and
> never saw our peer drop therefore BGP did not stop advertising routes, this
> caused most of our customers traffic to go nowhere.  In order to fix the
> issue I had to manually shutdown the peer till Provider A confirmed the
> change they made had been reverted.  This isn't the first time we have seen
> this issue with our various providers, how can I prevent issues like this
> from happening in the future?
>
> ---Chris
>

Re: Graph Utils (Open-Source)

[Joe Loiacono]

Max Pierson  wrote on 02/21/2011 04:15:46 PM:

> Unfortunately, I'm not savvy with Java at all, so the really cool viz 
API's
> wont work for me (there's just something about Java ... I simply can't 
get
> into it and I see alot of Java based apps that are resource hogs). I was
> looking at mostly using some simple Perl + PHP (or even Python) for the
> graph generation. My own cacti if you will, just not as feature filled
> but template driven.

The GD 'C' package has great Perl interfaces called GD, and GD:Graph. Easy 
to work with ...

GD: http://search.cpan.org/~lds/GD-2.30/GD.pm

GD:Graph: http://search.cpan.org/~bwarfield/GDGraph-1.44/

Joe

RE: BGP Failover Question

[Brian Johnson]

Chris,

The best way to resolve this issue is to not use a service provider who takes 
down your connectivity outside of maintenance windows, but I digress.

This is the nature of BGP. You send your providers routes about your network 
prefixes and they send you routes to say the DFZ. When you forward packets to 
them ,because they sent you routes saying they can get the destinations your 
packets have on them, it is now outside of anything you can do about it. It is 
now up to the peer to forward the packets as they said they would by sending 
you prefixes.

This is a trust relationship as you trust they will forward your packets 
because that is why you are paying them.

- Brian J.

-Original Message-
From: Chris Wallace [mailto:li...@iamchriswallace.com] 
Sent: Monday, February 21, 2011 3:10 PM
To: NANOG
Subject: BGP Failover Question

I am looking for some help with an issue we recently had with one of our BGP 
peers recently.  I currently have two DIA providers each terminated into their 
own edge router and I am doing iBGP to exchange routes between the two edge 
routers.  Last week Provider A made a policy change "somewhere" in their 
network in the middle of the day causing traffic to stop routing.  Of course 
this connection happens to be the preferred route for the majority of our 
inbound and outbound traffic.  I never saw our physical link go down and never 
saw our peer drop therefore BGP did not stop advertising routes, this caused 
most of our customers traffic to go nowhere.  In order to fix the issue I had 
to manually shutdown the peer till Provider A confirmed the change they made 
had been reverted.  This isn't the first time we have seen this issue with our 
various providers, how can I prevent issues like this from happening in the 
future?

---Chris

Re: Contact for APEWS.org?

[Steve Linford]

On 21 Feb 2011, at 21:41, Kate Gerry wrote:

> We've been advised by a client that they're incorrectly listing a /15.

APEWS is one of the many fringe hobby DNSBLs run from kids bedrooms. Nobody has 
ever heard of any network using APEWS so your client can not possibly be 
experiencing any mail issue due to any APEWS listing.

Your client has simply looked up their IP address on some advert-laden "check 
your IP against a gazillion blacklists" website which happily reports every IP 
is 'listed' somewhere without mentioning that half the lists it checked against 
are not used by anyone except the kid running it.

  Steve Linford
  The Spamhaus Project
  http://www.spamhaus.org
  

Re: Contact for APEWS.org?

[Andrew Kirch]

On 2/21/2011 4:04 PM, Brielle Bruns wrote:
> On 2/21/11 1:41 PM, Kate Gerry wrote:
>
> Kate,
>
> It is unlikely you will find a direct contact for APEWS - your best
> bet is to get access to usenet through one of the Usenet providers or
> even through aioe or eternal-september.
>
>
APEWS is braindead in execution, if not in fact.  They list about half
of all IPv4 space, and one might reasonably state that anyone using them
deserves their own self-inflicted SMTP intranet. 
http://www.dnsbl.com/2007/08/apews-news-and-commentary-roundup.html

Andrew

Re: Graph Utils (Open-Source)

[Max Pierson]

Hiya Jimmy!!

How has it been?

>For simple visualizations,  I think usually a 'native'  framework/API is
preferred, e.g. JGraph for java apps.

Unfortunately, I'm not savvy with Java at all, so the really cool viz API's
wont work for me (there's just something about Java ... I simply can't get
into it and I see alot of Java based apps that are resource hogs). I was
looking at mostly using some simple Perl + PHP (or even Python) for the
graph generation. My own cacti if you will, just not as feature filled
but template driven.

>If you need to paint a bunch of  arbitrary X and Y values   on a graph from
>an input file or based on simple equations,   gnuplot will happily
>oblige; it can
>handle chart types  rrdtool cannot, and you have more direct control of
output.

>If you want some 3D / surface graphs, RRDTool won't do it, anyways.
>Gnuplot's less expensive
>than Matlab / Maple.

This is why rrdtool won't work for me. I'll be inputting data sets for
charts that rrdtool doesn't understand and I would like to add a z-axis for
some data that would be better understood on a 3D plot. The Graph.pm has
hooks for xrt3d which looks pretty neat. I'm also looking at Grace as well
using that same module (xmgrace), and it also has gnuplot I can work with.
This way I can reuse code if I decide to use one over the other.

The other issue is that all of this data is already stored (at least most of
it) in mysql, and I don't need to waste cycles and chunks on riping data
from one DB and have to create another just to display a graph. Plus some of
the RRA's would be huge and therefore slow.


>Try plotting a test dataset with 500 million datapoints.
>there should normally be some form of averaging / smoothing / "selection of
points"  contemplated, if the dataset is huge

The few hundred million rows are spread out across different servers and are
not all the same table types. I believe it's 280-300 million rows by
first estimates, but they will be represented in different manors. I won't
be injecting the volume of inserts aggregate onto one plot over time.  I
haven't gone that mad yet :)   For measurements such as that, averaging will
be used for such trends.

Good talking to you again,
Max



On Sun, Feb 20, 2011 at 10:45 PM, Jimmy Hess  wrote:

> On Fri, Feb 18, 2011 at 1:13 PM, Max Pierson 
> wrote:
> > Anyone out there using something other than rrdtool for creating graphs??
> I
> > have a project that will need a trend taken, and unfortunately rrdtool
> > doesn't fit the bill. All of the scripting, data collection,
> > database archival, etc will be custom written or is already done (with
> some
> > hacks of course :). So really what i'm looking for is something along the
> > lines of GNUplot. Has anyone used it before and would like to share
>
> I haven't heard of gnuplot used often with other software as a framework
> for graphing/visualizations. For simple visualizations,  I think usually a
> 'native'  framework/API is preferred, e.g. JGraph for java apps.
>
> I suspect one reason gnuplot is not used as widely as it could be otherwise
> is, its  licensing is not as  "friendly" as other graphics frameworks.
> gnuplot license is GPL incompatible and does not seem to even fully meet
> the open source definition,
>
> Because redistributing complete modified source code of gnuplot itself
> is not allowed by the license;  a clear reading of gnuplot license suggests
> only patches, unmodified source code, can be freely redistributed,
> redistributed binaries based on modified source have special rules).
>
>
> Aside from that caveat,  which most likely does not normally impair private
> use by a network operator: gnuplot is a really good tool.
> If you need to paint a bunch of  arbitrary X and Y values   on a graph from
> an input file or based on simple equations,   gnuplot will happily
> oblige; it can
> handle chart types  rrdtool cannot, and you have more direct control of
> output.
>
> If you want some 3D / surface graphs, RRDTool won't do it, anyways.
> Gnuplot's less expensive
> than Matlab / Maple.
>
> You can even set terminal type to "dumb" in gnuplot, and generate some
> fancy
> ASCII art graphs on stdout.
>
>
> In regards to scalability...
>
> About the millions of rows... err..
> Try plotting a test dataset with 500 million datapoints.Chances
> are gnuplot won't
> necessarily scale that well either, and you need some method to be
> selective of which rows are
> provided as input to the plotting framework, in that case.
>
> If you have a  million datapoints on your X axis,  each X position is
> smaller than  1/1000 of
> a display pixel   (on a graph that fits on a display at say  1920x1080);
> displaying such high resolution of all datapoints at once on the
> unzoomed graph is beyond
> the display hardware capabilitiy.
>
> there should normally be some form of averaging / smoothing /
> "selection of points"  contemplated,
> if the dataset is huge
>
> > experiences?? Seems like it will be able to my plot da

BGP Failover Question

[Chris Wallace]

I am looking for some help with an issue we recently had with one of our BGP 
peers recently.  I currently have two DIA providers each terminated into their 
own edge router and I am doing iBGP to exchange routes between the two edge 
routers.  Last week Provider A made a policy change "somewhere" in their 
network in the middle of the day causing traffic to stop routing.  Of course 
this connection happens to be the preferred route for the majority of our 
inbound and outbound traffic.  I never saw our physical link go down and never 
saw our peer drop therefore BGP did not stop advertising routes, this caused 
most of our customers traffic to go nowhere.  In order to fix the issue I had 
to manually shutdown the peer till Provider A confirmed the change they made 
had been reverted.  This isn't the first time we have seen this issue with our 
various providers, how can I prevent issues like this from happening in the 
future?

---Chris

Re: Contact for APEWS.org?

[Brielle Bruns]

On 2/21/11 1:41 PM, Kate Gerry wrote:

We've been advised by a client that they're incorrectly listing a
/15. The listing is:

(E-431420) 96.44.0.0/15

According to their FAQ they only take delistings via newsgroups and
Google News isn't co-operating with me in regards to them. Meanwhilst
we're affected with our range 96.44.128.0/18.



Kate,

It is unlikely you will find a direct contact for APEWS - your best bet 
is to get access to usenet through one of the Usenet providers or even 
through aioe or eternal-september.



--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org/ http://www.ahbl.org

Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Owen DeLong]

On Feb 21, 2011, at 12:37 PM, Dan Wing wrote:

>> -Original Message-
>> From: arin-ppml-boun...@arin.net [mailto:arin-ppml-boun...@arin.net] On
>> Behalf Of Chris Grundemann
>> Sent: Thursday, February 17, 2011 5:55 PM
>> To: Benson Schliesser
>> Cc: NANOG list; ARIN-PPML List
>> Subject: Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6
>> naysayer...)
>> 
>> On Thu, Feb 10, 2011 at 14:17, Benson Schliesser
>>  wrote:
>> 
>>> If you have more experience (not including rumors) that suggests
>> otherwise, I'd very much like to hear about it.  I'm open to the
>> possibility that NAT444 breaks stuff - that feels right in my gut - but
>> I haven't found any valid evidence of this.
>> 
>> In case you have not already found this:
>> http://tools.ietf.org/html/draft-donley-nat444-impacts-01
> 
> That document conflates problems of NAT444 with problems of NAT44 
> with problems of bandwidth starvation with problems of CGN.
> 
> For details, see my comments at
> http://www.ietf.org/mail-archive/web/behave/current/msg09027.html
> and see Reinaldo Penno's comments at
> http://www.ietf.org/mail-archive/web/behave/current/msg09030.html
> 
> -d
> 
The document describes problems that will exist in NAT444 environments.
It does not state that these problems would be specific to NAT444, but,
NAT444 will cause or exacerbate each of the problems described.

Yes, the problems may have other underlying root causes, but, they
will all be present in a NAT444 environment, even if they were not
present in the same environment prior to deployment of NAT444.


Let me put it this way...

IPv4 has a TITANIC lack of numeric addresses and has been
stretched beyond its limits for some time now.

IPv6 is a life boat.

NAT is a seat cushion used for floatation.

NAT444 (and other NAT-based extensions) are deck chairs.

Attempting to improve them beyond their current states is
an effort to rearrange the deck chairs.

Owen

Contact for APEWS.org?

[Kate Gerry]

We've been advised by a client that they're incorrectly listing a /15. The 
listing is:

(E-431420) 96.44.0.0/15

According to their FAQ they only take delistings via newsgroups and Google News 
isn't co-operating with me in regards to them. Meanwhilst we're affected with 
our range 96.44.128.0/18.

--
Kate
QuadraNet, Inc
530 W 6th Street #901
Los Angeles, CA 90014
k...@quadranet.com

RE: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Dan Wing]

> -Original Message-
> From: arin-ppml-boun...@arin.net [mailto:arin-ppml-boun...@arin.net] On
> Behalf Of Chris Grundemann
> Sent: Thursday, February 17, 2011 5:55 PM
> To: Benson Schliesser
> Cc: NANOG list; ARIN-PPML List
> Subject: Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6
> naysayer...)
> 
> On Thu, Feb 10, 2011 at 14:17, Benson Schliesser
>  wrote:
> 
> > If you have more experience (not including rumors) that suggests
> otherwise, I'd very much like to hear about it.  I'm open to the
> possibility that NAT444 breaks stuff - that feels right in my gut - but
> I haven't found any valid evidence of this.
> 
> In case you have not already found this:
> http://tools.ietf.org/html/draft-donley-nat444-impacts-01

That document conflates problems of NAT444 with problems of NAT44 
with problems of bandwidth starvation with problems of CGN.

For details, see my comments at
http://www.ietf.org/mail-archive/web/behave/current/msg09027.html
and see Reinaldo Penno's comments at
http://www.ietf.org/mail-archive/web/behave/current/msg09030.html

-d

> Cheers,
> ~Chris
> 
> >
> > Regardless, I think we can agree that IPv6 is the way to avoid NAT-
> related growing pains.  We've known this for a long time.
> >
> > Cheers,
> > -Benson
> >
> > ___
> > PPML
> > You are receiving this message because you are subscribed to
> > the ARIN Public Policy Mailing List (arin-p...@arin.net).
> > Unsubscribe or manage your mailing list subscription at:
> > http://lists.arin.net/mailman/listinfo/arin-ppml
> > Please contact i...@arin.net if you experience any issues.
> >
> 
> 
> 
> 
> 
> 
> --
> @ChrisGrundemann
> weblog.chrisgrundemann.com
> www.burningwiththebush.com
> www.theIPv6experts.net
> www.coisoc.org
> ___
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (arin-p...@arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact i...@arin.net if you experience any issues.

Re: Graph Utils (Open-Source)

[Christopher O'Brien]

On 02/20/11 23:45, Jimmy Hess wrote:
> On Fri, Feb 18, 2011 at 1:13 PM, Max Pierson  wrote:
>> Anyone out there using something other than rrdtool for creating graphs?? I
>> have a project that will need a trend taken, and unfortunately rrdtool
>> doesn't fit the bill. All of the scripting, data collection,
>> database archival, etc will be custom written or is already done (with some
>> hacks of course :). So really what i'm looking for is something along the
>> lines of GNUplot. Has anyone used it before and would like to share
> 
> I haven't heard of gnuplot used often with other software as a framework
> for graphing/visualizations. For simple visualizations,  I think usually a
> 'native'  framework/API is preferred, e.g. JGraph for java apps.
> 
> I suspect one reason gnuplot is not used as widely as it could be otherwise
> is, its  licensing is not as  "friendly" as other graphics frameworks.
> gnuplot license is GPL incompatible and does not seem to even fully meet
> the open source definition,
> 
> Because redistributing complete modified source code of gnuplot itself
> is not allowed by the license;  a clear reading of gnuplot license suggests
> only patches, unmodified source code, can be freely redistributed,
> redistributed binaries based on modified source have special rules).
> 
> 
> Aside from that caveat,  which most likely does not normally impair private
> use by a network operator: gnuplot is a really good tool.
> If you need to paint a bunch of  arbitrary X and Y values   on a graph from
> an input file or based on simple equations,   gnuplot will happily
> oblige; it can
> handle chart types  rrdtool cannot, and you have more direct control of 
> output.
> 
> If you want some 3D / surface graphs, RRDTool won't do it, anyways.
> Gnuplot's less expensive
> than Matlab / Maple.
> 
> You can even set terminal type to "dumb" in gnuplot, and generate some fancy
> ASCII art graphs on stdout.
> 
> 
> In regards to scalability...
> 
> About the millions of rows... err..
> Try plotting a test dataset with 500 million datapoints.Chances
> are gnuplot won't
> necessarily scale that well either, and you need some method to be
> selective of which rows are
> provided as input to the plotting framework, in that case.
> 
> If you have a  million datapoints on your X axis,  each X position is
> smaller than  1/1000 of
> a display pixel   (on a graph that fits on a display at say  1920x1080);
> displaying such high resolution of all datapoints at once on the
> unzoomed graph is beyond
> the display hardware capabilitiy.
> 
> there should normally be some form of averaging / smoothing /
> "selection of points"  contemplated,
> if the dataset is huge
> 
>> experiences?? Seems like it will be able to my plot data accordingly, but
>> wanted to see if there were any other popular tools I've yet to come across.
>>
>> (Open-Source only please)
> 
> --
> -JH
> 
If you can use Java, JfreeChart is pretty nice.  It has the ability to
create many different types of charts/grpahs.  I've only used it a
little bit for a project I was looking into that uses it, but it seems
really capable.  I think it's licensed under gpl or lgpl, but the
creator charges for documentation/examples if you need them.

http://www.jfree.org/jfreechart/

Re: Libya

[Craig Labovitz]

Updated data  on Libya and other Internet traffic issues in the region: 
http://goo.gl/07ONC

- Craig

Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

["Oleg A. Arkhangelsky"]

Hello,

> http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets

Quote from the link:

> Note that in the 37/8, most traffic comes from TTLs around 100. These are 
> Linux hosts.
> The smaller humps are at ~32 (Windows) and ~250 (Solaris).

I don't agree. TTL around 100 is most probably Windows hosts with initial TTL 
of 128.
Everything below 64 can be Linux or FreeBSD. ~250 can be Solaris host but Cisco
IOS also set initial TTL to 255.

-- 
wbr, Oleg.

Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

[Ryan Rawdon]

Doesn't the LogMeIn Hamachi "VPN service" use 5.0.0.0/8?  Perhaps the spikes to 
5.5.5.0/24 or the space in general are from fluctuations or waves of 
disconnects of Hamachi users, so when they are disconnected their Hamachi 
traffic heads out in to the DFZ?  This service is particularly popular amongst 
gamers who like to play LAN games over the Internet when Internet play is not 
possible, which could account for the diverse set of source addresses and UDP 
traffic (and I'm sure a long tail of other applications/uses)

I can't say I am terribly familiar with the service, but it is one of the first 
things that came to mind when reading the RIPE writeup.

It would be interesting to see what the distribution of source/destination 
ports are in the traffic headed into 5/8 or 5.5.5.0/24 to see if they can be 
correlated to common games or applications that may be used over Hamachi.


On Feb 21, 2011, at 8:36 AM, Mirjam Kuehne wrote:

> Hello,
> 
> During NANOG 51, Manish Karir gave a Lightning Talk showing how much and what 
> kind of traffic is going to unallocated address space in 5/8 and 37/8 (among 
> other ranges he tested).
> 
> This is now also available on RIPE Labs:
> 
> http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets
> 
> Kind Regards,
> Mirjam Kuehne
> RIPE NCC
> 

Traffic to 5/8 and 37/8 - stats on RIPE Labs

[Mirjam Kuehne]

Hello,

During NANOG 51, Manish Karir gave a Lightning Talk showing how much and 
what kind of traffic is going to unallocated address space in 5/8 and 
37/8 (among other ranges he tested).


This is now also available on RIPE Labs:

http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets

Kind Regards,
Mirjam Kuehne
RIPE NCC

Re: [arin-ppml] NAT444 rumors (was Re: Looking for an IPv6 naysayer...)

[Owen DeLong]

On Feb 20, 2011, at 10:35 PM, Jimmy Hess wrote:

> On Fri, Feb 18, 2011 at 2:24 AM, Zed Usser  wrote:
>> Basic Internet services will work (web browsing, email, Facebook, 
>> Youtube,...), but:

Actually, many facebook and youtube features will also be degraded.

>> - Less torrenting
>> - Less Netflix watching
>> - Less FTP downloads
>> - Less video streaming in general (webcams, etc.)
>> You might take a hit on online gaming, but what else is there not to love? :)
> 
You're joking, right? I don't think that most customers are going to take kindly
to having their internet experience on their computer(s) reduced to what they
expect from their cell phone.

>> Your sales department / helpdesk might have a bit of hassle of trying to 
>> undestand / explain this new Intertubes to the suck^H^H^H^Hcustomers, but 
>> most of them won't care either way.
> 
> Until some competitor who's  not using NAT444 comes along  and
> advertises that those functions work properly, maybe.
> Only for very liberal definitions of the phrase "won't care either way"
> 
> Tolerate != won't care
> Most of them !=  People who won't eventually tell their friends  or
> tweet about their frustrations
> 
Nah... Just make sure tweeting is one of the things you break along
with the rest of the itner-tubes. (joking, of course).


> 
> For those who are connecting to watch Netflix, it is only marginally
> less annoying for the user than
> removing the "always on" feature of DSL, requiring customers to
> manually click an icon to dial in,
> and get a busy tone played  / "All dialin 'lines are busy'" / "Please
> use IPv6 while you wait,
> wait 10 minutes and try dialing in again",  if there are no global
> IPv4 IPs available at the moment
> they are trying to connect.
> 
As long as you give them IPv6, their Netflix and Youtube will work.

> Some might even strongly prefer that  (time limited access  and pay
> per connected hour)
> for periods of access to proper unique IPs over NAT444  brokenness;
> 
You guys are making me very very glad that I:
1.  Do not depend on my provider for IPv4 addresses.
2.  Have a fully dual-stack environment at home.
3.  Do not depend on my residential provider to deliver
anything more than the ability to shove GRE across
the internet encapsulated in whatever protocol (v4/v6)
works at the time.

> possibly with a customer choice between NAT444 and  "time metered
> dynamic unique IP" and reasonably
> automatic simple means of switching between IP types on demand.
> 
I encourage my competitors to try this.

Owen