Re: EIGRP support !Cisco

2014-01-24 Thread Jimmy Hess
On Fri, Jan 10, 2014 at 9:57 AM, Christopher Morrow morrowc.li...@gmail.com
 wrote:

 On Fri, Jan 10, 2014 at 10:54 AM, Nick Hilliard n...@foobar.org wrote:
  On 08/01/2014 18:14, Christopher Morrow wrote:
  question... there's people that have done this before even :)
  https://www.nanog.org/meetings/nanog29/presentations/gill.pdf

 oh yea! that guy! I hear he's done this sort of thing a few times
 now... probably has practice and tools and stuff :)


Hey... Tools why not...   Control+Click...  select all the routers
Right click   Upgrade IGP to ISIS

Go grab a drink...   Come back...  Done  click OK.  No more Eigrp.

I suppose  PuTTy / SecureCRT haven't added the feature yet...
perhaps in a few releases?  :)


-- 
-JH


Re: bcp38.info wiki signup problem

2014-01-24 Thread Alain Hebert
Well,

Out of 25 accounts, 22 where for spamming.  Even with captcha, etc.

Since then I put a mention to contact modera...@bcp38.info for
account creation.

You'll see it if you are going through the [Log in] link

http://www.bcp38.info/index.php?title=Special:UserLoginreturnto=Main+Page   


You're right, directly to [Sign up] wont work.

Sorry :(

-
Alain Hebertaheb...@pubnix.net   
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443

On 01/23/14 23:03, Jay Ashworth wrote:
 A kind soul has just pointed out to me that the register link on the 
 BCP38 wiki:

   
 http://www.bcp38.info/index.php?title=Special:UserLoginreturnto=Main+Pagetype=signup

 isn't, um, working right now.  I guess that might explain the lack of 
 contributions.  

 Oops.

 We'll get right on that, folks.  :-}

 Cheers,
 -- jra




About ddos-respo...@nfoservers.com

2014-01-24 Thread Alain Hebert
Well,

Those poor guys are under perma DNS Amplifcation DDoS for what seems
to be 2 weeks now.

About 7 days ago they started sending us emails for what is less
than 2MB worth of data (~500 packets) which is about how long it takes
for filters to take effect.

But after 1 week of communication they are not changing their
procedures :(

Anyone else receiving those emails?

-

Since most providers (at any level) are not putting any effort on BCP38.

Is there a [Spoofing Tracking Squad] out there?
( We're on GT-T/nLayer/Tinet )

-- 
-
Alain Hebertaheb...@pubnix.net   
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443




Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Christopher Morrow
On Fri, Jan 24, 2014 at 9:22 AM, Alain Hebert aheb...@pubnix.net wrote:
 Well,

 Those poor guys are under perma DNS Amplifcation DDoS for what seems
 to be 2 weeks now.


they seem to be hosted at internap, you'd think they could just ask
internap to fix this for them instead, eh?



Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Jared Mauch

On Jan 24, 2014, at 9:22 AM, Alain Hebert aheb...@pubnix.net wrote:

 
Is there a [Spoofing Tracking Squad] out there?
( We're on GT-T/nLayer/Tinet )

You haven’t been able to get GTT/nLayer/TINet to track the traffic back?

Details are welcome, either here or in private.  There are plenty of people who 
will chase and fix this stuff when they’re aware of it.

- Jared


Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Chris Boyd

On Jan 24, 2014, at 8:36 AM, Jared Mauch wrote:

 You haven’t been able to get GTT/nLayer/TINet to track the traffic back?
 
 Details are welcome, either here or in private.  There are plenty of people 
 who will chase and fix this stuff when they’re aware of it.

When OpenResolver Project was announced, there were about 60 abusable addresses 
in my corner of the Internet.  I was able to get that number down under 20 by 
asking politely.  The NFOserver reports have been a pretty good stick to get 
the number down below 10.

--Chris




Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Tei
On 24 January 2014 16:23, Chris Boyd cb...@gizmopartners.com wrote:

 On Jan 24, 2014, at 8:36 AM, Jared Mauch wrote:

 You haven’t been able to get GTT/nLayer/TINet to track the traffic back?

 Details are welcome, either here or in private.  There are plenty of people 
 who will chase and fix this stuff when they’re aware of it.

 When OpenResolver Project was announced, there were about 60 abusable 
 addresses in my corner of the Internet.  I was able to get that number down 
 under 20 by asking politely.  The NFOserver reports have been a pretty good 
 stick to get the number down below 10.


http://dns.measurement-factory.com/surveys/openresolvers/ASN-reports/latest.html

Uh.. Oh.  I see a lot of references to Teléfonica in Latin America.



-- 
--
ℱin del ℳensaje.



L2TPv3 - and layer 2 PDU's

2014-01-24 Thread Philip Lavine
To all,

Has anyone successfully tunneled L2 PDU's (STP, CDP, LLDP) over a L2TPv3 
pseudowire tunnel, i.e. should I be able to see CDP neighbors across the 
tunnel? For some reason if I encapsulated dot1q on a router sub-interface and 
try and pass traffic across the trunk the downstream switch port will go into 
err-disable.

Thx

Philip



Re: L2TPv3 - and layer 2 PDU's

2014-01-24 Thread Jeff Tantsura
Yes, 10 years ago on 10720, CDP and LACP worked like a charm

Regards,
Jeff

 On Jan 24, 2014, at 7:55 AM, Philip Lavine source_ro...@yahoo.com wrote:
 
 To all,
 
 Has anyone successfully tunneled L2 PDU's (STP, CDP, LLDP) over a L2TPv3 
 pseudowire tunnel, i.e. should I be able to see CDP neighbors across the 
 tunnel? For some reason if I encapsulated dot1q on a router sub-interface and 
 try and pass traffic across the trunk the downstream switch port will go into 
 err-disable.
 
 Thx
 
 Philip
 



Time Warner RoadRunner Residental NOC Contact?

2014-01-24 Thread Tom Walsh - EWS
Sorry for the noise, but we are looking for somebody that can help us track
down a single IP address that is seemingly blackholed by TW/RR in a core
somewhere in Atlanta. We have verified that the IP doesn't have any abuse
history and isn't blackholed from our end. Just started this morning.

 

Any assistance is appreciated.

 

Tom Walsh

EWS - ASN53255

 

 

 



---
This email is free from viruses and malware because avast! Antivirus protection 
is active.
http://www.avast.com


AOL Email Blocking

2014-01-24 Thread Robert Webb
A while back I enlisted help for setting up a small email list server. 
It is now complete but only AOL is blocking my outbound email.


Using their tools they did not report my IP as having a bad reputation. 
I applied for white listing my single IP and provided ALL the necessary 
feedback and white listing was denied.


Can anyone here point me to someone to get this fixed. It is a small 
private email list for a local fire department with all consenting 
recipients.


Robert



Weekly Routing Table Report

2014-01-24 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.

The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG,
TRNOG, CaribNOG and the RIPE Routing Working Group.

Daily listings are sent to bgp-st...@lists.apnic.net

For historical data, please see http://thyme.rand.apnic.net.

If you have any comments please contact Philip Smith pfsi...@gmail.com.

Routing Table Report   04:00 +10GMT Sat 25 Jan, 2014

Report Website: http://thyme.rand.apnic.net
Detailed Analysis:  http://thyme.rand.apnic.net/current/

Analysis Summary


BGP routing table entries examined:  479892
Prefixes after maximum aggregation:  190818
Deaggregation factor:  2.51
Unique aggregates announced to Internet: 237486
Total ASes present in the Internet Routing Table: 45998
Prefixes per ASN: 10.43
Origin-only ASes present in the Internet Routing Table:   35541
Origin ASes announcing only one prefix:   16285
Transit ASes present in the Internet Routing Table:6006
Transit-only ASes present in the Internet Routing Table:168
Average AS path length visible in the Internet Routing Table:   4.6
Max AS path length visible:  53
Max AS path prepend of ASN ( 50404)  51
Prefixes from unregistered ASNs in the Routing Table:  2707
Unregistered ASNs in the Routing Table: 648
Number of 32-bit ASNs allocated by the RIRs:   5746
Number of 32-bit ASNs visible in the Routing Table:4451
Prefixes from 32-bit ASNs in the Routing Table:   14112
Number of bogon 32-bit ASNs visible in the Routing Table: 1
Special use prefixes present in the Routing Table:0
Prefixes being announced from unallocated address space:   2018
Number of addresses announced to Internet:   2663146148
Equivalent to 158 /8s, 188 /16s and 98 /24s
Percentage of available address space announced:   71.9
Percentage of allocated address space announced:   71.9
Percentage of available address space allocated:  100.0
Percentage of address space in use by end-sites:   95.4
Total number of prefixes smaller than registry allocations:  166690

APNIC Region Analysis Summary
-

Prefixes being announced by APNIC Region ASes:   114387
Total APNIC prefixes after maximum aggregation:   34391
APNIC Deaggregation factor:3.33
Prefixes being announced from the APNIC address blocks:  116810
Unique aggregates announced from the APNIC address blocks:48876
APNIC Region origin ASes present in the Internet Routing Table:4888
APNIC Prefixes per ASN:   23.90
APNIC Region origin ASes announcing only one prefix:   1224
APNIC Region transit ASes present in the Internet Routing Table:840
Average APNIC Region AS path length visible:4.6
Max APNIC Region AS path length visible: 28
Number of APNIC region 32-bit ASNs visible in the Routing Table:814
Number of APNIC addresses announced to Internet:  729945088
Equivalent to 43 /8s, 130 /16s and 20 /24s
Percentage of available APNIC address space announced: 85.3

APNIC AS Blocks4608-4864, 7467-7722, 9216-10239, 17408-18431
(pre-ERX allocations)  23552-24575, 37888-38911, 45056-46079, 55296-56319,
   58368-59391, 63488-63999, 131072-133631
APNIC Address Blocks 1/8,  14/8,  27/8,  36/8,  39/8,  42/8,  43/8,
49/8,  58/8,  59/8,  60/8,  61/8, 101/8, 103/8,
   106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8,
   116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8,
   123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8,
   163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8,
   203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8,
   222/8, 223/8,

ARIN Region Analysis Summary


Prefixes being announced by ARIN Region ASes:163875
Total ARIN prefixes after maximum aggregation:82068
ARIN Deaggregation factor: 2.00
Prefixes being announced from the ARIN address blocks:   164320
Unique aggregates announced from the ARIN address blocks: 75852
ARIN Region origin ASes present in the Internet Routing Table:15934
ARIN 

Re: AOL Email Blocking

2014-01-24 Thread Franck Martin

On Jan 24, 2014, at 10:14 AM, Robert Webb rw...@ropeguru.com wrote:

 A while back I enlisted help for setting up a small email list server. It is 
 now complete but only AOL is blocking my outbound email.
 
 Using their tools they did not report my IP as having a bad reputation. I 
 applied for white listing my single IP and provided ALL the necessary 
 feedback and white listing was denied.
 
 Can anyone here point me to someone to get this fixed. It is a small private 
 email list for a local fire department with all consenting recipients.
 
What your logs are saying? Have you read the bounces?



signature.asc
Description: Message signed with OpenPGP using GPGMail


Re: AOL Email Blocking

2014-01-24 Thread Robert Webb


On 01/24/2014 01:14 PM, Robert Webb wrote:
A while back I enlisted help for setting up a small email list server. 
It is now complete but only AOL is blocking my outbound email.


Using their tools they did not report my IP as having a bad 
reputation. I applied for white listing my single IP and provided ALL 
the necessary feedback and white listing was denied.


Can anyone here point me to someone to get this fixed. It is a small 
private email list for a local fire department with all consenting 
recipients.


Robert


Thanks to everyone that has responded. The issue has been addressed and 
worked out. For those of you that asked, I was getting the following:


421 DYN:T1

 * The IP address you are sending from has been temporarily rate
   limited due to lack of whitelisting
   http://postmaster.aol.com/Postmaster.Whitelist.php, unexpected
   changes in volume, or poor IP reputation
   http://postmaster.aol.com/Postmaster.Reputation.php.


Robert Webb




Re: AOL Email Blocking

2014-01-24 Thread Rob McEwen
On 1/24/2014 2:53 PM, Robert Webb wrote:
 A while back I enlisted help for setting up a small email list server.
 It is now complete but only AOL is blocking my outbound email. 


Send me your IP (off list if desired) and I'll evaluate it and possibly
provide some feedback that may be helpful!

-- 
Rob McEwen
http://dnsbl.invaluement.com/
r...@invaluement.com
+1 (478) 475-9032




Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
Given how much traffic these days is CDN and streaming, is that number
really supportable?

http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet

Cheers,
-- jra

-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Michael Smith

On Jan 24, 2014, at 12:08 PM, Jay Ashworth j...@baylink.com wrote:

 Given how much traffic these days is CDN and streaming, is that number
 really supportable?
 
 http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet
 

http://www.seattleix.net/agg.htm
http://www.torix.ca/stats.php

Obviously not definitive, but I don't see a massive drop in traffic during the 
outage, at least on the two public exchanges listed above.  

It would be interesting to see if there was a concurrent increase in traffic to 
other sites (Facebook, Yahoo, etc.) while people couldn't check their email.

Mike




Re: Google causes 40% drop in traffic?

2014-01-24 Thread Stefan Neufeind
On 01/24/2014 09:08 PM, Jay Ashworth wrote:
 Given how much traffic these days is CDN and streaming, is that number
 really supportable?
 
 http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet

In the interview they are saying that if Google is down, lots of people
don't have DNS anymore. So that accounts for an even larger drop than
just no Youtube. Hmm - why would people use those resolvers, besides
being lazy in configuring a proper resolver-address.

Of course if Google is down we have no Google search (well, might be a
problem in some cases), no Gmail etc. (fine with me) and no Youtube
(hmm, but we'll survive without it). Come on ...

If the average user is *so* dependent on Google, we have an even larger
problem. Maybe like IPv6-day etc. lets try a Google outage day once a
year as a training :-)


Regards,
 Stefan



RE: OSPF Costs Formula that include delay.

2014-01-24 Thread Erik Sundberg
I understand OSPF default calculation for cost doesn't include delay. I am 
looking for a formula that I can use to manually set the OSPF costs that 
factors in delay.

When using OSPF's default costs, the shortest path is not always the optimal 
path.


Example

New York to Los Angeles. Assuming all links are the same bandwidth and have a 
ospf cost of 1.

Path 1 (75ms) - OSPF Cost 2 - New York  Dallas  Los Angeles

Path 2 (65ms) - OSPF Cost 3 - New York  Chicago  Denver  Los Angeles

If I left the default cost's alone then path 1 would win because it has a lower 
ospf cost, however it take traffic 10ms longer to get there.

However I would like traffic to take Path 2 by adjusting the OSPF cost.


I am looking for a formula that other people are using .p

Thanks

Erik


-Original Message-
From: Randy [mailto:randy_94...@yahoo.com]
Sent: Thursday, January 23, 2014 9:03 PM
To: Erik Sundberg; nanog@nanog.org
Subject: Re: OSPF Costs Formula that include delay.



- Original Message -
 From: Erik Sundberg esundb...@nitelusa.com
 To: nanog@nanog.org nanog@nanog.org
 Cc:
 Sent: Thursday, January 23, 2014 4:47 PM
 Subject: OSPF Costs Formula that include delay.

 What is everyone using for an OSPF cost formula that factors in a
 circuits delay and bandwidth (10M-100G)???

 Thanks in advance



umm..are you sure your question is not about EIGRP?
OSPF has no concept of interface-delays.

The default reference bandwidth for OSPF is 100M

In your case if you set your reference bandwidth to 10 your 100G links 
would have a link cost of 1, 10G - 10, 1G-100, 100M-1000 and 10M-1

A vendor specific list would be a better place to ask.


./Randy



CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Jay Ashworth j...@baylink.com

 http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet

It's just been pointed out to me that, even though Marketplace just posted
the link to that piece, the dateline is from August.  My apologies for 
not noticing.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Christopher Morrow
On Fri, Jan 24, 2014 at 3:22 PM, Stefan Neufeind
na...@stefan-neufeind.de wrote:

 In the interview they are saying that if Google is down, lots of people
 don't have DNS anymore. So that accounts for an even larger drop than
 just no Youtube. Hmm - why would people use those resolvers, besides
 being lazy in configuring a proper resolver-address.

it's a bit perjorative to say 'lazy' isn't it? what if your ISP does
monkey business with nxdomain or other requests? would you like it
better if people used opendns? or 4.2.2.2? (a non-sla service from a
fourth party...)

I'm a fan of my own resolver, but not everyone has a dns resolver in
they back pocket, right?



Re: OSPF Costs Formula that include delay.

2014-01-24 Thread Owen DeLong
Some networks I have worked with took the average latency of each link and 
assigned that (with some constant multiple) as the interface cost.

Of course this all fails miserably if you are using anything like MPLS 
underneath your OSPF.

Owen

On Jan 24, 2014, at 12:26 PM, Erik Sundberg esundb...@nitelusa.com wrote:

 I understand OSPF default calculation for cost doesn't include delay. I am 
 looking for a formula that I can use to manually set the OSPF costs that 
 factors in delay.
 
 When using OSPF's default costs, the shortest path is not always the optimal 
 path.
 
 
 Example
 
 New York to Los Angeles. Assuming all links are the same bandwidth and have a 
 ospf cost of 1.
 
 Path 1 (75ms) - OSPF Cost 2 - New York  Dallas  Los Angeles
 
 Path 2 (65ms) - OSPF Cost 3 - New York  Chicago  Denver  Los Angeles
 
 If I left the default cost's alone then path 1 would win because it has a 
 lower ospf cost, however it take traffic 10ms longer to get there.
 
 However I would like traffic to take Path 2 by adjusting the OSPF cost.
 
 
 I am looking for a formula that other people are using .p
 
 Thanks
 
 Erik
 
 
 -Original Message-
 From: Randy [mailto:randy_94...@yahoo.com]
 Sent: Thursday, January 23, 2014 9:03 PM
 To: Erik Sundberg; nanog@nanog.org
 Subject: Re: OSPF Costs Formula that include delay.
 
 
 
 - Original Message -
 From: Erik Sundberg esundb...@nitelusa.com
 To: nanog@nanog.org nanog@nanog.org
 Cc:
 Sent: Thursday, January 23, 2014 4:47 PM
 Subject: OSPF Costs Formula that include delay.
 
 What is everyone using for an OSPF cost formula that factors in a
 circuits delay and bandwidth (10M-100G)???
 
 Thanks in advance
 
 
 
 umm..are you sure your question is not about EIGRP?
 OSPF has no concept of interface-delays.
 
 The default reference bandwidth for OSPF is 100M
 
 In your case if you set your reference bandwidth to 10 your 100G links 
 would have a link cost of 1, 10G - 10, 1G-100, 100M-1000 and 10M-1
 
 A vendor specific list would be a better place to ask.
 
 
 ./Randy
 
 
 
 CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
 previous e-mail messages attached to it may contain confidential information 
 that is legally privileged. If you are not the intended recipient, or a 
 person responsible for delivering it to the intended recipient, you are 
 hereby notified that any disclosure, copying, distribution or use of any of 
 the information contained in or attached to this transmission is STRICTLY 
 PROHIBITED. If you have received this transmission in error please notify the 
 sender immediately by replying to this e-mail. You must destroy the original 
 transmission and its attachments without reading or saving in any manner. 
 Thank you.




Re: Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Stefan Neufeind na...@stefan-neufeind.de

 On 01/24/2014 09:08 PM, Jay Ashworth wrote:
  Given how much traffic these days is CDN and streaming, is that
  number really supportable?
 
  http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet
 
 In the interview they are saying that if Google is down, lots of people
 don't have DNS anymore. So that accounts for an even larger drop than
 just no Youtube. Hmm - why would people use those resolvers, besides
 being lazy in configuring a proper resolver-address.

The amount of fun I had before I discovered ipconfig /flushdns suggests
to me that that's not really a supportable argument.

 Of course if Google is down we have no Google search (well, might be a
 problem in some cases), no Gmail etc. (fine with me) and no Youtube
 (hmm, but we'll survive without it). Come on ...
 
 If the average user is *so* dependent on Google, we have an even larger
 problem. Maybe like IPv6-day etc. lets try a Google outage day once
 a year as a training :-)

We just did; weren't you paying attention?  :-)

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Shrdlu

On 1/24/2014 12:31 PM, Jay Ashworth wrote:

- Original Message -

From: Jay Ashworthj...@baylink.com



http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet


It's just been pointed out to me that, even though Marketplace just posted
the link to that piece, the dateline is from August.  My apologies for
not noticing.


You sure? I think that there is an actual outage, unrelated to the
article you'd posted.

http://techcrunch.com/2014/01/24/gmail-glitch-is-causing-thousands-of-emails-to-be-sent-to-one-mans-hotmail-account/

Of course, I could be wrong. I've been wrong before.

--
Reality is that which, when you stop believing in it, doesn't go away.

How To Build A Universe That Doesn't Fall Apart Two Days Later
  Philip K. Dick (1928–1982)





RE: OSPF Costs Formula that include delay.

2014-01-24 Thread Raymond Burkholder
 
 Some networks I have worked with took the average latency of each link and
 assigned that (with some constant multiple) as the interface cost.
 
 Of course this all fails miserably if you are using anything like MPLS
 underneath your OSPF.
 

But then when using MPLS underneath, then MPLS Traffic Engineering can be
used to do some interesting path computations and resiliency configurations.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.




Re: Google causes 40% drop in traffic?

2014-01-24 Thread Valdis . Kletnieks
On Fri, 24 Jan 2014 21:22:58 +0100, Stefan Neufeind said:

 just no Youtube. Hmm - why would people use those resolvers, besides
 being lazy in configuring a proper resolver-address.

A lot of people make value judgements on the relative likelyhood of finding
evil in DNS packets coming from 8.8.8.8 versus DNS packets coming from the
IP address handed to you in the DHCP reply


pgpJSzS85ctVB.pgp
Description: PGP signature


Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Alain Hebert
Hi,

Well the abusers started to use burst and then switching targeted IP.

Last time I opened a ticket with GT-T/nLayer for a ~120Mbps NTP DDoS
Amplification attempt toward 2 of my IP's.

. after 2h, I called them directly to be told they lost my
original request;

. after 4h, got told it wasn't assigned yet;

. after 12h, they finally applied the filter as the amp attempt
stopped;

Based on that experience... why bother.

To give you an idea, in the past 4 days and 30m queries, I'm up to
1100 blocked targets on one of my DNS Servers.

-
Alain Hebertaheb...@pubnix.net   
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443

On 01/24/14 09:36, Jared Mauch wrote:
 On Jan 24, 2014, at 9:22 AM, Alain Hebert aheb...@pubnix.net wrote:

Is there a [Spoofing Tracking Squad] out there?
( We're on GT-T/nLayer/Tinet )
 You haven’t been able to get GTT/nLayer/TINet to track the traffic back?

 Details are welcome, either here or in private.  There are plenty of people 
 who will chase and fix this stuff when they’re aware of it.

 - Jared





Re: Google causes 40% drop in traffic?

2014-01-24 Thread Gabriel Blanchard

On 14-01-24 03:40 PM, Shrdlu wrote:
 On 1/24/2014 12:31 PM, Jay Ashworth wrote:
 - Original Message -
 From: Jay Ashworthj...@baylink.com

 http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet


 It's just been pointed out to me that, even though Marketplace just
 posted
 the link to that piece, the dateline is from August.  My apologies for
 not noticing.

 You sure? I think that there is an actual outage, unrelated to the
 article you'd posted.

 http://techcrunch.com/2014/01/24/gmail-glitch-is-causing-thousands-of-emails-to-be-sent-to-one-mans-hotmail-account/


 Of course, I could be wrong. I've been wrong before.


Actual source

http://www.google.com/appsstatus#hl=env=status

-Gabe



Re: OSPF Costs Formula that include delay.

2014-01-24 Thread Jeff Tantsura
Eric,

Issues:

1.OSPF (SPF) can only produce a SPT based on cost (metric).
Anything else would require CSPF rather than SPF.


2. Delay is not distributed as part of an IGP update
Typical constrains distributed are: bandwidth, color, some others

In IETF we are working to also be able to distribute those kinds of
metrics (draft-ietf-ospf/isis-te-metric-extensions)
draft-ietf-mpls-te-express-path defines how to use these metrics for
RSVP-TE (computation result is an ERO) however theoretically nothing
precludes one (implementation) to use those  for more comprehensive
computation, i.e. delay could be taken into consideration as long as the
path is loop free. So it would look like - compute all loop free paths to
a destination and then choose one with the smallest cumulative delay.

BTW - segment routing will give you this functionality day one :)


Cheers,
Jeff


-Original Message-
From: Erik Sundberg esundb...@nitelusa.com
Date: Friday, January 24, 2014 12:26 PM
To: Randy randy_94...@yahoo.com, nanog@nanog.org nanog@nanog.org
Subject: RE: OSPF Costs Formula that include delay.

I understand OSPF default calculation for cost doesn't include delay. I
am looking for a formula that I can use to manually set the OSPF costs
that factors in delay.

When using OSPF's default costs, the shortest path is not always the
optimal path.


Example

New York to Los Angeles. Assuming all links are the same bandwidth and
have a ospf cost of 1.

Path 1 (75ms) - OSPF Cost 2 - New York  Dallas  Los Angeles

Path 2 (65ms) - OSPF Cost 3 - New York  Chicago  Denver  Los Angeles

If I left the default cost's alone then path 1 would win because it has a
lower ospf cost, however it take traffic 10ms longer to get there.

However I would like traffic to take Path 2 by adjusting the OSPF cost.


I am looking for a formula that other people are using .p

Thanks

Erik


-Original Message-
From: Randy [mailto:randy_94...@yahoo.com]
Sent: Thursday, January 23, 2014 9:03 PM
To: Erik Sundberg; nanog@nanog.org
Subject: Re: OSPF Costs Formula that include delay.



- Original Message -
 From: Erik Sundberg esundb...@nitelusa.com
 To: nanog@nanog.org nanog@nanog.org
 Cc:
 Sent: Thursday, January 23, 2014 4:47 PM
 Subject: OSPF Costs Formula that include delay.

 What is everyone using for an OSPF cost formula that factors in a
 circuits delay and bandwidth (10M-100G)???

 Thanks in advance



umm..are you sure your question is not about EIGRP?
OSPF has no concept of interface-delays.

The default reference bandwidth for OSPF is 100M

In your case if you set your reference bandwidth to 10 your 100G
links would have a link cost of 1, 10G - 10, 1G-100, 100M-1000 and
10M-1

A vendor specific list would be a better place to ask.


./Randy



CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents,
files or previous e-mail messages attached to it may contain confidential
information that is legally privileged. If you are not the intended
recipient, or a person responsible for delivering it to the intended
recipient, you are hereby notified that any disclosure, copying,
distribution or use of any of the information contained in or attached to
this transmission is STRICTLY PROHIBITED. If you have received this
transmission in error please notify the sender immediately by replying to
this e-mail. You must destroy the original transmission and its
attachments without reading or saving in any manner. Thank you.





Opensource tools for inventory and troubleticketing

2014-01-24 Thread Octavio Alfageme
Hello everyone,

I work for a small service provider starting to offer MPLS services between
Europe and several african countries. At present time we own a small Cisco
network, but we are starting to need a better inventory of services and network
resources and better troubleticketing procedures. We can not afford acquiring
complicated and expensive tools at present time.I would be grateful if you could
recommend me opensource tools to cover these needs.

Thanks in advance

Kind regards

Octavio


Re: AOL Email Blocking

2014-01-24 Thread Vishwanath Subramanian
Robert,

Please email me the details. Also please provide the ticket number for 
investigation. Thanks.


Vish Subramanian
AOL Mail Postmaster Operations

 

 

 

-Original Message-
From: Robert Webb rw...@ropeguru.com
To: nanog nanog@nanog.org
Sent: Fri, Jan 24, 2014 1:17 pm
Subject: AOL Email Blocking


A while back I enlisted help for setting up a small email list server. 
It is now complete but only AOL is blocking my outbound email.

Using their tools they did not report my IP as having a bad reputation. 
I applied for white listing my single IP and provided ALL the necessary 
feedback and white listing was denied.

Can anyone here point me to someone to get this fixed. It is a small 
private email list for a local fire department with all consenting 
recipients.

Robert


 


Re: OSPF Costs Formula that include delay.

2014-01-24 Thread Owen DeLong

On Jan 24, 2014, at 12:41 PM, Raymond Burkholder r...@oneunified.net wrote:

 
 Some networks I have worked with took the average latency of each link and
 assigned that (with some constant multiple) as the interface cost.
 
 Of course this all fails miserably if you are using anything like MPLS
 underneath your OSPF.
 
 
 But then when using MPLS underneath, then MPLS Traffic Engineering can be
 used to do some interesting path computations and resiliency configurations.

I wasn’t attempting to promote or discourage use of MPLS. I was merely 
endeavoring to point out that in an MPLS world, OSPF costs are not how you want 
to manage your traffic.

Owen




Re: Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Shrdlu shr...@deaddrop.org

 You sure? I think that there is an actual outage, unrelated to the
 article you'd posted.
 
 http://techcrunch.com/2014/01/24/gmail-glitch-is-causing-thousands-of-emails-to-be-sent-to-one-mans-hotmail-account/

There was an outage today, and that was why Marketplace linked their
piece on Facebook, which is where I saw, it, but the piece was not about
today's outage.

I was mislead, because there were 2 or 3 other pieces in the tech press
already in other places that *were* about today's outage.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: Opensource tools for inventory and troubleticketing

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Octavio Alfageme palae...@palaemon.es

  we are starting to need a better inventory of services and network
 resources and better troubleticketing procedures. We can not afford acquiring
 complicated and expensive tools at present time.I would be grateful if
 you could recommend me opensource tools to cover these needs.

Yeah, it was about time for this thread again.

My networks are smaller than yours, but I have found that you can stretch
Bugzilla a lot farther as a ticketing system than it's software development
roots might suggest.  It handles workflow, to a degree, and is pretty easy
to learn.

If you can't, RT is pretty nice, though quite a bit more complex.  It used
to have an asset tracking snap-on, but I don't know what the status of that
is now that the main package has revved to 4.0.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: About ddos-respo...@nfoservers.com

2014-01-24 Thread Christopher Morrow
On Fri, Jan 24, 2014 at 3:50 PM, Alain Hebert aheb...@pubnix.net wrote:
 Hi,

 Well the abusers started to use burst and then switching targeted IP.

 Last time I opened a ticket with GT-T/nLayer for a ~120Mbps NTP DDoS
 Amplification attempt toward 2 of my IP's.

 . after 2h, I called them directly to be told they lost my
 original request;

 . after 4h, got told it wasn't assigned yet;

 . after 12h, they finally applied the filter as the amp attempt
 stopped;

 Based on that experience... why bother.

there are providers that have services to stop this sort of thing,
there is at least one provider that does that stuff for free... you
could vote with your wallet, of course.

 To give you an idea, in the past 4 days and 30m queries, I'm up to
 1100 blocked targets on one of my DNS Servers.

that's a bummer.



The Cidr Report

2014-01-24 Thread cidr-report
This report has been generated at Fri Jan 24 21:13:35 2014 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org/2.0 for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
17-01-14489707  274073
18-01-14489328  274221
19-01-14489528  274495
20-01-14489868  274381
21-01-14490079  274474
22-01-14490317  274692
23-01-14489912  274919
24-01-14490385  275014


AS Summary
 46141  Number of ASes in routing system
 18935  Number of ASes announcing only one prefix
  4428  Largest number of prefixes announced by an AS
AS7029 : WINDSTREAM - Windstream Communications Inc
  119231744  Largest address span announced by an AS (/32s)
AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 24Jan14 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 491049   275037   21601244.0%   All ASes

AS28573 3327   83 324497.5%   NET Serviços de Comunicação
   S.A.
AS6389  3028   56 297298.2%   BELLSOUTH-NET-BLK -
   BellSouth.net Inc.
AS7029  4428 1671 275762.3%   WINDSTREAM - Windstream
   Communications Inc
AS17974 2736  181 255593.4%   TELKOMNET-AS2-AP PT
   Telekomunikasi Indonesia
AS22773 2327  194 213391.7%   ASN-CXA-ALL-CCI-22773-RDC -
   Cox Communications Inc.
AS4766  2937  960 197767.3%   KIXS-AS-KR Korea Telecom
AS1785  2154  404 175081.2%   AS-PAETEC-NET - PaeTec
   Communications, Inc.
AS18881 1833   90 174395.1%   Global Village Telecom
AS36998 1810   97 171394.6%   SDN-MOBITEL
AS10620 2686 1104 158258.9%   Telmex Colombia S.A.
AS18566 2047  565 148272.4%   MEGAPATH5-US - MegaPath
   Corporation
AS4323  2944 1513 143148.6%   TWTC - tw telecom holdings,
   inc.
AS7303  1744  451 129374.1%   Telecom Argentina S.A.
AS4755  1828  603 122567.0%   TATACOMM-AS TATA
   Communications formerly VSNL
   is Leading ISP
AS7545  2152  989 116354.0%   TPG-INTERNET-AP TPG Telecom
   Limited
AS7552  1260  156 110487.6%   VIETEL-AS-AP Viettel
   Corporation
AS22561 1261  227 103482.0%   AS22561 - CenturyTel Internet
   Holdings, Inc.
AS9829  1591  678  91357.4%   BSNL-NIB National Internet
   Backbone
AS18101  990  184  80681.4%   RELIANCE-COMMUNICATIONS-IN
   Reliance Communications
   Ltd.DAKC MUMBAI
AS35908  903  103  80088.6%   VPLSNET - Krypt Technologies
AS4808  1172  387  78567.0%   CHINA169-BJ CNCGROUP IP
   network China169 Beijing
   Province Network
AS17908  834   57  77793.2%   TCISL Tata Communications
AS701   1499  768  73148.8%   UUNET - MCI Communications
   Services, Inc. d/b/a Verizon
   Business
AS24560 1093  369  72466.2%   AIRTELBROADBAND-AS-AP Bharti
   Airtel Ltd., Telemedia
   Services
AS8151  1384  662  72252.2%   Uninet S.A. de C.V.
AS6983  1295  581  71455.1%   ITCDELTA - ITC^Deltacom
AS13977  856  145  71183.1%   CTELCO - FAIRPOINT
   COMMUNICATIONS, INC.
AS7738   847  150  69782.3%   Telemar Norte Leste S.A.
AS4788   930  237  69374.5%   TMNET-AS-AP TM Net, Internet
   Service Provider
AS855745   56 

BGP Update Report

2014-01-24 Thread cidr-report
BGP Update Report
Interval: 16-Jan-14 -to- 23-Jan-14 (7 days)
Observation Point: BGP Peering with AS131072

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS14420   44341  2.2% 183.2 -- CORPORACION NACIONAL DE 
TELECOMUNICACIONES - CNT EP
 2 - AS840232997  1.6%  16.7 -- CORBINA-AS OJSC Vimpelcom
 3 - AS24560   23921  1.2%  23.3 -- AIRTELBROADBAND-AS-AP Bharti 
Airtel Ltd., Telemedia Services
 4 - AS13118   23897  1.2% 543.1 -- ASN-YARTELECOM OJSC Rostelecom
 5 - AS982923469  1.2%  33.5 -- BSNL-NIB National Internet 
Backbone
 6 - AS35181   23126  1.1%1927.2 -- PWC Autonomous System Number 
for Public WareHouse Company
 7 - AS929921287  1.1%  58.5 -- IPG-AS-AP Philippine Long 
Distance Telephone Company
 8 - AS671319155  0.9%  34.1 -- IAM-AS
 9 - AS477517805  0.9% 195.7 -- GLOBE-TELECOM-AS Globe Telecoms
10 - AS41691   17692  0.9% 491.4 -- SUMTEL-AS-RIPE Summa Telecom LLC
11 - AS45899   16871  0.8%  52.2 -- VNPT-AS-VN VNPT Corp
12 - AS14287   15745  0.8%2624.2 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
13 - AS949815070  0.8%  19.5 -- BBIL-AP BHARTI Airtel Ltd.
14 - AS59217   14853  0.7%   14853.0 -- AZONNELIMITED-AS-AP Azonne 
Limited
15 - AS27947   14493  0.7%  40.6 -- Telconet S.A
16 - AS27738   13784  0.7%  23.9 -- Ecuadortelecom S.A.
17 - AS28573   12948  0.6%  10.1 -- NET Serviços de Comunicação S.A.
18 - AS11976   12381  0.6% 229.3 -- FIDN - Fidelity Communication 
International Inc.
19 - AS62904   11220  0.6% 127.5 -- SERVERHUB-DALLAS - Eonix 
Corporation
20 - AS17557   10983  0.6% 439.3 -- PKTELECOM-AS-PK Pakistan 
Telecommunication Company Limited


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS59217   14853  0.7%   14853.0 -- AZONNELIMITED-AS-AP Azonne 
Limited
 2 - AS129226592  0.3%6592.0 -- MULTITRADE-AS CEDACRI S.P.A.
 3 - AS304374406  0.2%4406.0 -- GE-MS003 - General Electric 
Company
 4 - AS6629 8683  0.4%4341.5 -- NOAA-AS - NOAA
 5 - AS7202 8596  0.4%4298.0 -- FAMU - Florida A  M University
 6 - AS194063584  0.2%3584.0 -- TWRS-MA - Towerstream I, Inc.
 7 - AS165613433  0.2%3433.0 -- ARIBANETWORK Ariba Inc. 
Autonomous System
 8 - AS544658743  0.4%2914.3 -- QPM-AS-1 - QuickPlay Media Inc.
 9 - AS14287   15745  0.8%2624.2 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
10 - AS624312181  0.1%2181.0 -- NCSC-IE-AS National Cyber 
Security Centre
11 - AS627512082  0.1%2082.0 -- HSAUWC-AS - HSA-UWC
12 - AS35181   23126  1.1%1927.2 -- PWC Autonomous System Number 
for Public WareHouse Company
13 - AS115331653  0.1%1653.0 -- VERITY-AS - Verity, Inc.
14 - AS7247 1575  0.1%1575.0 -- MOJO - Mojo Networks
15 - AS398102830  0.1%1415.0 -- UA-WICOM The national operator 
of wireless communication WiMAX-Ukraine
16 - AS518611215  0.1%1215.0 -- SHARED-AS Eric Dorr
17 - AS325287276  0.4% 909.5 -- ABBOTT Abbot Labs
18 - AS458062454  0.1% 818.0 -- SCB-TH-AS-AP Siam Commercial 
Bank
19 - AS110549474  0.5% 789.5 -- LIVEPERSON LivePerson, Inc
20 - AS23295 781  0.0% 781.0 -- EA-01 - Extend America


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 109.161.64.0/20   23680  1.1%   AS13118 -- ASN-YARTELECOM OJSC Rostelecom
 2 - 85.239.28.0/2423096  1.1%   AS35181 -- PWC Autonomous System Number 
for Public WareHouse Company
 3 - 103.243.164.0/22  14853  0.7%   AS59217 -- AZONNELIMITED-AS-AP Azonne 
Limited
 4 - 89.221.206.0/24   10364  0.5%   AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC
 5 - 206.152.15.0/248731  0.4%   AS54465 -- QPM-AS-1 - QuickPlay Media Inc.
 6 - 120.28.62.0/24 8726  0.4%   AS4775  -- GLOBE-TELECOM-AS Globe Telecoms
 7 - 222.127.0.0/24 8711  0.4%   AS4775  -- GLOBE-TELECOM-AS Globe Telecoms
 8 - 192.58.232.0/248681  0.4%   AS6629  -- NOAA-AS - NOAA
 9 - 85.249.160.0/207121  0.3%   AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC
10 - 216.109.107.0/24   6866  0.3%   AS11486 -- COLO-PREM-VZB - Verizon Online 
LLC
 AS16561 -- ARIBANETWORK Ariba Inc. 
Autonomous System
11 - 67.210.190.0/236780  0.3%   AS11976 -- FIDN - Fidelity Communication 
International Inc.
12 - 194.105.61.0/246592  0.3%   AS12922 -- MULTITRADE-AS CEDACRI S.P.A.
13 - 67.210.188.0/235446  0.2%   AS11976 -- FIDN - Fidelity Communication 
International Inc.
14 - 199.187.118.0/24   4741  0.2%   AS11054 -- LIVEPERSON LivePerson, Inc
15 - 165.156.25.0/244406  0.2%   AS30437 -- 

Re: Google causes 40% drop in traffic?

2014-01-24 Thread Stefan Neufeind
On 01/24/2014 09:46 PM, valdis.kletni...@vt.edu wrote:
 On Fri, 24 Jan 2014 21:22:58 +0100, Stefan Neufeind said:
 
 just no Youtube. Hmm - why would people use those resolvers, besides
 being lazy in configuring a proper resolver-address.
 
 A lot of people make value judgements on the relative likelyhood of finding
 evil in DNS packets coming from 8.8.8.8 versus DNS packets coming from the
 IP address handed to you in the DHCP reply

If it's just some DNS your provider hands out, I agree it's not much
better as well. (But you might possibly assume your provider has less
interst to spy on all your emails, your dns-queries and the like.)
What imho you'll want is a reliable resolver which is as close to you as
possible (and have it do DNSSEC-validation etc.).


Regards,
 Stefan



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Stefan Neufeind na...@stefan-neufeind.de

 If it's just some DNS your provider hands out, I agree it's not much
 better as well. (But you might possibly assume your provider has less
 interst to spy on all your emails, your dns-queries and the like.)

You might assume that, I wouldn't.  If your access provider is a commercial
eyeball network like, say, Road Runner or Comcast, then there is, I believe,
evidence that they do DPI and possibly even ad injection, in addition to
playing NXDOMAIN games.

 What imho you'll want is a reliable resolver which is as close to you
 as possible (and have it do DNSSEC-validation etc.).

Sure; everyone should have their recursing resolver at the edge of their
network.  But most consumers don't.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Scott Howard
There was a lot of discussion about this figure back in August when the
relevant outage occurred.

From memory, a large percentage of the traffic drop was from other sites
breaking as a result of Google not being available. ie, a site completely
unrelated to Google, potentially being served by a CDN, that was using
Google Analytics on every page could fail to load and/or load/render slower
as a result of the specific outage that Google had at the time.  This
resulted in a traffic drop for far more traffic than just that sourced from
Google.

A non-trivial percentage of the Internet is in some way or other dependent
on things like Google Analytics/maps/etc, Facebook likes, Twitter recent
tweets, etc, such that if any of those services are not available the site
fails to load, either correctly or sometimes at all. The same is true in
many causes for javascript/etc libraries being loaded from 3rd party sites
like Google.

  Scott



On Fri, Jan 24, 2014 at 3:08 PM, Jay Ashworth j...@baylink.com wrote:

 Given how much traffic these days is CDN and streaming, is that number
 really supportable?

 http://www.marketplace.org/topics/tech/down-goes-google-down-goes-internet

 Cheers,
 -- jra

 --
 Jay R. Ashworth  Baylink
 j...@baylink.com
 Designer The Things I Think   RFC
 2100
 Ashworth  Associates   http://www.bcp38.info  2000 Land
 Rover DII
 St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647
 1274




Re: Google causes 40% drop in traffic?

2014-01-24 Thread Christopher Morrow
On Fri, Jan 24, 2014 at 5:23 PM, Stefan Neufeind
na...@stefan-neufeind.de wrote:
 interst to spy on all your emails, your dns-queries and the like.)

FUD much? have you read the public-dns ToS and privacy statements?

if you haven't you might want to:
https://developers.google.com/speed/public-dns/privacy

 What imho you'll want is a reliable resolver which is as close to you as
 possible (and have it do DNSSEC-validation etc.).

you might also want to read:
http://googleonlinesecurity.blogspot.com/2013/03/google-public-dns-now-supports-dnssec.html

and for some (quite a few) users of 8.8.8.8 it's faster and closer
than their ISP dns... which says something about the ISP provided DNS
server(s) I suppose :( It's certainly not the answer for everyone, or
everything, but shrugging it off for FUD reasons is just silly and
makes little sense.

-chris



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Jay Ashworth
- Original Message -
 From: Scott Howard sc...@doc.net.au

 A non-trivial percentage of the Internet is in some way or other dependent
 on things like Google Analytics/maps/etc, Facebook likes, Twitter recent
 tweets, etc, such that if any of those services are not available the site
 fails to load, either correctly or sometimes at all. The same is true in
 many causes for javascript/etc libraries being loaded from 3rd party sites
 like Google.

I wonder what percentage of large website operators whose site designs
have such external dependencies have had it occur to them to include those
external services in their monitoring systems?

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates   http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274



Re: OSPF Costs Formula that include delay.

2014-01-24 Thread Jimmy Hess
On Fri, Jan 24, 2014 at 2:58 PM, Jeff Tantsura
jeff.tants...@ericsson.comwrote:

 Eric,
 Issues:
 1.OSPF (SPF) can only produce a SPT based on cost (metric).
 Anything else would require CSPF rather than SPF.


A CSPF based protocol would be a suitable algorithm for adding hard
constraints, instead of preference, such as path delay must be less than X,
 instead of just a weight for each edge of the graph.

However,  if you like:  you can  use a manually set cost for every link
---   manually figure a weight based on bandwidth or delay at ideal
utilization (but not both  delay and bandwidth simultaneously).

For example,  if you equate cost to delay,  then you might decide that the
greatest delay any path through your AS/routing domain should ever see,
from any pair of routers end-to-end  is 120 milliseconds.

Then you can scribble that down,  and figure out  what fraction of  120ms
 the  delay for every IGP link is, under ideal conditions,  to set your
weight to the corresponding fraction of your chosen maximum weight.

Then decide on a reference scale, for example: 100%  =   cost of  16384
Within that model, a link with 120 milliseconds delay,   traversing that
link costs 16384.
Traversing a link with 10 milliseconds delay should have cost 1366, etc.

Over multiple hops, the costs will then sum together, to give delay under
idealized conditions.


 2. Delay is not distributed as part of an IGP update

 Typical constrains distributed are: bandwidth, color, some others

 [snip]



 RSVP-TE (computation result is an ERO) however theoretically nothing
 precludes one (implementation) to use those  for more comprehensive
 computation, i.e. delay could be taken into consideration as long as the
 path is loop free. So it would look like - compute all loop free paths to
 a destination and then choose one with the smallest cumulative delay.


What I would like to see is dynamic computation of Delay and Utilization.

Instead of merely  choose the one with the smallest cumulative delay -
choose the one with the smallest  cumulative delay,   BUT,   offer load
balancing over the N  lowest delay links  in proportion to the available
utilization.

For instance...  if one of the paths has a link somewhere in it is that
 90% congested, load balance unequally, and send a majority of packets over
the  path with the maximum 25%  utilization,  that has less than 10% in
additional delay.



BTW - segment routing will give you this functionality day one :)

 Cheers,
 Jeff


--
-JH


Re: Opensource tools for inventory and troubleticketing

2014-01-24 Thread Mike
On 14-01-24 05:22 PM, Jay Ashworth wrote:
 If you can't, RT is pretty nice, though quite a bit more complex.  It used
 to have an asset tracking snap-on, but I don't know what the status of that
 is now that the main package has revved to 4.0.


+1 on RT being awesome, but a little daunting to set up. like so many
things, it's easy once you know how.

Asset tracking of network-enabled devices can be done with netdot very
nicely, as long as the devices implement SNMP properly.

-- 
Looking for (employment|contract) work in the
Internet industry, preferably working remotely. 
Building / Supporting the net since 2400 baud was
the hot thing. Ask for a resume! ispbuil...@gmail.com




Re: Opensource tools for inventory and troubleticketing

2014-01-24 Thread Franck Martin

On Jan 24, 2014, at 1:37 AM, Octavio Alfageme palae...@palaemon.es wrote:

 Hello everyone,
 
 I work for a small service provider starting to offer MPLS services between
 Europe and several african countries. At present time we own a small Cisco
 network, but we are starting to need a better inventory of services and 
 network
 resources and better troubleticketing procedures. We can not afford acquiring
 complicated and expensive tools at present time.I would be grateful if you 
 could
 recommend me opensource tools to cover these needs.
 

try https://abusehq.abusix.com/ or http://wordtothewise.com/products/abacus.html



signature.asc
Description: Message signed with OpenPGP using GPGMail


Charter routing issues

2014-01-24 Thread Cody Rose

Hello,

Can someone from Charter Communications enlighten us to if you are 
having any issues or reach out to me directly.


We are seeing some interesting traceroutes from St. Louis, Mo to St. 
Louis Charter customers via Level3, Qwest, or Cogent. Packets are being 
sent all over resulting in traceroutes 20 hops long.


We are also seeing high latency between Qwest  to XO for some routes.

1184.175.64.225  (184.175.64.225) 0.267 ms 0.241 ms 0.419 ms
2 172.23.27.2 (172.23.27.2) 30.195 ms 30.184 ms 30.176 ms
3 te-8-3.car1.StLouis1.Level3.net (4.53.161.53) 0.784 ms 0.782 ms 0.923 ms
4 ae-6-6.ebr2.Denver1.Level3.net (4.69.132.182) 33.222 ms 33.314 ms 
33.295 ms
5 ae-1-100.ebr1.Denver1.Level3.net (4.69.151.181) 33.401 ms 33.358 ms 
33.361 ms
6 ae-2-2.ebr2.Dallas1.Level3.net (4.69.132.106) 33.181 ms 32.876 ms 
32.874 ms
7 ae-82-82.csw3.Dallas1.Level3.net (4.69.151.153) 32.871 ms 
ae-92-92.csw4.Dallas1.Level3.net (4.69.151.165) 33.111 ms 
ae-72-72.csw2.Dallas1.Level3.net (4.69.151.141) 33.600 ms
8 ae-2-70.edge2.Dallas1.Level3.net (4.69.145.75) 33.047 ms 
ae-1-60.edge2.Dallas1.Level3.net (4.69.145.11) 32.879 ms 33.072 ms
9 CHARTER-COM.edge2.Dallas1.Level3.net (4.71.220.254) 34.095 ms 
CHARTER-COM.edge2.Dallas1.Level3.net (4.71.221.34) 32.178 ms 
CHARTER-COM.edge2.Dallas1.Level3.net (4.71.221.58) 35.925 ms
10 dtr01ovldmo-bue-4.ovld.mo.charter.com (96.34.2.19) 30.266 ms 30.263 
ms 30.546 ms
11 crr01ovldmo-bue-100.ovld.mo.charter.com (96.34.49.220) 30.347 ms 
30.563 ms 30.151 ms
12 crr02rxnail-tge-0-7-0-17.rxna.il.charter.com (96.34.50.115) 31.103 ms 
crr02rxnail-tge-0-7-0-19.rxna.il.charter.com (96.34.50.119) 31.106 ms 
crr02rxnail-tge-0-7-0-17.rxna.il.charter.com (96.34.50.115) 31.153 ms
13 crr01rxnail-tge-0-6-1-1.rxna.il.charter.com (96.34.50.16) 31.151 ms 
crr01rxnail-tge-0-6-1-2.rxna.il.charter.com (96.34.50.18) 31.219 ms 
crr01rxnail-tge-0-6-1-3.rxna.il.charter.com (96.34.49.190) 32.047 ms
14 crr02blvlil-bue-2.blvl.il.charter.com (96.34.50.97) 32.156 ms 32.249 
ms 32.247 ms
15 dtr02blvlil-bue-100.blvl.il.charter.com (96.34.50.149) 31.599 ms 
crr01blvlil-bue-1.blvl.il.charter.com (96.34.49.232) 31.828 ms 31.552 ms
16 dtr01blvlil-bue-3.blvl.il.charter.com (96.34.49.139) 31.719 ms 32.340 
ms 32.284 ms
17 dtr01osbhmo-tge-0-7-1-3.osbh.mo.charter.com (96.34.48.124) 36.638 ms 
36.646 ms 36.640 ms
18 acr01osbhmo-tge-3-2.osbh.mo.charter.com (96.34.50.35) 36.762 ms 
36.850 ms *
19 cts01osbhmo-tge-1-0-0.osbh.mo.charter.com (96.34.56.15) 36.001 ms 
36.926 ms 36.926 ms

20 10.174.65.96 (10.174.65.96) 48.686 ms 48.686 ms 48.659 ms
21 24-240-188-2.static.stls.mo.charter.com (24.240.188.2) 44.111 ms 
48.208 ms 53.722 ms


# traceroute 75.128.167.38
traceroute to 75.128.167.38 (75.128.167.38), 30 hops max, 60 byte packets
1 bowser.video-direct.net (184.175.64.225) 0.246 ms 0.266 ms 0.262 ms
2 172.23.27.2 (172.23.27.2) 1.555 ms 1.593 ms 1.594 ms
3 crt1-crt2.cybercon.com (216.15.195.182) 1.402 ms 1.472 ms 1.471 ms
4 kcm-edge-17.inet.qwest.net (65.116.48.245) 13.336 ms 13.410 ms 13.405 ms
5 dap-brdr-04.inet.qwest.net (67.14.2.170) 19.025 ms 19.025 ms 18.969 ms
6 * 63.146.26.170 (63.146.26.170) 113.851 ms 113.746 ms
7 207.88.14.238.ptr.us.xo.net (207.88.14.238) 128.318 ms 128.282 ms 
128.294 ms
8 ae0d0.mcr1.marylandheights-mo.us.xo.net (216.156.0.178) 126.072 ms 
125.980 ms 126.079 ms

9 206.181.23.182 (206.181.23.182) 126.051 ms 126.140 ms 126.108 ms
10 dtr01blvlil-bue-1.blvl.il.charter.com (96.34.2.21) 126.034 ms 125.998 
ms *

11 dtr01osbhmo-tge-0-7-1-3.osbh.mo.charter.com (96.34.48.124) 126.074 ms * *
12 acr01osbhmo-tge-3-2.osbh.mo.charter.com (96.34.50.35) 125.978 ms * 
122.677 ms
13 cts01osbhmo-tge-1-0-0.osbh.mo.charter.com (96.34.56.15) 122.372 ms 
121.404 ms 121.776 ms

14 10.174.64.247 (10.174.64.247) 136.737 ms 136.770 ms 131.410 ms
15 75-128-167-38.static.stls.mo.charter.com (75.128.167.38) 136.380 ms 
131.092 ms 134.433 ms


Inbound traffic routes seem normal but latency is high.

1 1 ms1 ms1 ms  10.0.0.1
2 9 ms 9 ms 9 ms  10.160.192.1
310 ms 9 ms 9 ms 
dtr01ovldmo-tge-0-3-0-13.ovld.mo.charter.com [96.34.52.8]
416 ms17 ms19 ms  bbr01olvemo-bue-4.olve.mo.charter.com 
[96.34.2.18]
5   117 ms   122 ms   119 ms  63-156-122-145.dia.static.qwest.net 
[63.156.122.145]

6   120 ms   121 ms   121 ms  kcm-edge-17.inet.qwest.net [67.14.11.174]
7   126 ms *  123 ms  qwest-gige.cybercon.com [65.116.48.246]
840 ms44 ms41 ms  216.15.195.205
9   123 ms   124 ms   129 ms65.175.114.250  [65.175.114.250]

cody@crt1-re1 show route aspath-regex ^174 20115 active-path 
match-prefix */24 | match BGP | count

Count: 128 lines

{master}
cody@crt1-re1 show route aspath-regex ^209 20115 active-path 
match-prefix */24 | match BGP | count

Count: 15 lines

{master}
cody@crt1-re1 show route aspath-regex ^3356 20115 active-path 
match-prefix */24 | match BGP | count

Count: 77 lines
 cody@crt1-re1 show route aspath-regex ^209 20115 active-path | 
match BGP | count

Count: 161 

Re: OSPF Costs Formula that include delay.

2014-01-24 Thread Graham Beneke
The auto-cost capability in some vendors devices seems to have left many
people ignoring the link metrics within their IGP. From what I recall in
the standards - bandwidth is one possible link metric but certainly not
the only one. Network designers are free (and I would encourage to) pick
whatever metric is relevant to them.

On 24/01/2014 22:26, Erik Sundberg wrote:
 I am looking for a formula that other people are using .p

I've started to use a combination of 3 metrics to determine my costing:

* The traditional auto-cost calculation based on a 100Gbps reference
which gives far more useful values than the old 100Mbps reference.

* An average or nominal link latency multiplied by a factor of 200.
Sometimes adjusted if I want two geographically diverse paths between
the same endpoints to have equivalent costs.

* Path length in km multiplied by 2. This accounts for situations when
the nominal latency is too small to accurately determine and assumes 1
ms per 100 km.

I then pick the largest of the above 3 metrics as my OSPF cost.

-- 
Graham Beneke



Re: Google causes 40% drop in traffic?

2014-01-24 Thread Dobbins, Roland

On Jan 25, 2014, at 6:07 AM, Jay Ashworth j...@baylink.com wrote:

 I wonder what percentage of large website operators whose site designs have 
 such external dependencies have had it occur to them to include those
 external services in their monitoring systems?

This presupposes that they actually have monitoring systems which actually 
perform useful checks.  All too often, this isn't the case.

;

---
Roland Dobbins rdobb...@arbor.net // http://www.arbornetworks.com

  Luck is the residue of opportunity and design.

   -- John Milton