Re: Announcing Peering-LAN prefixes to customers

[Job Snijders]

On Wed, Jan 16, 2019 at 10:56 Mark Tinka  wrote:

> On 3/Jan/19 22:08, Andy Davidson wrote:
>
> > There are no stupid questions!  It is a good idea to not BGP announce
> and perhaps also to drop traffic toward peering LAN prefixes at
> customer-borders, this was already well discussed in the thread.  But there
> wasn’t a discussion on how we got to this point. Until the Cloudflare 2013
> BGP speaker attack, that sought to flood Cloudflare’s transfer networks and
> exchange connectivity (and with it saturating IXP inter-switch links and
> IXP participant ports), it was common for IXP IPv4/6 peering LANs to be
> internet reachable and BGP transited.
>
> That's interesting to learn.
>
> Running a few exchange points in Africa since 2002, the news was that
> the exchange point LAN should not be visible anywhere on the Internet.
> It would be interesting to know that this wasn't the case in other parts
> of the world.



Some IX’s use a globally reachable peering lan prefix as a convenience for
their participants as “poor man’s out-of-band”, or can’t designate a
separate /24 for the IXP’s website / public services.

I can see some use cases, but in today’s internet landscape the practice
just increases the attack surface, so it’s not the Best Current Practise.

Kind regards,

Job

Re: Announcing Peering-LAN prefixes to customers

[Christoffer Hansen]

On 16/01/2019 08:56, Mark Tinka wrote:
> Running a few exchange points in Africa since 2002, the news was that
> the exchange point LAN should not be visible anywhere on the Internet.

Do you use AS0 as origin on the RPKI objects for said exchange point
LAN(s) to prevent route propagation?

-Christoffer



signature.asc
Description: OpenPGP digital signature

Re: Announcing Peering-LAN prefixes to customers

[Job Snijders]

On Wed, Jan 16, 2019 at 12:39 Christoffer Hansen 
wrote:

>
> On 16/01/2019 08:56, Mark Tinka wrote:
> > Running a few exchange points in Africa since 2002, the news was that
> > the exchange point LAN should not be visible anywhere on the Internet.
>
> Do you use AS0 as origin on the RPKI objects for said exchange point
> LAN(s) to prevent route propagation?



Either AS 0, or the ASN of the IXP’s service network are valid options.
Whatever ASN is listed in the RPKI ROA, should simply never announce the
prefix.

IXPs should make sure to not set MaxLength to allow anything more-l
specific, it should be equal to the prefix length.

Kind regards,

Job

Re: Announcing Peering-LAN prefixes to customers

[Mark Tinka]

On 16/Jan/19 10:06, Job Snijders wrote:

>
>
> I can see some use cases, but in today’s internet landscape the
> practice just increases the attack surface, so it’s not the Best
> Current Practise.

I would say...

Mark.

Re: Announcing Peering-LAN prefixes to customers

[Mark Tinka]

On 16/Jan/19 11:38, Christoffer Hansen wrote:

> Do you use AS0 as origin on the RPKI objects for said exchange point
> LAN(s) to prevent route propagation?

I don't operate any exchange points anymore, but I am not aware of any
such operation of AS0 this side of the globe.

Mark.



signature.asc
Description: OpenPGP digital signature

Re: Announcing Peering-LAN prefixes to customers

[Job Snijders]

On Wed, Jan 16, 2019 at 14:49 Mark Tinka  wrote:

> On 16/Jan/19 11:38, Christoffer Hansen wrote:
>
> > Do you use AS0 as origin on the RPKI objects for said exchange point
> > LAN(s) to prevent route propagation?
>
> I don't operate any exchange points anymore, but I am not aware of any
> such operation of AS0 this side of the globe.



Perhaps that is because for a while you couldn’t set AS 0 in AFRINIC ROAs
as Origin ASN. I think that’s fixed now.

Kind regards,

Job

>
>

Re: Announcing Peering-LAN prefixes to customers

[Randy Bush]

> Running a few exchange points in Africa since 2002, the news was that
> the exchange point LAN should not be visible anywhere on the Internet.
> It would be interesting to know that this wasn't the case in other parts
> of the world.

slide 8 of http://archive.psg.com/970210.nanog.pdf

Re: Announcing Peering-LAN prefixes to customers

[Randy Bush]

> Do you use AS0 as origin on the RPKI objects for said exchange point
> LAN(s) to prevent route propagation?

but as0 does not exactly do that as it can be overridden by a different
roa for the same prefix.  as0 is pretty useless.

randy

Re: Announcing Peering-LAN prefixes to customers

[Job Snijders]

On Wed, Jan 16, 2019 at 15:24 Randy Bush  wrote:

> > Do you use AS0 as origin on the RPKI objects for said exchange point
> > LAN(s) to prevent route propagation?
>
> but as0 does not exactly do that as it can be overridden by a different
> roa for the same prefix.  as0 is pretty useless.


Why would the IXP create such a second ROA?

Do you mean to say “a tool can be useless when applied incorrectly”?

Re: ASNs decimation in ZW this morning

[Colin Johnston]

> On 15 Jan 2019, at 17:03, C. A. Fillekes  wrote:
> 
> 
> Whole countries falling off the net?  BUT TEH TOP POSTINGS!!!
> 
> I'm a little frustrated with the very existence of that thread.
> 
> Trying to constructively change the topic to something more interesting lol. 
> 
> I guess the concerning thing to me is that the whole point of packet switched 
> networks was to provide resilience in the face of e.g. civil disorder. 
> 
> On Tue, Jan 15, 2019 at 11:50 AM Colin Johnston  > wrote:
> sorry top posting,
> yup whatsup doesnt work in harare.
> phone circuits land ok though and checked ok
> 
> col
> 
> Sent from my iPod
> 
> On 15 Jan 2019, at 15:42, C. A. Fillekes  > wrote:
> 
>> 
>> 
>> On Tue, Jan 15, 2019 at 10:34 AM C. A. Fillekes > > wrote:
>> 
>> So @meileaben on twitter this morning notes:
>> 
>> Many #Zimbabwe  Internet 
>> routes withdrawn around 9:30 UTC amidst civil unrest in the country. 
>> near-realtime on #RIPEstat  
>> here: https://stat.ripe.net/ZW   
>> #OpenNetworkIntelligence 
>>  
>> #ZimbabweShutdown 
>> 
>> https://twitter.com/meileaben/status/1085118237157851136 
>> 
>> 
>> wondering if anyone here has additional info on that.  Looing at 
>> stat.ripe.net/ZW  now it looks as though one (out 
>> of an original 18, current 9) ASN has recovered, but kind of curious as to 
>> what exactly happened there. 
>> 
>> So Bloomberg notes that a number of ISPs were shut down to quell online 
>> protest
>> https://www.bloomberg.com/news/articles/2019-01-15/by-killing-the-internet-zimbabwe-kills-commerce-and-the-lights
>>  
>> 
>>  but are there no work-arounds available, if implemented? 



zimbabwe situation link below re telecom problems
https://www.zimbabwesituation.com/news/zimbabwe-telecoms-jammed-after-violent-protests-report/
 



I was back in Zim myself last month as well to see family children, internet 
was working well then inc whats up, mobile and adsl.

I wonder how they block social media sites/whats up, is it null routing on 
peering cores or filtering since did not see filtering in place from ZIM<>UK 
last month...

Colin

Re: ASNs decimation in ZW this morning

[Mark Tinka]

On 16/Jan/19 15:54, Colin Johnston wrote:

>
>
> I wonder how they block social media sites/whats up, is it null
> routing on peering cores or filtering since did not see filtering in
> place from ZIM<>UK last month...

In Africa, the majority of connectivity happens over mobile networks. So
it's easy to "fix" it, since mobile networks have some of the most
advanced DPI's in any network.

For those not aware, Emmerson Mnangagwa, the Zimbabwean president,
increased fuel prices from US$1.24/litre to US$3.11/litre for diesel,
and US$1.31/litre to US$3.31/litre for petrol. This is what led to
(violent) protests, and as such, networks being asked to shutdown services.

Mark.

Re: Service Provider NetFlow Collectors

[jim deleskie]

Erik,

  Feel free to ping me, I own Mimir Networks, we have a full-service flow
collection/DDoS detection and mitigation system that I'd love to show you.
We built it having been a long time user of other commercial and open
source tools, for very large deployments.  Would be happy to give you a
free trial of the system.

-jim
www.mimirnetworks.com

On Sun, Dec 30, 2018 at 11:30 PM Erik Sundberg 
wrote:

> Hi Nanog….
>
>
>
> We are looking at replacing our Netflow collector. I am wonder what other
> service providers are using to collect netflow data off their Core and Edge
> Routers. Pros/Cons… What to watch out for any info would help.
>
>
>
> We are mainly looking to analyze the netflow data. Bonus if it does ddos
> detection and mitigation.
>
>
>
> We are looking at
>
> ManageEngine Netflow Analyzer
>
> PRTG
>
> Plixer – Scrutinizer
>
> PeakFlow
>
> Kentik
>
> Solarwinds NTA
>
>
>
>
>
> Thanks in advance…
>
>
>
> Erik
>
>
>
> --
>
> CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files
> or previous e-mail messages attached to it may contain confidential
> information that is legally privileged. If you are not the intended
> recipient, or a person responsible for delivering it to the intended
> recipient, you are hereby notified that any disclosure, copying,
> distribution or use of any of the information contained in or attached to
> this transmission is STRICTLY PROHIBITED. If you have received this
> transmission in error please notify the sender immediately by replying to
> this e-mail. You must destroy the original transmission and its attachments
> without reading or saving in any manner. Thank you.
>

Re: Announcing Peering-LAN prefixes to customers

[John Kristoff]

On Wed, 16 Jan 2019 12:20:39 +
Randy Bush  wrote:

> slide 8 of http://archive.psg.com/970210.nanog.pdf

In Randy's presentation there is the suggestion to develop an IX filter
list.  Nearly 20 years later that actually happened.

  

This wasn't a popular service when I left Team Cymru, but it seems to
still be available if anyone wants to consider using that.

For more on the historical record, about 10 years after Randy, and from
my own experience, this was briefly touched on this in a lightning talk
at NANOG 41, "Explorations in the Public Peering Address Space".  As
part of a project looking at peering discovery, in the Q&A Louie Lee as
I recall provided a partial answer to the announcement question raised.
It might be worth watching the video for those interesting in this.
Scroll to the bottom to see the deck and video here:

  

John

Call for Participation -- ICANN DNSSEC Workshop at ICANN64 Kobe, Japan

[Jacques Latour]

Call for Participation -- ICANN DNSSEC Workshop at ICANN64 Kobe, Japan



The DNSSEC Deployment Initiative and the Internet Society Deploy360 Programme, 
in cooperation with the ICANN Security and Stability Advisory Committee (SSAC), 
are planning a DNSSEC Workshop during the ICANN64 meeting held from 09-14 March 
2019 in Kobe, Japan. The DNSSEC Workshop has been a part of ICANN meetings for 
several years and has provided a forum for both experienced and new people to 
meet, present and discuss current and future DNSSEC deployments. For reference, 
the most recent session was held at the ICANN Annual General Meeting in 
Barcelona, Spain, on 24 October 2018. The presentations and transcripts are 
available at: https://63.schedule.icann.org/meetings/901549, and 
https://63.schedule.icann.org/meetings/901554, and 
https://63.schedule.icann.org/meetings/901555.



At ICANN64 we are particularly interested in live demonstrations of uses of 
DNSSEC, DS automation or DANE. Examples might include:

* DNSSEC automation and deployment using CDS, CDNSKEY, and CSYNC

* DNSSEC/DANE validation in browsers and in applications

* Secure email / email encryption using DNSSEC, OPENPGPKEY, or S/MIME

* DNSSEC signing solutions and innovation (monitoring, managing, 
validation)

* Tools for automating the generation of DNSSEC/DANE records

* Extending DNSSEC/DANE with authentication, SSH, XMPP, SMTP, S/MIME or 
PGP/GPG and other protocols



Our interest is to provide current examples of the state of development and to 
show real-world examples of how DNSSEC and DANE related innovation can be used 
to increase the overall security of the Internet.

We are open to presentations and demonstrations related to any topic associated 
with DNSSEC and DANE. Examples of the types of topics we are seeking include:



1. DNSSEC Panel (Regional and Global)



For this panel, we are seeking participation from those who have been involved 
in DNSSEC deployment in the region and also from those who have not deployed 
DNSSEC but who have a keen interest in the challenges and benefits of 
deployment. In particular, we will consider the following questions: Are you 
interested in reporting on DNSSEC validation of your ISPs? What can DNSSEC do 
for you? What doesn't it do? What are the internal tradeoffs to implementing 
DNSSEC? What did you learn in your deployment of DNSSEC? We are interested in 
presentations from both people involved with the signing of domains and people 
involved with the deployment of DNSSEC-validating DNS resolvers.



2. DS Automation



We are looking at innovative ways to automate the parent child synchronization 
CDS / CDNSKEY and methods to bootstrap new or existing domains.  We are also 
interested in development or plans related to CSYNC, which are aimed at keeping 
the glue up to date.

We would like to hear from DNS Operators what their current thoughts on 
CDS/CDNSKEY automation are.



3. DNSSEC/DANE Support in the browsers



We would be interested in hearing from browser develop what their plans are in 
terms of supporting DNSSEC/DANE validation.



4. DANE Automation



For DNSSEC to reach massive deployment levels it is clear that a higher level 
of automation is required than is currently available. There also is strong 
interest for DANE usage within web transactions as well as for securing email 
and Voice-over-IP (VoIP). We are seeking presentations on topics such as:



* How can the industry use DANE and other DNSSEC applications as a 
mechanism for creating a more secure Internet?

* What tools, systems and services are available to help automate 
DNSSEC key management?

* Can you provide an analysis of current tools/services and identify 
gaps?

* What are some of the new and innovative uses of DANE and other DNSSEC 
applications in new areas or industries?

* What tools and services are now available that can support DANE usage?



We would be particularly interested in any live demonstrations of DNSSEC / DANE 
application automation and services. Demonstrations of new tools that make the 
setup of DNSSEC or DANE more automated would also be welcome.



If you are interested in participating, please send a brief (1-2 sentence) 
description of your proposed presentation to  dnssec-k...@isoc.org' before ** 
07 February 2019 **



We hope that you can join us.

Thank you,

Jacques Latour



On behalf of the DNSSEC Workshop Program Committee:

Jean Robert Hountomey, AfricaCERT

Jacques Latour, .CA

Russ Mundy, Parsons

Ondřej Filip, CZ.NIC

Yoshiro Yoneya, JPRS

Dan York, Internet Society

Mark Elkins, DNS/ZACR

Re: Announcing Peering-LAN prefixes to customers

[Siyuan Miao]

(Perhaps off-topic)

KINX are using 192.145.251.0/24 as their Peering IPv4 space.

However, I couldn't find any valid SWIP or IRR record created by IP
owner Hiawatha Broadband Communications, Inc.

Some ISP like Hurricane Electric will route this prefix to KINX but I'm not
sure if it's authorized by IP owner.

Regards,
Siyuan


On Wed, Jan 16, 2019 at 5:44 PM Job Snijders  wrote:

> On Wed, Jan 16, 2019 at 12:39 Christoffer Hansen 
> wrote:
>
>>
>> On 16/01/2019 08:56, Mark Tinka wrote:
>> > Running a few exchange points in Africa since 2002, the news was that
>> > the exchange point LAN should not be visible anywhere on the Internet.
>>
>> Do you use AS0 as origin on the RPKI objects for said exchange point
>> LAN(s) to prevent route propagation?
>
>
>
> Either AS 0, or the ASN of the IXP’s service network are valid options.
> Whatever ASN is listed in the RPKI ROA, should simply never announce the
> prefix.
>
> IXPs should make sure to not set MaxLength to allow anything more-l
> specific, it should be equal to the prefix length.
>
> Kind regards,
>
> Job
>

Re: Announcing Peering-LAN prefixes to customers

[Amreesh Phokeer]

On Wed, Jan 16, 2019 at 3:55 PM Job Snijders  wrote:

> Perhaps that is because for a while you couldn’t set AS 0 in AFRINIC ROAs
> as Origin ASN. I think that’s fixed now.
>

You absolutely can. But not sure if anyone ever created one.

-- 
Amreesh Phokeer

Re: Announcing Peering-LAN prefixes to customers

[Matthias Waehlisch]

On Wed, 16 Jan 2019, Amreesh Phokeer wrote:

> 
> 
> On Wed, Jan 16, 2019 at 3:55 PM Job Snijders  wrote:
>   Perhaps that is because for a while you couldn’t set AS 0 in AFRINIC
>   ROAs as Origin ASN. I think that’s fixed now.
> 
> 
> You absolutely can. But not sure if anyone ever created one.
>  
  not for AFRINIC, see http://rpki-browser.realmv6.org/ (select AFRINIC, 
filter for Resource AS0)



Cheers
  matthias

-- 
Matthias Waehlisch
.  Freie Universitaet Berlin, Computer Science
.. http://www.cs.fu-berlin.de/~waehl

Re: Announcing Peering-LAN prefixes to customers

[Christoffer Hansen]

On 16/01/2019 15:55, John Kristoff wrote:
> In Randy's presentation there is the suggestion to develop an IX filter
> list.  Nearly 20 years later that actually happened.
> 
>   
> 
> This wasn't a popular service when I left Team Cymru, but it seems to
> still be available if anyone wants to consider using that.

You could do the same trick. But with data fetched from PeeringDB via
the public API. Works well.

-Christoffer

Re: Announcing Peering-LAN prefixes to customers

[John Kristoff]

On Wed, 16 Jan 2019 16:39:32 +
Christoffer Hansen  wrote:

> You could do the same trick. But with data fetched from PeeringDB via
> the public API. Works well.

I think that is essentially what the service does, but in a BGP feed
and maintained for you, kind of like the bogons service.

John

Re: Announcing Peering-LAN prefixes to customers

[Job Snijders]

On Wed, Jan 16, 2019 at 19:40 Christoffer Hansen 
wrote:

> On 16/01/2019 15:55, John Kristoff wrote:
> > In Randy's presentation there is the suggestion to develop an IX filter
> > list.  Nearly 20 years later that actually happened.
> >
> >   
> >
> > This wasn't a popular service when I left Team Cymru, but it seems to
> > still be available if anyone wants to consider using that.
>
> You could do the same trick. But with data fetched from PeeringDB via
> the public API. Works well.



Small note:

I strongly recommend to *only* block IXP peering lan prefixes for IXPs you
are actually connected to yourself.

This way the communication lines are short in case there should be an
exception. Don’t block prefixes unrelated to your operation.

Kind regards,

Job

Network Speed Testing and Monitoring Platform

[Colton Conor]

As an internet service provider with many small business and residential
customers, our most common tech support calls are speed related. Customers
complaining on slow speeds, slowdowns, etc.

We have a SNMP and ping monitoring platform today, but that mainly tells us
up-time and if data is flowing across the interface. We can of course see
the link speed, but customer call in saying the are not getting that speed.

We are looking for a way to remotely test customers internet connections
besides telling the customer to go to speedtest.net, or worse sending a
tech out with a laptop to do the same thing.

What opensource and commercial options are out there?

Re: Network Speed Testing and Monitoring Platform

[David Guo via NANOG]

We ask our customers use iperf3 to test speed.

Get Outlook for iOS


From: NANOG  on behalf of Colton Conor 

Sent: Thursday, January 17, 2019 00:54
To: NANOG
Subject: Network Speed Testing and Monitoring Platform

As an internet service provider with many small business and residential 
customers, our most common tech support calls are speed related. Customers 
complaining on slow speeds, slowdowns, etc.

We have a SNMP and ping monitoring platform today, but that mainly tells us 
up-time and if data is flowing across the interface. We can of course see the 
link speed, but customer call in saying the are not getting that speed.

We are looking for a way to remotely test customers internet connections 
besides telling the customer to go to speedtest.net, or 
worse sending a tech out with a laptop to do the same thing.

What opensource and commercial options are out there?

Re: Network Speed Testing and Monitoring Platform

[Mike Hammett]

Good luck with that if their only devices are tablets, phones, and Rokus? 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 

- Original Message -

From: "David Guo via NANOG"  
To: "Colton Conor" , "NANOG"  
Sent: Wednesday, January 16, 2019 10:55:51 AM 
Subject: Re: Network Speed Testing and Monitoring Platform 





We ask our customers use iperf3 to test speed. 


Get Outlook for iOS 


From: NANOG  on behalf of Colton Conor 
 
Sent: Thursday, January 17, 2019 00:54 
To: NANOG 
Subject: Network Speed Testing and Monitoring Platform 

As an internet service provider with many small business and residential 
customers, our most common tech support calls are speed related. Customers 
complaining on slow speeds, slowdowns, etc. 


We have a SNMP and ping monitoring platform today, but that mainly tells us 
up-time and if data is flowing across the interface. We can of course see the 
link speed, but customer call in saying the are not getting that speed. 



We are looking for a way to remotely test customers internet connections 
besides telling the customer to go to speedtest.net , or worse sending a tech 
out with a laptop to do the same thing. 


What opensource and commercial options are out there? 

Re: dyn internet intelligence

[Mehmet Akcin]

someone offline followed up with me. I am truly impressed how hard they
made it to acquire such interesting service (which was easy and awesome
under renesys..) 

On Tue, Jan 15, 2019 at 2:03 PM Mehmet Akcin  wrote:

> can someone from dyn reach out to me offline?
>
> https://dyn.com/dyn-internet-intelligence/
>
> i have been trying to subscribe and pay for this service and i am getting
> sales people ping me and not follow up with price information (which is
> weird...)
>
> thank you
>

Re: Announcing Peering-LAN prefixes to customers

[Arnold Nipper]

On 16.01.2019 17:39, Christoffer Hansen wrote:
> On 16/01/2019 15:55, John Kristoff wrote:
>> In Randy's presentation there is the suggestion to develop an IX filter
>> list.  Nearly 20 years later that actually happened.
>>
>>   
>>
>> This wasn't a popular service when I left Team Cymru, but it seems to
>> still be available if anyone wants to consider using that.
> 
> You could do the same trick. But with data fetched from PeeringDB via
> the public API. Works well.
> 

There is also a feature request [0] to tag those prefixes whether they
should be blocked or not. Once implemented it should be easy to build a
filter.

Arnold
[0] https://github.com/peeringdb/peeringdb/issues/352
-- 
Arnold Nipper
email: arn...@nipper.de
mobile: +49 172 2650958



signature.asc
Description: OpenPGP digital signature

Re: Network Speed Testing and Monitoring Platform

[Christoffer Hansen]

On 16/01/2019 17:52, Colton Conor wrote:
> We are looking for a way to remotely test customers internet connections
> besides telling the customer to go to speedtest.net, or worse sending a
> tech out with a laptop to do the same thing.
> 
> What opensource and commercial options are out there?

You could optionally run tools such as iperf[123] on the CPE device
directly. If you can install it on the CPE, that is.

Alternative is the classic of doing a L2 loop with dedicated VLANs on
the CPE. E.g. Server1 -> VlanX -> CPE -> VlanY -> Server2 in your own
network.

-Christoffer

Re: Network Speed Testing and Monitoring Platform

[J. Hellenthal via NANOG]

Might be worth while to get some graphing on customers max transmission speeds 
over the period of three days, a week, two weeks, month to better predict what 
they may be seeing so you can better predict the area’s that could be effected 
due to whatever causes.

A lot of times I find this comes down to name resolution as where to the 
customer it looks slow but is more likely being drowned out by other traffic or 
slow responses from the name servers them self that traverse . But 
those are just common causes. Prioritizing traffic will greatly depend on the 
information you are seeing and a root cause will greatly evade you just doing 
speed tests.

MRTG, rrdtool and some others can accomplish this for you.

Good luck

> On Jan 16, 2019, at 10:52, Colton Conor  wrote:
> 
> As an internet service provider with many small business and residential 
> customers, our most common tech support calls are speed related. Customers 
> complaining on slow speeds, slowdowns, etc.
> 
> We have a SNMP and ping monitoring platform today, but that mainly tells us 
> up-time and if data is flowing across the interface. We can of course see the 
> link speed, but customer call in saying the are not getting that speed. 
> 
> We are looking for a way to remotely test customers internet connections 
> besides telling the customer to go to speedtest.net, or worse sending a tech 
> out with a laptop to do the same thing.
> 
> What opensource and commercial options are out there? 
> 


— 

J. Hellenthal

The fact that there's a highway to Hell but only a stairway to Heaven says a 
lot about anticipated traffic volume.

Re: ASNs decimation in ZW this morning

[John Von Essen]

Im confused as to what exactly happened and how it was implemented. I 
assume the government wanted to restrict access to sites like whatsapp, 
facebook, twitter, etc.,. So did they tell national ISPs/Mobile 
(strong-arm) to simply block access to those sites, or they did they 
tell them to completely shutdown and go dark until the protests were 
over. Im just curious as to how an ISP/Mobile would selectively block 
access under government influence, reason being... understanding how can 
help us think of ways to get around it.


For example, lets say the mobile networks null routed all traffic 
destined to twitter and facebook networks... not a complete IP shutdown. 
So a local citizen is using email from a local provider (non-gmail, 
etc.,.) and still has access to email, Twitter knows they are blocked in 
ZW, but they still try to email updates to this example citizen. If 
their networks are being null routed, they can simply deliver the email 
via an alternate network/platform.


The whole thing is very disturbing, I mean this is 2019 right? Not 1984...

-John


On 1/16/19 9:06 AM, Mark Tinka wrote:



On 16/Jan/19 15:54, Colin Johnston wrote:



I wonder how they block social media sites/whats up, is it null
routing on peering cores or filtering since did not see filtering in
place from ZIM<>UK last month...

In Africa, the majority of connectivity happens over mobile networks. So
it's easy to "fix" it, since mobile networks have some of the most
advanced DPI's in any network.

For those not aware, Emmerson Mnangagwa, the Zimbabwean president,
increased fuel prices from US$1.24/litre to US$3.11/litre for diesel,
and US$1.31/litre to US$3.31/litre for petrol. This is what led to
(violent) protests, and as such, networks being asked to shutdown services.

Mark.

Re: Service Provider NetFlow Collectors

[James Breeden]

Jim, please send me additional information on your solution as well, we're in 
the market for a flow analytics solution.



James W. Breeden

Managing Partner



[logo_transparent_background]

Arenal Group: Arenal Consulting Group | Acilis Telecom | Pines Media

PO Box 1063 | Smithville, TX 78957

Email: ja...@arenalgroup.co | office 512.360. 
| cell 512.304.0745 | www.arenalgroup.co


From: NANOG  on behalf of jim deleskie 

Sent: Wednesday, January 16, 2019 8:30:30 AM
To: Erik Sundberg
Cc: nanog@nanog.org
Subject: Re: Service Provider NetFlow Collectors

Erik,

  Feel free to ping me, I own Mimir Networks, we have a full-service flow 
collection/DDoS detection and mitigation system that I'd love to show you.  We 
built it having been a long time user of other commercial and open source 
tools, for very large deployments.  Would be happy to give you a free trial of 
the system.

-jim
www.mimirnetworks.com

On Sun, Dec 30, 2018 at 11:30 PM Erik Sundberg 
mailto:esundb...@nitelusa.com>> wrote:

Hi Nanog….



We are looking at replacing our Netflow collector. I am wonder what other 
service providers are using to collect netflow data off their Core and Edge 
Routers. Pros/Cons… What to watch out for any info would help.



We are mainly looking to analyze the netflow data. Bonus if it does ddos 
detection and mitigation.



We are looking at

ManageEngine Netflow Analyzer

PRTG

Plixer – Scrutinizer

PeakFlow

Kentik

Solarwinds NTA





Thanks in advance…



Erik





CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.

Re: Network Speed Testing and Monitoring Platform

[Colton Conor]

Last time I setup Iperf3 it was semi difficult, and would be impossible
trying to coach a soccer mom on how to setup over the phone.

I am leaning towards a CPE that has speed test built in, or a low cost, sub
$100 device we could ship to the customer to install. Anyone know of
something like that?

On Wed, Jan 16, 2019 at 10:55 AM David Guo  wrote:

> We ask our customers use iperf3 to test speed.
>
> Get Outlook for iOS 
>
> --
> *From:* NANOG  on behalf of Colton Conor <
> colton.co...@gmail.com>
> *Sent:* Thursday, January 17, 2019 00:54
> *To:* NANOG
> *Subject:* Network Speed Testing and Monitoring Platform
>
> As an internet service provider with many small business and residential
> customers, our most common tech support calls are speed related. Customers
> complaining on slow speeds, slowdowns, etc.
>
> We have a SNMP and ping monitoring platform today, but that mainly tells
> us up-time and if data is flowing across the interface. We can of course
> see the link speed, but customer call in saying the are not getting that
> speed.
>
> We are looking for a way to remotely test customers internet connections
> besides telling the customer to go to speedtest.net, or worse sending a
> tech out with a laptop to do the same thing.
>
> What opensource and commercial options are out there?
>
>

RE: Network Speed Testing and Monitoring Platform

[Chris Kimball]

Would a raspberry pi work for this?

Could 3D print a nice case with your logo for it.

From: NANOG  On Behalf Of Colton Conor
Sent: Wednesday, January 16, 2019 2:16 PM
To: David Guo 
Cc: NANOG 
Subject: Re: Network Speed Testing and Monitoring Platform

Last time I setup Iperf3 it was semi difficult, and would be impossible trying 
to coach a soccer mom on how to setup over the phone.

I am leaning towards a CPE that has speed test built in, or a low cost, sub 
$100 device we could ship to the customer to install. Anyone know of something 
like that?

On Wed, Jan 16, 2019 at 10:55 AM David Guo 
mailto:da...@xtom.com>> wrote:
We ask our customers use iperf3 to test speed.

Get Outlook for iOS


From: NANOG mailto:nanog-boun...@nanog.org>> on behalf 
of Colton Conor mailto:colton.co...@gmail.com>>
Sent: Thursday, January 17, 2019 00:54
To: NANOG
Subject: Network Speed Testing and Monitoring Platform

As an internet service provider with many small business and residential 
customers, our most common tech support calls are speed related. Customers 
complaining on slow speeds, slowdowns, etc.

We have a SNMP and ping monitoring platform today, but that mainly tells us 
up-time and if data is flowing across the interface. We can of course see the 
link speed, but customer call in saying the are not getting that speed.

We are looking for a way to remotely test customers internet connections 
besides telling the customer to go to speedtest.net, or 
worse sending a tech out with a laptop to do the same thing.

What opensource and commercial options are out there?

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 
- - -

The information contained in this electronic message may be confidential, and 
the message is for the use of intended recipients only. If you are not the 
intended recipient, do not disseminate, copy, or disclose this communication or 
its contents. If you have received this communication in error, please 
immediately notify me by replying to the email or call MIS Alliance at 
617-500-1700 and permanently delete this communication.

Re: Network Speed Testing and Monitoring Platform

[Casey Russell]

I don't think a raspberry pi will reliably fill a full Gig and keep it full
(maybe that's not required in this scenario), but I've installed a Linux
based OS with the PerfSONAR tools (including iperf) on a couple of
different mini PCs in the "few hundred dollars" price range.

The last one was the Liva X from ECS.  It was more than capable of filling
1G circuits with traffic and keeping them full without loss or wonky
results due to things like CPU overrun or other processes causing bus
contention.  I'm pretty sure the Liva X is retired now, but their current
gen should suffice as should a number of comparable competitors.

Sincerely,
Casey Russell
Network Engineer
[image: KanREN] 
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]

[image:
twitter]  [image: twitter]
 need support? 



On Wed, Jan 16, 2019 at 1:27 PM Chris Kimball 
wrote:

> Would a raspberry pi work for this?
>
>
>
> Could 3D print a nice case with your logo for it.
>
>
>
> *From:* NANOG  *On Behalf Of *Colton Conor
> *Sent:* Wednesday, January 16, 2019 2:16 PM
> *To:* David Guo 
> *Cc:* NANOG 
> *Subject:* Re: Network Speed Testing and Monitoring Platform
>
>
>
> Last time I setup Iperf3 it was semi difficult, and would be impossible
> trying to coach a soccer mom on how to setup over the phone.
>
>
>
> I am leaning towards a CPE that has speed test built in, or a low cost,
> sub $100 device we could ship to the customer to install. Anyone know of
> something like that?
>
>
>
> On Wed, Jan 16, 2019 at 10:55 AM David Guo  wrote:
>
> We ask our customers use iperf3 to test speed.
>
>
>
> Get Outlook for iOS 
>
>
> --
>
> *From:* NANOG  on behalf of Colton Conor <
> colton.co...@gmail.com>
> *Sent:* Thursday, January 17, 2019 00:54
> *To:* NANOG
> *Subject:* Network Speed Testing and Monitoring Platform
>
>
>
> As an internet service provider with many small business and residential
> customers, our most common tech support calls are speed related. Customers
> complaining on slow speeds, slowdowns, etc.
>
>
>
> We have a SNMP and ping monitoring platform today, but that mainly tells
> us up-time and if data is flowing across the interface. We can of course
> see the link speed, but customer call in saying the are not getting that
> speed.
>
>
>
> We are looking for a way to remotely test customers internet connections
> besides telling the customer to go to speedtest.net, or worse sending a
> tech out with a laptop to do the same thing.
>
>
>
> What opensource and commercial options are out there?
>
>
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> - - - - - -
>
> The information contained in this electronic message may be confidential,
> and the message is for the use of intended recipients only. If you are not
> the intended recipient, do not disseminate, copy, or disclose this
> communication or its contents. If you have received this communication in
> error, please immediately notify me by replying to the email or call MIS
> Alliance at 617-500-1700 and permanently delete this communication.
>

Re: Network Speed Testing and Monitoring Platform

[Ryan Wilkins]

A Raspberry Pi uses USB 2 for Ethernet interconnection to the CPU so it most 
definitely will not keep even half a gig full.  It’ll do a bit over 300 Mbps.

Ryan Wilkins

> On Jan 16, 2019, at 2:45 PM, Casey Russell  wrote:
> 
> I don't think a raspberry pi will reliably fill a full Gig and keep it full 
> (maybe that's not required in this scenario), but I've installed a Linux 
> based OS with the PerfSONAR tools (including iperf) on a couple of different 
> mini PCs in the "few hundred dollars" price range.  
> 
> The last one was the Liva X from ECS.  It was more than capable of filling 1G 
> circuits with traffic and keeping them full without loss or wonky results due 
> to things like CPU overrun or other processes causing bus contention.  I'm 
> pretty sure the Liva X is retired now, but their current gen should suffice 
> as should a number of comparable competitors.
> 
> Sincerely,
> Casey Russell
> Network Engineer
>  
> 785-856-9809
> 2029 Becker Drive, Suite 282
> Lawrence, Kansas 66047
>
> 
>   
>    
>   
>    need support? 
> 
> 
> 
> 
> On Wed, Jan 16, 2019 at 1:27 PM Chris Kimball  > wrote:
> Would a raspberry pi work for this?
> 
>  
> 
> Could 3D print a nice case with your logo for it.
> 
>  
> 
> From: NANOG mailto:nanog-boun...@nanog.org>> On 
> Behalf Of Colton Conor
> Sent: Wednesday, January 16, 2019 2:16 PM
> To: David Guo mailto:da...@xtom.com>>
> Cc: NANOG mailto:nanog@nanog.org>>
> Subject: Re: Network Speed Testing and Monitoring Platform
> 
>  
> 
> Last time I setup Iperf3 it was semi difficult, and would be impossible 
> trying to coach a soccer mom on how to setup over the phone.
> 
>  
> 
> I am leaning towards a CPE that has speed test built in, or a low cost, sub 
> $100 device we could ship to the customer to install. Anyone know of 
> something like that?
> 
>  
> 
> On Wed, Jan 16, 2019 at 10:55 AM David Guo  > wrote:
> 
> We ask our customers use iperf3 to test speed.
> 
>  
> 
> Get Outlook for iOS 
>  
> 
> From: NANOG mailto:nanog-boun...@nanog.org>> on 
> behalf of Colton Conor  >
> Sent: Thursday, January 17, 2019 00:54
> To: NANOG
> Subject: Network Speed Testing and Monitoring Platform
> 
>  
> 
> As an internet service provider with many small business and residential 
> customers, our most common tech support calls are speed related. Customers 
> complaining on slow speeds, slowdowns, etc.
> 
>  
> 
> We have a SNMP and ping monitoring platform today, but that mainly tells us 
> up-time and if data is flowing across the interface. We can of course see the 
> link speed, but customer call in saying the are not getting that speed. 
> 
>  
> 
> We are looking for a way to remotely test customers internet connections 
> besides telling the customer to go to speedtest.net , 
> or worse sending a tech out with a laptop to do the same thing.
> 
>  
> 
> What opensource and commercial options are out there? 
> 
>  
> 
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 
> - - - - 
> 
> The information contained in this electronic message may be confidential, and 
> the message is for the use of intended recipients only. If you are not the 
> intended recipient, do not disseminate, copy, or disclose this communication 
> or its contents. If you have received this communication in error, please 
> immediately notify me by replying to the email or call MIS Alliance at 
> 617-500-1700 and permanently delete this communication.

RE: Network Speed Testing and Monitoring Platform

[Cummings, Chris]

Depending on the Bandwidth needed, yes, but the Pi is limited at the NIC level 
because it is on a shared USB 2.0 Bus.

[cid:image001.jpg@01D42B24.779DE300]
Chris Cummings | Network Engineer
Coeur Mining, Inc.|  104 S. Michigan Ave. Suite 900 | Chicago, IL 60603
t: 312.489.5852 | m: 773.294.6496 | 
ccummi...@coeur.com
NYSE: CDE | www.coeur.com

Notice of Confidentiality: The contents of this e-mail message and any 
attachments are confidential and are intended solely for addressee. This 
transmission is sent in trust, for the sole purpose of delivery to the intended 
recipient.  If you have received this transmission in error, any use, 
reproduction or dissemination of this transmission is strictly prohibited.  If 
you are not the intended recipient, please immediately notify the sender by 
reply e-mail or phone, and delete this message and its attachments, if any.

P Please consider the environment before printing this e-mail.

From: NANOG  On Behalf Of Chris Kimball
Sent: Wednesday, January 16, 2019 11:27 AM
To: Colton Conor ; David Guo 
Cc: NANOG 
Subject: RE: Network Speed Testing and Monitoring Platform

Would a raspberry pi work for this?

Could 3D print a nice case with your logo for it.

From: NANOG mailto:nanog-boun...@nanog.org>> On Behalf 
Of Colton Conor
Sent: Wednesday, January 16, 2019 2:16 PM
To: David Guo mailto:da...@xtom.com>>
Cc: NANOG mailto:nanog@nanog.org>>
Subject: Re: Network Speed Testing and Monitoring Platform

Last time I setup Iperf3 it was semi difficult, and would be impossible trying 
to coach a soccer mom on how to setup over the phone.

I am leaning towards a CPE that has speed test built in, or a low cost, sub 
$100 device we could ship to the customer to install. Anyone know of something 
like that?

On Wed, Jan 16, 2019 at 10:55 AM David Guo 
mailto:da...@xtom.com>> wrote:
We ask our customers use iperf3 to test speed.

Get Outlook for 
iOS


From: NANOG mailto:nanog-boun...@nanog.org>> on behalf 
of Colton Conor mailto:colton.co...@gmail.com>>
Sent: Thursday, January 17, 2019 00:54
To: NANOG
Subject: Network Speed Testing and Monitoring Platform

As an internet service provider with many small business and residential 
customers, our most common tech support calls are speed related. Customers 
complaining on slow speeds, slowdowns, etc.

We have a SNMP and ping monitoring platform today, but that mainly tells us 
up-time and if data is flowing across the interface. We can of course see the 
link speed, but customer call in saying the are not getting that speed.

We are looking for a way to remotely test customers internet connections 
besides telling the customer to go to speedtest.net, or 
worse sending a tech out with a laptop to do the same thing.

What opensource and commercial options are out there?

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 
- - -

The information contained in this electronic message may be confidential, and 
the message is for the use of intended recipients only. If you are not the 
intended recipient, do not disseminate, copy, or disclose this communication or 
its contents. If you have received this communication in error, please 
immediately notify me by replying to the email or call MIS Alliance at 
617-500-1700 and permanently delete this communication.

Re: Network Speed Testing and Monitoring Platform

[Blake Hudson]

I investigated building a product that could reliably speedtest up to a 
gig and found the same thing. A raspberry Pi 3B or 3B+ can reliably test 
up to ~100Mbps. The 3B only has a 10/100 NIC; The 3B+, while having a 
gigabit NIC, tops out at ~300Mbps internally. Both models of the Pi are 
available as a kit that retails under $100. For testing up to 1Gbps, an 
x86 mini PC like those sold for firewall appliances 
(http://a.co/d/02UQFow) are available and retail for $200-$300 at the 
low end.


My conclusion was that doing testing within the CPE was the most cost 
effective way to go. One should keep in mind that even gigabit CPEs may 
not be able to reliably test > 100Mbps due to CPU or other software 
limitations. Public speedtest servers may also not reliably test > 
100Mbps, so for reliable gigabit testing you'll need to run your own.




Casey Russell wrote on 1/16/2019 1:45 PM:
I don't think a raspberry pi will reliably fill a full Gig and keep it 
full (maybe that's not required in this scenario), but I've installed 
a Linux based OS with the PerfSONAR tools (including iperf) on a 
couple of different mini PCs in the "few hundred dollars" price range.


The last one was the Liva X from ECS.  It was more than capable of 
filling 1G circuits with traffic and keeping them full without loss or 
wonky results due to things like CPU overrun or other processes 
causing bus contention.  I'm pretty sure the Liva X is retired now, 
but their current gen should suffice as should a number of comparable 
competitors.


Sincerely,
Casey Russell
Network Engineer

phone785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
linkedin 
 
twitter  twitter 
 need support? 




On Wed, Jan 16, 2019 at 1:27 PM Chris Kimball 
mailto:ckimb...@misalliance.com>> wrote:


Would a raspberry pi work for this?

Could 3D print a nice case with your logo for it.

RE: Your opinion on network analysis in the presence of uncertain events

[adamv0025]

My understanding was that the tool will combine historic data with the MTBF 
datapoints form all components involved in a given link in order to try and 
estimate a likelihood of a link failure. 

Heck I imagine if one would stream a heap load of data at a ML algorithm it 
might draw some very interesting conclusions indeed -i.e. draw unforeseen 
patterns across huge datasets while trying to understand the overall system 
(network) behaviour. Such a tool might teach us something new about our 
networks. 

Next level would be recommendations on how to best address some of the 
potential pitfalls it found. 

 

Maybe in closed systems like IP networks, with use of streaming telemetry from 
SFPs/NPUs/LC-CPUs/Protocols/etc.., we’ll be able to feed the analytics tool 
with enough data to allow it to make fairly accurate predictions (i.e. unlike 
in weather or markets prediction tools where the datasets (or search space -as 
not all attributes are equally relevant) is virtually endless).

 

adam

 

From: NANOG  On Behalf Of Mel Beckman
Sent: Tuesday, January 15, 2019 10:40 PM
To: Vanbever Laurent 
Cc: nanog@nanog.org
Subject: Re: Your opinion on network analysis in the presence of uncertain 
events

 

I know of none that take probabilities as inputs. Traditional network 
simulators, such as GNS3, let you model various failure modes, but probability 
seems squishy enough that I don’t see how it can be accurate, and thus helpful. 
It’s like that Dilbert cartoon where the pointy haired boss asks for a schedule 
of all future unplanned outages :) 

 

https://dilbert.com/strip/1997-01-29

 -mel


On Jan 15, 2019, at 11:59 AM, Vanbever Laurent mailto:lvanbe...@ethz.ch> > wrote:





I took the survey. It’s short and sweet — well done!


Thanks a lot, Mel! Highly appreciated!




I do have a question. You ask "Are there any good?” Any good what?


I just meant whether existing network analysis tools were any good (or good 
enough) at reasoning about probabilistic behaviors that people care about (if 
any).

All the best,
Laurent

Re: Network Speed Testing and Monitoring Platform

[valdis . kletnieks]

On Wed, 16 Jan 2019 19:26:41 +, Chris Kimball said:
> Would a raspberry pi work for this?
>
> Could 3D print a nice case with your logo for it.

The Pi has a bandwidth limit at 300mbits/sec due to a USB port being used.

I wonder if something like the RIPE Atlas probes could be flashed with suitable
code.  They're smaller than a Pi, and easy to set up - connect a USB power cord
and an RJ45 on some cat-5 and away you go.  Mine showed up with the two cords
needed and everything.

https://www-static.ripe.net/static/rnd-ui/atlas/static/docs/probe-images/v1.jpg

Re: Announcing Peering-LAN prefixes to customers

[Randy Bush]

>> slide 8 of http://archive.psg.com/970210.nanog.pdf
> In Randy's presentation

from the credit where due department: this was not my bright idea.  the
presentation was from a get together of some large isp operators a few
weeks prior.

randy

Re: Network Speed Testing and Monitoring Platform

[valdis . kletnieks]

On Wed, 16 Jan 2019 10:52:58 -0600, Colton Conor said:
> As an internet service provider with many small business and residential
> customers, our most common tech support calls are speed related. Customers
> complaining on slow speeds, slowdowns, etc.

So out of curiosity - does anybody have info on what percentage of residential
internet connections are on CPE that's been suitably de-bufferbloated?

Re: ASNs decimation in ZW this morning

[Scott Weeks]

--- col...@gt86car.org.uk wrote:
From: Colin Johnston 

I wonder how they block social media sites/whats up, 
is it null routing on peering cores or filtering since 
did not see filtering in place from ZIM<>UK last month...
-

Regarding the shutdown:

https://allafrica.com/stories/201901160010.html

"As it was a written directive issued in terms of the 
law, non-compliance would result in immediate 
imprisonment of management on the ground."



It's back on.

https://www.newzimbabwe.com/internet-back-on-mnangagwa-says-understands-pain-and-frustration/



Side effects:

https://www.newzimbabwe.com/by-killing-the-internet-zimbabwe-kills-commerce-and-lights/



Folks are just trying to survive.  Fuel is over $13 USD
per gallon (out of reach for ordinary folks), prices are 
crazy high and folks are just trying to survive:

https://www.newzimbabwe.com/civilians-beaten-and-abducted-in-major-zimbabwe-crackdown/



But the gov't still has enough for weapons!

https://www.newzimbabwe.com/moscow-mnangagwa-says-zimbabwe-to-buy-state-of-the-art-russian-arms/


scott

Re: Network Speed Testing and Monitoring Platform

[James R Cutler]

On Jan 16, 2019, at 4:01 PM, valdis.kletni...@vt.edu wrote:
> 
> So out of curiosity - does anybody have info on what percentage of residential
> internet connections are on CPE that's been suitably de-bufferbloated?

I have not read anything suggesting that de-bufferbloating has happened. It 
would be nice to see something.

I participated in bufferbloat testing on Comcast Business Internet some years 
ago and have never seen any results published.

James R. Cutler
james.cut...@consultant.com
GPG keys: hkps://hkps.pool.sks-keyservers.net

Re: Your opinion on network analysis in the presence of uncertain events

[Mel Beckman]

MTBF can’t be used alone to predict failure probability, because product 
mortality follows the infamous “bathtub curve”. Products are as likely to fail 
early in their lives as later in their lives. MTBF as a scalar value is just an 
average.

-mel via cell

On Jan 16, 2019, at 12:43 PM, 
"adamv0...@netconsultings.com" 
mailto:adamv0...@netconsultings.com>> wrote:

My understanding was that the tool will combine historic data with the MTBF 
datapoints form all components involved in a given link in order to try and 
estimate a likelihood of a link failure.
Heck I imagine if one would stream a heap load of data at a ML algorithm it 
might draw some very interesting conclusions indeed -i.e. draw unforeseen 
patterns across huge datasets while trying to understand the overall system 
(network) behaviour. Such a tool might teach us something new about our 
networks.
Next level would be recommendations on how to best address some of the 
potential pitfalls it found.

Maybe in closed systems like IP networks, with use of streaming telemetry from 
SFPs/NPUs/LC-CPUs/Protocols/etc.., we’ll be able to feed the analytics tool 
with enough data to allow it to make fairly accurate predictions (i.e. unlike 
in weather or markets prediction tools where the datasets (or search space -as 
not all attributes are equally relevant) is virtually endless).

adam

From: NANOG mailto:nanog-boun...@nanog.org>> On Behalf 
Of Mel Beckman
Sent: Tuesday, January 15, 2019 10:40 PM
To: Vanbever Laurent mailto:lvanbe...@ethz.ch>>
Cc: nanog@nanog.org
Subject: Re: Your opinion on network analysis in the presence of uncertain 
events

I know of none that take probabilities as inputs. Traditional network 
simulators, such as GNS3, let you model various failure modes, but probability 
seems squishy enough that I don’t see how it can be accurate, and thus helpful. 
It’s like that Dilbert cartoon where the pointy haired boss asks for a schedule 
of all future unplanned outages :)

https://dilbert.com/strip/1997-01-29
 -mel

On Jan 15, 2019, at 11:59 AM, Vanbever Laurent 
mailto:lvanbe...@ethz.ch>> wrote:


I took the survey. It’s short and sweet — well done!

Thanks a lot, Mel! Highly appreciated!


I do have a question. You ask "Are there any good?” Any good what?

I just meant whether existing network analysis tools were any good (or good 
enough) at reasoning about probabilistic behaviors that people care about (if 
any).

All the best,
Laurent

Fiber owners

[Mehmet Akcin]

Hello

I am trying to get a hold of people who have ownership rights to fiber (
location is not important )

I have few business and technical questions about monitoring, repairs, etc.

Thank you

Mehmet
-- 
Mehmet
+1-424-298-1903