Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Andrew Gabriel
Use a port scanner like NMAP. -Andrew. On Fri, Feb 5, 2010 at 12:45 PM, vijay gore vijaygor...@gmail.com wrote: Dear Team, anybody cal tell me how to check window machine connected in Cisco Router, for ex. in show arp we are getting bunch of ip and MAC , how to verify from them

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Brian Turnbow
Though not as reliable as a port scanner, you could do something like this even from remote access-list 101 permit udp any any range 137 138 log access-list 101 permit any any interface fa1 ip access-group 101 in Then Show log to see netbios packet users Brian -Original

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread vijay gore
Dear Sir, access-list 101 permit any any % Unrecognized command On Fri, Feb 5, 2010 at 2:08 PM, Brian Turnbow b.turn...@twt.it wrote: Though not as reliable as a port scanner, you could do something like this even from remote access-list 101 permit udp any any range 137 138 log

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Brian Turnbow
sorry forgot the ip access-list 101 permit ip any any Brian Turnbow Network Manager TWT S.p.A. From: vijay gore [mailto:vijaygor...@gmail.com] Sent: venerdì 5 febbraio 2010 10.42 To: Brian Turnbow Cc: Andrew Gabriel; cisco-nsp@puck.nether.net Subject:

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread vijay gore
Dear Sir, it's giving me below output, it's not showing net bios packet users, Router#sho log Syslog logging: enabled (1 messages dropped, 0 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled) No Active Message Discriminator. No Inactive Message

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread vijay gore
No sir. it's not working, actually sir, in this router there are 7 PC's connected, some PC having Linux OS some PC's having Windows OS, now i want to know which machine having Linux OS which machine having Windows OS. please help me out this sir On Fri, Feb 5, 2010 at 3:57 PM, Brian Turnbow

Re: [c-nsp] cisco-nsp Digest, Vol 87, Issue 11

2010-02-05 Thread Imran K
TCL script to telnet to 445 i.e.; for each $MAC in MACS { telnet $IP port 445 ??? On Fri, Feb 5, 2010 at 8:59 PM, cisco-nsp-requ...@puck.nether.net wrote: Send cisco-nsp mailing list submissions to cisco-nsp@puck.nether.net To subscribe or unsubscribe via the World

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Jay Nakamura
in show arp we are getting bunch of ip and MAC , how to verify from them which is linux machine ip and which windows machine ip ,, No, there is no way to find what OS a host is running from MAC and IP. There may be other ways to try to guess what the host is running like using nmap or looking

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Brian Turnbow
it looks like you have loggin enabled for warings only try logging buffered debugging another alternative if the first does not log, is to do a debug ip packet using an access list that matches only netbios. this could be more processor intensive. first create access-list 102 permit

[c-nsp] Configuring a Static L2TPv3 Session Xconnect between an Ethernet Interface and VLAN Subinterface

2010-02-05 Thread Anrey Teslenko
Hi All, I have some problem which i need to solve I have two Cisco 1841 routers For one of them CE i have Wan interface and ethernet interface (customer side) For second of them PE i have Wan interface andvlan sub-interface (customer side) I try to build xconnect over L2TPv3 tunnel between

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Jens Link
Brian Turnbow b.turn...@twt.it writes: Though not as reliable as a port scanner, you could do something like this even from remote access-list 101 permit udp any any range 137 138 log access-list 101 permit any any This might also match for some *NIX host running samba or any other kind of

[c-nsp] Load-sharing with two links to the same ISP

2010-02-05 Thread Matthew Melbourne
Hi, What techniques are available to load-share traffic on two links (of equal bandwidth) to the same ISP (same AS) given that BGP only enters the best path into the RIB? We could announce our prefixes over both links, but splitting the preferred path announcements over the two links, either

Re: [c-nsp] Load-sharing with two links to the same ISP

2010-02-05 Thread Aftab Siddiqui
use maximum-paths in BGP peering. With this you can add multiple routes in the routing table as long as the routes you are getting from the same AS. BUT once this is added it is applied to all BGP peers, not possible to do it for some selected peers. If you have many neighbors on this router than

Re: [c-nsp] Configuring a Static L2TPv3 Session Xconnect between an Ethernet Interface and VLAN Subinterface

2010-02-05 Thread Anrey Teslenko
Hi all, I fix some configuration and now i have tunnel's status is established and session's status is established, but i am not observe the current session in this tunnel Another words i have working tunnel and have established session on both side, but i can't see one site from another

Re: [c-nsp] Load-sharing with two links to the same ISP

2010-02-05 Thread Ivan Pepelnjak
This might help: http://www.nil.com/ipcorner/LoadBalancingBGP/ Ivan Pepelnjak blog.ioshints.info / www.ioshints.info -Original Message- From: Matthew Melbourne [mailto:m...@melbourne.org.uk] Sent: Friday, February 05, 2010 12:33 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp]

[c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
Cisco 6509, SUP720, 12.2(33)SXI3, WS-X6748-SFP, port shows: sh int g1/9 | i error 3915 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 output errors, 0 collisions, 0 interface resets The other side is clean. What do input errors alone indicate? (Have tested/replaced fiber/SFPs,

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 10:42 AM, Matlock, Kenneth L matlo...@exempla.org wrote: Can you paste in the full 'show int', my guess is you're getting input buffer failures (need to see the 'Input Queue' line in particular). sh int g1/9 GigabitEthernet1/9 is up, line protocol is up (connected)

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Erik Witkop
Here is a link that I will refer to from time to time. I don't know if it will help. http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008015bfd6.shtml#l3_l2 On Fri, Feb 5, 2010 at 10:38 AM, Tim Durack tdur...@gmail.com wrote: Cisco 6509, SUP720, 12.2(33)SXI3,

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 11:07 AM, Jeff Kell jeff-k...@utc.edu wrote: On 2/5/2010 10:49 AM, Tim Durack wrote: On Fri, Feb 5, 2010 at 10:42 AM, Matlock, Kenneth L matlo...@exempla.org wrote: Can you paste in the full 'show int', my guess is you're getting input buffer failures (need to see the

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread James Slepicka
sh int gi1/9 trans detail? Tim Durack wrote: On Fri, Feb 5, 2010 at 11:07 AM, Jeff Kell jeff-k...@utc.edu wrote: On 2/5/2010 10:49 AM, Tim Durack wrote: On Fri, Feb 5, 2010 at 10:42 AM, Matlock, Kenneth L matlo...@exempla.org wrote: Can you paste in the full 'show int', my

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread James Slepicka
also, check sh queueing int gi1/9 James Slepicka wrote: sh int gi1/9 trans detail? Tim Durack wrote: On Fri, Feb 5, 2010 at 11:07 AM, Jeff Kell jeff-k...@utc.edu wrote: On 2/5/2010 10:49 AM, Tim Durack wrote: On Fri, Feb 5, 2010 at 10:42 AM, Matlock, Kenneth L matlo...@exempla.org

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 11:28 AM, James Slepicka cisco-...@slepicka.net wrote: sh int gi1/9 trans detail? sh int g1/9 transceiver detail Module 1 doesn't support DOM (Thanks Cisco.) -- Tim: Sent from Brooklyn, NY, United States ___ cisco-nsp mailing

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 11:32 AM, James Slepicka cisco-...@slepicka.net wrote: also, check sh queueing int gi1/9 Queues are clean. It's not a very busy link. I still think this smells like a L1 problem. Our fiber guys swear it's clean. (Although they always do that. Eventually they will probably

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Matlock, Kenneth L
Can you paste in the full 'show int', my guess is you're getting input buffer failures (need to see the 'Input Queue' line in particular). Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Marian Ďurkovič
On Fri, 5 Feb 2010 11:34:45 -0500, Tim Durack wrote On Fri, Feb 5, 2010 at 11:28 AM, James Slepicka cisco- n...@slepicka.net wrote: sh int gi1/9 trans detail? sh int g1/9 transceiver detail Module 1 doesn't support DOM (Thanks Cisco.) :-(( If you have DOM-enabled SFPs, try to plug the

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Alan Buxey
Hi, I still think this smells like a L1 problem. Our fiber guys swear it's clean. (Although they always do that. Eventually they will probably fess up to some kinky 62.5/50.0 mismatch fiber issue.) ..i was hinking the same thing - what about the interfaces at each end (eg are they both LH...

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Jason Shearer
As a previous poster recommended NMAP is going to be your best bet for fingerprinting the OS. There are ways to obfuscate the stack and trick NMAP but it will get stock machines most of the time. Jason -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Jim McBurnett
I did not read all the posts... But why not add: http://www.hanewin.net/lldp-e.htm or the linux version? Then on the Cisco switch show lldp.. Later, Jim -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Smales,

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Nick Hilliard
On 05/02/2010 18:12, Tim Durack wrote: (It's LX over mmf as we have standardized on LX optics. o_O If you're using mode conditioning cables at each end, I'll upgrade your chances of success with this link to: Pray to Cthulu. Hard. You need to get a power meter and measure the Rx strength each

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 1:50 PM, Nick Hilliard n...@inex.ie wrote: On 05/02/2010 18:12, Tim Durack wrote: (It's LX over mmf as we  have standardized on LX optics. o_O If you're using mode conditioning cables at each end, I'll upgrade your chances of success with this link to: Pray to Cthulu.

Re: [c-nsp] WS-X6748-SFP input errors

2010-02-05 Thread Flint, Chris
Hi Tim, Assuming you're running older fiber, you probably need mode-conditioning patch cords for LX over MMF. http://www.cisco.com/en/US/prod/collateral/modules/ps5455/product_bulletin_c25-530836.html We ran into this with LX4 optics over MMF... several closets worked correctly, but one in

[c-nsp] AS5300/AS5400 power supplies

2010-02-05 Thread Joseph Mays
Does anyone know if the power supplies in AS5300's and AS5400's are interchangeable? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] OT - Infoblox vs. Bluecat

2010-02-05 Thread Chris Gauthier
When I worked for a previous employer, we evaluated bluecat and infoblox. Bluecat was quickly ruled out because of price and complexity. The Infoblox got a lot more attention and they were great to work with during our eval of the hardware. One manager was ready to purchase and was about to

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread vijay gore
Dear Sir, i am having 200 location each location having 7-10 machine, and out of them each and every time i have to found which is Linux host and which is Windows host. On Fri, Feb 5, 2010 at 11:08 PM, Smales, Robert robert.sma...@cw.comwrote: You can't identify the OS from a MAC address, MAC

Re: [c-nsp] find window's machine from Cisco Router

2010-02-05 Thread Michael Lee
maybe setup an acl for port range 137 to 139 with log then check on the logg On Fri, Feb 5, 2010 at 10:34 PM, Imran K guru...@gmail.com wrote: As stated by other posters, the best passive way to determine this is via stack operations. ( sequencing, etc ), which is best done off router due to