RE: Cisco IOS Failure due to Virus

2003-09-10 Thread Niaz, Wajahat
Try using only CEF. I have seen similar problems in the past using dcef -Original Message- From: Richard J.Sears [mailto:[EMAIL PROTECTED] Sent: Thursday, September 11, 2003 12:26 AM To: Robert Blayzor Cc: Nanog Subject: Re: Cisco IOS Failure due to Virus Hi Robert, Thanks for the in

Some very strange network behaviors

2003-09-10 Thread Christopher Bird
I am not sure if this post belongs here, so I apologize if it does not. I have been experiencing some weirdness while traveling and wondered if the group has any insight into what seems to be a pretty ugly situation. I am traveling and have my lap top with me. I am staying in a hotel that offers

Re: Cisco IOS Failure due to Virus

2003-09-10 Thread Richard J . Sears
Hi Robert, Thanks for the info. We are running dCEF...routers show about 4% CPU load and the following memory: BR02#sh mem Head Total(b)Used(b)Free(b) Lowest(b) Largest(b) Processor 613AE340 247798976 106515996 141282980 140653360 134546752

Re: Cisco IOS Failure due to Virus

2003-09-10 Thread Robert Blayzor
On 9/10/03 10:58 PM, "Richard J.Sears" <[EMAIL PROTECTED]> wrote: > %SYS-2-MALLOCFAIL: Memory allocation of 704 bytes failed from > 0x60329F00, alignment 0 > Pool: Processor Free: 92744 Cause: Memory fragmentation > Alternate Pool: None Free: 0 Cause: No Alternate pool > -Process= "Pool Manag

Cisco IOS Failure due to Virus

2003-09-10 Thread Richard J . Sears
Hey Everyone - We have two 7507 routers configured with dual RSP4s w/256MB RAM, VIP2-50s with 128/8MB RAM, Gig, POSIP OC3 and Fast Ethernet interfaces. These routers have run flawlessly for over two years now. But about two weeks ago, all of a sudden we started having serious crashing problems

Re: TnT ethernet card fix?

2003-09-10 Thread Andy Johnson
Running TAOS 9.0.9 on the 4ether2 cards with iproute-cache-enable = no has eliminated all of our problems. No significant impact on the customers connected to it. Older versions (TAOS 7.2.3) with route-cache disabled also seem to run smoothly (also w/ 4ether2 cards). Although, given Lucent's t

Re: Max TNT ping thing

2003-09-10 Thread Andy Walden
Drew, I believe this was the last message about it. Basically, put on all of your filters on all interfaces for both worms, play with the cache as indicated below and make sure you are running later code. At least 9.0.0.9 if I recall if not TAOS 10+. andy -- PGP Key Available at http://www.tige

RE: TnT ethernet card fix?

2003-09-10 Thread Geo.
Yeah, we did, we are in the process of installing 5 new patton boxes instead of the TNT.. Lucent is unconscious.   Geo. -Original Message-   Anyone ever come up with a solution for the performance/reliability issues with the TNT without having to buy a new Ethernet car

TnT ethernet card fix?

2003-09-10 Thread Drew Weaver
    Anyone ever come up with a solution for the performance/reliability issues with the TNT without having to buy a new Ethernet card?   Thanks, -Drew  

Re: SoBig volume way down

2003-09-10 Thread Regis M. Donovan
On Wed, Sep 10, 2003 at 11:21:41AM -0700, Joe Boyce wrote: > >From what I understood, it was supposed to (or did) deactivate on > 9/10/03. sobig.f was supposed to deactivate by today. now to see if we get sobig.G starting up tomorrow... --regis

ISS Security Brief: Multiple Vulnerabilities in Microsoft RPC Service

2003-09-10 Thread Ingevaldson, Dan (ISS Atlanta)
FYI, http://xforce.iss.net/xforce/alerts/id/152 Regards, === Daniel Ingevaldson Engineering Manager, X-Force R&D [EMAIL PROTECTED] 404-236-3160 Internet Security Systems, Inc. The Power to Protect http://www.iss.net ===

RE: SoBig volume way down

2003-09-10 Thread Vachon, Scott
>Did this thing >expire (in which case, roughly 10% of all infected machines have >misconfigured clocks, assuming the exp date was in UDT), or did something >else happen? Just curious... According to sarc.com: The worm de-activates on September 10, 2003. The last day on which the worm will sp

Re: SoBig volume way down

2003-09-10 Thread Joe Boyce
>From what I understood, it was supposed to (or did) deactivate on 9/10/03. Regards, Joe Boyce --- InterStar, Inc. - Shasta.com Internet Phone: +1 (530) 224-6866 x105 Email: [EMAIL PROTECTED] Wednesday, September 10, 2003, 11:03:03 AM, you wrote: u3a> the volume of SoBig virii hitting our m

RE: cef/process switching problem

2003-09-10 Thread Michel Py
> Jay Austad wrote: > I've got a cisco MC3810 with a bunch of DSL customers on it. > CEF is enabled, but when I do a show int stat, I see that almost > 100% of the outbound packets on the ethernet interface are > process switched, and not being matched in the route cache. > The Input looks just fi

SoBig volume way down

2003-09-10 Thread up
the volume of SoBig virii hitting our mail server had gotten so big that I had to have a cron job delete the quarantine every hour. We were averaging about 400 of them per hour until around midnight last night, where the volume went to and remains about 1/10th of that. Did this thing expire (in

[resend] OT: operators script writers' experience wanted

2003-09-10 Thread Eliot Lear
[For some reason, the first message ended up in the bit bucket] Dear all, Over the last few years, a bunch of us from the vendor community have sought your opinion about doing programmatic configuration to routers, switches, and the like. Over the last few months, the NETCONF working group was f

Fibertech Networks Contact

2003-09-10 Thread Robert Blayzor
Is anyone from Fibertech Networks lurking? Could you contact me off list please. Thanks. -- Robert Blayzor, BOFH INOC, LLC [EMAIL PROTECTED] PGP: http://www.inoc.net/~dev/ Key fingerprint = A445 7D1E 3D4F A4EF 6875 21BB 1BAA 10FE 5748 CFE9 Never underestimate the bandwidth of a station wagon

Re: Dynamic Internet Maps based on BGP table / AS_PATH

2003-09-10 Thread Daniel Karrenberg
On 09.09 17:09, Mehmet Akcin wrote: > > hey > are you looking something like that? > http://www.netlantis.org/index.php?menu=2&page=gasp Actually much nicer is now http://www.netlantis.org/index.html?menu=2&page=sagm This is *really* cool. Daniel

Re: Dynamic Internet Maps based on BGP table / AS_PATH

2003-09-10 Thread Daniel Karrenberg
http://www.ris.ripe.net/cgi-bin/risas.cgi Select output format "graphical". The really nice feature is that you can do this for any time in the recent past and from multiple view points because it works off a database of BGP data collected in 9 places all over the globe. Feedback welco