Re: Redistribute routes from EIGRP into BGP VRF

2007-08-09 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bailey Stephen wrote: Hello all, Currently working on a solution at the moment where I receive specific /25 routes via a leased line into the global routing table via EIGRP on a Cisco 2801. I then need to inject these routes into a

Re: Load balancing

2007-05-07 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dan wrote: Hello, I currently have 2 routers with a single gigabit link (and corresponding internal BGP session) between them. router1 -gigabit---router2 Simple setup. Now that we have reached the limit on this gigabit link, we

Re: NOC Personel Question (Possibly OT)

2007-03-14 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 K. Graham wrote: I was called a nocling but I doubt that would pass the HR test. I'm kinda partial to NOC Knuklehead. - -- = bep -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla -

Re: problem with BGP or I am an Idiot

2006-11-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Philip Lavine wrote: To all, Probabaly the the latter; however here is the situation. I am advertising a rte 1.1.1.1 via BGP to the Internet via ISP_A via my location in NJ. At my other location in CA where I am advertising another rte

Re: IRS goes IPv6!

2006-02-14 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeroen Massar wrote: I Ar Es, At least they have received the 2610:30::/32 allocation from ARIN. Lets see if they how taxing they find IPv6 ;) And who'd have thought they would be such late filers :-) [IPv6 whois information for

Re: IP Database

2005-09-30 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Billings wrote: I am looking for an IP database for our Company that can be used from a service provider needs and also from an Enterprise that will need to track IP's down to the host level. Also need to have RWhois integration for ARIN

Re: [eng/rtg] changing loopbacks

2005-09-29 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Randy Bush wrote: so i have junipers, ciscos, and a few gasp zebras in an ospf and ibgp mesh. they're peering via loopbacks, of course. unfortunately, i need to recover the space from which the loopbacks are taken. of course, i would like to do

Re: Any issue with www.cisco.com

2005-09-06 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chip Mefford wrote: Gerry Boudreaux wrote: mtr shows the packet loss in the last hop for me: 14. sjck-dmzbb-gw1.cisco.com 0.0%62 66.6 75.4 64.5 293.7 37.1 15. sjck-dmzdc-gw2.cisco.com

Re: Fwd: Re: Dst. ports 33438, 33437 (64.95.255.255) [data393]

2005-08-11 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fergie (Paul Ferguson) wrote: The following is some dialogue that I posted to the DShield.org list last night, trying to figure out why I was seeing these odd traceroute probes in my firewall logs at home. I post it here for two reasons:

Re: VoIP operators given 120-day deadline to implement E911 services

2005-05-19 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fergie (Paul Ferguson) wrote: | | Yep: | | http://news.yahoo.com/news?tmpl=storyu=/ap/20050519/ap_on_hi_te/911_internet_phones | That last part ought to be interesting to try and implement in 120 days: ...must provide the emergency operator with the

Re: what will all you who work for private isp's be doing in a few years?

2005-05-11 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adam Jacob Muller wrote: | | It's simple, | A DSL provider like speakeasy offers much more to a technical user like | myself than Comcast does, plus they have an incentive to keep me happy, | if i'm not i can leave and go with a competitor, comcast

Re: Verizon Offering Naked DSL in Northeast...

2005-04-18 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fergie (Paul Ferguson) wrote: | | Wow -- I wish SBC would follow suit. :-/ | | http://apnews.myway.com/article/20050418/D89I0KP00.html | You can already get this from Covad through providers like Speakeasy. I recently switched from SDSL on a dedicated

Re: Blog...

2005-04-11 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: |I have to agree... Paul's been doing an excellent job of picking out | | the | |one or two things that really matter each day, | | | Several other NANOG-affiliated projects post regular reports to the list. | CIDR report,

Re: Traceroute with ASN

2005-03-15 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ziggy David Lubowa wrote: | On Tue, 15 Mar 2005 17:51:32 +0800 (CST), Joe Shen wrote | |Yes. Can I do this on a Linux box without having to |install Zebra BGP on it? | | | Doesnt look like you have to, below is the link to the tarball | |

Re: Traceroute with ASN

2005-03-15 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brett Watson wrote: | On 3/15/05 3:11 AM, Ziggy David Lubowa [EMAIL PROTECTED] wrote: | | | |On Tue, 15 Mar 2005 17:51:32 +0800 (CST), Joe Shen wrote | |Yes. Can I do this on a Linux box without having to |install Zebra BGP on it? | |Doesnt look like

Re: Load balancing outgoing connections automatically.

2004-12-03 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Drew Weaver wrote: | Howdy. We?re looking at upgrading our border router(s) from | 7500s to (something) yet undetermined. What we would like to do is | perhaps find a platform that is smart enough to not route more outgoing | traffic across

Re: using sniffer on high-bandwidth pipes

2004-12-03 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve Francis wrote: | | It probably depends more on pps than bandwidth. | At a prior job, I used FreeBSD 4.x machines to capture over 400,000 pps, | I think, on gigabit links. | You need a nic that is supported with one of the device polling drivers |

Re: Setting up DS-3 and 2 4xT1

2004-12-02 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joshua Brady wrote: | My apologies if some may find this a little off-topic. | | However, here is my issue. I need a router, which can take 2 4xT1's | and a DS-3, while handing a Gbit for internal use. Now to complicate | the entire situation, this

Re: Domain Name System protection

2004-08-16 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Suresh Ramasubramanian wrote: | | Joe Shen wrote: | | We noticed there is continous name resolution requests | from IP address outside of our address pool and also | there is requests not conforming to DNS documents ( | like those from 10/8, 192.168/16

Re: 2511 line break

2004-07-26 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Randy Bush wrote: | on a 2511, which i am using as a serial console server for a bunch | of boxes, how do i send a break on one of the lines? | The terminal emulation app that you use should have the capability to send a telnet break to the terminal

Re: T1 short-haul vs. long-haul

2004-07-22 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michel Py wrote: |What is the demarc? | | | The demarc is the service demarcation. On your side of the demarc, | things are your responsibility. On the telco side of the demarc, it's | your provider and/or the LEC responsibility. | |

Re: BGP Dampening question

2004-07-20 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 D Train wrote: | If A is flapping THAT much, time to get another provider, or another | local loop. If it only flaps occasionally, not a big deal, the | routers will handle it. | | It isn't so much that one of our links are flapping all of the time,

Re: Teaching/developing troubleshooting skills

2004-06-29 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: |It's also important that one avoid: | |* The faulty assumption there is but one problem | | | Here's an interesting example that I came across | several years ago. It was in an office with lots | of PCs plugged into RJ45

Re: Teaching/developing troubleshooting skills

2004-06-24 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pete Kruckenberg wrote: | I'm working on trying to teach others in my group (usually | less-experienced, but not always) how to improve their | large-network troubleshooting skills (the techniques of | isolating a problem, etc). | | It's been so long

Re: Open Source BGP Route Optimization?

2004-05-28 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Per Gregers Bilse wrote: | At first I wasn't sure what a route optimizer was supposed to do -- | the term is rather generic and could have a lot of different | interpretations. | | A multi-path traffic balancing solution in the style of Cisco's OER has

Re: Open Source BGP Route Optimization?

2004-05-28 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Per Gregers Bilse wrote: | On May 28, 10:37am, Sam Stickland [EMAIL PROTECTED] wrote: | |Are there any BGP extensions that would cause a BGP speaker to foward all of |it's paths, not just it best? I believe quagga had made some recent attempts | | | It

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Couzens wrote: | On Wed, 2004-05-19 at 16:24, Eric A. Hall wrote: | |extract hostname from url, dig on hostname, whois on addr, and nine times |out of ten the host is in a CN netblock. that's from the spam that gets |into my mailbox. | | | Yes I

Re: New cisco exploit published in the media today

2004-03-29 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Scott Call wrote: | Forgive the not panicing, but none of the exploits utilized by this tool | are new, the newest being a year old, most being 2-3 years old, judging by | the dates on the cisco pages. | Yes, but the toolkit and the simplicity with

Re: Firewall opinions wanted please

2004-03-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Erik Haagsman wrote: | On Wed, 2004-03-17 at 21:02, Petri Helenius wrote: | |No, the applications should accept only authorized connections. If that |would be the case, there would be no need to filter at packet level. | | | No, since this would be

Re: Load Balancing Multiple DS3s (outgoing) on a 7500

2004-03-15 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joe Abley wrote: | | | On 12 Mar 2004, at 23:24, joe mcguckin wrote: | | Patrick, | | I suspect that each FE goes to a different AS... | | | In that case, sample/count outbound traffic volumes by | (prefix/AS/AS_PATH/something), sort the resulting

Re: good cabling in real environments [Re: Request for submissions: messy cabling and other broken things]

2003-12-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pekka Savola wrote: | On Tue, 16 Dec 2003, John Kinsella wrote: | |Always liked the work my fellow coworkers at Globix used to do - I don't |have any shots of SJC or NYC online (too bad - a few projects I went to |alot of trouble on to show the rest

Re: good cabling in real environments [Re: Request for submissions: messy cabling and other broken things]

2003-12-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Henry Linneweh wrote: | Any good software out there for cable documenting and even routing and for | ECO when things are changed? | I've looked at ITRACS (www.itracs.com) and Telsoft's stuff (http://telsoft-solutions.com/cable.html) before. ITT also

Re: good cabling in real environments [Re: Request for submissions: messy cabling and other broken things]

2003-12-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Kinsella wrote: | On Wed, Dec 17, 2003 at 07:07:13PM +0200, Pekka Savola wrote: | |How do you do good cabling in dynamic, real environments? :-) | | | You hide the spiders nest with lots of panduit covers? ;) | | Honestly, I think it comes down

Re: Yankee Group declares core routing obsolete (was Re: Anybody using GBICs?)

2003-10-30 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Richard A Steenbergen wrote: | On Tue, Oct 28, 2003 at 03:25:43PM -0500, Richard A Steenbergen wrote: | |On Tue, Oct 28, 2003 at 09:48:01AM -0800, [EMAIL PROTECTED] wrote: | |I'm looking into doing some research that will make use of GBICs(Gigabit

Re: [arin-announce] IPv4 Address Space (fwd)

2003-10-28 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andy Dills wrote: | On Tue, 28 Oct 2003 [EMAIL PROTECTED] wrote: | | |The bottom line is that there are three different models |which may predict when we run out of IPv4 addresses. The |models predict dates ranging from 2022 to 2045. None of |the

Re: Extreme BlackDiamond

2003-10-13 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Boyle wrote: | | At 04:43 PM 10/13/2003, [EMAIL PROTECTED] wrote: | | 7600 is also vertical boards whereas the 6500 is horizontal. | | Yep, I think from now on, we should make this a primary distinction | between switch and a router: If a

Re: Atm-t1 8t1-ima

2003-08-29 Thread Bruce Pinsky
Ejay Hire wrote: Hi all. Can anyone tell me if the 8 port IMA network module is supported in the 3640s? I used the Compatibility tool, and it said I'd be good with 12.2.11 YT but I'm having no success. Any advice is appreciated. *Mar 1 00:00:05.211: %PA-2-UNDEFPA: Undefined Port Adaptor

Re: Fun new policy at AOL

2003-08-29 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Omachonu Ogali wrote: |trusted-mx.crocker.com uses DNSRTTL (Real Time Trust List) to only |accept connections from IPs it trusts. | | | Hate to break up your envisionary experiences and insight into | reinventing the wheel, but what happened to

Re: Blocking port 135?

2003-08-01 Thread Bruce Pinsky
Bob German wrote: Absolutely. All of the NetBIOS ports: 135, 137, 138, 139, 445. And filtering 445 in the outbound direction to prevent attacks from the inside out is probably prudent as well. = bep

Re: State Super-DMCA Too True

2003-03-30 Thread Bruce Pinsky
William Allen Simpson wrote: ...snip...snip... (a) Telecommunications and telecommunications service mean any service lawfully provided for a charge or compensation to facilitate the origination, transmission, retransmission, emission, or reception of signs, data, images, signals,

Re: State Super-DMCA Too True

2003-03-30 Thread Bruce Pinsky
Jack Bates wrote: Dan Hollis wrote: Using the law to defend deceptive business practices. Makes perfect sense. It's either that or start charging the customer's what it really costs. They've been so happy to get away from that. Large networks have cut their rates based on oversell so that

Re: how to get people to upgrade? (Re: The weak link? DNS)

2003-03-26 Thread Bruce Pinsky
Charles Sprickman wrote: On Wed, 26 Mar 2003 [EMAIL PROTECTED] wrote: One obvious problem with this would be that certain vendors prefer to backport security fixes to older versions rather than test and release new versions...so an insecure-looking version string may actually have had fixes

Re: BGP to doom us all

2003-02-28 Thread Bruce Pinsky
Jim Deleskie wrote: http://news.com.com/2100-1009-990608.html?tag=fd_lede1_hed Seems the BGP will be the down fall of the internet, the sky is falling the sky is falling What a crock of crap. Knowing who someone is doesn't stop them from causing intentional or unintentional problems. In

Re: BGP to doom us all

2003-02-28 Thread Bruce Pinsky
Jim Deleskie wrote: Bruce, I agree, while we all need to 'do the right thing' and only announce what we are suppose to, we also need to maintain the right level being paranoid to protect the networks we are responsible for. Right. And so while authentication and encryption of routing protocol

Re: two questions

2002-11-08 Thread Bruce Pinsky
Jeff Aitken wrote: On Fri, Nov 08, 2002 at 11:32:43AM -0800, Scott Granados wrote: I have seen some router cpu questions. I know this is not the place for router questions specifically could someone pass on the name of the group for cisco users I remember there was one. [EMAIL PROTECTED]

Re: Talked about this before

2002-09-09 Thread Bruce Pinsky
Forrest W. Christian wrote: On Mon, 9 Sep 2002, Pawlukiewicz Jane wrote: Quick Question, how much memory does the bgp tables actually take. I'm estimating 32 mb in my plan, but I'm worried that's not enough. Two views: hln-cs1#sh ip bgp summ BGP router identifier 206.127.65.1,