[Nanog-futures] [OT] [IP] ICANN President: $750, 000+$195, 000 bonus vs President of US: $400, 000

2010-02-12 Thread Gregory Hicks
I am DEFINITELY in the wrong business! - Begin Forwarded Message - From: David Farber d...@farber.net Subject: [IP] ICANN President: $750,000+$195,000 bonus vs President of US: $400,000 Date: Fri, 12 Feb 2010 16:36:48 -0500 To: ip i...@v2.listbox.com Begin forwarded

Re: Linux Router distro's with dual stack capability

2010-02-12 Thread Steve Bertrand
Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. Raises hand. I do, on these boxes: http://www.mikrotikrouter.net/ Steve

Ticket/Asset Managment system

2010-02-12 Thread Brandon Grant
I am currently evaluating my options for an open source trouble ticket management system that is based on assets (the trouble ticket is opened on a particular server, network element, etc.). Also, I am hoping to find a tool that can tie in with SNMP software so I can have tickets auto-generated

Re: Ticket/Asset Managment system

2010-02-12 Thread Simon Morvan
On 12/02/2010 16:56, Brandon Grant wrote: I am currently evaluating my options for an open source trouble ticket management system that is based on assets (the trouble ticket is opened on a particular server, network element, etc.). Also, I am hoping to find a tool that can tie in with SNMP

Re: Ticket/Asset Managment system

2010-02-12 Thread charles
Have you looked into any cmdb systems? There are some good open source ones. Opencmdb.org I think. Sent via BlackBerry from T-Mobile

Re: Ticket/Asset Managment system

2010-02-12 Thread Phil Regnauld
Brandon Grant (brandon) writes: I am currently evaluating my options for an open source trouble ticket management system that is based on assets (the trouble ticket is opened on a particular server, network element, etc.). Hi Brandon, Maybe RT (already mentioned) could do the

Re: Ticket/Asset Managment system

2010-02-12 Thread Jens Link
Brandon Grant bran...@momentous.ca writes: Also, I am hoping to find a tool that can tie in with SNMP software so I can have tickets auto-generated for certain types of SNMP traps or polling failures. Do it the other way round: Use something like Nagios, Zabbix or Icinga for monitoring and if

Re: Ticket/Asset Managment system

2010-02-12 Thread Ray Sanders
A previous employer did something similar with Solarwind's ipMonitor and Kayako eSupport. Neither are open source, but at the time, the cost for each piece of software was reasonable. Jens Link wrote: Brandon Grant bran...@momentous.ca writes: Also, I am hoping to find a tool that can

RE: Ticket/Asset Managment system

2010-02-12 Thread Jeffrey Negro
I'd second this. RT is a really nice ticketing system with great email capabilities. Use nagios to send an email to an address you have RT configured to receive, and you can even pipe that email address directly into a specific ticket queue within RT. -Original Message- From: Jens Link

Re: Ready to get your federal computer license?

2010-02-12 Thread Florian Weimer
* Scott Morris: Florian Weimer wrote: * Scott Morris: I'm trying really hard to find my paranoia hat, and just to relieve some boredom I read the entire bill to try to figure out where this was all coming from (2) may declare a cybersecurity emergency and order the limitation or

Re: Ready to get your federal computer license?

2010-02-12 Thread Jorge Amodio
On Fri, Feb 12, 2010 at 7:11 AM, Florian Weimer f...@deneb.enyo.de wrote: * Scott Morris: Florian Weimer wrote: * Scott Morris: I'm trying really hard to find my paranoia hat, and just to relieve some boredom I read the entire bill to try to figure out where this was all coming from

Re: Ready to get your federal computer license?

2010-02-12 Thread Joly MacFie
As secretary of the Internet Society's NY Chapter I'd like to back up Chris's appeal. We are in a position of familiarity and consultation with local government but definitely needful of the kind of technical expertise so abundant in Nanog. We'd very much welcome fresh blood. Steven - I believe

Video: 10G switches

2010-02-12 Thread Anshuman Kanwar
I am capacity planning for 8-10K streams of video (150-300Kbps) through a Nexus 7000 or an EX 8200 pair. The same infrastructure will be carrying quite a few audio minutes as well. Does someone have experience with either of these platforms with this scale of audio/video ? Looking for some

Weekly Routing Table Report

2010-02-12 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-st...@lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith

Re: Google to offer fiber to end users

2010-02-12 Thread Joel Jaeggli
James Hess wrote: For now.. with 1gigabit residential connections, BCP 38 OUGHT to be Google's answer. If Google handles that properly, they _should_ make it mandatory that all traffic from residential customers be filtered, in all cases, in order to only forward packets with their

CYMRU Bogon Peering

2010-02-12 Thread Thomas Magill
In efforts to further protect us against threats I am considering establishing Bogon peers to enable me to filter unallocated address space. I am just wondering if this is a worthwhile step to take and if anyone has ran into any issues or points of concern that I may want to take into account.

Re: CYMRU Bogon Peering

2010-02-12 Thread Bill Blackford
I've been doing this for some time on two routers injecting the null routes into my AS. No issues. Beats the heck out of trying to use ACLs. However, the prefix count is rapidly diminishing as more blocks are being released by the various RIRs hence being pulled from the bogon list. -b On Fri,

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Thomas Magill wrote: In efforts to further protect us against threats I am considering establishing Bogon peers to enable me to filter unallocated address space. I am just wondering if this is a worthwhile step to take and if anyone has ran into any issues or points of concern that I may want

Re: CYMRU Bogon Peering

2010-02-12 Thread Jack Carrozzo
I agree - quick setup and no issues. A++ Would Peer Again -Jack Carrozzo On Fri, Feb 12, 2010 at 4:10 PM, Steve Bertrand st...@ibctech.ca wrote: Thomas Magill wrote: In efforts to further protect us against threats I am considering establishing Bogon peers to enable me to filter unallocated

RE: CYMRU Bogon Peering

2010-02-12 Thread Thomas Magill
Thanks to everyone who replied. That settles it! I'm going to do it. -Original Message- From: Jack Carrozzo [mailto:j...@crepinc.com] Sent: Friday, February 12, 2010 1:14 PM To: Steve Bertrand Cc: Thomas Magill; nanog@nanog.org Subject: Re: CYMRU Bogon Peering I agree - quick setup

Re: CYMRU Bogon Peering

2010-02-12 Thread Mr. James W. Laferriere
Hello All , On Fri, 12 Feb 2010, Bill Blackford wrote: On Fri, Feb 12, 2010 at 12:51 PM, Thomas Magill tmag...@providecommerce.com wrote: In efforts to further protect us against threats I am considering establishing Bogon peers to enable me to filter unallocated address space. I

Re: CYMRU Bogon Peering

2010-02-12 Thread Jack Carrozzo
Current list of prefixes Cymru considers bogon: http://www.cymru.com/Documents/bogon-bn-nonagg.txt Does that answer the question? -Jack Carrozzo On Fri, Feb 12, 2010 at 4:21 PM, Mr. James W. Laferriere bab...@baby-dragons.com wrote:        Hello All , On Fri, 12 Feb 2010, Bill Blackford

Re: CYMRU Bogon Peering

2010-02-12 Thread Tim Wilde
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/12/2010 4:21 PM, Mr. James W. Laferriere wrote: I've a question for the CYMRU Team , My reasoning for posting here is to get a much wide knowledge base . Does or Is the 'Bogon Peering' Product(?) , Only at the IANA-RIR allocations

Re: Linux Router distro's with dual stack capability

2010-02-12 Thread Randy Bush
FreeBSD has supported polling for a long time (V6?) and interrupt coalescing since some release of V7. (Latest release is V8.) exactly. and they kick ass randy

BGP Update Report

2010-02-12 Thread cidr-report
BGP Update Report Interval: 04-Feb-10 -to- 11-Feb-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS3300 188306 14.4%3552.9 -- BT-INFONET-EUROPE BT-Infonet-Europe 2 - AS18170

The Cidr Report

2010-02-12 Thread cidr-report
This report has been generated at Fri Feb 12 21:11:25 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: CYMRU Bogon Peering

2010-02-12 Thread Seth Mattinen
On 2/12/2010 13:47, Tim Wilde wrote: On 2/12/2010 4:21 PM, Mr. James W. Laferriere wrote: I've a question for the CYMRU Team , My reasoning for posting here is to get a much wide knowledge base . Does or Is the 'Bogon Peering' Product(?) , Only at the IANA-RIR allocations level ?

dns interceptors

2010-02-12 Thread Randy Bush
i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. what are other roaming folk doing about this? randy

Re: Ready to get your federal computer license?

2010-02-12 Thread Jorge Amodio
A journey of a thousand miles begins with a single step. Absolutely true, but many folks from the technical side are sick tired trying to talk to people that hear but do not listen and dealing with others that have nothing else to contribute than their selfish interests or the interests of the

Re: dns interceptors

2010-02-12 Thread Jared Mauch
On Feb 12, 2010, at 5:15 PM, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. what are other roaming folk doing

Re: dns interceptors

2010-02-12 Thread Jim Richardson
On Fri, Feb 12, 2010 at 2:15 PM, Randy Bush ra...@psg.com wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge.  this is not the first time i have been caught by this. what are other roaming

BIRD vs Quagga

2010-02-12 Thread Fried, Jason (US - Hattiesburg)
I was wondering what kind of experience the nanog userbase has had with these two packages. Thanks -- Jason Fried This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended

Re: Google to offer fiber to end users

2010-02-12 Thread Jared Mauch
On Feb 12, 2010, at 3:17 PM, Joel Jaeggli wrote: BCP 38 is all fine and dandy, and you should implement it, but it's not going to stop the botnets. Yup. Many have these devices they call Routers they buy locally that translate spoofed addresses to some well-known outside public IP. (They

Re: BIRD vs Quagga

2010-02-12 Thread Steve Bertrand
Fried, Jason (US - Hattiesburg) wrote: I was wondering what kind of experience the nanog userbase has had with these two packages. Quagga++. I've never tried the other. I use Quagga for OSPF, OSPFv3 and BGP (IPv4 and IPv6). With a bit of trickery, it fits in nicely with my RANCID setup, and

Re: CYMRU Bogon Peering

2010-02-12 Thread Nick Hilliard
On 12/02/2010 21:21, Mr. James W. Laferriere wrote: ps:I am Very well aware that (so far) there is no standard format for returned requests from *whois daemons . eh, what are you talking about? If you want to prefix-filter your bgp feeds using RPSL objects, you can pull the fltr-bogons

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: On 2/12/2010 13:47, Tim Wilde wrote: On 2/12/2010 4:21 PM, Mr. James W. Laferriere wrote: I've a question for the CYMRU Team , My reasoning for posting here is to get a much wide knowledge base . Does or Is the 'Bogon Peering' Product(?) , Only at the IANA-RIR

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jared Mauch wrote: On Feb 12, 2010, at 5:15 PM, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. what are other

Re: BIRD vs Quagga

2010-02-12 Thread Thomas Mangin
http://www.uknof.org.uk/uknof15/ Has quite a few talk about Quagga/Bird as they are used as route servers in Europe. For a route server use, BGP under very high number of peers, it seems bird now behave better than anything else. so for normal use, it would seems that whatever you pick will

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jim Richardson wrote: On Fri, Feb 12, 2010 at 2:15 PM, Randy Bush ra...@psg.com wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this.

Re: dns interceptors

2010-02-12 Thread Bill Thompson
On Fri, 12 Feb 2010 17:32:33 -0500 Jared Mauch ja...@puck.nether.net wrote: On Feb 12, 2010, at 5:15 PM, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not

Re: BIRD vs Quagga

2010-02-12 Thread Nathan Ward
On 13/02/2010, at 11:51 AM, Steve Bertrand wrote: fwiw, I've also heard good things about bgpd(8) and ospfd(8), but I haven't tried those either...zebra/Quagga just stuck. OpenBGPd would be great for a public route server at an IX. It's not so great for use in a network unless you run it on

Re: CYMRU Bogon Peering

2010-02-12 Thread Seth Mattinen
On 2/12/2010 15:03, Steve Bertrand wrote: What time frame do you determine to be instability? The following is from a box that has ~25 neighbours. Since the box was reloaded (6w3d ago), I've had the same uptime with the Team Cymru neighbours as I do with internal gear. I can't say that I've

Re: CYMRU Bogon Peering

2010-02-12 Thread Nathan Ward
On 13/02/2010, at 2:03 PM, Seth Mattinen wrote: On 2/12/2010 15:03, Steve Bertrand wrote: What time frame do you determine to be instability? The following is from a box that has ~25 neighbours. Since the box was reloaded (6w3d ago), I've had the same uptime with the Team Cymru neighbours

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: On 2/12/2010 15:03, Steve Bertrand wrote: What time frame do you determine to be instability? The following is from a box that has ~25 neighbours. Since the box was reloaded (6w3d ago), I've had the same uptime with the Team Cymru neighbours as I do with internal gear. I

Re: CYMRU Bogon Peering

2010-02-12 Thread Seth Mattinen
On 2/12/2010 17:51, Rob Thomas wrote: Hi, Seth. While I have your attention, I've noticed there's been a bit of instability lately with the BGP sessions (in fact one of mine right now is down). With 30 routes it's not a big deal to have frequent churn, but if you're going to expand that to

Re: dns interceptors [SEC=UNCLASSIFIED]

2010-02-12 Thread Wilkinson, Alex
0n Sat, Feb 13, 2010 at 06:15:02AM +0800, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. Whats a dns

Re: dns interceptors [SEC=UNCLASSIFIED]

2010-02-12 Thread John Levine
Whats a dns trapper ? A transparent proxy that intercepts DNS requests and provides edited results intended to improve your customer experience, typically defined as returning A records for web servers full of advertisements when you were expecting something else. The unfortunate fact is that if

Re: dns interceptors [SEC=UNCLASSIFIED]

2010-02-12 Thread Brandon Galbraith
Transparent dns rewriter inline on the network On 2/12/10, Wilkinson, Alex alex.wilkin...@dsto.defence.gov.au wrote: 0n Sat, Feb 13, 2010 at 06:15:02AM +0800, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns