Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
I have a customer reporting the same thing. The traffic flood goes to offline modem bank IPs. So far, Akamai hasn't actually grasped what the problem is and says everything is fine. :( Luckily, most of the traffic (not all) is coming from my local cluster, so it's easier to monitor what's

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Chris Adams
Once upon a time, Jack Bates jba...@brightok.net said: I have a customer reporting the same thing. The traffic flood goes to offline modem bank IPs. So far, Akamai hasn't actually grasped what the problem is and says everything is fine. :( aolme too/aol I hadn't captured the traffic during

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Tom Beecher
Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In the last capture I have, it was all

Re: Verizon FiOS Distribution Switch

2011-01-21 Thread Kaegler, Mike
On 1/19/11 3:56 PM, Chris Burwell cburw...@gmail.com wrote: Any advice or tips would be helpful. If all you need the ActionTek for is a MoCA bridge (to make the cable boxes talk to the larger world), my experience is you can move it to the inside of your NAT if you like. One does not need to

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Patrick W. Gilmore
The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. If any network with on-net Akamai servers has an issue, including this or any other, please e-mail netsupport-...@akamai.com and that will open a ticket with our Network

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 9:48 AM, Patrick W. Gilmore wrote: The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. I agree. Akamai NOC is always great to work with. Jack

Re: Software DNS hghi availability and load balancer solution [SEC=UNCLASSIFIED]

2011-01-21 Thread david raistrick
On Wed, 19 Jan 2011, Wilkinson, Alex wrote: freebsd + varnish + carp (http://www.openbsd.org/faq/pf/carp.html) two of the three won't work @ EC2 (for my purposes, no idea about the original poster - but he did ask about DNS based solutions so I suspect he's in a similar boat) -- david

Re: Software DNS hghi availability and load balancer solution

2011-01-21 Thread david raistrick
On Tue, 18 Jan 2011, Jay Reitz wrote: gdnsd is very robust and fast and has an interface that a networking engineer won't mind. It comes with a geolocation plugin with health-check failover via HTTP. http://code.google.com/p/gdnsd/ Thanks Jay, that looks like a good option - I like

anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
It is unclear from this NOTAM whether this is an intentional perturbation of the satellite signals vs. a terrestrial transmitter (my money is on the latter), but it illustrates why one might want geographically dispersed time sources on one's network, as well as why the current trend towards

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Jack Carrozzo
As I understand it, they're trying to get the WAAS sat back online and working properly after it went on walkabout some time ago. It's currently in a nonstandard orbit while they work on it. I suppose it's just pure speculation that they'd only be working on the WAAS service since the NOTAM

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Majdi S. Abbas
On Fri, Jan 21, 2011 at 12:35:32PM -0500, Jack Carrozzo wrote: As I understand it, they're trying to get the WAAS sat back online and working properly after it went on walkabout some time ago. It's currently in a nonstandard orbit while they work on it. I suppose it's just pure speculation

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Matthew Kaufman
On 1/21/2011 9:31 AM, Robert E. Seastrom wrote: It is unclear from this NOTAM whether this is an intentional perturbation of the satellite signals vs. a terrestrial transmitter (my money is on the latter) I'm not sure how you'd get increasing radius with altitude from anything but a jammer

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Jack Carrozzo
On Fri, Jan 21, 2011 at 12:36 PM, Majdi S. Abbas m...@latt.net wrote: Nahh, that was the western WAAS sat, IIRC. This is...Something Else Entirely. Ahh, my mistake. Sitting in the back now, -Jack Carrozzo

RE: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Matlock, Kenneth L
Probably related to: http://www.engadget.com/2011/01/20/faa-warns-of-ongoing-gps-issues-in-so utheastern-us-due-to-defens/ Sounds like they're doing 'tests' on GPS near SE Georgia. Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message-

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Gary E. Miller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yo All! On Fri, 21 Jan 2011, Matthew Kaufman wrote: I'm not sure how you'd get increasing radius with altitude from anything but a jammer near sea level. Agreed. One of these tests was recently run in Utah and we saw the effects in Central

Weekly Routing Table Report

2011-01-21 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

how statefull firewall works for udp?

2011-01-21 Thread Tarig Ahmed
Dear All Hi Default configuration for statefull firewall is to allow traffic form TRUST ZONE to UNTRUST ZONE. As I Know those device will use some feilds in the TCP Header. But, how the firewall will handle this policy for none TCP traffics (udp, icmp, and IPsec)? I think understanding

Global Crossing Contact

2011-01-21 Thread Righa Shake
Kindly anyone on Global crossing get in touch with me off list. I have a routing problem that i require assistance. Regards, Shake Righa

Re: how statefull firewall works for udp?

2011-01-21 Thread Mike.
On 1/21/2011 at 9:39 PM Tarig Ahmed wrote: |Dear All |Hi | |Default configuration for statefull firewall is to allow traffic form |TRUST ZONE to UNTRUST ZONE. | |As I Know those device will use some feilds in the TCP Header. | |But, how the firewall will handle this policy for none TCP traffics

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Owen DeLong
On Jan 21, 2011, at 10:27 AM, Gary E. Miller wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yo All! On Fri, 21 Jan 2011, Matthew Kaufman wrote: I'm not sure how you'd get increasing radius with altitude from anything but a jammer near sea level. Agreed. One of these

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Matlock, Kenneth L matlo...@exempla.org writes: Probably related to: http://www.engadget.com/2011/01/20/faa-warns-of-ongoing-gps-issues-in-so utheastern-us-due-to-defens/ Sounds like they're doing 'tests' on GPS near SE Georgia. Yes, very likely related considering that the map from the

Re: how statefull firewall works for udp?

2011-01-21 Thread Blake Hudson
These protocols have their own headers, as well as the IP header that the firewall can use to maintain state. The difference between them and TCP is that these protocols are connectionless. Thus, the firewall does not know when the connection has closed. The typical solution to this is to have an

Re: how statefull firewall works for udp?

2011-01-21 Thread Laurens Vets
Hello, Default configuration for statefull firewall is to allow traffic form TRUST ZONE to UNTRUST ZONE. As I Know those device will use some feilds in the TCP Header. But, how the firewall will handle this policy for none TCP traffics (udp, icmp, and IPsec)?

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Michael Holstein
I'd be curious to see what effects (if any) those who use GPS-disciplined NTP references in Southeastern Georgia see from this experiment. Aren't CDMA BTS clocked off GPS? NTP isn't going to be the only ripple. Regards, Michael Holstein Cleveland State University

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Gary Buhrmaster
NTP isn't going to be the only ripple. Most of the brand name GPS NTP solutions have a clock with is more than stable enough to survive without GPS lock for 45 minutes(*). Some of the more expensive units with temperature controlled oscillators have hold times in the many weeks. My guess is

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Cutler James R
On Jan 21, 2011, at 4:23 PM, Michael Holstein wrote: I'd be curious to see what effects (if any) those who use GPS-disciplined NTP references in Southeastern Georgia see from this experiment. Aren't CDMA BTS clocked off GPS? NTP isn't going to be the only ripple. Regards,

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Cutler James R
On Jan 21, 2011, at 4:45 PM, Gary Buhrmaster wrote: NTP isn't going to be the only ripple. Most of the brand name GPS NTP solutions have a clock with is more than stable enough to survive without GPS lock for 45 minutes(*). Some of the more expensive units with temperature controlled

BGP Update Report

2011-01-21 Thread cidr-report
BGP Update Report Interval: 13-Jan-11 -to- 20-Jan-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS18025 26565 0.9% 737.9 -- ACE-1-WIFI-AS-AP Ace-1 Wifi Network 2 - AS32528

The Cidr Report

2011-01-21 Thread cidr-report
This report has been generated at Fri Jan 21 21:11:51 2011 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Michael Holstein michael.holst...@csuohio.edu writes: I'd be curious to see what effects (if any) those who use GPS-disciplined NTP references in Southeastern Georgia see from this experiment. Aren't CDMA BTS clocked off GPS? NTP isn't going to be the only ripple. Sure, and there are

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Gary Buhrmaster gary.buhrmas...@gmail.com writes: NTP isn't going to be the only ripple. Most of the brand name GPS NTP solutions have a clock with is more than stable enough to survive without GPS lock for 45 minutes(*). Some of the more expensive units with temperature controlled

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread James Brown
On Fri, Jan 21, 2011 at 5:26 PM, Robert E. Seastrom r...@seastrom.com wrote: Sure, and there are GPS-steered Rb clocks in telco-land too as well as a ton of stuff I don't know about yet until everyone else here chimes in; it's just that NTP is highly visible to NANOGers. What about Modular

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Joel Jaeggli
On 1/21/11 2:26 PM, Robert E. Seastrom wrote: Michael Holstein michael.holst...@csuohio.edu writes: I'd be curious to see what effects (if any) those who use GPS-disciplined NTP references in Southeastern Georgia see from this experiment. Aren't CDMA BTS clocked off GPS? NTP isn't

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Owen DeLong
On Jan 21, 2011, at 1:45 PM, Gary Buhrmaster wrote: NTP isn't going to be the only ripple. Most of the brand name GPS NTP solutions have a clock with is more than stable enough to survive without GPS lock for 45 minutes(*). Some of the more expensive units with temperature controlled

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Joel Jaeggli joe...@bogus.com writes: Sure, and there are GPS-steered Rb clocks in telco-land too as well as a ton of stuff I don't know about yet until everyone else here chimes in; it's just that NTP is highly visible to NANOGers. if your high quality stratum one time source isn't capable

new subscription management tools driven by LTE?

2011-01-21 Thread Rogelio
With LTE picking up momentum, what type of new subscription management tools will operators need? (e.g. control complexities of billions of mobile data transactions, personalized billing, centralized control across various licensed and unlicensed bands, alerts when limits reached, etc.)

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Lamar Owen
On Friday, January 21, 2011 04:23:52 pm Michael Holstein wrote: Aren't CDMA BTS clocked off GPS? Yep; and many of the aftermarket GPS receivers commonly used for the disciplined clock for NTP originally came from that service (Agilent/HP Z3801 and Z3816, for instance).

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Pete Carah
On 01/21/2011 04:29 PM, Lamar Owen wrote: On Friday, January 21, 2011 04:23:52 pm Michael Holstein wrote: Aren't CDMA BTS clocked off GPS? Yep; and many of the aftermarket GPS receivers commonly used for the disciplined clock for NTP originally came from that service (Agilent/HP Z3801 and

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Peter Beckman
On Fri, 21 Jan 2011, Robert E. Seastrom wrote: Firstly (idle curiosity) - does anyone have further publicly divulgable details on what's apparently a terrestrial jammer test or maybe an operational exercise involving the Bermuda Triangle and making planes and ships disappear... My first