Re: do not filter your customers

2012-02-23 Thread Anurag Bhatia
Haha! Funny (Sent from my mobile device) Anurag Bhatia http://anuragbhatia.com On Feb 23, 2012 12:27 PM, Randy Bush ra...@psg.com wrote: and things when further downhill from there, when telstra also did not filter what they announced to their peers, and the peers went over prefix limits

Re: Question regarding anycasting in CDN setup

2012-02-23 Thread Anurag Bhatia
Great explanation . Thanks everyone (Sent from my mobile device) Anurag Bhatia http://anuragbhatia.com On Feb 9, 2012 1:37 AM, Joe Provo nanog-p...@rsuc.gweep.net wrote: On Thu, Feb 09, 2012 at 01:28:07AM +0530, Anurag Bhatia wrote: [snip] I have never did such setup, but I assume it works

RE: Cisco CAT6500 IOS Simulator

2012-02-23 Thread Carlos Asensio
Hi Hammer, Thanks for your answer. That was pretty much what I was thinking. Thanks to all the offers I've received off-line :). Best regards, Carlos. -Mensaje original- De: -Hammer- [mailto:bhmc...@gmail.com] Enviado el: miércoles, 22 de febrero de 2012 16:56 Para: nanog@nanog.org

Re: do not filter your customers

2012-02-23 Thread Christian de Larrinaga
not just the .au govt C On 23 Feb 2012, at 07:54, Jay Mitchell wrote: I'm laughing now, but it wasn't funny a couple of hours ago. Seems a lot of the .au govt needs to learn some carrier diversity... On 23/02/2012, at 4:41 PM, Randy Bush ra...@psg.com wrote: don't filter your customers.

Re: Customer Notification System.

2012-02-23 Thread Rich Kulawiec
On Wed, Feb 22, 2012 at 08:34:49AM -0800, JC Dill wrote: 99.999% of the time there is absolutely no benefit in the attachment. But by pushing customers to open attachments to get the content we are encouraging them to be complacent about opening all attachments, and that's a great way to end

Re: Most energy efficient (home) setup

2012-02-23 Thread Lamar Owen
On Wednesday, February 22, 2012 04:13:47 PM Jeroen van Aart wrote: Any suggestions and ideas appreciated of course. :-) www.aleutia.com DC-powered everything, including a 12VDC LCD monitor. We're getting one of their D2 Pro dual core Atoms (they have other options for more money) for a solar

Re: Cisco CAT6500 IOS Simulator

2012-02-23 Thread -Hammer-
I'm sure that virtualizing the sup would be possible. But having to come up with all the line cards would be a nightmare. I'd love for someone Internal to tell me I'm wrong but until we can get a 3560 or a 3750X on Dynamips I wouldn't push for a 6500 or a Nexus. -Hammer- I was a normal

Re: Most energy efficient (home) setup

2012-02-23 Thread Leo Bicknell
In a message written on Wed, Feb 22, 2012 at 01:13:47PM -0800, Jeroen van Aart wrote: After reading a number of threads where people list their huge and wasteful, but undoubtedly fun (and sometimes necessary?), home setups complete with dedicated rooms and aircos I felt inclined to ask who

Re: do not filter your customers

2012-02-23 Thread Christopher Morrow
On Thu, Feb 23, 2012 at 1:57 AM, Randy Bush ra...@psg.com wrote: and things when further downhill from there, when telstra also did not filter what they announced to their peers, and the peers went over prefix limits and dropped bgp. Oh! so protections worked! imiho, prefix count is too big

Re: Most energy efficient (home) setup

2012-02-23 Thread Andrew Wentzell
On Thu, Feb 23, 2012 at 10:29 AM, Leo Bicknell bickn...@ufp.org wrote: I'd love a low powered motherboard with 6-8 SATA, and a case with perhaps 6 hot swap bays but designed for a low powered, fanless motherboard.  IX Systems's FreeNAS Mini is the closest I've seen, but it tops out at 4

automatic bgp route refresh

2012-02-23 Thread Joe Maimon
Hey All, I would greatly appreciate it if somebody would point me to cisco release notes for the change I see in 15.1 where BGP neighbor route-map configurations happen in real time, without needing any clearing, soft or otherwise. Seems like some have also noticed this behavior recently on

Re: IX in France

2012-02-23 Thread virendra rode
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brings up another question to mind, how many of you have peered using partial route transit versus having direct peering relationship at the exchange? I've personally ran into companies during peering meetings wanting to sell you their peering

Re: colosolutions abuse contact?

2012-02-23 Thread Chris
If all else fails, contact the uplink. Unfortunately it gets more response and casually mention I tried finding a contact but was unable so I contacted you On 2/22/12, Carlos Kamtha kam...@ak-labs.net wrote: Hi, I'm hoping to get a hold of an abuse contact at colosolutions.com. Any help is

Re: IX in France

2012-02-23 Thread Jared Mauch
On Feb 23, 2012, at 12:39 PM, virendra rode wrote: I understand this is not true peering relationship, however its an interesting way to obtain exchange point routes and I understand this is nothing new. mini-rant I've found people who use the term 'peering' to mean something different than

Re: IX in France

2012-02-23 Thread Nick Hilliard
On 23/02/2012 18:00, Jared Mauch wrote: Buying transit isn't as dirty as people think it is, sometimes its the right business decision. If you connect to an IX for $4000/mo at gig-e, Anyone prepared to pay $4000/m for a gig IX connection is making the wrong business decision. Nick

Re: IX in France

2012-02-23 Thread virendra rode
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/23/2012 10:00 AM, Jared Mauch wrote: On Feb 23, 2012, at 12:39 PM, virendra rode wrote: I understand this is not true peering relationship, however its an interesting way to obtain exchange point routes and I understand this is nothing

Re: Customer Notification System.

2012-02-23 Thread JC Dill
On 22/02/12 6:46 PM, James Wininger wrote: Well we would not be sending the notification in an attachment, but there are times when it would be nice to send a list of circuit ids (exported from billing system as PDF) or some other exported doc to the notification. Nice for WHO? There is

Re: common time-management mistake: rack stack

2012-02-23 Thread Lamar Owen
On Wednesday, February 22, 2012 03:37:57 PM Dan Golding wrote: I disagree. The best model is - gasp - engineering, a profession which many in networking claim to be a part of, but few actually are. In the engineering world (not CS, not development - think ME and EE), there is a strongly

Re: IX in France

2012-02-23 Thread Christophe Lucas
Le 21.02.2012 17:46, Ido Szargel a écrit : Hi All, We are currently looking to connect to one of the IX's available in Paris, It seems that there are 2 major players - FranceIX and Equinix FR, can anyone share their opinions about those? Thanks, Ido Hi, My former employer is

RE: Customer Notification System.

2012-02-23 Thread Vinny_Abello
Paraphrasing someone else I would encourage my competitors to send notifications to their customers in PDF format. :) -Vinny -Original Message- From: JC Dill [mailto:jcdill.li...@gmail.com] Sent: Thursday, February 23, 2012 1:44 PM To: NANOG list Subject: Re: Customer

Re: common time-management mistake: rack stack

2012-02-23 Thread Leo Bicknell
In a message written on Wed, Feb 22, 2012 at 12:37:57PM -0800, Dan Golding wrote: I disagree. The best model is - gasp - engineering, a profession which many in networking claim to be a part of, but few actually are. In the engineering world (not CS, not development - think ME and EE), there

RE: common time-management mistake: rack stack

2012-02-23 Thread Holmes,David A
The problem with using engineering as a model is that computer science networking theory is based upon mathematical logic and formal mathematics (for instance Finite State Machines, Turing Machines), and operates on what are essentially robotic automatons running in real time. Engineering as I

Re: common time-management mistake: rack stack

2012-02-23 Thread isabel dias
1- what do you mean by Licensed folks working in architecture and design?   2- You wrote IT isn't governed by the same hard (physical) rules as traditional engineering, but you also can't be freely creative and expect to come up with something that works. bolox! As far as I'm aware you are not

Network Traffic Collection

2012-02-23 Thread Maverick
Hello, I am trying to collect traffic traffic from pcap file and store it in a database but really confused how to organize it. Should I organize it on connection basis/ flow basis or IP basis. It might be an effort to write a customized traffic analysis tool like wireshark with only required

Re: Network Traffic Collection

2012-02-23 Thread Jeroen Massar
On 2012-02-23 21:11 , Maverick wrote: Hello, I am trying to collect traffic traffic from pcap file and store it in a database but really confused how to organize it. Should I organize it on connection basis/ flow basis or IP basis. It might be an effort to write a customized traffic

RE: Network Traffic Collection

2012-02-23 Thread Matlock, Kenneth L
Netflow + netflow collector. Ken Matlock Network Analyst Systems and Technology Service Center Sisters of Charity of Leavenworth Health System 12600 W. Colfax, Suite A-500 Lakewood, CO 80215 303-467-4671 matlo...@exempla.org -Original Message- From: Maverick

Re: Network Traffic Collection

2012-02-23 Thread Suresh Rajagopalan
On Thu, Feb 23, 2012 at 12:19 PM, Maverick myeaddr...@gmail.com wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I would really like to know how other people do it.

Re: Network Traffic Collection

2012-02-23 Thread Mike Lyon
Random thought, anyone ever used Splunk for this kind of thing? -mike Sent from my iPhone On Feb 23, 2012, at 10:30, Suresh Rajagopalan sraj...@gmail.com wrote: On Thu, Feb 23, 2012 at 12:19 PM, Maverick myeaddr...@gmail.com wrote: I want to be able to see information like how much traffic

Re: do not filter your customers

2012-02-23 Thread virendra rode
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Speaking of leaking the world, I remember one of our transit peer during their nightly maintenance decided they needed people to talk to, so they decided to share some love by passing ~ 350k routes causing a meltdown. As lesson learned, we included

Re: Network Traffic Collection

2012-02-23 Thread Jason Lixfeld
Splunk is an amazing tool and did an awesome thing and introduced a free license in 4.3. I'm using it at two sites now and I'm loving it! On 2012-02-23, at 3:34 PM, Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? -mike Sent from my iPhone On Feb 23,

Re: Network Traffic Collection

2012-02-23 Thread Jeroen Massar
On 2012-02-23 21:34 , Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? Various folks have, the problem of course comes down to processing power, thus you'll need to throw a lot of hardware against it to be able to process traffic in a decent network. Check

Re: Network Traffic Collection

2012-02-23 Thread Mike Lyon
Run it with hadoop in EC2? Sent from my iPhone On Feb 23, 2012, at 10:52, Jeroen Massar jer...@unfix.org wrote: On 2012-02-23 21:34 , Mike Lyon wrote: Random thought, anyone ever used Splunk for this kind of thing? Various folks have, the problem of course comes down to processing power,

Re: Most energy efficient (home) setup

2012-02-23 Thread Joe Greco
I've spent a fair amount of time working on energy effiency at home. While I've had a rack at my house in the distant past, the cooling and power bill have always made me work at down sizing. Also, as time went by I became more obsessed with quite fans, or in particular fanless designs. I

Re: Network Traffic Collection

2012-02-23 Thread Justin M. Streiner
On Thu, 23 Feb 2012, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I would really like to know how other people do it. Truth is that most people

Botnet Traffic

2012-02-23 Thread James Smith
Hello, Can anyone on this list provide botnet network traffic for analysis, or Ip’s which have been infected. -- Sincerely; James Smith CEO, CEH, Security Analyst Email: ja...@smithwaysecurity.com Phone: 1877-760-1953 Website: www.SmithwaySecurity.com CONFIDENTIALITY NOTICE: This

Re: Most energy efficient (home) setup

2012-02-23 Thread Lamar Owen
On Thursday, February 23, 2012 04:53:06 PM Joe Greco wrote: So, good group to ask, probably... anyone have suggestions for a low- noise, low-power GigE switch in the 24-port range ... managed, with SFP? That doesn't require constant rebooting? I can't comment to the rebooting, but a couple of

Re: Botnet Traffic

2012-02-23 Thread Darius Jahandarie
On Thu, Feb 23, 2012 at 17:17, James Smith ja...@smithwaysecurity.com wrote: Can anyone on this list provide botnet network traffic for analysis, or Ip’s which have been infected. Have you considered contacting Team Cymru or Shadowserver? As far as I know, they are the two major groups who

Re: Botnet Traffic

2012-02-23 Thread John Kristoff
On Thu, 23 Feb 2012 18:17:38 -0400 James Smith ja...@smithwaysecurity.com wrote: Can anyone on this list provide botnet network traffic for analysis, or Ip’s which have been infected. Hi James, Normally few people are going to be unwilling to provide such a thing, at least for live or

Re: Botnet Traffic

2012-02-23 Thread James Smith
Thank you, this will be helpful. -Original Message- From: Darius Jahandarie Sent: Thursday, February 23, 2012 6:26 PM To: James Smith Cc: nanog@nanog.org Subject: Re: Botnet Traffic On Thu, Feb 23, 2012 at 17:17, James Smith ja...@smithwaysecurity.com wrote: Can anyone on this list

Re: Network Traffic Collection

2012-02-23 Thread Scott Weeks
--- myeaddr...@gmail.com wrote: -- From: Maverick myeaddr...@gmail.com It might be an effort to write a customized traffic analysis tool like wireshark with only required functionality. I would really appreciate I want to be able to see information like how much traffic an

RE: colosolutions abuse contact?

2012-02-23 Thread Ed S. Nuckols
I apologize for the late reply, we were having an email issue causing mail to be queued instead of delivered. This appears to be irc (efnet channel drama related), but it has been tended to regardless. For reference, my arin POC (which is attached to our IP space) also has my direct office

Re: Network Traffic Collection

2012-02-23 Thread Carlos Alcantar
Netflow / Sflow with one of the fallowing software packages http://www.plixer.com/products/netflow-sflow/scrutinizer-netflow-sflow.php http://www.solarwinds.com/NetFlow http://www.arbornetworks.com/ Or the hand full of other open source options out there. Carlos Alcantar Race Communications /

Re: Network Traffic Collection

2012-02-23 Thread Peter Phaal
On Thu, Feb 23, 2012 at 1:59 PM, Justin M. Streiner strei...@cluebyfour.org wrote: On Thu, 23 Feb 2012, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it should be IP based but I

Re: Most energy efficient (home) setup

2012-02-23 Thread Randy Carpenter
I like the Juniper EX2200C switches. They are only 12-port, but have 2 SFPs. They are very low power, and have no fans. However, I am still waiting (it has been several months) for them to send me the correct rack mount brackets (which are a separate purchase). -Randy -- | Randy Carpenter |

Re: Network Traffic Collection

2012-02-23 Thread Owen DeLong
PCAP is not well suited to what you describe. Most people use Sflow/Cflow/... instead. Owen On Feb 23, 2012, at 12:19 PM, Maverick wrote: I want to be able to see information like how much traffic an ip send over a period of time, what machines it talked to etc from this perspective it

Re: do not filter your customers

2012-02-23 Thread Danny McPherson
On Feb 23, 2012, at 1:44 AM, Randy Bush wrote: a customer leaked a full table to smellstra, and they had not filtered. hence the $subject. Ahh, this is I think the customer leak problem I'm trying to illustrate that an RPKI/BGPSEC-enabled world alone (as currently prescribed) does NOT

Re: do not filter your customers

2012-02-23 Thread Randy Bush
a customer leaked a full table to smellstra, and they had not filtered. hence the $subject. Ahh, this is I think the customer leak problem I'm trying to illustrate that an RPKI/BGPSEC-enabled world alone (as currently prescribed) does NOT protect against. the problem is that you have

Re: Cisco CAT6500 IOS Simulator

2012-02-23 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -Hammer- wrote: I'm sure that virtualizing the sup would be possible. But having to come up with all the line cards would be a nightmare. I'd love for someone Internal to tell me I'm wrong but until we can get a 3560 or a 3750X on Dynamips I

Re: do not filter your customers

2012-02-23 Thread Dobbins, Roland
On Feb 24, 2012, at 9:00 AM, Danny McPherson wrote: Prefix limits are rather binary and indiscriminate, indeed. AS-PATH filters and max-length filters, OTOH, are not. Also, it's important that network operators understand that flap-dampening has been iatrogenic for many years, now.

Re: do not filter your customers

2012-02-23 Thread Randy Bush
Also, it's important that network operators understand that flap-dampening has been iatrogenic for many years, now. well, ... https://datatracker.ietf.org/doc/draft-ymbk-rfd-usable/ randy