Re: L3 VPN Management

2012-03-07 Thread Jeff Wheeler
On Wed, Mar 7, 2012 at 2:07 AM, Leigh Porter leigh.por...@ukbroadband.com wrote: What's the nicest way of allowing the ops servers all talk to each VPN instance? At the moment I just us pretty normal L3VPN techniques so that every VPN sees routes tagged with the ops VPN target community and

Re: facebook lost their A-record for www.facebook.com?

2012-03-07 Thread graham
On 07.03.2012 09:43, Igor Ybema wrote: [igor@vds ~]$ host -t A www.facebook.com ns1.facebook.com Using domain server: Name: ns1.facebook.com Address: 204.74.66.132#53 Aliases: www.facebook.com has no A record We also picked up problems with www.facebook.com from our monitoring systems.

Re: facebook lost their A-record for www.facebook.com?

2012-03-07 Thread Anurag Bhatia
Good point Octavio . +trace with dig is always useful when getting weird results. (Sent from my mobile device) Anurag Bhatia http://anuragbhatia.com On Mar 7, 2012 1:19 PM, Octavio Alvarez alvar...@alvarezp.ods.org wrote: On Tue, 06 Mar 2012 23:43:07 -0800, Igor Ybema i...@ergens.org wrote:

Re: L3 VPN Management

2012-03-07 Thread Saku Ytti
On (2012-03-07 07:07 +), Leigh Porter wrote: What's the nicest way of allowing the ops servers all talk to each VPN instance? At the moment I just us pretty normal L3VPN techniques so that every VPN sees routes tagged with the ops VPN target community and so that the ops VPN sees all

Re: IETF - Overlapping IPv4 Address Support

2012-03-07 Thread Bjørn Mork
You seem to have skipped a calendar page. Bjørn

Re: Huawei edge routers..

2012-03-07 Thread Tim Franklin
On the other hand, if you hop into other people's Huawei routers via CLI you will curse and scream. As close as I could tell, it handles most functionality of IOS, but they tried to find a synonym for every word cisco used in the cli. This does occasionally brighten up my day with gems like

Re: Huawei edge routers..

2012-03-07 Thread Leigh Porter
On 7 Mar 2012, at 09:48, Tim Franklin t...@pelican.org wrote: On the other hand, if you hop into other people's Huawei routers via CLI you will curse and scream. As close as I could tell, it handles most functionality of IOS, but they tried to find a synonym for every word cisco used in the

Re: Huawei edge routers..

2012-03-07 Thread Saku Ytti
On (2012-03-07 09:46 -), Tim Franklin wrote: This does occasionally brighten up my day with gems like rip no work and reset-recycle-bin, so it's not all bad :) I liked how ssh is secure-telnet, took bit head scratching to enable ssh. But again, I don't think crappy or good CLI is very

Re: Huawei edge routers..

2012-03-07 Thread Nick Hilliard
On 07/03/2012 10:31, Saku Ytti wrote: But again, I don't think crappy or good CLI is very important matter, when using systems. it isn't - if you're large enough that you have an automated provisioning system. Most of us aren't in that category though, and for those who aren't, it's the L3

Re: Programmers with network engineering skills

2012-03-07 Thread Tei
On 27 February 2012 23:23, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Owen DeLong o...@delong.com I think you're more likely to find a network engineer with (possibly limited) programming skills. That's certainly where I would categorize myself. And you're the

Re: Huawei edge routers..

2012-03-07 Thread Jack Bates
On 3/7/2012 4:55 AM, Nick Hilliard wrote: it isn't - if you're large enough that you have an automated provisioning system. Most of us aren't in that category though, and for those who aren't, it's the L3 tech people who will be doing the product evaluation and who will end up loathing the kit

Re: VLAN Troubles

2012-03-07 Thread Antonio Querubin
On Tue, 6 Mar 2012, Alan Bryant wrote: We have two switches that do not seem to be passing VLAN traffic. The two switches are a Dell Powerconnect 5324 a Cisco 3560G. The Cisco switch appears to be functioning fine, but the Dell switch is only passing traffic to the Cisco that is on the default

Re: VLAN Troubles

2012-03-07 Thread Antonio Querubin
On Tue, 6 Mar 2012, Greg T. Grimes wrote: pruned. If it's not there then it's being pruned. Also on your Dell uplink add the following line to the uplink port: switchport access vlan add 12,22 Probably should be switchport trunk allowed vlan add xxx,xxx tagged if you're trying to limit

PLEASE don't feed the troll

2012-03-07 Thread Jay Ashworth
Nuff said? Cheers, -- jra -- Jay R. Ashworth Baylink j...@baylink.com Designer The Things I Think RFC 2100 Ashworth Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA

Re: Huawei edge routers..

2012-03-07 Thread Jay Ashworth
- Original Message - From: Saku Ytti s...@ytti.fi On (2012-03-07 09:46 -), Tim Franklin wrote: This does occasionally brighten up my day with gems like rip no work and reset-recycle-bin, so it's not all bad :) I liked how ssh is secure-telnet, took bit head scratching to

Re: PLEASE don't feed the troll

2012-03-07 Thread isabel dias
are you a PhD? otherwise you are not making sence From: Jay Ashworth j...@baylink.com To: NANOG nanog@nanog.org Sent: Wednesday, March 7, 2012 3:17 PM Subject: PLEASE don't feed the troll Nuff said? Cheers, -- jra -- Jay R. Ashworth                 

RE: Huawei edge routers..

2012-03-07 Thread Leigh Porter
-Original Message- From: Jay Ashworth [mailto:j...@baylink.com] Sent: 07 March 2012 15:28 To: NANOG Subject: Re: Huawei edge routers.. - Original Message - From: Saku Ytti s...@ytti.fi On (2012-03-07 09:46 -), Tim Franklin wrote: This does occasionally

Re: Huawei edge routers..

2012-03-07 Thread Aled Morris
On 7 March 2012 15:25, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Saku Ytti s...@ytti.fi On (2012-03-07 09:46 -), Tim Franklin wrote: This does occasionally brighten up my day with gems like rip no work and reset-recycle-bin, so it's not all bad :)

Re: Huawei edge routers..

2012-03-07 Thread Jack Bates
On 3/7/2012 9:32 AM, Leigh Porter wrote: I liked how ssh is secure-telnet, took bit head scratching to enable ssh. That is, of course, incorrect; there is actually a secure telnet; ISTR it's telnet-over-ssl? How do you enable SSH then? It may be incorrect terminology, but it is actually ssh

AS Connectivity Lookup

2012-03-07 Thread Radke, Justin
How can I easily view the current peering relationship of a particular AS? Assume the AS you are researching does not have a looking glass and you are not going to do lookups from the top 10 providers route servers to get some glimpse of their connectivity. In my particular search

Re: AS Connectivity Lookup

2012-03-07 Thread Anurag Bhatia
Hi Radke You can try http://bgp.he.net On Wed, Mar 7, 2012 at 10:59 PM, Radke, Justin jra...@canbytel.com wrote: How can I easily view the current peering relationship of a particular AS? Assume the AS you are researching does not have a looking glass and you are not going to do lookups from

Re: AS Connectivity Lookup

2012-03-07 Thread Hank Nussbacher
At 09:29 07/03/2012 -0800, Radke, Justin wrote: How can I easily view the current peering relationship of a particular AS? Assume the AS you are researching does not have a looking glass and you are not going to do lookups from the top 10 providers route servers to get some glimpse of their

Re: AS Connectivity Lookup

2012-03-07 Thread Chris Boyd
On Mar 7, 2012, at 11:39 AM, Hank Nussbacher wrote: Try: http://www.fixedorbit.com/search.htm and do an ASN search. -Hank Is that info supposed to be current? It's wildly out of date for us (35970). bgp.he.net has all the correct information. --Chris

Re: AS Connectivity Lookup

2012-03-07 Thread David Walker
On 08/03/2012, Anurag Bhatia m...@anuragbhatia.com wrote: Hi Radke You can try http://bgp.he.net Example: http://bgp.he.net/AS4739 Guest login here: http://peeringdb.com/ On Wed, Mar 7, 2012 at 10:59 PM, Radke, Justin jra...@canbytel.com wrote: How can I easily view the current peering

Re: AS Connectivity Lookup

2012-03-07 Thread Radke, Justin
All great answers! Thank you! -=JGR On Wed, Mar 7, 2012 at 10:35 AM, David Walker davidianwal...@gmail.comwrote: On 08/03/2012, Anurag Bhatia m...@anuragbhatia.com wrote: Hi Radke You can try http://bgp.he.net Example: http://bgp.he.net/AS4739 Guest login here:

Re: Huawei edge routers..

2012-03-07 Thread Valdis . Kletnieks
On Wed, 07 Mar 2012 10:22:56 CST, Jack Bates said: ]undo ssh server compatible-ssh1x enable Ouch. That's brutal. Is it true that setting isn't listed under 'display ssh server status'? pgpMgrleE80ON.pgp Description: PGP signature

Re: AS Connectivity Lookup

2012-03-07 Thread Joe Provo
On Wed, Mar 07, 2012 at 09:29:29AM -0800, Radke, Justin wrote: How can I easily view the current peering relationship of a particular AS? Assume the AS you are researching does not have a looking glass and you are not going to do lookups from the top 10 providers route servers to get some

Re: AS Connectivity Lookup

2012-03-07 Thread Anurag Bhatia
On Thu, Mar 8, 2012 at 12:41 AM, Joe Provo nanog-p...@rsuc.gweep.netwrote: On Wed, Mar 07, 2012 at 09:29:29AM -0800, Radke, Justin wrote: How can I easily view the current peering relationship of a particular AS? Assume the AS you are researching does not have a looking glass and you are

Re: Huawei edge routers..

2012-03-07 Thread Jack Bates
On 3/7/2012 1:08 PM, valdis.kletni...@vt.edu wrote: On Wed, 07 Mar 2012 10:22:56 CST, Jack Bates said: ]undo ssh server compatible-ssh1x enable Ouch. That's brutal. Is it true that setting isn't listed under 'display ssh server status'? ]ssh server compat enable ]display ssh server status

Re: Huawei edge routers..

2012-03-07 Thread Owen DeLong
On Mar 7, 2012, at 2:55 AM, Nick Hilliard wrote: On 07/03/2012 10:31, Saku Ytti wrote: But again, I don't think crappy or good CLI is very important matter, when using systems. it isn't - if you're large enough that you have an automated provisioning system. Most of us aren't in that

Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread Matthew Huff
Anyone else see a massive increase of scanning/dos with TCP source and/or dst port of 0? We started seeing a massive increase today creating some issue with our firewalls. Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread Mike Gatti
I just scanned through the last 48 hours of logs and did not find anything. We are peering with Level3 (AS 3549) and Verizon (AS 11486). -- Michael Gatti main. 949.371.5474 (UTC -8) On Mar 7, 2012, at 12:45 PM, Matthew Huff wrote: Anyone else see a massive increase of scanning/dos with

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread Christopher Morrow
On Wed, Mar 7, 2012 at 3:45 PM, Matthew Huff mh...@ox.com wrote: Anyone else see a massive increase of scanning/dos with TCP source and/or dst port of 0? We started seeing a massive increase today creating some issue with our firewalls. srs/dst of 0 as measured how? (tcpdump? netflow? app

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread Pete Carah
On 03/07/2012 01:29 PM, Christopher Morrow wrote: On Wed, Mar 7, 2012 at 3:45 PM, Matthew Huff mh...@ox.com wrote: Anyone else see a massive increase of scanning/dos with TCP source and/or dst port of 0? We started seeing a massive increase today creating some issue with our firewalls.

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Jim Cowie
On Wed, Mar 7, 2012 at 2:23 AM, John van Oppen jvanop...@spectrumnet.uswrote: All - I was noticing that it appears from our Seattle-based full route feed from cogent that they may have de-peered AS4134 (or vise-versa)... anyone know anything about this?We noticed this recently in a

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread Chris Stone
On Wed, Mar 7, 2012 at 1:45 PM, Matthew Huff mh...@ox.com wrote: Anyone else see a massive increase of scanning/dos with TCP source and/or dst port of 0? We started seeing a massive increase today creating some issue with our firewalls. Not seeing a ton of them, but do see a few logged on most

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread George Herbert
Out of curiosity - Is it possible it's a command and control network, rather than directly an attack? On Wed, Mar 7, 2012 at 2:41 PM, Chris Stone axi...@gmail.com wrote: On Wed, Mar 7, 2012 at 1:45 PM, Matthew Huff mh...@ox.com wrote: Anyone else see a massive increase of scanning/dos with

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Greg Chalmers
On Thu, Mar 8, 2012 at 9:34 AM, Jim Cowie co...@renesys.com wrote: On Wed, Mar 7, 2012 at 2:23 AM, John van Oppen jvanop...@spectrumnet.us wrote: All - I was noticing that it appears from our Seattle-based full route feed from cogent that they may have de-peered AS4134 (or

RE: POLL: Network and Service Status Pages

2012-03-07 Thread Jason Gurtz
http://www.outages.org/index.php/Anything_you_might_want_to_know_about_ab s_exercises Mark V Shaney must have an account @ Outages ~JasonG

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Darius Jahandarie
On Wed, Mar 7, 2012 at 17:55, Greg Chalmers gchalm...@gmail.com wrote: On Thu, Mar 8, 2012 at 9:34 AM, Jim Cowie co...@renesys.com wrote: http://www.renesys.com/blog/2012/03/cogent-depeers-china-telecom.shtml cheers,   --jim Isn't this journalism a bit yellow? No facts / based on

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Nick Hilliard
On 7 Mar 2012, at 23:19, Darius Jahandarie djahanda...@gmail.com wrote: On Wed, Mar 7, 2012 at 17:55, Greg Chalmers gchalm...@gmail.com wrote: Isn't this journalism a bit yellow? No facts / based on speculation.. - Greg Now all they need to do is link back to this NANOG thread as a

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Jim Cowie
On Wed, Mar 7, 2012 at 6:33 PM, Patrick W. Gilmore patr...@ianai.netwrote: On Mar 7, 2012, at 18:29 , Nick Hilliard wrote: On 7 Mar 2012, at 23:19, Darius Jahandarie djahanda...@gmail.com wrote: On Wed, Mar 7, 2012 at 17:55, Greg Chalmers gchalm...@gmail.com wrote: Isn't this

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Patrick W. Gilmore
On Mar 7, 2012, at 19:06 , Jim Cowie wrote: As a meta-comment: this Quick Look style of blog is an experiment we're trying, based on feedback that the community wanted to hear about more of these little events as they happen. In a Quick Look, we're giving the facts as they are known from

Re: did AS174 and AS4134 de-peer?

2012-03-07 Thread Michael Sinatra
On 03/07/12 16:10, Patrick W. Gilmore wrote: On Mar 7, 2012, at 19:06 , Jim Cowie wrote: As a meta-comment: this Quick Look style of blog is an experiment we're trying, based on feedback that the community wanted to hear about more of these little events as they happen. In a Quick Look,

Digi TS8 serial console server funkiness

2012-03-07 Thread ML
Hopefully someone here has wrestled with serial server oddities and can shed some light on this... I've got a serial console server made by Digi (TS8 PortServer) setup in a fairly vanilla mode: 9600-8-N-1telnet to port 500X gets you to port X. Setup for a vt100 terminal type. Other VTs

RE: Digi TS8 serial console server funkiness

2012-03-07 Thread George Bonser
-Original Message- From: ML [mailto:m...@kenweb.org] Sent: Wednesday, March 07, 2012 5:32 PM To: nanog@nanog.org Subject: Digi TS8 serial console server funkiness Problem is when attached to a Cisco switch I had laying around I get seemily random garble output when accessing the

RE: Digi TS8 serial console server funkiness

2012-03-07 Thread George Bonser
Other issues I've noticed..cannot use arrow keys to search command buffer. This is going to be a tougher one. Might be a difference in character encoding. Here is the VT100 spec: http://www.handshake.de/infobase/dfue/prgrmmer/t322.htm * ESC D cursor down - at bottom of

Re: PLEASE don't feed the troll

2012-03-07 Thread George Herbert
Isabel - It does not take a PhD in computer science to understand networks or network protocol design. It does not take a PhD to understand that the troll's particular proposal was not a competent well-founded contribution. On Wed, Mar 7, 2012 at 7:25 AM, isabel dias isabeldi...@yahoo.com

RE: facebook lost their A-record for www.facebook.com?

2012-03-07 Thread Frank Bulk
They had issues in Europe today: http://www.telegraph.co.uk/technology/facebook/9128716/Facebook-hit-by-two-h our-blackout.html http://www.washingtonpost.com/business/technology/facebook-back-up-after-eur ope-outage/2012/03/07/gIQAJnNuwR_story.html Frank -Original Message- From: Anurag