YouTube AS36561 began announcing 1.0.0.0/8

2010-03-11 Thread Nathan
Hello, I'm hoping to alleviate the "what's going on!?" type messages here this time. :) Here's an except from the APNIC provided LOA I provided to a couple networks, to carry a new announcement... "To whom it may concern, APNIC and YouTube are cooperating in a project to investigate the propert

Re: OT: Anyone seeing these sorts of probes? Port 46993 udp?

2010-03-11 Thread James Hess
Well, those UDP captures appear to be BitTorrent Peer-to-Peer file sharing traffic, or something disguised as such. Note the "64 31 3a 61 64 32 3a 69 64 32 30 3a" and also the textual reference to info_hash On Fri, Mar 12, 2010 at 12:18 AM, Joe wrote: > > Not to distract from the IPV4/IPV6 th

OT: Anyone seeing these sorts of probes? Port 46993 udp?

2010-03-11 Thread Joe
Not to distract from the IPV4/IPV6 thread, but just wondering if anyone has seen this beavior or perhaps can enlighten me to its orgin/virus/meaning? Internet Protocol, Src: 183.0.215.179 (183.0.215.179), Dst: 192.168.1.52 (192.168.1.52) User Datagram Protocol, Src Port: 64514 (64514), Dst Port:

Re: IPv6 enabled carriers?

2010-03-11 Thread Cameron Byrne
On Thu, Mar 11, 2010 at 6:40 PM, Christopher Morrow wrote: > On Thu, Mar 11, 2010 at 7:25 PM, TJ wrote: >> Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and >> thanks for pointing it out! > > yup, the core point I was trying to make was that LTE is really just a > vzw n

Re: IPv6 enabled carriers?

2010-03-11 Thread Christopher Morrow
On Thu, Mar 11, 2010 at 7:25 PM, TJ wrote: > Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and > thanks for pointing it out! yup, the core point I was trying to make was that LTE is really just a vzw network change, and has basically nothing to do with 'verizon' network

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Brandon Galbraith
How do these compare to the Avocent/Cyclades serial console products? SNMP seems poorly implemented in the Cyclades, and if folks have good things to say about using the OpenGear stuff, it's a direction I'd want to move in. Private replies preferred to keep s/n down. On Thu, Mar 11, 2010 at 12:10

RE: Need advise for a linux firewall

2010-03-11 Thread Mark Scholten
> -Original Message- > From: Daniel Staal [mailto:dst...@usa.net] > Sent: Friday, March 12, 2010 1:37 AM > To: nanog@nanog.org > Subject: Re: Need advise for a linux firewall > > --As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to > have > said: > > > One caveat for t

Re: IP4 Space

2010-03-11 Thread Mark Andrews
In message <2d6a9f6f1003111016t16ddc73frc4a430e220891...@mail.gmail.com>, Bill Bogstad writes: > I fall into this category, but I'm trying to get better. This may be > OT for this forum, but as someone whose network admin hat has mostly > been at the LAN/MAN level, I'm less concerned about IPv6

Re: Need advise for a linux firewall

2010-03-11 Thread Daniel Staal
--As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to have said: One caveat for the current PFsense: traffic shaping in 1.2.3 release is somewhat borked (1.2.2 works much better) and it doesn't work with more than 2 interfaces, so 1 wan - 1 lan is OK. --As for the rest, it is

Re: Need advise for a linux firewall

2010-03-11 Thread Bryan Irvine
On Thu, Mar 11, 2010 at 11:26 AM, Abdul Nazeer wrote: > On 03/11/2010 11:22 AM, gordon b slater wrote: >> On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: >> >> >>> iptables, but if anyone has any other suggestion, I'd love to hear it. >>> >> PFsense, (being freeBSD-based, comes  under your

RE: IPv6 enabled carriers?

2010-03-11 Thread TJ
Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and thanks for pointing it out! Posting from phone, while distracted . less than ideal. /TJ From: TJ [mailto:trej...@gmail.com] Sent: Thursday, March 11, 2010 17:52 To: Christopher Morrow Subject: Re: IPv6 enabled

RE: 10GBase-t switch

2010-03-11 Thread Michael Balasko
+1 for the Arista boxes. We are a pure Cisco shop and looked at them to start replacing some gear where it made sense. We didn't buy them because they didn't do Rapid-PVST+ at the time. Yeah I know that's a Cisco-centric thing, but they were tentative on implementing it but the timeline just didn'

Re: Need advise for a linux firewall

2010-03-11 Thread Will Clayton
Microtik makes a pretty robust Linux based firewall appliance-on-a-usb-stick. It does a lot out of the box like BGP, VPN, MPLS,QoS and all kinds of other crazy things you wouldn't expect to fit on one gig of flash. It takes my HP about 10 seconds to load a full table. My vote is for PFSense though

Re: 10GBase-t switch

2010-03-11 Thread Kevin Oberman
> Date: Thu, 11 Mar 2010 12:51:00 -0800 > From: Dave Temkin > > Kevin Oberman wrote: > >> Date: Thu, 11 Mar 2010 12:26:16 +0900 > >> From: Randy Bush > >> > >> > >>> arista 7120t-4s... > >>> > >> hot box. but you are giving away the secret sauce! > >> > > > > Hot box for the da

Re: Re: IPv6 enabled carriers?

2010-03-11 Thread cb . list6
On Mar 11, 2010 2:05pm, Christopher Morrow wrote: On Thu, Mar 11, 2010 at 12:54 PM, TJ trej...@gmail.com> wrote: > On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.com>wrote: > >> To pile on in the spirit of "if people don't complain, nothing will change" >> - is V

Re: IPv6 enabled carriers?

2010-03-11 Thread Christopher Morrow
On Thu, Mar 11, 2010 at 12:54 PM, TJ wrote: > On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield wrote: > >> To pile on in the spirit of "if people don't complain, nothing will change" >> - is VZB still insisting on filtering >/32 at their peers? While ARIN is >> allocating /40s and /48s directly?

Re: 10GBase-t switch

2010-03-11 Thread Paolo Lucente
On Thu, Mar 11, 2010 at 10:20:41PM +0100, Arnold Nipper wrote: > On 11.03.2010 16:29 Dylan Ebner wrote > > > Do the Arista switches support netflow? From a management perspective > > netflow can be vital. This is something we have been unhappy with on > > our 3560 and 3750 cisco's. > > > > They

Re: 10GBase-t switch

2010-03-11 Thread Arnold Nipper
On 11.03.2010 16:29 Dylan Ebner wrote > Do the Arista switches support netflow? From a management perspective > netflow can be vital. This is something we have been unhappy with on > our 3560 and 3750 cisco's. > They don't (yet). Given you buy enoughboxes, Arista may be willing to implement this

Re: Filtered 6to4, what else to use (Re: IPv6 enabled carriers?)

2010-03-11 Thread TJ
On Thu, Mar 11, 2010 at 1:30 PM, Jeroen Massar wrote: > TJ wrote: > > On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield >wrote: > > > >> To pile on in the spirit of "if people don't complain, nothing will > change" > >> - is VZB still insisting on filtering >/32 at their peers? While ARIN is > >

Re: 10GBase-t switch

2010-03-11 Thread Dave Temkin
Kevin Oberman wrote: Date: Thu, 11 Mar 2010 12:26:16 +0900 From: Randy Bush arista 7120t-4s... hot box. but you are giving away the secret sauce! Hot box for the datacenter, but small buffers make it unsuited for long distances. In the right place, this box can't be beaten

Re: IP4 Space

2010-03-11 Thread Owen DeLong
On Mar 11, 2010, at 10:16 AM, Bill Bogstad wrote: On Wed, Mar 10, 2010 at 10:00 PM, Daniel Senie wrote: Well, it's like this... there's still no native IPv6 connectivity in most data centers, residences, >businesses or wireless, most vendors of networking equipment have not had a lot of mi

Re: Need advise for a linux firewall

2010-03-11 Thread Jim Miller
On Thu, Mar 11, 2010 at 11:56 PM, Abdul Nazeer wrote: > On 03/11/2010 11:22 AM, gordon b slater wrote: > > On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: > > > > > >> iptables, but if anyone has any other suggestion, I'd love to hear it. > >> > > PFsense, (being freeBSD-based, comes under

Re: Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
On 03/11/2010 11:22 AM, gordon b slater wrote: > On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: > > >> iptables, but if anyone has any other suggestion, I'd love to hear it. >> > PFsense, (being freeBSD-based, comes under your "other" category) > It uses the OpenBSD-based pf firewa

RE: 10GBase-t switch

2010-03-11 Thread Greg Whynott
I will likely never buy or recommend Foundry equipment again. In a previous gig, a HPC enviorment, they caused us many problems, support was horrible, and thier 10Gbit kit was the pits when it was first released (no idea how it is now or what they offer, its been 5 years since. burnt onc

RE: IPv6 enabled carriers?

2010-03-11 Thread George, Wes E [NTK]
-Original Message- From: Seth Mattinen [mailto:se...@rollernet.us] Sent: Wednesday, March 10, 2010 2:19 PM To: nanog@nanog.org Subject: Re: IPv6 enabled carriers? On 3/10/10 11:00 AM, Charles Mills wrote: > Does anyone have a list of carriers who are IPv6 capable today? > Sprint wasn't on

RE: 10GBase-t switch

2010-03-11 Thread David Hubbard
From: Malte von dem Hagen [mailto:m...@hosteurope.de] > > Hi, > > Am 11.03.10 16:29 schrieb Dylan Ebner: > > Do the Arista switches support netflow? > > nothing about it in the datasheets, and regarding documentation: > > "A registered account and a valid support contract is > required to acc

Filtered 6to4, what else to use (Re: IPv6 enabled carriers?)

2010-03-11 Thread Jeroen Massar
TJ wrote: > On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield wrote: > >> To pile on in the spirit of "if people don't complain, nothing will change" >> - is VZB still insisting on filtering >/32 at their peers? While ARIN is >> allocating /40s and /48s directly? >> > > I believe so ... will be e

Re: 10GBase-t switch

2010-03-11 Thread Malte von dem Hagen
Hi, Am 11.03.10 15:50 schrieb Raoul Bhatia [IPAX]: > which "known" brand can it be compared to? the CLI looks IOSish. Pity. .m -- Malte von dem Hagen Teamleitung Network Engineering & Operation Abteilung Technik --- Host Europ

Re: 10GBase-t switch

2010-03-11 Thread Malte von dem Hagen
Hi, Am 11.03.10 16:29 schrieb Dylan Ebner: > Do the Arista switches support netflow? nothing about it in the datasheets, and regarding documentation: "A registered account and a valid support contract is required to access the Software Download and Documentation section of the website." Service

Re: IP4 Space

2010-03-11 Thread Bill Bogstad
On Wed, Mar 10, 2010 at 10:00 PM, Daniel Senie wrote: > Well, it's like this... there's still no native IPv6 connectivity in most > data centers, residences, >businesses or wireless, most vendors of networking > equipment have not had a lot of mileage on >their IPv6 code if they even have > it

Re: Wireless Ethernet bridge

2010-03-11 Thread Joel Mulkey
We have used the 2.4GHz version of the Exalt radio - the EX-2.4i. We were fairly happy with it. The latency and jitter was great for a TDD radio, better than any I have seen. It was very reliable from a data-forwarding perspective. The management interface was nice when it worked, but the HTTP i

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Bill Fehring
On Wed, Mar 10, 2010 at 19:06, R. Benjamin Kessler wrote:> > On a similar topic, any good solutions for out-of-band serial > console/Ethernet solutions that use EV-DO/GSM wireless Internet? Check these out: http://www.opengear.com/product-acm5000.html

Re: Need advise for a linux firewall

2010-03-11 Thread Ronald Cotoni
On Thu, Mar 11, 2010 at 12:06 PM, gordon b slater wrote: > On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: > >> +1 for pfsense. I've been running it for over 18 months with no problems >> whatsoever. It does everything I needed it to do, and quite a bit more. > > > actually, reading back on

Re: IPv6 enabled carriers?

2010-03-11 Thread TJ
On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield wrote: > To pile on in the spirit of "if people don't complain, nothing will change" > - is VZB still insisting on filtering >/32 at their peers? While ARIN is > allocating /40s and /48s directly? > I believe so ... will be even more impactful as

Re: Wireless Ethernet bridge

2010-03-11 Thread Roy
Airaya will do 1600 bytes packets. http://www.airaya.com/ On 3/11/2010 8:50 AM, Stefano Gridelli wrote: The motorola PTP 600 seems thus far the most valid solution. We want to remain on ISM bands, because we don't want to take the burden of renewing the license with FCC every x years ... we n

Re: IPv6 enabled carriers?

2010-03-11 Thread Seth Mattinen
On 3/11/10 9:01 AM, Chris Woodfield wrote: > To pile on in the spirit of "if people don't complain, nothing will > change" - is VZB still insisting on filtering >/32 at their peers? While > ARIN is allocating /40s and /48s directly? > As far as I know, yes. ~Seth

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: > +1 for pfsense. I've been running it for over 18 months with no problems > whatsoever. It does everything I needed it to do, and quite a bit more. actually, reading back on the nanog list for a few plays (playing catch-up here) pfsense wou

RE: Wireless Ethernet bridge

2010-03-11 Thread Paul Stewart
We love the PTP600 platform and it works very well for our needs - as good as any path profile has shown us. Depending on the height of the tower, you can handoff via copper or via multimode fiber (someone said it doesn't do multimode, we do it all the time with their "fiber kits" from Motorola).

Re: IPv6 enabled carriers?

2010-03-11 Thread Chris Woodfield
To pile on in the spirit of "if people don't complain, nothing will change" - is VZB still insisting on filtering >/32 at their peers? While ARIN is allocating /40s and /48s directly? -C On Mar 10, 2010, at 2:18 PM, Seth Mattinen wrote: On 3/10/10 11:00 AM, Charles Mills wrote: Does anyon

Re: Need advise for a linux firewall

2010-03-11 Thread Marty Anstey
> > PFsense, (being freeBSD-based, comes under your "other" category) > It uses the OpenBSD-based pf firewall, with a web-based GUI for almost > everything (except maybe console resets). works for me in several > locations, some `heavy and high`. > > +1 for pfsense. I've been running it for

Re: Wireless Ethernet bridge

2010-03-11 Thread Stefano Gridelli
The motorola PTP 600 seems thus far the most valid solution. We want to remain on ISM bands, because we don't want to take the burden of renewing the license with FCC every x years ... we need something that once installed requires the least maintenance effort possible. We already have antennas and

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: > iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes under your "other" category) It uses the OpenBSD-based pf firewall, with a web-based GUI for almost everything (except maybe consol

Re: Need advise for a linux firewall

2010-03-11 Thread Mirko Maffioli
try http://www.zeroshell.net/eng/ 2010/3/11 Abdul Nazeer : > Looking for advise on setting up a linux based dedicated firewall. > Apparently, there are plenty: > > http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions > > I'm looking to have the firewall sit in front of a public ne

Re: Need advise for a linux firewall

2010-03-11 Thread Aaron Urbain
fwbuilder

Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
Looking for advise on setting up a linux based dedicated firewall. Apparently, there are plenty: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions I'm looking to have the firewall sit in front of a public network of windows boxes. Also, would want to be able to load-balance an

RE: 10GBase-t switch

2010-03-11 Thread Dylan Ebner
Do the Arista switches support netflow? From a management perspective netflow can be vital. This is something we have been unhappy with on our 3560 and 3750 cisco's. Dylan -Original Message- From: Raoul Bhatia [IPAX] [mailto:r.bha...@ipax.at] Sent: Thursday, March 11, 2010 8:50 AM T

Re: 10GBase-t switch

2010-03-11 Thread Rubens Kuhl
> "Arista EOS" - what good/bad things do you have to say about their > management capabilities? which "known" brand can it be compared to? I couldn't help myself thinking that the name of an operanting system shouldn't resemble "End of Sales" that much. Rubens

Re: 10GBase-t switch

2010-03-11 Thread Raoul Bhatia [IPAX]
On 03/11/2010 07:04 AM, Kevin Oberman wrote: >> Date: Thu, 11 Mar 2010 12:26:16 +0900 >> From: Randy Bush >> >>> arista 7120t-4s... >> >> hot box. but you are giving away the secret sauce! > > Hot box for the datacenter, but small buffers make it unsuited for > long distances. In the right place

RE: Best VPN Appliance

2010-03-11 Thread Mike Callahan
+1 for the ShrewSoft Client for Windows 7. Works like a champ. Mike -Original Message- From: Jon Auer [mailto:j...@tapodi.net] Sent: Monday, March 08, 2010 2:54 PM To: Blomberg, Orin P (DOH) Cc: nanog@nanog.org Subject: Re: Best VPN Appliance If you can use 3rd party VPN clients the S

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Henry Yen
On Wed, Mar 10, 2010 at 15:17:53PM -0500, Michael Holstein wrote: > Can anyone recommend a cheap Ethernet to Serial (RS232/422/485) > converter with functionality like the Lantronix boxes .. except one that > supports access lists (nothing complicated .. maybe a list of 5 approved > hosts). I need

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Tom Vest
On Mar 11, 2010, at 5:08 AM, Randy Bush wrote: >> I'm sorry, but some people are spending too much time denying >> history. IPv6 has been largely ready for YEARS. Less than five years ago >> a lot of engineers were declaring IPv6 dead and telling people that >> double and triple NAT was the way o

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Eric Brunner-Williams
What NANOG contributors, if any, are invited by a government, to join their national delegation to the initial meeting of the ITU's IPv6 Group in Geneva next week?

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Randy Bush
> I'm sorry, but some people are spending too much time denying > history. IPv6 has been largely ready for YEARS. Less than five years ago > a lot of engineers were declaring IPv6 dead and telling people that > double and triple NAT was the way of the future. It's only been over the > past two year

Re: IPv6 enabled carriers?

2010-03-11 Thread Jeroen Massar
Pekka Savola wrote: > On Wed, 10 Mar 2010, Chris Grundemann wrote: >> SixXS maintains a list here: >> http://www.sixxs.net/faq/connectivity/?faq=ipv6transit. > > I think that list should also include TeliaSonera. TSIC does offer v6 > transit, although their product sheet only mentions IPv4. "Upda