Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Måns Nilsson
--On 16 april 2012 17.38.07 -0400 Brandon Penglase bpenglase-na...@spaceservices.net wrote: direction of our security analyst) turn up a DA test server. snip Needless to say, everything was horribly slow, and some things even flat out broke. To be expected when DNS is given the rôle

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Carlos Martinez-Cagnazzo
IMO it's much easier to disable one rogue than to disable IPv6 on the whole network. That is if you can find it, but with some proper tcpdumping and/or CLI commands (depending on the switches that you have) it should be relatively easy. Not to mention that, as pointed by others, this provides a

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Carlos Martinez-Cagnazzo
I don't understand why a problem with a tunnel 'leaves a bad taste with IPv6'. Since when a badly configured DNS zone left people with a 'bad taste for DNS', or a badly configured switch left people with 'a bad taste for spanning tree' or 'a bad taste for vlan trunking' ? It seems to me that what

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Seth Mos
Op 17-4-2012 10:33, Carlos Martinez-Cagnazzo schreef: IMO it's much easier to disable one rogue than to disable IPv6 on the whole network. That is if you can find it, but with some proper tcpdumping and/or CLI commands (depending on the switches that you have) it should be relatively easy.

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Ray Soucy
You have a rogue IPv6 router on your network. It's not a host problem. It's along the lines of having a rogue DHCP server on your network but faster propagation. It needs to be tracked down and disabled. You can use tcpdump (as root) to capture IPv6 RA and see who's doing it, and what's being

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Jared Mauch
tcpdump -e will show source and dest mac address. On Apr 17, 2012, at 6:54 AM, Ray Soucy r...@maine.edu wrote: tcpdump -ni eth0 'ip6 dst ff02::1' 06:48:48.044409 IP6 fe80::2d0:1ff:fedf:8400 ff02::1: ICMP6, router advertisement, length 64

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Mick O'Rourke
RA guard is useful if your tcam capacity and or switching platform allows - http://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-implementation-01 An older yet still a good read from Cisco on some IPv6 first hop security:

trouble with Paradyne Bitstorm 2600 DSLAM

2012-04-17 Thread A.T.
Hello, all! I have Paradyne Bitstorm 2600 DSLAM, but no password. Is it possible to reset this device to factory configuration? Manuals don't say much, only specified way to restore factory settings assume logged in administrator. Thanks!

Re: trouble with Paradyne Bitstorm 2600 DSLAM

2012-04-17 Thread A.T.
Thanks. I have already tried interrupting boot process. Booting up with parameter 0x00020 (disable login security) don't seem affect outcome, both serial and management ethernet still asks login. On Tue, 2012-04-17 at 09:09 -0500, Chris Boyd wrote: Try pressing enter several times after

OpenFlow @ GOOG

2012-04-17 Thread Eugen Leitl
http://www.wired.com/wiredenterprise/2012/04/going-with-the-flow-google/all/1 Going With The Flow: Google’s Secret Switch To The Next Wave Of Networking By Steven Levy April 17, 2012 | 11:45 am | Categories: Data Centers, Networking In early 1999, an associate computer science professor

Re: OpenFlow @ GOOG

2012-04-17 Thread Marshall Eubanks
I wonder if this will be contributed to the DC (DataCenter) work currently gearing up in the IETF. Regards Marshall On Tue, Apr 17, 2012 at 12:37 PM, Eugen Leitl eu...@leitl.org wrote: http://www.wired.com/wiredenterprise/2012/04/going-with-the-flow-google/all/1 Going With The Flow: Google’s

Re: [c-nsp] Possible T1 clocking problem.

2012-04-17 Thread Andrew Koch
On 4/17/12 13:46 AM, Joseph Mays wrote: The interface on the remote end (t1 WIC port in a 2600 shows a lot more errors, including a lot of frame errors, for the same time period. [snip] Are these T1 frame errors, or a higher level? If you believe this to be a T1 concern, you should be

Re: [c-nsp] Possible T1 clocking problem.

2012-04-17 Thread Carlos Alcantar
You might want to put a t1 test set on the line and check and see if the clock frequency is moving. Carlos Alcantar Race Communications / Race Team Member 101 Haskins Way, So. San Francisco, CA. 94080 Phone: +1 415 376 3314 / car...@race.com / http://www.race.com -Original Message-

letter opposing cybersecurity legislation: looking for signers

2012-04-17 Thread Dan Auerbach
Dear NANOGers, EFF is looking for sign-ons to a letter expressing concern about some of the proposed cybersecurity legislation currently being debated in the US Congress. This legislation has a number of alarming provisions, including incentives for recording massive amounts of network traffic

Re: Most energy efficient (home) setup

2012-04-17 Thread Jeroen van Aart
Jimmy Hess wrote: Consider that the probability 16GB of SDRAM experiences at least one single bit error at sea level, in a given 6 hour period exceeds 66% = 1 - (1 - 1.3e-12 * 6)^(16 * 2^30 * 8).In any given 24 hour period, the probability of at least one single bit error exceeds 98%.

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Anurag Bhatia
Thanks for useful reply everyone! As I mentioned - I applied quick temporary fix by stop broadcast from router and clearing of routing table on servers. Will apply disabling of autoconfig now. On Tue, Apr 17, 2012 at 5:25 PM, Mick O'Rourke mkorourke+na...@gmail.comwrote: RA guard is useful if