Re: subrate SFP?

2013-08-30 Thread Saku Ytti
I got quite a bit of replies from sellers selling me cuSFP, insisting they work. So I'd like to clear up on this. For 10/100 to work on SFP slot, the PHY in the host needs to be multirate. Exception is SGMII which supposedly supports magic mode where SFP can ask it to send same bit 10 times, then

Re: IP Fragmentation - Not reliable over the Internet?

2013-08-30 Thread Masataka Ohta
Mark Andrews wrote: Ensure that the firealls at both ends pass ICMP/ICMPv6 PTB. Only idiots block all ICMP/ICMPv6. Yes there are a lot of idiots in the world. The worst idiots are people who designed ICMPv6 [RFC2463] as: (e.2) a packet destined to an IPv6 multicast address (there

Re: subrate SFP?

2013-08-30 Thread Brandon Butterworth
There is absolutely no reason that you couldn't deliver 'media converter' or '2 port switch' in a SFP casing Yes, similar devices exist http://www.rad.com/10/SFP-Format-TDM-Pseudowire-Gateway/10267/ so it probably just needs more demand brandon

Re: subrate SFP?

2013-08-30 Thread Saku Ytti
I actually emailed RAD, MethodE and Avago yesterday and pitched the idea. MiTOP is my exact justification why it should technically be feasible. I guess it would be easier to pitch, if there would be commitment to buy, but I don't personally need many units, just 1-2 here and there. On 30

Re: subrate SFP?

2013-08-30 Thread sthaug
I actually emailed RAD, MethodE and Avago yesterday and pitched the idea. MiTOP is my exact justification why it should technically be feasible. I guess it would be easier to pitch, if there would be commitment to buy, but I don't personally need many units, just 1-2 here and there. I

RE: subrate SFP?

2013-08-30 Thread Jamie Bowden
From: Saku Ytti [mailto:s...@ytti.fi] I got quite a bit of replies from sellers selling me cuSFP, insisting they work. So I'd like to clear up on this. For 10/100 to work on SFP slot, the PHY in the host needs to be multirate. Exception is SGMII which supposedly supports magic mode where

Re: IP Fragmentation - Not reliable over the Internet?

2013-08-30 Thread Randy Bush
In a study using the RIPE Atlas probes, we have used a heuristic to figure out where the fragments where dropped. And from the Atlas probes where IP fragments did not arrive, there is a high likelihood the problem is with the last hop to the Atlas probe. i wonder if this is correlated with

Re: Parsing Syslog and Acting on it, using other input too

2013-08-30 Thread Shawn Wilson
Christopher Morrow morrowc.li...@gmail.com wrote: On Thu, Aug 29, 2013 at 10:50 AM, Don Wilder don.wil...@gmail.com wrote: I wrote a script in Linux that watches for unauthorized login attempts and adds the ip address to the blocked list in my firewall. You might want to search sourceforge

Re: IP Fragmentation - Not reliable over the Internet?

2013-08-30 Thread Benno Overeinder
On 08/30/2013 01:58 PM, Randy Bush wrote: In a study using the RIPE Atlas probes, we have used a heuristic to figure out where the fragments where dropped. And from the Atlas probes where IP fragments did not arrive, there is a high likelihood the problem is with the last hop to the Atlas

Re: Parsing Syslog and Acting on it, using other input too

2013-08-30 Thread Christopher Morrow
On Fri, Aug 30, 2013 at 8:55 AM, Shawn Wilson ag4ve...@gmail.com wrote: Christopher Morrow morrowc.li...@gmail.com wrote: On Thu, Aug 29, 2013 at 10:50 AM, Don Wilder don.wil...@gmail.com wrote: I wrote a script in Linux that watches for unauthorized login attempts and adds the ip address to

Re: Parsing Syslog and Acting on it, using other input too

2013-08-30 Thread shawn wilson
Ah it seems they do: https://github.com/fail2ban/fail2ban/blob/master/config/action.d/iptables-ipset-proto6.conf IDK enough about fail2ban to know whether I can assign a per proto or per log type config (I assume I can). In which casethis does what my script does and then some. I would probably

Re: subrate SFP?

2013-08-30 Thread Tim Durack
I think this is a great idea. Maybe not a huge market, but I would buy them, instead of having to use dumb transceivers. It would be interesting to have some other smart SFP options too, like macsec for example... Tim: On Fri, Aug 30, 2013 at 5:00 AM, Saku Ytti s...@ytti.fi wrote: I actually

Google corporate network engineer

2013-08-30 Thread Ken Gilmour
Hello, Is there a Google corporate network engineer here who can contact me off list please? It's regarding some issues with connectivity to the Google corporate network services and load balancing (not Google apps). Thanks! Ken

Weekly Routing Table Report

2013-08-30 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: looking for hostname geographic hint validation

2013-08-30 Thread tabris
On 08/27/2013 12:33 PM, Bradley Huffaker wrote: We are currently working on an algorithm that automatically detects geographic hints inside of hostnames. At this point we are seeking operators who can validate some of our inferences. Please contact me if you can valid one of the inferences

Re: looking for hostname geographic hint validation

2013-08-30 Thread Matthew Petach
On Tue, Aug 27, 2013 at 1:35 PM, tabris tab...@tabris.net wrote: On 08/27/2013 12:33 PM, Bradley Huffaker wrote: We are currently working on an algorithm that automatically detects geographic hints inside of hostnames. At this point we are seeking operators who can validate some of our

Re: looking for hostname geographic hint validation

2013-08-30 Thread Bradley Huffaker
On Fri, Aug 30, 2013 at 02:45:09PM -0700, Matthew Petach wrote: Hitting 93% accuracy is actually pretty mindblowing from my perspective, given how random some of the naming choices are. ^_^; This is the number of times we think we have an answer and it is wrong. It does not include the

Is the FBI's DNSSEC broken?

2013-08-30 Thread John Levine
I don't claim to be a big DNSSEC expert, but this looks just plain wrong to me, and unbound agrees, turning it into a SERVFAIL. Here's a lookup that succeeds, an A record for mail.ic.fbi.gov: $ dig @ns1.fbi.gov mail.ic.fbi.gov a +dnssec ;; -HEADER- opcode: QUERY, status: NOERROR, id: 7222 ;;

Re: Is the FBI's DNSSEC broken?

2013-08-30 Thread Ray Van Dolson
On Fri, Aug 30, 2013 at 10:27:36PM +, John Levine wrote: I don't claim to be a big DNSSEC expert, but this looks just plain wrong to me, and unbound agrees, turning it into a SERVFAIL. Here's a lookup that succeeds, an A record for mail.ic.fbi.gov: $ dig @ns1.fbi.gov mail.ic.fbi.gov a

The Cidr Report

2013-08-30 Thread cidr-report
This report has been generated at Fri Aug 30 21:13:28 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

BGP Update Report

2013-08-30 Thread cidr-report
BGP Update Report Interval: 22-Aug-13 -to- 29-Aug-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS359361034 2.5% 256.4 -- FRONTIER-EPIX - Frontier Communications of America, Inc. 2

Re: Is the FBI's DNSSEC broken?

2013-08-30 Thread Mark Andrews
In message 20130830223510.ga10...@esri.com, Ray Van Dolson writes: On Fri, Aug 30, 2013 at 10:27:36PM +, John Levine wrote: I don't claim to be a big DNSSEC expert, but this looks just plain wrong to me, and unbound agrees, turning it into a SERVFAIL. Here's a lookup that succeeds,

Re: looking for hostname geographic hint validation

2013-08-30 Thread Matthew Petach
On Fri, Aug 30, 2013 at 3:25 PM, Bradley Huffaker bhuff...@caida.orgwrote: On Fri, Aug 30, 2013 at 02:45:09PM -0700, Matthew Petach wrote: Hitting 93% accuracy is actually pretty mindblowing from my perspective, given how random some of the naming choices are. ^_^; This is the number of