Re: Proxying NetFlow traffic correctly

2017-06-07 Thread Jérôme Fleury
We use pmacct with it's tee plugin - it gets the job done beautifully and it's a one-liner config. https://github.com/pmacct/pmacct/blob/master/CONFIG-KEYS On Tue, Jun 6, 2017 at 2:43 PM, Sami via NANOG wrote: > Hello, > I have been searching for a solution that

Re: Templating/automating configuration

2017-06-07 Thread Andrew Dampf
Salt is great for generating configs based on jinja templates, and you can use napalm in conjunction with salt to push the configs to the device on a set schedule (typically this is done hourly). If manual changes are made to the router, salt would override them on the next run, so it's a great

Re: DMCA processing software

2017-06-07 Thread Eric Kuhnke
Now new and improved for the modern era: https://devnull-as-a-service.com/home/ On Tue, Jun 6, 2017 at 10:30 PM, Tony Wicks wrote: > Speaking for Networks outside of the USA (and not being at all helpful > sorry), /dev/null works well. Sorry, couldn't help myself... > > > >

Re: IPv4 Hijacking For Idiots

2017-06-07 Thread Robert L Mathews
On 6/6/17 6:14 AM, Scott Christopher wrote: > Or one could register aсme.com For what it's worth, that domain name (with a Cyrillic character 0441 replacing the "c" in "acme") wouldn't be allowed based on this:

Re: Templating/automating configuration

2017-06-07 Thread James Bensley
On 7 June 2017 at 19:52, Brian Knight wrote: > The import process to the database runs directly on our rancid server, > reading the downloaded configs out of the appropriate directory within > rancid. Most of our gear is Cisco, so the ciscoconfparse module for Python

Re: Merit RADB support

2017-06-07 Thread Andree Toonk
Hi Chuck, My secret spy satellite informs me that Chuck Anderson wrote On 2017-06-07, 5:21 PM: > Apologies to Merit RADB, it was BGPmon that never responds. Merit > RADB actually does respond--my frustration is more about the > difficulty in getting them to delete stale objects that others >

Re: Templating/automating configuration

2017-06-07 Thread Brian Knight
On Wed, 07 Jun 2017 04:23:33 -0500 t...@pelican.org wrote Hi Brian, On Tuesday, 6 June, 2017 21:48, "Brian Knight" m...@knight-networks.com said: Because we had different sources of truth which were written in-house, we wound up rolling our own template engine in Python.

RE: Merit RADB support

2017-06-07 Thread Eric Krichbaum
That's an inherent problem with the IRR system (and I am still a big proponent). There is every operational benefit from entering an object. The object augments policy. But, what is the benefit of removing an object? It doesn't operationally benefit (size of prefix lists, etc. aside) anything.

Re: Spectrum TV authentication failures

2017-06-07 Thread Jay R. Ashworth
- Original Message - > From: "jra" > NANOG is probably not the optimal venue for looking into auth failures on > the IPTV service which Spectrum/Charter/TWC/BH's TV app for Android uses > (which are legion), even though it probably uses RADIUS to get the work > done.

RE: Merit RADB support

2017-06-07 Thread Erik Sundberg
For RADB, I was able to get them to delete a stale object 2 weeks ago. Only had to copy them on an email to the original source and wait 24 hours. I wish it was less because we are the netblock owner of the stale route object in question. Erik Sundberg Sr. Network Engineering Network

Re: Merit RADB support

2017-06-07 Thread Chuck Anderson
On Wed, Jun 07, 2017 at 12:08:50PM -0400, Chuck Anderson wrote: > On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > > Anyone gonna email me back from RADB support? > > In my experience, no. Apologies to Merit RADB, it was BGPmon that never responds. Merit RADB actually does

Re: [SPF:Probably_Forged] Merit RADB support

2017-06-07 Thread Chuck Anderson
On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > Anyone gonna email me back from RADB support? In my experience, no.

Merit RADB support

2017-06-07 Thread Kaiser, Erich
Anyone gonna email me back from RADB support? Erich Kaiser The Fusion Network er...@gotfusion.net Office: 630-621-4804 Cell: 630-777-9291

Re: IPv4 Hijacking For Idiots

2017-06-07 Thread Scott Christopher
Mark Andrews wrote: > but we do have the tech to do this. I wholeheartedly agree. > All it takes is a couple of transit providers to no longer accept > word-of-mouth and > the world will transition overnight. This is the hard part. It seems trivial - being probably only a handful of

Re: AT Broken Uverse IPv6 routing.

2017-06-07 Thread Peter Mayhew
Brandon, I have heard some brief mentions on the web about AT converting some customers from 6rd to native IPv6 that has caused some problems, but I have not heard from enough people to confirm with great certainty. If you look at the RG stats page does it still mention 6rd? Out of curiosity,

Re: Proxying NetFlow traffic correctly

2017-06-07 Thread Mike Sabbota
Check out samplicator. https://github.com/sleinen/samplicator --Mike On Tue, Jun 6, 2017 at 2:43 PM, Sami via NANOG wrote: > Hello, > I have been searching for a solution that collects/duplicates NetFlow > traffic properly for a while but i couldn't find any. > Do you know

Re: Proxying NetFlow traffic correctly

2017-06-07 Thread Joe Loiacono
You may want to check out the SiLK netflow capture and analysis tool suite. Look in particular at it's SiLK Administrators Tools section which provides extensive flexibility for manipulating netflow exports. The analysis tools are quite good too.

Re: Templating/automating configuration

2017-06-07 Thread t...@pelican.org
Hi Brian, On Tuesday, 6 June, 2017 21:48, "Brian Knight" said: > Because we had different sources of truth which were written in-house, we > wound up > rolling our own template engine in Python. It took about 3 weeks to write the > engine and adapt existing templates.

Telxius AS12956

2017-06-07 Thread Marco Paesani
Hi, I need a peering contact for Telxius, can you help me ? Thanks ! kind regards, Marco Paesani Skype: mpaesani Mobile: +39 348 6019349 Success depends on the right choice ! Email: ma...@paesani.it

Re: Templating/automating configuration

2017-06-07 Thread James Bensley
On 7 June 2017 at 00:43, Vincent Bernat wrote: > ❦ 6 juin 2017 14:30 +0100, Oliver Elliott : > >> I echo Ansible. I'm using it with NAPALM and jinja2 templates to push and >> verify config on switches. > > Why not using the builtin ability of

Re: IPv4 Hijacking For Idiots

2017-06-07 Thread Mark Andrews
In message <1496816542.3628250.1001312328.70df4...@webmail.messagingengine.com> , Scott Christopher writes: > Mark Andrews wrote: > > > but we do have the tech to do this. > > I wholeheartedly agree. > > > All it takes is a couple of transit providers to no longer accept word-of-m > outh and