Re: IPV6 in enterprise best practices/white papaers

2013-01-30 Thread joel jaeggli
On 1/30/13 6:39 AM, Harald Koch wrote: On 30 January 2013 02:39, Jussi Peltola wrote: High density virtual machine setups can have 100 VMs per host. Each VM has at least a link-local address and a routable address. This is 200 groups per port, 9600 per 48 port switch. um - let's compare apples

Re: IPV6 in enterprise best practices/white papaers

2013-01-27 Thread joel jaeggli
On 1/27/13 9:01 AM, Harald Koch wrote: On 26 January 2013 17:38, Mark Andrews wrote: As for "breaking" your LAN, if the applications take 60 seconds to fallback to the other address they were already broken. Go complain to your application vendor. Some vendors have already fixed this problem

Re: Problem with email to Hawaiilink.net email

2013-01-15 Thread joel jaeggli
hawaiiantel is reporting a fibercut which I imagine explains most of this. On 1/15/13 4:32 PM, Bacon Zombie wrote: Looks like you are not the only one with issues connecting to Hawaii: http://permalink.gmane.org/gmane.org.operators.isotf.outages/5231 On 16 January 2013 00:19, david peahi wrot

Re: Issues with level3?

2013-01-15 Thread joel jaeggli
On 1/15/13 10:04 AM, Randy Carpenter wrote: - Original Message - On 1/15/13 9:31 AM, Bruce H McIntosh wrote: On Tue, 2013-01-15 at 17:23 +, Warren Bailey wrote: I still call a /24 a class c too.. :/ lol More efficient that way - "class c" uses fewer syllables than "slash twenty fo

Re: Issues with level3?

2013-01-15 Thread joel jaeggli
On 1/15/13 9:31 AM, Bruce H McIntosh wrote: On Tue, 2013-01-15 at 17:23 +, Warren Bailey wrote: I still call a /24 a class c too.. :/ lol More efficient that way - "class c" uses fewer syllables than "slash twenty four" :-) You realize that class-c address space was only found within 192/8

Re: OOB core router connectivity wish list

2013-01-13 Thread joel jaeggli
On 1/13/13 12:12 AM, Mikael Abrahamsson wrote: On Sat, 12 Jan 2013, Matthew Petach wrote: Thank goodness ethernet never has problems with negotiation going awry, and coming up with mismatched duplexes, and vendors never had to implement "no negotiation-auto" in their configs because you could

Re: OOB core router connectivity wish list

2013-01-11 Thread Joel jaeggli
On 1/11/13 02:44 , Nikolay Shopik wrote: > Also getting POTS line in your pop sometimes get tricky. 2G/3G modems > with cheap plans cost like 10$/month (dunno about US though), thats > almost same as POTS line. They don't generally have public IPs (that can be arranged). verizon 4G cards have ipv6

Re: [SHAME] Spam Rats

2013-01-10 Thread joel jaeggli
On 1/10/13 12:59 PM, John Levine wrote: IMHO mail is one of the easiest "first things" to turn on for IPv6. You can certainly turn it on, and it will work at the current toy scale, but nobody has a clue how we're going to scale IPv4 spam management up for large scale IPv6. Anything that's obvio

Re: really facebook?

2012-12-27 Thread joel jaeggli
On 12/27/12 10:29 AM, mike wrote: On 12/27/12 9:25 AM, joel jaeggli wrote: On 12/27/12 9:04 AM, mike wrote: I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US That's a r

Re: really facebook?

2012-12-27 Thread joel jaeggli
On 12/27/12 9:04 AM, mike wrote: I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US That's a rather good estimation of where many verizon wireless customers appear to come from.

Re: Validation of FCS

2012-12-23 Thread joel jaeggli
On 12/19/12 7:02 AM, Saku Ytti wrote: On (2012-12-19 09:53 -0500), Jason Lixfeld wrote: Perhaps in simpler terms, a CRC error is a localized thing and would never be forwarded from one device to another. It would be forwarded in cut-through switching. I have cut-through switches (arista) that

Re: why haven't ethernet connectors changed?

2012-12-20 Thread joel jaeggli
the 8p8c connector is durable. The connector predates twisted pair ethernet by a decade or more. you could also ask about 1/4" TRS which is still in use albiet not in phone systems for about 100 years longer. On 12/20/12 10:20 AM, Michael Thomas wrote: I was looking at a Raspberry Pi board

Re: Fiber only in DataCenters?

2012-12-17 Thread joel jaeggli
On 12/17/12 9:01 AM, James Wininger wrote: Hello all, Looking for input from "providers" as well as "consumers" of data center space and facilities. Specifically speaking to the types of available physical cross connects. Are there data centers out there that are "fiber only"? That is to say t

Re: TCP time_wait and port exhaustion for servers

2012-12-05 Thread joel jaeggli
On 12/5/12 9:09 AM, Ray Soucy wrote: This would be outgoing connections sourced from the IP of the proxy, destined to whatever remote website (so 80 or 443) requested by the user. Essentially it's a modified Squid service that is used to filter HTTP for CIPA compliance (required by the governme

Re: William was raided for running a Tor exit node. Please help if you can.

2012-12-02 Thread Joel jaeggli
On 11/29/12 23:18 , Joakim Aronius wrote: > I am all for being anonymous on the net but I seriously believe that > we still need to enforce the law when it comes to serious felonies > like child pr0n, organized crime etc, we can't give them a free pass > just by using Tor. I dont think it should b

Re: Big day for IPv6 - 1% native penetration

2012-11-24 Thread joel jaeggli
On 11/24/12 8:29 PM, Dobbins, Roland wrote: On Nov 25, 2012, at 10:09 AM, joel jaeggli wrote: from goeff huston's data they have more v6 at home. And not purposely, either - because it's enabled by default on recent client OSes. My guess is that a non-trivial fraction of obs

Re: Big day for IPv6 - 1% native penetration

2012-11-24 Thread joel jaeggli
On 11/20/12 7:32 AM, Paul Rolland (ポール・ロラン) wrote: Hello, On Tue, 20 Nov 2012 10:14:18 +0100 Tomas Podermanski wrote: It seems that today is a "big day" for IPv6. It is the very first time when native IPv6 on google statistics (http://www.google.com/intl/en/ipv6/statistics.html) reached

Re: The Verge article about Verizon's Sandy Cleanup Efforts in Manhattan

2012-11-20 Thread joel jaeggli
On 11/20/12 10:20 AM, Christopher Morrow wrote: On Tue, Nov 20, 2012 at 12:49 PM, Faisal Imtiaz wrote: On 11/20/2012 12:10 PM, Christopher Morrow wrote: it's acutally kinda nice that at least from CO -> building now there maybe more highspeed links... and maybe lower long term costs? Be care

Re: The Verge article about Verizon's Sandy Cleanup Efforts in Manhattan

2012-11-20 Thread joel jaeggli
On 11/20/12 9:10 AM, Christopher Morrow wrote: On Tue, Nov 20, 2012 at 11:55 AM, George, Wes wrote: From: Christopher Morrow [mailto:morrowc.li...@gmail.com] http://www.theverge.com/2012/11/17/3655442/restoring-verizon-service-m anhattan-hurricane-sandy hey lookie! 'free uprades'! [WEG] Be

Re: Google/Youtube problems

2012-11-19 Thread joel jaeggli
On 11/19/12 5:59 AM, Saku Ytti wrote: What I'm trying to say, I can't see youtube generating anywhere nearly enough revenue who shift 10% (or more) of Internet. And to explain this conundrum to myself, I've speculated accounting magic (which I'd frown upon) and leveraging market position to get

Re: "authority" to route?

2012-11-14 Thread joel jaeggli
On 11/14/12 2:40 PM, Joe Abley wrote: On 2012-11-12, at 14:43, Jim Mercer wrote: Is there a common practice of providers to vet / validate requests to advertise blocks? Yes, most providers whose customers request a particular route to be pointed towards them will ask for ambiguous instructio

Re: Indonesian ISP Moratel announces Google's prefixes

2012-11-06 Thread joel jaeggli
On 11/7/12 12:13 AM, Patrick W. Gilmore wrote: On Nov 07, 2012, at 00:07 , Jian Gu wrote: Where did you get the idea that a Moratel customer announced a google-owned prefix to Moratel and Moratel did not have the proper filters in place? according to the blog, all google's 4 authoritative DNS

Re: IPv6 Netowrk Device Numbering BP

2012-11-03 Thread joel jaeggli
On 11/1/12 2:01 PM, Owen DeLong wrote: There are better ways to avoid neighbor exhaustion attacks unless you have attackers inside your network. All of the migrations are compromises of one sort or another. We thought this one was important enough to include in an informational status RFC (6

Re: 169.254.0.0/16

2012-10-20 Thread joel jaeggli
On 10/17/12 10:59 AM, Darren O'Connor wrote: I've just set up a vpn tunnel to Amazon's AWS and as part of the config they required me to configure to /30 tunnels using addressing from the 169.254.0.0/16 space. RFC3927 basically says that this address should only be used as a temp measure unti

Re: 169.254.0.0/16

2012-10-19 Thread joel jaeggli
On 10/19/12 10:56 AM, Arturo Servin wrote: Wait! Are you suggesting to not use it as intended by RFC6598? "to be used as Shared Address Space to accommodate the needs of Carrier- Grade NAT (CGN) devices. It is anticipated that Service Providers will use this Shared

Re: max-prefix and platform tcam limits: they are things

2012-10-05 Thread joel jaeggli
On 10/5/12 5:05 PM, jim deleskie wrote: I know that I should know better then comment on networks others then my own, ( and I know to never comment on my own publicly :) ) But here goes, 210x the size of normal really? 210% I'd have a hard time believing. Did anyone else anywhere see a route l

Re: 100.100.0.0/24

2012-10-05 Thread joel jaeggli
On 10/5/12 8:18 AM, Jared Mauch wrote: On Oct 5, 2012, at 11:07 AM, Christopher Morrow wrote: On Fri, Oct 5, 2012 at 8:29 AM, joel jaeggli wrote: by all accounts this has been advertised since 8/24. space allocated: 2012-03-13 that's 5 months and 11 days too long. I suspect not eve

Re: 100.100.0.0/24

2012-10-05 Thread joel jaeggli
On 10/5/12 5:08 AM, Randy Bush wrote: http://bgp.he.net/net/100.100.0.0/24#_bogon A surprising number of large transit ASes appear to be more than willing to accept this prefix from AS4847. a private address space leak? and propagated. i am deeply shocked. wtf did people think would happen?

100.100.0.0/24

2012-10-04 Thread joel jaeggli
http://bgp.he.net/net/100.100.0.0/24#_bogon A surprising number of large transit ASes appear to be more than willing to accept this prefix from AS4847. I'd be a lot happier if there were fewer. thanks joel

Re: Dropping IPv6 Fragments

2012-10-04 Thread joel jaeggli
On 10/4/12 8:15 AM, Dobbins, Roland wrote: On Oct 4, 2012, at 9:58 PM, joel jaeggli wrote: Likewise with the acl I have the property that the initial packet has all the info in it while the fragment does not. For iACLs, just filter non-initial fragments directed to infrastructure IPs. Cisco

Re: IPv4 address length technical design

2012-10-04 Thread joel jaeggli
On 10/4/12 1:31 AM, Marco Hogewoning wrote: On Oct 4, 2012, at 12:21 AM, Owen DeLong wrote: IEEE 802 was expected to provide unique numbers for all computers ever built. Internet was expected to provide unique numbers for all computers actively on the network. Obviously, over time, the latte

Re: Dropping IPv6 Fragments

2012-10-04 Thread joel jaeggli
On 10/4/12 7:36 AM, Dobbins, Roland wrote: On Oct 4, 2012, at 9:26 PM, Sander Steffann wrote: The closer you get to the edge the more common it might become... iACLs should be implemented at the network edge to drop all IPv4 and IPv6 traffic - including non-initial fragments - directed toward

Re: /. Terabit Ethernet is Dead, for Now

2012-09-30 Thread joel jaeggli
On 9/30/12 12:05 PM, Jimmy Hess wrote: On 9/29/12, Masataka Ohta wrote: Jared Mauch wrote: ... The problem is that physical layer of 100GE (with 10*10G) and 10*10GE are identical (if same plug and cable are used both for 100GE and 10*10GE). Interesting.Well, I would say if there are no

Re: /. Terabit Ethernet is Dead, for Now

2012-09-28 Thread joel jaeggli
On 9/27/12 5:58 AM, Darius Jahandarie wrote: On Thu, Sep 27, 2012 at 8:51 AM, Eugen Leitl wrote: http://slashdot.org/topic/datacenter/terabit-ethernet-is-dead-for-now/ Terabit Ethernet is Dead, for Now I recall 40Gbit/s Ethernet being promoted heavily for similar reasons as the ones in this a

Re: Throw me a IPv6 bone (sort of was IPv6 ignorance)

2012-09-21 Thread joel jaeggli
On 9/21/12 6:40 AM, Jeroen Massar wrote: On 2012-09-21 15:31 , Mark Radabaugh wrote: The part of IPv6 that I am unclear on and have not found much documentation on is how to run IPv6 only to end users. Anyone care to point me in the right direction? Can we assign IPv6 only to end users? What

Re: Big Temporary Networks

2012-09-20 Thread joel jaeggli
On 9/20/12 9:52 AM, Jay Ashworth wrote: I'm quite certain I have a good idea of the magnitude of what you'd charge for professional services for such work, and I would expect it to be 2-3 orders of magnitude larger than what a Worldcon Concom could afford to pay. :-) I would also be very surpri

Re: The Department of Work and Pensions, UK has an entire /8

2012-09-20 Thread joel jaeggli
On 9/20/12 12:09 AM, George Herbert wrote: On Sep 19, 2012, at 9:58 PM, Jimmy Hess wrote: There is still no technical reason that 240/4 cannot be rehabilitated, other than continued immaterial objections to doing anything at all with 240/4, and given the rate of IPv6 adoption thus far, if n

Re: The Department of Work and Pensions, UK has an entire /8

2012-09-19 Thread joel jaeggli
On 9/19/12 10:42 AM, Jo Rhett wrote: And second, have you ever worked on a private intranet that wasn't connected to the internet through a firewall? Skipping oob networks for equipment management, neither have I. Plenty of people on this list have worked on private internet(s) with real AS num

Re: IPv6 Ignorance

2012-09-17 Thread joel jaeggli
http://www.antipope.org/charlie/blog-static/2012/08/how-low-power-can-you-go.html On 9/17/12 8:16 PM, Owen DeLong wrote: True, but at a price that means this won't occur on very many of earth's many CM and even if it did, when you subtract the space required for cooling them and the space requ

Re: IPv6 Ignorance

2012-09-17 Thread joel jaeggli
On 9/17/12 8:23 AM, Adrian Bool wrote: Hi Mike, On 17 Sep 2012, at 16:04, Mike Simkins wrote: RIPE 552 (I think), allows you to request up to a /29 without additional justification if needed. Sure, but you're just tinkering at the edges here. 32-bits would be a more sensible allocation size

Re: IPv6 Ignorance

2012-09-17 Thread joel jaeggli
On 9/16/12 9:22 PM, Mikael Abrahamsson wrote: On Mon, 17 Sep 2012, Randy Bush wrote: and don't bs me with how humongous the v6 address space is. we once though 32 bits was humongous. Giving out a /48 to every person on earth uses approximately 2^33 networks, meaning we could cram it into a

Re: Big Temporary Networks

2012-09-16 Thread joel jaeggli
On 9/16/12 9:24 AM, Jay Ashworth wrote: - Original Message - From: "Gaurab Raj Upadhaya" So you're *REALLY* motivated on this "reduce the coverage" thing, then. you could say yes :), reduce the coverage per-AP. Most APs I have seen will start failing with about ~100 associations and n

Re: Weekly Routing Table Report

2012-08-24 Thread joel jaeggli
On 8/24/12 3:07 PM, Lori Jakab wrote: On 8/24/2012 11:33 AM, Routing Analysis Role Account wrote: [...] Analysis Summary BGP routing table entries examined: 264582 Isn't this supposed to be >400K? What happened this week? yes it disagrees with t

Re: 172.0.0.0/12 has been Allocated

2012-08-23 Thread joel jaeggli
On 8/23/12 2:11 PM, Jeroen van Aart wrote: Owen DeLong wrote: AT&T should just be glad there was a /12 for them to get. That isn't going to be true for much longer. If you are counting on an IPv4 free pool to run your business next year, you are making a bad bet. The 16777214 IP addresses (

Re: 172.0.0.0/12 has been Allocated

2012-08-23 Thread joel jaeggli
On 8/23/12 10:57 AM, Seth Mattinen wrote: I would really hope that wireless providers are planning for IPv6 instead, although a recent thread about Sprint LTE indicates maybe this is wishful thinking. I know Verizon is but the single LTE MiFi I have doesn't do IPv6, but I've seen customers with V

Re: 172.0.0.0/12 has been Allocated

2012-08-22 Thread joel jaeggli
On 8/22/12 10:50 PM, Jimmy Hess wrote: So I would say they've come into posession of a rather undesirable piece of IP address real-estate, as it were. The days when undesirability of a given ipv4 unicast prefix would play a significant role in assignment policy are pretty much coming to a close

Re: BGP Play broken?

2012-08-15 Thread joel jaeggli
On 8/15/12 10:28 AM, Robert Glover wrote: On 08/15/2012 10:16 AM, Anurag Bhatia wrote: Seems like BGP Play - http://bgplay.routeviews.org/ does not works anymore? It is not accepting prefixes and gives error to check if prefix is announced globally or not. I sent an email to the contacts liste

Re: DNS Changer items

2012-08-15 Thread joel jaeggli
On 8/15/12 10:24 AM, Leo Bicknell wrote: In a message written on Wed, Aug 15, 2012 at 08:01:15AM -0700, joel jaeggli wrote: Remediation of whatever wrong with a given prefix is an active activity, it's not likely to go away unless the prefix is advertised. Actually, that's not t

Re: DNS Changer items

2012-08-15 Thread joel jaeggli
On 8/15/12 6:55 AM, Leo Bicknell wrote: While I understand that in the face of IPv4 exhaustion long quarantine periods are probably no longer a good idea, I think 6 weeks is shockingly short. I also think to blanket apply the quarantine is a little short sighted, there are cases that need a long

Re: raging bulls

2012-08-08 Thread joel jaeggli
On 8/8/12 6:52 AM, Naslund, Steve wrote: It seems to me that all the markets have been doing this the wrong way. Would it now be more fair to use some kind of signed timestamp and process all transactions in the order that they originated? Given an uneven distribution of sizes it's kind of hard t

Re: BGPttH. Neustar can do it, why can't we?

2012-08-06 Thread joel jaeggli
On 8/6/12 7:08 AM, Christopher Morrow wrote: On Mon, Aug 6, 2012 at 9:07 AM, William Herrin wrote: As much as I'd love for Verizon to offer BGP directly over FIOS there are fewer than 40,000 I'm curious as to your number... where is that from? sent to your mailbox every week AS Sum

Re: Verizon FiOS - is BGP an option?

2012-08-05 Thread joel jaeggli
On 8/5/12 9:19 PM, William Herrin wrote: On Sun, Aug 5, 2012 at 10:41 PM, Frank Bulk wrote: Would I like to have the same uptime at my home as we have in the CO? or data center? Sure, but collectively we aren't willing, nay, able, to pay that price. We paid the price for 3-nines on the home c

Re: Verizon FiOS - is BGP an option?

2012-08-04 Thread joel jaeggli
On 8/4/12 8:44 AM, Mike Jones wrote: On 4 August 2012 04:07, Frank Bulk wrote: As someone else posted, many FTTH installations are centralized as much as possible to avoid having non-passive equipment in the plant, allowing for the practicality of onsite generators. That's what we do. But for

Re: Update from the NANOG Communications Committee regarding recent off-topic posts

2012-07-30 Thread joel jaeggli
On 7/30/12 10:57 AM, Steven Noble wrote: The fix for this issue is trivial. Every new signup should require a sponsor or a deposit of funds into a new member fund. Once a member has made a relevant post regarding a NANOG related item their funds are returned. If someone spams they forfeit the

Re: IPv6 only streaming video

2012-07-25 Thread Joel jaeggli
ess 74.125.225.38 youtube.com has IPv6 address 2001:4860:b007::5d > Tina > > On Jul 25, 2012, at 9:48 PM, "Joel jaeggli" <mailto:joe...@bogus.com>> wrote: > >> On 7/25/12 21:43 , Tina TSOU wrote: >>> Dear Joel, >>> Who requests IPv6 on

Re: IPv6 only streaming video

2012-07-25 Thread Joel jaeggli
On 7/25/12 21:43 , Tina TSOU wrote: > Dear Joel, > Who requests IPv6 only service? you did... check the title of this thread. > Tina > > On Jul 25, 2012, at 8:48 PM, "Joel jaeggli" wrote: > >> On 7/25/12 13:15 , Tina TSOU wrote: >>> Dear all, >>

Re: IPv6 only streaming video

2012-07-25 Thread Joel jaeggli
On 7/25/12 13:15 , Tina TSOU wrote: > Dear all, > If you know there is any testing or commercial IPv6 only streaming video we > can access, let me know. > Thank you. speaking as a content provider, ipv6-only service requests are misguided. > Tina > > >> -Original Message- >> From: Artu

Re: Another LTE network turns up as IPv4-only squat space + NAT

2012-07-25 Thread joel jaeggli
On 7/18/12 6:24 PM, Andrey Khomyakov wrote: So some "comments" on the intertubes claim that DoD ok'd use of it's unadvertized space on private networks. Is there any official reference that may support this statement that anyone of you have seen out there? The arpanet prefix(10/8) was returned to

Re: Weekly Routing Table Report

2012-07-20 Thread Joel jaeggli
On 7/20/12 13:40 , Jared Mauch wrote: > > On Jul 20, 2012, at 4:30 PM, Ron Broersma wrote: > >> >> On Jul 20, 2012, at 1:04 PM, valdis.kletni...@vt.edu wrote: >>> On Sat, 21 Jul 2012 05:10:41 +1000, Routing Analysis Role Account said: BGP routing table entries examined:

Re: Any advantage of announcing IPv6/64s Or purely misconfiguration?

2012-07-09 Thread Joel jaeggli
On 7/9/12 00:09 , Aftab Siddiqui wrote: >> >> >> >> As per IPv6 prefixes announced by AS9583 via bgp.he.net - >> http://bgp.he.net/AS9583#_prefixes6 we can see multiple /64s. you likely won't see them in your table though. >> > The question is why their upstreams are accepting /64? It shouldn't b

Re: F-ckin Leap Seconds, how do they work?

2012-07-04 Thread joel jaeggli
On 7/4/12 8:48 PM, Owen DeLong wrote: Given that we don't seem to be able to eliminate the absurdity of DST, I doubt that either of those proposals is likely to fly. Owen Before we had timezones your clock offset was forward or backward 4 minutes every-time you crossed a meridian.

Re: F-ckin Leap Seconds, how do they work?

2012-07-03 Thread Joel jaeggli
On 7/3/12 07:51 , valdis.kletni...@vt.edu wrote: > On Tue, 03 Jul 2012 07:02:33 -0700, Joel jaeggli said: > >> Apps are buggy sounds like a really poor excuse for doing so. > > When the published API has been "the system clock is in UTC" for some 3 > decades, I

Re: F-ckin Leap Seconds, how do they work?

2012-07-03 Thread Joel jaeggli
On 7/3/12 01:54 , Wolfgang S. Rupprecht wrote: > > Steven Bellovin writes: >> See >> http://landslidecoding.blogspot.com/2012/07/linuxs-leap-second-deadlocks.html > > Maybe we should stop wrenching the poor system time back and forth. We > no longer add or subtract daylight savings time (or tim

Re: FYI Netflix is down

2012-06-30 Thread joel jaeggli
On 6/30/12 12:11 AM, Tyler Haske wrote: I am not a computer science guy but been around a long time. Data centers and clouds are like software. Once they reach a certain size, its impossible to keep the bugs out. You can test and test your heart out and something will slip by. You can say the

Re: ZOMG: IPv6 a plot to stymie FBI !!!11!ONE!

2012-06-17 Thread Joel jaeggli
On 6/17/12 16:29 , Owen DeLong wrote: > > On Jun 17, 2012, at 10:53 AM, Joel jaeggli wrote: > >> On 6/17/12 10:24 , valdis.kletni...@vt.edu wrote: >>> On Sun, 17 Jun 2012 13:10:59 -0400, Arturo Servin said: >>>>Wouldn't BCP38 help? >>> >

Re: ZOMG: IPv6 a plot to stymie FBI !!!11!ONE!

2012-06-17 Thread Joel jaeggli
On 6/17/12 13:22 , valdis.kletni...@vt.edu wrote: > On Sun, 17 Jun 2012 10:53:52 -0700, Joel jaeggli said: >> On 6/17/12 10:24 , valdis.kletni...@vt.edu wrote: > >>> So - who owns 2800:af:ba30:e8cf:4881:973a:c68? And how does an LEO >>> find that info quickly if

Re: ZOMG: IPv6 a plot to stymie FBI !!!11!ONE!

2012-06-17 Thread Joel jaeggli
On 6/17/12 10:24 , valdis.kletni...@vt.edu wrote: > On Sun, 17 Jun 2012 13:10:59 -0400, Arturo Servin said: >> Wouldn't BCP38 help? > > The mail I'm replying to has as the first Received: line: > > Received: from ?IPv6:2800:af:ba30:e8cf:d06f:4881:973a:c68? > ([2800:af:ba30:e8cf:d06f:4881:9

Re: OT: Credit card policies (was Re: Dear Linkedin,)

2012-06-10 Thread Joel jaeggli
On 6/10/12 12:23 , Stephen Sprunk wrote: > On 10-Jun-12 14:01, Robert Bonomi wrote: >>> From: Jay Ashworth > > All of the above is completely irrelevant to the merchant. Given that the thread now spans nine conversations threads and at least 122 messages and is buried in the finer details of mer

Re: Dear Linkedin,

2012-06-10 Thread Joel jaeggli
On 6/10/12 00:25 , John Souvestre wrote: > On 6/10/12, Joel jaeggli wrote: > >> How good does a password/phrase have to be in order to protect >> against brute-force or dictionary attacks against the password >> itself? ? Entropy in language. A typical english sen

Re: Dear Linkedin,

2012-06-10 Thread Joel jaeggli
On 6/8/12 16:05 , Alec Muffett wrote: >> Does anybody have a good URL explaining that idea? It's been >> kicking around for many years. I've never seen a convincing >> writeup. > > I've tried to do that in another mail - it's in the realms of > philosophy more than strategy; like if you're a rea

Re: Configuration Systems

2012-06-08 Thread Joel jaeggli
On 6/7/12 20:53 , Suresh Ramasubramanian wrote: > It is like that supreme court judge who defined porn as "i know it > when I see it" http://en.wikipedia.org/wiki/Jacobellis_v._Ohio a case which is notable in this context for having four differing majority opinions. > On Fri, Jun 8, 2012 at 5:00

Re: Penetration Test Assistance

2012-06-05 Thread Joel jaeggli
On 6/5/12 07:52 , Green, Timothy wrote: > Howdy all, > > I'm a Security Manager of a large network, we are conducting a > Pentest next month and the testers are demanding a complete network > diagram of the entire network. We don't have a "complete" network > diagram that shows everything and eve

Re: Industry practice for BGP costs - one time or fixed/monthly?

2012-05-26 Thread Joel jaeggli
On 5/25/12 15:12 , Seth Mattinen wrote: > On 5/25/12 3:08 PM, Adam wrote: >> >> You also have to implement additional filters to protect yourself from what >> your client can advertise. I'm lucky enough to work for a major ISP with >> pretty sophisticated filters built off the public route registr

Re: Current IPv6 state of US Mobile Phone Carriers

2012-05-25 Thread Joel jaeggli
On 5/25/12 07:35 , valdis.kletni...@vt.edu wrote: > On Fri, 25 May 2012 15:25:35 +0900, Masataka Ohta said: > >> The proper way to have a static IP address is not to pay mobile >> operators but to run mobile IP or something like that on your >> terminal. >> >> You can run your home agent at your h

Re: Force10 E Series at the edge?

2012-05-07 Thread Joel jaeggli
On 5/7/12 21:17 , Jo Rhett wrote: > > On Mar 28, 2012, at 11:48 AM, Joel jaeggli wrote: >> On 3/27/12 23:21 , Roberts, Brent wrote: >>> Is anyone running an E300 Series Chassis at the internet edge with >>> multiple Full BGP feeds? 95th percent would be abo

Re: Cellphones and Audio (was Ghost Click, though I got no idea why)

2012-05-03 Thread Joel jaeggli
On 5/3/12 10:29 , Jay Ashworth wrote: > - Original Message - >> From: "Adam Atkinson" > >> Well, just the above seems like enough that you'd think there'd be more >> (justified) grumbling that thanks to a choice made many many decades ago >> it's harder to distinguish young or female spea

Re: Network diagram app that shows realtime link utilizatin

2012-05-01 Thread Joel jaeggli
we use cacti weathermap plugin, though obviously realtime has a dependency on your sample interval. I'm presuming your definition thereof isn't instantaneous monitoring of queue depth. On 5/1/12 10:49 , Hank Disuko wrote: > > Thanks, I'll see if I can pull the correct OID and try it with the Dud

Re: Automatic IPv6 due to broadcast

2012-04-22 Thread Joel jaeggli
On 4/17/12 01:37 , Carlos Martinez-Cagnazzo wrote: > I don't understand why a problem with a tunnel 'leaves a bad taste with > IPv6'. Since when a badly configured DNS zone left people with a 'bad > taste for DNS', or a badly configured switch left people with 'a bad > taste for spanning tree' or '

Re: Network Storage

2012-04-12 Thread Joel jaeggli
Depends on the duration and goals of your capture... 1TB is 2.276 hours at 1Gb/s If you need to capture it all and store it forever well sorry. If you just need the flows and not the packets sampled netflow can reduce youre requirements by many orders of magnitude, ultimately it really depends

Re: airFiber (text of the 8 minute video)

2012-03-29 Thread Joel jaeggli
On 3/29/12 21:53 , Jonathan Lassoff wrote: > On Thu, Mar 29, 2012 at 12:33 PM, Oliver Garraux wrote: >> I was at Ubiquiti's conference. I don't disagree with what you're >> saying. Ubiquiti's take on it seemed to be that 24 Ghz would likely >> never be used to the extent that 2.4 / 5.8 is. They

Re: FW: Force10 E Series at the edge?

2012-03-28 Thread Joel jaeggli
On 3/27/12 23:21 , Roberts, Brent wrote: > Is anyone running an E300 Series Chassis at the internet edge with multiple > Full BGP feeds? 95th percent would be about 300 meg of traffic. BGP session > count would be between 2 and 4 Peers. > 6k internal Prefix count as it stands right now. Alternati

Re: $1.5 billion: The cost of cutting London-Tokyo latency by 60ms

2012-03-23 Thread Joel jaeggli
On 3/24/12 01:32 , George Bonser wrote: >> If they could armor the cable sufficiently perhaps they could drill the >> straigh line path through the Earth's crust (mantle and outer core) and >> do London-Tokyo in less than 10,000km. Current record depth of a borehole is under 12,500 meters which is

Re: $1.5 billion: The cost of cutting London-Tokyo latency by 60ms

2012-03-23 Thread Joel jaeggli
On 3/23/12 19:45 , Jeroen van Aart wrote: > valdis.kletni...@vt.edu wrote: >>> The massive drop in latency is expected to supercharge algorithmic stock >>> market trading, where a difference of a few milliseconds can gain (or >>> lose) >>> millions of dollars. >> >> But it should be illegal to run

Re: $1.5 billion: The cost of cutting London-Tokyo latency by 60ms

2012-03-23 Thread Joel jaeggli
On 3/23/12 14:47 , valdis.kletni...@vt.edu wrote: > On Fri, 23 Mar 2012 12:53:45 +0100, Eugen Leitl said: >> http://www.extremetech.com/extreme/122989-1-5-billion-the-cost-of-cutting-london-toyko-latency-by-60ms > > Lower latency is good... > >> The massive drop in latency is expected to supercha

Re: Shim6, was: Re: filtering /48 is going to be necessary

2012-03-18 Thread Joel jaeggli
On 3/12/12 08:56 , Iljitsch van Beijnum wrote: > On 12 Mar 2012, at 16:21 , Leigh Porter wrote: > >>> Grass-roots, bottom-up policy process + Need for multihoming + >>> Got tired of waiting = IPv6 PI > >> A perfect summation. > > Except that it didn't happen in that order. When ARIN approved PI

Re: shared address space... a reality!

2012-03-14 Thread Joel jaeggli
On 3/14/12 00:06 , Frank Habicht wrote: > Hi, > > On 3/14/2012 9:42 AM, Joel jaeggli wrote: >> On 3/13/12 23:29 , Joel jaeggli wrote: >>> On 3/13/12 23:22 , Christopher Morrow wrote: >>>> NetRange: 100.64.0.0 - 100.127.255.255 >>>> CIDR:

Re: shared address space... a reality!

2012-03-13 Thread Joel jaeggli
On 3/13/12 23:29 , Joel jaeggli wrote: > On 3/13/12 23:22 , Christopher Morrow wrote: >> NetRange: 100.64.0.0 - 100.127.255.255 >> CIDR: 100.64.0.0/10 >> OriginAS: >> NetName:SHARED-ADDRESS-SPACE-RFCTBD-IANA-RESERVED > > Already update

Re: shared address space... a reality!

2012-03-13 Thread Joel jaeggli
On 3/13/12 23:22 , Christopher Morrow wrote: > NetRange: 100.64.0.0 - 100.127.255.255 > CIDR: 100.64.0.0/10 > OriginAS: > NetName:SHARED-ADDRESS-SPACE-RFCTBD-IANA-RESERVED Already updated my martians acl and deployed it internally...

Re: filtering /48 is going to be necessary

2012-03-11 Thread Joel jaeggli
On 3/11/12 08:48 , Iljitsch van Beijnum wrote: > On 9 Mar 2012, at 10:02 , Jeff Wheeler wrote: > >> The way we are headed right now, it is likely that the IPv6 >> address space being issued today will look like "the swamp" in a >> few short years, and we will regret repeating this obvious >> mista

Re: filtering /48 is going to be necessary

2012-03-10 Thread Joel jaeggli
On 3/10/12 14:47 , Sven Olaf Kamphuis wrote: > let's say, there is 6 billion people in the world.. if they all have 1 > route table entry (average ;) i see no technical limitations on anything > produced AFTER 2008 actually. Over in ipv4 land there are ~40k entities that appear in the dfz internet

Re: Concern about gTLD servers in India

2012-03-10 Thread Joel jaeggli
On 3/10/12 08:05 , Suresh Ramasubramanian wrote: > Sure, if you can find a datacenter that's capable of handling all the > traffic, and has staff who are able to provide efficient remote hands for > huge racks of extremely powerful servers .. and are possibly also open to > cross subsidizing the co

Re: filtering /48 is going to be necessary

2012-03-09 Thread Joel jaeggli
On 3/9/12 22:02 , George Bonser wrote: > An ISP that has been given a /32 or larger allocation from PA space > and might have 10,000 customers each assigned their own /48 could > instantly more than double the size of the IPv6 routing table if they > disaggregated that /32. > > The problem here i

Re: filtering /48 is going to be necessary

2012-03-09 Thread Joel jaeggli
On 3/9/12 20:42 , Owen DeLong wrote: > > On Mar 9, 2012, at 3:45 PM, Leo Vegoda wrote: > >> Hi, >> >> Sander wrote: >> >>> Splitting the allocation can be done for many reasons. There are >>> known cases where one LIR operates multiple separate networks, >>> each with a separate routing polic

Re: WW: Colo Vending Machine

2012-02-22 Thread Joel jaeggli
On 2/22/12 07:50 , Owen DeLong wrote: > > On Feb 22, 2012, at 2:02 AM, Tim Franklin wrote: > >>> PC LOAD LETTER?!?!?!?!? >> >> PC LOAD LETTER is not the issue. >> >> One country that insists on using different paper sizes to everyone else, >> but also happens to set a lot of hardware and softwar

Re: DNS Attacks

2012-02-20 Thread Joel jaeggli
On 2/20/12 09:57 , Christopher Morrow wrote: > On Mon, Feb 20, 2012 at 10:38 AM, Tei wrote: >> I am a mere user, so I all this stuff sounds to me like giberish. >> >> The right solution is to capture the request to these DNS servers, and >> send to a custom server with a static message "warning.h

Re: WW: Colo Vending Machine

2012-02-20 Thread Joel jaeggli
On 2/20/12 09:55 , Leo Bicknell wrote: > In a message written on Mon, Feb 20, 2012 at 09:51:59AM -0800, Joel jaeggli > wrote: >> Things with legacy ports on them are on the way out. given an ipmi >> manager that doesn't suck there should be no reason to connect to th

Re: WW: Colo Vending Machine

2012-02-20 Thread Joel jaeggli
On 2/20/12 08:54 , Matthew Petach wrote: > On Mon, Feb 20, 2012 at 7:34 AM, Jon Lewis wrote: >> Speaking of that sort of thing, I'd really LOVE if there were a device about >> the size of a netbook that could be hooked up to otherwise headless machines >> in colos that would give you keyboard, vid

Re: Hi speed trading - hi speed monitoring

2012-02-17 Thread Joel jaeggli
On 2/17/12 11:47 , Kiriki Delany wrote: > Why not just simultaneously settle all trades at the same time? Once every > minute, or every 5 minutes, or per day? > > There are many solutions to the problem. I'm sure those that can take > advantage of the latency don't want the solution. Ask yourse

Re: common time-management mistake: rack & stack

2012-02-17 Thread Joel jaeggli
On 2/17/12 06:18 , Sven Olaf Kamphuis wrote: > actually most west european countries have laws against having your > employees lift up stuff heavier than 20 kilos :P > > you generally don't have insurance on your network-dude to handle such > things *grin* if it drops on his foot, you're screwed.

Re: Hi speed trading - hi speed monitoring

2012-02-16 Thread Joel jaeggli
On 2/16/12 05:03 , Hank Nussbacher wrote: > Nanosecond Trading Could Make Markets Go Haywire > http://www.wired.com/wiredscience/2012/02/high-speed-trading/ > > "Below the 950-millisecond level, where computerized trading occurs so > quickly that human traders can't even react, no fewer than 18,52

<    1   2   3   4   5   6   7   8   9   10   >