Re: The Making of a Router

2013-12-26 Thread Thomas York
rs by default, which can be a major pain in the ass (I'm looking at you, SIP and SNMP modules). I had to do a lot of tweaking to the conn track tables to make them large enough to handle lots of traffic, but obviously YMMV. Have you tried labbing BSD vs Linux to see which you like better? I&

86th Street TWTC outage

2013-06-25 Thread Thomas York
Just in case anyone has equipment in the 86th Street TWTC Colo, both of their AC units are dead and the fire department is here. I'll try to update as soon as I know something.

MikroTik + EAP-TLS + Non-Channel 1 / Apple iOS issues

2013-04-03 Thread Thomas York
ntirely. I have an older iPod touch that is on iOS4 that can authenticate on channel 1. Have any of you guys seen issues like this? Thanks. -- Thomas York smime.p7s Description: S/MIME cryptographic signature

MessageLabs/MXLogic issues

2013-01-29 Thread Thomas York
a certain domain, just to Symantec/MessageLabs IPs. I've also seen this issue once or twice with domains hosted with Gmail, but those have cleared themselves up. -- Thomas York smime.p7s Description: S/MIME cryptographic signature

China Telecom VPN problems (again)

2012-12-05 Thread Thomas York
ss district in Suzhou, but it'd be nice if we could also use the same carrier in Shenzhen. Thanks! -- Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: IPv6 Toolkit v1.2: Latest snapshot, and git repo

2012-07-16 Thread Thomas York
Also compiles and works fine for me on 10.7. -- Thomas York -Original Message- From: Randy Carpenter [mailto:rcar...@network1.net] Sent: Monday, July 16, 2012 11:21 AM To: Fernando Gont Cc: NANOG Subject: Re: IPv6 Toolkit v1.2: Latest snapshot, and git repo Appears to compile file on

RE: job screening question

2012-07-05 Thread Thomas York
My answer to that questionwould be "No..why would I ever blanket block ICMP? If I'm that stupid, I shouldn't be deploying firewalls at all." I also assume I wouldn't get the job after answering that... Thomas York -Original Message- From: William Herrin [mai

Re: Commerical Backup Solutions

2012-05-17 Thread Thomas York
but still not bad. Also, the site wide license is a steal! Get a demo, it might fit the bill. --Thomas York On May 17, 2012 6:59 PM, "Mike Lyon" wrote: > We used Acronis and it was a nightmare as was their off-shored support > model. Never again... Wouldn't touch them with

RE: OWA blocked by China

2012-03-27 Thread Thomas York
unnel. For some reason, they don't seem to be doing DPI on it and mostly leave it alone now. I'm sure it'll change at some point soon, though. -- Thomas York -Original Message- From: TR Shaw [mailto:ts...@oitc.com] Sent: Tuesday, March 27, 2012 10:45 AM To: Jim Gonzalez Cc

RE: Any recommended router. They are reliable and have good support.

2011-11-22 Thread Thomas York
nce hasn't been enough to make me switch to another brand yet, but I know every time I have to deploy a new device I'm likely to wrestle this issue. --Thomas York -Original Message- From: Eduardo Schoedler [mailto:lis...@esds.com.br] Sent: Tuesday, November 22, 2011 1:00 PM To:

RE: Time Warner Telecom problems

2011-11-07 Thread Thomas York
FWIW, We saw issues here in Indianapolis between TWTC and L3 up until a few minutes ago. --Thomas York -Original Message- From: Blake Hudson [mailto:bl...@ispn.net] Sent: Monday, November 07, 2011 11:02 AM To: nanog@nanog.org Subject: Re: Time Warner Telecom problems Joe Greco wrote

Re: DNS DoS ???

2011-07-29 Thread Thomas York
I see this all the time on my personal servers. I finally just told bind to stop logging it. On 07/29/2011 02:51 PM, Elliot Finley wrote: my DNS servers were getting slow so I blocked recursive queries for all but my own network. Then I was getting so many of these: ns2 named[5056]: client 78

Re: IMPORTANT ADMINISTRIVIA - NANOG list and website changes over the next week

2011-07-08 Thread Thomas York
this stage, mail.amsl.com will be the only MX for NANOG list services. No more IPv6? I don't see an record for it... ~Seth There goes 90% of my IPv6 traffic! --Thomas York smime.p7s Description: S/MIME Cryptographic Signature

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
Yes. Every day at roughly 2AM EDT the latency climbs to 700ms+ with about 25% packet loss and fluctuates until about 6-7AM. -- Thomas York Joel Jaeggli wrote: >On 5/10/11 10:10 AM, Adam Rothschild wrote: >> Realize also that China Telecom is congested both internally and on >>

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
I tried to tell my bosses that and I got a blank stare. -- Thomas York Adam Rothschild wrote: >Realize also that China Telecom is congested both internally and on >certain peering interfaces. > >While DPI is a likely culprit, be sure to not overlook a good >old-fashioned inab

VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
ort option. Are there any other options maybe some of you have to fixing this issue? Thanks Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: Bright House residential IPv6

2011-05-02 Thread Thomas York
As per an off list topic, I'm in downtown Indianapolis. If anyone has a residential contact for this region, I'd much appreciate it. Thanks! Thomas York -Original Message----- From: Thomas York [mailto:strate...@fuhell.com] Sent: Monday, May 02, 2011 10:13 AM To: nanog@nanog.o

Bright House residential IPv6

2011-05-02 Thread Thomas York
did you do to get it activated for your line? Thomas York smime.p7s Description: S/MIME cryptographic signature

Off list contact for Quadranet

2011-02-20 Thread Thomas York
If the network contact at Quadranet could contact me off list, I'd appreciate it. This is concerning the continual spamming of a proxy server I run from multiple hosts at Quadranet. Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: ipfix/netflow/sflow generator for Linux

2010-12-07 Thread Thomas York
t ticket with ipcad to fix the interface numbering issue. http://tinyurl.com/32pjyfa From: packetmon...@gmail.com [mailto:packetmon...@gmail.com] On Behalf Of Darren Bolding Sent: Monday, December 06, 2010 8:57 PM To: Thomas York Subject: Re: ipfix/netflow/sflow generator for Linux We&#x

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
ginal Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Monday, December 06, 2010 4:20 PM To: North American Network Operators Group Subject: Re: ipfix/netflow/sflow generator for Linux On Dec 7, 2010, at 3:44 AM, Thomas York wrote: > fprobe doesn't work properly becau

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
> read and process Cisco Netflow data, and many sites develop audits > using a mixture of Argus and Netflow records. Ken On 12/6/2010 2:44 PM, Thomas York wrote: > fprobe doesn't work properly because it has the input and output > interface IDs as both 0. In Scrutinize

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
seems to be the issue with most of the flow software I've tried. -Original Message- From: Samuel Petreski [mailto:sp...@georgetown.edu] Sent: Monday, December 06, 2010 3:38 PM To: 'Thomas York'; nanog@nanog.org Subject: RE: ipfix/netflow/sflow generator for Linux I'

ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
At my current place of work, we use all Linux routers. I need to do some IP accounting/reporting and am currently trying to use Scrutinizer. Scrutinizer can use netstream, jstream, ipfix, netflow, and sflow data without qualms. My only issue is that I can't seem to find any good software for Linux