Re: quietly....

2011-01-31 Thread George Herbert
The last 5 are, by existing agreement, to be allocated 1 per Regional registry immediately after the other /8s are exhausted. This was agreed to some time ago to ensure that no regional was disadvantaged by timing concerns on applications for space as the IANA exhaustion approached. As that has

Re: quietly....

2011-02-01 Thread George Herbert
On Tue, Feb 1, 2011 at 7:46 PM, valdis.kletni...@vt.edu wrote: On Wed, 02 Feb 2011 03:09:50 GMT, John Curran said: We had a small ramp up in December (about 25% increase) but that is within reasonable variation. Today was a little different, though, with 4 times the normal request rate...

Re: quietly....

2011-02-02 Thread George Herbert
On Wed, Feb 2, 2011 at 8:55 AM, Iljitsch van Beijnum iljit...@muada.com wrote: On 2 feb 2011, at 17:14, Dave Israel wrote: I understand people use DHCP for lots of stuff today. But that's mainly because DHCP is there, not because it's the best possible way to get that particular job done.

Re: quietly....

2011-02-02 Thread George Herbert
On Wed, Feb 2, 2011 at 1:13 PM, Leo Bicknell bickn...@ufp.org wrote: In a message written on Wed, Feb 02, 2011 at 09:55:30PM +0100, Iljitsch van Beijnum wrote: Can you explain what exactly the problems with DHCPv6 are that you're running into that are inherent to DHCP and/or IPv6 host

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-02 Thread George Herbert
On Wed, Feb 2, 2011 at 5:07 PM, Carlos Martinez-Cagnazzo carlosm3...@gmail.com wrote: Disconnected networks have a bothersome tendency to get connected at some point ( I have been severely bitten by this in the past ), so while I agree that there is no need to coordinate anything globally,

Re: And so it ends...

2011-02-03 Thread George Herbert
On Thu, Feb 3, 2011 at 1:27 PM, Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: Pragmatically, compelling the release of a legacy allocation to a major company could be difficult, however, if the ARIN community were to draft a resolution to reclaim the space it may have a profound effect on

Re: And so it ends...

2011-02-03 Thread George Herbert
On Thu, Feb 3, 2011 at 1:52 PM, valdis.kletni...@vt.edu wrote: On Thu, 03 Feb 2011 13:39:25 PST, George Herbert said: It's probably most practical for them to renumber into a subset of their existing space, collapsing down from the whole /8 into a /10 or something longer, which would free up

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-03 Thread George Herbert
On Thu, Feb 3, 2011 at 3:17 PM, Fernando Gont ferna...@gont.com.ar wrote: On 03/02/2011 10:07 a.m., Rob Evans wrote: You must be kiddin'... You're considering going through this mess again in a few decades? I'm mildly surprised if you think we're going to be done with *this* mess in a few

Re: US Warships jamming Lebanon Internet

2011-02-07 Thread George Herbert
On Mon, Feb 7, 2011 at 2:23 PM, Ryan Wilkins r...@deadfrog.net wrote: On Feb 7, 2011, at 4:06 PM, Michael Painter wrote: Hi Denys I doubt it's intentional jamming since I've had the same problem. Aegis radar is very high power in full radiate mode and as such creates problems for Low Noise

Re: Post-Exhaustion-phase punishment for early adopters

2011-02-08 Thread George Herbert
On Tue, Feb 8, 2011 at 2:04 PM, Mark Andrews ma...@isc.org wrote: I wish people would actually read RFC 1918.      Category 1: hosts that do not require access to hosts in other                  enterprises or the Internet at large; hosts within                  this category may use IP

Re: Post-Exhaustion-phase punishment for early adopters

2011-02-08 Thread George Herbert
On Tue, Feb 8, 2011 at 3:08 PM, valdis.kletni...@vt.edu wrote: On Tue, 08 Feb 2011 14:59:12 PST, George Herbert said: It's easy to say Well, foo on them, but for those of us who provide services or consulting to those who failed to follow the directions, we still have to deal with it. Just

Re: Post-Exhaustion-phase punishment for early adopters

2011-02-08 Thread George Herbert
On Tue, Feb 8, 2011 at 6:54 PM, David Barak thegame...@yahoo.com wrote: From: R. Benjamin Kessler ben.kess...@zenetra.com From: George Herbert [mailto:george.herb...@gmail.com] Let's just grab 2/8, it's not routed on the Internet... +1 I was consulting for a financial services firm

Re: Looking for an IPv6 naysayer...

2011-02-09 Thread George Herbert
On Wed, Feb 9, 2011 at 12:05 PM, Iljitsch van Beijnum iljit...@muada.com wrote: [...] Once we're at 128-bit addresses then we can migrate to IPvA (7 - 9 are already taken) without much trouble. But then, 32-bit ASes interoperate with 16-bit ones with no trouble and still after a decade the

Re: Is it permissible to advertise number resources allocated by one RIR to a ISP in a region governed by a different RIR? Practical?

2011-02-09 Thread George Herbert
On Wed, Feb 9, 2011 at 1:17 PM, Jon Lewis jle...@lewis.org wrote: On Wed, 9 Feb 2011, Crooks, Sam wrote: Is it permissible, from a policy perspective, for a multi-homed end user to announce the numbering resource allocation received from one RIR (for discussion purposes, let's say ARIN) to

Re: Looking for an IPv6 naysayer...

2011-02-10 Thread George Herbert
On Wed, Feb 9, 2011 at 6:11 PM, Fred Richards fr...@geexology.org wrote: On Wed, Feb 9, 2011 at 6:47 PM, George Bonser gbon...@seven.com wrote: I have yet to see a broadband provider that configures a network so that individual nodes in the home network get global IPs. One huge reason to

Re: AS7007 incident - would someone please fix the article?

2011-02-14 Thread George Herbert
On Mon, Feb 14, 2011 at 3:08 PM, Adrian Chadd adr...@creative.net.au wrote: There's a wikipedia article: http://en.wikipedia.org/wiki/AS_7007_incident .. that a post I wrote up for a local computer club magazine somehow suffices as primary reference material for. Even though I think this

Re: Sunday Funnies: Using a smart phone as a diagnostic tool

2011-02-27 Thread George Herbert
Related topic - ACM's CHIMIT (Computer Human Interfaces for the Management of Information Technology) workshop 2010 was co-located with the Usenix LISA conference this year (http://www.chimit10.org/home.html); I was on a panel discussion on mobile devices in system administration. This topic and

Re: [afnog] Suspicious request for IP address space

2011-03-08 Thread George Herbert
On Tue, Mar 8, 2011 at 1:32 PM, Randy Bush ra...@psg.com wrote: Even more suspicious is the fact that there is no organisational information attached to the request and the sender used a gmail address. They supplied an Indian telephone number. it is about this point where i realize that i am

Re: estimation of number of DFZ IPv4 routes at peak in the future

2011-03-08 Thread George Herbert
On Tue, Mar 8, 2011 at 8:40 PM, Owen DeLong o...@delong.com wrote: You have ignored the probability of disaggregation due to IP trading markets, especially given the wild-west nature of the APNIC transfer policy. Many of the legacy blocks will get dramatically disaggregated in the likely

Re: estimation of number of DFZ IPv4 routes at peak in the future

2011-03-09 Thread George Herbert
On Wed, Mar 9, 2011 at 9:28 AM, Owen DeLong o...@delong.com wrote: On Mar 9, 2011, at 4:06 AM, Arturo Servin wrote: On 9 Mar 2011, at 07:18, Joel Jaeggli wrote: one of these curves is steeper than the other.       That's what we wanted for the first one.

Re: so big earthquake in JP

2011-03-11 Thread George Herbert
We're seeing damage in harbors on the west coast - live imagery of Santa Cruz harbor with multiple piers broken up, boats loose, boats sunk, from local geography focusing waves that were only 2-3 foot surges (personal Ouch - I used to own a boat in that harbor). Phone reporting from Crescent City

Re: Internet Edge Router replacement - IPv6 route tablesizeconsiderations

2011-03-12 Thread George Herbert
On Fri, Mar 11, 2011 at 8:14 PM, Jeff Wheeler j...@inconcepts.biz wrote: It's the same thing that happens if you toss a /8 on an IPv4 LAN and start banging away at the ARP table, while expecting all of your legitimate hosts within that /8 to continue working correctly.  We all know that's

Re: OT: Question/Netflix issues?

2011-03-22 Thread George Herbert
On Tue, Mar 22, 2011 at 6:20 PM, Ryan Malayter malay...@gmail.com wrote: On Mar 22, 7:47 pm, Jeff Kell jeff-k...@utc.edu wrote: Now getting We re sorry, the Netflix website and the ability to instantly watch movies are both temporarily unavailable. out of Charter. Campus getting same routed

Re: The state-level attack on the SSL CA security model

2011-03-24 Thread George Herbert
On Thu, Mar 24, 2011 at 2:39 PM, Franck Martin fra...@genius.com wrote: - Original Message - From: Roland Dobbins rdobb...@arbor.net To: nanog group nanog@nanog.org Sent: Friday, 25 March, 2011 9:33:27 AM Subject: Re: The state-level attack on the SSL CA security model On Mar 24,

Re: IPv4 address length technical design

2012-10-06 Thread George Herbert
As I said earlier, names' structure does not map to network or physical location structure. DNS is who; IP is where. Both are reasonably efficient now as separate entities. Combining them will wreck one. You're choosing to wreck routing (where), which to backbone people sounds frankly stark

Re: IPv4 address length technical design

2012-10-07 Thread George Herbert
On Oct 6, 2012, at 11:35 AM, Barry Shein b...@world.std.com wrote: We can map from host names to ip addresses to routing actions, right? So clearly they're not unrelated or independent variables. There's a smooth function from hostname-ipaddr-routing. No. Not just no, but hell no at

Re: Typical additional latency for CGN?

2012-10-07 Thread George Herbert
Ancedotally, for users of an e-gadget company's website, cellphone company's outbound web proxies, internet games company, and image-intensive home furnishings website, the CGNs delivered content faster than the main website could, regardless of increasing its bandwidth. Latency problems with the

Re: Typical additional latency for CGN?

2012-10-07 Thread George Herbert
Sorry, at a conference and not paying enough attention to email. My bad. -george On Sun, Oct 7, 2012 at 2:30 PM, Cutler James R james.cut...@consultant.com wrote: On Oct 7, 2012, at 4:56 PM, George Herbert george.herb...@gmail.com wrote: Ancedotally, for users of an e-gadget company's website

Re: Multiple Sprint Outages?

2012-10-08 Thread George Herbert
management is at puck.nether.net (Jared Mauch) but managed by Vivendra Rode. -george william herbert george.herb...@gmail.com On Mon, Oct 8, 2012 at 12:19 PM, George Herbert george.herb...@gmail.com wrote: Yes, multiple reports on the outages list, which you should also join. Short summary: WI

Re: Detection of Rogue Access Points

2012-10-15 Thread George Herbert
On Mon, Oct 15, 2012 at 4:06 PM, Sean Harlow s...@seanharlow.info wrote: On Mon, Oct 15, 2012 at 12:00 PM, Joe Hamelin j...@nethead.com wrote: Maybe because he has 130 sites and 130 truck rolls is not cheap. Also company policy says no. You are correct that deploying to a number of sites

Re: Coded TCP

2012-10-23 Thread George Herbert
Modeled with just simple FTP sessions? Ugh: they admitted to having MIT backbone packet traces to analyze, and then used that simple of a simulator... George William Herbert Sent from my iPhone On Oct 23, 2012, at 8:29 PM, Rodrick Brown rodrick.br...@gmail.com wrote: With coded TCP, blocks

Re: Coded TCP

2012-10-23 Thread George Herbert
iPhone On Oct 23, 2012, at 8:57 PM, Michael Painter tvhaw...@shaka.com wrote: George Herbert wrote: Modeled with just simple FTP sessions? Ugh: they admitted to having MIT backbone packet traces to analyze, and then used that simple of a simulator... The practical benefits of the technology

Re: the little ssh that (sometimes) couldn't

2012-10-29 Thread George Herbert
On Mon, Oct 29, 2012 at 10:07 AM, bmann...@vacation.karoshi.com wrote: corruption! http://mina.naguib.ca/blog/2012/10/22/the-little-ssh-that-sometimes-couldnt.html /bill This is an excellent full-stack debugging war story. Thanks for posting it, Bill. -- -george william herbert

Re: dhcpy6d - a MAC address aware DHCPv6 server

2012-11-06 Thread George Herbert
Oh, horrors, part of my infrastructure needs raw socket data? We should ban that, for security. Who needs those pesky switches anyways? George William Herbert Sent from my iPhone On Nov 6, 2012, at 5:49 AM, Stephane Bortzmeyer bortzme...@nic.fr wrote: On Tue, Nov 06, 2012 at 05:38:32AM

Re: Eaton 9130 UPS feedback

2012-11-13 Thread George Herbert
On Tue, Nov 13, 2012 at 1:52 PM, Robert Bonomi bon...@mail.r-bonomi.com wrote: From: Blake Dunlap iki...@gmail.com Date: Tue, 13 Nov 2012 15:20:35 -0600 _ On Tue, Nov 13, 2012 at 2:27 PM, Mike A mi...@mikea.ath.cx wrote: On Tue, Nov 13, 2012 at 11:59:18AM -0800, Seth Mattinen wrote: Does

Re: NTP Issues Today

2012-11-19 Thread George Herbert
crossreplying to outages list. Is anyone ELSE seeing GPS issues? This could well have been an unrelated issue on that particular PBX. If this was real, then the mother of all infrastructure attacks might be underway... One glitch on tick and tock and one malfunctioning PBX is not sufficient

Re: NTP Issues Today

2012-11-20 Thread George Herbert
On Nov 20, 2012, at 11:39 AM, Jared Mauch ja...@puck.nether.net wrote: . I've also been looking at an item like this: http://www.netburnerstore.com/ProductDetails.asp?ProductCode=PK70EX-NTP which is about $300 + misc parts. Should be well worth it to avoid a 'major outage' that

Re: Picking outside NTP servers (Re: NTP Issues Today)

2012-11-20 Thread George Herbert
On Tue, Nov 20, 2012 at 1:53 PM, Jay Ashworth j...@baylink.com wrote: For myself, I usually pick the first three in us.pool.ntp.org, tick and tock, time.nist.gov, and a couple of regionally appropriate large universities. As this week indicated, perhaps tick and tock are not sufficiently

Re: NTP Issues Today

2012-11-20 Thread George Herbert
As a reminder - time infrastructure is not recommended for virtualization. Make them physicals. On Tue, Nov 20, 2012 at 5:03 PM, Blake Dunlap iki...@gmail.com wrote: That's what happens when you just follow vendor recommendations blindly. If you do follow that on vm's (which can actually be a

Re: Adding GPS location to IPv6 header

2012-11-26 Thread George Herbert
The utility of this is somewhat moderated by limited geographical mobility while a phone's active in a single session. One rarely drives from San Francisco to LA typing all the way on their smartphone data connection, for example. To the extent that you may apply IP ranges to wider geographical

Re: Adding GPS location to IPv6 header

2012-11-26 Thread George Herbert
On Mon, Nov 26, 2012 at 4:53 PM, Owen DeLong o...@delong.com wrote: On Nov 26, 2012, at 14:51 , George Herbert george.herb...@gmail.com wrote: The utility of this is somewhat moderated by limited geographical mobility while a phone's active in a single session. One rarely drives from San

Syria off the net

2012-11-29 Thread George Herbert
The press is reporting on Renesys' report that Syria has finally dropped all its internet connectivity earlier this morning: http://www.renesys.com/blog/2012/11/syria-off-the-air.shtml

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 11:18 AM, Tom Beecher tbeec...@localnet.com wrote: Assuming it's true, it was bound to happen. Running anything , TOR or otherwise, that allows strangers to do whatever they want is just folly. Such as, say, an Internet Service Provider business? ... -- -george

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
in the US the ISP doesn't get dinged, except in certain cases where they are legally required to remove access to material and don't. End users have no such protections that I'm aware of that cover them similarly. On 11/29/2012 2:50 PM, George Herbert wrote: On Thu, Nov 29, 2012 at 11:18 AM

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 12:00 PM, Naslund, Steve snasl...@medline.com wrote: ISPs also do not allow strangers to do whatever they want ISPs have responsibilities to act on DCMA notices and CALEA requests from law enforcement. These are things that Tor exit nodes are not capable of doing. If

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
On Thu, Nov 29, 2012 at 12:42 PM, Naslund, Steve snasl...@medline.com wrote: The entire point of Tor is to be untraceable back to the source. Egress filters can prevent future abuse but do not provide for tracing back to the original source of offending conduct. They are not trying to stop

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread George Herbert
-Original Message- From: George Herbert [mailto:george.herb...@gmail.com] Sent: Thursday, November 29, 2012 2:06 PM To: Tom Beecher Cc: NANOG Subject: Re: William was raided for running a Tor exit node. Please help if you can. On Thu, Nov 29, 2012 at 11:58 AM, Tom Beecher tbeec

Re: William was raided for running a Tor exit node. Please help if

2012-11-30 Thread George Herbert
Those who do not remember history... On Fri, Nov 30, 2012 at 5:23 PM, goe...@anime.net wrote: On Fri, 30 Nov 2012, Naslund, Steve wrote: My message to the cops and my lawyer would be charge me or lets clear this up. There are laws to protect you from the government from taking your stuff

Re: Legal Crap [was: William was raided for running a Tor exit node. Please help if you can.]

2012-12-01 Thread George Herbert
On Dec 1, 2012, at 10:37 AM, Jeffrey Ollie j...@ocjtech.us wrote: On Sat, Dec 1, 2012 at 4:21 AM, Patrick W. Gilmore patr...@ianai.net wrote: It amazes me how people feel free to opine on things... Actually, what really bugs/amazes me about that thread is that the person whom this

Re: earthquake in Japan right now

2012-12-07 Thread George Herbert
250 or so km east of Sendai, near the big offshore quake zone from last year. CNN and the USGS have the basic info but no tsunami warning or damage info yet as fas as I saw. George William Herbert Sent from my iPhone On Dec 7, 2012, at 12:36 AM, JP Viljoen froztb...@froztbyte.net wrote: On

Re: why haven't ethernet connectors changed?

2012-12-20 Thread George Herbert
Having (once) tapped thicknet, done a lot of thinnet termination and cable cut debugging, and then used hubs and switches in 10BT and onwards... Having had one main standard (RJ45) has been a huge benefit to advancing the state of networking to where we are today. But it is probably worth

Re: IP Address Management IPAM software for small ISP

2012-12-20 Thread George Herbert
On Thu, Dec 20, 2012 at 7:48 PM, Jimmy Hess mysi...@gmail.com wrote: ... But is there a decently scalable open source application for building a CMDB, that is visually appealing and efficient for humans to use, without a ton of manual development; other than custom building applications

Re: IP Address Management IPAM software for small ISP

2012-12-21 Thread George Herbert
On Dec 20, 2012, at 10:01 PM, Jimmy Hess mysi...@gmail.com wrote: On 12/20/12, Charles N Wyble charles-li...@knownelement.com wrote: Zenoss works very well as a cmdb. Zenoss is very visually appealing, but a monitoring system for network hosts, not a CMDB. In particular, except

Re: Fiber only in DataCenters?

2012-12-21 Thread George Herbert
On Thu, Dec 20, 2012 at 3:20 PM, Matthew Kaufman matt...@matthew.at wrote: On 12/17/2012 9:22 AM, joel jaeggli wrote: If the facility is big enough the utility of twisted pair becomes quite limited, both due to distance and differing electrical potential, multibuilding campuses in particular

Re: Fiber only in DataCenters?

2012-12-21 Thread George Herbert
On Fri, Dec 21, 2012 at 10:58 AM, Owen DeLong o...@delong.com wrote: On Dec 21, 2012, at 10:54 , George Herbert george.herb...@gmail.com wrote: On Thu, Dec 20, 2012 at 3:20 PM, Matthew Kaufman matt...@matthew.at wrote: On 12/17/2012 9:22 AM, joel jaeggli wrote: If the facility is big enough

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 11:36 AM, William Herrin b...@herrin.us wrote: Communications using a key signed by a trusted third party suffer such attacks only with extraordinary difficulty on the part of the attacker. It's purely a technical matter. While I agree with your general characterization

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 2:27 PM, William Herrin b...@herrin.us wrote: On Wed, Jan 2, 2013 at 3:10 PM, George Herbert george.herb...@gmail.com wrote: On Wed, Jan 2, 2013 at 11:36 AM, William Herrin b...@herrin.us wrote: Communications using a key signed by a trusted third party suffer

Re: Gmail and SSL

2013-01-02 Thread George Herbert
On Wed, Jan 2, 2013 at 7:31 PM, valdis.kletni...@vt.edu wrote: On Wed, 02 Jan 2013 12:10:55 -0800, George Herbert said: Google is setting a higher bar here, which may be sufficient to deter a lot of bots and script kiddies for the next few years, but it's not enough against nation-state

Re: De-funding the ITU

2013-01-14 Thread George Herbert
On Mon, Jan 14, 2013 at 7:27 AM, John Levine jo...@iecc.com wrote: There'd have to be some organization to negotiate and oversee international settlements and other, similar, regulations. Why? The internet has operated just fine without such for quite some time now. The Internet is held

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread George Herbert
On Wed, Jan 16, 2013 at 2:00 PM, Erik Levinson erik.levin...@uberflip.com wrote: Hi everyone, I'm having an unusual DNS problem and would appreciate feedback. For the zones in question, primary DNS is provided by GoDaddy and secondary DNS by DNS Made Easy. Over a week ago we made changes to

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-19 Thread George Herbert
On Jan 18, 2013, at 7:52 PM, Matt Palmer mpal...@hezmatt.org wrote: On Fri, Jan 18, 2013 at 09:41:41AM +0100, . wrote: On 17 January 2013 23:38, Matt Palmer mpal...@hezmatt.org wrote: .. By the way, if anyone *does* know of a good and reliable way to prevent CSRF without the need for

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-20 Thread George Herbert
On Jan 20, 2013, at 11:51 AM, Matt Palmer mpal...@hezmatt.org wrote: On Sat, Jan 19, 2013 at 03:54:37PM -0800, George Herbert wrote: On Jan 18, 2013, at 7:52 PM, Matt Palmer mpal...@hezmatt.org wrote: Storing any state server-side is a really bad idea for scalability and reliability

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-24 Thread George Herbert
On Thu, Jan 24, 2013 at 5:48 AM, Rich Kulawiec r...@gsp.org wrote: On Wed, Jan 23, 2013 at 01:20:07PM +0100, . wrote: CAPTCHAS are a defense in depth that reduce the number of spam incidents to a number manageable by humans. No, they do not. If you had actually bothered to read the links

Re: Ethernet Service at 150 S. Market Street, SJ

2013-01-29 Thread George Herbert
On Tue, Jan 29, 2013 at 12:19 PM, Mike Lyon mike.l...@gmail.com wrote: Last I heard, roof rights are pricey down there :) On Tue, Jan 29, 2013 at 12:18 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: Satellite! ;) ...And somewhat silly, given that it's *that* facility.

Re: Muni network ownership and the Fourth

2013-01-29 Thread George Herbert
On Tue, Jan 29, 2013 at 8:10 PM, Leo Bicknell bickn...@ufp.org wrote: In a message written on Tue, Jan 29, 2013 at 07:46:06PM -0800, Owen DeLong wrote: Case 2, you move the CO Full problem from the CO to the adjacent cable vaults. Even with fiber, a 10,000 strand bundle is not small. It's

Re: Muni fiber: L1 or L2?

2013-02-01 Thread George Herbert
On Fri, Feb 1, 2013 at 7:54 PM, Owen DeLong o...@delong.com wrote: OK... Like Einstein, math is not my strong suit. Unfortunately, I don't have his prowess with physics, either. Owen A bit here, a bit there... Hey, dB is a plural of Bits! -- -george william herbert

Re: Muni fiber: L1 or L2?

2013-02-01 Thread George Herbert
Ok, serious question - How is GPON's downstream AES encryption keying handled? -- -george william herbert george.herb...@gmail.com

Re: Endpoint Security and Smartphones

2013-02-19 Thread George Herbert
Normal apps can usually get the accelerometer data without breaking device security. So you download the newest cool free Mine Birds or whatnot, and its server upload traffic eventually includes guesses at your passcode along with your game status... George William Herbert Sent from my

Re: Check this out T-Mobile Launches GoSmart Prepaid Service Nationally on Phone Scoop

2013-02-19 Thread George Herbert
All in favor of phonescoop being blacklisted from nanog? Anyone? Anyone? Buehler? On Tue, Feb 19, 2013 at 5:50 PM, Grant Ridder shortdudey...@gmail.com wrote: haha i love the header: Received: (from nobody@localhost) On Tue, Feb 19, 2013 at 7:48 PM, Jay Ashworth j...@baylink.com wrote:

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:20 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: All, I have been searching our beloved internet endlessly for months on information regarding Visio technique. Does anyone have a good resource(s) for advanced visio drawings, or more to the point

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:58 PM, George Herbert george.herb...@gmail.com wrote: [...] My company has a Visio whiz, who I'm going to ping for his opinion on that, but I am guessing it's a no. Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capability

Re: Cloudflare is down

2013-03-04 Thread George Herbert
On Mon, Mar 4, 2013 at 10:40 AM, Saku Ytti s...@ytti.fi wrote: On (2013-03-04 13:23 -0500), Jeff Wheeler wrote: We have lots of stupid people in our industry because so few understand The Way Things Work. We have tendency to view mistakes we do as unavoidable human errors and mistakes other

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Wed, Mar 6, 2013 at 9:20 AM, Cameron Byrne cb.li...@gmail.com wrote: So, your position, which is substantiated my Microsoft's / Windows Phone's / Skype's lack of IPv6 support , is that nobody cares until we run out of IPv4. That is clearly reducto ad absurdum and does not resemble

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Tue, Mar 5, 2013 at 8:20 PM, Owen DeLong o...@delong.com wrote: Matthew wrote: [...] 1. Decreased application complexity: Yeah. After IPv4 goes entirely away. Which is a long, long, LONG time from now. Until then… I don't think so. I think IPv4's demise as a supported internet

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?

2013-03-06 Thread George Herbert
On Wed, Mar 6, 2013 at 12:30 PM, david raistrick dr...@icantclick.org wrote: On Wed, 6 Mar 2013, George Herbert wrote: The mindshare shift is happening, but the change won't snowball until IT admins - in bulk - really get it. and keeping in mind that the bulk still don't get ipv4, either

Re: Class E addresses in the wild

2013-03-21 Thread George Herbert
It is (or was) fairly commonly in use among internal nets which overflowed RFC 1918 or have to internetwork with other heavy users of RFC 1918 space. I know of at least two service providers and one cell network who were using it for that 3 years ago. Someone leaking internal routes for such?

Re: Class E addresses in the wild

2013-03-21 Thread George Herbert
On Thu, Mar 21, 2013 at 5:10 PM, cb.list6 cb.li...@gmail.com wrote: I am pretty sure Class E is completely defunct and not used anywhere since Cisco and Juniper routers do not forward the packets (circa 2008 testing) and no known host accept it as a valid address, AFAIK. Both the net and host

Re: Is multihoming hard? [was: DNS amplification]

2013-03-24 Thread George Herbert
On Mar 23, 2013, at 7:47 PM, Kyle Creyts kyle.cre...@gmail.com wrote: Will they really demand ubiquitous, unabridged connectivity? Let's back up. End users do not as a rule* have persistent inbound connections. If they have DSL and a Cable Modem they can switch manually (or with a

Re: glass fiber @ 0.997 c

2013-03-26 Thread George Herbert
On Tue, Mar 26, 2013 at 9:36 AM, Eugen Leitl eu...@leitl.org wrote: http://www.newscientist.com/article/dn23309-information-superhighway-approaches-light-speed.html Information superhighway approaches light speed 18:00 24 March 2013 by Jacob Aron Nothing moves faster than light in a vacuum,

Re: RFC 1149

2013-04-01 Thread George Herbert
Packets, shmackets. I'm just upset that my BGP over Semaphore Towers routing protocol extension hasn't been experimentally validated yet. Whoever you are who keeps flying pigeons between my test towers, you can't deliver packets without proper routing updates! Knock it off long enough for me to

Re: RFC 1149

2013-04-03 Thread George Herbert
In europe? He probably was thinking of a Volvo 245... On Wed, Apr 3, 2013 at 4:40 AM, Jamie Bowden ja...@photon.com wrote: From: Jay Ashworth [mailto:j...@baylink.com] - Original Message - From: TJ trej...@gmail.com On Tue, Apr 2, 2013 at 3:41 PM, Owen DeLong o...@delong.com

Re: Data Center Installations

2013-05-01 Thread George Herbert
Seconded Graybar. If necessary, in the absence of Graybar or for tiny stuff, a Frys or Home Depot or Lowes. On Wed, May 1, 2013 at 12:32 PM, Joe Hamelin j...@nethead.com wrote: Graybar. -- Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474 On Wed, May 1, 2013 at 12:23 PM, Warren Bailey

Re: CenturyLink Outage?

2013-05-07 Thread George Herbert
Widely discussed on outa...@outages.org list (hint!) but for those not yet list members over there, 13 or more states in southeast US affected, reportedly routing / layer 3 issue, possibly BGP to outside but not clear. Some service restorations discussed. George William Herbert Sent from my

Re: CMDB on the cheap...

2011-12-06 Thread George Herbert
Everyone I know has either paid through the nose or written one from scratch. No good open source projects that worked out. Most people couldn't build well from scratch. I have been a couple of places that did, it was man-year of senior grade guy effort range. On Tue, Dec 6, 2011 at 1:01 PM,

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread George Herbert
On Tue, Jan 31, 2012 at 6:03 PM, Owen DeLong o...@delong.com wrote: On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: In message 7b85f9d8-ba9e-4341-9242-5eb514895...@virtualized.org, David Conrad writes: I hope none of you ever get hijacked by a spammer housed at Phoenix = NAP.  :) In

Re: SSL Certificates

2012-02-15 Thread George Herbert
On Wed, Feb 15, 2012 at 4:17 PM, John Levine jo...@iecc.com wrote: Almost everyone are basically just selling an activation with one of the SSL certificate authorities. I usually buy a RapidSSL (Verisign) certificate from https://www.sslmatrix.com/ -- they seem to have some of the best prices

Re: SSL Certificates

2012-02-16 Thread George Herbert
On Wed, Feb 15, 2012 at 10:57 PM, Jimmy Hess mysi...@gmail.com wrote: On Wed, Feb 15, 2012 at 6:49 PM, George Herbert george.herb...@gmail.com wrote: On Wed, Feb 15, 2012 at 4:17 PM, John Levine jo...@iecc.com wrote: The problem with anything related to Verisign at the moment

Re: time sink 42

2012-02-16 Thread George Herbert
Brothers' are fine; buy the tapes that have the split-down-the-middle backing on them. It reduces the unpeeling problem from more-time-than-the-label-took-to-type-in to about 2 seconds. You just grab the edges at an end and bend it, so the backing bulges outwards, and off it starts to come.

Re: time sink 42

2012-02-16 Thread George Herbert
On Thu, Feb 16, 2012 at 2:27 PM, Nick Hilliard n...@foobar.org wrote: On 16/02/2012 21:14, George Herbert wrote: Brothers' are fine; buy the tapes that have the split-down-the-middle backing on them. It reduces the unpeeling problem from more-time-than-the-label-took-to-type-in to about 2

Re: Hi speed trading - hi speed monitoring

2012-02-16 Thread George Herbert
On Thu, Feb 16, 2012 at 12:59 PM, Jason Chambers jchamb...@ucla.edu wrote: On 2/16/12 5:03 AM, Hank Nussbacher wrote: Nanosecond Trading Could Make Markets Go Haywire http://www.wired.com/wiredscience/2012/02/high-speed-trading/ Below the 950-millisecond level, where computerized trading

Re: WW: Colo Vending Machine

2012-02-17 Thread George Herbert
On Fri, Feb 17, 2012 at 4:09 PM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Aled Morris al...@qix.co.uk On 17 February 2012 18:43, Eric Tykwinski eric-l...@truenet.com wrote: +1 for GBICs, SFPs You'll need to be carrying a lot of loose change then :-) In

Re: Colo Vending Machine

2012-02-17 Thread George Herbert
On Fri, Feb 17, 2012 at 1:44 PM, George Carey geo...@montco.net wrote: The vending machine should use a card like an ATM/gift card, not accept cash.  You should be able to charge the card with some cash via a web portal and keep the card in the facility in your space.  If something is

Re: Colo Vending Machine

2012-02-17 Thread George Herbert
On Fri, Feb 17, 2012 at 5:00 PM, George Herbert george.herb...@gmail.com wrote: On Fri, Feb 17, 2012 at 1:44 PM, George Carey geo...@montco.net wrote: The vending machine should use a card like an ATM/gift card, not accept cash.  You should be able to charge the card with some cash via a web

Re: Reliable Cloud host ?

2012-02-27 Thread George Herbert
On Mon, Feb 27, 2012 at 7:28 AM, William Herrin b...@herrin.us wrote: On Sun, Feb 26, 2012 at 7:02 PM, Randy Carpenter rcar...@network1.net wrote: On Feb 26, 2012, at 4:56 PM, Randy Carpenter wrote: 1. Full redundancy with instant failover to other hypervisor hosts upon hardware failure (I

Re: Reliable Cloud host ?

2012-02-27 Thread George Herbert
On Mon, Feb 27, 2012 at 3:45 PM, William Herrin b...@herrin.us wrote: On Mon, Feb 27, 2012 at 2:19 PM, George Herbert george.herb...@gmail.com wrote: Failing to have central shared storage (iSCSI, NAS, SAN, whatever you prefer) fails the smell test on a local enterprise-grade virtualization

Re: dns and software, was Re: Reliable Cloud host ?

2012-02-27 Thread George Herbert
On Mon, Feb 27, 2012 at 4:59 PM, William Herrin b...@herrin.us wrote: Yes, well, that's why we're still using a layer 4 protocol (TCP) that can't dynamically rebind to the protocol level below (IP). This is somewhat irritating, but on the scale of 0 (all is well) to 10 (you want me to do

Re: Programmers with network engineering skills

2012-02-27 Thread George Herbert
On Mon, Feb 27, 2012 at 5:07 PM, Jason Bertoch ja...@i6ix.com wrote: On 2/27/2012 7:53 PM, William Herrin wrote: I think you're more likely to find a network engineer with (possibly limited)  programming skills. I wish. For the past three months I've been trying to find a network engineer

Re: Programmers with network engineering skills

2012-02-28 Thread George Herbert
On Tue, Feb 28, 2012 at 11:21 AM, Lamar Owen lo...@pari.edu wrote: On Monday, February 27, 2012 07:53:07 PM William Herrin wrote: .../SCI clearance. The clearance is killing me. The two generalists didn't have a clearance and the cleared applicants are programmers or admins but never both.

Re: Increase of DOS attacks using TCP src and/or dst of 0

2012-03-07 Thread George Herbert
Out of curiosity - Is it possible it's a command and control network, rather than directly an attack? On Wed, Mar 7, 2012 at 2:41 PM, Chris Stone axi...@gmail.com wrote: On Wed, Mar 7, 2012 at 1:45 PM, Matthew Huff mh...@ox.com wrote: Anyone else see a massive increase of scanning/dos with

Re: PLEASE don't feed the troll

2012-03-07 Thread George Herbert
Isabel - It does not take a PhD in computer science to understand networks or network protocol design. It does not take a PhD to understand that the troll's particular proposal was not a competent well-founded contribution. On Wed, Mar 7, 2012 at 7:25 AM, isabel dias isabeldi...@yahoo.com

  1   2   3   >