Re: AW: [swinog] Problems reaching large Websites
Mike Kellenberger wrote: > was ok a few minutes ago, now the problem is back... > Access to dell.ch, ikea.com and sf.tv are now all fine from here (easynet). /Per Jessen, Herrliberg -- http://www.spamchek.com/ - your spam is our business. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: AW: [swinog] Problems reaching large Websites
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hello, Works perfectly from here. Cu, Nico > was ok a few minutes ago, now the problem is back... > > tracert www.sf.tv > > Tracing route to a1133.g.akamai.net [80.67.84.75] > over a maximum of 30 hops: > > 111 ms<1 ms<1 ms 192.168.10.1 > 2 7 ms 7 ms 7 ms r1.escapenet.init7.net [82.197.167.89] > 3 7 ms 7 ms 7 ms 82.197.174.1 > 4 8 ms 7 ms 7 ms r1.core.init7.net [213.144.128.1] > 5 8 ms 8 ms 8 ms tix2-nap.netarch.akamai.com [194.42.48.48] > 6 * > > > tracert i.dell.com > > Tracing route to a569.g.akamai.net [80.67.84.74] > over a maximum of 30 hops: > > 1<1 ms<1 ms<1 ms 192.168.10.1 > 2 7 ms 7 ms 7 ms r1.escapenet.init7.net [82.197.167.89] > 3 7 ms 7 ms 7 ms 82.197.174.1 > 4 8 ms 7 ms 7 ms r1.core.init7.net [213.144.128.1] > 5 8 ms 8 ms 8 ms tix2-nap.netarch.akamai.com [194.42.48.48] > 6 ** > > > > Freundliche Grüsse > -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.4 (FreeBSD) iD8DBQFHntUzhVupqbmzoscRA+pyAKCHjdyDn4M4miRW6r0HCunVqh4xFwCeIU7E y7Frh9YDnzxn2OKvPg2eP6o= =NSNr -END PGP SIGNATURE- ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
AW: [swinog] Problems reaching large Websites
was ok a few minutes ago, now the problem is back... tracert www.sf.tv Tracing route to a1133.g.akamai.net [80.67.84.75] over a maximum of 30 hops: 111 ms<1 ms<1 ms 192.168.10.1 2 7 ms 7 ms 7 ms r1.escapenet.init7.net [82.197.167.89] 3 7 ms 7 ms 7 ms 82.197.174.1 4 8 ms 7 ms 7 ms r1.core.init7.net [213.144.128.1] 5 8 ms 8 ms 8 ms tix2-nap.netarch.akamai.com [194.42.48.48] 6 * tracert i.dell.com Tracing route to a569.g.akamai.net [80.67.84.74] over a maximum of 30 hops: 1<1 ms<1 ms<1 ms 192.168.10.1 2 7 ms 7 ms 7 ms r1.escapenet.init7.net [82.197.167.89] 3 7 ms 7 ms 7 ms 82.197.174.1 4 8 ms 7 ms 7 ms r1.core.init7.net [213.144.128.1] 5 8 ms 8 ms 8 ms tix2-nap.netarch.akamai.com [194.42.48.48] 6 ** Freundliche Grüsse -- Mike Kellenberger [EMAIL PROTECTED] Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Adrian Senn Gesendet: Dienstag, 29. Januar 2008 00:01 An: [EMAIL PROTECTED] Betreff: Re: [swinog] Problems reaching large Websites Same problem here tracert www.sf.tv from home Routenverfolgung zu a1133.g.akamai.net [80.67.84.74] über maximal 30 Abschnitte : 1 1 ms 1 ms 1 ms smc.senntec.ch [10.1.1.1] 2 3 ms 3 ms 3 ms eth0.r1.senn.ch [213.144.132.49] 312 ms13 ms13 ms lo0.lns1.bbcs.init7.net [213.144.128.205] 413 ms17 ms23 ms r1.core.init7.net [213.144.128.1] 512 ms13 ms13 ms tix2-nap.netarch.akamai.com [194.42.48.48] 6 * from switch Traceroute to 80.67.84.74 traceroute to 80.67.84.74 (80.67.84.74), 30 hops max, 40 byte packets 1 swiCS5-V108 (130.59.108.5) 0.267 ms 0.204 ms 0.194 ms 2 swiCS3-10GE-1-3 (130.59.15.189) 0.248 ms 0.212 ms 0.214 ms 3 swiEZ2-10GE-5-2 (130.59.36.18) 0.221 ms 0.212 ms 0.219 ms 4 swiIX1-10GE-1-1 (130.59.36.250) 0.386 ms 0.354 ms 0.340 ms 5 tix2-nap.netarch.akamai.com (194.42.48.48) 0.509 ms 0.504 ms 0.323 ms 6 * * * ; <<>> DiG 9.3.1 <<>> www.sf.tv @213.144.132.52 ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53005 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 9, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.sf.tv. IN A ;; ANSWER SECTION: www.sf.tv. 1779IN CNAME www.sf.tv.edgesuite.net. www.sf.tv.edgesuite.net. 21579 IN CNAME a1133.g.akamai.net. a1133.g.akamai.net. 20 IN A 80.67.84.74 a1133.g.akamai.net. 20 IN A 80.67.84.75 ;; AUTHORITY SECTION: g.akamai.net. 1778IN NS n5g.akamai.net. g.akamai.net. 1778IN NS n6g.akamai.net. g.akamai.net. 1778IN NS n7g.akamai.net. g.akamai.net. 1778IN NS n8g.akamai.net. g.akamai.net. 1778IN NS n0g.akamai.net. g.akamai.net. 1778IN NS n1g.akamai.net. g.akamai.net. 1778IN NS n2g.akamai.net. g.akamai.net. 1778IN NS n3g.akamai.net. g.akamai.net. 1778IN NS n4g.akamai.net. ;; Query time: 574 msec ;; SERVER: 213.144.132.52#53(213.144.132.52) ;; WHEN: Mon Jan 28 23:58:31 2008 ;; MSG SIZE rcvd: 287 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
Same problem here tracert www.sf.tv from home Routenverfolgung zu a1133.g.akamai.net [80.67.84.74] über maximal 30 Abschnitte : 1 1 ms 1 ms 1 ms smc.senntec.ch [10.1.1.1] 2 3 ms 3 ms 3 ms eth0.r1.senn.ch [213.144.132.49] 312 ms13 ms13 ms lo0.lns1.bbcs.init7.net [213.144.128.205] 413 ms17 ms23 ms r1.core.init7.net [213.144.128.1] 512 ms13 ms13 ms tix2-nap.netarch.akamai.com [194.42.48.48] 6 * from switch Traceroute to 80.67.84.74 traceroute to 80.67.84.74 (80.67.84.74), 30 hops max, 40 byte packets 1 swiCS5-V108 (130.59.108.5) 0.267 ms 0.204 ms 0.194 ms 2 swiCS3-10GE-1-3 (130.59.15.189) 0.248 ms 0.212 ms 0.214 ms 3 swiEZ2-10GE-5-2 (130.59.36.18) 0.221 ms 0.212 ms 0.219 ms 4 swiIX1-10GE-1-1 (130.59.36.250) 0.386 ms 0.354 ms 0.340 ms 5 tix2-nap.netarch.akamai.com (194.42.48.48) 0.509 ms 0.504 ms 0.323 ms 6 * * * ; <<>> DiG 9.3.1 <<>> www.sf.tv @213.144.132.52 ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53005 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 9, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.sf.tv. IN A ;; ANSWER SECTION: www.sf.tv. 1779IN CNAME www.sf.tv.edgesuite.net. www.sf.tv.edgesuite.net. 21579 IN CNAME a1133.g.akamai.net. a1133.g.akamai.net. 20 IN A 80.67.84.74 a1133.g.akamai.net. 20 IN A 80.67.84.75 ;; AUTHORITY SECTION: g.akamai.net. 1778IN NS n5g.akamai.net. g.akamai.net. 1778IN NS n6g.akamai.net. g.akamai.net. 1778IN NS n7g.akamai.net. g.akamai.net. 1778IN NS n8g.akamai.net. g.akamai.net. 1778IN NS n0g.akamai.net. g.akamai.net. 1778IN NS n1g.akamai.net. g.akamai.net. 1778IN NS n2g.akamai.net. g.akamai.net. 1778IN NS n3g.akamai.net. g.akamai.net. 1778IN NS n4g.akamai.net. ;; Query time: 574 msec ;; SERVER: 213.144.132.52#53(213.144.132.52) ;; WHEN: Mon Jan 28 23:58:31 2008 ;; MSG SIZE rcvd: 287 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
Hello Steven Glogger wrote: hm... from AS12429 its working fine. your problem sounds for me like a MTU and/or firewall problem... I don't think so, I could also not reaching http://www.sf.tv/ around 20:00, but now it is working again. During the outage (hop 3 + 4 are ch-zrh01a-ra1-ge-1-1-0.aorta.net [213.46.171.49]): [EMAIL PROTECTED]:~$ traceroute www.sf.tv traceroute: Warning: www.sf.tv has multiple addresses; using 80.67.84.75 traceroute to www.sf.tv.edgesuite.net (80.67.84.75), 64 hops max, 40 byte packets 1 gate2.home4u.ch (62.2.85.177) 2.090 ms 1.683 ms 1.139 ms 2 cc-10-179-64-1.home4u.ch (10.179.64.1) 8.117 ms 6.147 ms 4.760 ms 3 * * * 4 * * * 5 tix2-nap.netarch.akamai.com (194.42.48.48) 15.525 ms 5.481 ms 6.043 ms 6 * * * 7 * *^C [EMAIL PROTECTED]:~$ host www.sf.tv www.sf.tv is an alias for www.sf.tv.edgesuite.net. www.sf.tv.edgesuite.net is an alias for a1133.g.akamai.net. a1133.g.akamai.net has address 80.67.84.75 a1133.g.akamai.net has address 80.67.84.74 [EMAIL PROTECTED]:~$ Now it looks different: [EMAIL PROTECTED]:~$ traceroute www.sf.tv traceroute: Warning: www.sf.tv has multiple addresses; using 212.243.221.214 traceroute to www.sf.tv.edgesuite.net (212.243.221.214), 64 hops max, 40 byte packets 1 gate2.home4u.ch (62.2.85.177) 47.432 ms 1.574 ms 1.106 ms 2 cc-10-179-64-1.home4u.ch (10.179.64.1) 32.915 ms 4.358 ms 8.884 ms 3 * * * 4 * * * 5 i79tix-015-gig2-4.bb.ip-plus.net (164.128.22.9) 17.091 ms 20.524 ms 9.976 ms 6 i79zhh-015-xxx1-4.bb.ip-plus.net (138.187.129.73) 18.855 ms 7.312 ms 25.770 ms 7 i79zhh-005-gig6-0x2.bb.ip-plus.net (138.187.129.45) 23.617 ms 6.916 ms 5.532 ms 8 i79zhh-101-vla201.bb.ip-plus.net (138.187.129.42) 7.519 ms 6.321 ms 7.802 ms 9 212.243.221.214 (212.243.221.214) 16.905 ms 8.681 ms 7.759 ms [EMAIL PROTECTED]:~$ host www.sf.tv www.sf.tv is an alias for www.sf.tv.edgesuite.net. www.sf.tv.edgesuite.net is an alias for a1133.g.akamai.net. a1133.g.akamai.net has address 212.243.221.214 a1133.g.akamai.net has address 212.243.221.208 [EMAIL PROTECTED]:~$ Seems really to have been a problem somewhere on Akamai's network, also i.dell.com does resolv the same now: [EMAIL PROTECTED]:~$ host i.dell.com i.dell.com is an alias for img.dell-cidr.akadns.net. img.dell-cidr.akadns.net is an alias for img.dell.com.edgesuite.net. img.dell.com.edgesuite.net is an alias for a569.g.akamai.net. a569.g.akamai.net has address 212.243.221.208 a569.g.akamai.net has address 212.243.221.214 [EMAIL PROTECTED]:~$ Could it be possible, that edgesuite.net/akamai.net is doing anycast [1] with its IP addresses? This would explain why it could be reached from some places but not from others. [1] http://en.wikipedia.org/wiki/Anycast bye Fabian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
Hi Mike Am Montag, 28. Januar 2008 17:20 schrieb Mike Kellenberger: > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the akamai > network? > > Trying from AS13030 (Init7) here... > I am also Init7 ADSL customer, and it looks similar from my side, reaching microsoft or dell as well as ebay.com or ikea.com is nearly impossible. I restarted my DSL-Modem and tried it on two Computers with different opearating systems, but it was still not working. I now switched to my Sunrise Backup-Link over EDGE, and now everything seesm to work fine again (although it is a bit slow), so there must be a problem in the init7 network. Greetingd Peter ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
Mike Kellenberger wrote: > Hi all > > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the akamai > network? I've been unable to get to www.dell.ch since sometime yesterday at least. /Per Jessen, Herrliberg -- http://www.spamchek.com/ - your spam is our business. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Log centralisation / mining
Well... I used to lead the solutions team at ArcSight. I was responsible for building all the compliance and "other" solutions. I have worked with up to ESM version 4.0. There is no policy engine. It's a rules-engine. And yes, it's one of the best out there, if you want to do real time correlation. In terms of compliance, it's what they sell as solutions. I am not going to comment on them here. It's what I built in my prior life. They are obviously stellar *grins*. Sorry for being sparse on details, but I think you understand based on my bias. -raffy -- Raffael Marty Chief Security Strategist @ Splunk> Security Visualization: http://secviz.org raffy.ch/blog On Jan 28, 2008, at 12:19 AM, Reza Kordi wrote: Raffy, What do you like about ArcSight? The policy engine? Compliance? Which version of Arcsight did you look at? Cheers, Reza -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ] On Behalf Of Raffael Marty Sent: Montag, 21. Januar 2008 18:17 To: [EMAIL PROTECTED] Subject: Re: [swinog] Log centralisation / mining On Jan 21, 2008, at 3:45 AM, Roman Hochuli wrote: Hello Raffy Splunk. Definitely Splunk ;) -- Raffael Marty Chief Security Strategist @ Splunk> Security Visualization: http://secviz.org raffy.ch/blog I see. A totally unbiased position. ;) I assumed that was obvious... That's why I also said: On a serious note, I ... Reza wrote: The most professional solution on market is surely EMC/RSA envision, if you see it you won't want to bother with anything else. I would totally disagree. If you really want to go down that route, ArcSight is the one you want to go for. But again, be clear on what you are trying to do. All of these solutions are slightly different and should match your use. -raffy ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: AW: [swinog] Problems reaching large Websites
> dell.com works, but try any other host that is being contacted while loading > www.dell.com and is hosted by akamai, such as i.dell.com No problem via Bluewin-DSL: $ telnet i.dell.com 80 Trying 212.243.223.139... Connected to i.dell.com (212.243.223.139). Escape character is '^]'. HEAD / HTTP/1.0 HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 187 Expires: Mon, 28 Jan 2008 17:05:56 GMT Date: Mon, 28 Jan 2008 17:05:56 GMT Connection: close (Bad Request ? WTF?) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
hm... from AS12429 its working fine. your problem sounds for me like a MTU and/or firewall problem... -steven Mike Kellenberger schrieb: Hi all Anbody else having problems to reach large websites, such as www.microsoft.com or www.dell.com? Problems in or to the akamai network? Trying from AS13030 (Init7) here... Cheers, Mike ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
RE: [swinog] Problems reaching large Websites
Hi, All is working good from VTX. Also with Akamai network and Akamaized content. Cheers, Jerome > -Message d'origine- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la part de Mike > Kellenberger > Envoyé : lundi, 28. janvier 2008 17:20 > À : [EMAIL PROTECTED] > Objet : [swinog] Problems reaching large Websites > > Hi all > > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the > akamai network? > > Trying from AS13030 (Init7) here... > > Cheers, > > Mike > > -- > Mike Kellenberger [EMAIL PROTECTED] > Escapenet - the Web Company Tel +41 52 235 0700 > http://www.escapenet.ch Skype mikek70atwork > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
AW: [swinog] Problems reaching large Websites
dell.com works, but try any other host that is being contacted while loading www.dell.com and is hosted by akamai, such as i.dell.com Freundliche Grüsse -- Mike Kellenberger [EMAIL PROTECTED] Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Silvan Gebhardt Gesendet: Montag, 28. Januar 2008 17:26 An: [EMAIL PROTECTED] Betreff: Re: [swinog] Problems reaching large Websites dell.com working perfectly, from init7-VDSL Am 28.01.2008 um 17:20 schrieb Mike Kellenberger: > Hi all > > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the akamai > network? > > Trying from AS13030 (Init7) here... > > Cheers, > > Mike > > -- > Mike Kellenberger [EMAIL PROTECTED] > Escapenet - the Web Company Tel +41 52 235 0700 > http://www.escapenet.ch Skype mikek70atwork > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Problems reaching large Websites
dell.com working perfectly, from init7-VDSL Am 28.01.2008 um 17:20 schrieb Mike Kellenberger: Hi all Anbody else having problems to reach large websites, such as www.microsoft.com or www.dell.com? Problems in or to the akamai network? Trying from AS13030 (Init7) here... Cheers, Mike -- Mike Kellenberger [EMAIL PROTECTED] Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Problems reaching large Websites
Hi all Anbody else having problems to reach large websites, such as www.microsoft.com or www.dell.com? Problems in or to the akamai network? Trying from AS13030 (Init7) here... Cheers, Mike -- Mike Kellenberger [EMAIL PROTECTED] Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
RE: [swinog] Log centralisation / mining
Raffy, What do you like about ArcSight? The policy engine? Compliance? Which version of Arcsight did you look at? Cheers, Reza -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raffael Marty Sent: Montag, 21. Januar 2008 18:17 To: [EMAIL PROTECTED] Subject: Re: [swinog] Log centralisation / mining On Jan 21, 2008, at 3:45 AM, Roman Hochuli wrote: > Hello Raffy > >> Splunk. Definitely Splunk ;) > > -- >> Raffael Marty >> Chief Security Strategist @ Splunk> >> Security Visualization: http://secviz.org raffy.ch/blog > > I see. A totally unbiased position. ;) I assumed that was obvious... That's why I also said: > On a serious note, I ... Reza wrote: > The most professional solution on market is surely EMC/RSA envision, > if you see it you won't want to bother with anything else. I would totally disagree. If you really want to go down that route, ArcSight is the one you want to go for. But again, be clear on what you are trying to do. All of these solutions are slightly different and should match your use. -raffy ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog