euNetworks, DE-CIX

2017-05-24 Thread Michael J McCafferty
Operators,
We are a US hosting company, expanding in to Europe. In the US we use 
Level 3 and AIS (AS6130) and Cogent. We planned to use Level 3 and Cogent in EU 
as well, but our experience with Level 3 support has been less than stellar. I 
am looking for an Internet provider with whom we can receive full tables, 
announce our AS/IP space, RTBH, and get a 10G port. Prefer someone that will 
not have peering fights (we already have that with Cogent). I am interested in 
feedback from anyone with similar service with euNetworks in Europe (especially 
Germany).
By extension, we will be moving some data through the DE-CIX.

Any first-hand experience you might have to share is greatly 
appreciated, in public or private replies.

Thank you very much!
Mike

Michael J. McCafferty
M5 Hosting
http://www.m5hosting.com <http://www.m5hosting.com/>

Like us on Facebook for updates and photos:
https://www.facebook.com/m5hosting <https://www.facebook.com/m5hosting>




Re: euNetworks, DE-CIX

2017-05-24 Thread Michael J McCafferty


Munich.


Sent from my Verizon, Samsung Galaxy smartphone

 Original message 
From: Alistair Mackenzie  
Date: 5/24/17  10:53 AM  (GMT-08:00) 
To: Michael J McCafferty  
Cc: nanog@nanog.org 
Subject: Re: euNetworks, DE-CIX 

Which location?

On 24 May 2017 at 09:49, Michael J McCafferty  wrote:

> Operators,
> We are a US hosting company, expanding in to Europe. In the US we
> use Level 3 and AIS (AS6130) and Cogent. We planned to use Level 3 and
> Cogent in EU as well, but our experience with Level 3 support has been less
> than stellar. I am looking for an Internet provider with whom we can
> receive full tables, announce our AS/IP space, RTBH, and get a 10G port.
> Prefer someone that will not have peering fights (we already have that with
> Cogent). I am interested in feedback from anyone with similar service with
> euNetworks in Europe (especially Germany).
> By extension, we will be moving some data through the DE-CIX.
>
> Any first-hand experience you might have to share is greatly
> appreciated, in public or private replies.
>
> Thank you very much!
> Mike
> ************
> Michael J. McCafferty
> M5 Hosting
> http://www.m5hosting.com <http://www.m5hosting.com/>
>
> Like us on Facebook for updates and photos:
> https://www.facebook.com/m5hosting <https://www.facebook.com/m5hosting>
> 
>
>


Re: Internet Blip in San Diego at 1pm?

2011-07-31 Thread Michael J McCafferty

I am one of your customers that noticed it. To add some data points;
This affected Cogent, Level3 and several networks we peer with at the
Any2 Exchange at One Wilshire.

On Sun, 2011-07-31 at 13:35 -0700, Joe Renwick wrote:
> Several of my customers in San Diego noticed large drops in traffic at 1pm
> today.  Note it was not a total loss in connectivity.  Anyone else notice
> this?
> 

-- 
********
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: L3 Issues

2011-08-01 Thread Michael J McCafferty
Yes. I am getting customer calls from people not able to reach us via Level3.

--Original Message--
From: Khurram Khan
To: nanog@nanog.org
Subject: L3 Issues
Sent: Aug 1, 2011 10:39 AM

Hello and Good Morning,

Are there reports of L3 having issues this morning ? Starting at about
10:10 A Pacific, I started seeing huge drops in traffic at various
sites, including San Diego, Houston, San Antonio, Charlotte, NC,
Philadelphia, etc.
Anyone seeing a similar behavior ?



Sent from my Verizon Wireless BlackBerry



Aqua Conduit for 10G multi-mode?

2011-08-30 Thread Michael J McCafferty
All,
Orange innerduct/split-loom tubing for multi-mode, yellow for
single-mode... Where's the aqua for the aqua OM3 fiber?
I feel like the Ethernet fashion police, but it's a horrible color
clash for aqua fiber dressed in yellow or orange.

Where is my aqua innerduct and/or tubing? Does anyone make it?

Cheers,
Mike
-- 
********
Michael J. McCafferty
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: AW: Aqua Conduit for 10G multi-mode?

2011-08-30 Thread Michael J McCafferty

I want the conduit/innerduct corrugated tubing to be aqua for my aqua
fibers. There is orange conduit and innerduct corrugated tubing for
orange fibers, and yellow for yellow fiber.

Maybe it's just coincidence that there are yellow and orange corrugated
tubing and orange and yellow fiber. I'd like there to be aqua corrugated
tubing please.

On Tue, 2011-08-30 at 09:59 +, Thomas Weible wrote:
> Hi Michael,
> 
> I would like to help you.. but I really don't get your point. These are the 
> well used combinations:
> 
> MMF OM2&OM1 - orange (beige plug for LC and SC)
> MMF OM3 - aqua (beige plug for LC and SC)
> MMF OM4 - aqua / light blue (beige plug for LC and SC)
> SMF - yellow (blue plug for LC and SC)
> 
> Does this help ?
> 
> cheero Thomas
> 
> > -Ursprüngliche Nachricht-
> > Von: Michael J McCafferty [mailto:m...@m5computersecurity.com]
> > Gesendet: Dienstag, 30. August 2011 11:21
> > An: nanog
> > Betreff: Aqua Conduit for 10G multi-mode?
> > 
> > All,
> > Orange innerduct/split-loom tubing for multi-mode, yellow for
> > single-mode... Where's the aqua for the aqua OM3 fiber?
> > I feel like the Ethernet fashion police, but it's a horrible color
> > clash for aqua fiber dressed in yellow or orange.
> > 
> > Where is my aqua innerduct and/or tubing? Does anyone make it?
> > 
> > Cheers,
> > Mike
> > --
> > **
> > **
> > Michael J. McCafferty
> > M5 Hosting
> > http://www.m5hosting.com
> > 
> > You can have your own custom Dedicated Server up and running today !
> > RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more
> > **
> > **
> 

-- 

Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: he.net down?

2011-10-03 Thread Michael J McCafferty
Our session with them is up and down at Any2 at OWB.

--Original Message--
From: Aiden Sullivan
To: nanog@nanog.org
Subject: he.net down?
Sent: Oct 3, 2011 3:35 PM

www.he.net seems to be down on both IPv4 and IPv6 -- does anyone know what is
going on?

-- 
Aiden




Sent from my Verizon Wireless BlackBerry



Re: he.net down?

2011-10-03 Thread Michael J McCafferty

Here's what Linode at Fremont looked like from our network
(m5hosting.com) and the Linode sites in Newark, and London.

http://smokev.m5hosting.com/smokeping/smokeping.cgi?target=World.USA.Hurricane 

The smokeping from our network at m5hosting.com is through the Any2 at
OWB.

On Mon, 2011-10-03 at 13:17 -1000, Paul wrote:
> On 10/03/2011 12:35 PM, Aiden Sullivan wrote:
> > www.he.net seems to be down on both IPv4 and IPv6 -- does anyone know what 
> > is
> > going on?
> >
> Linode's Fremont location was effected too, HE are their network 
> providers, was down for about an hour.
> 
> Paul
> 

-- 
************
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: US DOJ victim letter

2012-01-19 Thread Michael J McCafferty

We've been getting them too. I haven't event thought to follow up. DOJ
won't email you with a do not reply.


On Thu, 2012-01-19 at 12:59 -0800, Jay Hennigan wrote:
> We have received three emails from the US Department of Justice Victim
> Notification System to our ARIN POC address advising us that we may be
> the victim of a crime.  Headers look legit.
> 
> We have been frustrated in trying to follow the rabbit hole to get any
> useful information.  we've jumped through hoops to get passwords that
> don't work and attempted to navigate a voice-mail system that resembles
> the "twisty maze of passages all different" from an old text adventure
> game.
> 
> This *seems* to be legit, and I would think that the end result is
> likely to be a list of IP addresses associated with infected hosts.
> 
> Has anyone else received the email?  Is it legit?  If so has anyone
> successfully navigated the maze, and if so how?  Is it worth it?
> 
> (And why don't they just send the list of infected IPs to the ARIN
> contact in the first place?)
> 
> --
> Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
> Impulse Internet Service  -  http://www.impulse.net/
> Your local telephone and internet company - 805 884-6323 - WB6RDV
> 

-- 

Michael J. McCafferty
CEO
M5 Hosting
http://www.m5hosting.com

Like us on Facebook for updates and photos:
https://www.facebook.com/m5hosting





Re: Network Storage

2012-04-12 Thread Michael J McCafferty
Ali,
Do you need to capture the whole packet, including the payload? You
will save a lot of space by just capturing the headers. For example,
tcpdump doesn't capture the whole packet by default anyway. You may not
be able to capture at line rate anyway depending on what you are using
to capture with (drivers, libraries, software, etc). See the -s option
in tcpdump man page for info.

Good luck,
Mike

On Thu, 2012-04-12 at 16:25 -0400, Maverick wrote:
> Hello Everyone,
> 
> Can you please comment on what is best solution for storing network
> traffic. We have been graciously granted access by our network
> administrator to capture traffic but the one Tera byte disk space is
> no match with the data that we are seeing, so it fills up quickly. We
> can't get additional space on the server itself so I am looking for
> some external solutions. Can you please suggest something that would
> be best for Gbps speeds .
> 
> 
> Best,
> Ali
> 

-- 
************
Michael J. McCafferty
CEO
M5 Hosting
http://www.m5hosting.com

Like us on Facebook for updates and photos:
https://www.facebook.com/m5hosting





Re: Network Storage

2012-04-12 Thread Michael J McCafferty

more in-line...

On Thu, 2012-04-12 at 17:16 -0400, Maverick wrote:
> Thank you very much for your suggestions.
> 
> 1) My goal is to store the traffic may be fore ever, and analyze it in
> the future for security related incidents detected by ids/ips.
> 

The poor man's way to do this is to use the space you have and use the
-C and -W options in tcpdump. You have as much history as you have disk
space. Maybe make 500M files, and a count of 1800 to use 900G of disk
space. When you have an event, you copy off the files that are relevant
to the time period of the events, to a workstation. Another option is -G
for rotating the files by time instead of size.

> 2) I am storing just header and initial few bytes but still it gets
> filled up quite quickly.

You can use the -z option to gzip compress the files to save space.
However, I don't know how this will affect your disk io... will it be
fast enough to keep up with the writing of the raw data and doing a
concurrent gzip of the last file. If you have enough hardware
performance, but are limited on space, then it's worth a shot.

> 
> 3) Netflow approach is nice but I also want to have traces available
> for reasons mentioned in 1).
> 
> 4) Are there any issues having an external storage as a solution for
> this problem.

There is also some advice in the man page for tcpdump regarding the -z
option. You can write a shell script that takes the capture file as the
only argument, to do other stuff you want done... in this case, copy the
file off to another drive. It could be a network location too... of
course, don't forget to not capture *that* traffic (feedback!).

> 
> Best,
> Ali
> 
> On Thu, Apr 12, 2012 at 5:06 PM, Michael J McCafferty
>  wrote:
> > Ali,
> >Do you need to capture the whole packet, including the payload? You
> > will save a lot of space by just capturing the headers. For example,
> > tcpdump doesn't capture the whole packet by default anyway. You may not
> > be able to capture at line rate anyway depending on what you are using
> > to capture with (drivers, libraries, software, etc). See the -s option
> > in tcpdump man page for info.
> >
> > Good luck,
> > Mike
> >
> > On Thu, 2012-04-12 at 16:25 -0400, Maverick wrote:
> >> Hello Everyone,
> >>
> >> Can you please comment on what is best solution for storing network
> >> traffic. We have been graciously granted access by our network
> >> administrator to capture traffic but the one Tera byte disk space is
> >> no match with the data that we are seeing, so it fills up quickly. We
> >> can't get additional space on the server itself so I am looking for
> >> some external solutions. Can you please suggest something that would
> >> be best for Gbps speeds .
> >>
> >>
> >> Best,
> >> Ali
> >>
> >
> > --
> > 
> > Michael J. McCafferty
> > CEO
> > M5 Hosting
> > http://www.m5hosting.com
> >
> > Like us on Facebook for updates and photos:
> > https://www.facebook.com/m5hosting
> > 
> >

-- 

Michael J. McCafferty
CEO
M5 Hosting
http://www.m5hosting.com

Like us on Facebook for updates and photos:
https://www.facebook.com/m5hosting





Re: Cogent for ISP bandwidth

2012-05-14 Thread Michael J McCafferty
Jason,

I agree with John. You can't use them as your only provider, but you
wouldn't do that with *any* provider. I will add that they answer the
phone quickly, and the person who answers usually has a clue, has access
to the routers, and can be helpful. It's one of the benefits that they
really only sell one product. Honestly, I think their support is better
than most and the deliver what they say or better.

In the past the had a A peer / B peer setup that was a little funky, but
I think they are getting rid of that as they upgrade hardware throughout
their network.

We do also use Level3 (and others). As long as they come in to your
facility on different fiber or otherwise meet you physical diversity
requirements, you should be pretty happy. Add low commits to other
providers for more diversity as needed.

Good luck,
Mike

On Mon, 2012-05-14 at 15:12 -0700, John T. Yocum wrote:
> In my experience Cogent is fine when used in a BGP mix. When we used 
> them, our service was quite reliable. Routing was funky at times, but we 
> never had packet loss.
> 
> --John
> 
> On 5/14/2012 3:03 PM, Jason Baugher wrote:
> > The emails on the Outages list reminded me to ask this question...
> >
> > I've done some searching and haven't been able to find much in the last
> > 3 years as to their reliability and suitability as an upstream provider.
> > For a regional ISP looking for GigE ports in the Chicago/St. Louis area,
> > is Cogent a reasonable solution? Our gut feeling is that they don't
> > stack up against a Level3 or Sprint, but they are being very aggressive
> > with pricing to try and get our business.
> >
> > Thanks,
> > Jason
> >
> 

-- 

Michael J. McCafferty
CEO
M5 Hosting
http://www.m5hosting.com

Like us on Facebook for updates and photos:
https://www.facebook.com/m5hosting





RE: Working with Spamhaus

2015-07-28 Thread Michael J McCafferty


I know this is going to sound worse than the spirit in which I offer it but... 
Step one might be to adjust the attitude from "Deal with these people" to 
something along the lines of "how might we best resolve the issue".
No matter who you deal with, you will get much further with a good humble 
attitude rather than blame.
It is my experience that if they list more than a very specific range of IP 
addresses on your network, you have a real problem. If you have a spammer at 
the top and bottom of a CIDR block then they may list the range, but I have had 
them lost two small ranges in the same /24 before... so I know they have very 
good specificity. 
I am sorry I can not offer you any specific steps or contact information to 
help you expedite the resolution, but I hope you will find some value in this 
advice. 
Perhaps, if your network is small and you control all your mail servers and you 
really are clean, you can configure thrm to relay through a smart host or 
SendGrid or etc.
Good luck,Mike


Sent from my Verizon Wireless 4G LTE smartphone

 Original message 
From: Bryan Tong  
Date: 07/28/2015  8:06 PM  (GMT-07:00) 
To: nanog@nanog.org 
Subject: Working with Spamhaus 

Hello All,

SpamHaus has done us the favor of blacklisting all of our prefixes due to
the issues with handful of IPs from customers we have removed from our
network.

They are now being unresponsive on helping us get these listings removed
and we have a lot of legitimate customers who are no longer able to send
email.

If anyone has any advice on how to deal with these people. Please let me
know here or off list.

Thanks!


Re: Seeking Amazon EC2 abuse contact

2010-04-12 Thread Michael J McCafferty
Erik,
We have several customers being attacked from the same EC2 instance on
their network for 2 full days now. Contacted them at
ec2-ab...@amazon.com  and 25 hours later received a message that
basically said, "Yep, we can confirm that a customer of ours is
attacking you but that's their fault. We sometimes do stuff, but not in
this case. Please don't block us, because the IP might be someone else
later. Have a nice day".
The telephone number in the WHOIS record goes to a general voicemail
box for their legal department.
A few of our customers who are being attacked by this same instance at
EC2 have also contacted Amazon, and were told essentially the same
thing.
While I appreciate that they sent a response, I do not appreciate it's
uselessness.
Anyone over there at AWS that can do something willing to reply to me
directly?

Thanks!
Mike


On Sun, 2010-04-11 at 10:38 -0400, Erik L wrote:
> Could someone from Amazon EC2 please contact me off-list regarding an abuse 
> issue from one of their IPs? Alternatively, could someone please send me the 
> contact details of someone there?
> 
> E-mailing the abuse e-mail listed in WHOIS per their instructions, including 
> all pertinent data, results in an auto-reply indicating to use a form on 
> their site. Submitting the form results in "There has been an error while 
> submitting your data. Please try again later." Calling their supposed NOC (as 
> per WHOIS) results in "You have reached the legal department at 
> Amazon...please leave a message".
> 
> Thanks
> 
-- 

Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Stand alone voltage/etc monitoring?

2010-05-14 Thread Michael J McCafferty
NANOG,
How can I best monitor power quality (ie: voltage, etc) as a colo
customer? We monitor temperature and humidity in multiple places on each
floor we are on, network bandwidth/errors/latency/pps/link-state on
every link, power used per circuit, tons of metrics on servers, but I
can't seem to find a simple and small way to monitor voltage, etc. I
looked in the routers, cabinet-level switched power-strips (CDUs),
switches, and servers, and I don't see anything we already have that can
report that info. I see there are probably some small UPSes ($400 or so)
that can report this info. Seems silly to buy UPSes to get that info.

Is there a quick/small/handy/better way to get power quality info? If
so, what is it? I don't own the facility.

Thanks!
Mike

-- 
************
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: sort by agony

2010-08-27 Thread Michael J McCafferty
On Thu, 2010-08-26 at 22:46 -0700, JC Dill wrote:
> William Herrin wrote:
> > On Thu, Aug 26, 2010 at 6:36 PM,   wrote:
> >   
> >> sorry for the off topic post - but since a few of us travel about some...
> >> http://www.hipmunk.com/
> >> 
> 
> Cool link!  I'm actually shopping for a flight tonight, this has already 
> come in quite handy.
> 
> >
> > How do they quantify agony? Also it's not clear if the sort is
> > ascending or descending...
> 
> http://www.hipmunk.com/faq
> 
> What is Agony, and why would I want to sort by it?
> Agony is our way of sorting flights to take into account price, 
> duration, and number of stops. There's more to a flight than its price, 
> so we provide this sort to give you better all-around results.
> 

Very cool indeed. I'd think that to some the travel time would be
weighed much more heavily than the price of the ticket. I hate to fly
for work (having been injured in a plane crash) and a bit nervous
anyway, but if I am flying for work then then a few hundred bucks is
trivial compared to what is riding on the deal. It might be neat of you
could adjust the weight of the components of "agony".

For kicks, I looked at the most agonizing trip options... I chose a trip
from San Diego to New York City... the worst were:

1) Tijuana to Mexico City, 16hr hour layover, then to Newark NJ and cost
over $1k.

2) Tijuana to Guadalajara for an 8hr layover, then to Atlanta for a
1.5hr layover to New York LGA.

Holy crappy flights Batman!

-- 

Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Any2 Exchange experiences to share?

2009-06-11 Thread Michael J McCafferty

All,
	I am interested to hear any experiences with the Any2 Exchange at One  
Wilshire Blvd, especially regarding performance and reliability to the  
other exchange participants in comparison to routing to the same  
networks via Tier 1 transit providers.
We are in San Diego and have easy access to the exchange via  
transport offered by our data center facility who does have physical  
presence at OWB, but *we* are not physically in OWB, ~4.5ms away and  
some $ for transport to OWB. All things considered, the cost will be  
about the same to route via Tier 1 transit providers from San Diego as  
it will be to transport to OWB to the exchange. The basic question is,  
"Does it improve my network enough to connect to the exchange?"


Thank you for your help!
Mike
--
********
Michael J. McCafferty
M5 Hosting
http://www.m5hosting.com





Telephones for Noisy Data Centers

2009-06-17 Thread Michael J McCafferty
All,
I'd be OK if we were in a facility that was only average in terms of
noise, but we are not. I need an exceptional phone for the data center.
Something that doesn't transmit the horrible background noise to the
other end, and something that is loud without being painful for the user
of this phone. Cordless would be very fine, headset is excellent.
Ordinary desk phone is OK... but the most important thing is that it
works for clear communication. A loud ringer would great too... but if
the best phone doesn't have one, I'll get an auxiliary ringer.

Does anyone have a phone model that they find to be excellent in a
louder than usual data center?

Thanks!
Mike
-- 
********
Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: Telephones for Noisy Data Centers

2009-06-17 Thread Michael J McCafferty
On Wed, 2009-06-17 at 18:38 -0700, sean head wrote:
> Nathan Ward wrote:
> > On 18/06/2009, at 1:31 PM, Michael J McCafferty wrote:
> >
> >> All,
> >> I'd be OK if we were in a facility that was only average in terms of
> >> noise, but we are not. I need an exceptional phone for the data center.
> >> Something that doesn't transmit the horrible background noise to the
> >> other end, and something that is loud without being painful for the user
> >> of this phone. Cordless would be very fine, headset is excellent.
> >> Ordinary desk phone is OK... but the most important thing is that it
> >> works for clear communication. A loud ringer would great too... but if
> >> the best phone doesn't have one, I'll get an auxiliary ringer.
> >>
> >> Does anyone have a phone model that they find to be excellent in a
> >> louder than usual data center?
> >
> >
> > Not 100% what you asked for, but the noise cancelling Jawbone
> > bluetooth earpieces are great.
> >
> > -- 
> > Nathan Ward
> >
> >
> Cordless phone that does bluetooth + jawbone was the first thing that
> popped into my head as well.
> 
> -Sean
> 

Hmm... I actually have one of those... but when my car came with
built-in Bluetooth speaker phone, I haven't used it since. I'll dig it
up and I'll try it out in the data center for the near-term. I'd rather
a real headset that doesn't feel like it's falling out of my ear and
something that other people can use too. I have had a couple pretty good
suggestions off-list  so far that are over the ear solutions. Keep `em
coming...

Mike
-- 

Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





RE: Fire, Power loss at Fisher Plaza in Seattle

2009-07-03 Thread Michael J McCafferty
On Fri, 2009-07-03 at 13:21 -0700, Tomas L. Byrnes wrote:
> 
> >
> >Earth is a single point of failure, where is your backup site?
> 
> [TLB:] Given that all my customers are on Earth, I don't need one if my
> customers also are "down".

Bad Day !





What else shall we test?

2009-07-22 Thread Michael J McCafferty
All,
We are putting together a test plan to test a pair of Cisco 7206 VXR's,
each with with NPE-G2. The purpose of the test is just to make sure we
know where their realistic limits are with a real configuration, full
route tables from two providers, etc. We have one JDSU T-Berd 8000 test
system with interfaces and software to test a single stream through
multi-mode fiber interfaces. We plan to test through the interfaces on
the NPE and through PA-GE cards with a variety of packet sizes
(especially 64 Byte).
I'd be interested in any thoughts on additional testing or testing
methodologies we might want to do, to help us set our expectations for
this setup and to plan when we need to go bigger as we grow traffic,
hosts, etc.
We plan to get 1 to 3 additional full tables and peer with Any2 Easy on
this network within the next year. We want to determine how this
platform will behave under moderate DoS attacks, BGP updates, etc. Is
there anything else we need to be mindful of? Can we get a realistic
test of the routers with the T-Berd? What else should we test while we
have the maintenance window and the test system on hand?

Your thoughts and experience are appreciated!

Thanks !
Mike

-- 
********
Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: Avaya (or other folks) who work with the CNA/APC (route reflector)

2009-08-27 Thread Michael J McCafferty

Coincidentally, just this morning someone at InterNAP forwarded me a
statement from Avaya that they announced End of Sale on the CNA and
Adaptive Path Controller as of Nov 2 2009, and End of Support as of Nov
2 2010.

I'll forward you the InterNAP guy's info off-list.


On Thu, 2009-08-27 at 08:02 -0400, Drew Weaver wrote:
> Hi,
> 
> All of my contacts within Avaya who work with the CNA/APC system have 
> seemingly vanished, does anyone on the list have any contacts in Avaya which 
> still know about the existence of this product?
> 
> Also, does anyone have any contact information for someone at Internap who 
> has sales information about the FCP product?
> 
> thanks,
> -Drew
> 
-- 
************
Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





cross connect reliability

2009-09-17 Thread Michael J McCafferty
All,
Today I had yet another cross-connect fail at our colo provider. From
memory, this is the 6th cross-connect to fail while in service, in 4yrs
and recently there was a bad SFP on their end as well. This seemes like
a high failure rate to me. When I asked about the high failure rate,
they said that they run a lot of cables and there is a lot of jiggling
and wiggling... lots of chances to get bent out of whack from activity
near my patches and cables.
Until a few years ago my time was spent mostly in single tenant data
centers, and it may be true that we made fewer cabling changes and made
less of a ruckus when cabling... but this still seems like a pretty high
failure rate at the colo.
I am curious; what do you expect the average reliability of your FastE
or GigE copper cross-connects at a colo?

Thanks,
Mike

-- 

Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: Hurricane Electric, Fremont-2 down?

2009-09-26 Thread Michael J McCafferty
On Sat, 2009-09-26 at 03:12 -0500, William Pitcock wrote:
> On Sat, 2009-09-26 at 02:59 -0500, RAAPID Technical wrote:
> > Confirmed total power outage at Fremont-2 building:
> > http://www.webhostingtalk.com/showthread.php?t=695888
> 
> That is from 2008...
> 
> William
> 

Try this thread instead:
http://www.webhostingtalk.com/showthread.php?t=892778 
Not much info, but it's from today (never mind the thread name)

Mike

-- 
************
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com





NetFlow analyzer software

2009-10-19 Thread Michael J McCafferty
All,
   I am looking for decent netflow analyzer and reporting  software with good 
support for AS data. 
   ManagEngine's product crashes or locks up my browser when I try to list/sort 
the AS info because it's too large of a list and there is no way to tell it to 
show just the top x results.
   Plixer's Scrutenizer, while it seems like it's a pretty decent product, is 
no longer supporting Linux... We are a Linux shop (servers, desktops, laptops). 
   What else is there that I might want to look at?

Thanks!
Mike
M5Hosting.com
Sent from my Verizon Wireless BlackBerry



Re: NetFlow analyzer software

2009-10-19 Thread Michael J McCafferty
ManageEngine's product is the one that kills browsers because you can tell it 
to list the top X ASNs. 
--Original Message--
From: Brian R. Watters
To: nanog@nanog.org
Cc: nanog@nanog.org
ReplyTo: Brian R. Watters
Subject: RE: NetFlow analyzer software
Sent: Oct 19, 2009 10:45 AM


We have used this product with great success and its reasonable in pricing
and well supported.

http://www.manageengine.com/products/netflow/index.html

BRW



-Original Message-
From: mark jackson [mailto:markcciejack...@gmail.com] 
Sent: Monday, October 19, 2009 10:47 AM
To: m...@m5computersecurity.com
Cc: nanog@nanog.org
Subject: Re: NetFlow analyzer software

What's up gold
Mrtpg
Scrtinizer
Nagios
Riverbed Cascade
Solarwinds

Sent from my iPhone
Please excuse spelling errors

On Oct 19, 2009, at 10:43 AM, "Michael J McCafferty"
 wrote:

> All,
>   I am looking for decent netflow analyzer and reporting  software
> with good support for AS data.
>   ManagEngine's product crashes or locks up my browser when I try to
> list/sort the AS info because it's too large of a list and there is
> no way to tell it to show just the top x results.
>   Plixer's Scrutenizer, while it seems like it's a pretty decent
> product, is no longer supporting Linux... We are a Linux shop
> (servers, desktops, laptops).
>   What else is there that I might want to look at?
>
> Thanks!
> Mike
> M5Hosting.com
> Sent from my Verizon Wireless BlackBerry
>




Sent from my Verizon Wireless BlackBerry

Re: HE.net, Fremont-2 outage?

2009-11-03 Thread Michael J McCafferty

That release is from 10/31/01.


On Tue, 2009-11-03 at 20:04 -0500, Jeffrey Lyon wrote:
> FWIW: http://www.he.net/releases/release18.html
> 
> Jeff
> 
> On Tue, Nov 3, 2009 at 2:28 PM, William Pitcock
>  wrote:
> > Yeah.  They had yet another power outage.  The fourth in 16 months.
> >
> > Luckily we have already begun plans to leave their facility.
> >
> > William
> > --Original Message--
> > From: Tico
> > To: nanog@nanog.org
> > Subject: HE.net, Fremont-2 outage?
> > Sent: Nov 3, 2009 1:50 PM
> >
> > Hey guys,
> >
> > I can't get through to Hurricane Electric, and they seem to be having an
> > outage at their Fremont-2 facility again (as of 17:30 UTC or thereabouts) --
> > ticket system is unanswered, phones go to voicemail, all equipment is
> > unreachable.
> >
> > Does anyone here have a presence at 48233 Warm Springs Blvd, that can
> > provide any information about this? I got hit by the ATS failure last
> > month, so I guess it's possible that that equipment may have flaked again.
> >
> > -t
> >
> >
> >
> > --
> > William Pitcock
> > SystemInPlace - Simple Hosting Solutions
> > 1-866-519-6149
> >
> >
> 
> 
> 
-- 

Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: e300 vs mx240 for border router ?

2008-12-12 Thread Michael J McCafferty
Leslie,

Can you summarize any other info you may have learned in the private
responses for the benefit of those that are interested ?

I am not at all familiar with the Force10s, am buying new border routers
now.

Thanks,
Mike

On Fri, 2008-12-12 at 14:27 -0800, Leslie wrote:
> Thanks to everyone who wrote back privately --
> 
> I also didn't know that force10 now has dual-cam linecards which raises 
> the amount of routes it can handle
> 
> Leslie wrote:
> > Hey nanog-izens
> > 
> > So for routers that are touching our transit and (hopefully soon) future 
> > peering, we're looking at both the force10 e300's and juniper mx240's. 
> > The e300's are cheap but I have heard some rumors/talk of falling over 
> > when it has to deal with large numbers of prefixes and routes?  The 
> > mx240's are nice but the cost difference is enormous.  Does anyone have 
> > experience with e300's running into issues with large routing tables? 
> > Are there any tricks/tips that work around any issues (if they exist?)
> > 
> > Thanks in advance
> > 
> > Leslie
> 
-- 

Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: Querstions about COGENT and their services...

2008-06-03 Thread Michael J McCafferty
Todd,
I once had that same question. I bought FastE from Cogent almost a year
ago for out of band management of our production gear. But, I put up a
couple of old Celerons running Smokeping up, pinging the same 37 remote
networks. One server on Cogent, and one on our colo providers
super-wicked-premium-route-science network.
Before I started this experiment, I had a very low opinion of Cogent.
Since then I have been absolutely happy with them. You will note that if
you look at the same graphs between on the two, the
super-jam-route-science network is only a very slight bit faster and in
some cases it is not.
Cogent support is surprisingly good. A person who can resolve you issue
is the person who answers the phone. You are not transferred 9 times to
get the the right person. There is no eternal hold.
I can't answer any questions regarding BGP with them as we are not
doing BGP with them yet. This is scheduled, however. Ask me again in a
few months. If you question is regarding ping times, then here is the
evidence:

Smoke1 is on the Colo's "blended" network:
http://smoke1.m5hosting.com/cgi-bin/smokeping.cgi?target=World.USA.FaceBook 

Smoke2 is single FastE to Cogent only. No redundancy:
http://smoke2.m5hosting.com/cgi-bin/smokeping.cgi?target=World.USA.FaceBook


 Can't use them as a single provider though. They have those peering
fights and periodic maintenance. If you need 99.999% then you need to
have more than one carrier anyway.

Cheers,
Mike


On Tue, 2008-06-03 at 09:06 -0700, TS Glassey wrote:
> So at one time Cogent was one of the lowest performing bandwidth providers. 
> Anyone have any responses to their current operations?
> 
> regards,
> Todd Glassey CISM CIFI
> Chief Scientist/Founder - Certichron Inc
> [EMAIL PROTECTED]
> 650-796-8178 
> 
> 
-- 
************
Michael J. McCafferty
Principal, Security Engineer
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





InterNAP FCP (again?)

2009-12-30 Thread Michael J McCafferty
All,
I know this has been discussed to some degree before and I have
searched the archives. However is it seems in my previous posts to this
list about anything, the truly useful replies are the private replies
ones that don't make it to this list.
We are considering the InterNAP Flow Control Platform. Currently we
have 3 transit providers but are adding one or two more and will also be
adding a connection to the Any2 exchange at One Wilshire.
The price is manageable, the reporting seems quite useful, but I
haven't seen it actually in action on my network. If it works as claimed
for managing commit levels, performance, etc. then I expect we'd be very
happy. The problem is that InterNAP does not want to do any acceptance
testing... all sales are final... and in my research on the web, I see a
few companies that have implemented the FCP and have either removed it
or switched to Avaya CNA (yes, I know it's going away).
Since InterNAP has pulled way from any kind of happiness guarantee, I'd
very much like to hear from actual users of the FCP, happy and unhappy,
to help me feel better about signing the PO.
Does it do what it says it does for performance and managing commit
levels? Do you feel it was worth the integration and money? Are you
happy with it? What size and shape is the network you used it on? Do you
have any additional thoughts to share regarding the FCP?

Thanks!
Mike

-- 
************
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





Re: Fiber Cut in CA?

2010-02-01 Thread Michael J McCafferty
Michael,
We saw routes change on Level3's network about 13:40 PDT today. Routes
from San Diego to Phoenix now go up to SJC, to Denver, to Dallas, to
Phoenix. Some customers trying to reach us from Cox in Phoenix had some
issues where Cox and Level 3 peer. Overall, *we* are not down, anywhere,
but increased latency.

The most recent info we have is:

Notes : *** CASCADED EXTERNAL NOTES 02-Feb-2010 02:40:44 GMT spottsta
>From CASE: 3900562 - Event
> 02:05 GMT  Field Services is in the process digging in the Junction
box at this time. Testing will begin when fiber is accessible.
> 
> 02:23 GMT  Field Services has access to the fiber in the junction box
and has begun testing fiber at this time. 
> 
> 02:33 GMT  Field Services has isolated fiber cut to approximately
3,000 feet out from their current location at a construction site. They
are attempting to gain access to the site at this time. Field
Technicians are currently walking the route trying to determine a
restoration plan. 
> 
> Case Status: Analysis in Progress 


On Mon, 2010-02-01 at 21:17 -0600, Micheal Patterson wrote:
> Anyone have any info on a current issue with a feed apparently being cut 
> between AZ and CA that's causing problems for Cox customers by chance?
> 
>  -- 
> 
> Micheal Patterson
-- 
************
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more





RE: Fiber Cut in CA?

2010-02-02 Thread Michael J McCafferty

I believe in this case the ticket mentions it was at the site of an
"on-going water project". Contrary to what may seem logical to those not
familiar with the area, the area out that way is loaded with very
productive farm land and there are lots of aqueducts and irrigation.

Mike

On Tue, 2010-02-02 at 19:41 -0500, Scott Berkman wrote:
> Cross-country Fibers very often follow existing utility rights of way.  So 
> even in a wide open desert, the places the fibers go are the "busy" spots.  
> Sometimes its train tracks, sometimes its gas pipelines, sometimes its 
> electric, sometimes it’s a road, but very rarely is fiber like that "on its 
> own".
> 
> So the cut was likely construction on whatever the fiber was near.  The other 
> option is that the fiber provider was actually doing maintenance (adding 
> capacity, fixing a troubled strand) and did the damage themselves.
> 
>   -Scott
> 

-- 
********
Michael J. McCafferty
Principal
M5 Hosting
http://www.m5hosting.com

You can have your own custom Dedicated Server up and running today !
RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more