Re:Provider-based DDoS Protection Services

Hi, I'm very interested in technical solutions of ISP based (D)DOS solutions. Where can I find document/information on it? thanks. Joe Send instant messages to your online friends http://asia.messenger.yahoo.com

What application runs on port 8094?

Hi, Using netflow based monitor tool, I noticed there is a lot of traffic on 8094/UDP and 4662/TCP( both exceed 1Gbps, and exist all the time) What application use that port? Is there any P2P application use UDP as transportation protocol? thanks in advance. Joe

Re: What application runs on port 8094?

AIL PROTECTED]> wrote: > Hi Joe, > > Joe Shen wrote: > > Hi, > > > > Using netflow based monitor tool, I noticed there > is a > > lot of traffic on 8094/UDP and 4662/TCP( both > exceed > > 1Gbps, and exist all the time) > > > > > >

SNMP tool summrizing multiple interfaces traffic data

Hi, Beside monitoring in/out traffic on each egress links, is there a tool which could provide a summary bandwidth utilization on two or more router interfaces? thanks Joe __ Meet your soulmate! Yahoo! Asia presents Meetic - where millions

Arbor's technical support contact?

Hi, How can I contact Arbor's technical support enigneer? Joe Send instant messages to your online friends http://asia.messenger.yahoo.com

Load Balancing between multiple BGP peer connections

Hi, How could load on multiple BGP peer links be balanced automatically? The situation we are facing: ---| | Service provider| | | --R1R2--- |\

Tools classifying network traffic to applications

Hi, As I know there is tools designed to analyze VoIP traffic, but for viewpoint of traffic management this is not enough. Is there tool which could classify network traffic to its applications? e.g. the tools catch network traffic and recognize its application type automatically. If 80% of (80/

Re: Tools classifying network traffic to applications

hi, > > Christopher L. Morrow wrote: > > >>which can't really tell bittorrent (or ssh or aim > or...) over tcp/80 from > >>http over tcp/80... I think Joe's looking for > something that knows what > >>protocols look like below the port number and can > spit out numbers for > >>that... these, it

First step of network optimization

Hi, this may be a OOO..LD topic which is talked, discussed or agrued for year. ISP networks may need to be optimized continuously. But, it seems people have different view of optimization when they use this word at different place; sometimes optimization means adding more access router, add more

Re: First step of network optimization

Thanks for the response. > > You want to optimize for the lowest monetary cost > network that still allows you > to meet all the SLA's you've negotiated. And this > depends on what you > negotiated - for instance, if the SLA specifies 3 > 9's of reliability, spending > money to build a 4 9's ne

estimating VoIP data traffic size from VoIP signaling traffic size ?

Hi, is there any statistics on aggregated VoIP signaling bandwidth and aggregated VoIP data bandwidth? eg. if we monitored there is 2Mbps(average) traffic on VoIP signaling protocol ports ( including SIP, H.323, MGCP), how could we estimate average VoIP data bandwidth? Joe

To get internet full routing table

Hi, Is that possible to get full internet routing table without help from upstream ISP? or is there anyway to get some backbone network's internet routing table directly? thanks Joe Send instant messages to your online friends http://asia.messenger.yahoo.com

P2P & Skype traffic control in ISP networks

it seems some ISPs have started to introduce management facilities into their networks. Is those products of carrier level? reference: http://webreprints.djreprints.com/1341970908457.html Joe __ Do you Yahoo!? New and Impr

Re: the iab simplifies internet architecture!

Maybe Bob Braden's presentaion in e2e task group could do some help. In fact, they just start to discusss what will be the next generation architecture, but does not reach agreement at all. http://www.isi.edu/~braden/e2e-tf/braden.newarch.ppt Joe --- Randy Bush <[EMAIL PROTECTED]> wrote: > >

Re: QoS for ADSL customers

> > While some people will cry network neutrality and > think the Yellow Pages > must sell only one size listing, some people are > willing to pay for > differentiated service. Trying to classify "bad" > traffic can be > done using products like Sandvine. But it may be > easier to classify "pr

RE: QoS for ADSL customers

Could IPtables control traffic with inspecting layer7 information? As someone suggested, bandwidth allocation could be done with TCP protocol control ( ACK dropping or so); How can we do that? NBAR only limit the bandwidth, and to our experience with cisco7609 it cost a lot of cpu time! Whe

Re: Two Tiered Internet

What I'm interested in is how the two service providers will build a two tiered Internet. To our experience, current QoS mechanism ( WRR + multiple_Queue) could not differentiate service quality when bandwidth is overprivisioned. If there is congestion, why should I stay with it while there is a

identifying application type of network traffic

Hi, I'm trying to identify applications which generate those traffic on our border routers. I use sampled netflow as data source and some flow-tools as analizer. Currently, I use (protocol, port_number) as indicator of application. Referring to rfc on wellknown protocol and port allocation, I

RE: identifying application type of network traffic

Thanks for all your reply. My situation is not to apply QoS policy to those application but to get statistics of applications. According to netflow records, the traffic across our egress interface has port number range from 11 to 65534 , there is record for port 0! So, what are those applicatio

Re: Anycast 101

My question: I noticed that people always talked about BGP when they talked about anycast dns server farm. But, is there any problem or anything must be taken care about when anycast is employed within a DNS server farm within MAN? What I mean is, if we want to employ anycast in a cache serv

Topology of current network

Hi, I'm looking for information on backbone/PoP topology . To my memory there is a web has a lot of topology graphs but I can't call it. Could anybody do some help? thanks Joe __ Do You Yahoo!? Log on to Messenger with your mobile phone! ht

Re: Anycast 101

Hi, That's what I want to discuss about. The paper gives a very detailed explanation on anycast with OSPF_ecmp, and what I want to know is: is there anything not included in it but must be considered carefully when anycast cache server farm is to be established in MAN ? Will there be any prob

Re: Anycast 101

I don't think PPLB is compatible with anycast esp. in situation when we consider end-to-end communication with multiple packets. As PPLB may derive to out-of-sequence between TCP pacekets & different DNS server destination of the same UDP stream, it will broke anycast DNS service in some situa

Measure overall network availability

Hi, is there any recommended method to measure overall network availability? Currently we use packet loss rate as indication of network availability, but to my understanding this just means the possiblity of e2e communication degrade but not the network availability. regards Joe

Is current DDoS detecting method effective?

Hi, I use flow-tools to monitor the link bandwidth utilization on three backbone interfaces. The total bandwidth utilized is about 11Gbps, and netflow data is analyzed to show statistics on some special port (e.g. port 0, port 445 etc.). I think this could give us some indication of possible DoS

Re: Is current DDoS detecting method effective?

Hi, > It frightens me that you're sitting on 11Gb/s+ and > unable to utilize > existing toold to determine what is within profile > for your network and > what is not. That what makes me think it's not possible to determine "legal" traffic model by available tools. The total BW keeps increasi

Re: Is current DDoS detecting method effective?

Hi, > > you aren't distinguishing between 'dos attack' and > 'scan' or 'probe' or > 'welcome to the Internet!' traffic. The Arbor > systems may see 'scan' > traffic (depending upon sample rates and traffic > loads) and they may > not... They aren't designed to see that, they are > designed to:

How to identify interconnection relationship between AS?

Hi, I'm trying to identify how an AS is interconnected with other ASes. For example, I can access our border router which has BGP run, and I want to know how another AS ( e.g. 1234 ) is connected to internetwork ( e.g. as1234 interconnects with as1235, as1236, as1345 ). How can I do it?

Traceroute with ASN

Hi, maybe this is a OLD question. But, where can I get a traceroute program which can show ASN beside each hop IP address? I know router with full BGP routes could traceroute with ASN, but can a linux box do the same? thanks Joe __ Do You Yah

Re: Traceroute with ASN

Yes. Can I do this on a Linux box without having to install Zebra BGP on it? Joe > > Something like this? > > [EMAIL PROTECTED] root]# lft www.level3.net -A > > Tracing . > > TTL LFT trace to Level3.com (209.245.19.41):80/tcp > 1 [AS24730] amsterdam-c1-f1.prolo

Intradomain DNS Anycast revisited

Hi, I'm trying to set up a anycast DNS server farm for customer service. In order to improve availability, we plan to install those servers in one LAN which has the similar structure like : server-(1,3)---switch1---router-1---(outside) | | server-(2,4)---switch

Re: Intradomain DNS Anycast revisited

thanks. > No, because both routers are reached through the > same L1/L2 medium, so > Quagga can't use link-state to determine > reachability of the next-hop. > You could fix that by getting rid of the switches, > and just having a bunch > of router interfaces facing two Ethernet interfaces > on

Re: Schneier: ISPs should bear security burden

Hi, maybe this is an OLD topic, but the problem is "what is security? " or "how to define a secure internet access service ". E.g. should ISP respond for managing application transmitted across its backbone? if so, how to define "standard" appliation model while keeping internet a flexible platfo

Detecting VoIP traffic in ISP network

Hi, we want to collect statistics in our backbone networks. Is there any good method to this? is there any product for this ? Joe _ Do You Yahoo!? 嫌邮箱太小？雅虎电邮自助扩容！ http://cn.rd.yahoo.com/mail_cn/tag/10m/*http://cn.mail.yahoo.com/event/10

Re: Detecting VoIP traffic in ISP network

e traffic should be carried at the best performance/cost rate. joe --- Suresh Ramasubramanian <[EMAIL PROTECTED]> wrote: > Local telco concerned about voip eating into their > revenues, and wants > to push through legislation or something? :) > > On 4/27/05, Joe Shen <[E

watchdog of BIND server

Hi , currently, I run named with -f option. As named is started at system boot time, a starting up script hang around console is a possible problem for system administration & security. Is there any configurable watchdog of BIND server deamon? E.g. once it found named is down, it will shutdown

Malicious DNS request?

Hi, In past days I noticed the nxdomain statistics in named.stats keeps increasing.( I run it every 5 min) By tcpdump, it's found a remote computer keep asking address for record like 999d38e693b9e6293b450.0existence.com, 60d38e693b9e6293b450.0be6c1xfa.net. is that a virus affacted computer?

Re: Malicious DNS request?

Hi, thanks for your help. I noticed that the requests of those non-exist domain name disappeared yesterday. But the NXDOMAIN record in named.stats keep increasing. ( see attachment) I'm using BIND9.2.5 & BIND9.3.1 on two Solaris box, each box has two CPUs installed. it's found BIND8.4.6 running

Re: Malicious DNS request?

Sorry to attach the "rndc stats" result. I run "rndc stats" continuously( interval is less than 2 seconds), it's shown: success 17950622 referral 225680 nxrrset 1691861 nxdomain 11203490 recursion 3648017 failure 1363923 ... --- Statistics Dump --- (1116319437) +++ Statistic

Re: Malicious DNS request?

Sorry to attach the "rndc stats" result. I run "rndc stats" continuously( interval is less than 2 seconds), it's shown: success 17950622 referral 225680 nxrrset 1691861 nxdomain 11203490 recursion 3648017 failure 1363923 ... --- Statistics Dump --- (1116319437) +++ Statistic

Re: Malicious DNS request?

ay be type of attack. If we only rely on cacheing to remove paient of CPU time, cache server load will be increased. So, what I'm tryting to ask is , is there some mechanism proposed to deal with such problem? BIND is just a sample. joe --- Paul Vixie <[EMAIL PROTECTED]> wrote: &

Is my BIND Server's Cache Poisioned ?

Hi, I met a strange problem with my cache server, which runs BIND9.3.1. In past days, our customers complaint that three domain names (www.hangzhou.gov.cn, www.zpepc.com.cn) could not be resolved frequently. I checked on the cache server and found, when the cache server could not resolve www.han

Re: Is my BIND Server's Cache Poisioned ?

Hi, thanks for the help. > > Because IPv6 aware nameservers make queries > for the > IPv6 addresses of the nameservers and as a result > see the > NXDOMAIN / CNAME. The IPv4 only nameservers don't > make > these queries, as a matter of practice, and only > see the

Enable BIND cache server to resolve chinese domain name?

Hi, Some of our customer complaint they could not visit back to their web site, which use chinese domain name. I google the net and found some one recommend to use public-root.com servers in hint file. I found domain name like xn--8pru44h.xn--55qx5d could not be resolved either. Our cache ser

Re: Enable BIND cache server to resolve chinese domain name?

Hi, > > Only if you wish to do all your other customers a > disfavour > by configuring your caching servers to support a > private > namespace then yes. > The problem is chinese domain name is hosted and could be registered by people around. So, we just have to enable

Catalyst6509 GE interface hang without any indication

a favor to do some help? Each word will be highly appreciated. regards Joe Shen / info for the first Catalyst 6509C-SUP-hz> sh ver WARNING: This product contains cryptographic features and is subject to U

Re: Akamai DNS issue

Confirm here in China. mail.yahoo.com is not reachable. I met this problem with www.toshiba.com about a month before, when www.toshiba.com could only be resolved by using AT&T's DNS server cache. joe Msg sent via Spymac Mail - http://www.spymac.com

Best Pratice for MAN security?

Hi, Is there any paper/document on best-pratice for MAN security? Is there a recommended version list for IOS or Juniper OS? thanks in advance joe Msg sent via Spymac Mail - http://www.spymac.com

Re: what's going on with yahoo and gmail lately?

As mail.yahoo.com directs incoming login/mail_box_accessing request to some other host, the long latency of DNS resolution time may derive to timeout of webpage access.  I solve this problem by set those name-to-ip record in /etc/hosts before ( a bad choice, :-() A question out of focusing, who

RE: Unplugging spamming PCs

Hi, >Mail servers should be registered just like domains and shutdown by a >registrar if they are misusing their registered services. This really >needs to be handled by a multi-lateral legal solution, industry will not >fix it alone. No, I don't think this is good solution First of all, we co

Strange behavior of Catalyst4006

hree servers. But, why it could be solved by restart catalyst interface? Would you please do some help? ( I attach system info below) Joe Shen ==-= 4006#sh version Cisco Internetwork Operating System Software IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), Ve

RE: Strange behavior of Catalyst4006

2, or is it 10.10.1.124? > 10.10.1.122 is a host address in the 10.10.1.120/30 subnet. > 10.10.1.124 is a /30 network. Either way, you're dealing with two > different subnets. Oddly, it's working sometimes. On top of that, we have this discrepancy: On Monday, 2004-06-28 at 19:01

Relationship between DNS requests and server's CPU load

Hi, I want to know, is there any research or analysis on relationship between DNS server load ( e.g. CPU load, Memory utilized) and incoming DNS resolution requests ? Besides those research on name system architecture and cache policy, is there any guideline on planing or optimizing dom

Relationship between DNS requests and server's CPU load

Hi, I want to know, is there any research or analysis on relationship between DNS server load ( e.g. CPU load, Memory utilized) and incoming DNS resolution requests ? Besides those research on name system architecture and cache policy, is there any guideline on planing or optimizing dom

Re: That MIT paper

Hi, >The paper doesn't pass any judgement on types of lookups, but obviously >not all DNS lookups are equal from the end user perspective. In our observation, looking for IP address consists 70% of our cache server load, MX consists of 14% and PTR only occupies 5%. And, on the other hand, the

Domain Name System protection

Hi, We are trying to extend our DNS service system in near future. In current stage, it consist of 2 SUN FIRE Server with Solaris8 and BIND9 installed. Each server is configured with a IP address which is known to our customers. The DNS server is set up as Cache Server because it only servers our

Summary with further Question: Domain Name System protection

Hi, thanks for your help on my question. After reading carefully those comments, I reach the following conclusion: 1. ISPs use firewall to protect their DNS server; 2. ACL on router may be a good solution for protecting DNS servers, the policy could be "only pass those packets, whose originat

Re: Summary with further Question: Domain Name System protection

Hi, > > in situation of DoS attack or situation of high > > session rate; > > Routers with hardware based access lists. No > problem. What I'm not sure about ACL on router is, how to survive DNS server under DoS/DDos attack. We suffered from DoS attack last year, and we found the source IPs of

Re: OT - 3 Free Gmail invites

Gmail seems to be in Beta stage. I got a Gmail account months ago, but I do not use it by now. The reason is it does not solve two bugs I met. The first is, after logining into gmail it will prompt with "Ooops, the system was unable to perform your operation. Please try again in a few seconds" if

Re: OT - 3 Free Gmail invites

it been since you have used it? > What browsers were you using? > > I have had a few issues but they have all been > resolved so Im unsure as > to were your problems stem from. > > Just curious. > > Andre > > On Thu, 2004-08-19 at 02:28, Joe Shen wrote: >

WRED and QoS provisioning in ISP network

environment? esp. in DiffServ network 5. Is there any possible security problem in a QoS enabled network? 6. How could we optimize network architecutre according to QoS policy? Each word will be highly appreciated. Joe Shen __ Do You Yahoo!? Download

QoS Service and montoring methods

Hi, I'm woring with QoS level analysis in ISP networks. But I don't know where could I find infomation on the following questions: 1. Is there a list of ISPs providing QoS in their networks? 2. Where could I find detailed infomation on QoS level parameters in those ISPs who do QoS? e.g.,( e2e

Re: DNS Weather Report 2004-09-07

What does "find" in the report mean? no lookup timeout or no out-of-sync? Joe --- Daniel Roesen <[EMAIL PROTECTED]> wrote: > > DNS WEATHER REPORT for selected infrastructure zones > > Issue 2004-09-07 > > Zones analyzed and their SOA

Gb ethernet interface keeping dropping packet in ingress

Hi, I'm using Harbour 10G lay3 switch which interconnects a Catalyst6509 and a Foundry switch. the interconnecting lines are all 1Gbps ethernet (1000Gb LX). Catalyst6509Harbour 10G switchFoundry Switch---Firewall the firewall and harbour interconnect at layer 3. We noticed there is

Re: Gb ethernet interface keeping dropping packet in ingress

Hi, we do not sniffing the Gbps ethernet link, and the box I mentioned in previous message is not oversubscribed at all. In fact, the 10Gbps switch is newly installed and only two link connected ( one to catalyst6509, one to firewall). Anyway, thanks for your analysis and I want to know what's

Re: EVENT - Building a network and system management open source tool - talk at BayLISA, Cupertino, California, USA, Thursday 16 Sept. 2004 19:30-21:00

In those network administration software it seems configuration management, e.g. periodic backup, integrity checking etc, is not covered. Is that possible to include this ? Joe --- Philippe Ombredanne <[EMAIL PROTECTED]> wrote: > > If you are in the San Francisco Bay Area, you can > join us

RE: Email Complexes

Hi, Is there any free tools or methods to measure SMTP performance and email service quality between two email server ? Is there any implementation of message track? thanks Joe --- "Hosman, Ross" <[EMAIL PROTECTED]> wrote: > > I've gotten a few emails asking why we are doing > this. > >

Re: Network Configuration Management Practices

There has been some public available software for backing up Cisco router configuration. The backup is not in CVS but in plain file. Joe --- Alexei Roudnev <[EMAIL PROTECTED]> wrote: > > Hmm, there are many approaches, starting with _what > is primary_ (in Moscow's > ISP files was prima

Re: Excessive Internet Traffic

Is that a variant of Nachi B. ? The source address may be generated. joe --- Robert Scott <[EMAIL PROTECTED]> wrote: > > The University of Central Florida has seen a sudden > jump in tcp 445 > denies. It began a little after 9:00 AM EDST. New > Worm? > > I am denying about 32 thousand packet

Log Analizing tool for Cisco and Juniper router (switch)

Hi, We want to analize log from Cisco and Juniper Router and switch periodically. We have set up a Solaris box to collect all those log generated by Juniper router ,Cisco Router , cisco L2/L3 switch. But, we found log file format diverse greatly even between Cisco products. Is there any good t

Question on IP address used by anycast DNS cache server

Hi, I'm , but I met some questions when reading those paper from ISC on F-root anycasting. 1. As it's descripted in J.Abley's paper, DNS server in anycast group should be configured with a real IP on its NIC and one or two service IP on loopback interface(s). BIND listen on both real IP and serv

why upload with adsl is faster than 100M ethernet ?

Hi, I met a question with upload speed and network access speed. One of our customer lease two lines from us. One is 2Mbps ADSL line the other is 100Mbps fiber ethernet link. The customer needs to upload files to server in Japan usually. Now, the customer complaint that the upload speed of A

Re: why upload with adsl is faster than 100M ethernet ?

Hi, the network path is: |-(ADSL)\ customer/ --Edge_router---...---Japan Server \-(100Methernet)-/ So, from edge_router to Japan server the path is identical. > > There is something wrong with both scenarios. > > A 5 Mbyte file is 40 megabits. W

Re: why upload with adsl is faster than 100M ethernet ?

> > It's generally a bad idea to turn of ethernet > autonegotiation unless > the equipment at the other side doesn't support it. > Yes, we've checked the configuration, both access router interface and customer's ethernet interface are forced to be (100Mbsp, full duplex). And, there is no CRC

Is those ICP crazy -- 10GB free emailbox?

Hi, I just received an email from one of my friends and he told me http://www.hriders.com/ is providing free 10GB email box for subscribers. Is that crazy in competition of BIG size free email account? Joe __ Do You Yahoo!? Log on to Messenger wi

Re: Network Monitoring System - Recommendations?

I read document of these tools and find they work with Cisco products. But, how about Juniper M160 or M320, Unishpere's BRAS products? Where can I find Juniper's OID on its tempreture, chassis, CPU, bandwidth ? Does anyone have a running configuration for M160 or Unishpere's BRAS products? On

Re: Network Monitoring System - Recommendations?

Hi, I googled with "CCR" but it seems nothing useful in 5 pages. Would you please do me a favor to give the URL of that tool ? I tried to set up MRTG monitoring Unishpere BRAS 1400 and M160, but I failed with data collection because wrong OID used ( CPU, mem, tempreture, BW etc ) :-( regards

Re: why upload with adsl is faster than 100M ethernet ?

> On Fri, 15 Oct 2004 00:14:11 -0800, Joe Shen wrote: > >|-(ADSL)\ > > customer/ > --Edge_router---...---Japan Server > > \-(100Methernet)-/ > > > it is probably worth doing an experiment, by placing > a target h

How to Blocking VoIP ( H.323) ?

Hi, How could it be done to block VoIP at access router? I've thought about using ACL to block UDP port 1719,but this could be overcome by modifying protocol port number. regards Joe __ Do You Yahoo!? Log on to Messenger with your mobile phon

Re: How to Blocking VoIP ( H.323) ?

o Blocking VoIP ( H.323) ? > > > > On Thu, 11 Nov 2004, Robert Mathews wrote: > > > > > > > > > To Joe Shen: > > > > > > Perhaps 'I am failing to see it' but, what can > be gained by blocking VoIP > > > traffic other than freeing bandw

Re: Problems receiving emails from china...

Hi, Is there similar problem existing with sending email to email server inside china? maybe you could check end-to-end delay and packet loss rate. Another method, ask your customer to cut the attachment to several parts and send them seperately. Joe --- Lou Laczo <[EMAIL PROTECTED]

Netflow analysis best pratice and tools ?

Hi, We plan to set up netflow analysis in our backbone. It's hoped to be able to track communication demand inside our AS as well as our AS and other ASes. It also expected to be able to support route optimization and to detect abnormal network behavior . And, report generation is needed too.

Need help on process netflow sampling data

Hi, I'm trying to analize our egree router traffic by using flow-tools and CUFlow. There are three edge routers: two Juniper M160 and one Cisco GSR. All of them are set up to sample outgoing interfaces. With Juniper M160, I set up forwarding-option as: = forwarding-

How to monitor BGP route stability ?

Hi, Is there any tool to monitor BGP route stablity? thanks Joe __ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

4 GB interface s HSRP with two Class C address block

-B either. How could it done? Each word will be highly appreciated. Regards Joe Shen Msg sent via Spymac Mail - http://www.spymac.com

Re: CiSCO IOS 12.* source code stolen

Hi, What makes me excited at this news is, is there a chance to learn details of IOS which may be one of most successful protocol implementations. And, if such code is available to both college and engineers it will surelly do good to our life. So, I'll be glad to see the releasing of

Gmail Contact and Gmail bugs

Hi, Is there way to contact Gmail? Message in my gmail account could not be access for three days. When I tried to click on any message ( or search, move to othe folder .. ) it always pop up with " Ooops, the system was unable to perform your operation.Please try again in a few seconds". Joe

Re: DOS attack against DNS?

Last saturday one of our Web server experienced a TCP SYN attck which make the system down for four hours. It seems there is not a good solution which could detect & defend DoS traffic at any time. So, to the class ANY queries, should we only filtering out class any queries on public cache serv

dnsauth3.sys.gtei.net DNS record is poisoned???

Hi, Today, some of our customers could not resolve state.gov by our cache server. I found state.gov is served by dnsauth1.sys.gtei.net, dnsauth2.sys.gtei.net, dnsauth3.sys.gtei.net. Using some others' DNS servers I found their IP addresses should be 4.2.49.2, 4.2.49.3, 4.2.49.4. But, our cache

Identify amount of traffic to special IP address in Radius

Hi, In order to summrize broadband subsciber's traffic data, we need to identify those traffic to our video servers by BRAS which use Radius. Currently, our BRAS could only report total amount of traffic a subscriber transferred. Could we make BRAS genenrate radius accounting data including tag

Re: FYI - China To Launch Alternate Country Code Domains

I've read the public announcement of Chinese Ministry of Information Industry. It just state that: there will be another sub-domain mil.cn created besides another six english lettter sub domain in .cn And, it also states: three Chinese Character TLD is establish which is "China"/"Cooperation"/"Ne

Re: Identify amount of traffic to special IP address in Radius

> why in the world > would you want to do something like that rather than > have another > device generate flow records which you then can > correlate with RADIUS > accounting data? > The reason is the cost of system building. As there are a lot of broadband subscribers, if we want to core

Security problem in PPPoE connection

Hi, We are facing problem with PPPoE in ethernet access network. To provide high speed access, 10Mbps/100Mbps ethernet is used as access method. But, we found some guy 'steal' some other's account by listening to broadcasting packets, and they also set up 'phishing' PPPoE server to catch those

Re: Security problem in PPPoE connection

> >What's your method to deal with such problem? Will > CHAP in PPPoE help? > > That may help against password sniffing but won't > help against sniffing > traffic by an active attacker once the session has > been established. > Also, you'll have to revisit all CPE to explicitly > disable PAP,

Security control in DSL access network

Hi, Is there any books or papers on carrier level DSL access network and LAN access network? Specifically, it should analysis the futures of DSL network and security problems in DSL networks. Joe __ Meet your soulmate! Yahoo! Asia presents M

Anycast applicable to Radius Server Farm ?

Hi, we have a radius server farm. there is a L4 switch installed behind all servers. Incoming AAA packets are switched by L4 switch to different servers. In previous days we met a couple of problems with L4 switch which degraded our service a lot. Could it be possible to implement IPv4 Anycas

Re: Anycast applicable to Radius Server Farm ?

e > RADIUS, things like EAP that require multiple > exchanges of RADIUS > requests typically require state to be maintained in > the single > RADIUS server that is processing the entire EAP > sequence. > > regards > > Hugh > > > On 8 May 2006, at 14:07, Jo

Re: Anycast applicable to Radius Server Farm - further questions?

> > > JS> Could it be any problem with AAA procedure? > > UDP is anycast-friendly. Your biggest problems are > likely to be > authentication database replication/synchronization > and merging > accounting records... i.e., nothing really different > from standard > RADIUS deployments. What I m

question on algorithm for radius based accouting

hi, I 'google' algorithm for radius based accounting. but can't find anything. My question is: what's the best algorithm for constrcting broadband access record from radius accouting packets? To my knowledge, some system takes: Record Accouting-on packet arriving time -> re

Tools to measure TCP connection speed

hi, is there any tool could measue e2e TCP connection speed? e.g. we want to measue the delay between the TCP SYN and receiving SYN ACK packet. Joe __ Search, browse and book your hotels and flights through Yaho

  1   2   >