RE: TransAtlantic 40 Gig Waves

2009-08-17 Thread Mikael Abrahamsson
On Mon, 17 Aug 2009, Rod Beck wrote: Rod, do you know if the 40G waves increased the spectrum efficiency of your fiber? On land systems they pretty much break even, i.e. you can have a 100GHz 40G channels or 4x25GHz 10G channels but at the end of the day you still get the same amount of signal

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Kevin Oberman
> From: Brett Watson > Date: Mon, 17 Aug 2009 19:11:06 -0700 > > On Aug 17, 2009, at 5:17 PM, Paul Ferguson wrote: > > > I recall Cisco code bugs that were fixed in semi- real-time, and > > quotes > > from tli: "Code still warm from compiler. Confidence level: Boots in > > lab." > > IETF Da

RE: IPv6 Addressing Help

2009-08-17 Thread Antonio Querubin
On Mon, 17 Aug 2009, Ray Burkholder wrote: Don't we still need to subnet in a reasonably small fashion in order to contain broadcasts, ill-behaved machines, and other regular discovery crap that exists on any given segment? And if we have to segment in such a fashion, the request and allocati

Re: IPv6 Addressing Help

2009-08-17 Thread Steve Bertrand
Ray Burkholder wrote: >> Why is is necessary insist that using bits in a fashion that doesn't >> require that growth be predicated on requests for additional resources >> be considered wasteful? >> > > Don't we still need to subnet in a reasonably small fashion in order to > contain broadcasts, i

Re: IPv6 Addressing Help

2009-08-17 Thread Mark Andrews
In message <077301ca1f9d$5d6d9670$1848c3...@net>, "Ray Burkholder" writes: > > > > Why is is necessary insist that using bits in a fashion that doesn't > > require that growth be predicated on requests for additional resources > > be considered wasteful? > > > > Don't we still need to subnet in a

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Brett Watson
On Aug 17, 2009, at 5:17 PM, Paul Ferguson wrote: I recall Cisco code bugs that were fixed in semi- real-time, and quotes from tli: "Code still warm from compiler. Confidence level: Boots in lab." IETF Dallas, 1995 I think. MCI Reston engg and Cisco (Ravi and others) in the terminal room

RE: IPv6 Addressing Help

2009-08-17 Thread Ray Burkholder
> > Why is is necessary insist that using bits in a fashion that doesn't > require that growth be predicated on requests for additional resources > be considered wasteful? > Don't we still need to subnet in a reasonably small fashion in order to contain broadcasts, ill-behaved machines, and oth

Re: Request for a pointer - Linux modifying DSCP on replies?

2009-08-17 Thread James Hess
On Mon, Aug 17, 2009 at 4:19 PM, Darren Bolding wrote: > the ICMP reply leaves with the same DSCP marking. ICMPs may have special treatment. This is the kernel replying, not a user application. > However, when I do this with apache and mysql connections (TCP 80/3306), the > incoming packets are m

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Marko Milivojevic
> Confidence level: Boots in lab." One could argue that certain things haven't actually changed that much ;-). Marko. -- Marko CCIE #18427 (SP) My network blog: http://cisco.markom.info/

Re: IPv6 Addressing Help

2009-08-17 Thread Joel Jaeggli
William Herrin wrote: > The future looks a lot like the past but with more blinking lights. > Seriously, I'm pretty nuts when it comes to networking. My basement is > AS11875, multihomed with about 35mbps of bandwidth. If I can't imagine > how *I* would use more than 16 subnets then it's a safe b

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, Aug 17, 2009 at 4:26 PM, Ricky Beam wrote: > > Any respectable ISP will not load code that has not been extensively > tested. [...] Just an observation on how things have changed in ~15 years: I recall Cisco code bugs that were fixed in se

Re: bits/hz/second: we're barely more efficient than the telegraph

2009-08-17 Thread Jay Hennigan
Anton Kapela wrote: For the experts out there: how long are we going to wait for something more efficient than morse code over twisted pairs? For text messages, Morse code can be more efficient than modern encoding techniques. Morse is a variable-length code weighted to favor the more commo

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Ricky Beam
On Mon, 17 Aug 2009 18:40:39 -0400, Jared Mauch wrote: Is there some significant barrier to people getting recent code on the devices that is not impacted by this and the other fun bgp 'attacks' that can happen? In a word: YES. Any respectable ISP will not load code that has not been exte

Re: Request for a pointer - Linux modifying DSCP on replies?

2009-08-17 Thread Darren Bolding
Steve, Perhaps it is outside the DS domain, and that is the issue. It seems odd that the behavior with ICMP/Ping is different than that with TCP however. Not sure which is technically correct, but I am going to follow up on some of the pointers I've gotten to try and learn that. It just seems na

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Jared Mauch
On Aug 17, 2009, at 6:45 PM, deles...@gmail.com wrote: I'd have to _assume_ that a lot of those impacted don't have a maint contract with their router vendor of choice and therefore don't have an easy path to upgrade. -jim Cisco gives out free software upgrades for any security(PSIRT) iss

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread deleskie
I'd have to _assume_ that a lot of those impacted don't have a maint contract with their router vendor of choice and therefore don't have an easy path to upgrade. -jim --Original Message-- From: Jared Mauch To: randal k Cc: nanog@nanog.org Subject: Re: Anyone else seeing "(invalid or corr

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Jared Mauch
On Aug 17, 2009, at 5:37 PM, randal k wrote: Yep, we started seeing this right around 12:20pm MST. We saw it from a customer's rapidly-flapping BGP peer. We told them to configure bgp maxas-limit, but apparently CRS1s don't have that command. Anybody have a handy route-map that will deny anyth

RE: TransAtlantic 40 Gig Waves

2009-08-17 Thread Holmes,David A
It seems intuitive, but according to basic queuing theory splitting up a single channel into N fixed smaller channels makes the response time (T), N times worse, where T= (queuing + transmission time). -Original Message- From: Rod Beck [mailto:rod.b...@hiberniaatlantic.com] Sent: Monda

RE: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Ballard, Eric
With the help from our transit providers and Cisco TAC the issues looks to be that AS9354 is sending AS0 and causing the corruption when processed in our Cisco CRS routers. AS9354 shows to be Community Network Center Inc. (CNCI) or TDNC and directly connected to KDDI AS2516. If anyone from

Re: Request for a pointer - Linux modifying DSCP on replies?

2009-08-17 Thread Dan White
On 17/08/09 14:19 -0700, Darren Bolding wrote: I believe this is operational content, but may well be better asked somewhere else. I would love to have a pointer to another list/website. See the linux-net mailing list: http://www.kernel.org/pub/linux/docs/lkml/ -- Dan White signature.asc D

bits/hz/second: we're barely more efficient than the telegraph (Re: TransAtlantic 40 Gig Waves

2009-08-17 Thread Anton Kapela
I'll comment on both: On Mon, Aug 17, 2009 at 12:14 PM, Rod Beck wrote: > Rod, do you know if the 40G waves increased the spectrum efficiency of > your fiber? On land systems they pretty much break even, i.e. you can [rod beck replies] > The enabling technology is based on advanced encoding tech

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Joe Provo
On Mon, Aug 17, 2009 at 03:37:07PM -0600, randal k wrote: > Yep, we started seeing this right around 12:20pm MST. We saw it from a > customer's rapidly-flapping BGP peer. We told them to configure bgp > maxas-limit, but apparently CRS1s don't have that command. > > Anybody have a handy route-map t

Re: Request for a pointer - Linux modifying DSCP on replies?

2009-08-17 Thread Steve Miller
Would not the end station be considered to be outside of the DS domain? It does not necessarily make sense (to me) for reply packets to be marked unless they are appropriate classified and marked on the return path at the point they re-enter the DS domain. I would imagine that iptables and the DS

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread randal k
Yep, we started seeing this right around 12:20pm MST. We saw it from a customer's rapidly-flapping BGP peer. We told them to configure bgp maxas-limit, but apparently CRS1s don't have that command. Anybody have a handy route-map that will deny anything with a as-path longer than say 15-20? ;-) Ch

Request for a pointer - Linux modifying DSCP on replies?

2009-08-17 Thread Darren Bolding
I believe this is operational content, but may well be better asked somewhere else. I would love to have a pointer to another list/website. I am looking to do some policy routing based on DSCP marking, and I have this all working inside the networking equipment. I DSCP mark some packets at ingres

Re: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread James Bensley
Throw your coffee at them! Just my two pence ;) ...James -BEGIN GEEK CODE BLOCK- Version: 3.1 GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V- PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+) h--(++) r++ z++ --END GEEK CODE BLOCK--

RE: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Ballard, Eric
We are seeing the same thing, has anyone found the offending AS yet? Thanks ERIC -Original Message- From: Adam Hebert [mailto:a2t...@gmail.com] Sent: Monday, August 17, 2009 3:11 PM To: nanog@nanog.org Subject: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ? Multiple

Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ?

2009-08-17 Thread Adam Hebert
Multiple providers are seeing this right now. I assume someone is advertising an extremely long AS_PATH again? anyone else seeing this? Adam

[NANOG-announce] NANOG Updates

2009-08-17 Thread Betty Burke
NANOG Community: As the summer months begin to draw to a close, I hope many of you are making your plans to attend NANOG47.  It is sure to be a great program and great meeting venue for all to network.  If you have not yet sent your presentation abstract, please submit your materials to http://

Re: atac.fr DNS problem

2009-08-17 Thread Serge Vautour
Hello, Here are the full outputs. I will also try the DNS mailing list. Thanks for any help. Serge dig www.atac.fr +trace +all +norecurse ; <<>> DiG 9.3.2 <<>> www.atac.fr +trace +all +norecurse ;;

RE: TransAtlantic 40 Gig Waves

2009-08-17 Thread Rod Beck
Rod, do you know if the 40G waves increased the spectrum efficiency of your fiber? On land systems they pretty much break even, i.e. you can have a 100GHz 40G channels or 4x25GHz 10G channels but at the end of the day you still get the same amount of signal out of the fiber. I don't know whats

Re: APAC to US crawling

2009-08-17 Thread Ethern M., Lin
All I know the un-damaged cable systems are: TPE and C2C. The outage cause f FNAL is debris flow as the same as 8/7. Please have more info supplmented if you have. cheers, Ethern On Mon, Aug 17, 2009 at 8:23 PM, Jay Coley wrote: > Randy Epstein wrote: >>> Is anyone seeing a huge latency jump fro

Re: atac.fr DNS problem

2009-08-17 Thread Florian Weimer
* Serge Vautour: > Hello, > > Our AS855 can't seem to contact the DNS servers for atac.fr domains > (dns.atac.fr [62.160.25.65] & dns2.atac.fr [195.68.125.36]). From our > network, dig dies for both IPs: Please post full trace output, e.g. the result of "dig www.atac.fr +trace +all +norecurse"

atac.fr DNS problem

2009-08-17 Thread Serge Vautour
Hello, Our AS855 can't seem to contact the DNS servers for atac.fr domains (dns.atac.fr [62.160.25.65] & dns2.atac.fr [195.68.125.36]). From our network, dig dies for both IPs: -- ;; Received 401 bytes from 192.33.4.12#

Re: IPv6 Addressing Help

2009-08-17 Thread Jack Bates
Jon Lewis wrote: On Fri, 14 Aug 2009, David Freedman wrote: Will keep it simple, this is what I (and I suspect many others) do /128 - Loopback (what else?) /126 - Router p2p /112 - Router LAN shared segments (p2mp) Why even go that big on LAN segments? i.e. If you have a LAN/VLAN where you

Re: APAC to US crawling

2009-08-17 Thread Jay Coley
Randy Epstein wrote: >> Is anyone seeing a huge latency jump from Asia Pac to US again? > > > >> The above was taken from a user in China tracing to New York about 30 mins >> ago > > There was another earthquake today in Asia, this one between Japan and > Taiwan. Is this possibly related?

FW: BoF for APNIC 28 in Beijing - IPv6 Promotion

2009-08-17 Thread Skeeve Stevens
FYI for those that might be attending APNIC 28 in Beijing next week. -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists ske...@eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin

RE: APAC to US crawling

2009-08-17 Thread Randy Epstein
>Is anyone seeing a huge latency jump from Asia Pac to US again? >The above was taken from a user in China tracing to New York about 30 mins ago There was another earthquake today in Asia, this one between Japan and Taiwan. Is this possibly related? Randy

Re: APAC to US crawling

2009-08-17 Thread Ethern M., Lin
As I know, the FNAL system is down and from Taiwan to Hongkong and from Japan to Hongkong. But I don't have further info about this outage now. cheers, Ethern = Ethern Lin Network Division Computing Center, ACADEMIA SINICA Phone: +886-2-2789-9953 Fax : +886-2-2783-64

Re: APAC to US crawling

2009-08-17 Thread Mun Fai Lee
Do you have any more details of the outage? Another cut in the region? - Original Message - From: "Ethern M., Lin" To: "Mun Fai Lee" Cc: nanog@nanog.org Sent: Monday, August 17, 2009 4:55:30 PM GMT +08:00 Beijing / Chongqing / Hong Kong / Urumqi Subject: Re: APAC to US crawling It see

Re: APAC to US crawling

2009-08-17 Thread Ethern M., Lin
It seems that the FNAL system outage at 14:15 GMT+8. Not sure it is related or not. cheers, Ethern On Mon, Aug 17, 2009 at 4:25 PM, Mun Fai Lee wrote: > Is anyone seeing a huge latency jump from Asia Pac to US again? > > Sample traceroute: > > 4 2 ms 1 ms 1 ms 210.13.64.14 > 5 2 ms 1 ms 4 ms 210.

APAC to US crawling

2009-08-17 Thread Mun Fai Lee
Is anyone seeing a huge latency jump from Asia Pac to US again? Sample traceroute: 4 2 ms 1 ms 1 ms 210.13.64.14 5 2 ms 1 ms 4 ms 210.13.64.13 6 2 ms 2 ms 2 ms 218.105.0.69 7 41 ms 35 ms 35 ms 218.105.6.102 8 36 ms 36 ms 36 ms 218.105.5.82 9 36 ms 36 ms 37 ms 210.52.132.230 10 38 ms 39 ms