Re: anti-ddos test solutions ?

2010-03-17 Thread kowsik
http://labs.mudynamics.com/2009/04/10/ddos-testing-network-applications/ http://www.pcapr.net/dos YMMV, but mudos converts *any* IP packet into a DoS generator (it's free). K. --- http://www.pcapr.net http://labs.mudynamics.com http://twitter.com/pcapr On Wed, Mar 17, 2010 at 11:28 AM, Stefan Fo

Announcing: Ruby API for xtractr

2010-03-17 Thread kowsik
What started off as a way to unit test the RESTful API for xtractr has now turned into a Ruby gem that we are releasing as open source. First xtractr, then nuggets and now a gem. We are happy to announce a Ruby gem for xtractr which takes all the goodness of Ruby and interacts RESTfully with xtrac

Re: IPv6 in Education Question

2010-03-17 Thread Xiaoliang Zhao
> End-to-end transparency means that IPv6 supports peer to peer naturally. > That means everyone (students, teachers, parents etc) can talk to each > other more easily without having to involve third parties, and can talk > to each other from anywhere on the globe. Less mediation, more direct, > mo

RE: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Richard Golodner
Move this to FD, please. On Thu, 2010-03-18 at 03:58 +0100, Guillaume FORTAINE wrote: > Do you have any concern against fat dudes ? > Best Regards, > Guillaume FORTAINE > > > > From: charles.chu...@harris.com > > To: char...@knownelement.com; gfo

Re: CSIRT - Backbone Security : Runtime Monitoringand DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Tammy A. Wisdom
do you have brain damage or something? did you eat lead paint chips as a kid? parents drop you too much? I swear take a f***ing hint idiot. PS welcome to my killfile and the AHBL GO AWAY!!! --Tammy - "Guillaume FORTAINE" wrote: > This is really not funny. > > Especially coming fro

RE: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
Do you have any concern against fat dudes ? Best Regards, Guillaume FORTAINE > From: charles.chu...@harris.com > To: char...@knownelement.com; gforta...@live.com; nanog@nanog.org > Date: Wed, 17 Mar 2010 20:42:49 -0400 > Subject: Re: CSIRT - Backbone Secur

Re: CSIRT - Backbone Security : Runtime Monitoringand DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
This is really not funny. Especially coming from a monkey with a "fixurpc" pattern in his email address. My friend, I believe that I can give you a serious course in Computer Architecture ;) ! Best Regards, Guillaume FORTAINE On 03/18/2010 03:11 AM, Joe wrote: Ok, off topic, but hey, its St.

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
Dear Mister Amodio, Thank you for your reply. http://66.102.9.132/search?q=cache:uh4LLvF7vGUJ:www.gtld-mou.org/gtld-discuss/mail-archive/08015.html+"Information+Network+Engineering+Group"&cd=3&hl=en&ct=clnk Jeff Williams' FAQ. (99/01) -- 1. Who is Jeff Williams? Jeffrey A. Williams, , has cl

RE: CSIRT - Backbone Security : Runtime Monitoringand DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Joe
Ok, off topic, but hey, its St.Patricks day gotta have a laugh. His responses remind me of this fellow in Nigeria. He (Prince Tatobany) really needed my help, and thankfully I was there to lend a hand. Hopefully someone will help him out with his endeavors and his spam ^h^h^h^h information. R

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Jorge Amodio
Lets do something, here is somebody that can help you with your projects. Call INEG INC at 214-244-4827 and ask for Jeffrey, he is the CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. I'm almost sure he will be a perfect match for what you are l

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
Misses, Misters, There are people who know my name but theirs isn't familiar to me. Especially, they are mentioning really old stuff. I am asking myself : a) Why do they remember me ? b) How do you remember me ? My new "vaporware" is there my friend : http://www.invea-tech.com http://www.

Any old Nokia DSLAMs gathering dust?

2010-03-17 Thread Michael Sokolov
Hello NANOGers, I wonder, would anyone here happen to have an unused Nokia / Diamond Lane Speedlink DSLAM chassis that's laying around gathering dust and which you wouldn't mind donating to an open source xDSL CPE project? Just wondering if anyone here might perchance have one they are trying to

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Nathan Ward
Dig up. On 18/03/2010, at 2:32 PM, Guillaume FORTAINE wrote: > Misses, Misters, > > I have read with interest what everybody told in this thread and it seems > that they consider everything new as spam. > > My conclusion is that they fear what it is new. > > Best Regards, > > Guillaume FORTA

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread George Imburgia
On Thu, 18 Mar 2010, Michael Sokolov wrote: His habit of addressing everyone as "Mister" is peculiar indeed, but maybe he is really just very new to the customs and conventions of the Anglophone Internet community? Probably not. He has been trolling techie lists for a few years. Some of hi

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
Misses, Misters, I have read with interest what everybody told in this thread and it seems that they consider everything new as spam. My conclusion is that they fear what it is new. Best Regards, Guillaume FORTAINE On 03/18/2010 02:09 AM, Michael Sokolov wrote: My spammy sense is going nu

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Brielle Bruns
On 3/17/10 6:09 PM, Michael Sokolov wrote: My spammy sense is going nuts just at the whole ALL CAPS of this guy's last name. I thought all-uppercase last names were a traditional French convention... This guy is French, isn't he? - judging by his name. His habit of addressing everyone as "Mist

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Michael Sokolov
> My spammy sense is going nuts just at the whole ALL CAPS of this guy's > last name. I thought all-uppercase last names were a traditional French convention... This guy is French, isn't he? - judging by his name. His habit of addressing everyone as "Mister" is peculiar indeed, but maybe he is r

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Brielle Bruns
On 3/17/10 5:26 PM, Richard A Steenbergen wrote: On Thu, Mar 18, 2010 at 12:18:40AM +, char...@www.knownelement.com wrote: Mods, Can we get the spam off the list? Its getting old. FYI this guy has been spamming individuals and PeeringDB contacts for a couple months now too. My spammy s

Re: CSIRT - Backbone Security : Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems

2010-03-17 Thread Larry Sheldon
[bagged and tagged] Yes the spam is annoying. It is annoying that the moderators have let go on a lot longer than they have some operational discussions. But what is REALLY annoying is the people who quote the crap around my filters after I have had to take local action to staunch the flow. And

Re: CSIRT - Backbone Security : Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems

2010-03-17 Thread Jorge Amodio
What happened, the old OEM PowerPC cellphone gig didn't work out ? Seriously the Obeseus document you keep promoting is 100% useless. Cheers Jorge On Wed, Mar 17, 2010 at 6:14 PM, Guillaume FORTAINE wrote: > Misses, Misters, > > Let me introduce myself : Guillaume FORTAINE, Engineer in Computer

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread Richard A Steenbergen
On Thu, Mar 18, 2010 at 12:18:40AM +, char...@www.knownelement.com wrote: > Mods, > > Can we get the spam off the list? Its getting old. FYI this guy has been spamming individuals and PeeringDB contacts for a couple months now too. -- Richard A Steenbergenhttp://www.e-gerbil.net/ra

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems

2010-03-17 Thread charles
Mods, Can we get the spam off the list? Its getting old. --Original Message-- From: Guillaume FORTAINE To: nanog@nanog.org Subject: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems Sent: Mar 17, 2010 5:14 PM Misses, Misters, Le

Re: IPv6 in Education Question

2010-03-17 Thread Mark Andrews
In message , Brandon Kim writes: > > > Jens: > > There some ISP's trying to push IPv6. Probably not until the masses really = > demand it in someway. > Or if Google pushes it or some well known company. Perhaps maybe an applica= > tion that is IPv6 specific Google is pushing it. The probl

CSIRT - Backbone Security : Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems

2010-03-17 Thread Guillaume FORTAINE
Misses, Misters, Let me introduce myself : Guillaume FORTAINE, Engineer in Computer Science. Me and my partners, INVEA-TECH (please see the attached file invea.pdf) [0] and Cognitive Security (please see the attached file cs.pdf) [1], are currently working on High-Speed Network Security Solutions

Re: Youtube CSIRT - Backbone Security : Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems

2010-03-17 Thread Nathan Hickson
Hello Mister. Please refer to: http://nanog.org/mailinglist/ Specifically... Acceptable Use Policy "5. Product marketing is prohibited." and "7. Using list as source for private marketing initiatives is prohibited." I don't appreciate you harvesting my email address for the purposes prohibited a

RE: IPv6 enabled carriers?

2010-03-17 Thread Ryan Gelobter
NTT offers IPv6 Ryan G Limestone Networks, Inc. www.limestonenetworks.com Simple.  Solid.  Superior. -Original Message- From: Charles Mills [mailto:w3y...@gmail.com] Sent: Wednesday, March 10, 2010 1:01 PM To: NANOG list Subject: IPv6 enabled carriers? Does anyone have a list of carrie

Re: IPv6 in Education Question

2010-03-17 Thread Karl Auer
On Wed, 2010-03-17 at 13:58 -0500, Todd Christell wrote: > So Im giving an introductory talk on IPv6 for a state wide conference > for tech coordinators for education. I have the usual catechism of > reasons/advantages from the network side but was wondering if there > were any good education spec

Re: Recommendations for reverse DNS providers

2010-03-17 Thread Brielle Bruns
Same general practices for forward dns apply to reverse as well - you should have a secondary on a separate netblock/provider/connection from the master nameserver. Also depends on what's going to be on the netblocks your hosting rdns for. If its a bunch of mail servers, rdns is kinda importan

Re: Recommendations for reverse DNS providers

2010-03-17 Thread Gregory Hicks
> Date: Wed, 17 Mar 2010 16:08:03 -0700 > From: Mike Lyon > > Hello, > > I am curious what folks recommend these days for reverse DNS > providers? UltraDNS? FreeDNS? BIND No difference between a forward and reverse zone to BIND. Both work well... > > Thank You, > Mike -

Recommendations for reverse DNS providers

2010-03-17 Thread Mike Lyon
Hello, I am curious what folks recommend these days for reverse DNS providers? UltraDNS? FreeDNS? Thank You, Mike

Re: ISC DHCP server failover

2010-03-17 Thread Raymond Dijkxhoorn
Hi! I am wondering if anyone has implemented the failover features of ISC DHCP? And if so, how successful has failover been in your environment? We run it on various locations and this works pretty well. Student dormitory's, and so on. Bye, Raymond.

Re: IPv6 in Education Question

2010-03-17 Thread Brandon Penglase
Todd, Cisco is offering a 4 part series of Webcasts about IPv6 for Education. I've watched the first two, and they haven't really been too vendor specific, but some of it has been insightful, especially from an Education standpoint. The first two are up on the web, and the last two are comi

Re: IPv6 in Education Question

2010-03-17 Thread Antonio M. Moreiras
It is such a great opportunity. I had chance to give similar speeches in Brazil last year, and choosed to stress the following topics, besides the basic catechism: - IPv6 is inevitable, it is already part of Internet, and will be fully deployed in few years. Its deploying is slow, but the momentum

Re: Signing of the ARPA zone

2010-03-17 Thread Joe Abley
Colleagues, This is a follow-up to the operational announcement regarding changes to the ARPA top-level domain that was sent on 2010-03-10. Apologies in advance for duplicates received through different mailing lists. As of 2010-03-17 1630 UTC all the authoritative servers for ARPA are serving

Re: ISC DHCP server failover

2010-03-17 Thread Blake Covarrubias
On Mar 17, 2010, at 7:22 AM, Dan White wrote: > We've experienced two types of problems from time to time: > > The servers stop balancing their addresses, and one server starts to > exhibit 'peer holds all free leases' in its logs, in which case we need to > restart the dhcpd process(es) to forc

Re: IPv6 in Education Question

2010-03-17 Thread Timothy Shortall
Jens Link wrote: Todd Christell writes: > So Im giving an introductory talk on IPv6 for a state wide conference > for tech coordinators for education. I have the usual catechism of > reasons/advantages from the network side but was wondering if there were > any good education specific appli

RE: IPv6 in Education Question

2010-03-17 Thread Brandon Kim
Jens: There some ISP's trying to push IPv6. Probably not until the masses really demand it in someway. Or if Google pushes it or some well known company. Perhaps maybe an application that is IPv6 specific NAT's and transition protocols seems to extend the life of IPv4. I'm not against th

RE: IPv6 in Education Question

2010-03-17 Thread Brandon Kim
Todd, I'm sending you a link from something I blogged about on my site regarding IPv6. I'll send it offline so others don't think I'm spamming the list... From: tchrist...@springnet.net To: brandon@brandontek.com; nanog@nanog.org Date: Wed, 17 Mar 2010 15:00:51 -0500 Subject: RE: IPv6 in

Re: Intermittent Google issues in Austin area

2010-03-17 Thread Timothy Shortall
Jorge Amodio wrote: No issues 60 miles south (SATX) On Wed, Mar 17, 2010 at 1:29 PM, Alex Thurlow wrote: > Anyone else having intermittent issues connecting to google servers from the > Austin area? I first noticed google.com/jsapi loading slowly to slow down my > website from loading, and I

Re: Intermittent Google issues in Austin area

2010-03-17 Thread Timothy Shortall
Alex Thurlow wrote: Anyone else having intermittent issues connecting to google servers from the Austin area? I first noticed google.com/jsapi loading slowly to slow down my website from loading, and I've since seen other sites loading from their ajaxapis and even www.google.com's search resul

Re: Intermittent Google issues in Austin area

2010-03-17 Thread Timothy Shortall
Alex Thurlow wrote: Anyone else having intermittent issues connecting to google servers from the Austin area? I first noticed google.com/jsapi loading slowly to slow down my website from loading, and I've since seen other sites loading from their ajaxapis and even www.google.com's search resul

Re: IPv6 in Education Question

2010-03-17 Thread Jens Link
Todd Christell writes: > So Im giving an introductory talk on IPv6 for a state wide conference > for tech coordinators for education. I have the usual catechism of > reasons/advantages from the network side but was wondering if there were > any good education specific applications of v6. My maj

RE: IPv6 in Education Question

2010-03-17 Thread Todd Christell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I don't know what their plans are but I'm NOT very photogenic... It is really a very basic introduction as the audience will have varied experience levels. Current IPv4 addresses, their exhaustion and why NAT is evil. Intro to the structure of an

Re: Intermittent Google issues in Austin area

2010-03-17 Thread Jorge Amodio
No issues 60 miles south (SATX) On Wed, Mar 17, 2010 at 1:29 PM, Alex Thurlow wrote: > Anyone else having intermittent issues connecting to google servers from the > Austin area? I first noticed google.com/jsapi loading slowly to slow down my > website from loading, and I've since seen other site

Re: Intermittent Google issues in Austin area

2010-03-17 Thread John Adams
No problems getting to google from here, but SxSW is under way and there will be lots of traffic from the 15,000+ attendees. -j (in the midst of sxsw, on 6th St, Austin) Sent from my iPhone On Mar 17, 2010, at 14:29, Alex Thurlow wrote: Anyone else having intermittent issues connecting to g

Re: Intermittent Google issues in Austin area

2010-03-17 Thread Ray Sanders
I was seeing a ton of issues with Google services here in Phoenix earlier this morning. Seemed to clear up by about 9 AM local time. Alex Thurlow wrote: Anyone else having intermittent issues connecting to google servers from the Austin area? I first noticed google.com/jsapi loading slowly to

Intermittent Google issues in Austin area

2010-03-17 Thread Alex Thurlow
Anyone else having intermittent issues connecting to google servers from the Austin area? I first noticed google.com/jsapi loading slowly to slow down my website from loading, and I've since seen other sites loading from their ajaxapis and even www.google.com's search results taking upwards of

RE: IPv6 in Education Question

2010-03-17 Thread Brandon Kim
Will your presentation viewed anywhere like youtube? I'd like to hear or see it. > From: tchrist...@springnet.net > To: nanog@nanog.org > Date: Wed, 17 Mar 2010 13:58:26 -0500 > Subject: IPv6 in Education Question > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > So Im giving an int

AS36561 to announce 27.128.0.0/12

2010-03-17 Thread Nathan Hickson
Similar to the 1.0.0.0/8 experiment... YouTube (only AS36561) will be announcing 27.128.0.0/12 to allow APNIC to study backscatter/traffic to this unallocated space in ipv4 land. We'll start in the next 24 hours. This range is obviously less interesting than 1.x, but figured I'd let you all know

IPv6 in Education Question

2010-03-17 Thread Todd Christell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So Im giving an introductory talk on IPv6 for a state wide conference for tech coordinators for education. I have the usual catechism of reasons/advantages from the network side but was wondering if there were any good education specific applicatio

Re: AARNet AS7575 announcing 1.0.0.0/24, 1.1.1.0/24 and 1.2.3.0/24 soon

2010-03-17 Thread Nathan
1.0.0.0/8 has been fun. I wont steal George/Geoff's show by telling all... but I will state that about 18% of the internet is still bogon filtering (or using internally) 1.x... I wouldn't want to be a poor schlub getting assigned something from this space, personally. We're going to announce 27

RE: anti-ddos test solutions ?

2010-03-17 Thread Stefan Fouant
> -Original Message- > From: Charles N Wyble [mailto:char...@knownelement.com] > Sent: Wednesday, March 17, 2010 12:16 PM > To: nanog@nanog.org > Subject: Re: anti-ddos test solutions ? > > bit gossip wrote: > > Nessus is a vulnerability scanner: > > > > http://www.nessus.org/nessus/ > > >

RE: anti-ddos test solutions ?

2010-03-17 Thread Stefan Fouant
> -Original Message- > From: Matthew Kaufman [mailto:matt...@matthew.at] > Sent: Wednesday, March 17, 2010 11:00 AM > > Don't you just set up an IRC server and then say something inflammatory > to the wrong person? You can always get DNS hosting from Ultra. You're apt to experience some

Re: anti-ddos test solutions ?

2010-03-17 Thread Charles N Wyble
Nathan Ward wrote: > Hire/buy what I know as a router tester. People call them different things. > It's a device that generates packets, Linux has a packet generator in the kernel as well. More info readily available from your local search engine. > and can normally simulate TCP etc. all the

Re: anti-ddos test solutions ?

2010-03-17 Thread Charles N Wyble
bit gossip wrote: > Nessus is a vulnerability scanner: > > http://www.nessus.org/nessus/ > > Ixia provides a full Nessus implementation in one of its platform. > Well these days I would use http://www.openvas.org and http://www.metasploit.org for vulnerability scanning and analysis. However th

Re: OBESEUS - A new type of DDOS protector

2010-03-17 Thread Guillaume FORTAINE
Dear Mister Jain, Thank you for your reply. Please see the following article from Barry Greene : http://www.senki.org/?p=623 DDOS Trends Changing – More Effective Attack Classes. I will giving an interview today that the industry has done a poor job in communicating the changes in Denial of

Re: anti-ddos test solutions ?

2010-03-17 Thread Brielle Bruns
(Written on a blackberry - please don't flame me for top posting.) Depends on what kind of DoS - cause your more likely to experience a phone DoS moreso then an Internet DoS. Hope you don't need to make or receive any calls for a week or two :) -- Brielle Bruns http://www.sosdg.org / http:

Re: anti-ddos test solutions ?

2010-03-17 Thread Valdis . Kletnieks
On Wed, 17 Mar 2010 10:00:21 PDT, Matthew Kaufman said: > Don't you just set up an IRC server and then say something inflammatory > to the wrong person? For a slightly more interesting packet mix, go over to 4chan and get anon ticked at you. pgpeQnTYH2mmM.pgp Description: PGP signature

RE: anti-ddos test solutions ?

2010-03-17 Thread Drew Weaver
Or let your users post something on their blog that person x y z might not like =) -Original Message- From: Matthew Kaufman [mailto:matt...@matthew.at] Sent: Wednesday, March 17, 2010 1:00 PM To: Brandon Kim Cc: nanog@nanog.org Subject: Re: anti-ddos test solutions ? Brandon Kim wrote:

Re: anti-ddos test solutions ?

2010-03-17 Thread Matthew Kaufman
Brandon Kim wrote: Hey Barry, What program do you use to simulate the DDOS Botnet? Is it a custom program or something off the shelf? Don't you just set up an IRC server and then say something inflammatory to the wrong person? Matthew Kaufman

RE: anti-ddos test solutions ?

2010-03-17 Thread Brandon Kim
Hey Barry, What program do you use to simulate the DDOS Botnet? Is it a custom program or something off the shelf? > From: bgre...@senki.org > To: sfou...@shortestpathfirst.net; gforta...@live.com; nanog@nanog.org > Subject: RE: anti-ddos test solutions ? > Date: Wed, 17 Mar 2010 09:27:20 -07

RE: anti-ddos test solutions ?

2010-03-17 Thread Barry Raveendran Greene
I use all the testing tools out there for DDOS testing (you name it I've most likely have used or currently have in the lab). The only way I've been able to whack anti-DDOS solutions is by build a couple of racks of servers to emulate a DDOS Botnet.

L2TPv3 Vendor Support

2010-03-17 Thread Brad Fleming
Hello all, We've run across a project that requires support for several (ie: 10-20) L2TPv3 tunnels due to user needs/constraints. As far as I can tell, the only major vendor supporting L2TPv3 features at this time is Cisco; however, I openly admit that I'm not very familiar with the more

RE: anti-ddos test solutions ?

2010-03-17 Thread Stefan Fouant
> -Original Message- > From: Guillaume FORTAINE [mailto:gforta...@live.com] > Sent: Wednesday, March 17, 2010 7:02 AM > To: nanog@nanog.org > Subject: Re: anti-ddos test solutions ? > > Dear jul, > > I would advise Breaking Point : To those advising using BreakingPoint for DDoS simulatio

Re: ISC DHCP server failover

2010-03-17 Thread Dan White
On 17/03/10 10:01 -0400, Summers, William wrote: Greetings Nanog members, I am wondering if anyone has implemented the failover features of ISC DHCP? And if so, how successful has failover been in your environment? We've been running version 4 in a failover scenario for a couple of years. It'

Re: ISC DHCP server failover

2010-03-17 Thread sthaug
> I am wondering if anyone has implemented the failover features of ISC DHCP? > And if so, how successful has failover been in your environment? Yes, some of us have implemented DHCP failover using ISC DHCP. However, you are much more likely to get answers to ISC DHCP questions if you ask on the

ISC DHCP server failover

2010-03-17 Thread Summers, William
Greetings Nanog members, I am wondering if anyone has implemented the failover features of ISC DHCP? And if so, how successful has failover been in your environment? Many thanks, William Summers Network Administrator Information Technology Services Deerfield Academy

Re: anti-ddos test solutions ?

2010-03-17 Thread Guillaume FORTAINE
Dear jul, I would advise Breaking Point : -News : http://www.breakingpointsystems.com/news/press-releases/breakingpoint-distributed-denial-of-service-ddos-and-botnet-test-methodology-helps-networks-prepare-for-imminent-attack -Methodology http://www.breakingpointsystems.com/resources/testmet

Re: anti-ddos test solutions ?

2010-03-17 Thread travis abrams
I would suggest looking at Breaking Point Systems. They have boxes that can generate lots of traffic and they can also run exploits against the systems. HD Moore was affiliated with this company at some point so Metasploit is probably used for vulnerability testing. Travis www.theIPSGuy.com On

Re: anti-ddos test solutions ?

2010-03-17 Thread Nathan Ward
Hire/buy what I know as a router tester. People call them different things. It's a device that generates packets, and can normally simulate TCP etc. all the way up to HTTP etc. or higher. BGP, OSPF, MPLS, etc. etc. etc. Tell it to generate packets that look like they come from many many hosts (you

RE: 10GBase-t switch

2010-03-17 Thread Drew Weaver
To be fair, Foundry removed their manuals from public view a good few years ago, long before Brocade came on the scene. It annoyed me too. - Don't know if this is still true but you used to be able to view all of the docs for foundry on the JP site. -Drew

RE: 10GBase-t switch

2010-03-17 Thread Jethro R Binks
On Thu, 11 Mar 2010, Greg Whynott wrote: > Brocade is the king of license gouging, it is no surprise they want > money to view a pdf. To be fair, Foundry removed their manuals from public view a good few years ago, long before Brocade came on the scene. It annoyed me too. Jethro. . . . .

Re: NEED ANY LINK OR SAMPLE TEMPLATE FOR ROUTINE NETWORK (ISP) MAINTENANCE PLAN

2010-03-17 Thread Bryan Laird
On Tue, Mar 16, 2010 at 06:21:57PM -0600, Jorge Amodio wrote: > Change your router's oil every three months or six thousand petabytes, > whatever it comes first, some models may require maintenance sooner > than you expect or plan, others may run forever and become difficult > to find where the hec

Re: AARNet AS7575 announcing 1.0.0.0/24, 1.1.1.0/24 and 1.2.3.0/24 soon

2010-03-17 Thread Peter van Arkel
On Wed, 17 Mar 2010, Nathan Ward wrote: > route-views>sh ip bgp 1.0.0.0/8 > BGP routing table entry for 1.0.0.0/8, version 600951180 > Paths: (24 available, no best path) > Flag: 0x820 > Not advertised to any peer > 1239 174 36561 > 144.228.241.130 (inaccessible) from 144.228.241.130 (144.

Re: AARNet AS7575 announcing 1.0.0.0/24, 1.1.1.0/24 and 1.2.3.0/24 soon

2010-03-17 Thread Nathan Ward
On 17/03/2010, at 7:51 PM, Skeeve Stevens wrote: > Hey George, > > If AARNet or someone has the bandwidth, would it not be of value to announce > the entire 1/8 and see what areas are targeted by traffic - clearly analysing > it and removing DoS or scan traffic. > > I'm just wondering if there

Re: anti-ddos test solutions ?

2010-03-17 Thread bit gossip
Nessus is a vulnerability scanner: http://www.nessus.org/nessus/ Ixia provides a full Nessus implementation in one of its platform. Bit. On Wed, 2010-03-17 at 07:45 +0100, jul wrote: > Hello nanogers, > > Following the multiple thread on ddos attack, I was asking myself how > someone could tes

Re: anti-ddos test solutions ?

2010-03-17 Thread gordon b slater
On Wed, 2010-03-17 at 08:07 +, gordon b slater wrote: (large file as input), iperfs or nmap+nmapscripting) through a _good_ > switch stack. Set a low mtu on the interfaces for maximum pps. ^ ~fail~ correcting myself: set low packet/payload sizes (fragmenting

Re: anti-ddos test solutions ?

2010-03-17 Thread gordon b slater
On Wed, 2010-03-17 at 07:45 +0100, jul dit: > But a solution to test basic attack (synflood, slowloris, socktress, > ...) with 10 to hundred computers would be interesting, so not a tool > but more a service. > > Found only Parabon [1] on Google > > Does someone know something similar ? If you h