Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread goemon
On Wed, 1 Feb 2012, Mark Andrews wrote: And if I have a contract to commit murder that doesn't mean that it is right nor legal. A contract can't get you out of dealing with the law of the land and in most place in the world "aiding and abetting" is illegal. the topic at hand would appear to be

Re: Console Server Recommendation

2012-01-31 Thread Saku Ytti
On (2012-01-31 11:09 -0800), Owen DeLong wrote: > > - IP address mappable to a console port. So that accessing device normally > > is 'ssh router' and via OOB 'ssh router.oob' no need to train people > > How about normal is 'ssh device' and OOB is 'console device'? Home-baked systems are certa

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Mark Andrews
In message , David Conrad writes: > On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: > >> "We have a contractual relationship with our customer to announce = > that =3D > >> space. We have neither a contractual relationship (in this context) = > =3D > >> with the RIR nor the RIR's customer. The

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Keegan Holley
That may not be a bad idea. Have you gotten your company's lawyers involved? They may be able to get some sort of court action started and get things moving. They may also be able to compel the ISP's to act. 2012/1/31 Kelvin Williams > I hope none of you ever get hijacked by a spammer housed a

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Antonio Querubin
On Tue, 31 Jan 2012, David Conrad wrote: In the dim past, I had a somewhat similar situation: - A largish (national telco of a small country) ISP started announcing address space a customer of theirs provided. Unfortunately, the address space wasn't the ISP's customer's to provide. - When th

Re: Arriving early...

2012-01-31 Thread Chaim Rieger
Am a bit north of sd ... might make it down on Saturday. -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Warren Kumari wrote: Hi there all, I'm arriving on Friday evening -- was wondering who all might be around on Saturday? Anyone interested in doing something? Sights

Re: Hijacked Network Ranges

2012-01-31 Thread Ricky Beam
On Tue, 31 Jan 2012 13:32:35 -0500, Chuck Church wrote: Shouldn't a forged LOA be justification to contact law enforcement? It is, but if you want anything done about it before the polar ice caps melt, you'll seek other paths as well. a) law enforcement doesn't understand the problem. and

RE: Hijacked Network Ranges

2012-01-31 Thread George Bonser
> -Original Message- > From: John Schneider > Sent: Tuesday, January 31, 2012 5:34 PM > To: Kelvin Williams > Subject: Re: Hijacked Network Ranges > > Another interesting thing that I noticed, is that AS33611 is not > advertising any prefixes other than yours. Either they do not have an

Arriving early...

2012-01-31 Thread Warren Kumari
Hi there all, I'm arriving on Friday evening -- was wondering who all might be around on Saturday? Anyone interested in doing something? Sightseeing, wandering around, etc? W -- Some people are like Slinkies..Not really good for anything but they still bring a smile to your face when you

Re: [c-nsp] ASR opinions..

2012-01-31 Thread Mark Tinka
On Tuesday, January 31, 2012 06:38:10 AM Christopher J. Pilkington wrote: > Does anyone have a link to a definitive document clearly > showing FIB numbers for the ASR1001? I've got an email > into our Cisco SE, but I don't think they're motivated > to sell us a lower-end box. :-) On that link,

Re: non-congested comcast peers?

2012-01-31 Thread Paul WALL
On 1/31/12, Shacolby Jackson wrote: > Are there any providers that Comcast doesn't regularly run hot? Seems like > no matter who I deliver through at some magical point in the evening they > start spiking jitter and a little loss. Almost like everyone hits PLAY on > netflix at the same time. You

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Jimmy Hess
On Tue, Jan 31, 2012 at 7:15 PM, David Conrad wrote: > "We have a contractual relationship with our customer to announce that > space. We have neither a contractual relationship (in this context) with > the RIR nor the RIR's customer. The RIR and/or the RIR's customer should > resolve this issu

Re: US DOJ victim letter

2012-01-31 Thread Carlos Alcantar
Mine is showing "United States v. Vladimir Tsastsin" Carlos Alcantar Race Communications / Race Team Member 101 Haskins Way, So. San Francisco, CA. 94080 Phone: +1 415 376 3314 / car...@race.com / http://www.race.com -Original Message- From: Ronald Bonica Date: Tue, 31 Jan 2012 20

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Randy Bush
> Internet number resource certification and origin validation sure > would be nice here ;-) this is arin address space. arin is the only rir which has not deployed and there is running code randy

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Robert Bonomi
> From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Tue Jan 31 19:57:51 > 2012 > To: David Conrad > From: Mark Andrews > Subject: Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked > Networks) > Date: Wed, 01 Feb 2012 12:52:57 +1100 > Cc: nanog@nanog.org > > > In message <

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Valdis . Kletnieks
On Wed, 01 Feb 2012 12:52:57 +1100, Mark Andrews said: > > - A largish (national telco of a small country) ISP started announcing national telco. oooh ka... > And if I have a contract to commit murder that doesn't mean that > it is right nor legal. A contract can't get you out of dealing > w

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread George Herbert
On Tue, Jan 31, 2012 at 6:03 PM, Owen DeLong wrote: > > On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: > >> >> In message <7b85f9d8-ba9e-4341-9242-5eb514895...@virtualized.org>, David >> Conrad >> writes: I hope none of you ever get hijacked by a spammer housed at Phoenix = >>> NAP.  :) >>

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Danny McPherson
Internet number resource certification and origin validation sure would be nice here ;-) -danny On Jan 31, 2012, at 7:49 PM, Kelvin Williams wrote: > I hope none of you ever get hijacked by a spammer housed at Phoenix NAP. :) > > We're still not out of the woods, announcing /24s and working

Re: Megaupload.com seized

2012-01-31 Thread Jeroen van Aart
Steven Bellovin wrote: Note this from the NY Times article: The Megaupload case is unusual, said Orin S. Kerr, a law professor at George Washington University, in that federal prosecutors obtained the private e-mails of Megaupload�s operators in an effort to show they were operating in ba

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Owen DeLong
On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: > > In message <7b85f9d8-ba9e-4341-9242-5eb514895...@virtualized.org>, David > Conrad > writes: >>> I hope none of you ever get hijacked by a spammer housed at Phoenix = >> NAP. :) >> >> In the dim past, I had a somewhat similar situation: >>

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread David Conrad
On Jan 31, 2012, at 5:52 PM, Mark Andrews wrote: >> "We have a contractual relationship with our customer to announce that = >> space. We have neither a contractual relationship (in this context) = >> with the RIR nor the RIR's customer. The RIR and/or the RIR's customer = >> should resolve this

Re: non-congested comcast peers?

2012-01-31 Thread PC
Some datapoints based on ~500mb constant UDP telemetry data feed (total) spread across many different comcast endpoints. All Cogent -> Comcast. Even though there's heavy forward error correction provisioned to accommodate 5-10% packet loss, it's hardly used. In fact, packet delivery is incredibl

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Mark Andrews
In message <7b85f9d8-ba9e-4341-9242-5eb514895...@virtualized.org>, David Conrad writes: > > I hope none of you ever get hijacked by a spammer housed at Phoenix = > NAP. :) > > In the dim past, I had a somewhat similar situation: > > - A largish (national telco of a small country) ISP started a

Re: Hijacked Network Ranges

2012-01-31 Thread John Schneider
Another interesting thing that I noticed, is that AS33611 is not advertising any prefixes other than yours. Either they do not have any of their own (unlikely) or they are advertising their own legitimate prefixes from another AS however I doubt that is the case. It sounds like you were able to v

RE: US DOJ victim letter

2012-01-31 Thread Ronald Bonica
Folks, I received a DoJ Victim Notification letter yesterday, which was pretty amazing considering the fact that I don't run a network. My letter referenced "United States v. Menachem Youlus". I suspect that the letters that you guys received referenced a different case. Do I have that right?

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Kelvin Williams
We started announcing /24s, combined with the shorter path it seems to be fine. Still jumping through hoops upstream. On Jan 31, 2012 8:26 PM, "PC" wrote: > Curious, What was the outcome of this? > > In any case, I'm hoping the major Tier-1s do the right thing and filter > the rogue annoucements

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread PC
Curious, What was the outcome of this? In any case, I'm hoping the major Tier-1s do the right thing and filter the rogue annoucements, while allowing the OP's. Hopefully after enough pressure and dysfunction, they will give it up. On Tue, Jan 31, 2012 at 6:15 PM, David Conrad wrote: > > I hope

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread David Conrad
> I hope none of you ever get hijacked by a spammer housed at Phoenix NAP. :) In the dim past, I had a somewhat similar situation: - A largish (national telco of a small country) ISP started announcing address space a customer of theirs provided. Unfortunately, the address space wasn't the IS

Re: Wireless Recommendations

2012-01-31 Thread Mario Eirea
Aruba AP 105. This version comes with a virtual controller that can manage 16 APs without the need of an additional controller. For high capacity areas I would go with Ruckus. -Mario Eirea On Jan 31, 2012, at 11:46 AM, "Joel jaeggli" wrote: > On 1/30/12 12:46 , Jim Gonzalez wrote: >> Hi, >>

Re: Fwd: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread goemon
I think the correct term for this is "bullet proof hosting". Now you know where to go. -Dan On Tue, 31 Jan 2012, Kelvin Williams wrote: I hope none of you ever get hijacked by a spammer housed at Phoenix NAP. :) We're still not out of the woods, announcing /24s and working with upper tier c

Fwd: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-01-31 Thread Kelvin Williams
I hope none of you ever get hijacked by a spammer housed at Phoenix NAP. :) We're still not out of the woods, announcing /24s and working with upper tier carriers to filter out our lists. However, I just got this response from Phoenix NAP and found it funny. The "thief" is a former customer, wh

Re: US DOJ victim letter

2012-01-31 Thread Ryan Pavely
I really enjoyed the fact that I called the number, on what I learned later was a "Sample", and when I picked the option to speak with an agent I got "The mailbox is full" message. I feel safe... Ryan Pavely Director Research And Development Net Access Corporation http://www.nac.ne

Re: Route Optimization Software / Appliance

2012-01-31 Thread Greg Raileanu
Hi. Just FYI, we have already launched a stable release. Feel free to contact me off-list if interested.

Re: US DOJ victim letter

2012-01-31 Thread Phil Dyer
On Fri, Jan 27, 2012 at 3:23 PM, Jon Lewis wrote: > On Fri, 27 Jan 2012, Bryan Horstmann-Allen wrote: >> Bit odd, if it's a phish. Even more odd if it's actually from the Fed. > > > It's definitely real, but seems like they're handling it as incompetently as > possible. Yep. That sounds about r

Re: US DOJ victim letter

2012-01-31 Thread Carlos Alcantar
+1 on only IP's on the list where our resolver dns servers for customers. Carlos Alcantar Race Communications / Race Team Member 101 Haskins Way, So. San Francisco, CA. 94080 Phone: +1 415 376 3314 / car...@race.com / http://www.race.com -Original Message- From: Matthew Crocker Date:

Re: Hijacked Network Ranges

2012-01-31 Thread Andrew Fried
The interesting thing is that I'm not seeing any new "hosts" from those subnets in passive dns. It almost seems that their purpose for hijacking the space was to direct traffic to themselves, possibly for collecting login attempts. Andrew Fried andrew.fr...@gmail.com On 1/31/12 1:00 PM, Kelvin W

Re: Route Management Best Practices

2012-01-31 Thread Joe Marr
Thanks for the advice. Filtering and route manipulation hasn’t been a problem for me. I’m very careful to prevent leakage, etc. My current issue is scaling my management of our prefix announcements. Every time I add a new block, I need to modify all of my edge routers etc. I understand I can use IR

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Manish Karir
You can take a closer look at the aspaths (lengths) to various global locations by looking at the following: http://bgptables.merit.edu/prefix.php?z=&z=&prefixcw=208.110.48.0/20&view=all&count=1000 http://bgptables.merit.edu/prefix.php?z=&z=&prefixcw=63.246.112.0/20&view=all&count=1000 http://bg

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Eric Tykwinski
Haven't really been following, but you've got a 50/50 shot for BGP on Cogent for us, but Level3 is shorter so would take precedence. 208.110.48.0/20 3356 29791 11325 i 174 1299 29791 11325 i 208.110.49.03356 12189 19181 33611 i 174 12189

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Ido Szargel
I would go at first by advertising your prefixes as a /24 as well, just randomly checked 2 different locations and the as-path to 11325 is shorter than to 33611 This seems to be the case for customers of Tiscali and L3, so this will probably get most of your traffic back to you... Regards, Ido --

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Schiller, Heather A
Sorry -- was looking at the wrong thing. Doh! --heather -Original Message- From: Schiller, Heather A Sent: Tuesday, January 31, 2012 3:05 PM To: 'Keegan Holley' Cc: Kelvin Williams; nanog@nanog.org Subject: RE: Hijacked Network Ranges - paging Cogent and GBLX/L3 Looks fixed now..

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Schiller, Heather A
Looks fixed now.. --heather -Original Message- From: Keegan Holley [mailto:keegan.hol...@sungard.com] Sent: Tuesday, January 31, 2012 2:50 PM To: Schiller, Heather A Cc: Kelvin Williams; nanog@nanog.org Subject: Re: Hijacked Network Ranges - paging Cogent and GBLX/L3 To be honest I h

Re: Route Management Best Practices

2012-01-31 Thread Tony Tauber
To elaborate slightly on what others have said in terms of protecting against leaks; it's a good idea to filter outbound in a conservative way such that you only send what you "expect" in terms of community values and/or prefixes and/or AS-paths. For instance, if something gets into your BGP that

Re: MD5 considered harmful

2012-01-31 Thread Lee
On 1/31/12, Nick Hilliard wrote: > On 31/01/2012 16:40, David Barak wrote: >> Because downtime is a security issue too, and MD5 is more likely to >> contribute to downtime (either via lost password, crypto load on CPU, or >> other) than the problem it purports to fix. The goal of a network >> eng

Re: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Keegan Holley
To be honest I haven't had much success it convincing a tier 1 to modify someone else's routes on my behalf for whatever reason. I also have had limited success in getting them to do anything quickly. I'd first look to modify your advertisements as much as possible to mitigate the issue and then

RE: Hijacked Network Ranges - paging Cogent and GBLX/L3

2012-01-31 Thread Schiller, Heather A
Or roll it up hill: 33611 looks like they get transit from 19181, who's only upstream appears to be 12189. 12189 gets connectivity from 174 and 3549. 174 = Cogent 3549 = GBLX/L3 --Heather -Original Message- From: Kelvin Williams [mailto:kwilli...@altuscgi.com] Sent: Tuesday, J

Re: using ULA for 'hidden' v6 devices?

2012-01-31 Thread Robert E. Seastrom
Tim Chown writes: > On 26 Jan 2012, at 16:53, Owen DeLong wrote: > >> On Jan 26, 2012, at 8:14 AM, Ray Soucy wrote: >> >>> Does this mean we're also looking at residential allocations larger >>> than a /64 as the norm? >>> >> >> We certainly should be. I still think that /48s for residential

Re: Hijacked Network Ranges

2012-01-31 Thread John Schneider
If you both announce a /24, the BGP route selection process should begin to return some of the traffic to these prefixes back to your AS. Also, if you begin to advertise your prefixes as /24s and as a result, they try to advertise /25s, I would venture a guess that their /25s would get blocked enti

Re: Console Server Recommendation

2012-01-31 Thread Owen DeLong
On Jan 31, 2012, at 1:11 AM, Saku Ytti wrote: > On (2012-01-30 11:08 -0500), Ray Soucy wrote: > >> What are people using for console servers these days? We've >> historically used retired routers with ASYNC ports, but it's time for >> an upgrade. > > This is very very common thread, replaying

Re: Hijacked Network Ranges

2012-01-31 Thread Anurag Bhatia
I can routes are wrong for all /24 annoucements. May be contacting Level3+Telia+AboveNet+Hurricane Electric since all these are upstream providers of AS29791 which is your upstream carrier? I guess they would be able to neutralize effect significantly by filtering those routes? On Wed, Feb 1, 20

Re: Hijacked Network Ranges

2012-01-31 Thread Tony McCrory
Surely something is better than nothing. Advertise the /24's and the /25's, see what happens. At the least it's a step forwards until you get their routes filtered. Tony On 31 January 2012 18:22, Kelvin Williams wrote: > Upstream requirements. Additionally, I don't believe it would do us any

Re: Route Management Best Practices

2012-01-31 Thread Joe Marr
Thanks Mark, This helps and definitely shows Im heading in the right direction. Thanks, On Tue, Jan 31, 2012 at 2:17 AM, Mark Tinka wrote: > On Tuesday, January 31, 2012 03:04:15 PM Joe Marr wrote: > > > What do you use for reflectors, hardware(Cisco/Juniper) > > or software daemons(Quagga)? >

Re: Hijacked Network Ranges

2012-01-31 Thread Kelvin Williams
We are. On Tue, Jan 31, 2012 at 1:32 PM, Chuck Church wrote: > Shouldn't a forged LOA be justification to contact law enforcement? > > Chuck > > -Original Message- > From: Kelvin Williams [mailto:kwilli...@altuscgi.com] > Sent: Tuesday, January 31, 2012 1:01 PM > To: nanog@nanog.org > Su

RE: Hijacked Network Ranges

2012-01-31 Thread Chuck Church
Shouldn't a forged LOA be justification to contact law enforcement? Chuck -Original Message- From: Kelvin Williams [mailto:kwilli...@altuscgi.com] Sent: Tuesday, January 31, 2012 1:01 PM To: nanog@nanog.org Subject: Hijacked Network Ranges Greetings all. We've been in a 12+ hour orde

Re: Hijacked Network Ranges

2012-01-31 Thread Jonathan Lassoff
On Tue, Jan 31, 2012 at 10:00 AM, Kelvin Williams wrote: > We've been in a 12+ hour ordeal requesting that AS19181 (Cavecreek Internet > Exchange) immediately filter out network blocks that are being advertised > by ASAS33611 (SBJ Media, LLC) who provided to them a forged LOA. > > [ ...snip...] U

Re: Hijacked Network Ranges

2012-01-31 Thread Jonathan Lassoff
On Tue, Jan 31, 2012 at 10:19 AM, Grant Ridder wrote: > Hi, > > What is keeping you from advertising a more specific route (i.e /25's)? Most large transits and NSPs filter out prefixes more specific than a /24. Conventionally, at least in my experience, /24's are the most-specific prefix you can

Re: Hijacked Network Ranges

2012-01-31 Thread Keegan Holley
2012/1/31 Justin M. Streiner > On Tue, 31 Jan 2012, Grant Ridder wrote: > > What is keeping you from advertising a more specific route (i.e /25's)? >> > > Many providers filter out anything longer (smaller) than /24. > Some will accept it but not propagate it upstream. This may be useful in re

Re: Console Server Recommendation

2012-01-31 Thread Nick Hilliard
On 31/01/2012 17:27, George Bonser wrote: > Wouldn't a program such as "conserver" running on a linux box someplace > potentially provide these (maybe with a little extra hackery)? We use > that quite a bit. One interesting option is that it allows another > person to also watch the console sessi

Re: Hijacked Network Ranges

2012-01-31 Thread Kelvin Williams
Upstream requirements. Additionally, I don't believe it would do us any good. If they're announcing /24 now, why would they not announce a /25. On Jan 31, 2012 1:19 PM, "Grant Ridder" wrote: > Hi, > > What is keeping you from advertising a more specific route (i.e /25's)? > > -Grant > > On Tue, J

Re: Hijacked Network Ranges

2012-01-31 Thread Keegan Holley
You can break your blocks into /24's or smaller and readvertise them to your upstreams. You can also modify local preference using community tags with most upstreams. If you have tier 1 peerings you may be able to get them to filter the bad routes if you can prove they were assigned to you by ARI

Re: Hijacked Network Ranges

2012-01-31 Thread PC
Many/most transit providers filter prefixes longer than /24, so the effectiveness may be minimal. At the very least I'd advertise /24s yourself because if the forger is geographically further away, some local sites may still work. Better than nothing. On Tue, Jan 31, 2012 at 11:19 AM, Grant Ri

Re: Hijacked Network Ranges

2012-01-31 Thread Justin M. Streiner
On Tue, 31 Jan 2012, Grant Ridder wrote: What is keeping you from advertising a more specific route (i.e /25's)? Many providers filter out anything longer (smaller) than /24. jms On Tue, Jan 31, 2012 at 12:00 PM, Kelvin Williams wrote: Greetings all. We've been in a 12+ hour ordeal reque

Re: Hijacked Network Ranges

2012-01-31 Thread Grant Ridder
Hi, What is keeping you from advertising a more specific route (i.e /25's)? -Grant On Tue, Jan 31, 2012 at 12:00 PM, Kelvin Williams wrote: > Greetings all. > > We've been in a 12+ hour ordeal requesting that AS19181 (Cavecreek Internet > Exchange) immediately filter out network blocks that are

Re: MD5 considered harmful

2012-01-31 Thread harbor235
Sounds like we want a well thought out plan in place in case there is a screw up with an org's lack of planning and management capabilities.. Mike On Tue, Jan 31, 2012 at 12:56 PM, Nick Hilliard wrote: > On 31/01/2012 16:40, David Barak wrote: > > Because downtime is a security issue t

Hijacked Network Ranges

2012-01-31 Thread Kelvin Williams
Greetings all. We've been in a 12+ hour ordeal requesting that AS19181 (Cavecreek Internet Exchange) immediately filter out network blocks that are being advertised by ASAS33611 (SBJ Media, LLC) who provided to them a forged LOA. The routes for networks: 208.110.48.0/20, 63.246.112.0/20, and 68.6

Re: MD5 considered harmful

2012-01-31 Thread Nick Hilliard
On 31/01/2012 16:40, David Barak wrote: > Because downtime is a security issue too, and MD5 is more likely to > contribute to downtime (either via lost password, crypto load on CPU, or > other) than the problem it purports to fix. The goal of a network > engineer is to move packets from A -> B. T

RE: Console Server Recommendation

2012-01-31 Thread George Bonser
> > I like feature list you posted, btw. If there were any console servers > out there with these features, I would buy a bunch of them. > Wouldn't a program such as "conserver" running on a linux box someplace potentially provide these (maybe with a little extra hackery)? We use that quite

Re: IPv6 BGP MIBs

2012-01-31 Thread Erik Muller
On 1/31/12 11:42 , chip wrote: Hi all, Can anyone point me to ongoing discussion about IPv6 BGP SNMP MIBs going on in the IETF? As I understand it RFC 4293 was somewhat abandoned by most vendors. Cisco has a new BGPV4-2 Mib but that still doesn't address all the needs. While I can try and

Re: Wireless Recommendations

2012-01-31 Thread Grant Ridder
Hi, I do not know all the details, but the high school i graduated from recently implemented an Aruba system. From what i hear, it has never worked as designed and the IT dept there says its hard to manage. I was told the school got it since it was the cheapest. -Grant On Tue, Jan 31, 2012 at

Re: IPv6 BGP MIBs

2012-01-31 Thread Nick Hilliard
On 31/01/2012 16:42, chip wrote: > Can anyone point me to ongoing discussion about IPv6 BGP SNMP MIBs > going on in the IETF? As I understand it RFC 4293 was somewhat > abandoned by most vendors. Cisco has a new BGPV4-2 Mib but that still > doesn't address all the needs. While I can try and pu

Re: Wireless Recommendations

2012-01-31 Thread Joel jaeggli
On 1/30/12 12:46 , Jim Gonzalez wrote: > Hi, > > I am looking for a Wireless bridge or Router that will > support 600 wireless clients concurrently (mostly cell phones). I need it > for a proof of concept. an aruba controller and 8 dual radio aps. > > > > > Thanks in adva

IPv6 BGP MIBs

2012-01-31 Thread chip
Hi all, Can anyone point me to ongoing discussion about IPv6 BGP SNMP MIBs going on in the IETF? As I understand it RFC 4293 was somewhat abandoned by most vendors. Cisco has a new BGPV4-2 Mib but that still doesn't address all the needs. While I can try and push all my vendors to come up wit

Re: MD5 considered harmful

2012-01-31 Thread David Barak
From: harbor235 > Also, It does not matter how many attempts compromising a BGP session > occurs, it only takes one, so why not nail it down. Because downtime is a security issue too, and MD5 is more likely to contribute to downtime (either via lost password, crypto load on CPU, or other) than

Re: non-congested comcast peers?

2012-01-31 Thread Anurag Bhatia
Hi Shacolby Can you share some mtr results to Netflix, Google, etc ? Curious to see how bad it is really. On Tue, Jan 31, 2012 at 8:50 PM, Shacolby Jackson wrote: > Are there any providers that Comcast doesn't regularly run hot? Seems like > no matter who I deliver through at some magical point

Microbursts on Ceragon IP-10G

2012-01-31 Thread Abel Alejandro
Hello, I have a Ceragon IP-10G to provide backhaul access for an LTE network. The client wants to have 50Mbps of throughput with an RTT of 50ms on a single TCP session. The problem are the packet drops due to microbursts due to tcp slow start come from a 1GE port and then they get dropped at the r

Re: ARP is sourced from loopback address

2012-01-31 Thread Keegan Holley
That's still a different part of the packet. Below is the source address in the ethernet header used to deliver the arp request itself. In side the ARP payload there is also a field for source and destination mac. I couldn't get tcpdump to show it even with the -n and -vvv switches. Wireshark w

non-congested comcast peers?

2012-01-31 Thread Shacolby Jackson
Are there any providers that Comcast doesn't regularly run hot? Seems like no matter who I deliver through at some magical point in the evening they start spiking jitter and a little loss. Almost like everyone hits PLAY on netflix at the same time. -shac

Re: Please help our simple bgp

2012-01-31 Thread Jared Mauch
On Jan 30, 2012, at 9:27 PM, Ann Kwok wrote: > Hello > > Our router is running simple bgp. "one BGP router, two upstreams (each 100M > from ISP A and ISP B) > We are getting full feeds tables from them > > We discover the routes is going to ISP A only even the bandwidth 100M is > full > > Can

Bid Software

2012-01-31 Thread Paul Stewart
Hi folks. I'm looking for an in-house solution for "circuit bidding". Today, when we get a request for WAN services, transport, transit etc we have folks that email out to a list of contacts and ask them for a price. I've seen some pretty neat systems in the past where vendors can send us the

Re: MD5 considered harmful

2012-01-31 Thread harbor235
My thoughts are that you should filter traffic routed directly to your BGP speaking devices, traffic routing through a edge device and to an edge device are treated differently. BGP session protection using a MD5 password by itself is not securing the control plane, but it is a component of an over

Re: ARP is sourced from loopback address

2012-01-31 Thread Ray Soucy
We ran into a lot of quirkiness with Linux when we started rolling out Linux-based CPE with XORP as a routing engine. I've thrown some sane defaults you might want to consider into a text file at: http://soucy.org/xorp/xorp-1.7-pre/TUNING Specifically, you prob. want option 2 instead of 1 for ar

Re: http://tools.ietf.org - Down

2012-01-31 Thread Richard Barnes
There was some discussion of this on tools-disc...@tools.ietf.org. There was a temporary issue that I believe has been resolved. --Richard On Tue, Jan 31, 2012 at 11:59 AM, Matt Taylor wrote: > Fine for me, .au > > Matt. > > > On 31/01/2012 9:59 PM, Sébastien Riccio wrote: >> >> Up from here (

Re: http://tools.ietf.org - Down

2012-01-31 Thread Matt Taylor
Fine for me, .au Matt. On 31/01/2012 9:59 PM, Sébastien Riccio wrote: Up from here (.ch) Sébastien On 31.01.2012 10:02, Mark Tinka wrote: Is it just me? http://www.downforeveryoneorjustme.com/tools.ietf.org doesn't seem to think so. Mark. On 31/01/2012 9:59 PM, Sébastien Riccio wrote

Re: http://tools.ietf.org - Down

2012-01-31 Thread Sébastien Riccio
Up from here (.ch) Sébastien On 31.01.2012 10:02, Mark Tinka wrote: Is it just me? http://www.downforeveryoneorjustme.com/tools.ietf.org doesn't seem to think so. Mark.

Re: Please help our simple bgp

2012-01-31 Thread Fredy Kuenzler
Am 31.01.2012 04:06, schrieb Joel Maslak: There are several ways to handle this is, if you have at least two /24s of space. Let's say you just have two /24s, both part of the same /23. [...] Sad to see that deaggregation is still propagated to handle this issue. As a matter of fact deaggrega

Re: Console Server Recommendation

2012-01-31 Thread Saku Ytti
On (2012-01-31 10:01 +), Nick Hilliard wrote: > I like feature list you posted, btw. If there were any console servers out > there with these features, I would buy a bunch of them. I think OpenGear supports all of them (according to co-worker who tested them recently), but not 100% sure par

Re: Console Server Recommendation

2012-01-31 Thread Nick Hilliard
On 31/01/2012 09:11, Saku Ytti wrote: > For me, required features are This is part of the problem here. You want a terminal server which was designed for console access. Most of the terminal servers on the market are by-products of the modem dialin era and their development function was aimed at

Re: Console Server Recommendation

2012-01-31 Thread Saku Ytti
On (2012-01-30 11:08 -0500), Ray Soucy wrote: > What are people using for console servers these days? We've > historically used retired routers with ASYNC ports, but it's time for > an upgrade. This is very very common thread, replaying couple times a year in various lists, with to my cursory lo

http://tools.ietf.org - Down

2012-01-31 Thread Mark Tinka
Is it just me? http://www.downforeveryoneorjustme.com/tools.ietf.org doesn't seem to think so. Mark. signature.asc Description: This is a digitally signed message part.