Re: Arguing against using public IP space

2011-11-13 Thread Jason Lewis
>> I think I could announce private IP space, so doesn't that make this >> argument invalid? > > You could announce it.  I wouldn't expect anyone else to listen to those > announcements other than for the purpose of ridiculing you. > People keep pointing to this as unlikely. I argue that spammers

Arguing against using public IP space

2011-11-13 Thread Jason Lewis
I don't want to start a flame war, but this article seems flawed to me. It seems an IP is an IP. http://www.redtigersecurity.com/security-briefings/2011/9/16/scada-vendors-use-public-routable-ip-addresses-by-default.html I think I could announce private IP space, so doesn't that make this argume

Re: Low end, cool CPE.

2010-11-12 Thread Jason Lewis
Everytime I'm in the market for a device like you describe, it comes down to the limitations of consumer devices. You can't get all those things in a low cost solution. I end up rolling my own. My latest system is this http://www.supermicro.com/products/system/1U/5015/SYS-5015A-PHF.cfm , with E

PCH.net down?

2010-07-21 Thread Jason Lewis
This says it's not just down for me. http://downforeveryoneorjustme.com/pch.net Anyone else?

Re: U.S. Plans Cyber Shield for Utilities, Companies

2010-07-08 Thread Jason Lewis
On Thu, Jul 8, 2010 at 1:16 AM, Michael Painter wrote: > Have we all gone mad? > I find it hard to understand that a nuclear power plant, air-traffic control > network, or electrical grid would be 'linked' to the Internet in the > interest of 'efficiency'.  Air gap them all and let them apply for

Re: Upcoming Improvements to ARIN's Directory Service

2010-06-10 Thread Jason Lewis
It's very clear. I went back and forth with support, asking how to automate my bulk transfer with the new system. Me: Is the bulk data download going to be available for automated download. I can currently download the data daily from the ftp via a script. The new web page doesn't seem to support

Re: Upcoming Improvements to ARIN's Directory Service

2010-06-10 Thread Jason Lewis
I just found out that with the move to this new service that the bulk access FTP is going to be phased out. By design, there will be no way to automate the bulk download of this data. Is anyone else using the data in an environment that will be seriously impacted by this change? On Fri, Jun 4, 2

Re: BGP testbed tools

2010-01-12 Thread Jason Lewis
This might do what you need: MDFMT - MRT dump file manipulation toolkit http://caia.swin.edu.au/urp/bgp/tools.html On Tue, Jan 12, 2010 at 3:27 PM, Ben Jencks wrote: > This is obviously a rookie question, but I haven't found anything by > searching. I'm looking to set up a small testbed to simu

Speaking of weird ASPATHs

2009-05-11 Thread Jason Lewis
I started seeing these on May 8th. * 95.87.192.0/18 3257 9070 43561 {196738} * 8928 9070 43561 {196738} *> 8928 9070 43561 {196738} * 1273 9050 8866 43561 {196738} * 6762 8400 8866 43561 {196738}

Re: AS path weirdness

2009-03-22 Thread Jason Lewis
I was under the impression that MRT only used brackets for sets. eg. [ASNUM] Thanks for taking a look. jas James Aldridge wrote: > Jason Lewis wrote: >> I'm not entirely sure what I'm looking at. The reserved AS, 65490 >> appears in parentheses and I've never s

AS path weirdness

2009-03-20 Thread Jason Lewis
I'm seeing the following in the MRT data from RRC04 at ripe. http://www.ripe.net/projects/ris/rawdata.html http://data.ris.ripe.net/rrc04/2009.03/bview.20090320.2359.gz for reference. I'm not entirely sure what I'm looking at. The reserved AS, 65490 appears in parentheses and I've never seen that

Re: help with connectivity check?

2009-03-17 Thread Jason Lewis
This brings up something I've been thinking about. Are there any free services that let you submit an IP and get traces back from multiple geographic locations? There are plenty of internet measurement projects, but none of them seem to let you do a live trace and get the data back in a parseable

Re: 2 services have disappeared

2009-01-17 Thread Jason Lewis
Networkthinktank is a hobby of mine, I swiched web hosts and haven't put the site back up. Was there something specific you were looking for on the site? jas Henry Linneweh wrote: > http://www.networkthinktank.com/ > http://www.completewhois.com > > are there any replacement services for these

OIX Routeviews

2008-07-22 Thread Jason Lewis
Excuse the OT post, I can't seem to send mail to routeviews.org and this is a last resort. A while ago, David Meyer asked if anyone was still using the "sho ip bgp" format rib on routeviews.org. For a few months the rib dump process has been broken. Are the "sho ip bgp" ribs gone for good?

Re: Building a BGP test network

2008-07-09 Thread Jason Lewis
I should clarify that my test network is not connected to the Internet or any other network. I would normally just peer and get the table, but I don't have that ability. I'm open to anything that could act like a BGP router where I could feed it an existing RIB. Jason Lewis

Building a BGP test network

2008-07-09 Thread Jason Lewis
I'm building a BGP test network and I'd like to replicate a full route table on a few of my routers. I thought I might be able to use Quagga and insert a rib dump, but I'm not finding a lot of info on if it's possible. (I've pinged the quagga list and didn't get any response) So my question

Re: two questions - SWAG answers entertained

2007-10-08 Thread Jason Lewis
I've had a few questions about the data I posted. That was a total of all ribs I have access to, not a summary of uniques. I thought maybe a report of OIX would be a better example. Here's the full rib report: Total prefixes seen in RIB: 238997 Total origin ASes seen in RIB:

Re: two questions - SWAG answers entertained

2007-10-05 Thread Jason Lewis
How vague can the data be? Path length distribution: Hops in Path: Count 1: 104395 2: 2923484 3: 13778037 4: 17280238 5: 9353555 6: 3795923 7: 1792676 8: 822142 9: 472420 10: 258358 11: 160412

Re: Security gain from NAT

2007-06-04 Thread Jason Lewis
I figured SMB would chime in...but his research says it's not so anonymous. http://illuminati.coralcdn.org/docs/bellovin.fnat.pdf jas Colm MacCarthaigh wrote: On Mon, Jun 04, 2007 at 11:47:15AM -0700, Owen DeLong wrote: *No* security gain? No protection against port scans from Bucharest?