in the
> day.
Satisfied customer of https://inoc.net/ in Albany, NY. I think 2U for $150/mo?
--
Stefan BethkeFon +49 175 3288861
used to, but very
efficient workflow-wise. APIs are also very decent, if you want to integrate
custom systems into the workflow.
Stefan
--
Stefan BethkeFon +49 175 3288861
signature.asc
Description: Message signed with OpenPGP
m the BKA instead of the usual "we found suspicious ip
addresses" announcement like Shadowserver is offering.
Governmental services within DTAG (AS3320) ip space is pretty common in
Germany.
HTH,
Stefan
--
Stefan Giera, BelWü (AS553)
BelWü-Koordination, Universität Stuttgart
Ind
Good morning NANOG!
I am looking for direct fiber providers between ATL2 and AT1, or 100g
wavelengths. Any recommendations? Off-List replies are fine!
TIA,
-Stefan
ed might
be processed by logging function calls.
The good news is that setting the Java system property
log4j2.formatMsgNoLookups to true disables the vulnerable functionality. For
most Java server applications, that should be a very quick change.
Stefan
--
Stefan BethkeFon +49 151 14070811
s
argument is based around an email dated in *2015*. So yeah, try
> again.
Every public AS (queried by RIR) is welcome and accepted. It is an automated
process now. If you had trouble getting your ASN registered with PeeringDB in
the past, try it again or get in contact with pdbs support.
-Stefan (pdb admin)
nd nobody has ever
encountered this company.
Hi Nanog!
If you stumble across such things, drop us a note at
supp...@peeringdb.com and we will take a look at it.
-Stefan
es would be processed outside the regular network
stack, but could be handed over to the kernel for further processing, i.e. DHCP
or SLAAC.
Stefan
--
Stefan BethkeFon +49 151 14070811
Not necessarily (only) for *flow, but very nice combo: Luca Deri's
ntopng+nprobe (https://www.ntop.org/products/traffic-analysis/ntop/)
***Stefan
On Mon, Mar 12, 2018, 6:26 PM wrote:
> Howdy!
>
> Checking out various Netflow tools and wanted to see what others are using?
>
want to subscribe to all his webinars repository
access.
Regards,
***Stefan
On Jun 6, 2017 8:24 AM, "Graham Johnston" wrote:
> Short of complete SDN, for those of you that have some degree of
> configuration templating and/or automation tools what is it that you run?
> I'm
into the VzB SD-WAN offering, they (Viptela -
http://blog.ipspace.net/2014/11/viptela-sen-hybrid-wan-connectivity.html)
looked very nice, already, as standalone products. And that was a few years
back.
***Stefan
On Tue, May 2, 2017 at 12:44 PM, Doug Marschke
wrote:
> Too many to list. I do
Hi,
If you want to go the full stack, start open source and to have the support
and com.ext. option you can check iDoIT.
Good thing is, it has also a nice API for further automation and you can
use it as generall CMDB.
https://www.i-doit.org/
Rgds, SJ
sible mitigation for such scenarios is:
https://community.infoblox.com/t5/Support-Central/Support-Central-KB-3451-Configuring-CLI-commands-for-Automated/ba-p/6327
Any other related events, on other platforms or configurations?
***Stefan
xist. Should be no big deal then imho.
Others do it as well - also advertising the larger block from one ASN
and a smaller portion of it from another.
Kind regards,
Stefan
ith me?
austria does something like this:
https://www.rtr.at/en/tk/netztesthilfe
includes a lot of information and even sourcecode on the measurement apps...
Stefan
ts.
>
> Cisco, in general, are suffering here, i.e., QoS on LAG's.
>
> IOS, IOS XE and IOS XR suffer massively.
>
> We find that Junos does a better job here.
>
> Mark.
>
Do yo have more details what's wrong with the XR platform?
Which hardware do we talk about and which XR version is your statement
applying?
Rgds, Stefan
>
There is no way to avoid breaking MTU for IPv4 but use PMTUD for IPv6,
is there? Meaning to stick to 1500 for IPv4 and use something larger for
IPv6?
Kind regards,
Stefan
On 09.03.2016 15:59, Kurt Kraut via NANOG wrote:
> Hi Mike,
>
> The adoption of jumbo frames in a IXP doesn
ps://en.m.wikipedia.org/wiki/AS_7007_incident
He can thank me later 😜
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ENT, JNCI
m (703) 625-6243
Hey!
New message, please read <http://epicuregifts.com/anybody.php?bjtmi>
Stefan Fouant
Hey!
New message, please read <http://shoppingsignal.com/honest.php?r40>
Stefan Fouant
https://developers.facebook.com/status/issues/1032802420085278/
stefan
From: Steve Mikulasik
Reply: Steve Mikulasik
Date: 28 Sep 2015 at 23:00:08
To: ma...@paesani.it , nanog
Subject: RE: Facebook invisible in Italy
All good from AS15290.
-Original Message-
From: NANOG
Then they might want to show an official MD5/SHA1 on their website for
the media. Or maybe simply offer a torrent/magnet-link ...
Kind regards,
Stefan
On 30.07.2015 15:19, STARNES, CURTIS wrote:
> Not sure about distributing but I would think it would be ok since it is an
> ISO for upg
our key to "clueful"
people. I think the point here is that we might assume people have a lot
of good friends who don't know what they are doing (have things like
this enabled by default)? Hmm ... yeah might be :-(
Kind regards,
Stefan
Am 06.07.2015 um 20:29 schrieb Daniel C. Ecker
This was supposed to have happened @midnight UTC, right? Meaning that we
are past that event. Under which scenarios should people be concerned about
midnight local time? Lots of confusing messages flying all over...
On Jun 30, 2015 10:13 PM, wrote:
> We experienced our first leap second outage --
ring.
time[1-4].google.com
Also this update looks like it would smoothen the process:
https://rhn.redhat.com/errata/RHBA-2015-1159.html
https://bugzilla.redhat.com/show_bug.cgi?id=1214752
-Stefan
Am 25.06.2015 um 15:32 schrieb Christopher Morrow:
> On Thu, Jun 25, 2015 at 8:33 AM, Marco Davids wrote:
>>
>> Geolocation imperfections perhaps?
>
> geolocation is hard :(
geolocation is a broken concept anyway :-(
Similar to like being allowed by law to only offer some downloads of
series/mo
On Sunday, June 7, 2015, Randy wrote:
>
> Now I'm blocked by... Pizzahut.com
> Can't order a pizza over my VPN.
thank god for comic relief.
- s
/), while eBay is
keeping a more traditional infra setup?
Stefan
On Sat, Jun 6, 2015 at 8:53 AM, Brandon Ross wrote:
> I also concur. There is most certainly a negative correlation between
> certs and clue in my experience, having met 10s of certificate holders.
>
> Long ago when
On 04/02/2015 09:57 AM, Mark Tinka wrote:
>
>
> On 2/Apr/15 09:52, Stefan Neufeind wrote:
>> Of course it's not something you should generalise about all people or
>> all traffic from certain countries. But it's obvious that there are some
>> countries which
re seem to do nothing for their reputation or the reputation of their
country.
Kind regards,
Stefan
On 04/02/2015 09:40 AM, Paul S. wrote:
> Do you have data on '100% of the traffic' being bad?
>
> I happen to have a large Chinese clientbase, and this is not the case on
>
> Am 29.10.2014 um 18:26 schrieb Brian Christopher Raaen
> :
>
> I'm still getting a 404. I am using a Windstream backbone, is this maybe
> path/server specific. Here is a dig.
>
> dig tf.nist.gov
--
Stefan BethkeFon +49 151 14070811
mall hoster in
Hamburg, Germany via AS194, Inception Hosting (UK) via AS209; but proper page
from VZ FIOS in Framingham, MA also via AS209.
From AS13135, I get 404 on the web page, but my ntpd syncs to 128.138.141.172
just fine.
Stefan
--
Stefan BethkeFon +49 151 14070811
On 01/24/2014 09:46 PM, valdis.kletni...@vt.edu wrote:
> On Fri, 24 Jan 2014 21:22:58 +0100, Stefan Neufeind said:
>
>> just "no Youtube". Hmm - why would people use those resolvers, besides
>> being lazy in configuring a proper resolver-address.
>
> A lot of p
n some cases), no Gmail etc. (fine with me) and no Youtube
(hmm, but we'll survive without it). Come on ...
If the average user is *so* dependent on Google, we have an even larger
problem. Maybe like IPv6-day etc. lets try a "Google outage day" once a
year as a training :-)
Regards,
Stefan
- increased costs of support for aging equipment, or recertification for
vendor support
- anything else ... ???
Care to share some [other] aspects, as they may relate to $subj?
Thanks,
***Stefan
o a
> step further and use DKIM, ADSP, and DMARC. It will help keep asshat
> spammers from flaming your domain all over the internet.
And while you are at it - why not implement DNSSEC for the domain in
question and publish some DANE TLSA records?
Stefan
signature.asc
Description: Digital signature
thing that comes from
an IP without FcRDNS and greylist anything with more than X dashes and
Y dots in it's hostname."
Stefan
signature.asc
Description: Digital signature
Seriously... Those cert monkeys think they know everything ;)
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ENT, JNCI
m (703) 625-6243
On Oct 11, 2013, at 3:28 AM, Randy Bush wrote:
>> Please relay to your CCIE/JNCIE friends, I am giving out
>> name@theccie.comand n...@jncie.com em
Trying to build diversity in some very odd places, about which the big
names tell me exclusively about other bug names, but cannot easily verify.
Thank you,
***Stefan
On Thu, Aug 22, 2013 at 1:14 PM, Dan White wrote:
> On 08/22/13 12:06 -0500, Stefan wrote:
>
>> I've been toying with Live distros (CD, then USB) for many years, in
>> support of security toolsets, to which I kept adding my own stuff, or
>> customizing existing comp
Should have mentioned what I already use for security toolset base: Kali
and Security Onion ...
***Stefan Mititelu
http://twitter.com/netfortius
http://www.linkedin.com/in/netfortius
On Thu, Aug 22, 2013 at 12:29 PM, Michael Shuler wrote:
> On 08/22/2013 12:06 PM, Stefan wrote:
> >
uot; for such a "network probe" functionality?
NOTE: I assume *nix based (Linux or BSD flavors), not Windows ...
TIA,
***Stefan
ine, but it probably wouldn't be
a bad idea to check if you have current maintenance contracts/warranty
for your servers, or any other way of obtaining replacement drives in
a reasonably short time.
Cheers
Stefan
tell if I consistently sanitized the info, but you
get the point)
I am interested in main hub/DC + remotes - docs, preferably.
TIA,
***Stefan
dback for features.
>
> -evt
>
To those of you using Solarwinds: what about scalability? How many devices
do you presently support with this solution, and under which hardware or VM
and storage configuration, if you don't mind sharing that?
Stefan
Thank you all who answered. I got a few good leads to follow, and
information on operation gotchas.
***Stefan
this infrastructure.
TIA,
***Stefan
to advertise IPv4 over
the same session as well - which you usually wouldn't want to.
I've seen cases where both sides ran Quagga and wondered where all the
(unfiltered) IPv4-routes came from :-)
Regards,
Stefan
Can you give us more information? What do you mean it is causing Layer 3 loops?
Stefan Fouant
Sent from my HTC on the Now Network from Sprint!
- Reply message -
From: "Shahab Vahabzadeh"
Date: Sat, Jul 21, 2012 10:50 am
Subject: Attack on UDP 101
To:
Hi there,
Does any bod
, which is hugely vague.
http://en.wikipedia.org/wiki/Reed-Solomon_error_correction#Data_storage
The second paragraph explains that typically the raw bit rate is twice the net
rate.
The raw bitstream is then encoded further as HDLC or ATM.
Stefan
--
Stefan BethkeFon +49 151 14070811
On 2012-06-04 12.46, Stefan Liström wrote:
Hi all,
In TF-NOC we have been collecting information about NOCs for some time
now[1]. Most of the NOCs are from research and educational organizations
and we think it would also be very interesting to get the same kind of
information from commercial
information we have gathered will hopefully still be interesting for you.
[1] http://www.terena.org/activities/tf-noc/nocs.html
[2] http://www.terena.org/activities/tf-noc/TF-NOC-flashpresentation-v2.ppt
--
Best regards
Stefan Liström
ter than what I have here.
Just a comment on the final print statement, which doesn't fit my needs
for ipv6:
-print "prefix: ", $_->prefix(), "\n";
+print "print: " , $_->print(), "\n";
- prefix: 2001:0db8::::::/32
+ print: 2001:db8::/32
Rgds, Stefan
ear
Well, then for a few hundered peerings send them one letter each and
wait for a reaction :-)
Cheers,
Stefan
Was waiting for a response from Eric and without fail he comes through in
record time... :-b
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
Sent from my iPad
On Mar 12, 2012, at 4:14 PM, Eric Brunner-Williams wrote
o
special hardware required.
Stefan
--
Stefan BethkeFon +49 151 14070811
+1 f/Aruba ... and check out the BlackHat conferences, also.
On Jan 15, 2012 3:31 PM, "Rafael Rodriguez" wrote:
> I'd recommend Aruba. Not a fan of the Cisco wifi controller gear.
>
> On Sun, Jan 15, 2012 at 2:30 PM, Ken King wrote:
>
> > I need to choose a wireless solution for a new office.
>
I could be wrong, but I think OP was requesting for BGP communities. I don't
think he was asking for their SNMP community strings - I've never heard of a
situation where a provider would allow their customers to poll their routers
via SNMP.
Or did I miss something?
Stefan Fouant
Not sure how up to date this is, but I believe this is what you are looking for:
http://www.onesc.net/communities/as15412/
Cheers,
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
Sent from my iPad
On Jan 12, 2012, at
inefficiencies.
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
164) 327.027 ms
14 124.215.199.122 (124.215.199.122) 334.904 ms 324.853 ms *
--
Stefan BethkeFon +49 151 14070811
"how") but services were restored about 16:45.
+1 to the above - we received the following RFO, from the their NOC:
"All impacted VLANS were rebuilt to restore service. It is believed
there were some configuration changes that caused the VLAN troubles. A
case has been opened with
Am 21.11.2011 um 21:22 schrieb Ryan Pavely:
> But then again I don't want to goto jail for leaving my car door open and
> having someone steal my car, so nix that idea.
Oh, but you are. (Not sure about criminal liability, but definitely civil.)
--
Stefan BethkeFon +49 151 14070811
clients,
not tp the server.
Also, IIRC, the LOIC DoS tool had this ability to create random strings in the
URL, and I believe it did so with 5 characters. Might want to do a packet
trace and identify if this is coming from LOIC.
Regards,
Stefan Fouant
Technical Trainer, Juniper Networks
GPG Key
ot; some ten years back. A version with English
subtitles is here: http://www.youtube.com/watch?v=vfXsdbnPjX4
While it is simplified, I find it surprisingly accurate despite the reenactment.
Stefan
--
Stefan BethkeFon +49 151 14070811
On 10/24/2011 3:53 PM, Christopher Morrow wrote:
On Mon, Oct 24, 2011 at 3:29 PM, Stefan Fouant
but... often the cost of scrubbing includes the cost of transit
to/from the remote provider, which is why 'cheapest' only counts for
an entire process, NOT for 'lookie, I bou
offering up cloud-based services).
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
ld be able to handle a
750Mbps / 1.5 Mpps DoS pretty easy...
HTHs.
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
Sent from my iPad
On Oct 22, 2011, at 9:38 PM, Jack Bates wrote:
> Considered j-nsp, but this ju
ray hairs...
Let me know if you're interested in the slides...
Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI
Technical Trainer, Juniper Networks
Follow us on Twitter @JuniperEducate
On 10/20/2011 4:43 PM, Hank Nussbacher wrote:
At 09:13 19/10/2011 -0400, samuel.cunning...@wellsfargo.
Well considering that native multicast isn't enabled end to end Internet wide,
and class E address space isn't used, it's more like half your IPv4 Internet
goes one way, and ~38% goes the other way... :-b
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, J
http://www.downforeveryoneorjustme.com/www.gns3.net <- anybody having
any idea about the status of this?
***Stefan Mititelu
http://twitter.com/netfortius
http://www.linkedin.com/in/netfortius
LinkedIn
Stefan Mititelu requested to add you as a connection on LinkedIn:
--
Ted,
I'd like to add you to my professional network on LinkedIn.
- Stefan
Accept invitation from Stefan Mititelu
http://www.linkedin.com/e/-v
, we selected IS-IS largely due to the
fact that it supported MPLS Traffic Engineering extensions before
comparable support was available in OSPF, and the main reason for this
was due to the fact that IS-IS was TLV based.
Stefan Fouant
JNCIE-ER, JNCIE-M, JNCIE-SEC, JNCI
Technical Trainer
book "OSPF and IS-IS: Choosing an IGP for Large-Scale
Networks" by Jeff Doyle. I can't speak highly enough of this book...
Stefan Fouant
JNCIE-ER, JNCIE-M, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant
less of an issue
over the last few years however...
Nonetheless, if I was building a greenfield network today, I would personally
go with IS-IS, but that is largely because of my many years working with the
protocol...
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, Ju
IS-IS is decoupled from IP making it less vulnerable to attacks.
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant
Sent from my iPad
On Aug 11, 2011, at 8:57 AM, CJ wrote:
> Hey all,
> Is the
Sorry, couldnt help it... that was my Asperger's kicking in...
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant
Sent from my iPad
On Aug 10, 2011, at 9:22 PM, Christopher Morrow
Is there an acronym for RTFM when there are a volume of manuals that need to be
read?
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant
Sent from my iPad
On Aug 10, 2011, at 5:35 PM, Deric Kwok
Everything from checksums, keys, and sequence numbers is optional. The only
required fields IIRC amount to 2 bytes of overhead. Sounds like they both
interpret what should be included in the GRE header slightly differently.
Stefan Fouant
GPG Key ID: 0xB4C956EC
Sent from my HTC EVO
a sure sign this
is related to what others have seen...
Sorry for the top post, I'm on my iPad.
Stefan Fouant
JNCIE-M, JNCIE-ER, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant
Sent from my iPad
On Jul 29, 2011, at 2:
hese latencies are
generally acceptable when a site is under attack, but not desired under normal
circumstances.
Stefan Fouant
JNCIE-M #513, JNCIE-ER #70, JNCI
GPG Key ID: 0xB4C956EC
for some reason we could never convince the marketing folks to do just
that...
Agreed though, it is super-easy to use and competitively priced.
Stefan Fouant
JNCIE-M #513, JNCIE-ER #70, JNCI
GPG Key ID: 0xB4C956EC
adjustment, but serves to provide a buttressed
> front-end IP that can restore service "instantly" [faster than getting
> someone on the phone to coordinate the change, etc].
Heck, if it's good enough for fast-flux, it's good enough for me ;)
Stefan Fouant
JNCIE-M #513, JNCIE-ER #70, JNCI
GPG Key ID: 0xB4C956EC
e sense than trying to deal with heterogeneous
offerings from many disparate providers, much less having to open tickets
with each provider, having to deal with typical response times, etc. In my
experience, reducing the number of cogs usually results in dramatically
lower mitigation times, wh
ces/application-acceleration/wxc-
series/
http://www.cisco.com/en/US/products/ps5680/Products_Sub_Category_Home.html
Stefan Fouant
Am 12.05.2011 um 18:02 schrieb Greg Whynott:
> helps to read before you jump!
I think he might be referring to the fact that the prefix supposedly used to
conduct the test is his, not Georgia Tech's.
--
Stefan BethkeFon +49 151 14070811
23.115.0/24
Most of those are for Verisign's DNS resolution services. Definitely
nothing to be suspicious about here. Move along. These aren't the droids
you are looking for.
Stefan Fouant
ting folks... oh, wait, 1 customer isn't really enough to
demonstrate how well it isolates after all I guess ;)
> > primary drivers behind our decision to utilize the NS-5400 for
> Verizon's
> > NBFW (you remember that place right Chris, heh')
>
> i do, occasionally via the twitching :)
Hehe...
Stefan Fouant
can limit the amount of CPU, Sessions,
Policies, MIPs and DIPs (used for NAT), and other user defined objects such
as address book entries, etc. that each VSYS can avail. This was one of the
primary drivers behind our decision to utilize the NS-5400 for Verizon's
NBFW (you remember that place right Chris, heh')
Stefan Fouant
o offer such an offering to more than one
customer using such a device.
Stefan Fouant
NYC - http://wwwhatsup.com
> http://pinstand.com - http://punkcast.com
> VP (Admin) - ISOC-NY - http://isoc-ny.org
> --
> -
>
http://storagemojo.com/2011/04/29/amazons-ebs-outage/
***Stefan Mititelu
http://twitter.com/netfortius
http://www.linkedin.com/in/netfortius
> -Original Message-
> From: Stefan Fouant [mailto:sfou...@shortestpathfirst.net]
> Sent: Thursday, April 21, 2011 2:58 PM
> To: 'harbor235'; 'NANOG list'
> Subject: RE: riverbed steelhead
>
> I've had generally good experiences w/ Riverbe
t/Benefit analysis, but most of the ROI calculators show a return
after as little as just a few months.
Stefan Fouant
standing IPv6 addressing formats, subnetting, etc.
Either one of those should be able to answer most of your questions.
Stefan Fouant
tolerant applications when setting
buffer sizes to a temporal value rather than based on a _fixed_ number of
packets.
Stefan Fouant
s you are using
above based on some broad analysis or study of multiple providers, or are
you deriving these numbers likewise you're your own personal observations?
Thanks,
Stefan Fouant
Hi Bogdan,
If you are on Cisco, you can accomplish this using the attribute-map argument
to the as-set statement. On Juniper, this is fairly easy to accomplish with
routing policy (learning RegEx will make your life easier).
HTHs.
Stefan
(sorry for the top post, I'm on my m
o honestly say
> "IPv6 is in da
> house!" every time the person formerly known as Owen walked into the
> room at ARIN meetings. :D
+1 | That, or "The evangelist formerly known as Owen..." :p
Stefan Fouant
le and sustained amount of legal pressure by selling over a
quarter million pre-registrations at $75 each, generating over $20M in
revenue...
Stefan Fouant
operating costs and open the industry to more regulation.
I can't seem to find anyone that would benefit from this, with the exception
of Stuart and ICM's shareholders.
Stefan Fouant
1 - 100 of 241 matches
Mail list logo
