Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
I have a customer reporting the same thing. The traffic flood goes to offline modem bank IPs. So far, Akamai hasn't actually grasped what the problem is and says everything is fine. :( Luckily, most of the traffic (not all) is coming from my local cluster, so it's easier to monitor what's goin

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Chris Adams
Once upon a time, Jack Bates said: > I have a customer reporting the same thing. The traffic flood goes to > offline modem bank IPs. So far, Akamai hasn't actually grasped what the > problem is and says everything is fine. :( me too I hadn't captured the traffic during one of the floods yet, b

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Tom Beecher
Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In the last capture I have, it was all JP

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 8:38 AM, Tom Beecher wrote: Jack- This is exactly what we're seeing. The Akamai server starts a retransmission flood aimed at a specific address randomly. We're seeing thousands of retransmissions of the same packet over and over again, same sequence/ack numbers, all 1460 bytes. In

Re: Verizon FiOS Distribution Switch

2011-01-21 Thread Kaegler, Mike
On 1/19/11 3:56 PM, "Chris Burwell" wrote: > Any advice or tips would be helpful. If all you need the ActionTek for is a MoCA bridge (to make the cable boxes talk to the larger world), my experience is you can move it to the inside of your NAT if you like. One does not need to burn a routable IP

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Patrick W. Gilmore
The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. If any network with on-net Akamai servers has an issue, including this or any other, please e-mail netsupport-...@akamai.com and that will open a ticket with our Network Suppo

Re: Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources

2011-01-21 Thread Jack Bates
On 1/21/2011 9:48 AM, Patrick W. Gilmore wrote: The issue has been reported to the proper people inside Akamai. They are investigating, we are not ignoring the issue. I agree. Akamai NOC is always great to work with. Jack

Re: Software DNS hghi availability and load balancer solution [SEC=UNCLASSIFIED]

2011-01-21 Thread david raistrick
On Wed, 19 Jan 2011, Wilkinson, Alex wrote: freebsd + varnish + carp (http://www.openbsd.org/faq/pf/carp.html) two of the three won't work @ EC2 (for my purposes, no idea about the original poster - but he did ask about DNS based solutions so I suspect he's in a similar boat) -- david rai

Re: Software DNS hghi availability and load balancer solution

2011-01-21 Thread david raistrick
On Tue, 18 Jan 2011, Jay Reitz wrote: gdnsd is very robust and fast and has an interface that a networking engineer won't mind. It comes with a geolocation plugin with health-check failover via HTTP. http://code.google.com/p/gdnsd/ Thanks Jay, that looks like a good option - I like single-f

anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
It is unclear from this NOTAM whether this is an intentional perturbation of the satellite signals vs. a terrestrial transmitter (my money is on the latter), but it illustrates why one might want geographically dispersed time sources on one's network, as well as why the current trend towards decom

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Jack Carrozzo
As I understand it, they're trying to get the WAAS sat back online and working properly after it went on walkabout some time ago. It's currently in a nonstandard orbit while they work on it. I suppose it's just pure speculation that they'd only be working on the WAAS service since the NOTAM doesn't

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Majdi S. Abbas
On Fri, Jan 21, 2011 at 12:35:32PM -0500, Jack Carrozzo wrote: > As I understand it, they're trying to get the WAAS sat back online and > working properly after it went on walkabout some time ago. It's currently in > a nonstandard orbit while they work on it. I suppose it's just pure > speculation

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Matthew Kaufman
On 1/21/2011 9:31 AM, Robert E. Seastrom wrote: It is unclear from this NOTAM whether this is an intentional perturbation of the satellite signals vs. a terrestrial transmitter (my money is on the latter) I'm not sure how you'd get increasing radius with altitude from anything but a jammer nea

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Jack Carrozzo
On Fri, Jan 21, 2011 at 12:36 PM, Majdi S. Abbas wrote: > >Nahh, that was the western WAAS sat, IIRC. > >This is...Something Else Entirely. > Ahh, my mistake. Sitting in the back now, -Jack Carrozzo

RE: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Matlock, Kenneth L
Probably related to: http://www.engadget.com/2011/01/20/faa-warns-of-ongoing-gps-issues-in-so utheastern-us-due-to-defens/ Sounds like they're doing 'tests' on GPS near SE Georgia. Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message- F

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Gary E. Miller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yo All! On Fri, 21 Jan 2011, Matthew Kaufman wrote: > I'm not sure how you'd get increasing radius with altitude from anything but a > jammer near sea level. Agreed. One of these tests was recently run in Utah and we saw the effects in Central Oreg

Weekly Routing Table Report

2011-01-21 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.apnic.net

how statefull firewall works for udp?

2011-01-21 Thread Tarig Ahmed
Dear All Hi Default configuration for statefull firewall is to allow traffic form TRUST ZONE to UNTRUST ZONE. As I Know those device will use some feilds in the TCP Header. But, how the firewall will handle this policy for none TCP traffics (udp, icmp, and IPsec)? I think understanding t

Global Crossing Contact

2011-01-21 Thread Righa Shake
Kindly anyone on Global crossing get in touch with me off list. I have a routing problem that i require assistance. Regards, Shake Righa

Re: how statefull firewall works for udp?

2011-01-21 Thread Mike.
On 1/21/2011 at 9:39 PM Tarig Ahmed wrote: |Dear All |Hi | |Default configuration for statefull firewall is to allow traffic form |TRUST ZONE to UNTRUST ZONE. | |As I Know those device will use some feilds in the TCP Header. | |But, how the firewall will handle this policy for none TCP traffics

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Owen DeLong
On Jan 21, 2011, at 10:27 AM, Gary E. Miller wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Yo All! > > On Fri, 21 Jan 2011, Matthew Kaufman wrote: > >> I'm not sure how you'd get increasing radius with altitude from anything but >> a >> jammer near sea level. > > Agreed. > >

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
"Matlock, Kenneth L" writes: > Probably related to: > > http://www.engadget.com/2011/01/20/faa-warns-of-ongoing-gps-issues-in-so > utheastern-us-due-to-defens/ > > Sounds like they're doing 'tests' on GPS near SE Georgia. Yes, very likely related considering that the map from the NOTAM is publi

Re: how statefull firewall works for udp?

2011-01-21 Thread Blake Hudson
These protocols have their own headers, as well as the IP header that the firewall can use to maintain state. The difference between them and TCP is that these protocols are connectionless. Thus, the firewall does not know when the connection has closed. The typical solution to this is to have an a

Re: how statefull firewall works for udp?

2011-01-21 Thread Laurens Vets
Hello, Default configuration for statefull firewall is to allow traffic form TRUST ZONE to UNTRUST ZONE. As I Know those device will use some feilds in the TCP Header. But, how the firewall will handle this policy for none TCP traffics (udp, icmp, and IPsec)? http://lmgtfy.com/?q=+how+do+sta

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Michael Holstein
> I'd be curious to see what effects (if any) those who use > GPS-disciplined NTP references in Southeastern Georgia see from this > experiment. > Aren't CDMA BTS clocked off GPS? NTP isn't going to be the only "ripple". Regards, Michael Holstein Cleveland State University

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Gary Buhrmaster
> NTP isn't going to be the only "ripple". Most of the "brand name" GPS NTP solutions have a clock with is more than stable enough to survive without GPS lock for 45 minutes(*). Some of the more expensive units with temperature controlled oscillators have hold times in the many weeks. My guess i

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Cutler James R
On Jan 21, 2011, at 4:23 PM, Michael Holstein wrote: > >> I'd be curious to see what effects (if any) those who use >> GPS-disciplined NTP references in Southeastern Georgia see from this >> experiment. >> > > Aren't CDMA BTS clocked off GPS? > > NTP isn't going to be the only "ripple". > >

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Cutler James R
On Jan 21, 2011, at 4:45 PM, Gary Buhrmaster wrote: >> NTP isn't going to be the only "ripple". > > Most of the "brand name" GPS NTP solutions have a clock > with is more than stable enough to survive without GPS > lock for 45 minutes(*). Some of the more expensive units with > temperature cont

BGP Update Report

2011-01-21 Thread cidr-report
BGP Update Report Interval: 13-Jan-11 -to- 20-Jan-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS18025 26565 0.9% 737.9 -- ACE-1-WIFI-AS-AP Ace-1 Wifi Network 2 - AS32528 1

The Cidr Report

2011-01-21 Thread cidr-report
This report has been generated at Fri Jan 21 21:11:51 2011 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Michael Holstein writes: >> I'd be curious to see what effects (if any) those who use >> GPS-disciplined NTP references in Southeastern Georgia see from this >> experiment. > > Aren't CDMA BTS clocked off GPS? > > NTP isn't going to be the only "ripple". Sure, and there are GPS-steered Rb clock

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Gary Buhrmaster writes: >> NTP isn't going to be the only "ripple". > > Most of the "brand name" GPS NTP solutions have a clock > with is more than stable enough to survive without GPS > lock for 45 minutes(*). Some of the more expensive units with > temperature controlled oscillators have hold

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread James Brown
On Fri, Jan 21, 2011 at 5:26 PM, Robert E. Seastrom wrote: > Sure, and there are GPS-steered Rb clocks in telco-land too as well as > a ton of stuff I don't know about yet until everyone else here chimes > in; it's just that NTP is highly visible to NANOGers. > > > What about Modular DOCSIS 3.0

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Joel Jaeggli
On 1/21/11 2:26 PM, Robert E. Seastrom wrote: > > Michael Holstein writes: > >>> I'd be curious to see what effects (if any) those who use >>> GPS-disciplined NTP references in Southeastern Georgia see from this >>> experiment. >> >> Aren't CDMA BTS clocked off GPS? >> >> NTP isn't going to be

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Owen DeLong
On Jan 21, 2011, at 1:45 PM, Gary Buhrmaster wrote: >> NTP isn't going to be the only "ripple". > > Most of the "brand name" GPS NTP solutions have a clock > with is more than stable enough to survive without GPS > lock for 45 minutes(*). Some of the more expensive units with > temperature cont

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Robert E. Seastrom
Joel Jaeggli writes: >> Sure, and there are GPS-steered Rb clocks in telco-land too as well as >> a ton of stuff I don't know about yet until everyone else here chimes >> in; it's just that NTP is highly visible to NANOGers. > > if your high quality stratum one time source isn't capable of > fre

new subscription management tools driven by LTE?

2011-01-21 Thread Rogelio
With LTE picking up momentum, what type of new subscription management tools will operators need? (e.g. control complexities of billions of mobile data transactions, personalized billing, centralized control across various licensed and unlicensed bands, alerts when limits reached, etc.) Brid

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Lamar Owen
On Friday, January 21, 2011 04:23:52 pm Michael Holstein wrote: > Aren't CDMA BTS clocked off GPS? Yep; and many of the aftermarket GPS receivers commonly used for the disciplined clock for NTP originally came from that service (Agilent/HP Z3801 and Z3816, for instance).

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Pete Carah
On 01/21/2011 04:29 PM, Lamar Owen wrote: > On Friday, January 21, 2011 04:23:52 pm Michael Holstein wrote: >> Aren't CDMA BTS clocked off GPS? > Yep; and many of the aftermarket GPS receivers commonly used for the > disciplined clock for NTP originally came from that service (Agilent/HP Z3801 >

Re: anyone running GPS clocks in Southeastern Georgia?

2011-01-21 Thread Peter Beckman
On Fri, 21 Jan 2011, Robert E. Seastrom wrote: Firstly (idle curiosity) - does anyone have further publicly divulgable details on what's apparently a terrestrial jammer test or maybe an operational exercise involving the Bermuda Triangle and making planes and ships disappear... My first thoug