Haha! Funny
(Sent from my mobile device)
Anurag Bhatia
http://anuragbhatia.com
On Feb 23, 2012 12:27 PM, "Randy Bush" wrote:
> >> and things when further downhill from there, when telstra also did not
> >> filter what they announced to their peers, and the peers went over
> >> prefix limits an
Great explanation .
Thanks everyone
(Sent from my mobile device)
Anurag Bhatia
http://anuragbhatia.com
On Feb 9, 2012 1:37 AM, "Joe Provo" wrote:
> On Thu, Feb 09, 2012 at 01:28:07AM +0530, Anurag Bhatia wrote:
> [snip]
> > I have never did such setup, but I assume it works as you say. I wonde
Hi Hammer,
Thanks for your answer. That was pretty much what I was thinking.
Thanks to all the offers I've received off-line :).
Best regards,
Carlos.
-Mensaje original-
De: -Hammer- [mailto:bhmc...@gmail.com]
Enviado el: miércoles, 22 de febrero de 2012 16:56
Para: nanog@nanog.org
Asu
not just the .au govt
C
On 23 Feb 2012, at 07:54, Jay Mitchell wrote:
> I'm laughing now, but it wasn't funny a couple of hours ago. Seems a lot of
> the .au govt needs to learn some carrier diversity...
>
> On 23/02/2012, at 4:41 PM, Randy Bush wrote:
>
>> don't filter your customers. when t
On Wed, Feb 22, 2012 at 08:34:49AM -0800, JC Dill wrote:
> 99.999% of the time there is absolutely no benefit in the
> attachment. But by pushing customers to open attachments to get the
> content we are encouraging them to be complacent about opening all
> attachments, and that's a great way to e
On Wednesday, February 22, 2012 04:13:47 PM Jeroen van Aart wrote:
> Any suggestions and ideas appreciated of course. :-)
www.aleutia.com
DC-powered everything, including a 12VDC LCD monitor. We're getting one of
their D2 Pro dual core Atoms (they have other options for more money) for a
solar
I'm sure that virtualizing the sup would be possible. But having to come
up with all the line cards would be a nightmare. I'd love for someone
Internal to tell me I'm wrong but until we can get a 3560 or a 3750X on
Dynamips I wouldn't push for a 6500 or a Nexus.
-Hammer-
"I was a normal Ameri
In a message written on Wed, Feb 22, 2012 at 01:13:47PM -0800, Jeroen van Aart
wrote:
> After reading a number of threads where people list their huge and
> wasteful, but undoubtedly fun (and sometimes necessary?), home setups
> complete with dedicated rooms and aircos I felt inclined to ask who
On Thu, Feb 23, 2012 at 1:57 AM, Randy Bush wrote:
>>> and things when further downhill from there, when telstra also did not
>>> filter what they announced to their peers, and the peers went over
>>> prefix limits and dropped bgp.
>> Oh! so protections worked!
>
> imiho, prefix count is too big a
On Thu, Feb 23, 2012 at 10:29 AM, Leo Bicknell wrote:
> I'd love a low powered motherboard with 6-8 SATA, and a case with
> perhaps 6 hot swap bays but designed for a low powered, fanless
> motherboard. IX Systems's FreeNAS Mini is the closest I've seen,
> but it tops out at 4 drives.
Look at Su
Hey All,
I would greatly appreciate it if somebody would point me to cisco
release notes for the change I see in 15.1 where BGP neighbor route-map
configurations happen in real time, without needing any clearing, soft
or otherwise.
Seems like some have also noticed this behavior recently on
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Brings up another question to mind, how many of you have peered using
partial route transit versus having direct peering relationship at the
exchange?
I've personally ran into companies during peering meetings wanting to
sell you their peering relat
If all else fails, contact the uplink. Unfortunately it gets more
response and casually mention "I tried finding a contact but was
unable so I contacted you"
On 2/22/12, Carlos Kamtha wrote:
> Hi,
>
> I'm hoping to get a hold of an abuse contact at colosolutions.com.
>
> Any help is greatly app
On Feb 23, 2012, at 12:39 PM, virendra rode wrote:
> I understand this is not true peering relationship, however its an
> interesting way to obtain exchange point routes and I understand this is
> nothing new.
I've found people who use the term 'peering' to mean something different than
what
On 23/02/2012 18:00, Jared Mauch wrote:
> Buying transit isn't as dirty as people think it is, sometimes its the
> right business decision. If you connect to an IX for $4000/mo at gig-e,
Anyone prepared to pay $4000/m for a gig IX connection is making the wrong
business decision.
Nick
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 02/23/2012 10:00 AM, Jared Mauch wrote:
>
> On Feb 23, 2012, at 12:39 PM, virendra rode wrote:
>
>> I understand this is not true peering relationship, however its an
>> interesting way to obtain exchange point routes and I understand this is
>>
On 22/02/12 6:46 PM, James Wininger wrote:
Well we would not be sending the notification in an attachment, but there are
times when it would be nice to send a list of circuit ids (exported from
billing system as PDF) or some other exported doc to the notification.
Nice for WHO? There is abso
On Wednesday, February 22, 2012 03:37:57 PM Dan Golding wrote:
> I disagree. The best model is - gasp - engineering, a profession which
> many in "networking" claim to be a part of, but few actually are. In the
> engineering world (not CS, not development - think ME and EE), there is
> a strongly d
Le 21.02.2012 17:46, Ido Szargel a écrit :
Hi All,
We are currently looking to connect to one of the IX's available in
Paris,
It seems that there are 2 "major" players - FranceIX and Equinix FR,
can
anyone share their opinions about those?
Thanks,
Ido
Hi,
My former employer is conn
Paraphrasing someone else I would encourage my competitors to send
notifications to their customers in PDF format.
:)
-Vinny
-Original Message-
From: JC Dill [mailto:jcdill.li...@gmail.com]
Sent: Thursday, February 23, 2012 1:44 PM
To: NANOG list
Subject: Re: Customer Notificat
In a message written on Wed, Feb 22, 2012 at 12:37:57PM -0800, Dan Golding
wrote:
> I disagree. The best model is - gasp - engineering, a profession which
> many in "networking" claim to be a part of, but few actually are. In the
> engineering world (not CS, not development - think ME and EE), the
The problem with using engineering as a model is that computer science
networking theory is based upon mathematical logic and formal mathematics (for
instance Finite State Machines, Turing Machines), and operates on what are
essentially robotic automatons running in real time. Engineering as I h
1- what do you mean by "Licensed folks working in architecture and design"?
2- You wrote "IT isn't governed by the same hard (physical) rules as
traditional engineering, but you also can't be freely creative and
expect to come up with something that works." bolox!
As far as I'm aware you are not
Hello,
I am trying to collect traffic traffic from pcap file and store it in
a database but really confused how to organize it. Should I organize
it on connection basis/ flow basis or IP basis.
It might be an effort to write a customized traffic analysis tool like
wireshark with only required fun
On 2012-02-23 21:11 , Maverick wrote:
> Hello,
>
> I am trying to collect traffic traffic from pcap file and store it in
> a database but really confused how to organize it. Should I organize
> it on connection basis/ flow basis or IP basis.
>
> It might be an effort to write a customized traffic
I want to be able to see information like how much traffic an ip send
over a period of time, what machines it talked to etc from this
perspective it should be IP based but I would really like to know how
other people do it.
Best,
Ali
On Thu, Feb 23, 2012 at 3:14 PM, Jeroen Massar wrote:
> On 201
Netflow + netflow collector.
Ken Matlock
Network Analyst
Systems and Technology Service Center
Sisters of Charity of Leavenworth Health System
12600 W. Colfax, Suite A-500
Lakewood, CO 80215
303-467-4671
matlo...@exempla.org
-Original Message-
From: Maverick [mailto:myeaddr...@gmail.c
On Thu, Feb 23, 2012 at 12:19 PM, Maverick wrote:
> I want to be able to see information like how much traffic an ip send
> over a period of time, what machines it talked to etc from this
> perspective it should be IP based but I would really like to know how
> other people do it.
>
Run argus on
Random thought, anyone ever used Splunk for this kind of thing?
-mike
Sent from my iPhone
On Feb 23, 2012, at 10:30, Suresh Rajagopalan wrote:
> On Thu, Feb 23, 2012 at 12:19 PM, Maverick wrote:
>> I want to be able to see information like how much traffic an ip send
>> over a period of time,
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Speaking of leaking the world, I remember one of our transit peer during
their nightly maintenance decided they needed people to talk to, so they
decided to share some love by passing ~ 350k routes causing a meltdown.
As lesson learned, we included
Splunk is an amazing tool and did an awesome thing and introduced a free
license in 4.3.
I'm using it at two sites now and I'm loving it!
On 2012-02-23, at 3:34 PM, Mike Lyon wrote:
> Random thought, anyone ever used Splunk for this kind of thing?
>
> -mike
>
> Sent from my iPhone
>
> On Feb
On 2012-02-23 21:34 , Mike Lyon wrote:
> Random thought, anyone ever used Splunk for this kind of thing?
Various folks have, the problem of course comes down to processing
power, thus you'll need to throw a lot of hardware against it to be able
to process traffic in a decent network.
Check http:/
Run it with hadoop in EC2?
Sent from my iPhone
On Feb 23, 2012, at 10:52, Jeroen Massar wrote:
> On 2012-02-23 21:34 , Mike Lyon wrote:
>> Random thought, anyone ever used Splunk for this kind of thing?
>
> Various folks have, the problem of course comes down to processing
> power, thus you'll
> I've spent a fair amount of time working on energy effiency at home.
> While I've had a rack at my house in the distant past, the cooling
> and power bill have always made me work at down sizing. Also, as
> time went by I became more obsessed with quite fans, or in particular
> fanless designs.
On Thu, 23 Feb 2012, Maverick wrote:
I want to be able to see information like how much traffic an ip send
over a period of time, what machines it talked to etc from this
perspective it should be IP based but I would really like to know how
other people do it.
Truth is that most people probabl
Hello,
Can anyone on this list provide botnet network traffic for analysis, or Ip’s
which have been infected.
--
Sincerely;
James Smith
CEO, CEH, Security Analyst
Email: ja...@smithwaysecurity.com
Phone: 1877-760-1953
Website: www.SmithwaySecurity.com
CONFIDENTIALITY NOTICE: This communicati
On Thursday, February 23, 2012 04:53:06 PM Joe Greco wrote:
> So, good group to ask, probably... anyone have suggestions for a low-
> noise, low-power GigE switch in the 24-port range ... managed, with SFP?
> That doesn't require constant rebooting?
I can't comment to the rebooting, but a couple
On Thu, Feb 23, 2012 at 17:17, James Smith wrote:
> Can anyone on this list provide botnet network traffic for analysis, or Ip’s
> which have been infected.
Have you considered contacting Team Cymru or Shadowserver? As far as I
know, they are the two major groups who collect this sort of
informa
On Thu, 23 Feb 2012 18:17:38 -0400
"James Smith" wrote:
> Can anyone on this list provide botnet network traffic for analysis,
> or Ip’s which have been infected.
Hi James,
Normally few people are going to be unwilling to provide such a thing,
at least for live or recently active botnets to the
Thank you, this will be helpful.
-Original Message-
From: Darius Jahandarie
Sent: Thursday, February 23, 2012 6:26 PM
To: James Smith
Cc: nanog@nanog.org
Subject: Re: Botnet Traffic
On Thu, Feb 23, 2012 at 17:17, James Smith
wrote:
Can anyone on this list provide botnet network traff
--- myeaddr...@gmail.com wrote: --
From: Maverick
>> It might be an effort to write a customized traffic analysis tool like
>> wireshark with only required functionality. I would really appreciate
I want to be able to see information like how much traffic an ip send
over a per
I apologize for the late reply, we were having an email issue causing mail to
be queued instead of delivered. This appears to be irc (efnet channel drama
related), but it has been tended to regardless. For reference, my arin POC
(which is attached to our IP space) also has my direct office nu
Netflow / Sflow with one of the fallowing software packages
http://www.plixer.com/products/netflow-sflow/scrutinizer-netflow-sflow.php
http://www.solarwinds.com/NetFlow
http://www.arbornetworks.com/
Or the hand full of other open source options out there.
Carlos Alcantar
Race Communications /
On Thu, Feb 23, 2012 at 1:59 PM, Justin M. Streiner
wrote:
> On Thu, 23 Feb 2012, Maverick wrote:
>
>> I want to be able to see information like how much traffic an ip send
>> over a period of time, what machines it talked to etc from this
>> perspective it should be IP based but I would really li
I like the Juniper EX2200C switches. They are only 12-port, but have 2 SFPs.
They are very low power, and have no fans.
However, I am still waiting (it has been several months) for them to send me
the correct rack mount brackets (which are a separate purchase).
-Randy
--
| Randy Carpenter
|
PCAP is not well suited to what you describe. Most people use Sflow/Cflow/...
instead.
Owen
On Feb 23, 2012, at 12:19 PM, Maverick wrote:
> I want to be able to see information like how much traffic an ip send
> over a period of time, what machines it talked to etc from this
> perspective it sho
On Feb 23, 2012, at 1:44 AM, Randy Bush wrote:
> a customer leaked a full table to smellstra, and they had not filtered.
> hence the $subject.
Ahh, this is I think the customer "leak" problem I'm trying to illustrate
that an RPKI/BGPSEC-enabled world alone (as currently prescribed)
does NOT pr
>> a customer leaked a full table to smellstra, and they had not filtered.
>> hence the $subject.
>
> Ahh, this is I think the customer "leak" problem I'm trying to illustrate
> that an RPKI/BGPSEC-enabled world alone (as currently prescribed)
> does NOT protect against.
the problem is that y
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- -Hammer- wrote:
> I'm sure that virtualizing the sup would be possible. But having to come up
> with all the line cards would be a nightmare. I'd love for someone Internal
> to tell me I'm wrong but until we can get a 3560 or a 3750X on Dynamips I
>
On Feb 24, 2012, at 9:00 AM, Danny McPherson wrote:
> Prefix limits are rather binary and indiscriminate, indeed.
AS-PATH filters and max-length filters, OTOH, are not.
Also, it's important that network operators understand that flap-dampening has
been iatrogenic for many years, now.
> Also, it's important that network operators understand that
> flap-dampening has been iatrogenic for many years, now.
well, ...
https://datatracker.ietf.org/doc/draft-ymbk-rfd-usable/
randy
51 matches
Mail list logo
