Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Tyler Haske
Wes, If the router is running HQF code for QoS [really anything later then 12.4(20)T], it should support this kind of hierarchy. It's a common policy I have customers implement all the time. http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/qos_frhqf_support.html On Wed, May 8, 2013 a

Problem watch video Youtube in Brazil

2013-05-09 Thread Welisson
Hello, Dears, I'd like know if someone is having any kind problem with watch movies on Youtube, because the access of in Brazil is a lot bad, between 4h and 10(p.m utc -3)? Best Regards Welisson Tomé

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Wes Tribble
Thanks for the information Tyler, I will have to play around with that kind of policy in my lab. What would you suggest if you are oversubscribing the interface? With the child policy inheriting the bandwith of the parent shaper, wouldn't I run out of bandwidth allocation before I built all the s

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Tyler Haske
Wes, The earlier policy doesn't use bandwidth commands, hence, it doesn't *subscribe* anything. The only thing it does is ensures that individual sites do not exceed their shaped rate. You could add bandwidth statements if you wanted to ensure a certain site always is guaranteed a certain amount o

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Wes Tribble
Tyler, Tyler, I already had a case open with TAC on this issue. This is what the CCIE assigned to the case is saying about that type of policy: Hi Wesley, Yes, I’m afraid that configuration is not possible. We can only mark or police traffic on this child policy. You will see the followin

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Jason Lester
We had a similar problem years ago with a frame-relay <---> IMA setup. The hub end was a multiplexed ATM circuit with PVC's to each site's frame-relay circuit. The IMA speed was equal to the aggregate speed of each site's CIR. It worked great until all the sites were bursting above CIR. VoIP ca

Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
I am putting the finishing touches on a presentation I will be making later this week at the DNS-OARC meeting, but I also wanted to ask anyone here if they had data/ideas of items they are interested in seeing from the Open Resolver Project. We perform a weekly scan of the IPv4 space looking fo

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Wes Tribble
Tyler, Thank you very much. I took off the bandwidth reservations on the child shapers and I was able to apply to an 1841 series router in my lab. Either my TAC engineer is off base or there is some limitatin with the ASR that does not exist for vanilla IOS. QUOTE: The earlier policy doesn't us

Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems)

2013-05-09 Thread Alain Hebert
( Ok, ok, another bad customer =D ) Starting today at 5h15m EST... There is a bigger than usual DDoS amplification against the IP's listed below. Granted root servers query is barely 1k while the usual isc.org is 3.5k and this is a "possible" 15Mbps from this one source but still :(

RE: Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems)

2013-05-09 Thread Warren Bailey
Is anyone in particular being pocketed, or are these random addresses? Sent from my Mobile Device. Original message From: Alain Hebert Date: 05/09/2013 10:16 AM (GMT-08:00) To: nanog@nanog.org Subject: Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems) ( Ok,

Re: Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems)

2013-05-09 Thread Alain Hebert
It looks like to be a service and some of their customers. - Alain Hebertaheb...@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.netFax: 514-990-9443 On 05/09

Re: Per Site QOS policy with Cisco IOS-XE

2013-05-09 Thread Nick Hilliard
On 09/05/2013 17:10, Wes Tribble wrote: > Thank you very much. I took off the bandwidth reservations on the child > shapers and I was able to apply to an 1841 series router in my lab. Either > my TAC engineer is off base or there is some limitatin with the ASR that > does not exist for vanilla IO

Re: Entry level WDM gear?

2013-05-09 Thread Mauricio Rodriguez
Jeff, Take a look at ECI -- http://www.ecitele.com, or BTI -- http://www.btisystems.com/home.aspx. They have both passive and active systems, depending on your needs. Regards, *Mauricio R Rodriguez* *Senior Systems Engineer *CLAdirect (http://www.cladirect.com)

Re: Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems)

2013-05-09 Thread Mark Andrews
In message <518bd982.60...@pubnix.net>, Alain Hebert writes: > ( Ok, ok, another bad customer =D ) > > Starting today at 5h15m EST... > > There is a bigger than usual DDoS amplification against the IP's > listed below. > > Granted root servers query is barely 1k while the usual isc.

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jon Lewis
On Thu, 9 May 2013, Jared Mauch wrote: Some interesting data: about 46% of the IPs that respond to a DNS query do not respond from port 53, meaning they are "broken" in some interesting way. Maybe I'm not being very imaginative, but how can something from !53 be considered a DNS response to

RE: Entry level WDM gear?

2013-05-09 Thread David Wilde
Hi Jeff, Cisco make a passive CWDM/EWDM solution for this. http://www.cisco.com/en/US/prod/collateral/modules/ps5455/ps6575/product_data_sheet0900aecd8029d01b_ps708_Products_Data_Sheet.html You need to order a CWDM-MUX8A= for each end, plus the CWDM-CHASSIS-2= to rack-mount them. Then, plug yo

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jimmy Hess
On 5/9/13, Jared Mauch wrote: On a totally unrelated note... the document at that URL looks visually almost exactly like the CentOS stock apache 2 test page. It's, so similar in appearance, that when opening it, at first, I thought it a broken link instead of an actual website > I encou

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
On May 9, 2013, at 7:32 PM, Jon Lewis wrote: > On Thu, 9 May 2013, Jared Mauch wrote: > >> Some interesting data: about 46% of the IPs that respond to a DNS query do >> not respond from port 53, meaning they are "broken" in some interesting way. > > Maybe I'm not being very imaginative, but h

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
On May 9, 2013, at 8:26 PM, Jimmy Hess wrote: > On 5/9/13, Jared Mauch wrote: > > On a totally unrelated note... the document at that URL looks > visually almost exactly like the CentOS stock apache 2 test page. > > It's, so similar in appearance, that when opening it, at first, I > thoug

bind verbose logging

2013-05-09 Thread shawn wilson
In this log line, what is -EDC? I've also noticed +, -, -E, and -ED but I have no Idea what they are (called/represent). 08-May-2013 08:04:49.751 client 1.2.3.4#48747 (ns2.example.com): query: ns2.example.com IN -EDC (1.2.3.4) Also, I'm writing a parser and we're only loging 'queries' but if

Re: bind verbose logging

2013-05-09 Thread staticsafe
On 5/9/2013 22:52, shawn wilson wrote: > In this log line, what is -EDC? I've also noticed +, -, -E, and -ED > but I have no Idea what they are (called/represent). > > 08-May-2013 08:04:49.751 client 1.2.3.4#48747 (ns2.example.com): > query: ns2.example.com IN -EDC (1.2.3.4) > > Also, I'm wr

Re: bind verbose logging

2013-05-09 Thread Mike Hale
See this: https://kb.isc.org/article/AA-00434/0/What-do-EDC-and-other-letters-I-see-in-my-query-log-mean.html I've written a quick and dirty logging mechanism which stores the bind logs in a mysql database in various fields. It works well for the great majority of queries...happy to share the ba

Re: bind verbose logging

2013-05-09 Thread shawn wilson
Thanks, that's what I'm looking for. Mike, sure I wouldn't mind schema ideas. On Thu, May 9, 2013 at 10:56 PM, staticsafe wrote: > On 5/9/2013 22:52, shawn wilson wrote: >> In this log line, what is -EDC? I've also noticed +, -, -E, and -ED >> but I have no Idea what they are (called/represent).

Re: bind verbose logging

2013-05-09 Thread Mike Hale
I'll send over some info tomorrow. Shoot me a reminder if you don't get it by the later afternoon. I wouldn't really call it a schema...it's just a simple field extraction bash script that then generates the sql inserts. Like I said...quick and dirty. Afte coding it from scratch, I'm starting t

Re: bind verbose logging

2013-05-09 Thread shawn wilson
On May 9, 2013 11:27 PM, "Mike Hale" wrote: > > I'll send over some info tomorrow. Shoot me a reminder if you don't > get it by the later afternoon. > > I wouldn't really call it a schema...it's just a simple field > extraction bash script that then generates the sql inserts. Like I > said...qui