Re: Filter NTP traffic by packet size?

2014-02-21 Thread Harlan Stenn
"Dobbins, Roland" writes: > Operators are using this size-based filtering to effect without > breaking the world. As a reality check, with this filtering in place does "ntptrace" still work? H

Re: question about AS relationship

2014-02-21 Thread Mark Tinka
On Friday, February 21, 2014 08:57:07 AM Song Li wrote: > the AS relationship between AS1 and AS2/3 is peer, and > AS1 cannot announce routes from AS3 to provider1 by > rule. Or even Peer-AS2's routes to Peer-AS3 (and vice versa), in general best practice filtering rules, unless transit is requ

Atlanta - Patch Cables

2014-02-21 Thread Bobby Lacey
In Atlanta doing an install for a client this weekend and it appears that the fiber/ethernet patch cables won't be delivered in time from supplier. Would anyone know of a good resource for patch cables (both fiber and ethernet) in the metro area? Just wondering if there are any other resources for

Re: comcast business service

2014-02-21 Thread shawn wilson
Works: Downstream Channel Downstream Frequency52500 Hz56100 Hz56700 Hz57300 Hz57900 Hz Lock StatusLockedLockedLockedLockedLocked Modulation256 QAM256 QAM256 QAM256 QAM256 QAM Symbol Rate5.360537 Msym/sec5.360537 Msym/sec5.360537 Msym/sec5.360537 Msym/sec5.360537 Msym/sec Downst

Re: question about AS relationship

2014-02-21 Thread Song Li
Thanks. I'm doing some research on route leaks, you are a great help to me. Sky li On Friday, February 21, 2014 08:57:07 AM Song Li wrote: the AS relationship between AS1 and AS2/3 is peer, and AS1 cannot announce routes from AS3 to provider1 by rule. Or even Peer-AS2's routes to Peer-AS3 (

Re: comcast business service

2014-02-21 Thread rwebb
Biggest unknown at this point is your upstream SNR. If there is noise ingress somewhere in the plant, then your upstream could be having all kinds of issues. Robert On Fri, 21 Feb 2014 05:23:07 -0500 shawn wilson wrote: Works: Downstream Channel Downstream Frequency52500 Hz56100

out of band management gear

2014-02-21 Thread Hank Disuko
Hi folks, I wonder if anyone has good experiences to share with out-of-band hardware? I'm looking for a good OOB hardware vendor. I need to manage my routers/switches/firewalls in a datacenter located overseas, and I'm looking to setup a good serial console server via an OOB link. I've been loo

Networking folk in the San Diego area...

2014-02-21 Thread John Curran
NANOGers - Just a reminder that there is a ARIN+NANOG on the Road session taking place in San Diego next week; the day long program has NANOG and ARIN speakers and is free but advance registration is recommended. If you know anyone who might benefit from attending such an event, ple

RE: out of band management gear

2014-02-21 Thread David Hubbard
Opengear's stuff works great; I believe they have models that support modem on serial port to complement the built-in cell connection. I really like the cell stuff; you can have the device keep the data side of the cell interface down for security and send it a text message to bring it hot so you

Re: level3_bx4-montrealak.net consistently dropping 50% of the packets

2014-02-21 Thread James Michael Keller
On 02/20/2014 10:08 AM, Nick Cameo wrote: Hello Everyone, According to mtr command we are consistently seeing level3_bx4-montrealak.net dropping 30-50% of packets. Our ISP is Bell Canada. Any ideas on how to get this resolved are greatly appreciated. HOST: victoriaLoss% S

Re: level3_bx4-montrealak.net consistently dropping 50% of the packets

2014-02-21 Thread Nick Cameo
Thank you all for clarifying. Really appreciate it.

Re: out of band management gear

2014-02-21 Thread Bryan Socha
We have both lantronix and opengear hardware and use the og brand almost exclusively now. Good price, extremely reliable. We have about 200 of them. On Feb 21, 2014 9:41 AM, "Hank Disuko" wrote: > Hi folks, > I wonder if anyone has good experiences to share with out-of-band hardware? > I'm loo

Re: comcast business service

2014-02-21 Thread William Herrin
On Fri, Feb 21, 2014 at 5:23 AM, shawn wilson wrote: > I'm not seeing any big difference in SNR (and only slight differences > in upstream power) and everything else seems to be the same. Though, > since db is logarithmic, .3 might be enough to matter? Do you also receive an _analog_ television s

Re: out of band management gear

2014-02-21 Thread Kenneth McRae
Using open gear exclusively now...no real issues with it. Sent from my iPad > On Feb 21, 2014, at 6:39 AM, Hank Disuko wrote: > > Hi folks, > I wonder if anyone has good experiences to share with out-of-band hardware? > I'm looking for a good OOB hardware vendor. I need to manage my > router

Re: out of band management gear

2014-02-21 Thread Brian Loveland
Same here, dozens of opengear devices deployed, about half with cellular, only issue we ever had 1 DOA (not totally dead, but behaving really badly) unit and they sent an overnight replacement since we were on the road visiting a remote site. On Fri, Feb 21, 2014 at 10:25 AM, Kenneth McRae wrote:

Re: VMware Training

2014-02-21 Thread Phil Gardner
On 02/19/2014 01:14 PM, Phil Gardner wrote: Not sure if this list is the best place, but it is probably the only list that I'm on that won't give me a bunch of grief about the chosen technology. I looked at VMware's site, and there are a ton of options. I'm wondering if anyone has some basic sug

Re: VMware Training

2014-02-21 Thread Eugeniu Patrascu
On Fri, Feb 21, 2014 at 7:37 PM, Phil Gardner wrote: > On 02/19/2014 01:14 PM, Phil Gardner wrote: > >> Not sure if this list is the best place, but it is probably the only >> list that I'm on that won't give me a bunch of grief about the chosen >> technology. >> >> I looked at VMware's site, and

Weekly Routing Table Report

2014-02-21 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.ap

Re: out of band management gear

2014-02-21 Thread Paul S.
Lantronix is pretty solid if it doesn't have issues with your hardware. I have a bunch of older Dell boxes where turning on virtual media makes them stall indefinitely on the boot prompt. Though, for serial only stuff -- it should be pretty good. On 2/22/2014 午前 12:39, Bryan Socha wrote: We

Akamai

2014-02-21 Thread Keith
I just want to publicly say hats off to Akamai today. We have seen spikes on our Akamai server before, but nothing like it has been in the last few days with the Canadian hockey live streaming. IOS7 release from Apple spiked it, but today, almost 800 megs of traffic coming off our server current

Re: Akamai

2014-02-21 Thread Clayton Zekelman
Hats off? They're not even sending the streams through TORIX which seems like a big day FAIL to me. Sent from my iPhone On 2014-02-21, at 1:39 PM, Keith wrote: > I just want to publicly say hats off to Akamai today. > > We have seen spikes on our Akamai server before, but nothing like it has

Re: Akamai

2014-02-21 Thread Keith
I would have figured an IX like that would have something there? Even BCNet has some akamai stuff within their network. We are pretty small in the scheme of things and have had Akamai for quite a few years, but this is the biggest event we have ever seen on our server. On 2/21/2014 10:47 AM,

Re: Akamai

2014-02-21 Thread Clayton Zekelman
They have TORIX connections, but they didn't seem to send the stream traffic through them. Sent from my iPhone On 2014-02-21, at 1:56 PM, Keith wrote: > I would have figured an IX like that would have something there? Even BCNet > has some akamai stuff > within their network. > > We are pret

Re: out of band management gear

2014-02-21 Thread Richard Hesse
We're really pleased with the Perle IOLAN line. They even have a gigabit port without a $10k price tag. Amazing! It really dumbfounds me why so many vendors are still putting 10/100 Ethernet ports on their OOB management (looking at you OpenGear). Especially a PITA today since many switchports tod

Re: out of band management gear

2014-02-21 Thread Randy Carpenter
OpenGear's newer stuff is Gigabit (SFP even). I've not seen any real switch made in the last decade that has a problem with 100Mb/s connections. Ancient cisco, maybe had issues. thanks, -Randy -- Randy Carpenter Vice President - IT Services First Network Group, Inc. (800)578-6381, Opt. 1 http

Re: Akamai

2014-02-21 Thread Martin Hannigan
Everyone, We do have an issue at the TorIX. We have isolated it to a hardware bug impacting our networking and we're working to get it fixed ASAP. It's not likely to be entirely fixed prior to the end of the Winter Olympics. We have a workaround that should allow us to serve more traffic locally

Re: out of band management gear

2014-02-21 Thread Jeremy Bresley
On 2/21/2014 2:27 PM, Randy Carpenter wrote: OpenGear's newer stuff is Gigabit (SFP even). I've not seen any real switch made in the last decade that has a problem with 100Mb/s connections. Ancient cisco, maybe had issues. There's several devices that are 1/10Gb and do NOT support 10/100Mb.

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher wrote: > On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch wrote: >> >> On Feb 20, 2014, at 3:51 PM, John Weekes wrote: >> > On 2/20/2014 12:41 PM, Edward Roels wrote: >> >> Curious if anyone else thinks filtering out NTP packets above a certain >> >>

The Cidr Report

2014-02-21 Thread cidr-report
This report has been generated at Fri Feb 21 21:13:38 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date

BGP Update Report

2014-02-21 Thread cidr-report
BGP Update Report Interval: 13-Feb-14 -to- 20-Feb-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS731569280 3.1% 989.7 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 2 - AS60349

The somewhat illegal fix for NTP attacks

2014-02-21 Thread Baldur Norddahl
Hi The following would probably be illegal so do not actually do this. But what if... there are just 4 billion IPv4 addresses. Scanning that address-space for open NTP is trivially done in a few hours. Abusing these servers for reflection attack is as trivial, hence the problem. How can we get the

Re: The somewhat illegal fix for NTP attacks

2014-02-21 Thread Landon
On 21 February 2014 14:08, Baldur Norddahl wrote: > Hi > > The following would probably be illegal so do not actually do this. But > what if... there are just 4 billion IPv4 addresses. Scanning that > address-space for open NTP is trivially done in a few hours. Abusing these > servers for reflecti

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Feb 22, 2014 5:30 AM, "Damian Menscher" wrote: > > On Fri, Feb 21, 2014 at 1:22 PM, Cb B wrote: >> >> On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher wrote: >> > On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch wrote: >> > You may also want to look at filtering UDP/80 outright as well, as that

Re: out of band management gear

2014-02-21 Thread Saku Ytti
On (2014-02-21 15:17 -0600), Jeremy Bresley wrote: > connections to devices that needed them. Expensive options in a > fully loaded chassis just for a couple lower-end devices that could > easily justify a couple dollars more to get a Gig PHY instead of the > older 100Mb PHY chip. There is no te

Re: out of band management gear

2014-02-21 Thread Nick Pope
Thinklogical Sentinel is great. CLI access via ssh, web access, modem for dial in and two ethernet ports for redundant network access, supports up to 32 devices and is dc/ac http://www.thinklogical.com/sentinel

LAX china unicom submarine cable cut?

2014-02-21 Thread Yucong Sun
Well, ain't that great day to finish the week. Some one today me a submarine cable is cut. Most of the networks in LAX that has peering with CU looks congested to hell now. Anyone else here seeing the same thing?

Re: LAX china unicom submarine cable cut?

2014-02-21 Thread Mehmet Akcin
What do you see? Packet loss? Latency? Mehmet > On Feb 22, 2014, at 4:14, Yucong Sun wrote: > > Well, ain't that great day to finish the week. Some one today me a > submarine cable is cut. > > Most of the networks in LAX that has peering with CU looks congested to > hell now. Anyone else here

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Seth Mattinen
Isn't UDP 80 still technically registered to HTTP? ~Seth

Gmail throttling?

2014-02-21 Thread Eduardo A. Suárez
Hi, some of our users have forwarded the email to Gmail and Gmail now are complaining that this is bulk mail and delaying it. We have SPF, DKIM, DMARC, even SRS to try these things do not happen :( Anyone know if there is any new policy in Gmail about that? Above all, the message refers to

NetSol AAAA glue

2014-02-21 Thread Brandon Applegate
If anyone with ability to fix this is reading this - contact me offlist and I'll owe you... I'm trying to change an host (name server) address. I've been emailing ipv6...@networksolutions.com back and forth for several days. After fighting through 'authentication' (which btw I *didn't* d

Re: Gmail throttling?

2014-02-21 Thread Brian Henson
The correct URL should be https://support.google.com/mail/answer/81126 On Fri, Feb 21, 2014 at 7:58 PM, Eduardo A. Suárez < esua...@fcaglp.fcaglp.unlp.edu.ar> wrote: > Hi, > > some of our users have forwarded the email to Gmail and Gmail now are > complaining that this is bulk mail and delaying

Re: NetSol AAAA glue

2014-02-21 Thread Chuck Anderson
It is quicker and easier to transfer your domain to another registrar, even though you will have to call them up and speak to a person to do it. On Fri, Feb 21, 2014 at 08:01:06PM -0500, Brandon Applegate wrote: > If anyone with ability to fix this is reading this - contact me > offlist and I'll o

NANOG 61 - Bellevue - Call For Presentations is open!

2014-02-21 Thread Greg Dendy
NANOG Community- I hope everyone enjoyed NANOG 60, NANOG’s largest attended winter meeting. Fresh off a great meeting, and post our NANOG Icelanta Reception, we are ready start the process for NANOG 61 in Bellevue. NANOG 61 will be NANOG’s 20th year serving the network operator community and

Re: Gmail throttling?

2014-02-21 Thread Suresh Ramasubramanian
Auto forwarded mail is like that. Any inbound spam your users receive also gets forwarded. So... On 22-Feb-2014 1:00 AM, "Eduardo A. Suárez" < esua...@fcaglp.fcaglp.unlp.edu.ar> wrote: > Hi, > > some of our users have forwarded the email to Gmail and Gmail now are > complaining that this is bulk m

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Saku Ytti
On (2014-02-21 14:37 -0800), Cb B wrote: > QUIC can do what it wants. Like anyone else, they pay their money and take > their chances. But, the data point that UDP is polluted is clearly > documented with several folks on this list suggesting tactical fixes that > involve limiting UDP, especially