Re: Application or Software to detect or Block unmanaged swicthes

data either way. Brad Original message From: Ben Cannon Date: 6/8/18 13:28 (GMT-07:00) To: Kasper Adel Cc: nanog@nanog.org Subject: Re: Application or Software to detect or Block unmanaged swicthes I’ve got an easy way to do this, I confiscate ‘em ;) As others have said

Re: Impacts of Encryption Everywhere (any solution?)

a very small number users - then perhaps they could benefit the most by these changes with additional capacity. -Brad Original message From: Michael Hallgren Date: 6/17/18 11:14 (GMT-07:00) To: na...@jack.fr.eu.org Cc: Matthew Petach , nanog@nanog.org Subject: Re: Impacts

amazon.com multiple SPF records

If anyone at Amazon is paying attention, you have duplicate spf1 records for amazon.com: # dig -t TXT amazon.com | grep spf amazon.com. 281 IN TXT "spf2.0/pra include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all" amazon.com. 281 IN

CenturyLink Traffic Shift

We saw a big shift in traffic away from CenturyLink on Saturday night, looks like much of the traffic shifted over to Verizon Digital Media Services (Edgecast CDN). That night we noticed there was a Hulu outage about the same time so I suspect that is what it is. I am wondering if others are s

Re: Partial vs Full tables

On Thu, Jun 11, 2020 at 12:01:38AM +0200, Baldur Norddahl wrote: Am I correct in assuming loose mode RPF only drops packets from unannounced address space in the global routing table? And the downside of doing so is that sometimes we do receive packets from that address space, usually back scatte

Re: uPRF strict more

On Wed, Sep 29, 2021 at 06:14:21PM +, Phil Bedard wrote: Disclosure I work for Cisco and try to look after some of their peering guidelines. Agree with Adam’s statement, use uRPF on edge DIA customers. Using it elsewhere on the network eventually is going to cause some issue and its usef

Re: uPRF strict more

On Wed, Sep 29, 2021 at 02:54:43PM -0400, Jean St-Laurent wrote: Hi Brad, I'd be interested to hear more about this pps penalty. Do we talk about 5% penalty or something closer to 50%? Let me know if you still have some numbers close to you related to PPS with uRPF loose. iirc, stri

Re: uPRF strict more

On Wed, Sep 29, 2021 at 11:38:19PM +0200, Baldur Norddahl wrote: On Wed, 29 Sept 2021 at 22:07, Jean St-Laurent via NANOG wrote: Thanks a lot for sharing. So 100 Gbps at line rate with 80B frames is about ~150 Mpps. 100 Gbps at line rate with 208B frames is about ~60 Mpps. It's a significan

Re: ROA Will Expire Soon - ARIN

new ROA has been published to the repository or you can simply wait for it to expire. Brad From: NANOG on behalf of Ca By Date: Friday, September 9, 2022 at 10:12 AM To: John Sweeting Cc: North American Network Operators' Group Subject: Re: ROA Will Expire Soon - ARIN On Fri, Sep 9,

Re: ROA Will Expire Soon - ARIN

Peter, ROAs created using ARIN’s Hosted RPKI service do not auto-renew. A point of contact (admin,tech,routing) linked to the organization can create and delete ROAs. This does not require contacting the ARIN Help Desk. Best regards, Brad Gorman Sr Product Owner, Routing Security American

Contact at VuDu

Can anyone at VuDu contact me off list? Have issues with some new subnets we have and our end users cannot access the VuDu service with various error messages. Thanks

Contact for Hulu

Can anyone at Hulu contact me off list? Have issues with some new subnets we have and our end users cannot access the Hulu service with various error messages. Thanks

Re: Test Lab Best Practices

On Thu, Sep 28, 2023 at 10:14:24AM -0400, Kenneth Vedder wrote: Hello NANOG, We have been struggling with firmware bugs from a specific router vendor. I am looking to set up a test lab of our core network and a few remote site routers. Protocols would include SR-MPLS, ISIS, EVPN MPLS and L3VPN

Gmail or GAFYD SREs on the list?

Folks, Do we have any SREs from the Gmail or Google Apps For Your Domain teams on the list? I’m helping to support some domains related to the Network Time Foundation and NTP.org, and we’re having some problems with IPv6 connectivity to them. Thanks! -- Brad Knowles signature.asc

Re: USB Ethernet Adapters

ter can't be beat. I do not yet have enough experience with USB, or USB-C, or Thunderbolt 3 adapters to be able to make any recommendations. -- Brad Knowles signature.asc Description: Message signed with OpenPGP

Re: BGP Hijack/Sickness with AS4637

    Router ID: 202.84.219.12 Regards, Brad ColoAU (AS63956) Colocation Australia Pty Ltd <http://coloau.com.au> Brad Hooper / Network Architect b...@coloau.com.au <mailto:b...@coloau.com.au>/ +61 7 3106 3810 Colocation Australia Pty Ltd http://coloau.com.au Fa

Re: Whats going on at Cogent

think we've been pretty happy as a customer of HE, but then we're just a small customer of theirs. -- Brad Knowles Please forgive any typos. I'm fighting a failing keyboard on my laptop, in addition to having a broken finger.

NANOG 75 Call For Presentations Update

aterials received after that date will be updated on the web site after the completion of the conference. We look forward to seeing you in February in San Francisco! Sincerely, Brad Raymo NANOG PC

ESPN streaming issues

Anyone have a contact for ESPN or can someone contact me off list? Have a good amount of IP space that just started reporting the IP is out of the country. Thanks

Cloudfront Blocking IP ranges

Does anyone know the best way to get a hold of Amazon and get out off the naughty list on Cloudfront? I've got some ranges that appear to be blocked totally by Cloudfront. Thanks in advance

Re: Cloudfront Blocking IP ranges

16 AM Quentin Gabrel wrote: > Hi Brad, > > We have been experiencing the same issue over the past week, with all our > ranges seemingly affected. > I reached out to AWS through ab...@amazonaws.com and peering...@amazon.com. > > > Below is the response I received: > > Than

Re: Microsoft O365 labels nanog potential fraud?

big mistakes than others. -- Brad Knowles

Re: Please run windows update now

pain and anguish that they create. That's just the way things are. Not the way they should be, but the way they are. -- Brad Knowles

Re: Please run windows update now

urity shenanigas occur. That is the sound of a cash > register to me. Not everyone licks their chops and thinks "fresh meat" when they see worldwide panic that results from a massive security hole like this. Some of us just want to get regular work done. -- Brad Knowles

Re: Please run windows update now

and dogs for Porsche Panameras Thanks, but no. I am already forced to do much more in the security space than I would like. And I love my little miracle kitty very much. I wouldn't trade her for any kind of vehicle in this world. I am rather less materialistic than that. -- Brad Knowles

Re: Please run windows update now

one of the other drivers out there who might be impacted by the lack of due diligence practiced by another driver on the road, which approach are you going to want to see implemented? -- Brad Knowles

Re: Please run windows update now

up? Good conspiracy questions to ask. But frankly, I don't care that Microsoft wants to blame the NSA for hoarding vulnerabilities. If Microsoft had spent more time/money/effort to get their crap right the first time, then we wouldn't have this mess. We might have a different mess, but we wouldn't have this one. -- Brad Knowles

Re: Peering at public exchange authentication

Its up to you and how you want to manage your sessions. Some networks require it, some prefer it but do not require it, and others do not want to use it at all. On Fri, Sep 29, 2017 at 10:41 AM, craig washington < craigwashingto...@hotmail.com> wrote: > Hello all, > > > Wondering your views or co

Re: Suggestions for a more privacy conscious email provider

this can ignore that > advice :) Do I count? I only accused the Director of the NSA of High Treason in my letter to the editors of the Communications of the ACM (see <http://www.shub-internet.org/brad/cacm92nov.html>). So, yeah -- having the hardware here in my house so that it i

Re: Suggestions for a more privacy conscious email provider

your archive of old mail without breaking into the box sitting in your house. -- Brad Knowles signature.asc Description: Message signed with OpenPGP

Re: Suggestions for a more privacy conscious email provider

On Dec 4, 2017, at 4:51 PM, valdis.kletni...@vt.edu wrote: >> Do I count? I only accused the Director of the NSA of High Treason in >> my letter to the editors of the Communications of the ACM (see >> <http://www.shub-internet.org/brad/cacm92nov.html>). > > Treason

Re: Suggestions for a more privacy conscious email provider

primary missions will take a back seat. Not treason my > friend just focus on his mission. I believed at the time that he was causing Very Grave Harm to National Security Interests, through their actions to try to force the standardization on poor encryption algorithms and prohibit

Re: rz.verisign-grs.com root zone ftp access

hannel-resources/domain-registry-products/zone-file-information/index.xhtml Regards, Brad G. Bradford Verd Vice President Operations bv...@verisign.com<mailto:bv...@verisign.com> 12061 Bluemont Way Reston, VA 20190 VerisignInc.com<http://www.verisigninc.com/> [cid:image003.gif@01CE

Re: ATT GigE issue on 11/19 in Kansas City

On Nov 29, 2011, at 8:17 PM, wrote: > We lost several of our GigE links to AT&T for 6 hours on 11/19, anyone else > see this and get a root cause from AT&T? All I can get is that they believe a > change caused the issue. > We lost several (but not all) of our Optiman circuits on 11/19 at about

Re: ATT GigE issue on 11/19 in Kansas City

On Nov 30, 2011, at 9:51 AM, Blake Hudson wrote: > Stefan wrote the following on 11/30/2011 8:53 AM: >> On Wed, Nov 30, 2011 at 8:21 AM, Brad Fleming wrote: >>> On Nov 29, 2011, at 8:17 PM, wrote: >>> >>>> We lost several of our GigE links to AT&T

Re: ATT GigE issue on 11/19 in Kansas City

>>> >> In either case I'm a customer and will likely never be told what went wrong. >> I'm OK with that so long as it doesn't happen again! >> > Does being told what happened somehow prevent it from happening it again? Nope. But if this same issue crops up again we'll have to "work the system"

Re: anyone from spamhaus hanging around?

On Thu, 13 Sep 2012 11:17:44 -0400 Brad Barnett wrote: > > We've been running a clean operation for years, but recently, one of our > clients spammed then entire universe (using external mail servers, but > linking to some internal URLs). > > We've since terminat

Re: AS 1668 BGP contact - possible prefix hijacking

r today by phone and make sure that it answers your questions. Brad Passwaters - Director Production Networks at Aol (My Nanog participation predates my employment at Aol thus the use of a personal account) On Tue, Nov 6, 2012 at 9:02 AM, Ben Bartsch wrote: > Hi: > > Is there anyone h

Re: Juniper MX Sizing

Then you should look for something other then the MX104. In our testing an MX104 running Junos 13.3R4 with a single, full feed took about 4min 25sec to (1) converge the RIB from a router sitting 0.5ms RTT away and (2) update the FIB with all entries. This performance was observed with single RE

Re: Juniper MX Sizing

. Once we get some MX480s on the bench I’ll report back. > On Dec 5, 2014, at 2:35 PM, Shawn Hsiao wrote: > > > MX480 is also not instantaneous, so the same problem applies. Brad, do you > have the number for MX480 for comparison? > > What we decided was, given both m

Re: Juniper MX Sizing

nt those > of the company. Finally, the recipient should check this email and any > attachments for the presence of viruses. The company accepts no liability for > any damage caused by any virus transmitted by this email. > >> On Dec 6, 2014, at 12:01 AM, Brad Fleming > <m

Re: Charter ARP Leak

This is normal for a cable modem network. These are broadcast packets so they get delivered to everybody on that node. ARP uses layer-2 broadcast to ask for the owner of a given IP to respond with its MAC so that subsequent communication with that IP can be addressed directly. [sent from mobile d

AT&T uVerse blocking SIP?

Has anyone seen issues where a end user on uVerse trying to connect to either another provider or AT&T non uVerse (in this case DIA) is having SIP blocked? SIP leaving the uVerse network going to another uVerse DSL account is fine, but it appears soon as it leave the uVerse network all SIP traffic

Re: AT&T uVerse blocking SIP?

/sbin/iptables -A PREROUTING -t nat -i eth1 -p udp --dport 5061 -j > REDIRECT --to-port 5060 > > > > on the host to remap 5061 -> 5060 with no application change. > > > > - Jared > > > >> On Jan 26, 2015, at 4:26 PM, Brad Bendy wrote: > >> > &g

Re: AT&T uVerse blocking SIP?

> damage introduced by these CPE devices (like broken DNS proxies, etc). > > - Jared > > > On Jan 27, 2015, at 9:47 AM, Brad Bendy wrote: > > > > They are saying this CPE has no ALG in it, but they can enable DMZ, > which acourse made zero difference. > > > >

Re: UDP clamped on service provider links

> >> In one case, when we were having an issue with a SIP trunk, we re-numbered >> our end to another IP in the same subnet. Same path from A to Z, but the >> packet loss mysteriously disappeared using the new IP. > > lag hash put you on a congested fiber? Or perhaps a switch fabric module geeke

Re: Strange entries from AS1 in global table

I think Level(3) uses it for at least some L3 MPLS VPN stuff. We peer with that AS for dedicated SIP service transport for example. On Aug 8, 2013, at 5:25 AM, Humberto Galiza wrote: > Looking at our routers I can see this: > 3549 3356 26114 1 i > 12956 1239 23520 23383 1 ? > > but neither 26

Peering Exchange Configurations

responses. -- Brad Fleming

Re: Juniper firewalls - SSG or SRX

On Apr 19, 2010, at 7:32 PM, Jeffrey Negro wrote: Has anyone on Nanog had any hands on experience with the lower end of the new SRX series Junipers? We're looking to purchase two new firewalls, and I'm debating going with SSG series or to make the jump to the SRX line. Any input, especia

Latency between GCI Anchorage and VZB in NY

All, I've been working diligently to improve performance of interactive applications (Citrix, terminal) that are run by users in our office located in Anchorage, and are served by a managed Internet connection provided by GCI. Our applications reside in the Buffalo, NY area. Via MTR, I've see

Re: Dividing up a small IPv4 block

Thinking that they will have to go back to ARIN for additional space relatively quickly without intervention, can anyone provide links to docs that will help prevent future renumbering or decent management? I know that I can collapse a lot of their current waste, and I know where I can scrounge

Re: A bit off topic: Video streaming/video on demand server

So I'm looking for some help, perhaps experience with products, I'm a big fan of QTSS for this type of application, myself: and use Wirecast for the broadcasting client: along with a good vid

Re: Standard for BGP community lists

it was easy to identify visually. And obviously, I have safe-guards to not leak those communities into other networks. brad On Jul 19, 2010, at 5:52 PM, Steve Bertrand wrote: Many ISPs publish community lists that go above-and-beyond standard route selection. Is there a standard for this?

Road Runner Abuse Contact

Any Road Runner abuse reps on the list? If so, could you please contact me off-list?

AC to DC Power Supplies

and a max of 420W. Thanks for any suggestions! -Brad Fleming

Re: Cogent input

been customers for nearly two full years and intend to continue for at least a third. -brad fleming

3rd Party Router Comparisons and Testing

ep them private (this is only for my use, not official decision making). Does anyone happen to have a source they would be willing to pass along? Thanks in advance for any suggestions! -- Brad Fleming Kansas Research and Education Network

Re: Cisco 7600 (7609) as a core BGP router.

anyone explain it briefly? 3) Do ACLs use some of these resources or do they get their own slice of memory? That page also reports "up to 40 Gbps per slot of switching capacity; 720 Gbps aggregate bandwidth". Is the 40Gbps per slot an aggregate or full-duplex value? Thanks for hel

Best Effort QoS Drop Profile Input

hanks in advance! -brad fleming

Re: Failover how much complexity will it add?

I would have thought that this lesson would still be fresh in the minds of people, as we just passed 256K routes a little while ago and broke a whole bunch of Catalyst 6500/7600 SUP720-3B's (etc). I guess the pain isn't as memorable as I thought. Not all of us forgot... I remember the day our

Re: Gig Throughput on IPSEC

On Nov 11, 2009, at 3:25 AM, a...@baklawasecrets.com wrote: Hi, I have a requirement to encrypt data using IPSEC over a p-t-p gig fibre link. In the past I've normally used Juniper to terminate VPNs, as I have found them excellent devices and the route based VPN functionality very usef

Any recent predictions for routing table growth?

Hi, I am looking for some recent estimates of future IPv4 & IPv6 routing table growth, the most recent reliable estimate I can find was done by Vince Fuller in his presentation in March 2007, is there any newer or alternative figures out? Thanks Bradley

Re: Recommendation of Tools

perfSONAR is another, more long term solution for performance monitoring (if that's what you happen to be looking for). http://www.internet2.edu/performance/pS-PS/ -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-865-723

Re: Stress Testing LAN/WAN

a GiGE card as the generator. -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-3662

Re: Fiber Plant Tracking Database

You could also look at OSPInSight: http://ospinsight.com/osp/ Brad.

Re: Inauguration streaming traffic

tern University: Thanks for your work... if nothing else, it helped a bunch of dorks in Kansas watch the events without consuming precious I1 capacity. :D -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-

MPLS Backbone ASN Use - Best Practice?

P MPLS services? Thanks, Brad Roldan

Re: can I ask mtu question

eboot in the IronWare 3.3.x days). It does NOT reboot immediately so you're free to make the change then perform a reboot at a convenient time. -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-3662

Re: [Update] Re: New ISP to market, BCP 38, and new tactics

On Feb 4, 2009, at 2:52 AM, Steve Bertrand wrote: http://tools.ietf.org/html/draft-kumari-blackhole-urpf-02 If I understand this correctly, there will be a route entered on each edge router for all sources that are participating in a DDoS attack. Is anyone worried about TCAM usage if on

Re: Network diagram software

use it for all our network and service diagrams.. probably because we're all Mac users! :D -- Brad Fleming Kansas Research and Education Network

J-series and Cisco ME3400 L2 Issues

o 100/full. Has anyone else seen similar problem using either the J-series or an ME3400? If so, did you ever find a complete resolution (or explanation)? Thanks for any insight! -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-86

Packetloss while transiting as7018

ms --- 24.73.68.114 ping statistics --- 122 packets transmitted, 122 received, 0% packet loss, time 121191ms rtt min/avg/max/mdev = 41.699/43.900/46.118/1.060 ms, pipe 2 Brad Tarno Backbone Network Engineer Rackspace IT Hosting Confident

Re: BGP Scalability Simulation

Vince Fuller has done some projections on what the the routing tables will be like in the near future which would be useful for you, check out http://www.ripe.net/ripe/meetings/ripe-53/presentations/rou-vf-sca.pdf If you are looking at doing simulations of what it could be like, use similar figure

Re: Juniper M120 Alternatives

I'd think the Juniper MX series might fit, as well as the Brocade NetIron XMR. And of course the Cisco you already mentioned. -brad On Nov 16, 2009, at 9:54 AM, Gary Mackenzie wrote: Having slightly lost track of what everybody is using for peering routers these days, what is the cons

Ethernet over DS3 Converters

ttp://www.rad.com/10/Fast_Ethernet_over_T3_NTU/2480/ Thanks very much for any suggestions. -- Brad Fleming Network Engineer Kansas Research and Education Network Office:785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-3662

AT&T SMTP Admin contact?

ts... The CGI form at http://wn.att.net/cgi-bin/block_admin.cgi has also got a dead link at the bottom, which shakes my confidence in its level of maintenance a little. Thanks in advance, -- Regards, Brad Laue Systems Administrator, Inftek Hosting 1-888-44-SYNCD http://www.getsyncd.com (888)

Re: AT&T SMTP Admin contact?

Patrick Tracanelli wrote: Brad Laue escreveu: Hi all, Would I be able to get an AT&T mail administrator to contact me off-list? We've recently moved our mailservers to a new IP address range, and the standard CGI forms haven't produced any progress for us in over a week now.

Re: AT&T SMTP Admin contact?

On 2009-11-24, at 1:27 PM, Joel Jaeggli wrote: > > > valdis.kletni...@vt.edu wrote: >> On Tue, 24 Nov 2009 11:50:54 EST, Brad Laue said: >>> maintained. I'm unclear as to why mail administrators don't work more >>> proactively with things lik

Re: AT&T SMTP Admin contact?

On 2009-11-24, at 6:15 PM, valdis.kletni...@vt.edu wrote: > On Tue, 24 Nov 2009 16:38:33 EST, Brad Laue said: > >> True, but wouldn't a blacklist of SPF records for known spam issuing >> domains be a more maintainable list than an IP block whitelist? >> >> (

Re: he.net down/slow?

no issues in Kansas City (area) via Internet2 at 12:10pm Central. On Jan 7, 2010, at 11:30 AM, Brian Johnson wrote: Has anyone noticed that accessing http://www.he.net or http://ipv6.he.net is either slow or inaccessible? Please let me know if you have a different experience currently. Thanks

10Gbps Traffic Test Systems

her on-list or off, are welcome and appreciated. Brad Fleming

RE: Default route with object tracking

Make sure you source your icmp-echos from the address on the interface facing your primary ISP, otherwise your routing table will oscillate continually until your primary ISP comes back up. Here's how I did it with a cable ISP (note my event manager stuff uses no email body to get around the bug i

Air Force Blacklist

wondering if: 1) Anyone has experience getting themselves OFF an Air Force blocked list and is willing to share tips. 2) If there are any Air Force contacts that can confirm or deny that a specific IP is indeed blocked or if we're chasing the wrong problem. Off-list replies (obviously) welcome. -- Brad Fleming

Re: Comcast IPv6 Trials Update

I found "Migrating to IPv6: A practical guide to implementing IPv6 in mobile and fixed networks" by Marc Blanchet very well written and "worth the price of admission". ISBN: 978-0471-49892-6 -- Brad Fleming On Mar 1, 2010, at 8:21 AM, Curtis Maurand wrote: Can anyon

L2TPv3 Vendor Support

need a TON of management features.. it'll only be used as an L2TPv3 aggregator. I very much appreciate any suggestions or insights. -- Brad Fleming

Re: Books for the NOC guys...

a routing problem, that generally needs to get bumped up anyway since it means somethings misconfigured or a routing protocol is acting up. -- Brad Fleming

March Madness on Demand CDN?

Does anyone know which CDN(s) will be used for this year's March Madness On Demand?

Re: ARIN RPKI Trust Anchor Issue

We at ARIN have verified that all our systems are functioning optimally and there were no indications of any issues at the time of the PacketVis alerts. Brad Gorman Director, Customer Technical Services American Registry for Internet Numbers From: NANOG on behalf of Job Snijders Date

Re: Russian Anal Probing + Malware

D was understandably not > anxious to brief even the President about all this... > > https://www.businessinsider.com/us-officials-hide-russia-cyber-operation-trump-2019-6 > > (Not that anybody can really blame them for THAT.) P.S - Lets try to keep politics off the list. We get enough of that everywhere else. Thanks, Brad