Re: DDOS, IDS, RTBH, and Rate limiting

2014-11-21 Thread Denys Fedoryshchenko
based collector.. -- Tim On Fri, Nov 21, 2014 at 9:06 AM, Denys Fedoryshchenko wrote: On 2014-11-21 18:41, Peter Phaal wrote: Actually, sFlow from many vendors is pretty good (per your points about flow burstiness and delays), and is good enough for dDoS detection. Not for security forensic

Re: DDOS, IDS, RTBH, and Rate limiting

2014-11-22 Thread Denys Fedoryshchenko
On 2014-11-22 18:00, freed...@freedman.net wrote: > Cisco ASRs and MXs with inline jflow can do hundreds of K flows/second > without affecting packet forwarding. Yes, i agree,those are good for netflow, but when they already exist in network. Does it worth to buy ASR, if L3 switch already doi

Re: OT - Small DNS "appliances" for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
Beaglebone has gigabit mac, but due some errata it is not used in gigabit mode, it is 100M (which is maybe enough for small office). But it is "hardware" mac. Another hardware MAC on inexpensive board it is Odroid-C1. But stability of all this boards in heavy networking use is under question, i

Re: OT - Small DNS "appliances" for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
On 2015-02-19 15:13, Rob Seastrom wrote: Denys Fedoryshchenko writes: Beaglebone has gigabit mac, but due some errata it is not used in gigabit mode, it is 100M (which is maybe enough for small office). But it is "hardware" mac. The Beaglebone Black rev C BOM calls out the etherne

Re: OT - Small DNS "appliances" for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
On 2015-02-19 18:26, valdis.kletni...@vt.edu wrote: On Thu, 19 Feb 2015 14:52:42 +, David Reader said: I'm using several to connect sensors, actuators, and such to a private network, which it's great for - but I'd think at least twice before deploying one as a public-serving host in user-e

Re: US Warships jamming Lebanon Internet

2011-02-07 Thread Denys Fedoryshchenko
Hi I'm sysadmin of Lebanese ISP. Almost at same time i got heavy interference on few of my C-Band carriers, and it looks like electronic warfare jamming, because i can see phase modulated, very weak signal, but it is completely breaking almost any communications on my carriers. Strange thing,

Re: US Warships jamming Lebanon Internet

2011-02-08 Thread Denys Fedoryshchenko
On Tuesday 08 February 2011 01:42:42 George Herbert wrote: > On Mon, Feb 7, 2011 at 2:23 PM, Ryan Wilkins wrote: > > On Feb 7, 2011, at 4:06 PM, Michael Painter wrote: > >> Hi Denys > >> I doubt it's intentional jamming since I've had the same problem. > >> Aegis radar is very high power in full r

Re: US Warships jamming Lebanon Internet

2011-02-08 Thread Denys Fedoryshchenko
On Tuesday 08 February 2011 14:18:59 Adrian Chadd wrote: > On Tue, Feb 08, 2011, Denys Fedoryshchenko wrote: > > I try to install C-Band bandpass filter, no effect at all, so it is > > in-band > > > > interference. Putting foil (yes i try almost everything)

Re: US Warships jamming Lebanon Internet

2011-02-08 Thread Denys Fedoryshchenko
On Tuesday 08 February 2011 14:34:58 TR Shaw wrote: > On Feb 8, 2011, at 6:59 AM, Denys Fedoryshchenko wrote: > > On Tuesday 08 February 2011 01:42:42 George Herbert wrote: > >> On Mon, Feb 7, 2011 at 2:23 PM, Ryan Wilkins wrote: > >>> On Feb 7, 2011, at 4:06 PM, Mi

Re: US Warships jamming Lebanon Internet

2011-02-08 Thread Denys Fedoryshchenko
On Tuesday 08 February 2011 14:41:29 Adrian Chadd wrote: > On Tue, Feb 08, 2011, Denys Fedoryshchenko wrote: > > On Tuesday 08 February 2011 14:18:59 Adrian Chadd wrote: > > > On Tue, Feb 08, 2011, Denys Fedoryshchenko wrote: > > > > I try to install C-Band bandpas

Re: US Warships jamming Lebanon Internet

2011-02-08 Thread Denys Fedoryshchenko
On Tuesday 08 February 2011 15:46:31 TR Shaw wrote: > On Feb 8, 2011, at 7:34 AM, Denys Fedoryshchenko wrote: > > On Tuesday 08 February 2011 14:41:29 Adrian Chadd wrote: > >> On Tue, Feb 08, 2011, Denys Fedoryshchenko wrote: > >>> On Tuesday 08 February 2011 14:18:59

Re: VPN over slow Internet connections

2011-04-21 Thread Denys Fedoryshchenko
On Thu, 21 Apr 2011 17:55:32 +0100, Ben Whorwood wrote: IMHO it is not good idea to go to OpenVPN/IPSec/etc level at all (IP layer at least, and in case of Windows it is also ethernet headers). First of all OpenVPN for Windows/different OS sometimes become a headache and need admin privileges.

<    1   2