Re: Arbor vs Narus comparison?

2008-12-18 Thread Rubens Kuhl Jr.
As Arbor bought Ellacoya and entered the service control business, Allot striked back buying Esphion, and it's now called Allot ServiceProtector. I haven't tested any of those. Rubens On Thu, Dec 18, 2008 at 7:20 AM, andy lam wrote: > Recently I've been searching for something that is compar

Re: Security team successfully cracks SSL using 200 PS3's and MD5 flaw.

2009-01-04 Thread Rubens Kuhl Jr.
Yeap: http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-02.txt TCPM WGJ. Touch Internet Draft USC/ISI Obsoletes: 2385 A. Mankin Inte

Re: Single IP routing problems through Level3

2008-06-15 Thread Rubens Kuhl Jr.
1) I've seen this behavior before; you are not alone in the universe. 2) Most likely there is a balanced channel on the path, either L3 or L2, and one of the links in the bundle is dead but has not been detected as such. Rubens On Sun, Jun 15, 2008 at 11:01 AM, Matt Palmer <[EMAIL PROTECTED]> w

Re: Replacement for Avaya CNA/RouteScience

2008-07-05 Thread Rubens Kuhl Jr.
If you already own Cisco gear, Cisco OER (which now has another marketing name) might do the trick without buying any appliances, as it runs on top of IOS. Rubens On Thu, Jul 3, 2008 at 8:50 AM, Drew Weaver <[EMAIL PROTECTED]> wrote: >Howdy for reasons it might be inappropriate to dis

Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?

2008-07-24 Thread Rubens Kuhl Jr.
Some broadband providers here in .br seems to be blocking access to the dns-oarc.net test zone (but not to the portal site); most thought it was intended behavior by those providers (hiding instead of patching), but you are right, someone might have corrupted the test zone itself, which aleviates t

Re: Software router state of the art

2008-07-28 Thread Rubens Kuhl Jr.
>> It keeps track of Src/Dst/QoS/Ethernet adapters/etc.. Additionally most >> systems have the iptables modules loaded in kernel and the conntrack >> module in kernel. This immediately activates connection tracking, >> therefore considerably slowing down software routing. The most optimal >> way of

Re: Force10 Gear - Opinions

2008-08-25 Thread Rubens Kuhl Jr.
>> 2) Performance > > [Note: we have no 10g interfaces, so I can only speak to a many-singleg-port > environment] > Much higher than Cisco. So good at dealing with traffic problems that we > have had multi-gig DoS attacks that we wouldn't have known about without > having an IDS running on a

Re: Force10 Gear - Opinions

2008-09-03 Thread Rubens Kuhl Jr.
> This statement is patently false. The uRPF failures I dealt with were based > entirely on the recommended settings, and were confirmed by Cisco. Last I > heard (2 months ago) the problems remain. Cisco just isn't being honest > with you about them. Would you mind telling us what is the scenar

Re: Force10 Gear - Opinions

2008-09-04 Thread Rubens Kuhl Jr.
> > And 60 points off Cisco is possible, even for small shops with some > negotiating ability. That's not our experience; it seems that BUs protecting margins talk louder than the sales guys, so when it reaches discounts like that, even because of lack of adequate product from Cisco (lower gear ca

Re: Internet Traffic Begins to Bypass the U.S.

2008-09-14 Thread Rubens Kuhl Jr.
> For instance, out of Australia we have a single, old cable going West out of > Perth to Singapore (SEA-ME-WE3) which allows only low speed circuits, but > we've got almost 4 (as of next year) cables going North and East out of > Sydney. So most Europe traffic to/from Australia is via the USA.