Re: [c-nsp] Output drops mysteriously appear/disappear on 3750X

2012-08-22 Thread Jeff Kell
Usually shows up (worse) on port channels. Drops are read as a single binary counter, and are calculated as a delta from the previously read values. Occasionally the port channel values are offset 2x the previous values (individual ports versus the channel). We've been dealing with the network

Re: [Freesurfer] moving volumetric masks to surface labels within subject

2012-08-17 Thread Alex Kell
to the orig.mgz's. alex On Fri, Aug 17, 2012 at 11:07 AM, Bruce Fischl fis...@nmr.mgh.harvard.eduwrote: Hi Alex when you say it is in the native anatomical space can you elaborate? How did you create the mask? Bruce On Fri, 17 Aug 2012, Alex Kell wrote: hi freesurfers, i'm trying to move a volume

Re: [Freesurfer] moving volumetric masks to surface labels within subject

2012-08-17 Thread Alex Kell
is in the right place (hit the compare button to flip back and forth). doug On 08/17/2012 11:02 AM, Alex Kell wrote: hi freesurfers, i'm trying to move a volume from a subject's native anatomical space to that subject's surface space, and i'm running into some difficulty. we have binary masks

Re: [Freesurfer] moving volumetric masks to surface labels within subject

2012-08-17 Thread Alex Kell
), then it will try to read it as a surface and fail. To look at it in tksurfer, load it as an overlay, eg tksurfer subject lh inflated -overlay surf_name.mgz doug On 08/17/2012 02:26 PM, Alex Kell wrote: hi doug, i can't visualize it. when i try to use tksurfer (or even mris_info) i get the following

Re: [c-nsp] Problem with the same route in the general routing table and in vrf

2012-08-09 Thread Jeff Kell
On 8/9/2012 4:32 AM, Luca Tortiglione wrote: ! route-map PC_TO_VTC permit 1 match ip address 100 set vrf VTC I suspect you need to complete your route map... you set vrf VTC for VRF targeted traffic, you need another level with set global on the return side. At least that's what I've done

[Bug 941874] Re: (fakeraid) root device not activated during boot

2012-08-03 Thread Laurie Kell
Hi I am encountering the same problems, in that I am trying to install UBUNTU 12.04 on a Sony vaio VPCZ13C5E. But can't get past busybox. I used boot/repair to try and fix the problem, the diagnostics and a dscription of my system are at http://paste.ubuntu.com/1126678/ Any help would be

[Bug 941874] Re: (fakeraid) root device not activated during boot

2012-08-03 Thread Laurie Kell
Hi I am encountering the same problems, in that I am trying to install UBUNTU 12.04 on a Sony vaio VPCZ13C5E. But can't get past busybox. I used boot/repair to try and fix the problem, the diagnostics and a dscription of my system are at http://paste.ubuntu.com/1126678/ Any help would be

Re: [c-nsp] Point to Point T1's and vlan nightmares

2012-07-27 Thread Jeff Kell
On 7/27/2012 5:38 PM, Oliver Garraux wrote: Preventing duplicate VLAN numbers sounds like it could be better solved through process changes rather than technical changes. Maybe a wiki or a spreadsheet, or a single person that's in charge of assigning new VLAN's. (Not trying to be

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-07-05 Thread Jeff Kell
On 7/5/2012 11:11 AM, Peter P Morrissey wrote: I doubt that Apple has any clue that Educause even exists. Pete Morrissey It doesn't show up in Bonjour, and doesn't answer multicast DNS requests, so no, it can't possibly exist :) Jeff ** Participation and subscription information

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-07-04 Thread Jeff Kell
On 7/4/2012 2:48 PM, Frank Bulk wrote: Ok, I'm confused. If you turn the AP's radios off, how do the wireless clients participate in Airplay? Most Apple TVs can do wired ethernet, which is a good thing. Many MacOS/iOS devices they want to use to project to them can not do wired ethernet.

[Bug 1008553] [NEW] startkde deletes custom plasma-desktop.desktop file

2012-06-04 Thread Stephen Kell
Public bug reported: I use a customised configuration for running KDE. In particular, I use fvwm as the window manager, and disable plasma-desktop by creating my own plasma-desktop.desktop file in ~/.config/autostart, which is just a copy of the one in /usr/share/autostart with Hidden=true added

[Bug 1008553] [NEW] startkde deletes custom plasma-desktop.desktop file

2012-06-04 Thread Stephen Kell
Public bug reported: I use a customised configuration for running KDE. In particular, I use fvwm as the window manager, and disable plasma-desktop by creating my own plasma-desktop.desktop file in ~/.config/autostart, which is just a copy of the one in /usr/share/autostart with Hidden=true added

Re: [c-nsp] 4500-E EOL?

2012-05-20 Thread Jeff Kell
On 5/20/2012 10:54 PM, Keegan Holley wrote: Are you sure? The only release bulletin I could find was from 2010 and that's the year the EOS'd the non-E chassis. They dropped the non-Es for the -Es. Now they're dropping the -Es for the +Es. 6500 non-Es were dropped even earlier (support runs

Re: [c-nsp] Stacking 3750X vs diverse 4948E

2012-05-20 Thread Jeff Kell
Just to provide another data point / opinion... We have 3560, 3560X, 3750, 3750E, 3750X all deployed, typically as CE routers. We are moving to 3750s to stack for redundancy. Most are well-behaved with a few exceptions... Any of the X-series with a microcode update can take 30 minutes or more

Re: [c-nsp] An observation: 512k default max-prefix in IOS-XR

2012-04-28 Thread Jeff Kell
On 4/28/2012 4:10 PM, Robert Blayzor wrote: Well the reality of the 720-3BXL in an IPv4/v6 world is that you get about 500k IPv4 and half that in IPv6 (IIRC). The l3xl scale license will get you 1M IPv4 routes and 128K IPv6. Of course you'll lose a lot of your L2 scale. So if your considering

Re: Operation Ghost Click

2012-04-26 Thread Jeff Kell
On 4/26/2012 5:44 PM, Andrew Latham wrote: Yes its a major problem for the users unknowingly infected. To them it will look like their Internet connection is down. Expect ISPs to field lots of support calls. And what about the millions of users unknowingly infected with something else ??

Re: [c-nsp] VRF-Lite and IPv6...

2012-04-26 Thread Jeff Kell
AFAIK there is just LAN Base, IP Base, and IP Services now, IPv6 was rolled into IP Services. It was IP Services, 15.0(1). On 4/26/2012 10:03 AM, Dale W. Carder wrote: Was this on advanced ip services or a different license set? Dale Thus spake Jeff Kell (jeff-k...@utc.edu) on Wed, Apr 25

Re: [c-nsp] 15.2(2)S issues on 7600/SUP720

2012-04-25 Thread Jeff Kell
I've seen this on stacked 3750s when doing anything related to configurations, it would hang up hard enough to timeout EIGRP hellos from neighbors (and vice versa) causing general havoc everywhere. The workaround was to include parser config cache interface. During the hangs if you could get

[c-nsp] VRF-Lite and IPv6...

2012-04-25 Thread Jeff Kell
After playing with a lab switch (3560X) today looking at some IPv6 features, we discovered you can't really do IPv6 VRFs on it. The vrf definition configuration option doesn't like address-family at all, so no IPv4/IPv6 bits there. Is this an under consideration software function, or a

[Bug 929219] Re: chromium-browser, gvfsd-http and others using eglibc crash with SIGSEGV in __nscd_get_mapping() or gethostbyname2_r()

2012-04-10 Thread Brad Kell
My crash was generated when I started Last.fm. It had worked flawlessly for several days prior. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/929219 Title: chromium-browser, gvfsd-http and others

Re: [Full-disclosure] STEP Security

2012-04-01 Thread Jeff Kell
Or http://dilbert.com/strips/comic/1996-09-07/ Jeff On 4/1/2012 6:51 PM, Nick FitzGerald wrote: Interweb Re-Engineering Task Force J. Oquendo Request for Comments 4012012 E-Fensive Security Strategies Category: Informational Expires: 2020 Really? You

Re: Whitelist of update servers

2012-03-12 Thread Jeff Kell
An IP-based whitelist is pretty much doomed from the start. Many vendors use content delivery networks and that is too large and volatile to chase. We have had some success in captive portal environments with DNS manipulation, allowing only certain domains to resolve, and redirecting everything

[Freesurfer] Smart concatenation in selxavg3-sess?

2012-03-07 Thread Alex Kell
Hi Freesurfers, The selxavg3-sess's help and Freesurfer documentation say that selxavg3-sess creates a design matrix for each run, fits the glm for each run, and then combines the runs together to give summary data for the subject's whole session. Some of the fsfast 5 slides say it uses smart

[Freesurfer] Flags to align per-run motion-corrected functional volumes?

2012-03-06 Thread Alex Kell
Hi Freesurfers, I am using preproc-sess in Freesurfer/Fsfast 5 with per-run motion correction (these subjects have a lot of between-run motion), and I want to analyze the volumes in each subject's individual space (I'd prefer native functional space, but I am happy to do it in each subject's

Re: which one a Technical Support or Help Desk

2012-03-03 Thread Jeff Kell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 3/3/2012 10:34 AM, valdis.kletni...@vt.edu wrote: On Sat, 03 Mar 2012 07:04:52 PST, JoeSox said: Go with 'Technical Support' unless you want to take all sorts of calls with end users wanting help on operational training issues. THIS DOES

Re: which one a Technical Support or Help Desk

2012-03-03 Thread Jeff Kell
On 3/3/2012 10:57 AM, Faisal Imtiaz wrote: Especially if a human answers promptly without a horrible accent... Jeff Like a heavy Southern Drawl ? Oh yeah, y'all :) The major point was a human answering, at least my home ISP (Charter) has this unbearable voice response... in annoyingly

Re: which one a Technical Support or Help Desk

2012-03-03 Thread Jeff Kell
On 3/3/2012 11:48 AM, Faisal Imtiaz wrote: Touche! Being in South Florida, (heavy Latin Spanish accents) and having customers in Alabama, Tennessee (Heavy Southern accents) etc, we have had to Tune our ears as well as our Accents, including carefully choosing our words... Yes, it

Re: Switch designed for mirroring tap ports

2012-03-01 Thread Jeff Kell
How about splitting up a heavy stream (10G) into components (1G) to run through an inline device and reassemble the pieces back to an aggregate afterward? TippingPoint makes a core controller box for this but it's pretty hideously expensive. Could do it with two 6500s but that's pretty

Re: [Libunwind-devel] Minimal build on NetBSD?

2012-02-28 Thread Stephen Kell
Has anyone tried to get libunwind building on NetBSD 5.x? I'm not a NetBSD expert, but find myself trying to get a minimal libunwind set-up running on it at fairly short order. Just clearing this up: I've now written my own simple unwinder, which handles the basic cases well enough for my

[Libunwind-devel] Minimal build on NetBSD?

2012-02-27 Thread Stephen Kell
Has anyone tried to get libunwind building on NetBSD 5.x? I'm not a NetBSD expert, but find myself trying to get a minimal libunwind set-up running on it at fairly short order. I only need a very minimal build of libunwind, supporting just local x86 unwinding on unoptimised code. The biggest

[Freesurfer] mri_vol2vol not downsampling when applying a morph and a rigid registration matrix

2012-02-22 Thread Alex Kell
, Alex Kell Kanwisher Lab Manager ___ Freesurfer mailing list Freesurfer@nmr.mgh.harvard.edu https://mail.nmr.mgh.harvard.edu/mailman/listinfo/freesurfer The information in this e-mail is intended only for the person to whom it is addressed. If you believe

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
On 2/22/2012 10:07 AM, Fred Mowchan wrote: Loved the comment on ATK, IPX, Neteui. Like Yogi Berra said this is like deja vu all over again! Yes, routing breaks traditional AT, IPX, NetBEUI, etc. So what clown woke up and said Hey! Let's just multicast it, that's routable... Jeff

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/22/2012 3:38 PM, Julian Y Koh wrote: On Wed Feb 22 2012 09:24:46 Central Time, Jeff Kell wrote: Yes, routing breaks traditional AT, IPX, NetBEUI, etc. AppleTalk and IPX at least are totally routable protocols. :) Well, you and I know

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
On 2/22/2012 9:21 PM, Joel Coehoorn wrote: I just heard an interesting solution for this. Since AppleTV is already consumer tech and does not need Internet (their classroom use is pretty much just AirPlay), the person went out and bought a cheap $30 wireless router off the shelf at Walmart for

Re: facebook.com DNS not found 20120218 2125 UTC

2012-02-19 Thread Jeff Kell
On 2/18/2012 4:32 PM, Everett Batey wrote: facebook.com DNS not found 20120218 2125 UTC Is there any outage information for DNS for facebook.com / www.facebook.com ? Oops! Google Chrome could not find www.facebook.com I have had two reports of can't get to facebook from campus today, not

Re: WW: Colo Vending Machine

2012-02-18 Thread Jeff Kell
On 2/18/2012 11:41 PM, Chris Adams wrote: Dumb terminals are sometimes very smart. Well, yeah, unless you're ever in one of those spots where you need to xmodem an IOS image... (Makes you appreciate those newfangled ones that can mount USB drives ...) Jeff

Re: Common operational misconceptions

2012-02-17 Thread Jeff Kell
On 2/17/2012 12:00 PM, Gary Buhrmaster wrote: If the TV went on the blink (they all did then), you opened up the back, looked for fried components, and if one of the resistors was smoking, you soldered in a replacement. Or you took the tubes down to the local drugstore and tested them. Wow...

Re: WW: Colo Vending Machine

2012-02-17 Thread Jeff Kell
Direct phone number of a 2nd level TAC that speaks English and doesn't read from a transcript :) Lots of good mentions, I might add two... (1) Snap-on multitool plier (or linesman equivalent), combination plier/diags/various screwdrivers, etc. (2) Universal power brick On the last one above, I

Re: WW: Colo Vending Machine

2012-02-17 Thread Jeff Kell
On 2/17/2012 6:32 PM, Aled Morris wrote: Though wax string is nicer. http://www.repsole.com/ProductGroup.asp?PGID=254 Or in less static environments, velcro ties, e.g., http://www.cabletiesandmore.com/velcro.php Jeff

Re: Common operational misconceptions

2012-02-16 Thread Jeff Kell
On 2/16/2012 8:17 AM, Ray Soucy wrote: I've found starting off with some history on Ethernet (Maine loves Bob Metcalfe) becomes a very solid base for understanding; how Ethernet today is very different; starting with hubs, bridges, collisions, and those problems, then introducing modern

Re: Common operational misconceptions

2012-02-16 Thread Jeff Kell
Or a security vendor, or a security publication... the whole top ten delivered as ten individual clicks with pay-per-view banner ads on each page and a bazillion tracker cookies arrgh. Jeff On 2/16/2012 5:26 AM, Chris Campbell wrote: This isn't so much a list of misconceptions

Re: [IM-Talk] re: Bonjour; was Anyone using AppleTalk?

2012-02-15 Thread Jeff Kell
It's not necessarily a network problem, or if it is, it's at layer-8 :) It creates the expection that everything related will just work (AppleTV, iChat, printers, projectors, etc), when that is not the case by design in many areas of our network. And tickets opened wondering why they don't just

Re: Common operational misconceptions

2012-02-15 Thread Jeff Kell
(1) Block all ICMP (obviously some are required for normal operations, unreachables, pMTU too large/DF set, etc). (2) Block certain ports (blindly, w/o at least established) taking out legitimate ephemeral port usage. (3) Local uRPF is unnecesary (or source spoofing mitigation in general) (4)

Re: [c-nsp] IPSEC Remote access to MPLS VPN

2012-02-15 Thread Jeff Kell
On 2/15/2012 3:09 AM, ar wrote: I would like to setup a remote access IPSEC/SSL VPN then maps to MPLS VPN/VRFs. I'm thinking of using 7206VXR as the concentrator/PE for this. Remote clients will use cisco/microsoft vpn clients. Site-to-site vpn will be supported too. I'm sure there are

Re: Dear RIPE: Please don't encourage phishing

2012-02-12 Thread Jeff Kell
Heck, even Klingon made it to the private UTF-8 registry, http://en.wikipedia.org/wiki/Klingon_writing_systems :) Jeff

Re: Dear RIPE: Please don't encourage phishing

2012-02-10 Thread Jeff Kell
There used to be the old programming benchmark of how large a program (in lines, as well as compiled bytes) it took to say Hello, world. The 21st century benchmark might now well be the size of a Hello, world e-mail. Or a web page with a similar statement. Jeff On 2/10/2012 6:46 PM, Rich

[c-nsp] Quick 6500 question...

2012-02-07 Thread Jeff Kell
Quick reality check... Is the difference in the E-series chassis only in available power? Has nothing to do with backplane bandwidth? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Quick 6500 question...

2012-02-07 Thread Jeff Kell
On 2/7/2012 3:00 PM, Nick Hilliard wrote: Anyway, I don't really have an issue with this - the E chassis has been sold more or less exclusively since 2005 or so, so any remaining in deployment will be well past their accounting write off time. Apparently Cisco support of the non-E chassis

Re: [c-nsp] inter-VRF routing

2012-02-03 Thread Jeff Kell
import/export require BGP to actually work... or at least I've never had any success w/o at least defining the BGP process. Jeff On 2/3/2012 9:22 AM, harbor235 wrote: Take a look into importing routes from one vrf into another using an import map. check out a previous thread:

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-02-02 Thread Jeff Kell
Given the fact that if you have a switch running with such ACL statements in place (and working), upgrading to 12.2(58) will break them would seem to be something PSIRT would be interested in (but I received no response after reporting it). The bug may be tied to my case :) Jeff On 2/2/2012

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Jeff Kell
How large are your wireless subnets? Are you doing any broadcast/multicast limiting? You might also check for laptop loops -- anything with wired and wireless interfaces with both of them connected at the same time. Just takes one kid with ICS or Bridging turned on... Jeff **

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Jeff Kell
On 2/1/2012 1:11 PM, Peter P Morrissey wrote: Sweet! It seems like one challenge would be the devices would constantly be resetting every time the bus stops running if you are powered directly off the alternator? Has that caused any issues? On top of that it seems like you would be

[c-nsp] Quick (?) ASA VPN w/AD question...

2012-01-30 Thread Jeff Kell
Trying to break some new ground on ASA 8.4(2) VPN configuration (quite a number of changes) Need to map AD group membership onto a group policy selection. (1) Previous examples are using the Cisco name IETF-Radius-Class to map into the policy name, while 8.4(2) seems to want Group Policy

Re: [IM-Talk] IM Wishlist

2012-01-22 Thread Jeff Kell
If the wish list is open again, let me re-state my greatest wish again (have brought it up several times before...). Along the lines of the device lists -- whether full or map-specific -- I would dearly love a Top Ten (or you set the number) list of objects (interfaces) in each of the listed

Re: [c-nsp] sup2 lead times/costs

2012-01-20 Thread Jeff Kell
On 1/20/2012 10:19 AM, Alan Buxey wrote: ;-) there'll also be a deluge of sup720 blades for those people still on sup2 or sup32 from all the sup2t upgraders Yeah, hopefully VS720s too... Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [WIRELESS-LAN] Cisco vs. Aruba vs. Meru

2012-01-18 Thread Jeff Kell
On 1/18/2012 7:30 PM, Scott Smith wrote: I've seen many times on this list people discuss the differences between Cisco, Aruba, and Meru. I know there are pros and cons of each, but I'm wanting to get feedback from people who have either done a bake off or at least tested between them, and

[c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-01-18 Thread Jeff Kell
Running into this on a 3560X IP Services (context is accepted by everything else...) Grote-Uplink(config-ext-nacl)#85 permit tcp any any eq 9100 log % Ambiguous command: 85 permit tcp any any eq 9100 log Grote-Uplink(config-ext-nacl)#85 permit tcp any any eq 9100 log ! log % Ambiguous

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-01-18 Thread Jeff Kell
On 1/18/2012 10:14 AM, Jeff Kell wrote: Running into this on a 3560X IP Services (context is accepted by everything else...) Grote-Uplink(config-ext-nacl)#85 permit tcp any any eq 9100 log % Ambiguous command: 85 permit tcp any any eq 9100 log Grote-Uplink(config-ext-nacl)#85 permit tcp any

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-01-18 Thread Jeff Kell
192.168.128.74 eq smtp syslog log log Corny, but if they're going to botch up a maintenance release like that... Chuck -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jeff Kell Sent: Wednesday, January 18, 2012 4:47 PM

[c-nsp] Catalyst IOS version skip - significant difference or just numbers game?

2012-01-04 Thread Jeff Kell
After checking some software revision data during the holiday break, I noticed that the 29xx/35xx Catalyst IOS train has jumped 12.2(58)SE up to 15.0(1)SE. Is there really a significant difference, or is this just a marketing numbers game to look more current ? And if you've already made the

Re: [c-nsp] vs route leaking into globasl on the samer box

2012-01-02 Thread Jeff Kell
You can insert statics to an L3 interface with a next-hop of a second router (very kludgy and inefficient, but required for the reason you discovered). You can use a FWSM or external box to handle the route [leak]. You can loop a cable between global and the target VRF. You can do VRF Selection

Re: Misconceptions, was: IPv6 RA vs DHCPv6 - The chosen one?

2011-12-29 Thread Jeff Kell
On 12/29/2011 8:12 PM, Mark Andrews wrote: Well I'd like to be able to plug in the cable router and the DSL router at home and have it all just work. Well, that's not too far removed from the plugged-in laptop with the wireless still active. Toss-up which one wins default route. What would

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2011-12-16 Thread Jeff Kell
We have had similar requests / queries about this in particular, as well as other general wireless server roles for devices (e.g., printers, projectors). We also suppress multicast/broadcast, and are not equipped for wireless servers. I shudder to think if Airplay was default open, just how

Re: Range using single-mode SFPs across multi-mode fiber

2011-12-14 Thread Jeff Kell
On 12/14/2011 3:37 PM, Keegan Holley wrote: Single mode just has a smaller core size for the smaller beam emitted by laser vs. LED. it works although I've never done it outside of a lab (MM is cheaper). As for the distance it theory that should come down to the optics and your transmit

[RADIATOR] Odd issue w/Radiator and MacOS...

2011-12-13 Thread Jeff Kell
We setup a new Radiator instance on what we hope to be permanent housing, but are having an odd issue. MacOS doesn't seem to issue EAP accepts, they're going off in left field and never returning. Windows works. Or it is just a possible coincidence in our test cases that Mac fails / windows

Re: [WIRELESS-LAN] Odd issue with Aruba wireless...

2011-12-08 Thread Jeff Kell
: The EDUCAUSE Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Jeff Kell [jeff-k...@utc.edu] Sent: Wednesday, December 07, 2011 2:36 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Odd issue with Aruba wireless... Having

Re: [Full-disclosure] Carrier IQ for your phone

2011-12-06 Thread Jeff Kell
On 12/6/2011 12:22 PM, Georgi Guninski wrote: looks like if a corporation does it, it is business. if a non-incorporated entity does it, it is a crime. -- j Yes, sort ofv like bundling add-on crapware with software downloads... to steal from the other ongoing thread... Java updates bundle

Re: [IM-Talk] Intermapper and Aruba Wireless

2011-12-05 Thread Jeff Kell
On 12/5/2011 1:57 AM, bbelew wrote: Anyone happen to have any probes for monitoring Aruba Wireless? Have a 3400 controller and have been playing with trying to monitor it through IM but have failed thus far. We have an abbreviated probe that charts the number of mac-authenticated and

[c-nsp] RSPAN through intermediate switch...

2011-12-02 Thread Jeff Kell
Is it possible to run an RSPAN vlan through (not an endpoint, just transport) an intermediate switch (specifically Foundry/Brocade FCX switch)? I would suspect that mac address learning on the switch would interfere with RSPAN, and I can't find a Brocade equivalent of the mac-learn interface

Re: [c-nsp] Cisco 3560X performance in the wild

2011-11-22 Thread Jeff Kell
On 11/22/2011 5:15 PM, Peter Rathlev wrote: On Tue, 2011-11-22 at 12:59 -0700, Dave wrote: I was wondering if anyone has used the 3560X-48T switches and would be kind enough to give me the good/bad/ugly on them ? We have a couple of WS-C3560X-48T-Ls in use. They seem to function just as well

Re: Ok; let's have the Does DNAT contribute to Security argument one more time...

2011-11-14 Thread Jeff Kell
On 11/14/2011 4:21 PM, Rubens Kuhl wrote: For the common good it doesn't matter if the NAT is good guys are right or the NAT is useless guys are right, as they both fail to decrease the numbers of their opposing parts. We must get IPv6 done for both of them. Hehehe... depending on your ISPs

Re: Arguing against using public IP space

2011-11-13 Thread Jeff Kell
On 11/13/2011 4:27 PM, Phil Regnauld wrote: That's not exactly correct. NAT doesn't imply firewalling/filtering. To illustrate this to customers, I've mounted attacks/scans on hosts behind NAT devices, from the interconnect network immediately outside: if you can point a route with the ext ip

Re: [WIRELESS-LAN] College deals with wireless issues

2011-11-10 Thread Jeff Kell
On 11/10/2011 8:24 PM, Harry Rauch wrote: We have in our internet docs for students that rogue wireless devices that interferes with the dorm's internet usage will be requested to shutdown or the student will lose internet rights for 30 days. Students seem to be more than willing to shut off

Re: BGP conf

2011-11-02 Thread Jeff Kell
On 11/2/2011 9:58 PM, Jeff Wheeler wrote: I guess ten years of watching RIRs and users de-bogon new /8s didn't teach you why those Cymru examples are more dangerous than they are good. If you follow all the CYMRU examples and subscribe to the BGP bogon feed, that isn't an issue... Jeff

Re: Random five character string added to URLs?

2011-11-01 Thread Jeff Kell
On 11/1/2011 7:05 PM, Stefan Fouant wrote: Is there anything perhaps protecting or intercepting the data on its way to the server, perhaps an Arbor device of some type of load balancer? This type of behavior is quite common when protecting web assets to eliminate zombies and such, but its

Re: [WIRELESS-LAN] Android 2.3.4 wifi connectivity issue

2011-10-28 Thread Jeff Kell
On 10/28/2011 9:58 AM, Christina Klam wrote: Funny that you mention the issues with the HTC… I have spent the last two days trying to figure out why some Droid phones/tablets can get a DHCP address and others cannot. Moreover, if they do get an IP address, some lose their IP address after

Re: [WIRELESS-LAN] Problems in the Dorms

2011-10-27 Thread Jeff Kell
On 10/27/2011 9:49 PM, Mike King wrote: Not exactly too surprising. I've have a few enterprising students broadcasting some stuff from there dorm rooms via multicast (Wired for us). I can imagine if it worked, they'd use it. Yes, then there is that wonderful Dropbox LAN Sync broadcast

Re: Outgoing SMTP Servers

2011-10-26 Thread Jeff Kell
On 10/26/2011 10:57 PM, Scott Howard wrote: On Tue, Oct 25, 2011 at 2:51 AM, Aftab Siddiqui aftab.siddi...@gmail.comwrote: Blocking port/25 is a common practice (!= best practice) for home users/consumers because it makes life a bit simpler in educating the end user. And it's not just 25.

Re: [c-nsp] 3750X stacking with 3750 ??

2011-10-12 Thread Jeff Kell
On 10/12/2011 8:56 AM, Jeffrey G. Fitzwater wrote: Does anybody know that absolute answer, if a 3750X can or cannot stack with a 3750 or 3750E ? A 3750X LAN Base image cannot stack with anything (other than another 3750X LAN Base image switch). A 3750X IP Base or IP Services will stack with

[c-nsp] ASA VPN groups... pointer/howto/cookbook?

2011-09-28 Thread Jeff Kell
I have been running standard VPN client profiles for VPN access for quite a few years, on PIX and now on ASA. I'm working on our next generation prototype now, and the number of VPN groups are growing a bit out of hand. Up to this point we have been distributing groups/roles by providing a

Re: [WIRELESS-LAN] Ticket Master Wireless Scanners- Campus sporting Venues, Campus Wireless

2011-09-22 Thread Jeff Kell
We use Alvarado scanners, tied in with 3rd-party ticketing (NeuLion I think...). They run on a non-broadcast SSID with mac authentication over our Aruba infrastructure (special AP groups carrying the SSID). Jeff ** Participation and subscription information for this EDUCAUSE

Re: [c-nsp] Anyone using 2960-C or 3560-C compact catalyst switches?

2011-09-22 Thread Jeff Kell
We have a few 2960Cs as well as 3560Cs. They are almost cool, except... -- there's no PoE 2960C -- and the 3560C is IPBase only Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [WIRELESS-LAN] Rogue Device detection. (was [WIRELESS-LAN]Wireless in dorms)

2011-09-20 Thread Jeff Kell
On 9/20/2011 11:52 AM, David Gillett wrote: We'll be replacing our switches over the next 6-18 months, and I'm hoping the new ones may include this capability. Just be a bit cautious... our city buses offer free WiFi on board. We were deauth-ing / dropping users on the buses when they

Re: [Libcdio-help] cd-info doesn't get cddb info for discs with data

2011-09-11 Thread Stephen Kell
Here's a *very* belated follow-up... apologies and more. I'd say if there are *any* audio tracks, it's worth doing a CDDB lookup. Sometimes the order is reversed, e.g. game CDs that have a red-book audio soundtrack after the track with the game data. Sometimes there are even multiple data

Re: [funsec] Sony Just Hired a Chief Information Security Officer (CISO)

2011-09-08 Thread Jeff Kell
On 9/8/2011 4:01 PM, valdis.kletni...@vt.edu wrote: Anybody want to guess what Sony's coffee/itsec ratio was? Black-hat or White-hat? It took some nontrivial effort to create the now infamous Sony rootkit... Jeff ___ Fun and Misc security discussion

Re: [c-nsp] VRF Selection based on IP

2011-09-06 Thread Jeff Kell
On 9/6/2011 12:03 PM, Dave Weis wrote: Does anyone have a suggestion on how to implement VRF selection based on incoming IP on a 7200? http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/vrfselec.html This is listed as only being supported on the 12000 series. I don't know about the

Re: [c-nsp] How to terminate 100.000 IPsec VPN clients?

2011-09-06 Thread Jeff Kell
On 9/6/2011 8:09 PM, Chris Evans wrote: Checked the 5585 limits? It's supposed to blow a 5580 out of the water... On paper. I don't think anyone has mentioned it yet, but there is also ASA VPN Load Balancing clusters. You can combine a number of boxes together, configure the cluster

Re: [WIRELESS-LAN] Public IP to nat/pat

2011-08-22 Thread Jeff Kell
On 8/22/2011 7:31 PM, Hurt,Trenton William wrote: We have recently deployed wireless in all are residence halls and are in the process of completing a ubiquitous wireless deployment across our entire campus. We currently use public ips for the wireless address space to serve client devices.

Re: NANOGers home data centers - What's in your closet?

2011-08-13 Thread Jeff Kell
On 8/12/2011 8:29 PM, valdis.kletni...@vt.edu wrote: So what's in NANOGers home networks/compute centers? :) Surprisingly minimalistic - a Linksys cablemodem and a Belkin Play wireless router, both from Best Buy, a Dell Latitude laptop from work, and a PS/3. (I used to have more gear, but it

Droids and portal environment...

2011-08-05 Thread Jeff Kell
We are in the midst of testing a setup portal for admission to our dot1X SSID. It is a typical portal setup, with a captive DNS that points the web browser at the portal web page, with explanations of how to connect and items to download (evaluating XpressConnect now for this). It works fine

Re: US internet providers hijacking users' search queries

2011-08-05 Thread Jeff Kell
On 8/5/2011 8:53 PM, Brielle wrote: Until they start MitM the ssl traffic, fake certs and all. Didn't a certain repressive regime already do this tactic with facebook or some other major site? Marketscore did (via installing root certs in the victim's machines), and as far as I know, still

Re: [WIRELESS-LAN] Eduroam questions

2011-07-29 Thread Jeff Kell
On 7/29/2011 6:34 PM, James J J Hooper wrote: On 29/07/2011 20:35, Hanset, Philippe C wrote: Also, if you don't mind the initial investment (will save you money in the long run)... get Xpressconnect ... or SU1X (free, but Windows only): http://sourceforge.net/projects/su1x/ and you can

Re: [funsec] China vs. U.S.: The cyber Cold War is raging

2011-07-28 Thread Jeff Kell
On 7/28/2011 10:28 PM, Dave Paris wrote: On Thu, Jul 28, 2011 at 7:17 PM, Jeffrey Walton noloa...@gmail.com wrote: http://money.cnn.com/2011/07/28/technology/government_hackers/ (This is part four of a week-long series on the ecosystem of cybercrime) On April 8, 2010, traffic to about 15% of

Re: [c-nsp] just installed a Huawei...

2011-07-27 Thread Jeff Kell
On 7/27/2011 4:52 PM, Scott Granados wrote: How does this differ from what Foundry did? :) The CLI in the fast iron or server iron gear for example is pretty damn similar. The router bgp commands were absolutely the same and the only difference was the way that foundry named interfaces.

[RADIATOR] WPA2 PEAP certificate (esp 3rd party)...

2011-07-26 Thread Jeff Kell
Has anyone been able to get a valid, acceptable to Windows out-of-the-box certificate for Radiator that allows seamless connections by Windows computers? I've found bits and pieces, and references to voodoo with the openssl request and/or openssl patches to support the extra bits that Windows

Aruba roles / vlan pooling...

2011-07-26 Thread Jeff Kell
Quick question... Can you have a pool of vlans for an Aruba role? or is pooling restricted to the default connection vlan list to the VAP? Jeff ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at

[c-nsp] ASA 8.3/8.4 management issues...

2011-07-26 Thread Jeff Kell
I have some remote sites running off of ASA 5505s, and an existing VPN cluster running 8.4(2). For consistency's sake, I was trying to update the 5505s to 8.4(2) -- had one on 7.2 and one on 8.1. Everything appears to be working on them except management sessions (ssh or https or ASDM), they

Re: [c-nsp] ASA 8.3/8.4 management issues...

2011-07-26 Thread Jeff Kell
On 7/26/2011 10:58 AM, Ryan West wrote: On Tue, Jul 26, 2011 at 10:44:19, Jeff Kell wrote: Subject: [c-nsp] ASA 8.3/8.4 management issues... I have some remote sites running off of ASA 5505s, and an existing VPN cluster running 8.4(2). I've rolled everything back to 8.4.1 interim. I have

Re: [WIRELESS-LAN] WPA2 / PEAP / EAP-TTLS / etc - valid 3rd party certificates?

2011-07-25 Thread Jeff Kell
On 7/25/2011 3:02 PM, Travis Schick wrote: The problem as I understand it - is that without having a network connection - you are unable to verify the server presenting the certificate to you - you need to trust it first - and for win7/macosx the default is to prompt the user. If the

WPA2 / PEAP / EAP-TTLS / etc - valid 3rd party certificates?

2011-07-21 Thread Jeff Kell
We are finally planning a WPA2 rollout after years of procrastination (or more truthfully, finally having some time to devote to the task...) We have Aruba, passing through Bradford, with Radius supplied by Radiator, and authenticating NTLM to Active Directory (Win2K8). With just a self-signed

<    1   2   3   4   5   6   7   8   9   >