Re: Filter NTP traffic by packet size?

2014-02-21 Thread Harlan Stenn
Dobbins, Roland writes: Operators are using this size-based filtering to effect without breaking the world. As a reality check, with this filtering in place does ntptrace still work? H

Re: question about AS relationship

2014-02-21 Thread Mark Tinka
On Friday, February 21, 2014 08:57:07 AM Song Li wrote: the AS relationship between AS1 and AS2/3 is peer, and AS1 cannot announce routes from AS3 to provider1 by rule. Or even Peer-AS2's routes to Peer-AS3 (and vice versa), in general best practice filtering rules, unless transit is

Atlanta - Patch Cables

2014-02-21 Thread Bobby Lacey
In Atlanta doing an install for a client this weekend and it appears that the fiber/ethernet patch cables won't be delivered in time from supplier. Would anyone know of a good resource for patch cables (both fiber and ethernet) in the metro area? Just wondering if there are any other resources for

Re: question about AS relationship

2014-02-21 Thread Song Li
Thanks. I'm doing some research on route leaks, you are a great help to me. Sky li On Friday, February 21, 2014 08:57:07 AM Song Li wrote: the AS relationship between AS1 and AS2/3 is peer, and AS1 cannot announce routes from AS3 to provider1 by rule. Or even Peer-AS2's routes to Peer-AS3

Re: comcast business service

2014-02-21 Thread rwebb
Biggest unknown at this point is your upstream SNR. If there is noise ingress somewhere in the plant, then your upstream could be having all kinds of issues. Robert On Fri, 21 Feb 2014 05:23:07 -0500 shawn wilson ag4ve...@gmail.com wrote: Works: Downstream Channel Downstream

out of band management gear

2014-02-21 Thread Hank Disuko
Hi folks, I wonder if anyone has good experiences to share with out-of-band hardware? I'm looking for a good OOB hardware vendor. I need to manage my routers/switches/firewalls in a datacenter located overseas, and I'm looking to setup a good serial console server via an OOB link. I've been

Networking folk in the San Diego area...

2014-02-21 Thread John Curran
NANOGers - Just a reminder that there is a ARIN+NANOG on the Road session taking place in San Diego next week; the day long program has NANOG and ARIN speakers and is free but advance registration is recommended. If you know anyone who might benefit from attending such an event,

Re: level3_bx4-montrealak.net consistently dropping 50% of the packets

2014-02-21 Thread James Michael Keller
On 02/20/2014 10:08 AM, Nick Cameo wrote: Hello Everyone, According to mtr command we are consistently seeing level3_bx4-montrealak.net dropping 30-50% of packets. Our ISP is Bell Canada. Any ideas on how to get this resolved are greatly appreciated. HOST: victoriaLoss%

Re: level3_bx4-montrealak.net consistently dropping 50% of the packets

2014-02-21 Thread Nick Cameo
Thank you all for clarifying. Really appreciate it.

Re: out of band management gear

2014-02-21 Thread Bryan Socha
We have both lantronix and opengear hardware and use the og brand almost exclusively now. Good price, extremely reliable. We have about 200 of them. On Feb 21, 2014 9:41 AM, Hank Disuko gourmetci...@hotmail.com wrote: Hi folks, I wonder if anyone has good experiences to share with

Re: comcast business service

2014-02-21 Thread William Herrin
On Fri, Feb 21, 2014 at 5:23 AM, shawn wilson ag4ve...@gmail.com wrote: I'm not seeing any big difference in SNR (and only slight differences in upstream power) and everything else seems to be the same. Though, since db is logarithmic, .3 might be enough to matter? Do you also receive an

Re: out of band management gear

2014-02-21 Thread Kenneth McRae
Using open gear exclusively now...no real issues with it. Sent from my iPad On Feb 21, 2014, at 6:39 AM, Hank Disuko gourmetci...@hotmail.com wrote: Hi folks, I wonder if anyone has good experiences to share with out-of-band hardware? I'm looking for a good OOB hardware vendor. I need to

Re: out of band management gear

2014-02-21 Thread Brian Loveland
Same here, dozens of opengear devices deployed, about half with cellular, only issue we ever had 1 DOA (not totally dead, but behaving really badly) unit and they sent an overnight replacement since we were on the road visiting a remote site. On Fri, Feb 21, 2014 at 10:25 AM, Kenneth McRae

Re: VMware Training

2014-02-21 Thread Phil Gardner
On 02/19/2014 01:14 PM, Phil Gardner wrote: Not sure if this list is the best place, but it is probably the only list that I'm on that won't give me a bunch of grief about the chosen technology. I looked at VMware's site, and there are a ton of options. I'm wondering if anyone has some basic

Re: VMware Training

2014-02-21 Thread Eugeniu Patrascu
On Fri, Feb 21, 2014 at 7:37 PM, Phil Gardner phil.gardne...@gmail.comwrote: On 02/19/2014 01:14 PM, Phil Gardner wrote: Not sure if this list is the best place, but it is probably the only list that I'm on that won't give me a bunch of grief about the chosen technology. I looked at

Weekly Routing Table Report

2014-02-21 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: out of band management gear

2014-02-21 Thread Paul S.
Lantronix is pretty solid if it doesn't have issues with your hardware. I have a bunch of older Dell boxes where turning on virtual media makes them stall indefinitely on the boot prompt. Though, for serial only stuff -- it should be pretty good. On 2/22/2014 午前 12:39, Bryan Socha wrote: We

Akamai

2014-02-21 Thread Keith
I just want to publicly say hats off to Akamai today. We have seen spikes on our Akamai server before, but nothing like it has been in the last few days with the Canadian hockey live streaming. IOS7 release from Apple spiked it, but today, almost 800 megs of traffic coming off our server

Re: Akamai

2014-02-21 Thread Keith
I would have figured an IX like that would have something there? Even BCNet has some akamai stuff within their network. We are pretty small in the scheme of things and have had Akamai for quite a few years, but this is the biggest event we have ever seen on our server. On 2/21/2014 10:47 AM,

Re: Akamai

2014-02-21 Thread Clayton Zekelman
They have TORIX connections, but they didn't seem to send the stream traffic through them. Sent from my iPhone On 2014-02-21, at 1:56 PM, Keith kwo...@citywest.ca wrote: I would have figured an IX like that would have something there? Even BCNet has some akamai stuff within their network.

Re: out of band management gear

2014-02-21 Thread Richard Hesse
We're really pleased with the Perle IOLAN line. They even have a gigabit port without a $10k price tag. Amazing! It really dumbfounds me why so many vendors are still putting 10/100 Ethernet ports on their OOB management (looking at you OpenGear). Especially a PITA today since many switchports

Re: out of band management gear

2014-02-21 Thread Randy Carpenter
OpenGear's newer stuff is Gigabit (SFP even). I've not seen any real switch made in the last decade that has a problem with 100Mb/s connections. Ancient cisco, maybe had issues. thanks, -Randy -- Randy Carpenter Vice President - IT Services First Network Group, Inc. (800)578-6381, Opt. 1

Re: Akamai

2014-02-21 Thread Martin Hannigan
Everyone, We do have an issue at the TorIX. We have isolated it to a hardware bug impacting our networking and we're working to get it fixed ASAP. It's not likely to be entirely fixed prior to the end of the Winter Olympics. We have a workaround that should allow us to serve more traffic locally

Re: out of band management gear

2014-02-21 Thread Jeremy Bresley
On 2/21/2014 2:27 PM, Randy Carpenter wrote: OpenGear's newer stuff is Gigabit (SFP even). I've not seen any real switch made in the last decade that has a problem with 100Mb/s connections. Ancient cisco, maybe had issues. There's several devices that are 1/10Gb and do NOT support 10/100Mb.

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher dam...@google.com wrote: On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch ja...@puck.nether.net wrote: On Feb 20, 2014, at 3:51 PM, John Weekes j...@nuclearfallout.net wrote: On 2/20/2014 12:41 PM, Edward Roels wrote: Curious if anyone else

The Cidr Report

2014-02-21 Thread cidr-report
This report has been generated at Fri Feb 21 21:13:38 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History

BGP Update Report

2014-02-21 Thread cidr-report
BGP Update Report Interval: 13-Feb-14 -to- 20-Feb-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS731569280 3.1% 989.7 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 2 - AS60349

The somewhat illegal fix for NTP attacks

2014-02-21 Thread Baldur Norddahl
Hi The following would probably be illegal so do not actually do this. But what if... there are just 4 billion IPv4 addresses. Scanning that address-space for open NTP is trivially done in a few hours. Abusing these servers for reflection attack is as trivial, hence the problem. How can we get

Re: The somewhat illegal fix for NTP attacks

2014-02-21 Thread Landon
On 21 February 2014 14:08, Baldur Norddahl baldur.nordd...@gmail.comwrote: Hi The following would probably be illegal so do not actually do this. But what if... there are just 4 billion IPv4 addresses. Scanning that address-space for open NTP is trivially done in a few hours. Abusing these

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Feb 22, 2014 5:30 AM, Damian Menscher dam...@google.com wrote: On Fri, Feb 21, 2014 at 1:22 PM, Cb B cb.li...@gmail.com wrote: On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher dam...@google.com wrote: On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch ja...@puck.nether.net wrote: You may also

Re: out of band management gear

2014-02-21 Thread Saku Ytti
On (2014-02-21 15:17 -0600), Jeremy Bresley wrote: connections to devices that needed them. Expensive options in a fully loaded chassis just for a couple lower-end devices that could easily justify a couple dollars more to get a Gig PHY instead of the older 100Mb PHY chip. There is no

Re: out of band management gear

2014-02-21 Thread Nick Pope
Thinklogical Sentinel is great. CLI access via ssh, web access, modem for dial in and two ethernet ports for redundant network access, supports up to 32 devices and is dc/ac http://www.thinklogical.com/sentinel

LAX china unicom submarine cable cut?

2014-02-21 Thread Yucong Sun
Well, ain't that great day to finish the week. Some one today me a submarine cable is cut. Most of the networks in LAX that has peering with CU looks congested to hell now. Anyone else here seeing the same thing?

Re: LAX china unicom submarine cable cut?

2014-02-21 Thread Mehmet Akcin
What do you see? Packet loss? Latency? Mehmet On Feb 22, 2014, at 4:14, Yucong Sun sunyuc...@gmail.com wrote: Well, ain't that great day to finish the week. Some one today me a submarine cable is cut. Most of the networks in LAX that has peering with CU looks congested to hell now.

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Seth Mattinen
Isn't UDP 80 still technically registered to HTTP? ~Seth

Gmail throttling?

2014-02-21 Thread Eduardo A. Suárez
Hi, some of our users have forwarded the email to Gmail and Gmail now are complaining that this is bulk mail and delaying it. We have SPF, DKIM, DMARC, even SRS to try these things do not happen :( Anyone know if there is any new policy in Gmail about that? Above all, the message refers to

NetSol AAAA glue

2014-02-21 Thread Brandon Applegate
If anyone with ability to fix this is reading this - contact me offlist and I'll owe you... I'm trying to change an host (name server) address. I've been emailing ipv6...@networksolutions.com back and forth for several days. After fighting through 'authentication' (which btw I *didn't*

Re: Gmail throttling?

2014-02-21 Thread Brian Henson
The correct URL should be https://support.google.com/mail/answer/81126 On Fri, Feb 21, 2014 at 7:58 PM, Eduardo A. Suárez esua...@fcaglp.fcaglp.unlp.edu.ar wrote: Hi, some of our users have forwarded the email to Gmail and Gmail now are complaining that this is bulk mail and delaying it.

Re: NetSol AAAA glue

2014-02-21 Thread Chuck Anderson
It is quicker and easier to transfer your domain to another registrar, even though you will have to call them up and speak to a person to do it. On Fri, Feb 21, 2014 at 08:01:06PM -0500, Brandon Applegate wrote: If anyone with ability to fix this is reading this - contact me offlist and I'll

NANOG 61 - Bellevue - Call For Presentations is open!

2014-02-21 Thread Greg Dendy
NANOG Community- I hope everyone enjoyed NANOG 60, NANOG’s largest attended winter meeting. Fresh off a great meeting, and post our NANOG Icelanta Reception, we are ready start the process for NANOG 61 in Bellevue. NANOG 61 will be NANOG’s 20th year serving the network operator community and

Re: Gmail throttling?

2014-02-21 Thread Suresh Ramasubramanian
Auto forwarded mail is like that. Any inbound spam your users receive also gets forwarded. So... On 22-Feb-2014 1:00 AM, Eduardo A. Suárez esua...@fcaglp.fcaglp.unlp.edu.ar wrote: Hi, some of our users have forwarded the email to Gmail and Gmail now are complaining that this is bulk mail and

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Saku Ytti
On (2014-02-21 14:37 -0800), Cb B wrote: QUIC can do what it wants. Like anyone else, they pay their money and take their chances. But, the data point that UDP is polluted is clearly documented with several folks on this list suggesting tactical fixes that involve limiting UDP, especially