e a spare for the "Delete" button, and use them
interchangeably... We regularly have users who sign up for a mailing
list, click the opt-in confirmation link, then report the confirmation
email as spam. We remove them from the mailing list, then they
complain they aren't getting their list anymore. We reply back
explaining why they were removed, and they report our reply as spam.
-- Kevin
oject/showfiles.php?group_id=128336
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B
single "stream" as you can
convince TCP to allow.
So the things learned from the LHC network experiment may well help
improve the Internet and help with things like video distribution, the
grid is NOT going to replace the web, let alone the Internet.
--
R. Kevin Oberman, Network Engine
On Apr 7, 2008, at 7:17 AM, Iljitsch van Beijnum wrote:
On 5 apr 2008, at 12:34, Kevin Day wrote:
As long as you didn't drop more packets than SACK could handle
(generally 2 packets in-flight) dropping packets is pretty
ineffective at causing TCP to slow down.
It shouldn'
ke ECN had taken off - any router between the
two end-points can say "slow this connection down" and (if both ends
are playing by the rules) they do so without wasting time on
retransmits.
-- Kevin
Mark UDP/53 and tcpflags(syn) packets as high priority. If you wanted
to get really fancy and can track TCP state, prioritize the first 2k
of client->server and server->client of HTTP to allow the request and
reply headers to pass uninterrupted. Those made our client happier
than anything else we did, at far far less cost.
-- Kevin
We run nortel 5530. They are not exactly "cheap" by my standards for
24 GE (10k list), but they do have 2x10G. Also they don't play nice
with rstp to cisco, and I still can't figure out how to get it to show
me stp port status. Both vendors in the tree think they're root. CLI
is tolerable, but if
d.
Note that F10 does not do MPLS and neither F10 or Foundry has the
software stability of either C or J, so you will need to look closely at
exactly the features needed.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley
ight now is doing a "Tunnels for
Dollars" kinda situation, because it's so hard to support. If the v4
path between you and the tunnel provider breaks, there's not always
anything anyone can do about it.
http://en.wikipedia.org/wiki/List_of_IPv6_tunnel_brokers might be a
good place to start.
-- Kevin
Could someone from AS7018 (AT&T) please contact me about a
route you are originating that is hijacking/blackholing traffic?
The route is:
66.235.248.0/22
- Kevin
t is required to use or
even support IPv6 to access the government services. Only US Government
backbone provides are in any way impacted by OMB 05-22.
That said, it is likely that dual stack services will be required at
some future date by some future memorandum, but when and what is un
do IPv6. It is possible that an infrstructure
support service like DNS, at least for addresses in the external nets,
will need IPv6 support, but not facility servers.
It is likely (nearly certain) that the requirements for IPv6 will expand
to cover facility networks and end systems, but it is not clea
Just for the record, Verizon has a fiber cut in the No. VA-DC area this
morning and the times look similar. I suspect Cogent had bandwidth on
that fiber.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail
ave
a unique routing policy, especially if your upstreams are unwilling
to originate it from their ASN(s). You may want to re-apply for an
ASN and explain that you will be announcing your directly assigned
block in section 14 of the template.
- Kevin
Iljitsch van Beijnum wrote:
On 24 dec 2007, at 20:00, Kevin Loch wrote:
RA/Autoconf won't work at all for some folks with deployed server
infra,
That's just IPv4 uptightness. As long as you don't change your MAC
address you'll get the same IPv6 address every time,
even turned off.
I think it would be great to be able to do hybrids with RA for other
situations where a shotgun approach is ok but I do not think we will
want to use that in server environments. Hopefully vrrpv6 will work
with RA turned completely off.
- Kevin
the
cases described in Section 6.4.4 and for the purposes of measuring
utilization as defined in this document.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: [EMAIL PROTECTED] Phone
> Date: Wed, 19 Dec 2007 13:28:35 +0100
> From: Jeroen Massar <[EMAIL PROTECTED]>
> Sender: [EMAIL PROTECTED]
>
> Kevin Oberman wrote:
> [..]
> > Note that sixxs only deals with commercial providers. Many (most?) of
> > the major research and education networks
pending on the vendor...and don't expect much help from
the vendor.
If you see IPv6 as a solution to the exhaustion of IPv4 space, take a
look at http://www.civil-tongue.net/clusterf/. It may help at some
point, but many of us see no clear way to get from here to there without
massive growth in
't generally find those sorts of texts as useful so I can't
> really speak to any of the multitude available.
>
> John
>
I can recommend all of these except Peterson/Davie which I have not
read, but Richard (Rick) Steves writes travel books. TCP/IP Illustrated:
Vol. 1 was
I have done this in troubleshooting an OSPF issue where we needed to
immediately grab logs from a buffer that had only limited size when the
adjacency reset due to a dead timer. If you have WildPackets OmniPeek analzyer
its easy if you understand the protocol operations you need to filter on. I
I too have received nothing but blank stares from 7018 MIS on this.
Surprising considering the NANOG presentation on how to do community
based bitbuckets was co-authored by someone from ATT (yeah, I know,
mega company and all).
Please post back to list if you get anywhere.
On 11/7/07, [EMAIL PR
Anyone else seeing issues in Dallas on Bwing/L3 ?
We have an OC12 w/ them that terminates in Dallas and anything past dallas
is extremely latent/lossy...
I'd included a traceroute, but it's ANY destination preferring them for
outbound or inbound and I've since turned down my peer to them.
the nerve to charge extra for IPv6 capability that is missing most
features needed to provide true, production quality support.
It's even worse in areas like security products and various network
application, monitoring, and analysis devices.
About the only things that is pretty likely fully IPv6
I'm in Louisiana and just lost my OC12 to Bwing/L3. Circuit didn't die,
actually received a BGP message to terminate the session.
Anyone else seeing anything or got an update? ALL the numbers I have to L3
are busy...
> Date: Mon, 17 Sep 2007 18:22:12 -0400
> From: Deepak Jain <[EMAIL PROTECTED]>
>
>
>
> [EMAIL PROTECTED] wrote:
> > On Mon, 17 Sep 2007 14:28:45 PDT, Kevin Oberman said:
> >> I had a router that lost it's NTP servers and was off by about 20
&g
ost it's NTP servers and was off by about 20
minutes. The only obvious problem was the timestamps in syslog. (That's
what alarmed to cause us to notice and fix it.)
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berke
orks, anyway). You're a whole lot less likely to have a
bad/missing path, and you still have sufficient knobs to engineer most
outbound flows.
-Kevin Blackham
(recently moved from provider to end network using non-XL PFC)
On 9/10/07, Stephen Sprunk <[EMAIL PROTECTED]> wrote:
>
&
providers even if you only need 1 IP address:
NPRM 4.2.3.6
"This policy allows a downstream customer's multihoming requirement to
serve as justification for a /24 reassignment from their upstream ISP,
regardless of host requirements."
http://www.arin.net/policy/nrpm.html
- Kevin
I would never trust SMTP for all the reasons already mentioned. Primarily
if my network is dead, I still want to get paged about it. Relying on the
import policy of another organization in the hostile port 25 environment is
also bad voodoo.
We've used a mix of TAP and SMS for many years with var
idate a lot of our
findings. Or at least call into question their accuracy. So, I'm
talking with some others right now who have offered some help with
bandwidth and other resources, but it's pushed our timetable back
quite a bit.
Thanks for reminding me to update the page though! :)
-- Kevin
else will lose it. Economics works well when things break
(hardware).
Of course, what happens when there is simply no IPv4 space is another
issue as there will be no new space for anyone. But some providers will
run out of their allocations long before others. If those who run out
have resources, the
Anyone else seeing congestion / high latency between New York and Ashburn on
Teleglobe ? We've been seeing an extra 50-80ms of latency between the two
on and off throughout the day...
7. 216.140.15.158
1.1% 34.1 40.0 33.9 143.4 19.3
G1-1.rp0.chcg.broadwing.net
216.140.14.110
systems.
You do what works best for your network. If it means switching IPv6, so
be it. This is probably especially true when the router is from a
company that charges substantially extra for IPv6 software licenses. If
the is only limited IPv6 traffic, switching to a central router might
not only be tech
out sabotage
> (status.cogentco.com) and I can't find the reference on teliasonera's
> page Link please?
Too many people missed the emoticon. Clearly the fiber damage in the
case I gave was collateral damage. It would have been sabotage on the
rail line and the derailed train.
MAIL PROTECTED]
> ``Unthinking respect for authority is the greatest enemy of truth.''
> Albert Einstein.
If someone sabotages a rail to stop a train and the derailment takes out
the fiber that is buried in the right-of-way, is that unintentional
sabotage? At least of the fiber?
sas, Texas, Washington, Boston, Albany,
> Toronto. Thats quite the milk run. Usually its Toronto, Chicago, Toronto.
>
Almost certainly the fiber cut of last night. Still down after >19
hours. Not a pretty picture for those lacking diversity between Chicago
and points east.
--
R.
www.sentex.net
> Cambridge, Ontario Canada www.sentex.net/mike
>
There is a fiber cut (occurred at about 2:11 UTC) in Ohio. I'm not sure if
that has anything to do with this problem. It is impacting some
traffic between Chicago and New York, tho
We had an OC12 go down on the Broadwing/L3 network, serveral flaps and about
an hour of dead air...
We connect to the Dallas POP...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Robert Boyle
Sent: Wednesday, August 08, 2007 10:44 PM
To: Marshall Eubanks
blocked. And I don't mean small companies, either. One of the biggest
issues I have is with one of the countries largest government funded
research labs.
Wonder how often DNSSEC might make non-transfer queries tickle this and
really break things? (Assuming we ever get wide use of DNSSEC.)
--
R. Ke
Iljitsch van Beijnum wrote:
How exactly are you going to get out-of-order packets over a single link?
There is a once popular router that has been known to do that in some
configurations due to multiple paths within the device.
- Kevin
ran, and Dino Farinacci presented an
approach at the last NANOG:
<http://www.nanog.org/mtg-0706/Presentations/lightning-farinacci.pdf>
They are not the only ones working on resolving this issue.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. La
Can someone tell me if there are any tools on the net we can use to
evaluate Cogent as a possible Tier 1 peer. We are looking at adding a 1
or 2 Gig connection to them, but after reading some of the posting I am
not sure this would be a wise move.
Kevin Billings
Sr Network Engineer
Spirit
You only need to worry about vendor MIBs if you're trying to query/monitor
something vendor-specific. Standard stuff like ifInOctets and ifDescr are
included in everything. I like to either read through MIBs by hand, or load
em in a MIB browser (like mbrowse or use vendor C's snmp explorer tool)
On Dec 29, 2006, at 4:19 PM, The Shadow wrote:
Question:
Why is it that every company out there allows connections through
their
firewalls to their web and mail infrastructure from countries that
they
don't even do business in. Shouldn't it be our default to only
allow US
based IP addre
0%4455 54 54 55
10. 4.68.94.1
0%4455 54 55 55
11. www.Level3.com
0%4455 55 55 55
--
W. Kevin Hunt
CCIE #11841
Linux+ SME
"There are 10 kinds of people in this world, t
On Oct 15, 2006, at 8:21 PM, John Levine wrote:
In addition to all of the offered AC services others have mentioned,
some planes have power outlets for vacuum cleaners, typically
behind a
small panel next to a door.
ISTR, these AC sockets are "airplane flavour" 115VAC @ 400Hz.
No. it'
mewhat annoying when used in
regular expressions and likely to induce errors. Would '-' be a
better choice?
- Kevin
On Jun 21, 2006, at 4:08 PM, Todd Vierling wrote:
On 6/21/06, Kevin Day <[EMAIL PROTECTED]> wrote:
Failing that, having an exit node look at HTTP headers back from the
server that contained a "X-No-Anonymous" header to say that the host
at that IP shouldn't allow Tor
On Jun 21, 2006, at 12:43 PM, Lionel Elie Mamane wrote:
If the proxy is not at the Tor exit node, how can the tor network
enforce the addition of the "this connection went through tor" HTTP
header that Kevin Day was asking for? Fundamentally, if you rely on a
program sitting on
On Jun 17, 2006, at 8:29 AM, Jeremy Chadwick wrote:
Apologies if this has been brought up before.
Being as I'm not a network administrator myself (although I do filter
some stuff using pf and ipfw on my severs), I'm curious what NAs
think of the following technology:
http://tor.eff.org/over
On Jun 6, 2006, at 4:42 PM, Nick Burke wrote:
How many of you have actually use(d) Zebra/Linux as a routing
device (core and/or regional, I'd be interested in both) in a
production (read: 99.999% required, hsrp, bgp, dot1q, other
goodies) environment?
And, if you care to spend this m
On May 15, 2006, at 4:36 PM, Alain Hebert wrote:
Yeap,
I'm moron. You didn't know it yet?
-
Come on...
"The way we disperse static IP" ain't imagination, its fact...
We spread a /20 on dynamic dialup and dsl over 2 provinces and
since most of the residential services
IP location services are a niche service, they won't work in the broad sense of things. Sites that need to make lawyers happy, such as MLB.com will work well with IP location services. MLB.Com basically says they won't broadcast Dodger home games in the LA area on their website. (Or any team in the
On Apr 7, 2006, at 6:02 PM, Mark Boolootian wrote:
Its just NTP, I can't imagine that it is *really* enough traffic
to care
all that much.
You're kidding, right? Do you know what happened to wisc.edu:
http://www.cs.wisc.edu/~plonka/netgear-sntp/
Correct me if I'm wrong, but... Tha
I'll see to it that this domain is shutdown from our service.
Kevin Pawloski | Security Engineer - United Online | kpawloski at
corp.untd.com | VoIP - kevin at netzero.net
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Martin Hannigan
Sent: M
n tool for this monitoring and alerting ?
I've found that I always end up writing some custom code, but you
could do worse than to build on top of one of the open-source
monitoring tools.
For example, I use a highly customized version of AutoStatus for
up/down alerting, primarily because I like how it handles
dependencies.
Kevin
to be for everyone. I
really don't want to see the state of the internet if IPv4 is
exhausted and IPv6 is still being shot down because of policy debates.
(Again, my organization already has a /32, I'm not out anything with
the current policies, if anything I'm helping my competition by
arguing this point)
-- Kevin
On Mar 2, 2006, at 7:49 AM, [EMAIL PROTECTED] wrote:
Clearly, it would be extremely unwise for an ISP or
an enterprise to rely on shim6 for multihoming. Fortunately
they won't have to do this because the BGP multihoming
option will be available.
Are you *sure* BGP multihoming will be avai
On Mar 2, 2006, at 4:07 AM, [EMAIL PROTECTED] wrote:
ome.
When I see comments like this I wonder whether people
understand what shim6 is all about. First of all, these
aren't YOUR hosts. They belong to somebody else. If you
are an access provider then these hosts belong to a customer
that is
For those watching and grumbling, I'll move the discussion to a shim6
mailing list, or in private if anyone wants to continue beyond this.
Just make sure you cc: me if you move the discussion somewhere else.
On Mar 1, 2006, at 12:55 PM, Joe Abley wrote:
On 1-Mar-2006, at 13:32,
Kevin Day wrote:
If you include "Web hosting company" in your definition of ISP, that's
not true. Unless you're providing connectivity to 200 or more networks,
you can't get a /32. If all of your use is internal(fully managed
hosting) or aren't selling lea
On Mar 1, 2006, at 9:07 AM, Joe Abley wrote:
On 1-Mar-2006, at 02:56, Kevin Day wrote:
If you include "Web hosting company" in your definition of ISP,
that's not true.
Right. I wasn't; I listed them separately.
It's important to note that even if you are a ho
e don't get me wrong, I think Shim6 is great for a lot of
people. Being able to let ANYONE multihome with no impact on the
world is great. BUT, there needs to be a fallback to the BGP/IPv4-ish
way for people who need the "power user" set of tools, or there is
going to be a huge pushback from a lot of groups when asked to switch
to ipv6. This fallback has to be available to anyone who can justify
the need, not just "anyone bigger than X size".
-- Kevin
ople have to change their
business models around a new addressing scheme, it's not going to be
a very willing move.
-- Kevin
On Feb 28, 2006, at 1:22 PM, Iljitsch van Beijnum wrote:
On 28-feb-2006, at 17:09, Kevin Day wrote:
4) Being able to do 1-3 in realtime, in one place, without waiting
for DNS caching or connections to expire
How fast is real time?
And are we just talking about changing preferences here
On Feb 28, 2006, at 10:28 AM, Joe Abley wrote:
On 28-Feb-2006, at 11:09, Kevin Day wrote:
Some problems/issues that are solved by current IPv4 TE practices
that we are currently using, that we can't do easily in Shim6:
Just to be clear, are you speaking from the perspective
On Feb 28, 2006, at 6:31 AM, Iljitsch van Beijnum wrote:
[Crossposted to shim6 and NANOG lists, please don't make me regret
this... Replies are probably best sent to just one list for people
who don't subscribe to both.]
On 27-feb-2006, at 22:13, Jason Schiller ([EMAIL PROTECTED]) wrote
other 4.68.97.X addresses.
Thanks,
Kevin Kadow
(P.S. I've been on hold with their technical support line for the past
forty minutes.)
standard. I haven't seen a registrar yet that doesn't have this
> kind of verbiage completely freeing them from liability for *any* action
> taken on a domain registration, including none.
And this is why, if any money is riding on the service at all, you
have
at least one law talking guy vet all contracts at the front of the process.
Kevin Kadow
On Jan 15, 2006, at 6:02 PM, Sam Stickland wrote:
Replying to my own email..
I've found some sites that suggest it's not possible to disable
auto-negotiation on 1000Base-T since other operational parameters
are negotiated including selection of the master clock signal. I
was aware that
on your network you could run
a local 6to4 relay for your customers and filter 192.88.99.0/24
to/from your peers.
- Kevin
f the
leap second, a good percentage of our gear lost NTP sync or had some
kind of NTP problem around midnight UTC. You may want to check your
NTP status at some point, in case something drifted quite a way off
and won't step itself back now because the difference is too great.
-- Kevin
On Dec 31, 2005, at 11:58 AM, Kevin Day wrote:Just a reminder, at midnight UTC there's a leap second added to most time systems.I've had quite a few replies already off list, that I'll sum up:1) ISO 8601 specifically defines ":60" as a valid representation for seconds,
ested applications and devices for how they handle the
clock stopping for a second OR an "invalid" time of 23:59:60.
If anyone sees anything die at 00:00:00UTC I'd be interested to know.
-- Kevin
On Dec 22, 2005, at 4:56 AM, Jeroen Massar wrote:
Kevin Day wrote:
No, the proposed policy says that if you get a /44 you must
"advertise
that connectivity through it's single aggregated address assignment."
Get a /48 from your provider? Your provider can only give /48s to
o
t timeframe are we talking about? Things have changed
massively
over the last 12-18 months.
We threw in the towel (pulled records) about 6 weeks ago, and
started IPv6 experimentation about 16 weeks ago.
I'll be writing up a paper going into a lot more detail about what
went right, what went wrong, and why the decision was made to revert
back to IPv4 soon, if anyone is interested.
-- kevin
h a /20, we could break our network up into 16 pieces if we really had to, but for us we were content with 4 pieces.In IPv6 land, the RIRs are dictating routing policy as well as allocation policy. With the current /44 proposal (with acknowledgment that Kevin Loch says things might be changing),
Kevin Day wrote:
We wouldn't have met the proposed 2005-1
requirements for a /44 (we don't come close to 100,000 devices), and
lose functionality if we're required to advertise it through a single
aggregated address.
The high requirements of the "current" 2005-1 we
On Dec 21, 2005, at 10:13 AM, Kevin Loch wrote:
Kevin Day wrote:
9) Once we started publishing records for a few sites, we
started getting complaints from some users that they couldn't
reach the sites.
It is possible that a broken 6to4 relay somewhere was causing
pro
Kevin Day wrote:
9) Once we started publishing records for a few sites, we started
getting complaints from some users that they couldn't reach the sites.
It is possible that a broken 6to4 relay somewhere was causing problems.
Running your own local 6to4 relay (rfc3068) will im
27;d be
losing. This is another story though, that is getting really off topic.
Getting your network running IPv6 doesn't seem to be the challenge
anymore. None of our L2 devices cared at all. Our L3 devices took
some configuration, but moved pretty easily. it's the server and
application software that needs a lot more work. I don't think we're
even close to the point where an end-user can go to their provider
and say "IPv6 me!" and get it working for more hassle than it's worth
to them.
-- Kevin
erences and not the customers".
When carriers start to tune their network so not only do VOIP
connections to their own servers get a higher QoS, but also in a
manner which tends to *induce* jitter and other 'Q'uality degradation
for Skype and Vonage, then it's time for them to lo
".
I'd be curious to see if anyone on the ISP side of things has made a
list of recent/common IP addresses and hostnames that malware
attempts to connect to or resolve, and looked for accesses in name
server logs and netflow records to get an idea of what percentage of
end-users end
On Nov 15, 2005, at 9:45 PM, Hannigan, Martin wrote:
www.paypal.com
Internal Server Error
The server encountered an internal error or misconfiguration and was
unable to complete your request.
Please contact the server administrato
nodes will end up on one or more 31337 host lists.
- Kevin
prefix for
future growth. This would avoid the illusion of fixed sizes and carry
less risk of unused space. Is that worth the extra RIR effort? Maybe,
maybe not.
- Kevin
e NIC addresses, allowing "plug-and-play",
at least a decade before the term was invented.
This is not a scientific opinion but I think you can pick a random host
id from 32 bit space on most lans without having to retry very often.
- Kevin
adapt it's stateless
automatic tunneling to solve the IPv6 multihoming/PI problem.
I took a quick hack at it and the result is interesting though
far from perfect:
http://kl.net/ipv6/pi-in-6.txt
- Kevin
or at the meeting.
- Kevin
or ipv6
they'll probably jump right on it :)
- Kevin
if they made separate arrangements for that or are planning to
make arrangements for phase 2.
- Kevin
estions or recommendation? I have looked at two. ipplan which is a free open source and TCAM/ECAM by Parabola IP Solutions. Has anyone used either of these two system and what did you think of them.
Thanks
Kevin Billings
Sr Network Engineer
Spirit Telecom
I've been dealing with a data center outage due to this,
and power just came back up a few minutes ago.
Halon dumps are only fun from the outside.
Kevin Kadow
ery difficult to work with tech support to make the Paragon
product with a RADIUS server for OTP access control.
The newer "Dominion" line may be better; I've heard some complaints
about their serial console products, nothing either way about KVM.
Kevin Kadow
t we transport.
Why not just bring back the "evil bit" as a serious proposal?
Kevin Kadow
Is there any known use for those bits?
- Kevin
* ^Received:.*\[(58\.|59\.|60\.|61\.|\
124\.|125\.|126\.|\
202\.|203\.|\
210\.|211\.|\
218\.|219\.|\
220\.|221\.|222\.)
{
/dev/null
}
...Kevin O'Neil
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Geoff White
Sent: Wednesday, July 06, 2005 2:50
ming in, betting that most outages would be short lived.
Not all bets can be winners.
Kevin Kadow
ue for most of you, but, as time
passes, more and more content will start to be V6 only, especially if
located in Asia and not having a business case to support access to the
US.
--
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634
1 - 100 of 220 matches
Mail list logo