RE: Ethernet or FastEthernet [7:35245]

2002-02-12 Thread Arnold, Jamie

ISL requires Fast ethernet.

J

-Original Message-
From: Colin [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 12, 2002 8:20 PM
To: [EMAIL PROTECTED]
Subject: Ethernet or FastEthernet [7:35245]


Hello

I have been doing some reading on VLANs and Trunking and have read 
conflicting information. Can you use a 10Mbs Ethernet interface when 
running ISL or 801.1q or does the interface have to be FastEthernet? 
Some books/articles I've read say you must use at least a FastEthernet 
interface and others say you can use an Ethernet interface. Note: this 
is for my CCNP lab studies, not a production network.

Thanks
Colin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35247&t=35245
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX logging [7:62467]

2003-02-06 Thread Arnold, Jamie
If you do find a workaround, please let us (me) know?

Thanks

Jmaie

-Original Message-
From: Symon Thurlow [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 04, 2003 4:13 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX logging [7:62467]


Further to this,

I searched Google (I do get it right occasionally) and found that this
happens when you use access lists instead of conduits with 5.1.

I am using 5.1(5), the other PIX I had detailed info on was using 6.22.

Still looking for a workaround (other than changing my access lists to
conduits).

Cheers,

Symon

-Original Message-
From: Symon Thurlow 
Sent: 04 February 2003 20:50
To: [EMAIL PROTECTED]
Subject: PIX logging


Hi guys,

I am studying the PIX, and have successfully set it up, and am logging to
kiwi syslog daemon on my windows XP box.

I have done this before, not at home, and the info I saw in the syslog
screen was reasonably detailed, ie it had the source and destination ports
in the text, for warnings.

I am now only getting protocol numbers (hence my other question) as seen
below:

02-04-2003  20:46:29Local4.Warning  172.16.1.1  Feb 04
2003 20:46:16: %PIX-4-106019: IP packet from 192.168.100.20 to 172.16.1.100,
protocol 6 received from interface "DMZ" deny by access-group "dmz2int"
02-04-2003  20:46:29Local4.Warning  172.16.1.1  Feb 04
2003 20:46:16: %PIX-4-106019: IP packet from 192.168.100.20 to 172.16.1.100,
protocol 6 received from interface "DMZ" deny by access-group "dmz2int"
02-04-2003  20:46:26Local4.Warning  172.16.1.1  Feb 04
2003 20:46:12: %PIX-4-106019: IP packet from 172.16.2.100 to 172.16.1.100,
protocol 17 received from interface "DMZ" deny by access-group "dmz2int"

This doesn't tell me much. I have been mucking around with debugging levels
and facility numbers, but not getting anywhere. Anyone know how to force it
to show port numbers?

Cheers,

Symon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62598&t=62467
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: SNIFFER SOFTWARE [7:63586]

2003-02-23 Thread Arnold, Jamie
ditto

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: Mike Mandulak [mailto:[EMAIL PROTECTED] 
Sent: Sunday, February 23, 2003 3:50 PM
To: [EMAIL PROTECTED]
Subject: Re: SNIFFER SOFTWARE [7:63586]


It works fine for me, but I did do an uninstall/reinstall after upgrading to
XP.

- Original Message -
From: "PacketEXPERTS" 
To: 
Sent: Sunday, February 23, 2003 12:42 PM
Subject: SNIFFER SOFTWARE [7:63586]


> Sniffer Pro 4.5 and NetXRay 3.0 work fine with Windows 98, but is 
> there a patch, or a way to upgrade Sniffer Pro 4.5 or NetXRay 3.0 to 
> be compatable with Windows XP?
>
>
> = = = = = = = = = = = = = = = = = =
> Please send replys to:
>
> [EMAIL PROTECTED]
> = = = = = = = = = = = = = = = = = =
>
>
> -
> Do you Yahoo!?
> Yahoo! Tax Center - forms, calculators, tips, and more




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63600&t=63586
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


7206 adding VIP cards [7:63673]

2003-02-24 Thread Arnold, Jamie
I have a couple of VIP cards from an old 7010 that are (according to Cisco)
compatible with a new 7206.  One is a single, copper 100Mb card and the
other is a 4 port 10Bt card.  I am supposed to be able to add them "hot" to
the new 7206, but when I tried this I got the message on the console that
all interfaces are being disabledand they were!  I didn't wait very long
to see if they would come back upon their own, but this does not seem like
the expected behavior.  Can anyone comment on this?  I plan to try again and
try to administratively bring the interfaces back up.

Thanks in advance.

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63673&t=63673
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Sniffer Software [7:63796]

2003-02-26 Thread Arnold, Jamie
Or NGSSniff..also free and works without a driver.

-Original Message-
From: Troy Leliard [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 26, 2003 3:20 AM
To: [EMAIL PROTECTED]
Subject: RE: Sniffer Software [7:63796]


Why not try ethereal .. its free!!

PacketEXPERTS wrote:
> 
> Have anyone gotten NetXray 3.0 or Sniffer Pro 4.5 to
> work with XP.
> 
> Thanks
> 
> ___
> Sent by ePrompter, the premier email notification
> software.
> Free download at http://www.ePrompter.com.
> 
> __
> Do you Yahoo!?
> Yahoo! Tax Center - forms, calculators, tips, more 
> http://taxes.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63870&t=63796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: 7206 adding VIP cards [7:63673]

2003-02-26 Thread Arnold, Jamie
One of the Pas did in fact work.  The tech I had install them saw the
console message that said shutting down all interfaces, but it was on the
new card!  This was a 100Mb card.  The 8 port 10Mb card is the one that
gives a console message saying that it needs a HW revision to work in the
7206 VXR.

Here are the part numbers (nothing on the front of the card)
73-1391-07 REV A0 (on PCB)

I guess this needs the HW rev..

J



-Original Message-
From: MADMAN [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 25, 2003 10:11 AM
To: Arnold, Jamie
Cc: [EMAIL PROTECTED]
Subject: Re: 7206 adding VIP cards [7:63673]



   I ASSume you mean PA's not VIPs ;)

   What is the part number of the two PA's?  Some PA's that play well 
with VIPs need a differant HW revision in order to work on a 7200. 
Other than that you should be able to do OIR but it wouldn't be the 
first time I have seen OIR not work:(

   Dave

Arnold, Jamie wrote:
> I have a couple of VIP cards from an old 7010 that are (according to 
> Cisco) compatible with a new 7206.  One is a single, copper 100Mb card 
> and the other is a 4 port 10Bt card.  I am supposed to be able to add 
> them "hot" to the new 7206, but when I tried this I got the message on 
> the console that all interfaces are being disabledand they were!  
> I didn't wait very long to see if they would come back upon their own, 
> but this does not seem like the expected behavior.  Can anyone comment 
> on this?  I plan to try again and try to administratively bring the 
> interfaces back up.
> 
> Thanks in advance.
> 
> Jamie
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63872&t=63673
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: 7206 adding VIP cards [7:63673]

2003-02-26 Thread Arnold, Jamie
Tac told us that these were compatible...

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: tu do [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 26, 2003 11:55 AM
To: [EMAIL PROTECTED]
Subject: RE: 7206 adding VIP cards [7:63673]


Jamie wrote:
"The 8 port 10Mb card is the one that 
gives a console message saying that it needs a HW revision to work in the 
7206 VXR."

The PAs have compatible issues with 7200VXR. Only the PAs those said VXR
compatible work on 7200VXR. The older's work on 7K, 75xx, or c5rsm only.

There are good sources at cisco.com

tu do.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63935&t=63673
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: any windows 2000 mailing list? [7:65544]

2003-03-18 Thread Arnold, Jamie
Sunbelt Software has several very good W2K, AD, .net and X2K lists with very
high participation.

-Original Message-
From: NKP [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 17, 2003 9:18 PM
To: [EMAIL PROTECTED]
Subject: Re: any windows 2000 mailing list? [7:65544]


msnews.microsoft.com

""Carol smith""  wrote in message
news:[EMAIL PROTECTED]
> Hi... Group
>
> Personally I feel this cisco mailing list is very good.  Do u know is
there
> any windows 2000 mailing list to recommend me?
>
> Thanks
>
>
>
>
>
> -
> Do you Yahoo!?
> Yahoo! Web Hosting - establish your business online




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65683&t=65544
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: religious wars [7:70274]

2003-06-07 Thread Arnold, Jamie
That's for sure.  Linus wrote his first code in 1991.  FreeBSD was beginning
in 1993.  OpenBSD is my personal fave.


-Original Message-
From: Sam Sneed [mailto:[EMAIL PROTECTED] 
Sent: Saturday, June 07, 2003 3:34 PM
To: [EMAIL PROTECTED]

Since when is FreeBSD a flavor of Linux??? Would you say Solaris is a flavor
of Linux as well???

All *nix's are not the same.


""Black Jack""  wrote in message
news:[EMAIL PROTECTED]
> Old timers will remember Mac vs DOS/Windows. Or UNIX vs DOS. Or Beta 
> vs
VHS.
> More recent is Linux vs FreeBSD, or one flavor of Linux distribution 
> vs another. (See http://ars.userfriendly.org/cartoons/?id=19990301 for
example.
> By the way, if you are not familiar with www.userfriendly.org, you 
> gotta check it out. Funniest geek-oriented comic strip this side of 
> dilbert)
>
> Anyway, try asking network types what their favorite TFTP server is...
> then step back!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=70320&t=70274
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Windows meltdown??? [7:56190]

2002-10-24 Thread Arnold, Jamie
Without describing the "major problem" with the network it's hard to
conclude very much, but..a machine becoming the master browser should
not effect much more than the other machines in the workgroup/domain ability
to see other machines on a browse list.  The maximum size of a browse list
is 64K (2500 machines approx) so you don't have much data being transferred.

I would look elsewhere for the solution to the problem.  This is not it.

J

-Original Message-
From: Patrick Donlon [mailto:pat_donlon@;yahoo.co.uk] 
Sent: Thursday, October 24, 2002 6:30 AM
To: [EMAIL PROTECTED]
Subject: OT: Windows meltdown??? [7:56190]


We had an interested situation develop yesterday, about mid morning the
helpdesk manager reported a major problem with the network. Checked the
network with HPOV and some basic stuff on the core switches to check cpu,
peaks, etc. All was fine. Spoke to the NT team and it seems two servers are
having problems, a file server and a BDC. After some investigation (event
log checking probably) they tell me that the problem is caused by a machine
becoming the master browser.

So a man hunt begins for a machine (a non standard one from the name found
for the machine) on a VLAN which was separate from the VLAN the servers sit
on. The machine was not responding to pings and was probably not even being
used! Eventually the user came back to his machine mid afternoon and we find
the port being used and the NT guys disable his Computer Browser.

In between finding the machine the two offending servers had to be re-booted
to fix their mystery problems.

>From what I know about the browser this shouldn't cause a problem on the
network and if it does only with the windows machines in that subnet (
please correct feel free to correct me). Also XP has default registry
settings to prevent it becoming the master browser - yep the guy was using
XP (Japanese edition).

Has anyone else had such a meltdown on their Windows environment because of
such problems or is this just a case a apportioning blame to an outsider?

Cheers Pat




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56203&t=56190
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MSN Messenger blocking [7:55445]

2002-10-12 Thread Arnold, Jamie
It will try one of the standard, higher ports that are listed, if it can't
get through it begins to look elsewhere...like 80.

MS made it smart..to some degree.

-Original Message-
From: Mohannad Khuffash [mailto:mohd.khuffash@;paltel.net] 
Sent: Saturday, October 12, 2002 12:47 PM
To: [EMAIL PROTECTED]
Subject: Re: MSN Messenger blocking [7:55445]


Hi,
I tried to block port 1080, but the MSN messenger still working. I think
it's works at http port "80" , is that right ?

Regards,
 wrote in message
news:200210121035.KAA07184@;groupstudy.com...
> Block its port, I believe 1080
>
>
>
> ""Mohannad Khuffash""  wrote in message 
> news:200210120908.JAA01990@;groupstudy.com...
> > Hello All,
> > What is the best way to block MSN Messenger ?
> >
> > Thanks
> >
> > Mohannad




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=55477&t=55445
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to measure the amount of traffic on a router? [7:56385]

2002-10-28 Thread Arnold, Jamie
If your router has CEF enabled, be sure to read about how to get accurate
counts when using MRTG/RRD

-Original Message-
From: Elijah Savage III [mailto:esavage@;digitalrage.org] 
Sent: Sunday, October 27, 2002 4:30 PM
To: [EMAIL PROTECTED]
Subject: RE: How to measure the amount of traffic on a router? [7:56385]


Look into MRTG/SNMP

-Original Message-
From: Vitaliy Vishnevskiy [mailto:vitaliy@;shoregroup.com] 
Sent: Sunday, October 27, 2002 3:44 PM
To: [EMAIL PROTECTED]
Subject: How to measure the amount of traffic on a router? [7:56385]


Folks,
I am looking for some kind of inexpensive software package that could be
programmed to graph the traffic volume going through a router.  Thanks
 
--
Vitaliy Vishnevskiy
System Engineer, CCDP, CCNP, Cisco Security Specialist 1, MCSE ShoreGroup,
Inc 460 West 35th Street New York, NY  10001 
Phone: (212) 736-2915
Mobile: (917) 816-0753
Fax: (425) 955-1485
E-mail: [EMAIL PROTECTED]
  

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of Vitaliy Vishnevskiy ([EMAIL PROTECTED]).vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56413&t=56385
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: off Topic--pricewatch.com etc [7:57291]

2002-11-13 Thread Arnold, Jamie
Mysimon.com can be good..


-Original Message-
From: Stuart Laubstein [mailto:billy.tester@;rwesystems.com] 
Sent: Tuesday, November 12, 2002 10:30 AM
To: [EMAIL PROTECTED]
Subject: off Topic--pricewatch.com etc [7:57291]


There had been some good websites mentioned where one could compares prices
of different new devices. I have found a few but one that was really good I
cannot find..I do ot remember its name. It was similar to pricewatch.com
anyone have any ideas on what it might be?

thanks

stuart




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57357&t=57291
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Console adapter for OLDER Catalyst 1924 [7:57947]

2002-11-23 Thread Arnold, Jamie
sspec.htm#xtocid115096

-Original Message-
From: cebuano [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, November 23, 2002 12:21 PM
To: [EMAIL PROTECTED]
Subject: Console adapter for OLDER Catalyst 1924 [7:57947]


Hi group.
I have an OLDER model of the Cat 1900 switch that has the DB-9 port (not
RJ-45) for console access. I can't find any info on Cisco's site for this
model, so I don't know what it's pinout assignment should be. The only way I
can console in using the usual connection (e.g. terminal
server) is via the Diagnostic mode. My research revealed that apparently
this model uses a different DB-9 to RJ-45 pinout. If anyone has any info,
I'd greatly appreciate it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57960&t=57947
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Traffic Analyses [7:58193]

2002-11-27 Thread Arnold, Jamie
MRTG

Cricket

-Original Message-
From: Curious [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 27, 2002 11:03 AM
To: [EMAIL PROTECTED]
Subject: Traffic Analyses [7:58193]


Is there a tool which gives me very good traffic analyses or traffic
monitering on my Cisco Routers / PIX FW  (Serial and Eth) Interfaces, over
Ethernet and T1 Link.

Thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=58207&t=58193
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 525 norandomseq?? [7:59471]

2002-12-18 Thread Arnold, Jamie
Cisco states that the norandomseq comand should be not used when you have a
pix "inline" with another pix.  Does "inline" mean directly connected? I
have a 525 at the edge and a few 500 series Pixs in other places in the
network behind a 6500 and or a 5500 router(s).  Do I have to worry about
this in my situation on the statics?

Thanks

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59471&t=59471
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-04 Thread Arnold, Jamie
What about *very* slow access to CiscoWorks?  We're running it from a new
Dell 2550, 2 processors, 1gb or ram and the box does nothing but run CW.
Accessing it from a workstation takes literally minutes to load the initial
page and then another 3-4 minutes to load the device manager.  Is this
common?

Thanks


"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: Amr Essam [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, January 04, 2003 1:07 PM
To: [EMAIL PROTECTED]
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


Piyush

Check the permissions for the user you logged on with to the ciscoworks And
check the java settings in the web browser too I have passed with this kind
of problem but it was solved by this way as it's mainly related with the
browser

Amr

   -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mr
piyush shah
Sent: Saturday, January 04, 2003 11:14 AM
To: [EMAIL PROTECTED]
Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]

Hi all
I have windows2000 suite of NMS.I have installed CD1
with version 4 .Now that I can acess the same locally
,while When I am trying to acess ciscoview through web
using port 1741 on other pC,I am getting the error
Please grant the permission to acess Ciscoview.I
wonder whether where should I grant the
permisiion.Request all to help me.
Piyush



Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60313&t=60285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-08 Thread Arnold, Jamie
I'm sorry to say, but even after accessing it 10 times from any machine it
is just as slow as the first time.

-Original Message-
From: steve [mailto:[EMAIL PROTECTED]] 
Sent: Monday, January 06, 2003 2:21 PM
To: [EMAIL PROTECTED]
Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]


hi,

this is a java "FEATURE" ,...we run it on a sun E250 dual proc 1gb mem and
it goes very well..

once you have accepted the first security "token" and select "grant always"
the problem will go away ,,,

it is authenticating "of sorts" your PC .hell ...actually it is just
registering it for future updates..

also you must remember on a pc that has never connected  to CW2K the server
download`s and install the java 1.3_01 client ,which can take some time..3-7
mins with install

but again this only happen`s once...
when you register your Pc buy saying "GRANT ALWAYS" some java CAR files are
installed onto your machine which simply register you everytime you
logonalso  the web server itself, keeps some cookie info about which
machine`s have tried to log on unsuccessfully..

it`s ok and part of the process ... just say YES

I have used Cw2k for some time and have got USED TOO it`s little forboyles

HTH

Steve

- Original Message -
From: "Frank Jimenez" 
To: 
Sent: Sunday, January 05, 2003 10:38 PM
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


> Is it from just one particular workstation or any workstation?  IE and 
> Netscape both?
>
> I've had intermittent problems accessing CW2K servers from my laptop - 
> usually because I've done something funky with my Java settings or 
> installed one to many new widgets.  I've had to reinstall IE/Netscape 
> before I could get it to work right.
>
> Wouldn't hurt to make sure that the server is patched to current revs 
> as well.
>
> Frank Jimenez, CCIE #738
> Systems Engineer
> Cisco Systems, Inc.
> [EMAIL PROTECTED]
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf 
> Of Arnold, Jamie
> Sent: Saturday, January 04, 2003 6:07 PM
> To: [EMAIL PROTECTED]
> Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> What about *very* slow access to CiscoWorks?  We're running it from a 
> new Dell 2550, 2 processors, 1gb or ram and the box does nothing but 
> run CW. Accessing it from a workstation takes literally minutes to 
> load the initial page and then another 3-4 minutes to load the device 
> manager. Is this common?
>
> Thanks
>
>
> "Imagination is more important than knowledge"
>
> Albert Einstein
>
>
> -Original Message-
> From: Amr Essam [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, January 04, 2003 1:07 PM
> To: [EMAIL PROTECTED]
> Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> Piyush
>
> Check the permissions for the user you logged on with to the 
> ciscoworks And check the java settings in the web browser too I have 
> passed with this kind of problem but it was solved by this way as it's 
> mainly related with the browser
>
> Amr
>
>-Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf 
> Of Mr piyush shah
> Sent: Saturday, January 04, 2003 11:14 AM
> To: [EMAIL PROTECTED]
> Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]
>
> Hi all
> I have windows2000 suite of NMS.I have installed CD1
> with version 4 .Now that I can acess the same locally
> ,while When I am trying to acess ciscoview through web
> using port 1741 on other pC,I am getting the error
> Please grant the permission to acess Ciscoview.I
> wonder whether where should I grant the
> permisiion.Request all to help me.
> Piyush
>
>
> __
> __
> Missed your favourite TV serial last night? Try the new, Yahoo! TV.
>visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60599&t=60285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-09 Thread Arnold, Jamie
2 proc 1.9 Ghz Dell 2550 with a  gig of ram

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: steve [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 08, 2003 10:54 AM
To: Arnold, Jamie; [EMAIL PROTECTED]
Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]


hi,

that`s a real shame as it`s a great product...(2.1 once you have got all the
bugs out)

my sun machine has a 100 meg connection to a 5509 but it is in another
building...which is connected to us over a 100meg fibre link (this link also
carries normal "user"data)

i am running solaris 2.6 32bit version on a dual proc(300mhz) system with
1gig of mem and a 36 gig hdd,

but to be honest all the people i have spoken to recommend running it on
atleast a dual proc system .

it shouldn`t be that slow .what are you running it on

steve


- Original Message -
From: "Arnold, Jamie" 
To: 
Sent: Wednesday, January 08, 2003 1:11 PM
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


> I'm sorry to say, but even after accessing it 10 times from any 
> machine it is just as slow as the first time.
>
> -Original Message-
> From: steve [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 06, 2003 2:21 PM
> To: [EMAIL PROTECTED]
> Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> hi,
>
> this is a java "FEATURE" ,...we run it on a sun E250 dual proc 1gb mem 
> and it goes very well..
>
> once you have accepted the first security "token" and select "grant
always"
> the problem will go away ,,,
>
> it is authenticating "of sorts" your PC .hell ...actually it is 
> just registering it for future updates..
>
> also you must remember on a pc that has never connected  to CW2K the
server
> download`s and install the java 1.3_01 client ,which can take some
time..3-7
> mins with install
>
> but again this only happen`s once...
> when you register your Pc buy saying "GRANT ALWAYS" some java CAR 
> files
are
> installed onto your machine which simply register you everytime you 
> logonalso  the web server itself, keeps some cookie info about 
> which machine`s have tried to log on unsuccessfully..
>
> it`s ok and part of the process ... just say YES
>
> I have used Cw2k for some time and have got USED TOO it`s little 
> forboyles
>
> HTH
>
> Steve
>
> - Original Message -
> From: "Frank Jimenez"
> To:
> Sent: Sunday, January 05, 2003 10:38 PM
> Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> > Is it from just one particular workstation or any workstation?  IE 
> > and Netscape both?
> >
> > I've had intermittent problems accessing CW2K servers from my laptop 
> > - usually because I've done something funky with my Java settings or 
> > installed one to many new widgets.  I've had to reinstall 
> > IE/Netscape before I could get it to work right.
> >
> > Wouldn't hurt to make sure that the server is patched to current 
> > revs as well.
> >
> > Frank Jimenez, CCIE #738
> > Systems Engineer
> > Cisco Systems, Inc.
> > [EMAIL PROTECTED]
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf 
> > Of Arnold, Jamie
> > Sent: Saturday, January 04, 2003 6:07 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
> >
> >
> > What about *very* slow access to CiscoWorks?  We're running it from 
> > a new Dell 2550, 2 processors, 1gb or ram and the box does nothing 
> > but run CW. Accessing it from a workstation takes literally minutes 
> > to load the initial page and then another 3-4 minutes to load the 
> > device manager. Is this common?
> >
> > Thanks
> >
> >
> > "Imagination is more important than knowledge"
> >
> > Albert Einstein
> >
> >
> > -Original Message-
> > From: Amr Essam [mailto:[EMAIL PROTECTED]]
> > Sent: Saturday, January 04, 2003 1:07 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
> >
> >
> > Piyush
> >
> > Check the permissions for the user you logged on with to the 
> > ciscoworks And check the java settings in the web browser too I have 
> > passed with this kind of problem but it was solved by this way as 
> > it's mainly related with the browser
> >
> > Amr
> >
> >-Original Message-
> &g

RE: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-09 Thread Arnold, Jamie
2.6Ghz Dell, gig of ram..brand new machineI'm thinking of dumping the
Intel box and put it on a Solaris box.

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: Loechel, Michelle [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 08, 2003 1:39 PM
To: [EMAIL PROTECTED]
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


For Arnold, Jamie who said:

> > Sent: Saturday, January 04, 2003 6:07 PM

> > What about *very* slow access to CiscoWorks?  We're running it from
> > a new Dell 2550, 2 processors, 1gb or ram and the box does nothing 
> > but run CW. Accessing it from a workstation takes literally minutes 
> > to load the initial page and then another 3-4 minutes to load the 
> > device manager. Is this common?

It sounds like your server specs shouldn't be the problem.
What are your pc specs?  For my pc, I had to get a Pentium 4 1.2 GHz with
256 MB of RAM vs my old pc (P3 - 500 with 128MB of RAM) would take 3 times
as long and even longer if I had other apps open. My new pc only takes about
6 seconds to open the main window and 10 seconds to load the device view of
a 6509 in the core.  Add some time loading views for WAN equipment
(obviously).


For anyone thinking of putting this in, my experience with this application
is:
Much more stable on Solaris than on NT.
You must increase the hardware for every application in addition to CDOne
otherwise the performance is terrible.  And on top of that, double the
minimum requirements. For any upgrades, double your current box (assuming
you've done the above rule successfully).


I would agree that it is a great product.  
Mine runs fairly fast, but these are my server specs:
I have the LAN/WAN/DFM running on a Solaris 2.7 Ultra 80 with dual
Ultra-Sparc II chips with a Gig of RAM.


-Original Message-
From: steve [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 08, 2003 8:54 AM
To: [EMAIL PROTECTED]
Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]


hi,

that`s a real shame as it`s a great product...(2.1 once you have got all the
bugs out)

my sun machine has a 100 meg connection to a 5509 but it is in another
building...which is connected to us over a 100meg fibre link (this link also
carries normal "user"data)

i am running solaris 2.6 32bit version on a dual proc(300mhz) system with
1gig of mem and a 36 gig hdd,

but to be honest all the people i have spoken to recommend running it on
atleast a dual proc system .

it shouldn`t be that slow .what are you running it on

steve


- Original Message -
From: "Arnold, Jamie" 
To: 
Sent: Wednesday, January 08, 2003 1:11 PM
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


> I'm sorry to say, but even after accessing it 10 times from any
> machine it is just as slow as the first time.
>
> -Original Message-
> From: steve [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 06, 2003 2:21 PM
> To: [EMAIL PROTECTED]
> Subject: Re: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> hi,
>
> this is a java "FEATURE" ,...we run it on a sun E250 dual proc 1gb mem
> and it goes very well..
>
> once you have accepted the first security "token" and select "grant
always"
> the problem will go away ,,,
>
> it is authenticating "of sorts" your PC .hell ...actually it is
> just registering it for future updates..
>
> also you must remember on a pc that has never connected  to CW2K the
server
> download`s and install the java 1.3_01 client ,which can take some
time..3-7
> mins with install
>
> but again this only happen`s once...
> when you register your Pc buy saying "GRANT ALWAYS" some java CAR
> files
are
> installed onto your machine which simply register you everytime you
> logonalso  the web server itself, keeps some cookie info about 
> which machine`s have tried to log on unsuccessfully..
>
> it`s ok and part of the process ... just say YES
>
> I have used Cw2k for some time and have got USED TOO it`s little
> forboyles
>
> HTH
>
> Steve
>
> - Original Message -
> From: "Frank Jimenez"
> To:
> Sent: Sunday, January 05, 2003 10:38 PM
> Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]
>
>
> > Is it from just one particular workstation or any workstation?  IE
> > and Netscape both?
> >
> > I've had intermittent problems accessing CW2K servers from my laptop
> > - usually because I've done something funky with my Java settings or 
> > installed one to many new widgets.  I've had to reinstall 
> > IE/Netscape before I could get it to work right.
> >
> > Wouldn't hurt to make sure that the server is patched to 

RE: Microsoft Exchange/UMS and Firewall [7:61747]

2003-01-24 Thread Arnold, Jamie
Exchange will use 135 to discover (portmapper) and then use dynamically
assigned ports for the actual conversations.  Your best bet is to statically
map the ports in Exchange and then you don't have a moving target from the
firewall point of view.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;155831

http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b194952

The other option (not a good one IMHO) is to open 135 only to the Exchange
host and then leave a range of ports open to that host as well.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, January 23, 2003 9:04 PM
To: [EMAIL PROTECTED]
Subject: Microsoft Exchange/UMS and Firewall [7:61747]


Hi All,

Need your advice on the following situation: I have a Active Voice Unified
Messaging System on Location A, and a Microsoft Exchange Server at Location
B. Both Location A and B are protected by Checkpoint firewall. Please advice
how the firewall be configured such that it will allow MAPI to be used
between these two sites.

Thanks a lot in advance!

Maurice




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61780&t=61747
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NT4.0 password crack tool [7:61807]

2003-01-25 Thread Arnold, Jamie
Why do a command line?  Just rename user manager to logon.scr and reboot
(you'll need NTFSDOS Pro) and in 15 minutes you get user manager with root
perms.

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: Juntao [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 24, 2003 4:50 PM
To: [EMAIL PROTECTED]
Subject: Re: NT4.0 password crack tool [7:61807]


u'r talking about nt4 login passwords, the SAM database? lophtcrack works,
it takes a long time though systernals has tools to login to the box, and
change things. u can also change cmd.exe to the default screen savec name,
the command line will pope up after a while, after reboot. and change the
password with the net user command if the server or the box is part of the
global admin group, i'm sure u know u can change the password or reset it,
even just with, user manager for domains. and there is of course a lot of
other things that can be done, depending on ur situation.

hope the above helps
regards

""Kazan, Naim""  a icrit dans le message de news:
[EMAIL PROTECTED]
> I am trying to recover my password that someone set on my sniffer box 
> running on NT4.0. Any help will be greatly appreciated.
>
> Naim Kazan
> FISC-SDS
> WORK: 201-915-7347
> HOME: 973-492-1466
> CELL: 917-559-0591
> EMAIL: [EMAIL PROTECTED]
> PAGER: 800-759-8352 Pin 1145361




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61833&t=61807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A special new game [7:61850]

2003-01-25 Thread Arnold, Jamie
Hehhhehehehe.no AV, huh?

"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: pborghese [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, January 25, 2003 12:05 PM
To: [EMAIL PROTECTED]
Subject: A special new game [7:61850]


This is a very new game
This game is my first work.
You're the first player.
I wish you would enjoy it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61889&t=61850
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A special new game [7:61850]

2003-01-25 Thread Arnold, Jamie
Here's the scoop from a friend @ eeye.com

We experienced one machine that wasn't patched and therefore got
slammed...it was generating 100 Mbps of pure DoS traffic.That admin will
be drawn and quartered.

J



SQL Sapphire Worm Analysis

Release Date:
1/25/03

Severity:
High

Systems Affected:
Microsoft SQL Server 2000 pre SP 2

Description:
Late Friday, January 24, 2003 we became aware of a new SQL worm spreading
quickly across various networks around the world.

The worm is spreading using a buffer overflow to exploit a flaw in Microsoft
SQL Server 2000. The SQL 2000 server flaw was  discovered in July, 2002 by
Next Generation Security Software Ltd. The buffer overflow exists because of
the way SQL  improperly handles data sent to its Microsoft SQL Monitor port.
Attackers leveraging this vulnerability will be executing  their code as
SYSTEM, since Microsoft SQL Server 2000 runs with SYSTEM privileges.

The worm works by generating pseudo-random IP addresses to try to infect
with its payload. The worm payload does not contain  any additional
malicious content (in the form of backdoors etc.); however, because of the
nature of the worm and the speed at  which it attempts to re-infect systems,
it can potentially create a denial-of-service attack against infected
networks.

We have been able to verify that multiple points of connectivity on the
Internet have been bogged down since 9pm Pacific  Standard Time.

It should be noted that this worm is not the same as an earlier SQL worm
that used the SA/nopassword SQL vulnerability as its  spread vector. This is
a new worm is more devastating as it is taking advantage of a
software-specific flaw rather than a  configuration error. We have already
had many reports of smaller networks brought down due to the flood of data
from the  Sapphire Worm trying to re-infect new systems.

Corrective Action
We recommend that people immediately firewall SQL service ports at all of
their gateways. The worm uses only UDP port 1434  (SQL Monitor Port) to
spread itself to a new system; however, it is safe practice to filter all
SQL traffic at all gateways.  The following is a list of SQL server ports:
ms-sql-s 1433/tcp #Microsoft-SQL-Server ms-sql-s 1433/udp
#Microsoft-SQL-Server ms-sql-m 1434/tcp #Microsoft-SQL-Monitor ms-sql-m
1434/udp #Microsoft-SQL-Monitor

Once again this worm is taking advantage of a known vulnerability that has
had a patch available for many months. Microsoft  has also released a recent
service pack for SQL (Service Pack 3) that includes a fix for this
vulnerability.

Standalone patch:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS02-039.asp

SQL 2000 Service Pack 3: http://www.microsoft.com/sql/downloads/2000/sp3.asp

Previous SQL Service Pack versions are vulnerable.

Technical Description

The following is a quick run-down of what the worm's payload is doing after
infection:
1. Retrieves the address of GetProcAddress and Loadlibrary from the IAT in
sqlsort.dll. It snags the necessary library base  addresses and function
entry points as needed. 2. Calls gettickcount, and uses returned count as a
pseudo-random seed 3. Creates a UDP socket 4. Performs a simple pseudo
random number generation formula using the returned gettickcount value to
generate an IP Address  that will later be used as the target. 5. Send worm
payload in a SQL Server Resolution Service request to the pseudo random
target address, on port 1434 (UDP). 6. Return back to formula and continue
generating new pseudo random addresses.


push42B0C9DCh   ; [RET] sqlsort.dll -> jmp esp
mov eax, 1010101h   ; Reconstruct session, after the
overflow the payload buffer
; get's corrupted during program
execution but before the
; payload is executed. .
xor ecx, ecx
mov cl, 18h

FIXUP:
pusheax
loopFIXUP
xor eax, 5010101h
pusheax
mov ebp, esp
pushecx
push6C6C642Eh
push32336C65h
push6E72656Bh   ; kernel32
pushecx
push746E756Fh   ; GetTickCount
push436B6369h
push54746547h
mov cx, 6C6Ch
pushecx
push642E3233h   ; ws2_32.dll
push5F327377h
mov cx, 7465h
pushecx
push6B636F73h   ; socket
mov cx, 6F74h
pushecx
push646E6573h   ; sendto
mov esi, 42AE1018h  ; IAT from sqlsort
lea eax, [ebp-2Ch]  ; (ws2_32.dll)
pusheax
calldword ptr [esi] ; call loadlibrary
  

RE: Bandwidth Restriction [7:61916]

2003-01-27 Thread Arnold, Jamie
We have a few of these (ISP models) and they are very good at what they do.
Very powerful CLI as well as the HTTP GUI.

J

-Original Message-
From: Lupi, Guy [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, January 26, 2003 4:09 PM
To: [EMAIL PROTECTED]
Subject: RE: Bandwidth Restriction [7:61916]


Packeteer makes a great product, the Packetshaper.  It works very well,
check it out:

www.packeteer.com

-Original Message-
From: Chris Headings [mailto:[EMAIL PROTECTED]]
Sent: Sunday, January 26, 2003 3:33 PM
To: [EMAIL PROTECTED]
Subject: Bandwidth Restriction [7:61916]


Hey all...

Are there any ISP's out there with co-location clients located in their
NOC???  If so, how do you effectively "rate-limit" their bandwidth.  We
currently use CAR on our switches/routers to accomplish this task but
wondered if there is a better, more manageable way to accomplish this task. 
Maybe with some other form of hardware?

Regards,

Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61951&t=61916
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX and asymmetry [7:62100]

2003-01-29 Thread Arnold, Jamie
I have a situation that I hope some of you might shed some light on.  We
have 2 points of ingress to our campus.  One OC3 (Nycernet) for internet 2
and one (Time Warner)   Our commodity edge consists of a 7200 router then
the PIX.  The I2 edge is just a 7200 series router.  Our problem is that
with certain sites, traffic going out on the I2 OC3 is returning via our
commodity OC3 and the pix drops it as it didn't see it originating on the
inside (syn-ack without syn)  I recognize that the bigger problem may be
with the way these sites are being routed back to us, but I have little
control over that for now.  Both edge routers use BGP for updates.  I'm
looking for a solution.  Can I install another PIX on the OC3 side and
somehow have the 2 PIX boxes talk to each other and update each others Xlate
tables?

Any suggestions would be appreciated

Thanks

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62100&t=62100
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX and asymmetry [7:62100]

2003-01-29 Thread Arnold, Jamie
Thanks, Richard.

I think for us the best solution is to route both edge routers through the
pix and use RIP to keep everyone happy.  Static routes are a consideration,
but I2 tends to be pretty dynamic and there are a lot of sloppy routes out
there (obviously) so I think that would be a losing battle.

As I'm not up to speed with OSPF, how would that help me here?  I had also
heard that OSPF was being introduced in 6.3

J



"Imagination is more important than knowledge"
 
Albert Einstein


-Original Message-
From: Richard Deal [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, January 29, 2003 11:27 AM
To: [EMAIL PROTECTED]
Subject: ARe: PIX and asymmetry [7:62100]


Jamie,

Not quite...what you can do, however, is have all traffic go through one PIX
and have another PIX as a failover. In this scenario, if one PIX would fail,
the other could kick in--in this scenario, only one PIX is active. Of
course, this still presents a problem of an exit path--by default, the
active PIX would choose its defalt route and thus you would lose load
balancing out your two exit points. The PIX does support passive RIP, so
this might help. Or you could configure static routes...but you would,
unfortuantely, not have any ability to route based on the source of the
address--only your Cisco routers have this ability. And perhaps in the
upcoming 6.3 release, OSPF might be introducted (--might--), but don't hold
your breath.

Hope this helps!

Cheers!
--

Richard A. Deal

Visit my home page at http://home.cfl.rr.com/dealgroup/

Author of Cisco PIX Firewalls, CCNA Secrets Revealed!, CCNP Remote Access
Exam Prep, CCNP Switching Exam Cram, and CCNP Cisco LAN Switch Configuration
Exam Cram

Cisco Test Prep author for QuizWare, providing the most comprehensive Cisco
exams on the market.




""Arnold, Jamie""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I have a situation that I hope some of you might shed some light on.  
> We have 2 points of ingress to our campus.  One OC3 (Nycernet) for
internet 2
> and one (Time Warner)   Our commodity edge consists of a 7200 router then
> the PIX.  The I2 edge is just a 7200 series router.  Our problem is 
> that with certain sites, traffic going out on the I2 OC3 is returning 
> via our commodity OC3 and the pix drops it as it didn't see it 
> originating on the inside (syn-ack without syn)  I recognize that the 
> bigger problem may be with the way these sites are being routed back 
> to us, but I have little control over that for now.  Both edge routers 
> use BGP for updates.  I'm looking for a solution.  Can I install 
> another PIX on the OC3 side and somehow have the 2 PIX boxes talk to 
> each other and update each others
Xlate
> tables?
>
> Any suggestions would be appreciated
>
> Thanks
>
> Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62123&t=62100
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Serial Number Retrieval Tool [7:49449]

2002-07-23 Thread Arnold, Jamie

I think Cricket will do this via rmon or SNMP?

-Original Message-
From: Kwame [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 23, 2002 12:29 PM
To: [EMAIL PROTECTED]
Subject: Serial Number Retrieval Tool [7:49449]


Is there a tool out there for retrieval serial numbers from cisco switches?
Anyone?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49458&t=49449
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cat 5000 ram [7:49643]

2002-07-25 Thread Arnold, Jamie

www.superpc.com

-Original Message-
From: Symon Thurlow [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, July 25, 2002 6:14 AM
To: [EMAIL PROTECTED]
Subject: Cat 5000 ram [7:49643]


Hey guys,

Anyone have a good source for CAT5K SUP1 Ram?

Thanks,

Symon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49650&t=49643
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Filtering NT domain listings at the router [7:54668]

2002-10-02 Thread Arnold, Jamie

Take a look at WINS documentation..

-Original Message-
From: Roberts, Larry [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, October 01, 2002 5:38 PM
To: [EMAIL PROTECTED]
Subject: Filtering NT domain listings at the router [7:54668]


Hey all,

Just curious if anyone has any links on filtering the domains on their
network at the router. We are having a large amount of NT domains that are
showing up internally, and I would like to start blocking these
advertisements at the remote routers. Is this possible ? I can't figure out
how, but I suspect that if it can be done, someone on this list has done it.



Thanks

Larry




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=54746&t=54668
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: a really big bug [7:72463]

2003-07-17 Thread Arnold, Jamie
Just got a call from our Cisco vendor...he said he's getting calls from some
major clients that have routers that are affected. 

-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 17, 2003 12:34 PM
To: [EMAIL PROTECTED]
Subject: RE: a really big bug [7:72463]

Oscar wrote:
> 
> Cisco Security Advisory: Cisco IOS Interface Blocked by IPv4 Packet
> 
> lots and lots of IOS versions are affected
> 
> http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml
> 
> 

Thanks for the link. It's scary. Of course, with the proper ACLs, a router
wouldn't be affected, but probably lots of routers don't have "the proper
ACLs."

Anyone know the details? The advisory just says this:

"A rare, specially crafted sequence of IPv4 packets which is handled by the
processor on a Cisco IOS device may force the device to incorrectly flag the
input queue on an interface as full, which will cause the router to stop
processing inbound traffic on that interface. This can cause routing
protocols to drop due to dead timers."

I think Cisco was right not to publish the details about these "rare,
specially crafted" packets, but does anyone have the details? Maybe if you
can get to the bugtracker, the details are in there.

Thanks

Priscilla




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72497&t=72463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Anyone seen this on a 2950?? [7:74906]

2003-09-05 Thread Arnold, Jamie
We have about 60 2950s that are exhibiting this behavior:

Add an ACL (approx 17 ACEs) either via CiscoWorks or manually, delete
the ACL, try to recreate a new ACL and the switch starts throwing ASIC
resource errors and some ports begin to act funky (can't get DHCP
reservations, but can get to web resources, ports go orange, etc)

We can reproduce this problem in several versions of the IOS.  These are
new 2950G switches with the enhanced firmware purchased new about 2
months ago.

Thanks

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74906&t=74906
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html