Re: [c-nsp] Which IOS do *you* use?

2006-03-21 Thread Robert Boyle


At 05:29 PM 3/20/2006, you wrote:

I've got a customer running a few 3660s with 12.2.29 on them. We
went back to 12.2.29 because we saw all sorts of evil stuff with 12.3.16
on our test box - we'd drop all BGP sessions and end up with half a
dozen obviously foreign prefixes listed as directly connected. The 12.2
train shows none of this sort of stuff.

   I touch BGP on 3660s, 7200s, and 7500s and this is a common theme -
the customers I have are sticking to the 12.2 train. Is anyone seeing
different trends than this? I'd be curious to know if there are certain
12.3 versions that act better than others, etc.


We run mostly on 7200s. 12.3 definitely still has some bugs. Esp. 
with odd things like directly connected routes and networks 
disappearing from the routing table when using CEF - at least until 
you globally disable and re-enable CEF. However, there are some 
scenarios where we have to use the 12.3 train. We run 12.2(20 
something) wherever possible. We have some customers running super 
new gear with 12.4T. Craziness I say! I'm not directly involved with 
those clients at all, but I certainly wouldn't want to run that in 
production yet. :)


-Robert



Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
Well done is better than well said. - Benjamin Franklin



Re: [c-nsp] Which IOS do *you* use?

2006-03-21 Thread Robert Boyle



Sorry folks,

I'm up too late. I replied to the wrong list! Have a good night everyone.

-Robert


Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
Well done is better than well said. - Benjamin Franklin



Re: DNS Amplification Attacks

2006-03-21 Thread Joseph S D Yao

On Tue, Mar 21, 2006 at 07:09:49AM +, Andy Davidson wrote:
 Joseph S D Yao wrote:
 [...]
 service except perhaps to their own population, than against what can
 you compare the DNS service that you are getting, to see whether it is
 giving you what the world should be seeing?
 
 DNS looking glasses, in much the same way that we use web-form based BGP 
 or traceroute looking glasses today.

Yes, I think I wrote one of those.  ;-)  It would have to become a
common service to allow folks to trust the service [by comparing
outputs].

-- 
Joe Yao
---
   This message is not an official statement of OSIS Center policies.


Re: [c-nsp] Which IOS do *you* use?

2006-03-21 Thread Michael Loftis




--On March 21, 2006 3:41:47 AM -0500 Robert Boyle [EMAIL PROTECTED] 
wrote:




We run mostly on 7200s. 12.3 definitely still has some bugs. Esp. with
odd things like directly connected routes and networks disappearing from
the routing table when using CEF - at least until you globally disable
and re-enable CEF. However, there are some scenarios where we have to use
the 12.3 train. We run 12.2(20 something) wherever possible. We have some
customers running super new gear with 12.4T. Craziness I say! I'm not
directly involved with those clients at all, but I certainly wouldn't
want to run that in production yet. :)


12.2 for everything I touch as well, except for some ooold gear which 
is stuck in older chains.  Similar problems observed with 12.3.


RE: [c-nsp] Which IOS do *you* use?

2006-03-21 Thread Neil J. McRae

anyone running rockies 3 on 76 in anger?



TLD strings currently in use

2006-03-21 Thread John L Crain


Hi folks,

I hope you consider this operational and on Topic:)

We have been receiving some reports of rejection of TLD strings at the 
ISP level. Some of this may be due to length limitations set in peoples 
software, there may also be other causes.


We want to make sure that there is a place where people can go and pick 
up a current list of the strings that are in the root zone. (Without 
having to parse the zone file itself). To this end the IANA is 
maintaining a list that can be downloaded from the following information 
page


http://icann.org/topics/TLD-acceptance/

If you have questions please feel free to use the e-mail listed on the 
above URL.



John Crain
CTO ICANN


Final report: national diversity assurance initiative

2006-03-21 Thread Sean Donelan


ATIS has issued its final reports about its circuit national diversiety
assurance initiative.

  The NDAI report confirmed our suspicions that diversity assurance is
  not for the meek, Malphrus added. It is expensive and requires
  commitment by the customer to work closely with carriers in performing
  due diligence. Until the problem is solved, circuit route diversity
  should not be promoted as a general customer best practice.

Press release:
http://www.atis.org/PRESS/pressreleases2006/031506.htm

Report:
http://www.atis.org/ndai/



Re: Final report: national diversity assurance initiative

2006-03-21 Thread Christian Kuhtz


Due to the cost structures for these projects, the  
telecommunications carriers believe that funding for the scoping  
effort and the implementation of an automated solution would need to  
come from the Federal government or some other external source prior  
to project implementation.


.. and not afraid to ask for handouts either to fix their own  
backoffice challenges..


In a word: ridiculous, and flat out incredible.


On Mar 21, 2006, at 2:17 PM, Sean Donelan wrote:




ATIS has issued its final reports about its circuit national  
diversiety

assurance initiative.

  The NDAI report confirmed our suspicions that diversity  
assurance is

  not for the meek, Malphrus added. It is expensive and requires
  commitment by the customer to work closely with carriers in  
performing

  due diligence. Until the problem is solved, circuit route diversity
  should not be promoted as a general customer best practice.

Press release:
http://www.atis.org/PRESS/pressreleases2006/031506.htm

Report:
http://www.atis.org/ndai/





Re: Final report: national diversity assurance initiative

2006-03-21 Thread Frank Coluccio

It may be ridiculous and incredible, as you suggest, but, in an ironic way it
also opens the door to a discussion on nationalizing the 'Net's backbone
infrastructure ;-)




Christian Kuhtz [EMAIL PROTECTED] wrote:

Due to the cost structures for these projects, the
telecommunications carriers believe that funding for the scoping
effort and the implementation of an automated solution would need to
come from the Federal government or some other external source prior
to project implementation.

.. and not afraid to ask for handouts either to fix their own
backoffice challenges..

In a word: ridiculous, and flat out incredible.


On Mar 21, 2006, at 2:17 PM, Sean Donelan wrote:



 ATIS has issued its final reports about its circuit national
 diversiety
 assurance initiative.

 The NDAI report confirmed our suspicions that diversity
 assurance is
 not for the meek, Malphrus added. It is expensive and requires
 commitment by the customer to work closely with carriers in
 performing
 due diligence. Until the problem is solved, circuit route diversity
 should not be promoted as a general customer best practice.

 Press release:
 http://www.atis.org/PRESS/pressreleases2006/031506.htm

 Report:
 http://www.atis.org/ndai/





Re: Final report: national diversity assurance initiative

2006-03-21 Thread Valdis . Kletnieks
On Tue, 21 Mar 2006 14:23:57 CST, Frank Coluccio said:
 
 It may be ridiculous and incredible, as you suggest, but, in an ironic way it
 also opens the door to a discussion on nationalizing the 'Net's backbone
 infrastructure ;-)

Well, looking at the recent security scorecards, we can choose between
letting DHS call the shots (wait, they got an F for their OWN security),
and the NSF, which got an A.

Wait, didn't those guys used to run the backbone? ;)


pgpeR8iSWDNqC.pgp
Description: PGP signature


Network graphics tools

2006-03-21 Thread Howard C. Berkowitz


Much of the enterprise market seems wedded to Visio as their network 
graphics tool, which locks them into Windows. Personally, I hate both 
little pictures of equipment and Cisco hockey-puck icons; I much 
prefer things like rectangles saying 7507 STL-1 or M160 NYC-3.


Assuming you use *NIX platforms (including BSD under Mac OS X), what 
are your preferred tools for network drawings, both for internal and 
external use?  I'd hate to be driven to Windows only because I need 
Visio.


Re: Network graphics tools

2006-03-21 Thread Randy Bush

xfig

emacs artist-mode

randy



Re: Network graphics tools

2006-03-21 Thread Roland Dobbins



On Mar 21, 2006, at 6:17 PM, Howard C. Berkowitz wrote:



Much of the enterprise market seems wedded to Visio as their  
network graphics tool, which locks them into Windows. Personally, I  
hate both little pictures of equipment and Cisco hockey-puck icons;  
I much prefer things like rectangles saying 7507 STL-1 or M160  
NYC-3.


Assuming you use *NIX platforms (including BSD under Mac OS X),  
what are your preferred tools for network drawings, both for  
internal and external use?  I'd hate to be driven to Windows only  
because I need Visio.


I use OmniGraffle Pro for OS/X:

http://www.omnigroup.com/applications/omnigraffle/pro/

It can import and export Visio XML format, as well.


--
Roland Dobbins [EMAIL PROTECTED] // 408.527.6376 voice

 Everything has been said.  But nobody listens.

   -- Roger Shattuck



Re: Network graphics tools

2006-03-21 Thread Wil Schultz


KDE has a Visio-like tool called kivio

It was pretty much useless last I looked, but looks like it has some 
potential. Think I heard that you would be able to use the visio format 
at some point too, probably not yet though.

http://www.koffice.org/kivio/

I've used dia a bit, seems reasonable.
http://www.gnome.org/projects/dia/

-Wil


Howard C. Berkowitz wrote:
Much of the enterprise market seems wedded to Visio as their network 
graphics tool, which locks them into Windows. Personally, I hate both 
little pictures of equipment and Cisco hockey-puck icons; I much 
prefer things like rectangles saying 7507 STL-1 or M160 NYC-3.


Assuming you use *NIX platforms (including BSD under Mac OS X), what 
are your preferred tools for network drawings, both for internal and 
external use?  I'd hate to be driven to Windows only because I need 
Visio.








Re: Network graphics tools

2006-03-21 Thread Steven M. Bellovin

On Tue, 21 Mar 2006 16:20:19 -1000, Randy Bush [EMAIL PROTECTED] wrote:

 
 xfig
 
And something I learned only recently -- xfig comes with a large
library of clip art.  Here are the categories on my system:

$ ls /usr/pkg/lib/X11/xfig/Libraries/
Arrows  Electronic  Labels  Optics
Audiovisual ExamplesLogic   Origami
Buildings   Flags   MapsProcessFlowsheet 
Charts  Flowchart   Mechanical_DIN  Structural_Analysis
Computers   Furniture   Miscellaneous   UML
DSP GUI Music   Welding
ERD HospitalNetworksElectrical  
KnittingOfficeEquip

And if you must, Networks/router3.fig is a hockey puck

--Steven M. Bellovin, http://www.cs.columbia.edu/~smb


Re: Network graphics tools

2006-03-21 Thread Bill Woodcock

  On Tue, 21 Mar 2006, Howard C. Berkowitz wrote:
 Much of the enterprise market seems wedded to Visio as their network
 graphics tool, which locks them into Windows. Personally, I hate both
 little pictures of equipment and Cisco hockey-puck icons; I much prefer
 things like rectangles saying 7507 STL-1 or M160 NYC-3.
 Assuming you use *NIX platforms (including BSD under Mac OS X), what are
 your preferred tools for network drawings, both for internal and external
 use?  I'd hate to be driven to Windows only because I need Visio.

Omnigraffle!

http://www.omnigroup.com/applications/omnigraffle/

-Bill



Re: Network graphics tools

2006-03-21 Thread Jon Lewis


On Tue, 21 Mar 2006, Howard C. Berkowitz wrote:



Much of the enterprise market seems wedded to Visio as their network graphics 
tool, which locks them into Windows. Personally, I hate both little pictures 
of equipment and Cisco hockey-puck icons; I much prefer things like 
rectangles saying 7507 STL-1 or M160 NYC-3.

  ^
That's exactly what my network diagrams in dia look like.  You can get dia 
for *NIX and Blows (if you want it).


--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: Network graphics tools

2006-03-21 Thread John Kinsella

On Tue, Mar 21, 2006 at 09:17:44PM -0500, Howard C. Berkowitz wrote:
 Much of the enterprise market seems wedded to Visio as their network 
 graphics tool, which locks them into Windows. Personally, I hate both 
 little pictures of equipment and Cisco hockey-puck icons; I much 
 prefer things like rectangles saying 7507 STL-1 or M160 NYC-3.

Not sure how preferring things like rectangles stops you from using Visio,
but *shrug*

 Assuming you use *NIX platforms (including BSD under Mac OS X), what 
 are your preferred tools for network drawings, both for internal and 
 external use?  I'd hate to be driven to Windows only because I need 
 Visio.

If you're doing diagrams for internal use and know the chances of them
being used with external parties is slim-to-none, go ahead, play with
toys like dia.  Omnigraffle looks hopeful, but haven't personally used.

On the other hand, if you are doing professional business communications
I'd seriously condsider getting vmware and Visio.  I might be a little
backward to many here, as I work for a consulting company and 95% of what
we do is client-facing.  Maybe, more accurately, if you never expect
anybody other than you to edit your work, Visio's not a necessity.
PDFs are almost 100% acceptable, with a few losers left who won't
install a reader.

Not trying to start a Visio religious war, just saying there's a reason
enterprises use it.

Random thought - think Visio's capabilities are about as underused as 
Excel's...

John


Re: Network graphics tools

2006-03-21 Thread Andrew Burnette


Howard C. Berkowitz wrote:


Much of the enterprise market seems wedded to Visio as their network 
graphics tool, which locks them into Windows. Personally, I hate both 
little pictures of equipment and Cisco hockey-puck icons; I much prefer 
things like rectangles saying 7507 STL-1 or M160 NYC-3.


Assuming you use *NIX platforms (including BSD under Mac OS X), what are 
your preferred tools for network drawings, both for internal and 
external use?  I'd hate to be driven to Windows only because I need Visio.



http://www.nethack.net/software/netmapr/ is an alternative as well.

I personally use Dia, and it seems fine in both OS types, and exports 
various types of files that [OOo/MS-office] can deal with easily.


You can download shapes for a variety of presenters/office/visio/etc 
from the cisco website (as well as others).


Cheers,
andy


Re: Network graphics tools

2006-03-21 Thread Bill Woodcock

  On Tue, 21 Mar 2006, John Kinsella wrote:
 If you're doing diagrams for internal use and know the chances of them
 being used with external parties is slim-to-none, go ahead, play with
 toys like dia.  Omnigraffle looks hopeful, but haven't personally used.

Omnigraffle can read/write Visio XML format, .vdx

It's not Visio's default file format, but it does give you 100% 
compatibility.

-Bill



Re: Network graphics tools

2006-03-21 Thread Mark Rogaski
An entity claiming to be John Kinsella ([EMAIL PROTECTED]) wrote:
: 
: Not trying to start a Visio religious war, just saying there's a reason
: enterprises use it.
: 

And it's not just that they think that having thousands of open stencil 
windows is impressive when you open a single diagram?

Mark

-- 
[]|  I once saw a page that said, This page best viewed
[] Mark Rogaski   |  by coming over to my office and looking at it on my
[] [EMAIL PROTECTED]  |  monitor.  You don't often see honesty like that.
[] [EMAIL PROTECTED]  |   -- Jamie Zawinsky
[]|


signature.asc
Description: Digital signature


Re: Network graphics tools

2006-03-21 Thread Gary E. Miller

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Yo Howard!

On Tue, Mar 21, 2006 at 09:17:44PM -0500, Howard C. Berkowitz wrote:
 Much of the enterprise market seems wedded to Visio as their network
 graphics tool, which locks them into Windows. Personally, I hate both
 little pictures of equipment and Cisco hockey-puck icons; I much
 prefer things like rectangles saying 7507 STL-1 or M160 NYC-3.

I am surprised no one has mentioned Open Office 2.  It's drawing function
can do a lot of Visio like things.  I like it a lot better than dia and
it does all the network drawing that I need.

RGDS
GARY
- ---
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
[EMAIL PROTECTED]  Tel:+1(541)382-8588

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.1 (GNU/Linux)

iD8DBQFEINmp8KZibdeR3qURAg2UAKCF6M1AN9CYWRvHgkPWSfjvxBrKVgCg6bJj
CXgt4PcQfea+5EkKPZ4kgUk=
=zmju
-END PGP SIGNATURE-



Re: Network graphics tools

2006-03-21 Thread Mark Foster



On Tue, 21 Mar 2006, Mark Rogaski wrote:


An entity claiming to be John Kinsella ([EMAIL PROTECTED]) wrote:
:
: Not trying to start a Visio religious war, just saying there's a reason
: enterprises use it.
:

And it's not just that they think that having thousands of open stencil
windows is impressive when you open a single diagram?


If you save the document without any surplus stencil windows open, that 
doesn't happen. In my experience it simply remembers how many were open 
the last time it was saved, and reopens all the same ones again assuming 
theyre available.


And this is rapidly moving OT ...




Re: Network graphics tools

2006-03-21 Thread neal rauhauser




 Mechanical pencil, a sheet of paper for a straight edge, and a penny 
when you want to make a proffesional looking round object. I publish to 
Flickr using macro mode on my Fuji Finepix 5100 to make the picture.


 No little Cisco hockey puck stencils, but last year when I sketched a 
steaming pile o' poo all parties involved understood this to be the 
Cisco ICS 7750 we were scheduled to replace.






Howard C. Berkowitz wrote:


Much of the enterprise market seems wedded to Visio as their network 
graphics tool, which locks them into Windows. Personally, I hate both 
little pictures of equipment and Cisco hockey-puck icons; I much prefer 
things like rectangles saying 7507 STL-1 or M160 NYC-3.


Assuming you use *NIX platforms (including BSD under Mac OS X), what are 
your preferred tools for network drawings, both for internal and 
external use?  I'd hate to be driven to Windows only because I need Visio.





--
mailto:[EMAIL PROTECTED] // IM:layer3arts
voice: 402 408 5951
cell : 402 301 9555
fax  : 402 408 6902