Re: Quality Technologies?

2008-01-29 Thread John Kinsella

Aah...I knew the name was familiar - they bought the Santa Clara,
NYC, and Georgia Globix facilities.  Looks like they picked up the
hosting/managed services groups in the deal.  So that's a reference
point, for whatever it's worth.

As I've been out of Globix for 6 years now, I won't claim to know the
quality of their services...

John

On Tue, Jan 29, 2008 at 10:25:17AM -0800, Mike Lyon wrote:
> 
> Anyone ever heard of these peeps?
> 
> http://www.qualitytech.com/
> 
> Feedback on any of their services?
> 
> -Mike


Re: Massive AT&T outage?

2008-01-19 Thread John Kinsella

Saw Significant Issues in San Francisco starting at 9:17 PM, things
seemed to flap for about 40 mins, then stabalize, and I'm seeing issues
pick up again in the last 10 minutes or so.

Little Rock, AR also did see some issues...didn't seem as bad, but I
don't have as much load going into there on a Sat. night.

Thought ATT said they were doing maintenance *next* week...

John

On Sun, Jan 20, 2008 at 05:51:59AM +, Paul Ferguson wrote:
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> - -- "randal k" <[EMAIL PROTECTED]> wrote:
> 
> >Anybody have any insight into what's happening to AT&T? Internet Pulse is
> >showing almost their entire network having massive problems.  
> >
> 
> No insight, but seeing similar issue in the S.F. Bay Area...
> 
> - - ferg
> 
> -BEGIN PGP SIGNATURE-
> Version: PGP Desktop 9.6.3 (Build 3017)
> 
> wj8DBQFHkuF7q1pz9mNUZTMRAp6uAKDJbkMtbEO8REaKFw+BCvdOLE8leQCfU07p
> lZYcUT35Yr0s4mJlIglmDa8=
> =e1Pt
> -END PGP SIGNATURE-
> 
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet
>  fergdawg(at)netzero.net
>  ferg's tech blog: http://fergdawg.blogspot.com/
> 
> 


Re: OT: Vendors Using NANOG for a Sales Channel

2007-10-26 Thread John Kinsella

On Fri, Oct 26, 2007 at 01:33:38PM -0700, Bill Nash wrote:
> How often do people take the time to ask any given salescritter how they 
> came by contact info?

I've done it, but if you've forced your way through my various filters
and manage to get me on the phone and I ask you that, it's pretty much
kiss of death unless you have a very good answer.

John


Re: San Francisco Power Outage

2007-07-24 Thread John Kinsella

365 I believe has flywheels...from what I'm gathering it wasn't a
full building outage.  Static switch issues again, anyone?  Either
way, happy I moved out of there.  It was overpriced for when it was
working.

I hear they had a scheduled power outage for maintenance this coming
weekend.  I'll give benefit of doubt and assume it was for something
else, not that they knew they had an issue and had their fingers
crossed[1]

On a related note - one of my clients came to within 5 minutes of
the DC UPSs running out today before power came back.  Generator
truck was still en-route, but hey power's back! So they cancel it.
*sigh*

John
1: ...but not crossed tight enough. 

On Tue, Jul 24, 2007 at 08:36:59PM -0400, Raymond L. Corbin wrote:
> 
> They should have generators running...I can't foresee any good
> datacenter not having multiple generators to keep their customers
> servers online with UPS.
> 
> -Ray
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Adrian Chadd
> Sent: Tuesday, July 24, 2007 7:54 PM
> To: Seth Mattinen
> Cc: nanog list
> Subject: Re: San Francisco Power Outage
> 
> 
> On Tue, Jul 24, 2007, Seth Mattinen wrote:
> 
> > I have a question: does anyone seriously accept "oh, power trouble" as
> a 
> > reason your servers went offline? Where's the generators? UPS? Testing
> 
> > said combination of UPS and generators? What if it was important? I 
> > honestly find it hard to believe anyone runs a facility like that and 
> > people actually *pay* for it.
> 
> > If you do accept this is a good reason for failure, why?
> 
> Didn't you read? He paid extra for super-reliable power from his
> electricity provider..
> 
> 
> 
> Adrian
> 


Re: Colocation facilities in britian

2007-05-16 Thread John Kinsella

On Wed, May 16, 2007 at 04:14:00PM +, [EMAIL PROTECTED] wrote:
> Does anyone have ballpark costs on what colo space costs in England.  We are 
> getting a quote for 7500 gbp per month   For 19 square meters of  space.  In 
> us we pay 3500 a month for 10x10 cage at a quest facility 
> Also I'd anyone can recommend some british colo companies would appreciate it 
> Sent from  Wireless BlackBerry

>From my Globix days a few years back, our LHR prices were about 1.5-2x
US prices.  That seemed to be in-line with our competitors at the time.

John
-- 
John Kinsella  - Chief Scientist
Kliosoft Inc.  - http://kliosoft.com


Re: Warning about UltraDNS terms

2007-05-03 Thread John Kinsella

(quoting kind soul who pointed out my Stupid)
> On Thu, 3 May 2007, John Kinsella wrote:
> >After the silliness over at godaddy.com a few months back,
> >http://nodaddy.com popped up.  Lists a few alternative registrars that are a
> >little more grounded when it comes to customer service.
>  Uh, dnsmadeeasy.com and ultradns.com are DNS provders, not registrars.

Sorry guys.  I need more sleep than the 10 hours in the last 4 days...


Re: Warning about UltraDNS terms

2007-05-03 Thread John Kinsella

After the silliness over at godaddy.com a few months back,
http://nodaddy.com popped up.  Lists a few alternative registrars that are a
little more grounded when it comes to customer service.

John

On Wed, May 02, 2007 at 05:02:51PM -0400, Peter Beckman wrote:
> 
> Try DNSmadeEasy.com, cheesy name, great service and reliability.  Much
> cheaper, anycasted.  Not great for international, but perfect for US.
> 
> It's DNS, not a $125,000/year line item.
> 
> Beckman
> 
> On Wed, 2 May 2007, Sean Donelan wrote:
> 
> >
> >
> >Although UltraDNS/Neustar gives month-to-month pricing, they actually
> >have a 1 year term even if you cancel.  So you may want to be
> >aware of it in case you are just testing their service for a few
> >months.
> >
> 
> ---
> Peter Beckman  Internet Guy
> [EMAIL PROTECTED] http://www.purplecow.com/
> ---


Re: PG&E on data centre cooling..

2007-03-31 Thread John Kinsella

On Fri, Mar 30, 2007 at 02:53:58AM +, Paul Vixie wrote:
> [EMAIL PROTECTED] ("Dorn Hetzel") writes:
> > I preferred the darkness of PAIX back in the late 90's.  We had a
> > christmas tree in our cage and it looked great in the dark :)
> that was brian reid's idea, and it was a great one, and equinix-san-jose
> was merely copying paix (where al and jay had just spent a few years).
> most importantly, it's STILL dark, and still looks great.

I sorta wonder why the default is lights on, actually...I used to always
love walking into dark datacenters and seeing the banks of GSRs (always
thought they had good Blink) and friends happily blinking away. 

What we really need is a datacenter with lit floor tiles. ;)

John(damn I've been in a DC with clear floor tiles...why didn't I think
of this then?)


Re: West Coast Fiber Cut?

2006-09-29 Thread John Kinsella

Apparently there's a Qwest cut around Washington, no eta yet.

John

On Fri, Sep 29, 2006 at 12:29:28PM -0700, Rick Kunkel wrote:
> 
> Anyone know much about this major west coast fiber between Los Angeles and
> Washington that was supposed cut this morning?  Our network is having
> gnarly problems through one of our providers and lesser ones through the
> other.  Investigation went on for about 2 hours, whereupon i finally
> received an email from InterNAP talking about the problems starting at
> 9:45AM PDT, and being rooted in this fiber cut.  My other provider has
> since told me that it was a Qwest fiber, and that most major transit
> providers were using it.
> 
> Anyone heard anything else about this?
> 
> Thanks,
> 
> Rick Kunkel
> 


snfc21 sniffer docs

2006-05-22 Thread John Kinsella

Wired posted what are suppossedly the docs Mark Klein wrote 'bout the
NSA sniffing project.  Interesting read...

http://blog.wired.com/27BStroke6/att_klein_wired.pdf

John


Re: Network graphics tools

2006-03-21 Thread John Kinsella

On Tue, Mar 21, 2006 at 09:17:44PM -0500, Howard C. Berkowitz wrote:
> Much of the enterprise market seems wedded to Visio as their network 
> graphics tool, which locks them into Windows. Personally, I hate both 
> little pictures of equipment and Cisco hockey-puck icons; I much 
> prefer things like rectangles saying "7507 STL-1" or "M160 NYC-3".

Not sure how preferring things like rectangles stops you from using Visio,
but *shrug*

> Assuming you use *NIX platforms (including BSD under Mac OS X), what 
> are your preferred tools for network drawings, both for internal and 
> external use?  I'd hate to be driven to Windows only because I need 
> Visio.

If you're doing diagrams for internal use and know the chances of them
being used with external parties is slim-to-none, go ahead, play with
toys like dia.  Omnigraffle looks hopeful, but haven't personally used.

On the other hand, if you are doing professional business communications
I'd seriously condsider getting vmware and Visio.  I might be a little
backward to many here, as I work for a consulting company and 95% of what
we do is client-facing.  Maybe, more accurately, if you never expect
anybody other than you to edit your work, Visio's not a necessity.
PDFs are almost 100% acceptable, with a few losers left who won't
install a reader.

Not trying to start a Visio religious war, just saying there's a reason
enterprises use it.

Random thought - think Visio's capabilities are about as underused as 
Excel's...

John


Re: Password Security and Distribution

2006-01-24 Thread John Kinsella

One of my guys found a package called Password Gorilla, which is
basically a GUI which sits on top of Password Safe that came out of
Counterpane in 2002 or so.  Either allows you to organize passwords by
group and machine, and the whole database is encrypted by blowfish:

http://www.fpx.de/fp/Software/Gorilla/

One thing I've been thinking of from my managed service/consulting
background is to have a main database which has all users/passwords for
all "companies" in a central database (LAMP architecture), then depending
on what a user has access to, a custom Password Safe database is created
for them.  This would handle how to distribute password changes out to
admins who have varying levels of access.  Sounds like about a week's
worth of work - if people voiced enough interest or if somebody cared to
help me out, I'd finally get motivated to write it and put it up on
Sourceforge...

John

On Tue, Jan 24, 2006 at 11:28:23AM -0500, McLean Pickett wrote:
> 
> Jeremy -
> 
> I've not found a better solution than PGP. Perhaps more a formalized
> process for communicating password updates proactively is all you need.
> Ideally, distributing passwords at 3am is too late.
> 
> In the past I've used small password database programs on a network
> share. You are then left with verbal or PGP encrypted communications to
> distribute a single new password to access the database versus
> distributing all of the changed passwords. If you're interested try
> http://www.anypassword.com
> 
> There are others who read this list that prefer distributing passwords
> on paper. You can't hack into a piece of paper :) and if you have
> physical access to the paper then you most likely have physical access
> to the network equipment as well...
> 
> McLean
>  
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Jeremy Stinson
> Sent: Tuesday, January 24, 2006 10:49 AM
> To: nanog@merit.edu
> Subject: Password Security and Distribution
> 
> 
> All,
> 
> Our company is starting to grow rather quickly and we are starting to
> have growing pains. We are in the need for a better mechanism for
> sharing passwords between our engineers. Most of these passwords are for
> our client's systems where some of them are controlling the password
> schemes (aka requiring shared user accounts). We have a process in which
> we change passwords every X days but, distributing these passwords to
> everyone who needs them is starting to become a challenge. Also, handing
> off passwords to someone who is stepping in to help out at 3am securely
> is not easy. I have tried to do google searches but I have not been able
> to find a good way or process to do this. I am wondering if anyone has
> any ideas on how to handle this?
> 
> In other companies we have used a PGP keyring to secure a text file that
> contained all of these passwords and then put them onto a shared
> customer portal. The problem with this strategy is what happens if you
> are not on your computer where PGP is installed?
> 
> Any suggestions will be welcomed.
> 
> Thanks in advance,
> 
> Jeremy


Re: Cisco, haven't we learned anything? (technician reset)

2006-01-12 Thread John Kinsella

I've been pretty happy with Cisco ACS - fairly solid, good reporting,
once set up it seems to Just Work.

John

On Thu, Jan 12, 2006 at 11:00:10AM -0800, Bill Nash wrote:
> 
> 
> Just as an offshoot discussion, what's the state-of-the-art for AAA 
> services? We use an modified tacacs server for multi-factor 
> authentication, and are moving towards a model that supports 
> single-use/rapid expiration passwords, with strict control over when and 
> how local/emergency authentication can be used.
> 
> I'd be interested in that discussion, on or offlist.
> 
> - billn
> 
> On Thu, 12 Jan 2006, Rob Thomas wrote:
> 
> >
> >Hi, NANOGers.
> >
> >] On the other hand, the most common practice to hack routers today, is
> >] still to try and access the devices with the notoriously famous default
> >] login/password for Cisco devices: cisco/cisco.
> >
> >This is NOT a default password in the IOS.  The use of "cisco" as
> >the access and enable passwords is a common practice by users, but
> >it isn't bundled in the IOS.  I've heard it began in training
> >classes, where students were taught to use "cisco" as the
> >passwords.
> >
> >Oh, and for those of you who think it mad leet to use "c1sc0" as
> >your access and enable passwords, the miscreants are on to that as
> >well.  ;)
> >
> >We've seen large, massively peered and backbone routers owned
> >through this same technique.  We've even seen folks who have
> >switched to Juniper, yet continue to use "cisco" as the login and
> >password.  :(
> >
> >The nice thing about cooking up blame is that there is always
> >enough to serve everyone.
> >
> >Thanks,
> >Rob.
> >-- 
> >Rob Thomas
> >Team Cymru
> >http://www.cymru.com/
> >ASSERT(coffee != empty);
> >


Re: Portable datacenter coolers?

2005-12-21 Thread John Kinsella

Movincool is the brand name I suspect you're looking for.  Atlas Sales
treated me well earlier this year when one of mine died...
http://www.atlassales.com/

John

On Wed, Dec 21, 2005 at 10:55:14AM -0800, Mike Lyon wrote:
> Anyone know of any places in the silicon valley area that lease or rent
> those portable datacenter coolers? You know, those ones that stand about 5
> feet high, are usually blue in color and are on wheels? The ones you are
> suppose to have on hand in case your main cooling system takes a dump on
> you? Yeah, those.
> 
> Anyone have any idea where I could get my hands on one fairly quickly? I am
> in Santa Clara.
> 
> Thanks,
> Mike


Re: rate limiting bandwidth

2005-09-13 Thread John Kinsella

I'm pretty fond of the the Packeteer gear.  The API is pretty decent,
I can get a pretty good range of stats off the box in flexible formats
(tab or comma delimited, or in an XML format).  Config-wise, I believe
I can change just about anything on the box, including running commands
remotely, and uploading/downloading files.  The box's ability to sniff
traffic for a few days and know what protocols are in use is pretty
spiffy, from what I've seen.

I've used the Peribit gear as well, but not as heavily and I don't
know of an API (not saying one doesn't exist, I just don't know of it).
It seems to be decent at what it does, but doesn't have as rich a
featureset as the Packeteer.

John

On Tue, Sep 13, 2005 at 04:32:25PM -0700, Micah McNelly wrote:
> 
> Does anyone have any recommendations concerning hardware rate limiting 
> solutions with extensive API's?  I remember packeteer from back in the
> day and have been looking at some of their newer solutions that have XML 
> API's.  Comments?  Alternatives?
> 
> I would appreciate any feedback that can be provided.
> 
> Thanks,
> 
> /m
> 
> "I bet the human brain is a kludge."  - Marvin Minsky


Re: Computer systems blamed for feeble hurricane response?

2005-09-13 Thread John Kinsella

On Tue, Sep 13, 2005 at 10:08:59AM -0400, Steven M. Bellovin wrote:
> In message <[EMAIL PROTECTED]>, "william(at)elan
> .net" writes:
> >;; ANSWER SECTION:
> >fima.org.   3600IN  MX  0 smtp.secureserver.net.
> >fima.org.   3600IN  MX  10 
> >mailstore1.secureserver.net
> That's interesting -- I'm not getting that response.

Second that.  Just glanced at the fema website - their contact us
section lists a mixture of @dhs.gov as well as @fema.gov addresses.

John


Re: Holy Grail

2005-08-12 Thread John Kinsella

Saying that this is IPv6 only is misleading.  The point of Mike's talk
was to show that buffer overflows do more than DOS or reset a Cisco box,
but they can actually be exploited like most things we learn about every
Patch Tuesday.

In the example he used in the talk, he showed off an exploit that took
advantage of a buffer overflow in the IPv6 code, but patching that one
bug does not mean you'll never see this type of exploit again.

Yes, any vendor big or small should realize that if they try to hide
things instead of fixing them and owning up, it's just a matter of time
until we find it for ourselves, and maybe next time the researcher will
be a black hat, also playing secret like Cisco.  

Imagine the PR bruise that will cause.

John

On Fri, Aug 12, 2005 at 12:33:40PM -0400, J. Oquendo wrote:
> 
> 
> Purpose for posting it was, after reading it, there is not enough in my
> opinion to warrant a nuclear lock down on this information. I did this to
> sort of prove a point to those in the industry: "Stop letting vendors sell
> you short." As an engineer they've (Cisco) shortchanged clients using
> their equipment. If it's IPv6 based only, and not that big of a threat,
> then they should see no problem with the information being released.
> 
> Before anyone decides to send in legal hounds, take note this is
> searchable via Google... 5 minutes tops with over 100+ sites listing the
> PDF. Sorry Cisco.
> 
> On Fri, 12 Aug 2005, Gadi Evron wrote:
> 
> > J. Oquendo wrote:
> > >
> > > www.infiltrated.net/cisco/holygrail.pdf
> >
> > I find it rather funny, really.
> >
> > Back in defcon, everybody was trading the presentation quietly and eagerly.
> >
> > Then every kiddie started asking if anyone wants it.
> >
> > Then we all got URL's to download it from.
> >
> > Then there was another pass of "psst, want the Lynn presentation?"
> >
> > And eventually, there was a CD placed on every table at defcon with the
> > presentation.
> >
> > Seeing big-time secret-handshake groups take this with a whisper and a
> > "if I know you, email me and I might share it" was a bit silly.
> >
> > Once again every Bad Guy in town had it and the Good Guys didn't want to
> > share under different excuses, some good, some sad.
> >
> > I find that sharing the presentation openly on NANOG is a bit of a bad
> > move because of how some may perceive it and you, but it has become
> > completely silly not to do it. So I ask that people reserve judgment.. I
> > was very tempted to do it myself.
> >
> >   Gadi.
> >
> 
> 
> 
> 
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
> J. Oquendo
> GPG Key ID 0x97B43D89
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x97B43D89
> 
> To conquer the enemy without resorting to war is the most
> desirable.  The highest form of generalship is to conquer
> the enemy by strategy." - Sun Tzu


Re: Switch advice please - followup

2005-07-22 Thread John Kinsella

On Sat, Jul 23, 2005 at 11:01:10AM +1200, Mark Foster wrote:
> Nortel has a GUI Device Management system via SNMP which is pretty good.
> They also have intuitive HTTP access for most things and the console gives
> you a menu or a commandline option.

Hell, why not use Cisco's web interface? ;)

John


Re: djbdns: An alternative to BIND

2005-04-08 Thread John Kinsella

(attribution removed due to my freeform quoting to make a point)
> ...from the ones DJB has complained about...

And there we have the reason alot of us don't use DJB softwares. :)



Re: Utah governor signs Net-porn bill

2005-03-22 Thread John Kinsella

On Tue, Mar 22, 2005 at 11:50:12AM -0500, Richard Irving wrote:
>   I consider it proof positive, that our medical system
> is in dire need of an overhaul.
> 
>   Apparently, mental illness isn't being detected,
> and treated, as often as it should be.

I always assumed it was working fine and we were sending the Crazies to Utah.


Re: Need to get in contact with Namecheap web hosting

2005-01-26 Thread John Kinsella

Cheap, Fast, Efficient...So they're not even getting two of the three?
Sorry, I couldn't resist...

John

On Wed, Jan 26, 2005 at 12:18:03PM -0600, Nine, Jason wrote:
> 
> Does anyone have any ideas how to get in contact with namecheap?  Short
> of driving up there noone is really helpful with our issue.  We need to
> get a serial number incremented on a DNS change, and they cant seem to
> understand our update.
> 
> Thanks
> 
> Jason


Re: using sniffer on high-bandwidth pipes

2004-12-03 Thread John Kinsella

Todd - first thought I have is to get a linux box with a gigE port and
anything pentium III based or faster.  Depending on the amount of analysis
you want to do, just running tcpdump to a file and then playback after
the fact.  Etherman would make for a good UI to review capture in.

Should be able to write 250mbps out to a fast drive...wouldn't build a
box with that spec with parts from compusa, though.

John

On Fri, Dec 03, 2004 at 10:47:08AM -0500, todd romero wrote:
> does anyone have expirience using a sniffer on a hi-capacity network
> segment, that might know if there are limitations I need to worry about?
> 
> example: customers doing EMC database replication across a mpls link, and
> when the capacity reaches aprox. 250 Mbp/s packets are arriving out of
> sequence etc.  So we need to put sniffers on both sides to capture some
> data to see whats happeneing when the capacity reaches 250mbps.
> 
> what kind of system requirements would be needed to be able to be able to
> capture that amount of data. For some reason, I dont think that the Dolch
> Pac 65 sniffers we have (running nt4 and sniffer pro2) would be able to
> handle that kind of data?  If they cant, we can probbaly use a sun box.
> what kind of specs would the box need?
> 
> tia,
> tr


Re: AOL Abuse/Email contact

2004-11-30 Thread John Kinsella

>From personal experience, your best bet is to call their support group,
get a TT#, and then call back every day for an update.

John

On Tue, Nov 30, 2004 at 05:06:57PM -0600, [EMAIL PROTECTED] wrote:
> 
> If someone from AOL abuse and or email group could contact me off list
> to discuss mail delivery issues, it would be most appreciated.
> 
> Attempts to resolve issues via generic contacts have proved fruitless.
> 
> Regards,
> Jade
> 
> Jade E. Deane
> Senior Network Engineer
> SunGard Futures Systems
> SunGard Systems International, Inc.
> 
> [EMAIL PROTECTED]
> +1 (312) 577-6100


Re: Abuse Ticketing Systems

2004-10-28 Thread John Kinsella

On Thu, Oct 28, 2004 at 10:12:45AM -0400, James Baldwin wrote:
> experience with it. If someone has had a painless and successful 
> experience using Remedy to handle abuse desk ticketing I'd love to hear 
> a little about the overall engineering of the system to handle it.

If anyone has had a painless and successful experience with Remedy, I'd
love to hear about that, as well. ;)

I second the RT route.  Budget half a day to get it up on a test box and
it's pretty easy from there.  In particular you may want to look at the
version of RT tuned for Incident Response -

http://bestpractical.com/rtir/

John


Re: Cisco moves even more to china.

2004-09-23 Thread John Kinsella

Oh Jesus cry me a river...

People, you're in tech.  It will never stop changing.  That means you
should never stop learning.  If you stop learning, yes somebody else
is going to take your job because as an area of tech matures, tools
to manage it become better, less sophisticated people can do the job,
and operational cost of that widget goes down.  Do you really want to
still be hand-editing BGP configs in 5 years time?  Should web monkeys
still make $80k for writing HTML?  Go learn something new and be the
badass at that and you'll keep making your 6 figure salary.

Or, to look at it from a humorous point of view:  It's just a matter of
time until neurosurgeons will be coming from ITT tech. ;)

John

On Thu, Sep 23, 2004 at 08:12:47PM -0500, Jason Graun wrote:
> 
> I think the IT field as a whole, programmers, network guys, etc... are going
> to go the way of the auto workers in the 70's and 80's.  I am a CCIE working
> and on a second one and it saddens me that all my hard work and advanced
> knowledge could be replaced by a chop-shop guy because from a business
> standpoint quarter to quarter the chop-shop guy is cheaper on the books.
> Never mind the fact that I solve problems on the network in under 30mins and
> save the company from downtime but I am too expensive.  I used to love
> technology and all it had to offer but now I feel cheated, I feel like we
> all have been burned by the way the business guys look at the technology, as
> a commodity.  Thankfully I am still young (mid 20's) I can make a career
> switch but I'll still love the technology.  Anyway I am going to start the
> paper work to be an H1b to China and brush up on my Mandarin.
> 
> Jason
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Erik
> Haagsman
> Sent: Thursday, September 23, 2004 7:55 PM
> To: Dan Mahoney, System Admin
> Cc: Nicole; [EMAIL PROTECTED]
> Subject: Re: Cisco moves even more to china.
> 
> 
> On Fri, 2004-09-24 at 02:29, Dan Mahoney, System Admin wrote:
> > I've always personally taken anyone who said "but I'm an MCSE" with a 
> > grain of salt.  I've had equal respect for the A-plus and Net-Plus 
> > certifications, which are basically bought.
> 
> I take most certifications with a grain of salt, including degrees,
> unless someone clearly demonstrates he know's what he's talking about,
> is able to make intelligent decisions and learns new techniques quickly.
> In which case a certification is still just an add-on ;-)
> 
> > I used to have more trust in the /CC../ certifications but I find I may be
> 
> > laughing those off too quite soon.
> 
> The vendor's introductory certs (CCNA, CCNP, JNCIA, JNCIS) don't say
> anything about a candidate, except exactly that ("I got the cert"). CCIE
> and JNCIE are still at least an indicator someone was at a certain level
> at the time of getting the certification, but are still no substitute
> for experience and a brain in good working order. It's too bad there
> aren't better "general" (non-vendor specific) certs, since what often
> lacks is general understanding of network architecture and protocols. 
> You can teach anyone the right commands for Vendor X and they'll prolly
> get a basic config going on a few nodes, but when troubleshooting time
> comes it's useless without good knowledge of the underlying technology,
> which none of the vendor certs teach very well (IMHO anyway ;-)
> 
> Cheers,
> 
> Erik
> 
> 
> 
> -- 
> ---
> Erik Haagsman
> Network Architect
> We Dare BV
> tel: +31.10.7507008
> fax: +31.10.7507005
> http://www.we-dare.nl
> 
> 
> 


Re: Open-Source Network Management Tools

2004-09-14 Thread John Kinsella

On Tue, Sep 14, 2004 at 07:54:54PM -0700, Philippe Ombredanne wrote:
> Well I hope that we will be coming with (nexb) will not be sucking, but
> it is not production grade yet.
> Will have to wait a few more months.

Ah yes, I'm looking forward to seeing that. :)  Need beta testers?

> > I'm looking for open-source alternatives for network 
> > management, such as  Nagios or Big Brother.
> I would add to the list the excellent zabbix, just ass popular as jjfnms
> http://www.zabbix.com/features.php

Ah my bad, I did forget about Zabbix - one of my guys was just showing
it off to me a few weeks ago, too.  Does look good, I just don't see
justification for replacing our nagios setups with it. 

John


Re: Open-Source Network Management Tools

2004-09-14 Thread John Kinsella

On Tue, Sep 14, 2004 at 02:47:45PM -0500, Claydon, Tom wrote:
> I'm looking for open-source alternatives for network management, such as
> Nagios or Big Brother. We are currently using WhatsUp Gold, and would
> like to move to something more flexible (and not running on a Windows
> platform). Something that has email/paging capabilities, and can process
> SNMP traps would be a plus for us as well.

Christ, WhatsUp Gold...that's giving me flashbacks!
Have you checked out...
http://www.nagios.org
http://www.bb4.org ?
:)

I suspect what you might be looking for is something like OpenNMS,
http://www.opennms.org

There's a few other packages out there, but IMHO they all suck in one
way or another.

John


Re: OT: The bubble and the economy

2004-09-09 Thread John Kinsella

On Thu, Sep 09, 2004 at 04:00:33PM -0700, Conrad Watson wrote:
> With all the opinions on this list, I'm sure someone will give me a place to 
> start. Thank you.

Google.


Re: Fwd: YOUR EMAIL WON THE LOTTERY - Here is another one

2004-08-19 Thread John Kinsella

Welcome to the Internet.
Now, please stop sending these, people.

On Thu, Aug 19, 2004 at 05:24:16PM -0700, Henry Linneweh wrote:
> 
> 
> --- Mrs Brigit Willem <[EMAIL PROTECTED]>
> wrote:
> 
> > X-Apparently-To: [EMAIL PROTECTED] via
> > 66.218.79.74; Thu, 19 Aug 2004 08:28:12 -0700
> > X-YahooFilteredBulk: 82.35.148.130
> > X-Originating-IP: [82.35.148.130]
> > Return-Path: <[EMAIL PROTECTED]>
> > Received: from 82.35.148.130  (EHLO
> > mailapps2-int.prodigy.net) (207.115.63.126)
> >   by mta829.mail.sc5.yahoo.com with SMTP; Thu, 19
> > Aug 2004 08:28:12 -0700
> > X-Header-Overseas:
> > Mail.from.Overseas.source.82.35.148.130
> > X-Originating-IP: [82.35.148.130]
> > Received: from 24.203.20.91
> > (82-35-148-130.cable.ubr04.enfi.blueyonder.co.uk
> > [82.35.148.130])
> > by mailapps2-int.prodigy.net (8.12.10 shim/8.12.10)
> > with SMTP id i7JFS2pe127626
> > for <[EMAIL PROTECTED]>; Thu, 19 Aug 2004
> > 11:28:11 -0400
> > Message-Id:
> >
> <[EMAIL PROTECTED]>
> > Received: from mail0.fatcow.com (mail0.fatcow.com
> > [209.12.212.5]) by mx.wdl.net with ESMTP; Aug, 19
> > 2004 4:25:00 PM -0200
> > From: Mrs Brigit Willem
> > <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: YOUR EMAIL WON THE LOTTERY
> > Sender: Mrs Brigit Willem
> > <[EMAIL PROTECTED]>
> > Mime-Version: 1.0
> > Content-Type: text/plain; charset="iso-8859-1"
> > Date: Thu, 19 Aug 2004 17:28:08 +0200
> > X-Mailer: Microsoft Outlook Express 6.00.2462.
> > Content-Length: 1510
> > 
> > FROM: THE DESK OF THE LOTTO CHANCELLOR,
> >  INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT,
> >  REF: KIY/47560460037/02.
> >  BATCH: 24/23519/YHI
> >  
> >  ATTENTION: 
> >  
> >  RE/ AWARD NOTIFICATION; FINAL NOTICE We are pleased
> > to
> >  inform you of the announcement today 15-8-2004 of
> > winners of the REAL
> > EXCHANGE LOTTO PROMO ,THE GLOBAL MEGA LOTTERY INT.,
> > PROGRAMS AMSTERDAM held  
> > on 26 June,2004 through computer ballot system  Your
> > company/You email,is attached to ticket  number 
> > 023-5876-790-279, with serial number 3673-10  drew
> > the lucky numbers 43-14-42-37-69-25, and  
> > consequently won the lottery  in the first category
> >  
> >  You have therefore been approved for a lump sum pay
> >  out of US$800 000:00 in cash credited to file 
> > REF:KIY /47560460037/02. This is from total prize
> > money of US$90,000,000.00  shared among the 25 i 
> > nternational winners in
> >  this category. All participants were selected
> > through  a computer ballot system drawn form 30,000
> > names 
> > from  Australia, New Zealand, America, Europe, North
> >  America, Asia, and Africa as part of International
> >  Promotions Program, which is conducted annually.
> >  
> >  CONGRATULATIONS! Your fund is now deposited with a 
> > Finance House insured in your name. Due to 
> > the mix up  of some numbers and names, we ask that
> > you keep this  award strictly from public notice
> > until 
> > your claim has
> >  been processed and your money remitted to your 
> > account. This is part of our security protocol to 
> > avoid 
> > double claiming or unscrupulous acts by
> >  participants of this program. We hope with a part
> > of  you prize, you will participate in our end of
> > year  
> > high stakes US$1.0 Billion Netherlands International
> > Lottery. To begin   your  claim, please  contact our
> > 
> > international claim agent:
> >  
> >  Mr Tony van More
> >  email:[EMAIL PROTECTED]
> >  Tel:+31-62-00-79-843
> >  INTERNATIONAL COORDINATOR,
> >  
> >  
> >  For due processing and remittance of your prize
> > money  to a designated account of your choice. 
> > Remember, all  prize money must be claimed not later
> > than 30th  september, 2004. After this date, all 
> > funds will be returned as unclaimed. NOTE: In order
> > to avoid  unnecessary delays and complications, 
> > please remember  to quote your reference and batch
> > numbers in every one  of your correspondences 
> > with your agent.Furthermore, should there be any
> > change of your address, do inform  your claim's
> > agent 
> > as soon as possible.
> >  
> > Congratulations again from all our staff and thank
> > you  for being part of our promotions program.
> >  
> >  Sincerely,
> >  Mrs Brigit Willem
> >  
> > THE PROMOTIONS MANAGER,GLOBAL MEGA LOTTERY
> > INTERNATIONAL
> > N.B. Any breach of confidentiality on the  part of
> > the winners will result to disqualification.
> >  
> > THANKS FOR WINNING.
> > 


Re: Barrages of Packet Errors

2004-07-01 Thread John Kinsella

It's an off topic posting.  Try asking on SecurityFocus' Incidents list.

John(mmm deja-vu)

On Thu, Jul 01, 2004 at 08:25:33AM +0200, [EMAIL PROTECTED] wrote:
> 
> 
> Hopefully this is not an off-topic posting. I've scanned a variety of groups looking 
> to see if anyone else has encountered a similar problem, to no avail, and I simply 
> thought this might be the most appropriate place to post an inquiry.
> 
> I'm not a service provider, simply a small business operator with a few servers, 
> providing business clients with mostly standard web and email type services. A 
> couple of nights ago my systems started experiencing a sharp increase in DNS traffic 
> generating a new flavor of error messages. I'd like to know if anyone else out there 
> noticed similar DNS errors in the past couple of days.
> 
> The barrage first hit at roughly 9:15pm (Mountain Std Time) on June 28th and lasted 
> only a few minutes.  It repeated again at 9:25pm, and then again at roughly 9:38pm, 
> and a 4th round at 10:06pm. I fired up ethereal shortly after the 4th battery in the 
> hopes of capturing additional data, but there was no further activity, and I shut 
> ethereal down the next morning (June 29th). However, later in the morning of the 
> 29th the problem resurfaced, first at roughly 10am, then at 11:00am, 11:30am, and a 
> final blast at 11:45am. Unfortunately I wasn't around during those barrages, so 
> again I missed the opportunity to collect additional information - I only noticed it 
> had happened while reviewing the server logs later that afternoon. The errors 
> haven't re-occurred since.
> 
> The error messages are all the same (other than the inbound IP address causing the 
> errors). The error message is as follows:
>   "DNS Server encountered bad packet from 192.5.6.30. Packet processing leads beyond 
> packet length."  
> 
> After extracting and sorting the error messages from the server log, I noticed the 
> errors were associated with about 3 dozen IP addresses. The list of IP's associated 
> with the packets that were generating the errors is as follows:
> 
> 128.63.2.53 = h.root-servers.net
> 128.9.0.107 = ns1.isi.edu
> 152.163.159.234 = dns-01.icq.net
> 192.112.36.4 = g.root-servers.net
> 192.12.94.32 = aloe.arin.net
> 192.203.230.10 = e.root-servers.net
> 192.228.79.201 = b.root-servers.net
> 192.26.92.30 = c.gtld-servers.net
> 192.33.14.30 = b.gtld-servers.net
> 192.33.4.12 = c.root-servers.net
> 192.35.51.32 = dill.arin.net
> 192.36.148.17 = i.root-servers.net
> 192.42.93.30 = g.gtld-servers.net
> 192.5.5.241 = f.root-servers.net
> 192.5.6.30 = a.gtld-servers.net
> 192.5.6.32 = a3.nstld.com
> 192.54.112.30 = h.gtld-servers.net
> 192.58.128.30 = j.root-servers.net
> 193.0.14.129 = k.root-servers.net
> 193.205.245.8 = dns2.nic.it
> 198.32.64.12 = l.root-servers.net
> 198.41.0.4 = a.root-servers.net
> 198.96.180.33 = ns1.bmo.com
> 198.96.183.6 = ns2.bmo.com
> 199.191.128.105 = cbru.br.ns.els-gms.att.net
> 199.191.145.136 = macu.ma.mt.np.els-gms.att.net
> 202.12.27.33 = m.root-servers.net
> 204.152.185.196 = west-pub.mail-abuse.org
> 205.188.157.232 = dns-02.ns.aol.com
> 205.188.157.234 = dns-02.icq.net
> 209.182.216.75 = ns1.gnac.net
> 209.237.237.10 = dns1-public.alexa.com
> 209.47.26.190 = ns.uunet.ca
> 216.239.34.10 = ns2.google.com
> 216.239.38.10 = ns4.google.com
> 35.9.116.13 = serv1.cl.msu.edu
> 64.4.240.70 = ns1.nix.paypal.com
> 64.4.240.71 = ns2.nix.paypal.com
> 64.4.244.70 = ns1.sc5.paypal.com
> 64.4.244.71 = ns2.sc5.paypal.com
> 
> I never assume anything happens "by chance" when it comes to anomalies in any of my 
> systems log files, particularly when it's something brand new (I've never 
> encountered this particular error in the past 7 years or so, so it set bells ringing 
> to examine the problem more closely) (and there was nothing different or non-normal 
> in the way of user activity or other processing, etc. at any time prior to or during 
> these 'events'). My initial guess is it's someone trying out some new attack vector 
> attempting to exploit yet another buffer overflow problem in windoze, but the 
> strange thing is that the IP's are all (with the exception of a couple) associated 
> with top-level domain servers (or am I mistaken in that assessment?). I'm not a 
> network specialist by any stretch of the imagination, my skill-sets are in other 
> areas, so I'm afraid I haven't much else to add in the way of information about this 
> problem. I'm just looking to bring it to the attention of those who do have the 
> knowledge/experience in this area in case it's a problem of some significance where 
> forewarning may prove useful to others.
> 
> Thank you.
> 
> Brian Pederson
> Chief Technology Officer
> TeamWorx Productions Ltd.
> 
> 


Re: Interesting Occurrence

2004-06-21 Thread John Kinsella

Try Securityfocus' Incidents list.

On Mon, Jun 21, 2004 at 12:44:50PM -0500, [EMAIL PROTECTED] wrote:
> Okay... Here is a new one for me.  Got a call from my dad saying he left 
> his PC on last night connected to his broadband.  He went to log in this 
> morning and noticed a new ID in his user list - IWAP_WWW.  He immediately 
> deleted is and called me.  I had him ensure his critical updates we all 
> applied - they were.  I had him ensure his antivirus was up to date - it 
> was (Norton Antivirus 2004).  He is running XP Home.
> 
> I searched the antivirus sites and elsewhere for references.  Any idea if 
> there is a new vulnerability that has not been publicly released?  Any 
> clues?
> 
> Regards,
> Brent


Re: IT security people sleep well

2004-06-03 Thread John Kinsella

I like my Tungsten C, but I don't do security-stupid things with it. :)

Another neat trick, for those who haven't seen - Intel has
maps.yahoo.com setup so it'll show you where alot of the hotspots are -
here's a map of downtown SF as an example:

http://tinyurl.com/36s5y

John

On Thu, Jun 03, 2004 at 10:13:24PM -0700, Jonathan Nichols wrote:
> Wow. $195 for the Blackberry client? I'll carry around the PowerBook and 
> get a T-Mobile account, thanks! :) It's a lot easier to find a Starbucks 
> in San Francisco than anything else. Just spin around a few times and 
> you'll find one.


fwd: CiSCO IOS 12.* source code stolen

2004-05-15 Thread John Kinsella

For those not on bugtraq...I can't hit securitylab.ru, so would be
curious if anybody has more info or confirmation...

John

- Forwarded message from Alexander Antipo <[EMAIL PROTECTED]> -

From: "Alexander Antipo" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: CiSCO IOS 12.* source code stolen
Date: Sat, 15 May 2004 22:49:50 +0400
X-Mailer: Microsoft Office Outlook, Build 11.0.5510

More information (in Russian, of course) and some little stolen code can be
found here:

http://www.securitylab.ru/45221.html




- End forwarded message -


Re: Ad blocking with squid

2004-04-19 Thread John Kinsella

Take a peek at sleezeball - it has a url list plus recognizes banner-ad
sized images and blocks them out:

http://www.rambris.com/fredrik/sleezeball/

John

On Mon, Apr 19, 2004 at 04:33:49PM -0400, Paul Khavkine wrote:
> 
> 
> 
> Hi Folks.
> 
> 
> Anyone doing ad blocking with Squid cache engine out there ?
> 
> Is there a comprehensive URL list out there on the net ?
> 
> 
> Thanx
> Paul
> 
> 
> 
> Paul Khavkine
> Network Administrator
> DISTRIBUTEL Communications.
> 740 Notre Dame West, Suite 1135
> Montreal, Quebec, Canada, H3C 3X6
> 1-514-877-5505 x 263
> http://www.distributel.net
> 


Re: Lawsuit on ICANN (was: Re: A few words on VeriSign's sitefinder)

2004-02-26 Thread John Kinsella

Any way to speed that up? ;)

John

On Thu, Feb 26, 2004 at 03:57:12PM -0800, Scott Call wrote:
> On Thu, 26 Feb 2004, Roman Volf wrote:
> > When are they up for renewal exactly?
> November 10, 2007, according to
> http://www.icann.org/tlds/agreements/verisign/registry-agmt-com-25may01.htm


who tripped over the power cord at l3?

2004-01-27 Thread John Kinsella

Seems like Level3 in SFO(at least) just went poof for a minute or two...



Re: good cabling in real environments [Re: Request for submissions: messy cabling and other broken things]

2003-12-17 Thread John Kinsella

On Wed, Dec 17, 2003 at 07:07:13PM +0200, Pekka Savola wrote:
> How do you do good cabling in dynamic, real environments? :-)

You hide the spiders nest with lots of panduit covers? ;)

Honestly, I think it comes down to two things:  Planning before
implementation - you pre-wire your net gear to patch panels before it
goes into production;  This keeps most hands off the back end stuff
except for the occasional test to verify that a patch is working.  This
same planning goes into a second set of patch panels which you terminate
in the racks, that removes another major part of one-off cable pulls.
Rack server, crosconnect to top of rack, back to your patch panels,
cross connect to network patch panel, you're set.

Second part is, as mentioned, have some wiring nazis.  I worked with a
guy a few years ago who kept spare cat 5 in labeled bins for 3', 6', and
12' lengths for red, blue, green and yellow colors.  Each one was
wrapped a certain way without using ties so you could just reach in and
pull one out - He'd go mad if you just threw a cable back in there. :)
I still wrap my spare cables like that without even thinking about it.
You get one or two people like that who have pride in their datacenter,
and your issues are taken care of. :)

John


Re: Request for submissions: messy cabling and other broken things

2003-12-16 Thread John Kinsella

Always liked the work my fellow coworkers at Globix used to do - I don't
have any shots of SJC or NYC online (too bad - a few projects I went to
alot of trouble on to show the rest how it should be done ;) ), but
here's one of our demo panels from LHR:

http://thrashyour.com/lhr1-wiringdemo.jpg

And yeah, most of what was under the floors in all the DCs looked like
that, and yeah I hear for strict cat5 regs that they shouldn't be
velcroed together like that.  Wire wraps were never used (only velcro),
bundles are laid down so that shortest is on the bottom side, longest
on the top.

John

On Tue, Dec 16, 2003 at 05:24:44PM -0500, [EMAIL PROTECTED] wrote:
> Now that you've educated the world about messy cabling jobs that should _not_ be 
> done,
> perhaps you or someone else should now post _CLEAN_ cabling jobs that everyone should
> follow examples of :-)


Re: Request for submissions: messy cabling and other broken things

2003-12-16 Thread John Kinsella

On Tue, Dec 16, 2003 at 11:32:44AM -0800, Christopher McCrory wrote:
> Maybe someone here has pictures of the meetme room at one wilshire from
> the last several years.  By far the messiest cabling I have ever seen in
> any datacenter.  (but it's getting better :)

Another suggestion, although I'd be surprised to see it...anybody got
a shot from under PBI's datacenter floor when it was at 2nd and Folsom
in SF (across 2nd from SNFC21)?  That was truely a work of art, quite
obvious that telco people who cut off plugs and leave cables under the
floor when they're done where there for quite a while...

John


Re: Portable Cooling

2003-11-12 Thread John Kinsella

Yea, I got one in my little server room in the office.  Building gave me
the choice of getting one of those when I moved in, or throwing a full
blown water chiller based system in the AC room, I took the cheaper
path.  Works OK, wish I had gotten one model bigger than what I have (the
smallest).

John

On Wed, Nov 12, 2003 at 10:43:20AM -0500, Fisher, Shawn wrote:
> 
> I searched the archives and couldn't find anything about a portable cooling
> units so am resorting to posting, sorry if its redundant.
> 
> I am setting up a development lab and need additional cooling on a temporary
> basis.  I recall a product called, "move n kool"?  It looked like the robot
> on lost in space.  They used to advertise in Boardwatch when Boardwatch was
> cool.  (when Jack was running it)  Not sure of the spelling, but wondered if
> anyone has had experience that or anything like it.
> 
> TIA
> 
> Shawn
>  


Re: SoCal fires

2003-10-27 Thread John Kinsella

On Mon, Oct 27, 2003 at 06:28:12PM -0500, Andy Grosser wrote:
> Secondly, anyone have any outage-related news for network traffic in San
> Diego, San Bernardino, Ventura, Orange, or LA counties?

Besides SBC claiming that they can't provide support service to their
DSL customers in Northern California due to the Southern California
wildfires, no.

John (Happily, not an SBC DSL customer)


NSI privacy advocate

2003-10-06 Thread John Kinsella

I double checked...the press release isn't dated April 1...NSI talking
about privacy while keeping a straight face?

http://www.verisign.com/corporate/news/2003/pr_20030930.html



Re: InterNAP

2003-09-30 Thread John Kinsella

Their circuit to C&W out of SFO is down, seems fine to me otherwise,
though...

John

On Tue, Sep 30, 2003 at 11:17:49AM -0700, Gabriel wrote:
> 
> 
> Anybody seeing routing trouble getting to internap network?  It looks like 
> internap is unreachable:
> 
> ...
> 14  InterNAPSeattle2.so-2-0-0.ar2.SEA1.gblx.net (208.51.239.178) [AS3549] 
> 71 ms  71 ms  70 ms
> 15  border5.ge3-1-bbnet1.sef.pnap.net (63.251.160.10) [AS14744]  216 ms  
> 115 ms  203 ms
> 16  * * *
> ...
> 30  * * *
> 
> Anyone else seen or heard anything?
> 
> -- 
> Gabriel Cain   www.dialupusa.net  
> Dialup USA, Inc.888-460-2286 ext 208
> PGP fingerprint:   C0B4 C6BF 13F5 69D1 3E6B CD7C D4C8 2EA4 2B08 1C6D
> 
> 


Re: virus or hacked?

2003-08-20 Thread John Kinsella

Most of us start at google.

On Wed, Aug 20, 2003 at 01:45:46PM -0400, Claire Kelly wrote:
> 
> How catty.  We all start somewhere, or have you forgotten?
> 
> Gruss + Cheers,
> Cade Kelly
> System/Network Administrator
> ECONnergy Co. Inc
> Spring Valley, NY
> 
> -Original Message-
> From: Johannes Catterwell [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 20, 2003 1:52 PM
> To: Chris Todd
> Cc: [EMAIL PROTECTED]
> Subject: Re: virus or hacked?
> 
> 
> 
> Chris Todd schrieb:
> > 
> > Thanks
> > Chris Todd
> > Computer Technician
> 
> Computer Technician? you sure?
> 
> -- 
> Johannes Catterwell,  |  Did you ever wonder
> Darmstadt, Germany|  ... why you have to click
> johannes at catterwell dot de |  on "Start" to stop Windows?


Re: East Coast outage?

2003-08-14 Thread John Kinsella

I bet it was just a really big EPO that yet another security guard hit.

On Thu, Aug 14, 2003 at 05:03:27PM -0400, K. Scott Bethke wrote:
> Looks like we lost the Niagara-Mohawk power grid , says it is not related to
> Terrorism.


Re: [Microsoft to ship new versions with firewall enabled]

2003-08-14 Thread John Kinsella

On Thu, Aug 14, 2003 at 10:46:56AM -0400, Joshua Sahala wrote:
> while i think many of us will welcome this, i am skeptical of what
> the firewall will be 'enabled' to block, and how easy it will be
> for the user to set-up rules (and hopefully there will be a sanity
> check included so that 'permit in any' is not a valid option, but
> then 'permit out any' should not be one either)
> but still, it is a step...

It's a pretty rudimentary "firewall," I suspect enabling that by default
is gonna piss off a hell of a lot of people (I'd venture to say it'll
piss off more than a virus, since most are too clueless to get mad at
that).

John


Re: When Security Guards Attack (was: clearblue part deux)

2003-08-14 Thread John Kinsella

On Tue, Aug 05, 2003 at 02:09:19PM -0400, Eric Brunner-Williams in Portland Maine 
wrote:
> > ... tried to silence the door audible alarm
> 
> Didn't it have battery backup? Inquiring minds want to know.

The door?  Guess not.  Reminds me of a skit from Kentucky Fried Movie, tho. :)

Serously, yeah it's SF city building code.  I got little wires running
from my EPO to my UPSs in my internal server room as well.

John


Re: Server Redundancy

2003-08-14 Thread John Kinsella

On Wed, Aug 06, 2003 at 01:50:33PM -0400, Jason Dixon wrote:
> I second this suggestion.  I worked briefly at F5 Networks in 2001 and
> was responsible for supporting Big-IP and 3DNS.  Both are very nice
> products, but NOT cheap.

I've used them all fairly heavily, except the Foundry gear.  Alteon's my
personal fave.  Biggest problem with the F5:  hard drive.  In my book,
that means you instantly need two, doubling the price.

For price concerns, tho, just check ebay.  $13k AD3s for $2500...don't
say nothing good came from the dotcom crash.

John


When Security Guards Attack (was: clearblue part deux)

2003-08-06 Thread John Kinsella

"On August 2 at 2:22 p.m. PDT, the on-duty guard mistakenly opened the
protective cover and pressed the Emergency Power Off (EPO) button when
he tried to silence the door audible alarm."

I gotta remember that one.

John

On Sat, Aug 02, 2003 at 11:24:02PM -0700, John Kinsella wrote:
> 
> So haven't seen anybody else mention it yet...Clearblue in SFO went
> off-net for 3ish hours today, again as the result of internal power
> issues as far as I can tell.  Gennys didn't kick in.  After gettin my
> stuff back up, went for a self-guided tour of the facility to find 3
> guys gathered around one of their UPSes scratching their heads.  I
> suspect something went *poof*.  At least it was a Saturday...
> 
> Personally, I'm looking forward to renegotiating my contract later this
> year. :)
> 
> John


Re: clearblue part deux

2003-08-02 Thread John Kinsella

Silly me.  hadn't caught up on my mail yet.  Bastards lost power again
around 9:40PM PST.

John

On Sat, Aug 02, 2003 at 11:24:02PM -0700, John Kinsella wrote:
> 
> So haven't seen anybody else mention it yet...Clearblue in SFO went
> off-net for 3ish hours today, again as the result of internal power
> issues as far as I can tell.  Gennys didn't kick in.  After gettin my
> stuff back up, went for a self-guided tour of the facility to find 3
> guys gathered around one of their UPSes scratching their heads.  I
> suspect something went *poof*.  At least it was a Saturday...
> 
> Personally, I'm looking forward to renegotiating my contract later this
> year. :)
> 
> John


clearblue part deux

2003-08-02 Thread John Kinsella

So haven't seen anybody else mention it yet...Clearblue in SFO went
off-net for 3ish hours today, again as the result of internal power
issues as far as I can tell.  Gennys didn't kick in.  After gettin my
stuff back up, went for a self-guided tour of the facility to find 3
guys gathered around one of their UPSes scratching their heads.  I
suspect something went *poof*.  At least it was a Saturday...

Personally, I'm looking forward to renegotiating my contract later this
year. :)

John


Re: OT RE: Anybody know what LARP is?

2003-05-29 Thread John Kinsella

If that doesn't help, I would suggest taking a LART to the person who
spoke of this LARP thing. ;)

On Wed, May 28, 2003 at 05:45:43PM -0700, Christopher J. Wolff wrote:
> 
> Karyn,
> 
> I'm not sure about the LARP but I can guide you toward a LARCH.
> 
> -Monty python humor, sorry.
> 
> Regards,
> Christopher J. Wolff, VP CIO
> Broadband Laboratories, Inc.
> http://www.bblabs.com
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Karyn Ulriksen
> Sent: Wednesday, May 28, 2003 5:25 PM
> To: [EMAIL PROTECTED]
> Subject: OT: Anybody know what LARP is?
> 
> 
> I know that this is off topic and that there is probably a forum
> somewhere
> more appropriate, so I'll appreciate any direction as to where would be
> better...
> 
> But I couldn't think of a group that would more likely know what Locus
> Address Resolution Protocol (LARP) is.  I've been Googling variations
> and
> cross references for LARP for the past hour and am starting to think
> it's a
> trick question :).  All I can find is all the thousands of RFCs on the
> AINA
> numbering for it, but not what the protocol does.  If anyone can throw
> me a
> bone, I'd really appreciate it.
> 
> Karyn
> 
> 


Re: clear blue sf with out power

2003-01-20 Thread John Kinsella

>From what Internap has told me, power went out at Navisite (I'm getting
tired of name changes) at 10:15 on 1/19 due to PG&E de-energizing the grid
that feeds the DC due to a short.  No ETA on when the grid will be back.

John

Scott Granados said:
>
> Anyone know what's up with Clearblue in SF, 650 Townsend St.
>
> I've been getting alerts that they have been with out power now for a
> couple days and are still on generator power.
>
> Thanks
>
> Scott






Re: OC-768 availability?

2002-07-29 Thread John Kinsella


HP was working on a "buble" switching device, I think the project's
dead.

John

On Mon, Jul 29, 2002 at 07:53:43PM -0700, Scott Granados wrote:
> 
> Wasn't one of the major switch companies working on a system of bubbles. 
>I'm not sure if it was foundry or Juniper or who but 
> someone was trying to route packets or rather switch packets in a device 
> at high speed by using bubbles to reflect and switch the light instead 
> of converting to electrons.
> 
> On Mon, 29 Jul 2002, blitz wrote:
> 
> > 
> > Seriously, I don't see OC768 coming online en masse until they get the 
> > kinks worked out of optical switching. The transit times are so short thru 
> > the innards, in the order of picoseconds, that electronics is way too slow 
> > to perform such mundane tasks like determining where a packet is supposed 
> > to go.
> > Thus, all this will require optical computing to be available cheaply and a 
> > lot more widespread than it is now. Cross your fingers and hope for a 
> > quantum breakthrough...
> > OC192 is already pushing the limits of present technology.
> > And add to that, the sorry state of the major players in telecom, and I 
> > don't think you'll see them willing to pony up an investment in something 
> > like that until it's well established.
> > A typical egg/chicken situation..
> > 
> > 
> > 
> > At 16:10 7/29/02 -0700, you wrote:
> > 
> > 
> > >Hello,
> > >
> > >I am currently running a network of cisco 2621s with the OC-192 NM for my 
> > >upstream connections. The internal network links are a mixture of K56Flex 
> > >modems and GRE tunnels.
> > >
> > >I am looking to upgrade to OC-768 real soon now and am wondering what the 
> > >prospects are for OC-768 availability on the 2621 platform. I've found the 
> > >2621 to be rock-solid, except when I ping it, so I'd like to keep my 
> > >network on that platform if possible.
> > >
> > >In addition, if anyone knows the availability of OC-768 circuits between 
> > >the following cities I'd appreciate any fiber maps and an approximate 
> > >price range:
> > >Ottawa, ON, CA
> > >Midland, ON, CA
> > >Goderich, ON, CA
> > >Toronto, ON, CA
> > >Compton, CA, US
> > >Sealand
> > >
> > >At each site I plan to announce a /24 from a /20 I was allocated so if 
> > >everyone could please update their prefix filters now that would be great.
> > >
> > >Thank you.
> > >
> > >-- Dalph Roncaster
> > >
> > >Communicate in total privacy.
> > >Get your free encrypted email at https://www.hushmail.com/?l=2
> > >
> > >Looking for a good deal on a domain name? 
> > >http://www.hush.com/partners/offers.cgi?id=domainpeople
> > 
> 



Re: HP Openview

2002-07-10 Thread John Kinsella


Might want to take a peek at OpenNMS...http://www.opennms.org  I'm not
sure it'll be everything you dream of, but hey it's a hell of a lot
cheaper...

John

On Wed, Jul 10, 2002 at 04:34:26PM -0400, Eric Whitehill wrote:
> 
> NANOG:
> 
> I am curious if anyone has been working with HP Openview as an NMS.  I've
> been looking at it (Specifically the service call portion) and so far,
> have not been impressed - I'm just not seeing the feature set I would
> expect.  Am I just being stubborn and not seeing the advantages of this?
> >From my understanding the full HP Openview is in beta, but I'm not sure.
> 
> I've done some researching on HP's website, and I can't seem to really
> find any relevant data.  One of the large sticking points is I am trying
> to find a *nix based client, specifically one I can get working on
> Solaris, and so far, I'm having a difficut time tracking one down.
> 
> Am I wasteing my time with HP Openview?  If you are using it, are you
> pleased?  Should I accept fate and life and eat chicken for supper
> tonight?
> 
> Any advise and suggestions are welcomed.
> 
> -Eric
> 



Re: 5.2 Earthquake in Northern California

2002-05-13 Thread John Kinsella


There's something on sfgate.com about phone service being out in SJ?  I
couldn't call out on cingular but could receive calls.

John

On Mon, May 13, 2002 at 10:25:19PM -0700, Sameer R. Manek wrote:
> 
> We just had a 5.2 magnitude earthquake at 10pm, it was centered SW of
> Gilroy, CA. Cingular's network was peaked for a few minutes after the call,
> presumably as everyone called friends/family. No reports of phone/power
> outages yet.
> 
> Sameer
> 
> -
> Sameer R. Manek   Email: [EMAIL PROTECTED]
> "What one has not experienced, one will never understand in print."
>  --Isadora Duncan
> -
> 
> 



Re: Economics of flooding

2002-04-02 Thread John Kinsella


On Tue, Apr 02, 2002 at 01:51:54PM -0600, Basil Kruglov wrote:
> On Tue, Apr 02, 2002 at 10:06:58AM -0800, Livio Ricciulli wrote:
> > Is anyone aware of a process for claiming a deduction in charges when 
> > fees are associated with a flooding attack? 
> Of the top of my head, not UUnet, C&W, Sprint, Genuity, Exodus, Globix,
> Verio, to name a few, will go thus far to fix the billing issue, they have
> different chain of people working at each level/department, they might bend
> once but that's as far as it goes. 9 out of 10 times they'll ask you to
> commit to more transit or/and get a flat pipe.

In my past life at Globix, I was occasionally able to get the fees
reduced and a customer slapped on the hand.  What it comes down to as
Basil hinted is a finite resource is being used, and somebody needs to
play for it.

Livio asked for a process...while informal, this was usually ours:
 * Customer gets bill at end of month, sees huge number, screams bloody
   murder to sales rep.
 * Sales rep pulls up Concord NetHealth (or whatever it's called
   nowdays) and looks at traffic graph for last month.  More than likely
   sees huge spike somewhere durning the month, or if box was turned
   into a warez site, a dramatic change in average traffic flow.  Sales
   guy prints out page and wanders over to a tech to ask what the
   picture means.
 * Techie laughs, takes page and shows to fellow coworkers, who also
   laugh, then groan, recognizing there will be multiple phone
   calls/meetings with client and sales to explain, several time over,
   what probably happened and why we're not going to just wave the bill
   because it was an accident.
 * After a few months, client would usually get a credit, if they agreed
   to buy more services or something similar.

In the event of a clued client recognizing an attack, or something
significant enough happening that it had noticable effects on our gear,
it went something like this:
 * Either client calling our NOC, or one of us realizing that something
   just went *snap*
 * Issue getting escallated fairly quickly up to somebody senior
 * Customer either working with us to stop attack, or we down their port
   until they arrive at the DC to fix their server.

...usually in the second case, things are recognized quickly enough that
it falls into the 36 hr window of available bursting for the month.

John