[NANOG-announce] 2013 Postel Scholarship Announcement
On behalf of the North American Network Operators' Group (NANOG) and the American Registry for Internet Numbers (ARIN), we would like to take this opportunity to draw your attention to the 2013 Postel http://nanog.org/resources/scholarships/postelNetwork Operator's Scholarship http://nanog.org/resources/scholarships/postel. The Postel Network Operator's Scholarship targets personnel from developing countries who are actively involved in Internet development, in any of the following roles: - Engineers (Network Builders) - Operational and Infrastructure Support Personnel - Educators and Trainers This is not a postgraduate fellowship or academic scholarship. Individuals may nominate themselves for the Scholarship via email. The Scholarship will be awarded annually to a recipient selected by a committee comprising representatives from the NANOG Board of Directors and the ARIN Board of Trustees. The selection committee will whimsically select the annual recipient exclusively in response to the question: What Would Jonhttp://en.wikipedia.org/wiki/Jon_PostelDo? if he were asked to select a recipient. The successful applicant will be provided with transportation to and from the NANOG and ARIN joint meeting October 7-11, 2013 in Phoenix, Arizona, USA, and a reasonable (local host standard) allowance for food and accommodation. In addition, all fees for participation in both meetings' events will be waived. The final grant size is determined according to final costs and available funding. The chosen recipient will be advised at least 2 months prior to the fall meeting date. Applications from qualified individuals are now being accepted. The deadline for application is June 7, 2013 and the awardees will be informed by July 19, 2013. Please read full information about the scholarship at: http://nanog.org/resources/scholarships/postel To apply, please submit your application in PLAIN ASCII in the BODY of the message, not as an attachment nor as a Word document, PDF, or any other form, to postel...@nanog.org. Please be sure to include the following: - Full name and contact info - Your brief biography, including current and recent jobs held - A description of why you need and deserve this Scholarship to attend the NANOG and ARIN meetings - A description of how you plan to leverage your attendance at the meetings in your work - A brief abstract of a presentation you would give at the NANOG and/or ARIN meetings, if selected as a Scholarship winner Kind regards, Steve Gibbard and John Curran, on behalf of the Postel Scholarship Selection Committee -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 ___ NANOG-announce mailing list nanog-annou...@mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce
RE: Could not send email to office 365
I'm an engineer on the Microsoft Office365 Exchange Online (outlook.office365.com) network team. I'm gathering forensics specific to IPv6 reports -- are people still experiencing IPv6-related issues? I am interested solely in failures that are IPv6 connection issues to outlook.office365.com. If you have a clear repro of an IPv6 connection failure, please message me off-list with at least a traceroute. (Please don't deluge me with non-IPv6-related issues -- I'm a network guy working on this one report.) Jason (dot) Sherron [at] Microsoft (dot) com -Original Message- From: JoeSox [mailto:joe...@gmail.com] Sent: Wednesday, May 8, 2013 4:35 PM To: nanog@nanog.org Subject: Re: Could not send email to office 365 Just an update if list members are still experiencing this issue. I spoke on the phone with Escalation Manager for Microsoft North America and they had meetings today and their Engineering team is putting a game plan together to roll out a fix for the Outlook connectivity issues. They were debating to roll-out to the group of effected customers or one-by-one. From the data I provided to them it looks like something to do with their NSPI RPC endpoint environment. They told me I should receive a call tomorrow but call them Friday if I do not receive a call. Hopefully, everyone else experiencing this issue is being taken care of as this is the main concern with Cloud services is the lack of response times on major issues. -- Thanks, Joe On Thu, May 2, 2013 at 10:16 AM, JoeSox joe...@gmail.com wrote: Our Technical Support is reporting a big jump in Outlook connectivity issues about 5-10 minutes ago. Our resolvers are testing fine. -- Thanks, Joe On Thu, May 2, 2013 at 4:53 AM, Joe Abley jab...@hopcount.ca wrote: On 2013-05-02, at 02:42, Cathy Almond cat...@isc.org wrote: This may be a red herring, but I've heard of some dropping of DNS queries for the names within outlook.com domains where the queries are all coming from source port 53 (i.e. your recursive server doesn't use query source port randomization ... or there's a NAT or some other box in front of the recursive server which re-writes the source port... ). Might be worth checking what the recursive server you're using is doing? See https://www.dns-oarc.net/oarc/services/porttest Joe
Variety, On The Media, don't understand the Internet
Or I don't. Which is not completely impossible. In this piece: http://variety.com/2013/digital/news/netflix-puts-even-more-strain-on-the-internet-1200480561/ they suggest that Akamai and other ISP-side caching is either not affecting these numbers and their pertinence to the backbone at all, or not much. Did they miss something? or did I? Cheers, -- jra -- Jay R. Ashworth Baylink j...@baylink.com Designer The Things I Think RFC 2100 Ashworth Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274
Re: Variety, On The Media, don't understand the Internet
On 13-05-14 13:06, Jay Ashworth wrote: http://variety.com/2013/digital/news/netflix-puts-even-more-strain-on-the-internet-1200480561/ they suggest that Akamai and other ISP-side caching is either not affecting these numbers and their pertinence to the backbone at all, or not much. This is from a Sandvine press release. Sandvine measures traffic at the last mile, so it doesn't really know whether a Netflix stream is coming from a local caching server within the carrier's LAN, from a caching server that is peering with the carrier, or via the real internet. In the case of a large ISP with a Netflix cache server accessible locally, (either in-house, or via peering at a local carrier hotel), the traffic doesn't really travel on the internet. But for smaller ISPs, the traffic will travel on the internet between the nearest cache server and their facilities. Because of caching, the load on the actual internet won't increase as much as the amoount streamed onto last mile infrastructure.
Re: Variety, On The Media, don't understand the Internet
On Tue, May 14, 2013 at 3:53 PM, Jean-Francois Mezei jfmezei_na...@vaxination.ca wrote: On 13-05-14 13:06, Jay Ashworth wrote: http://variety.com/2013/digital/news/netflix-puts-even-more-strain-on-the-internet-1200480561/ they suggest that Akamai and other ISP-side caching is either not affecting these numbers and their pertinence to the backbone at all, or not much. This is from a Sandvine press release. Sandvine measures traffic at the last mile, so it doesn't really know whether a Netflix stream is coming from a local caching server within the carrier's LAN, from a caching server that is peering with the carrier, or via the real internet. can't the routing data on the network tell them some of this? or even routing data collected from like 'routeviews'? they don't even really need 'live' data as much as daily snapshots to say: Yea, that network is 3 as-hops away -- it's across the backbone. sounds like lazy research... In the case of a large ISP with a Netflix cache server accessible locally, (either in-house, or via peering at a local carrier hotel), the traffic doesn't really travel on the internet. and that fact ought to be visible in the local routing system and/or global system. But for smaller ISPs, the traffic will travel on the internet between the nearest cache server and their facilities. Because of caching, the load on the actual internet won't increase as much as the amoount streamed onto last mile infrastructure. one hopes. (providing cache-hit is above a few percent) -chris
Re: Could not send email to office 365
Jason Sherron jason.sher...@microsoft.com wrote: Hello Jason, I'm an engineer on the Microsoft Office365 Exchange Online (outlook.office365.com) network team. I'm gathering forensics specific to IPv6 reports -- are people still experiencing IPv6-related issues? I am interested solely in failures that are IPv6 connection issues to outlook.office365.com. Looks okay from my POV now. Thanks for fixing it, can you share the root cause? This issue had rather interesting symptoms. Bernhard
Looking for Netflow analysis package
Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
RE: Looking for Netflow analysis package
The Netflow analyzer from Solarwinds works pretty well for all of that provided you're receiving the data from a Cisco source that does netflow v9. It is not very useful at all for sflow though because they haven't updated it to recognize the ASN data. Their sales staff will also hound you relentlessly about 'special pricing' for their other products while not actually being willing to give anything all that special, so use a throwaway email address and phone number if you do choose to purchase and don't want to be bothered. David -Original Message- From: Erik Sundberg [mailto:esundb...@nitelusa.com] Sent: Tuesday, May 14, 2013 7:00 PM To: nanog@nanog.org Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Looking for Netflow analysis package
Solarwinds netflow is also way, way overpriced for what you get...and their license model for Netflow is utterly ridiculous. I like Splunk plus Netflow integrator. With some custom lookup tables, you might be able to code up a view that'll show you the per-ASN stats. You can definitely do it by Subnet pretty easily. On Tue, May 14, 2013 at 4:10 PM, David Hubbard dhubb...@dino.hostasaurus.com wrote: The Netflow analyzer from Solarwinds works pretty well for all of that provided you're receiving the data from a Cisco source that does netflow v9. It is not very useful at all for sflow though because they haven't updated it to recognize the ASN data. Their sales staff will also hound you relentlessly about 'special pricing' for their other products while not actually being willing to give anything all that special, so use a throwaway email address and phone number if you do choose to purchase and don't want to be bothered. David -Original Message- From: Erik Sundberg [mailto:esundb...@nitelusa.com] Sent: Tuesday, May 14, 2013 7:00 PM To: nanog@nanog.org Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you. -- 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
Re: Looking for Netflow analysis package
While it doesn't do everything you're looking for nfsen[1] is pretty extensible. [1] http://nfsen.sourceforge.net/ On Tue, May 14, 2013 at 10:59:32PM +, Erik Sundberg wrote: Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
RE: Looking for Netflow analysis package
Where are all my ntop brethren? Sent from my Mobile Device. Original message From: David Hubbard dhubb...@dino.hostasaurus.com Date: 05/14/2013 4:12 PM (GMT-08:00) To: nanog@nanog.org Subject: RE: Looking for Netflow analysis package The Netflow analyzer from Solarwinds works pretty well for all of that provided you're receiving the data from a Cisco source that does netflow v9. It is not very useful at all for sflow though because they haven't updated it to recognize the ASN data. Their sales staff will also hound you relentlessly about 'special pricing' for their other products while not actually being willing to give anything all that special, so use a throwaway email address and phone number if you do choose to purchase and don't want to be bothered. David -Original Message- From: Erik Sundberg [mailto:esundb...@nitelusa.com] Sent: Tuesday, May 14, 2013 7:00 PM To: nanog@nanog.org Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Looking for Netflow analysis package
Take a look at argus www.qosient.com Dave Edelman On May 14, 2013, at 19:17, Mike Hale eyeronic.des...@gmail.com wrote: Solarwinds netflow is also way, way overpriced for what you get...and their license model for Netflow is utterly ridiculous. I like Splunk plus Netflow integrator. With some custom lookup tables, you might be able to code up a view that'll show you the per-ASN stats. You can definitely do it by Subnet pretty easily. On Tue, May 14, 2013 at 4:10 PM, David Hubbard dhubb...@dino.hostasaurus.com wrote: The Netflow analyzer from Solarwinds works pretty well for all of that provided you're receiving the data from a Cisco source that does netflow v9. It is not very useful at all for sflow though because they haven't updated it to recognize the ASN data. Their sales staff will also hound you relentlessly about 'special pricing' for their other products while not actually being willing to give anything all that special, so use a throwaway email address and phone number if you do choose to purchase and don't want to be bothered. David -Original Message- From: Erik Sundberg [mailto:esundb...@nitelusa.com] Sent: Tuesday, May 14, 2013 7:00 PM To: nanog@nanog.org Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you. -- 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
Re: Variety, On The Media, don't understand the Internet
On May 14, 2013, at 13:06 , Jay Ashworth j...@baylink.com wrote: Or I don't. Which is not completely impossible. In this piece: http://variety.com/2013/digital/news/netflix-puts-even-more-strain-on-the-internet-1200480561/ they suggest that Akamai and other ISP-side caching is either not affecting these numbers and their pertinence to the backbone at all, or not much. Did they miss something? or did I? I don't see the word backbone in there, other than in the comments. Your DSL line is part of the Internet, and doing more traffic puts more strain (FSVO strain) on that link, even if the server is colocated with the cable head end. So I don't see the problem here. But then, maybe I'm the one who is confused? :) -- TTFN, patrick
Re: Variety, On The Media, don't understand the Internet
On May 14, 2013, at 15:53 , Jean-Francois Mezei jfmezei_na...@vaxination.ca wrote: On 13-05-14 13:06, Jay Ashworth wrote: http://variety.com/2013/digital/news/netflix-puts-even-more-strain-on-the-internet-1200480561/ they suggest that Akamai and other ISP-side caching is either not affecting these numbers and their pertinence to the backbone at all, or not much. This is from a Sandvine press release. Sandvine measures traffic at the last mile, so it doesn't really know whether a Netflix stream is coming from a local caching server within the carrier's LAN, from a caching server that is peering with the carrier, or via the real internet. In the case of a large ISP with a Netflix cache server accessible locally, (either in-house, or via peering at a local carrier hotel), the traffic doesn't really travel on the internet. Since when is peering not part of the Internet? Since when is even on-net caches not part of the Internet? I always thought if I am on the Internet, anything I ping is on the Internet. (I am intentionally ignoring things like split tunnel VPN nodes.) Perhaps you think of the Internet as the tier ones or something? But for smaller ISPs, the traffic will travel on the internet between the nearest cache server and their facilities. I guess you assume smaller ISPs don't peer? Unfortunately, reality disagrees with you, 100s if not 1000s of times. Still confused about this whole notion, though. Perhaps you can clarify? Because of caching, the load on the actual internet won't increase as much as the amoount streamed onto last mile infrastructure. Uh I give up. -- TTFN, patrick
Re: Variety, On The Media, don't understand the Internet
On 13-05-14 20:55, Patrick W. Gilmore wrote: Since when is peering not part of the Internet? Yes, one car argue that an device with an IP address routable from the internet is part of the internet. But when traffic from a cahe server flows directly into an ISP's intranet to end users, it doesn't really make use of the Internet nor does it cost the ISP transit capacity. Compare this to a small ISP in a city where there are no cache servers. Reaching netfix involves using paid transit to reach the nearest point where Netflix has a cache server. So traffic truly travels on the internet.
Re: Looking for Netflow analysis package
Check out the FlowViewer/flow-tools/SiLK combo also. https://sourceforge.net/projects/flowviewer/ Erik Sundberg esundb...@nitelusa.com wrote on 05/14/2013 06:59:32 PM: From: Erik Sundberg esundb...@nitelusa.com To: nanog@nanog.org nanog@nanog.org Date: 05/14/2013 07:00 PM Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Could not send email to office 365
Hi Jason, My business mysteriously stabilized after speaking with the Escalation Manager of North America, last week. Next, health status statement said it was a false-positive on May 9th. Yesterday, speaking with the tech to close my case, he had a hunch engineering fixed something but he made it clear that he was only guessing. I never was able to get a real cause of this issue for the company I work for or the reported other companies in North America reporting the issue. Troubleshooting never led me down an IPv6 path but others might have, or maybe that was the root cause on the Microsoft side. -- Thanks, Joe On Tue, May 14, 2013 at 11:02 AM, Jason Sherron jason.sher...@microsoft.com wrote: I'm an engineer on the Microsoft Office365 Exchange Online ( outlook.office365.com) network team. I'm gathering forensics specific to IPv6 reports -- are people still experiencing IPv6-related issues? I am interested solely in failures that are IPv6 connection issues to outlook.office365.com. If you have a clear repro of an IPv6 connection failure, please message me off-list with at least a traceroute. (Please don't deluge me with non-IPv6-related issues -- I'm a network guy working on this one report.) Jason (dot) Sherron [at] Microsoft (dot) com -Original Message- From: JoeSox [mailto:joe...@gmail.com] Sent: Wednesday, May 8, 2013 4:35 PM To: nanog@nanog.org Subject: Re: Could not send email to office 365 Just an update if list members are still experiencing this issue. I spoke on the phone with Escalation Manager for Microsoft North America and they had meetings today and their Engineering team is putting a game plan together to roll out a fix for the Outlook connectivity issues. They were debating to roll-out to the group of effected customers or one-by-one. From the data I provided to them it looks like something to do with their NSPI RPC endpoint environment. They told me I should receive a call tomorrow but call them Friday if I do not receive a call. Hopefully, everyone else experiencing this issue is being taken care of as this is the main concern with Cloud services is the lack of response times on major issues. -- Thanks, Joe On Thu, May 2, 2013 at 10:16 AM, JoeSox joe...@gmail.com wrote: Our Technical Support is reporting a big jump in Outlook connectivity issues about 5-10 minutes ago. Our resolvers are testing fine. -- Thanks, Joe On Thu, May 2, 2013 at 4:53 AM, Joe Abley jab...@hopcount.ca wrote: On 2013-05-02, at 02:42, Cathy Almond cat...@isc.org wrote: This may be a red herring, but I've heard of some dropping of DNS queries for the names within outlook.com domains where the queries are all coming from source port 53 (i.e. your recursive server doesn't use query source port randomization ... or there's a NAT or some other box in front of the recursive server which re-writes the source port... ). Might be worth checking what the recursive server you're using is doing? See https://www.dns-oarc.net/oarc/services/porttest Joe
Re: Variety, On The Media, don't understand the Internet
On May 14, 2013, at 21:14 , Jean-Francois Mezei jfmezei_na...@vaxination.ca wrote: On 13-05-14 20:55, Patrick W. Gilmore wrote: Since when is peering not part of the Internet? Yes, one car argue that an device with an IP address routable from the internet is part of the internet. Can argue? How would you define the Internet? But when traffic from a cahe server flows directly into an ISP's intranet to end users, it doesn't really make use of the Internet nor does it cost the ISP transit capacity. Transit capacity != Internet. Plus you said even peering wasn't the Internet. Compare this to a small ISP in a city where there are no cache servers. Reaching netfix involves using paid transit to reach the nearest point where Netflix has a cache server. So traffic truly travels on the internet. Truly? You have interesting definitions. I think you are trying to say small ISPs have to pay to access $CONTENT, big ones do not. This is objectively false-to-fact. If you are trying to say scale makes some things easier, then I'm sure most people would agree. But trying to define the Internet as transit capacity, or saying small ISPs can't peer, or anything of the sort is silly. -- TTFN, patrick
RE: Looking for Netflow analysis package
Re: Looking for Netflow analysis package
Not exactly netflow until you set it up as such buy, Graylog2 and LogStash are OSS. Also, I'll probably be releasing modules and a simple evented (POE) program in perl soon (don't wait up if you can't deal with code - it ain't and ain't going to be a web app but a simple framework mainly for the simplest and fastest parsing regexes). But all of the modern log aggregation software uses ElasticSearch as a data store which makes correlation / netflow pretty easy. On May 14, 2013 9:20 PM, Joe Loiacono jloia...@csc.com wrote: Check out the FlowViewer/flow-tools/SiLK combo also. https://sourceforge.net/projects/flowviewer/ Erik Sundberg esundb...@nitelusa.com wrote on 05/14/2013 06:59:32 PM: From: Erik Sundberg esundb...@nitelusa.com To: nanog@nanog.org nanog@nanog.org Date: 05/14/2013 07:00 PM Subject: Looking for Netflow analysis package Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Looking for Netflow analysis package
ManageEngine's NetFlow Analyzer will do most of that (not sure about AS Path Analysis.) It is priced per monitored interface, but is pretty reasonable for what it does. They have a 30-day demo available. We use their full OpManager+NetFlow suite to monitor several hundred devices with thousands of interfaces. We only license NetFlow for the interfaces that connect to external providers. E-mail me privately if you want to see the reports. Jason On Tue, May 14, 2013 at 6:59 PM, Erik Sundberg esundb...@nitelusa.comwrote: Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Looking for Netflow analysis package
We use/d nfsen extensively for this this past November December and have been very successful in planning our bandwidth purchases since then. We like it so much that reliable, full-speed Netflow telemetry is now a requirement on all edge/core routers. Randal On Tue, May 14, 2013 at 8:18 PM, Jason Lester jles...@wcs.k12.va.us wrote: ManageEngine's NetFlow Analyzer will do most of that (not sure about AS Path Analysis.) It is priced per monitored interface, but is pretty reasonable for what it does. They have a 30-day demo available. We use their full OpManager+NetFlow suite to monitor several hundred devices with thousands of interfaces. We only license NetFlow for the interfaces that connect to external providers. E-mail me privately if you want to see the reports. Jason On Tue, May 14, 2013 at 6:59 PM, Erik Sundberg esundb...@nitelusa.com wrote: Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
Re: Looking for Netflow analysis package
On Tue, May 14, 2013 at 11:18 PM, Jason Lester jles...@wcs.k12.va.uswrote: ManageEngine's NetFlow Analyzer will do most of that (not sure about AS Path Analysis.) It is priced per monitored interface, but is pretty reasonable for what it does. They have a 30-day demo available. We use their full OpManager+NetFlow suite to monitor several hundred devices with thousands of interfaces. We only license NetFlow for the interfaces that connect to external providers. This product cannot stand any service provider production network I can think of. It is too slow to handle high-speed routers. I suggest staying away from all ManageEngine's products in general, but NFA is the worst of them. Rubens
Re: Looking for Netflow analysis package
You might want to take a look at pmacct, http://www.pmacct.net/. It includes an embedded version of Quagga, allowing BGP AS Path data to be efficiently joined with flow records. Peter On Tue, May 14, 2013 at 3:59 PM, Erik Sundberg esundb...@nitelusa.comwrote: Does anyone know of a netflow collector that will do the following. *Graph/List Destination Networks By Top AS *Graph/List Destination Networks By Top IP Address *AS Path Analysis *Traffic Type (ICMP, TCP, UDP, IPSEC, HTTP, SSH, SMTP, etc..) We will be using this to help us decide who to Peer with and what transit Providers to look at. I am familiar with Arbor Network's Peak Flow utility but it's a little too pricy. I also found AS-Stats https://neon1.net/as-stats/ look promising from the power point on their page. Thanks Erik CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.
