RE: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Peng Xiao (penxiao)]

Hi Jeff

As our priority, we will do MPLS VPN, IPv6, Flowspec firstly. In the future, we 
will consider multicast and EVPN.
Thanks.

-Original Message-
From: Jeff Tantsura [mailto:jeff.tants...@ericsson.com] 
Sent: 2015年8月7日 14:06
To: Peng Xiao (penxiao)
Cc: valdis.kletni...@vt.edu; nanog@nanog.org
Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

Hi Peng,

Good stuff!

Any plans for multicast, RTC and EVPN AF's?

Regards,
Jeff

> On Aug 6, 2015, at 7:43 PM, Peng Xiao (penxiao)  wrote:
> 
> Hi guys,
> 
> Ipv6 and other address families are under development. We have already 
> designed the data structures for them as you can see from the documentation, 
> but it's just some testing code and not stable and we are not doing them 
> after careful consideration.
> But at last, they will come out.
> 
> 
> -Original Message-
> From: valdis.kletni...@vt.edu [mailto:valdis.kletni...@vt.edu] 
> Sent: 2015年8月7日 0:16
> To: Peng Xiao (penxiao)
> Cc: Jahangir Hossain; xx...@ledeuns.net; nanog@nanog.org
> Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation
> 
> On Thu, 06 Aug 2015 14:25:55 -, "Peng Xiao (penxiao)" said:
>> Currently, yabgp does not support IPv6 address family. We only support IPv4 
>> now.
> 
> http://tnx.nl/legacy-ip-only.svg
> 
> Seriously guys.  It's 2015.  We really don't care what you hack for your own 
> use - but publicly announcing stuff that doesn't have IPv6 support is getting 
> kind of embarassing...
> 
> *especially* when it's a major vendor open-sourcing their code. (I'm still 
> willing to cut a *little* slack for "two guys and a stack of empty pizza 
> boxes" software)
> 
> 

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Jeff Tantsura]

Hi Peng,

Good stuff!

Any plans for multicast, RTC and EVPN AF's?

Regards,
Jeff

> On Aug 6, 2015, at 7:43 PM, Peng Xiao (penxiao)  wrote:
> 
> Hi guys,
> 
> Ipv6 and other address families are under development. We have already 
> designed the data structures for them as you can see from the documentation, 
> but it's just some testing code and not stable and we are not doing them 
> after careful consideration.
> But at last, they will come out.
> 
> 
> -Original Message-
> From: valdis.kletni...@vt.edu [mailto:valdis.kletni...@vt.edu] 
> Sent: 2015年8月7日 0:16
> To: Peng Xiao (penxiao)
> Cc: Jahangir Hossain; xx...@ledeuns.net; nanog@nanog.org
> Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation
> 
> On Thu, 06 Aug 2015 14:25:55 -, "Peng Xiao (penxiao)" said:
>> Currently, yabgp does not support IPv6 address family. We only support IPv4 
>> now.
> 
> http://tnx.nl/legacy-ip-only.svg
> 
> Seriously guys.  It's 2015.  We really don't care what you hack for your own 
> use - but publicly announcing stuff that doesn't have IPv6 support is getting 
> kind of embarassing...
> 
> *especially* when it's a major vendor open-sourcing their code. (I'm still 
> willing to cut a *little* slack for "two guys and a stack of empty pizza 
> boxes" software)
> 
> 

RE: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Peng Xiao (penxiao)]

Hi guys,

Ipv6 and other address families are under development. We have already designed 
the data structures for them as you can see from the documentation, but it's 
just some testing code and not stable and we are not doing them after careful 
consideration.
But at last, they will come out.


-Original Message-
From: valdis.kletni...@vt.edu [mailto:valdis.kletni...@vt.edu] 
Sent: 2015年8月7日 0:16
To: Peng Xiao (penxiao)
Cc: Jahangir Hossain; xx...@ledeuns.net; nanog@nanog.org
Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

On Thu, 06 Aug 2015 14:25:55 -, "Peng Xiao (penxiao)" said:
> Currently, yabgp does not support IPv6 address family. We only support IPv4 
> now.

http://tnx.nl/legacy-ip-only.svg

Seriously guys.  It's 2015.  We really don't care what you hack for your own 
use - but publicly announcing stuff that doesn't have IPv6 support is getting 
kind of embarassing...

*especially* when it's a major vendor open-sourcing their code. (I'm still 
willing to cut a *little* slack for "two guys and a stack of empty pizza boxes" 
software)

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Pablo Lucena]

This is a nice Python implementation. Thanks for open sourcing this!

On Thu, Aug 6, 2015 at 6:40 PM, Randy Bush  wrote:

> perhaps dissing someone for their free code is even ruder than not doing
> ipv6 in 2015?  you don't have to use either.
>
> randy
>

Re: A simple perl script to convert Cisco IOS configuration to HTML with internal links for easier comprehension

[Jesse McGraw]

I've now added some initial support for NXOS

On 08/06/2015 04:18 PM, Akyol, Bora A wrote:

Jesse

Does this also work for NXOS and IOS XR (thank you ciscoŠ)

Thanks

Bora
PNNL.GOV

On 8/6/15, 5:59 AM, "Jesse McGraw"  wrote:


All,

 (This is me scratching an itch of my own and hoping that it might
be useful to others on this list.  Apologies if it isn't)

   When trying to comprehend a new or complicated Cisco router
configuration an old pet-peeve of mine is how needlessly difficult it is
to search for a list referenced by a command, figure out what it does,
then find my way back to the original command (by which time I¹ve
forgotten the details of the list) and figure out what it's doing with
that list.

So I¹ve been working on a small perl script to add links within IOS
configuration files, e.g. link to an access-list from the interface
where it¹s applied, making it easier to to follow the chain of logic
with stuff like route maps or nested service policies via clicking links
and using the forward and back buttons in your browser to go back and
forth between command and referenced list.

I know there is a lot of stuff I could add in to this (e.g. more
VRF-related commands, PIX/ASA, Juniper etc).  Let me know if you think
of anything new or notice something I¹ve done wrong , there's plenty of
room for improvement and expansion to other configuration formats.



Notes:
 Anything referenced (or potentially referenced) by something else
is in bold.  It makes it very easy to see where ACLs etc. start and end

 There's also an option in there to reformat some numbers that are
hard to read (e.g. traffic shaping criteria) into more human-readable
ones.  Pure fluff.

 Surely this has been done before but I couldn't find anything in a
few brief moments of searching so here we are.



Files are here: https://github.com/jlmcgraw/networkUtilities

At the very least you'll need iosToHtml.pl, pointers.pl, pointees.pl,
and human_readable.pl and several CPAN modules (see setup.sh for easy
ways to install them under Debian-derived Linux. I haven't tested this
at all under Windows or OS X)

-Jesse

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Randy Bush]

perhaps dissing someone for their free code is even ruder than not doing
ipv6 in 2015?  you don't have to use either.

randy

Re: AW: Mac compatible SFP+/XFP programmer

[Jay Hennigan]

On 8/4/15 3:01 PM, Jürgen Jaritsch wrote:

I can also suggest you the Multi-Fiber-Tool from Solid Optics:

http://www.solid-optics.com/tools/multi-fiber-tool/so-multi-fiber-tool-id1768.html

Works great but I've never tested it with an Mac ... MacOS is at least listed 
as supported.


This looked kind of promising, but very limited info on their website, 
especially pricing. I called and found that it ONLY works with Solid 
Optics transceivers, and once you buy it at pricing from $600 to $900, 
you then have to pay $300 per year or it becomes a (relatively small and 
ineffective for use with anything bigger than a skateboard) wheel chock.


--
Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
Impulse Internet Service  -  http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV

RE: Did *bufferbloat* cause the 2010 flashcrash?

[Matthew Huff]

Various technical issues may have made things worse, but the central cause of 
the flash crash was due to lack of regulator and/or procedures for the now 
distributed markets (exchanges, ecns, dark-pools, etc...) on a market imbalance.

What started the whole thing was a selloff of a large quantity of e-mini 
futures, which caused a broad run on the market. This is a feature, not a bug. 
The thundering herd responded, as normal, by starting their own sell-off

Before the decentralized markets, when there was a market imbalance (all buyers 
or all sellers), the "specialist" or "market maker" would halt trading in a 
symbol, and work with the buyers/sellers to determine a new price and re-open 
with the new price. The problem is without coordination, when the NYSE/Nasdaq 
market makers halted trading, the distributed exchanges weren't halted. Since 
the market makers in those exchanges are required to always have quotes, they 
put out "stub" quotes of 0.01/$1.00. Since there weren't valid quotes on 
the regular exchanges and because of RegNMS, those stub quotes got disseminated 
as BBO. This was a cosmetic issue and didn't effect trading.

Who really got screwed were people that had a stop order on their stocks and 
didn't realize there were no guarantees of trading through that price. For 
example, if you bought a stock at $100, and put a stop order to sell at $90, 
and there was a market imbalance, the price could trade discontinuously. For 
example the last valid quote could have been at $95.90, then halted, then 
re-opened at $82.50. The stop order would sell immediately at $82.50, not the 
$90 people thought. Then the stock could recover and be trading at $95.05 and 
you could really feel you were screwed. But that's how it is supposed to work.


Matthew Huff | 1 Manhattanville Rd
Director of Operations   | Purchase, NY 10577
OTA Management LLC   | Phone: 914-460-4039
aim: matthewbhuff    | Fax:   914-694-5669

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of joel jaeggli
Sent: Thursday, August 6, 2015 1:31 PM
To: Christopher Morrow ; John Kristoff 
Cc: nanog list 
Subject: Re: Did *bufferbloat* cause the 2010 flashcrash?

On 8/6/15 9:58 AM, Christopher Morrow wrote:
> On Thu, Aug 6, 2015 at 12:51 PM, John Kristoff  wrote:
>> It would seem surprising that delays in general due to long queues
>> would not have been noticed before, since or would have caused other
>> more far reaching problems.
> 
> bufferbloat is the boogieman... of late. I think that's foolish :(
> I think this comment from jtk is really on point though! 'why only
> then?' that sure seems convenient, eh?

The queuing like the RBC dudes were doing was in order transmission not
on the wire. given wires of various lengths having the request arrive on
different exchanges at different times based on  distance was considered
unedesirable (by people loooking to reduce the opportunity for arbitrage
on latency).

I have have minimal experience with trading platforms but what switch
vendors were selling us as a latency sensitive customer (and HFT shops
at time) were broadcom or fulcrum asics which by virtue of being
cut-through are essentially minimally buffered.

Re: Did *bufferbloat* cause the 2010 flashcrash?

[Harlan Stenn]

In 8/6/15 10:44 AM, William Herrin wrote:
> The intermediate cause of the problem was propagation delay (including
> buffer bloat) which induced an oscillating set of states in the
> trading software.
> 
> The root cause was a flipping jassack trying to out-time his
> competitors by assuming a degree of instantaneity which proved untrue.
> Don't do that. Don't make assumptions about network timing. You can
> count on being wrong. If timing matters to your application, find a
> way to continuously measure.

Similar things happen when folks decide they are going to twiddle the
knobs of NTP's behavior.  NTP works locally, and gets/provides
information globally.  More or less.  When folks decide to make a change
in its core behavior, the usually don't consider how those changes will
affect anybody else.

I know enough about this to know I don't know anywhere near enough about
it, so I leave the knobs alone.

-- 
Harlan Stenn 
http://networktimefoundation.org - be a member!

Re: Did *bufferbloat* cause the 2010 flashcrash?

[William Herrin]

On Sun, Aug 2, 2015 at 11:19 PM, Jay Ashworth  wrote:
> This guy seems to think so, and his arguments seem pretty
> convincing to me, but I don't understand the financial system
> as well as I might.

Hi Jay,

My read is that the author got it upside down.

The intermediate cause of the problem was propagation delay (including
buffer bloat) which induced an oscillating set of states in the
trading software.

The root cause was a flipping jassack trying to out-time his
competitors by assuming a degree of instantaneity which proved untrue.
Don't do that. Don't make assumptions about network timing. You can
count on being wrong. If timing matters to your application, find a
way to continuously measure.

Regards,
Bill Herrin

P.S. Recruiters: No, I do NOT want to move to New York City and
engineer another half millisecond out of your network. I would,
however, welcome a law which bans both buying and selling instruments
of the same stock or commodity within 24 hours.


-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 

Re: Did *bufferbloat* cause the 2010 flashcrash?

[joel jaeggli]

On 8/6/15 9:58 AM, Christopher Morrow wrote:
> On Thu, Aug 6, 2015 at 12:51 PM, John Kristoff  wrote:
>> It would seem surprising that delays in general due to long queues
>> would not have been noticed before, since or would have caused other
>> more far reaching problems.
> 
> bufferbloat is the boogieman... of late. I think that's foolish :(
> I think this comment from jtk is really on point though! 'why only
> then?' that sure seems convenient, eh?

The queuing like the RBC dudes were doing was in order transmission not
on the wire. given wires of various lengths having the request arrive on
different exchanges at different times based on  distance was considered
unedesirable (by people loooking to reduce the opportunity for arbitrage
on latency).

I have have minimal experience with trading platforms but what switch
vendors were selling us as a latency sensitive customer (and HFT shops
at time) were broadcom or fulcrum asics which by virtue of being
cut-through are essentially minimally buffered.





signature.asc
Description: OpenPGP digital signature

Re: Did *bufferbloat* cause the 2010 flashcrash?

[Sean Donelan]

On Thu, 6 Aug 2015, Christopher Morrow wrote:

bufferbloat is the boogieman... of late. I think that's foolish :(
I think this comment from jtk is really on point though! 'why only
then?' that sure seems convenient, eh?


Failures almost never have a single cause.

Transport networks are never perfect, i.e. delays, dropped packets, data
corruption, etc. They may be contributing factors, or a combination of
rare events.  The hard question that SEC and the industry has been 
wrestling with is "Why?" not so much "How?"


The apparent condititions didn't change, but the system reacted 
differently during those seconds.  Why?  What was different?

Data Center operations mail list?

[Chris Boyd]

Is there a mail list that’s analogous to NANOG, but focused on the data center 
infrastructure and operations?  The shorty.com hosted list is defunct.

Thanks, and apologies for the tangential topic.

—Chris

Re: Did *bufferbloat* cause the 2010 flashcrash?

[Christopher Morrow]

On Thu, Aug 6, 2015 at 12:51 PM, John Kristoff  wrote:
> It would seem surprising that delays in general due to long queues
> would not have been noticed before, since or would have caused other
> more far reaching problems.

bufferbloat is the boogieman... of late. I think that's foolish :(
I think this comment from jtk is really on point though! 'why only
then?' that sure seems convenient, eh?

Re: Did *bufferbloat* cause the 2010 flashcrash?

[John Kristoff]

On Sun, 02 Aug 2015 23:19:02 -0400
Jay Ashworth  wrote:

> This guy seems to think so, and his arguments seem pretty convincing
> to me, but I don't understand the financial system as well as I might.

Interesting Jay, thanks for forwarding that.

I'm not convinced, but I could be.  Interesting hypothesis that, at
least for me, raises more questions that I'm not qualified to answer
either. Perhaps most fundamentally, what and where exactly is the
"queue" in the transmission system that Nanex refers to?

It would seem surprising that delays in general due to long queues
would not have been noticed before, since or would have caused other
more far reaching problems.

If there is serious debate about the cause of the problem, then it
may be necessary to invite an independent, neutral party to fully
investigate.  One has to ask, wouldn't it be convenient for Nanex
if queueing delay from others into their systems were the cause?

John

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Christopher Morrow]

On Thu, Aug 6, 2015 at 12:16 PM,   wrote:
> On Thu, 06 Aug 2015 14:25:55 -, "Peng Xiao (penxiao)" said:
>> Currently, yabgp does not support IPv6 address family. We only support IPv4 
>> now.
>
> http://tnx.nl/legacy-ip-only.svg
>
> Seriously guys.  It's 2015.  We really don't care what you hack for your
> own use - but publicly announcing stuff that doesn't have IPv6 support is
> getting kind of embarassing...
>
> *especially* when it's a major vendor open-sourcing their code. (I'm still
> willing to cut a *little* slack for "two guys and a stack of empty pizza
> boxes" software)

note that the list of 'references' for yabgp includes:
RFC2545
RFC4798
RFC5701

and this interesting snippet:
 address-family ipv6 unicast


>
>

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Valdis . Kletnieks]

On Thu, 06 Aug 2015 14:25:55 -, "Peng Xiao (penxiao)" said:
> Currently, yabgp does not support IPv6 address family. We only support IPv4 
> now.

http://tnx.nl/legacy-ip-only.svg

Seriously guys.  It's 2015.  We really don't care what you hack for your
own use - but publicly announcing stuff that doesn't have IPv6 support is
getting kind of embarassing...

*especially* when it's a major vendor open-sourcing their code. (I'm still
willing to cut a *little* slack for "two guys and a stack of empty pizza
boxes" software)




pgpQicQtfUtMm.pgp
Description: PGP signature

Re: Strange traceroute result to VM in EC2, Singapore

[John Kristoff]

On Thu, 6 Aug 2015 21:35:46 +0530
Glen Kent  wrote:

> Any pointers on this would be very helpful.

Presumably you're doing this from a Linux host.  You might try these
flags to see what you get:

   -T, --tcp
Use TCP SYN for probes

   -e, --extensions
  Show  ICMP  extensions  (rfc4884).  The  general  form is 
CLASS/TYPE: followed by a hexadecimal dump.  The MPLS (rfc4950) is shown
  parsed, in a form: MPLS:L=label,E=exp_use,S=stack_bottom,T=TTL 
(more objects separated by / ).

and a good general reference for the netop:

  

John

Re: Strange traceroute result to VM in EC2, Singapore

[Christopher Morrow]

On Thu, Aug 6, 2015 at 12:05 PM, Glen Kent  wrote:
> I find this bizzare because even when the traceroute doesnt work, I am
> actually able to ping and access the machine.
>
> I know that the VM responds to traceroutes, since it did respond to my
> traceroute when i was on the other broadband network.
>
> So i really fail to understand why the traceroute on the other network
> failed.
>
> Any pointers on this would be very helpful.

the las hop reported in the 'fails' traceroute is an amazon ip
address, I suspect some miscarriage of packet-justice inside AWS is
happening. You asked them already I guess?

Re: Strange traceroute result to VM in EC2, Singapore

[Glen Kent]

I find this bizzare because even when the traceroute doesnt work, I am
actually able to ping and access the machine.

I know that the VM responds to traceroutes, since it did respond to my
traceroute when i was on the other broadband network.

So i really fail to understand why the traceroute on the other network
failed.

Any pointers on this would be very helpful.

Thanks, GLen

On Thu, Aug 6, 2015 at 8:53 PM, Glen Kent  wrote:

> Really sorry. Didnt realize that this is a text-only forum.
>
> When my traceroute to 52.74.124.136 works:
>
> ~$ traceroute 52.74.124.136
> traceroute to 52.74.124.136 (52.74.124.136), 30 hops max, 60 byte packets
> 1 xxx xxx 0.412 ms 0.472 ms 0.439 ms
> 2 xxx xxx 2.98 ms 2.971 ms 2.999 ms
> 3 xxx xxx 5.345 ms 5.546 ms 5.519 ms
> 4 xxx xxx 3.172 ms 3.051 ms 3.010 ms
> 5 if-6-2.tcore2.SVW-Singapore.as6543.net (180.87.37.14) 56.751 ms 56.285
> ms 54.592 ms
> 6 180.87.15.206 (180.87.15.206) 73.468ms 66.993 ms 66.734 ms
> 7 203.83.223.58 (203.83.223.58) 43.737 ms 43.513 ms 44.029 ms
> 8 203.83.223.15 (203.83.223.15) 47.239 ms 46.382 ms 203.83.223.74
> (203.83.223.74)  44.144 ms
> 9 203.83.223.231 (203.83.223.231) 44.431 ms 203.83.223.233
> (203.83.223.233)  45.699 ms 46.158 ms
> 10 ec2-52-74-124-136.ap-southeast-1.compute.amazon.com (52.74.124.136)
>  44.067 ms 43.492 ms 43.499 ms
>
> When it doesnt:
>
> ~$ traceroute 52.74.124.136
> traceroute to 52.74.124.136 (52.74.124.136), 30 hops max, 60 byte packets
> 1 xxx xxx 23.272 ms 25.011 ms 26.072 ms
> 2 xxx xxx 27.058 ms 28.971 ms 29.999 ms
> 3 xxx xxx 33.025 ms 33.996 ms 38.822 ms
> 4 p38895.sgw.equinix.com (202.79.197.87) 78.964 ms 60.051 ms 83.010 ms
> 5 203.83.223.4 (203.83.223.4) 63.682 ms 64.610 ms 65.837 ms
> 6 203.83.223.17 (203.83.223.17) 67.271 ms 203.83.223.23 (203.83.223.23)
> 68.521 ms 203.83.223.17 (203.83.223.17) 70.526 ms
> 7 203.83.223.233 (203.83.223.233) 71.624 ms 72.805 ms 74.471 ms
> 8 * * *
> 9 * * *
> 10 * * *
> 11 * * *
> 12 * * *
> 13 * * *
> 14 * * *
> 15 * * *
> 16 * * *
> 17 * * *
> 18 * * *
> 19 * * *
> 20 * * *
> 21 * * *
> 22 * * *
> 23 * * *
> 24 * * *
> 25 * * *
> 26 * * *
> 27 * * *
> 28 * * *
> 29 * * *
> 30 * * *
>
>

Re: Strange traceroute result to VM in EC2, Singapore

[Glen Kent]

Really sorry. Didnt realize that this is a text-only forum.

When my traceroute to 52.74.124.136 works:

~$ traceroute 52.74.124.136
traceroute to 52.74.124.136 (52.74.124.136), 30 hops max, 60 byte packets
1 xxx xxx 0.412 ms 0.472 ms 0.439 ms
2 xxx xxx 2.98 ms 2.971 ms 2.999 ms
3 xxx xxx 5.345 ms 5.546 ms 5.519 ms
4 xxx xxx 3.172 ms 3.051 ms 3.010 ms
5 if-6-2.tcore2.SVW-Singapore.as6543.net (180.87.37.14) 56.751 ms 56.285 ms
54.592 ms
6 180.87.15.206 (180.87.15.206) 73.468ms 66.993 ms 66.734 ms
7 203.83.223.58 (203.83.223.58) 43.737 ms 43.513 ms 44.029 ms
8 203.83.223.15 (203.83.223.15) 47.239 ms 46.382 ms 203.83.223.74
(203.83.223.74)  44.144 ms
9 203.83.223.231 (203.83.223.231) 44.431 ms 203.83.223.233 (203.83.223.233)
 45.699 ms 46.158 ms
10 ec2-52-74-124-136.ap-southeast-1.compute.amazon.com (52.74.124.136)
 44.067 ms 43.492 ms 43.499 ms

When it doesnt:

~$ traceroute 52.74.124.136
traceroute to 52.74.124.136 (52.74.124.136), 30 hops max, 60 byte packets
1 xxx xxx 23.272 ms 25.011 ms 26.072 ms
2 xxx xxx 27.058 ms 28.971 ms 29.999 ms
3 xxx xxx 33.025 ms 33.996 ms 38.822 ms
4 p38895.sgw.equinix.com (202.79.197.87) 78.964 ms 60.051 ms 83.010 ms
5 203.83.223.4 (203.83.223.4) 63.682 ms 64.610 ms 65.837 ms
6 203.83.223.17 (203.83.223.17) 67.271 ms 203.83.223.23 (203.83.223.23)
68.521 ms 203.83.223.17 (203.83.223.17) 70.526 ms
7 203.83.223.233 (203.83.223.233) 71.624 ms 72.805 ms 74.471 ms
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Re: A simple perl script to convert Cisco IOS configuration to HTML with internal links for easier comprehension

[A . L . M . Buxey]

Hi,

very nice but I now have an urge to getting this integrated with RANCID
and I just dont have the time, frustrating!  ;-)

alan

RE: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Peng Xiao (penxiao)]

Currently, yabgp does not support IPv6 address family. We only support IPv4 now.

Thanks and Regards,
Xiao peng

From: Jahangir Hossain [mailto:jahan...@parween.net]
Sent: 2015年8月6日 17:26
To: Peng Xiao (penxiao); xx...@ledeuns.net
Cc: nanog@nanog.org
Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

Xiao , actually i'm trying this into UNIX and juniper Platform.
Denis , are you confirm that 2015 release doesn't support IPv6 ? This is 
because i haven't tried yet in YABGP.



Thanks // Jahangir
On Thu, Aug 6, 2015 at 1:48 PM, Peng Xiao (penxiao) 
mailto:penx...@cisco.com>> wrote:
Hi Jahangir

You mean the platform you try to run yabgp on , or the platform you want to 
connect with?
If you want to run yabgp, we recommend you use any Linux/Unix platform, if you 
want to establish BGP session with it, the platform can be any routers that 
support BGP.

Thanks.

Peng
From: Jahangir Hossain 
[mailto:jahan...@parween.net]
Sent: 2015年8月6日 15:27
To: Peng Xiao (penxiao)
Cc: nanog@nanog.org
Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

Hi Xiao ,

This is seems to be interesting . Can i used this in other platform who does 
not support bflow ?

Thanks // Jahangir

On Tue, Aug 4, 2015 at 12:29 PM, Peng Xiao (penxiao) 
mailto:penx...@cisco.com>> wrote:
Hi experts

Cisco has open sourced one part of their BGP monitoring system - YABGP
And hosted source code on GitHub. https://github.com/smartbgp/yabgp
Documentation: http://yabgp.readthedocs.org/en/latest/

Re: Strange traceroute result to VM in EC2, Singapore

[Valdis . Kletnieks]

On Thu, 06 Aug 2015 13:46:24 -, "Darden, Patrick" said:
>
> Text or it never happened.

You, sir, owe me some monitor cleaner. You also win the internets for today.


pgpyLnf36r8uU.pgp
Description: PGP signature

RE: Re: Strange traceroute result to VM in EC2, Singapore

[Darden, Patrick]

Text or it never happened.

--p


-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Glen Kent
Sent: Thursday, August 06, 2015 8:44 AM
To: nanog@nanog.org
Subject: [EXTERNAL]Re: Strange traceroute result to VM in EC2, Singapore

Ooops. The attachment was dropped last time. This time its inline:

When my traceroute works:

[image: Inline image 1]

When it doesnt:

[image: Inline image 2]

Thanks, Glen
On Thu, Aug 6, 2015 at 7:06 PM, Dovid Bender  wrote:

> No trace attached.
>
> On Thu, Aug 6, 2015 at 9:28 AM, Glen Kent  wrote:
>
>> Hi,
>>
>> I have two internet connections and can reach the VM in EC2, 
>> Singapore over either connection.
>>
>> I am doing an experiment for which I traceroute to this VM from the 
>> two different internet connections (to really get an idea of the 
>> number of hops between my local machine and the VM over the 2 
>> different connections)
>>
>> I have attached the output of my two traceroute's.
>>
>> While i am able to reach the exact VM when i am on one internet 
>> connection, i am not able to do the same, when am over the other 
>> internet connection.
>>
>> Both are broadband connections out of the same office premises.
>>
>> Any idea what could be happening?
>>
>> Thanks, Glen
>>
>
>

Re: Strange traceroute result to VM in EC2, Singapore

[Glen Kent]

Ooops. The attachment was dropped last time. This time its inline:

When my traceroute works:

[image: Inline image 1]

When it doesnt:

[image: Inline image 2]

Thanks, Glen
On Thu, Aug 6, 2015 at 7:06 PM, Dovid Bender  wrote:

> No trace attached.
>
> On Thu, Aug 6, 2015 at 9:28 AM, Glen Kent  wrote:
>
>> Hi,
>>
>> I have two internet connections and can reach the VM in EC2, Singapore
>> over
>> either connection.
>>
>> I am doing an experiment for which I traceroute to this VM from the two
>> different internet connections (to really get an idea of the number of
>> hops
>> between my local machine and the VM over the 2 different connections)
>>
>> I have attached the output of my two traceroute's.
>>
>> While i am able to reach the exact VM when i am on one internet
>> connection,
>> i am not able to do the same, when am over the other internet connection.
>>
>> Both are broadband connections out of the same office premises.
>>
>> Any idea what could be happening?
>>
>> Thanks, Glen
>>
>
>

Re: Strange traceroute result to VM in EC2, Singapore

[Dovid Bender]

No trace attached.

On Thu, Aug 6, 2015 at 9:28 AM, Glen Kent  wrote:

> Hi,
>
> I have two internet connections and can reach the VM in EC2, Singapore over
> either connection.
>
> I am doing an experiment for which I traceroute to this VM from the two
> different internet connections (to really get an idea of the number of hops
> between my local machine and the VM over the 2 different connections)
>
> I have attached the output of my two traceroute's.
>
> While i am able to reach the exact VM when i am on one internet connection,
> i am not able to do the same, when am over the other internet connection.
>
> Both are broadband connections out of the same office premises.
>
> Any idea what could be happening?
>
> Thanks, Glen
>

Strange traceroute result to VM in EC2, Singapore

[Glen Kent]

Hi,

I have two internet connections and can reach the VM in EC2, Singapore over
either connection.

I am doing an experiment for which I traceroute to this VM from the two
different internet connections (to really get an idea of the number of hops
between my local machine and the VM over the 2 different connections)

I have attached the output of my two traceroute's.

While i am able to reach the exact VM when i am on one internet connection,
i am not able to do the same, when am over the other internet connection.

Both are broadband connections out of the same office premises.

Any idea what could be happening?

Thanks, Glen

Re: A simple perl script to convert Cisco IOS configuration to HTML with internal links for easier comprehension

[Jason Hellenthal]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Jesse, thats awesome ! thanks for sharing especially when this alligns with 
what I am currently involved with in the network that I am refurbishing with 
some high end cisco equipment. Talk about great timing !

Thank you again.
s
On Aug 6, 2015, at 07:59, Jesse McGraw  wrote:

All,

   (This is me scratching an itch of my own and hoping that it might be useful 
to others on this list.  Apologies if it isn't)

 When trying to comprehend a new or complicated Cisco router configuration an 
old pet-peeve of mine is how needlessly difficult it is to search for a list 
referenced by a command, figure out what it does, then find my way back to the 
original command (by which time I’ve forgotten the details of the list) and 
figure out what it's doing with that list.

So I’ve been working on a small perl script to add links within IOS 
configuration files, e.g. link to an access-list from the interface where it’s 
applied, making it easier to to follow the chain of logic with stuff like route 
maps or nested service policies via clicking links and using the forward and 
back buttons in your browser to go back and forth between command and 
referenced list.

I know there is a lot of stuff I could add in to this (e.g. more VRF-related 
commands, PIX/ASA, Juniper etc).  Let me know if you think of anything new or 
notice something I’ve done wrong , there's plenty of room for improvement and 
expansion to other configuration formats.



Notes:
   Anything referenced (or potentially referenced) by something else is in 
bold.  It makes it very easy to see where ACLs etc. start and end

   There's also an option in there to reformat some numbers that are hard to 
read (e.g. traffic shaping criteria) into more human-readable ones.  Pure fluff.

   Surely this has been done before but I couldn't find anything in a few brief 
moments of searching so here we are.



Files are here: https://github.com/jlmcgraw/networkUtilities

At the very least you'll need iosToHtml.pl, pointers.pl, pointees.pl, and 
human_readable.pl and several CPAN modules (see setup.sh for easy ways to 
install them under Debian-derived Linux. I haven't tested this at all under 
Windows or OS X)

- -Jesse


- -- 
 Jason Hellenthal
 JJH48-ARIN




-BEGIN PGP SIGNATURE-

iQEcBAEBCAAGBQJVw18eAAoJEDLu+wRc4KcIfxcIAKTRy92Uz2QbHOtfW0zaNb2F
J7xWFisDmGd4lhoXO6I09u3JLaQS59v48JXAuyawt0k0mEoQ708rIAN6mKaFKZ0i
OBGGfbVcP+IzCdbSgBlbkzMk3rnqpUGljmAulwGZQpgbfqzHaT8SoXouuoq06vqF
MtsxX0cdbedGCKqORmgJgqvhEFXlcmoOaejHj5wLIsS0yhjZhPyECM2P6Fo3I6jX
Iq8Oc1IgIRncNCuCZrUk7x58x5Dtr1GfJZTDmk+O5ixbtuhbUnLJs4rpmf0H4GeL
Rj0yrPe4EL3G1aAvInBS+dqiqTUMwt9WPssyGYlEnIUSPmR0Loa6y6bx8Fy1tCU=
=ANU6
-END PGP SIGNATURE-

Fellowship application deadline tomorrow! (was: Fwd: [arin-announce] Last Call for ARIN Fellowships in Montreal)

[John Curran]

Folks -

If you are aware of someone who would benefit from attending the upcoming
ARIN & NANOG meetings but requires financial support to do so, consider
promptly bringing the ARIN Fellowship program to their attention.   The 
final
deadline for applications is _tomorrow_ - please see the attached email for
details.

Thanks!
/John

John Curran
President and CEO
ARIN


Begin forwarded message:

From: ARIN mailto:i...@arin.net>>
Subject: [arin-announce] Last Call for ARIN Fellowships in Montreal
Date: August 3, 2015 at 11:01:03 AM EDT
To: mailto:arin-annou...@arin.net>>

Time is running out!  Don’t miss your chance to submit an application for the 
ARIN Meeting Fellowship program and take advantage of this great opportunity to 
join us at ARIN 36 and NANOG 65 in Montreal from 5-9 October 2015. Three to 
five fellowships are available, for each area of the ARIN service region: 
Caribbean, Canada, and the United States.

We encourage you to come and learn more about ARIN services, meet industry 
peers and voice your opinions in policy discussions. Take a few minutes and 
submit your application before the deadline this Friday, 7 August at:

https://www.arin.net/participate/meetings/fellowship.html

Selected Fellows will receive free airfare, hotel, and a stipend. Fellows have 
the option of extending their ARIN fellowship to include participation in NANOG 
65. Please read the selection criteria as it has recently changed to allow 
consideration of applicants who have attended past meetings and demonstrated 
strong participation or engagement with their local community, including past 
ARIN Fellowship recipients.

This program was developed to encourage new participants so please forward this 
information to a colleague in order to help ARIN cultivate new voices.

Please direct any questions you have to i...@arin.net.

Regards,

Communications and Member Services
American Registry for Internet Numbers (ARIN)
___
ARIN-Announce
You are receiving this message because you are subscribed to
the ARIN Announce Mailing List (arin-annou...@arin.net).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-announce
Please contact i...@arin.net if you experience any issues.

A simple perl script to convert Cisco IOS configuration to HTML with internal links for easier comprehension

[Jesse McGraw]

All,

(This is me scratching an itch of my own and hoping that it might 
be useful to others on this list.  Apologies if it isn't)


  When trying to comprehend a new or complicated Cisco router 
configuration an old pet-peeve of mine is how needlessly difficult it is 
to search for a list referenced by a command, figure out what it does, 
then find my way back to the original command (by which time I’ve 
forgotten the details of the list) and figure out what it's doing with 
that list.


So I’ve been working on a small perl script to add links within IOS 
configuration files, e.g. link to an access-list from the interface 
where it’s applied, making it easier to to follow the chain of logic 
with stuff like route maps or nested service policies via clicking links 
and using the forward and back buttons in your browser to go back and 
forth between command and referenced list.


I know there is a lot of stuff I could add in to this (e.g. more 
VRF-related commands, PIX/ASA, Juniper etc).  Let me know if you think 
of anything new or notice something I’ve done wrong , there's plenty of 
room for improvement and expansion to other configuration formats.




Notes:
Anything referenced (or potentially referenced) by something else 
is in bold.  It makes it very easy to see where ACLs etc. start and end


There's also an option in there to reformat some numbers that are 
hard to read (e.g. traffic shaping criteria) into more human-readable 
ones.  Pure fluff.


Surely this has been done before but I couldn't find anything in a 
few brief moments of searching so here we are.




Files are here: https://github.com/jlmcgraw/networkUtilities

At the very least you'll need iosToHtml.pl, pointers.pl, pointees.pl, 
and human_readable.pl and several CPAN modules (see setup.sh for easy 
ways to install them under Debian-derived Linux. I haven't tested this 
at all under Windows or OS X)


-Jesse

RES: RES: Exploits start against flaw that could hamstring huge swaths of

[Leonardo Oliveira Ortiz]

Guys, Red Hat have a release with the patch on CR repository. Should we update 
using the rpm on CR or using the source provide by ISC ?

The release on CR is: 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.2


-Mensagem original-
De: NANOG [mailto:nanog-boun...@nanog.org] Em nome de Randy Bush
Enviada em: terça-feira, 4 de agosto de 2015 19:53
Para: Christopher Morrow
Cc: NANOG; Joe Greco
Assunto: Re: RES: Exploits start against flaw that could hamstring huge swaths 
of

>> Automation just means your mistake goes many more places more 
>> quickly.
> and letting people keep poking at things that computers should be 
> doing is... much worse. people do not have reliability and 
> repeat-ability over time.

i love the devops movement; operators discover that those computers can be 
programmed.  wowzers!

maybe in a decade or two, we will discover mathematics.  nah.

randy

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Job Snijders]

On Thu, Aug 06, 2015 at 11:09:13AM +0100, Tom Hill wrote:
> On 04/08/15 07:29, Peng Xiao (penxiao) wrote:
> > Cisco has open sourced one part of their BGP monitoring system - YABGP
> > And hosted source code on GitHub. https://github.com/smartbgp/yabgp
> > Documentation: http://yabgp.readthedocs.org/en/latest/
> 
> Out of curiosity, why did you write your own project, as opposed to
> using - or potentially contributing to - one of the existing projects?
> (ExaBGP comes to mind, I'm sure there are others).

Because it is fun? :-)

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Tom Hill]

On 04/08/15 07:29, Peng Xiao (penxiao) wrote:
> Cisco has open sourced one part of their BGP monitoring system - YABGP
> And hosted source code on GitHub. https://github.com/smartbgp/yabgp
> Documentation: http://yabgp.readthedocs.org/en/latest/

Out of curiosity, why did you write your own project, as opposed to
using - or potentially contributing to - one of the existing projects?
(ExaBGP comes to mind, I'm sure there are others).

-- 
Tom

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Jahangir Hossain]

Xiao , actually i'm trying this into UNIX and juniper Platform.

Denis , are you confirm that 2015 release doesn't support IPv6 ? This is
because i haven't tried yet in YABGP.



Thanks // Jahangir

On Thu, Aug 6, 2015 at 1:48 PM, Peng Xiao (penxiao) 
wrote:

> Hi Jahangir
>
>
>
> You mean the platform you try to run yabgp on , or the platform you want
> to connect with?
>
> If you want to run yabgp, we recommend you use any Linux/Unix platform, if
> you want to establish BGP session with it, the platform can be any routers
> that support BGP.
>
>
>
> Thanks.
>
>
>
> Peng
>
> *From:* Jahangir Hossain [mailto:jahan...@parween.net]
> *Sent:* 2015年8月6日 15:27
> *To:* Peng Xiao (penxiao)
> *Cc:* nanog@nanog.org
> *Subject:* Re: Yet Another BGP (Border Gateway Protocol) Python
> Implementation
>
>
>
> Hi Xiao ,
>
> This is seems to be interesting . Can i used this in other platform who
> does not support bflow ?
>
>
>
> Thanks // Jahangir
>
>
>
> On Tue, Aug 4, 2015 at 12:29 PM, Peng Xiao (penxiao) 
> wrote:
>
> Hi experts
>
> Cisco has open sourced one part of their BGP monitoring system - YABGP
> And hosted source code on GitHub. https://github.com/smartbgp/yabgp
> Documentation: http://yabgp.readthedocs.org/en/latest/
>
>
>
>
>
>
>

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Jahangir Hossain]

Hi Xiao ,

This is seems to be interesting . Can i used this in other platform who
does not support bflow ?



Thanks // Jahangir

On Tue, Aug 4, 2015 at 12:29 PM, Peng Xiao (penxiao) 
wrote:

> Hi experts
>
> Cisco has open sourced one part of their BGP monitoring system - YABGP
> And hosted source code on GitHub. https://github.com/smartbgp/yabgp
> Documentation: http://yabgp.readthedocs.org/en/latest/
>
>

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Denis Fondras]

> Hi experts
> 
> Cisco has open sourced one part of their BGP monitoring system - YABGP
> And hosted source code on GitHub. https://github.com/smartbgp/yabgp
> Documentation: http://yabgp.readthedocs.org/en/latest/
> 

I don't want to be mean but is it of any use in 2015 to release a tool that
doesn't support IPv6 ?

Denis

RE: Yet Another BGP (Border Gateway Protocol) Python Implementation

[Peng Xiao (penxiao)]

Hi Jahangir

You mean the platform you try to run yabgp on , or the platform you want to 
connect with?
If you want to run yabgp, we recommend you use any Linux/Unix platform, if you 
want to establish BGP session with it, the platform can be any routers that 
support BGP.

Thanks.

Peng
From: Jahangir Hossain [mailto:jahan...@parween.net]
Sent: 2015年8月6日 15:27
To: Peng Xiao (penxiao)
Cc: nanog@nanog.org
Subject: Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

Hi Xiao ,

This is seems to be interesting . Can i used this in other platform who does 
not support bflow ?


Thanks // Jahangir

On Tue, Aug 4, 2015 at 12:29 PM, Peng Xiao (penxiao) 
mailto:penx...@cisco.com>> wrote:
Hi experts

Cisco has open sourced one part of their BGP monitoring system - YABGP
And hosted source code on GitHub. https://github.com/smartbgp/yabgp
Documentation: http://yabgp.readthedocs.org/en/latest/

Re: free Tools to monitor website performance

[Bryan Tong]

Hello,

We have been using Zabbix with great success on 900 hosts. I would
recommend it, however I must agree the learning curve can be pretty steep.
I think of Zabbix more like a piece of networking equipment where it wont
do anything until everything is configured correctly. It is far from plug
and play, but very powerful and flexible.

Thanks

On Thu, Aug 6, 2015 at 12:59 AM, David Hofstee  wrote:

> We use Zabbix for local monitoring. Quite powerful (Nagios crapped out a
> lot on larger setups, although 300 is not large). There is a learning curve
> for Zabbix.
>
> We have a few VPS'es outside our network for DNS reasons. They are
> configured as (pushing) monitoring nodes too. Bye,
>
>
> David Hofstee
>
> Deliverability Management
> MailPlus B.V. Netherlands (ESP)
>
> -Oorspronkelijk bericht-
> Van: NANOG [mailto:nanog-boun...@nanog.org] Namens sathish kumar Ippani
> Verzonden: Thursday, August 6, 2015 4:24 AM
> Aan: nanog@nanog.org
> Onderwerp: free Tools to monitor website performance
>
> Hi All,
>
> Thanks to all for reviewing my topic, may it is slightly off topic.
>
> We have almost 300 URL's (local and web) and we want to monitor few of
> them which are very critical URL's for web access and local access.
>
> I would like to know is there any free tool or software with I can use to
> monitor url performance in terms of response time. Which gives more
> information like how much time it taken to connect the server and time to
> load the page and total response time.
>
> Thanks in advance.
>
>
>
> --
> With Regards,
>
> Sathish Ippani
>



-- 
eSited LLC
(701) 390-9638

RE: free Tools to monitor website performance

[David Hofstee]

We use Zabbix for local monitoring. Quite powerful (Nagios crapped out a lot on 
larger setups, although 300 is not large). There is a learning curve for Zabbix.

We have a few VPS'es outside our network for DNS reasons. They are configured 
as (pushing) monitoring nodes too. Bye,


David Hofstee

Deliverability Management
MailPlus B.V. Netherlands (ESP)

-Oorspronkelijk bericht-
Van: NANOG [mailto:nanog-boun...@nanog.org] Namens sathish kumar Ippani
Verzonden: Thursday, August 6, 2015 4:24 AM
Aan: nanog@nanog.org
Onderwerp: free Tools to monitor website performance

Hi All,

Thanks to all for reviewing my topic, may it is slightly off topic.

We have almost 300 URL's (local and web) and we want to monitor few of them 
which are very critical URL's for web access and local access.

I would like to know is there any free tool or software with I can use to 
monitor url performance in terms of response time. Which gives more information 
like how much time it taken to connect the server and time to load the page and 
total response time.

Thanks in advance.



--
With Regards,

Sathish Ippani