Re: Colocation in New York for a POP
at $JOB-2 we had a couple of racks in 60 Hudson St, which worked well On Thu, Apr 19, 2012 at 10:50 PM, Paul WALL pauldotw...@gmail.com wrote: Stay away from the NYIIX. It goes down every month or two, and its current management is not competent. There are plenty of competitive options, including Equinix and Telx/TIE (which is free or close to it). Drive Slow, Paul Wall On 4/19/12, Abdelkader Chikh Daho achikhd...@iweb.com wrote: Hi everyone, Can some one please tell us what is the best Colo in New york to set up a POP (one cabinet) in order to get bandwidth, peering (NIIX, etc). Best regards, -- Abdelkader Chikh Daho Network Architect iWeb Technologies Email : achikhd...@iweb.com Web : www.iweb.com Tel : 514-286-4242 ext 2309
Re: Anyone have experience with Adconion Direct?
Hi I do. I know their head of Ops (Hal) quite well as I used to work with him at a previous company. They are an advertising delivery network, rather than spammers. I've pinged him on Skype to ask more. thanks Andrew On Thu, Mar 15, 2012 at 2:36 PM, Mark Keymer m...@viviotech.net wrote: I was wondering if anyone has any experience with Adconion Direct? It is the standard we want a server with lots of IP's. And I am thinking he is probably a spammer or what not. However unlike most of the requests we get like this, they look to have the most legit looking profile I have seen. I am thinking they are a company I don't want to host. But I thought I would check with the community here and see what others might know about these guys. Also along the lines of spammers and or similar activities is there a good resource for looking up people/companies that might be not so legit? I know of the ROKSO that spamhaus has but from what I have seen it is hard to even report spammer to them and wasn't sure how active that was getting updated these days. Sincerely, Mark
Re: Overall Netflix bandwidth usage numbers on a network?
Surely this is what Netflow is for. no need to re-invent the wheel. Andrew On Sat, Dec 3, 2011 at 12:47 AM, Jonathan Towne jto...@slic.com wrote: Been lurking for a while and posed a question to a few folks without much response, figured someone here might've done something like this already. So, before I go about building wheels that already exist: I'm interested in doing a bit of a passive survey of bandwidth usage on my network (smallish isp, a few thousand DSL/FTTx customers) to understand the percentage of average/overall traffic generated by Netflix streaming. What I have available is a few gigabit transport switches providing me with mirror ports, a juniper MX series router running 10.4 code, plenty of BSD machines and libpcap-fu. What I'm looking for is either a timed-average or moments-glance number of the traffic. For instance, on an interface moving 150mbit/sec total, 50mbit/sec of it is attributed to Netflix right now. I'm pretty handy with RRDtool, so that isn't out of the question, either. I've really only spent dinnertime considering this, but have come up with two potential approaches so far, and haven't actively investigated either of them: * firewall terms and counters on the MX router + snmp * writing a quick libpcap application to filter and count in a completely out-of-band way on one of my monitoring hosts Some challenges I can see: * Nailing down the streaming source for Netflix, that is, IP ranges etc. * Making assumptions about CDN source IPs that could be used for something else, and further, should I care? Happy to hear thoughts about this, helpful or not! I know Netflix themselves have probably done plenty of studies like this, but pretty likely not limited to my customer base. Not aiming for anything creepy or crazy, just some vague understanding of what's going on, and the ability to do some trending for future planning. -- Jonathan Towne
Re: Logs Bank
To answer your question. yes However, with almost everything I can think of, there will be an element of development required in order to achieve the results you're after. - at a previous work place a few years ago we fed all event logs into hadoop, from where we produced reports, initially just into excel files, and then later created a webapp which produced near realtime stats/reports/graphs. I've not looked recently at LogStash, or 8pussy, but primary concern would be how well they deal with huge log volumes, how they scale when one server is not big enough to hold all the logs any more, how they deal with many users searching at the same time etc. If you want to actually just get on with crunching logs, and drawing graphs in a timely fashion, Splunk is proven, and works well up to big scale (we were feeding almost 1TB/day of logs into it at my last company)... Splunk is not cheap, but when considering the cost of development + suppport if you went down the route of task of rolling something equivalent in capabilities, its not bad value. thanks Andrew On Tue, Nov 8, 2011 at 7:59 PM, joshua.kl...@gmail.com wrote: Hi, If I may ask, is there any OSS that can serve as a log bank or log server, where it aggregate logs from different sources , and the logs can be accessed using the web from any location on the network and can do graphical presentations based on.the frequency or content os the logs. Thank you Joshua -- Sent from my Nokia N9
Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)
Never put down to malice which can be more easily explained by stupidity.. or in this case failure. RIM explained the problem earlier.. The messaging and browsing delays being experienced by BlackBerry users in Europe, the Middle East, Africa, India, Brazil, Chile and Argentina were caused by a core switch failure within RIM's infrastructure. Although the system is designed to failover to a back-up switch, the failover did not function as previously tested. As a result, a large backlog of data was generated and we are now working to clear that backlog and restore normal service as quickly as possible. We apologise for any inconvenience and we will continue to keep you informed. This appears to have been a result of a change on monday The problems began at about 11am on Monday. The Guardian understands that RIM was attempting a software upgrade on its database but suffered corruption problems, and that attempts to switch back to an older version led to a collapse http://www.guardian.co.uk/technology/2011/oct/12/blackberry-outage-executive-apologies?newsfeed=true thanks andrew On Wed, Oct 12, 2011 at 3:47 PM, andrew.wallace andrew.wall...@rocketmail.com wrote: Guys the outage has moved to U.S and Canada, I think we need to look at this perhaps being sabotage. http://news.cnet.com/8301-30686_3-20119163-266/blackberry-service-issues-spread-to-u.s-and-canada/ Andrew From: Frank Bulk frnk...@iname.com To: outa...@outages.org Sent: Tuesday, October 11, 2011 7:32 PM Subject: Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.) And continues: “RIM'S SERVICE OUTAGE CONTINUES INTO DAY 2” http://www.channelstv.com/global/news_details.php?nid=29652cat=Politics Frank From:andrew.wallace [mailto:andrew.wall...@rocketmail.com] Sent: Monday, October 10, 2011 2:52 PM To: frnk...@iname.com Cc: outa...@outages.org Subject: Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.) RIM shares down as BlackBerry outage continues http://www.marketwatch.com/story/rim-shares-down-as-blackberry-outage-continues-2011-10-10 Andrew From:Frank Bulk frnk...@iname.com To: outa...@outages.org Sent: Monday, October 10, 2011 2:47 PM Subject: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.) http://english.ahram.org.eg/NewsContent/3/12/23792/Business/Economy/Blackber ry-services-down-worldwide,-Egypt-affected.aspx FYI ___ Outages mailing list outa...@outages.org https://puck.nether.net/mailman/listinfo/outages ___ Outages mailing list outa...@outages.org https://puck.nether.net/mailman/listinfo/outages
Re: anyone from netnames / ascio on list?
It was resolved last night. http://www.guardian.co.uk/technology/2011/sep/05/dns-hackers-telegraph-interview Andrew On Mon, Sep 5, 2011 at 7:15 AM, Andrew Kirch trel...@trelane.net wrote: On 9/4/2011 5:34 PM, Andrew Mulholland wrote: I'm not seeing the problem here? Registrant: Gateway, Inc. (GATEW95532) 7565 Irvine Center Drive Irvine, CA, 92618-2930 US Domain name: acer.com Technical contact: Administrator, Domain (DA73355) NetNames Hostmaster 3rd Floor Prospero House 241 Borough High Street Borough, London, SE1 1GA GB corporate-servi...@netnames.com +44.2070159370 Fax: +44.2070159375 Administrative contact: Wagner, Michael (MW47730) Gateway, Inc. 7565 Irvine Center Drive Irvine, CA, 92618-2930 US hostad...@gateway.com +1.8008462042 Fax: +1.00 Record created: 2010-10-04 17:54:28 Record last updated: 2011-09-04 22:24:04 Record expires: 2019-05-17 01:00:00 Domain servers in listed order: ns1.acer.com (NS1ACERC38319) ns2.acer.com (NS2ACERC59089) ns3.acer.com (NS3ACERC70649) ns4.acer.com (NS4ACERC28541) ns5.acer.com (NS5ACERC49101) ns6.acer.com (NS6ACERC86343)
anyone from netnames / ascio on list?
Hi Seems Netnames / Ascio have been compromised, resulting in DNS servers for a number of their customers (telegraph.co.uk, acer.com, betfair.com , theregister.co.uk etc) being changed, and the sites being redirected to an hacked page. list of domains affected here: http://zone-h.org/archive/notifier=turkguvenligi.info Seems there's no 24/7 contact for them.. e.g. Domain Name: ACER.COM Registrar: ASCIO TECHNOLOGIES, INC. Whois Server: whois.ascio.com Referral URL: http://www.ascio.com Name Server: NS1.YUMURTAKABUGU.COM Name Server: NS2.YUMURTAKABUGU.COM Status: ok Updated Date: 04-sep-2011 Creation Date: 07-sep-1994 Expiration Date: 17-may-2019 If anyone on list works for them, please raise the alarm internally, and/or start responding to your customers! thanks Andrew
Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.
On Wed, May 18, 2011 at 9:33 PM, Christopher Morrow morrowc.li...@gmail.com wrote: no no no.. it's simply, since the OP posited a math solution, md5. ship the size of file + hash, compute file on the other side. All files can be moved anywhere regardless of the size of the file in a single packet. only problem is that of hash collision then.
Re: wikileaks unreachable
They twittered earlier claiming ddos. http://twitter.com/#!/wikileaks/status/8920530488926208 We are currently under a mass distributed denial of service attack. horse firmly bolted though, The Guardian, NYT etc all have copies apparently. thanks Andrew On Sun, Nov 28, 2010 at 9:34 PM, Randy Bush ra...@psg.com wrote: anyone know why https://www.wikileaks.org/ is not reachable? nations state level censors trying to close the barn door after the horse has left? randy
Re: Finding content in your job title
On Wed, Mar 31, 2010 at 3:14 AM, Steve Bertrand st...@ibctech.ca wrote: Hi all, This is perhaps a rather silly question, but one that I'd like to have answered. I'm young in the game, and over the years I've imagined numerous job titles that should go on my business card. They went from cool, to high-priority, to plain unimaginable. My approach is not to put job title on the business cards. There's no need. :)
Re: Cogent input
At $JOB-1 we used Cogent. Lots of horror stories had been heard about them. We didn't have such problems. Had nx1Gig from them. On the few occasions where we had some slight issues, I was happy to be able to get through to some one useful on the phone quickly, and not play pass the parcel with call centre operatives. and at least in the quantities we were buying they were significantly better value than others, which was the primary reason we went with them. andrew On Thu, Jun 11, 2009 at 2:55 PM, Paul Stewartpstew...@nexicomgroup.net wrote: Our experience with them was at least one major (longer than an hour) outages PER MONTH and many of those times they were black holing our routes in their network which was the most damaging aspect. The outages were one thing but when our routes still somehow managed to get advertised in their network (even though our BGP session was down) that really created issues. I have heard from some nearby folks who still have service that it's gotten better, but we are also in the regional offering when it comes to IP Transit and have sold connections to many former Cogent customers who were fed up and left. I have found with Cogent that you will get a LOT of varying opinions on them - there are several other players (at least in our market) that are priced very similar now and have a better history behind them. The specific de-peering issues never effected us much due to enough diversity in our upstreams and a fair amount of direct/public peering... Thanks, Paul -Original Message- From: Justin Shore [mailto:jus...@justinshore.com] Sent: Thursday, June 11, 2009 9:47 AM To: NANOG Subject: Cogent input I'm in search of some information about Cogent, it's past, present and future. I've heard bits and pieces about Cogent's past over the years but by no means have I actively been keeping up. I'm aware of some (regular?) depeering issues. The NANOG archives have given me some additional insight into that (recurring?) problem. The reasoning behind the depeering events is a bit fuzzy though. I would be interested in people's opinion on whether or not they should be consider for upstream service based on this particular issue. Are there any reasonable mitigation measures available to Cogent downstreams if (when?) Cogent were to be depeered again? My understanding is that at least on previous depeering occasion, the depeering partner simply null-routed all prefixes being received via Cogent, creating a blackhole essentially. I also recall reading that this meant that prefixes being advertised and received by the depeering partner from other peers would still end up in the blackhole. The only solution I would see to this problem would be to shut down the BGP session with Cogent and rely on a 2nd upstream. Are there any other possible steps for mitigation in a depeering event? I also know that their bandwidth is extremely cheap. This of course creates an issue for technical folks when trying to justify other upstream options that cost significantly more but also don't have a damaging history of getting depeered. Does Cogent still have an issue with depeering? Are there any reasonable mitigation measures or should a downstream customer do any thing in particular to ready themselves for a depeering event? Does their low cost outweigh the risks? What are the specific risks? Thanks Justin The information transmitted is intended only for the person or entity to which it is addressed and contains confidential and/or privileged material. If you received this in error, please contact the sender immediately and then destroy this transmission, including all attachments, without copying, distributing or disclosing same. Thank you.
Re: Recommendation of Tools
On Tue, Dec 2, 2008 at 10:47 PM, Lee, Steven (NSG Malaysia) [EMAIL PROTECTED] wrote: Hi all, do you have any recommended tools that can measure latency/delay hop by hop basis? Preferable the tools can measure the running (live) traffic. mtr ? - http://www.bitwizard.nl/mtr/ its an ncurses app.. output like to: HostLoss% Snt Last Avg Best Wrst StDev 1. 89.202.212.1240.0% 70.4 0.5 0.4 0.6 0.0 2. xe-7-1-0-0.ams-koo-score-1-re0.i 0.0% 70.3 2.9 0.2 18.9 7.0 3. po1.ccr01.ams03.atlas.cogentco.c 0.0% 61.3 3.8 1.3 16.0 6.0 4. te2-4.3490.ccr01.ams03.atlas.cog 0.0% 61.1 1.1 1.1 1.2 0.0 5. te2-3.mpd02.lon01.atlas.cogentco 0.0% 68.0 9.9 7.9 19.6 4.7 6. te9-3.ccr02.jfk02.atlas.cogentco 0.0% 6 91.9 91.9 91.8 91.9 0.0 7. te8-3.ccr01.dca01.atlas.cogentco 0.0% 6 92.0 95.0 91.7 111.2 7.9 8. te9-1.ccr02.dca01.atlas.cogentco 0.0% 6 92.1 92.2 92.1 92.4 0.1 9. vl3896.na32.b001806-1.dca01.atla 0.0% 6 92.3 93.1 92.3 94.1 0.7 10. 38.104.30.102 0.0% 6 92.0 92.0 92.0 92.1 0.1 11. www.joost.com 0.0% 6 92.0 91.9 91.8 92.0 0.1 thanks Andrew Regards, Steven Lee
Re: 3845 memory
On Thu, Oct 16, 2008 at 10:00 PM, Alan Hetzel [EMAIL PROTECTED] wrote: How many (if any) full BGP feeds should a 3845 with 256M memory normally be expected to take? Less than one? :)
Re: Sprint/Cogent Peering Issue?
On Fri, Sep 19, 2008 at 06:02:37AM -0400, Marshall Eubanks wrote: No apparent problems from Cogent in Northern Virginia : Fine from Cogent in DC. Not so fine from Cogent in the Netherlands. traceroute to ops1.scc.rnmd.net (208.91.188.136), 64 hops max, 40 byte packets 1 38.105.91.2 (38.105.91.2) [AS174] 0 ms 0 ms 0 ms 2 gi0-1.na32.b001806-1.dca01.atlas.cogentco.com (38.104.30.101) [AS174] 1 ms 1 ms 2 ms 3 te9-3.3596.ccr02.dca01.atlas.cogentco.com (38.20.37.209) [AS174] 0 ms 0 ms 0 ms 4 vl3493.mpd01.dca02.atlas.cogentco.com (154.54.7.230) [AS174] 1 ms te4-1.mpd01.dca02.atlas.cogentco.com (154.54.2.182) [AS174] 25 ms 94 ms 5 vl3496.mpd01.iad01.atlas.cogentco.com (154.54.5.46) [AS174] 1 ms te1-2.ccr02.iad01.atlas.cogentco.com (154.54.7.158) [AS174] 1 ms te2-2.ccr02.iad01.atlas.cogentco.com (154.54.7.162) [AS174] 1 ms 6 gi9-0-0.core01.iad01.atlas.cogentco.com (154.54.3.221) [AS174] 1 ms gi0-0-0.core01.iad01.atlas.cogentco.com (154.54.3.225) [AS174] 1 ms 1 ms 7 sprint.iad01.atlas.cogentco.com (154.54.13.62) [AS174] 1 ms 1 ms 1 ms 8 sl-crs2-rly-0-1-3-0.sprintlink.net (144.232.20.188) [AS1239] 3 ms 4 ms 3 ms 9 sl-crs2-sj-0-0-0-2.sprintlink.net (144.232.8.145) [AS1239] 70 ms 71 ms 70 ms 10 sl-st1-sc-1-1.sprintlink.net (144.232.20.197) [AS1239] 71 ms 71 ms 71 ms 11 sl-rhyth2-158722-0.sprintlink.net (144.228.111.26) [AS1239] 71 ms 71 ms 71 ms 12 208.91.188.68 (208.91.188.68) [NONE] 71 ms 71 ms 71 ms 13 ops1.scc.rnmd.net (208.91.188.136) [NONE] 71 ms 71 ms 71 ms traceroute to ops1.scc.rnmd.net (208.91.188.136), 30 hops max, 40 byte packets 1 lid-br1-g0-2-10.ops.theveniceproject.com (89.251.0.1) [AS42072] 0.428 ms 0.373 ms 0.368 ms 2 gi4-10.ccr01.ams05.atlas.cogentco.com (149.6.128.125) [AS174] 1.474 ms 1.415 ms 1.420 ms 3 te3-4.ccr01.ams03.atlas.cogentco.com (130.117.0.85) [AS174] 1.668 ms 1.734 ms 1.617 ms 4 gi2-0-0.core01.ams03.atlas.cogentco.com (130.117.0.33) [AS174] 1.573 ms 1.620 ms gi10-0-0.core01.ams03.atlas.cogentco.com (130.117.0.237) [AS174] 1.618 ms 5 sprint.ams03.atlas.cogentco.com (130.117.14.122) [AS174] 1.606 ms 1.617 ms 1.569 ms 6 sl-bb21-ams-15-0-0.sprintlink.net (217.149.32.34) [AS1239] 1.673 ms 1.721 ms 1.571 ms 7 sl-bb23-lon-4-0.sprintlink.net (213.206.129.143) [AS1239] 9.562 ms 9.500 ms 9.456 ms 8 sl-bb21-lon-13-0.sprintlink.net (213.206.128.55) [AS1239] 9.660 ms 9.628 ms 9.601 ms 9 * * * 10 * * * HTH Andrew On Sep 19, 2008, at 4:27 AM, Craig Holland wrote: Hi, We are seeing traffic getting dropped between our Cogent and Sprint connect DC's. One of them is getting shutdown, so we just have a Cogent link there :| Anyone seeing anything similar? From: 91.102.40.18 traceroute to ops1.scc.rnmd.net (208.91.188.136), 30 hops max, 38 byte packets 1 v1-core-sw1 (91.102.40.5) 0.471 ms 0.422 ms 0.431 ms 2 ge-0-1-0-pat2 (91.102.40.146) 0.376 ms 0.354 ms 0.335 ms 3 fe-1-3-1-501-pat1 (91.102.40.208) 0.376 ms 0.344 ms 0.407 ms 4 vl324.mpd01.lon01.atlas.cogentco.com (149.6.147.217) 0.745 ms 0.744 ms 0.740 ms 5 te3-1.mpd02.lon01.atlas.cogentco.com (130.117.2.26) 0.717 ms 39.037 ms te1-8.ccr01.lon01.atlas.cogentco.com (130.117.3.226) 0.565 ms 6 gi6-0-0.core01.lon01.atlas.cogentco.com (130.117.1.73) 0.592 ms 0.450 ms 0.483 ms 7 213.206.131.29 (213.206.131.29) 0.581 ms 0.503 ms 0.483 ms 8 sl-bb21-lon-3-0.sprintlink.net (213.206.129.152) 1.078 ms 0.905 ms 0.934 ms 9 * From 208.91.188.138 traceroute to ops2.lnc.rnmd.net (91.102.40.18), 30 hops max, 38 byte packets 1 v1-core-sw1 (208.91.188.130) 0.600 ms 0.456 ms 2.105 ms 2 f0-0-4-0-pat2 (207.0.21.114) 0.416 ms 0.466 ms 0.486 ms 3 sl-st1-sc-2-6.sprintlink.net (144.228.111.25) 0.455 ms 0.224 ms 0.236 ms 4 sl-crs2-sj-0-1-0-3.sprintlink.net (144.232.20.196) 1.482 ms 1.477 ms 1.232 ms 5 sl-st20-sj-12-0-0.sprintlink.net (144.232.20.63) 2.482 ms 2.472 ms 2.485 ms 6 po5-3.core01.sjc03.atlas.cogentco.com (154.54.13.49) 2.732 ms 2.472 ms 2.485 ms 7 te3-1.mpd01.sjc03.atlas.cogentco.com (154.54.6.85) 2.705 ms 2.723 ms 2.735 ms 8 vl3493.ccr02.sjc01.atlas.cogentco.com (154.54.6.109) 3.231 ms vl3492.mpd01.sjc01.atlas.cogentco.com (154.54.6.105) 3.227 ms vl3491.ccr02.sjc01.atlas.cogentco.com (154.54.6.101) 2.726 ms 9 te9-3.mpd01.sfo01.atlas.cogentco.com (154.54.2.53) 3.968 ms 3.722 ms te8-3.ccr02.sfo01.atlas.cogentco.com (154.54.2.137) 3.988 ms 10 te9-2.ccr02.mci01.atlas.cogentco.com (154.54.24.118) 50.943 ms te7-4.mpd01.mci01.atlas.cogentco.com (154.54.24.106) 50.944 ms 50.720 ms 11 te9-3.ccr02.ord01.atlas.cogentco.com (154.54.25.78) 50.669 ms 63.423 ms te9-3.mpd01.ord01.atlas.cogentco.com (154.54.25.82) 51.206 ms 12 te2-1.ccr02.bos01.atlas.cogentco.com (154.54.7.170) 78.172 ms te3-3.mpd01.bos01.atlas.cogentco.com (154.54.7.82) 100.666 ms te2-1.ccr02.bos01.atlas.cogentco.com (154.54.7.170) 78.176 ms 13 * * * Thanks, craig
Re: Need Infiniband card recommendation
On Fri, May 30, 2008 at 09:24:28AM -0700, Jobe Bittman wrote: Is anyone using Infiniband cards under linux? I'm trying to find a supported card other than the Cisco one. Whats wrong with the cisco ones? We're using their DDR ones here under Ubuntu 7.10 and haven't experienced any issues. They appear to be just 'Mellanox Technologies MT25208 InfiniHost III Ex' though.. best wishes
