Re: "2M today, 10M with no change in technology"? An informal survey.

2007-08-26 Thread John A. Kilpatrick

On 8/25/07 4:30 PM, "David Conrad" <[EMAIL PROTECTED]> wrote:

> - where do you believe existing routing technology will fall down?

Well, to get specific, I think that it will be interesting to see what
happens when the size of the route table exceeds the stock TCAM on the Cisco
Catalyst platform.  Before I got to my current employer Cisco sold then
7604s with Sup32s (I hope they weren't more expensive than 6504 chassis
because all they did was change the paint).  I'm going to hope that Cisco
comes out with a Sup upgrade that includes the larger TCAM of the 3BXL
without the switch fabric mojo - that's stuff's expensive.  The whole thing
really makes me wonder about the value of selling the Cat platform as a
customer edge router...


--  
    John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges




Re: cooling door

2008-03-29 Thread John A. Kilpatrick

On 3/29/08 9:53 PM, "Frank Coluccio" <[EMAIL PROTECTED]> wrote:

> There is no LAN equipment on site anymore once you've backhauled your
> desktops directly to a central site over optical channels.

So are you envisioning ANY sort of aggregation at all?  I mean for this to
be at all practical you'd have to have some sort of DWDM aggregation point
or something, wouldn't you?  And if that's the case then haven't you just
swapped one kind of equipment for another?
  
--  
    John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges




Hardware capture platforms

2008-07-29 Thread John A. Kilpatrick


We've deployed a bunch taps in our network and now we need a platform on 
which to capture the data.  Our bandwidth is currently pretty low but 
I've got 8 links to tap, which means I need 16 ports.  Has anyone done any 
research on doing accurate packet capture with commodity hardware?



--
       John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
 remember:  no obstacles/only challenges





Capture problems with Intel quad cards?

2009-02-15 Thread John A. Kilpatrick


Has anyone had problems with using current Intel quad ethernet cards for 
packet capture?  As a proof-of-concept test we bought an Intel PWLA8494GT 
and hooked it up to some Network Critical taps.  There was a very strange 
issue with corruption of the captured packets.  The *only* issue (but it's 
a big one) is that the source IP on some captured packets is munged.  As 
far as I can tell that's the *only* issue with the packet captures - no 
other data is corrupted.


Oh, and to rule out other issues:

1.  Corruption seen both when using network taps and when using a port
span/mirror (so it's not the taps).
2.  Corruption *not* seen using the on-board broadcom nics of the test
host (so it's not the box).

So I'm pretty sure we narrowed it down to the card.  We tried the card in
an indentical host and saw the same problems.

I thought it might be a driver issue - I tried both gentoo and FreeBSD 
(not sure how different the drivers are) just to see if it mattered at all 
and it didn't.  Much googling didn't show this to be a known issue - just 
wondering if anyone else has seen it?  Other recommendations welcome - the 
next step is, I suppose, a broadcom-based PCI-X card.  (I've got some old 
pizza boxes I'm trying to repurpose as network probes.)


Thanks,
John

--
   John A. Kilpatrick
j...@hypergeek.netEmail| http://www.hypergeek.net/
john-p...@hypergeek.net  Text pages|  ICQ: 19147504
 remember:  no obstacles/only challenges





Re: Fiber cut in SF area

2009-04-09 Thread John A. Kilpatrick

On Thu, 9 Apr 2009, George William Herbert wrote:


"The fiber-optic cables were severed shortly before 1:30 a.m. along Monterey
Highway north of Blossom Hill Road in south San Jose, police Sgt. Ronnie Lopez
said."


The fact that it's vandalism is VERY annoying. Sadly it also shows how 
vulnerable we are.  I'm guessing the next Die Hard movie will have the 
baddies cutting fiber trunks before trying to steal the money?


--
           John A. Kilpatrick
j...@hypergeek.netEmail| http://www.hypergeek.net/
john-p...@hypergeek.net  Text pages|  ICQ: 19147504
 remember:  no obstacles/only challenges





Comcast Business contact?

2020-08-04 Thread John A. Kilpatrick

My apologies for the spam, but if there's someone from Comcast Business land 
who is available off-list please ping me.  I've got a VIP at my employer that's 
having a ton of issues with his Comcast Business service, and we're not making 
much progress.

Thanks,
John  

Re: Asset management recommendations

2019-08-24 Thread John A. Kilpatrick
Agreed. Current environment is a saltstack/netbox combo that's, shall we say, 
"in development".

On Sat, Aug 24, 2019, at 5:43 AM, Raymond Burkholder wrote:
> Expanding further, there are those that use ansible for network management. 
> But I don't think it does well in scaling out for functionality. I have used 
> saltstack for network config and server builds, as it becomes the source of 
> truth for the infrastructure, allowing for consistent upgrades and additions. 
> Combining with something like netbox for infrastructure source of truth, one 
> can build to spec, and then use something like rancid as an independent 
> confirmation of 'build to spec'.
> 
>  I've been able to script builds to automatically boot a blank device via 
> pxeboot, get an operating system and customized modules installed, restarted, 
> automatically registered to receive the starting configuration, register 
> against a check_mk/nagios based monitoring system, and for servers, to 
> automatically create and build containers and their contents. It greatly 
> simplifies the maintenance and upgrade tasks in to repeatable and 
> reproducible build solutions. Plus the source of truth configuration files 
> can be version controlled to provide a history infrastructure adjustments.
> 
>  What I like about saltstack and netbox, is that they are both based upon 
> python, which is a relatively common skillset and a growing ecosystem.
> 
> https://netbox.readthedocs.io/en/latest/
> https://docs.saltstack.com/en/latest/ref/states/
> 
> 
> On 2019-08-24 6:05 a.m., J. Hellenthal via NANOG wrote:
>> I would have to agree with this too. Unless you are looking at a 
>> multifaceted approach where you can compare two different sources of 
>> knowledge then use the config mgmt tools to cover that baseline is pretty 
>> adequate until 
>> 
>> You have client computers and hardware along that level to track. So in that 
>> instance since everything has an IP these days then phpIPAM or similar can 
>> do quite the job storing serial numbers, makes, models, descriptions and 
>> tracking the on and offline status plus plenty more.
>> 
>> https://phpipam.net/documents/screenshots/
>> 
>> 
>> -- 
>>  J. Hellenthal
>> 
>> The fact that there's a highway to Hell but only a stairway to Heaven says a 
>> lot about anticipated traffic volume.
>> 
>>> On Aug 24, 2019, at 03:37, George Herbert  wrote:
>>> 
>>> 
>>> Do you really want asset management tools, or configuration management 
>>> tools with asset discovery / inventory capability? 
>>> 
>>> Juniper supports Chef configuration management pretty extensively, and is 
>>> widely used for systems management and patch management on Linux. Scales to 
>>> multisite well. There are tie-ins to be able to export monitoring and 
>>> alerting tool configurations based on server and network inventories, etc.
>>> 
>>> https://www.juniper.net/documentation/en_US/junos-chef11.10/topics/concept/chef-overview.html
>>> 
>>> There are also Puppet, Ansible, and Saltstack in this product space, 
>>> slightly less well supported with Juniper as I understand it (haven't 
>>> looked extensively, someone else may have better info).
>>> 
>>> On Fri, Aug 23, 2019 at 9:10 PM Mehmet Akcin  wrote:
 Hey there
 
 I am looking for a tool recommendation for network and server asset 
 management which can scale in multiple sites and integrate with other 
 platforms like nagios, librenms. Being able to do patch management is 
 plus. Mostly linux and juniper shop
 
 Any recommendations?
 
 
 --
 
 Mehmet
  +1-424-298-1903
>>> 
>>> 
>>> --
>>> 
>>> -george william herbert
>>> george.herb...@gmail.com


Re: Arista unqualified SFP

2016-08-20 Thread John A. Kilpatrick

On Thu, 18 Aug 2016, Nick Hilliard wrote:


It is always better to clarify this sort of thing with the account
management team before purchasing, and preferably have it in email or
writing.


Exactly.  Especially if you already have optics vendors that you like. 
I would bake that into the eval.


--
   John A. Kilpatrick
j...@hypergeek.net | http://www.hypergeek.net/
 remember:  no obstacles/only challenges




Re: dilemmas

2016-11-08 Thread John A. Kilpatrick

On Thu, 3 Nov 2016, Randy Bush wrote:


the users' dilemma: do you buy a mac today, or wait six month hoping
they will fix X (for your particular X)?


It is more: Do I wait for a Mac desktop that doesn't suck, or do I build 
a Hackintosh?


--
       John A. Kilpatrick
j...@hypergeek.net | http://www.hypergeek.net/
 remember:  no obstacles/only challenges




China to HK providers you like?

2016-11-18 Thread John A. Kilpatrick


It's been a while since I've had to look at mainland China connectivity - 
what is the current situation for point-to-point business circuits from 
China domestic locations to a datacenter in HK?  Does anyone have 
providers they like?



--
       John A. Kilpatrick
j...@hypergeek.net | http://www.hypergeek.net/
 remember:  no obstacles/only challenges




Re: PSN (Playstation Network) security team

2017-04-27 Thread John A. Kilpatrick
Which is kinda funny when you think about it. 

--  
   John A. Kilpatrick
j...@hypergeek.netEmail| http://www.hypergeek.net/
john-p...@hypergeek.net  Text pages|  ICQ: 19147504
 remember:  no obstacles/only challenges

> On Apr 27, 2017, at 1:51 PM, Tony Wicks  wrote:
> 
> snei-noc-ab...@am.sony dot com
> 
> Good luck with that! Sony is uniquely difficult to deal with when it comes to 
> the arrogance of their "security" people at PSN.
> 
> 
> 
> -Original Message-
> From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Josh Luthman
> Sent: Friday, 28 April 2017 7:27 AM
> To: NANOG list 
> Subject: PSN (Playstation Network) security team
> 
> I'm hoping someone here can reach out to me from the department that deals 
> with automatically blocking IPs.  As far as I can tell they're all in the 
> same /24.  The phone support is completely worthless in this situation (I'm 
> supposed to change my ISP).
> 
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
> 


Re: Pacific Northwest downtime?

2010-08-12 Thread John A. Kilpatrick

Yeah, I saw it too.  My traceroute was dying at an IP belonging to Global 
Crossing and the DNS looked like it was at 11 Great Oaks.  I called Comcast to 
report it, but they just kept saying I should reboot my modem.

On Aug 12, 2010, at 11:19 PM, Ashoat Tevosyan wrote:

> Never mind, back up! Apparently there was a problem at Comcast.
> 
> Thanks,
> Ashoat
> 
> On Thu, Aug 12, 2010 at 11:07 PM, Ashoat Tevosyan
> wrote:
> 
>> Hey guys,
>> 
>> Anybody else in the Pacific Northwest notice some sites down? I'm using
>> Comcast here at home, and I can't reach anything over at Hurricane Electric.
>> I can confirm that HE is reachable from the University of Washington.
>> 
>> Thanks,
>> Ashoat
>> 

--  
John A. Kilpatrick
j...@hypergeek.netEmail| http://www.hypergeek.net/
john-p...@hypergeek.net  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges




Re: Pacific Northwest downtime?

2010-08-12 Thread John A. Kilpatrick

On Aug 12, 2010, at 11:36 PM, Jeff Walter wrote:

> In this case, more that just traffic between us and Comcast was affected, at 
> least according to a friend of mine who's on Comcast.

Yeah, things were wonky for a while.  Like the application for programming my 
Harmony One couldn't contact Logitech's servers.  But since my mail server is 
at he.net that was the big thing I noticed. :)

But of course, step one, reboot my modem...*sigh*

--  
            John A. Kilpatrick
j...@hypergeek.netEmail| http://www.hypergeek.net/
john-p...@hypergeek.net  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges