Re: "2M today, 10M with no change in technology"? An informal survey.
On 8/25/07 4:30 PM, "David Conrad" <[EMAIL PROTECTED]> wrote: > - where do you believe existing routing technology will fall down? Well, to get specific, I think that it will be interesting to see what happens when the size of the route table exceeds the stock TCAM on the Cisco Catalyst platform. Before I got to my current employer Cisco sold then 7604s with Sup32s (I hope they weren't more expensive than 6504 chassis because all they did was change the paint). I'm going to hope that Cisco comes out with a Sup upgrade that includes the larger TCAM of the 3BXL without the switch fabric mojo - that's stuff's expensive. The whole thing really makes me wonder about the value of selling the Cat platform as a customer edge router... -- John A. Kilpatrick [EMAIL PROTECTED]Email| http://www.hypergeek.net/ [EMAIL PROTECTED] Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Re: cooling door
On 3/29/08 9:53 PM, "Frank Coluccio" <[EMAIL PROTECTED]> wrote: > There is no LAN equipment on site anymore once you've backhauled your > desktops directly to a central site over optical channels. So are you envisioning ANY sort of aggregation at all? I mean for this to be at all practical you'd have to have some sort of DWDM aggregation point or something, wouldn't you? And if that's the case then haven't you just swapped one kind of equipment for another? -- John A. Kilpatrick [EMAIL PROTECTED]Email| http://www.hypergeek.net/ [EMAIL PROTECTED] Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Hardware capture platforms
We've deployed a bunch taps in our network and now we need a platform on which to capture the data. Our bandwidth is currently pretty low but I've got 8 links to tap, which means I need 16 ports. Has anyone done any research on doing accurate packet capture with commodity hardware? -- John A. Kilpatrick [EMAIL PROTECTED]Email| http://www.hypergeek.net/ [EMAIL PROTECTED] Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Capture problems with Intel quad cards?
Has anyone had problems with using current Intel quad ethernet cards for packet capture? As a proof-of-concept test we bought an Intel PWLA8494GT and hooked it up to some Network Critical taps. There was a very strange issue with corruption of the captured packets. The *only* issue (but it's a big one) is that the source IP on some captured packets is munged. As far as I can tell that's the *only* issue with the packet captures - no other data is corrupted. Oh, and to rule out other issues: 1. Corruption seen both when using network taps and when using a port span/mirror (so it's not the taps). 2. Corruption *not* seen using the on-board broadcom nics of the test host (so it's not the box). So I'm pretty sure we narrowed it down to the card. We tried the card in an indentical host and saw the same problems. I thought it might be a driver issue - I tried both gentoo and FreeBSD (not sure how different the drivers are) just to see if it mattered at all and it didn't. Much googling didn't show this to be a known issue - just wondering if anyone else has seen it? Other recommendations welcome - the next step is, I suppose, a broadcom-based PCI-X card. (I've got some old pizza boxes I'm trying to repurpose as network probes.) Thanks, John -- John A. Kilpatrick j...@hypergeek.netEmail| http://www.hypergeek.net/ john-p...@hypergeek.net Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Re: Fiber cut in SF area
On Thu, 9 Apr 2009, George William Herbert wrote: "The fiber-optic cables were severed shortly before 1:30 a.m. along Monterey Highway north of Blossom Hill Road in south San Jose, police Sgt. Ronnie Lopez said." The fact that it's vandalism is VERY annoying. Sadly it also shows how vulnerable we are. I'm guessing the next Die Hard movie will have the baddies cutting fiber trunks before trying to steal the money? -- John A. Kilpatrick j...@hypergeek.netEmail| http://www.hypergeek.net/ john-p...@hypergeek.net Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Comcast Business contact?
My apologies for the spam, but if there's someone from Comcast Business land who is available off-list please ping me. I've got a VIP at my employer that's having a ton of issues with his Comcast Business service, and we're not making much progress. Thanks, John
Re: Asset management recommendations
Agreed. Current environment is a saltstack/netbox combo that's, shall we say, "in development". On Sat, Aug 24, 2019, at 5:43 AM, Raymond Burkholder wrote: > Expanding further, there are those that use ansible for network management. > But I don't think it does well in scaling out for functionality. I have used > saltstack for network config and server builds, as it becomes the source of > truth for the infrastructure, allowing for consistent upgrades and additions. > Combining with something like netbox for infrastructure source of truth, one > can build to spec, and then use something like rancid as an independent > confirmation of 'build to spec'. > > I've been able to script builds to automatically boot a blank device via > pxeboot, get an operating system and customized modules installed, restarted, > automatically registered to receive the starting configuration, register > against a check_mk/nagios based monitoring system, and for servers, to > automatically create and build containers and their contents. It greatly > simplifies the maintenance and upgrade tasks in to repeatable and > reproducible build solutions. Plus the source of truth configuration files > can be version controlled to provide a history infrastructure adjustments. > > What I like about saltstack and netbox, is that they are both based upon > python, which is a relatively common skillset and a growing ecosystem. > > https://netbox.readthedocs.io/en/latest/ > https://docs.saltstack.com/en/latest/ref/states/ > > > On 2019-08-24 6:05 a.m., J. Hellenthal via NANOG wrote: >> I would have to agree with this too. Unless you are looking at a >> multifaceted approach where you can compare two different sources of >> knowledge then use the config mgmt tools to cover that baseline is pretty >> adequate until >> >> You have client computers and hardware along that level to track. So in that >> instance since everything has an IP these days then phpIPAM or similar can >> do quite the job storing serial numbers, makes, models, descriptions and >> tracking the on and offline status plus plenty more. >> >> https://phpipam.net/documents/screenshots/ >> >> >> -- >> J. Hellenthal >> >> The fact that there's a highway to Hell but only a stairway to Heaven says a >> lot about anticipated traffic volume. >> >>> On Aug 24, 2019, at 03:37, George Herbert wrote: >>> >>> >>> Do you really want asset management tools, or configuration management >>> tools with asset discovery / inventory capability? >>> >>> Juniper supports Chef configuration management pretty extensively, and is >>> widely used for systems management and patch management on Linux. Scales to >>> multisite well. There are tie-ins to be able to export monitoring and >>> alerting tool configurations based on server and network inventories, etc. >>> >>> https://www.juniper.net/documentation/en_US/junos-chef11.10/topics/concept/chef-overview.html >>> >>> There are also Puppet, Ansible, and Saltstack in this product space, >>> slightly less well supported with Juniper as I understand it (haven't >>> looked extensively, someone else may have better info). >>> >>> On Fri, Aug 23, 2019 at 9:10 PM Mehmet Akcin wrote: Hey there I am looking for a tool recommendation for network and server asset management which can scale in multiple sites and integrate with other platforms like nagios, librenms. Being able to do patch management is plus. Mostly linux and juniper shop Any recommendations? -- Mehmet +1-424-298-1903 >>> >>> >>> -- >>> >>> -george william herbert >>> george.herb...@gmail.com
Re: Arista unqualified SFP
On Thu, 18 Aug 2016, Nick Hilliard wrote: It is always better to clarify this sort of thing with the account management team before purchasing, and preferably have it in email or writing. Exactly. Especially if you already have optics vendors that you like. I would bake that into the eval. -- John A. Kilpatrick j...@hypergeek.net | http://www.hypergeek.net/ remember: no obstacles/only challenges
Re: dilemmas
On Thu, 3 Nov 2016, Randy Bush wrote: the users' dilemma: do you buy a mac today, or wait six month hoping they will fix X (for your particular X)? It is more: Do I wait for a Mac desktop that doesn't suck, or do I build a Hackintosh? -- John A. Kilpatrick j...@hypergeek.net | http://www.hypergeek.net/ remember: no obstacles/only challenges
China to HK providers you like?
It's been a while since I've had to look at mainland China connectivity - what is the current situation for point-to-point business circuits from China domestic locations to a datacenter in HK? Does anyone have providers they like? -- John A. Kilpatrick j...@hypergeek.net | http://www.hypergeek.net/ remember: no obstacles/only challenges
Re: PSN (Playstation Network) security team
Which is kinda funny when you think about it. -- John A. Kilpatrick j...@hypergeek.netEmail| http://www.hypergeek.net/ john-p...@hypergeek.net Text pages| ICQ: 19147504 remember: no obstacles/only challenges > On Apr 27, 2017, at 1:51 PM, Tony Wicks wrote: > > snei-noc-ab...@am.sony dot com > > Good luck with that! Sony is uniquely difficult to deal with when it comes to > the arrogance of their "security" people at PSN. > > > > -Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Josh Luthman > Sent: Friday, 28 April 2017 7:27 AM > To: NANOG list > Subject: PSN (Playstation Network) security team > > I'm hoping someone here can reach out to me from the department that deals > with automatically blocking IPs. As far as I can tell they're all in the > same /24. The phone support is completely worthless in this situation (I'm > supposed to change my ISP). > > Josh Luthman > Office: 937-552-2340 > Direct: 937-552-2343 > 1100 Wayne St > Suite 1337 > Troy, OH 45373 >
Re: Pacific Northwest downtime?
Yeah, I saw it too. My traceroute was dying at an IP belonging to Global Crossing and the DNS looked like it was at 11 Great Oaks. I called Comcast to report it, but they just kept saying I should reboot my modem. On Aug 12, 2010, at 11:19 PM, Ashoat Tevosyan wrote: > Never mind, back up! Apparently there was a problem at Comcast. > > Thanks, > Ashoat > > On Thu, Aug 12, 2010 at 11:07 PM, Ashoat Tevosyan > wrote: > >> Hey guys, >> >> Anybody else in the Pacific Northwest notice some sites down? I'm using >> Comcast here at home, and I can't reach anything over at Hurricane Electric. >> I can confirm that HE is reachable from the University of Washington. >> >> Thanks, >> Ashoat >> -- John A. Kilpatrick j...@hypergeek.netEmail| http://www.hypergeek.net/ john-p...@hypergeek.net Text pages| ICQ: 19147504 remember: no obstacles/only challenges
Re: Pacific Northwest downtime?
On Aug 12, 2010, at 11:36 PM, Jeff Walter wrote: > In this case, more that just traffic between us and Comcast was affected, at > least according to a friend of mine who's on Comcast. Yeah, things were wonky for a while. Like the application for programming my Harmony One couldn't contact Logitech's servers. But since my mail server is at he.net that was the big thing I noticed. :) But of course, step one, reboot my modem...*sigh* -- John A. Kilpatrick j...@hypergeek.netEmail| http://www.hypergeek.net/ john-p...@hypergeek.net Text pages| ICQ: 19147504 remember: no obstacles/only challenges