Re: Smokeping targets

2016-01-08 Thread Marco d'Itri 
On Jan 07, Andrew Dampf  wrote:

> Something I found that is helpful once you've gathered a list of targets is
> the following command for generating config to paste:
> 
> traceroute -w 3 [IPaddress] | grep -v "*" | grep -v "traceroute" | sed -e
> 's/(//g' -e 's/)//g' | awk '{ gsub(/\./,"_",$2); print " "$2"\nmenu =
> "$3"\ntitle = "$2" - "$3"\nhost = "$3"\n"}'
> 
> That generates a valid output for configs to ping each hop along the way to
> your destination, which can be super useful. Not all of them allow ICMP but
> a decent amount do.
It is also super stupid, because routers reply to ICMP echo requests 
with a very low priority: this introduces jitter which makes these 
measurements unreliable.
If you are not monitoring a server then you are wasting your time.

(Also, it would be nice to have the owner permission before deciding to
permanently send a lot of ICMPs to a device.)

-- 
ciao,
Marco


signature.asc
Description: PGP signature

Re: Spamhaus BGP feed experiences?

2015-05-18 Thread Marco d'Itri 
On May 17, Mike Lyon mike.l...@gmail.com wrote:

 Any ISPs out there (big or small) ever used the Spamhaus BGP feed to
 prevent against botnet, spam, etc? If so, how has your experience been? Is
 it worthwhile? Has it helped? On / off list responses are appreciated in
 advance.
We use Spamhaus DROP (not the BGP version: our software asks a human to 
review each change).
The benefits are not obvious since we do not have access customers, but 
it will blackhole some networks you obviously do not want to talk to,
and it has not caused any troubles either.

-- 
ciao,
Marco


pgpmTTGBVM_1W.pgp
Description: PGP signature

Re: v6 deagg

2015-02-23 Thread Marco d'Itri 
On Feb 20, Saku Ytti s...@ytti.fi wrote:

 Is deaggregation inherently undesirable? In some RIR LIR will not get new
No. Excessive deaggregation is undesirable, but we lack a method to teach
routers to enforce this subtlety and maybe also a wide agreement on what 
is excessive.

 allocation, just because LIR lacks INET connectivity between their datacenter
 or pop.
 This wasn't issue in IPv4, because you actually could reasonably fill your
 IPv4 allocation and were eligible for another allocation for your
 discontinuous locations.
But at least in the RIPE region this can be easily solved by 
deaggregating /32s out of your /29.

-- 
ciao,
Marco


pgpMElo4U_R7A.pgp
Description: PGP signature