RE: TCP/UDP port for CHAP [7:74480]

2003-08-30 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port. CHAP is handled in the PPP protocol between the client and the router. The router may use some other type of authentication (RADIUS, TACACS+, etc) to authenticate the user to some outside security server, but the CHAP communications is carried

RE: TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port. CHAP is handled in the PPP protocol between the client and the router. The router may use some other type of authentication (RADIUS, TACACS+, etc) to authenticate the user to some outside security server, but the CHAP communications is carried

RE: TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread [EMAIL PROTECTED]
neg IP) and that is where you want to put an incoming access-list on. Martijn -Oorspronkelijk bericht- Van: Thomas N [mailto:[EMAIL PROTECTED] Verzonden: vrijdag 29 augustus 2003 11:31 Aan: [EMAIL PROTECTED] Onderwerp: TCP/UDP port for CHAP [7:74480] I got SOHO sites with PPPoE

TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread Thomas N
I got SOHO sites with PPPoE connection to the Internet. They use CHAP for authentication. I would like to setup an ACL to filter out traffic on the outside interface. I am wondering what TCP/UDP port CHAP protocol use? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form

RE: tcp [7:73518]

2003-08-14 Thread Reimer, Fred
A "window" is not a thing that gets sent in a TCP session. You don't send "windows." A window is the size of the TCP receive buffer. A receiver can send an ACK before its receive buffer is full. Perhaps you are thinking of a "segment" in Cisco's term

Re: tcp [7:73518]

2003-08-14 Thread [EMAIL PROTECTED]
On Tuesday, August 5, 2003, at 10:14 AM, Howard C. Berkowitz wrote: > > >> 2.Can receiver send ack before whole window comes in? > > Not for the window it's receiving, but for a previous window. > Unless you're Microsoft. http://grotto11.com/blog/slash.html?+1039831658 This isn't to make this a

RE: tcp [7:73518]

2003-08-10 Thread Howard C. Berkowitz
"Reimer, Fred" wrote, >A "window" is not a thing that gets sent in a TCP session. You don't send >"windows." A window is the amount of unacknowledged data the sender is allowed to have outstanding to the receiver. It isn't necessarily identical

tcp [7:73518]

2003-08-10 Thread Janik James
Here are some tcp questions: 1.Can the sender send more than the window size? 2.Can receiver send ack before whole window comes in? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73518&t=73518 -- **Please support Group

RE: tcp [7:73518]

2003-08-07 Thread gab S.E jones
1.Can the sender send more than the window size? No a sender can not send more than the window size e.g if we have two hosts A and B and B's advertised window size is 32kb. Upon the first tcp connection A(sender) can send up to the maximum window sise(segments) and it then has to wait f

Re: tcp [7:73518]

2003-08-05 Thread Howard C. Berkowitz
At 2:17 PM + 8/5/03, Janik James wrote: >Here are some tcp questions: > >1.Can the sender send more than the window size? No. >2.Can receiver send ack before whole window comes in? Not for the window it's receiving, but for a previous window. Message Posted at: http://w

RE: Maximum segment size in TCP [7:72030]

2003-07-08 Thread mccloud mike
D] A ---> FrameRelay(WAN) --> Location B ---> Site to > Site VPN (T1) > --> [EMAIL PROTECTED] C > > I have captured the packet using ethereal and found that Source > PC TCP > Maximum Segment Size is 1456bytes and that of Mainframe is > 4056bytes. This > slow response issu

RE: Maximum segment size in TCP [7:72030]

2003-07-08 Thread Priscilla Oppenheimer
A host uses the TCP maximum segment size option to specify the max size of TCP segments (packets) that it can accept. In the case where you have the slow response time, the mainframe is saying that its max segment size is 4056 bytes, which means that it can accept packets of that size (with that

Maximum segment size in TCP [7:72030]

2003-07-08 Thread kuma kk
Hello group, I am facing slow response issue when connecting to Mainframe. This is how my connectivity goes [EMAIL PROTECTED] A ---> FrameRelay(WAN) --> Location B ---> Site to Site VPN (T1) --> [EMAIL PROTECTED] C I have captured the packet using ethereal and found that S

RE: Configuring TCP intercept question; need help [7:72004]

2003-07-07 Thread Szabo, Vilmos
Hello, I think this is 12.1.(5)T9 problem again. Although you did not enable CBAC, but bear in mind: "Cisco IOS IDS/CBAC and the TCP Intercept feature work independently of each other and, in fact, should not be used together due to the fact that they use the same internal engine.&

Configuring TCP intercept question; need help [7:71950]

2003-07-06 Thread d tran
Hi, Has anyone actually been playing with Cisco TCP intercept lately? Does this piece of crap work at all? I am running both IOS version 12.1.5(T9) and 12.2.15(T) and TCP intercept is not working in "intercept" mode. TCP intercept does work in "watch" mode. when it is r

RE: TCP over IP [7:71556]

2003-06-27 Thread Howard C. Berkowitz
>Priscilla Oppenheimer wrote: >> >> Zsombor Papp wrote: >> > >> > As a side question, do you think that TCP must run over IP? :) >> >> I forgot to comment on that very important question! :-) >> >> I've never seen TCP run over a

RE: TCP over IP [7:71556]

2003-06-27 Thread Dom
Priscilla Oppenheimer wrote: >Has anyone seen TCP run over anything other than IP? I'm curious. IIRC, even Avian Carriers use IP > By the way, TCP was developed before IP. Most people assume the > opposite. At the time, TCP included most of IP's current > functionali

RE: TCP over IP [7:71556]

2003-06-27 Thread Priscilla Oppenheimer
Priscilla Oppenheimer wrote: > > Zsombor Papp wrote: > > > > As a side question, do you think that TCP must run over IP? :) > > I forgot to comment on that very important question! :-) > > I've never seen TCP run over anything other than IP, although > in

TCP over IP [7:71556]

2003-06-27 Thread Priscilla Oppenheimer
Zsombor Papp wrote: > > As a side question, do you think that TCP must run over IP? :) I forgot to comment on that very important question! :-) I've never seen TCP run over anything other than IP, although in theory it could. The devil in the details though. Assuming no

OT ( Number of TCP sessions ) [7:71305]

2003-06-24 Thread YASSER ALY
Dear All, I am in the process of selecting a PIX model and would like to know how many TCP sessions on average, and on peak that the router receive ? Can this be accomplished using NetFlow ? If not, what other options are available. Best Regards,Yasser

RE: tcp reset problem [7:70521]

2003-06-11 Thread Priscilla Oppenheimer
Larry Letterman wrote: > > Is it being load balanced or does it have 2 nics ? > We just went thru this issue with a mail server and load > balancing > That had default gateway probs with two nics on separate > subnets... Default gateway problems caused it to send TCP resets? Wh

RE: tcp reset problem [7:70521]

2003-06-11 Thread Larry Letterman
] On Behalf Of Scott Hoover Sent: Wednesday, June 11, 2003 9:31 AM To: [EMAIL PROTECTED] Subject: tcp reset problem [7:70521] Running a solaris (v8 I think) box with Lotus Notes on it (new build). We are having a problem with the server immediately sending a reset to clients after receiving the syn

RE: tcp reset problem [7:70521]

2003-06-11 Thread Priscilla Oppenheimer
Scott Hoover wrote: > > Running a solaris (v8 I think) box with Lotus Notes on it (new > build). We > are having a problem with the server immediately sending a > reset to clients > after receiving the syn. I bet there's a firewall on the server that's blocking access to the port. > Congestion

tcp reset problem [7:70521]

2003-06-11 Thread Scott Hoover
Running a solaris (v8 I think) box with Lotus Notes on it (new build). We are having a problem with the server immediately sending a reset to clients after receiving the syn. Congestion or errors on the segment are non-existent. I don't control the server so I can't see the logs but I'm dealing

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Priscilla Oppenheimer
/www.webattack.com/get/superscan.shtml > > > -Original Message- > > From: Wilmes, Rusty > > Sent: Friday, April 04, 2003 2:22 PM > > To: [EMAIL PROTECTED] > > Subject: RE: TCP/UDP port scanning Program [7:66881] > > > > > > > -Original

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Larry Letterman
CTED] > Subject: RE: TCP/UDP port scanning Program [7:66881] > > > the copy of this in my sent items has the link I sent but its not in what > was recieved in the group. does majordomo scrub links? > >http://www.webattack.com/get/superscan.shtml > > > -

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Larry Letterman
2 PM > To: [EMAIL PROTECTED] > Subject: TCP/UDP port scanning Program [7:66881] > > > I have been looking for any utilities that does TCP/UDP port scanning. > If you know of any utility that can do the

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Wilmes, Rusty
IL PROTECTED] > Subject: RE: TCP/UDP port scanning Program [7:66881] > > > > -Original Message- > > From: johnman johnman [mailto:[EMAIL PROTECTED] > > Sent: Friday, April 04, 2003 12:42 PM > > To: [EMAIL PROTECTED] > > Subject: TCP/UDP port scanning

Re: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread
ing for any utilities that does TCP/UDP port scanning. > If you know of any utility that can do the port scanning please let me know. > > > > > > > > _ > MSN 8 helps eliminate e-mail viru

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Wilmes, Rusty
> -Original Message- > From: johnman johnman [mailto:[EMAIL PROTECTED] > Sent: Friday, April 04, 2003 12:42 PM > To: [EMAIL PROTECTED] > Subject: TCP/UDP port scanning Program [7:66881] > > > I have been looking for any utilities that does TCP/UDP port scanni

RE: TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread Lupi, Guy
PM To: [EMAIL PROTECTED] Subject: TCP/UDP port scanning Program [7:66881] I have been looking for any utilities that does TCP/UDP port scanning. If you know of any utility that can do the port scanning please let me know. _

TCP/UDP port scanning Program [7:66881]

2003-04-04 Thread johnman johnman
I have been looking for any utilities that does TCP/UDP port scanning. If you know of any utility that can do the port scanning please let me know. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http

RE: Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-03 Thread galvin lu
Many thanx! Friend ! It seems that there is few errata in the book :)) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66741&t=8 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report mis

RE: TCP Algorithm - Slow Start - Congestion Avoida [7:66605]

2003-04-02 Thread alaerte Vidali
Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66689&t=66605 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread [EMAIL PROTECTED]
PROTECTED] Subject: Errata of TCP/IP Volume I by Jeff [7:8] Could Someone provide the Errata of TCP/IP Volume I by Jeff ? I have seen it before in this BBS , but now I can not find it . Thanks!!! mail2web - Check your email from the web at http://mail2web.com/ . Message Poste

Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread galvin lu
Could Someone provide the Errata of TCP/IP Volume I by Jeff ? I have seen it before in this BBS , but now I can not find it . Thanks!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=8&t=8 -- FAQ, list archi

RE: TCP Algorithm - Slow Start - Congestion Avoidance [7:66605]

2003-04-01 Thread Priscilla Oppenheimer
alaerte Vidali wrote: > > RFC 2001 explains TCP Slow Start, Congestion Avoidance, > Fast Retransmit, and Fast Recovery Algorithms. > > I am trying to figure out a example when a duplicate ACK occurs > due a segment that was lost. If a recipient notices a hole in the bytes re

TCP Algorithm - Slow Start - Congestion Avoidance [7:66605]

2003-04-01 Thread alaerte Vidali
RFC 2001 explains TCP Slow Start, Congestion Avoidance, Fast Retransmit, and Fast Recovery Algorithms. I am trying to figure out a example when a duplicate ACK occurs due a segment that was lost. Any Thoughts? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66605&

Looking for errata files for Routing TCP/IP vol 2 and CCIE [7:66455]

2003-03-29 Thread Brian Carroll
S! ALL, I have been to the Cisco Press site but I cannot find them there. It looks like both books have been updated to newer editions. Does anyone have these errata files? I have found that without these errata files the lab exercises are near to useless due to the printing (and err..umm..just pl

Re: TCP SYNSENT Timeout [7:66178]

2003-03-26 Thread Marc Thach Xuan Ky
ly don't have an > answer. I've checked RFC 793 and haven't spotted the answer yet. > > Is there a default time specified in TCP to remain in the SYN SENT state? > If a device sends a SYN and doesn't receive a response, is the timeout a > built-in TCP parameter or

TCP SYNSENT Timeout [7:66178]

2003-03-25 Thread John Neiberger
One of our programmers is asking me about this and I really don't have an answer. I've checked RFC 793 and haven't spotted the answer yet. Is there a default time specified in TCP to remain in the SYN SENT state? If a device sends a SYN and doesn't receive a response, is th

RE: TCP SYNSENT Timeout [7:66178]

2003-03-25 Thread Priscilla Oppenheimer
ted > the answer yet. > > Is there a default time specified in TCP to remain in the SYN > SENT state? If a device sends a SYN and doesn't receive a > response, is the timeout a built-in TCP parameter or is that a > function of the application or operating system? > > I&

RE: TCP Port 1790 in an acl? [7:65738]

2003-03-23 Thread Dom
Are you talking about - nmsp1790/tcpNarrative Media Streaming Protocol nmsp1790/udpNarrative Media Streaming Protocol I do not know the answer, but would suggest you permit it both ways then do a show ip access-list to see what gets matched and then remove any

TCP Port 1790 in an acl? [7:65738]

2003-03-23 Thread Cisco Nuts
Hello, Does tcp port 1790 have to be permitted both ways (similiar to bgp and dlsw)? Ex. #permit tcp any any eq 1790 #permit tcp any eq 1790 any Could someone clarify this for me? Thank you. Sincerely, CN _ The new MSN 8

TCP Port 1790 in an acl? [7:65738]

2003-03-19 Thread Cisco Nuts
Hello, Does tcp port 1790 have to be permitted both ways (similiar to bgp and dlsw)? Ex. #permit tcp any any eq 1790 #permit tcp any eq 1790 any Could someone clarify this for me? Thank you. Sincerely, CN _ The new MSN 8

Re: How do you change tcp port for telnet on a router? [7:64857]

2003-03-08 Thread Amar KHELIFI
telnet service can sit on a port other than 23, in a cisco router or switch for that matter. i have not a found a way to do it(but, i haev not looked ver hard, either), but it can be done by nating the tcp port of a giving ip, efectively arriving at the desired solution. u could use " ip

Re: How do you change tcp port for telnet on a router? [7:64856]

2003-03-08 Thread Dimitrije
s: > [EMAIL PROTECTED] > > line vty 3 4 > > password LetMeInPort3001 > > login > > rotary 1 > > ! > > > > telnet 3001 allows you to telnet into router at port 3001 > > > > "[EMAIL PROTECTED]" wrote: > > > > >

Re: How do you change tcp port for telnet on a router? [7:64841]

2003-03-08 Thread Amar KHELIFI
. ""Dimitrije"" a icrit dans le message de news: [EMAIL PROTECTED] > line vty 3 4 > password LetMeInPort3001 > login > rotary 1 > ! > > telnet 3001 allows you to telnet into router at port 3001 > > "[EMAIL PROTECTED]" wrote: > > &

SMTP Time outs and re-transmissions, multiple TCP ACK's? [7:64617]

2003-03-06 Thread Symon Thurlow
This does not look right to me. I am about to delve in to TCP/IP illustrated to find out about it, but does this behaviour trigger anything in your minds? Cheers, Symon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6461

RE: SMTP Time outs and re-transmissions, multiple TCP [7:64617]

2003-03-06 Thread Priscilla Oppenheimer
e server from being an issue. > > IN the packet sniff I also see multiple acks with the same > sequence > number, one after the other. This does not look right to me. I > am about > to delve in to TCP/IP illustrated to find out about it, but > does this > behaviour trigger a

RE: TCP window size - Additive Increase - Slow Start [7:63904]

2003-03-05 Thread alaerte Vidali
I found this link: ftp://ftp.isi.edu/in-notes/rfc2001.txt Good explanation about slow start, congestion avoindance, fast retransmit and fast recovery. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64513&t=63904 -- FAQ, list arch

Re: How do you change tcp port for telnet on a router? [7:64438]

2003-03-04 Thread Dimitrije
line vty 3 4 password LetMeInPort3001 login rotary 1 ! telnet 3001 allows you to telnet into router at port 3001 "[EMAIL PROTECTED]" wrote: > How do you change tcp port for telnet on a router? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&am

Re: How do you change tcp port for telnet on a router? [7:64402]

2003-03-04 Thread Michael W. Oliver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 +--- On Tuesday, March 04, 2003 14:13, [EMAIL PROTECTED] proclaimed: | | How do you change tcp port for telnet on a router? | supposing you wanted to telnet to the router using port 10023... ! ingress interface for telnet session ! int e0 ip addr

How do you change tcp port for telnet on a router? [7:64382]

2003-03-04 Thread [EMAIL PROTECTED]
How do you change tcp port for telnet on a router? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64382&t=64382 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report miscon

RE: Van Jacopson TCP/IP header compression (RFC 11 [7:64081]

2003-02-28 Thread Priscilla Oppenheimer
d in RFC 1144. The idea behind it is to not send fields in the IP and TCP headers that aren't changing or are easily predictable. It eliminates fields from both the TCP and IP headers. For some reason, finding a copy of the RFC that isn't in some awful format and hasn't eliminated the fig

RE: Van Jacopson TCP/IP header compression (RFC 1144) [7:64081]

2003-02-28 Thread Jim Dixon
See this link for the answer. http://www.elischer.org/netgraph/man/ng_vjc.8.html mailto:[EMAIL PROTECTED] Sent: Thursday, February 27, 2003 22:16 To: Cisco Group Study; ccielab Subject: Van Jacopson TCP/IP header compression (RFC 1144) Hi group, Does the Van Jacopson TCP/IP header compression

Van Jacopson TCP/IP header compression (RFC 1144) [7:64045]

2003-02-27 Thread John Tafasi
Hi group, Does the Van Jacopson TCP/IP header compression algorithm compresses both ip and tcp headers or only the tcp header? Thanks in advance John Tafasi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64045&t=64045 --

RE: TCP window size - Additive Increase - Slow Sta [7:63904]

2003-02-27 Thread alaerte Vidali
>Regarding ddditive increase and multiplicative decrease, I've never >heard of any operating system doing that. After a quick Google, I >get the impression those may be research projects? Can you tell us >more about them? I was not successful trying to understand it. I saw that there is a mechani

RE: TCP window size - Additive Increase - Slow Start [7:63904]

2003-02-26 Thread Priscilla Oppenheimer
[EMAIL PROTECTED] wrote: > > I am looking at TCP4s Flow Control mechanism. I have found > Additive > Increase/multiplicative decrease and slow start explanation. > > What I am looking for is how TCP/IP on our servers behavior > when congestion > occurs related with t

TCP window size - Additive Increase - Slow Start [7:63904]

2003-02-26 Thread [EMAIL PROTECTED]
I am looking at TCP4s Flow Control mechanism. I have found Additive Increase/multiplicative decrease and slow start explanation. What I am looking for is how TCP/IP on our servers behavior when congestion occurs related with the window size. Any Thoughts? Message Posted at: http

convert RS232 to TCP/IP via a terminal server.. [7:63820]

2003-02-25 Thread Richard Campbell
Hi.. Can you teach me to do the following. I have a UNIX box (standalone without IP) and it is connected to a RS232 printer. Now I want to convert the RS232 signal to TCP/IP signal using the AS2509j access server and transmit over WAN to another access server and convert back to RS232 and

Re: TCP connection drops after 11 minutes [7:62855]

2003-02-12 Thread Darrell Newcomb
ser) would be helpful. Is it the tcp session which is dropping, an error message delivered from the webserver due to an application timeout, ... Best of Luck, Darrell Netswitch Technology Management http://www.netswitch.net ""Jason Dimagiba"" wrote in message [EMAIL

RE: TCP connection drops after 11 minutes [7:62855]

2003-02-12 Thread Priscilla Oppenheimer
Jason Dimagiba wrote: > > Hello everyone, it's been a while since I last posted a message > on this > board > > > My question is: > > I currently experience a session timeout after 11 minutes > running a > query on IE5. I was thinking it may be the MTU size being set > incorrectly on the rout

RE: TCP connection drops after 11 minutes [7:62855]

2003-02-12 Thread Albert Lu
Dimagiba Sent: Wednesday, February 12, 2003 9:14 PM To: [EMAIL PROTECTED] Subject: TCP connection drops after 11 minutes [7:62855] Hello everyone, it's been a while since I last posted a message on this board > My question is: I currently experience a session timeout after 11 minutes r

TCP connection drops after 11 minutes [7:62855]

2003-02-12 Thread Jason Dimagiba
Hello everyone, it's been a while since I last posted a message on this board > My question is: I currently experience a session timeout after 11 minutes running a query on IE5. I was thinking it may be the MTU size being set incorrectly on the router. I may be wrong but has anyone ever cam

Re: MTU and TCP in PIX [7:62704]

2003-02-09 Thread Priscilla Oppenheimer
Peter Golding wrote: > > sounds like the tcp mss parameter could be the cause. mss (max > segment > size) should negotiate end to end but some devices dont fall > down to a > lower mss requirement from the other end and therefore nothing > is sent > even when the tc

Re: MTU and TCP in PIX [7:62704]

2003-02-09 Thread Peter Golding
sounds like the tcp mss parameter could be the cause. mss (max segment size) should negotiate end to end but some devices dont fall down to a lower mss requirement from the other end and therefore nothing is sent even when the tcp connection establishes. regards, peter Albert Lu wrote

RE: NAT and TCP Load Distribution [7:62088]

2003-01-31 Thread [EMAIL PROTECTED]
Yes "Peter P" @groupstudy.com em 31/01/2003 09:56:20 Favor responder a "Peter P" Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto:RE: NAT and TCP Load Distribution [7:62088] Right. OK. Therefore - lets say we have 6 servers in our farm

RE: NAT and TCP Load Distribution [7:62088]

2003-01-31 Thread Peter P
Right. OK. Therefore - lets say we have 6 servers in our farm each issued with RFC 1918 private address numbers. These get mapped to a singular global inside address. When our customers start hitting the servers - they get connected to one of the 6 servers in a round robin sequential fashion. This

Re: DLSW remote-peer - frame-relay or tcp?? [7:62171]

2003-01-30 Thread [EMAIL PROTECTED]
I would use TCP. Although there are more header, all is up to TCP - link failures, retransmission... "Cisco Nuts" @groupstudy.com em 30/01/2003 08:58:17 Favor responder a "Cisco Nuts" Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto:

DLSW remote-peer - frame-relay or tcp?? [7:62171]

2003-01-30 Thread Cisco Nuts
Hello, If I have a bunch of routers connected via frame-relay and ospf & the requirement is to configure DLSW peers between them, would I configure remote-peers with tcp or frame-relay? (if the requirement did not specifically state any).Thank you.Sincerel

Re: NAT and TCP Load Distribution [7:62088]

2003-01-29 Thread Juntao
sorry i didn't enphasis on a point that from i've written could be misleading, (the router must rebuild the packet fields and frame fields, then load balances to the servers.) the router will actually, nat the ip, forward the packet in which case a rewrite happens to the frame's mac. regards, ""Ju

Re: NAT and TCP Load Distribution [7:62088]

2003-01-29 Thread Juntao
Web server farm for ur ebiz site, u assign private address to the servers, and use only one public ip to access them all. ""Peter P"" a icrit dans le message de news: [EMAIL PROTECTED] > Thanks for that. Is my 'real world' example right in broad conception ? Message Posted at: http://www.grou

Re: NAT and TCP Load Distribution [7:62088]

2003-01-29 Thread Peter P
Thanks for that. Is my 'real world' example right in broad conception ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62096&t=62088 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report mis

Re: NAT and TCP Load Distribution [7:62088]

2003-01-29 Thread Juntao
hi it is nothing like HSRP, even if looked @ from the virtual IP point of view, for the simple reason that HSRP elects one active router and only router is active @ any time, (as opossed to TCP load Balacing, that uses all the ip's of the servers to forward data to) and the real ip of the a

NAT and TCP Load Distribution [7:62088]

2003-01-29 Thread Peter P
Can anyone give me a real world example of why you would need to consider using TCP Load Distribution. I am summarising slightly but TCP Load Distribution seems to be a method of using a single IP address (the Global Inside Address)inbound; which is handed off to different devices on the inside

RE: Telnet SYN/ACK pkt reply on TCP source port 3- [7:61661]

2003-01-23 Thread Priscilla Oppenheimer
trace? It would be great for a training class. :-) Priscilla > > > -Original Message- > From: Newell Ryan D SrA 18 CS/SCBT > Sent: Thursday, January 23, 2003 7:51 PM > To: '[EMAIL PROTECTED]' > Subject: Telnet S

RE: MTU and TCP in PIX [7:61441]

2003-01-23 Thread [EMAIL PROTECTED]
education." Priscilla Oppenheimer To: [EMAIL PROTECTED] Subject: RE: MTU and TCP in PIX [7:61441] Sent by: no

RE: Telnet SYN/ACK pkt reply on TCP source port 3-6!!?? [7:61661]

2003-01-23 Thread Newell Ryan D SrA 18 CS/SCBT
Subject: Telnet SYN/ACK pkt reply on TCP source port 3-6!!?? I tried to telnet to a distant end 3660 router. Connection would timeout. I was able to ping the router from my PC. The router could telnet to the router that was between my PC and itself. Ran captu

Telnet SYN/ACK pkt reply on TCP source port 3-6!!?? [7:61659]

2003-01-23 Thread Newell Ryan D SrA 18 CS/SCBT
I tried to telnet to a distant end 3660 router. Connection would timeout. I was able to ping the router from my PC. The router could telnet to the router that was between my PC and itself. Ran capture and the data yielded this IP Source 10.0.0.1 Destination 10.0.1.2 TCP SYN destination port

Re: jeff's routing tcp/ip v1 question [7:61360]

2003-01-22 Thread The Long and Winding Road
02 ago > Routing Descriptor Blocks: > * 192.168.12.195, from 192.168.12.195, 00:00:02 ago, via Ethernet0 > Route metric is 1, traffic share count is 1 > 10.33.75.1, from 10.33.75.1, 00:00:02 ago, via Ethernet0 > Route metric is 1, traffic share count is 1 > > I

RE: jeff's routing tcp/ip v1 question [7:61360]

2003-01-22 Thread cebuano
1, 00:00:02 ago, via Ethernet0 Route metric is 1, traffic share count is 1 I hope this answers your question. Take care. Elmer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 5:16 AM To: [EMAIL PROTECTED] Subject: jeff's rout

RE: MTU and TCP in PIX [7:61441]

2003-01-22 Thread Priscilla Oppenheimer
BJ Rice wrote: > > Actually the PIX by default will allow fragmented packets. That's not very nice of it. :-) > This can be a vulnerability for the PIX. A good policy is to > enable FragGuard on the PIX. This insures the PIX sees the > entire seegmented packet before letting it pass through

RE: MTU and TCP in PIX [7:61441]

2003-01-22 Thread BJ Rice
Actually the PIX by default will allow fragmented packets. This can be a vulnerability for the PIX. A good policy is to enable FragGuard on the PIX. This insures the PIX sees the entire seegmented packet before letting it pass through its outside interface. Message Posted at: http://www.group

RE: MTU and TCP in PIX [7:61441]

2003-01-21 Thread Priscilla Oppenheimer
on? The return packets should be recognized, unless they are fragments too. But there's no requirement that return packets be fragments. If they were fragments, there would be an issue. Packets past the first one wouldn't have any UDP or TCP header to help with the recognition. When th

RE: MTU and TCP in PIX [7:61441]

2003-01-21 Thread Xueyan Liu
Since Priscilla has brought a very good point about fragmentation, I'll add my 2 cents. Worked with pix before but not an expert. Say PIX does fragment, would the return packet be recognized as a valid packet for a previously established session? Xueyan Message Posted at: http://www.groupstudy.c

RE: MTU and TCP in PIX [7:61441]

2003-01-21 Thread Priscilla Oppenheimer
Albert Lu wrote: > > Hello Group, > > I've had this interesting thing happen with a PIX where tcp > connection for > HTTP was established through it however data does not pass > through > correctly, since there was no HTTP data being sent through. I > noticed th

RE: jeff's routing tcp/ip v1 question [7:61360]

2003-01-21 Thread Petru Stefan
Because rip pass updates in different way. Have a look on http://www.cisco.com/warp/customer/105/54.html. Hope it help. If you are studing for ccie we can do together. I study now also the rip from jeff's book. Regards Petru Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61468

MTU and TCP in PIX [7:61441]

2003-01-21 Thread Albert Lu
Hello Group, I've had this interesting thing happen with a PIX where tcp connection for HTTP was established through it however data does not pass through correctly, since there was no HTTP data being sent through. I noticed that the MTU for the outside and inside interfaces were differen

jeff's routing tcp/ip v1 question [7:61360]

2003-01-20 Thread galvin lu
For Jeff's routing tcp/ip V1 book, page 214 and 215 . There is a secondly ip address , for rip version 1 because of the discontinues 10.0.0.0. So why there is only one route to 10.33.48.0 , and two route to 192.168.83.0 in the routing table of Ernest_T ? Message Posted at:

RE: O/T: Follow-up to TCP Rcv Window [7:59487]

2002-12-18 Thread s vermill
> "support" window scaling in that it still reflects the 16-bit > value in the "normal" (non-handshake) data segments, you can > track back to the original "syn, syn-ack, ack" handshake in the > trace file and do the math yourself (assuming, of course, that

O/T: Follow-up to TCP Rcv Window [7:59487]

2002-12-18 Thread s vermill
window scaling in that it still reflects the 16-bit value in the "normal" (non-handshake) data segments, you can track back to the original "syn, syn-ack, ack" handshake in the trace file and do the math yourself (assuming, of course, that the distant-end accepted the offer to scal

Re: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-18 Thread Richard Deal
To all, There is a freeware program called Dr. TCP Win for Windows 2000/XP that allows you to change both the MTU and TCP Window size--requires a reboot, though, after the change. Cheers! -- Richard A. Deal Visit my home page at http://home.cfl.rr.com/dealgroup/ Author of Cisco PIX Firewalls

Re: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread Steve Dispensa
> So one wild idea would be to remove memory from the host. Or maybe you could > get it to use up a chunk of memory by opening lots of large docs and/or > using a RAM disk!? In practice, you'd have to really restrict the amount of RAM to a level that the OS wouldn't function. You're talking about

RE: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread Steve Dispensa
> An interesting side note: Ethereal apparently doesn't support window > scaling. Do you mean the tcp window scale option or just the phenomenon of having data outstanding? You can always just count un-acked bytes for an idea of how big the window is. It's dyanmic, of c

RE: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread Priscilla Oppenheimer
s vermill wrote: > > s vermill wrote: > > > > Group: > > > > On a W2k machine, I've tried several different recommendations > > for adjusting the TCP receive window size. None of them, > > including those directly from Microsoft, seem to have an

Re: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread Priscilla Oppenheimer
ltRcvWindow is a string type > and > > the > > value describes the default receive windowsize for the TCP > > stack. > > Otherwise the windowsize has to be programmed in apps with > > setsockopt." > > Perhaps the app is setting it differently. It also see

RE: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread s vermill
s vermill wrote: > > Group: > > On a W2k machine, I've tried several different recommendations > for adjusting the TCP receive window size. None of them, > including those directly from Microsoft, seem to have any > impact. I'm capturing my own traffic and my a

Re: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread Marc Thach Xuan Ky
e 64kbps. > > Rik > > -Original Message- > From: s vermill [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, 18 December 2002 6:40 AM > To: [EMAIL PROTECTED] > Subject: Re: Perhaps O/T: Window TCP Rcv Window [7:59400] > > Marc Thach Xuan Ky wrote: > > > >

Re: Perhaps O/T: Window TCP Rcv Window [7:59400]

2002-12-17 Thread s vermill
Marc Thach Xuan Ky wrote: > > Scott, > A clue from this webpage: > http://www.psc.edu/networking/perf_tune.html > Describing Win98 it says "DefaultRcvWindow is a string type and > the > value describes the default receive windowsize for the TCP > stack. > Ot

  1   2   3   4   5   6   7   >