Re: Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

2003-11-25 Thread Rob Thomas
Hi, Stuart. ] So you believe that the edges of the net are smaller, bandwidth-wise, ] than the core? This was certainly the case in my previous life at a large hosting provider. We had GigE LANs, used providers with OC192 backbones, but had only OC3 to OC12 links to our providers. Like most

Re: 68.0.0.0/7 from 3303

2003-11-25 Thread Mikael Abrahamsson
On Tue, 25 Nov 2003, Michael Whisenant wrote: Well looks like that have more BOGON problems. They are sending 128.161.0.0/3. These guys love claiming default gateway traffic? 168.0.0.0/6 194.85.4.249 0 3277 13062 20485 8437 3303 i 160.0.0.0/5 194.85.4.249

Re: 68.0.0.0/7 from 3303

2003-11-25 Thread Joe Provo
On Tue, Nov 25, 2003 at 08:13:49AM +0100, Mikael Abrahamsson wrote: On Tue, 25 Nov 2003, Michael Whisenant wrote: Well looks like that have more BOGON problems. They are sending 128.161.0.0/3. These guys love claiming default gateway traffic? 168.0.0.0/6 194.85.4.249

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Stephen J. Wilcox
The average user will say OOH! SHINY!! [clicky-click] when offered content promising either dancing hampsters or pop stars wearing less clothing than appropriate. Any security model that doesn't allow for this is doomed to failure. Introducing Telecomplete Security service, with antivirus,

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Daniel Karrenberg
On 24.11 18:20, William Allen Simpson wrote: Brian Bruns wrote: One thing that many people don't realize (from my personal experience) is that contrary to popular belief, Win98SE is a good all around desktop OS to use. It can run most things like productivity apps and games, and with

Re: looking for a review of traffic shapers

2003-11-25 Thread William Caban
A resume of some of the answers I have received: What's missing from (at least some) current traffic shaping appliances http://darkwing.uoregon.edu/~joe/what-shapers-need.pdf Ten Odd Strategies for Picking Numerical Values for Your Traffic Shaper

Re: Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

2003-11-25 Thread Sean Donelan
On Tue, 25 Nov 2003, Rob Thomas wrote: Our choke points were always our peering or transit links. This was the case for our (large) enterprise customers as well. Some people refer to it as the hourglass effect, but it has more than one bump. Generally only the smallest bottleneck controls

Re: Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]

2003-11-25 Thread Rob Thomas
Hi, Sean. ] lower bandwidthhigher bandwidth Great ASCII chart. :) ] Of course, there are some exceptions like a customer with an OC192 uplink ] or an ISP running a web hosting center on a ISDN link. Another bit to consider is address space. Code Red discovered a lot of folks with

RE: Anit-Virus help for all of us??????

2003-11-25 Thread Vivien M.
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Karrenberg Sent: November 25, 2003 3:42 AM To: William Allen Simpson Cc: [EMAIL PROTECTED] Subject: Re: Anit-Virus help for all of us?? On 24.11 18:20, William Allen Simpson wrote:

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Brian Bruns
- Original Message - From: Vivien M. [EMAIL PROTECTED] To: 'Daniel Karrenberg' [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 25, 2003 9:39 AM Subject: RE: Anit-Virus help for all of us?? Have either of you actually followed this advice? Win98SE is totally

Re: Anit-Virus help for all of us??????

2003-11-25 Thread William Allen Simpson
Vivien M. wrote: if haveto(M$) use(W98SE); Have either of you actually followed this advice? Yes. (30%ish free). That machine got totally unstable needing a reboot after about 3 days. On the same hardware (with additional RAM), Win2K could easily run 3-4 weeks and run any

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Scott McGrath
The minimalist approach has support advantages as well. Because of the small image size a reimage can be accomplished quickly. For better or worse many network tools/utilities only run under win[*] requiring a windows box for many of these Win98SE fits nicely. My app load is small i.e.

Happy Holidays - Id-al-Fitr / Ramadan Mubarak - Iyi Bayramlar

2003-11-25 Thread Mehmet Akcin
!EID / RAMADAN / ID-AL-FITR MUBARAK / Ramazan Bayraminiz Mubarek Olsun I wish happy and peaceful holidays to the NANOG'ers either they participate Islam as their religious or other religiouses. In fact this is a muslim holiday (for those who don't know.) Hope the world will

TAT 14 failure

2003-11-25 Thread jmalcolm
The northern leg of TAT14 seems to have just taken an outage about an hour ago. As the southern leg was already down due to other faults, this will probably be an exciting time for many providers.

RE: Anit-Virus help for all of us??????

2003-11-25 Thread Vivien M.
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Bruns Sent: November 25, 2003 10:21 AM To: Vivien M.; 'Daniel Karrenberg' Cc: [EMAIL PROTECTED] Subject: Re: Anit-Virus help for all of us?? I know full well about the resource limits.

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Sean M . Doran
On 24 Nov, 2003, at 21:20, Gerardo Gregory wrote: [NAT and PAT] is not a security feature, neither does it provide any real security, just ... translations. You can't curse it if you don't know its name -- Len Bosack on this issue, Reykjavik, March 2003. Just cause your broadband router

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Ryan Dobrynski
Having sat up until the wee hours of the AM last night cleaning up virus traffic on one of my private nets (an inhouse private net at that) i was giving this some thought. It seems that as with all things, knowledge is power. While all of the machines on the floor where the net op's team lives

RE: Anit-Virus help for all of us??????

2003-11-25 Thread Vivien M.
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ryan Dobrynski Sent: November 25, 2003 12:21 PM To: [EMAIL PROTECTED] Subject: Re: Anit-Virus help for all of us?? like everyone else, I don't have the answer. Just another way of looking at

Open source traffic shaper experiences? (was Re: looking for a review of traffic shapers)

2003-11-25 Thread andrew
Note: delurk. Some of the commercial traffic shaping devices reviewed here are tens of thousands of dollars. For a smaller ISP (i.e. less than a DS3 of aggregate upstream bandwidth), that kind of expense doesn't make sense-- but the need to control bandwidth consumption is still an issue.

Re: Open source traffic shaper experiences? (was Re: looking for a review of traffic shapers)

2003-11-25 Thread Steve Atkins
On Tue, Nov 25, 2003 at 11:38:01AM -0600, [EMAIL PROTECTED] wrote: Note: delurk. Some of the commercial traffic shaping devices reviewed here are tens of thousands of dollars. For a smaller ISP (i.e. less than a DS3 of aggregate upstream bandwidth), that kind of expense doesn't make

Re: Open source traffic shaper experiences? (was Re: looking for a review of traffic shapers)

2003-11-25 Thread Chris Brenton
On Tue, 2003-11-25 at 12:38, [EMAIL PROTECTED] wrote: Is anyone on the NANOG list aware of a disk-less Linux solution? One might imagine a Knoppix-like bootable CD image (perhaps CD-RW, so config files could be updated) that would turn an inexpensive Linux box into an effective traffic

RE: Anit-Virus help for all of us??????

2003-11-25 Thread Wojtek Zlobicki
I would hate to blame the users here. In most organizations it is the role of the IT Dept to manage the workstations and not end users. Severely restricting users privileges is often a good thing, at least from the perspective of being able to control what gets installed on the machines in

Re: TAT 14 failure

2003-11-25 Thread Jack McCarthy
Anyone have additional info regarding this outage? Links? Besides tat-14.com - it seems to be down or just flooded with requests. -Jack --- [EMAIL PROTECTED] wrote: The northern leg of TAT14 seems to have just taken an outage about an hour ago. As the southern leg was already down due

Re: TAT 14 failure

2003-11-25 Thread Jared Mauch
This is a basic map of the fiber path for those that haven't found one yet. http://www.kddiscs.co.jp/e/business/02_15.html - jared On Tue, Nov 25, 2003 at 10:32:16AM -0800, Jack McCarthy wrote: Anyone have additional info regarding this outage? Links? Besides

Re: TAT 14 failure

2003-11-25 Thread Jack McCarthy
I saw that link when I googled for TAT-14. I was looking more for a see, I told you so link that I can forward to management that provides proof that this is why our UK office is down...if you know what I mean. Here's an interesting explanation of undersea cabling:

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Valdis . Kletnieks
On Tue, 25 Nov 2003 13:21:36 EST, Wojtek Zlobicki [EMAIL PROTECTED] said: I would hate to blame the users here. In most organizations it is the role of the IT Dept to manage the workstations and not end users. Remember that Joe Sixpack's IT Dept may not be available past 9:30PM because it's a

MPLS billing model

2003-11-25 Thread Dan Lockwood
For those of you who sell MPLS VPNs, what components of the service do you charge for and how do you do the billing? E.g. per port + traffic, per site + traffic, etc. I am not interested in buying MPLS services just how the billing happens. Thanks! Dan

RE: MPLS billing model

2003-11-25 Thread St. Clair, James
I'd appreciate knowing this as well - thanks in advance Jim -Original Message- From: Dan Lockwood To: Nanog List (E-mail) Sent: 11/25/2003 2:04 PM Subject: MPLS billing model For those of you who sell MPLS VPNs, what components of the service do you charge for and how do you do the

Activity logging archiving tool

2003-11-25 Thread Priyantha
In my company, there are several technical guys make changes to the existing network and it's very difficult to keep track of what we did when, etc. I'm looking for a simple tool, in which each and every one has to manually record whatever (s)he has done or any incident (s)he observed so that

Re: TAT 14 failure

2003-11-25 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], Jack McCarthy writes: I saw that link when I googled for TAT-14. I was looking more for a see, I told you so link that I can forward to management that provides proof that this is why our UK office is down...if you know what I mean. Here's an interesting

Re: TAT 14 failure

2003-11-25 Thread garrett . allen
clarifying the last post, seeing 100ms under the pond to our points of presence in bourne end and beeston (uk). thanks. I saw that link when I googled for TAT-14. I was looking more for a see, I told you so link that I can forward to management that provides proof that this is why our UK

Re: TAT 14 failure

2003-11-25 Thread garrett . allen
still seeing decent ping times. anyone detect an actual outage or issue? thanks. I saw that link when I googled for TAT-14. I was looking more for a see, I told you so link that I can forward to management that provides proof that this is why our UK office is down...if you know what I

Re: Activity logging archiving tool

2003-11-25 Thread Suresh Ramasubramanian
Priyantha writes on 11/25/2003 2:15 PM: In my company, there are several technical guys make changes to the existing network and it's very difficult to keep track of what we did when, etc. I'm looking for a simple tool, in which each and every one has to manually record whatever (s)he has done

Re: [Activity logging archiving tool]

2003-11-25 Thread joshua sahala
Priyantha [EMAIL PROTECTED] wrote: In my company, there are several technical guys make changes to the existing network and it's very difficult to keep track of what we did when, etc. i feel your pain - except when it was happening, they weren't as technical as they thought they were...

Re: [RE: MPLS billing model]

2003-11-25 Thread joshua sahala
St. Clair, James [EMAIL PROTECTED] wrote: I'd appreciate knowing this as well - thanks in advance Jim -Original Message- From: Dan Lockwood To: Nanog List (E-mail) Sent: 11/25/2003 2:04 PM Subject: MPLS billing model For those of you who sell MPLS VPNs, what components of

Re: TAT 14 failure

2003-11-25 Thread Leo Bicknell
In a message written on Tue, Nov 25, 2003 at 07:24:27PM +, [EMAIL PROTECTED] wrote: still seeing decent ping times. anyone detect an actual outage or issue? Best info we have is that there are two outages. One has existed for the last 3 weeks or so between Tuckerton (New Jersey) and Bude

Re: [RE: MPLS billing model]

2003-11-25 Thread Alex Rubenstein
we are still in the testing phases, but i believe that we are planning to use a port+traffic billing scheme, if/when we go live and start trying to sell it do you mean: $port + $traffic_through_port or: $port + $traffic_over_vpn_tunnel I ask this, because, it's very

Re: MPLS billing model

2003-11-25 Thread Dan Armstrong
We charge a flat fee per location, all traffic between locations is free within a metro area. Anything going out to the Internet, or outside a particular metro area is billable per their Internet transit pricing. Dan Lockwood wrote: For those of you who sell MPLS VPNs, what components of

Re: [Re: [RE: MPLS billing model]]

2003-11-25 Thread joshua sahala
Alex Rubenstein [EMAIL PROTECTED] wrote: we are still in the testing phases, but i believe that we are planning to use a port+traffic billing scheme, if/when we go live and start trying to sell it do you mean: $port + $traffic_through_port or: $port +

RE: [Activity logging archiving tool]

2003-11-25 Thread Dan Lockwood
If you are in a Cisco shop you might consider Secure ACS. We use ACS to log all of our changes and have very good success with it. Unfortunately it is not free. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joshua sahala Sent: Tuesday, November

RE: [Activity logging archiving tool]

2003-11-25 Thread Brennan_Murphy
Or Ciscoworks. A config change sends a syslog event to CW which in turn knows to go grab the latest copy of the config. I believe there are some reporting capabilities too, simple diff routines and archives of past configs. I think CW is more of the CVS-like approach whereas ACS is sort of a

Re: TAT 14 failure

2003-11-25 Thread Jack McCarthy
Here's the official word we received: The outage on TAT-14 Segment I is on-going. This segment is on the European side between the Netherlands and France, effecting traffic to UK, Ireland, France, and other areas in Europe. This is the 2nd failure on this ring cable which has caused the

Re: [RE: [Activity logging archiving tool]]

2003-11-25 Thread joshua sahala
[EMAIL PROTECTED] wrote: Or Ciscoworks. A config change sends a syslog event to CW which in turn knows to go grab the latest copy of the config. I believe there are some reporting capabilities too, simple diff routines and archives of past configs. or if you cannot afford cisco works (or

RE: [Activity logging archiving tool]

2003-11-25 Thread Scott McGrath
CiscoWorks also polls the devices for configuration changes and generates a diff if you so desire. If you have set up AAA you will have an audit log of when changes were applied and who applied them. Scott C. McGrath On Tue, 25 Nov 2003 [EMAIL PROTECTED] wrote:

Re: [Re: [RE: MPLS billing model]]

2003-11-25 Thread Richard A Steenbergen
On Tue, Nov 25, 2003 at 03:29:26PM -0500, joshua sahala wrote: Alex Rubenstein [EMAIL PROTECTED] wrote: we are still in the testing phases, but i believe that we are planning to use a port+traffic billing scheme, if/when we go live and start trying to sell it do you mean:

Above.net problems ??

2003-11-25 Thread hostmaster
anyone having trouble with above.net at the moment ? cheers -Bert

Re: MPLS billing model

2003-11-25 Thread Richard A Steenbergen
On Tue, Nov 25, 2003 at 11:04:55AM -0800, Dan Lockwood wrote: For those of you who sell MPLS VPNs, what components of the service do you charge for and how do you do the billing? E.g. per port + traffic, per site + traffic, etc. I am not interested in buying MPLS services just how the

Re: Above.net problems ??

2003-11-25 Thread Dimitris Zilaskos
anyone having trouble with above.net at the moment ? cheers -Bert It is unreachable from various european networks for the last 5-6 hours . Best regards , -- = Dimitris Zilaskos Department of

Re: Above.net problems ??

2003-11-25 Thread Leo Bicknell
In a message written on Tue, Nov 25, 2003 at 05:08:29PM -0500, hostmaster wrote: anyone having trouble with above.net at the moment ? AboveNet is having issues due to the second cable cut on TAT-14. In addition I have just received some information that appears to be some helpful ISP's leaking

Re: Above.net problems ??

2003-11-25 Thread jlewis
On Tue, 25 Nov 2003, hostmaster wrote: anyone having trouble with above.net at the moment ? I'm sure somebody is. I have a problem with the way they filter portions of the internet (which I'm just assuming has not been resolved internally yet). Perhaps you're asking about their outage

Re: Above.net problems ??

2003-11-25 Thread Laurent Frigault
On Tue, Nov 25, 2003 at 05:08:29PM -0500, hostmaster wrote: anyone having trouble with above.net at the moment ? Yes. The problem seems related to the TAT14 failure. Since, around 16h30 (GMT +0100) our bgp sessions with AS 6461 reset and now they received only 82305 prefix. Regards, --

Re: [RE: [Activity logging archiving tool]]

2003-11-25 Thread Joe Abley
On 25 Nov 2003, at 16:28, joshua sahala wrote: [EMAIL PROTECTED] wrote: Or Ciscoworks. A config change sends a syslog event to CW which in turn knows to go grab the latest copy of the config. I believe there are some reporting capabilities too, simple diff routines and archives of past configs.

Re: [Activity logging archiving tool]

2003-11-25 Thread guy
Don't forget that TACACS can log all commands entered into a router. When used in combination with rancid and cvs/cvs-web, it's very useful. I'm looking for a simple tool, in which each and every one has to manually record whatever (s)he has done or any incident (s)he observed so that the

Opentransit (France Telecom) in Seattle

2003-11-25 Thread Eric Kuhnke
Does anyone know what floor of the Westin building Opentransit's POP is on?

Re: TAT 14 failure

2003-11-25 Thread David Lesher
Is there not sizeable UK-FR capacity through the Chunnel? That seems like such an easy win, I'd assume everyone else thought of it years ago.. -- A host is a host from coast to [EMAIL PROTECTED] no one will talk to a host that's close[v].(301) 56-LINUX Unless the host (that isn't

RE: [Activity logging archiving tool]

2003-11-25 Thread Christopher L. Morrow
On Tue, 25 Nov 2003, Scott McGrath wrote: CiscoWorks also polls the devices for configuration changes and generates a diff if you so desire. If you have set up AAA you will have an audit log of when changes were applied and who applied them. Scott C. McGrath

RE: [Activity logging archiving tool]

2003-11-25 Thread McBurnett, Jim
If you are really just looking for changes and change comparison's check out Kiwi Cat tools.. www.kiwisyslog.com This software can connect via SSH, Telnet etc, and even do non-Cisco, Linux etc.. Works good as a backup for configs... Later, Jim CiscoWorks also polls the devices for

Issues with Comcast broadband customers in the Seattle, WA area -- please contact

2003-11-25 Thread dani-nanog
Hello, Looking for someone @ Comcast (AS22909?) that can help troubleshoot a problem: For a few days, Comcast residential cablemodem customers in the Seattle, WA area are reporting that they cannot reach our application (TCP port 7000/7050/7070). IP's that the customers are coming from:

RE: [Activity logging archiving tool]

2003-11-25 Thread Terry Baranski
I'm fairly certain that the tacacs standard implementations available on the cisco routers log out changes to the config made by users... That and a little log parsing magic and you have this data also. While we're being Cisco-centric, 12.3(4)T has a new feature by which the router can

Re: [Activity logging archiving tool]

2003-11-25 Thread Alexei Roudnev
I created _Cisco repository_ about 1 year ago, using Expect, cvs and CVSWEB, for free, and since this, we did a few installation and are really happy with it (we save all Cisco configs, including routers, 6509 switches, PIX-es and this crazy VPN devices...). This is a simple tool, with the web

Re: [Activity logging archiving tool]

2003-11-25 Thread Alexei Roudnev
This is not dngerous - I do not expect any idiot, opening SNMP from outside (SNMP is excellent protocol, which can crash ANY device in the world; I crashed 6509 switch and PIX firewall in a few days, when debugged new 'snmpstat' system). And moreover, Cisco allows o lock IP and file name for

Re: [Activity logging archiving tool]

2003-11-25 Thread Alexei Roudnev
It is excellent, but _too late. Such features are useless, if you do not have them on all devices, and no one can update all network gear to this new version at once. So, it will be useful in 2 - 3 years -:). - Original Message - From: Terry Baranski [EMAIL PROTECTED] To: 'Christopher

Re: TAT 14 failure

2003-11-25 Thread Simon Lockhart
On Tue Nov 25, 2003 at 08:32:50PM -0500, David Lesher wrote: Is there not sizeable UK-FR capacity through the Chunnel? Yes, I believe there's a sizable amount of fiber going through the service tunnel of the Chunnel (hence the much reduced cost of fiber from UK to Europe these days). Simon --