RE: Finding clue at comcast.net

2003-10-09 Thread Austad, Jay
Comcast's phone support department is the *worst*, WORST, I've ever dealt with. I think they are outsourced, they have to go by a script, and many of them probably hardly know what a computer even is. Once I called because of a problem on their network, and I told the person on the phone that

RE: Finding ASN from IP address

2003-10-09 Thread Austad, Jay
There's a tool out there called tracesroute (note the s) that will also provide the AS number of every ip it lists. -Original Message- From: Suresh Ramasubramanian [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 12:46 PM To: Avleen Vig Cc: [EMAIL PROTECTED] Subject:

RE: Worst design decisions?

2003-09-18 Thread Austad, Jay
Sun Ultra Enterprise 3500. Three power supplies for redundancy, only *one* power cord. You'd think that with something that originally cost 6 figures, that this would have been thought out a bit more. Oh, and 1U patch panels with only 12 ports in them annoy me. -Original Message-

RE: list thoughts on unsupported hardware?

2003-09-15 Thread Austad, Jay
I couldn't find anything that said the 7500 is end-of-life/support/etc... This is all I found on their site regarding the 7500: End-of-Sale/End-of-Life: FEIP2-DSW-2TX FEIP2-DSW-2FX 09/Jul/2003 End of Sale/End of Life: SA-ENCRYPT Services Adapter 31/Mar/2003 End of Sales - VIP2-50, No. 1868

cef/process switching problem

2003-09-09 Thread Austad, Jay
I've got a cisco MC3810 with a bunch of DSL customers on it. CEF is enabled, but when I do a show int stat, I see that almost 100% of the outbound packets on the ethernet interface are process switched, and not being matched in the route cache. The Input looks just fine, and the other

RE: cef/process switching problem

2003-09-09 Thread Austad, Jay
To: Austad, Jay Cc: [EMAIL PROTECTED] Subject: Re: cef/process switching problem Not sure on the MC3810 (never used one), but I know that many of the other Cisco routers didn't do CEF on ethernet until later revisions of code... There are other factors that kick it out of CEF as well.. I

SNMP OID's for BGP monitoring

2003-09-05 Thread Austad, Jay
What OID's are people using to monitor/graph BGP stats on Cisco routers? -jay

RE: SNMP OID's for BGP monitoring

2003-09-05 Thread Austad, Jay
- From: Jared Mauch [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 10:27 AM To: Austad, Jay Cc: [EMAIL PROTECTED] Subject: Re: SNMP OID's for BGP monitoring If you are running 12.0(26)S you can now graph the number of routes you receive from a BGP peer. Here's

RE: BMITU

2003-09-04 Thread Austad, Jay
I second the vote for Postfix. I haven't used it with a ton of users, but I built a large mail cluster for my old employer which was used to send stock pricing alerts to users that have set up thresholds for certain stocks. Initially, the cluster was qmail (that was back in 2000). I used qmail

Distributed sniffer products

2003-09-03 Thread Austad, Jay
Anyone have any experience with these? I'm looking for something similar to Network Associates Sniffer product. Are there any open source projects that are decent? What are others using? Jay Austad Senior Network Analyst Travelers Express / MoneyGram e: [EMAIL PROTECTED] p:

bgp as-path info

2003-09-02 Thread Austad, Jay
I just brought up a BGP session with one of my providers, they are stripping our AS as it leaves their network, so it looks like the route is originating from their network. I have another provider that I will be bringing up BGP with later this week. Once I bring up the other provider, I will

RE: bgp as-path info

2003-09-02 Thread Austad, Jay
Actually, it looks like this is what they are doing. I've already put a call in with them. -Original Message- From: Jack Bates [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02, 2003 1:17 PM To: Austad, Jay Cc: [EMAIL PROTECTED] Subject: Re: bgp as-path info If you look

RE: dry pair

2003-08-29 Thread Austad, Jay
. :) -Original Message- From: Ejay Hire [mailto:[EMAIL PROTECTED] Sent: Friday, August 29, 2003 11:22 AM To: Pendergrass, Greg; Austad, Jay; [EMAIL PROTECTED] Subject: RE: dry pair He's looking for two wires between two buildings with no switching equipment on them. You'll have

RE: Sobig.f surprise attack today

2003-08-22 Thread Austad, Jay
I don't think the purpose was to DoS them. It looks like some of them were hosts on Comcast's cable network, probably some user machines being used to host the second part of the payload. I just want to know what the second part of this thing does. It's better than watching TV. :)

RE: Packeteer stuff?

2003-08-14 Thread Austad, Jay
If you're looking at the Packeteer to put some limits in place based on protocol, you can take a look at Cisco's NBAR, which is supported in IOS. What kind of metrics are you looking for? Netflow type info? How fat is the pipe you want to monitor/manipulate? -jay -Original

Comcast people?

2003-08-14 Thread Austad, Jay
Are there any Comcast employees here? There exists an intermittent problem on your network which occurs every night at 12:04am central time. I've pinned it down to where it lies, but everytime I call your support department, I just get someone who does not understand. In fact, one lady told

RE: Server Redundancy

2003-08-14 Thread Austad, Jay
I've used them all fairly heavily, except the Foundry gear. Alteon's my personal fave. Biggest problem with the F5: hard drive. In my book, that means you instantly need two, doubling the price. Same thing with the Cisco CSS. Even without a hard drive, you should have 2 of them anyway.

RE: Server Redundancy

2003-08-08 Thread Austad, Jay
We all hedged bets that Cisco was going to absorb the CSS and just make it a software feature on the Catalyst switches. I haven't heard of that actually happening yet though. If they did that, how would they sell the CSS hardware? :) I would think that the closest you are going to get to

RE: Server Redundancy

2003-08-06 Thread Austad, Jay
If the servers are in two separate locations, like two datacenters on either side of the country, you are stuck with DNS-based load balancing. Like others have mentioned, Cisco, F5 and others have products which will handle this for you and take into account some other factors when directing

RE: Is there a technical solution to SPAM?

2003-07-29 Thread Austad, Jay
Make it more of a hassle for them. Ralsky apparently gets *bags* of junkmail everyday because mad people signed him up for everything under the sun. If everyone faxed a 600 page document of why spam is bad to any fax numbers in the email, maybe some places would start to get the point. Fill

RE: Cisco vulnerability and dangerous filtering techniques

2003-07-22 Thread Austad, Jay
I was thinking about this the other day. The most efficient way to make this work would be to spread using some vulnerability (like the Microsoft DCOM vulnerability released last week), and then at a predetermined time, start DoS'ing routers in the IP space of major providers, and then work your

RE: Cisco vulnerability and dangerous filtering techniques

2003-07-22 Thread Austad, Jay
It could poll different looking glasses... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 4:01 PM To: Austad, Jay Cc: [EMAIL PROTECTED] Subject: RE: Cisco vulnerability and dangerous filtering techniques I was thinking

RE: Cisco vulnerability and dangerous filtering techniques

2003-07-22 Thread Austad, Jay
How many thousands of polls do you think a looking glass can handle simultaneously? I am all for the doomsday scenarios, but lets make them a little bit less sci-fi, shall we? How about it would create valid looking OSPF packets with garbage in them? or create valid looking STP packets