Re: handling ddos attacks

2004-05-20 Thread Vincent Gillet - Opentransit
[EMAIL PROTECTED] disait : On Thu, May 20, 2004 at 11:52:01AM -0700, Mark Kent wrote: I've been trying to find out what the current BCP is for handling ddos attacks. Mostly what I find is material about how to be a good net.citizen (we already are), how to tune a kernel to better

Summary: 10GigaEthernet on GSR feedback ...

2004-03-15 Thread Vincent Gillet - Opentransit
I was wondering : We recently installed 10GE interface on GSR boxes (Engine4+). I are experiencing a SNMP counter issue with 802.1q VLAN. We were used to have counters by 802.1q VLAN on GSR on 1GE, but it looks to be broken for 10GE subinterfaces. Counters are available by SNMP, but

10GigaEthernet on GSR feedback ...

2004-03-11 Thread Vincent Gillet - Opentransit.net
Hi, We recently installed 10GE interface on GSR boxes (Engine4+). I are experiencing a SNMP counter issue with 802.1q VLAN. We were used to have counters by 802.1q VLAN on GSR on 1GE, but it looks to be broken for 10GE subinterfaces. Counters are available by SNMP, but are buggy on Inbound.

Re: Strange public traceroutes return private RFC1918 addresses

2004-02-03 Thread Vincent Gillet - Opentransit
[EMAIL PROTECTED] disait : Search the archives, Comcast and other cable/DSL providers use the 10/8 for their infrastructure. The Internet itself doesn't need to be Internet routable. Only the edges need to be routable. It is common practice to use RFC1918 address space inside the

Re: TAT 14 failure

2003-11-26 Thread Vincent Gillet
[EMAIL PROTECTED] disait : In a message written on Tue, Nov 25, 2003 at 07:24:27PM +, [EMAIL PROTECTED] wrote: still seeing decent ping times. anyone detect an actual outage or issue? Best info we have is that there are two outages. One has existed for the last 3 weeks or so

As-Path filtering based on ranges, not regex

2003-01-17 Thread Vincent Gillet
Hi, I would like to filter bgp updates based on AS origin. I know that i can match origin with regex as : _1239$ In fact, i would like to match as-path that originate from ASes from 856 to 1239. pseudo regex would be something like : _[856..1239]$ Juniper has this feature. Cisco does not

Re: Effective ways to deal with DDoS attacks?

2002-05-02 Thread Vincent Gillet
[EMAIL PROTECTED] disait : have been on the receiving end of, the first was generating a little over 300mbit/sec (steady for a prolonged time), and the second went over that by a fair bit. In both cases, we had core equipment (M20's and BSN5000's) fall over and die trying to work the