Re: handling ddos attacks

[EMAIL PROTECTED] disait : > > On Thu, May 20, 2004 at 11:52:01AM -0700, Mark Kent wrote: > > > > I've been trying to find out what the current BCP is for handling ddos > > attacks. Mostly what I find is material about how to be a good > > net.citizen (we already are), how to tune a kernel to

Summary: 10GigaEthernet on GSR feedback ...

I was wondering : > We recently installed 10GE interface on GSR boxes (Engine4+). > > I are experiencing a SNMP counter issue with 802.1q VLAN. > > We were used to have counters by 802.1q VLAN on GSR on 1GE, but it looks > to be broken for 10GE subinterfaces. > > Counters are available by SNMP

10GigaEthernet on GSR feedback ...

Hi, We recently installed 10GE interface on GSR boxes (Engine4+). I are experiencing a SNMP counter issue with 802.1q VLAN. We were used to have counters by 802.1q VLAN on GSR on 1GE, but it looks to be broken for 10GE subinterfaces. Counters are available by SNMP, but are buggy on Inbound. i

Re: Strange public traceroutes return private RFC1918 addresses

[EMAIL PROTECTED] disait : > Search the archives, Comcast and other cable/DSL providers use the > 10/8 for their infrastructure. The Internet itself doesn't need to be > Internet routable. Only the edges need to be routable. It is common > practice to use RFC1918 address space inside the ne

Re: TAT 14 failure

[EMAIL PROTECTED] disait : > In a message written on Tue, Nov 25, 2003 at 07:24:27PM +, [EMAIL PROTECTED] > wrote: > > still seeing decent ping times. anyone detect an actual outage or issue? > > Best info we have is that there are two outages. One has existed > for the last 3 weeks or so

As-Path filtering based on ranges, not regex

Hi, I would like to filter bgp updates based on AS origin. I know that i can match origin with regex as : _1239$ In fact, i would like to match as-path that originate from ASes from 856 to 1239. pseudo regex would be something like : _[856..1239]$ Juniper has this feature. Cisco does not AFA

Re: Effective ways to deal with DDoS attacks?

[EMAIL PROTECTED] disait : > > have been on the receiving end of, the first was generating a little over > > 300mbit/sec (steady for a prolonged time), and the second went over that by a > > fair bit. In both cases, we had core equipment (M20's and BSN5000's) fall > > over and die trying to "wo

Re: Survey on IBGP persistent route oscillation problem

[EMAIL PROTECTED] disait : > > We have a similar situation (RR + always-compare-MED off), and the BGP table > > version keeps changing at 1K/min (http://performance.cn.net:2003/). I > > suspect some > > route meet the criteria of IDR-oscillation draft. But in real world, it's > > very hard to pi