Re: Odd BGP AS Path

2010-09-22 Thread Randy Bush
>>> Probably a silly question, but can anyone explain to me this: >>> 3561 3356 9031 {35821,35821,35821,35821} i >> please support draft-wkumari-deprecate-as-sets-00.txt > Mere deprecation does not stop propagation of such paths. over time, routers will no longer generate or accept in the meantim

Re: IDS IPS

2010-09-22 Thread Merike Kaeo
Hi... I'll take this offline with you but this is quite a generic question and you have to look at requirements for the bank infrastructure and also what level of knowledge is available from staff to actually make the device you buy useful. Any answer you get with just a product name will tell

RE: IDS IPS

2010-09-22 Thread Green, Tim R
See also Webinspect, Appscan, etc. -Original Message- From: Michael Holstein [mailto:michael.holst...@csuohio.edu] Sent: Wednesday, September 22, 2010 4:29 PM To: Joshua William Klubi Cc: North American Network Operators Group Subject: Re: IDS IPS > What is ISS > > It's a hole i

Re: IDS IPS

2010-09-22 Thread Michael Holstein
> What is ISS > > It's a hole in space into which governments pour money. See also, IBM. ~Mike.

Re: IDS IPS

2010-09-22 Thread Robert Kisteleki
http://en.wikipedia.org/wiki/ISS On 2010.09.22. 18:29, Joshua William Klubi wrote: What is ISS Joshua On Wed, Sep 22, 2010 at 4:24 PM, Adefisayo Adegokewrote: ISS ideal for the Defense and Banking industry ... 'Ayo On Wed, Sep 22, 2010 at 10:11 AM, Joshua William Klubi< joshua.kl

Re: Odd BGP AS Path

2010-09-22 Thread Florian Weimer
* Randy Bush: >> Probably a silly question, but can anyone explain to me this: >> 3561 3356 9031 {35821,35821,35821,35821} i > > please support draft-wkumari-deprecate-as-sets-00.txt Mere deprecation does not stop propagation of such paths.

Re: IDS IPS

2010-09-22 Thread Dantzig, Brian
> Hi, > > I have been tasked to get the best IDS and IPS for our internal LAN and WAN > in a Banking infrastructure. > I would like ask if any one has deployed in any network with such > technology, and also if any one can recommend > a very good IDS and IPS for me to recommend to management

RE: IDS IPS

2010-09-22 Thread Scott Berkman
You should look into SecureWorks as well. http://secureworks.com/services/network_intrusion_prevention_detection.html -Scott -Original Message- From: Joshua William Klubi [mailto:joshua.kl...@gmail.com] Sent: Wednesday, September 22, 2010 12:12 PM To: North American Net

Re: FW: Odd BGP AS Path

2010-09-22 Thread Christopher Morrow
On Wed, Sep 22, 2010 at 12:42 PM, Chris Hall wrote: > And what about the truly, madly, deeply useless AS_CONFED_SET ?  [A > carbuncle's carbuncle if ever I saw one.] AS_CONFED_SET is included in the next version of this draft...

Re: IDS IPS

2010-09-22 Thread chip
The dog and pony show for the Tipping Point products was pretty interesting. Looks like they've been swalled up by HP now. http://h10144.www1.hp.com/products/security/index.htm#Intrusion Prevention Systems (IPS) On Wed, Sep 22, 2010 at 12:11 PM, Joshua William Klubi < joshua.kl...@gmail.com> wrot

Avaya Converged Network Analyzer

2010-09-22 Thread Drew Weaver
All argument aside about whether these products are worthwhile (hopefully) I am having a very strange and random technical problem with one of these boxes and I know in the past there were folks on NANOG who used them, if possible can anyone who falls into that category contact m

RE: IDS IPS

2010-09-22 Thread Bruce Grobler
Brilliant that went directly to my sense of humour! -Original Message- From: Fréderic [mailto:frede...@placenet.org] Sent: Wednesday, September 22, 2010 6:45 PM To: nanog@nanog.org Subject: Re: IDS IPS http://en.lmgtfy.com/?q=ips+iss bst rgds Le 22/09/2010 18:29, Joshua William K

Re: IDS IPS

2010-09-22 Thread Fréderic
http://en.lmgtfy.com/?q=ips+iss bst rgds Le 22/09/2010 18:29, Joshua William Klubi a écrit : > What is ISS > > Joshua > > On Wed, Sep 22, 2010 at 4:24 PM, Adefisayo Adegoke wrote: > >> ISS ideal for the Defense and Banking industry ... >> >> 'Ayo >> >> On Wed, Sep 22, 2010 at 10:11 A

FW: Odd BGP AS Path

2010-09-22 Thread Chris Hall
Randy Bush wrote (on Wed 22-Sep-2010 at 16:31 +0100): > > Probably a silly question, but can anyone explain to me this: > > 3561 3356 9031 {35821,35821,35821,35821} i I suppose it could be trying to convey the aggregation of four routes from 35821 ? Or perhaps an AS with multiple personality

Re: IDS IPS

2010-09-22 Thread Joshua William Klubi
What is ISS Joshua On Wed, Sep 22, 2010 at 4:24 PM, Adefisayo Adegoke wrote: > ISS ideal for the Defense and Banking industry ... > > 'Ayo > > On Wed, Sep 22, 2010 at 10:11 AM, Joshua William Klubi < > joshua.kl...@gmail.com> wrote: > >> Hi, >> >> I have been tasked to get the best IDS

Re: IDS IPS

2010-09-22 Thread Adefisayo Adegoke
ISS ideal for the Defense and Banking industry ... 'Ayo On Wed, Sep 22, 2010 at 10:11 AM, Joshua William Klubi < joshua.kl...@gmail.com> wrote: > Hi, > > I have been tasked to get the best IDS and IPS for our internal LAN and WAN > in a Banking infrastructure. > I would like ask if any

IDS IPS

2010-09-22 Thread Joshua William Klubi
Hi, I have been tasked to get the best IDS and IPS for our internal LAN and WAN in a Banking infrastructure. I would like ask if any one has deployed in any network with such technology, and also if any one can recommend a very good IDS and IPS for me to recommend to management Thank you. Joshua

Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability

2010-09-22 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco IOS SSL VPN Vulnerability Advisory ID: cisco-sa-20100922-sslvpn http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml Revision 1.0 For Public Release 2010 September 22 1600 UTC (GMT

Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

2010-09-22 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100922-cucmsip http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml Revision 1.0 For Public Release 2010

Re: Odd BGP AS Path

2010-09-22 Thread Randy Bush
>> please support draft-wkumari-deprecate-as-sets-00.txt > I just noticed that then - looking through idr list archives. I'll > give it a read.. > What is the best way to support, just email the list? i am not sure, as truth be told, i do not follow idr. a fair but not sure inference from its nam

Re: Odd BGP AS Path

2010-09-22 Thread Christopher Morrow
On Wed, Sep 22, 2010 at 11:33 AM, Heath Jones wrote: >> please support draft-wkumari-deprecate-as-sets-00.txt > I just noticed that then - looking through idr list archives. I'll > give it a read.. > What is the best way to support, just email the list? yes

Re: Odd BGP AS Path

2010-09-22 Thread Heath Jones
> please support draft-wkumari-deprecate-as-sets-00.txt I just noticed that then - looking through idr list archives. I'll give it a read.. What is the best way to support, just email the list? Cheers

Re: Odd BGP AS Path

2010-09-22 Thread Randy Bush
> Probably a silly question, but can anyone explain to me this: > 3561 3356 9031 {35821,35821,35821,35821} i please support draft-wkumari-deprecate-as-sets-00.txt randy

Odd BGP AS Path

2010-09-22 Thread Heath Jones
Hi all, Probably a silly question, but can anyone explain to me this: 3561 3356 9031 {35821,35821,35821,35821} i To explain it a bit better, I'm looking at real routing information from routeviews (#3). According to RFC 4271 (9.2.2.2 Aggregating Routing Information): > For the purpose of aggrega

RE: IPv6 tunnel brokers that provide BGP other than HE?

2010-09-22 Thread Nick Olsen
We do the same with HE, but we announce a /32 we have from arin. I think most of our upstreams do native ipv6 I'm just to lazy to flip the switches. Considering were not really giving ipv6 to customers yet(soon). Even when we go native, I figure we'll keep a session with HE, Don't see any disad

RE: IPv6 tunnel brokers that provide BGP other than HE?

2010-09-22 Thread Matthew Huff
With BGP it does. We are announcing a provider independent /48 address space, and receive the ipv6 bgp routes. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff  | Fax:   914-460-4139 > -Orig

Re: IPv6 tunnel brokers that provide BGP other than HE?

2010-09-22 Thread Ryan Shea
Maybe I am not clear, but without being able to detect when the 6in4 tunnel goes away, how does a second tunnel provide useful redundancy? -Ryan On Tue, Sep 21, 2010 at 11:31 AM, Jack Carrozzo wrote: > OCCAID has been doing this for a while but I don't see anything on their > site about it. Mig

Re: Cisco 6509/6513 cable management...

2010-09-22 Thread Matthew Schlegel
On Tue, Sep 21, 2010 at 15:16, Jeff Wasilko wrote: > On Tue, Sep 21, 2010 at 02:53:58PM -0500, Dantzig, Brian wrote: > > On Tue, 21 Sep 2010, Positively Optimistic wrote: > > > > Let me 2nd the mighty mo! We went with them, and had our cabling > contractor pre-wire the switch faces to patch panel