On 26/06/2012 07:06, Graham Beneke wrote:
> Just to clarify - there are 3 switch fabrics involved here. One from vendor
> C, one from vendor J and a third new fabric from an unchosen vendor.
>
> So ideally something that can accept the flows from various vendors.
>
> I'm also hoping for some insi
Hi Graham,
Have you had a look at Argus? http://www.qosient.com/argus/
It works well for us and they have very active support community to boot!
Cheers,
Harry
On 06/26/2012 01:45 AM, Graham Beneke wrote:
Hi All
I'm busy doing some digging to find a solution for collecting layer-2
flows data
Hello All ,
Has anyone successfully implemented Net::perl::ssh with mrlg . If yes
please unicast me.
The Perl module works fine but mrlg dosent seem to be able to connect to
the routers using that module .
.
On 26/06/2012 14:48, Peter Ehiwe wrote:
> Has anyone successfully implemented Net::perl::ssh with mrlg . If yes
> please unicast me.
>
> The Perl module works fine but mrlg dosent seem to be able to connect to
> the routers using that module .
I take it you're referring to Net::SSH::Perl? If so,
Net::Appliance::Session has successfully worked for me.
On Tue, Jun 26, 2012 at 6:48 AM, Peter Ehiwe wrote:
> Hello All ,
>
> Has anyone successfully implemented Net::perl::ssh with mrlg . If yes
> please unicast me.
>
> The Perl module works fine but mrlg dosent seem to be able to connect to
>
Hi all,
Could you point me into the right direction, please, on where one would
find different performance ratings for Cisco routers other than talking to
my SE (who is on PTO right now).
My understanding is that Cisco does not publish this info. How do folks
research that kind of stuff?
For exampl
Here's what I always refer too
http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf
It's close. I don't think the testing incorporates a lot of services
in use on the routers, however.
For max interfaces, read up on this:
http://www.cisco.com/en/US/product
my old TymServe 2100-GPS seems to have died. would appreciate reccos
for a replacement. it is in a stand-alone environment so i can avoid
roof access issues. antenna already in place. thanks.
randy
FreeBSD, Trimble Thunderbolt and a TAPR FatPPS?
-Steve
On Tue, Jun 26, 2012 at 1:30 PM, Randy Bush wrote:
> my old TymServe 2100-GPS seems to have died. would appreciate reccos
> for a replacement. it is in a stand-alone environment so i can avoid
> roof access issues. antenna already in pla
On Tue, 26 Jun 2012 07:30:30 -1000
Randy Bush wrote:
> my old TymServe 2100-GPS seems to have died. would appreciate reccos
> for a replacement. it is in a stand-alone environment so i can avoid
> roof access issues. antenna already in place. thanks.
I've only used their CDMA-based time serv
On Tue, Jun 26, 2012 at 01:54:37PM -0400, Steve Meuse wrote:
> FreeBSD, Trimble Thunderbolt and a TAPR FatPPS?
Thing with the Thunderbolts is not all revisions of the
firmware seem to play nice with ntpd. And yes, the PPS is quite
narrow and would have to be conditioned as well.
> http://endruntechnologies.com/time-server.htm
at over $4k, not sensible
randy
Randy,
Ublox LEA-7T's are either out, or will be out shortly in the Evaluation
Kit product. Stick your antenna on that, and it provides a very solid
1PPS to NTPd. Should be less than $300 shipped.
Andrew
Hi all
I would like to ask questions aboutconfederation and ibgp
We know confederation from nanog achieve 101,102 and setup lab.
bgp and ibgp can work properly but not sure we are doing right.
We have quesions
1/ for the annoucing networks, do we have to announce it in border routers?
eg: bor
+1 on the freesd-or-linux. with say a Garmin GPS-18x or whatever
timing puck. Have an intern or junior tech tackle it as a learning
exercise. The time geeks on comp.protocols.time.ntp seem to favor
low-power Soekris hardware (http://soekris.com/) for stratum-1s. You
need RS232 serial to get decent
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hi,
On 06/25/2012 10:45 PM, Graham Beneke wrote:
> Hi All
>
> I'm busy doing some digging to find a solution for collecting
> layer-2 flows data on a medium sized IXP. All we have at the moment
> is some MRTG graphs and we're trying to get a better
NANOG
*
How is the selection made?
The Board will review the candidacies and appoint. Decision will be final
and announced on June 22 to nanog-annou...@nanog.org.
There is more than the replacement position. Bear in mind that the election
process will be initiated in early August when we will h
Word around the campfire is that the 18x is jittery compared to the 18.
Maybe it only matters if you are super-anal.
Majdi, do you have any current info on this?
-r
Ryan Malayter writes:
> +1 on the freesd-or-linux. with say a Garmin GPS-18x or whatever
> timing puck. Have an intern or junio
> Thing with the Thunderbolts is not all revisions of the firmware seem to
> play nice with ntpd.
Would anybody with more info please contact me off-list.
We should be able to fix that, or at least document it.
--
These are my opinions. I hate spam.
NANOG Colleagues,
The Board has met last Friday June 22 and appointed Dan Golding as the
replacement board member until the next election. He will join our next
Board on July 6.
We would like to thank everyone who submitted their candidacy for this
interim. Your desire to serve is encouraging.
We
On (2012-06-26 15:05 -0500), Ryan Malayter wrote:
> If you have to have something pre-integrated and soon, I'd look at Meinberg:
> http://www.meinberg.de/english/products/index.htm#network_sync
We have several Meinbergs, quality hardware definitely. But I really wish
they'd have hardware timestam
On Tue, Jun 26, 2012 at 04:33:35PM -0400, Robert E. Seastrom wrote:
> Word around the campfire is that the 18x is jittery compared to the 18.
The 18x is much worse than the 18LVC. Thankfully I still have
2 18LVCs... but that said, given the hockey puck design, and that Randy
already has a
Yo Majdi!
> Does anyone have any experience with the Veracity VTN-TN?
> I don't, but it looks somewhat interesting.
No, but I highly recommend the BU-353. Chrony reports jitter of about
700 nano Sec while in my basement. So no need for an external antenna
in many cases. Not tried the new
On Tue, Jun 26, 2012 at 9:11 PM, Majdi S. Abbas wrote:
> On Tue, Jun 26, 2012 at 04:33:35PM -0400, Robert E. Seastrom wrote:
>> Word around the campfire is that the 18x is jittery compared to the 18.
>
> The 18x is much worse than the 18LVC. Thankfully I still have
> 2 18LVCs... but that s
Not sure where this data got injected into the system (or who knows,
perhaps it's a DNS injection attack or something), but this certainly is
not right. :-(
Erics-MacBook-Pro-2:~ erosenbe$ whois -h whois.internic.net facebook.com
Whois Server Version 2.0
Domain names in the .com and .net domain
Eric Rosenberry (eric.rosenberry) writes:
> Not sure where this data got injected into the system (or who knows,
> perhaps it's a DNS injection attack or something), but this certainly is
> not right. :-(
>
http://slacksite.com/humour/whois.html
In message
, Eric Rosenberry writes:
> Not sure where this data got injected into the system (or who knows,
> perhaps it's a DNS injection attack or something), but this certainly is
> not right. :-(
It's perfectly NORMAL. Just the owners of SWINGINGCOMMUNITY.COM,
BEYONDWHOIS.COM, SHQIPHOST.CO
lol, nice.
I should have actually read the output before posting.
That's funny. Disregard...
-Eric
On Tue, Jun 26, 2012 at 2:53 PM, Phil Regnauld wrote:
> Eric Rosenberry (eric.rosenberry) writes:
> > Not sure where this data got injected into the system (or who knows,
> > perhaps it's a DNS
On Jun 26, 2012, at 2:44 PM, Eric Rosenberry wrote:
> Not sure where this data got injected into the system (or who knows,
> perhaps it's a DNS injection attack or something), but this certainly is
It's an old trick, been around forever. You just register some random A record
with a registrar.
--- On Tue, 6/26/12, Deric Kwok wrote:
> From: Deric Kwok
> Subject: please helpconfederation and ibgp question
> To: "nanog list"
> Date: Tuesday, June 26, 2012, 12:51 PM
> Hi all
>
> I would like to ask questions aboutconfederation and ibgp
>
> We know confederation from nanog achieve 101,1
On 6/26/12, Mark Andrews wrote:
[snip]
> It's perfectly NORMAL. Just the owners of SWINGINGCOMMUNITY.COM,
> BEYONDWHOIS.COM, SHQIPHOST.COM, NASHHOST.NET and UNIMUNDI.COM playing
> games.
It's "expected" behavior of the WHOIS implementation, the "games" involving
creating WHOIS lookup ambiguity
On 06/26/2012 11:53 AM, Mark Andrews wrote:
In message
, Eric Rosenberry writes:
Not sure where this data got injected into the system (or who knows,
perhaps it's a DNS injection attack or something), but this certainly is
not right. :-(
It's perfectly NORMAL. Just the owners of SWINGINGCOMM
On Tue, 26 Jun 2012, Paul Graydon wrote:
On 06/26/2012 11:53 AM, Mark Andrews wrote:
In message
, Eric Rosenberry writes:
Not sure where this data got injected into the system (or who knows,
perhaps it's a DNS injection attack or something), but this certainly is
not right. :-(
It's perfec
On 6/25/12 10:33 PM, Mikael Abrahamsson wrote:
> On Mon, 25 Jun 2012, Cameron Byrne wrote:
>
>> SCTP is coming along, and it has a lot of promise.
>
> Doesn't SCTP "suffer" from the same problem as SHIM6 was said to be
> suffering from, ie that now all of a sudden end systems control where
> pack
I'm looking to consolidate DNS/DHCP/IPAM into a single tool. Today I use
IPPlan for IPAM, and have been reasonably happy with it over the last 5+
years, but I'd like to leverage the benefits of integrating DNS and DHCP
for real-time information, along with a more supportable solution for my
staff.
I would definitely second this - I have one of these from ages ago and it
runs great, and the CDMA sourced data means just throwing an antenna at
the top of the cabinet in the datacenter vs running antenna cabling onto
the roof for a GPS antenna. I believe I got mine on the secondary market
f
Google Safe Browsing and Firefox have marked our website as containing malware.
They claim our home page returns no results, but redirects users to another
compromised website couchtarts.com.
We have thoroughly examined our root .htaccess and httpd.conf files and are not
redirecting to the prob
On 6/26/12 2:34 PM, Dave Hart wrote:
> On Tue, Jun 26, 2012 at 9:11 PM, Majdi S. Abbas wrote:
>> On Tue, Jun 26, 2012 at 04:33:35PM -0400, Robert E. Seastrom wrote:
>>> Word around the campfire is that the 18x is jittery compared to the 18.
>>
>>The 18x is much worse than the 18LVC. Thank
Accidentally sent that to Matthew only,
mind sharing the domain name?
On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black wrote:
> Google Safe Browsing and Firefox have marked our website as containing
> malware. They claim our home page returns no results, but redirects users to
> another comprom
Is it possible that some malicious software is listening and injecting a
redirect on the wire? We've seen this before with a Windows machine being
infected.
On 26 June 2012 20:53, Matthew Black wrote:
> Google Safe Browsing and Firefox have marked our website as containing
> malware. They claim
I'm glad I'm not the only one that miss this one:
http://www.csulb.edu
It is in his signature and email address as well ;)
On Tue, Jun 26, 2012 at 11:04 PM, Sadiq Saif wrote:
> Accidentally sent that to Matthew only,
>
> mind sharing the domain name?
>
> On Tue, Jun 26, 2012 at 11:53 PM, Mat
I am also getting the same issue when accessing his website.
On Tue, Jun 26, 2012 at 11:07 PM, Landon Stewart wrote:
> Is it possible that some malicious software is listening and injecting a
> redirect on the wire? We've seen this before with a Windows machine being
> infected.
>
> On 26 June 2
On Jun 26, 2012, at 9:07 PM, Ishmael Rufus wrote:
> I'm glad I'm not the only one that miss this one:
>
> http://www.csulb.edu
>
> It is in his signature and email address as well ;)
The queries do seem to be taking a number of seconds, though, as opposed to
being nearly instant when I refere
Typically if google were pulling your site sometimes from the
wrong IP, their safe browsing page should indicate it being
on another AS number in addition to the correct one 2152:
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http
://www.csulb.edu
For example, the couchtarts
DNS seems to check out from here. Tested against Google DNS, OpenDNS
and Linode's DNS servers.
According to Google:
"Malicious software is hosted on 1 domain(s), including couchtarts.com/."
Normally, I would say this happens due to malicious ads loaded but
this does not seem to be a site that wil
On Jun 26, 2012, at 10:53 PM, Matthew Black wrote:
> Google Safe Browsing and Firefox have marked our website as containing
> malware. They claim our home page returns no results, but redirects users to
> another compromised website couchtarts.com.
>
> We have thoroughly examined our root .hta
On 26/06/2012, at 19.37, Eric Cables wrote:
> Can anyone respond with their experience with DDI in an Enterprise
> environment? Have the tools been useful/reliable? What is the pricing
> model?Replies can be on, or off, list
Have you looked at netdot (netdot.uoregon.edu) ?
Cheers,
Phil
Running Apache on three Solaris webservers behind a load balancer. No MS
Windows!
Not sure how malicious software could get between our load balancer and Unix
servers. Thanks for the tip!
matthew black
information technology services
california state university, long beach
From: Landon Stewa
Running Apache on three Solaris servers behind a load balancer.
I forgot how to lookup our AS number to see if it matches couchtarts.
matthew black
information technology services
california state university, long beach
-Original Message-
From: David Hubbard [mailto:dhubb...@dino.hostas
Have you tried using Google Webmaster tools?
On Tue, Jun 26, 2012 at 11:28 PM, Matthew Black wrote:
> Running Apache on three Solaris servers behind a load balancer.
>
> I forgot how to lookup our AS number to see if it matches couchtarts.
>
> matthew black
> information technology services
> cal
couchtarts.com seems to be hosted on a IP belonging to AS32244 (Liquid Web).
On Wed, Jun 27, 2012 at 12:28 AM, Matthew Black wrote:
> Running Apache on three Solaris servers behind a load balancer.
>
> I forgot how to lookup our AS number to see if it matches couchtarts.
>
> matthew black
> infor
Yes, we’ve used the Google Webmaster Tools a lot today. Submitted multiple
requests and they keep insisting that our site issues a redirect. Unable to
duplicate the problem here.
matthew black
information technology services
california state university, long beach
From: Ishmael Rufus [mailto:sa
Access the site via domain name: SaferBrowsing message
Access the site via IP: works fine.
Interesting...
On Tue, Jun 26, 2012 at 11:36 PM, Administrator
wrote:
> www.couchtarts.com has been detected as
> suspicious URLs,and Tag and deliver has been
> taken on 6/26/2012 10:36:04 PM.
> Message de
Looks like it is fixed. slowbro.jpg
On Tue, Jun 26, 2012 at 11:44 PM, Ishmael Rufus wrote:
> Access the site via domain name: SaferBrowsing message
> Access the site via IP: works fine.
>
> Interesting...
>
>
> On Tue, Jun 26, 2012 at 11:36 PM, Administrator <
> administra...@do.not.reply> wrote
IIRC Google safe browsing should be using its own DNS. Nevertheless, my
experience with Google's DNS is that it takes at least 2 hours before DNS
records would update.
If anyone knows more feel free to shed any light on Google's DNS and Google
SafeBrowsing.
On Tue, Jun 26, 2012 at 11:51 PM, Matth
On Jun 26, 2012, at 9:35 PM, Matthew Black wrote:
> Yes, we’ve used the Google Webmaster Tools a lot today. Submitted multiple
> requests and they keep insisting that our site issues a redirect. Unable to
> duplicate the problem here.
… have you consulted the logs?
If the redirect is there, it
It's not DNS. If you're sure there's no htaccess files in place, check your
content (even that stored in a database) for anything that might be altering
data based on referrer. This simple test shows what I mean:
Airy:~ user$ curl -e 'http://google.com' csulb.edu
301 Moved Permanently
Moved
Q:have you consulted the logs?
Seriously? Our servers have multiple log files due to multiple virtual hosts.
Our primary domain log file on just one server has over 600,000 records x 3
servers.
Probably over 100,000 304 redirects in our logs.
couchtarts.com does not appear in our log files.
Google Webtools reports a problem with our HOMEPAGE "/". That page is not
redirecting anywhere.
They also report problems with some 48 other primary sites, none of which
redirect to the offending couchtarts.
matthew black
information technology services
california state university, long beach
On 06/26/2012 11:05 PM, Matthew Black wrote:
Google Webtools reports a problem with our HOMEPAGE "/". That page is not
redirecting anywhere.
They also report problems with some 48 other primary sites, none of which
redirect to the offending couchtarts.
Except it is redirecting as shown by Jer
I'm not familiar with curl and don't understand what I type and what are
results. Are you suggesting that when google refers to our website, we pick
that up and redirect to couchtarts?
matthew black
information technology services
california state university, long beach
-Original Message
Well as Jeremy pointed out, your site is issuing
redirects, he gave you the command to show it:
curl -e 'http://google.com' csulb.edu
So if you're sure your server(s) haven't been hacked,
your application appears to have been hacked. It only
issues the redirect if the visitor comes in from a
goo
Invoking the referrer on your site recommends a redirect to couchtarts. I
agree with Jeremy and Jeff check your htaccess files, conf files and
anything that calls RewriteCond or Rewrite
On Wed, Jun 27, 2012 at 12:05 AM, Matthew Black wrote:
> Google Webtools reports a problem with our HOMEPAGE "
for example, from the commandline with telnet:
morrowc@teensy:~$ telnet www.csulb.edu 80
Trying 134.139.1.60...
Connected to gaggle.its.csulb.edu.
Escape character is '^]'.
GET / HTTP/1.0
Host: www.csulb.edu
Referer: http://www.google.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Jun 2012 0
On 6/27/2012 1:13 AM, Matthew Black wrote:
> I'm not familiar with curl and don't understand what I type and what are
> results. Are you suggesting that when google refers to our website, we pick
> that up and redirect to couchtarts?
>
> matthew black
> information technology services
> californi
Also shows a redirect if you use bing.com or yahoo.com (and probably others)
but not, for instance, blah.com...
Tnx
Chris
On Jun 27, 2012, at 1:13 AM, David Hubbard wrote:
> Well as Jeremy pointed out, your site is issuing
> redirects, he gave you the command to show it:
>
> curl -e 'http://go
Thank you for that helpful instruction!
curl doesn't work because our webserver is firewalled against outbound traffic.
The telnet to port 80 showed me the problem. I also didn't understand when
output was placed at the end of the command line, instead of starting on the
next line...that looked
In article
you
write:
>I'm not familiar with curl and don't understand what I type and what are
>results. Are you suggesting that when
>google refers to our website, we pick that up and redirect to couchtarts?
curl is a command line www client that's worth knowing about.
And I observe the sam
On Wed, Jun 27, 2012 at 1:26 AM, Matthew Black wrote:
> Thank you for that helpful instruction!
>
> curl doesn't work because our webserver is firewalled against outbound
> traffic. The telnet to port 80 showed me the problem. I also didn't
> understand when output was placed at the end of the c
Yes, thanks. I'll have to read up on that.
My e-mail was showing extra stuff at the end of the sample command lines, which
confused me:
Airy:~ user$ curl -e 'http://google.com' csulb.edu
...
Hi Eric,
On Wed, Jun 27, 2012 at 4:37 AM, Eric Cables wrote:
> [...]
> Can anyone respond with their experience with DDI in an Enterprise
> environment? Have the tools been useful/reliable? What is the pricing
> model?Replies can be on, or off, list.
Have you looked at EfficientIP (http://ww
There is definitely a 301 redirect.
$ curl -I --referer http://www.google.com/ http://www.csulb.edu/
HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Jun 2012 05:36:31 GMT
Server: Apache/2.0.63
Location: http://www.couchtarts.com/media.php
Connection: close
Content-Type: text/html; charset=iso-8859-1
Thanks again to everyone who helped. I didn't know what to enter with curl,
because Outlook clobbered the line breaks in Jeremy's original message.
Also, curl failed on our primary webserver because of firewall and load
balancer magic settings. The Telnet method worked better!
Our team is now s
Matt, what happens you get on a subnet that can access the webservers
directly and bypass the load balancer. Try curl then and see if its
something w/ the webserver or load balancer.
-Grant
On Wed, Jun 27, 2012 at 12:40 AM, Matthew Black wrote:
> Thanks again to everyone who helped. I didn't kn
On Tue, Jun 26, 2012 at 10:36:55PM -0700, Landon Stewart wrote:
> There is definitely a 301 redirect.
>
> $ curl -I --referer http://www.google.com/ http://www.csulb.edu/
> HTTP/1.1 301 Moved Permanently
> Date: Wed, 27 Jun 2012 05:36:31 GMT
> Server: Apache/2.0.63
> Location: http://www.couchta
It also redirects with facebook, youtube, and ebay but NOT amazon.
-Grant
On Wed, Jun 27, 2012 at 12:57 AM, Matthew Black wrote:
> Our web lead was able to run curl. Thanks.
>
> ** **
>
> matthew black
>
> information technology services
>
> california state university, long beach**
Subject: DDI (DNS+DHCP+IPAM) Solutions Date: Tue, Jun 26, 2012 at 07:37:36PM
-0700 Quoting Eric Cables (ecab...@gmail.com):
> I'm looking to consolidate DNS/DHCP/IPAM into a single tool. Today I use
> IPPlan for IPAM, and have been reasonably happy with it over the last 5+
> years, but I'd like t
77 matches
Mail list logo
