Re: Service Providers behaviour for dual homed enterprises

2015-09-23 Thread Jared Mauch
> On Sep 23, 2015, at 5:38 PM, Jason Bullen wrote: > > I've always worked in enterprise only so I thought you guys might be able > to help me with this one. > We are dual homed to Verizon and AT&T. We prepend all our prefixes out > AT&T to make them least preferred. During a recent issue we fo

Re: Segment Routing for L2VPN?

2015-09-23 Thread Anoop Ghanwani
It depends on what type of L2VPN we are talking about. If we are talking about VPLS (where we learn from the data path) changes are needed in order to make it work with segment routing. Basically, the VC label must be assigned and used in such a way that it indicates not only the service for the

Service Providers behaviour for dual homed enterprises

2015-09-23 Thread Jason Bullen
I've always worked in enterprise only so I thought you guys might be able to help me with this one. We are dual homed to Verizon and AT&T. We prepend all our prefixes out AT&T to make them least preferred. During a recent issue we found some users were coming in via AT&T. Using various looking g

Re: Ear protection

2015-09-23 Thread Don Nightingale
Seconded. I wear my Shure 425s with foam plugs most of my waking hours, they are excellent at blocking outside noise and sound pretty good to boot. On 9/23/2015 11:02 AM, Eric Rogers wrote: I use earphones for the phone and alerts function, and because they are noise cancelling, they lower t

RE: Ear protection

2015-09-23 Thread Justin Sherrill
> What are people using for ear protection for datacenters these days? > I'm down to my last couple of corded 3M 1110: http://www.moldex.com/hearing-protection/foam-earplugs/pura-fit.php This are cheap, but that's sort of the point - you can put a bin, or several bins, filled with them on the

Re: Ear protection

2015-09-23 Thread Wayne E Bouchard
If you go the "molded to my ear" route, do not forget that your ears will tend to change over time and these must be replaced periodically or they'll become uncomfortable and less effective. (I forget what the recommendation is but I think every 1-2 years at the outside.) On Wed, Sep 23, 2015 at 1

Re: Ear protection

2015-09-23 Thread Wayne E Bouchard
So I intended to provide a few short comments on this but got on a roll. The below may be of more or less use to you but this is the way I look at things. Listening to music isn't all that bad a means of dealing with noise for shorter periods such as the odd onsite engineers have to do because eit

Re: Huge latency/packet loss between Hibernia and NTT at New York

2015-09-23 Thread Charles van Niman
Do you happen to have a copy of the path going in the other direction? Based on this it seems that the issue starts after this leaves NTT. /Charles On Wed, Sep 23, 2015 at 9:01 PM, Paras wrote: > Hi all, > > Is anyone else seeing high latency and huge packet loss at NTT's NYC > location? > > Pac

Call for Participation in IEEE ICNP 2015 (Early Registration Deadline is Friday the 25th)

2015-09-23 Thread Srihari Nelakuditi
Call for Participation in IEEE ICNP 2015 Early Registration Deadline: September 25 Student Travel Grant Deadline: September 25 http://icnp15.cs.ucr.edu/ San Francisco, CA, USA Novembe

Huge latency/packet loss between Hibernia and NTT at New York

2015-09-23 Thread Paras
Hi all, Is anyone else seeing high latency and huge packet loss at NTT's NYC location? Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. hosted-by.reliablesite.net 0.0%920.7 1.5 0.7 6.6 1.7 2. 108.61.244.105 0.0%910.2 0.2 0.2 0.4

Re: Recent trouble with QUIC?

2015-09-23 Thread Roland Dobbins
On 24 Sep 2015, at 7:01, Sean Hunter wrote: If anyone has any useful information or hints I wonder if large-scale QoS and/or ACLing being done at some ISP edges in response to UDP reflection/amplification attacks may be a factor? It's not very smart of those working on QUIC to've thrown it

Re: Recent trouble with QUIC?

2015-09-23 Thread Ca By
On Wednesday, September 23, 2015, Sean Hunter wrote: > Hi all, > > I work for a 2500 user university and we've seen some odd behavior > recently. 2-4 weeks ago we started seeing Google searches that would fail > for ~2 minutes, or disconnects in Gmail briefly. This week, and > particularly in the

Re: Recent trouble with QUIC?

2015-09-23 Thread Benson Schliesser
Hi, Sean. I had precisely this experience, mostly noticed just in the past day or so. I assumed it was an effect of the firewall/NAT setup that my corporate IT network has implemented, because it often is a culprit in these kind of situations... But noticing that it was only for QUIC connections t

Recent trouble with QUIC?

2015-09-23 Thread Sean Hunter
Hi all, I work for a 2500 user university and we've seen some odd behavior recently. 2-4 weeks ago we started seeing Google searches that would fail for ~2 minutes, or disconnects in Gmail briefly. This week, and particularly in the last 2-3 days, we've had reports from numerous users on campus, e

Re: 4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Richard Irving
FWIW, I have single digit NANOG shirts in my closet... of course, I couldn't /*fit* into them/... anymore. It has been almos_t_ 20 years. Time flies eh ? Seems like just yesterday Bill, John, I and /*Moses*/ were all having lunch in Denver. ;-) On 09/23/2015 05:20 PM, Mike Hammett

Re: 4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Mike Hammett
Fearing you might be on here, I tried to be fairly non-offensive in my post. ;-) - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: "Richard Irving" To: "Simon Lockhart" , "Mike Hammett" Cc: "NANOG" Sent: Wednesday, Septembe

Re: 4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Richard Irving
They did, and it now formed peering with the RSD. Thanks! 12.4.(24)T is the first version from that IOS train that natively supports 4 byte ASN's. We can upgrade at a more convenient time and date. :-) On 09/23/2015 05:04 PM, Simon Lockhart wrote: On Wed Sep 23, 2015 at 03:37:31PM -0500, M

Re: 4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Simon Lockhart
On Wed Sep 23, 2015 at 03:37:31PM -0500, Mike Hammett wrote: > Do any of you have any useful input other than they need to upgrade their IOS > to something newer than 4.5 years old? I recently went through a very similar issue, and was convinced it was related to 32 bit ASNs. Are they seeing thi

Re: 4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Nick Hilliard
On 23/09/2015 21:37, Mike Hammett wrote: > Do any of you have any useful input other than they need to upgrade > their IOS to something newer than 4.5 years old? 12.4.(15)T is known to be affected by a variety of security problems, for which cisco TAC will provide free upgrades - assuming they are

4 byte ASNs through OpenBGPd to old Cisco IOS

2015-09-23 Thread Mike Hammett
Our IX's route servers run OpenBGPd 5.5. We are having a problem with a new customer getting turned up. He's getting back invalid or corrupt AS Path errors. There's a network on the IX that has a four byte ASN. They're running IOS 12.4.(15)T and is asking me if we support RFC 4893 which appears

Re: correlation between ingress and egress traffic in case of volume-based DDoS

2015-09-23 Thread alvin nanog
hi martin On 09/23/15 at 07:07pm, Martin T wrote: > volume-based DDoS attacks should often result with following bandwidth graphs: > > http://s12.postimg.org/gy3eps10t/volume_based_DDo_S_graph.png > > > This is a fabricated bps graph for 100GigE port facing an uplink when you say "fabricated"

Re: correlation between ingress and egress traffic in case of volume-based DDoS

2015-09-23 Thread William Herrin
On Wed, Sep 23, 2015 at 12:07 PM, Martin T wrote: > volume-based DDoS attacks should often result with following bandwidth graphs: > > http://s12.postimg.org/gy3eps10t/volume_based_DDo_S_graph.png > > This is a fabricated bps graph for 100GigE port facing an uplink > provider. As seen on the image

Re: Broken IPV6 for Enterprise websites

2015-09-23 Thread John Levine
In article <1443034283.839054.391777385.56cd7...@webmail.messagingengine.com> you write: >The enterprise.com and enterprise.ca websites advertise records, >but the web servers don't respond to IPV6 HTTP requests. I have tried >to contacting Enterprise several times to correct, but I can't ge

Re: Broken IPV6 for Enterprise websites

2015-09-23 Thread Jared Mauch
> On Sep 23, 2015, at 2:51 PM, Clinton Work wrote: > > The enterprise.com and enterprise.ca websites advertise records, > but the web servers don't respond to IPV6 HTTP requests. I have tried > to contacting Enterprise several times to correct, but I can't get thru > their layers of custom

Broken IPV6 for Enterprise websites

2015-09-23 Thread Clinton Work
The enterprise.com and enterprise.ca websites advertise records, but the web servers don't respond to IPV6 HTTP requests. I have tried to contacting Enterprise several times to correct, but I can't get thru their layers of customer service. I'm hoping that somebody on NANOG knows a technical

RE: Ear protection

2015-09-23 Thread Erik Sundberg
These block out the loud noise but allow you to still talk. Surefire Sonic Defender EP3, Ep4, EP5, EP7 They all are great! http://www.amazon.com/Surefire-Sonic-Defender-Plugs-1-Pair/dp/B007FKY8SI/ref=sr_1_8?ie=UTF8&qid=1443029640&sr=8-8&keywords=surefire+ep3+ep4 -Original Message- Fro

Re: correlation between ingress and egress traffic in case of volume-based DDoS

2015-09-23 Thread Roland Dobbins
On 23 Sep 2015, at 23:07, Martin T wrote: Are there any other reasons which cause outgoing traffic to drop if incoming traffic is very high Lots. It's very situationally-specific. The attack traffic may not be crafted in such a way so as to elicit a response from the targeted host(s). Th

Re: Ear protection

2015-09-23 Thread Lamar Owen
On 09/23/2015 10:09 AM, Keith Stokes wrote: Since I’m in our colo facility this morning, I decided to put some numbers on it in my little isolated corner with lots of blowers running. According to my iPhone SPL meter, average SPL is 81 - 82 dB with peaks 88 - 89 dB. With SPL that close to th

Cisco Security Advisory: Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability

2015-09-23 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability Advisory ID: cisco-sa-20150923-iosxe Revision 1.0 For Public Release 2015 September 23 16:00 UTC (GMT

Cisco Security Advisory: Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability

2015-09-23 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability Advisory ID: cisco-sa-20150923-sshpk Revision 1.0 For Public Release 2015 September 23 16:00 UTC (GMT

Cisco Security Advisory: Cisco IOS and IOS XE Software IPv6 First Hop Security Denial of Service Vulnerabilities

2015-09-23 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS and IOS XE Software IPv6 First Hop Security Denial of Service Vulnerabilities Advisory ID: cisco-sa-20150923-fhs Revision 1.0 For Public Release 2015 September 23 16:00 UTC (GMT

correlation between ingress and egress traffic in case of volume-based DDoS

2015-09-23 Thread Martin T
Hi, volume-based DDoS attacks should often result with following bandwidth graphs: http://s12.postimg.org/gy3eps10t/volume_based_DDo_S_graph.png This is a fabricated bps graph for 100GigE port facing an uplink provider. As seen on the image, outgoing traffic drops at the time when incoming traf

RE: Ear protection

2015-09-23 Thread Matthew Black
I use the 3M E-A-R plugs at home and love them. Since my tragus doesn't fold over, I am unable to use traditional Apple earbuds or other things that just fall out of my ear. 3M E-A-R plugs are like memory foam and fit snugly, providing excellent noise reduction. I use ComplyFoam on in-ear headph

Re: Ear protection

2015-09-23 Thread Royce Williams
On Wed, Sep 23, 2015 at 1:34 AM, Nick Hilliard wrote: > What are people using for ear protection for datacenters these days? For me, it depends on the use case. If I need to monitor for other sounds, or listen to music: Bose QuietComfort 15 - discontinued, but still at Costco.com for $240. The

RE: Ear protection

2015-09-23 Thread Eric Rogers
I use earphones for the phone and alerts function, and because they are noise cancelling, they lower the db of noise. I use Shure SE215. Eric Rogers PDS Connect www.pdsconnect.me (317) 831-3000 x200 -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Bryan Hollow

RE: Ear protection

2015-09-23 Thread Jordan Medlen
Being a musician in a band, as well as very frequent concert goer, I use those same ones. I like them the best for all around use. I have used many different kinds, and I prefer these. Thank you, Jordan Medlen Network Engineer Bisk Education, Inc. -Original Message- From: NANOG [mailto

Re: Ear protection

2015-09-23 Thread Harald Koch
I use Etymotic earplugs on my motorcycle as well as in other loud environments, because they attenuate "without loss of clarity": http://www.amazon.com/Etymotic-Research-ETY-Plugs-Protection-Earplugs/dp/B0044DEESS ​ -- Harald

RE: Ear protection

2015-09-23 Thread David Hubbard
I wear one of two things: 1) The 3M Peltor 105 ear muffs which offer 30db reduction. I keep them in my car because I also use them for the gun range, they fit snug but not annoying. They're only $18 on amazon: http://tinyurl.com/peltor105 There's also a behind the head bar if you don't like the o

Re: Ear protection

2015-09-23 Thread Karl Auer
On Wed, 2015-09-23 at 13:48 +, Bryan Holloway wrote: > Depends on the type of "noise" too. Obviously seek competent medical advice, but my understanding is that this is a myth. The energy of sound is what causes damage. Bach played at 120dB will do just the same damage as a jet engine at 120d

Re: Ear protection

2015-09-23 Thread Keith Stokes
Since I’m in our colo facility this morning, I decided to put some numbers on it in my little isolated corner with lots of blowers running. According to my iPhone SPL meter, average SPL is 81 - 82 dB with peaks 88 - 89 dB. According to the OSHA hearing protection chart, 90 dB is the maximum lev

RE: Ear protection

2015-09-23 Thread Steve Mikulasik
I use these normally. http://www.howardleight.com/earplugs/laser-lite I am surprised some datacenters don't have a requirement for ear protection when entering their facilitiy. Most large construction sites I have been to required me to have ear plugs at least in a pocket and I have been to a fe

Re: Ear protection

2015-09-23 Thread Bryan Holloway
On 9/23/15, 7:53 AM, "NANOG on behalf of Joe Greco" wrote: >> Maybe I've always listened to my music to loud and spend the bulk of >>time >> via ssh, but I've never felt a need for hearing protection in a DC, is >>this >> generally an issue for people? > >Depends on how long and how noisy. > >As

RE: Ear protection

2015-09-23 Thread Jameson, Daniel
I use these http://www.amazon.com/V-MODA-Faders-Tuned-Earplugs-Electro/dp/B007RRTO2Y/ref=sr_1_9?ie=UTF8&qid=1443014097&sr=8-9&keywords=er+20+ear+plugs in the equipment room, You can still hear, just brings the level down to a manageable level. Looks like a pair of headphones.

Re: Ear protection

2015-09-23 Thread Brian Christopher Raaen
On Wed, Sep 23, 2015 at 8:50 AM, wrote: > When buying a compute cluster, if there's a budget choice between > 15 more teraflops, or 15 less decibels, the teraflops *always* win. > Loudly sounds like a flop to me puns fully intended -- Brian Christopher Raaen Network Architect Zcorum

Re: Ear protection

2015-09-23 Thread Valdis . Kletnieks
On Wed, 23 Sep 2015 11:08:09 -, Alex Rubenstein said: > Why not just build a Datacenter that is quiet? When buying a compute cluster, if there's a budget choice between 15 more teraflops, or 15 less decibels, the teraflops *always* win. pgpPEg0jomK8N.pgp Description: PGP signature

Re: Ear protection

2015-09-23 Thread Joe Greco
> Maybe I've always listened to my music to loud and spend the bulk of time > via ssh, but I've never felt a need for hearing protection in a DC, is this > generally an issue for people? Depends on how long and how noisy. As I've gotten older, I find loud noise in general is less tolerable, so I'

Re: Ear protection

2015-09-23 Thread Joe Greco
> Why not just build a Datacenter that is quiet? Because the cost differential to do so is a lot greater than the $10 to get some hearing protection? Passive cooling typically translates to lower performance but also can be more expensive. ... JG -- Joe Greco - sol.net Network Services - Milwa

Re: Ear protection

2015-09-23 Thread jim deleskie
Maybe I've always listened to my music to loud and spend the bulk of time via ssh, but I've never felt a need for hearing protection in a DC, is this generally an issue for people? On Wed, Sep 23, 2015 at 8:08 AM, Alex Rubenstein wrote: > Why not just build a Datacenter that is quiet? > > On Sep

Re: Ear protection

2015-09-23 Thread Alex Rubenstein
Why not just build a Datacenter that is quiet? On Sep 23, 2015 05:34, Nick Hilliard wrote: What are people using for ear protection for datacenters these days? I'm down to my last couple of corded 3M 1110: http://www.shop3m.com/3m-corded-earplugs-hearing-conservation-1110.html These work reaso

Re: Ear protection

2015-09-23 Thread Will van Gulik
I used molded 15dB earplug from ACS that I also use for other environments (music, etc). They are way much more comfortable (like, you forget them) but also more expensive. BTW I'm looking for a place to get new ones in Europe, if anyone has got adresses. Will van Gulik On 23 Sep 2015, at 1

Re: Ear protection

2015-09-23 Thread Joe Greco
> On Wed, Sep 23, 2015 at 2:34 AM, Nick Hilliard wrote: > > What are people using for ear protection for datacenters these days? > > Telecommuting, in my case. > > had to say it! :0 I carry these around in my pocket all the time: http://www.amazon.com/gp/product/B000W2CPCC Not just for datace

Re: Ear protection

2015-09-23 Thread Dave Taht
On Wed, Sep 23, 2015 at 2:34 AM, Nick Hilliard wrote: > What are people using for ear protection for datacenters these days? Telecommuting, in my case. had to say it! :0 > I'm > down to my last couple of corded 3M 1110: > > http://www.shop3m.com/3m-corded-earplugs-hearing-conservation-1110.htm

Ear protection

2015-09-23 Thread Nick Hilliard
What are people using for ear protection for datacenters these days? I'm down to my last couple of corded 3M 1110: http://www.shop3m.com/3m-corded-earplugs-hearing-conservation-1110.html These work reasonably well in practice, with a rated nominal noise reduction rate of 29dB. Some people find