Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

2016-02-11 Thread Adrian M
Be careful, It appears that something is broken with ARP on this release. We have no ARP on lan interface, and somebody else has a similar problem: https://www.reddit.com/r/networking/comments/433kqx/cisco_asa_not_recording_an_arp_entry/ On Wed, Feb 10, 2016 at 10:36 PM, Sadiq Saif

[NANOG-announce] NANOG PC Appointments for 2016-2017

2016-02-11 Thread Daniel Golding
Greetings NANOG Colleagues, The NANOG Board of Directors has completed the Program Committee selection process. This year, 18 members submitted their candidacies for 7 available positions. We want to thank each and every candidate for considering this important service to our community. We

Re: Automated alarm notification

2016-02-11 Thread Jörg Kost
Hi, you could use snmptt with an Exec-Command (SendMail, SMS, …) or define it as a passive service alert in Nagios / Icinga / $YourMonitoring. Jörg On 11 Feb 2016, at 22:51, Frank Bulk wrote: Is anyone aware of software, or perhaps a service, that will take SNMP traps, properly parse them,

Automated alarm notification

2016-02-11 Thread Frank Bulk
Is anyone aware of software, or perhaps a service, that will take SNMP traps, properly parse them, and perform the appropriate call outs based on certain content, after waiting 5 or 10 minutes for any alarms that don't clear? I looked at PagerDuty, but they don't do any SNMP trap parsing, and

Re: Automated alarm notification

2016-02-11 Thread John Adams
datadog will do this without issue, and if you have a small number of hosts it's nearly free. -j On Thu, Feb 11, 2016 at 1:51 PM, Frank Bulk wrote: > Is anyone aware of software, or perhaps a service, that will take SNMP > traps, properly parse them, and perform the

Re: Automated alarm notification

2016-02-11 Thread Oliver O'Boyle
Check_MK over OMD. Good event parsing capabilities. Easy to set up, nagios core but rewritten app for much better performance. Multisite master/slave capabilities +++. Free or supported. Your pick. On Feb 11, 2016 9:26 PM, "John Adams" wrote: > datadog will do this without

Re: Automated alarm notification

2016-02-11 Thread Josh Galvez
I've used Zabbix, Nagios, etc to handle receiving and parsing traps, set/clear etc. Then have them send a trap (or via email to script that sends a trap) to SIPShout to actually generate the callout. It's worked well. -Josh On Thu, Feb 11, 2016 at 2:51 PM, Frank Bulk wrote:

Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

2016-02-11 Thread Dale W. Carder
Thus spake Andrew (Andy) Ashley (andre...@aware.co.th) on Thu, Feb 11, 2016 at 02:35:51PM +: > Is a control-plane ACL to limit isakmp traffic (UDP/500) to an affected ASA > from desired sources enough to mitigate this attack, until upgrades can be > performed? It's worth noting that is not

Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

2016-02-11 Thread Andrew (Andy) Ashley
Is a control-plane ACL to limit isakmp traffic (UDP/500) to an affected ASA from desired sources enough to mitigate this attack, until upgrades can be performed? Regards, Andrew Ashley -Original Message- From: NANOG on behalf of Adrian

Re: Fiber to the home specialists/consultants?

2016-02-11 Thread Fletcher Kittredge
Since two asked: Tilson On Wed, Feb 10, 2016 at 8:14 PM, Jeremy Austin wrote: > Ditto. > On Wed, Feb 10, 2016 at 4:04 PM Daniel Rohan wrote: > > > Can anyone point me at a firm that does or consults on FTTH from a > >