Re: Open source Netflow analysis for monitoring AS-to-AS traffic

again all, -Brian On 2024-03-26 19:04, Brian Knight via NANOG wrote: > What's presently the most commonly used open source toolset for monitoring > AS-to-AS traffic? > > I want to see with which ASes I am exchanging the most traffic across my > transits and IX links. I want

Open source Netflow analysis for monitoring AS-to-AS traffic

in the past, but no longer. Since it too appears to be hosted, I have the same objections as I do with Kentik above. On-list and off-list replies are welcome. Thanks, -Brian Links: -- [1] https://github.com/manuelkasper/AS-Stats [2] https://www.influxdata.com/what-are-netflow-and-sflow

Re: The Reg does 240/4

AWS this year. Those who may not be trading address blocks are starting to feel the bite.-BrianOn Feb 15, 2024, at 5:31 PM, Tom Beecher wrote:$/IPv4 address peaked in 2021, and has been declining since. On Thu, Feb 15, 2024 at 16:05 Brian Knight via NANOG <nanog@nanog.org> wrote:On 2024-02-15

Re: The Reg does 240/4

will this situation will be resolved. --lyndon -Brian

Re: One Can't Have It Both Ways Re: Streamline the CG-NAT Re: EzIP Re: IPv4 address block

looming. I grant you that, at the moment, it may still be low enough to be considered "cost of doing business" for nearly all enterprises. But it's exerting force like a glacier does; slowly, irregularly, yet inexorably; so it can be difficult to see. -Brian

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

c IP address prefixes. Could you please take a moment to fill out our brief survey? Your feedback will play a crucial role in our understanding of this topic. Survey Link: https://www.surveymonkey.com/r/JCHLWBB Thanks, Christopher Hawker -Brian

RE: what is acceptible jitter for voip and videoconferencing?

h-codec.html otoh the voip specifications here in Italy mandates the use of only g711 and g729 for calls between landline providers. Transcode or use only 729/711 making Killing them softly with quality issues sound like a good title for a song. Brian

Re: Zayo woes

ge your company is at. Swift integrations cost money, and most acquisitions promise cost savings instead of warning of increased costs due to integration. That's why most companies don't integrate quickly. :( Matt -Brian

RE: Lossy cogent p2p experiences?

e IXP and found they had added capacity between two switches and it had been configured with per packet balancing. It was changed to flow based balancing and everything went back to normal. Brian

RE: Are we back to the 2000's again?

>You wouldn't download a boat ;) Wouldn't that be a boatload? Sorry it's Monday morning and I could resist...

Re: Searchable archives of the list?

https://www.mail-archive.com/nanog@nanog.org/ > On Mar 23, 2023, at 9:44 AM, Josh Luthman wrote: > > Google? > > geolocation site:https://mailman.nanog.org/pipermail/nanog/ > > On Thu, Mar 23, 2023 at 10:30 AM Chris Adams > wrote: >> Once upon a time, Josh Luthman >

Re: CUPS in a BNG?

. :) As always… YMMV. - Brian > On Mar 22, 2023, at 4:02 PM, Tom Mitchell wrote: > > Anyone have any thoughts on this CUPS thing? I have a customer asking, but > it seems the lack of CP resiliency and additional latency between the DP and > CP make this a really dumb idea. H

ITNOG7 may 19th

sions should be sent to itnog...@lists.itnog.it no later than 15th of April 2023. Event information is available here https://www.itnog.it/itnog7/ Even if you do not want to present, you are welcome to come and experience an Italian style Nog. Bologna you know is the home of lasagna. Brian

Re: Scheduled outage -- Nationwide no driver license updates this weekend

It seems to say more about fluctuating funding and IT management.I seem to recall an issue with the FAA’s NOTAM / TFR database a few weeks back, one that grounded all flights one fine morning. Wasn’t network-related, but the articles I read about the application’s architecture and fault-tolerance

RE: Typical last mile battery runtime (protecting against power cuts)

ower from what I have seen. All towers I have seen have battery backup , a lot have generators too. I would say they have higher times than the fttc times above. HTH Brian

RE: BCP38 For BGP Customers

Hi Mike > This may not exist yet, but what about a uRPF-like feature that uses RPKI, > IRR, etc. instead of current BGP feed? There is rfc8704 that extends urpf But I do not know of any commercial available solutions Brian

RE: FCC chairwoman: Fines alone aren't enough (Robocalls)

a European level. Without international support it would have little or no effect on robocall/spoofed calls. It is funny because when the topic first came up years ago some proposed creating a dedicated blockchain service... now that would not be complex nor costly... Brian

RE: FCC chairwoman: Fines alone aren't enough (Robocalls)

mbers. Thus the calls come in from an international carrier. We are moving twords blocking incoming calls from international trunks containing Italian from numbers, something we see already in place for carriers in other EU countries such as France. Most operators here have been against stir/shaken as a means to resolve the problems. Brian

RE: Disney+ Contact

ey+: E-mail them the trouble subnet at techops-distribut...@disneystreaming.com. Also, techops-servi...@disneystreaming.com will probably be where that sends you. Another possible email is disneyplusispsupp...@disneyplus.com Brian

RE: HE.net and BGP Communities

> Google has let you down, 6730 (sunrise) is not 6939 (HE) ;) > Oops I should check thing better at the end of the day .. My bad

RE: HE.net and BGP Communities

is >route from a customer, it is not a customer route. You can use communities to set the local preference with HE. This should do the trick 6730:0008 set local pref to 64 (lowest they have afaik) Provided that your provider accepts it and propagates it. Or you can ask them to set it for you. Brian

ITNOG6

for papers on our website and we welcome presentations in English as well as Italian. https://www.itnog.it/itnog6/ Hope to see a lot of you there and If you would like to present something please send it in to our PC. Sorry for any duplicates Brian

Re: Serious Juniper Hardware EoL Announcements

>From Juniper... "you are correct that there isn’t a native 10G SFP+ form factor offered with the 304. QSA adapters are qualified (say for example, Nvidia), and from there it can support native 10G Bidi, WDM, etc. The economics per-port, obviously, get a little expensive with this

BGP Javascript Map/Visualization

, but that seems to not be a thing anymore. Can someone refresh my memory where that might be? Or did it get taken down? Thanks in advance, - brian

RE: FCC proposes higher speed goals (100/20 Mbps) for USF providers

Here in Italy there have been a lot of investments to get better broadband. Such as government sponsored bundles for areas with no return on investments, for schools etc with a lot of focus on reaching gigabit speeds The results have been mainly positive even though there are delays. On the end

Re: Disney+ Issues

> On Apr 29, 2022, at 10:55, Nate Burke wrote: > > As much as I hate legislation, more and more municipalities are levying a tax > on streaming services. I wonder how the taxing bodies would feel if they > knew that the company doesn't even know where their customers are. Minus that whole

RE: Disney+ Issues

ay to get it done on the provider level I would love to hear about it. Brian

RE: NXDOMAIN Resolvers

as a paid service , others include it and all are required to block the agcom,CNCPO etc requests. Brian From: NANOG On Behalf Of Antonia Affinito Sent: Wednesday, April 20, 2022 11:07 AM To: nanog@nanog.org Subject: NXDOMAIN Resolvers Good morning, I am currently analysing the DNS resolvers

Re: DMARC ViolationAS21299 - 46.42.196.0/24 ASN prepending 255 times

AS. The path prepending remains so that other providers can more quickly install the primary route when it comes back. Those two actions together have always made any backup route behave correctly for me. -Brian > On Mar 25, 2022, at 4:57 PM, Adam Thompson wrote: > >  > Tom, how

Re: Historic/Retired Routing Registry

Dan, Have you tried sending an email to Merit Network? r...@merit.edu<mailto:r...@merit.edu> https://www.irr.net/docs/list.html It seems like the kind of thing they might have legacy info on. I did a little bit of searching and didn't come up with anything about retired IRRs either.

Looking for a BGP/Routing/NOC contact at Comcast Business...

...regarding a hijacked network. If someone could contact me off-list, I would appreciate it. I've tried ab...@comcast.net and cnoc_corenetworkoperati...@cable.comcast.com with no luck.

Re: "Permanent" DST

So to clarify/muddy the situation further... Time zones do not fall purely on the 15 degree lines on a globe. As such, the location of the sun overhead is locality specific within a timezone. Don’t let the enemy of done win here. ;) > On Mar 15, 2022, at 2:44 PM, Brian R wrote: > &g

Re: "Permanent" DST

es will always be 15 degrees off of what is considered "Standard Time" by the world. The better solution would be to remove DST all together and tell everyone in the US to start work at 07:00 and get off work at 16:00 every day. Brian From: NANOG on behal

Re: Dropping support for the .ru top level domain

I think you need to understand that these actions will only prolong the situation and likely make things worse. Less info is always worse than more. - Brian > On Mar 15, 2022, at 4:07 AM, Patrick Bryant wrote: > > I propose dropping support of the .ru domains as an alternative to

Re: Dropping support for the .ru top level domain

Agreed Brian From: Mel Beckman Sent: Monday, March 14, 2022 7:07 PM To: Fred Baker Cc: Brian R ; nanog@nanog.org Subject: Re: Dropping support for the .ru top level domain +1 -mel beckman On Mar 14, 2022, at 9:29 PM, Fred Baker wrote:  My viewpoint

Re: Dropping support for the .ru top level domain

for political reasons. I am glad to see soo many people on here and many of the organizations running these services state as much. Brian From: NANOG on behalf of Patrick Bryant Sent: Saturday, March 12, 2022 2:47 AM To: nanog@nanog.org Subject: Dropping

Re: Upwork Suspending Operations in Russia and Belarus

Upwork != NANOG - Brian > On Mar 8, 2022, at 3:22 PM, Callan Banner wrote: > > Nanog to suspend work in Belarus and Russia. How do you all feel about this? > Senseless antagonization or correctly applied pressure? > > -- Forwarded message - > From:

Re: ICANN Response (Re: Ukraine request yikes)

John, Thank you for these. I'm glad to hear the stance on both of these. Brian From: NANOG on behalf of John Curran Sent: Thursday, March 3, 2022 5:04 AM To: Nanog Subject: ICANN Response (Re: Ukraine request yikes) ICANN response request from the Ukraine

Re: Ukraine request yikes

and resources but they will get around it. Freedom of information is the only way to help people understand the reality of what is going on in the world (galaxy, universe, etc). Brian Technological solutions for Sociological problems From: NANOG on behalf of Bryan

Re: New minimum speed for US broadband connections

k design for more than 20 years. If the LECs wanted to provide the service in these areas, they could have. They decided it was better to just milk the system, then prepare for the future. > > On Mon, Feb 28, 2022, 5:04 PM Brian Johnson <mailto:brian.john...@netgeek.us>> wr

Re: New minimum speed for US broadband connections

7 is 2 years? behind) What makes you believe it's nearly 100%? > > https://broadbandnow.com/North-Dakota <https://broadbandnow.com/North-Dakota> > On Mon, Feb 28, 2022 at 4:22 PM Brian Johnson <mailto:brian.john...@netgeek.us>> wrote: > Given this premise (that it is t

Re: New minimum speed for US broadband connections

Given this premise (that it is too expensive to provide access to rural areas), can you explain why nearly 100% of North Dakota is serviced by FTTH solutions. The exceptions being the areas still run by the traditional LECs? I’m not to sure this should be an urban/rural debate. > On Feb 28,

Re: Authoritative Resources for Public DNS Pinging

On 2022-02-10 11:42, John Todd wrote: "The Prudent Mariner never relies solely on any single aid to navigation" It's best to ping multiple targets, and take action only if all targets do not return replies. For route tracking a la $VENDOR_C's IP SLA, if possible, we'll ping next-hop IP,

RE: Authoritative Resources for Public DNS Pinging

about the traffic they receive , but that is another story. Brian

GTT contact

and is asking me for the duplex and mtu setting on our transit port. Terribly frustrating. Thanks Brian

Midcontinent Communications

I am looking for someone in network engineering/design at Midcontinent Communications (AS11232) who can explain why the IPv6 PD is set to 64 bits. I believe that this is a poor design decision and would like to understand how this decision was made. Thanks. - Brian

RE: BGP Route Monitoring

x/b-system-management-cg-asr9000-65x_chapter_0110.html Brian From: NANOG On Behalf Of Sandoiu Mihai Sent: Thursday, January 6, 2022 11:35 AM To: nanog@nanog.org Subject: BGP Route Monitoring Hi I am looking for a route monitoring product that does the following: -checks if a specific bgp

Re: Can it really be this quiet?

Also, lots of people out sick with the ‘rona. Fortunately, Omicron seems much less harmful than other variants. Hope all are staying safe and well. -Brian > On Jan 3, 2022, at 2:06 PM, Josh Luthman wrote: > >  > Likely a parallel between vacation, ie people not touching things

Re: Can it really be this quiet?

On Mon, Jan 03, 2022 at 02:46:59PM -0500, Allen McKinley Kitchen (gmail) wrote: > Or has NANOG also succumbed to a signed-integer date problem? > > Waiting to see what I get back.. Don't jinx it... > ..Allen -- Brian Reichert BSD admin/developer at large

RE: Latency/Packet Loss on ASR1006

%+ traffic, we do not see the drops:" And recommended removing traffic or upgrading esp. One of our guys disabled nbar on the router and the problem disappeared. I would suggest taking a look at what features you are using and if you can try and disable them to see if it makes any impact. We then upgraded esps and all has been fine since. Brian

Re: IPv6 and CDN's

> On Oct 23, 2021, at 8:30 AM, Ca By wrote: > > 87% of mobiles in the usa are ipv6 > > https://www.worldipv6launch.org/measurements/ > > Agreed. When they have to connect to an IPv4 only host, they do some type of AFTR. These devices have

Re: Network visibility

There is still zoning on some platforms, but there are now redundancies for the zones. > On Oct 21, 2021, at 12:22 AM, Mark Tinka wrote: > > > > On 10/21/21 03:19, Brian Johnson wrote: > >> +1 on -48VDC. > > Wasn't much fun when half the router would s

Re: Network visibility

+1 on -48VDC. > On Oct 20, 2021, at 1:38 PM, Lady Benjamin Cannon of Glencoe, ASCE > wrote: > >> On Oct 20, 2021, at 8:04 AM, Mark Tinka > > wrote: >> >> >> At any rate, you may very well need more than one system to monitor your >> entire network. >> >> Mark. >

RE: Increase bandwidth usage in partial-mesh network?

Brian

Re: uPRF strict more

For strict-mode... Completely agree. As has been previously said, this is a tool that all players involved need to understand. This is no different than everyone correctly using BGP in their application for their outcomes. > On Sep 29, 2021, at 12:07 PM, Adam Thompson wrote: > > We just ran

RE: [External] Re: uPRF strict more

-mode-discard family X' to behave like you > explain. Yes even in cisco land for Ios XR SBRTBH you need set next-hop discard in route policy. You cannot use recursive lookup to null in urpf Brian

RE: uPRF strict more

PF when we started with 1ks. Brian

Re: IPv6 woes - RFC

> On Sep 23, 2021, at 6:49 PM, Owen DeLong wrote: > > > >> On Sep 23, 2021, at 12:50 , Brian Johnson wrote: >> >> Side question on this thread… >> >> Is it everyones current expectation that if a provider were to switch to >> IPv6 and dro

Re: IPv6 woes - RFC

gurus), not to mention some business applications that would break or be sub-optimal at best. I see CGN as the band aid to this issue, not the cure to the problem. Discuss…? - Brian > On Sep 23, 2021, at 10:46 AM, Owen DeLong via NANOG wrote: > >> There are real issues wit

RE: [EXTERNAL] VoIP Provider DDoSes

rtunately. Another thing to consider is blocking fragments , which have been a major factor in the attacks I have seen in sip. But to do this you need to make sure that you are not exceeding mtu length in Invites, or block fragments only from untrusted IPs. Brian

RE: IPv6 woes - RFC

our own it's much better... A couple hundred corporations like this and the v6 table would surpass v4... Brian

Re: IPv6 woes - RFC

> On Sep 11, 2021, at 9:04 PM, Fred Baker wrote: > > > Sent using a machine that autocorrects in interesting ways... > >> On Sep 8, 2021, at 1:31 AM, Saku Ytti wrote: >> >> If the mid size eyeballs knew ipv4 is going away in 10, 15, 20 years >> whichever it is, then they'd of course have

Re: IPv6 woes - RFC

these tunnels. ;) Mark. -Brian

RE: [EXTERNAL] Re: PeeringDB Hackathon - looking for feature requests

I agree that this would be an interesting feature as it is something we commonly do over here using two or more queries. -B -Original Message- From: NANOG On Behalf Of Alarig Le Lay Sent: Thursday, August 12, 2021 3:10 PM To: nanog@nanog.org Subject: [EXTERNAL] Re: PeeringDB

RE: Alien waves

if alienwaves in the Italian and EU Research and education networks Both GARR (italy) and GEANT (EU) have published papers and different reports regarding their results. Brian From: NANOG On Behalf Of Lady Benjamin Cannon of Glencoe, ASCE Sent: Tuesday, July 20, 2021 8:30 PM To: NANOG

route-views.oregon-ix.net

: 4 ; <<>> DiG 9.10.3-P4-Ubuntu <<>> type= route-views.oregon-ix.net @phloem.uoregon.edu ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 35471 route-views.routeviews.org resolves fine. Thanks Brian

RE: Buying IPs with poor reputation

by webmasters/postmasters/firewall admins that take months to get straightened out. This is what makes the difference in price well worth getting reputable IPs and avoiding countries that may be considered as potentially unsafe. Brian From: NANOG On Behalf Of David Guo via NANOG Sent: Wednesday, May

RE: EMail server gets blocked by Microsoft

Hi Dominque, And sign up for snds https://sendersupport.olc.protection.outlook.com/snds/index.aspx It will give you the status of your IPs and you can get jenkmail reports etc. Brian From: NANOG On Behalf Of Mel Beckman Sent: Tuesday, April 27, 2021 4:19 PM To: Dominque Roux Cc: nanog

RE: Submitting Fake Geolocation for blocks to Data Brokers and RIRs

ess NL as the RIPE country of record. Brian

RE: Submitting Fake Geolocation for blocks to Data Brokers and RIRs

lass of IPs to a customer and register it to them in the RIPE database. Do you assign it to the customers address, in Estonia , or use the DC Address which is in Germany? Which could be the basis of geolocalizing the Address. I would not want to be the lawyer on either side of the battle. Brian

Geo location Contacts

Good day all. I am trying to find contacts at ipdata.co and ipinfo.io. I recently acquired new ip space and most places have updated. But the above 2 have not and still show CA as the location for this ip space. Please feel free to email me off the list. Thank you Brian

Re: Texas ERCOT power shortages (again) April 13

> On Apr 14, 2021, at 11:07 AM, Niels Bakker wrote: > > * brian.john...@netgeek.us (Brian Johnson) [Wed 14 Apr 2021, 17:37 CEST]: >> Not what I was saying. The demand for virtue-signaling green energy is not >> an effective strategy to actually having power availab

Re: Texas ERCOT power shortages (again) April 13

w? > > -- > TTFN, > patrick > >> On Apr 14, 2021, at 11:35 AM, Brian Johnson > <mailto:brian.john...@netgeek.us>> wrote: >> >> Not what I was saying. The demand for virtue-signaling green energy is not >> an effective strategy to actually having po

Re: Texas ERCOT power shortages (again) April 13

20/20 vision. It’s like saying that I shouldn’t have built the house where the tornado hit. > On Apr 14, 2021, at 10:12 AM, Patrick W. Gilmore wrote: > > Brian: > > The idea that because ERCOT is a non-profit somehow means they would never do > anything to save mo

Re: Texas ERCOT power shortages (again) April 13

point. Your assumptions of neglect, poor maintenance and failing to learn are subterfuge. Traditional methods are more reliable (so far) than the newer “green” methods. Just pointing out facts. > On Apr 14, 2021, at 8:26 AM, Tom Beecher wrote: > > Brian- > > I am aware. That's al

Re: Texas ERCOT power shortages (again) April 13

Tom, You do realize that ERCOT is a non-profit organization…. > On Apr 14, 2021, at 8:04 AM, Tom Beecher wrote: > > > Funny how this obsession with a green grid has made the grid > > unreliable, resulting in sales of gas-burning generators and > > perishable fuel. Dare I say it's not been

RE: an IP hijacking attempt

Hi Noah, > Would you care to share the said prefix?   This is the prefix we found associated with their name in the afrinic db. inetnum:169.239.204.0 - 169.239.207.255 Cheers, Brian

RE: an IP hijacking attempt

t; not. If it is just an FYI the RIR will take note of it, watch for trends and > take it > into account before doing anything with the registration. > > Just what I would do. Thanks for the Advice, I will do so Brian

Re: an IP hijacking attempt

If they had a route record that was close, I Would give them the benefit of doubt. They do not however as the only records start with 217. And our IPs are 45. So It Is very strange. Would you send a LOA without a route record? Brian Turnbow Da: Mel Beckman

an IP hijacking attempt

RIRs for the offending AS and our IPs, Is there anywhere to report this type of activity? We have dealt with hijacking technically speaking in the past but this is the first time, to my knowledge, of someone forging a LOA with our IPs. Thanks in advance for any advice Brian P.S. a big thanks

Re: DPDK and energy efficiency

high chassist that use 60mm height fans, which are much more efficient in ratio of air moved per time period vs watts. Or ask the colo to turn the A/C lower ;) (that moves the power problem elsewhere, I know) Thanks, -Brian

Re: DPDK and energy efficiency

far fewer questions about vEdge Cloud performance problems than I do on other virtual platforms. Cheers, Etienne Thanks again, -Brian

Re: Famous operational issues

essons since then. Like, install and maintain an FM-200 fire suppression system. But nevertheless, sometimes when I step into a colo, I think of that outage and the impact it had. -Brian

Re: Verizon DC/NOVA Issues?

I am here in NOVA (on FIOS) and it's working with higher packet loss than normal. On Tue, Jan 26, 2021 at 12:14 PM Robert Webb wrote: > Any hearing of Verizon internet issues affecting the DC, Northern > Virginia, and surrounding areas? > > Just got a flood of complaints about work VPN

Verizon FiOS/Google Peering Issues in Northeast?

Is this well known? Getting lots of reports of 50% packet loss to anything behind AS15169 from FiOS, including 8.8.8.8

Re: opportunistic email encryption by the MTA (not MUA)

On Fri, 2021-01-15 at 10:26 -0500, Bryan Fields wrote: > > It's still stored unencrypted on the server, and the admin can see > all. This is true. I was just referring to transit leakage. > If > you want it secure, you have to run gpg and encrypt the body. Again, true. Cheers, b.

Re: opportunistic email encryption by the MTA (not MUA)

On Fri, 2021-01-15 at 03:33 -0800, Randy Bush wrote: > email from a friend who uses protonmail as their MTA suddenly started > to > be opportunistically encrypted with pgp; i.e. the sender's MUA did > nothing to cause the encryption. i believe this started when i > provided > my pgp public key

Re: nike.com->nike.com/ca

the Akamai proxy going the geo-locate and the code on the content server is consuming that and redirecting you to the location specific part of the site. [Medline_Signiture2]<http://www.medline.com/?cmpid=eid:signature-logo-US-Sales> Brian Dantzig Senior Network Engineer Information Se

RE: Need someone with clue @ Network Solutions.

and IP address. Once they are ok, then you go inside the domain where you can assign them to the domain. Sorry no contact Brian From: NANOG On Behalf Of Matthew Crocker Sent: Tuesday, December 15, 2020 5:43 PM To: nanog@nanog.org Subject: Need someone with clue @ Network Solutions. I need

Re: Ingress filtering on transits, peers, and IX ports

* Automation of updates to aggregate and customer IP blocks (looking at using the irrpt project for this) Once more, to those who provided valuable input, thank you very much indeed! -Brian !- ! Static ACLs for Service Provider BCP 84 Compliance ! IOS XR config ! IPv4 object-group

Re: Re[4]: Disney+ Geolocation (again)

Hi Jeff That seems to be oriented twords end users, not isps. Are you suggesting that isps call/chat customer service? So there Is no noc to noc services available? When I opened a chat saying that i was writing from an ISP the response was What Is an ISP? Thanks Brian Brian Turnbow

Re: Spectrum (AS33363) Clue?

everything on CoD, that new XBOX thing, and PS5s. Good luck getting info out of them, I usually just run my mouth with the local guys when they come out, I get more info that way than in a ticket. Brian Miller Clemson University/C-Light Network Services On 11/17/20, 3:51 PM, "NANOG on b

RE: Re[2]: Disney+ Geolocation (again)

Hi Mike, You may want to add technical operations services team techops-servi...@disneystreaming.com<mailto:techops-servi...@disneystreaming.com> We wrote to the distribution address and they replied forwarding it to services Brian From: NANOG On Behalf Of Mike Hammett Sent:

Re: Incorrect GeoIP filtering of 185.83.72.0/22

Adam, ip2location.com has that IP block listed as "(DCH) Data Center/Web Hosting/Transit” which we’ve seen cause issues for residential users in the past, most notably on Cogent IP space. We worked with supp...@ip2location.com to have the address block re-analyzed and updated to "(ISP) Fixed

RE: 100G over 100 km of dark fiber

with these https://www.cisco.com/c/en/us/products/collateral/routers/network-convergence-system-5500-series/datasheet-c78-743732.html that costs like a gazzilion dollars but your company may have great discounts... HTH Brian > -Original Message- > From: NANOG On Behalf Of > Ja

Re: Ingress filtering on transits, peers, and IX ports

$VENDOR_J makes things so much simpler for this task. Thanks, -Brian On 2020-10-20 00:18, Randy Bush wrote: term blocked-ports { from { protocol [ tcp udp ]; first-fragment; destination-port [ 0 sunrpc 135 netbios-ns netbios-dgm netbios-ssn 111 4

Re: Ingress filtering on transits, peers, and IX ports

fe00::/9 fec0::/10 exit Thanks, -Brian On 2020-10-14 17:43, Brian Knight wrote: So I have put together what I think is a reasonable and complete ACL. From my time in the enterprise world, I know that a good ingress ACL filters out traffic sourcing from: * Bogon blocks, like 0.0.0.0/8

Re: Ingress filtering on transits, peers, and IX ports

CL. I think that's good for an enterprise network, but as an SP, I'm very hesitant to include this. Is this included in anyone else's transit / peer / IX ACL? Is there anything else that I'm not thinking of? Thanks, -Brian On 2020-10-14 09:25, Brian Knight via NANOG wrote: Hi Marcos, T

Re: Ingress filtering on transits, peers, and IX ports

focused on whether ASes accepted spoofed traffic. They also referenced the new NXNSAttack, which I did not know about previously. Thanks, -Brian On 2020-10-13 20:49, Eric Kuhnke wrote: > Aside from the BCPs currently being discussed for ingress filtering, I would > be very interested in

Re: Ingress filtering on transits, peers, and IX ports

. Of the choices presented in BCP 84, what do folks really use? If it's an ACL, what challenges have there been with updates? etc. -Brian On 2020-10-13 18:52, Marcos Manoni wrote: Hi, Brian Check RFC3704/BCP84 Ingress Filtering for Multihomed Networks (Updated by: RFC8704 Enhanced Feasible-Path uRPF

  1   2   3   4   5   6   7   >