June 1997 - NANOG - lists.nanog.org

Re: PSI woes
by dlr＠bungi.com 25 Jun '97

25 Jun '97

[In the message entitled "Re: PSI woes" on Jun 25, 7:33, Robert Bowman writes:] > Looks like Dave has already prepended.. I'll bet PSI is LPing the PX > link over IXP peers, if the path exists on both.. which basically > has made all of Dave's attempts futile (meds, prepends, inconsisent, > etc) > > rob Correct. That's the conclusion that I came to. -- Dave Rand dlr(a)bungi.com http://www.bungi.com

1 0

PSI woes
by dlr＠bungi.com 25 Jun '97

25 Jun '97

Is anyone else having routing problems with PSI? On the left coast, we peer with PSI. We buy transit from MCI. PSI recently (about a month ago) installed a broken localpref to prefer their private MCI connection. It doesn't matter what we advertise to MCI (double-hop, origin incomplete), PSI still uses their private MCI peering - which of course is full during the day, so PSI customers get packet loss. Naturally, the problem does not exist on the right coast :-) I've called the NOC about 20 times now, trying to get it resolved. I've been promised, multiple times, that it would be fixed, only to get told today that "it's a policy issue". What? :-( Anyone else having trouble? -- Dave Rand dlr(a)bungi.com http://www.bungi.com

3 2

Re: Network IP analysis?
by Tobias Oetiker 25 Jun '97

25 Jun '97

> Date: Wed, 25 Jun 1997 07:39:09 -0500 (CDT) > From: Tim Peiffer <peiffer(a)nts.umn.edu> > To: philip bridge <bridge(a)unisource.ch> > Cc: nanog(a)merit.edu > Subject: Re: Network IP analysis? > > MRTG is a great graphing tool for small applications. Unfortunately > the package does not scale very well for my purposes. The snmp polling > and data storage in the logfiles are areas that I have problems with > using MRTG. Are there any other viable alternatives to MRTG, or are > there any existing mods to mrtg that graph right out of a file rather > than polling for itself? I already have the data I need and would > like to reuse it. If possible I would like to have a package that > is separated into 3 sections. One section can be called upon to > do polling or gathering data out of a repository. The second can > be called upon to do statistics runs. The 3rd can be called to provide > graphs on demand. if you have the time and interest, you are welcome to help bringing mrtg-3.0 into the real world ... all the plans for it are here, but unfortunately progress is slow because of resource problems (time or money) The main features planned for mrtg 3.0: * Ultra Fast Logfile Handling * Modular desing with separate processes for data gathering data logging and data presentation ... I have written a paper about what is intended. Check http://www.ee.ethz.ch/~oetiker/webtools/mrtg/3.0 If you have comments, time or money to help getting it done, please let me know ... cheers tobi (Mr. MRTG) -- ______ __ _ /_ __/_ / / (_) Oetiker, Timelord & SysMgr @ EE-Dept ETH-Zurich / // _ \/ _ \/ / TEL:+41(0)1-6325286 FAX:+41(0)1-6321194 /_/ \___/_.__/_/ oetiker(a)ee.ethz.ch http://www.ee.ethz.ch/~oetiker

1 0

Re: Network IP analysis?
by Ron Buchalski 25 Jun '97

25 Jun '97

>Date: Tue, 24 Jun 1997 20:49:05 -0800 (AKDT) >From: Bruce Potter <gdead(a)alaska.net> >To: nanog(a)merit.edu >Subject: Network IP analysis? > >Howdy, >Does anyone know of any good IP monitoring tools that can log/monitor the >TYPES of IP traffic going across your netowork (ie: one that logs tcp/udp and >esp port numbers/types of traffic)? Something that could query a router >would be nice, although I am unaware of any routers that support such a feature. >Even something that you could put on a box on the same ethernet subnet would >do the job. I'm curious as to the types of traffic our customers are pushing >as I am attempting to better analyze our usage. If you're using Cisco routers you can turn on Netflow switching. For more info on what Netflow can do, check out: http://www.cisco.com/warp/public/732/netflow/ntraf_wp.htm -rb --------------------------------------------------------- Get Your *Web-Based* Free Email at http://www.hotmail.com ---------------------------------------------------------

1 0

Re: Network IP analysis?
by Stuart Bryant 25 Jun '97

25 Jun '97

At 01:17 AM 6/25/97 -0400, Martin J. Hannigan wrote: > >> Howdy, >> Does anyone know of any good IP monitoring tools that can log/monitor the >> TYPES of IP traffic going across your netowork (ie: one that logs tcp/udp and >> esp port numbers/types of traffic)? Something that could query a router > >The "etherman" tool suite out of Curtin University in Austalia is a free >start. should be at ftp://ftp.cs.curtin.edu.au/pub/netman Stuart Bryant stuartb(a)ourworld.net See ? System/Network Administrator Level 7 Four Ourworld Global Network 77 Castlereagh Street lines +61 9 9223 2777 Sydney, 2000 only!

1 0

Verifying NOC contact information
by Sean Donelan 25 Jun '97

25 Jun '97

At the June '97 NANOG, Randy Bush mentioned I was contacting various NOCs to verify their contact information. I thought I'd post a note how the project is going. 2 providers confirmed no longer in the ISP business 11 providers still announcing routes on the Internet, but has contact information which no longer reaches any person associated with the provider (i.e. ring-no-answer, number not service, number assigned to a different party, person no longer employed by the provider) 80 providers with working phone numbers, but I want to break this one down a bit further. I'm going to have someone actually try to reach the NOC, rather than just the company. - Voice mail leading to a full mailbox, and other voice-mail jails - Redirected to a non-working phone number - Redirected to a limited calling area phone number - Noc? What's a noc? So depending on how generous you want to be, this group had a grade of "B" for having a working phone number. It would be a mistake to assume company size is related to any of this. There were large and small companies in every category. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Re: MCI outages
by Sean Donelan 25 Jun '97

25 Jun '97

>you've been around long enough to know the drill, you call >your upstream, he calls his, etc., etc., you expect our >front line noc to know you by name? things weren't always >this way of course, just like rfc 1104, information goes >out of date :-). If you've been around long enough, you remember the days when the MCI NOC used to flat-out refuse to do inter-provider referals. >From first-hand experience, I know they've told their customers to call the other provider directly, even when both networks involved were direct MCI customers. MCI has improved this particular mis-feature. In the last month or so, we've successfully received our first inter-provider referals through the MCI NOC. On the other hand, after two years our MCI salesperson(s) still hasn't told us the officially supported way of reporting a problem to InternetMCI. But I have accumulated a large collection of 1-800 numbers that I can use to call people I know by name :-). I prefer to go through channels, but when the channels don't work, I'm just as comfortable using any means necessary. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Re: Network IP analysis?
by Daniel W McRobb 25 Jun '97

25 Jun '97

Cisco's flow-export has this information, and cflowd keeps some tables on it. See: http://engr.ans.net/cflowd Daniel ~~~~~~ > Howdy, > Does anyone know of any good IP monitoring tools that can log/monitor the > TYPES of IP traffic going across your netowork (ie: one that logs tcp/udp and > esp port numbers/types of traffic)? Something that could query a router > would be nice, although I am unaware of any routers that support such a feature. > Even something that you could put on a box on the same ethernet subnet would > do the job. I'm curious as to the types of traffic our customers are pushing > as I am attempting to better analyze our usage. > > Thanks. > > ----------------------------------------------------------------- > Bruce Potter Internet Alaska, Inc. > gdead(a)alaska.net Grateful Admin > InterNIC Handle: BGP4 ;-) > PGP Public Key: http://www.alaska.net/~gdead/gdead.asc > Key ID: 1024/F12AC0B1 > -----------------------------------------------------------------

1 0

MCI outages
by William Allen Simpson 25 Jun '97

25 Jun '97

Well, we could talk about the repeated outages of MCI.... Last Thursday and again on Sunday, I saw all my traffic between myself in Michigan and my client in Mississippi going to Atlanta and a black hole, instead of via Houston and Memphis. This went for several hours before I called MCI NOC. I used to think the MCI NOC did an exemplary job. I guess that was when they were using BBN. Unfortunately, nowadays, IP address of routers are meaningless. They want "circuit numbers". Of course, I have no idea what _their_ circuit numbers are. Heck, I don't pay any attention to those under my control. The end result was they refused to take a trouble ticket, even though it was clearly their mis-routing problem. They did admit that there might be maintenance going on in the middle of a Sunday afternoon. The excuse was that "I'm not a direct customer on either end". Heck, even my next level up service provider isn't a direct customer. Long gone are the days when folks cooperated to resolve trouble reports. And has anyone else noticed a heck of a lot of route flapping between MCI and PSI, also through Atlanta? WSimpson(a)UMich.edu Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32 BSimpson(a)MorningStar.com Key fingerprint = 2E 07 23 03 C5 62 70 D3 59 B1 4F 5E 1D C2 C1 A2

2 1

Re: MCI outages
by sob＠academ.com 25 Jun '97

25 Jun '97

MCI reported to us in Houston that they had a bad card in one of their core routers here during the time you mentioned. The only way we knew about it was to call the NOC. Fortunately, we are a direct customer. -- Stan | Academ Consulting Services |internet: sob(a)academ.com Olan | For more info on academ, see this |uucp: {mcsun|amdahl}!academ!sob Barber | URL- http://www.academ.com/academ |Opinions expressed are only mine.

1 0