November 2003 - NANOG - lists.nanog.org

Apologies but...Verizon Postmaster?
by Michael Loftis 22 Nov '03

22 Nov '03

I have been trying for weeks to get in touch with someone who will respond with something other than a form letter at Verizon. Can someone please contact me off-list? My company (Modwest) is being unilaterally blocked. I can't even send mail to abuse, postmaster, etc. from an @modwest.com address because of the block in place without a reason and without recourse. TIA, and I'm sorry for posting here but it's really my last resort (as it should be anyones IMHO). -- GPG/PGP --> 0xE736BD7E 5144 6A2D 977A 6651 DFBE 1462 E351 88B9 E736 BD7E

4 5

OC3 Router
by Chris Strandt 22 Nov '03

22 Nov '03

I was hoping that someone could point me in the right direction. I'm looking for a cisco border router as a backup for our existing. We have a 7206VXR with NPE400. The only thing we have in the router is a OC3c POS card on one side and a multimode Gig-Ethernet on the other. We are not doing BGP with this router (upstream is annoucing for us). Is there a vendor who can tell us the minimum we need to do this for emergency situations, or someone on the list who can recommend a cisco solution that can meet these requirments? Thanks, -Chris Strandt Liquid Web Inc.

2 1

how to fix bad referral in pir.org whois?
by Duane Wessels 22 Nov '03

22 Nov '03

I have four .org domains that I transferred from gandi to godaddy a couple of months ago. However, the pir.org whois still lists whois.gandi.net as the referral whois. For example: Domain ID: D46124408-LROR Domain Name: HTCP.ORG Created On: 05-Dec-2000 03:30:16 UTC Last Updated On: 08-Sep-2003 21:28:55 UTC Expiration Date: 05-Dec-2004 03:30:16 UTC Sponsoring Registrar: Go Daddy Software, Inc. (R91-LROR) Status: OK Registrant Name: SEE SPONSORING REGISTRAR Registrant Street1: Whois Server:whois.gandi.net Registrant Street2: Referral URL:http://www.gandi.net Admin Name: SEE SPONSORING REGISTRAR Billing Name: SEE SPONSORING REGISTRAR Tech Name: SEE SPONSORING REGISTRAR Name Server: NS.PACKET-PUSHERS.COM Name Server: NS2.PACKET-PUSHERS.COM I called godaddy and they were very unhelpful. They claim it is not their problem because they are listed correctly as the sponsoring registrar. Whos fault is this? How can I get it fixed? Duane W.

2 1

Juno (United Online) contact phone?
by Rich Casto 21 Nov '03

21 Nov '03

Can someone please provide a phone number for the Juno (aka United Online) NOC? I already have the $1.95/minute support number (877-912-5866), so don't send that one. One of my client's emails are being bounced so I need to call them to find out why. Thanks! Rich

2 1

IPSEC VPNs capable of handling worm traffic
by Magnus Eriksson 21 Nov '03

21 Nov '03

The last 2 days I've been fighting against the Nachi ICMP onslaght on a customer network. Problem is that the "random" destination traffic seem to kill my VPNs by vendor N. CPU is consumed, probably due to trying to maintain/update route cache. Or maybe it hits it's pps limit. Ordinary traffic req. is approx. 10 Mbit/s mixed traffic. Worm traffic I would like to be able to handle is approx 2-3kpps. Anyone know of any VPN boxes/routers with VPN capability that is better able to handle the onslaught? Is vendors C's boxes better than Nortel's? Is CEF going to help me? Or is the problem pps related? Will it help to throw a bigger box at the problem? Any advice greatly appreciated. Regards Magnus - Sweden

6 5

OT: Internet.com hostmaster
by Charles Sprickman 21 Nov '03

21 Nov '03

Hi, If there's anyone here from "internet.com" or if you know someone over there, could you please let them know that their domain for the "isp-bgp" list has expired. The list has been idle since the 11th of this month. Thanks, Charles Registrant: Jupitermedia Corporation (MVQRRLSERD) 23 Old Kings Highway S. Darien, CT 06820 US Domain Name: ISP-BGP.COM Administrative Contact: Jupitermedia Corporation (ZFBKBPQRAO) hostmaster(a)internet.com 23 Old Kings Highway S. Darien, CT 06820 US 203-662-2800 Technical Contact: Hegedus, Peter (PH535) hostmaster(a)INTERNET.COM 23 OLD KINGS HWY S DARIEN, CT 06820-4538 US (203) 662-2800 fax: (203) 655-4686 Record expires on 04-Nov-2003. Record created on 04-Nov-1999. Database last updated on 21-Nov-2003 13:06:08 EST.

1 0

Increase in traffic to/from DSL subs since August?
by Jared B. Reimer 21 Nov '03

21 Nov '03

Greetings. Another independent ISP operator and I have noticed a pretty significant increase in traffic to and from our broadband (DSL) subscribers since August. It's been a fairly steady uptick, at least in my case, resulting in a doubling of overall average traffic to/from these folks since then. Have others seen a similar trend? Any thoughts as to what the cause may be? Our best guess a virus/worm, possibly being used as a spam relay or other proxy at this point... Many thanks, -- Jared

9 8

The Cidr Report
by cidr-report＠potaroo.net 21 Nov '03

21 Nov '03

This report has been generated at Fri Nov 21 21:47:57 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 14-11-03 127686 90350 15-11-03 127761 90470 16-11-03 127866 90362 17-11-03 127701 90382 18-11-03 127919 90258 19-11-03 127738 90168 20-11-03 127684 90121 21-11-03 127651 90186 AS Summary 16153 Number of ASes in routing system 6459 Number of ASes announcing only one prefix 1412 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73522432 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 21Nov03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 127761 90178 37583 29.4% All ASes AS4323 689 202 487 70.7% TW-COMM Time Warner Communications, Inc. AS6197 748 262 486 65.0% BATI-ATL BellSouth Network Solutions, Inc AS701 1412 978 434 30.7% ALTERNET-AS UUNET Technologies, Inc. AS7018 1368 946 422 30.8% ATT-INTERNET4 AT&T WorldNet Services AS7843 532 130 402 75.6% ADELPHIA-AS Adelphia Corp. AS6198 613 254 359 58.6% BATI-MIA BellSouth Network Solutions, Inc AS209 885 540 345 39.0% ASN-QWEST Qwest AS22909 312 10 302 96.8% DNEO-OSP1 Comcast Cable Communications, Inc. AS1239 954 667 287 30.1% SPRINTLINK Sprint AS22773 311 28 283 91.0% CCINET-2 Cox Communications Inc. Atlanta AS27364 353 71 282 79.9% ACS-INTERNET Armstrong Cable Services AS4355 382 101 281 73.6% ERMS-EARTHLNK EARTHLINK, INC AS1221 952 680 272 28.6% ASN-TELSTRA Telstra Pty Ltd AS4134 389 124 265 68.1% CHINANET-BACKBONE No.31,Jin-rong Street AS6347 336 85 251 74.7% DIAMOND SAVVIS Communications Corporation AS17676 279 36 243 87.1% GIGAINFRA Softbank BB Corp. AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6140 343 128 215 62.7% IMPSAT-USA ImpSat AS11305 229 38 191 83.4% INTERLAND-NET1 Interland Incorporated AS2386 402 219 183 45.5% INS-AS AT&T Data Communications Services AS4519 193 12 181 93.8% MAAS Maas Communications AS14654 180 2 178 98.9% WAYPORT Wayport AS6327 203 27 176 86.7% SHAW Shaw Communications Inc. AS2048 252 86 166 65.9% LANET-1 State of Louisiana AS20115 583 423 160 27.4% CHARTER-NET-HKY-NC Charter Communications AS9929 196 38 158 80.6% CNCNET-CN China Netcom Corp. AS9583 236 79 157 66.5% SATYAMNET-AS Satyam Infoway Ltd., AS15270 202 48 154 76.2% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. AS6517 235 84 151 64.3% YIPESCOM Yipes Communications, Inc. AS9800 207 57 150 72.5% UNICOM CHINA UNICOM Total 14219 6371 7848 55.2% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 66.41.192.0/18 AS13367 CCCH-AS3 Comcast Cable Communications Holdings, Inc 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.143.2.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 AS719 LANLINK autonomous system 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.0.180.0/24 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.1.116.0/22 AS9266 VIPER-AU-AP Vipernet 202.4.252.0/22 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.136.254.0/23 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.165.0.0/20 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.165.16.0/20 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.179.64.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.65.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.66.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.67.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.68.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.183.96.0/20 AS9723 ISEEK-AS-AP ISEEK Ltd 202.189.234.0/23 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.10.16.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.17.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.18.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.19.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.21.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.22.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.23.0/24 AS9266 VIPER-AU-AP Vipernet 203.32.4.0/23 AS7617 APNIC-AS-2-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.129.126.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 203.129.127.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 203.132.95.0/24 AS9787 CONCEPT-AU-AP Concept Networks 203.132.97.0/24 AS7652 VIANET-AS-AP Vianet Communications Pty Ltd 203.132.99.0/24 AS7657 TIG-US-PAS-AP The Internet Group Limited 203.132.102.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.103.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.104.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.105.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.106.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.109.0/24 AS10141 CALOUNDRA-AS-AP Caloundra.net 203.132.110.0/24 AS7598 ALPHALINK-AS-AP Alphalink Pty Limited - Melbourne, Australia 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.112.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.125.0/24 AS4817 TECHEX1-AS-AP Techex Primary Netblock 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 TELEGLOBE-AS Teleglobe Inc 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 218.211.0.0/16 AS4788 TMNET-AS-AP TMnet, Telekom Malaysia Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: RBLs in use
by Matthew Sullivan 21 Nov '03

21 Nov '03

I'm gonna post this back publically because it will be of interest to all (I hope)... Jasper van Beusekom wrote: >Mat: > > > >>Noone is exempt from listing in SORBS, but proven whitehats don't get >>blocked. >> >> > >Do you have many such contacts? > I have a few (less than 50) > Would it be something to create a DNSBL >list for known whitehats and sites with functioning abuse teams? Such a >whitelist could be a partial implementation of a 'trusted network' >principle. > I am *currently* creating an extension to SORBS which will allow ISPs to register as whitehats along with their mailservers and netblocks, and a fast response email address. The idea being if a mailserver is about to be listed they will get 24 hours warning to avert the listing. If addresses within their netblocks get listed they will get notification mails, and the host is listed immediately. >A similar project runs under the DNSBL domain: > nlwhitelist.dnsbl.bit.nl > >Usenet reference unfortunately in Dutch: > 3f81483c$1(a)inaja.bit.nl > >Basically, respectable ISPs with active abuse desks can request to get >listed, and will be removed when complaints start coming in. > >Whitelists wouldn't attract the same kind of DDoS activities either. > I think I'll still be a DDoS target though ;-/ Yours Mat

2 1

Re: [nsp] Re: Per VLAN Stats on MSFC2 - Complaints from the Field
by Anthony Cennami 20 Nov '03

20 Nov '03

If you want to bill accurately, bill off the Layer 2 ports; that's what is always churning the traffic. I've not looked at the accuracy on a scientific level, but I've never found what I believed to be a serious discrepency when billing/polling the physical ports. The reporting of the Layer 2 and 3 devices, virtual or otherwise appears to be correct; I argue that Cisco attempting to 'populate' the SVI counters with information they are actually not seeing would be 'breaking' the implementation. Remember folks, we're talking about multi layer switching/routing here; the SVI isn't processing all of the traffic and should not lie and say that it is. Hudson Delbert J Contr 61 CS/SCBN wrote: > cisco long ago made the decision that counting packets was NOT as important > processing them. i've seen this thread in discussions about IOS since > Version > 9. they arent going to change the methodology right now because we need to > bill off > of it. why use the overhead involved with passing info about L2 to L3 > if 'train is still moving the cattle'. who cares? > > > ~v/r > Del Hudson > 61CS/SCBN - LAAFB NCC > Network Architecture & Engineering Group > delbert.hudson(a)losangeles.af.mil > > > > -----Original Message----- > From: Gert Doering [mailto:gert@greenie.muc.de] > Sent: Thursday, November 20, 2003 1:43 PM > To: Anthony Cennami > Cc: Nanog Mailing list; Robert A. Hayden; cisco-nsp(a)puck.nether.net > Subject: Re: [nsp] Re: Per VLAN Stats on MSFC2 - Complaints from the > Field > > > Hi, > > On Thu, Nov 20, 2003 at 12:52:02PM -0500, Anthony Cennami wrote: > >>This is because in 1996 you were likely not dealing with 'Switch >>Routers'; today's 'routers' perform some form of flow switching/caching, >>meaning once the traffic enters the VLAN routed interface and an >>appropriate path is found it is sent down the the Layer 2 fabric. > > > This is all nice and shiny, but having shortcuts doesn't mean "the L2 > fabric can't export the resulting numbers up to the L3 brain". > > They just botched it. Counters and Cisco boxes seem to be fundamentally > incompatible. > > gert

2 2