- NANOG - lists.nanog.org

DNS Changer items
by Eric J Esslinger 16 Aug '12

16 Aug '12

A) The DNS changer working group site http://www.dns-ok.us seems to be down for the clean people anyway. (Down for everyone agrees with me). B) Fox, CNN, and MSNBC have apparantly all run stories in the last couple of hours that essentially ended with 'Call your ISP if you have any questions' (gee thanks). And I'm told the ABC/CBS/NBC are running the same basic thing tonight, with the same basic ending. The more you know... __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

23 40

Bandwidth spikes due to Microsoft release of windows 8 on MSDN
by Blake Pfankuch 15 Aug '12

15 Aug '12

Anyone seeing a significant increase of traffic with this?

4 4

[2.0 Update] Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability
by Cisco Systems Product Security Incident Response Team 15 Aug '12

15 Aug '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 2.0 For Public Release 2012 August 15 16:00 UTC (GMT) +--------------------------------------------------------------------- Summary ======= Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers (ASR) Route Switch Processor (RSP-4G and RSP-8G), Route Switch Processor 440 (RSP440), and Cisco Carrier Routing System (CRS) Performance Route Processor (PRP). The vulnerability is a result of improper handling of crafted packets and could cause the route processor, which processes the packets, to be unable to transmit packets to the fabric. Cisco has released free software updates that address this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org iF4EAREIAAYFAlArqykACgkQUddfH3/BbTp9qQD+JykExH3Qj2xaR74o4PomFAL4 vpajwSl1+1b6CtV5cQoA/0kwCOTFnjS4Te31QjkSx5+uhDpEPs5qjTb8F6EXiapD =Yc2a -----END PGP SIGNATURE-----

1 0

Testing 1gbps bandwidth
by Luqman Kondeth 15 Aug '12

15 Aug '12

Team, Is anyone aware of any public IPerf servers in the middle east or close by?(Europe) or anywhere that can do udp?. I have a 1gbps Internet link which I’ve been asked to show that it has 1gbps download speeds. I know this is going to be difficult but thought I’d ask anyway. Is there any other suggestion for this testing? thanks ----------------------------------------------------------------------------------------------------------------------------- [image: Description: Description: NYUAD Logo] *Luqman Kondeth* Snr Network Consultant +971 26284735 NYU Abu Dhabi Sama Tower, Airport Rd. and Electra St., Next to New NMC Hospital P.O. Box 129188 Abu Dhabi, United Arab Emirates

10 12

Re: Testing 1gbps bandwidth
by Scott Weeks 14 Aug '12

14 Aug '12

--- nanog(a)penfold.owt.com wrote: From: Russ Hughes <nanog(a)penfold.owt.com> Now if you only added "copy running-config startup-config", you wouldn't have to deal with this more then once. -------------------------------------------- That's what "wr mem" does... scott

2 1

Re: Testing 1gbps bandwidth
by Nick Olsen 14 Aug '12

14 Aug '12

Agreed. We actually started hosting our own speedtest.net server in order to get some more consistent results. Still nothing like iperf. But a decent "Quick and dirty" type of test. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Nick Hilliard" <nick(a)foobar.org> Sent: Tuesday, August 14, 2012 11:09 AM To: nanog(a)nanog.org Subject: Re: Testing 1gbps bandwidth On 14/08/2012 15:43, valdis.kletnieks(a)vt.edu wrote: > case trying to use one of the speedtest.net servers - we had a clear 10G path > out through like 3 AS's in a row, the bottleneck was speedtest.net's server. :) you'll have to forgive me for being the cynical type, but I gave up on Speedtest the day they reported 146Mbit/sec download over a link which was hard-wired to 100Mbit/sec full duplex, and later that day they reported 2Mbit from another nearby server to the same box. I figured a stddev of 2 orders of magnitude wasn't going to give me figures accurate enough for my requirements. But hey, this is the Internet: ymmv, ianal, lolwut, bbq. Nick

1 0

Re: Testing 1gbps bandwidth
by Scott Weeks 14 Aug '12

14 Aug '12

--- creynolds(a)tsieda.com wrote: From: Chuck Reynolds <creynolds(a)tsieda.com> for a small investment with PacketExpert from TSI. Reach out for a demo thanks --------------------------------------------------- Router#conf t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#no ip sales-critters-on-nanog Router(config)#^Z Router# wr mem Router# lo scott

2 1

Trouble with IPv6 setup on Quagga
by Anurag Bhatia 14 Aug '12

14 Aug '12

Hello everyone I am having trouble with Quagga in setting up IPv6 BGP. So far it was failing with external providers. Just now I gave it a try to setup BGP session (IPv6 only) within our ASN between two routers. >From our other end router I see there is no acconcement, while I see blocks being announced via Quagga. Also strange enough is that the number of blocks I account - they all come as "withdrawl routes" on other router as soon as Quagga is turned on. E.g this is what I see on Quagga: node4# show bgp ipv6 summary BGP router identifier 199.116.78.28, local AS number 54456 RIB entries 18741, using 1757 KiB of memory Peers 1, using 4560 bytes of memory Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2607:1b00:10:a::1 4 54456 6865 5 0 0 0 00:00:05 9798 Total number of neighbors 1 node4# So BGP session is up. Next if I check advertised routes, it goes like: node4# show bgp ipv6 neighbors 2607:1b00:10:a::1 advertised-routes BGP table version is 0, local router ID is 199.116.78.28 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, R Removed Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 2607:1b00:d1::/48 :: 0 100 32768 i *> 2607:1b00:d2::/48 :: 0 100 32768 i Total number of prefixes 2 node4# I don't see these routes in other router at all. Here's what my Quagga bgpd.conf looks like: hostname node4 timers bgp 4 16 router bgp 54456 bgp router-id 199.116.78.28 redistribute connected metric 1 redistribute static metric 1 neighbor 2607:1b00:10:a::1 remote-as 54456 neighbor 2607:1b00:10:a::1 next-hop-self address-family ipv6 network 2607:1b00:d1::/48 network 2607:1b00:d2::/48 neighbor 2607:1b00:10:a::1 activate exit-address-family Was wondering if someone can point in me right direction since both of these prefixes are (annnounced and ?) withdrawn as soon as I restart Quagga. Thanks. -- Anurag Bhatia Web: anuragbhatia.com Skype: anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

7 7

voip network hopping
by shawn wilson 14 Aug '12

14 Aug '12

i'm curious if there is any spec in the voip protocol suite that allows one to maintain a call while changing networks? what i want to do is setup a softphone on an android phone. however, this won't work very well if i can't switch from wifi -> 3g -> wifi (i doubt wifi -> wifi is possible because of hardware limitations). my alternative is to get asterisk to put the call on hold and play an automated message if a reconnection (and unhold) takes >1 second. i would expect that ip telephony would allow for some type of hopping though, i just don't know what to google for?

4 5

Does anyone use anycast DHCP service?
by Joe 14 Aug '12

14 Aug '12

hi, We are considering setup reduant DHCP server clusers by using anycast. In our situation customer get IP address with DHCP, DHCP server authenticate customer by radius.Authentication information is carried by option60 and option82. does anybody has some suggestion on this ? if anycast is suitable for our situation, does it possible to introduce load balancer in anycast node ? that is, DHCP service availabilty is guaranteed by multiple anycast nodes, inside anycast node dhcp service availability is guaranteed by server farm behind load balancer? Joe

4 3