- NANOG - lists.nanog.org

Re: Content Delivery Networks
by Brandon Butterworth 10 Aug '07

10 Aug '07

> How do you engineer around enterprise and ISP recursors that > don't honor TTL, instead caching DNS records for a week or more? Ask their users to tell them to stop being muppets brandon

1 0

Re: Client information?
by Scott Weeks 10 Aug '07

10 Aug '07

--- security.guru.phd(a)gmail.com wrote: From: "Paul Atkins" <security.guru.phd(a)gmail.com> I am a network researcher. One question I want to ask the ISPs here are that if they have a choice of finding more information about the hosts that connect to them, is it something they will like to spend money on? For example if the ISP can find out what applications is the host running etc. would it be useful for the ISPs? ------------------------------------------------- No, there're too many free tools that're way fun and good. For example: www.ntop.org with lsof for your particular question. But, you're asking folks who aren't afraid of the technology. Ask an exec and they'll probably give a much different answer. ;-) scott

1 0

Redistribute routes from EIGRP into BGP VRF
by Bailey Stephen 10 Aug '07

10 Aug '07

Hello all, Currently working on a solution at the moment where I receive specific /25 routes via a leased line into the global routing table via EIGRP on a Cisco 2801. I then need to inject these routes into a BGP VRF to be advertised onto BGP Peers within the VRF Network. The /24 routes for the Site LAN are injected via Radius on the DSL Routers so this task makes the /25 more favourable via the Leased Line Router. ================================================== IOS Version on 2801 (Router B) = Version 12.4(12a) BGP VRF Config: router bgp 65xxx no synchronization no bgp log-neighbor-changes bgp scan-time 10 no auto-summary ! address-family ipv4 vrf test1 redistribute connected redistribute static redistribute eigrp ... ================================================== Simple Diagram attached Routers C & D do not see the redistributed routes from Router B via BGP. Not sure if this is an IOS Bug, but this should work?? Thanks Stephen Bailey

2 1

Re: too many variables
by Patrick Giagnocavo 09 Aug '07

09 Aug '07

On Aug 9, 2007, at 3:47 PM, Tony Li wrote: > > On Aug 9, 2007, at 12:09 PM, Leigh Porter wrote: > >> >> >> Yes a very big unless. Multi-core processors are already available >> that would make very large BGP convergence possible. Change the >> algorithm as well and perhaps add some multi-threading to it and >> it's even better. > > > Not necessarily. BGP convergence is strongly dependent on memory > bandwidth and multiple cores do not increase that. > > Tony Sun just released the T2 chip, claimed 60GB/s memory bandwidth, on- board 10GbE interface etc. Pricing under $1000 for an 8-core chip with 64 "threads". Cordially Patrick Giagnocavo patrick(a)zill.net

1 0

PoC Exploit Now Available for Cisco NHRP Vulnerability
by Paul Ferguson 09 Aug '07

09 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 If you're using NHRP and haven't patched, it might be a good idea to do so real soon now. A proof of concept exploit is now avialable which can crash a router configured with NHRP authentication enabled: http://www.milw0rm.com/exploits/4272 Cisco security advisory from yesterday: http://www.cisco.com/en/US/products/products_security_advisory09186a0080899 63b.shtml FYI, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGu1BKq1pz9mNUZTMRAglTAKCEGkQG0pZIn8OAZUPTv3mgFcJxgACg/5qt AIreKsDjLlFGJNSOthmhinU= =ZbWR -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

L3 in NYC
by Marshall Eubanks 09 Aug '07

09 Aug '07

Is anyone else having trouble with Level 3 in New York ? We have circuits down, etc. Regards Marshall

3 2

RE: Problems with either Cisco.com or AT&T?
by Paul Ferguson 08 Aug '07

08 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Michael Airhart <mairhart(a)cisco.com> wrote: >I can't speak for Cisco or Cisco IT, but as evidenced by this email, at least part of our connectivity is up. > >No doubt someone official is looking at it as we speak. (I'll just lurk Nanog to get the skinny).. > Cisco's problem seems to be have been resolved. Also see: http://blogs.cisco.com/news/2007/08/update_ciscocom_site.html Thanks to everyone for their verification. :-) - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGujLsq1pz9mNUZTMRAu7pAJ4s2GtvR24DNGyLwGmEeaz6sLQx7gCfZW/J ALFp5DbrxnvdxL9Qfl8OyHk= =0gF2 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

RE: Problems with either Cisco.com or AT&T?
by Scott Weeks 08 Aug '07

08 Aug '07

Does anyone else see the irony in all this if it does turn out to be cisco's fault? High Availability, multiple upstream providers, backup generators and all that? scott

2 1

RE: SBC Issues/Contact?
by Paul Ferguson 08 Aug '07

08 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Koch, Christian" <ckoch(a)qualitytech.com> wrote: >Just confirmed w/ Cisco, apparently there was a power outage in San Jose I'm only a few blocks from Cisco, and we have two data centers in the immediate San Jose area -- first _I've_ heard of any powerloss on San Jose. Must be specific to Cisco... - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGuijcq1pz9mNUZTMRAjMSAKDAJ/0C7xSQGp9KS6FOJrJxd0ClFgCcCRuZ oU8/3Bovfc4Qa/hZDwVnoiQ= =GOrX -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

Re: Problems with either Cisco.com or AT&T? [POWER UPDATE]
by J. Oquendo 08 Aug '07

08 Aug '07

http://infiltrated.net/ciscoOutage.jpg -- ==================================================== J. Oquendo "Excusatio non petita, accusatio manifesta" http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xF684C42E sil . infiltrated @ net http://www.infiltrated.net

1 0