- NANOG - lists.nanog.org

RE: Monitoring/Trending Software -- Which Package(s) do you use?
by Berger, Gary 21 Feb '01

21 Feb '01

Actually you probably need to look at VitalNet.. This is a competing product to Concorde NetHealth... It provides all the RMON2 and MIB polling and can be setup with thresholds... Depending on what you are looking for you may still want to look at mrtg and rrd which can poll mib devices as well as execute scripts based on min/masx thresholds. -G Gary Berger Internal Consultant, Principal Dow Jones & Company Enterprise Network Services -----Original Message----- From: John Starta [mailto:john@starta.org] Sent: Tuesday, February 20, 2001 9:23 PM To: Lee Watterworth Cc: 'nanog(a)merit.edu' Subject: Re: Monitoring/Trending Software -- Which Package(s) do you use? Lee, Lucent's VitalSuite (either SP or Enterprise) software is definitely worth a look. You can find detailed information about it on their web site: http://www.lucentnps.com/software/ jas At 05:44 PM 2/20/01 -0500, Lee Watterworth wrote: >I have been handed the task of finding a monitoring/trending package for >our network and systems. > >I will be looking at the package's collection mechanism for flexibility >(snmp gets, traps, rmon), and the variety/configurability of the reports >it can produce. The package should be able to provide (configurable) >alerts when threshholds are met/surpassed. > >I have been evaluating Concord's eHealth Suite, and would like to evaluate >other options before I commit to a particular package. > >Any feedback would be great. > >-Lee.

2 1

RE: Beer and Gear surprise
by Mark Borchers 21 Feb '01

21 Feb '01

Anybody who has been to other NANOGs should have a lifetime supply of t-shirts by now. Technically, I think "gear" is a reference to network hardware. > I, personally, feel somewhat cheated that there was no "gear" > available from the vendors in attendance.

2 1

e-mail delivery problems
by Joe Arnstein 21 Feb '01

21 Feb '01

Hello, When one of my sites sends messages with certain attachments, communication between the client and the mailserver freezes up, and I am having trouble pinpointing the source. The problem brings up some other questions I have about extended SMTP transmissions that aren't spelled out in RFC 1869. When users at a remote site ("BadSite") try to send mail with certain attachments through our server (or any other server for that matter), the connection gets dropped mid transmission. I notice in the verbose sendmail logs that an ehlo is given, headers are sent, then the mime encoded MSWord doc starts to go through, but in the middle of the transmission the client appears to just sit until the connection times out. We get a "read error" in Sendmail, and a time-out error in Outlook. The same thing happens when using 'mutt' in Linux. Things I've noticed: * Problem is isolated to BadSite...They cannot send these attachments through my server, or anyone else's for that matter. * Some attachments go through just fine... .jpg, .pdf, .bmp and .txt work OK. If you change the extension of a good file to .doc, it goes through just fine (it's not like the extension alone is causing the problem). :) * An EHLO is given when sending files like .doc and others that FAIL, while HELO is offered every time the good files go through. ESMTP connections from any other lan work fine on my server. Mail clients at BadSite range from MSOutlook on NT, to mutt on Linux boxes. We have a Cisco router with no access-lists on it and no firewall. Is this a problem with the type of transmission (ESMTP vs SMTP)? Encapsulation? It doesn't seem like a server problem, but I was told it couldn't possibly be a router problem....not sure where to go from here. Another question: What determines whether a client sends EHLO or HELO? Thanks for your input! Joe Arnstein <clips from logs follow> 28803 >>> 220 mail.mymailserver.com ESMTP 28803 <<< EHLO client.mylan.com 28803 >>> 250-mail.mymailserver.com Hello client.mylan.com [63.75.xx.xxx], pleased to meet you 28803 >>> 250-8BITMIME 28803 >>> 250-SIZE 28803 >>> 250-DSN 28803 >>> 250-ONEX 28803 >>> 250-XUSR 28803 >>> 250 HELP 28803 <<< MAIL From:<root(a)client.mylan.com> SIZE=15045 28804 >>> 250 <root(a)client.mylan.com>... Sender ok 28804 <<< RCPT To:<whomever(a)anydomain.com> 28804 >>> 250 <whoever(a)anydomain.com>... Recipient ok 28804 <<< DATA 28804 >>> 354 Enter mail, end with "." on a line by itself 28804 <<< Received: (from root@localhost) 28804 <<< by client.mylan.com (8.9.3/8.9.3) id PAA12375 28804 <<< for whomever(a)anydomain.com; Tue, 20 Feb 2001 15:52:35 -0500 28804 <<< Date: Tue, 20 Feb 2001 15:52:35 -0500 28804 <<< From: localuser <root(a)client.mylan.com> 28804 <<< To: whomever(a)anydomain.com 28804 <<< Subject: here we go again 28804 <<< Message-ID: <20010220155235.A12365(a)client.mylan.com> 28804 <<< Mime-Version: 1.0 28804 <<< Content-Type: multipart/mixed; boundary="n8g4imXOkfNTN/H1" 28804 <<< X-Mailer: Mutt 0.95.4us 28804 <<< 28804 <<< 28804 <<< --n8g4imXOkfNTN/H1 28804 <<< Content-Type: text/plain; charset=us-ascii 28804 <<< 28804 <<< content of message.... 28804 <<< 28804 <<< --n8g4imXOkfNTN/H1 28804 <<< Content-Type: application/msword 28804 <<< Content-Disposition: attachment; filename="Document.doc" 28804 <<< Content-Transfer-Encoding: base64 28804 <<< 28804 <<< 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAEQAAAAAA 28804 <<< AAAAEAAAEgAAAAEAAAD+////AAAAABAAAAD///////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< //////////////////////////////////////////////////////////////////////// 28804 <<< ///////////////////////////////////spcAARQAJBAAAABK/AAAAAAAAEgAAAAAABAAA 28804 <<< AQQAAA4AYmpiakLgQuAAAAAAAAAAAAAAAAAAAAAAAAAJBBYAHgwAACCKAQAgigEAAQAAAAAA 28804 <<< AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAD//w8A 28804 <<< AAAAAAAAAAAAAAAAAAAAAF0AAAAAAFwBAAAAAAAAXAEAAFwBAAAAAAAAXAEAAAAAAABcAQAA 28804 <<< AAAAAFwBAAAAAAAAXAEAABQAAAAAAAAAAAAAAHABAAAAAAAAcAEAAAAAAABwAQAAAAAAAHAB 28804 <<< AAAAAAAAcAEAAAwAAAB8AQAADAAAAHABAAAAAAAAQwIAALYAAACUAQAAAAAAAJQBAAAAAAAA 28804 <<< lAEAAAAAAACUAQAAAAAAAJQBAAAAAAAAlAEAAAAAAACUAQAAAAAAAJQBAAAAAAAACAIAAAIA 28804 <<< AAAKAgAAAAAAAAoCAAAAAAAACgIAAAAAAAAKAgAAAAAAAAoCAAAAAAAACgIAACQAAAD5AgAA 28804 <<< 9AEAAO0EAABmAAAALgIAABUAAAAAAAAAAAAAAAAAAAAAAAAAXAEAAAAAAACUAQAAAAAAAAAA 28804 <<< AAAAAAAAAAAAAAAAAACUAQAAAAAAAJQBAAAAAAAAlAEAAAAAAACUAQAAAAAAAC4CAAAAAAAA 28804 <<< qAEAAAAAAABcAQAAAAAAAFwBAAAAAAAAlAEAAAAAAAAAAAAAAAAAAJQBAAAAAAAAlAEAAAAA 28804 <<< AACoAQAAAAAAAKgBAAAAAAAAqAEAAAAAAACUAQAACgAAAFwBAAAAAAAAlAEAAAAAAABcAQAA 28804 <<< AAAAAJQBAAAAAAAACAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAEAAAAAAABwAQAAAAAAAFwB 28804 <<< AAAAAAAAXAEAAAAAAABcAQAAAAAAAFwBAAAAAAAAlAEAAAAAAAAIAgAAAAAAAKgBAABgAAAA 28804 <<< qAEAAAAAAAAAAAAAAAAAAAgCAAAAAAAAXAEAAAAAAABcAQAAAAAAAAAAAAAAAAAAAAAAAAAA 28804 <<< AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAIAAAAAAACUAQAA 28804 <<< AAAAAIgBAAAMAAAAcABqZPK2uwFwAQAAAAAAAHABAAAAAAAAngEAAAoAAAAIAgAAAAAAAAAA 28804 <<< AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 28804 <<< AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA <at this point transmission hangs and connection eventually drops>

1 0

Sample CISCO Border Router Config
by Kenneth D. Paquette 21 Feb '01

21 Feb '01

I remember seeing a pointer to a CISCO Border Router Config on one of the lists in the last few months an thought I saved the URL. Now I can't find it. I have searched the archives to no avail. I am not sure if it was NANOG or one of the firewall lists, but figured I would start here first. I believe is a link into the SANS institute, but can't find it there either. Any help would be appreciated. Thanks -------------------------------------------- Ken Paquette Program Manager Global Internetwork Planning Technology Deployment Office of the CIO

2 1

RE: Sample CISCO Border Router Config
by Mark Borchers 21 Feb '01

21 Feb '01

There is also some config boilerplate at http://www.cymru.com/~robt/Docs/Articles/index.html <http://www.cymru.com/~robt/Docs/Articles/index.html> Not necessarily border-router specific, but contains some useful info. -----Original Message----- From: Steve Smith [mailto:SSmith@freeliant.com] Sent: Wednesday, February 21, 2001 8:32 AM To: Kenneth D. Paquette; nanog(a)merit.edu Subject: RE: Sample CISCO Border Router Config This one is pretty good. http://www.attrition.org/~modify/texts/phrack/Phrack55/P55-10 <http://www.attrition.org/~modify/texts/phrack/Phrack55/P55-10> -----Original Message----- From: Kenneth D. Paquette [ mailto:ken@btv.ibm.com <mailto:ken@btv.ibm.com> ] Sent: Wednesday, February 21, 2001 8:16 AM To: nanog(a)merit.edu Subject: Sample CISCO Border Router Config I remember seeing a pointer to a CISCO Border Router Config on one of the lists in the last few months an thought I saved the URL. Now I can't find it. I have searched the archives to no avail. I am not sure if it was NANOG or one of the firewall lists, but figured I would start here first. I believe is a link into the SANS institute, but can't find it there either. Any help would be appreciated. Thanks -------------------------------------------- Ken Paquette Program Manager Global Internetwork Planning Technology Deployment Office of the CIO

1 0

[philou@safe-host.net: Re: Network for Sale]
by Philippe Strauss 21 Feb '01

21 Feb '01

arg forgot the nanog-post thing at first.. -- Philippe Strauss, safehost sa En offrant aux regards trop de drame humain, la technologie nous a desensibilisés, tant sur notre propre souffrance que sur celle des autres.

1 0

RE: Sample CISCO Border Router Config
by Steve Smith 21 Feb '01

21 Feb '01

This one is pretty good. http://www.attrition.org/~modify/texts/phrack/Phrack55/P55-10 -----Original Message----- From: Kenneth D. Paquette [mailto:ken@btv.ibm.com] Sent: Wednesday, February 21, 2001 8:16 AM To: nanog(a)merit.edu Subject: Sample CISCO Border Router Config I remember seeing a pointer to a CISCO Border Router Config on one of the lists in the last few months an thought I saved the URL. Now I can't find it. I have searched the archives to no avail. I am not sure if it was NANOG or one of the firewall lists, but figured I would start here first. I believe is a link into the SANS institute, but can't find it there either. Any help would be appreciated. Thanks -------------------------------------------- Ken Paquette Program Manager Global Internetwork Planning Technology Deployment Office of the CIO

1 0

General timeline for addition of records into RSS ?
by Yusuf Goolamabbas 21 Feb '01

21 Feb '01

I remember around a year ago that RSS entries were added relatively quickly sometimes in the order of hours. Recently, I have submitted a few RSS entries and its been close to 3 days and I have received no response either in the form of an automated ticket or a response in the positive or the negative. An automated ticket would help in people not sending repeated submissions. Right now, you don't know if the mail was somehow dropped in the bitbucket or not Have others seen a similar slowdown. I understand that there was a 3 day weekend holiday in the US this last week. Are the RSS admins exclusively US based. If so, would it make more sense to have a "follow the sun" model with RSS admins in different continents so that turnaround can be relatively fast. People using these lists would like to use open relays blackholed relatively quickly My apologies if this topic is not appropiate for this list. I have sent a couple of emails to rss(a)mail-abuse.org but no response so far from them Regards, Yusuf -- Yusuf Goolamabbas yusufg(a)outblaze.com

1 0

Re: Network for Sale
by Paul Vixie 21 Feb '01

21 Feb '01

nanog(a)Overkill.EnterZone.Net (John Fraizer) writes: > Beyond that, I'm _REALLY_ sick of people pissing and moaning about NAPS > being congestion points. If you're so tired of the exchange point being > slow, INVEST IN MAKING IT FASTER!!!!! ... That's what PAIX did. And Equinix for that matter. Exchange points aren't slow, though I admit that some of the ATM-based exchanges have hit their scaling limit. Exchange points based on Ethernet with rich PNI opportunities literally do not have scaling limits. The existence of the OPTIX/SAVVIS/InterNAP model isn't an an indictment of exchange points so much as it is of the routing system itself. However, bloating the global routing table with lots of discontiguous subnets isn't a workable solution. These networks need backbones and rich peering so they can negotiate deaggregation with just those peers who want the detail. Otherwise they're just value-added resellers of other networks who DO have backbones and rich private peering. (Which is what MIBH was, so I'm aware of the customer-perceived benefits in the value being added -- the difference is that MIBH was honest about it.)

7 6

Monitoring/Trending Software -- Which Package(s) do you use?
by Lee Watterworth 21 Feb '01

21 Feb '01

Hi there. I have been handed the task of finding a monitoring/trending package for our network and systems. I will be looking at the package's collection mechanism for flexibility (snmp gets, traps, rmon), and the variety/configurability of the reports it can produce. The package should be able to provide (configurable) alerts when threshholds are met/surpassed. I have been evaluating Concord's eHealth Suite, and would like to evaluate other options before I commit to a particular package. Any feedback would be great. -Lee.

2 1