- NANOG - lists.nanog.org

Re: NANOG Digest, Vol 89, Issue 2
by Ramy Hashish 09 Jun '15

09 Jun '15

Does anybody knows anything about "AirTight networks" and "Meru"?

1 0

Re: eBay is looking for network heavies...
by Justin M. Streiner 09 Jun '15

09 Jun '15

On Mon, 8 Jun 2015, Yardiel D. Fuentes wrote: > This discussion is always reminisced of questions such as: Why would I > want to learn Algebra or Calculus in college ? or why would I want to go > to college at all ? .. the student argues that calculus or college is > hardly ever used, if at all, in a job … the most sensible perspective > has always been: It is not only about the knowledge itself, but how > learning those subjects train your mind to tackle technical > problems…same in networking… Some of the best interview questions > are those that pose a problem and ask you to tackle it by explaining > your train of thought…It requires both: knowledge and how to apply > it... Your point is well taken, but being asked to recite section 4.2.1 of RFC XXXX is: 1. little more than rote memorization 2. says nothing about a candidate's skills or critical thinking abilities. For the record, there are times in my professional career where I've made some use of algebra and calculus :) jms

1 0

Re: eBay is looking for network heavies...
by Larry Sheldon 09 Jun '15

09 Jun '15

I (sortakinda related to the as-drifted thread) was reminded today of another flag I watched for back in the day by something I saw on Facebook™ today--people using words (especially big words) that do not mean what they think they do. http://www.sbnation.com/lookit/2015/6/8/8748933/pat-venditte-switch-pitcher… I also think the biggest hurdle I faced was that HR did all the early interviewing from lists of questions and answers (sometimes) that we had to produce without regard to a specific opening. Towards the end of my days we were told that the candidate visit with us was not and interview, it was an opportunity for the candidate to see if she (or he) liked us. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Regulators now regulating Internet History? Really?
by Larry Sheldon 09 Jun '15

09 Jun '15

On 6/8/2015 08:46, Jay Farrell via NANOG wrote: > The article is nothing more or less than what you'd expect to read from the > American Enterprise Institute. "All regulation totally sucks" is their only > message ever. Unaddressed so far, is the appearance that the regulator quoted (without apparent bias from the AEI author) has "tinkered" with the history. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Assistance troubleshooting a route between my network and Comcast in Georgia
by Drew Hastings 09 Jun '15

09 Jun '15

I'm new to this list, and I apologize in advance if this is an inappropriate submission. I'm having an issue with my traffic routing between my network and Comcast in the Georgia region. Aside from this specific ISP and that geographic region, I haven't seen any issues with traffic. My network is 198.91.24.0/21 ASN 32647 Is there a particular contact to get in touch with someone at Comcast for assistance? What can I do, if anything, to resolve this from my end? Here is a successful traceroute, which doesn't originate from my network, going to a router I'd like to reach from my network. This network shares our upstream providers, which is why I've used it to compare. 4 te0-0-0-0.nr11.b023003-0.phx02.atlas.cogentco.com (38.88.34.21) 0.973 ms 1.013 ms te0-0-0-1.nr11.b023003-0.phx02.atlas.cogentco.com (38.104.116.73) 1.052 ms 5 154.24.18.197 (154.24.18.197) 2.200 ms 154.24.18.201 (154.24.18.201) 2.229 ms 154.24.18.205 (154.24.18.205) 0.926 ms 6 be2124.ccr21.phx02.atlas.cogentco.com (66.28.4.193) 2.360 ms 2.737 ms 2.809 ms 7 be2331.ccr22.lax01.atlas.cogentco.com (154.54.30.193) 12.796 ms be2330.ccr21.lax01.atlas.cogentco.com (154.54.30.189) 14.156 ms 14.120 ms 8 be2019.ccr21.lax04.atlas.cogentco.com (154.54.88.10) 14.109 ms 13.642 ms be2017.ccr21.lax04.atlas.cogentco.com (154.54.0.237) 13.916 ms 9 be-201-pe01.losangeles.ca.ibone.comcast.net (50.248.118.249) 15.341 ms 15.304 ms 15.290 ms 10 he-0-4-0-1-cr02.losangeles.ca.ibone.comcast.net (68.86.85.29) 13.283 ms he-0-4-0-0-cr02.losangeles.ca.ibone.comcast.net (68.86.85.13) 13.119 ms he-0-4-0-1-cr02.losangeles.ca.ibone.comcast.net (68.86.85.29) 13.238 ms 11 be-11315-cr01.dallas.tx.ibone.comcast.net (68.86.85.141) 38.441 ms 38.433 ms 38.354 ms 12 be-11314-cr02.56marietta.ga.ibone.comcast.net (68.86.85.22) 55.604 ms 56.516 ms 57.727 ms 13 et-2-0-0-0-ar01.b0atlanta.ga.atlanta.comcast.net (68.86.89.66) 55.706 ms 54.596 ms 54.688 ms 14 xe-10-3-0-0-sur01.a2atlanta.ga.atlanta.comcast.net (68.86.106.58) 54.073 ms 54.066 ms xe-11-3-0-0-sur01.a2atlanta.ga.atlanta.comcast.net (68.86.106.90) 54.607 ms 15 xe-9-3-0-sur02.a2atlanta.ga.atlanta.comcast.net (68.86.110.233) 54.793 ms 55.331 ms 55.320 ms The traceroute reaches 68.86.110.233 successfully without issue. That same traceroute, from my network takes a similar route, but ultimately fails: 6 te0-0-1-1.nr11.b023003-0.phx02.atlas.cogentco.com (38.104.116.185) 0.789 ms 0.720 ms te0-0-0-0.nr11.b023003-0.phx02.atlas.cogentco.com (38.88.34.21) 0.688 ms 7 154.24.18.201 (154.24.18.201) 2.295 ms 2.288 ms 154.24.18.205 (154.24.18.205) 1.062 ms 8 be2125.ccr22.phx02.atlas.cogentco.com (154.54.1.101) 1.248 ms 1.618 ms be2124.ccr21.phx02.atlas.cogentco.com (66.28.4.193) 2.601 ms 9 be2331.ccr22.lax01.atlas.cogentco.com (154.54.30.193) 13.444 ms be2330.ccr21.lax01.atlas.cogentco.com (154.54.30.189) 14.857 ms 13.868 ms 10 be2017.ccr21.lax04.atlas.cogentco.com (154.54.0.237) 13.942 ms be2019.ccr21.lax04.atlas.cogentco.com (154.54.88.10) 15.295 ms be2017.ccr21.lax04.atlas.cogentco.com (154.54.0.237) 13.176 ms 11 be-201-pe01.losangeles.ca.ibone.comcast.net (50.248.118.249) 14.048 ms 11.872 ms 11.864 ms 12 he-0-4-0-2-cr02.losangeles.ca.ibone.comcast.net (68.86.85.93) 14.454 ms he-0-4-0-1-cr02.losangeles.ca.ibone.comcast.net (68.86.85.29) 14.267 ms he-0-4-0-2-cr02.losangeles.ca.ibone.comcast.net (68.86.85.93) 12.086 ms 13 be-11315-cr01.dallas.tx.ibone.comcast.net (68.86.85.141) 35.729 ms 35.723 ms 39.375 ms 14 * * * 15 * * * 16 * * * A traceroute back to my network on Comcast in that region fails in a similar fashion: 1 <1 ms 1 ms 1 ms 192.168.10.1 2 29 ms 8 ms 10 ms 96.120.4.213 3 10 ms 7 ms 9 ms xe-5-1-0-sur01.b2marietta.ga.atlanta.comcast.net [68.85.173.93] 4 11 ms 13 ms 12 ms xe-4-1-18-0-ar01.b0atlanta.ga.atlanta.comcast.ne t [68.86.106.190] 5 16 ms 19 ms 17 ms he-0-4-0-6-cr02.56marietta.ga.ibone.comcast.net [68.86.90.81] 6 * * * Request timed out. 7 * * * Request timed out. 8 * * * Request timed out. It seems like xe-5-1-0-sur01.b2marietta.ga.atlanta.comcast.net is not routing this traffic. I appreciate any assistance that can be provided. Thank you for taking the time to read this.

1 0

Re: eBay is looking for network heavies...
by Scott Weeks 09 Jun '15

09 Jun '15

--- Valdis.Kletnieks(a)vt.edu wrote: On Mon, 08 Jun 2015 17:10:25 -0700, Jeroen van Aart said: > You sort of nailed it though. I think ready knowledge > about the internals of utilities such as traceroute > or ping is nice to have, however if you don't know Describe the top 3 gotchas of using traceroute to diagnose network problems. :) That's something you're not likely to look up if you're in the middle of a connectivity event.... ------------------------------------------------ It's these types of questions that're hard for some in an interview even though they know their stuff. One might get nervous wondering if (s)he gave the interviewer the three that they're looking for and stumble on the next question even though the next question seems easy to the interviewer. I'd ask the question a little differently: I have a network problem between 2 sites and there is a firewall between them that is blocking ICMP and nothing else. How would you complete a traceroute to troubleshoot? (Use BSD or tcptraceroute, for example) Then, it turns the questioning into operational. scott

2 1

T-mobile contact?
by Anne Mitchell 08 Jun '15

08 Jun '15

Is there anyone from T-mobile here, or does anybody have a T-mobile contact with whom they can put me in touch? Anne Anne P. Mitchell, Esq. CEO/President ISIPP SuretyMail Email Reputation, Accreditation & Certification http://www.SuretyMail.com/ http://www.SuretyMail.eu/ Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal anti-spam law) Member, California Bar Cyberspace Law Committee Member, Colorado Cybersecurity Consortium Ret. Professor of Law, Lincoln Law School of San Jose 303-731-2121 | amitchell(a)isipp.com | @AnnePMitchell | Facebook/AnnePMitchell

1 0

Re: NANOG Digest, Vol 89, Issue 8
by Ramy Hashish 08 Jun '15

08 Jun '15

> > > On 8 Jun 2015, at 17:57, Ramy Hashish wrote: > > > a BGP session has to be established over a GRE tunnel over the > > internet between the ISP/NSP/DC and the cloud scrubbing center, > > This is incorrect. > > In most cloud overlay DDoS mitigation scenarios (e.g., end-customer > obtains service from an MSSP which isn't providing them with transit), > a) there is no BGP relationship whatsoever between the end-customer and > the MSSP, and b) the GRE tunnel is used strictly for re-injection of > clean traffic (i.e., post-mitigation) to the end-customer. > > In some scenarios, DNS is also used in place of/in addition to BGP-based > diversion. > > But GRE is used for re-injection only. > > > Roland, I am talking about the case where the ISP/NSP is having their own DDoS mitigation solution -to protect their NW infrastructure- and then providing the service to their end customers. However I have some concerns on your comments: Even if the transit provider won't be involved in the mitigation process and the GRE tunnel is used only for injecting the traffic back to the end customer, the customer's dirty traffic will pass through some congestion points (most likely near the IGWs) throughout the transit provider network. And concerning point b) as per Arbor representatives in my region, Arbor's system takes up to five minutes to mitigate the attack (starting from the hit of the first dirty packet), so there will be a period of time where the dirty traffic (or at least some of it) will be coming down all the way to the end customer until you completely mitigate the attack. I hope now it become more clear. Ramy

2 1

Regulators now regulating Internet History? Really?
by Larry Sheldon 08 Jun '15

08 Jun '15

Looks to me that there are issues of interest here. http://www.aei.org/publication/tom-wheeler-tries-to-rewrite-internet-histor… -- sed quis custodiet ipsos custodes? (Juvenal)

4 3

RE: Tunable SFP
by Frank Bulk 07 Jun '15

07 Jun '15

Thanks, that's very helpful. They have several models there: https://www.flexoptix.net/en/produkte/transceiver.html?fo_tra_formfactor=sfp #fo_tra_formfactor=sfp&fo_tra_interface=05_dwdm_100ghz&gan_data=true Frank -----Original Message----- Sent: Saturday, June 06, 2015 1:44 PM To: Frank Bulk Subject: Re: Tunable SFP Check out https://www.flexoptix.net/en/ This topic came up last month and a lot of people recommended this vendor. Hope it helps. On 6/6/2015 10:45 AM, Frank Bulk wrote: > Thanks -- can you point me to any suppliers? > > Frank > > -----Original Message----- > From: Jared Mauch [mailto:jared@puck.nether.net] > Sent: Saturday, June 06, 2015 12:41 PM > To: Frank Bulk > Cc: <nanog(a)nanog.org> > Subject: Re: Tunable SFP > > They do exist. They tend to have tighter link budgets as compared to XFP > tunable optics. Don't expect to go as far due to the receiver sensitivity. > > Jared Mauch > >> On Jun 6, 2015, at 1:29 PM, Frank Bulk <frnkblk(a)iname.com> wrote: >> >> Anyone know if tunable SFPs exist? I've googled around on this, but only >> found fixed wave-length SFPs. >> >> Or of a tunable SFP+ that can operate in SFP port as 1G? >> >> Frank > >

5 7