November 2003 - Test - lists.nanog.org

Anit-Virus help for all of us??????
by McBurnett, Jim 26 Nov '03

26 Nov '03

Thought this is on topic for the group with all the new virii and new problems out there. Would anyone here consider sending this out to all customers? Later, Jim Last week at the Comdex show in Las Vegas, Computer Associates International, Inc. (known to the world as CA) teamed up with Microsoft Corp to provide "qualified" Windows home computer users with a no-charge, one-year subscription to CA's eTrust EZ Armor antivirus and firewall desktop security suite. The move is designed to encourage home users to increase the protection of their Windows systems and CA has stated that the company will aggressively promote the offer as part of Microsoft's "Protect Your PC" campaign. SNIP The EZ Armor software carries a value of $49.95 and the free subscription offer for will be available for download until June 30, 2004 and comes complete with one year of personal firewall and antivirus protection including daily virus signature updates. http://www.it-analysis.com/article.php?articleid=11450

26 43

looking for a review of traffic shapers
by William Caban 26 Nov '03

26 Nov '03

I'm looking for a review/report on traffic/packet shapers products with a side-by-side comparison. Did any one has a clue where I can find one such report? Thanks, -W -- William Caban <william(a)hpcf.upr.edu>

6 7

Re: WLAN shielding
by Michael.Dillon＠radianz.com 26 Nov '03

26 Nov '03

>Planning on limiting signal using a physical mechanism of some sort's just >a little too scifi to be useful. It's too much effort to shield the room itself, but you might want to try making the inverse square law work for you by shielding all of the wireless antennae so that the signal is too weak to travel more than a meter or two. Put extra shielded wireless access points on the conference tables so that everyone can place their laptops within range of a signal. But make sure that you thoroughly test the reception both inside and outside the room to be certain that there are no leaks. No guarantees but I'd be interested to hear a report if you try this. --Michael Dillon

2 1

Re: Above.net problems ??
by Jerome Fleury 26 Nov '03

26 Nov '03

Hi there. Is there any relationship between this "europeanwide" above.net failure and the huge amount of DNS requests to lockup.zonelabs.com which failed that every ISP (at least in France) seem to have encountered last night ? The zonelabs.com zone is hosted on Above.net NS servers. --On mercredi 26 novembre 2003 09:49 -0500 Leo Bicknell <bicknell(a)ufp.org> wrote: > In a message written on Wed, Nov 26, 2003 at 09:35:16AM +0100, Laurent Frigault wrote: >> The sessions reset again 35 minutes ago. Missing prefixes are back and >> above.net network seems reachable again. > > We did restore full service overnight last night (well, probably early > in the morning for those in Europe), our operations should be back to > normal. If anyone is still seeing above.net issues please open a ticket > through the normal channels. > > -- > Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > Read TMBG List - tmbg-list-request(a)tmbg.org, www.tmbg.org -- Jerome Fleury Tiscali France Network Engineer Tel: +33 1 45082314

2 1

Activity logging & archiving tool
by Priyantha 26 Nov '03

26 Nov '03

In my company, there are several technical guys make changes to the existing network and it's very difficult to keep track of what we did when, etc. I'm looking for a simple tool, in which each and every one has to manually record whatever (s)he has done or any incident (s)he observed so that the tool archives that data someway. Later, in case if someone needs, (s)he should be able to search for that archive by date, by person, by a random phrase, etc. Any help in this regard is appreciated, Priyantha Pushpa Kumara --------------------------------------- Manager - Data Services Wightman Internet Ltd. Clifford, ON N0G 1M0 Fax: 519-327-8010

2 2

Above.net problems ??
by hostmaster 26 Nov '03

26 Nov '03

anyone having trouble with above.net at the moment ? cheers -Bert

5 6

Re: [Activity logging & archiving tool]
by guy 26 Nov '03

26 Nov '03

Don't forget that TACACS can log all commands entered into a router. When used in combination with rancid and cvs/cvs-web, it's very useful. > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/)

3 2

RE: [Activity logging & archiving tool]
by Brennan_Murphy＠NAI.com 26 Nov '03

26 Nov '03

Or Ciscoworks. A config change sends a syslog event to CW which in turn knows to go grab the latest copy of the config. I believe there are some reporting capabilities too, simple diff routines and archives of past configs. I think CW is more of the CVS-like approach whereas ACS is sort of a simple logging method. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Dan Lockwood Sent: Tuesday, November 25, 2003 3:54 PM To: joshua sahala; Priyantha; nanog(a)nanog.org Subject: RE: [Activity logging & archiving tool] If you are in a Cisco shop you might consider Secure ACS. We use ACS to log all of our changes and have very good success with it. Unfortunately it is not free. Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of joshua sahala Sent: Tuesday, November 25, 2003 11:45 AM To: Priyantha; nanog(a)nanog.org Subject: Re: [Activity logging & archiving tool] "Priyantha" <priyantha(a)wightman.ca> wrote: > > In my company, there are several technical guys make changes to the > existing network and it's very difficult to keep track of what we did > when, etc. i feel your pain - except when it was happening, they weren't as technical as they thought they were... > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/) rancid does nice proactive checking of device configs, and cvs-web is a pretty front end to look through change history for tracking: request tracker (http://www.bestpractical.com/rt/) - it is a ticketing system, but you could probably customize it to fit your needs netoffice (http://sourceforge.net/projects/netoffice/) - haven't used it personally, but it looks like it might work too track+ (http://sourceforge.net/projects/trackplus/) - same as netoffice of course, nothing will work unless everyone uses it, so you have to have clear, concise policies for change management, and then enforce them. hth /joshua > Any help in this regard is appreciated, > > Priyantha Pushpa Kumara > --------------------------------------- > Manager - Data Services > Wightman Internet Ltd. > Clifford, ON > N0G 1M0 > Fax: 519-327-8010 > > > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

5 5

RE: [Activity logging & archiving tool]
by Dan Lockwood 26 Nov '03

26 Nov '03

If you are in a Cisco shop you might consider Secure ACS. We use ACS to log all of our changes and have very good success with it. Unfortunately it is not free. Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of joshua sahala Sent: Tuesday, November 25, 2003 11:45 AM To: Priyantha; nanog(a)nanog.org Subject: Re: [Activity logging & archiving tool] "Priyantha" <priyantha(a)wightman.ca> wrote: > > In my company, there are several technical guys make changes to the > existing network and it's very difficult to keep track of what we did > when, etc. i feel your pain - except when it was happening, they weren't as technical as they thought they were... > I'm looking for a simple tool, in which each and every one has to > manually record whatever (s)he has done or any incident (s)he observed > so that the tool archives that data someway. Later, in case if someone > needs, (s)he should be able to search for that archive by date, by > person, by a random phrase, etc. rancid (http://www.shrubbery.net/rancid) and cvs-web (http://stud.fh-heilbronn.de/~zeller/cgi/cvsweb.cgi/) rancid does nice proactive checking of device configs, and cvs-web is a pretty front end to look through change history for tracking: request tracker (http://www.bestpractical.com/rt/) - it is a ticketing system, but you could probably customize it to fit your needs netoffice (http://sourceforge.net/projects/netoffice/) - haven't used it personally, but it looks like it might work too track+ (http://sourceforge.net/projects/trackplus/) - same as netoffice of course, nothing will work unless everyone uses it, so you have to have clear, concise policies for change management, and then enforce them. hth /joshua > Any help in this regard is appreciated, > > Priyantha Pushpa Kumara > --------------------------------------- > Manager - Data Services > Wightman Internet Ltd. > Clifford, ON > N0G 1M0 > Fax: 519-327-8010 > > > "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

2 1

Issues with Comcast broadband customers in the Seattle, WA area -- please contact
by dani-nanog＠roisman.com 25 Nov '03

25 Nov '03

Hello, Looking for someone @ Comcast (AS22909?) that can help troubleshoot a problem: For a few days, Comcast residential cablemodem customers in the Seattle, WA area are reporting that they cannot reach our application (TCP port 7000/7050/7070). IP's that the customers are coming from: 12.228.98.x 12.208.137.x 67.168.75.x 12.228.151.x 12.228.185.x (and a few more) The issue is not simply connectivity -- they ping in and hit http services on our network, just not get to TCP ports 7000, 7050, 7070. There is no apparant issue on our side, we accept hundreds of thousands of connections to this application each day. Please contact me if you are able to assist in troubleshooting. Thank you - Dani

1 0