June 2007 - Test - lists.nanog.org

Software or PHP/PERL scripts for simple network management?
by Drew Weaver 20 Jun '07

20 Jun '07

Does anyone have a recommendation of any software products either commercial or freeware which will import the ip routing table from one of my routers/switches and display it in a sorted manner? We just need an easier distributed method than logging into our Black Diamond and typing sh iproute sorted every time we need to find an available subnet. Thanks in advance for any advice you can offer. Andrew No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.0/852 - Release Date: 6/17/2007 8:23 AM

7 12

FBI tells the public to call their ISP for help
by Sean Donelan 20 Jun '07

20 Jun '07

If your call center volumes go up today... The fine people at the FBI are recommending people call their ISP for home computer technical support, even though most ISPs don't sell home computers, operating system software or application software. http://www.fbi.gov/page2/june07/botnet061307.htm First, if you believe your computer has been compromised, do not call the FBI directly. You should contact your Internet service provider. They can help you determine if your computer has been infected, and what steps to take to restore it. We are not in a position to provide technical assistance. BTW, 1 million compromised computers is probably a low estimate.

23 57

Method to Measure the Queue Size for this topology
by Tiago Junqueira 20 Jun '07

20 Jun '07

Hi , I have this configuration (SS-Wimax Subscriber Station and BS-Wimax Base Station)): (PC1)----100mbs---(SS)----3mbs----(BS)----100mbs----(PC2) When i measure the RTT with the ping command from the PC1 to the PC2, i'm measuring approximately the packet service time of the station SS = 1/u2, and also the time of the BS when the reply comes, that can be more or less 1/u2. The time of processing from the computers in not significant. If i use iperf to send a flow of 6mbs from the PC1 to the PC2, the Wimax queue of the SS will built up and if i run the ping command with the same packet size, and with 1 second of interval (that is not significant when compared to the iperf), the time of processing of the SS=X.(1/u2) because the packet sent by ping will reach the last place of the queue. When it return has 1/u2 additional from the BS. So if I divide, I'll get X, that is approximately the queue size of the SS. Do you think that it gives a notion about the size of the buffer of the SS? By the way, i didn't use thrulay, because the delay is high, maybe because of the time synchronization between the PC1 and PC2. Is easy to synchronize the both computers, having one as server and another receiving the synchronization? kindly, and thanks for the precious help given Tiago Junqueira

1 0

Re: Software or PHP/PERL scripts for simple network management?
by Scott Weeks 19 Jun '07

19 Jun '07

--- drew.weaver(a)thenap.com wrote: Does anyone have a recommendation of any software products either commercial or freeware which will import the ip routing table from one of my routers/switches and display it in a sorted manner? We just need an easier distributed method than logging into our Black Diamond and typing sh iproute sorted every time we need to find an available subnet. -------------------------------------------------- How about something like this on a *nix box? The OID here is for Juniper... snmpwalk -Os -c public -v 1 111.111.111.111 1.3.6.1.4.1.2636.3.12.1.1 | cut -d "." -f 8-12 | cut -d " " -f1 | sort | uniq scott

4 3

Straw Poll - Multipoint Ethernet Connections Best Practices
by Michael K. Smith - Adhost 19 Jun '07

19 Jun '07

Hello All: As more and more providers move towards Ethernet as a common connection type in Data Centers, Metro Areas and beyond, I am curious to know what people are using for Best Practices regarding customer connectivity into your Layer 2 networks. Most importantly, how do you handle customers that want redundant Ethernet connections? I've put together the following list of questions and I'd be happy to summarize to the list if there's any interest. Also, if individuals have any other pertinent questions they feel I've left out, please don't hesitate to let me know. 1) Do you allow redundant Ethernet (Layer 2) connections into your network? 2) Do you allow customers to connect at Layer 2? And, if so: a) What, if any, port-based limitations on protocols? (Root Guard, BPUD-filtering, etc.?) b) What, if any, MAC restrictions do you have on the ports? 3) Do you allow customers to transmit HSRP/VRRP/GLBP state information across your Layer 2 infrastructure? 4) Do you require Layer 3 terminations for customers with redundant connections? 5) Do you provide OSPF "peering" to customers with redundant connections? 6) Do you provide BGP peering to customers with redundant connections? Regards, Michael K. Smith (my real, given name) :-) Adhost

1 0

New Chair of the Mailing List Committee
by Robert E. Seastrom 19 Jun '07

19 Jun '07

I am pleased to report that by unanimous vote, Alex Pilosov is the new Chair of the Mailing List Committee. Alex has been acting chair since February as schedule conflicts have limited my ability to perform several of the duties of the MLC chair. I'll be continuing as a regular member of the MLC until my term expires this fall. Congratulations to Alex! ---Rob (former MLC chair)

1 0

Network Parameters on Subscriber side feelings
by Joe Shen 18 Jun '07

18 Jun '07

hi, is there any work or research on measuring method for subscriber (customer)side feelings of network service? It seems that e2e ping delay, packet loss may miss some important factor when we consider subscriber's feelings. Joe __________________________________ Yahoo! Movies - Search movie info and celeb profiles and photos. http://sg.movies.yahoo.com/

4 3

Re: FBI tells the public to call their ISP for help
by Fergie 16 Jun '07

16 Jun '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Florian Weimer <fw(a)deneb.enyo.de> wrote: >In most parts of the world, the Microsoft EULA is not enforceable. >Most users don't buy their software from Microsoft, either. It's >preinstalled on their PC, and Microsoft disclaims any support. NOTE: This has nothing to do with ISPs. Also, there is somewhere in the neighborhood of > 65M MS hosts "out there" that are either illegally or improperly licensed, and which cannot use Microsoft Update (due to the Genuine Advantage verification knobs). While they can download each patch individually through a series of acrobatic exercises, this sorta contributes to the whole end-system compromise problem. Again, not that this has much real bearing on the discussion, but figured I toss that into the mix. - - ferg p.s. I forget exactly where the >65M figure came from, but I'm pretty sure it Microsoft a few months back... -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) wj8DBQFGcyFWq1pz9mNUZTMRAhjMAKDMA6Zwy8ZPeatoQPKQiwQLiLod2QCg+pHO 3EUiDw6OXUp9DdjXM62p9qM= =izS9 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

Re: FBI tells the public to call their ISP for help
by Scott Weeks 16 Jun '07

16 Jun '07

* From: Joe Greco * Date: Sat Jun 16 07:58:20 2007 : Further, in the context of the discussion, I don't : really know if any ISP is recommending Windows, but : I know that some major ones won't even lift a finger : if you're using UNIX. The conversation wasn't they were recommending Windows, they were *requiring* it and won't support anything else. What about a Mac? Why wouldn't they support that OS? : My favorite example is Road Runner, where I personally had : the displeasure...when I called RR support, they wouldn't : debug it at an IP level until I hooked up a Windows PC : So they wouldn't even try to debug an IP level issue, which : I would kind of consider to be maybe... their core business. Did you stay with them or switch ISPs? scott > If Joe Sixpack has a Mac, calls his ISP for help, is told the ISP only > supports Micro$loth, asks for escalation and can't get that (or even > doesn't ask for escalation) I would think Joe would move to another > ISP. Thus my earlier statement that the ISP which does this we- > support-Micro$loth-only crazyness is doomed to failure. Perhaps that would be true if Micro$loth was a minority player in the OS world. However, the facts here are that MS comes deployed on a huge percentage of the computers in the world, and even if FreeBSD/Linux/etc enthusiasts are wiping it off a certain percentage of those, Macs still represent a very small percentage. If the graphs at http://www.systemshootouts.org/mac_sales.html are correct, we can probably draw the conclusion that less than 5% of the installed computing base is Mac. If we looked at Internet-facing browser usage, http://www.w3schools.com/browsers/browsers_os.asp suggests that this is a reasonable conclusion, with Windows making up about 90% of all browsing clients, 75% WinXP. Further, in the context of the discussion, I don't really know if any ISP is recommending Windows, but I know that some major ones won't even lift a finger if you're using UNIX. My favorite example is Road Runner, where I personally had the displeasure of running into a situation where a UNIX VPN gateway was "dead" on the 'net, couldn't traceroute beyond the first hop, traceroutes to it died in RRland, and when I called RR support, they wouldn't debug it at an IP level until I hooked up a Windows PC, which promptly DHCP'd a *different* IP address, which (inconveniently) worked. Yet, at the time, releasing the DHCP lease on the VPN box didn't result in a different IP address (strange RR DHCP servers), so when the VPN box came back on, it got the same busted IP address. The TSR took this as evidence that "UNIX didn't work" and advised me that it wasn't a Road Runner issue, and refused to assist any further. Unable to make any progress, in frustration, I switched interfaces on the VPN box, and bam, it worked. I pushed the issue a bit, later, and eventually got a read-between-the-lines admission that that the problem was something to do with RR having switched around IP blocks, but somehow it was still the UNIX VPN box's fault for never rebooting or something like that. So they wouldn't even try to debug an IP level issue, which I would kind of consider to be maybe... their core business. Now, really, does anyone expect companies like that to assist with problems that aren't even the core of their business? Perhaps you think "doomed to failure" is a synonym for "wheelbarrows of cash to be had." ;-)

1 0

Re: FBI tells the public to call their ISP for help
by Scott Weeks 16 Jun '07

16 Jun '07

-------- Valdis.Kletnieks(a)vt.edu wrote:-------------- On Fri, 15 Jun 2007 13:42:04 PDT, Scott Weeks said: > No I've never heard of that except, possibly, from non-clued phone monkeys. > It's easy to get past them to more clued folks, though... Maybe it's easy for you. It's usually a bit harder for a Joe Sixpack who has a Mac or Linux box, but doesn't have the industry connections we do. --------------------------------------------------- If Joe Sixpack has a Mac, calls his ISP for help, is told the ISP only supports Micro$loth, asks for escalation and can't get that (or even doesn't ask for escalation) I would think Joe would move to another ISP. Thus my earlier statement that the ISP which does this we-support-Micro$loth-only crazyness is doomed to failure. scott

4 3