December 2011 - Test - lists.nanog.org

Google's Schmidt on Iran supposedly hijacking GOOG'd .dk traffic
by Gadi Evron 21 Dec '11

21 Dec '11

Video at: http://edition.cnn.com/video/#/video/bestoftv/2011/12/13/erin-schmidt-on-ir… Gadi. -- Gadi Evron, ge(a)linuxbox.org. Blog: http://gevron.livejournal.com/

1 0

Happy xmas folks
by andrew.wallace 21 Dec '11

21 Dec '11

I just want to say happy xmas to everyone at NANOG. I'm about to sign off for the holidays. Andrew

3 3

Re: IPv6 RA vs DHCPv6 - The chosen one?
by Daniel Espejel 21 Dec '11

21 Dec '11

IPv6-RA autoconfiguration method allows to autoconfigure ipv6-capable network interfaces by sending IPv6 prefixes throughout a link, so every node that understands its message format can derive its own IPv6 address based on internal algorithms. By using RA, you can configure almost any node to serve as a router (i.e. running RADVD). As a matter of fact, there are some flags in the RAs to set the DHCP as the "complement device" to get full information about the network. In cases when the only thing you need to know its a basic network configuration (routes), or if devices don't need to use another external services such as DNS, RA should me enough. On the other hand, DHCPv6 works in a way very similar like DHCPv4, and you can spread information like the DNS-servers for a given link or network. More advanced auto-configuration schemas may be reached if using RA+DHCPv6. Think on scenarios like mobile networks, multihommed hosts and low-power consuption ip based network-based networks. BR. -- Daniel Espejel Pérez

1 0

Any clueful Megapath/Covad peeps on the list?
by Mike Lyon 21 Dec '11

21 Dec '11

If so, can you ping me off-list? Having issues finding clue through your phone tree. Thank You, Mike

1 0

DNS zone response speed test tool?
by Jay Ashworth 21 Dec '11

21 Dec '11

I've put monitoring onto my public website, and by far the largest component of the response time it gives me is the DNS lookup -- 4-500ms, which seems entirely unreasonable. Is there a tool that anyone knows about that will measure the response time of my zone servers, somewhere on the web? Is the sum of the times in a dig +trace the proper metric to look at there? Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

4 5

RIP DMR - a postscript
by Jay Ashworth 21 Dec '11

21 Dec '11

In case it hadn't occurred to anyone to look back: http://cm.bell-labs.com/who/dmr/ Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

IPV6 issue
by Steve Clark 20 Dec '11

20 Dec '11

Hello, I have a SIXXS ipv6 tunnel that terminates in Ashburn, Va. I have two HE ipv6 tunnels, one terminates in Dallas the other terminate in Ashburn. I can ping each endpoint of the tunnels that terminate in Ashburn, but I can't ping between the SIXXS and HE with the HE termination in Dallas. Using Looking Glass at HE I can traceroute to my SIXXS tunnel from Chicago but not from Dallas. Any ideas on how to get this fixed. This problem only started occurring within the last week or so. Thanks for your indulgence, -- Stephen Clark *NetWolves* Sr. Software Engineer III Phone: 813-579-3200 Fax: 813-882-0209 Email: steve.clark(a)netwolves.com http://www.netwolves.com

4 5

Re: Nexus emulation? Anyone?
by Tim Stevenson 20 Dec '11

20 Dec '11

You couldn't use Titanium to judge/discuss the nexus family as a whole either. Aside from 1KV, all the nexus products use ASIC hardware specific to that platform/linecard and no NXOS software emulator exists that mimics those behaviors. 2 cents, Tim At 09:34 AM 12/20/2011, Luan Nguyen gushed: >You can't use the software switch Nexus 1000V to judge/discuss the Nexus >family products N7K, N5K...etc as a whole? > >Check out this discussion ><https://supportforums.cisco.com/thread/2054884>https://supportforums.cisco.com/thread/2054884 > >Titanium as they call the NX-OS simulator is not available to the public >though... > >-Luan > >On Tue, Dec 20, 2011 at 12:08 PM, -Hammer- <bhmccie(a)gmail.com> wrote: > > > Bah. Look like I need more of an education on Nexus in general. Thanks for > > the easy pointer. > > > > > > -Hammer- > > > > "I was a normal American nerd" > > -Jack Herer > > > > > > > > On 12/20/2011 11:02 AM, Nick Hilliard wrote: > > > >> On 20/12/2011 13:55, -Hammer- wrote: > >> > >> > >>> I know we can't throw NX code on Dynamips but I figured I would ask the > >>> group anyway. We are starting to discuss Nexus platform options and I can > >>> only get so much from demo depot before our AM gets whiny. Is anyone > >>> currently emulating Nexus on anything that is open to the public? > >>> > >>> > >> nexus1k? > >> > >> Nick > >> > >> > >> > >> > >> > >> > > Tim Stevenson, tstevens(a)cisco.com Routing & Switching CCIE #5561 Distinguished Technical Marketing Engineer, Cisco Nexus 7000 Cisco - http://www.cisco.com IP Phone: 408-526-6759 ******************************************************** The contents of this message may be *Cisco Confidential* and are intended for the specified recipients only.

3 6

software wanted
by Gregory Edigarov 20 Dec '11

20 Dec '11

Hi everybody, can anybody recomend a piece of software, that could "graph" a live network scanning it via snmp. requirements are: 1. must produce a text output suitable for postproduction. graphviz is an ideal, xml - acceptable. 2. must use no external database i.e. have text config file. clean text console, suitable to run as a cronjob. 3. must be able to work in heterogenous environment. thanks a lot in advance -- With best regards, Gregory Edigarov

8 8

Re: what if...?
by Valdis.Kletnieks＠vt.edu 20 Dec '11

20 Dec '11

On Tue, 20 Dec 2011 17:16:06 GMT, bmanning(a)vacation.karoshi.com said: > the one difference is that ISC will be shipping RPZ enabled code v. > the blackhat having to hack the machine and modify the configuration. EIther way, the blackhat still has to hack the machine and modify the config. The only difference is what config change they make.

2 1