September 2011 - Test - lists.nanog.org

RE: flow generating tool
by Naiden Dimitrov 26 Sep '11

26 Sep '11

Thank you for the response, but this is a tool that examines data flows. I need a tool that generates data flows in order to test network equipment. Regards, Naiden Dimitrov naiden.dimitrov(a)maxtelecom.bg www.maxtelecom.bg -----Original Message----- From: George Jones [mailto:gmj@cert.org] Sent: Monday, September 26, 2011 2:45 PM To: Naiden Dimitrov Cc: nanog(a)nanog.org Subject: Re: flow generating tool >>>>> On Mon, 26 Sep 2011 13:07:45 +0300, Naiden Dimitrov <naiden.dimitrov(a)maxtelecom.bg> said: nd> Hello, I need a tool that generates traffic flows from different nd> source IP addresses for network tests. http://tools.netsa.cert.org/yaf/ __________ Information from ESET NOD32 Antivirus, version of virus signature database 6494 (20110926) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __________ Information from ESET NOD32 Antivirus, version of virus signature database 6494 (20110926) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

5 4

robtex phantom data
by Joe Pruett 26 Sep '11

26 Sep '11

i've tried asking the robtex folks where they get their as-macro data, but have not received a response. i'm trying to figure out where they are getting the as-spiretech as-macro from. i know i created that years ago, but i can't find it in any of the routing registries i might have used. i may have forgotten to delete it, but i can't figure out where it is in order to kill it off. other data in robtex seems to be current, so it seems likely that they are getting the data from a db somewhere, but where? anyone out there have any good ideas of where to look? or if robtex has a known issue with as-macros?

1 0

vyatta for bgp
by Ben Albee 26 Sep '11

26 Sep '11

Does anybody currently use vyatta as a bgp router for their company? If so have you ran into any problems with using that instead of a cisco or juniper router?

26 38

Sprint 3G/4G PPTP VPN connectivity
by Drew Weaver 26 Sep '11

26 Sep '11

Has anyone been able to pull any magic off that allows PPTP connectivity over sprint's 3G/4G wireless network? I assume they're just filtering it flat out, but before I contact them I wanted to see if anyone has found a resolution on their own. I have several Nexus S 4G devices which are unable to get PPTP connections over 3G/4G but if you enable WIFI it comes up instantly. I've been researching this off and on all weekend but wondered if anyone else had run into this issue. thanks, -Drew

5 5

AT&T Wireless outage in SoCal
by Chris Woodfield 26 Sep '11

26 Sep '11

Hearing rumblings of a major AT&T Wireless outage in southern California. Anyone have more detail? Limited to cell towers or are transit circuits affected? -Chris

3 3

e-mail blacklisted - TIOPAN.COM
by Mike Gatti 26 Sep '11

26 Sep '11

If there is someone from the Company TIOPAN.COM on the list can you please contact me off line. My apologies to the other members of the list for using the list as a contact method. Thank you, -- Michael Gatti cell.949.735.5612 ekim.ittag(a)gmail.com (UTC-8)

1 0

"general badness" AS-based reputation system
by Gadi Evron 26 Sep '11

26 Sep '11

Having run one of these in the past, when take-downs of C&Cs was still semi-useful, my ethos on this is problematic, however, I am as of yet undecided as to this one. An AS-based reputation system for all sorts of badness: http://bgpranking.circl.lu/ In my opinion, third-party security based AS-reputation systems will eventually become de-facto border filtering systems for ISPs, but that day is still not here, as that is still socially unacceptable in our circles, and will remain so until it becomes _necessary_. Regardless of my musings of Operators World cultural future, this systems seems rather interesting, and no doubt you'd want to take a look at your listing. Gadi.

2 2

Re: vyatta for bgp
by Bill Shetti 25 Sep '11

25 Sep '11

On 9/22/11 11:38 , Charles N Wyble wrote: >* On 09/22/2011 05:37 AM, Pierce Lynch wrote:*>>* Andreas Echavez [mailto:andreas at livejournalinc.com <https://mailman.nanog.org/mailman/listinfo/nanog>] originally wrote:*>>>* Ultimately, the network is as reliable as you build it. With*>>>* software, it's much cheaper to divide and scale horizontally.*>>>* Hardware devices are expensive and usually horizontal*>>>* scalability never happens. So in reality, an enterprise blows 100k on*>>>* two routers, they both flop because of some "firmware bug", and*>>>* you're down.*>>* With this in mind, I am keen to understand how many implementations of*>>* packages such as Quagga and Zebra that the group use. With the likes*>>* of Vyatta being discussed, I am keen to see if products such as Quagga*>>* as still regularly used as it used to be.*>**>* I think that the original/upstream versions are out of date as compared*>* to the one maintained by Vyatta. Or Google (for their MPLS processing*>* needs). See*>* http://www.nanog.org/meetings/nanog50/abstracts.php?pt=MTYzNSZuYW5vZzUw&nm=…>* <http://www.nanog.org/meetings/nanog50/abstracts.php?pt=MTYzNSZuYW5vZzUw&nm=…>* > We are actively supporting Quagga. We currently have a git repo at > code.google.com with some BGP multipath updates, and are working with > ISC to provide SQA on that branch. Hopefully more features will be > forthcoming. Search quagga-dev if you're interested in more details. > > Vyatta has done a lot of great work on Quagga, as have many others. It > would be nice to see all the various useful branches merged into a > cherry-picked mainline that would simplify the Quagga development > community's lives considerably. > -Scott we [opensourcerouting.org (ISC project)] are working on providing SQA around Quagga. Our goal is to enable the community to build a more stable, feature rich version of the quagga baseline.We're providing testing, release management, and helping develop patches, features etc. We have started to test quagga's baseline code (99.18) covering a) compliance (RFCs) and interop (with J and C) b) scenario/functional/scale/performance testing c) resilience and security testing We already found several issues and have started to bug fix with the community. See the quagga-dev list and bugzilla at quagga.net for details. Examples - scale limits on BGP, incorrect route calculation, etc (this is the main branch NOT variants) In addition, we are also testing other branches and benchmarking them. Vyatta's code and google's MP updates are some of many variants we are working with (testing). Over the next few months of testing the mainline, and variants, we will also work with the community (Vyatta, google, independent committers, and others) to facilitate a merged release. We will also test this against different configurations (OSs, Servers, and switches ;p). As part of the merge we will also help review and manage code with the community, leveraging some of the experiences from ISC in bind. If anyone has used Quagga in their network in any sort of configuration, or even modified code to improve it, please contact us (me or info(a)opensourcerouting.org) As we are putting together the release and tests for scenario/functional/scale/perf/etc - input would be greatly appreciated. We have a repository also which we can open up for new code/patches etc, but it needs to also be given to the community. As I have stated are working with Vyatta (and google, and others not be mentioned), but more are always welcome. We will be at Nanog in philly - come find me or one of my team members. Thanks Bill

1 0

Strange static route
by Glen Kent 25 Sep '11

25 Sep '11

Hi, I have seen a few operators adding static routes like: 0.0.0.0/1 some next-hop and 128.0.0.0/1 some next-hop. Why would anyone want to add such static routes? What does 0.0.0.0/1 mean. Note that the netmask is 1 and not 0. Thanks, Glen

9 9

Earthlink Contact - DNS cache poisoning
by Will Dean 25 Sep '11

25 Sep '11

Anyone out there in Earthlink land? I am seeing what looks to be a cache poisoning attack on ns1.mindspring.com. Sporadic of course so it takes a few queries to replicate. will$ dig www.google.com @207.69.188.185 ; <<>> DiG 9.7.3 <<>> www.google.com @207.69.188.185 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26196 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.google.com. IN A ;; ANSWER SECTION: www.google.com. 60 IN A 64.27.117.179 www.google.com. 60 IN A 69.25.212.24 ;; AUTHORITY SECTION: www.google.com. 65535 IN NS WSC2.JOMAX.NET. www.google.com. 65535 IN NS WSC1.JOMAX.NET. ;; Query time: 88 msec ;; SERVER: 207.69.188.185#53(207.69.188.185) ;; WHEN: Sat Sep 24 20:25:40 2011 ;; MSG SIZE rcvd: 120 - Will

3 4