December 2012 - Test - lists.nanog.org

SSL on Juniper.net
by J. Oquendo 07 Dec '12

07 Dec '12

Yes, semi off/on topic I am aware, but because there are many here who visit the site, figured I'd ask. Anyone else having certificate issues on Juniper.net && their support login? This just started today. www.juniper.net is pushing an Akamai cert, support.j* is pushing a Comodo cert. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

2 1

PHP library for IOS devices
by Ray Soucy 07 Dec '12

07 Dec '12

Quick note as many on-list may find this useful. I've maintained a PHP class to connect to IOS devices over telnet and parse the output into something useful for various internal tools for a few years now. I've recently worked with the author of phpseclib to create an SSH version of the library. It's still in a pre-release state until I have time to clean it up, but I've uploaded an archive of the SSH version and the modified phpseclib for anyone who needs in the meantime. You can find it at the bottom of the Cisco for PHP page: http://soucy.org/project/cisco/ -- Ray Patrick Soucy Network Engineer University of Maine System T: 207-561-3526 F: 207-561-3531 MaineREN, Maine's Research and Education Network www.maineren.net

3 2

earthquake in Japan right now
by Seiichi Kawamura 07 Dec '12

07 Dec '12

FYI, another big earthquake in Japan just now. M7.3 Seiichi

8 9

Re: Solutions for DoS & DDoS
by Steve 07 Dec '12

07 Dec '12

The ideal solution is a carrier that has its own true DDoS mitigation platform, and does not rely on black hole routing . Have the carrier handle the the large bulk flood attacks, then have your own prem base mitigation platform take care of the more application specific attacks that get through . This represents the best solution , and also the most expensive . So it may not work for a non profit. This Email was sent from Steve's iPad > Message: 4 > Date: Thu, 6 Dec 2012 09:51:21 -0800 > From: Mike Gatti <ekim.ittag(a)gmail.com> > To: NANOG list <nanog(a)nanog.org> > Subject: Solutions for DoS & DDoS > Message-ID: <0D89D80C-D288-402F-8723-B837EA52313C(a)gmail.com> > Content-Type: text/plain; charset=us-ascii > > Hello Everyone, > > I'm assisting a non-profit organization to research solutions to secure their network from DOS/DDOS attacks. So far we have gone the route of discussing with their ISP's to see what solutions they have to offer, believing that the carriers are better positioned to block the attack from the source. > > I wanted to get the lists thoughts on our approach going the carrier route and/or hear about successful implementation of other solutions. > > Thanks, > -- > Michael Gatti > 949.371.5474 > (UTC -8) > > > > > > > ------------------------------ > > > End of NANOG Digest, Vol 59, Issue 24 > *************************************

3 2

Amazon Abuse contact
by Mark Keymer 07 Dec '12

07 Dec '12

Hi, If there is a Amazon Abuse person our there or if someone has a good contact to someone at Amazon can you message me off-list. We have put in some Abuse request a couple of days ago and have not heard back. It would be great to talk with someone about an issue effecting one of our clients and the use of Amazon. (Cloud instances I believe) Thank you in advance. Sincerely, -- Mark Keymer CFO/COO Vivio Technologies 509-593-4207 x1002

3 3

Online/double-conversion UPS economy/high efficiency modes?
by William Herrin 07 Dec '12

07 Dec '12

Hi folks, I'm looking at several brands of rackmount 3kva double-conversion UPSes, such as Tripp Lite and Eaton Powerware. I'm specifically looking for something that will work as a line-interactive UPS until the power starts to misbehave and will then switch to double-conversion mode until a while after the last power bump. Basically I want the best of both worlds: save money on my power bill most of the time (double-conversion UPSes generally waste 10%-15% of the consumed kilowatt hours) but switch to nice clean double-conversion when the storms roll through and the power gets rough. Here's where I'm looking for help: the vendor web sites have scanty details about how the UPSes behave in their high efficiency modes. I'm hoping folks here have used some of the UPSes with this feature and can offer feedback. When does the UPS decide to switch to double-conversion? When does it decide to switch back? Are the options tunable? Through what interface? Can I write software that monitors a weather report and sends an SNMP message to switch the UPS to double conversion mode ahead of a storm? Eaton's 9130 says "On the High Efficiency setting, the UPS operates normally on Bypass, transfers to inverter in less than 10 ms when utility fails, and transfers back to Bypass in 1 minute after utility returns. The indicator illuminates when the UPS transfers to Bypass." http://lit.powerware.com/ll_download.asp?file=Eaton%209130%20UPS.pdf Tripp Lite's SU3000RTXL3U only says "If the UPS has been placed into Economy Mode (available on select UPS systems), it configures an online UPS to function as a switching UPS. When the UPS system is in Economy Mode, it operates at increased efficiency while AC utility power is available (within +/- 10% nominal) and switches to battery power if AC utility power is interrupted." http://www.tripplite.com/shared/techdoc/Owners-Manual/932471.pdf What others should I consider? Can anyone offer details? Thanks, Bill -- William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004

5 6

Verizon ISP ATM ports
by Joe Maimon 06 Dec '12

06 Dec '12

Hey All, Its that time of the year again, and I am looking for verizon ATM/DSL wholesale DSL ports for NY/NJ latas. Off-list replies are welcome. Thanks, Joe

1 0

RE: Cogent outage?
by Michael Bubb 06 Dec '12

06 Dec '12

We got a notice from Internap a few hours ago: "At approximately 12:10 EST Internap shut down the BGP session with Cogent as we were widespread packet loss issues through their network out of our New York (NYM) PNAP. We are contacting Cogent to see if they are aware of what the issue is. " They have not as yet updated this yrs Michael -- Michael Bubb +1.646.783.8769 https://www.google.com/profiles/michael.bubb "The first principle is that you must not fool yourself--and you are the easiest person to fool." - Richard Feynman All things are a flowing, Sage Heraclitus says; But a tawdry cheapness Shall reign throughout our days. - Pound

2 2

How to get DID local numbers (IP Telephony)
by Сергей Харламов 06 Dec '12

06 Dec '12

Hi there, Can someone explain me how can I get an block of DID (Telephony numbers)? For example I need 200 numbers. Is that special organization or I must buy it somewhere? What the rule for USA (NY) about telephony providing ? Should I have a licence to sale ip telephony? Thanks.

8 7

Cogent outage?
by Matthew Huff 06 Dec '12

06 Dec '12

About 10 minutes ago we stopped being able to pass traffic through cogent. I de-peered us from Cogent, and everything appears better. When I call cogent, all I get is a busy signal (must be a major outage). Anyone else seeing anything? ---- Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139

9 10