April 2012 - Test - lists.nanog.org

Re: Network Storage
by Joel M Snyder 12 Apr '12

12 Apr '12

>Can you please comment on what is best solution for storing network >traffic. Well, "best" is kind of a hard word to use here. There are lots of different solutions depending on exactly why and where you want to capture this. As far as I know, there are really two credible companies who are thrashing it out in this space right now, NetWitness (now part of RSA) and Solera. I think that Niksun is still out there, but they haven't done much recently or maybe they just concentrate on particular sectors and so I never see them. Of course, you can also just tcpdump it yourself, but the commercial products do a lot of the metadata analysis and creation for you, so it's a lot easier to understand what is happening in your traffic than just having piles of tcpdumps. I bought a NetWitness box and was profoundly unimpressed. So I guess my advice would be to start with Solera and then look at NetWitness if you don't like Solera. This assumes you have budget. If this is a back-of-the-envelope "hey, let's grab some packets and do something with them" kind of exercise, then filter your tcpdumps a lot better. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: Level3 IPv6 peering with HE only in London?
by Dave Sotnick 12 Apr '12

12 Apr '12

Yep, looks much better now. This is what Level3 had to say: "David, You should see this repaired at this time, looks like the peering between L3 and HE crashed in stateside when the ipv6 max prefix limits exceeded the router configurations. Please let us know if any further questions. Regards, Level 3 Communications" Thanks all, -Dave On Wed, Apr 11, 2012 at 11:37 PM, Mike Leber <mleber(a)he.net> wrote: > Was fixed a short while ago, please retest. > > Mike. > > > On 4/11/12 9:08 PM, Dave Sotnick wrote: >> >> Hello Nanog, >> >> Looks like Level3's only IPv6 route to HE is via London right now: >> >> Show Level 3 (Las Vegas, NV) Traceroute to www.he.net >> 1 vl-5.bar1.LasVegas1.Level3.net (2001:1900:2F::1) 0 msec 0 msec 0 msec >> 2 vl-11.bar2.LasVegas1.Level3.net (2001:1900:4:1::3C6) 0 msec 0 msec 0 >> msec >> 3 vl-4045.car1.Denver1.Level3.net (2001:1900:4:1::276) 84 msec 228 >> msec 224 msec >> 4 vl-4081.car2.Denver1.Level3.net (2001:1900:4:1::32) 20 msec 20 msec 20 >> msec >> 5 vl-4042.edge1.Chicago2.Level3.net (2001:1900:4:1::36) 44 msec 44 msec >> 44 msec >> 6 vl-4067.car1.Chicago1.Level3.net (2001:1900:4:1::1D) 48 msec 212 >> msec 224 msec >> 7 vl-4061.car2.NewYork2.Level3.net (2001:1900:4:1::22) 184 msec 216 >> msec 232 msec >> 8 vl-4080.car1.NewYork2.Level3.net (2001:1900:4:1::F1) 80 msec 80 msec 80 >> msec >> 9 vl-4041.car1.NewYork1.Level3.net (2001:1900:4:1::101) 80 msec 80 msec >> 80 msec >> 10 vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11) 176 msec 144 >> msec 164 msec >> 11 vl-4081.edge3.London1.Level3.net (2001:1900:5:1::102) 136 msec 132 >> msec >> vl-4081.edge4.London1.Level3.net (2001:1900:5:1::106) 148 msec >> 12 2001:1900:5:3::11E 160 msec 156 msec 160 msec >> 13 10gigabitethernet7-4.core1.nyc4.he.net (2001:470:0:128::1) 344 >> msec 208 msec 200 msec >> 14 10gigabitethernet5-3.core1.lax1.he.net (2001:470:0:10E::1) 276 >> msec 260 msec 268 msec >> 15 10gigabitethernet7-4.core1.fmt2.he.net (2001:470:0:18D::1) 272 >> msec 272 msec 324 msec >> 16 10gigabitethernet2-1.core1.fmt1.he.net (2001:470:0:2D::1) 288 msec >> 272 msec 276 msec >> 17 * * * >> 18 * * * >> >> Confirmed by L3's looking glasses ( >> >> http://lg.level3.net/traceroute/traceroute.cgi?site=lvg1&target=www.he.net&… >> ) and my own corporate IPv6 connection from Level 3. >> >> I opened a ticket with Level 3. Anyone else seen this? >> >> -Dave >> >

4 4

Cheap Juniper Gear for Lab
by Steven King 12 Apr '12

12 Apr '12

Hello All, I am tasked with replacing an old linux router setup with Juniper gear in the near future. Though I am a Cisco guy myself. Does anyone know of any older cheap Juniper gear I might find on Ebay so that I may build a home lab without going broke? Thanks! -- Steve King Network/Linux Engineer - AdSafe Media Cisco Certified Network Professional CompTIA Linux+ Certified Professional CompTIA A+ Certified Professional

24 30

att wireless
by Josh Smith 12 Apr '12

12 Apr '12

Can a clueful DNS person fro AT&T wireless please contact me off list if possible. Thanks, Josh Smith KD8HRX email/jabber: juicewvu(a)gmail.com phone: 304.237.9369(c)

1 0

Level3 IPv6 peering with HE only in London?
by Dave Sotnick 12 Apr '12

12 Apr '12

Hello Nanog, Looks like Level3's only IPv6 route to HE is via London right now: Show Level 3 (Las Vegas, NV) Traceroute to www.he.net 1 vl-5.bar1.LasVegas1.Level3.net (2001:1900:2F::1) 0 msec 0 msec 0 msec 2 vl-11.bar2.LasVegas1.Level3.net (2001:1900:4:1::3C6) 0 msec 0 msec 0 msec 3 vl-4045.car1.Denver1.Level3.net (2001:1900:4:1::276) 84 msec 228 msec 224 msec 4 vl-4081.car2.Denver1.Level3.net (2001:1900:4:1::32) 20 msec 20 msec 20 msec 5 vl-4042.edge1.Chicago2.Level3.net (2001:1900:4:1::36) 44 msec 44 msec 44 msec 6 vl-4067.car1.Chicago1.Level3.net (2001:1900:4:1::1D) 48 msec 212 msec 224 msec 7 vl-4061.car2.NewYork2.Level3.net (2001:1900:4:1::22) 184 msec 216 msec 232 msec 8 vl-4080.car1.NewYork2.Level3.net (2001:1900:4:1::F1) 80 msec 80 msec 80 msec 9 vl-4041.car1.NewYork1.Level3.net (2001:1900:4:1::101) 80 msec 80 msec 80 msec 10 vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11) 176 msec 144 msec 164 msec 11 vl-4081.edge3.London1.Level3.net (2001:1900:5:1::102) 136 msec 132 msec vl-4081.edge4.London1.Level3.net (2001:1900:5:1::106) 148 msec 12 2001:1900:5:3::11E 160 msec 156 msec 160 msec 13 10gigabitethernet7-4.core1.nyc4.he.net (2001:470:0:128::1) 344 msec 208 msec 200 msec 14 10gigabitethernet5-3.core1.lax1.he.net (2001:470:0:10E::1) 276 msec 260 msec 268 msec 15 10gigabitethernet7-4.core1.fmt2.he.net (2001:470:0:18D::1) 272 msec 272 msec 324 msec 16 10gigabitethernet2-1.core1.fmt1.he.net (2001:470:0:2D::1) 288 msec 272 msec 276 msec 17 * * * 18 * * * Confirmed by L3's looking glasses ( http://lg.level3.net/traceroute/traceroute.cgi?site=lvg1&target=www.he.net&… ) and my own corporate IPv6 connection from Level 3. I opened a ticket with Level 3. Anyone else seen this? -Dave

3 3

IPv6 support via Charter | Ideas on BGP Tunnel via HE
by Anurag Bhatia 11 Apr '12

11 Apr '12

Hello, Does anyone here has clues on IPv6 support via Charter? We recently got BGP up on the connection and they denied for IPv6 support for now. Support engineer gave expected time of something like end of year which seems very late as per our plans. Is situation same for everyone who sits in downstream of Charter? Also, does it makes sense to go for BGP Tunnel for now? I just setup IPv6 Tunnel via Hurricane Electric. Latency seems pretty much OK ~ 10-15ms of overhead. Yet to test other parameters. I heard Tunnels are usually bad. Can someone tell how to test this tunnel setup to confirm if there is a performance issue or not? I am thinking of writing a quick bash script and run via cron to test latency, packet loss and bandwidth throughput for couple of days. If anyone has better idea, please let me know. Thanks. -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia> Linkedin: http://linkedin.anuragbhatia.com

9 11

RPKI field experiences
by Alex Band 11 Apr '12

11 Apr '12

We just released a new version of our RPKI relying party software, RIPE NCC RPKI Validator 2.0.4: http://www.ripe.net/lir-services/resource-management/certification/tools-an… There are now more than 7,200 RPKI valid BGP route announcements entered in the global system, so there is a solid data set to gain operational experience with. We would really like you to try it out and report back on the usability and reliability. ARINs Pilot information is here in case you want to create some of your own ROAs: https://www.arin.net/resources/rpki.html As always, the RIPE NCC RPKI Validator requires no configuration and has no dependencies other than Java 1.6 and rsync available on your system. Simply unzip the package, run ./bin/rpki-validator from the base directory and browse to http://localhost:8080 Cheers, Alex

1 0

Re: Cheap Juniper Gear for Lab
by Scott Weeks 10 Apr '12

10 Apr '12

--- mysidia(a)gmail.com wrote: From: Jimmy Hess <mysidia(a)gmail.com> The Juniper ERX edge routers are what isn't "real" JunOS. It's as if they were trying to make a clone of the IOS CLI: http://www.juniper.net/techpubs/en_US/junose10.2/information-products/topic… ------------------------------------------ That's because Juniper bought the ERX series from Unisphere. It's not a "real" JunOS. My suggestion: if you make a lot of changes stay away from the ERXs, but if you don't do much to them they will mostly purr along just fine. I was running them fairly hard, with 30K plus ATM/DSL subs per router... scott

1 0

AMS-IX for local loop
by Shacolby Jackson 10 Apr '12

10 Apr '12

I know this is a bit off topic since Amsterdam isn't exactly in North America but... Has anyone used AMS-IX for a private interconnect from one datacenter to another to avoid a classic local loop to another party or provider? For example, I'm in Equinix but might want to connect directly to someone at Interxion. -shac

3 3

AT&T DSL bypass first line
by Brandon Ewing 10 Apr '12

10 Apr '12

I've been an AT&T DSL customer for 3+ years, with no issues until they started sending people into my neighborhood to "start retrofitting for UVerse". Since they've visited, my PPPoE has dropped once an hour, many times requiring me to restart my router (Cisco 877) to get my virtual interface to come back up. Speaking with the front line on the phone has given me nothing but problems (in their defense, I do have a non-standard modem) -- could someone with knowledge provide me with a way to bypass the CSRs and speak to someone with clue to work out debug logs and figure out why I am suddenly an unhappy AT&T customer? -- Brandon Ewing (nicotine(a)warningg.com)

6 6