June 2012 - Test - lists.nanog.org

CBT Nuggets streaming account
by Ryan Burtch 12 Jun '12

12 Jun '12

Could someone contact me off list if you have a CBT Nuggets streaming account and would be willing to help me in working towards my CCNP?

8 11

Re: Dear Linkedin,
by Hal Murray 12 Jun '12

12 Jun '12

>> Does your bank request/require that you change the PIN >> on your ATM card every few months? > ATM cards are not passwords, they are a coarse form of two-factor > authentication - You have the card, you have the PIN. > You have to possess both in order to transact - at least in in theory. > Compare that with the secrecy surrounding the CVV - the "last three digits > on the number on the back of the card" which you are "not meant to tell > anyone" and which _will_ be different if your card is lost/stolen and > reissued. If I'm not supposed to not "tell anyone", why is it even printed where I can read it? ---- [Context is only having so-many brain cycles to memorize passwords.] > It's harder as we get old. Use technology to aid with the heavy lifting. :-) Right. But the meta problem is figuring out which technology to trust. Phishing is the tip of the iceberg on social engineering. So far, the bad guys are winning. -- These are my opinions. I hate spam.

26 49

Google SDN slides @NANOG55
by Ray Qiu 12 Jun '12

12 Jun '12

Hi, Could someone please share the SDN slides that Google presented at NANOG55? It is still not on the web. Thanks! Regards, Ray Sent from my iPhone 4S

5 4

BGP Error Handling (Fwd: [GROW] WGLC: draft-ietf-grow-ops-reqs-for-bgp-error-handling-04)
by Rob Shakir 12 Jun '12

12 Jun '12

Hi NANOGers, Back at NANOG51 in Miami, I gave a presentation relating an IETF draft relating to improving the robustness of BGP-4 to meet the requirements of current operational deployments, and there was some good discussion following this. This document was then presented to the IETF IDR and GROW (Global Routing Operations WG), and we have since iterated the document to make it significantly clearer, and describe the desired operational behaviour. This work was particularly on the back of the issues that were seen in the Internet DFZ relating to malformed AS_PATH, invalid AS4_PATH, and the problematic RIPE NCC large optional-transitive advertisement. The discussion, and the requirements outlined have helped influence a number of new standards developments in BGP: - An IDR BGP error handling draft [0] is in progress to standardise the "treat-as-withdraw" behaviour, which allows session resets to be avoided based on erroneous BGP UPDATEs where possible. - Further drafts relating to extending ROUTE REFRESH [1] and Graceful Restart [2] have been proposed to allow recovery from inconsistent RIB states, and reduced impact to forwarding when a session reset cannot be avoided respectively. - The work that Tom Scholl, Richard Steenbergen, John Scudder, and David Freedman did on the ADVISORY message has been extended to handle some error handling cases, as well as the original use case [3]. The working group last call represents final agreement prior to publishing this work, which is valuable since it provides a framework of requirements which future developments are intended to solve. I would encourage anyone who has an interest in this area to review the document, and let the GROW mailing list (grow(a)ietf.org) know whether the requirements describe meet their use case, and/or any comments or deviations that should be noted. Many thanks in advance for doing so - there are a number of network scenarios that I think will be operationally improved by implementing this work. Kind regards, r. Begin forwarded message: > From: Christopher Morrow <christopher.morrow(a)gmail.com> > Subject: [GROW] WGLC: draft-ietf-grow-ops-reqs-for-bgp-error-handling-04 > Date: 11 June 2012 21:21:49 GMT+01:00 > To: grow-chairs(a)tools.ietf.org, "grow(a)ietf.org grow(a)ietf.org" <grow(a)ietf.org> > > Hello GROW-WG folk, > Please take this message as the start of a 2 week, ending 6/25/2012 > (June 25, 2012) WGLC for the subject draft, link to current version: > <http://www.ietf.org/internet-drafts/draft-ietf-grow-ops-reqs-for-bgp-error-…> > > Abstract: > "BGP-4 is utilised as a key intra- and inter-Autonomous System routing > protocol in modern IP networks. The failure modes as defined by the > original protocol standards are based on a number of assumptions > around the impact of session failure. Numerous incidents both in the > global Internet routing table and within Service Provider networks > have been caused by strict handling of a single invalid UPDATE > message causing large-scale failures in one or more Autonomous > Systems. > > This memo describes the current use of BGP-4 within Service Provider > networks, and outlines a set of requirements for further work to > enhance the mechanisms available to a BGP-4 implementation when > erroneous data is detected. Whilst this document does not provide > specification of any standard, it is intended as an overview of a set > of enhancements to BGP-4 to improve the protocol's robustness to suit > its current deployment." > > -Chris > co-chair > _______________________________________________ > GROW mailing list > GROW(a)ietf.org > https://www.ietf.org/mailman/listinfo/grow

1 0

Re: Configuration Systems
by Andrew Latham 11 Jun '12

11 Jun '12

Jonathan That is the exact question I have asked myself many times. All of the major players in Configuration management have a "client" program that must run and at times requires some libraries that are newer than the platforms a company may need to support or that clients may wish supported. Another issue is the secure communication over a proprietary or SSH connection and not allowing secured VLANs or other services like RSH and Telnet over a point to point connection. Also you will find that the demand for cloud systems and the complex languages used in the "Configuration Management Systems" do not easily translate to the existing and developing cloud infrastructure. and stuff... On Wed, Jun 6, 2012 at 10:52 PM, Jonathan Herbert <jwherbert(a)gmail.com> wrote: > Hi Andrew, > > Out of curiosity, why are you reinventing the wheel here? > > Don't take this the wrong way- I'm just curious why you're building > something new. What does Enablement do that the other technologies you've > mentioned doesn't? > > Jonathan > > > On Wed, Jun 6, 2012 at 10:49 PM, Andrew Latham <lathama(a)gmail.com> wrote: >> >> Lurker speaking... beware... >> >> I have been talking with some folks from various industries about >> configuration systems ala Bcfg2, Puppet, Chef, and others. Many of >> them care far too much about the current nodes configuration status as >> some admin had logged in and changed something. I am authoring a >> system called Enablement that uses what ever technology needed (ssh, >> telnet over admin vlan, rsh, etc...) to push a planned system/config >> to the device. Monitoring and auditing are all the same at the moment >> as we need historical data on when a service or port started and >> stopped offering its planned or unplanned service. For a meeting >> Thursday I am looking forward to the future of configuring systems. >> My idea is push + netblock scanning of services. With stacks for >> clouds we can startup and shut down nodes easy. Would a bend over >> backwards config reader for all the "Configuration Management Systems" >> be the best medium ground from the service provider point of view? >> >> Enablement.... Send another man to fight on the front line. >> >> -- >> ~ Andrew "lathama" Latham lathama(a)gmail.com http://lathama.net ~ >> > -- ~ Andrew "lathama" Latham lathama(a)gmail.com http://lathama.net ~

9 13

Re: Dear Linkedin,
by Scott Weeks 11 Jun '12

11 Jun '12

--- jna(a)retina.net wrote: From: John Adams <jna(a)retina.net> I use 1password, you might use LastPass. They both work on Android, iPhone, Linux, Mac, Windows. ---------------------------------------- No, according to their site 1password does not work on *nix, however lastpass says it does all *nix flavors. scott

5 4

Arbor Peakflow competitor?
by bas 11 Jun '12

11 Jun '12

Hi All, Has anyone worked with GenieATM? http://www.genienrm.com/index.php/products/9-genieatm/genieatm-6000/21-geni… It looks as it has the same functionality as Peakflow. I'm curious if anyone has tested or deployed the solution. And if so, what are your experiences? Thanks in advance, Bas

3 2

Re: Dear Linkedin,
by Scott Weeks 11 Jun '12

11 Jun '12

--- gabe(a)teksavvy.ca wrote: From: Gabriel Blanchard <gabe(a)teksavvy.ca> How the heck did this conversation go from Linkedin to a Quebec drivers license? I'm not sure how relevant this is to NANOG. Both subject matters that is. ------------------------------ New to nanog, eh? ;-) scott

1 0

My view of the arin db boarked?
by Christopher Morrow 11 Jun '12

11 Jun '12

err, last 3 times I asked this I was shown the error of my ways, but here goes... 209.250.228.241 - seems to not have any records in ARIN's WHOIS database, everythign seems to roll up to the /8 record :( I see this routed as a /23: (from routeviews) BGP routing table entry for 209.250.228.0/23, version 2072545487 Paths: (33 available, best #19, table Default-IP-Routing-Table) Not advertised to any peer 3277 3267 174 27431 14037 194.85.102.33 from 194.85.102.33 (194.85.4.4) Origin IGP, localpref 100, valid, external Community: 3277:3267 3277:65321 3277:65323 3277:65330 If I look at the ASN in particular: AS14037 no records exist for that in ARIN's WHOIS database either ;( If I look at all the networks announced by AS14037: 14037 | 204.8.216.0/21 | 14037 | 209.250.224.0/19 | 14037 | 209.250.228.0/23 | 14037 | 209.250.242.0/24 | 14037 | 209.250.247.0/24 | 14037 | 64.18.128.0/19 | 14037 | 64.18.159.0/24 | none of them have any records in the ARIN WHOIS database :( The upstream for this network is AS 27431 - JTL Networks who seems to get transit/peer with 3356/174. It's nice to see folk who use IRR databases to filter their customers still permit this sort of thing to go on though: AS3356 I'm looking at you... I think first: "Where are the records for this set of ip number resources?" and second: "Why are we still seeing this on the network with no way to contact the operators of the resources?" -chris

3 5

Problems connecting to Web-sites hosted by XO/Concentric
by Syed Knut A. 11 Jun '12

11 Jun '12

Hi, Some of our customers (BKK Fiber is an ISP) are having problems connecting to Web-services (TCP port 80) hosted by XO/Concentric. tcpdump shows that no packets are returned. Ping and connection to the SMTP-service (TCP port 25) on the Webserver hosts are fine. The problem seem to be limited to customers within a certain /17 allocated to us. I have tried Customer Care to no help. Has anybody else experienced the same with XO/Conecentric? Does anybody have contact information to Concentric operations? Kind Regards, Knut A. Syed Senior Network Engineer BKK Fiber AS | Postboks 7050, 5020 Bergen | T: +47 55 12 75 53 | M: +47 916 39 767 | www.bkk.no<http://www.bkk.no/> ___________________________________________________ This message and any attachment is intended for the person(s) named above only. It may contain information that is confidential or legally privileged. If you have received this communication in error, please erase all copies of the message and its attachments and notify us immediately. Thank You. This footnote confirms that the email and attachment(s) has been swept by our anti-virus solution for the presence of known computer viruses.

1 0