December 2013 - Test - lists.nanog.org

Megapath/Covad DNS broken?
by Robert Glover 27 Dec '13

27 Dec '13

Hello, Seems like some Megapath/Covad DNS servers are non-responsive: 64.105.172.26 64.105.172.27 We have dozens of end-users down that utilize these servers. Anyone from MP/Covad alive this morning?? Thanks, -Bobby

1 0

Data Center and IX Standards Published by Open-IX - Certification begins soon!
by David Temkin 27 Dec '13

27 Dec '13

I am proud to announce that the final versions of the Data Center and IXP standards have been completed by their respective working groups and have been published. Data Center: http://goo.gl/s4cGBp IXP: http://goo.gl/O5I1my Martin Hannigan will follow up shortly with scheduled dates for accepting applications to become Open-IX Certified. We intend on accepting applications for Northern Virginia first, immediately followed by NYC and other markets. Regards, -Dave Temkin Chair, Open-IX Association

2 1

Juniper MAG/SA question - re: split tunneling policy and use of JSAM/WSAM
by Herro91 26 Dec '13

26 Dec '13

Hello J-NSP and Nanog members Hopefully this is the right forum for this discussion - if not my apologies for further clogging your inbox. Here it goes: Would you consider use of JSAM/WSAM to selectively proxy and tunnel certain applications a form of split tunneling? The traditional concept of split tunnels looks at all traffic Layer 3 and above, versus JSAM/WSAM which looks at application traffic at Layer 7. The context for all of this is from a previous question I put out regarding split tunneling policy on government networks. Thanks!

2 1

What's going on with NTP?
by John Levine 26 Dec '13

26 Dec '13

I have two FreeBSD servers where the NTP daemons are using double digit CPU percentages today rather than the usual 0.01%. Restarting them didn't help. The clock on my Android phone is five hours slow. (It's not the time zone, I checked that.) Is this just my special Christmas present, or are there screwed up NTP servers? Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. http://jl.ly

6 5

Help me make sense of these traceroutes please
by Sam Moats 25 Dec '13

25 Dec '13

Hello Nanog community, I would like to enlist your help with understanding this latency I'm seeing. First some background, I have Level3 circuits in the US and some services in Europe. From Comcast to the US level3 IPs the performance is excellent. The same traceroute to Europe is terrible. The strange part is the problem appears to begin stateside on the same infrastructure that carriers the us traffic. Here is a trace to one of my IPs in the US from Comcast Tracing route to 4.30.x.x over a maximum of 30 hops 1 3 ms 1 ms 1 ms 10.1.1.1 2 30 ms 29 ms 29 ms 71.62.150.1 3 9 ms 9 ms 9 ms xe-0-1-0-32767-sur01.winchester.va.richmond.comc ast.net [68.85.71.165] 4 9 ms 14 ms 10 ms xe-9-0-3-0-ar02.staplesmllrd.va.richmond.comcast .net [68.86.125.149] 5 32 ms 30 ms 34 ms 68.86.91.153 6 36 ms 38 ms 53 ms 23.30.207.98 7 34 ms 28 ms 33 ms vlan51.ebr1.Atlanta2.Level3.net [4.69.150.62] 8 29 ms 28 ms 20 ms ae-63-63.ebr3.Atlanta2.Level3.net [4.69.148.241] 9 27 ms 29 ms 30 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86] 10 24 ms 30 ms 24 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1 34] 11 29 ms 31 ms 39 ms ae-41-90.car1.Washington1.Level3.net [4.69.149.1 95] 12 30 ms 30 ms 29 ms ae-2-23.edge7.Washington1.Level3.net [4.68.106.2 38] 13 38 ms 44 ms 43 ms 4.79.x.x 14 * * * Request timed out. (My firewall) 15 39 ms 39 ms 39 ms 4.30.x.x Trace complete. Now here is the same computer tracing to a level3 circuit in Ireland. Tracing route to xxx.yyy.ie [193.1.x.x] over a maximum of 30 hops: 1 1 ms 1 ms 1 ms 10.1.1.1 2 38 ms 33 ms 25 ms 71.62.150.1 3 10 ms 9 ms 9 ms xe-0-1-0-32767-sur01.winchester.va.richmond.comc ast.net [68.85.71.165] 4 14 ms 15 ms 15 ms xe-9-0-3-0-ar02.staplesmllrd.va.richmond.comcast .net [68.86.125.149] 5 28 ms 30 ms 30 ms 68.86.95.65 6 37 ms 37 ms 37 ms 23.30.207.98 7 118 ms * 218 ms vlan51.ebr1.Atlanta2.Level3.net [4.69.150.62] 8 119 ms 218 ms 119 ms ae-63-63.ebr3.Atlanta2.Level3.net [4.69.148.241] 9 221 ms 119 ms 119 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86] 10 118 ms 119 ms 118 ms ae-91-91.csw4.Washington1.Level3.net [4.69.134.1 42] 11 119 ms 119 ms 119 ms ae-92-92.ebr2.Washington1.Level3.net [4.69.134.1 57] 12 117 ms 126 ms 120 ms ae-43-43.ebr2.Paris1.Level3.net [4.69.137.57] 13 128 ms 118 ms 120 ms ae-6-6.car1.Dublin3.Level3.net [4.69.148.53] 14 122 ms 225 ms 124 ms 4.69.148.58 15 124 ms 118 ms 120 ms ae-11-11.car1.Dublin1.Level3.net [4.69.136.93] Notice that the hop from 23.30.207.98 to 4.69.150.62 seems very respectable at around 30ms for US bound traffic. However when I'm tracing from the same Comcast network to an IP that is in Europe the very same hope produces 100ms of latency and about 12% packet loss. Why does this hop treat traffic differently based on it's destination? Is this some weird result of complex asymmetrical routing or something else? I can route around this problem, but it does seem strange and I want to understand it Thanks, Sam Moats

6 6

Re: Help me make sense of these traceroutes please
by Anne P. Mitchell, Esq. 25 Dec '13

25 Dec '13

> with a bunch of IT folks and an ample supply of Guinness. My ex used to call it "design fluid". :-) Happy holidays, everyone! Anne Anne P. Mitchell, Attorney at Law CEO/President ISIPP SuretyMail Email Accreditation http://www.ISIPP.com Member, Cal. Bar Cyberspace Law Committee Author: Section 6 of the CAN-SPAM Act of 2003 How do you get to the inbox instead of the spam filter? SuretyMail! Helping businesses keep their email out of the junk folder since 1998 http://www.isipp.com/SuretyMail Author, "They're Your Kids Too: The Single Father's Guide to Defending Your Fatherhood in a Broken Family Law System" http://www.amazon.com/Theyre-Your-Kids-Too-Fatherhood/dp/061551443X

1 0

Merry Christmas
by Ryan Finnesey 24 Dec '13

24 Dec '13

Wanted to wish everyone a Marry Christmas and all the best in the New Year! Cheers Ryan

1 0

Netflix Advice
by Warren Bailey 24 Dec '13

24 Dec '13

Dear NANOG Gods, Has anyone heard of a nifty way to cache the netflix library without using their Open Connect Appliance? I am not trying to dodge copyrights, or even dodge the netflix service, I am simply trying to find a way to store the netflix library remotely for users behind satellite connections. If any of you have figured this out, or if there is a Netflix person out there listening, feel free to contact me offline. Thanks a lot, and have a Merry Christmas! //warren

3 3

Re: 5.7 *report
by Jay Ashworth 21 Dec '13

21 Dec '13

----- Original Message ----- > From: "Mike Schwartz" <mschw(a)athenet.net> > That urks me, too. In many web sites that have a state field, you can > at least type the first letter of your state, but you still have to use the > mouse, unless your state is the first one that starts with any given > letter. > When I type "W", "WA" pops up, so I still have to use the mouse to > select "WI". If I try to type "W" then "I", the popup box jumps to "IA". > > For example, jump to the state field on this website: > > https://www.tigerdirect.com/secure/subscribe2.asp?cm_sp=Masthead-_-NewCustom > er-_-NA > > "W" takes me to "Washington", but if I then type "I" it takes me down > to "International". I can avoid using my mouse if I type "W" and then > down arrow twice, to get past West Virginia. The widget is "pulldown menu with incremental search", and the question is "did they allow multiple character search input" and, as a sub query "how long after you hit a character does the hidden input field reset if you don't hit enter". Seems to me that Jeff Harrison coded a decent incremental search wrapped around a browse lookup at one point ... or maybe it was Ron Klimasewski, one of Microsys's other coders in the 90s. It's been a long time... It's odd, when I have to do maintenance work on tables all three of us had our fingers in, I can tell which of the three of us worked on a given routine; we each had a different view of 1TBS. :-) Cheers, -- jra -- Make Election Day a federal holiday: http://wh.gov/lBm94 100k sigs by 12/14 Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

2 1

Watchguards vs Junipers firewalls
by Simon Brilus 21 Dec '13

21 Dec '13

Hi all - Has anyone out there had experience of running these firewalls near 1Gig speeds (mainly middle to large packets, not voice) between zones/ports, if possible Specifically we are looking at the Watchguard XTM535 and the Juniper SRX550/600's. I am interested in experiences good and bad on either platforms and usage of IDP/Weblocker etc on them. We currently use SRX240 and Watchguard 1250e but have a need to increase the throughput to nearly 1Gig. Other criteria would be to be to do OSPF/BGP in high availability mode Many thanks Simon

2 1