May 2013 - Test - lists.nanog.org

Re: High throughput bgp links using gentoo + stipped kernel
by Nick Khamis 21 May '13

21 May '13

> This is some fairly ancient hardware, so what you can get out if it will > be limited. Though gige should not be impossible. > Agreed!!! > The usual tricks are to make sure netfilter is not loaded, especially > the conntrack/nat based parts as that will inspect every flow for state > information. Either make sure those parts are compiled out or the > modules/code never loads. > > If you have any iptables/netfilter rules, make sure they are 1) > stateless 2) properly organized (cant just throw everything into FORWARD > and expect it to be performant). > We do use a statefull iptables on our router, some forward rules... This is known to be on of our issues, not sure if having a separate iptables box would be the best and only solution for this? > You could try setting IRQ affinity so both ports run on the same core, > however I'm not sure if that will help much as its still the same cache > and distance to memory. On modern NICS you can do tricks like tie rx of > port 1 with tx of port 2. Probably not on that generation though. Those figures include IRQ affinity tweaks at the kernel and APIC level. > > The 82571EB and 82573E is, while old, PCIe hardware, there should not be > any PCI bottlenecks, even with you having to bounce off that stone age > FSB that old CPU has. Not sure well that generation intel NIC silicon > does linerate easily though. > > But really you should get some newerish hardware with on-cpu PCIe and > memory controllers (and preferably QPI). That architectural jump really > upped the networking throughput of commodity hardware, probably by > orders of magnitude (people were doing 40Gbps routing using standard > Linux 5 years ago). Any ideas of the setup??? Maybe as far as naming some chipset, interface? And xserver that is the best candidate. Will google.. :) > Curious about vmstat output during saturation, and kernel version too. > IPv4 routing changed significantly recently and IPv6 routing performance > also improved somewhat. > > Will get that output during peak on monday for you guys. Newest kernel 3.6 or 7... Thank you so much for your insight, Nick.

10 11

Re: Looking for Netflow analysis package
by Scott Weeks 20 May '13

20 May '13

> Does anyone know of a netflow collector that will do the following. <snip> -------------------------------------------- -------------Original Message------------- > From: Laura Smith [mailto:leavingin13@yahoo.com] <UCE snipped out> ------------------------------------------ -------------"Meshier, Brent" wrote: ------------ > Do not appreciate the cold call from Plixer. Please do not use the > NANOG mailing list as your personal directory for sales leads. It's a > sure fire way to get your company blacklisted among IT professionals. ------------------------------------------------- -------- tcannon(a)beatsmusic.com wrote: ---------- From: Thomas Cannon <tcannon(a)beatsmusic.com> That wasn't in your signature's disclaimer. Perhaps now would be a good time to add it? ------------------------------------------------ You haven't been here long have you... He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG. For any other sales folks out there considering doing this, Brent's warning is a good one: "It's a sure fire way to get your company blacklisted among IT professionals." scott ps. WTF is this?!? **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holdings, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.

9 9

Re: ISIS and OSPF together
by Brandon Butterworth 19 May '13

19 May '13

> Randy is correct But who'd follow his advice, he regularly encourages his competitors to do stupid things. brandon

1 0

ISIS and OSPF together
by Glen Kent 19 May '13

19 May '13

Hi, I would like to understand the scenarios wherein the service provider/network admin might run both ISIS and OSPF together inside their network. Is this something that really happens out there? One scenario that i can think of when somebody might run the 2 protocols ISIS and OSPF together for a brief period is when the admin is migrating from one IGP to the other. This, i understand never happens in steady state. The only time this can happen is if an AS gets merged into another AS (due to mergers and acquisitions) and the two ASes happen to run ISIS and OSPF respectively. In such instances, there is a brief period when two protocols might run together before one gets turned off and there is only one left. The other instance would be when say OSPF is used to manage the OOB network and the ISIS is used for network reachability. Is there any other scenario? Glen

10 12

Re: Looking for Netflow analysis package
by Scott Weeks 18 May '13

18 May '13

On May 17, 2013 1:54 PM, "John Starta" <john(a)starta.org> wrote: > On May 17, 2013, at 8:24 AM, Valdis.Kletnieks(a)vt.edu wrote: > > On Thu, 16 May 2013 15:16:22 -0700, "Scott Weeks" said: > >> He DOES NOT need a 260 word signature (see below!) to make sure he does > >> not get UCE from posting to NANOG. > > Actually, I think Thomas Cannon was making the opposite point - that if > > he's going to spam us all with a 260 word disclaimer, it could have been > > expanded to 263 words and add 'No cold calls'. Or just have that and lose > > the other 260 words that make absolutely no sense on a NANOG posting. > Do you believe that Brent wrote the disclaimer attached to his message? > Despite y/our opinions of such disclaimers, legal counsel in some companies > still mandate their automatic attachment on all outbound messages. The only > means of avoiding them is to subscribe to mailing lists from a personal > e-mail account. Unfortunately these companies usually also have policies > prohibiting your accessing personal e-mail accounts from company owned > resources which can minimize the usefulness of some lists. In other words, > just because we might work for "enlightened" companies doesn't mean all our > colleagues can or do. ----------------------------------------------------- ------ philfagan(a)gmail.com wrote: ------------ From: Phil Fagan <philfagan(a)gmail.com> Well put. ---------------------------------------- One, you're both missing the point. Do you think a sales droid that'll scrape a technical mailing list like NANOG for cold calls will respect whatever crap is put into a .sig? Don't answer. It's rhetorical... Two, "Unfortunately these companies usually also have policies prohibiting your accessing personal e-mail accounts from company owned resources". So don't. Set up an SSH tunnel over port 80 to your home server and access your non-paragraph-sized-signature email account from home. There's a million ways to do things and still follow corporate rules... scot

2 1

Vpn tunnel Asa 5505 to fortigate 60c
by akurenath 18 May '13

18 May '13

Hi nanog, I have a fortigate 60c connecting a vpn tunnel to an asa 5505. I have the connection setup, but it will not connect because unfortunately the isp at the fortigate end decided to give us a 192.168.13/24 address. Now what I'd like to know is if there is any way to get this vpn connection to work through a pat connection until the isp resolves this issue? Thank you for any help. Zane Sent from Samsung mobile

3 2

Re: CDN server log
by Djamel Sadok 18 May '13

18 May '13

Hi Pete, I do not use a CDN I am only interested in analyzing content popularity in logs. These could be anonymized. Djamel On Wed, May 15, 2013 at 3:55 PM, Pete Mastin <pmastin(a)internap.com> wrote: > Hi djamel. If I understand your question - you should take a look at what > sawmill offers. Many of our clients use this product to analyze our cdn > produced logs. > > http://www.sawmill.net/ > > > > Sent from my iPhone > > On May 15, 2013, at 10:30 AM, "Djamel Sadok" <jamel(a)cin.ufpe.br> wrote: > > > Hi, > > > > Anyone knows of any public CDN server log trace. I am looking for object > > popularity, hit rate information, ... > > > > Thanks, Djamel > > > >

3 2

looking for documents describing frequent causes for line cuts
by Kyle Creyts 18 May '13

18 May '13

has anyone come by documents containing some statistics regarding leading causes for cuts in fiber, power, cable lines? I seem to remember one which included % cuts due to equipment failure, maintenance, weather, rodents, boring, car accidents, etc. but alas, I cannot find it in my archives.

3 3

Entry level WDM gear?
by Jeff Kell 18 May '13

18 May '13

Apologies if this is a "dumb newbie" question, but this is one area of networking where I remain a virgin :) We have a local loop fiber to a regional fiber hut that has served us well for several years. It's carrying a 1550nm ER 10G circuit at the moment, but we're looking at another one, possibly two (or more) in the near future. Getting another dark pair is "complicated" so we're exploring options to [C|D]WDM multiple lambdas over the existing fiber. Ciena/Cyan/etc are way over our non-existant budget... what is the going recommendation to throw say 4-8 lambdas over a dark pair without breaking the bank? :) Jeff

5 5

BGP Update Report
by cidr-report＠potaroo.net 17 May '13

17 May '13

BGP Update Report Interval: 09-May-13 -to- 16-May-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS36998 211390 9.9% 277.4 -- SDN-MOBITEL 2 - AS9829 46479 2.2% 45.9 -- BSNL-NIB National Internet Backbone 3 - AS8402 35090 1.6% 20.2 -- CORBINA-AS OJSC "Vimpelcom" 4 - AS34875 30967 1.5% 260.2 -- YANFES OJSC "Rostelecom" 5 - AS31148 28573 1.3% 35.9 -- FREENET-AS Freenet Ltd. 6 - AS7552 27491 1.3% 23.5 -- VIETEL-AS-AP Vietel Corporation 7 - AS5800 27044 1.3% 112.2 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 8 - AS28573 26943 1.3% 7.9 -- NET Serviços de Comunicação S.A. 9 - AS15003 26262 1.2% 42.7 -- NOBIS-TECH - Nobis Technology Group, LLC 10 - AS10620 18972 0.9% 8.9 -- Telmex Colombia S.A. 11 - AS34744 18709 0.9% 28.0 -- GVM S.C. GVM SISTEM 2003 S.R.L. 12 - AS27738 18327 0.9% 32.3 -- Ecuadortelecom S.A. 13 - AS9416 16368 0.8% 314.8 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 14 - AS3909 16180 0.8% 2311.4 -- QWEST-AS-3908 - Qwest Communications Company, LLC 15 - AS2708 15117 0.7% 196.3 -- Universidad de Guanajuato 16 - AS24532 14742 0.7% 313.7 -- INET-AS-ID PT. Inet Global Indo 17 - AS4538 13651 0.6% 26.3 -- ERX-CERNET-BKB China Education and Research Network Center 18 - AS2914 12826 0.6% 158.3 -- NTT-COMMUNICATIONS-2914 - NTT America, Inc. 19 - AS2118 12823 0.6% 9.2 -- RELCOM-AS OOO "NPO Relcom" 20 - AS33776 12043 0.6% 65.5 -- STARCOMMS-ASN TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6629 7469 0.3% 7469.0 -- NOAA-AS - NOAA 2 - AS19406 4193 0.2% 4193.0 -- TWRS-MA - Towerstream I, Inc. 3 - AS6174 6042 0.3% 3021.0 -- SPRINTLINK8 - Sprint 4 - AS3909 16180 0.8% 2311.4 -- QWEST-AS-3908 - Qwest Communications Company, LLC 5 - AS14680 6723 0.3% 2241.0 -- REALE-6 - Auction.com 6 - AS37318 2112 0.1% 2112.0 -- BESA 7 - AS16536 1931 0.1% 1931.0 -- HPES - Hewlett-Packard Company 8 - AS60811 1730 0.1% 1730.0 -- SAIPAYADAH-AS Saipa Yadak Co. PLC 9 - AS37367 2952 0.1% 1476.0 -- CALLKEY 10 - AS33920 2933 0.1% 1466.5 -- AQL (aq) Networks Limited 11 - AS19796 2076 0.1% 1038.0 -- SHUBERT - Shubert Organization, Inc. 12 - AS42334 2276 0.1% 758.7 -- BBP-AS Broadband Plus s.a.l. 13 - AS1273 3784 0.2% 756.8 -- CW Cable and Wireless Worldwide plc 14 - AS48612 8190 0.4% 585.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 15 - AS8382 568 0.0% 568.0 -- IRTEL-AS OJSC Rostelecom 16 - AS37343 3348 0.2% 558.0 -- AirtelSeychelles 17 - AS37307 526 0.0% 526.0 -- AGRA 18 - AS58385 951 0.0% 475.5 -- BSM-AS-ID PT. Bank Syariah Mandiri 19 - AS57798 1301 0.1% 433.7 -- IT-NET-LTD-AS IT-Net ltd. 20 - AS15741 423 0.0% 423.0 -- NETEXPILINE Expiline Ltd. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 209.142.140.0/24 10525 0.5% AS22561 -- DIGITAL-TELEPORT - Digital Teleport Inc. 2 - 193.19.90.0/23 9090 0.4% AS29684 -- NOURNET-ASN Nour Communication Co.Ltd - Nournet 3 - 203.118.224.0/21 8098 0.4% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 4 - 92.246.207.0/24 8093 0.4% AS48612 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 5 - 203.118.232.0/21 7942 0.3% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 6 - 192.58.232.0/24 7469 0.3% AS6629 -- NOAA-AS - NOAA 7 - 202.41.70.0/24 6579 0.3% AS2697 -- ERX-ERNET-AS Education and Research Network 8 - 12.139.133.0/24 5441 0.2% AS14680 -- REALE-6 - Auction.com 9 - 151.118.255.0/24 5391 0.2% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 10 - 151.118.254.0/24 5391 0.2% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 11 - 151.118.18.0/24 5381 0.2% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 12 - 173.232.234.0/24 5096 0.2% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 13 - 173.232.235.0/24 5096 0.2% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 14 - 209.240.40.0/21 4964 0.2% AS32020 -- TRANSACT-BM-ASN - Transact Ltd. 15 - 69.38.178.0/24 4193 0.2% AS19406 -- TWRS-MA - Towerstream I, Inc. 16 - 194.63.9.0/24 3773 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 17 - 64.187.64.0/23 3524 0.1% AS16608 -- KENTEC - Kentec Communications, Inc. 18 - 206.105.75.0/24 3021 0.1% AS6174 -- SPRINTLINK8 - Sprint 19 - 208.16.110.0/24 3021 0.1% AS6174 -- SPRINTLINK8 - Sprint 20 - 41.75.40.0/21 2949 0.1% AS37367 -- CALLKEY Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0