August 2014 - Test - lists.nanog.org

AutoTask as a ticketing system in a MNS NOC
by Chris Garrett 07 Aug '14

07 Aug '14

Does anyone on list have any firsthand experience with this software as a primary ticketing platform in a high volume NOC? We are moving away from SolarWinds WebHelpDesk as our ticketing platform and this one came into the bidding late. http://www.autotask.com

4 5

Anyone running Knot?
by Jay Ashworth 07 Aug '14

07 Aug '14

LWN this week covers the Knot DNS server, written by/for the .cz root zone ops, which can, amongst other interesting attributes, load the entire 35 million record .net zone in 10 seconds. It also does generated synthetic A, 4A, and PTR records, like the old DENTS server written for mindspring. Is anybody here using it? Or knows of it being used somewhere they're permitted to discuss? Is it suitable for running on... much smaller zones? or does the optimization make it impractical? Cheers, -jra -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

3 2

Cisco Security Advisory: Cisco IOS Software and Cisco IOS XE Software EnergyWise Crafted Packet Denial of Service Vulnerability
by Cisco Systems Product Security Incident Response Team 06 Aug '14

06 Aug '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco IOS Software and Cisco IOS XE Software EnergyWise Crafted Packet Denial of Service Vulnerability Advisory ID: cisco-sa-20140806-energywise Revision 1.0 For Public Release 2014 August 6 16:00 UTC (GMT) +--------------------------------------------------------------------- Summary ======= A vulnerability in the EnergyWise module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit this vulnerability by sending a crafted EnergyWise packet to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBAgAGBQJT4ivWAAoJEIpI1I6i1Mx30KoP/iN0KYzG01VMF0fbwLcZjIg+ JQn8lY0mTsetm98hLMCRBKB0STTwLZnbDUcfP0HDfncUJKL4Z2/ACIOE/+D4qDmh Mq6EoUwVIP3+w2fdjk2QNbuixbDAfc2RK4c8kT8B/9M2Za+B2+Joz8PjliNzio9j +zCizkbG78k+iPXQUNMeP57Roj8iayh33r2EF5daFp7okhmOkyTcTH2OMHh9FLaz bj7VGP6/ppysmA9zekZE4IeYMVQfCFr6Sb7VbS80jDB8XhjYEmiEtNboumqrdXkG 4syzvYRtNV9JDeRe9sGzBoJYx47EBH89uF8Y9UlPdk0U5iOvFkCc2O/tZsR6GHvt yjHreBvDuZoE/wIksPaAo/BZVudqyH5qz4Hy6Cz3w+XJC4E0Po/IzdKJEIeqt1+b tsgBvKONGUClaDmb501h+V4NKb2JBYapMSl/ohtxDLO43wqGJiY/yNZ5QnJwTjwh mJMTxBofeZTS2sCf9jGWwayNrEO3xAmngzkWy1eTybAB6QiU3VeS3spSsoGnEu5E 3MmfJz8BX6i6XFeQj9tjw5oLs0NXTx1+B85zI7tPzL1D9g4wdUiawZHuBnsg13ME jk9+F8USc2/xGHQ3GJ9OU9Gm0IoFinFyRI1BuzqPZ42XaEJaRnMbWP7jmaksEJew M9tnNIY0SSE5m3JGXZq8 =Hax4 -----END PGP SIGNATURE-----

1 0

Re: [j-nsp] Viability of EX4300 in a primarily l3 environment?
by Paul S. 06 Aug '14

06 Aug '14

Correct me if I'm wrong, but doesn't OSPF require the AFL license anyway to be 'legitly' ran? Price difference might be a lot smaller depending on that. On 8/6/2014 午後 08:30, Yucong Sun wrote: > I used ex4200 to do exactly what you did before. ex4200 releases is pretty > rock solid, feature extensive, although with lower arp entry limits. > > Given the price difference maybe you can connect each l2 domain to its own > ex4200 and have them do ospf routing among selves, which maybe give you > better failure tolerances compare to a single core. > > > On Wed, Aug 6, 2014 at 6:35 PM, Giuliano Cardozo Medalha < > giuliano(a)wztech.com.br> wrote: > >> we are using ex4300 with the last release available >> >> the setup is pretty simple using virtual chassis, lag, L3 and poe >> >> it works pretty fine and we do not have any serious problems >> >> sometimes the poe controller goes down but we have a case oppened in jtac >> to try solve it >> >> Sent from my iPhone >> >>> On 06/08/2014, at 07:15, Sebastian Wiesinger <juniper-nsp(a)ml.karotte.org> >> wrote: >>> * Paul S. <contact(a)winterei.se> [2014-08-02 05:18]: >>>> Hi folks, >>>> >>>> We're considering the EX4300 to run routing (l3) for a few >>>> hypervisors of ours that are connected via l2. >>>> >>>> Primarily interested due to the rather massive arp limit (64, 000) >>>> on the switch, but we've been told (and searched for ourselves to >>>> find out) that the 4300 platform has been plagued by random issues >>>> since launch. >>> I don't have hands-on experience but I looked at the EX4300 platform >>> for a new deployment. If you look at the current release notes: >>> >>> >> http://www.juniper.net/techpubs/en_US/junos13.2/information-products/topic-… >>> There are a lot of (serious) bugs still getting fixed so I'm not sure >>> how mature this platform is. One big reason for that is probably >>> because EX4300 uses other chips than the rest of the 4xxx series >>> (Broadcom). >>> >>> Regards >>> >>> Sebastian >>> >>> -- >>> GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) >>> 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE >> SCYTHE. >>> -- Terry Pratchett, The Fifth Elephant >>> _______________________________________________ >>> juniper-nsp mailing list juniper-nsp(a)puck.nether.net >>> https://puck.nether.net/mailman/listinfo/juniper-nsp >> _______________________________________________ >> juniper-nsp mailing list juniper-nsp(a)puck.nether.net >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > _______________________________________________ > juniper-nsp mailing list juniper-nsp(a)puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp

3 3

FCC Releases Tenth Broadband Inquiry NOI
by Jay Ashworth 05 Aug '14

05 Aug '14

""" Section 706 of the Telecommunications Act of 1996, as amended (1996 Act), requires the Commission to determine and report annually on "whether advanced telecommunications capability is being deployed to all Americans in a reasonable and timely fashion". 1) This Notice of Inquiry (Inquiry) initiates the Commission’s assessment of the availability of advanced telecommunications capability to all Americans (including, in particular, elementary and secondary schools and classrooms). 2) In conducting this Inquiry, the Commission must “determine whether advanced telecommunications capability is being deployed to all Americans in a reasonable and timely fashion and, if the answer is negative, the Commission "shall take immediate action to accelerate deployment of such capability" through a variety of means. 3) In this Inquiry, we solicit data and information that will help the Commission make this determination. """ The PDF versions are at: https://apps.fcc.gov/edocs_public/attachmatch/FCC-14-113A1.pdf https://apps.fcc.gov/edocs_public/attachmatch/FCC-14-113A2.pdf https://apps.fcc.gov/edocs_public/attachmatch/FCC-14-113A3.pdf https://apps.fcc.gov/edocs_public/attachmatch/FCC-14-113A4.pdf Unless I'm badly misreading this, in particular, if you have a problem with the FCC's broadband penetration numbers being predicated on "this zip has broadband because *these six houses on the north edge of town have DSL*, then this is where your comments on that will get ignored. (Their current cutoff, for those who did not know, is 4/1, so DSL actually *does not qualify as broadband* for Section 706 purposes.) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 0

Huawei Atom Router
by Eric Dugas 05 Aug '14

05 Aug '14

Has anyone seen/touched Huawei's Atom Router? It was announced at the Mobile World Congress 2014.. haven't seen anything on the Interweb since. I'd be interested in getting one or two units to play in my lab! http://www.huawei.com/mwc2014/en/articles/hw-328011.htm Eric

5 5

Richard Bennett, NANOG posting, and Integrity
by Paul WALL 05 Aug '14

05 Aug '14

Provided without comment: http://www.esquire.com/blogs/news/comcast-astroturfing-net-neutrality Drive Slow, Paul Wall

22 55

Netflix And AT&T Sign Peering Agreement
by Doug Barton 05 Aug '14

05 Aug '14

Seems germane to recent conversations ... Netflix has signed a peering agreement with AT&T that will see the video streaming service pay the ISP for direct connection to its network. Previously, Netflix signed similar agreements with Comcast and Verizon. http://techcrunch.com/2014/07/29/netflix-and-att-sign-peering-agreement/

5 5

Recommendations for a decent DWDM optical power meter.
by Timothy Kaufman 04 Aug '14

04 Aug '14

I have been looking into DWDM light meters. The JDSU looks good, but I see other brands out there. Does anyone have some recommendations, things to look out for? Thanks, Tim Kaufman

4 6

question about bgp incremental updates
by Song Li 04 Aug '14

04 Aug '14

Hi everyone, I have a question about bgp updates: BGP uses an incremental update strategy to conserve bandwidth and processing power. That is, after initial exchange of complete routing information, a pair of BGP routers exchanges only the changes to that information. ( from RFC4274) According to this principle, if an AS suddenly announced a lot of updates (as below), can it be regarded as an anomaly such as BGP session reset? I wish to know if there are other reasons can result in this anomaly. Thanks! BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.24.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.28.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.16.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.20.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.16.0/20|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.12.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.12.0/22|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.204.0/23|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.208.0/21|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.8.0/24|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.1.32.0/20|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.204.0/23|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.208.0/21|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.24.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.28.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.16.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.20.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.16.0/20|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.12.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.12.0/22|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|218.189.8.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.1.32.0/20|6939 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|114.134.83.0/24|6939 3549 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|203.90.243.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|203.90.251.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|118.143.224.0/20|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|118.143.232.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.46.57.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.46.53.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.46.61.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|202.46.49.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|103.17.240.0/22|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|103.17.240.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:12|A|216.218.252.164|6939|112.73.6.0/23|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|118.194.231.0/24|6939 3549 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|175.100.198.0/24|6939 3549 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|175.100.206.0/24|6939 15412 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|210.0.209.0/24|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|210.3.0.0/22|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|210.3.4.0/23|6939 4436 25973 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|103.227.207.0/24|6939 1299 3257 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|114.134.83.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|203.90.243.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|203.90.251.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|118.143.224.0/20|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|118.143.232.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|202.46.57.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|202.46.53.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|202.46.61.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|202.46.49.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|103.17.240.0/22|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|103.17.240.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|112.73.6.0/23|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|118.194.231.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|175.100.206.0/24|6939 9304|IGP BGP4MP|04/23/14 13:05:13|A|216.218.252.164|6939|210.0.209.0/24|6939 9304|IGP -- Song Room 4-204, FIT Building, Network Security, Department of Electronic Engineering, Tsinghua University, Beijing 100084, China Tel:( +86) 010-62446440 E-mail: refresh.lsong(a)gmail.com

2 1