May 2016 - Test - lists.nanog.org

NYNOG Inaugural meet livestream
by Joly MacFie 25 May '16

25 May '16

http://isoc-ny.org/p2/8521 -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast -------------------------------------------------------------- -

1 0

Re: Network traffic simulator
by Spencer Ryan 25 May '16

25 May '16

Yeah. We run all of our IXIA gear 24/7 in automated feature/regression testing. We are looking into high density layer 1 packet switches so we can automate physical topology changes as well. On May 25, 2016 3:14 AM, "Saku Ytti" <saku(a)ytti.fi> wrote: Ugh. In all cases below, where it says Agilent it should say IXIA. > Many times in QoS testing you'd have EF, AF, BE > traffic, and you have expectation how many percentage in given > situation should given class drop, doing this in Agilent is a chore. > > Agilent probably has best in the breed network with emulation > capabilities. And focus generally seems to be in protocol > testing/development where network emulation is tremendously useful. > > As the platforms are very expensive, not many SPs are using them, so > they're not getting input from SPs what the boxes should be doing. > This market is very poorly tapped, there is large demand in the market > for proper testing equipment but it's just priced out of reach. I > believe Spirent and Agilent should sell the hardware at-cost, then > sell timed licenses, where maybe 1000h license would be today's full > cost. Large segment of this market might not use box at all in some > year and would generally only require modest hours from it. > Bit harder to justify the cost with low use, compared to vendors who > run them automated 24/7. -- ++ytti

1 0

LACP Frames / Level3 Transport
by Nevin Gonsalves 25 May '16

25 May '16

Hi Nanog-ers, Hoping someone may have come across a similar issue. Has anyone ever seen a situation where maybe like a Level3 transport system could be possibly dropping LACP frames..? End point A - tx and rx counts incrementing for LACP LACP info: Role System System Port Port Port priority identifier priority number key et-0/0/0.0 Actor 127 5c:45:27:6d:2a:c0 127 56 16 et-0/0/0.0 Partner 1 00:00:00:00:00:00 127 56 16 LACP Statistics: LACP Rx LACP Tx Unknown Rx Illegal Rx et-0/0/0.0 6925 6922 0 0 End Point B - no RX, partner macs are 0s.. LACP info: Role System System Port Port Port priority identifier priority number key et-9/1/0.0 Actor 127 5c:45:27:77:d6:c4 127 68 16 et-9/1/0.0 Partner 1 00:00:00:00:00:00 1 68 16 LACP Statistics: LACP Rx LACP Tx Unknown Rx Illegal Rx et-9/1/0.0 0 6752 0 0 Link works fine otherwise outside the aggregate and w/o LACP. Any inputs will be greatly appreciated. thanks, -nevin

7 10

Network traffic simulator
by Mitchell Lewis 24 May '16

24 May '16

Hi,I am looking to validate the performance specs of a core router. I am looking for a network traffic simulator which can simulate 40 gbps of traffic. I am looking for a simulator with sfp+ ports. I am interested in any input as to brands to look at, build one myself etc. Thanks,Mitchell

14 15

RE: Need Comcast IPv6 routing assistance please
by Brzozowski, John 24 May '16

24 May '16

Regarding the thread: http://mailman.nanog.org/pipermail/nanog/2016-May/085878.html David, I looked around CA and it looks like some customers are provisioned with two delegated IPv6 prefixes. We had an issue a week or so back that we believe was corrected. If you wish contact me off list. Before we look to see if there are larger routing issue we should make sure you have one and only one active delegated IPv6 prefix. From my end it looks like you may have two. Thanks, John +1-484-962-0060

2 1

Question on peering strategies
by Reza Motamedi 24 May '16

24 May '16

Dear Nanogers, I have a question about common/best network interconnection practices. Assume that two networks (let's refer to them as AS-a and AS-b) are present in a colocation facility say Equinix LA. As many of you know, Equininx runs an IXP in LA as well. So AS-as and AS-b can interconnct 1) using private cross-connect 2) through the public IXP's switching fabric. Is it a common/good practice for the two networks to establish connections both through the IXP and also using a private cross-connect? I was thinking considering the cost of cross-connects (my understanding is that the colocation provider charges the customers for each cross-connect in addition to the rent of the rack or cage or whatever), it would not be economically reasonable to have both. Although, if the cross-connect is the primary method of interconnection, and the IXP provides a router-server the public-peering over IXP would essentially be free. So it might makes sense to assume that for the private cross-connect, there exists a back-up connection though the IXP. Anyway, I guess some discussion may give more insight about which one is more reasonable to assume and do. Now my last question is that if the two connections exist (one private cross-connect and another back-up through the IXP), what are the chances that periodically launched traceroutes that pass the inter-AS connection in that colo see both types of connection in a week. I guess what I'm asking is how often back-up routes are taken? Can the networks do load balancing on the two connection and essentially use them as primary routes? Best Regards Reza Motamedi (R.M) Graduate Research Fellow Oregon Network Research Group Computer and Information Science University of Oregon

12 19

Looking for a Singtel rep
by Paul S. 24 May '16

24 May '16

Hi guys, We're after a good Singapore Telecom (AS7473) sales rep. After some IP transit in the Singapore and Hong Kong markets. Anyone have details that you wouldn't mind passing along? Much appreciated!

1 0

SNMP "bridging"/proxy?
by Nathan Anderson 23 May '16

23 May '16

'lo all, Is anybody out there aware of a piece of software that can take data from an arbitrary source and then present it, using a MIB or set of OIDs of your choosing, as an SNMP-interrogatable device? We have some CPE that supports SNMP, but considers it to be a mutually-exclusive "remote management" protocol such that if you use another supported method for deployment and provisioning (e.g., TR-069), you cannot have both that AND SNMP enabled simultaneously. It's one or the other. We currently monitor and graph some device stats for these CPE with Cacti, but we want to be able to provision using a TR-069 ACS. The ACS can collect some of the same data we are graphing right now, but cannot present it in a fashion that is nearly as useful as the way Cacti/RRDtool does (not to mention the staff is already used to navigating Cacti). We know what SQL database table the stats are being stored in by the ACS, though, so my thought was that there must be some way that we can have a host respond to SNMP gets and then have it turn around and collect the value to be returned from a database. Basically, an ODBC -> SNMP proxy. We'd then point Cacti at that IP instead of the individual CPEs. But I can't seem to find anything like this. Thanks, -- Nathan

8 10

Re: SNMP "bridging"/proxy?
by Eric Kuhnke 23 May '16

23 May '16

Thinking of the recent conversation on ntp daemon precision and reliability here on nanog, reminded me of: https://www.pitt-pladdy.com/blog/_20140826-094101_0100_NTP_Monitoring_on_Ca… There's a tiny shell script linked there on github which does nothing more than run "ntpq -p" on your ntpd and parse the results of the 9th and 10th columns (jitter an offset) into milliseconds. On a typical debian system you'll need to install the 'bc' package for command line calculations. Of course no need to use Cacti, though the XML template is ready to use. You can use the newly exposed OIDs via SNMP with opennms or some other charting/graphing system, or even something totally non RRA/RRDtool based such as collectd and a time series database for long term storage of data on a 60-second poller interval. Another thing you can do with 'extend' is monitor an openvpn daemon. There's no built in SNMP support in openvpn but it can be configured to listen for a management CLI on localhost. Run tiny shell, perl or python scripts that do something as simple as parse the openvpn-status.log, spit out the list of currently active clients, pipe that into a one line script with sed and "wc -l", feed the integer into a SNMP charting/monitoring system. On Mon, May 23, 2016 at 2:13 PM, Wes Hardaker <wjhns61(a)hardakers.net> wrote: > Eric Kuhnke <eric.kuhnke(a)gmail.com> writes: > > > http://www.adventuresinoss.com/2009/09/30/the-many-uses-of-net-snmp/ > > Ha! I've never seen that article, thanks for pointing it out. > > Note that the performance of Net-SNMP's extensibility mechanisms should > way into the decision. The fastest backend needs to be written in C, > and embedded perl is an easy second. Beyond that, pass_persist is > somewhere in the middle and pass/extend/other execs are the slowest > because of the need to exec a command for every incoming request which > is expensive. Great for bootstrapping and testing, but in the long run > look to the better coding solutions. > > Tutorials for most of these exist: > > http://www.net-snmp.org/wiki/index.php/Tutorials#Coding_Tutorials > > > [as a point of history: Net-SNMP has always been very extensible since > it was started based on my need to add extensibility to an agent way > back in 1995-ish in order to monitor some special cases on a map with HP > OV (as it was known back then)] > -- > Wes Hardaker > My Pictures: http://capturedonearth.com/ > My Thoughts: http://blog.capturedonearth.com/ >

1 0

RE: Need BGP route check
by Matthew Huff 23 May '16

23 May '16

Thanks, but I had checked a number of public looking glasses and only one had the 46887 path (HE.net) wanted a more global check. A number of responses are seeing only one or the other paths. The 14607 pre-pend is due to depref'ing 46887 earlier today when we had the instability. ---- Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-694-5669 > -----Original Message----- > From: Ken Chase [mailto:ken@sizone.org] > Sent: Friday, May 20, 2016 11:39 AM > To: Matthew Huff <mhuff(a)ox.com> > Cc: nanog(a)nanog.org > Subject: Re: Need BGP route check > > $ telnet route-views.oregon-ix.net > Username: rviews > > $ show ip bgp paths 14607 > > might help > > /kc > > > On Fri, May 20, 2016 at 03:31:48PM +0000, Matthew Huff said: > >One of our upstreams is apparently having problems, although they > don't appear to know about it. I've seen an alert at BGPmon.net about > our prefixes being withdrawn, and I can't locate our prefixes through > that provider on any routeviews. Can someone check to see what ASPATHS > you are seeing for our prefixes? > > > >129.77.0.0/16 > >2620:0:2810::/48 > > > >We should be advertised via AS6128 and AS46887 > > > >---- > >Matthew Huff???????????? | 1 Manhattanville Rd > >Director of Operations???| Purchase, NY 10577 > >OTA Management LLC?????? | Phone: 914-460-4039 > >aim: matthewbhuff??????? | Fax:?? 914-694-5669 > > > > > > -- > Ken Chase - ken(a)sizone.org Guelph Canada

2 1