May 2016 - Test - lists.nanog.org

LACP Frames / Level3 Transport
by Nevin Gonsalves 25 May '16

25 May '16

Hi Nanog-ers, Hoping someone may have come across a similar issue. Has anyone ever seen a situation where maybe like a Level3 transport system could be possibly dropping LACP frames..? End point A - tx and rx counts incrementing for LACP LACP info: Role System System Port Port Port priority identifier priority number key et-0/0/0.0 Actor 127 5c:45:27:6d:2a:c0 127 56 16 et-0/0/0.0 Partner 1 00:00:00:00:00:00 127 56 16 LACP Statistics: LACP Rx LACP Tx Unknown Rx Illegal Rx et-0/0/0.0 6925 6922 0 0 End Point B - no RX, partner macs are 0s.. LACP info: Role System System Port Port Port priority identifier priority number key et-9/1/0.0 Actor 127 5c:45:27:77:d6:c4 127 68 16 et-9/1/0.0 Partner 1 00:00:00:00:00:00 1 68 16 LACP Statistics: LACP Rx LACP Tx Unknown Rx Illegal Rx et-9/1/0.0 0 6752 0 0 Link works fine otherwise outside the aggregate and w/o LACP. Any inputs will be greatly appreciated. thanks, -nevin

7 10

Network traffic simulator
by Mitchell Lewis 24 May '16

24 May '16

Hi,I am looking to validate the performance specs of a core router. I am looking for a network traffic simulator which can simulate 40 gbps of traffic. I am looking for a simulator with sfp+ ports. I am interested in any input as to brands to look at, build one myself etc. Thanks,Mitchell

14 15

RE: Need Comcast IPv6 routing assistance please
by Brzozowski, John 24 May '16

24 May '16

Regarding the thread: http://mailman.nanog.org/pipermail/nanog/2016-May/085878.html David, I looked around CA and it looks like some customers are provisioned with two delegated IPv6 prefixes. We had an issue a week or so back that we believe was corrected. If you wish contact me off list. Before we look to see if there are larger routing issue we should make sure you have one and only one active delegated IPv6 prefix. From my end it looks like you may have two. Thanks, John +1-484-962-0060

2 1

Question on peering strategies
by Reza Motamedi 24 May '16

24 May '16

Dear Nanogers, I have a question about common/best network interconnection practices. Assume that two networks (let's refer to them as AS-a and AS-b) are present in a colocation facility say Equinix LA. As many of you know, Equininx runs an IXP in LA as well. So AS-as and AS-b can interconnct 1) using private cross-connect 2) through the public IXP's switching fabric. Is it a common/good practice for the two networks to establish connections both through the IXP and also using a private cross-connect? I was thinking considering the cost of cross-connects (my understanding is that the colocation provider charges the customers for each cross-connect in addition to the rent of the rack or cage or whatever), it would not be economically reasonable to have both. Although, if the cross-connect is the primary method of interconnection, and the IXP provides a router-server the public-peering over IXP would essentially be free. So it might makes sense to assume that for the private cross-connect, there exists a back-up connection though the IXP. Anyway, I guess some discussion may give more insight about which one is more reasonable to assume and do. Now my last question is that if the two connections exist (one private cross-connect and another back-up through the IXP), what are the chances that periodically launched traceroutes that pass the inter-AS connection in that colo see both types of connection in a week. I guess what I'm asking is how often back-up routes are taken? Can the networks do load balancing on the two connection and essentially use them as primary routes? Best Regards Reza Motamedi (R.M) Graduate Research Fellow Oregon Network Research Group Computer and Information Science University of Oregon

12 19

Looking for a Singtel rep
by Paul S. 24 May '16

24 May '16

Hi guys, We're after a good Singapore Telecom (AS7473) sales rep. After some IP transit in the Singapore and Hong Kong markets. Anyone have details that you wouldn't mind passing along? Much appreciated!

1 0

SNMP "bridging"/proxy?
by Nathan Anderson 23 May '16

23 May '16

'lo all, Is anybody out there aware of a piece of software that can take data from an arbitrary source and then present it, using a MIB or set of OIDs of your choosing, as an SNMP-interrogatable device? We have some CPE that supports SNMP, but considers it to be a mutually-exclusive "remote management" protocol such that if you use another supported method for deployment and provisioning (e.g., TR-069), you cannot have both that AND SNMP enabled simultaneously. It's one or the other. We currently monitor and graph some device stats for these CPE with Cacti, but we want to be able to provision using a TR-069 ACS. The ACS can collect some of the same data we are graphing right now, but cannot present it in a fashion that is nearly as useful as the way Cacti/RRDtool does (not to mention the staff is already used to navigating Cacti). We know what SQL database table the stats are being stored in by the ACS, though, so my thought was that there must be some way that we can have a host respond to SNMP gets and then have it turn around and collect the value to be returned from a database. Basically, an ODBC -> SNMP proxy. We'd then point Cacti at that IP instead of the individual CPEs. But I can't seem to find anything like this. Thanks, -- Nathan

8 10

Re: SNMP "bridging"/proxy?
by Eric Kuhnke 23 May '16

23 May '16

Thinking of the recent conversation on ntp daemon precision and reliability here on nanog, reminded me of: https://www.pitt-pladdy.com/blog/_20140826-094101_0100_NTP_Monitoring_on_Ca… There's a tiny shell script linked there on github which does nothing more than run "ntpq -p" on your ntpd and parse the results of the 9th and 10th columns (jitter an offset) into milliseconds. On a typical debian system you'll need to install the 'bc' package for command line calculations. Of course no need to use Cacti, though the XML template is ready to use. You can use the newly exposed OIDs via SNMP with opennms or some other charting/graphing system, or even something totally non RRA/RRDtool based such as collectd and a time series database for long term storage of data on a 60-second poller interval. Another thing you can do with 'extend' is monitor an openvpn daemon. There's no built in SNMP support in openvpn but it can be configured to listen for a management CLI on localhost. Run tiny shell, perl or python scripts that do something as simple as parse the openvpn-status.log, spit out the list of currently active clients, pipe that into a one line script with sed and "wc -l", feed the integer into a SNMP charting/monitoring system. On Mon, May 23, 2016 at 2:13 PM, Wes Hardaker <wjhns61(a)hardakers.net> wrote: > Eric Kuhnke <eric.kuhnke(a)gmail.com> writes: > > > http://www.adventuresinoss.com/2009/09/30/the-many-uses-of-net-snmp/ > > Ha! I've never seen that article, thanks for pointing it out. > > Note that the performance of Net-SNMP's extensibility mechanisms should > way into the decision. The fastest backend needs to be written in C, > and embedded perl is an easy second. Beyond that, pass_persist is > somewhere in the middle and pass/extend/other execs are the slowest > because of the need to exec a command for every incoming request which > is expensive. Great for bootstrapping and testing, but in the long run > look to the better coding solutions. > > Tutorials for most of these exist: > > http://www.net-snmp.org/wiki/index.php/Tutorials#Coding_Tutorials > > > [as a point of history: Net-SNMP has always been very extensible since > it was started based on my need to add extensibility to an agent way > back in 1995-ish in order to monitor some special cases on a map with HP > OV (as it was known back then)] > -- > Wes Hardaker > My Pictures: http://capturedonearth.com/ > My Thoughts: http://blog.capturedonearth.com/ >

1 0

RE: Need BGP route check
by Matthew Huff 23 May '16

23 May '16

Thanks, but I had checked a number of public looking glasses and only one had the 46887 path (HE.net) wanted a more global check. A number of responses are seeing only one or the other paths. The 14607 pre-pend is due to depref'ing 46887 earlier today when we had the instability. ---- Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-694-5669 > -----Original Message----- > From: Ken Chase [mailto:ken@sizone.org] > Sent: Friday, May 20, 2016 11:39 AM > To: Matthew Huff <mhuff(a)ox.com> > Cc: nanog(a)nanog.org > Subject: Re: Need BGP route check > > $ telnet route-views.oregon-ix.net > Username: rviews > > $ show ip bgp paths 14607 > > might help > > /kc > > > On Fri, May 20, 2016 at 03:31:48PM +0000, Matthew Huff said: > >One of our upstreams is apparently having problems, although they > don't appear to know about it. I've seen an alert at BGPmon.net about > our prefixes being withdrawn, and I can't locate our prefixes through > that provider on any routeviews. Can someone check to see what ASPATHS > you are seeing for our prefixes? > > > >129.77.0.0/16 > >2620:0:2810::/48 > > > >We should be advertised via AS6128 and AS46887 > > > >---- > >Matthew Huff???????????? | 1 Manhattanville Rd > >Director of Operations???| Purchase, NY 10577 > >OTA Management LLC?????? | Phone: 914-460-4039 > >aim: matthewbhuff??????? | Fax:?? 914-694-5669 > > > > > > -- > Ken Chase - ken(a)sizone.org Guelph Canada

2 1

[Cox Communications] RFC1918 On WAN Interfaces
by Jason Hellenthal 23 May '16

23 May '16

1 0

Need Comcast IPv6 routing assistance please
by David Sotnick 23 May '16

23 May '16

Hello NANOG, Could someone from Comcast IPv6 routing team please contact me directly? I am both a business and residential comcast customer and my employer is a Level(3) HSIP customer at multiple sites. I'm seeing *consistent* 46.1% packet loss between Comcast Res/Bus services in Northern CA and Pixar (Level 3 customer) also in Northern CA. I have ticket open with Level (3) but the problem appears to be on Comcast's network. Sample trace: My traceroute [v0.85] ipv6testhost.ddv.com (::) Mon May 23 10:56:05 2016 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. 2601:647:280:23::1 0.0% 464 0.6 0.4 0.3 8.7 0.4 2. 2001:558:4000:3d::1 0.2% 463 13.0 10.3 8.2 27.4 2.1 3. te-0-7-0-5-sur03.sanrafael.ca.sfba.comcast.net 10.2% 463 9.6 10.7 8.5 34.8 2.4 4. be-207-rar01.rohnertpr.ca.sfba.comcast.net 44.7% 463 10.6 11.7 9.4 25.9 2.1 5. he-0-18-0-0-ar01.santaclara.ca.sfba.comcast.net 51.6% 463 15.2 14.1 12.0 26.2 1.9 6. 2001:1900:4:3::439 46.0% 463 13.3 14.4 11.8 50.2 3.6 7. vl-80.edge1.SanJose1.Level3.net 44.9% 463 12.1 13.9 11.7 28.5 2.3 8. vl-4045.edge5.LosAngeles.Level3.net 45.4% 463 21.2 21.5 19.2 39.4 2.6 9. vl-4044.bar1.LasVegas1.Level3.net 46.4% 463 24.9 27.7 24.4 88.3 6.8 10. vl-5.car1.LasVegas1.Level3.net 46.2% 463 104.3 46.3 24.5 318.2 48.0 11. PIXAR-ANIMA.car1.LasVegas1.Level3.net 44.9% 463 27.6 27.4 25.0 37.7 2.1 12. 2620:79:0:b04d::249 45.1% 463 46.4 48.9 46.0 114.2 4.9 And pings back from Pixar: Type escape sequence to abort.Sending 500, 100-byte ICMP Echos to 2601:647:0:1900:242:DEA1:FEC9:FFAE, timeout is 2 seconds: Packet sent with a source address of 2620:79:0:B04D::249%internet.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!..!.!!!!!!!!!!!!..!!!!!!!!!...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!...!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!..!!!!!.!!!!!!!!!!!!!!!!!!!!!!!..!.!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!!!!!!...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!..!!.!!!!..!!!!!!!!!...!!!!!!!!!!!!!....!!!!!!!!..!!!!!!!!!....!!!!!..!!!!!!!!!!!!!!!!!!!!!!...!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!Success rate is 90 percent (452/500), round-trip min/avg/max = 12/30/68 ms Any help really appreciated as you can imagine how painful remote access for our employees with Comcast connections into Pixar over IPv6 is right now. Many Thanks, David

3 3