- Test - lists.nanog.org

traffic accounting
by Joe Abley 12 Mar '13

12 Mar '13

Hi all, Imagine you have a number of GE and 10GE interfaces spread across multiple MX-class Juniper routers, and for each interface you want to maintain an accurate count of bytes sent, categorised by destination address. There is no layer-2 aggregation going on beyond the router, so no opportunity to create span ports on which to measure over on the side. Using optical splitters on each and every router interface and listening on the side using dedicated sniffers is an option, although it means tangles of fibre and potentially lots of sniffer boxes with lots of interfaces. I don't necessarily need a free or tremendously cheap solution, although it's always nice not to have to spend money. What are better approaches? Off-list would be fine if people have experience of this kind of thing; I can summarise if there is interest. Joe

7 9

Re: What Should an Engineer Address when 'Selling' IPv6 to Executives?
by kpospisek＠bigpond.com 12 Mar '13

12 Mar '13

I would be concerned in strongly spruiking advantages of IPv6 to executives if an IPv6 dual stack solution is actually being deployed. (ie. some given IPv6 SS advantages below do not apply to IPv6 DS) > 1. Decreased application complexity: > Because we will be able to get rid of all that NAT traversal code, > we get the following benefits: > > I. Improved security > A. Fewer code paths to test > B. Lower complexity = less opportunity to introduce flaws > II. Lower cost > A. Less developer man hours maintaining (or developing) NAT > traversal code > B. Less QA time spent testing NAT traversal code > C. No longer need to keep the lab stocked with every NAT > implementation ever invented > D. Fewer calls to support for failures in product's NAT traversal > code > 2. Increased transparency: > Because addressing is now end-to-end transparent, we gain a > number of benefits: > > I. Improved Security > A. Harder for attackers to hide in anonymous address space. > B. Easier to track down spoofing > C. Simplified log correlation > D. Easier to identify source/target of attacks > II. Simplified troubleshooting > A. No more need to include state table dumps in troubleshooting > B. tcpdump inside and tcpdump outside contain the same packets. > There are two well documented advantages to IPv6 dual stack: - responding to customers requesting IPv6 dual stack connectivity - excellent access to the IPv4 network IPv6 is a *different* network to IPv4 even if both networks happen to be carried on the same platforms (thank you Cisco, F5, Juniper etc - without this, our execs would be seriously baulking at having to replace fairly modern hardware). I have also noticed examples given of historic protocol changes. Not all of these are relevant as some of them only involved "middle" OSI layers, so do not apply very well to the IPv6->IPv6 transition. Greets Engineer Karl Pospisek (alias kpospisek(a)telstra.com)

5 6

Bing/MSN/Microsoft contact
by Blair Trosper 12 Mar '13

12 Mar '13

If possible, I need someone from Microsoft/Bing (a la the MSN and Bing crawler bots) to contact me off list. Several IPs going back to AS8075 (with the user agent MSN and "bingbot") are basically attacking several IPs on my network with hundreds of requests per second. Thanks, Blair

2 1

Odd announcement from AS27048
by Alain Hebert 12 Mar '13

12 Mar '13

Hi, On the 5th we notice that 27048 was announcing 2 of ours /24 812 3549 209 721 27064 27047 27047 27047 27048 It lasted about 9h but didn't impact anything due to its prepend and such... My inquiry is: . False positive? . Broken 16b <=> 32b ASN's? . Human Error? . I should remove my Echelon triggering keywords from my personal .sig? ( 27048 is part of a US DoD ASN range =D ). I check around and it happened a few times in the past. ( I saw a CIDR report in 2008 where 27048 was announcing 8m+ IP's ) Let me know. -- ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443

3 2

GEOip location issue
by Dennis Burgess 11 Mar '13

11 Mar '13

Got a new block from ARIN, no location found on it, so yahoo etc defaults to netherlands looks like. Anyone have the proper method to go about fixing things like this one? Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition <http://www.wlan1.com/product_p/mikrotik%20book-2.htm> " Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 <tel:314-735-0270> Website: http://www.linktechs.net <http://www.linktechs.net/> - Skype: linktechs <skype:linktechs?call> -- Create Wireless Coverage's with www.towercoverage.com <http://www.towercoverage.com/> - 900Mhz - LTE - 3G - 3.65 - TV Whitespace

2 1

internet in the box
by Philip Lavine 11 Mar '13

11 Mar '13

Has anybody set up a Cellular front end (LTE or 3G) access to the Internet and a WiFi backend supporting 150 devices. I need to provide temporary Internet access (7 days) to a convention center room that is about 2000 square feet. Stooopid Aria wants to charge $50/user/wk and who knows what the BW is.

15 17

is yahoo in trouble?
by Philip Lavine 09 Mar '13

09 Mar '13

I am getting Connection refused on a lot of links

5 4

Intermapper vs NetBrain vs some other for NMS
by Ben Bartsch 09 Mar '13

09 Mar '13

Hi all: I'm looking for information anyone might have comparing Intermapper to NetBrain for NMS. Stuff like devices up/down, interface utilization, building maps for documentation, etc. IMO, Intermapper works great, when it works. Tech support has been slow and often cannot fix the problems, not to mention they release updates about once every other week. Anyone familiar with any similar products? We are presently evaluating NetBrain and it seems really nice. We really like the Visio-like aspect of it. Thanks! -Ben

7 6

Fw: message
by David Dalton 09 Mar '13

09 Mar '13

http://carroceriassantamaria.com/fod/vwb.ucghsjbbuiasl David Dalton

1 0

enterprise messaging gateway @ sprintpcs.com
by Sabo, Eric 09 Mar '13

09 Mar '13

I am trying to get our email server off their block list, I tried a couple phone number at this point and I haven't be able to locate anyone to help me for this domain. If anyone has any contact information on this domain, please share it. Probably by the time I get in contact our domain will be reset. Thanks in Advanced, Eric

2 1