- Test - lists.nanog.org

Looking Glass Functionality
by Positively Optimistic 06 Oct '11

06 Oct '11

Greetings Does anyone know of a off-the-self product that provides looking glass functionality for a network ? Many thanks, -Optimistic

6 5

(no subject)
by Dennis Reak 06 Oct '11

06 Oct '11

2 1

Re: passive bandwidth estimation
by Murtaza 06 Oct '11

06 Oct '11

Thanks a lot for referring to such valuable resources. However, the problem is that these are active measurement tools. Anyways, I will keep on looking and will post if I'll find a good passive measurement solution. Regards, Ghulam On Thu, Oct 6, 2011 at 6:26 PM, Ricardo Oliveira <rvelosoo(a)gmail.com> wrote: > http://www.icir.org/models/tools.html > > --Ricardo > > On Oct 4, 2011, at 11:39 PM, Murtaza wrote: > > > Hi everyone, > > I want to do passive available bandwidth measurement. I was just > wandering > > what tools/techniques people are generally using these days. And is it a > > good idea to use congestion window as parameter. > > Ghulam > >

1 0

passive bandwidth estimation
by Murtaza 06 Oct '11

06 Oct '11

Hi everyone, I want to do passive available bandwidth measurement. I was just wandering what tools/techniques people are generally using these days. And is it a good idea to use congestion window as parameter. Ghulam

4 4

status of cable breaks in Asia (IAC, C2C, AAG)
by Nathanael C. Cariaga 05 Oct '11

05 Oct '11

Hi, Just wondering if anyone here have an idea on the restoration efforts of IAC, C2C, AAG Cable systems? Thanks! -- -nathan

1 0

events
by harbor235 05 Oct '11

05 Oct '11

What is everyone using to collect, alert, and analyze syslog data? I am looking for something that can generate reports as well as support multiple vendors. We have done some home grown stuff in the past but would be interested in something that incorprates all the best features. Soalrwinds, splunk, fwanalog, and others come to mind, any other good ones out there? Mike

18 21

F.ROOT-SERVERS.NET moved to Beijing?
by Janne Snabb 05 Oct '11

05 Oct '11

I happened to notice the following at three separate sites around the US and one site in Europe: $ dig +short +norec @F.ROOT-SERVERS.NET HOSTNAME.BIND CHAOS TXT "pek2a.f.root-servers.org" and: $ dig +short +norec @F.ROOT-SERVERS.NET HOSTNAME.BIND CHAOS TXT "pek2b.f.root-servers.org" After running a couple of traceroutes it appears that he.net has a route for F's anycast IPv6 address (2001:500:2f::f) towards Beijing. According to https://www.isc.org/community/f-root/sites the Beijing node should be a "Local Node" (without IPv6 but I suppose the list is not up to date). I believe this means that a lot of DNS queries from IPv6 enabled sites in US and other countries are going to Beijing. I wonder if this is intentional? Chinese government (CNNIC) seems to be in the path. All my sites seem to have he.net somewhere in the IPv6 connectivity path. I wonder if this is specific to he.net or more wide-spread routing anomaly? I have notified he.net NOC and F-root @ ISC. Best Regards, -- Janne Snabb / EPIPE Communications snabb(a)epipe.com - http://epipe.com/

21 38

TEDB
by Djamel Sadok 05 Oct '11

05 Oct '11

Hi, Does anyone know of any Traffic Engineering database or trace available somewhere? Thanks, Djamel

1 0

RADB/RIR Scraper
by Kate Gerry 05 Oct '11

05 Oct '11

I'm looking for a good utility that I can run locally to scrape RADB, ARIN, other RIRs to add to my or customer prefix lists... Anybody have a good tool for this? I currently end up visiting https://www.dan.me.uk/filtergen and creating one off that. Thoughts? -- Kate QuadraNet, Inc 530 W 6th Street #901 Los Angeles, CA 90014 kate(a)quadranet.com<mailto:kate@quadranet.com>

10 12

DNSSEC in China
by Michael Sinatra 05 Oct '11

05 Oct '11

The thread on f-root reminded my of an anecdotal datum regarding DNSSEC in China. I was in China back in August, staying at the Green Lake Hotel in Kunming, Yunnan Provence. When connecting to the hotel in-room network (there was no wireless but a wired connection), I was able to properly validate DNSSEC for names like www.es.net and berkeley.edu, both of which are part of signed zones with a chain of trust from the root. I was able to do the validation on my caching resolver (BIND 9.8.x) running on my laptop. If a site was blocked by authorities, I couldn't resolve it at all, but that was also the case even if I wasn't doing validation on my laptop resolver, but instead using the resolver provided by DHCP. (FYI, I "stumbled" upon an expat bar later in my trip near Yunnan Provincial University and the folks there--Europeans and Americans--all said that the number of sites they can get to has expanded in recent months. One Finn was accessing the Guardian to get the latest on the London riots.) Another anecdote from NANOG 52: At the Denver Sheraton, I was unable to validate or resolve any name using my local laptop resolver. I couldn't even validate TLDs or dlv.isc.org, so *all* of my name resolution broke. In the end, I had to disable my local resolver entirely and use those provided by DHCP. I have nothing to say about hypocrisy or the relative level of oppression between the Chinese government versus the Starwood Group (although it's humorous to think about). What I will say is that DNSSEC made it very clear in the case of the Sheraton that they were messing with DNS because DNSSEC made the handcuffs so obviously tight. michael

2 1