- Test - lists.nanog.org

ip-precedence for management traffic
by Luca Tosolini 31 Dec '09

31 Dec '09

Experts, what is the general opinion of using ipp 7 'network control' for management traffic like: telnet ssh snmp ..... The idea is that ipp 0 1 2 3 4 5 are used for user traffic ipp = 6 is used by default by routing protocols like BGP, OSPF, LDP ... this leaves out only ipp 7 for management traffic, on the premise that routing and management should not share the same queue and resources..... Thanks, Luca.

24 38

Consumer-grade dual-homed connectivity options?
by Paul Bennett 31 Dec '09

31 Dec '09

Not sure whether this is an appropriate place to post this, but I thought I'd give it a shot, since you're all knowledgeable folks with regard to networking things... At home, I currently run two DSL lines. Right now, we just have two separate LANs, one connected to each line, with my wife's devices attached to one, and my devices attached to the other. For a while now, I've been thinking about setting up a load-balancing routing solution to give both of us access to both lines. I have the opportunity to acquire a refurbed Cisco Catalyst 2960 at a ridiculously low price. I also have access to a (nominally) spare quad-core 64-bit PC with 8GB of RAM. I say "nominally" because I'm thinking about setting it up as a media center / gaming rig connected to the TV in the den. That's largely beside the point, but it bears pointing out that keeping the PC available for my other needs would be a good thing. So. Is it going to be a more-effective solution to drop a few bucks on the 2960 and go through the hassle of learning how to set it up (and then setting it up), or would I be better off putting a secured Linux distro (e.g. gentoo-hardened, or something) on the semi-spare PC and running the load-balancing via iproute2 and friends? Either way, I'm looking at a learning curve, and a good amount of time fannying around getting the damn thing working -- there's a good chance I'd spend almost as much cash on the PC-based solution getting good-quality network cards, and maybe fast HDD tech (though it seems like RAM and cores would be more important than disk IO). What are your opinions? -- Paul

12 15

just...wow.
by Jerry Pasker 31 Dec '09

31 Dec '09

I got this email inquiring about data center space, from the most honest scumbag, *EVER* today. Operational relevance? Well, if everyone would turn these people down, we'd have a lot less problems to deal with. Sadly, requests like these happen far too often, but never have I had someone come right out and explain what they were doing up front like this without having to dig in to it. Scumbag email: ------------ Hello, I need servers to host botnet controller. Botnet controller is software that sends tasks to bots. Bots are hosts which send spam emails to millions of addresses. It's not direct spam but abuses on botnet contoller are received from time to time. What is your policy in case of receiving abuses and what is your policy in case of receiving a lot of abuses? What is policy about spam (not direct from your ips as I mentioned above)? Is it possible to host botnet controller in your datacenter during long-term time? Thank you. -------------- The part that leaves me feeling good is that they do get abuse complaints from time to time. There's hope.

4 5

Re: ip-precedence for management traffic
by David Hiers 30 Dec '09

30 Dec '09

> Totally out of the box, but here goes: why don't we run the entire > Internet management plane "out of band" This has been one of my favorite conversation-stoppers for years. The PSTN fought tooth and nail against the need for OOB control, but 2600hz was a problem that they could not solve, so they bucked up and paid for a control plane. Where do you think we'd be now if Phreakers, Inc. still had access to a PSTN with an audio frequency, inband control plane? Don't we insist on, and brag over, data/control seperation within our devices? Isn't it groovy when a frame is never seen by the switch's CPU/SUP? Sure, I'm streching the analogy a bit here to make a point: many of our problems arise from giving bearer traffic access to the control plane. If the world wants an internet that is as predictable and reliable as the PSTN, it'll bear the cost of protecting the control plane. A fundamental choice in the protection scheme is physical architecture. IB or OOB, it's always a good thing to be explicit in design decisions, and not adopt legacy/heritage decisions without consideration. David PS: If you want OOB access to your gear when your core switches freak out, don't let those switches touch any frame between your WAN link and console ports.

2 1

Out of the office
by Andrew.Claybaugh＠securian.com 30 Dec '09

30 Dec '09

I will be out of the office starting 12/30/2009 and will not return until 01/04/2010. If you need immediate assistance please call TechSupport at 651-665-5000.

1 0

why it happens short packet. Which network device is problem?
by Deric Kwok 29 Dec '09

29 Dec '09

Hi all I got the following message. UDP: bad checksum. From 67.204.26.203:1054 to 66.49.0.97:55290 ulen 43 UDP: short packet: From 67.55.92.141:23801 30368/46 to 66.49.0.0:24617 What is this meaning? Which network device is problem? Why it happens in the network? Thank you

3 2

Robert Carlson/The Siemon Company is out of the office.
by Robert_Carlson＠siemon.com 28 Dec '09

28 Dec '09

I will be out of the office starting 12/28/2009 and will not return until 01/04/2010. I will be traveling in Asia and will be checking my emails frequently, but please be aware of the time difference.

1 0

Revisiting the Aviation Safety vs. Networking discussion
by Owen DeLong 28 Dec '09

28 Dec '09

Those that remember the discussion may find this article interesting: http://abcnews.go.com/Health/wireStory?id=9394406 Owen

21 29

Re: Revisiting the Aviation Safety vs. Networking discussion
by Robert Boyle 28 Dec '09

28 Dec '09

At 02:08 AM 12/25/2009, Scott Howard wrote: >On Thu, Dec 24, 2009 at 6:27 PM, George Bonser <gbonser(a)seven.com> wrote: > > > So you can put a lot of process around changes in advance but there > > isn't quite as much to manage incidents that strike out of the clear > > blue. Too much process at that point could impede progress in clearing > > the issue. Capt. Sullenberger did not need to fill out an incident > > report, bring up a conference bridge, and give a detailed description of > > what was happening with his plane, the status of all subsystems, and his > > proposed plan of action (subject to consensus of those on the conference > > bridge) and get approval for deviation from his initial flight plan > > before he took the required actions to land the plane as best as he > > could under the circumstances. > >"*mayday mayday mayday. **Cactus fifteen thirty nine hit birds, we've lost >thrust (in/on) both engines we're turning back towards LaGuardia*" - Capt. >Sullenberger > >Not exactly "detailed", but he definitely initiated an "incident report" >(the mayday), gave a "description of what was happening with his plane", the >"status of [the relevant] subsystems", and his proposed plan of action - >even in the order you've asked for! > >His actions were then "subject to the consensus of those on the conference >bridge" (ie, ATC) who could have denied his actions if they believed they >would have made the situation worse (ie, if what they were proposing would >have had them on a collision course with another plane). In this case, the >conference bridge gave approval for his course of action ("*ok uh, you need >to return to LaGuardia? turn left heading of uh two two zero.*" - ATC) Once he declared an emergency, he had the right of way over all other traffic. ATC would move anyone in his way out of the way. Under <http://en.wikipedia.org/wiki//wiki/U.S.>U.S. <http://en.wikipedia.org/wiki//wiki/FAA>FAA FAR 91.3, "Responsibility and authority of the pilot in command", the FAA declares:[2] * (a) The pilot in command of an aircraft is directly responsible for, and is the final authority as to, the operation of that aircraft. * (b) In an in-flight emergency requiring immediate action, the pilot in command may deviate from any rule of this part to the extent required to meet that emergency. * (c) Each pilot in command who deviates from a rule under paragraph (b) of this section shall, upon the request of the Administrator, send a written report of that deviation to the Administrator. Just because we have checklists doesn't mean we can't think on our feet and handle situations not contemplated in checklists, but checklists and procedures exist to ensure we don't forget something we need to remember. They aren't a substitute for creativity and logical thought. They are an aid to it to ensure a minimum of creative thinking is needed to solve problems which shouldn't exist in the first place. -Robert SEL&MEL+I "Well done is better than well said." - Benjamin Franklin

3 2

IPv6 Training
by Marty Anstey 28 Dec '09

28 Dec '09

Greetings, Just wondering if anyone has had any experience with IPv6 training courses. A quick search turns up a few results on the subject, but it would be handy to hear if anyone has any firsthand experiences or recommendations. We're based in western Canada but don't mind traveling a bit, but alternatively an online course would be acceptable as well. -M

7 6