- Test - lists.nanog.org

Need help on process netflow sampling data
by Joe Shen 24 Nov '04

24 Nov '04

Hi, I'm trying to analize our egree router traffic by using flow-tools and CUFlow. There are three edge routers: two Juniper M160 and one Cisco GSR. All of them are set up to sample outgoing interfaces. With Juniper M160, I set up forwarding-option as: ============================= forwarding-options { sampling { input { family inet { rate 500; } } output { cflowd 10.101.172.20 { port 2055; version 5; } } } } so-6/0/0 { description "Outgoing 2.5G POS"; unit 0 { family inet { filter { input netflow-sj; output netflow-sj; } address *.*.*.110/30; } } } ==================== With Cisco GSR I configed: ====================== ip flow-export source Loopback0 ip flow-export version 5 origin-as ip flow-export destination 10.101.172.20 2055 ip flow-sampling-mode packet-interval 500 ip flow-aggregation cache as interface GigabitEthernet5/0 description To_Other-AS ip address 10.96.117.250 255.255.255.252 no ip directed-broadcast ip route-cache flow sampled ==================== To my understanding, they should work the same way as : sampling every 500 packets in both in & out directions. I set up CUFlow.cf to work with Sampling rate 500, but when I try to graph data with its cgi scripts, i found CUFlow show a wrong bit rate with GSR ( 10Gbps for two GE ), while there is much differnt in application analysis. Is my understanding of "sampled netflow" correct? Is there anybody could do some help with netflow data processing ? each word will be highly appreciated Regards Joe __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

1 0

Re: Frame-Relay reliability (was Re: who gets a /32)
by Christopher L. Morrow 23 Nov '04

23 Nov '04

On Tue, 23 Nov 2004, Sean Donelan wrote: > On Mon, 22 Nov 2004, Christopher L. Morrow wrote: > > > Yeah right. That's why Worldcom's frame-relay network was "unusable" for > > > about 10 days and took out part of the Chicago Board of Trade elecronic > > > trading system. > > > > and to be fair it might have actually been MCI's network at that time, > > with name changes though I'm losing track... not EVERYTHING is worldcom's > > fault :) > It was 100% Worldcom. The old MCI people at the time repeatedly pointed > out that the MCI frame-relay network (also owned by Worldcom at the time) > wasn't effected. a kind outside poster set me straight about the Frame outage... apparently everything IS worldcom's fault! :) So, sorry for the confusion.

1 0

RE: Level 3 NOC information.
by Niaz, Wajahat 23 Nov '04

23 Nov '04

Call 1877-4Level3 -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Majid Farid Sent: Tuesday, November 23, 2004 11:19 AM To: nanog(a)merit.edu Cc: cisco-nsp(a)puck.nether.net Subject: Level 3 NOC information. Good Day, Any one from LEVEL3 on the list please contact me off the list or if someone has their NOC information I would greatly appreciate if you can share it. Regards, -- Majid Farid ISP Specialist Telecom Ottawa Limited. majidfarid(a)telecomottawa.com [P] 613.225.4631 ext 7220 [F] 613.225.0636

3 2

RE: Probe dns service - anycast network
by Anshuman Kanwar 23 Nov '04

23 Nov '04

http://www.digitarchy.com/anycast/phcd.tgz Will do pretty much what you want. My target was a HTTP based service rather than DNS. Modification for UDP health checks should be trivial. -ansh -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Gere geomag Sent: Thursday, November 11, 2004 3:03 PM To: nanog(a)merit.edu Subject: Probe dns service - anycast network Hi, We are thinking of deploying anycast in our network for dns servers. I have the following scenario: - 10 server DNS (isc-bind) , linux and zebra for propagating ospf ip anycast. Are there someone who has developed a "solid scripts (perl/c/ecc..)" that is used to probe a dns service (udp/tcp port 53) and in case of failure (or max lookup query time problem) automatic shutdown ospf annunce or remove a server from a anycast network? Best regards Antony Findanno

1 0

Opinions of recent ITU Comments on the Management of IP Addresses
by Vince Hoffman 23 Nov '04

23 Nov '04

With all the recent discussion on IPv6 and the allocation thereof, I havent noticed any discussion of the Director of ITU-TSB's memorandum, "ITU and Internet Governance" To quote an email from the MD of RIPE to a large number of ripe mailing lists "This memorandum includes a proposal to create a new IPv6 address space distribution process, based solely on national authorities. This could have a serious impact on RIPE NCC Members, Internet operators and the global Internet community at large"[1] The original ITU memorandum is available at: http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-netgov01.doc or http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-netgov01.pdf Its not an idea that fills me with joy, but I'd be iterested to hear the opinions of this mailing list Vince [1] This email included the phrase "We urge our members and others in the Internet community to make their views about this issue known." so if anyone wants to read it who hasnt I can forward a copy.

6 6

RE: Opinions of recent ITU Comments on the Management of IP Addresses
by Network.Security 23 Nov '04

23 Nov '04

Interesting flow...who then enforces ITU "rules"? With what binding authority? Better yet, let the free market run the business. Brad -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Owen DeLong Sent: Tuesday, November 23, 2004 11:23 AM To: Iljitsch van Beijnum; Vince Hoffman Cc: nanog(a)merit.edu Subject: Re: Opinions of recent ITU Comments on the Management of IP Addresses Of course, then, the developing countries (and, more importantly, the countries with large viral or spammer populations) are then faced with the question of whether anyone will route their prefixes. Won't that make the ITU happy. Owen --On Tuesday, November 23, 2004 2:16 PM +0100 Iljitsch van Beijnum <iljitsch(a)muada.com> wrote: > > On 22-nov-04, at 21:16, Vince Hoffman wrote: > >> "This memorandum includes a proposal to create a new IPv6 address >> space distribution process, based solely on national authorities. > > This is not exactly what it says in > >> http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-netgov01.p >> df > > A quote: > > "The early allocation of IPv4 addresses resulted in geographic > imbalances and an excessive possession of the address space by early > adopters. This situation was recognized and addressed by the Regional > Internet Registries (RIRs). However, despite their best efforts, and > even though a very large portion of the IPv4 space has not been > assigned, some believe that there is a shortage of IPv4 addresses and > voice concerns regarding the principles and managements of the current > system. Some developing countries have raised issues regarding IP > address allocation. It is important to ensure that similar concerns > do not arise with respect to IPv6. I have discussed with some industry > experts my idea to reserve a block of IPv6 addresses for allocation by > authorities of countries, that is, assigning a block to a country at > no cost, and letting the country itself manage this kind of address > in IPv6. By assigning addresses to countries, we will enable any > particular user to choose their preferred source of addresses: either > the countryassigned ones or the region/international-assigned ones." > -- If it wasn't crypto-signed, it probably didn't come from me.

1 0

RE: Opinions of recent ITU Comments on the Management of IP Addre sses
by Hannigan, Martin 23 Nov '04

23 Nov '04

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] > Sent: Tuesday, November 23, 2004 8:17 AM > To: Vince Hoffman > Cc: nanog(a)merit.edu > Subject: Re: Opinions of recent ITU Comments on the Management of IP > Addresses > > > > On 22-nov-04, at 21:16, Vince Hoffman wrote: > > > "This memorandum includes a proposal to create a new IPv6 address > > space distribution process, based solely on national authorities. > > This is not exactly what it says in > > > > http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-net > gov01.pdf > > A quote: > > "The early allocation of IPv4 addresses resulted in geographic > imbalances and an excessive possession of the address space by early > adopters. This situation was recognized and addressed by the > Regional > Internet Registries (RIRs). However, despite their best efforts, and > even though a very large portion of the IPv4 space has not been > assigned, some believe that there is a shortage of IPv4 addresses and > voice concerns regarding the principles and managements of > the current > system. Some developing countries have raised issues regarding IP > address allocation. It is important to ensure that similar > concerns do > not arise with respect to IPv6. I have discussed with some industry > experts my idea to reserve a block of IPv6 addresses for > allocation by > authorities of countries, that is, assigning a block to a country at > no cost, and letting the country itself manage this kind of > address in > IPv6. By assigning addresses to countries, we will enable any > particular user to choose their preferred source of addresses: either > the countryassigned ones or the region/international-assigned ones." That's a little different than what DOC thinks: " A. Need for Government Involvement in IPv6 Deployment 1. Reliance on Market Forces As a general matter, government policymakers in the United States prefer to rely on market forces for the large-scale deployment of new technologies. In most cases, reliance on the market tends to produce the most efficient allocation of resources, the greatest level of innovation, and the maximum amount of societal welfare. Accordingly, we seek comment on whether market forces alone will be sufficient to drive a reasonable and timely level of IPv6 deployment in the United States. For example, given commenters' views on the current and predicted rates of IPv6 deployment, do commenters believe those rates demonstrate a sufficient uptake of IPv6 in the United States? We ask commenters to identify the specific reasons for their positions. " DOC Comments Period in IPV6 http://www.ntia.doc.gov/ntiahome/frnotices/2004/IPv6RFCFinal.htm The actual comments: http://www.ntia.doc.gov/ntiahome/ntiageneral/ipv6/commentsindex.html The July Public Meeting http://www.ntia.doc.gov/ntiahome/ntiageneral/ipv6/webcast.html

1 0

Fwd: Re: Opinions of recent ITU Comments on the Management of IP Addresses
by Hank Nussbacher 23 Nov '04

23 Nov '04

It would appear NANOG silently drops emails sent with Word attachments. Here is another try: <http://www.interall.co.il/reply to RIRs.doc> -Hank >Date: Tue, 23 Nov 2004 09:46:31 +0200 >To: Vince Hoffman <jhary(a)unsane.co.uk>, nanog(a)merit.edu >From: Hank Nussbacher <hank(a)mail.iucc.ac.il> >Subject: Re: Opinions of recent ITU Comments on the Management of IP Addresses > >At 08:16 PM 22-11-04 +0000, Vince Hoffman wrote: > >Attached is the Word file response I got from Houlin Zhao (TSBDir) on the >matter. > >REgards, >Hank > > >>With all the recent discussion on IPv6 and the allocation thereof, I >>havent noticed any discussion of the Director of ITU-TSB's memorandum, >>"ITU and Internet Governance" >>To quote an email from the MD of RIPE to a large number of ripe mailing >>lists "This memorandum includes a proposal to create a new IPv6 address >>space distribution process, based solely on national authorities. This >>could have a serious impact on RIPE NCC Members, Internet operators and >>the global Internet community at large"[1] >>The original ITU memorandum is available at: >>http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-netgov01.doc >>or >>http://www.itu.int/ITU-T/tsb-director/itut-wsis/files/zhao-netgov01.pdf >> >>Its not an idea that fills me with joy, but I'd be iterested to hear the >>opinions of this mailing list >> >>Vince >> >>[1] This email included the phrase "We urge our members and others in the >>Internet community to make their views about this issue known." so if >>anyone wants to read it who hasnt I can forward a copy. >>+++++++++++++++++++++++++++++++++++++++++++ >>This Mail Was Scanned By Mail-seCure System >>at the Tel-Aviv University CC.

1 0

Re: who gets a /32 [Re: IPV6 renumbering painless?]
by Paul Vixie 23 Nov '04

23 Nov '04

> >> It's wrong if these issues that have global impact are decided > >> regionally. > > > yes. i understand that the acid rain people, the ozone layer > > people, the ice cap people, the whale people, and the ocean oxygen > > level people, all have that same complaint. human nature on a grand > > scale isn't always pretty. > > Well if you feel you need to take your cues from environmental > semi-criminals, obviously there isn't much that I can say to stop you. i seem to be pretty much done defending myself against your bizarre misinterpretations of my positions. or at any rate, done for today, except to remind you that on the internet, everyone always acts globally, and most people nearly always thinks locally.

1 0

Re: who gets a /32 [Re: IPV6 renumbering painless?]
by Paul Vixie 22 Nov '04

22 Nov '04

the tyres on this this thread are getting threadbare. let's finish soon. > > (let me put it this way: A6/DNAME was shot down because of complexity, and > > it was simpler than this.) > > Wasn't it more because a single A6 lookup could cause one (the resolver > that is ;) to have to follow a overly long chain of A6/DNAME chains, > which thus could cause maybe somewhat infinite lookups? no. > I rather like DNAME btw: "ip6.int DNAME ip6.arpa", which works quite fine. see http://www.isc.org/pubs/tn/ for a way to do your own block while you wait for the toplevel ip6.int administrator to see things your way. > A6 is fortunately not supported any more by BIND. server-side support of A6 doesn't matter since no modern ipv6 client looks for it. just as client-side support of DNAME doesn't matter since the server will synthesize a CNAME whenever it emits a DNAME. > > 1. A6/DNAME were great idea, I'm really disappointed they are not going > > forward... > > It is, except maybe for the above noted 'problem'. that never was the problem. but the current problem is, AAAA got loose in the client population, so other than by server side A6->AAAA synthesis (which is either very difficult or impossible to do, depending on whom you ask), A6 is just plain dead. > > What is bad however is that IETF instead of pursuing it as > > one effort has several of them including MULTI6, HIP, etc. > > The fun of politics ;) this fun is by design, though. ietf does not speak with a single voice; even the periodic pronouncements from that era's IAB are at best advisory in nature. the reason you see several working groups working on unrelated solutions to the same problem is that several groups of people each wanted to work together on unrelated solutions to the same problem. there's no real facility in ietf for saying "no, we've already picked a different solution to this, don't try."

1 0