- Test - lists.nanog.org

Re: Cisco's CNR vs ISC Bind/DHCP
by Ron Buchalski 17 Mar '00

17 Mar '00

Brett writes: >From: brett watson <bwatson(a)mibh.net> >To: nanog(a)merit.edu >Subject: Re: Cisco's CNR vs ISC Bind/DHCP >Date: Fri, 17 Mar 2000 10:58:13 -0800 <snip> >one would hope that cisco licensed the core code for this from Nominum >(www.nominum.com) i don't consider application/software development to be >cisco's "thing". Actually, Cisco acquired this product (and others) when it acquired American Internet Corporation in 1998. -rb ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

mysterious packet delay to/from www.caida.org was: Cisco Netflow Analysis Software
by Kai Schlichting 17 Mar '00

17 Mar '00

Can anyone else confirm the following observation ? If yes: what might be causing this ? (CEF is my usual suspect, but toggling it on/off doesn't do anything) Naturally, I went to www.caida.org in response to one of the NANOG postings, but seemingly hit a roadblock: the site just wouldnt want to load properly. As engineers from time to time get bitten by the curiosity bug, I tracerouted and ping'd around to find the cause of this non-responsiveness. Surprise: depending on the IP space used to access the site, there would be a considerable pause in the packet flow: 20 sec. for a BSDI 4.1 machine or a Win98 machine, 80 sec. for an OpenBSD 2.4 machine , but NO pause when using a different set of IP space (to be exact: Interface IP space belonging to upstream provider). One could literally switch around the 'ip telnet source-interface' on the gateway router to use the different IP space blocks, and would get the long delay or not, depending on which space was used. Note that there is no duplicates or visible packet loss whatsoever, and the delay is occurring at the exact same packet in the flow each and every time, regardless of client operating system (tcp receive buffers/window are set to 2^16 though, which didn't make a difference other than different packetization). I have tried this from 2 other locations, and the long pause (there) would melt down into the 100ms range mostly sometimes go away. Sorry for the tcpdump in advance...a simple GET / HTTP/1.0 on their server. This is out of 208.192.0.0/10 (AS 701) , btw., with no more specific route visible net-wide. bye,Kai ------ (BSDI 4.x at work here:) 15:35:57.505400 host.35570 > ipn.caida.org.www: S 3494476576:3494476576(0) win 65535 <mss 1460,nop,nop,sackOK,nop,wscale 0,nop,nop,[|tcp]> [tos 0x10] (ttl 64, id 5418) 15:35:57.700158 ipn.caida.org.www > host.35570: S 1151006778:1151006778(0) ack 3494476577 win 8760 <mss 1460> (DF) (ttl 239, id 11105) 15:35:57.700794 host.35570 > ipn.caida.org.www: . ack 1 win 65535 [tos 0x10] (ttl 64, id 12399) 15:36:01.446201 host.35570 > ipn.caida.org.www: P 1:17(16) ack 1 win 65535 [tos 0x10] (ttl 64, id 24844) 15:36:01.714702 ipn.caida.org.www > host.35570: . ack 17 win 8760 (DF) (ttl 239, id 11106) 15:36:01.715261 host.35570 > ipn.caida.org.www: P 17:19(2) ack 1 win 65535 [tos 0x10] (ttl 64, id 463) 15:36:01.972221 ipn.caida.org.www > host.35570: P 1:1461(1460) ack 19 win 8760 (DF) (ttl 239, id 11107) 15:36:01.972910 host.35570 > ipn.caida.org.www: . ack 1461 win 64240 [tos 0x10] (ttl 64, id 10930) 15:36:02.240938 ipn.caida.org.www > host.35570: . 1461:2921(1460) ack 19 win 8760 (DF) (ttl 239, id 11108) 15:36:02.246988 ipn.caida.org.www > host.35570: P 2921:4097(1176) ack 19 win 8760 (DF) (ttl 239, id 11109) 15:36:02.252069 host.35570 > ipn.caida.org.www: . ack 4097 win 65535 [tos 0x10] (ttl 64, id 24582) 15:37:22.984047 ipn.caida.org.www > host.35570: P 4097:4933(836) ack 19 win 8760 (DF) (ttl 239, id 30829) 15:37:22.984192 ipn.caida.org.www > host.35570: F 4933:4933(0) ack 19 win 8760 (DF) (ttl 239, id 30830) 15:37:22.987340 host.35570 > ipn.caida.org.www: . ack 4934 win 64864 [tos 0x10] (ttl 64, id 53067) 15:37:22.999506 host.35570 > ipn.caida.org.www: F 19:19(0) ack 4934 win 65535 [tos 0x10] (ttl 64, id 36125) 15:37:23.222742 ipn.caida.org.www > host.35570: . ack 20 win 8760 (DF) (ttl 239, id 30831)

2 3

Final report from DOE Power Outage Study Team
by Sean Donelan 17 Mar '00

17 Mar '00

How many of these statements could be applied to other interconnected systems, such as the Internet. Think about the outages last summer in the power system which lead to this report. What would a similar scope of outages look like on the Internet? Compare and contrast. You have 2 hours to complete this test :-) >From the Department of Energy's Power Outage Study Team final report on the Summer of 1999 power outages issued on Monday. http://www.policy.energy.gov/electricity/postfinal.pdf "This change makes the current system of voluntary compliance with reliability standards inadequate for ensuring reliability. Mandatory standards for bulk-power psystems are needed to ensure that the "rules of the road" are implemented in a straightforward and balanced manner." "Many forums for exchanging information on "best practices" for maintaining and operating electric generation, transmission and distribution systems already exist. However, concerns exist about the consistency of some information (such as reliability indicies), the availability of data to all industry stakeholders, and the continued viability of these forums in a restructured industry. The federal government could play an important role in enhancing the definition, collection, and sharing of information." "Emergencies on bulk-power systems affect large geographic areas, involve many stake holders, and affect millions of customers. The events of the summer of 1999 demonstrated that effective communication and coordination among many parties are critical during times of system emergencies. The federal government should actively support efforts to continually review and improve planning and response capabilities." "In view of the regional and national implications of power outages, known and emerging electric system vulnerabilties need to be studied from a national rather than local perspective. Studies from a national perspective uniquely belong to the federal government, but studies must be carried out in close partnership with the electric industry."

1 0

Need to speak to a clueful Qwest BGP Engineer
by Hitesh Patel 17 Mar '00

17 Mar '00

I apologize for posting this message here, but it's my last hope. for upwards of a month now I have been trying to get a BGP Announcement problem fixed through the 'correct' channels at Qwest. So far there has not been any progress, and the people i'm talking to seem to not be clueful enough to help. If there is a knowledgeable Qwest routing engineer out there please contact me at any of the methods listed in my signature. Is anyone else having these problems with Qwest? So far there NOC response times have been nothing but crappy and it seems that there technical people know less then 3 monkeys trying to get 2 cisco's talking. If you are having the same problems please email me so I have some ammunition to go after Qwest with. -- |---------------------------------|----------------------------| | Hitesh Patel | Voice: (541) 759-3126 | | | Fax: (541) 759-3214 | | Preferred Communications Inc. | Email: hitesh(a)pciwest.net | |---------------------------------|----------------------------|

1 0

Cisco's CNR vs ISC Bind/DHCP
by Fletcher E Kittredge 16 Mar '00

16 Mar '00

We are working here with the hypothesis that Cisco's CNR product is a lamer and inferior in quality to the Internet Software Consortium's open source DNS and DHCP software. Is this a generally accepted hypothesis, or are we off in the weeds (again) by ourselves on this one? thanks! fletcher

1 0

Re: P[ath]char (Was Re: Alternative to BGP-4 for multihoming?)
by Mr. James W. Laferriere 16 Mar '00

16 Mar '00

Hello Tim . Sorry 'K' . But I couldn't tell. Too little information . JimL On Thu, 16 Mar 2000, Tim Salo wrote: > Hello Mr. Claffy & Mr. Chris Cappuccio , Thank you for > ^^ > Ms. > -tjs +----------------------------------------------------------------+ | James W. Laferriere | System Techniques | Give me VMS | | Network Engineer | 25416 22nd So | Give me Linux | | babydr(a)baby-dragons.com | DesMoines WA 98198 | only on AXP | +----------------------------------------------------------------+

1 0

Re: Alternative to BGP-4 for multihoming?
by Andrew Bender 16 Mar '00

16 Mar '00

Gary E. Miller wrote: > And I sure hope that HOP count is not used, Singapore has a > mixture of very fast and very slow links to foreign countries > so hop count is a useless measure of "closeness". Quite possibly, if used by itself. Dr. Jacobsen's method (http://www.caida.org/Pathchar) is a proven strategy that could provide some relief here, but may be impractical interactively. Then again, isn't any interactive measurement going to be impractical? Andrew Bender tns-inc.com

4 4

Re: Cisco Netflow Analysis Software
by Simon Leinen 16 Mar '00

16 Mar '00

>>>>> "dh" == David Hares <dhares(a)networktwo.net> writes: > Does anyone have or know of a cisco Netflow collector/reporter > available in the public domain? I maintain a couple WWW pages about NetFlow and similar systems. One of them has references to such software packages: http://www.switch.ch/tf-tant/floma/software.html Additions, corrections, praise or flames are all welcome. > Cisco used to have a basic one available on their website, but now > that that they have a commercial product using Netflow, the free > software is gone. Actually there is still some C code on ftpeng, which is also referenced from the abovementioned page. Hope this helps, -- Simon Leinen simon(a)babar.switch.ch SWITCH http://www.switch.ch/misc/leinen/ Who is General Failure & why's he reading my disk?

1 0

Cisco Netflow Analysis Software
by David Hares 15 Mar '00

15 Mar '00

Does anyone have or know of a cisco Netflow collector/reporter available in the public domain? Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone. Dave ----------- David Hares NetworkTwo Communications Phone: 734.827.3620 650 KMS Place FAX: 734.827.3690 Ann Arbor, MI 48108 Email: dhares(a)networktwo.net

5 4

RE: Cisco Netflow Analysis Software
by Hallgren, Michael 15 Mar '00

15 Mar '00

You might want to look at http://www.caida.org/Tools/Cflowd/ mh -----Message d'origine----- De: David Hares [mailto:dhares@networktwo.net] Date: mercredi 15 mars 2000 18:04 À: nanog(a)merit.edu Objet: Cisco Netflow Analysis Software Does anyone have or know of a cisco Netflow collector/reporter available in the public domain? Cisco used to have a basic one available on their website, but now that that they have a commercial product using Netflow, the free software is gone. Dave ----------- David Hares NetworkTwo Communications Phone: 734.827.3620 650 KMS Place FAX: 734.827.3690 Ann Arbor, MI 48108 Email: dhares(a)networktwo.net

1 0