- Test - lists.nanog.org

Wrong use of 100.64.0.0/10
by Marco Paesani 02 Oct '15

02 Oct '15

Hi, probably this route is wrong, see RFC 6598, as you can see: show route 100.64.0.0/10 inet.0: 563509 destinations, 1528595 routes (561239 active, 0 holddown, 3898 hidden) + = Active Route, - = Last Active, * = Both 100.100.1.0/24 *[BGP/170] 2d 14:46:05, MED 100, localpref 100 AS path: 5580 9498 9730 I, validation-state: unverified > to 78.152.54.166 via ge-2/0/0.0 Do you have some idea ? Ciao, -- Marco Paesani MPAE Srl Skype: mpaesani Mobile: +39 348 6019349 Success depends on the right choice ! Email: marco(a)paesani.it

3 4

gmail admins?
by William Herrin 01 Oct '15

01 Oct '15

Howdy, Any gmail admins out there? I forward email addressed to me to a gmail account. Overnight you started returning: ----- Transcript of session follows ----- ... while talking to gmail-smtp-in.l.google.com.: >>> DATA <<< 550 5.7.1 [IR] Our system has detected an excessively high number of invalid recipients originating from your account. Contact your service provider for sup port 554 5.0.0 Service unavailable There were not temporary failures, you jumped straight to permanent failures. Emails were about 90% to my own gmail account, a total of about 80 over 12 hours. Fix your damn algorithm. And of course I have to complain publicly because you don't accept trouble reports privately, instead sending people into useless dead-end automated help systems. Thanks, Bill Herrin -- William Herrin ................ herrin(a)dirtside.com bill(a)herrin.us Owner, Dirtside Systems ......... Web: <http://www.dirtside.com/>

3 2

Extra Fairmont Room
by Brandon Ross 01 Oct '15

01 Oct '15

I have one extra room at the Fairmont under the NANOG room block rate of CA$199/night. If you want it before I cancel it, let me know. First come, first served. -- Brandon Ross Yahoo & AIM: BrandonNRoss +1-404-635-6667 ICQ: 2269442 Skype: brandonross Schedule a meeting: http://www.doodle.com/bross

1 1

Routes leaked by AS393742 via AS16397
by Marco Paesani 01 Oct '15

01 Oct '15

Hi, anyboody know this AS ?? Upstream AS3549 Thanks ! Regards -- Marco Paesani MPAE Srl Skype: mpaesani Mobile: +39 348 6019349 Success depends on the right choice ! Email: marco(a)paesani.it

4 5

wanted: tool for traffic generation / characteristics / monitoring
by Matthias Flittner 01 Oct '15

01 Oct '15

Dear colleagues, Currently we are looking for a magic tool with which it is possible to generate specific (realistic) traffic patterns between client and server to analyze (monitor) traffic characteristics (jitter, delay, inter arrival times, etc.). It would be good if that wanted tool is not only able to generate different traffic patterns but also is able to collect different traffic metrics over time. So that it is possible to create catchy plots. :) Any hints or links would be greatly appreciated. Thanks in advance. Best regards, -FliTTi

10 9

Re: Question re session hijacking in dual stack environments w/MacOS
by Dovid Bender 01 Oct '15

01 Oct '15

Have a look at JuiceSSH. ------Original Message------ From: Mark Tinka Sender: NANOG To: David Hubbard To: nanog(a)nanog.org Subject: Re: Question re session hijacking in dual stack environments w/MacOS Sent: Sep 29, 2015 03:23 On 26/Sep/15 16:34, David Hubbard wrote: > > Has anyone run into this? Our users on other platforms don't seem to > have this issue; linux and MS desktops seem to just use v6 if it's > available and v4 if not. I have been tracking down an issue for months where SSH'ing to some devices (which picks IPv6 by default) from my Mac while in the office drops the connection, forcing me to reconnect. It's random; sometimes it happens a lot, sometimes, rarely, other times not at all. I've sort of suspected OS X to be the issue (10.10.5) here. The workaround has been to SSH strictly on IPv4 which is always stable. So it seems to be an issue when the session is carried over IPv6. This only affects OS X. SSH'ing from FreeBSD, for example, on IPv6 is stable. To be honest, I've been a little busy to look deeper into this, but it definitely has something to do with what you describe, I imagine. Mark. Regards, Dovid

1 0

SNMP - monitoring large number of devices
by Pavel Dimow 30 Sep '15

30 Sep '15

Hi all, recently I have been tasked with a NMS project. The idea is to pool about 20 OID's from 50k cable modems in less then 5 minutes (yes, I know it's a one million OID's). Before you say check out some very professional and expensive solutions I would like to know are there any alternatives like open source "snmp framework"? To be more descriptive many of you knows how big is the mess with snmp on cable modem. You always first perform snmp walk in order to discover interfaces and then read the values for those interfaces. As cable modem can bundle more DS channels, one time you can have one and other time you can have N+1 DS channels = interfaces. All in all I don't believe that there is something perfect out there when it comes to tracking huge number of cable modems so I would like to know is there any "snmp framework" that can be exteded and how did you (or would you) solve this problem. Thank you.

15 16

Script for NAT timeout detection
by Max Tulyev 30 Sep '15

30 Sep '15

Hello All, I have some devices connected under NAT that is not under my control. Is there some software/script to detect NAT session timeout to adjust keepalives? Thank you!

1 0

Re: Experience on Wanguard for 'anti' DDOS solutions
by Ramy Hashish 30 Sep '15

30 Sep '15

> > > Date: Tue, 11 Aug 2015 08:14:54 +0200 > From: "marcel.duregards(a)yahoo.fr" <marcel.duregards(a)yahoo.fr> > To: nanog(a)nanog.org > Subject: Re: Experience on Wanguard for 'anti' DDOS solutions > Message-ID: <55C992DE.3020906(a)yahoo.fr> > Content-Type: text/plain; charset=windows-1252; format=flowed > > anybody from this impressive list ?: > > https://www.andrisoft.com/company/customers > > -- Marcel > > > Anybody here compared Wanguard's performance with the DDoS vendors in the market (Arbor, Radware, NSFocus, A10, RioRey, Staminus, F5 ......)? Another question, have anybody from the reviewers tested the false positives of the box, or experienced any false positive incidents? Thanks, Ramy

4 7

Security release scheduling
by Harlan Stenn 29 Sep '15

29 Sep '15

I'm looking for some general "calendar" help to use for our security release scheduling process. Something that usefully accounts for clients all over the world. By "usefully accounts" I mean that we want to be able to have reasonable confidence that we're not going to pick a public release date that is a national holiday for one country, and we're also not going to avoid a date because it's "let's order pizza" day somewhere else, but the purpose of the holiday is obscured because of language translation issues. I figure this is something others must have solved, and I'm hoping some folks on this list might be able to offer me some pointers. -- Harlan Stenn <stenn(a)nwtime.org> http://networktimefoundation.org - be a member!

3 5