- Test - lists.nanog.org

advice dealing with clean-mx
by Michael Bubb 12 Aug '15

12 Aug '15

hello I've lurked on this list for a while - I have an issue that I need help with. I work for a company that does fraud detection we host our servers on physica hardware in managed hosting datacenters (softlayer, hertzer, coresites, etc). Recently we were flagged for malware buy clean-mx. It was the IP of an haproxy loadbalancer. I followed up by following the link to clean-mx. It looked as if the score was based upon information from the following sites: http://www.malwaredomainlist.com https://www.virustotal.com http://urlquery.net When I checked the ip in question against these sites all the checks passed exceptfor one - fortinet. And fortinet indicated that it was an unknown signature - not specifically malware. So it appeared clean. I am hesitant to deal directly with clean-mx as we do not have any existing relationship and frankly a google search turns up many horror stories. I am mindful that these may be the 'stories' of frustrated fraudsters. I honestly do not know how to evaluate this situation. If clean-mx is legit then it would make sense to have a relationship with them . If they are not then how does one deal with them? thank you Michael -- Michael Bubb +1.646.783.8769 | KD2DTY Resume - http://mbubb.devio.us/res/resume.html *noli timere*

2 1

Live-streaming the Root Zone Key-Signing Key Ceremony 22
by Edward Lewis 12 Aug '15

12 Aug '15

FYI, (Apologies if you see duplicates of this message.) ICANN, as the IANA Functions Operator, will be live-streaming the Root Zone Key-Signing Key Ceremony (number 22) on Thursday, August 13. The "main" ceremony that day is scheduled to begin at 2000UTC. (This is an activity related to DNSSEC.) For more information about the event see: https://www.iana.org/dnssec/ceremonies/22 On Thursday there will be two cermonies as listed on that web page. The first ceremnoy will rotate cryptographic officer duties, basically, a change in some of the trusted community representatives participating in the key ceremonies. The second ceremony (the "main") will feature the introduction of two new Hardware Security Modules. This is the ceremony that will start at 2000 UTC. Please see the above link for more information. The live-streaming link is at the bottom of the page. (https://icann.adobeconnect.com/kskceremony)

1 0

free Tools to monitor website performance
by sathish kumar Ippani 11 Aug '15

11 Aug '15

Hi All, Thanks to all for reviewing my topic, may it is slightly off topic. We have almost 300 URL's (local and web) and we want to monitor few of them which are very critical URL's for web access and local access. I would like to know is there any free tool or software with I can use to monitor url performance in terms of response time. Which gives more information like how much time it taken to connect the server and time to load the page and total response time. Thanks in advance. -- With Regards, Sathish Ippani

12 11

Re: AT&T att.net postmaster contact needed
by Larry Sheldon 11 Aug '15

11 Aug '15

On 8/10/2015 12:43, Ken Chase wrote: > > please reply offlist, mutual customer issue. Seems like this exact question comes up pretty frequently. Maybe NANOG should consider a repository of frequent inquiries....... -- sed quis custodiet ipsos custodes? (Juvenal)

2 1

Super Core Hardware suggestions
by Ben Cornish 11 Aug '15

11 Aug '15

Hey All We are looking for suggestions for a device to act as a super Core Device / MPLS P router only. There seems to be plenty of Chassis based solutions out there that also cater for a lot more. We ideally would like a 1RU or 2RU device - Handling MPLS / IGP only * Ideally 16 to 48 ports of 10Gig - SFP * Non-blocking line rate capable on all ports. * MPLS / OSPF /BFD / ISIS / RSVP-TE capably. * Deep buffers on the ports would also be nice * With a possible option of 40Gig uplinks.. Thanks

9 8

Zayo/AboveNet
by Blair Trosper 10 Aug '15

10 Aug '15

Anyone know why Zayo still hasn't renamed the BGP AS network names for all the AboveNet ASNs? Not to poke fun at Global Crossing, but they changed Level 3's AS name in less time (which, if I recall, took over a year to happen...) I don't see Zayo using the Above.net brand anywhere lately...honest question. I know small details like the name of your AS can slip through the cracks in an acquisition THREE YEARS AGO <http://www.zayo.com/abovenet>, but still...it's been a while... http://bgp.he.net/AS6461

3 4

AT&T att.net postmaster contact needed
by Ken Chase 10 Aug '15

10 Aug '15

please reply offlist, mutual customer issue. /kc -- Ken Chase - math(a)sizone.org Toronto Canada

1 0

A simple perl script to convert Cisco IOS configuration to HTML with internal links for easier comprehension
by Jesse McGraw 10 Aug '15

10 Aug '15

All, (This is me scratching an itch of my own and hoping that it might be useful to others on this list. Apologies if it isn't) When trying to comprehend a new or complicated Cisco router configuration an old pet-peeve of mine is how needlessly difficult it is to search for a list referenced by a command, figure out what it does, then find my way back to the original command (by which time I’ve forgotten the details of the list) and figure out what it's doing with that list. So I’ve been working on a small perl script to add links within IOS configuration files, e.g. link to an access-list from the interface where it’s applied, making it easier to to follow the chain of logic with stuff like route maps or nested service policies via clicking links and using the forward and back buttons in your browser to go back and forth between command and referenced list. I know there is a lot of stuff I could add in to this (e.g. more VRF-related commands, PIX/ASA, Juniper etc). Let me know if you think of anything new or notice something I’ve done wrong , there's plenty of room for improvement and expansion to other configuration formats. Notes: Anything referenced (or potentially referenced) by something else is in bold. It makes it very easy to see where ACLs etc. start and end There's also an option in there to reformat some numbers that are hard to read (e.g. traffic shaping criteria) into more human-readable ones. Pure fluff. Surely this has been done before but I couldn't find anything in a few brief moments of searching so here we are. Files are here: https://github.com/jlmcgraw/networkUtilities At the very least you'll need iosToHtml.pl, pointers.pl, pointees.pl, and human_readable.pl and several CPAN modules (see setup.sh for easy ways to install them under Debian-derived Linux. I haven't tested this at all under Windows or OS X) -Jesse

4 5

Measuring DNS Performance & Graphing Logs
by Zayed Mahmud 10 Aug '15

10 Aug '15

Hello! This is my first message to NANOG's mailing list. I hope someone can help me. I was wondering which tool(s) can I use to measure the performance of my 3 DNS servers (1 primary, 1 secondary, 1 solely cacheDNS)? From the stats I would like to know if my DNS server is serving as it should be or if any of it's options are set inappropriately and others alike. I looked for a while but could not find any. Any help would be highly appreciated. I am running bind9 on UNIX platform. Question 2) I would also like to know how can I graph my DNS logs? And how can I integrate it to my CACTI server as well? I couldn't find any suitable plugin. Any suggestion? -- -- Best Regards, *Zayed Mahmud* *Senior Core & IP Network Team,* *Banglalion Communications Limited, Bangladesh.*

11 11

Strange traceroute result to VM in EC2, Singapore
by Glen Kent 08 Aug '15

08 Aug '15

Hi, I have two internet connections and can reach the VM in EC2, Singapore over either connection. I am doing an experiment for which I traceroute to this VM from the two different internet connections (to really get an idea of the number of hops between my local machine and the VM over the 2 different connections) I have attached the output of my two traceroute's. While i am able to reach the exact VM when i am on one internet connection, i am not able to do the same, when am over the other internet connection. Both are broadband connections out of the same office premises. Any idea what could be happening? Thanks, Glen

7 9