swinog January 2008

swinog@lists.swinog.ch

53 participants
28 discussions

Re: Re: Re: Re: Re: Re: Re: Re: [swinog] The truth about UCEPROTECT-Blocklists
by f.jachiet＠gpstechnik.ch 29 Aug '08

29 Aug '08

Der von ihnen angeschriebene Mitarbeiter arbeitet nicht mehr bei der Firma GPS Technik AG. Bitte wenden sie sich an info(a)gpstechnik.ch oder 0041 44 732 99 77.

13 20

Graphical NetFlow AS stats tool?
by Manuel Kasper 19 Feb '08

19 Feb '08

Hello, does anybody on this list know of a free/open source tool that collects NetFlow AS aggregation records from a number of routers and produces traffic graphs per AS that show how much traffic came in from or went out to a given AS, and over which link (-> multiple upstreams/peering links)? I'm asking because I've made something like that on a whim for Monzoon Networks to help with BGP traffic engineering, and would be happy to polish it up a bit and then release it, but if the solution is already out there (and better than what I've come up with ;), I wouldn't bother. Cheers, Manuel -- Manuel Kasper Systems Engineer, Dipl. Ing. FH Monzoon Networks AG, www.monzoon.net Riedthofstrasse 124, CH-8105 Regensdorf Phone: +41 43 5000474, Fax: +41 43 5000478 mkasper(a)monzoon.net

8 10

sms_client originator patch
by Andre Keller 30 Jan '08

30 Jan '08

Hi swinoggers I'm searching for a possibility to set the originator in sms_client... (somewhere in ucp.c i asume). I saw in the mailinglist of smsclient, that Per Jessen wrote about that in August 2004. Are these patches still around? regards André

2 6

Re: [swinog] Large IP Block at Akamai?
by Matthias Leisi 29 Jan '08

29 Jan '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 | so it looks like some sort of problem between init7 and | akamai after all DNS lookups for akamaized content (example used: members.spamcop.net) from a DNS server behind an Init7 DSL line (213.144.132.248/29) returns 80.67.84.74 and 80.67.84.83, both of which time out when connected on port 80. Forwarding DNS requests through another DNS server located at Metanet (80.74.132.72/29) returns different IP addresses (212.243.221.208 and 212.243.221.214) which both work. Traceroutes to 80.67.84.74/.83 time out at Akamai: majestix:~ matthias$ traceroute 80.67.84.74 traceroute to 80.67.84.74 (80.67.84.74), 64 hops max, 40 byte packets ~ 1 router (192.168.1.254) 1.439 ms 1.069 ms 1.085 ms ~ 2 eth0.r1.mleisi.dsl.init7.net (213.144.132.249) 2.725 ms 2.645 ms 2.591 ms ~ 3 lo0.lns2.bbcs.init7.net (213.144.128.206) 8.108 ms 8.424 ms 8.019 ms ~ 4 r1.core.init7.net (213.144.128.1) 8.135 ms 8.331 ms 8.171 ms ~ 5 tix2-nap.netarch.akamai.com (194.42.48.48) 8.289 ms 8.659 ms 8.807 ms ~ 6 * * * So it's most likely Akamai who has to fix things; affected would be everybody who gets directed to 80.67.84.<some> in the Akamai CDN. - -- Matthias -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) iD8DBQFHnvaLxbHw2nyi/okRAi6qAJ9H5xRMF3215pfYWkFjiEYPfeVMLACfYuiT npo+eakMwdO6j9MXCfbJE+Y= =pyaw -----END PGP SIGNATURE-----

1 0

Problems reaching large Websites
by Mike Kellenberger 29 Jan '08

29 Jan '08

Hi all Anbody else having problems to reach large websites, such as www.microsoft.com or www.dell.com? Problems in or to the akamai network? Trying from AS13030 (Init7) here... Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

12 18

Log centralisation / mining
by Marcel Prisi 28 Jan '08

28 Jan '08

Hi all, I am looking for a good log centralisation / alerting / mining solution. I know about syslog-ng / rsyslog+phpLogCon, I'd like something more complete ... Something with a bit of realtime analysis (regexp ?) and correlation ... and a nice interface where you could get some useful details fast ... What solution do swinoggers use ?? Thanks !

9 14

RE: [swinog] Problems reaching large Websites
by Jérôme Tissières 28 Jan '08

28 Jan '08

Hi, All is working good from VTX. Also with Akamai network and Akamaized content. Cheers, Jerome > -----Message d'origine----- > De : swinog-bounces(a)lists.swinog.ch > [mailto:swinog-bounces@lists.swinog.ch] De la part de Mike > Kellenberger > Envoyé : lundi, 28. janvier 2008 17:20 > À : swinog(a)swinog.ch > Objet : [swinog] Problems reaching large Websites > > Hi all > > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the > akamai network? > > Trying from AS13030 (Init7) here... > > Cheers, > > Mike > > -- > Mike Kellenberger mike.kellenberger(a)escapenet.ch > Escapenet - the Web Company Tel +41 52 235 0700 > http://www.escapenet.ch Skype mikek70atwork > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

dns1.bluewin.ch not replicating
by Mike Kellenberger 25 Jan '08

25 Jan '08

Hi all Is there a problem with dns1.bluewin.ch? Requests for domains which were recently registered with switch do not resolve... The serial number on the response supports my theory. ; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns1.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN ;; AUTHORITY SECTION: ch. 39m51s IN SOA domreg.nic.ch. helpdesk.nic.ch. ( 2008012300 ; serial 1H ; refresh 30M ; retry 4w2d ; expiry 1H ) ; minimum ; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns2.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN ;; ANSWER SECTION: bilder-floriannussbaumer.ch. 23h39m IN MX 10 hermes.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN SOA dns1.escapenet.ch. webmaster.escapenet.ch. ( 200801221 ; serial 3H ; refresh 1H ; retry 1W ; expiry 1D ) ; minimum bilder-floriannussbaumer.ch. 23h39m IN A 193.9.122.15 bilder-floriannussbaumer.ch. 23h39m IN NS dns2.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN NS dns1.escapenet.ch. Regards -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

6 10

IPS Solutions
by Olivier Beytrison 25 Jan '08

25 Jan '08

Hi there, I'd like to ask you guys what kind of IPS you are running. Currently we have a McAfee Intrushield I3000 which does his job rather well, but its maintenance cost is rather high. So we're slowly looking for a replacement. I've been looking at the new Cisco ASA serie, but their IPS have a rather low throughput (450mps for the 5530/5540 module). We currently handle a throughput of 300mps and it's still growing. So what kind of IPS are you using, what's your opinion about it ? Regards, Olivier Beytrison Network & Security Engineer HES-SO Fribourg

3 2

[Re: [swinog] IPS Solutions]
by Marvin G. 22 Jan '08

22 Jan '08

Olivier, Have a look at Tippingpoint http://www.tippingpoint.com/products_ips.html you can use the units as standalone IPS devices or together with the SMS as centrally managed environment with extended log capability. The devices are based on a special ASIC (at least the bigger ones) architecture (not intel plattform) and have for that reason very good performance. Olivier Beytrison wrote: > Hi there, > > I'd like to ask you guys what kind of IPS you are running. Currently we > have a McAfee Intrushield I3000 which does his job rather well, but its > maintenance cost is rather high. So we're slowly looking for a replacement. > > I've been looking at the new Cisco ASA serie, but their IPS have a > rather low throughput (450mps for the 5530/5540 module). We currently > handle a throughput of 300mps and it's still growing. > > So what kind of IPS are you using, what's your opinion about it ? > > Regards, > > Olivier Beytrison > Network & Security Engineer > HES-SO Fribourg > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog January 2008