swinog

swinog@lists.swinog.ch

2916 discussions

Re: [swinog] Graphical NetFlow AS stats tool?
by Stanislav Sinyagin 04 Feb '08

04 Feb '08

of course I assume you're interested in traffic statistics per IX peer, in order to know which peerings are most effective. Of course, MAC accounfting does not tell you the origin AS of the traffic - which is more rarely required :) ----- Original Message ---- From: Stanislav Sinyagin <ssinyagin(a)yahoo.com> To: swinog(a)swinog.ch Sent: Monday, February 4, 2008 8:58:05 PM Subject: Re: [swinog] Graphical NetFlow AS stats tool? actually quite the same statistics could be obtained without Netflow, just by using MAC accounting on Cisco border routers. Torrus.org can display per-AS traffic then. ----- Original Message ---- From: Manuel Kasper <mkasper(a)monzoon.net> To: swinog(a)swinog.ch Sent: Thursday, January 31, 2008 5:30:42 PM Subject: RE: [swinog] Graphical NetFlow AS stats tool? Hello again, thanks all for your feedback - I've had a look at NfSen and JFFNMS, but couldn't figure out whether they'd do what I wanted without actually installing/configuring them. Anyway - here are some screenshots; if there's any interest, let me know. What Stan said is probably true - most of those NetFlow tools are quite focused on the respective author's specific task, and this is no exception. ;) https://neon1.net/temp/top_100_as.png https://neon1.net/temp/top_as_per_link.png https://neon1.net/temp/as_history.png Have a nice evening! Manuel _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -----Inline Attachment Follows----- _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Re: [swinog] Graphical NetFlow AS stats tool?
by Stanislav Sinyagin 04 Feb '08

04 Feb '08

actually quite the same statistics could be obtained without Netflow, just by using MAC accounting on Cisco border routers. Torrus.org can display per-AS traffic then. ----- Original Message ---- From: Manuel Kasper <mkasper(a)monzoon.net> To: swinog(a)swinog.ch Sent: Thursday, January 31, 2008 5:30:42 PM Subject: RE: [swinog] Graphical NetFlow AS stats tool? Hello again, thanks all for your feedback - I've had a look at NfSen and JFFNMS, but couldn't figure out whether they'd do what I wanted without actually installing/configuring them. Anyway - here are some screenshots; if there's any interest, let me know. What Stan said is probably true - most of those NetFlow tools are quite focused on the respective author's specific task, and this is no exception. ;) https://neon1.net/temp/top_100_as.png https://neon1.net/temp/top_as_per_link.png https://neon1.net/temp/as_history.png Have a nice evening! Manuel _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

SwiNOG-BE58 - Beer Event 58 - 4th of February 2008 @ Mama Africa / ZH
by Steven.Glogger＠swisscom.com 01 Feb '08

01 Feb '08

hi everybody sorry, i'm quite late for the registration for the next beer event (NEXT monday). anyway, the reg. deadline is on monday before noon. this time "mama africa" confirmed a temporary reservation ,-) the facts for the next event: ----------------------------- Date: 4th of February 2008 Time: starting around 18.30 o'clock Location: @ the "Mama Africa" nearby Cinema Abaton Registration deadline: 04.02.2008 11:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. if you cannot find us: call me on my mobile: +41 79 277 92 35. greetings -steven

1 0

sms_client originator patch
by Andre Keller 30 Jan '08

30 Jan '08

Hi swinoggers I'm searching for a possibility to set the originator in sms_client... (somewhere in ucp.c i asume). I saw in the mailinglist of smsclient, that Per Jessen wrote about that in August 2004. Are these patches still around? regards André

2 6

Re: [swinog] Large IP Block at Akamai?
by Matthias Leisi 29 Jan '08

29 Jan '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 | so it looks like some sort of problem between init7 and | akamai after all DNS lookups for akamaized content (example used: members.spamcop.net) from a DNS server behind an Init7 DSL line (213.144.132.248/29) returns 80.67.84.74 and 80.67.84.83, both of which time out when connected on port 80. Forwarding DNS requests through another DNS server located at Metanet (80.74.132.72/29) returns different IP addresses (212.243.221.208 and 212.243.221.214) which both work. Traceroutes to 80.67.84.74/.83 time out at Akamai: majestix:~ matthias$ traceroute 80.67.84.74 traceroute to 80.67.84.74 (80.67.84.74), 64 hops max, 40 byte packets ~ 1 router (192.168.1.254) 1.439 ms 1.069 ms 1.085 ms ~ 2 eth0.r1.mleisi.dsl.init7.net (213.144.132.249) 2.725 ms 2.645 ms 2.591 ms ~ 3 lo0.lns2.bbcs.init7.net (213.144.128.206) 8.108 ms 8.424 ms 8.019 ms ~ 4 r1.core.init7.net (213.144.128.1) 8.135 ms 8.331 ms 8.171 ms ~ 5 tix2-nap.netarch.akamai.com (194.42.48.48) 8.289 ms 8.659 ms 8.807 ms ~ 6 * * * So it's most likely Akamai who has to fix things; affected would be everybody who gets directed to 80.67.84.<some> in the Akamai CDN. - -- Matthias -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) iD8DBQFHnvaLxbHw2nyi/okRAi6qAJ9H5xRMF3215pfYWkFjiEYPfeVMLACfYuiT npo+eakMwdO6j9MXCfbJE+Y= =pyaw -----END PGP SIGNATURE-----

1 0

Problems reaching large Websites
by Mike Kellenberger 29 Jan '08

29 Jan '08

Hi all Anbody else having problems to reach large websites, such as www.microsoft.com or www.dell.com? Problems in or to the akamai network? Trying from AS13030 (Init7) here... Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

12 18

Log centralisation / mining
by Marcel Prisi 28 Jan '08

28 Jan '08

Hi all, I am looking for a good log centralisation / alerting / mining solution. I know about syslog-ng / rsyslog+phpLogCon, I'd like something more complete ... Something with a bit of realtime analysis (regexp ?) and correlation ... and a nice interface where you could get some useful details fast ... What solution do swinoggers use ?? Thanks !

9 14

RE: [swinog] Problems reaching large Websites
by Jérôme Tissières 28 Jan '08

28 Jan '08

Hi, All is working good from VTX. Also with Akamai network and Akamaized content. Cheers, Jerome > -----Message d'origine----- > De : swinog-bounces(a)lists.swinog.ch > [mailto:swinog-bounces@lists.swinog.ch] De la part de Mike > Kellenberger > Envoyé : lundi, 28. janvier 2008 17:20 > À : swinog(a)swinog.ch > Objet : [swinog] Problems reaching large Websites > > Hi all > > Anbody else having problems to reach large websites, such as > www.microsoft.com or www.dell.com? Problems in or to the > akamai network? > > Trying from AS13030 (Init7) here... > > Cheers, > > Mike > > -- > Mike Kellenberger mike.kellenberger(a)escapenet.ch > Escapenet - the Web Company Tel +41 52 235 0700 > http://www.escapenet.ch Skype mikek70atwork > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

dns1.bluewin.ch not replicating
by Mike Kellenberger 25 Jan '08

25 Jan '08

Hi all Is there a problem with dns1.bluewin.ch? Requests for domains which were recently registered with switch do not resolve... The serial number on the response supports my theory. ; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns1.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN ;; AUTHORITY SECTION: ch. 39m51s IN SOA domreg.nic.ch. helpdesk.nic.ch. ( 2008012300 ; serial 1H ; refresh 30M ; retry 4w2d ; expiry 1H ) ; minimum ; <<>> DiG 8.3 <<>> bilder-floriannussbaumer.ch ANY @dns2.bluewin.ch ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUERY SECTION: ;; bilder-floriannussbaumer.ch, type = ANY, class = IN ;; ANSWER SECTION: bilder-floriannussbaumer.ch. 23h39m IN MX 10 hermes.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN SOA dns1.escapenet.ch. webmaster.escapenet.ch. ( 200801221 ; serial 3H ; refresh 1H ; retry 1W ; expiry 1D ) ; minimum bilder-floriannussbaumer.ch. 23h39m IN A 193.9.122.15 bilder-floriannussbaumer.ch. 23h39m IN NS dns2.escapenet.ch. bilder-floriannussbaumer.ch. 23h39m IN NS dns1.escapenet.ch. Regards -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

6 10

IPS Solutions
by Olivier Beytrison 25 Jan '08

25 Jan '08

Hi there, I'd like to ask you guys what kind of IPS you are running. Currently we have a McAfee Intrushield I3000 which does his job rather well, but its maintenance cost is rather high. So we're slowly looking for a replacement. I've been looking at the new Cisco ASA serie, but their IPS have a rather low throughput (450mps for the 5530/5540 module). We currently handle a throughput of 300mps and it's still growing. So what kind of IPS are you using, what's your opinion about it ? Regards, Olivier Beytrison Network & Security Engineer HES-SO Fribourg

3 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog