[07:54] *** reardencode has joined #arpnetworks [11:32] *** brycec is now known as bryces_mom [11:32] *** bryces_mom is now known as brycec [18:39] *** mus1cbox has joined #arpnetworks [18:39] can anyone think of why all of a sudden i started getting port 22: Connection refused when trying to ssh into my vps? [18:39] i haven't made any recent pf rule changes, and i can ping it [18:45] *** dj_goku_ has joined #arpnetworks [18:45] *** dj_goku_ has quit IRC (Changing host) [18:45] *** dj_goku_ has joined #arpnetworks [18:53] *** dj_goku has quit IRC (*.net *.split) [19:14] *** novae has left [19:24] linux? [19:24] some linux are set up with an autothrottle... too many failures and the port is shut down for a while. [19:24] that's part of why I don't run sshd on 22 any more [19:24] I use a high port [19:25] it's too expensive to do a full netscan on high ports to see if there's an sshd [19:25] when so many people run them on 22 [19:30] i don't think it usually connection refuses, i think it usually just accepts and disconnects? [19:30] there may be ssh rate limit though [19:32] mus1cbox: http://support.arpnetworks.com/kb/main/is-there-a-firewall-filter-rate-limit-or-similar-device-applied-to-my-traffic [19:33] hmm that's per ip, so he'd have to be doing 15 connections within 60 seconds from his ip to hit that. [19:35] you can actually easily configure opensshd to listen on multiple ports too [19:41] Yup [19:42] I just stopped listening to 22 because I was tired of, as Steve Gibson puts it, listening to the "background radiation" of the net [19:43] i prefer ip acl's. [19:44] if I ever knew where I was sshing from... sure. [19:45] well yeah it doesn't work if you ssh from random locaitons [19:45] "nomad" is my middle name [19:45] which looks weird on my passport yes. [19:46] then maybe running on port 443 would help you [19:47] yeah, I actually do that for one box [19:47] so I can tunnel through https firewall [19:47] i'm dumping on an unused ip [19:47] i haven't seen anything yet [19:47] CONNECT some.box:443 [19:47] dropbears easy bouncing can be handy [19:48] socat can do it on the command line :) [19:50] telnet scan [19:50] from turkey. [19:51] then sip scan from US [19:52] open sip server is scarier than open ssh server. [20:02] *** dj_goku_ has quit IRC (Ping timeout: 245 seconds) [20:07] *** dj_goku has joined #arpnetworks [20:15] *** dj_goku has quit IRC (Ping timeout: 246 seconds) [20:31] *** dj_goku has joined #arpnetworks [20:31] *** dj_goku has quit IRC (Changing host) [20:31] *** dj_goku has joined #arpnetworks [20:42] *** dj_goku has quit IRC (Read error: No route to host) [20:47] *** dj_goku has joined #arpnetworks [20:47] *** dj_goku has quit IRC (Changing host) [20:47] *** dj_goku has joined #arpnetworks [20:49] Does any of this mean my unmanaged / dumb switch has spanning tree? 802.3, 802.3u, 802.3ab, 802.3x, 802.1P [20:49] also 802.1P QoS [21:04] *** dj_goku has quit IRC (Ping timeout: 244 seconds) [21:07] *** dj_goku has joined #arpnetworks [21:07] *** dj_goku has quit IRC (Changing host) [21:07] *** dj_goku has joined #arpnetworks [21:12] don't think so [21:13] having qos seems curious though [21:15] http://en.wikipedia.org/wiki/IEEE_802.1D [21:15] IEEE 802.1D :: 802.1D is the IEEE MAC Bridges standard which includes Bridging, Spanning Tree and others. It is standardized by the IEEE 802.1 working group. It includes details specific to linking many of the other 802 projects including the widely deployed 802.3 (ethernet), 802.11 (Wi-Fi) and 802.16 (WiMax) standards. VLAN (virtual LAN) is not part of 802.1D, but specified in 802.1Q. Publishing history: 1990 — Original publication... [21:15] think that's what you're looknuig for [21:31] mercutio: thanks [21:32] mnathani_: you shouldn't need stp anyway. [21:38] I like loop detection / automatic blockiing [21:39] does it do snmp? [21:39] doubt it [21:39] maybe you can trigger on high packet counts. [21:39] i suppose you could awlays get a manged switch [21:39] it cost like $35 - 8 port gigabit unmanaged [21:39] i'm using a cheap managed switch that has stp [21:39] brand? [21:41] edgecore [21:42] ECS2000-26T [21:42] there's a few similar ones to that though [21:43] fanless 24 port gigabit+2 sfp [21:43] low power usage, minimal management [21:43] http://www.edge-core.com/ProdDtl.asp?sno=393&ECS4210-28T [21:43] I was going to guess ^ [21:44] i think the one you linked is newer [21:46] http://www.amazon.com/Cisco-SG200-26-Ethernet-Mini-GBIC-SLM2024T/dp/B004GHMU5G/ref=sr_1_2?ie=UTF8&qid=1423719865&sr=8-2&keywords=26++port+managed+switch [21:46] Amazon: "Cisco SG200-26 Gigabit Ethernet Smart Switch with 24 10/100/1000 Ports and 2 Combo Mini-GBIC Ports (SLM2024T)" [21:46] i think that does stp [21:47] maybe the 8 port one does even [21:50] oh i can do sflow [21:52] huh it has upnp too [21:52] why would upnp be ona layer 2 switch? [21:54] wow it even has dual firmware versions on it [22:01] http://www.edge-core.com/qapage.asp?sno=138 [22:01] that's kind of cool [22:01] not that i need it [22:04] your Amazon switch: Shipping: Currently, item can be shipped only within the U.S. [22:04] which item was that? [22:04] Cisco SG200-26 Gigabit Ethernet Smart Switch [22:04] there's cheap ram on amazon atm btw [22:04] ahh [22:04] did you want that many ports? [22:05] 16 should be plenty [22:05] did you want sfp? [22:05] no need for sfp [22:06] http://www.amazon.com/TP-LINK-TL-SG3210-10-port-Pure-Gigabit-1000Mbps/dp/B006B7R3YC/ref=sr_1_11?ie=UTF8&qid=1423721081&sr=8-11&keywords=managed+switch [22:06] Amazon: "TP-LINK TL-SG3210 10-port Pure-Gigabit L2 Managed Switch, 8 10/100/1000Mbps ports, 2 Gigabit SFP slots" [22:06] this switch is cheaper [22:06] however my mikrotik came with one sfp [22:06] That's what she said!! [22:06] dunno if that hips to you [22:06] it doesn't ship to me [22:06] you can use direct attach cables for like $10 [22:06] but limited length [22:06] so yeah there's a few options for cheapish managed switches now [22:07] they usually have terrible interfaces [22:07] but if you just setup and forget it's probably a non issue really [22:07] this is the one I have now: http://www.amazon.com/dp/B00A121WN6/ref=psdc_281414_t3_B006B7R3YC [22:07] Amazon: "TP-LINK TL-SG108 8-Port 10/100/1000Mbps Desktop Gigabit Steel Cased Switch, IEEE 802.1p QoS, Up to 72% Power Saving" [22:08] it used to be that all the managed switches had fans [22:08] which put me off [22:08] because tehy're always tiny fans [22:09] that has tiny buffer [22:09] you'll probably find most managed switches have slightly bigger buffers [22:10] and it used to be only netgear had cheap managed switch [22:10] then they had a newer version which was worse [22:11] whats the highest throughput one can expect across a gigabit link - server to server? [22:11] i get a little over 970 megabit i think [22:11] with linux to linux [22:11] but i disable tcp time stamps [22:11] but yeah with 1.5k mtu it's around 970 megabit. [22:11] i seem to recall at least. [22:12] @wa 970 megabits per second to megabytes per second [22:12] some ethernets do lower [22:12] convert 970 Mb\/s (megabits per second) to megabytes per second;121.3 MB\/s (megabytes per second);0.97 Gb\/s (gigabits per second);9.7×10^8 b\/s (bits per second);~~ 0.78 × OC24 speed ( 1.244×10^9 b\/s );~~ 0.97 × 1000BASE-T speed ( 1 Gb\/s );~~ OC18 speed ( 9.331×10^8 b\/s );information rate;[time]^(-1) [information];Time to transfer 1 gigabyte:, ->8.2 seconds, ->0.14 minutes;Time to transfer 1 terabyte:, ->8247 seconds, ->137 minu [22:12] err some cards [22:12] [ 4] 0.0-10.0 sec 1.09 GBytes 938 Mbits/sec [22:12] this is one random test [22:12] maybe i had higher mtu [22:13] @wa 938 megabits per second to megabytes per second [22:13] convert 938 Mb\/s (megabits per second) to megabytes per second;117.3 MB\/s (megabytes per second);0.938 Gb\/s (gigabits per second);9.38×10^8 b\/s (bits per second);~~ 0.94 × 1000BASE-T speed ( 1 Gb\/s );~~ OC18 speed ( 9.331×10^8 b\/s );~~ 1.2 × FireWire (IEEE 1394b) 800 speed ( 786432 kb\/s );information rate;[time]^(-1) [information];Time to transfer 1 gigabyte:, ->8.5 seconds, ->0.14 minutes;Time to transfer 1 terabyte:, ->8529 se [22:13] i used to think ethernet had higher latency than it does. [22:13] but a lot of it's the cards, computer etc. [22:14] like you can do 50 micro seconds latency for ethernet [22:14] but it's still common to see over 0.1 msec [22:15] on intel cards changing ethtool can help [22:15] and linux's scheduling seems to help with ping -f [22:15] realtek don't do colaescing so lower delay, and higher overhead. [22:16] but anyway, at high speeds it's easy to get a drop in performance from packet loss [22:16] and larger queue sizes can decrease the chance of that happening, but can also increase jitter [22:17] but you can use fq_codel in linux to not go faster than gig and so point to ponit is fine [22:17] but multi point to point can still suck [22:20] it only matters if you're sharing between file server and internet on the pipe [22:20] and you can always just rate limit file server to 900 megabit or something [22:21] http://www.amazon.com/Cisco-SG200-26-Ethernet-Mini-GBIC-SLM2024T/dp/B004GHMU5G/ref=sr_1_2?ie=UTF8&qid=1423719865&sr=8-2&keywords=26++port+managed+switch [22:21] Amazon: "Cisco SG200-26 Gigabit Ethernet Smart Switch with 24 10/100/1000 Ports and 2 Combo Mini-GBIC Ports (SLM2024T)" [22:21] this says it ships to me [22:21] oh [22:21] it doesn't link the 8 port [22:21] i mean the $88.99 one [22:22] adn it seems to suggest it still supports stp on cisco's site [22:22] but amazon comments semeed to suggest annoying firmware issues [22:24] http://www.amazon.com/NETGEAR-ProSAFE-GS108T-Gigabit-1000Mbps/dp/B003KP8VSK/ref=pd_cp_e_2 [22:24] Amazon: "NETGEAR ProSAFE GS108T 8-Port Gigabit Smart Switch 10/100/1000Mbps" [22:24] even this says stp support [22:25] lol @ "2)Breaking UDP is unacceptable, as its widely used." [22:25] That's what she said!! [22:25] but it's netgear so it may be crap [22:25] yeah i hadn't notice that when i mentioned it mnathani_ :) [22:25] i assumei t's one of their linksys products. [22:26] why would they deliberately cheapen their brand by using the cisco name on inferior products? [22:26] i dunno [22:26] do you remember how bad linksys modems were? [22:26] maybe they weren't around there [22:26] but they were terrible here. [22:26] but the linksys phones were fine. [22:27] all I seem to recall Linksys related were there wrt54 line of wireless routers [22:27] newegg rates that netgear switch low [22:27] the ones that overheated? [22:27] and people ranted and raved about being able to run custom firmware. [22:27] the default firmware sucked :/ [22:28] tp-link routers have terrible firmware too. [22:28] but their hardware seems to be "surprisingly good" [22:28] and their price is always great. [22:29] i took a gamble with my switch [22:29] there were like no reviews around [22:33] http://www.amazon.com/TP-LINK-TL-SG108E-8-Port-Gigabit-Tag-Based/dp/B00K4DS5KU/ref=sr_1_33?s=pc&ie=UTF8&qid=1423722704&sr=1-33 [22:33] Amazon: "TP-LINK TL-SG108E 8-Port Gigabit Easy Smart Switch with 8 10/100/1000 Mbps RJ45 Ports, MTU/Port/Tag-Based VLAN, QoS and IGMP" [22:33] that says it has loop protection too [22:33] hangon isn't that what you had [22:33] TP-LINK TL-SG108 [22:34] no E at the end [22:34] ahh [22:34] yeh so it still has short queue length [22:34] but it allows port mirroring and loop protection [22:35] the one you linked? [22:35] or the one I have [22:35] 108E [22:35] there's table down the bottom [22:35] it includes your one too [22:35] it doesn't have a web based gui too [22:35] i don't think it supports lacp either [22:35] i don't know if you want to do lacp [22:36] http://www.amazon.com/dp/B009LEJJM6/ref=psdc_281414_t3_B00K4DS67C [22:36] Amazon: "TP-LINK TL-SG2216 16-Port Gigabit Smart Switch with 2 Combo SFP Slots, 802.1Q VLAN, L2/L3/L4 QoS, IGMP Snooping, Port Security, Storm Control, Web-based Management" [22:36] what about this one? [22:37] I like that one [22:37] managed, gigabit, under $200 [22:37] it also does port mirroring [22:37] and snmp [22:38] lacp [22:38] i can't see sflow support :/ [22:39] is sflow kind of like netflow? [22:39] yeah [22:39] except it's not usually every packet [22:39] oh rmon is like sflow too apparently [22:40] oh but it doesn't do the useful groups :/ [22:41] can windows do lacp / link aggregation [22:41] yeah [22:42] but you need two connections normally [22:42] server OS only? [22:42] don't think so [22:42] http://hardforum.com/showthread.php?t=1762818 [22:42] so yeah you need proper network drivers. [22:43] oh the switch can store a network key :) [22:43] for ssh [22:43] nice [22:44] http://www.tp-link.com/resources/document/TL-SG2216_V2_UG.pdf [22:44] hmm it can do dhcp filtering too [22:47] the doc / manual is quite extensive [22:48] they're all like that [22:48] explains stuff + theory with diagrams etc [22:48] one guy was complaining about vxworks having security vulnerabilities [22:49] but i think most of them are like that too [22:49] oh my switch has ssh too [22:49] Welcome to Vitesse Command Line Interface (v1.0). [22:49] dunno what that is :) [22:53] FWIW I have a TP-Link TL-SG2424 I've been quite happy with. [22:53] is that the same series? [22:53] (24 GbE w/4 SFP, fully managed, etc) [22:54] dyeah looks same specs but sfp [22:54] I'd say a similar series [22:54] oh and still fanless [22:54] brycec: how bad is the web interface? [22:54] mercutio: It's meh [22:55] No worse than netgear's [22:55] that's not saying anything :) [22:55] netgear are bottomo f the barrel :) [22:55] I prefer it to its commandline, but that's not saying much either. [22:55] heh [22:55] but stability is fine? [22:55] I'd disagree, but the only managed switches I've ever admin'd were Netgear (7326 and 7?24) and this TP-Link [22:56] DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (1099870606) 127 days, 7:11:46.06 [22:56] ahh you're doing snmp to it :) [22:56] (I am because otherwise I'd have to proxy to get to its web interface, but I have ssh on a machine local to it) [22:57] oh the web interface says uptime [22:57] System Uptime217d 18:37:03 [22:57] my computers definitely have lower uptime than that :) [22:57] It's crashed just once in its 1+ years. It was overloaded due to a loop I'd introduced, before I'd setup loop detection / rSTP [22:58] i've only used one buggy switch [22:58] (And that was on a previous firmware too) [22:58] and it would bug out again and again [22:58] but only when configing things [22:58] was still damn annoying [22:58] it was to do with vlan config [22:58] heh i saw my switch has new firmware, but no changelog [22:59] i'm not really racing to update it [22:59] This switch isn't doing too much, bunch of vlan tagging, igmp snooping (both v4 and v6), basic broadcast throttling and STP / loop detection (off the top of my head) [23:00] yeah most people don't even use vlans [23:00] I like the TP-link has native ipv6 support [23:00] i'm not using vlans atm [23:00] * brycec <3 VLANs [23:00] for management? [23:00] Even for such simple things as wifi network as guests, all of that ssid traffic is pushed to a dedicated vlan [23:00] hmm [23:01] yeah that's a nice idea [23:01] i wonder if i can do that [23:01] I don't see why not.. but I have no idea what equipment you have :P [23:01] tp-link ac1750 [23:03] i can't see it [23:03] i could just use separate router for guest wireless [23:04] Is this at all relevant? http://www.tp-link.com/en/article/?faqid=418 [23:04] well yeah i saw that [23:04] but i can't see anything like that in the web ui :) [23:04] i could just stick openwrt on it :) [23:04] i have it on the secondary anyway [23:04] Well then ditch the stock fw and put something like openwrt on it :p [23:05] lol [23:05] *** jlgaddis has quit IRC (Ping timeout: 250 seconds) [23:06] *** jlgaddis has joined #arpnetworks [23:13] *** vissborg has quit IRC (Remote host closed the connection) [23:17] *** vissborg has joined #arpnetworks [23:17] apparently cisco has announced 2.5 gigabit ethernet support now [23:18] http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/catalyst-multigigabit-switching/multigigabit-ethernet-technology.pdf