[01:04] *** [FBI] starts logging #arpnetworks at Tue Nov 29 01:04:28 2011
[01:04] *** [FBI] has joined #arpnetworks
[01:26] *** LT has joined #arpnetworks
[03:09] *** bGeorge has quit IRC (Quit: Bye.)
[03:14] *** bGeorge has joined #arpnetworks
[07:02] <raptelan> up_the_irons: not much of a seamless upgrade as it only has room for one more host in the vlan!
[08:57] *** HighJinx has quit IRC (Ping timeout: 252 seconds)
[09:25] *** LT has quit IRC (Quit: Leaving)
[10:26] *** HighJinx has joined #arpnetworks
[11:00] <meingtsla> Hmph. I upgrade from Debian 5 to Debian 6 and find myself unable to boot the kernel 2.6.32-5-amd64 that comes with it, but I can still boot the old kernel 2.6.26-2-amd64 :E  Wonder what changed.
[11:36] <vapor> lots
[11:36] <vapor> best bet would be a reinstall of debian 6 and start fresh
[11:47] <meingtsla> Well, I have a sysresccd in my CD drive with linux-3.0.8 and linux-3.1.0. Neither of those will boot either. And I don't seem to have a way to scroll up the boot log to see what's causing the kernel to throw up in any of these cases.
[11:49] <vapor> im not sure an apt-get upgrade/update from 5 to 6 will go through without error
[11:49] <vapor> you might just want to install fresh from 6
[11:52] <meingtsla> That would involve a disk change. I guess I could put in for that, but just trying to find another way to get around this in the meantime
[12:42] *** tubgoat has quit IRC (Ping timeout: 248 seconds)
[13:20] <up_the_irons> raptelan: i can just expand the IP block though, which is what i've always done so far (never had to renumber a customer).  so they just change their subnet mask.
[13:21] <up_the_irons> there is always 61 ppl here
[13:21] <up_the_irons> why can't i break 70?? ;)
[13:32] <RandalSchwartz> you could break 70 into 35 + 35 :)
[13:33] <up_the_irons> oh no u didn't
[13:33] * RandalSchwartz is on-site at Paypal in San Jose
[13:33] <RandalSchwartz> big talk on git, 150 people attending
[13:33] <up_the_irons> nice!
[13:33] <RandalSchwartz> and murmurs of further consulting
[13:33] <RandalSchwartz> maybe I should specialize in git now
[13:34] <up_the_irons> yeah
[13:47] * jpalmer is proposing "puppet" for the Ascendos infrastructure.
[14:26] *** kblessinggr has quit IRC (Quit: Linkinus - http://linkinus.com)
[14:27] *** Ehtyar has joined #arpnetworks
[14:32] *** tubgoat_ has quit IRC (Remote host closed the connection)
[14:34] *** tubgoat_ has joined #arpnetworks
[14:42] <mhoran> git is so hot right now.
[15:18] *** tubgoat has joined #arpnetworks
[15:20] *** tubgoat has quit IRC (Remote host closed the connection)
[15:21] *** tubgoat__ has joined #arpnetworks
[16:20] *** dj_goku has quit IRC (Read error: Connection reset by peer)
[16:26] *** dj_goku has joined #arpnetworks
[16:47] *** teneightypea has quit IRC (Read error: Connection reset by peer)
[17:01] <up_the_irons> for all of us in the US: http://americancensorship.org/
[17:02] <up_the_irons> if you haven't done so already, make a couple quick calls
[17:19] *** teneightypea has joined #arpnetworks
[18:05] *** HighJinx has quit IRC (Ping timeout: 244 seconds)
[18:26] <pjs> up_the_irons, I've been making a few calls a day :)
[18:27] <up_the_irons> pjs: nice :)
[18:37] <up_the_irons> does anyone have a Cisco ASA that can verify whether it supports SAML 1.1 in it's webvpn ?
[18:38] <up_the_irons> if you do
[18:38] <up_the_irons> conf t
[18:38] <up_the_irons> webvpn
[18:38] <up_the_irons> sso-server test-saml type saml-v1.1-post
[18:38] <up_the_irons> see if that works
[18:53] *** kbeezie has joined #arpnetworks
[18:53] *** kbeezie has left 
[19:00] <mhoran> up_the_irons: Scary. :(
[19:01] <up_the_irons> mhoran: srsly
[19:01] <mhoran> And it's so obvious that nobody voting on this bill understands how the Internet works.
[19:01] <up_the_irons> yeah absolutely
[19:01] <up_the_irons> it's madening
[19:02] <mhoran> I wonder what would happen if something like this actually went through. Would a new Internet be created? Small, private ISPs or something? Seems possible in big cities via WiMax, but I'm ont sure about across the country. Or around the world.
[19:02] <up_the_irons> we gotta get more support for peer-to-peer dns
[19:02] <up_the_irons> dns is still a critical spof that governments can tap and "lights out" a site
[19:03] <up_the_irons> mhoran: yeah, smaller internets, perhaps
[19:04] <jpalmer> is there a peer-to-peer dns proposal/RFC?
[19:04] <up_the_irons> jpalmer: i thought i saw some work on that a while back
[19:05] * jpalmer isn't quite sure how that would work..  but would be interested in reading up.
[19:05] <mhoran> Yeah.
[19:07] <up_the_irons> perhaps similar to how networks / bgp work...  announcements (domain  names?) propagate to peers.  if you don't have a domain name in your "domain table" (analagous to routing table), the resolution request goes to the default resolver (analagous to default route)
[19:07] <jpalmer> I think the security aspects are what would concern me the most.  but I do know there was a secure DNS movement using the same concepts as bitcoin..
[19:07] <up_the_irons> totally thinking out loud...
[19:07] <mhoran> And the biggest thing that pisses me off here  is that this isn't going to stop any of the offenders -- who will just bypass this whole blocking system. It's going to hurt mom and dad.
[19:07] <up_the_irons> true dat
[19:07] <jpalmer> mhoran: exactly.
[19:08] <mhoran> ... who I had to spend two hours teaching how to use Netflix on their TV over the weekend.
[19:44] *** HighJinx has joined #arpnetworks
[22:40] *** Ehtyar has quit IRC (Quit: There are two major products that come out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence.)