#arpnetworks 2012-09-06,Thu

***

eryc has joined #arpnetworks
eryc has quit IRC (Changing host)
eryc has joined #arpnetworks

easymac

i'm not down, just slow.

mercutio

50% packet loss

easymac

packet loss and all that

andol

The b.authns.bitfolk.com mentioned in http://lists.bitfolk.com/lurker/message/20120906.135551.0daee1fb.en.html seems to be at arpnetworks

mercutio

it's beyond "slow"
ie i can't ssh in yet

***

cullum has quit IRC (Remote host closed the connection)

mercutio

oh i bounced through another host which had 0% loss

***

bitslip_ has quit IRC (Ping timeout: 248 seconds)

easymac

I'm getting in just fine. Maybe whatever path you enter their network through is saturated but mine isn't.

mercutio

hmm

plett

Also working fine for me

mercutio

tracing from arp it all looks fine
weird

easymac

seems to have stabilized now.

mike-burns

My 4G connection worked fine, but the cafe wifi dropped it.

***

bitslip has joined #arpnetworks

mike-burns

mike-burns shrugs

mercutio

oh the mtr shows 25% loss now
think it must have got better
restarting it it shows 0% loss

easymac

weakass ddos

mercutio

why do you say that?
it may have just been blocked?

easymac

if it's that easy to mitigate, it's a weakass ddos
haha

[07:47]

mike-burns

Blocked? What a bunch of wimps.

[07:47]

mercutio

really you shouldn't talk about ddos like that
if anyone reads it that is doing the ddos it encourages them

[07:47]

easymac

meh
script kiddies don't need encouragement
they're all hopped up on mountain dew anyway
code red!

[07:48]

ix33

i had one slow path & one that worked OK a few minutes ago

[07:49]

easymac

ddos probably saturated one transit link or something
or a transit provider went down and network reconverged or something like that
could be anything
wonder if all my pingdom false positives for servers outside arp are related

[07:50]

mercutio

i just found this monitoring thing called nodeping
but one of the things it said it did was try from multiple locations when outage
i don't know if that's a good thing or a bad thing though
cos when there's issues from some places but not others it's still good to know

[07:52]

easymac

I can see that being true.

[07:54]

***

Ahmed has joined #arpnetworks

[07:54]

easymac

I'll check that out. It looks pretty standard.
thanks

[07:55]

***

Ahmed has left

[08:06]

........ (idle for 37mn)

mikeputnam has quit IRC (Ping timeout: 246 seconds)

[08:43]

.... (idle for 17mn)

phlux

Heh
So I started using urxvt yesterday to IRC with since Konsole doesn't display colors properly
It feels really odd using urxvt with KDE
It looks great, though!

[09:00]

...... (idle for 27mn)

***

LT has quit IRC (Quit: Leaving)

[09:27]

.... (idle for 18mn)

mikeputnam has joined #arpnetworks

[09:45]

..... (idle for 22mn)

jdoe

doesn't display colors properly?

[10:07]

phlux

yeah
Konsole wouldn't display yellow or white bg colors
(when running something with 256 color support)
urxvt does

[10:09]

***

HighJinx has quit IRC (Quit: Computer has gone to sleep.)

[10:10]

mikeputnam has quit IRC (Quit: leaving)
mikeputnam has joined #arpnetworks

[10:20]

HighJinx has joined #arpnetworks

[10:27]

....... (idle for 32mn)

mike-burns

It's amazing that there exist term emulators that get colors wrong, still.

[10:59]

milki

maybe its just a configuration issue :o

[11:02]

mike-burns

Why would such a thing even be configurable, though?

[11:03]

milki

or no one submits bug reports and just switches to a different one
sometimes i want my black to look yellow
!

[11:03]

mike-burns

Uh huh.

[11:03]

jdoe

I can't find a bug report for it, so I'm tending towards user error :P

[11:09]

milki

milki nods
classic case of pekbac probably

[11:10]

............ (idle for 59mn)

***

Ahmed has joined #arpnetworks

[12:10]

Ahmed

is there anyone from support awake?

[12:10]

mikeputnam

Ahmed: probably.

[12:19]

Ahmed

Well, I have an urgent issue... ticket #5052 and it's been HOURS since I put in the ticket, no response

[12:19]

mikeputnam

up_the_irons: ^^^

[12:20]

***

cullum has joined #arpnetworks
cullum has quit IRC (Quit: leaving)
cullum has joined #arpnetworks

[12:30]

cullum

is there some of network issue going on? i'm getting almost 100% packet loss to my VPS all of the sudden.

[12:37]

Ahmed

cullum: I think there might be. I was able to VNC into my VPS but the funny part is that it's not even connecting to the internet
And what worries me is that it's been 5 hours and nobody responded to my ticket

[12:38]

cullum

someone mentioned a DDoS in this channel earlier today...i dont think any of the admins responded to that though

[12:39]

Ahmed

the admins are up_the_irons and he's obviously AFK

[12:40]

***

cullum has quit IRC (Quit: leaving)

[12:43]

mikeputnam

no idea if it's related or not, but my $20 VPS lost it's mind at approx. 10:30am UTC-5
had to hard reboot

[12:43]

***

heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer

[12:44]

mikeputnam

first reboot since i became a customer on May 1st

[12:45]

Ahmed

mikeputnam: did the hard reboot fix it?
Because it didn't fix it for me

[12:46]

***

cullum has joined #arpnetworks

[12:53]

.... (idle for 15mn)

cullum has quit IRC (Quit: leaving)

[13:08]

mikeputnam

in my case yes

[13:11]

.... (idle for 17mn)

plett

I've seen no problems today. My smokeping graph for my ARP VPS is nice and clean

[13:28]

up_the_irons

yeah, there was a dos attack earlier; i null routed the target IP, but not all peers / transits have a null route community, so some traffic still got through
phlux: urxvt has been my fav term for many years now

[13:41]

phlux

I'm using it in KDE now..pretty awesome.
I wish I could get it to beep though
I assume something KDE-related is standing in the way

I've made a few changes weechat-related (more UTF8 stuff) but here's my most recent screenshot (I'll update when I am finished with changes): http://www.ewnix.net/~phlux/pics/Gentoo-Screenshots/KDE4/weechaturxvt.png

[13:45]

up_the_irons

Ahmed: *your* VPS was the target of a large DoS attack this morning. We null routed the IP and will keep it in place until we feel it is safe to remove. I'm sorry if you had to wait HOURS for a response to your ticket. Maybe you should take your problems to Rackspace, or EC2.
jeez, the nerve of people

[13:48]

Ahmed

Excuse me?
And how am I supposed to know the VPS was a target to a DDoS attack exactly?

[13:48]

up_the_irons

Ahmed: network graphs

[13:48]

Ahmed

And it is just OK to assume I will run to the network graph w/o even an email notification.

[13:50]

phlux

up_the_irons: I can't access the Help Desk

[13:50]

Ahmed

And maybe I "will" take all my problems elsehwere.

up_the_irons

Ahmed: thank you

Ahmed

You got it.
Will there be a prorated refund for the upfront payments?

mikeputnam

dibs on his VPS!

up_the_irons

Ahmed: yes

Ahmed

Appreciated.

mikeputnam

phlux: i can corraborate the Help Desk outage: "We're sorry, but something went wrong"

[13:53]

Ahmed

I will have to find out if there are any files on that VM that needs to be retained. I assume you can at least provide these?

[13:53]

phlux

mikeputnam: aye

[13:54]

up_the_irons

Ahmed: we don't need to notify you if your vps was shut off due to a dos attack; read the terms of service. personally, i was just about to go to bed after a very long night, and then i had to get up again because your vps was attacked, and wasted a bunch of time. I don't appreciate this, so don't be surprised if i'm not so eager to please you

[13:54]

Ahmed

Well, the "wasted" time is part of the business
Nobody said it was "Easy" ☺

[13:54]

up_the_irons

like i said, the nerve of some people

[13:55]

Ahmed

Oh well.

[13:56]

up_the_irons

Ahmed: right, and i can refuse business of people that waste my time, and make it unprofitable. difficulty has nothing to do with it.

[13:57]

Ahmed

Well, can't say that statement is not fair.

[13:58]

up_the_irons

phlux: i had that problem once before, try clearing cookies of "support.arpnetworks.com". otherwise, it's probably a Tender issue and they'll likely fix it

[13:59]

***

mnathani` has joined #arpnetworks

[14:01]

Ahmed

up_the_irons: very well then. If you go ahead and do the prorated refund and I will take my "trouble" eslewhere, that would be highly appreciated.
And FYI, the VPS was for a client of mine, not me.
And the DDoS voilates __MY__ TOS as well
Just my 2 cents.

[14:01]

milki

well, ddos does mean there is no service

[14:03]

Ahmed

I am too pissed off because of the DDoS
For nearly 2 years I had a great experience with Arp

[14:03]

milki

congrats?

[14:04]

up_the_irons

Ahmed: we appreciate your business; i was surprised to see it was your vps under fire. however, I have a zero tolerance toward dos attacks and the policy is to shutdown anyone who becomes a packet magnet. the amount of support tickets and complaints we receive when things like this happens makes it impossible to justify keeping those accounts.

[14:06]

Ahmed

And you know what? I appreciate your business too
Your statement just hit the wrong spot...

[14:07]

up_the_irons

up_the_irons needs to grab food before a 3PM meeting, and wanders off

[14:11]

milki

oo, like that other guy with the internet bullying

[14:13]

***

nestea has quit IRC (Ping timeout: 260 seconds)

[14:17]

....... (idle for 33mn)

toddf

Ahmed: some people (like randalschwartz) have multiple arp accounts. some for personal vps's and some for clients they manage vps's for. no clue if the logic will stick that it was your client not you that attracted the ddos but anyway.

[14:50]

Ahmed

toddf: Yeah... Well, what's done is done. up_the_irons made it clear despite of the conversation we had privately.
All good

[14:50]

.................. (idle for 1h26mn)

***

andol has quit IRC (Quit: leaving)

[16:17]

jdoe

... speaking of ToS, zerigo's are nuts. Anyone recommend a dns host? :P

[16:22]

pjs

jdoe, what's up with zerigo's? I don't think I've ever read them.. but I use them
and I wrote the only functioning Python API client (that I know of) for their service.. so now I'm biased :)

[16:23]

jdoe

http://www.zerigo.com/terms
the acceptable use section also applies to their dns service, not just hosting.
which is insane.

[16:24]

pjs

hah, that is a little wild

[16:27]

jdoe

they're a pretty good host, but that's crazy.

[16:29]

***

andol has joined #arpnetworks
Ehtyar has joined #arpnetworks

[16:35]

............. (idle for 1h3mn)

jdoe

anyone know of a registrar with dnssec api that isn't gandi? (they're kinda expensive)

[17:40]

jbergstroem

jdoe: i found this in my bookmarks: https://www.icann.org/en/news/in-focus/dnssec/deployment (api status unknown)

[17:49]

...... (idle for 26mn)

jdoe

api status is kinda crucial
I don't want to have to login to update ds records by hand.

[18:15]

phlux

I just host my own DNS..

[18:19]

***

cullum has joined #arpnetworks

[18:20]

..... (idle for 21mn)

jdoe

I prefer to keep personal and not-personal things separate, including "not linked by common dns servers serving no other domains"
I also don't feel like maintaining >1 dns server.

[18:41]

up_the_irons

cullum: nice domain, c0ffee.net

[18:49]

***

Webhostbudd has joined #arpnetworks

[18:55]

HighJinx has quit IRC (Quit: Computer has gone to sleep.)

[19:03]

phlux

up_the_irons: Nevermind on my OS swap issue. I think I'm going to try upgrading FreeBSD and running portupgrade -a to keep it in working order :)

[19:04]

up_the_irons

phlux: roger that

[19:12]

andol

phlux: You also have a way of modifying DS records in the parent zone? Otherwise I don't see how it has much to do with jdoe's question.
andol just realized that he responded to an hour old comment

[19:19]

phlux

ah, didn't pay attention to that
So, why doesn't this display any Kannada characters in urxvt? URxvt*font: xft:Liberation Mono:pixelsize=16:antialias=true:hinting=true:xft:Lohit Kannada

[19:20]

jdoe

name.com does ds records, but afaik only for .org, and when I asked them about an API they said "I'LL PUT THAT IN OUR DEVELOPER'S TICKET SYSTEM", and then closed the ticket about 4 months later with no comments/updates :P
internet.bs seems like a good registrar, but makes no mention of dnssec at all.
jdoe mutters.

[19:22]

phlux

unable to calculate font width for 'Lohit Kannada:slant=0:weight=100:pixelsize=18:minspace=True', ignoring.
AHA!
Does anyone know what to do with that information?

[19:22]

jdoe

curl up in the fetal position and cry?

[19:26]

phlux

already there

[19:26]

up_the_irons

phlux: yeah, when fonts don't show up, it is usually b/c they were ignored, but urxvt will still startup. it helps to start urxvt from within a separate xterm, konsole, w/e, so you can see the errors/warnings it outputs

[19:36]

phlux

well I was able to get that error to go away by passing a pixel size
however, I *still* can't see the look of disapproval in urxvt >_<

[19:36]

up_the_irons

off topic, i must say, the centos 6 "minimal" install actually has sane defaults for running services (simply 'sshd' w/o all the rpc garbage)
hah

[19:37]

phlux

I thought Lohit Kannada would fix that, but evidently not
can you see it, up_the_irons?
ಠ_ಠ
^I just see blocks with an underscore separating them

[19:37]

up_the_irons

phlux: same here, but i don't have that font in my config either
up_the_irons is picking apart "yum groupinstall base" b/c shit, base installs so much more than needed
centos needs a "minimal - server" config (not simply "minimal", which is quite minimal,yes, but man pages and cron are nice too!!)
</rant>

[19:39]

phlux

I don't know the first thing about CentOS
I never gave it a shot because I hate the name

[19:42]

mercutio

up_the_irons: debootstrap debian is just as bad.

[19:45]

up_the_irons

up_the_irons nods

[19:46]

..... (idle for 22mn)

***

cullum has quit IRC (Remote host closed the connection)

[20:08]

....... (idle for 30mn)

ix33

oh so there was a network issue then
glad there was a definite answer

[20:38]

***

ix34 has joined #arpnetworks
mardraum has left
ix33 has left
HighJinx has joined #arpnetworks

[20:47]

ix34

and thanks whoever recommended weechat on here
nice new toy

[20:49]

***

HighJinx has quit IRC (Client Quit)

[20:52]

...... (idle for 28mn)

mercutio

bah i'll try it :)

[21:20]

***

mercutio has quit IRC (Quit: leaving)
mercutio has joined #arpnetworks

[21:20]

mercutio

mm seems ok

[21:21]

ix34

i'm logged in to google talk as well with it though
which i apparently need for my new job...

[21:22]

mercutio

i use jabber for work

[21:22]

ix34

command line by any chance?

[21:23]

mercutio

it's actually quite easy to run a private jabber server
well you can use most clients
i use gajim atm
a lot of clients will do gtalk or jabber

[21:23]

ix34

right

mercutio

and with jabber you can message google

ix34

this is a python jabber plugin

mercutio

so you just setup the jabber server that then connects to google.

ix34

or connect directly to google ;)

mercutio

i used to use micq yeras back on command line
but then all your work messages go through google

[21:25]

ix34

well we try not to xmit root passwords there
but, sure.

[21:25]

mercutio

still, it's pretty easy to setup your own server, and then it doesn't go through google unless you add someone who's on google
gah, i still have wireless interference it seems like
there's someone nearby on channels 4 and 8

[21:25]

ix34

everyone there uses just google talk accounts. i have set up private jabber servers before. very good workgroup tool

[21:27]

mercutio

and someone on channel a 20 mhz
and i'm on channel 11 20 mhz
i haven't had nearby people with strong signals before, they seem to have a tp-link router, i have tp-link too
and it seems fine at close distnace, it was fie on 40 mhz too, but watching graph of signal it seems to go down sometimes
by about 20db to 30db
i thought the idea of wireless meant there were lots of channels, but channels like to be real wide :)
i can't figure out where they are even, it seems signal stays at mostly constant levels when moving around
there's not even really close physical neighbours, so i'm a bit stumped where their wireless point is
maybe they have external one with strong signal

[21:27]

ix34

can you identify other SSID's / networks?

[21:30]

mercutio

i can see their ssid
it's calld "trojan horse j2.1"
i have no idea what that means :)
maybe it's this wireless card showing drops
it was giving packet loss on windwos computer where it was being problematic
which i haevn't seen before
i've onyl seen laggy/slow wireless not actual packet drops.
and enough that it shows in windows 4 pings
i assume 20 mhz is safer

[21:30]

ix34

what wifi standard?
N?

[21:33]

mercutio

yeh
channel 1 is g
my phone is g too

[21:36]

ix34

hmm all the usb spectrum analyzers are 2.4GHz only

[21:37]

mercutio

computer has a n
2.4 ghz
it's two stories away that user having problem is
but i've used this router further away than that and been ok before

[21:37]

ix34

WOW a 5GHz USB s.a. is almost $600

[21:38]

mercutio

it's about 80 megabit one room over
i'm using inSSIDer atm
on windows
i used wifi analyzer on android as well
and there was a little bit of overlap
i dunno how 40 mhz handles overlap
i also have no idea what wireless card problem user has on their laptop
err built in
my laptop has intel and that seems slower than the atheros on my desktop

[21:38]

ix34

well at those kinds of speeds a bit of interference causes lots of inconvenience

[21:39]

mercutio

yeh
i still wonder where this router thing is

[21:40]

ix34

maybe they're modded and running high power or something

[21:40]

mercutio

yeh
still even if they are, why is there less signal loss moving around the house nad outside
than to my router or the g router
the g router drops off real quick for some reaosn
even when using g to it
it is a thomson though
i tried setting my channel to clash with theirs in hope that their channel would shift

[21:40]

ix34

i should turn in my RF geek card
last AP i bought was an airport

[21:43]

mercutio

heh
at last place i was someone had an airport
it wasn't too bad

[21:43]

ix34

i don't even know what it's doing, everything is set to 'auto'

[21:43]

mercutio

range was a little lower than this router though

[21:44]

ix34

there are a handful of the ATT wifi routers around me, but nothing causing me any trouble that i can tell

[21:44]

mercutio

it was higher than all in one modem/wireless though

[21:44]

ix34

actually i'm probably causing my neighbors grief with this setup

[21:45]

mercutio

how come?

[21:45]

ix34

it's probably doing 2.4/5 and 40MHz channels

[21:45]

mercutio

40 mhz channels is pretty common

ix34

we do 2 or 3 simultaneous video streams all the time with no hickups

mercutio

i really wish they'd just do 20 mhz better
what megabit?

ix34

at least one HD, the other are probably low

mercutio

what's that 20 megabit?