[00:38] *** HighJinx has joined #arpnetworks [02:11] *** HighJinx has quit IRC (Ping timeout: 244 seconds) [02:12] *** AAYUSH has joined #arpnetworks [02:18] *** Webhostbudd has quit IRC (Quit: Leaving) [02:19] *** AAYUSH has quit IRC (Ping timeout: 246 seconds) [03:42] *** ryk has quit IRC (Ping timeout: 260 seconds) [03:43] *** ryk has joined #arpnetworks [03:43] *** ryk has quit IRC (Changing host) [03:43] *** ryk has joined #arpnetworks [05:05] *** ziyourenxiang has joined #arpnetworks [05:51] *** ziyourenxiang has quit IRC (Quit: ziyourenxiang) [07:26] *** AAYUSH has joined #arpnetworks [07:26] *** AAYUSH has quit IRC (Changing host) [07:26] *** AAYUSH has joined #arpnetworks [07:30] *** ryk has quit IRC (Ping timeout: 255 seconds) [07:31] *** ryk has joined #arpnetworks [07:31] *** ryk has quit IRC (Changing host) [07:31] *** ryk has joined #arpnetworks [07:45] *** ryk has quit IRC (Ping timeout: 272 seconds) [08:36] *** AAYUSH has quit IRC (Ping timeout: 260 seconds) [09:58] *** HighJinx has joined #arpnetworks [12:12] *** milki has quit IRC (Remote host closed the connection) [12:42] *** milki has joined #arpnetworks [13:40] *** Webhostbudd has joined #arpnetworks [13:54] *** ryk has joined #arpnetworks [14:10] *** ryk has quit IRC (Ping timeout: 276 seconds) [14:10] *** ryk has joined #arpnetworks [14:10] *** ryk has quit IRC (Changing host) [14:10] *** ryk has joined #arpnetworks [14:19] *** ryk has quit IRC (Ping timeout: 268 seconds) [14:36] *** ryk has joined #arpnetworks [14:36] *** ryk has quit IRC (Changing host) [14:36] *** ryk has joined #arpnetworks [15:07] *** ryk has quit IRC (Ping timeout: 272 seconds) [16:16] *** ryk has joined #arpnetworks [16:51] *** ryk has quit IRC (Ping timeout: 244 seconds) [17:17] *** ryk has joined #arpnetworks [17:17] *** ryk has quit IRC (Changing host) [17:17] *** ryk has joined #arpnetworks [17:31] *** ryk has quit IRC (Ping timeout: 272 seconds) [17:59] *** andol has quit IRC (Quit: leaving) [18:00] *** near has joined #arpnetworks [18:18] *** Ehtyar1 has joined #arpnetworks [18:32] *** ryk has joined #arpnetworks [18:34] *** Ehtyar has quit IRC (Remote host closed the connection) [18:52] *** near has left "http://quassel-irc.org - Chat comfortably. Anywhere." [18:54] *** near has joined #arpnetworks [19:22] *** ryk has quit IRC (Ping timeout: 252 seconds) [19:30] *** ryk has joined #arpnetworks [20:10] *** near has quit IRC (Remote host closed the connection) [20:39] *** ryk has quit IRC (Ping timeout: 240 seconds) [20:52] *** ryk has joined #arpnetworks [20:52] *** ryk has quit IRC (Changing host) [20:52] *** ryk has joined #arpnetworks [21:03] *** ryk has quit IRC (Ping timeout: 252 seconds) [21:05] *** ryk has joined #arpnetworks [21:05] *** ryk has quit IRC (Changing host) [21:05] *** ryk has joined #arpnetworks [21:11] *** ryk has quit IRC (Ping timeout: 276 seconds) [21:12] *** ryk has joined #arpnetworks [21:18] is arp getting dos'ed again or is it just my vps having issues? [21:19] pinging kvr15 and my vps both give about 90% packet loss [21:19] curiously arpnetworks web site pings ok [21:24] see the network graphs [21:24] yeh i had 3 megabit peak weirdly quite a way back on the first graph [21:25] but pretty low really. 328 gig in the last year for monthly. [21:25] i just did an email [22:11] well that guy was pinging out a lot. [22:13] I too am getting 95% packetloss to my VPS on Kvr15 [22:25] *** andol has joined #arpnetworks [22:33] *** ryk has quit IRC (Ping timeout: 244 seconds) [22:43] *** ryk has joined #arpnetworks [22:43] *** ryk has quit IRC (Changing host) [22:43] *** ryk has joined #arpnetworks [22:47] *** SpaceDump has joined #arpnetworks [22:49] Morning people, anybody else experiencing packet loss? ~75% for the last one and a half hour or so... [22:53] Nevermind, looks like it's been solved. :D [22:57] mercutio: mnathani SpaceDump : a vps on kvr15 was dos'd. i was out and kept getting problem / recovery alerts. thought it might subside on its own, but it didn't. the target has been shutdown and i'm in the process of null routing the IPs. but at this point, kvr15 should be A-OK, since the target vlan is dead [22:59] milki: the network graphs won't show a DoS to anyone but the target customer (like, mercutio wouldn't know if a dos occurred by looking at his graphs, unless he's the target) [22:59] up_the_irons: I can confirm that it's no longer a problem. :) [22:59] SpaceDump: roger, thanks [23:00] another former customer :P [23:01] irc is bad for vps customers. :p [23:02] up_the_irons: well yeh i didn't think i was the target, thought i oughta check just in case though [23:03] thanks for nulling them, maybe need something automatic? [23:03] mercutio: yeah [23:03] mercutio: null routing is a bit drastic for an automatic process. you really want to vet the problem first. [23:03] but yaeh it was basically unusuable. [23:04] well [23:04] if it's 95% packet loss.. [23:04] Automatic is bad, then someone can shutdown your vps for you (well, the network).. You wouldn't like that. :] [23:04] yeh but people get kicked off if they get dos'ed anyway i thik? [23:04] even if the automatic isn't nulling but limiting them to like 20 megabit or somethign [23:04] mercutio: the thing is, it is hard to differentiate an attack vs. some other legit problem, based solely on packet loss alone [23:04] well true [23:05] that's why there are programs to detect ddos [23:05] and telnet into the router and add a community to null route [23:05] and/or block on router [23:05] i dunno why people like to get ddos'ed? [23:05] They don't. :p [23:05] err [23:05] i don't know why i said that [23:06] mercutio: but where would that program run? my setup doesn't use shared vlan's, so i wouldn't think it feasible to run a separate process for each customer [23:06] i don't know why people get such a buzz out of ddos'ing [23:06] umm switch ports sflow/netflow [23:06] or router [23:06] it reads the sflow/netflow, sees if it's something stupid [23:07] mercutio: i don't have an sflow card (and no free slots to add one). cisco is cheap about sflow too (like, it doesn't come by default ;) [23:07] up_the_irons: How often does it happen that you get a ddos today? [23:07] SpaceDump: today? [23:07] ahh [23:07] up_the_irons: nowadays [23:09] SpaceDump: it's probably the same as it always has been. just unlucky i got two in like a week. since i kill the customer when it happens, it doesn't really "pile up" as we grow [23:12] That's what I meant. It's pretty easy to handle manually. :) [23:14] "cisco is cheap about sflow too (like, it doesn't come by default ;)" <-- so cisco is expensive about sflow? ;) [23:18] jdoe: why, yes :) as in, the cheapskates don't just include it ;) [23:18] jdoe: like on Foundry,it's just there, even on the low ass end $500 switch. hardware based slow, awesome. [23:19] cisco is expensive about everything [23:19] yup [23:19] brb [23:31] this new colour schme for weechat is working much nicer [23:37] *** ryk has quit IRC (Ping timeout: 255 seconds) [23:40] still using irssi. [23:40] ... weechat looks interesting, but not compelling enough to switch. [23:40] and I remember it being ridiculously unstable. [23:41] can't get 3.8 to compile :( [23:41] otherwise, i'd try the new colors [23:41] bored. [23:57] *** ryk has joined #arpnetworks [23:57] *** ryk has quit IRC (Changing host) [23:57] *** ryk has joined #arpnetworks