#arpnetworks 2012-09-08,Sat

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***HighJinx has joined #arpnetworks [00:38]
................... (idle for 1h33mn)
HighJinx has quit IRC (Ping timeout: 244 seconds)
AAYUSH has joined #arpnetworks
[02:11]
Webhostbudd has quit IRC (Quit: Leaving)
AAYUSH has quit IRC (Ping timeout: 246 seconds)
[02:18]
................. (idle for 1h23mn)
ryk has quit IRC (Ping timeout: 260 seconds)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[03:42]
................. (idle for 1h22mn)
ziyourenxiang has joined #arpnetworks [05:05]
.......... (idle for 46mn)
ziyourenxiang has quit IRC (Quit: ziyourenxiang) [05:51]
.................... (idle for 1h35mn)
AAYUSH has joined #arpnetworks
AAYUSH has quit IRC (Changing host)
AAYUSH has joined #arpnetworks
ryk has quit IRC (Ping timeout: 255 seconds)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[07:26]
ryk has quit IRC (Ping timeout: 272 seconds) [07:45]
........... (idle for 51mn)
AAYUSH has quit IRC (Ping timeout: 260 seconds) [08:36]
................. (idle for 1h22mn)
HighJinx has joined #arpnetworks [09:58]
........................... (idle for 2h14mn)
milki has quit IRC (Remote host closed the connection) [12:12]
....... (idle for 30mn)
milki has joined #arpnetworks [12:42]
............ (idle for 58mn)
Webhostbudd has joined #arpnetworks [13:40]
ryk has joined #arpnetworks [13:54]
.... (idle for 16mn)
ryk has quit IRC (Ping timeout: 276 seconds)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[14:10]
ryk has quit IRC (Ping timeout: 268 seconds) [14:19]
.... (idle for 17mn)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[14:36]
....... (idle for 31mn)
ryk has quit IRC (Ping timeout: 272 seconds) [15:07]
.............. (idle for 1h9mn)
ryk has joined #arpnetworks [16:16]
........ (idle for 35mn)
ryk has quit IRC (Ping timeout: 244 seconds) [16:51]
...... (idle for 26mn)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[17:17]
ryk has quit IRC (Ping timeout: 272 seconds) [17:31]
...... (idle for 28mn)
andol has quit IRC (Quit: leaving)
near has joined #arpnetworks
[17:59]
.... (idle for 18mn)
Ehtyar1 has joined #arpnetworks [18:18]
ryk has joined #arpnetworks
Ehtyar has quit IRC (Remote host closed the connection)
[18:32]
.... (idle for 18mn)
near has left "http://quassel-irc.org - Chat comfortably. Anywhere."
near has joined #arpnetworks
[18:52]
...... (idle for 28mn)
ryk has quit IRC (Ping timeout: 252 seconds) [19:22]
ryk has joined #arpnetworks [19:30]
......... (idle for 40mn)
near has quit IRC (Remote host closed the connection) [20:10]
...... (idle for 29mn)
ryk has quit IRC (Ping timeout: 240 seconds) [20:39]
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[20:52]
ryk has quit IRC (Ping timeout: 252 seconds)
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[21:03]
ryk has quit IRC (Ping timeout: 276 seconds)
ryk has joined #arpnetworks
[21:11]
mercutiois arp getting dos'ed again or is it just my vps having issues?
pinging kvr15 and my vps both give about 90% packet loss
curiously arpnetworks web site pings ok
[21:18]
milkisee the network graphs [21:24]
mercutioyeh i had 3 megabit peak weirdly quite a way back on the first graph
but pretty low really. 328 gig in the last year for monthly.
i just did an email
[21:24]
.......... (idle for 46mn)
jdoewell that guy was pinging out a lot. [22:11]
mnathaniI too am getting 95% packetloss to my VPS on Kvr15 [22:13]
***andol has joined #arpnetworks [22:25]
ryk has quit IRC (Ping timeout: 244 seconds) [22:33]
ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
SpaceDump has joined #arpnetworks
[22:43]
SpaceDumpMorning people, anybody else experiencing packet loss? ~75% for the last one and a half hour or so...
Nevermind, looks like it's been solved. :D
[22:49]
up_the_ironsmercutio: mnathani SpaceDump : a vps on kvr15 was dos'd. i was out and kept getting problem / recovery alerts. thought it might subside on its own, but it didn't. the target has been shutdown and i'm in the process of null routing the IPs. but at this point, kvr15 should be A-OK, since the target vlan is dead
milki: the network graphs won't show a DoS to anyone but the target customer (like, mercutio wouldn't know if a dos occurred by looking at his graphs, unless he's the target)
[22:57]
SpaceDumpup_the_irons: I can confirm that it's no longer a problem. :) [22:59]
up_the_ironsSpaceDump: roger, thanks [22:59]
jdoeanother former customer :P [23:00]
SpaceDumpirc is bad for vps customers. :p [23:01]
mercutioup_the_irons: well yeh i didn't think i was the target, thought i oughta check just in case though
thanks for nulling them, maybe need something automatic?
[23:02]
up_the_ironsmercutio: yeah
mercutio: null routing is a bit drastic for an automatic process. you really want to vet the problem first.
[23:03]
mercutiobut yaeh it was basically unusuable.
well
if it's 95% packet loss..
[23:03]
SpaceDumpAutomatic is bad, then someone can shutdown your vps for you (well, the network).. You wouldn't like that. :] [23:04]
mercutioyeh but people get kicked off if they get dos'ed anyway i thik?
even if the automatic isn't nulling but limiting them to like 20 megabit or somethign
[23:04]
up_the_ironsmercutio: the thing is, it is hard to differentiate an attack vs. some other legit problem, based solely on packet loss alone [23:04]
mercutiowell true
that's why there are programs to detect ddos
and telnet into the router and add a community to null route
and/or block on router
i dunno why people like to get ddos'ed?
[23:04]
SpaceDumpThey don't. :p [23:05]
mercutioerr
i don't know why i said that
[23:05]
up_the_ironsmercutio: but where would that program run? my setup doesn't use shared vlan's, so i wouldn't think it feasible to run a separate process for each customer [23:06]
mercutioi don't know why people get such a buzz out of ddos'ing
umm switch ports sflow/netflow
or router
it reads the sflow/netflow, sees if it's something stupid
[23:06]
up_the_ironsmercutio: i don't have an sflow card (and no free slots to add one). cisco is cheap about sflow too (like, it doesn't come by default ;) [23:07]
SpaceDumpup_the_irons: How often does it happen that you get a ddos today? [23:07]
up_the_ironsSpaceDump: today? [23:07]
mercutioahh [23:07]
SpaceDumpup_the_irons: nowadays [23:07]
up_the_ironsSpaceDump: it's probably the same as it always has been. just unlucky i got two in like a week. since i kill the customer when it happens, it doesn't really "pile up" as we grow [23:09]
SpaceDumpThat's what I meant. It's pretty easy to handle manually. :) [23:12]
jdoe"cisco is cheap about sflow too (like, it doesn't come by default ;)" <-- so cisco is expensive about sflow? ;) [23:14]
up_the_ironsjdoe: why, yes :) as in, the cheapskates don't just include it ;)
jdoe: like on Foundry,it's just there, even on the low ass end $500 switch. hardware based slow, awesome.
[23:18]
mercutiocisco is expensive about everything [23:19]
up_the_ironsyup
brb
[23:19]
mercutiothis new colour schme for weechat is working much nicer [23:31]
***ryk has quit IRC (Ping timeout: 255 seconds) [23:37]
jdoestill using irssi.
... weechat looks interesting, but not compelling enough to switch.
and I remember it being ridiculously unstable.
[23:40]
up_the_ironscan't get 3.8 to compile :(
otherwise, i'd try the new colors
[23:41]
dr_jklbored. [23:41]
.... (idle for 16mn)
***ryk has joined #arpnetworks
ryk has quit IRC (Changing host)
ryk has joined #arpnetworks
[23:57]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)