| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |
| Who | What | When |
|---|---|---|
| *** | Guest86400 is now known as easymac
easymac is now known as Guest45044 | [00:27] |
| ............. (idle for 1h0mn) | ||
| Guest45044 is now known as easymac
easymac is now known as Guest19993 | [01:28] | |
| ............. (idle for 1h0mn) | ||
| Guest19993 is now known as easymac
easymac is now known as Guest49233 | [02:29] | |
| ..... (idle for 20mn) | ||
| ziyourenxiang has joined #arpnetworks | [02:50] | |
| .... (idle for 17mn) | ||
| up_the_irons | mercutio: still, i'm surprised the "engineer" hasn't heard of it from others; he must be new | [03:07] |
| mercutio | i dunno i don't have high expectations
i hardly expect "engineers" to understand mtu i think the problem is that these days a lot of people do courses and cram study and forget huge amounts of stuff | [03:09] |
| up_the_irons | i would hope they would understand MTU... if not, what makes them even qualified for the job? | [03:10] |
| mercutio | ccna? :)
knowing subnet maths | [03:10] |
| up_the_irons | i guess i haven't look at it that way... someone off the street, knowing nothing, gets CCNA, then gets a network engineer job? they still seem underqualified if they only got the CCNA
wow, don't visit #freenode-newyears (i warned you) up_the_irons wanders off | [03:12] |
| *** | Guest49233 is now known as easymac
easymac is now known as Guest16064 | [03:30] |
| mercutio | yeah you've been around a bit long
it changed :) or you're lucky and it's not like that over there so much | [03:36] |
| .... (idle for 17mn) | ||
| apparently ccna does cover mtu a bit
although it seems to suggest that routers do fragmentation | [03:53] | |
| ant | i can't remember hearing about mtu in icnd1 or icnd2
oh..there it is one more thing i forgot | [03:55] |
| mercutio | what's icnd?
oh another name for ccna? ant: would you call yourself a network engineer? tbh, i dunno how people are meant to learn the vast amounts of stuff that's relevant these days i still don't know much about node.js etc | [04:08] |
| BryceBot | BAREMETAL!!! | [04:11] |
| mercutio | and apparently it's really big these days
mercutio wonders what made byrcebot say that | [04:11] |
| ant | mercutio: icnd (interconnecting cisco networking devices) 1 and 2 are the courses which prepare for the ccna exam
mercutio: and i don't have a clue what "network engineer" would even mean | [04:14] |
| mercutio | heh | [04:15] |
| ant | btw. i think "node.js" triggers BryceBot | [04:15] |
| BryceBot | BAREMETAL!!! | [04:15] |
| mercutio | i was looking up systems engineer before | [04:16] |
| ant | node.js | [04:16] |
| BryceBot | BAREMETAL!!! | [04:16] |
| mercutio | apparently sys engineer > sys admin
i've always considered myself a sys admin but apparently sys admin now means someone who looks at graphs whereas systems engineer implements things so i assume network engineer is someone who implements networks i assume network technician is what they call someone that responds to trouble tickets it all gets pretty confusing really oh hmm, node.js isn't a baremetal thing though | [04:16] |
| BryceBot | BAREMETAL!!! | [04:18] |
| ant | well, there are some titles which are backed by certificates, like ccna/ccnp/rhce/..., so there one can assume some (minimal) knowledge. but apart from that i can call myself whatever i want | [04:20] |
| mercutio | ime ccna doesn't seem to many anything
ccnp is slightly significant though | [04:21] |
| ant | yeah. you don't need to know much to get an ccna | [04:21] |
| mercutio | and visa versa
not having it doesn't really mean you don't know things | [04:21] |
| ant | and there are also "leaked" exam questions which you can learn by hard... | [04:21] |
| mercutio | some companies like juniper or cisco certifications though
even if they only use one of them just like some places like university degrees in any field i think it just proves you have a bit of commitment | [04:22] |
| ant | imo the icna courses are also quite good to get some basic networking knowledge | [04:23] |
| ziyourenxiang | actually, according to corporate lore, that's just for HR to filter the CVs. | [04:23] |
| mercutio | heh
i must admit i don't have much experience in such areas but from what i've heard most jobs gets heaps of applicants and certifications like ccna are pretty comon but experience not so much | [04:24] |
| ziyourenxiang | CCIEs are supposed to be the prized ones. | [04:25] |
| ant | to become a ccie you actually need to know stuff and have the experience | [04:27] |
| GluffiS | ohh yes
CCIE exams are 'a bit' more complicated :D | [04:31] |
| *** | Guest16064 is now known as easymac
easymac is now known as Guest48034 | [04:31] |
| ant | mercutio: isn't it true for ipv4 that routers do fragmentation? | [04:37] |
| *** | Guest48034 has quit IRC (Quit: leaving) | [04:46] |
| ant | mercutio: or did you mean that modern implementations use pmtu discovery und thus the routers don't have much to fragment?
ant is now reading http://stack.nil.com/ipcorner/IP_Fragmentation/ | [04:52] |
| GluffiS | ip pmtu does not always work, and is not possible on udp
pmtud even | [04:56] |
| ant | according to the link i posted it depends on the application for udp | [04:57] |
| GluffiS | well, yes but the routers will never do it | [04:58] |
| robonerd | can someone here with js disabled in their browser check out www.coindev.org and tell me what the bottom left bitcoin donate button does? | [04:59] |
| ant | GluffiS: isn't pmtud always done by the host? | [05:00] |
| GluffiS | no
routers can do it also, to determine if fragmentation is needed but I would not trust pmtud :D | [05:00] |
| mercutio | exacvtly | [05:01] |
| GluffiS | at least cisco routers has options for pmtud :D
better to keep track of your mtu :) GluffiS normally builds small networks :D | [05:01] |
| mercutio | i'd like to see internet mtus go above 1.5k | [05:04] |
| ant | networks can't be too small to have mtu related problems..i remember having them at home | [05:04] |
| mercutio | yeh adsl and cable networks it's common with
dialup it was too and vpns mss clamping is well known now but it didn't used to be | [05:05] |
| GluffiS | tunneling over mpls networks is horrible :D | [05:05] |
| mercutio | mpls networks usually have jumbo frames or baby jumbo frames and so you're usually fine
over the internet is a different story | [05:06] |
| GluffiS | true...
my work is mainly off internet ;) | [05:06] |
| mercutio | are you doing mpls over the internet?
or do you have mpls connections provdided by someone else? i love it how this channel is off topic so much but generally when people have an issue someone will pay attention to them, and even then it's not that often | [05:06] |
| GluffiS | mpls providede by someone else :D | [05:08] |
| mercutio | GluffiS: yeh so they'll have jumbo or baby jumbo frames on their network
and give you 1500 mtu, right? | [05:09] |
| GluffiS | well, my findings told me that somewhere arounde 1300 was the way to go for that system :) | [05:09] |
| mercutio | oh what
how lame :/ | [05:10] |
| GluffiS | hehe :D | [05:10] |
| mercutio | l2tp over the internet is around there somewhere i think
using udp ie the old l2tp not the new one | [05:11] |
| GluffiS | l2tp v3 is nice | [05:11] |
| mercutio | v2 is more common | [05:12] |
| GluffiS | probably, but v3 has nice qos options... | [05:12] |
| mercutio | huh | [05:12] |
| GluffiS | it can copy , at least on cisco, the dscp value from the orginal packet to the tunnled packet :D | [05:13] |
| mercutio | well that's not a feature of l2tp but an implementation detail | [05:14] |
| GluffiS | probably :D | [05:15] |
| mercutio | openbsd is gaining l2tp support
but that's one of the areas that lags behind in open source / unix platforms. | [05:15] |
| GluffiS | i'm no network guru... mainly dabble around with networking, firewalls, voip and stuff
OpenBSD and networking is awesome :D their vrf implementation is really nice | [05:16] |
| mercutio | mostly
they need better vrf support :/ haha well i had a play with it | [05:16] |
| GluffiS | well, compare it to Linux :) | [05:17] |
| mercutio | heh yeah
i want to see openbgpd get more efficient but i really like openbgpd but for some reason cisco is way quicker at loading bgp tables someone benchmarked it and cisco was beating openbgpd on much lower end cpus | [05:17] |
| GluffiS | well, cisco does BGP for a living :D | [05:19] |
| mercutio | that was when used as route server
yeah but cpu sppeed is way faster so it should be possible to speed it up | [05:19] |
| GluffiS | yes, they will get there :D | [05:19] |
| mercutio | i believe that to be true
how far did you get with vrfs on openbsd btw? i was struggling to get it working right with bgp | [05:20] |
| GluffiS | i did not do anything fancy , needed a lot of diffrerent networks for some firewall migration | [05:21] |
| mercutio | https://www.ams-ix.net/downloads/ams-ix-route-server-implementations-performance.pdf
thjis is what i saw about cisco being faster with converging than openbgpd | [05:29] |
| *** | r0ni has joined #arpnetworks | [05:29] |
| GluffiS | ok
well, a ASR cisco box is expensive as hell :D | [05:30] |
| mercutio | it's still a slower cpu | [05:33] |
| GluffiS | yes
but they have spent a couple of millions in devloping the software :D | [05:33] |
| mercutio | heh
well it still means it's possible to get more efficient | [05:33] |
| GluffiS | absolutley | [05:33] |
| mercutio | which is what counts really | [05:34] |
| GluffiS | you can never solve bad code with hardware | [05:34] |
| mercutio | like when people talk about making a faster web server
it's like static web pages go at line rate on modern hardware with whatever server heh yeah to a point but yeah algorithams matter but there are limits on that note, intel have made zlib faster apparently | [05:34] |
| GluffiS | nice | [05:35] |
| mercutio | (by using more cpu instructions)
but for some reason no-one was trying to make zlib faster it seemed even though it's damn coommonn anod bottlenecks easily lbzip2/pbzip2 are actually faster than gzip on modern cpus cos they parallelise | [05:35] |
| GluffiS | hehe yes... paralelling is cruicial these days | [05:36] |
| mercutio | well with low compression values
that still compresses better than zlib yeah that's where openbsd needs to catch up :) and get rid of their giaint lock i imagine some of what makes openbgpd slower is interacting with the kernel | [05:36] |
| GluffiS | openbsd has nerver been fast ;) | [05:37] |
| ziyourenxiang | fast, secure, cheap - choose two. :-) | [05:37] |
| GluffiS | it's usuually just one :) | [05:39] |
| mercutio | heh
openbsd is pretty fast for UP stuff really | [05:41] |
| GluffiS | i acutually had a beer with Theo Da Raadt 10 yeras ago or so :D | [05:47] |
| mercutio | what was he like | [05:47] |
| GluffiS | well, regular nerd :) a bit nerdier than most | [05:48] |
| mercutio | he seems like he has the right attitude towards things in a way to me | [05:48] |
| GluffiS | yes | [05:48] |
| mercutio | unlike rms etc :/
yeah omg | [05:48] |
| GluffiS | stallman feels like more of a clown | [05:48] |
| mercutio | looking at openbsd hackathon photos makes me feel less geeky :/ | [05:48] |
| GluffiS | hehe | [05:48] |
| mercutio | i've met rms heh
i didn't stick around though he wasn't very interesting | [05:48] |
| GluffiS | there were a discussion regarding bugfixing on that event and Alan Cox asked why Theo did not use the built in debugger in GCC, 'It to slow, its faster to just read the 180mb of code, then you might find something else to fix' | [05:50] |
| mercutio | haha
i hated gcc's debugger when i first tried it i ended up just using printf :/ | [05:50] |
| GluffiS | hehe | [05:50] |
| mercutio | but then i used it for backtraces | [05:51] |
| GluffiS | havn't written C since school :P | [05:51] |
| mercutio | i haven't done much C recently
trying to get back into it | [05:51] |
| GluffiS | well, I fixed some kernel stuff ages ago when struggeling with the nvidia drivers :D | [05:51] |
| mercutio | cool | [05:52] |
| GluffiS | never submitted the patch though | [05:52] |
| mercutio | i know how that is
i fixed s/pdif on audio driver on openbsd err added s/pdif support but never submitted anything | [05:52] |
| GluffiS | :D | [05:52] |
| mercutio | for cmi8738
i just wanted to be able to listen to music | [05:52] |
| GluffiS | this happened on a friday evening with a lot of cursing | [05:52] |
| mercutio | i ended up taking code from netbsd
iirc and i was surprised i managed to do it :) | [05:53] |
| GluffiS | hehe | [05:53] |
| mercutio | hmm i added higher initcwnd support to openbsd before it wsa implemented too
but that was pretty easy | [05:54] |
| GluffiS | hehe | [05:54] |
| mercutio | and reduced the initial retransmit timeout
hmm i wonder if openbsd has decreased that yet linux has now for some reason people pay more attention to the initial window size thing, when both of them were proposed by google at around the same time basically normally there's a 3 second timeout in retransmits in initial packets and it can be safely decreased to 1 second these days saving a couple of seconds easy to reproduce with 5% packet loss | [05:55] |
| GluffiS | :D | [05:56] |
| mercutio | and the difference can be noticable
it only matters when you have packet loss in the beginning of connections though | [05:56] |
| GluffiS | and no one really cares :D | [05:57] |
| mercutio | i dunno, dsl networks here had 5 to 15% packet lsos for a while
that's how i got interested i dunno how common it is i imagine it's still common in places like india and happens on some wifi connectinos at long distance | [05:57] |
| GluffiS | people with dlink wifi equipment is probably interested
must be the crappiest piece of network hardware I ever bought | [06:01] |
| mercutio | there's actually more stuff that can be improved for wireless networks
normal tcp/ip congestion control doesn't work that well with the variable latency variance of wifi freebsd's got a new algoritham that's meant to work better in such situations but i haven't tested what it's like for wifi yet CAIA Delay-Gradient (CDG) congestion control algorithm | [06:01] |
| GluffiS | as soon as I get some cabling to the other side of the house I will literally set my dlink AP on fire | [06:03] |
| mercutio | ahh this is it
that bad is it? | [06:03] |
| GluffiS | yes | [06:04] |
| mercutio | you've set it to 20 mhz already? | [06:04] |
| GluffiS | use it as bridge | [06:04] |
| mercutio | i bridge for my wifi too | [06:04] |
| GluffiS | cisco 1142 in the other end :D the dlink just dies and has to be restarted | [06:05] |
| mercutio | oh
you mean you have a bridge off it | [06:05] |
| GluffiS | it just stops forwarding packets
yes | [06:05] |
| mercutio | have you tried openwrt on it? | [06:05] |
| GluffiS | it cant :(
1360 DAP | [06:05] |
| mercutio | i had a d-link 504t adsl modem
everywehere says they're crap was real stable on openwrt | [06:05] |
| GluffiS | just need a drill and some rj45 contacts :D | [06:06] |
| mercutio | one of the few adsl modems supported for adsl in openwrt | [06:06] |
| GluffiS | ok | [06:06] |
| mercutio | a bit old now though
the cpu can't keep up with adsl > 16 mbit | [06:06] |
| ziyourenxiang | you mean freebsd has such good coverage of wifi drivers that they dream up algorithms to optimize tcp/ip over wifi? :-) | [06:06] |
| GluffiS | i am thinkg of getting me a dsl wic for my 1841 router :D | [06:07] |
| mercutio | ziy: it'll help a freebsd web server send to an end user on wifi too | [06:07] |
| ziyourenxiang | ah. | [06:07] |
| mercutio | i have no idea what freebsd is like for wifi | [06:07] |
| ziyourenxiang | ziyourenxiang would love to run freebsd on his netbook. | [06:07] |
| mercutio | i only came across it cos i was wondering what was new in freebsd 10
but it's actually in freebsd 9.2 too i'm using a tp-link wireless router with openwrt but it's bridging rather than doing anything just between wifi and ethernet and my normal linux box runs the dhcp server etc well in theory iv'e acutally stopped using wifi | [06:08] |
| GluffiS | GluffiS is happy with his 1142 AP, it can do 40mhz also :D | [06:10] |
| mercutio | 3g works well enough on my cellphone
20 mhz is often more stable than 40 mhz depending on how crowded your area is it seems pretty common to have wifi issues these days though and i'd rather see everyone shift to 20 mhz | [06:10] |
| GluffiS | it's not crowded...
closest neighbour is 100m away | [06:11] |
| mercutio | oh you live rural ok | [06:11] |
| GluffiS | yes, crappy phone wires though, get 8mbit dsl only | [06:12] |
| mercutio | damn
can you get two adsl connections and bond them? | [06:12] |
| GluffiS | nope | [06:12] |
| mercutio | single line to the house?
is it adsl1 or adsl2+ at 8 mbit? | [06:12] |
| GluffiS | well, I guess I can get 12-18mbit on my line acutally
2+ | [06:13] |
| mercutio | ahh ok
12 mbit is ok | [06:13] |
| GluffiS | my ISP refuses to deliver vdsl :D | [06:13] |
| mercutio | how come? | [06:13] |
| GluffiS | they haven't upgraded the dslam yet | [06:14] |
| mercutio | you may not get much more downstream, but you'd get more upstream at least
ahh here having vdsl available means fibre fed | [06:14] |
| GluffiS | ahh | [06:15] |
| mercutio | not having vdsl available means it could still be atm fed
and atm fed can mean congestion | [06:15] |
| GluffiS | fibre here is 10Mbps ethernet as slowest :D | [06:15] |
| mercutio | fibre to the dslam i mean | [06:15] |
| GluffiS | ahh
the dlsam is fibre :D | [06:15] |
| mercutio | so having a vdsl capable exchange is good
well that's a good start just they have no vdsl line cards? | [06:16] |
| GluffiS | GluffiS is in sweden, fibre is almost everywhere | [06:16] |
| mercutio | see if you can get some other people in the area to put in requests for vdsl | [06:16] |
| GluffiS | yes :D | [06:16] |
| mercutio | i'm in new zealand | [06:17] |
| GluffiS | hh | [06:17] |
| ziyourenxiang | mercutio, happy new year :-) | [06:17] |
| mercutio | a long long way way :/
haha yes it's 2014 here :/ not that it makes any diff to me i didn't een get drunk :/ sweden has good net speeds right? | [06:17] |
| GluffiS | yes
if you live in the city 100Mbps is not uncommon :d | [06:19] |
| mercutio | heh
is it gpon? | [06:20] |
| GluffiS | some ISP's even offer gig :D
nope, copper usually | [06:20] |
| mercutio | oh curious
is this like apartments? | [06:21] |
| GluffiS | but fibre is coming, mostly to new villas
yep | [06:21] |
| mercutio | apparently sweden is using something called AON
which i've never heard of it may be dated though | [06:21] |
| GluffiS | don't think it's that widespread | [06:22] |
| mercutio | i think gpon is taking off | [06:23] |
| GluffiS | yes | [06:23] |
| mercutio | CAIA Delay-Gradient (CDG) congestion control
algorithm oops http://www.swedentelecom.com/solutions/fttx-gpon/ looks lie one isp is doing gpon at least and that's curious, it came up in english :) and they doing hardware nat cool. current routers are going to struggle with gigabit speeds | [06:23] |
| GluffiS | yes... biggest ISP is still Telia, TSIC :D
TSIC are tier1 :D | [06:25] |
| mercutio | i've heard of telia | [06:25] |
| GluffiS | they are huge | [06:26] |
| mercutio | so yeah they must be big
cos i don't hear much about sweden but they're all blonde over there right? | [06:26] |
| ziyourenxiang | abba wasn't all blonde :-) | [06:27] |
| GluffiS | haha yes
they are doing stupid stuff like selling voip over adsl :) | [06:27] |
| mercutio | what's stupid about that? | [06:28] |
| GluffiS | which is interesting when you pay for POTS | [06:28] |
| mercutio | voip has some advantages over pots anyway | [06:28] |
| GluffiS | no
it hasn't | [06:28] |
| mercutio | yes, it does. | [06:28] |
| GluffiS | voip is crap :D | [06:28] |
| mercutio | can be crap | [06:28] |
| GluffiS | POTS always works | [06:29] |
| mercutio | i dunno my phone line been having issues :/
not mine | [06:29] |
| GluffiS | here it does | [06:29] |
| mercutio | my line been crackling
and i've had it somewhere else before and my parents had it once if your line crackles too bad it can go off hook randomly and then you can't receive phone calls the weird thing is my dsl is stable | [06:29] |
| GluffiS | well, when they teard down the phoneline with a woodcutting machine it went dead | [06:29] |
| *** | ese has quit IRC (*.net *.split)
plett has quit IRC (*.net *.split) | [06:30] |
| GluffiS | else , it always works | [06:30] |
| mercutio | but yeah overall pots is still more reliable than voip
ersp. with regards to power outages etc | [06:30] |
| GluffiS | even in powerouttakes :D | [06:30] |
| mercutio | well as long as you plug in a legacy phone :/ | [06:30] |
| GluffiS | voip over 3g is horrible :D | [06:30] |
| mercutio | in the dark | [06:30] |
| GluffiS | yes | [06:31] |
| mercutio | i've done voip over 3g
it was ok | [06:31] |
| GluffiS | it works...
modem over voip also kinda works | [06:31] |
| mercutio | it depends on the jitter of the provider
but i was doing it with 80 msec ping | [06:31] |
| GluffiS | :E | [06:31] |
| mercutio | on 3g | [06:31] |
| GluffiS | i would never pay for voip over adsl :D | [06:31] |
| mercutio | why not i used to do it
but i use an alternatve voip provider and it had cheaper phone calls | [06:32] |
| GluffiS | well, I still have to pay for copper | [06:32] |
| mercutio | now i seem to get good value out of cellphone :/
it used to be you could cut the cost of ringing cellphones down heaps here by using voip | [06:32] |
| GluffiS | ok | [06:32] |
| mercutio | but now can get 120 minutes or something
of mixed minutes from cellphone we used to pay 79cents/minute for cellphone calls on land line | [06:33] |
| GluffiS | calling is ridiculusly cheap here | [06:33] |
| mercutio | and my cellphone plan used to be 49centres/minute to the same provider, and $1.40/minute to other networks | [06:33] |
| GluffiS | we got flatrate cellphone plans for like 25USD a month | [06:34] |
| mercutio | then voip providers were like 35 cents/minute or something | [06:34] |
| GluffiS | call anyone domestic :D | [06:34] |
| mercutio | i don't even know how much calling cellphones costs from landline here now | [06:34] |
| GluffiS | seems expensive :D | [06:34] |
| mercutio | it's 5c/min on voip and 10c/min on landline domestic as normal rate here
i didn't say it was cheap we don't have other options though :/ businesses pay like 5c/min for local calls too | [06:34] |
| GluffiS | i htink the differens between dsl only copper and dsl with pots copper is like 2USD a month | [06:35] |
| mercutio | but residential get free local calling | [06:35] |
| GluffiS | ahh | [06:35] |
| mercutio | here the difference is about $20/month i think | [06:35] |
| *** | ese has joined #arpnetworks
plett has joined #arpnetworks | [06:36] |
| mercutio | which iz nd
is nzd | [06:36] |
| GluffiS | :D | [06:36] |
| mercutio | but often there's discount of $10/month if you have tolls through your isp | [06:36] |
| GluffiS | hehe | [06:36] |
| mercutio | so it ends up being $10/month difference or such
so even as backup it's not silly | [06:36] |
| GluffiS | sweden is really cheap for calling :D | [06:36] |
| mercutio | heh
how much do phone lines cost there? it's $45 nzd here i can probably work out conversion rate you use SEK right? | [06:36] |
| GluffiS | i guess 20USD a mon
mothn yes | [06:37] |
| mercutio | that's 237.57 SEK | [06:37] |
| GluffiS | hehe | [06:37] |
| mercutio | that's just for a phone line no internet | [06:37] |
| GluffiS | yeah, around 22NZD for just phone here | [06:37] |
| mercutio | i think the cheapest naked dsl are about $60 | [06:38] |
| GluffiS | hehe | [06:38] |
| mercutio | and the cheapest DSL+POTS is about $70
to me, it's the phone line that's overcharged rather than the internet | [06:38] |
| GluffiS | i think my colleague pays like 45NZD a month for 100Mbps fiber at his house :D | [06:39] |
| mercutio | cos the thing is for $19/month you can get cellphone prepay plan for 120 minutes of calling, 1gb of data, and unlimited text | [06:39] |
| GluffiS | well, time to go to new years party :D
hehe | [06:39] |
| mercutio | ok
hf | [06:39] |
| GluffiS | hf | [06:39] |
| mercutio | heh | [06:39] |
| *** | heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer ziyourenxiang has quit IRC (Quit: ziyourenxiang) | [06:53] |
| ese has quit IRC (Read error: Connection reset by peer)
ziyourenxiang has joined #arpnetworks ziyourenxiang has quit IRC (Client Quit) ese has joined #arpnetworks | [07:02] | |
| heavysixer has quit IRC (Quit: heavysixer)
heavysixer has joined #arpnetworks ChanServ sets mode: +o heavysixer | [07:12] | |
| m0unds | haha, that's one thing that benefits people living in geographically tiny places - cheap to deploy fast infrastructure | [07:24] |
| *** | milki has quit IRC (Ping timeout: 272 seconds)
heavysixer has quit IRC (Quit: heavysixer) heavysixer has joined #arpnetworks ChanServ sets mode: +o heavysixer qbit has quit IRC (Remote host closed the connection) qbit has joined #arpnetworks demahai has joined #arpnetworks qbit has quit IRC (Remote host closed the connection) qbit has joined #arpnetworks | [07:35] |
| qbit has quit IRC (Remote host closed the connection)
qbit has joined #arpnetworks | [07:53] | |
| demahai has quit IRC (K-Lined) | [08:02] | |
| heavysixer has quit IRC (Quit: heavysixer)
forgotten has joined #arpnetworks | [08:08] | |
| forgotten | curious if anyone has a horrible experience attempting to use IPv6 and connections to freenode. Or any irc network for that matter.
god aweful slow. barely useable. etc | [08:11] |
| m0unds | forgotten: openbsd? | [08:13] |
| forgotten | m0unds: yes. | [08:14] |
| m0unds | other people here have similar issues w/openbsd and ipv6 w/freenode | [08:14] |
| forgotten | gotcha | [08:14] |
| *** | Hien_ has joined #arpnetworks | [08:14] |
| m0unds | forgotten: which IRC client? | [08:15] |
| forgotten | irssi
even just ping6 outs to google takes 1000ms for the first response tho | [08:15] |
| m0unds | whoa | [08:15] |
| *** | milki has joined #arpnetworks | [08:16] |
| phlux | I'm doing it right now
No issues | [08:17] |
| *** | ameise has joined #arpnetworks | [08:17] |
| m0unds | you could try using /set server_connect_timeout to 5min to see if that prevents you from timing out in irssi, but that sounds like something else is screwy if it's taking 1 sec to get a response from google
phlux: are you using openbsd? | [08:17] |
| phlux | Ah, no
FreeBSD | [08:17] |
| m0unds | same here, no problems either
(freebsd) | [08:17] |
| forgotten | digging thru irc logs that google finds | [08:19] |
| *** | heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer CaZe`_ has joined #arpnetworks Hien has quit IRC (Ping timeout: 240 seconds) RandalSchwartz has quit IRC (Ping timeout: 240 seconds) staticsafe-znc has quit IRC (Ping timeout: 240 seconds) twobithacker has quit IRC (Ping timeout: 240 seconds) ant has quit IRC (Ping timeout: 240 seconds) NiTeMaRe has quit IRC (Ping timeout: 240 seconds) xiphias has quit IRC (Ping timeout: 240 seconds) CaZe` has quit IRC (Ping timeout: 240 seconds) xiphias has joined #arpnetworks ameise is now known as ant xiphias has quit IRC (Changing host) xiphias has joined #arpnetworks | [08:20] |
| forgotten | yeah right now i have like 50 to 75 percent packet loss on ipv6 :(. according to "mtr -6 www.google.com"
can't seem to find anything related on the web | [08:31] |
| *** | staticsafe-znc has joined #arpnetworks
NiTeMaRe has joined #arpnetworks | [08:33] |
| heavysixer | anyone seen up_the_irons ? | [08:35] |
| toddf | never in person ;-) | [08:36] |
| *** | lteo has quit IRC (Ping timeout: 245 seconds) | [08:36] |
| heavysixer | heh | [08:37] |
| *** | lteo has joined #arpnetworks | [08:37] |
| forgotten | lteo: lol | [08:38] |
| *** | NiTeMaRe has quit IRC (Ping timeout: 240 seconds) | [08:40] |
| twobithacker has joined #arpnetworks | [08:47] | |
| m0unds | forgotten: are you using the default /64 or did you have your /48 set up? | [08:55] |
| *** | xiphias has quit IRC (Ping timeout: 240 seconds)
xiphias has joined #arpnetworks xiphias has quit IRC (Ping timeout: 240 seconds) staticsafe-znc has quit IRC (Ping timeout: 240 seconds) xiphias has joined #arpnetworks | [08:56] |
| forgotten | m0unds: default /64 | [08:57] |
| m0unds | hm | [08:58] |
| *** | xiphias has quit IRC (Changing host)
xiphias has joined #arpnetworks | [08:58] |
| m0unds | do you see packet loss if you just ping6 or mtr -6 the gateway? | [08:58] |
| forgotten | yep i get same amount to the first hop of the gateway
when going to google running it by itself instantly goes to 40%, between 40 and 50% | [08:59] |
| *** | NiTeMaRe has joined #arpnetworks
staticsafe-znc has joined #arpnetworks heavysixer has quit IRC (Quit: heavysixer) | [09:00] |
| m0unds | open a ticket - i had a similar issue last week; in my case, it was a config issue w/the redundant switch | [09:04] |
| *** | forgotte1 has joined #arpnetworks | [09:04] |
| forgotte1 | mtr is still showing 33% loss. But PF was blocking some icmp6 stuff. have that resolved.
this seems way more useable than before. i am able to type now at least lol not seeing any ipv6 releated blocks in PF. at all. | [09:05] |
| m0unds | do you still see packet loss if you temporarily disable pf? | [09:08] |
| *** | NiTeMaRe has quit IRC (Ping timeout: 240 seconds)
NiTeMaRe has joined #arpnetworks | [09:09] |
| forgotte1 | think i might have found something related
http://openbsd.7691.n7.nabble.com/4-8-current-tcpdump-pflog-unaligned-libpcap-packets-td170588.html m0unds: and yes i have it disabled now. and am getting 60% loss to the Gateway addres 1. 2607:f2f8:a768::1 65.5% 30 0.7 0.7 0.4 1.5 0.3 so now my link is probably unrelated after trying this | [09:18] |
| brycec | Well that's neat
I mtr google myself (from my Debian host) and part way throughthe second packet, ithe whole connection hangs for 6 seconds or so. Did that twice in a row fwiw forgotte1 I'm seeing packet loss sporadically, both to the gateway (55pkts, 1.7%) and to Google (70pkts 4.1%) | [09:26] |
| forgotte1 | mine will somewhat hang occationally too. which makes the loss spike higher
brycec: good to know. and that is from a debian vm ? | [09:28] |
| forgotten | my lag shows 8.02 in irssi. on the ipv6 con right now. heh | [09:29] |
| brycec | yep | [09:29] |
| forgotten | so it seems like an arp issue then. not an obsd issue. | [09:29] |
| brycec | I blame ARP's transit
brycec always plays the transit | [09:30] |
| forgotten | what host are you on? | [09:30] |
| brycec | kvr07 | [09:30] |
| forgotten | im on kvr29 | [09:31] |
| brycec | I still see more problems with Freenode than any other IRC network, so I always chalk it up to Freenode | [09:31] |
| forgotten | cept we are testing packet loss to goggle. and just the arp gateway lol
or i am | [09:32] |
| brycec | heh
The packet loss I'm seeing is highly intermittent I restarted mtr, 100 packet, no loss | [09:32] |
| forgotte1 | same here
0.0% all the way to google since i restarted it | [09:33] |
| brycec | and suddenly, loss
(through the whole chain) | [09:34] |
| forgotte1 | now seeing some loss
11% yep something is majorly screwy. those damn ubuntu servers ! :P | [09:35] |
| brycec | hopefully I'll have time to re-setup smokeping today | [09:35] |
| *** | heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer forgotte1 has quit IRC (Quit: leaving) forgotten has quit IRC (Quit: leaving) avj has joined #arpnetworks forgotten has joined #arpnetworks | [09:49] |
| ........ (idle for 36mn) | ||
| heavysixer has quit IRC (Read error: Connection reset by peer)
heavysixer has joined #arpnetworks ChanServ sets mode: +o heavysixer heavysixer has quit IRC (Client Quit) | [10:30] | |
| ..... (idle for 21mn) | ||
| CaZe`_ has quit IRC () | [10:53] | |
| .............. (idle for 1h9mn) | ||
| heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer | [12:02] | |
| ..... (idle for 21mn) | ||
| heavysixer has quit IRC (Quit: heavysixer) | [12:23] | |
| .... (idle for 18mn) | ||
| forgotten has quit IRC (Quit: leaving) | [12:41] | |
| ............. (idle for 1h0mn) | ||
| heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer | [13:41] | |
| ...... (idle for 29mn) | ||
| heavysixer has quit IRC (Quit: heavysixer) | [14:10] | |
| heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer | [14:15] | |
| .... (idle for 15mn) | ||
| heavysixer has quit IRC (Quit: heavysixer) | [14:30] | |
| ........ (idle for 37mn) | ||
| josephb has quit IRC (Ping timeout: 245 seconds)
josephb has joined #arpnetworks | [15:07] | |
| .......... (idle for 49mn) | ||
| lteo has quit IRC (Ping timeout: 245 seconds)
lteo has joined #arpnetworks | [15:56] | |
| robonerd | 1.93.25.234 is trying to hack me right now | [16:07] |
| .......... (idle for 45mn) | ||
| brycec | China is trying to hack a server? Unbelievable!! I've never heard of such a thing ever in my whole life. | [16:52] |
| robonerd | my first intrusion attempt :)
i sent auth log to the noc of the registered an, confirmed sshd is configured to not allow root login, now i'm conifguring pf. next i'll install fail2ban | [16:53] |
| brycec | brycec has never, ever received a response from CNNIC. Nor has it ever appeared to do any good. | [16:54] |
| robonerd | what's cnnic? | [16:55] |
| brycec | @wiki CNNIC | [16:56] |
| BryceBot | China Internet Network Information Center :: The China Internet Network Information Center (simplified Chinese: 中国互联网络信息中心; traditional Chinese: 中國互聯網絡信息中心; pinyin: Zhōngguó Hùlián Wǎngluò Xìnxī Zhōngxīn), or CNNIC, was founded as a non-profit organization on June 3, 1997. CNNIC is the administrative agency responsible for... http://en.wikipedia.org/wiki/China%20Internet%20Network%20Information% | [16:56] |
| robonerd | ah
if they don't shape up ill just block their entire ip block | [16:57] |
| brycec | Just block China. It's not like you want anything to do with them
And heck, it's only 4,940 CIDR blocks | [16:58] |
| robonerd | do you block all of china? | [16:59] |
| brycec | I'm confident that at this rate, fail2ban will take care of that for me | [17:00] |
| ......... (idle for 43mn) | ||
| mercutio | robonerd: you can disable password auth | [17:43] |
| robonerd | mercutio and go to ssh key auth? | [17:44] |
| mercutio | robonerd: yeh | [17:44] |
| robonerd | yep, i'll be getting to that after fail2ban
it's good to run both right? | [17:44] |
| mercutio | i dunno about you, but i find encrypted key with unlocking it works best for me
if i use too many passwords i'll just be tempted to write them down, or cut and paste, or type the password into the wrong place. i haven't typed any passwords into irc by accident yet though | [17:44] |
| robonerd | can't you make as many mistakes with a key file?
what if file gets corrupt or w/e | [17:45] |
| mercutio | i dunno, to my mind it makes sense to have an alpha numeric password for root
in case you need to get in via oob but for normal user it only matters if you use sudo :/ | [17:45] |
| robonerd | you kinda lost me with those last 2. catch me up? | [17:46] |
| mercutio | and from that perspective if aynone hacks your user account they can get root
so it makes more sene to me to just log in as root to do root things, and as a user to do user things. and keep them seggregated. if the file gets corrupt? files don't normally get corrupt. but in case yo lose your hard-drive you can have your key in multiple places and if it's encrypted then you just unlock it once. | [17:46] |
| robonerd | after i fail2ban_enable="Y" in rc.conf, then what? to enable fail2van with pf, please | [17:47] |
| mercutio | i assume you need to reboot, if it's in rc.conf, but there may be some way to reread it
oh i lost you sorry i am losing myself :/ too much coffee with a key file, you can encrypt or have it not encrypted if you have a key file unencrypted you can just copy it to every host you connect from, and connect with no passwrod at all if you encrypt it you have to type an unlock passphrase on the key file to connect to a remote host which is the same for all hosts you connect to with that key but if you use something like ssh-agent, you can type that unlock passphrase once, and keep reconnecting to different hosts | [17:49] |
| ..... (idle for 21mn) | ||
| brycec | <-- always surprised to learn people still use passwords for SSH auth | [18:12] |
| *** | laotzi has joined #arpnetworks
laotzi has quit IRC (Client Quit) laotzi has joined #arpnetworks | [18:17] |
| heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer | [18:26] | |
| laotzi has quit IRC (Quit: Lost terminal)
heavysixer has quit IRC (Quit: heavysixer) laotzi has joined #arpnetworks | [18:39] | |
| .............. (idle for 1h8mn) | ||
| CaZe has joined #arpnetworks | [19:47] | |
| ................ (idle for 1h19mn) | ||
| mnathani | brycec: I use keys, but what do you do when you are on a new machine, do you have to keep a copy of your key handy? Passwords are a lot more portable | [21:06] |
| ............ (idle for 58mn) | ||
| brycec | mnathani: I'm not saying never-ever-ever-ever-use passwords. There is a time, albeit briefly, for their use. In-person, freshly setup, etc. My surprise comes from those who use passwords daily, as if they were perfectly secure, etc. | [22:04] |
| *** | TheHiTCH_ has quit IRC ()
TheHiTCHO has joined #arpnetworks | [22:05] |
| brycec | Bryce's rules for basic security: Disable ssh login as root (or if you really must, key-only). If you can, disable password ssh altogether; if you cannot, at least setup two-factor. And yeah, you should probably have a passphrase on your key, and keep backup copies of your key in safe places, and while we're at it, use different keys for different machines/networks/etc. | [22:06] |
| ...... (idle for 27mn) | ||
| mercutio | you only need your public key
which you can stick on a web site or such if need be ie you can give your public key out freely and not worry about it. It's the private key you have to keep secure. what i tend to do is set a bad password, then stick key on, then change to a better password | [22:33] |
| *** | CaZe has quit IRC (Ping timeout: 245 seconds)
CaZe` has joined #arpnetworks CaZe` is now known as CaZe | [22:44] |
| .............. (idle for 1h7mn) | ||
| robonerd | can someone try to own my arp vps and see how the sec is? | [23:52] |
| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |