mercutio: http://nzix.net/peers.html
static: what about it?
static: the silly visualisation thingy?
I thought it was cool
i didn't?
such a killjoy mercutio
i tried looking around at it
i can't tell what's connected to what, too much data
all it seems to say to me is that vocus is huge
the clustering is cool
so the right side of the map is new zealand
lol i totally remember phtml; fuck i'm old
i nwver understood why people didn't do cgi's in c back then.
considering the cpus were slow, and memory was limited
cgi's in perl were much easier
and perl was really slow/bloaty
it was fast enough
mercutio: http://nzix.net/nzix-map/#HIX-CITYLINK-NZ-AP%20Hamilton%20Internet%20Exchange%20%28Citylink%29,NZ
best IX in NZ right there
well id id find the web too slow in general :)
so i stuck to irc hah
i can't see it gizmo?
it's just showing the wide map
actually mod_perl wasn't too bad
mercutio: exactly
or does linking the fragment not work?
up_the_irons: ntp reminder
anyway do a search for HIX and click on it
brycec: where did we leave off? i think i swapped the conversation from my mind; need more RAM!
brain RAM
ok
i can't believe they called it hix
hix finds chix instead
whcih is tiny
hix is right below chix...
oh it didn't bring up the search results the frist time for some reason
his has less connections than plain :/
DTS is at HIX too, it's just not showing up for some reason
maybe with ufb more people will connect to it
http://www.nmix.net/
oh dear, this looks like it's from the 90s
it sure is
1997, in fact
is it meant to be 256 colour friendly
hy is there dithering in the anti aliasing
10/100 switch for servers and router conenctivity
the main peering in nz started in 99
but there was some peering before that
but gizmo will know more about that than me i imagine
http://www.nmix.net/people.html
nice graphs
The page on pricing for connecting to the NMIX is due to be updated.
so what happened to nmix?
yeah so I think it all started with "NZIX"
I even found the email post from Lindsay when it was decomissioned - http://list.waikato.ac.nz/pipermail/nznog/2001-August/003161.html
ahh
unfortunately it's a little hard to search for "NZIX" now :)
yeah
haha - http://wand.net.nz/wits/nzix/1/
we have network traces!
Capture Start (Local) Thu Nov 12 10:56:44 1998
Capture End (Local) Sun Apr 11 14:11:12 1999
Packets Captured 238 million
lolz. back when the internet was easy
do you read nznog gizmo?
yup
see the post just now?
i don't quite get it
from Dean?
i can't see any labels
yeh
i just see lots of circles with a - in the middle
the AS numbers are written in the circles
oh
it's tiny writing
at least they are when I load the PDF in google doc
and google docs won't zoom in enough
zoom in man
get better eyes
i'm at maximum zoom!
google drive the app is currently unreachable
gah
lol up_the_irons no worries, I know exactly what you mean
(Also my computer was just throwing a swapping fit)
hmm even when i sdave the image and zoom it's hard to read the numbers
brycec: haha
up_the_irons: You asked if ARP should just point at my own, I suggested ARP has its own instance unattached to my account. You asked what was needed, I said a "small" would be more than enough. (think I gave some specific specs, don't remember) Oh, and Debian Wheezy for the image.
ah ok
hmm can you print it?
it doesn't work for me
(I'll leave the ARP management user on there, I'll set it up with user-login only +sudo for management, I'll set up ntpd and apticron, then I'm hands-off just letting it run, plus updates)
roger that
brycec: think of a spiffy hostname
dingus
time
I was going to say "ntp1" bug dingus is good. So is hiccup
Also, tick, or tock
or ticktock
you could always cname ntp1 to it
he probably will, but the admin side still gets a special name...
a super scientific study of drug mentions on twitter has ruled that albuquerque is the meth capital of the us
"by a landslide"
haha
go figure people might talk about breaking bad on twitter
not naming it dingus
SPOILER ALERT
and denver is the stoner capital?
lol
JERK
try again :)
CO
yea
whatsit
up_the_irons: zeit
up_the_irons: Chronos
throbbingdumptruck
LOL
uhh
filet-o-fish
ant: YES
ant wins
I'm down with zeit
@wiki Zeit
Zeit :: Zeit (English: Time) is the third album by the German electronic music group Tangerine Dream. A double LP, it was released in August 1972, being the first release featuring Peter Baumann, who joined then-current members Christopher Franke and Edgar Froese. Overview The style of this album is slower and more atmospheric than their previous albums. Its atmospheric drone... http://en.wikipedia.org/wiki/Zeit
brycec: chronos is good too, but i like the German flair of zeit
yard-o-beef
m0unds has strange ideas on hostnames :)
tangerine dream ftw
mine are all named after pelican songs
m0unds: LOL
haha
m0unds: what aer your own boxes called?
sirius, pulse, mammoth
not quite so bad :)
also wangsmith
m0unds: tangerine dream could almost be a porn star name
hahaha, yeah
probably is a stripper's name somewhere
srsly
What /hasn't/ been used as a stripper's name?
yard-o-beef
i hope
well, maybe a male stripper's name
or filet-o-fish i guess, that'd be pretty bad too
lol
next time i go to a strip club i'm tellin' them my name is "yard-o-beef". I will report on the results.
;)
hahah
do strip clubs ask names?
Usually only when you're coming in the back door
the strippers do
i thought they were kind of impersonal places.
ahh just to get you to like them so you give them money
yup
i'd just say i was john doe probably
they always ask names, try to be all friendly and stuff
ahh ok
up_the_irons: what dif you think of acf's route-map?
mercutio: looked promising
cool.
what's "z" in hacker...
in l33t speak?
yep
1337
i think it's just z?
h4ckt3hpl4n4t
what if it had to be a number... or a-f... you might see where i'm going with this...
so like z317
lol
for zeit
yeah but i can't use 'z' in the IPv6 address :)
UP_7|-|3_1r0|\|$ 1$ 1|\|70 L337?
http://www.brenz.net/services/l337Maker.asp
maybe just ::3317 will do
just do f00f or something
hahaha
b1ff
2317
b00b5
lol
ofh it shoudl be 4 letters.
2 = z, close enough
i'm boring and just use a, b, c, d, e, f etc
zeit's IPv6 will be: 2607:f2f8:0:102::2317
upon second glance, that is as boring as anything else... bah
next time, b00b
yeah ther's no nice way to make ipv6 addresses look nice
thats what DNS is for, making ip's look nice :P
7.1.3.2.0.0.0.0.0.0.0.0.0.0.0.0.2.0.1.0.0.0.0.0.8.f.2.f.7.0.6.2.ip6.arpa. 86400 IN PTR zeit.arpnetworks.com.
I guess one part has been taken care of
It's all ready to go, i just need brycec to give me his pub key so he can login
does it have its own vlan?
heh, i'm sure people ask more technical questions here than other providers :)
it's on one of our regular VLANs
whats the max mtu supported on the dedicated nics for the backup lan?
9K
nice
i wish "the internet" supported large mtu's
up_the_irons: is there a sample /etc/sysconfig/network-scripts/ifcfg-eth1 script for CentOS for use with the dedicated NIC
my attempt to initialize the NIC: Bringing up interface eth1: Device does not seem to be present, delaying initialization.
no sample. it's just a regular NIC
the link-local that you should be able to reach is: fe80::21b:21ff:fe93:3e08
I notice pretty consistently my ssh connection drops, it could possibly be due to the internet connection I'm on but I doubt this because I've never had problems before?
also I'd like to know how this person is able to talk to my broadcast
[252089.854106] iptables denied: IN=eth0 OUT= MAC=52:54:00:27:25:50:00:0d:65:ab:c8:bf:08:00 SRC=71.6.135.131 DST=206.125.168.79 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=49532 PROTO=TCP SPT=32560 DPT=80 WINDOW=3474 RES=0x00 SYN URGP=0
wait nevermind it was blocked but still
I did not know that was even possible.
[root@cgirun ~]# ping6 -I eth1 fe80::21b:21ff:fe93:3e08
PING fe80::21b:21ff:fe93:3e08(fe80::21b:21ff:fe93:3e08) from fe80::5054:ff:feb7:223e eth1: 56 data bytes
64 bytes from fe80::21b:21ff:fe93:3e08: icmp_seq=1 ttl=64 time=1.29 ms
up_the_irons: success!
mnathani: awesome!
Guest32787: what's the other MAC?
that does indeed look weird
https://gist.github.com/paigeadele/92d7290e761e56e88a43
Gist: "https://gist.github.com/92d7290e761e56e88a43"
pretty happy with it over all
both of those give me 500 errors
Guest32787: well, to the rest of the internet, they don't know it's a broadcast. broadcast addresses are routed the same way. i don't think my core is going to deny that as a valid address even if it *is* the broadcast on your vlan. i suspect the same would happen if someone sent a packet to your network number (the all zeros subnet address)
so, *shrug*, i think it's normal
yeah I think so too
I've never setup a network this way sadly so its just unusual to me
different stuff to look for
I just decided it would be fun to start up my windows vm, and configure the network adapter to bridge my laptop's vpn adapter and see if I can configure a static v4/v6 address for it and it worked
I kinda wish it didnt' because, the vpn client connects to openvpn, which deals/pushes a config based on the CN of the client certificate
and I wish it would only allow IP settings as per that config to be allowed for that client but oh well
http://www.petros-project.com/
up_the_irons: can I possibly pay for my service for the months to come in advance?
and possibly later if necesarry on a case by case basis just pay an additional $5 for 200GB of extra bandwidth when needed?
erratic: you can just deny access to broadcast address
lots of people block it for various reasons
up_the_irons: how do I verify if my mtu setting is working when accessing the backup server?
things like: ping6 -M do -s 8972 fe80::21b:21ff:fe93:3e08%eth1 dont seem to work
you are using ipv6
you need to go smaller
mercutio: already done
28 bytes is for ipv4
ping6 fe80::5054:ff:feb7:223e%eth1 -M do -s 10500
I meant 1500, does not work
perhaps not all switches have jumbo frames enabled
not all hosts accept large pings too
just see if tcp/ip traffic works
tcpdump
and check what the mtu says
ls works in a directory when I am connected via the linklocal ssh to the backup server from my vps, but ls -l does not work.
verified using 2 different vps
not sure if it has to do with the 9000 byte mtu
set the MTU back to 1500 and things are working now
there may be a mtu issue somewhere in the middle :)
pmtu doesn't work usually
i imagine his switches are fine, adn it may be the linux host that it goes via
IIRC up_the_irons may have to set the MTU of your bridge to the backup VLAN
^
was just thinking that
lol
oh or that
Hey m0unds quick question - how much bandwidth (network/disk) does one of your cameras chew up?
um, lowest bitrate we're using is on wlan segments and that's 1mbit/sec
typical is 2mbit
That's no tooooo bad.
that's 720p @ 30ips, h264 2mbit
Was talking with a guy tasked with quoting cctv for a school
ah
(And wondered what kind of storage was required)
"hey, I know a guy..."
yeah, it's not too bad
This school ended up with 900 cameras, and they wanted all video stored off-site
Much laughing was laughed.
900 cameras at a school?
wtf
hahah
Big school I guess, maybe multiple campuses.
ah
okay, then that makes sense
i was thinking..high school or something
(I really don't know)
offsite video wouldn't be too bad, assuming offsite could mean different location within like 70km
dark fibre?
It was for some city's public schools, and the way he talked, it was for one school. But doesn't matteer.
yea
lol
School district was definitely looking to cheap out, so no fibre
ah, so magic remote video storage
Regardless, that's ~3GBps...
mnathani: for your host on kvr29, try the mtu thing again
yeah, a bit goofy
bridge was still 1500, as well as physical int; looks like i never made that change on that host (need to add it to puppet)
m0unds: Not very smart people are involved too... not surprising, really. I'm waiting for a multicast flood :D
bwahaha
we're gonna be adding some cameras at an admin building about 7mi from this facility
our IS dept is having 70 pairs of SM run between here and there
Fun fun!
yup
Welp I'm out again... adios
ttyl
up_the_irons: 9000 byte mtu on kvr29 is a go.: 8408 bytes from fe80::21b:21ff:fe93:3e08: icmp_seq=1 ttl=64 time=1.13 ms
probably something similar on kvr02
any performance difference?
sent 395 bytes received 1857525269 bytes 30702903.54 bytes/sec
atleast 1.5 times faster
without the 9000 mtu:
sent 395 bytes received 1857525269 bytes 20081358.53 bytes/sec
is there a way to cycle the colours assigned to nicks in weechat?
brycec and m0unds got assigned the same color and now I have a page full of cyan. (They had a lot of back and forth messages in the last hour)
lol mnathani I know what you mean
especially hard to read things with nicks of the same length
I gues I could just quit weechat and re-join
no go: still the same colours for brycec and m0unds
mnathani: If it's like the irssi plugin, it's based on the length of the nick
wee, my AC blew up
eek
At least you had AC to blow up :p
up_the_irons: zeit's setup
brycec: is it limited to respond only to ARP addresses? Or will it be part of a larger pool - open to all ?
I set it up publicly
Even part of pool.ntp.org
up_the_irons is free to object
http://www.pool.ntp.org/scores/2607:f2f8:0:102::2317 http://www.pool.ntp.org/scores/208.79.89.249
brycec: cool
Only 100mbps so don't flood it >.>
<.<
(or maybe it's mirrors.arpnetworks.com that's 100mbps)
ntpdate: 20 Jun 01:11:05 ntpdate[2086]: step time server 208.79.89.249 offset -170.759611 sec
sheesh mnathani
haha, i don't think houses exist in NM without some form of climate control
unless you live in a 200 year old half-buried adobe thing in taos or something
haha
m0unds: Up on the Canadian border (or close to) they do. Well most new houses have central heat/cool. But apartments are lucky if they have a little wall/window unit.
yeah, i had a friend who lived in victoria and didn't have AC
but i said NM :)
not cananadada
my buddy's apt in southern california didn't have AC either, now that i think about it (seal beach area)
harsh
is it just me or is verizon/comcast looking better tonight
not Verizon
according to smokeping anyway
comcast has 0 packets dropped with 100 packets
comcast is super intermittent
http://kremvax.acfsys.net/smokeping.cgi?target=Remote.comcastnet
oh wow
and verizon is slightly intermittent
maybe i was just lucky
now i'm finding loss
ah
have you tried curl with smokeping?
you mean instead of fping?
I haven't
or as well
it's pretty good for showing throughput
I'll have to configure that up
it's not too bad
http://pastebin.com/2TNdU3tb
i forced ipv4 and noproxy
as i have http_proxy in envronment and restarted smokeping
and ipv6 gives different performance to ipv4, and when you connect via hostname it can often default to it
giving misleading results.
thanks for the config
I'll drop it in
i have a few targets
i just gave one as an example
i do most of my testing on port 24 to bypass proxies
bypass proxies?
where is the traffic proxied?
transparent proxies
anywhere
I actually wasn't aware that existed
on the public internet
traffic is transparent proied on most isp's here
how can a transparent proxy be detected?
is it stuff is forefront or squid?
lots of them spoof the client ip these days
tcptraceroute is usually the easisest way
why would they want/need to have them?
performance, bandwith savings
i'm in favour of proxying tbh
i wish things like wikipedia would cache better though
and it means if there's connections like wifi it tends to improve performance
or overloaded web sties
3g networks do it soemetimes too afaik
mnathani: roger on the 9000 mtu
brycec: thanks for setting up zeit! i don't mind it being part of pool.ntp.org, as long as that dumb monlist thing is turned off (e.g. the NTP amp. attacks we saw a couple months ago)
up_the_irons: quick question
is it possible for arp metal customers to be on the backup network?
you are already on gigabit LAN, so whats the point?
perhaps the jumbo frames, maybe
yeah
jumbo frames, and inter-customer connectivity
acf_: i haven't done that before. all ports are access ports (not trunk), or in non-cisco speak, they are untagged ports. so i can't give ARP Metal customers the backup vlan tag. However, with some modifications, it's not impossible.
up_the_irons: any idea why the 9000mtu wouldnt work on my kvr02 VPS?
up_the_irons: Yep, long-patched in ntp, And i've double-checked it.
so port wuold have to be switched to trunk
brycec: did you install something like fail2ban or apf/bfd for the ntp server to deal with brute force attempts
mnathani: cuz i haven't made the same changes as i did on kvr29
brycec: awesome, tnx
brycec: the ssh port should be changed; cheap way to avoid a potential of problems
acl ssh?
to all who would like to beta test zeit (our new official NTP server, thanks to brycec), you can use: zeit.arpnetworks.com
mnathani: fail2ban
up_the_irons: sure, one sec
up_the_irons: everything looking clean with your tcpdumps?
yeah, not much traffic :)
not yet anyways
My ARP VPS has 602 hosts in its monlist, but it's been public for a little while
cool
mnathani: your kvr02 vps should be good to go with mtu 9k now also