***: dne has joined #arpnetworks
erratic_ has quit IRC (Ping timeout: 240 seconds)
dj_goku has quit IRC (Ping timeout: 255 seconds)
erratic has joined #arpnetworks
erratic is now known as Guest87324
DaCa has quit IRC (Ping timeout: 276 seconds)
DaCa has joined #arpnetworks staticsafe: mercutio: http://nzix.net/peers.html ***: Guest87324 has quit IRC (Ping timeout: 252 seconds)
dferris has quit IRC (Quit: leaving)
dferris has joined #arpnetworks
dferris has quit IRC (Quit: Lost terminal)
cpinkus has quit IRC (*.net *.split)
brycec has quit IRC (*.net *.split)
NiTeMaRe has quit IRC (*.net *.split)
jcv has quit IRC (*.net *.split)
hazardous has quit IRC (*.net *.split)
Hien has quit IRC (*.net *.split)
eryc has quit IRC (*.net *.split)
pjs has quit IRC (*.net *.split)
BryceBot has quit IRC (*.net *.split)
up_the_irons has quit IRC (*.net *.split)
josephb has quit IRC (*.net *.split)
cpinkus has joined #arpnetworks
brycec has joined #arpnetworks
jcv has joined #arpnetworks
Hien has joined #arpnetworks
eryc has joined #arpnetworks
hazardous has joined #arpnetworks
pjs has joined #arpnetworks
josephb has joined #arpnetworks
up_the_irons has joined #arpnetworks
BryceBot has joined #arpnetworks
barjavel.freenode.net sets mode: +o up_the_irons
NiTeMaRe has joined #arpnetworks
cpinkus has quit IRC (*.net *.split)
NiTeMaRe has quit IRC (*.net *.split)
brycec has quit IRC (*.net *.split)
jcv has quit IRC (*.net *.split)
hazardous has quit IRC (*.net *.split)
Hien has quit IRC (*.net *.split)
eryc has quit IRC (*.net *.split)
pjs has quit IRC (*.net *.split)
BryceBot has quit IRC (*.net *.split)
up_the_irons has quit IRC (*.net *.split)
josephb has quit IRC (*.net *.split)
NiTeMaRe has joined #arpnetworks
cpinkus has joined #arpnetworks
brycec has joined #arpnetworks
jcv has joined #arpnetworks
Hien has joined #arpnetworks
eryc has joined #arpnetworks
hazardous has joined #arpnetworks
pjs has joined #arpnetworks
josephb has joined #arpnetworks
up_the_irons has joined #arpnetworks
BryceBot has joined #arpnetworks
barjavel.freenode.net sets mode: +o up_the_irons
erratic has joined #arpnetworks
erratic is now known as Guest21703
Guest21703 has quit IRC (Ping timeout: 240 seconds) mercutio: static: what about it?
static: the silly visualisation thingy? gizmoguy: I thought it was cool mercutio: i didn't? gizmoguy: such a killjoy mercutio mercutio: i tried looking around at it
i can't tell what's connected to what, too much data
all it seems to say to me is that vocus is huge gizmoguy: the clustering is cool
so the right side of the map is new zealand up_the_irons: lol i totally remember phtml; fuck i'm old mercutio: i nwver understood why people didn't do cgi's in c back then.
considering the cpus were slow, and memory was limited up_the_irons: cgi's in perl were much easier mercutio: and perl was really slow/bloaty up_the_irons: it was fast enough gizmoguy: mercutio: http://nzix.net/nzix-map/#HIX-CITYLINK-NZ-AP%20Hamilton%20Internet%20Exchange%20%28Citylink%29,NZ
best IX in NZ right there mercutio: well id id find the web too slow in general :)
so i stuck to irc hah
i can't see it gizmo?
it's just showing the wide map
actually mod_perl wasn't too bad gizmoguy: mercutio: exactly
or does linking the fragment not work? brycec: up_the_irons: ntp reminder gizmoguy: anyway do a search for HIX and click on it up_the_irons: brycec: where did we leave off? i think i swapped the conversation from my mind; need more RAM!
brain RAM mercutio: ok
i can't believe they called it hix
hix finds chix instead
whcih is tiny m0unds: hix is right below chix... mercutio: oh it didn't bring up the search results the frist time for some reason
his has less connections than plain :/ gizmoguy: DTS is at HIX too, it's just not showing up for some reason mercutio: maybe with ufb more people will connect to it m0unds: http://www.nmix.net/ mercutio: oh dear, this looks like it's from the 90s m0unds: it sure is
1997, in fact mercutio: is it meant to be 256 colour friendly
hy is there dithering in the anti aliasing
10/100 switch for servers and router conenctivity
the main peering in nz started in 99
but there was some peering before that
but gizmo will know more about that than me i imagine
http://www.nmix.net/people.html
nice graphs
The page on pricing for connecting to the NMIX is due to be updated.
so what happened to nmix? gizmoguy: yeah so I think it all started with "NZIX"
I even found the email post from Lindsay when it was decomissioned - http://list.waikato.ac.nz/pipermail/nznog/2001-August/003161.html mercutio: ahh gizmoguy: unfortunately it's a little hard to search for "NZIX" now :) mercutio: yeah gizmoguy: haha - http://wand.net.nz/wits/nzix/1/
we have network traces!
Capture Start (Local) Thu Nov 12 10:56:44 1998
Capture End (Local) Sun Apr 11 14:11:12 1999
Packets Captured 238 million
lolz. back when the internet was easy mercutio: do you read nznog gizmo? gizmoguy: yup mercutio: see the post just now?
i don't quite get it gizmoguy: from Dean? mercutio: i can't see any labels
yeh
i just see lots of circles with a - in the middle gizmoguy: the AS numbers are written in the circles mercutio: oh
it's tiny writing gizmoguy: at least they are when I load the PDF in google doc mercutio: and google docs won't zoom in enough gizmoguy: zoom in man
get better eyes mercutio: i'm at maximum zoom!
google drive the app is currently unreachable
gah brycec: lol up_the_irons no worries, I know exactly what you mean
(Also my computer was just throwing a swapping fit) mercutio: hmm even when i sdave the image and zoom it's hard to read the numbers up_the_irons: brycec: haha brycec: up_the_irons: You asked if ARP should just point at my own, I suggested ARP has its own instance unattached to my account. You asked what was needed, I said a "small" would be more than enough. (think I gave some specific specs, don't remember) Oh, and Debian Wheezy for the image. up_the_irons: ah ok mercutio: hmm can you print it?
it doesn't work for me brycec: (I'll leave the ARP management user on there, I'll set it up with user-login only +sudo for management, I'll set up ntpd and apticron, then I'm hands-off just letting it run, plus updates) up_the_irons: roger that
brycec: think of a spiffy hostname m0unds: dingus mercutio: time brycec: I was going to say "ntp1" bug dingus is good. So is hiccup
Also, tick, or tock mercutio: or ticktock
you could always cname ntp1 to it brycec: he probably will, but the admin side still gets a special name... m0unds: a super scientific study of drug mentions on twitter has ruled that albuquerque is the meth capital of the us
"by a landslide" mercutio: haha m0unds: go figure people might talk about breaking bad on twitter up_the_irons: not naming it dingus brycec: SPOILER ALERT mercutio: and denver is the stoner capital? m0unds: lol
JERK up_the_irons: try again :) m0unds: CO
yea
whatsit ant: up_the_irons: zeit brycec: up_the_irons: Chronos m0unds: throbbingdumptruck brycec: LOL mercutio: uhh m0unds: filet-o-fish up_the_irons: ant: YES
ant wins brycec: I'm down with zeit
@wiki Zeit BryceBot: Zeit :: Zeit (English: Time) is the third album by the German electronic music group Tangerine Dream. A double LP, it was released in August 1972, being the first release featuring Peter Baumann, who joined then-current members Christopher Franke and Edgar Froese. Overview The style of this album is slower and more atmospheric than their previous albums. Its atmospheric drone... http://en.wikipedia.org/wiki/Zeit up_the_irons: brycec: chronos is good too, but i like the German flair of zeit m0unds: yard-o-beef mercutio: m0unds has strange ideas on hostnames :) m0unds: tangerine dream ftw
mine are all named after pelican songs up_the_irons: m0unds: LOL m0unds: haha mercutio: m0unds: what aer your own boxes called? m0unds: sirius, pulse, mammoth mercutio: not quite so bad :) m0unds: also wangsmith up_the_irons: m0unds: tangerine dream could almost be a porn star name m0unds: hahaha, yeah
probably is a stripper's name somewhere up_the_irons: srsly brycec: What /hasn't/ been used as a stripper's name? m0unds: yard-o-beef
i hope
well, maybe a male stripper's name
or filet-o-fish i guess, that'd be pretty bad too up_the_irons: lol
next time i go to a strip club i'm tellin' them my name is "yard-o-beef". I will report on the results.
;) m0unds: hahah mercutio: do strip clubs ask names? brycec: Usually only when you're coming in the back door up_the_irons: the strippers do mercutio: i thought they were kind of impersonal places.
ahh just to get you to like them so you give them money up_the_irons: yup mercutio: i'd just say i was john doe probably up_the_irons: they always ask names, try to be all friendly and stuff mercutio: ahh ok
up_the_irons: what dif you think of acf's route-map? up_the_irons: mercutio: looked promising mercutio: cool. up_the_irons: what's "z" in hacker... mercutio: in l33t speak? up_the_irons: yep
1337 mercutio: i think it's just z? m0unds: h4ckt3hpl4n4t up_the_irons: what if it had to be a number... or a-f... you might see where i'm going with this... mercutio: so like z317 up_the_irons: lol mercutio: for zeit up_the_irons: yeah but i can't use 'z' in the IPv6 address :) mercutio: UP_7|-|3_1r0||$ 1$ 1||70 L337?
http://www.brenz.net/services/l337Maker.asp up_the_irons: maybe just ::3317 will do mercutio: just do f00f or something m0unds: hahaha mercutio: b1ff up_the_irons: 2317 mercutio: b00b5 up_the_irons: lol mercutio: ofh it shoudl be 4 letters. up_the_irons: 2 = z, close enough m0unds: i'm boring and just use a, b, c, d, e, f etc up_the_irons: zeit's IPv6 will be: 2607:f2f8:0:102::2317
upon second glance, that is as boring as anything else... bah
next time, b00b mercutio: yeah ther's no nice way to make ipv6 addresses look nice jpalmer: thats what DNS is for, making ip's look nice :P ***: erratic has joined #arpnetworks
erratic is now known as Guest92183
Guest92183 has quit IRC (Ping timeout: 240 seconds)
erratic has joined #arpnetworks
erratic is now known as Guest32787 mnathani: 7.1.3.2.0.0.0.0.0.0.0.0.0.0.0.0.2.0.1.0.0.0.0.0.8.f.2.f.7.0.6.2.ip6.arpa. 86400 IN PTR zeit.arpnetworks.com.
I guess one part has been taken care of up_the_irons: It's all ready to go, i just need brycec to give me his pub key so he can login mnathani: does it have its own vlan? mercutio: heh, i'm sure people ask more technical questions here than other providers :) up_the_irons: it's on one of our regular VLANs mnathani: whats the max mtu supported on the dedicated nics for the backup lan? up_the_irons: 9K mercutio: nice
i wish "the internet" supported large mtu's mnathani: up_the_irons: is there a sample /etc/sysconfig/network-scripts/ifcfg-eth1 script for CentOS for use with the dedicated NIC
my attempt to initialize the NIC: Bringing up interface eth1: Device does not seem to be present, delaying initialization. up_the_irons: no sample. it's just a regular NIC
the link-local that you should be able to reach is: fe80::21b:21ff:fe93:3e08 Guest32787: I notice pretty consistently my ssh connection drops, it could possibly be due to the internet connection I'm on but I doubt this because I've never had problems before?
also I'd like to know how this person is able to talk to my broadcast
[252089.854106] iptables denied: IN=eth0 OUT= MAC=52:54:00:27:25:50:00:0d:65:ab:c8:bf:08:00 SRC=71.6.135.131 DST=206.125.168.79 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=49532 PROTO=TCP SPT=32560 DPT=80 WINDOW=3474 RES=0x00 SYN URGP=0
wait nevermind it was blocked but still
I did not know that was even possible. mnathani: [root@cgirun ~]# ping6 -I eth1 fe80::21b:21ff:fe93:3e08
PING fe80::21b:21ff:fe93:3e08(fe80::21b:21ff:fe93:3e08) from fe80::5054:ff:feb7:223e eth1: 56 data bytes
64 bytes from fe80::21b:21ff:fe93:3e08: icmp_seq=1 ttl=64 time=1.29 ms
up_the_irons: success! up_the_irons: mnathani: awesome!
Guest32787: what's the other MAC?
that does indeed look weird Guest32787: https://gist.github.com/paigeadele/92d7290e761e56e88a43 BryceBot: Gist: "https://gist.github.com/92d7290e761e56e88a43" Guest32787: pretty happy with it over all up_the_irons: both of those give me 500 errors ***: mnathani has quit IRC (Read error: Connection reset by peer) up_the_irons: Guest32787: well, to the rest of the internet, they don't know it's a broadcast. broadcast addresses are routed the same way. i don't think my core is going to deny that as a valid address even if it *is* the broadcast on your vlan. i suspect the same would happen if someone sent a packet to your network number (the all zeros subnet address)
so, *shrug*, i think it's normal ***: mnathani has joined #arpnetworks Guest32787: yeah I think so too
I've never setup a network this way sadly so its just unusual to me ***: Guest32787 is now known as erratic erratic: different stuff to look for
I just decided it would be fun to start up my windows vm, and configure the network adapter to bridge my laptop's vpn adapter and see if I can configure a static v4/v6 address for it and it worked
I kinda wish it didnt' because, the vpn client connects to openvpn, which deals/pushes a config based on the CN of the client certificate
and I wish it would only allow IP settings as per that config to be allowed for that client but oh well
http://www.petros-project.com/
up_the_irons: can I possibly pay for my service for the months to come in advance?
and possibly later if necesarry on a case by case basis just pay an additional $5 for 200GB of extra bandwidth when needed? mercutio: erratic: you can just deny access to broadcast address
lots of people block it for various reasons mnathani: up_the_irons: how do I verify if my mtu setting is working when accessing the backup server?
things like: ping6 -M do -s 8972 fe80::21b:21ff:fe93:3e08%eth1 dont seem to work mercutio: you are using ipv6
you need to go smaller erratic: mercutio: already done mercutio: 28 bytes is for ipv4 mnathani: ping6 fe80::5054:ff:feb7:223e%eth1 -M do -s 10500
I meant 1500, does not work
perhaps not all switches have jumbo frames enabled mercutio: not all hosts accept large pings too
just see if tcp/ip traffic works
tcpdump
and check what the mtu says mnathani: ls works in a directory when I am connected via the linklocal ssh to the backup server from my vps, but ls -l does not work.
verified using 2 different vps
not sure if it has to do with the 9000 byte mtu
set the MTU back to 1500 and things are working now mercutio: there may be a mtu issue somewhere in the middle :)
pmtu doesn't work usually
i imagine his switches are fine, adn it may be the linux host that it goes via brycec: IIRC up_the_irons may have to set the MTU of your bridge to the backup VLAN m0unds: ^
was just thinking that brycec: lol mercutio: oh or that brycec: Hey m0unds quick question - how much bandwidth (network/disk) does one of your cameras chew up? m0unds: um, lowest bitrate we're using is on wlan segments and that's 1mbit/sec
typical is 2mbit brycec: That's no tooooo bad. m0unds: that's 720p @ 30ips, h264 2mbit brycec: Was talking with a guy tasked with quoting cctv for a school m0unds: ah brycec: (And wondered what kind of storage was required)
"hey, I know a guy..." m0unds: yeah, it's not too bad brycec: This school ended up with 900 cameras, and they wanted all video stored off-site
Much laughing was laughed. m0unds: 900 cameras at a school? -: brycec shrugs m0unds: wtf
hahah brycec: Big school I guess, maybe multiple campuses. m0unds: ah
okay, then that makes sense
i was thinking..high school or something brycec: (I really don't know) m0unds: offsite video wouldn't be too bad, assuming offsite could mean different location within like 70km mercutio: dark fibre? brycec: It was for some city's public schools, and the way he talked, it was for one school. But doesn't matteer. m0unds: yea brycec: lol
School district was definitely looking to cheap out, so no fibre m0unds: ah, so magic remote video storage brycec: Regardless, that's ~3GBps... up_the_irons: mnathani: for your host on kvr29, try the mtu thing again m0unds: yeah, a bit goofy up_the_irons: bridge was still 1500, as well as physical int; looks like i never made that change on that host (need to add it to puppet) brycec: m0unds: Not very smart people are involved too... not surprising, really. I'm waiting for a multicast flood :D m0unds: bwahaha
we're gonna be adding some cameras at an admin building about 7mi from this facility
our IS dept is having 70 pairs of SM run between here and there brycec: Fun fun! m0unds: yup brycec: Welp I'm out again... adios m0unds: ttyl ***: DaCa has quit IRC (Ping timeout: 245 seconds)
DaCa has joined #arpnetworks mnathani: up_the_irons: 9000 byte mtu on kvr29 is a go.: 8408 bytes from fe80::21b:21ff:fe93:3e08: icmp_seq=1 ttl=64 time=1.13 ms
probably something similar on kvr02 mercutio: any performance difference? mnathani: sent 395 bytes received 1857525269 bytes 30702903.54 bytes/sec
atleast 1.5 times faster
without the 9000 mtu:
sent 395 bytes received 1857525269 bytes 20081358.53 bytes/sec
is there a way to cycle the colours assigned to nicks in weechat?
brycec and m0unds got assigned the same color and now I have a page full of cyan. (They had a lot of back and forth messages in the last hour) brycec: lol mnathani I know what you mean
especially hard to read things with nicks of the same length ***: dj_goku has joined #arpnetworks mnathani: I gues I could just quit weechat and re-join ***: mnathani has quit IRC (Quit: WeeChat 0.4.2)
mnathani has joined #arpnetworks mnathani: no go: still the same colours for brycec and m0unds brycec: mnathani: If it's like the irssi plugin, it's based on the length of the nick m0unds: wee, my AC blew up mercutio: eek brycec: At least you had AC to blow up :p
up_the_irons: zeit's setup mnathani: brycec: is it limited to respond only to ARP addresses? Or will it be part of a larger pool - open to all ? brycec: I set it up publicly
Even part of pool.ntp.org
up_the_irons is free to object
http://www.pool.ntp.org/scores/2607:f2f8:0:102::2317 http://www.pool.ntp.org/scores/208.79.89.249 mnathani: brycec: cool brycec: Only 100mbps so don't flood it >.>
<.<
(or maybe it's mirrors.arpnetworks.com that's 100mbps) mnathani: ntpdate: 20 Jun 01:11:05 ntpdate[2086]: step time server 208.79.89.249 offset -170.759611 sec brycec: sheesh mnathani m0unds: haha, i don't think houses exist in NM without some form of climate control
unless you live in a 200 year old half-buried adobe thing in taos or something
haha brycec: m0unds: Up on the Canadian border (or close to) they do. Well most new houses have central heat/cool. But apartments are lucky if they have a little wall/window unit. m0unds: yeah, i had a friend who lived in victoria and didn't have AC
but i said NM :)
not cananadada
my buddy's apt in southern california didn't have AC either, now that i think about it (seal beach area) brycec: harsh mercutio: is it just me or is verizon/comcast looking better tonight acf_: not Verizon
according to smokeping anyway mercutio: comcast has 0 packets dropped with 100 packets acf_: comcast is super intermittent
http://kremvax.acfsys.net/smokeping.cgi?target=Remote.comcastnet mercutio: oh wow
and verizon is slightly intermittent
maybe i was just lucky
now i'm finding loss acf_: ah mercutio: have you tried curl with smokeping? acf_: you mean instead of fping?
I haven't mercutio: or as well
it's pretty good for showing throughput acf_: I'll have to configure that up mercutio: it's not too bad
http://pastebin.com/2TNdU3tb
i forced ipv4 and noproxy
as i have http_proxy in envronment and restarted smokeping
and ipv6 gives different performance to ipv4, and when you connect via hostname it can often default to it
giving misleading results. acf_: thanks for the config
I'll drop it in mercutio: i have a few targets
i just gave one as an example
i do most of my testing on port 24 to bypass proxies acf_: bypass proxies?
where is the traffic proxied? mercutio: transparent proxies
anywhere acf_: I actually wasn't aware that existed
on the public internet mercutio: traffic is transparent proied on most isp's here mnathani: how can a transparent proxy be detected?
is it stuff is forefront or squid? mercutio: lots of them spoof the client ip these days
tcptraceroute is usually the easisest way acf_: why would they want/need to have them? mercutio: performance, bandwith savings
i'm in favour of proxying tbh
i wish things like wikipedia would cache better though
and it means if there's connections like wifi it tends to improve performance
or overloaded web sties
3g networks do it soemetimes too afaik up_the_irons: mnathani: roger on the 9000 mtu
brycec: thanks for setting up zeit! i don't mind it being part of pool.ntp.org, as long as that dumb monlist thing is turned off (e.g. the NTP amp. attacks we saw a couple months ago) acf_: up_the_irons: quick question
is it possible for arp metal customers to be on the backup network? mnathani: you are already on gigabit LAN, so whats the point?
perhaps the jumbo frames, maybe acf_: yeah
jumbo frames, and inter-customer connectivity up_the_irons: acf_: i haven't done that before. all ports are access ports (not trunk), or in non-cisco speak, they are untagged ports. so i can't give ARP Metal customers the backup vlan tag. However, with some modifications, it's not impossible. mnathani: up_the_irons: any idea why the 9000mtu wouldnt work on my kvr02 VPS? brycec: up_the_irons: Yep, long-patched in ntp, And i've double-checked it. mercutio: so port wuold have to be switched to trunk mnathani: brycec: did you install something like fail2ban or apf/bfd for the ntp server to deal with brute force attempts up_the_irons: mnathani: cuz i haven't made the same changes as i did on kvr29
brycec: awesome, tnx
brycec: the ssh port should be changed; cheap way to avoid a potential of problems mercutio: acl ssh? up_the_irons: to all who would like to beta test zeit (our new official NTP server, thanks to brycec), you can use: zeit.arpnetworks.com brycec: mnathani: fail2ban
up_the_irons: sure, one sec
up_the_irons: everything looking clean with your tcpdumps? up_the_irons: yeah, not much traffic :) brycec: not yet anyways
My ARP VPS has 602 hosts in its monlist, but it's been public for a little while up_the_irons: cool
mnathani: your kvr02 vps should be good to go with mtu 9k now also