[00:19] *** cahess has joined #arpnetworks [00:21] *** cahess_ has joined #arpnetworks [00:23] *** cahess has quit IRC (Ping timeout: 264 seconds) [04:13] brycec: kvr18 is gonna be upgraded soon, i think that will solve your panic issues [04:14] mercutio: thanks for helping out sorressean [04:14] i didn't help him [04:14] brycec did [04:15] mercutio: oh i read that wrong sorry [04:15] brycec: thanks for helping sorressean ! [09:04] Hi all. Having trouble getting into portal.arpnetworks.com ... just curious if anyone else is as well before I make stronger coffee. [09:09] lol up_the_irons. of course, I was happy I could help. I was around and my eyesight is a bit better (though I really, really need to get a new prescription) [09:09] cahess_: loads fine for me. What error are you getting? [09:10] Strange. The error I'm getting is "The page you were looking for doesn't exist. You may have mistyped the address or the page may have moved." [09:10] Are you behind a proxy, maybe? [09:11] I'm not ... but, I just reinstalled OS X on this machine, and didn't have anything but Safari. Works in Chrome ... fancy that =) [09:13] That's quite peculiar. Either you've made a typo (but you're probably copy/pasting the url between browsers) or you have some weird addon in Safari, I'd guess. [09:14] loads fine in my Safari on Yosemite [09:14] It just updated Safari after reinstalling the OS. Had worked in Safari previously. It's all still vanilla ... but, yeah, I was copying/pasting the url. I'll chock it up to another Safari oddity for me. [09:14] what version of Safari is on your machine? [09:15] 8.0.6 it says [09:15] portal loads fine in safari for me too [09:16] *** mkb has quit IRC (Ping timeout: 265 seconds) [09:17] *** mkb has joined #arpnetworks [09:18] Oddest thing. I'm on Yosemite, current (8.0.6) version of Safari, and no plugins or add-ons. Chrome works OK, Safari doesn't. But that error when I look a little closer is giving me a 404, with the URL: https://portal.arpnetworks.com/dashboard [09:18] oh well. thanks for checking. I'll beat on this thing for a bit to see what's up with it [09:23] No problem. [09:30] brycec: is that safari / yosemite in virtualbox or bare metal mac? [09:30] Real mac [09:30] MacBook Pro [09:30] do you use the imessage ?? [09:30] No [09:30] I barely use the machine nowadays at all :p [09:31] I like having a mac around if I need to walk someone through something [09:31] virtual or otherwise [09:34] using archlinux on bare metal has this really nice feeling, kind of like when I switched from nano to vi [10:23] drivers in the new ppc-based rb launched in september don't support fasttrack. guess that's why it doesn't work. it'd be cool if mikrotik ever kept their official docs updated. [10:32] *** d^_^b has joined #arpnetworks [10:43] *** sng has quit IRC (Remote host closed the connection) [11:02] i reckon it's having an issue going to http rather than https and redirecting to portal; at a guess [11:02] if it only can find address on chrome.. [11:02] hmm, redirects fine for me [11:03] Yeah exactly. and http issues a 30X and redirects nicely anyways [11:03] *301 [11:05] yeh i checked with curl [11:07] it could be some bug with safari [11:09] hmm, you can register a portal account [11:09] but yeah loads with spartan. [11:09] (was trying to think of browsers that i have that may be weird) [11:09] I think my next test if I were cahess_ would be to tcpdump and see what's happening [11:10] nope [11:10] (or not use Safari :P) [11:10] well i mean it wouldn't be mine :) [11:10] if i was cahess i'd just not use safari [11:10] :) [11:10] Perhaps but that's an awful way to debug a Safari issue ;P [11:10] I cleared all the browsing data and cookies, cleared the DNS Cache, and restarted Safari and it worked =) [11:11] cool cahess [11:11] Alright then :) [11:11] BUT, I am inclined to agree with @mercutio and not use Safari =P Just hadn't gotten around to installing Chrome yet. [11:11] safari's good if you run on battery with any regularity [11:11] m0unds: ahh i didn't think of that [11:11] My number 1 use of Safari is installing Chrome. Number 2 is when I don't feel like launching Chrome and all its windows, I just need a quick browser. [11:12] that is how i am with ie on windows [11:12] They still make IE? [11:12] yip [11:12] ...never gets old [11:12] i guess [11:12] IE on Win8.1 is not as bad as I remembered it being. [11:12] i have ie11 [11:12] the profiler view is nice [11:13] i find ie's a lot lighter than other browsers [11:13] f12 by default [11:13] it's disturbing :) [11:13] I used to find it completely unusable. Now it fills the same position as Safari on OSX for me :p [11:13] less memory, less cpu etc. [11:14] I haven't used Windows since 2010 ... Mac or *nix for me, thanks =) [11:14] i found macos a lot more annoynig to setup [11:15] but then i was trying to use it as a hybrid between windows/unix [11:15] like the virtual desktop stuff by default that opens terminals in the same virtual desktop as your previous terminal.. [11:15] so you have to run some script thingy to make it work [11:15] which takes fiddling around.. [11:15] when linux just acts "sensibly" with regards to virtual desktop [11:16] gnome would have an option if they tried doing such a thing :/ [11:16] I don't think that's how it works... [11:16] it's how it worked for me.. [11:17] On Yosemit, if I click "new window" it opens on the workspace I'm on, not the workspace other windows of that app are open in [11:17] maybe it changed [11:17] http://apple.stackexchange.com/questions/11323/how-can-i-open-a-terminal-window-directly-from-my-current-finder-location [11:18] hmm no that is diff issue [11:18] arhg [11:19] http://superuser.com/questions/98521/how-to-get-terminal-windows-to-span-multiple-desktops-in-osx [11:19] ok it changed in 10.9 it seems [11:20] what's yosemite like bryce? [11:21] i seemed to find that upgrades kept making things worse [11:21] heh [11:22] yosemite is a lot better than the pile of buggy shit that was mavericks [11:22] It's okay. I'm not a heavy user [anymore] so I don't care. Mostly it was a visual style change, plus some improvements in battery information [11:22] Oh and improvements with notifications [11:22] I only upgraded to Yosemite because they stopped releasing security updates to Mavericks (or some such) [11:23] I'm slightly annoyed that I can't [reasonably,safely] have TRIM enabled for my SSD but that's my only gripe. [11:23] i have an app that adds a kext to enable trim for ssds [11:23] forgot the name [11:23] checks on boot, warns if the patch is disabled [11:24] I do too, but since Yosemite changed kext signing... [11:24] I have to completely disable kext signing and that's annoying [11:25] meh, i'd rather have working trim [11:25] it'd be nice if osx handled trim like every other os, haha [11:27] Oh but they do... for their own whitelisted SSDs :P [11:28] And in a way, I can't wholly fault them for it. They make their software work on their hardware. There's no reasonable expectation for them to make it work with stuff they don't see [11:28] sure [11:29] but they support plenty of third party devices without any weird goofiness [11:29] *** t7243Gues is now known as pjs [11:29] i guess it just boils down to core hardware vs peripherals [11:30] Yeah, it is a "weird" double-standard [11:30] yeh i had a lot of problems on g4 because i had to use more recent os x and it was worse. [11:31] but stuff didn't support the older version [11:31] mac os kind of forces you into upgrades. [11:31] both of software and hardware :/ [11:31] it was around 10.5 or 10.6 that was the most recent version for g4. [11:32] i probably wouldn't have gotten a macbook if not for the annoying tradeoffs that existed for ultrabooks [11:32] That's what she said!! [11:32] slower cpu, inbuilt non-upgradeable ssds in lots of them, bad displays, etc [11:33] 10.5 as I recall [11:33] yeah looks like 10.5 [11:33] which was slower :/ [11:33] I thought Macbooks had all those issues too, except decent displays? [11:34] macbook pro = user replaceable ssd, good battery life, i7 cpu, 8gb ram base [11:34] mine is pre retina [11:34] all the ultrabooks kind of suck i thought [11:34] I guess I'm thinking of Airbooks [11:34] er, Macbook Airs [11:34] yea, my wife has a macbook air [11:34] she got it her last year in grad school, got an edu discount on it - $1200ish for the higher end one w/256gb ssd and stuff [11:35] does os x go ok on low ram? [11:35] (People say "macbook" and there are three different "macbook" lines, it's confusing) [11:35] i don't understand why they seem to skimp on ram so much [11:35] yea [11:35] m0unds: is it 4gb ram? [11:35] my mbp supports up to 16gb, hers has 4gb iirc [11:35] non-upgrable ram, right? [11:35] right [11:36] mine shipped with a 750gb disk, i replaced it with a 240gb intel ssd [11:36] on windows on a laptop 8gb for light usage, 16gb for heavy usgae seems to be where it's at. [11:36] hers shipped w/a 256gb ssd, haswell based cpu [11:36] m0unds: is it one of those low ghz one? [11:36] ones [11:36] yep [11:36] not as low as the current ones [11:37] i find the cpu in my chromebook quite fast for linux [11:37] https://support.apple.com/kb/SP678?locale=en_US [11:37] which is a little slower than that stuff i think [11:37] it kind of surprised me how well it worked though [11:37] i think it was 2955u [11:39] there's new broadwell desktop cpu's coming out [11:39] intel seems to have actually shifted to slower cpu's for desktop for the first time.. [11:39] laptop's got slower already :) [11:39] it used to be that everyone thought they needed a fast cpu [12:18] *** nclee has joined #arpnetworks [15:06] *** Seji has quit IRC (Read error: Connection reset by peer) [15:14] uhh [15:14] CVE-2015-3636 sounds bad [15:15] oh it's only bad on non-x86-64 [15:15] i wish ubuntu said that .... [15:15] basically escalation vulneribility using ping [15:16] how can I simulate multiple sites connected via openvpn and cisco routers on a single machine? I intend to use pfSense and virtualization [15:16] lol wtf [15:17] On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system WOW [15:17] well that's not as bad as the escalation vulnerability [15:18] crash the system could be viewed as a denial of service [15:18] yeh [15:18] there's heaps of denial of service attacks with a user [15:18] on most systems you used to be able to do fork bombs trivally [15:18] i don't know how it's changed now [15:18] but most people don't have ulimits setup or anything.. [15:19] if you have a load issue it's not nearly as bad as executing code as root [15:19] i mean you hack me, and my system crashes... [15:19] i reboot it and it's fine and i find out what you did and kick you out [15:19] but if you had root you could just hide and change password [15:20] much worse [15:20] and be much more annoying. [15:20] i mean yeah, ddos vulnerabilities aren't ideal [15:20] @wa time in auckland [15:20] Error fetching URI. [15:20] @google yyz [15:20] 670,000 total results returned for 'yyz', here's 3 [15:20] Toronto Pearson International Airport - Wikipedia, the free ... (http://en.wikipedia.org/wiki/Toronto_Pearson_International_Airport) Toronto Pearson International Airport (also known as Lester B. Pearson International Airport or simply Pearson Airport or Toronto Pearson) (IATA: YYZ, ICAO: ... [15:20] Toronto Pearson International Airport (http://www.torontopearson.com/) The voice of Toronto Pearson International Airport broadcasts arrivals, departures, traffic, weather, travel stories and aviation features. [15:20] YYZ (instrumental) - Wikipedia, the free encyclopedia (http://en.wikipedia.org/wiki/YYZ_(instrumental)) "YYZ" is an instrumental rock piece by Canadian rock band Rush, from their 1981 album Moving Pictures. Following its initial release, it became one of the ... [15:20] but in practice i've had more problems with misperforming programs than any malacious attack [15:21] s/malacious/malicious [15:21] but in practice i've had more problems with misperforming programs than any malicious attack [15:21] i did a fork bomb once to try it myself. [15:21] oh oops [15:21] it's 10:20 am [15:24] there's some new qemu vulnerability too [15:25] on cursory look i couldn't understand it though [15:25] That's what she said!! [15:25] it's all about MSI etc [15:25] also something with PCNET driver [15:26] which i think windows used to use before virtual i/o [15:26] amd lance or whatever [15:27] because windows didn't used to have e1000 support bult in [15:27] built [15:29] ahh i think the MSI stuff is only for passed through pci devices [15:34] @iata yyz [15:34] YYZ: Toronto Pearson International Airport located in Mississauga, Ontario, Canada [15:34] mnathani_: ^ [15:35] @iata moo [15:35] MOO: Not a valid IATA. [15:35] damn [15:35] @iata omg [15:35] OMG: Not a valid IATA. [15:35] That's what she said!! [15:35] @iata akl [15:35] AKL: Auckland Airport located in Mangere, New Zealand [15:35] lol I hadn't seen CVE-2015-3636 yet today. [15:35] @iata cnt [15:35] CNT: Charata Airport located in Charata, Chubut, Argentina [15:35] But I did see the Xen/PCnet one, but didn't care too much [15:35] brycec: you're falling behind [15:35] what's its IATA source? [15:36] that's qemu not xen? [15:36] http://xenbits.xen.org/xsa/advisory-135.html mercutio [15:36] "Heap overflow in QEMU PCNET controller, allowing guest->host escape [15:36] yeh qemu [15:36] xen and kvm both use qemu [15:36] but seems to be only their fork qemu? I wasn't clear on that [15:36] qemu is the dirty part :) [15:36] That's what she said!! [15:36] they unforked qemu [15:37] (and since it was Xen's SA and patch, i assumed it was Xen only) [15:37] Oh well, I haven't used pcnet for 5 years [15:37] well you can use their fork or not, but xen is currently non forked by default [15:37] last i knew pci passthrough worked better with the forked qemu though [15:37] m0unds: airportcode.riobard.com [15:37] @iata OWN [15:37] OWN: Not a valid IATA. [15:38] @iata Spokane [15:38] 3 results returned: SKA, SFF, GEG [15:38] ah [15:39] @iata omega [15:39] No results found for: omega [15:39] @iata HEH [15:39] HEH: Not a valid IATA. [15:39] interesting [15:40] http://en.wikipedia.org/wiki/Heho_Airport [15:40] Heho Airport :: Heho Airport (Burmese: ဟဲဟိုးလေဆိပ်; (IATA: HEH, ICAO: VYHH) is an airport serving Heho, a town in Kalaw Township, Taunggyi District, Shan State, Burma. It is the main airport serving Inle Lake, one of the top tourist destinations of Burma. History The airport served as an airbase both for the Allies and the Japanese during World War II. The airbase was heavily bombed by the Allies. Evidence of aircra [15:40] I see. Somebody should tell me@rioboard.com [15:40] OMG is the IATA code for a tiny airport in omega, namibia [15:40] (or whatever it was) [15:40] there's probably some reason it's not included [15:41] @iata HUH [15:41] HUH: Not a valid IATA. [15:41] don't care enough to email someone about a tiny airport in namibia not showing up in their db [15:41] http://en.wikipedia.org/wiki/Huahine_%E2%80%93_Fare_Airport [15:41] Huahine – Fare Airport :: Huahine – Fare Airport is an airport serving the island of Huahine in French Polynesia (IATA: HUH, ICAO: NTTH). The airport is located in the northern part of the commune of Fare, on the Island of Huahine.Fare.[1] In 2006, 151,907 passengers used the airport.[2] Airlines and destinations References External links Huahine-Fare Airport NTTH – HUAHINE (PDF). AIP from French Service d'information aér [15:42] if you go from wikipedia IATA list it seems quite a few aren't included [15:42] @iata SJC [15:42] SJC: Norman Y. Mineta San José International Airport located in San Jose, California, United States [15:42] @iata SFC [15:42] SFC: Not a valid IATA. [15:42] isn't there two airports in san jose? [15:42] sjo [15:42] @iata sfo [15:42] SFO: San Francisco International Airport located in San Francisco, California, United States [15:43] err, wait [15:43] sjc, right [15:43] sjc and sfo [15:44] maybe tehere's closer [15:44] there's a GA airport in san jose, iirc [15:45] but it probably doesn't have an iata code because lots of them don't [15:45] i'm thniking international [15:45] oh [15:45] all international airports have them [15:45] yeah my geography knowledge of california isn't great [15:45] http://en.wikipedia.org/wiki/List_of_airports_in_California [15:45] List of airports in California :: This is a list of airports in California (a U.S. state), grouped by type and sorted by location. It contains all public-use and military airports in the state. Some private-use and former airports may be included where notable, such as airports that were previously public-use, those with commercial enplanements recorded by the FAA or airports assigned an IATA airport code. Airports This list contains the fo [15:52] IATA was formed in Cuba... [15:53] i kindof though cuba was despised [15:57] mercutio: in 1945, pre-embargo when people still liked Cuba [15:57] oh [15:58] is cuba to the US like north korea is to south korea? [15:58] No? [15:58] And if you hadn't heard, the embargo is lifted, they're just another carribean country now [15:58] ok i don't really know what happened [15:58] albeit one severely economically depressed [15:59] it's communist right? [15:59] So they claim [15:59] oh so things are fine now [16:00] I guess, relatively. [16:01] But Castro hasn't been effective as dictator for awhile now. [16:01] And "most people" just want to be happy and prosper [16:04] Oh Wikipedia says I'm wrong, the embargo is still in place but it's been relaxed, and the US-Cuba relationship has eased. [16:06] ahh ok [16:39] so I solved my little Cogent problem [16:41] what cogent problem was that? [16:41] preferring EU route to US from Cogent? [17:16] mercutio: yeah [17:17] staticsafe: was that related to your bgp announcement from ARP? [17:17] staticsafe: i'd prepend cogent in EU to US if it was just that EU provider and ARP... [17:18] as arp hasn't got a dircet cogent route [17:18] well it was unintentionally solved as I added a another US node that had Cogent transit [17:18] ok [17:18] same diff [17:19] i can't find relevant community for that [17:19] but yeah the other way will work i suppose [17:20] not having cogent was a positive thing of arp when i joined [17:20] cogent has got a little better since then though [17:20] well for on-net [17:21] still nothing in asia pacific for now, those regions are expensive and I haven't found a suitable provider yet [17:21] yeah AP is expensive [17:22] also routing sucks [17:22] arp shouldn't be too bad from AP [17:22] indeed [17:22] strictly speaking i'm in AP [17:23] but pings are shorter to US than "AP" often [17:23] I'll be addine a node in New York shortly as well [17:23] actually routes from china can be better performance than from china to US [17:23] but that's probably congestion related more than anything else [17:26] why do you need so many? [17:27] where's your other US one? [17:29] Orlando, FL [17:29] via AS33182 [17:30] what's an ip on your network again? [17:30] anycast1.as393949.net [17:30] yeh my route is hitting arp [17:30] so all good from here :) [17:31] oh wow it was hostdime [17:31] that was a guess just from location hah [17:32] san jose hits florida [17:32] uk hits arp [17:33] interesting, via what transit provider? [17:33] level3/pccw [17:33] it was fine with ipv6 [17:33] it was only ipv4 doing that [17:33] and my other uk host is fine [17:34] anycast is a bit of a pita [17:34] it is [17:34] also because BGP is a fairly dumb protocol [17:34] ipv6 hits arp, ipv4 hits florida from japan [17:34] yeah you need to screw around with communities [17:35] which is different amongst different providers [17:35] that's why i'm normally go UK/US/AP [17:35] or such [17:35] so i don't worry about these slightly wrong things :) [17:36] i'm struggling to remember any locations i can try from [17:37] err any more [17:37] he.net seems to like las01-01-edg01.knightswarm.net [17:37] that is in Las Vegas [17:37] it works better if you haev the same upstreams in diff locations [17:37] yeah [17:37] oh sydney i didn't check from [17:38] sydney is hitting arp [17:38] is each node just a vm with identical services running? [17:38] yeah [17:38] and a unicast IP for management? [17:38] indeed [17:39] how expensive was the uk one? [17:39] 22.50 GBP per month normally, first month was 72 GBP due to set up fees [17:40] heh [17:40] @exch 22.50 GBP to USD [17:40] 22.50 GBP -> 34.871448342986 USD (as of Wed, 10 Jun 2015 17:01:01 -0700) [17:40] oh not as bad as i thought [17:40] @exch 72 GBP to USD [17:40] 72 GBP -> 111.58863469756 USD (as of Wed, 10 Jun 2015 17:01:01 -0700) [17:40] @exch 50 GBP to USD [17:40] 50 GBP -> 77.492107428858 USD (as of Wed, 10 Jun 2015 17:01:01 -0700) [17:41] i cant' remember if arp charges a setup fee [17:41] if it does it's not much [17:41] no setup fee [17:41] i wonder why [17:42] probably just to be nice [17:42] Hostdime waived their usual setup fee for me [17:42] it's not like there's direct profit from offering bgp [17:43] what was their usual setup fee like? [17:43] hm not a set up fee but a maintenance fee per month which is $50/mo [17:44] ahh sweet [17:44] that was nice of them [17:44] yeah [17:45] did you check out he.net's graph? [17:45] Hostdime is well connected to South America due to their NOTA connection [17:45] yeah [17:46] hmm knightswarm has the biggest chunk [17:46] well on ipv4 [17:46] they don't do ipv6? [17:46] they don't, they told me it is coming soon [17:47] hmm you have long path to level3 [17:47] i think arp advertisement out level3 must not be working for some reason [17:49] indeed [17:51] the graph may change yet, Hostdime has told me not all of their transits have updated their filters yet [17:52] hostdime charge $50 for virtual servers? [18:06] yeah [18:07] its not their usual market demographic, they sell colo mostly [18:07] sounds like it's getting expensive [18:08] * brycec is colo'd with Hostdime (not me personally, but a group I work with) [18:12] mercutio: it is, but this little project is not a long-term project, once I am done, I will settle with one provider to route my prefix, no anycast [18:13] ahh [18:13] you could do two? [18:13] That's what she said!! [18:16] mercutio: well, long term goal is to run some services like personal websites, SMTP etc. [18:16] ahh right [18:16] and you only have one /24 [18:16] yeah [19:08] how does GRE work when it comes to NAT? [19:08] can certain ports or protocols be forwarded to get it going? [19:09] can both routers participating in the GRE be behind their respective NATs, or does one need its own public IP on an interface [19:09] routers being cisco ofcourse [19:09] Just wondering -why "cisco ofcourse"? [19:10] because I am preparing for my CCNP [19:10] and its what I know best [19:10]