R. J. Foster and Associates

Tweet forwarded by @russruns

2011-10-10T22:42:00.001-05:00

cmross: Will seek this out later today. Steve Jobs banner in the Windy City a nice tribute http://t.co/UjlQ2eG0 via @zite

Original Tweet: http://twitter.com/cmross/status/123434197460324352

Sent via TweetDeck (www.tweetdeck.com)

Steve Jobs -- 1955-2011

2011-10-05T20:06:00.001-05:00

http://www.apple.com

http://www.apple.com/stevejobs/

F5 LTM GTM IPv6 quick hit

2011-10-04T18:15:00.000-05:00

Just quick note, F5 products LTM and GTM work just great with IPv6. But IPv6 address shortening (double-colons '::') is not permitted in the GUI or tmsh.

LTM and GTM are Linux based systems, so if you are using BASH, the standard rules apply.

But if you are using the GUI or tmsh, IPv6 addresses must be fully completed.

This:

fe80:0:0:0:201:d7ff:fed4:d041

Not this:

fe80::201:d7ff:fed4:d041
^^ Cannot have a double colon.

IPv6 SLAAC(er)

2011-09-28T18:08:00.000-05:00

Promoted as a feature of IPv6, allows a device to connect to a network and receive an addresses without the administrative overhead of managing a DHCP.

But there are a few limitations that limit its usefulness in an enterprise environment:

SLAAC only works with /64 subnets. No more, no less.
SLAAC does not hand out DNS information (or any Windows domain specific info).

You get an address, a fixed subnet, and a default gateway. Period. This doesn't make it entirely useless, but definitely SLAAC is not a DHCP killer.

To enable a Cisco router to being making SLAAC announcements, all you need to do is configure an interface with an IPv6 address and a /64 subnet:

interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
ipv6 address 2001:1890:1208:240::1/64

This line:

ipv6 address 2001:1890:1208:240::1/64

causes the router to begin making ND announcements which permit other devices to SLAAC themselves. We can verify announcements with a show ipv6 interface:

V6-R1-2911#sh ipv6 int gi0/1
GigabitEthernet0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::xxxx:xxxx:xxxx:xxxx
No Virtual link-local address(es):
Global unicast address(es):
   2001:xxxx:xxxx:xxxx::1, subnet is 2001:xxxx:xxxx:xxxx::/58
Joined group address(es):
   FF02::1
   FF02::2
   FF02::1:FF00:1
   FF02::1:FFFD:CCC1
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
V6-R1-2911#

So you've got IPv6...

2011-09-13T13:20:00.000-05:00

...now what?

This site contains a list of websites with verified IPv6 connectivity. Regularly updated and tested. Also provides the resolved IPv6 address so you can perform basic ping testing in case your DNS is flaky (anyone else have this problem?).

Global IPv6 Deployment Progress Report

Haven't ruled out a problem on the local end, but we do get better (but not 100%) responses from:

Public DNS servers:

	IPv6	IPv4
Open DNS	2620:0:ccc::2 2620:0:ccd::2	208.67.222.222 208.67.220.220
Google Public DNS	2001:4860:4860::8888 2001:4860:4860::8844	8.8.8.8 8.8.4.4

Flickr API

2010-11-29T19:58:00.001-06:00

This falls into the category of both work and fun. Many of my clients use an online host to manage their photos. My personal favorite is Flickr. Whether you’re a professional photographer looking to expand your market or show off your latest, or you’re in a sales/marketing/promotion role and sharing pictures from the latest trade show, or simply have a need to share more than a handful of digital photographs, a photo-specific hosting site makes the job much easier and allows you to focus on results rather than the process.

Flickr provides the ability to easily embed photos in other applications and a highly extensible API for extracting and using photos for your own customized needs.

Before you begin creating scripts, you’ll need a Flickr API key.

From your account page, click on the “Sharing & Extending” tab.

Scroll down to “Your API keys” and click on the link to the right, which likely says “You have no API keys assigned to this account.”

Click on the “GET A KEY” button.

For now, we’ll stick with non-commercial applications, so click on “APPLY FOR A NON-COMMERCIAL KEY”.

You’ll need a name and description for you app. For now, we can name it “Test Key” and give it a similar description. After reading the terms of use, confirm and check the boxes and click “SUBMIT”.

You’ll be given two hex strings, a “key” and a “secret”. Since we created non-commercial keys, save these and don’t share with anyone. You’ll want to copy/paste someplace for quick reference, but you can always retrieve them from your account page if necessary.

With your API key, we can now begin writing a script.

Once again, Perl provides a readily available repository called Flickr::API. Use cpan to install:

cpan> install Flickr::API

I’d also recommend having Data::Dumper available.

cpan> install Data::Dumper

The first script will simply confirm your perl module is working properly and your API key is functionally. Fortunately Flickr provides a test method. Make sure to replace your_key_here with your Flickr API key (not your secret).

# C:\Perl\bin\perl.exe

use Flickr::API;
use Data::Dumper;

my $api = new Flickr::API({'key' => 'your_key_here’});

my $response = $api->execute_method('flickr.test.echo');

print "Success:\t$response->{success}\n";
print "Error code:\t$response->{error_code}\n";
print "\n\n\n";
#print Dumper ($response);

For now, leave the last line (Dumper) commented out. Running the perl command should give you these results:

R> perl Flickr-test.pl
Success: 1
Error code: 0

If the results are flipped (success: 0 and error: 1), there’s a high probability your key isn’t correct, or there were problems with the Flickr::API module.

Standards

2010-11-09T20:07:00.000-06:00

We are regularly called on to report on the latency and packet loss to a remote location. We allow the perl script to schlep the data into a csv file, which then gets exported into Excel to produce a graph. Excel has great capability to create charts on-the-fly, edit, and annotate. But consider these two graphs, charting exactly the same data set:

The graph on the bottom produces a much dramatic display of latency, and washed out the packet loss. The top graph emphasis the packet loss, while reducing the impact of the latency. Both are accurate, but the tell a different story.

Typically, charts aren’t viewed in a vacuum, but are rather compared against other charts—charts of other locations, or historical charts. For this reason, it’s important we compare charts of similar scale.

Not only must the axis be the same, but the proportions of the X and Y axis should be similar.

As part of the post-mortem templates, or performance report template, include graph standards: latency maximums, time-scales, and graph sizes. It will make it easier for everyone to compare events as needed.

Mozilla packet-sniffer

2010-10-28T21:20:00.000-05:00

An amazing new add on to Mozilla has been announced. Firesheep takes your average packet-sniffer network eaves-dropping to the next level.

Firesheep sniffs wireless packets, directly from your Mozilla browser, searching for any of a plethora of well-known websites coming across the air and then reassembles the packets into a ready-to view page.

Recognized pages are populated on the side-bar. Double-click and the page is recreated in the view window.

Stay tuned as I take this out to my local Starbucks for an extended test drive.

Cybersecurity Awareness Month, 2010

2010-10-01T12:33:00.000-05:00

The cyber threat has become one of the most serious economic and national security challenges we face. America’s competitiveness and economic prosperity in the 21st century will depend on effective cybersecurity. Every Internet user has a role to play in securing cyberspace and ensuring the safety of ourselves, our families, and our communities online.

http://www.dhs.gov/files/programs/gc_1158611596104.shtm

Browser Acid Tests

2010-05-05T11:35:00.003-05:00

Since I've been working at a hotspot ISP I've taken an interest in browser compatibility. We require the completion of a registration page before users can use our service. If users are unable to complete the registration because of a browser compatibility issue, it's a loss of service for the user and a loss of revenue for our company.

This has led to understanding browsers at a deeper level and their rendering of HTML/CSS standards. Strict enforcement of browser standards can be tested via the AcidTest website.

However, strict enforcement of standards does not mean a better browsing experience. With well over 50% market share, most websites are designed to work with Internet Explorer first and foremost.

You can access the testing site directly at: http://acid3.acidtests.org/

Firefox 3.6.3 gets a respectable 94%:

Chrome 4.1 gets 100%:

Opera 10 also gets 100%:

I.E. 7 produces a completely unusable rendering:

When is a graph not a graph...

2010-01-26T13:25:00.000-06:00

I continued to be surprised at the number of times a group of people can look at the same graph and come to, not only different but, directly opposing conclusions.

Our department was recently contacted because one office was experiencing "slower than usual" transport speeds. Since my client heavily depends on transferring files betweeen offices and between client, a report of slow transfer speeds gets shoved to the top of stack.

I asked what speeds they usually experience, and what they are experiencing now. The response consisted of simply this graph:

So...do you see the problem? Me neither. There's not even a label on the Y axis as to what this graph represents. It's certainly not megabits/sec, or even megabytes/sec. Possibly bytes/sec. So I called backed to ask and found out it's the number of files transferred per hour.

Now that we have that settled. It actually appears that we have recently transferred more files per hour than in the recent past. So another call is placed to clarify the perceived slowness. "It takes longer." "You're transferring twice as many files." "It shouldn't take this long." "How long should it take?". "It should be faster."

At this point I needed to prove (at least to myself) that there was definitively no network issue or--if there was--to uncover it.

At first glance, a chart of bandwidth utilization didn't reveal anything telling. There were no errors, no buffer allocation problems, latency was well within tolerance. However, one noticable artifact is that the bandwidth seem to be stair stepped. Many lines peaked at 0.5 mbps, with several more around 1.5 mbps, a few lines at 3.5 mpbs, and none more than 4 mbps. Since this was a dedicated T3 circuit, I would have expected more random spikes.

Since access to the far end was limited, we could only test in one direction. It was now time to dig into the application and how, exactly, were files being transferred. We found out (1) files are being transferred via FTP, (2) a script kicks off every other hour to send all files in a given directory, (3) a third script is kicked off on demand.

This is now beginning to make sense. With limited visibility on the far end, we decided to push a 1 gig file (hope they have space). Bandwidth raised to 2 mbps and platuaed. While that was running, a second transfer was started. Bandwidth raised to 4 mbps. We continued adding multiple threads, up to 10 consecutive 1 gig files were being pushed. The circuit climbed to an almost predicatble rate of 20 mbps.

With this evidence we were able to contact the server own on the far end. Indeed, his server was limiting the per session throughput to 2 mbps.

But this really wasn't a lesson in technical troubleshooting. This was a lesson in investigative work. A nameless graph and seemingly contradicts the end-user reports. Armed with limited capabilities, we were able to diagnose the problem and, better yet, propose a new solution.

On to the next...

Whats Up Gold 12.4 - Changing Interface Stats Graph

2009-12-17T13:24:00.000-06:00

Seems to be a regular request to change the reporting screens from "percent utilization" to an absolute rate; mbps or even just bits per second. The official way to do this (per Ipswitch) is to create new active monitors. But here's an easier way (note, this is a hack, not supported by Ipswitch).

The one down side is you have to pick a single rate in which to report all circuits, that is, the graph can be changed to report "bits per second", or "megabits per second", but there's no easy way to have it change intelligently based on the circuit. What that means is, your sub-rate T1 lines and 10-gigabit switchports must all be reported in the same rate.

The instructions below will change the graphs to "mbps" which should be good enough for most situtations.

Browse deep into the WUG installation directory to:
[sourcecode language="php" gutter="false"]c:\Program Files\Ipswitch\WhatsUp\HTML\NmConsole\Reports\Full\Device\Performance\RptInterfaceUtilization[/sourcecode]
Make of copy of the file "_RptInterfaceUtilization.inc" and save this original file--just in case.

Open up _RptInterfaceUtilization in your favorite text editor.

Look in the top section, around line 10 for the line:
[sourcecode language="php" gutter="false"]oAspForm.DeclareTranslation("sPercentUtilization", "Percent Utilization");[/sourcecode]
This is what gets printed on the vertical axis. Change the second parameter to read:
[sourcecode language="php" gutter="false"]oAspForm.DeclareTranslation("sPercentUtilization", "Mbits per second");[/sourcecode]
This is just a text field so it be whatever you want. Just keep it realitively short.

Now, scroll down to somewhere around line 35 for this section:
[sourcecode language="php" gutter="false"]" ((nIfInOctets_Avg * 8.0) / (1.0 * NULLIF(nIfSpeedIn, 0))) * 100.0  AS nIfInOctetsUtilization, " +
" ((nIfOutOctets_Avg * 8.0) / (1.0 * NULLIF(nIfSpeedOut, 0))) * 100.0  AS nIfOutOctetsUtilization, " +
" ((nIfInOctets_Max * 8.0) / (1.0 * NULLIF(nIfSpeedIn, 0))) * 100.0  AS nIfInOctetsUtilizationMax, " +
" ((nIfOutOctets_Max * 8.0) / (1.0 * NULLIF(nIfSpeedOut, 0))) * 100.0  AS nIfOutOctetsUtilizationMax " +[/sourcecode]
These lines take the sampled interface rate and divide it by the maximum interface speed to get the percentage. We need to alter this formula to just give us the absolute rate in Mbps. Since SNMP reports octets we still need to multiple by 8 to get bits and then divide by 1 million to get megabits. Change these lines to:
[sourcecode language="php" gutter="false"]" ((nIfInOctets_Avg * 8.0)/1000000) AS nIfInOctetsUtilization, " +
" ((nIfOutOctets_Avg * 8.0)/1000000) AS nIfOutOctetsUtilization, " +
" ((nIfInOctets_Max * 8.0)/1000000) AS nIfInOctetsUtilizationMax, " +
" ((nIfOutOctets_Max * 8.0)/1000000) AS nIfOutOctetsUtilizationMax " +[/sourcecode]
Be careful that the parens match, as to do the quotes. Double check your work and save this file. Make sure it gets saved with the exact same file name and it only has an extension of ".inc"

Fire up your interface utilization reports and send them to the management team.

I should add that an WUG upgrade might possibly overwrite these changes.

Cisco QoS Primer

2009-12-03T13:26:00.000-06:00

A great list of documents from Cisco about Quality of Service; how to use it, configure it, and manage it.

http://www.cisco.com/en/US/tech/tk543/tk759/tech_white_papers_list.html

National Cybersecurity Awareness Month

2009-10-01T13:23:00.000-05:00

Full Story: http://www.dhs.gov/files/programs/gc_1158611596104.shtm

October marks the sixth annual National Cybersecurity Awareness Month sponsored by the Department of Homeland Security. The theme for National Cybersecurity Awareness Month 2009 is “Our Shared Responsibility” to reinforce the message that all computer users, not just industry and government, have a responsibility to practice good “cyber hygiene” and to protect themselves and their families at home, at work and at school.

Americans can follow a few simple steps to keep themselves safe online. By doing so, you will not only keep your personal assets and information secure but you will also help to improve the overall security of cyberspace.