Nobody cares and there's no reason to care. ISPs should implement Carrier NAT at the ISP, and charge extra for public IPs. Once ARIN gets a market going for IP addresses, there will be incentives to clean up and resell address space.
Name a mainstream application that doesn't work behind NAT these days...they don't exist. As a carrot, ISPs can hand out global IPv6 addresses to promote P2P v6 clients etc to keep that ball rolling, but there's really no rush.
Actually tshark is the command line version of wireshark, and it is the first tool I reach for unless I need some capabilities of tcpdump. Tshark will give you a lot more information and protocol decoding that is very useful for troubleshooting application layer protocol issues without the need for loading wireshark.
Excuse me, IPv4 usage is dropping? Name the last time someone returned a/8 back to the 'pool.' I think you mean the rate of allocation depletion is slowing, but even the rate is now rising again. Growth of the internet has fluctuated, but the internet has never shrunk in size.
Using Ethernet is not odd, that's literally all there is these days. Sure, there are technologies like Infiniband, but Ethernet is far and away the cheapest and most widely supported networking standard. It sounds like they were experiencing a broadcast storm from a locked up device. I can't tell you the amount of times I've seen stand-alone devices lock up on a busy network because of a bad TCP/IP stack. Often times they will flood packets, especially broadcast frames. There are protections against bad devices such as broadcast limiters and a number of features that protect and limit unauthorized or undesirable traffic.
Ethernet isn't perfect but it's the only realistic option. Managed properly, it can be very reliable. The biggest problem I see from this article is that there is a lack of regulation and testing of the equipment that goes in to these plants. These poor TCP/IP stacks should have never gotten past the testing phase when it comes to a nuclear power plant.
Firewalls could certainly be configured correctly by default on routers, you do not need Network Address Translation to block incoming connections. All this would take is a better user interface and a solid default configuration. This is one of the worst arguments I have heard in a long time, and would be similar to arguing dial up is better than broadband because your computer is less exposed. I can't tell you how many problems NAT has caused me over the years, and it's a kludge that should be fixed. All those that want to keep NAT because it's secure don't understand network security.
I can't tell you how many times the exact opposite has happened to me. I have had to spend hours getting X to work with the hardware that is on my machine at the time. Some hardware is easier than others, but you have to admit, getting video up and running is much easier in Windows than Linux.
One thing that measuring in bits makes easy is conversion between Mb and bits is on a power of 10 basis. 1000000bs is equal to 1Mbs instead of.95Mbs or so. For this reason alone I prefer it over a byte measurement.
What happens when you want to upgrade your transceivers? Where I work, we are still using the same fiber from the 80's that used to carry 2Mb that is now carrying gig. I don't see how embedding the electronics in the glass would do anything but make it obsolete in the near future. That's the great thing about fiber, you just upgrade the end point equipment and scale it up for more bandwidth.
The routers/switches we use at work say they'll scale to 720GB/sec, but we'll never come close to that. Those sup720 cards are almost universal these days.
There's nothing wrong with putting this stuff on the network. Before the network, each system needed it's own cable plant with it's own problems installed in every building. Air conditioners had their air pressure system, with door locks and other equipment on seperate low voltage systems. It costs a lot of money to install and maintain all those different cable plants. With IP, you just run network jacks everywhere, and when Bob wants to cool down a building, he can do it from his desk. This is great for large campuses or where infrastructure is managed remotely.
They are not talking about the fire alarm system or critical infrastructure, but for everything else, it's a good idea that is being sold nationwide on all large construction projects. I happen to be a network engineer, and these days, our equipment is more reliable than the primitive token ring systems or low voltage systems strung around campus that I've seen. The only problem is when the network goes down, all the doors unlock and security cameras go down;) But that never happens...
When I ran linux as my primary system and decided to dual boot Windows, it usually was to get software I had to run rather than a game. For mac users at home, being able to boot Windows on your $2k mac for something you have to use windows for would be a lot cheaper than buying two computers. For companies, it's another story.
Usability on the products are horrible. We use WebCT where I work and we can't even get the professors to use it for the most basic tasks. The UI is horrible, and even after teachers are trained and start using it, they end up going back to a simple web page. We can't even get 15% of classes to use the system. I know CS professors who hate it and personally I do too. It is good for giving quizzes and posting things on the calendar, but beyond that NO ONE USES IT. I agree that the concept could be extremely powerful, but the implementation is just bad. And please don't tell me how professors are just too lazy to learn the system, they just don't have the time to waste troubleshooting a confusing system. In the end, it's usually easier to break out frontpage and post assignments and test dates on a simple website. IMHO, these products have a long ways to go before the time they are supposed to save is realized.
Are you kidding me? A cheap PC to do BGP? Obviously you have never done any work with eBGP in the real world. There are only two companies with proper BGP implementations, Cisco and Juniper. Anything else will cause nothing but problems, and don't try to tell me how BGP is and open standard than anyone can conform to. It just isn't how things are done...
Re:What is your opinion...
on
Ask Sid Meier
·
· Score: 1
ttdpatch is an awesome addition to the original game as it is. I haven't played openttd or the new transport tycoon, but the old patched game is still incredible. If only I could get a larger map...
Well said, this whole thing is rediculous considering what the MA rating actually stand for. Every R movie I know has tons of nudity in it, and besides, movies scenes are real instead of some cheesy cartoon. Anyone with the resources to exploit the locked sequence using the internet could find tons of porn in seconds.
Putting all of that aside, kids should not be playing GTA period. Parents need to realize that games are increasingly like movies, they appeal to a broad spectrum of the population and not all movies are appropriate for kids. What I don't understand is why gratuitous violence causes few concerns but a cheesy sex scene will force a game to be pulled. It's rated R, what did you expect?
I think 60 Hudson is the biggest telco hotel in the world and 56 Marietta is around number 3. If the internet was to lose either of those two buildings, it would be a lot worse than losing Pakistan for sure. Though they are highly redundant:
That is pretty bad, but sometimes people forget about the physical aspects of running cable too. I once read that all transatlantic cables for North America follow the same path off the shore of New Jersey or somewhere close to that. Just imagine if someone dragged their anchor through that trough. Also, many times people will setup what they think are redundant internet connections from different ISPs, when in reality, they all terminate on the same switch somewhere.
Also, when you think about internet consolidation points such as in LA or Atlanta, pretty much everything within 200 miles goes through the same building or building complex. That makes peering easier, but just imagine if something catostrophic happened.
The way we handle it at my university is that your computer causes problems on the network and you do not take care of them, they are taken offline. The professors can do what they want if they choose to control their IT infrastructure, but if their equipment causes problems on the backbone, it is automatically shutdown. Most people do not have a problem with the policy at all. They can have as much control as they want if they manage their security properly. Most universities have a long way to go, but there have to be rules on the network, just like there are rules when driving a car. In my case, everyone is happy for once because it finally works right.
In my experience, that $30 box is the first to die under heavy load. It may work at home with a few machines, but on a large campus network like the poster is describing, a couple of machines could knock it offline. Try some hardware ACLs on the upstream switch for the heavy filtering and an adequate enterprise firewall between the server room network and the campus backbone. As far as host based firewalls, the built-in windows firewall is fairly easy to manage on a large number of machines.
I would recommend a high performance firewall with a default deny policy between the server room network and the rest of the campus. Also, a cheap solution might be ACLs on the upstream switch, enterprise equipment can usually handle a high rate of traffic compared to most firewalls, especially if you have an internal issue. Look in to using both solutions, ACLs for the heavy filtering and the firewall box as the next line of defense.
Also, the servers shouldn't be getting infected if they are patched. A good precaution might be turning on the Windows firewall simply so programs can't automatically open ports, but it should never get to that on managed servers and you should know all of the services running on all of the servers.
Protecting segments of the network from internal threats is essential in an environment like that. I would recommend consolidating your security rather than patching holes here and there with host based firewalls, you will have a lot more control of the situation then. One plus to the windows firewall is that it can be managed through group policy which may or may not be a problem.
Finally, someone with some sense around here. There is practically no science going on on the space station right now. If we do any work in space, I think it should be for equipment like the hubble, unmanned probes and commercial satellites. Everything else is a huge waste of money, especially given the deficit spending of late.
There are no good reasons to put people in space other than the political ones, hence China. It's a publicity stunt that is not nearly worth the cost, so I agree with the above poster that we have many more 'domestic' problems on earth right now to solve.
A nice thing about the Polycoms is that you can lock them down tight so no one can mess them up. I also find them overall easier on the users than Tandberg, though they tend to have overall less features and tweaks than say a Tandberg. YMMV
My only beef with my 2001FP is that with DVI I cannot control contrast which does make a difference.
You have to adjust the contrast in software. If you have an NVidia card, it is under the display settings on the video control panel in the custom section.
Slashdot Mirror
Nobody cares and there's no reason to care. ISPs should implement Carrier NAT at the ISP, and charge extra for public IPs. Once ARIN gets a market going for IP addresses, there will be incentives to clean up and resell address space.
Name a mainstream application that doesn't work behind NAT these days...they don't exist. As a carrot, ISPs can hand out global IPv6 addresses to promote P2P v6 clients etc to keep that ball rolling, but there's really no rush.
Actually tshark is the command line version of wireshark, and it is the first tool I reach for unless I need some capabilities of tcpdump. Tshark will give you a lot more information and protocol decoding that is very useful for troubleshooting application layer protocol issues without the need for loading wireshark.
Excuse me, IPv4 usage is dropping? Name the last time someone returned a /8 back to the 'pool.' I think you mean the rate of allocation depletion is slowing, but even the rate is now rising again. Growth of the internet has fluctuated, but the internet has never shrunk in size.
Using Ethernet is not odd, that's literally all there is these days. Sure, there are technologies like Infiniband, but Ethernet is far and away the cheapest and most widely supported networking standard. It sounds like they were experiencing a broadcast storm from a locked up device. I can't tell you the amount of times I've seen stand-alone devices lock up on a busy network because of a bad TCP/IP stack. Often times they will flood packets, especially broadcast frames. There are protections against bad devices such as broadcast limiters and a number of features that protect and limit unauthorized or undesirable traffic.
Ethernet isn't perfect but it's the only realistic option. Managed properly, it can be very reliable. The biggest problem I see from this article is that there is a lack of regulation and testing of the equipment that goes in to these plants. These poor TCP/IP stacks should have never gotten past the testing phase when it comes to a nuclear power plant.
Firewalls could certainly be configured correctly by default on routers, you do not need Network Address Translation to block incoming connections. All this would take is a better user interface and a solid default configuration. This is one of the worst arguments I have heard in a long time, and would be similar to arguing dial up is better than broadband because your computer is less exposed. I can't tell you how many problems NAT has caused me over the years, and it's a kludge that should be fixed. All those that want to keep NAT because it's secure don't understand network security.
I can't tell you how many times the exact opposite has happened to me. I have had to spend hours getting X to work with the hardware that is on my machine at the time. Some hardware is easier than others, but you have to admit, getting video up and running is much easier in Windows than Linux.
One thing that measuring in bits makes easy is conversion between Mb and bits is on a power of 10 basis. 1000000bs is equal to 1Mbs instead of .95Mbs or so. For this reason alone I prefer it over a byte measurement.
What happens when you want to upgrade your transceivers? Where I work, we are still using the same fiber from the 80's that used to carry 2Mb that is now carrying gig. I don't see how embedding the electronics in the glass would do anything but make it obsolete in the near future. That's the great thing about fiber, you just upgrade the end point equipment and scale it up for more bandwidth.
Here's one that does 92 TB/sec. Granted, you have to scale it up but it's a fairly impressive router with some decent software for once:
h tml
http://www.cisco.com/en/US/products/ps5763/index.
The routers/switches we use at work say they'll scale to 720GB/sec, but we'll never come close to that. Those sup720 cards are almost universal these days.
There's nothing wrong with putting this stuff on the network. Before the network, each system needed it's own cable plant with it's own problems installed in every building. Air conditioners had their air pressure system, with door locks and other equipment on seperate low voltage systems. It costs a lot of money to install and maintain all those different cable plants. With IP, you just run network jacks everywhere, and when Bob wants to cool down a building, he can do it from his desk. This is great for large campuses or where infrastructure is managed remotely.
;) But that never happens...
They are not talking about the fire alarm system or critical infrastructure, but for everything else, it's a good idea that is being sold nationwide on all large construction projects. I happen to be a network engineer, and these days, our equipment is more reliable than the primitive token ring systems or low voltage systems strung around campus that I've seen. The only problem is when the network goes down, all the doors unlock and security cameras go down
When I ran linux as my primary system and decided to dual boot Windows, it usually was to get software I had to run rather than a game. For mac users at home, being able to boot Windows on your $2k mac for something you have to use windows for would be a lot cheaper than buying two computers. For companies, it's another story.
With most SLRs these days, you can just bump up the ISO and still get good pictures. Besides, fast lenses are heavy.
The best coverage of the issue I've seen so far is from Foreign Affairs:
6 02/kenneth-neil-cukier/who-will-control-the-intern et.html
http://www.foreignaffairs.org/20051101facomment84
They place it in perspective, but also point out the nations who are shouting the loudest are also the least free. Overall, a good read.
Usability on the products are horrible. We use WebCT where I work and we can't even get the professors to use it for the most basic tasks. The UI is horrible, and even after teachers are trained and start using it, they end up going back to a simple web page. We can't even get 15% of classes to use the system. I know CS professors who hate it and personally I do too. It is good for giving quizzes and posting things on the calendar, but beyond that NO ONE USES IT. I agree that the concept could be extremely powerful, but the implementation is just bad. And please don't tell me how professors are just too lazy to learn the system, they just don't have the time to waste troubleshooting a confusing system. In the end, it's usually easier to break out frontpage and post assignments and test dates on a simple website. IMHO, these products have a long ways to go before the time they are supposed to save is realized.
Are you kidding me? A cheap PC to do BGP? Obviously you have never done any work with eBGP in the real world. There are only two companies with proper BGP implementations, Cisco and Juniper. Anything else will cause nothing but problems, and don't try to tell me how BGP is and open standard than anyone can conform to. It just isn't how things are done...
ttdpatch is an awesome addition to the original game as it is. I haven't played openttd or the new transport tycoon, but the old patched game is still incredible. If only I could get a larger map...
Well said, this whole thing is rediculous considering what the MA rating actually stand for. Every R movie I know has tons of nudity in it, and besides, movies scenes are real instead of some cheesy cartoon. Anyone with the resources to exploit the locked sequence using the internet could find tons of porn in seconds.
Putting all of that aside, kids should not be playing GTA period. Parents need to realize that games are increasingly like movies, they appeal to a broad spectrum of the population and not all movies are appropriate for kids. What I don't understand is why gratuitous violence causes few concerns but a cheesy sex scene will force a game to be pulled. It's rated R, what did you expect?
Just to give everyone and idea of how many ISPs can connect in a single building, check out this list:
http://www.telx.com/carriers.cfm
I think 60 Hudson is the biggest telco hotel in the world and 56 Marietta is around number 3. If the internet was to lose either of those two buildings, it would be a lot worse than losing Pakistan for sure. Though they are highly redundant:
http://www.telx.com/products.cfm?id=10
That is pretty bad, but sometimes people forget about the physical aspects of running cable too. I once read that all transatlantic cables for North America follow the same path off the shore of New Jersey or somewhere close to that. Just imagine if someone dragged their anchor through that trough. Also, many times people will setup what they think are redundant internet connections from different ISPs, when in reality, they all terminate on the same switch somewhere.
Also, when you think about internet consolidation points such as in LA or Atlanta, pretty much everything within 200 miles goes through the same building or building complex. That makes peering easier, but just imagine if something catostrophic happened.
The way we handle it at my university is that your computer causes problems on the network and you do not take care of them, they are taken offline. The professors can do what they want if they choose to control their IT infrastructure, but if their equipment causes problems on the backbone, it is automatically shutdown. Most people do not have a problem with the policy at all. They can have as much control as they want if they manage their security properly. Most universities have a long way to go, but there have to be rules on the network, just like there are rules when driving a car. In my case, everyone is happy for once because it finally works right.
In my experience, that $30 box is the first to die under heavy load. It may work at home with a few machines, but on a large campus network like the poster is describing, a couple of machines could knock it offline. Try some hardware ACLs on the upstream switch for the heavy filtering and an adequate enterprise firewall between the server room network and the campus backbone. As far as host based firewalls, the built-in windows firewall is fairly easy to manage on a large number of machines.
I would recommend a high performance firewall with a default deny policy between the server room network and the rest of the campus. Also, a cheap solution might be ACLs on the upstream switch, enterprise equipment can usually handle a high rate of traffic compared to most firewalls, especially if you have an internal issue. Look in to using both solutions, ACLs for the heavy filtering and the firewall box as the next line of defense.
Also, the servers shouldn't be getting infected if they are patched. A good precaution might be turning on the Windows firewall simply so programs can't automatically open ports, but it should never get to that on managed servers and you should know all of the services running on all of the servers.
Protecting segments of the network from internal threats is essential in an environment like that. I would recommend consolidating your security rather than patching holes here and there with host based firewalls, you will have a lot more control of the situation then. One plus to the windows firewall is that it can be managed through group policy which may or may not be a problem.
Finally, someone with some sense around here. There is practically no science going on on the space station right now. If we do any work in space, I think it should be for equipment like the hubble, unmanned probes and commercial satellites. Everything else is a huge waste of money, especially given the deficit spending of late.
There are no good reasons to put people in space other than the political ones, hence China. It's a publicity stunt that is not nearly worth the cost, so I agree with the above poster that we have many more 'domestic' problems on earth right now to solve.
A nice thing about the Polycoms is that you can lock them down tight so no one can mess them up. I also find them overall easier on the users than Tandberg, though they tend to have overall less features and tweaks than say a Tandberg. YMMV
You have to adjust the contrast in software. If you have an NVidia card, it is under the display settings on the video control panel in the custom section.