NetworkingNexus.net

Juniper EX4550. EX1113. EX063. What?

Juniper EX4550

I came across some weird behavior (I think) in Junos recently. Nothing major, but an annoyance nonetheless.

Juniper EX4550

Let’s check out some statistics on this beautiful looking EX4550 stack, shall we?

john@EX4550> show pfe statistics bridge

Slot 0

PFE:                         0
----------------------------------------
----  Ingress Counters ----
-- Set0 --
Received:            654383803
VLAN Filtered:               0
Security Filtered:           0
Other Discards:            324
-- Set1 --
Received:            654383797
VLAN Filtered:               0
Security Filtered:           0
Other Discards:            324
[...]

Oh dear look, 324 “Other” discards on my EX4550. I sure hope they aren’t incrementing. Let’s issue the command again and check if the 324 figure has increased?

{master:0}
john@EX4550> show pfe statistics bridge

Slot 0

PFE:                         0
----------------------------------------
----  Ingress Counters ----
-- Set0 --
Received:               913272
VLAN Filtered:               0
Security Filtered:           0
Other Discards:              0
-- Set1 --
Received:               913267
VLAN Filtered:               0
Security Filtered:           0
Other Discards:              0
[...]

No it hasn’t. In fact it has mysteriously reset itself along with all the other PFE statistics. That is, well, suboptimal to say the least.

Countaz

It’s probably a known bug, though it’s not important enough for me to go look it up. Maybe it’s even intentional (though for the life of Continue reading

Zuckerberg’s zeal for free Internet shows in Internet.org video

Facebook CEO Mark Zuckerberg isn't an evangelical preacher, but his latest video promoting the new Internet.org Platform is filled with a missionary zeal for free basic Internet for the 4 billion people worldwide without access.The nearly seven-minute video is also partly an ethical appeal by Zuckerberg to the tech community to put those without basic Internet service before their interest in "the intellectual purity of technology."Even though the appeal is evidently heartfelt, almost spiritual, analysts noted that Facebook, the corporation, stands to benefit ultimately from its free basic Internet message.To read this article in full or to leave a comment, please click here

Do you need a container-specific Linux distribution?

You've always been able to run containers on a variety of operating systems: Zones on Solaris; Jails on BSD; Docker on Linux and now Windows Server; OpenVZ on Linux, and so on. As Docker in particular and containers in general explode in popularity, operating system companies are taking a different tack. They're now arguing that to make the most of containers you need a skinny operating system to go with them.To read this article in full or to leave a comment, please click here

The Carly Fiorina teardown begins as ’16 race heats up

Carly Fiorina has been described as flamboyant, bold, polarizing, decisive, imperious and unqualified. Her six-year tenure as CEO of Hewlett-Packard ended with her forced resignation, something that's not helpful as she begins a presidential run.If Fiorina's bid for the Republican nomination, announced on Monday, registers more than a single digit in the polls, her tenure at HP will be scrutinized -- as will her exit. (Though she might be able to explain the latter away.)+ A LOOK BACK: Carly Fiorina features Cisco in political attack ad +To read this article in full or to leave a comment, please click here

Please Sponsor Me: Abseil the Spinnaker Tower

Original content from Roger's CCIE Blog Tracking the journey towards getting the ultimate Cisco Certification. The Routing & Switching Lab Exam
If you are a regular visitor to this site or a new one and have learnt anything from it and would like to give something back now is your chance. Please donate whatever you can to support me via the link below. https://www.justgiving.com/Roger-Perkin I will be doing a sponsored Abseil of the Spinnaker Tower in... [Read More]

Other pages of interest:

Post taken from CCIE Blog

Original post Please Sponsor Me: Abseil the Spinnaker Tower

Interview of Everything: Cisco CEO Chambers on white boxes, SDN, leadership and the cloud

Little did we know that our interview with John Chambers at Cisco’s Texas Data Center Day in April might be our last with him as the company’s CEO. As we learned this week, he’ll hand the reins to Chuck Robbins in July, though will remain the company’s chairman and become its executive chairman as well. He’ll also hand Robbins the challenge of making Cisco the No.1 IT company by forging ahead with its data center, cloud and Internet of Everything initiatives. Chambers discussed those topics and more with IDG Enterprise VP and Chief Content Officer John Gallant.To read this article in full or to leave a comment, please click here

Interview of Everything: Cisco CEO Chambers on white boxes, SDN, leadership and the cloud

Cybercriminals borrow from APT playbook in attack against PoS vendors

Cybercriminals are increasingly copying cyberespionage groups in using targeted attacks against their victims instead of large-scale, indiscriminate infection campaigns.This change in tactics has been observed among those who launch attacks, as well as those who create and sell attack tools on the underground market.A recent example of such behavior was seen in a cybercriminal attack against vendors of point-of-sale systems that researchers from RSA documented last week.The attackers sent emails to specific vendors impersonating small businesses such as restaurants. This technique, known as spear-phishing, is typically associated with advanced persistent threats (APTs)—highly targeted, customized attacks whose goal is usually long-term cyberespionage.To read this article in full or to leave a comment, please click here

Using VMware NSX, Log Insight, and vRealize Orchestator to Improve Security

This post was written by Hadar Freehling, Security & Compliance Systems Engineer Specialist at VMware. The post originally appeared here on the dfudsecurity blog

***

There is a lot of power in having security controls in software. This is what I tell my customer, not just because I work for VMware. Why is that? The reason I find it so powerful is that I can now automate a lot of the security actions that use to be very manual. No more opening tickets to get a SPAN setup on the switch. No more waiting for a firewall change window to lock down a port. Not only that, I have visibility into the VM, like what apps are running and who started them, and what’s on the wire. I can protect different assets with different policies, and these polices can be dynamic.

With the help of my good friend John Dias (vRealize Orchestrator master), we created the follow video to show some of the potential of having everything in software.

Here is the scenario of the workflow. You are a security person and want to stop all server admins and users from launching a putty session once they have RDPed into a server Continue reading

The Upload: Your tech news briefing for Tuesday, May 5

Chambers steps down as Cisco CEO, Robbins gets the jobIt’s finally time for the changing of the guard at Cisco, after many months of rumors that John Chambers, CEO for 20 years, was planning his retirement. His surprise replacement is senior VP of worldwide operations Chuck Robbins, who wasn’t highlighted in a succession plan a few years ago. Chambers will move into the role of executive chairman on July 26 when Robbins takes over.EU’s new digital strategy could target US tech vendorsTo read this article in full or to leave a comment, please click here

The Upload: Your tech news briefing for Tuesday, May 5

Dinesh Dutt from Cumulus Networks on Data Center Fabrics Webinar

Occasionally I’d invite a vendor speaker (usually working for an interesting startup) to present in my Data Center Fabrics webinar series. Dan Backman from Plexxi was talking about affinity networking in 2013, and in the May 2015 update session we’ll have Dinesh Dutt from Cumulus Networks talking about their software platform, architectures you can build with whitebox (or britebox) switches running Cumulus Linux, exciting network automation options, and cool new features they’re constantly adding to their software.

Click to register

How Apple has made me feel really happy and really guilty at the same time

I’m feeling guilty; let me tell you why ... I hate having to stop using a piece of equipment because of designed-in obsolescence but, sometimes, there’s no choice. Consider products such as many of the available Bluetooth headsets; once the internal, non-replaceable battery fails they can only be thrown away. But those are as nothing to the top end Apple products which are designed for a life span of three years.I ran into the planned obsolescence issue recently with a 27-inch Apple iMac I purchased just over four years ago. It was a mid-2010 model and I loved it until OS X Yosemite appeared. I’d given the new OS a few weeks before upgrading to see if anything was going to be a problem for me but I didn't find anything major so I went ahead.To read this article in full or to leave a comment, please click here

Netflix open-sources security incident management tool

Netflix has released under an open-source license an internal tool it developed to manage a deluge of security alerts and incidents.Called FIDO (Fully Integrated Defense Operation), the tool is designed to research, score and categorize threats in order to speed up handling of the most urgent ones.Netflix started developing FIDO four years ago after finding it took from a few days to more than a week to resolve issues that were entered into its help-desk ticketing system, the company wrote in a blog post Monday.It was a largely manual and labor intensive process. “As attacks increase in number and diversity, there is an increasing array of detection systems deployed and generating even more alerts for security teams to investigate,” it said.To read this article in full or to leave a comment, please click here

Netflix open-sources security incident management tool

Netflix has released under an open-source license an internal tool it developed to manage a deluge of security alerts and incidents.Called FIDO (Fully Integrated Defense Operation), the tool is designed to research, score and categorize threats in order to speed up handling of the most urgent ones.MORE: New Cisco CEO: Meet the Real Chuck RobbinsNetflix started developing FIDO four years ago after finding it took from a few days to more than a week to resolve issues that were entered into its help-desk ticketing system, the company wrote in a blog post Monday.To read this article in full or to leave a comment, please click here

Sally Beauty investigates possible second card breach

Sally Beauty Holdings said it is investigating another possible payment card breach, about a year after it reported a similar cyberattack.The retail chain, which runs nearly 2,800 stores in the U.S., said it has received reports of ”unusual activity” involving payment cards used at some of its stores during the last week of April. Law enforcement has been contacted, the company said Monday.It did not say if the second incident is related to last year’s attack. “Until this investigation is completed, it is difficult to determine with certainty the scope or nature of any potential incident,” it said.To read this article in full or to leave a comment, please click here

Rombertik malware destroys computers if detected

A new type of malware resorts to crippling a computer if it is detected during security checks, a particularly catastrophic blow to its victims.The malware, nicknamed Rombertik by Cisco Systems, is designed to intercept any plain text entered into a browser window. It is being spread through spam and phishing messages, according to Cisco’s Talos Group blog on Monday.Rombertik goes through several checks once it is up and running on a Windows computer to see if it has been detected.That behavior is not unusual for some types of malware, but Rombertik “is unique in that it actively attempts to destroy the computer if it detects certain attributes associated with malware analysis,” wrote Ben Baker and Alex Chiu of the Talos Group.To read this article in full or to leave a comment, please click here

VCE’s VxRack systems want to be Vblocks for the next generation

EMC’s VCE division wants to take the engineered systems approach it’s honed with its Vblocks into next-generation mobile and cloud applications.On Monday, it introduced the VCE VxRack System, a hyperconverged platform designed to scale out to thousands of racks of computing and storage capacity. Where Vblocks are designed to run traditional business applications like ERP (enterprise resource planning), VxRack is built for a new era.The Vblock coverged architecture has been a success among customers looking to run traditional mission-critical enterprise applications. It was the founding product of VCE, which was formed in 2009 as a joint venture among VMware, Cisco Systems and EMC, and it remains VCE’s flagship, the company;s CEO Praveen Akkiraju said on Monday at EMC World, where the VxRack System was announced.To read this article in full or to leave a comment, please click here

« Previous 1 … 3,420 3,421 3,422 3,423 3,424 … 3,755 Next »