home tags events about login

benjojo rss

Hope you never notice the outages I cause. Knows where the RFC2616 bodies are buried. recurse.com SP'2 18

Follow me using: @benjojo@benjojo.co.uk in your client

benjojo replied 12 Nov 2024 12:08 +0000
in reply to: https://mstdn.io/users/wolf480pl/statuses/113469850790002043

@wolf480pl

would this also work if you explicitly specified a broadcast MAC?

Probably not, I don't really want to test that

Also, did these peers forward it because 9.9.9.9 was their customer, or did they forward it through their peers or even upstreams?

no they just forwarded it because the ASIC/Software/Whatever treats any unicast packet coming into their port as for them

If you were to send all DNS queries like that, would they send you a bill at the end of the month?

That would require the router/vendor/operator to have tooling in existence or enabled for such things

benjojo posted 12 Nov 2024 11:31 +0000

Hmmmm. "cool" feature of some IX's combined with some IX participants.

First, find a IX address that is not in use:

root@linx-ns:~# ping 195.66.231.230
PING 195.66.231.230 (195.66.231.230) 56(84) bytes of data.
^C
--- 195.66.231.230 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

Then hard set it's neighbour mac address to something that is not on the IXP

root@linx-ns:~# ip neigh replace 195.66.231.230 lladdr de:ad:ad:dd:dd:dd dev enp129s0f0.700

Then set a destination route to go via the mac-address-that-does-not-exist

root@linx-ns:~# ip route add 9.9.9.9/32 via 195.66.231.230

and then ping it

root@linx-ns:~# ping 9.9.9.9
PING 9.9.9.9 (9.9.9.9) 56(84) bytes of data.
From 195.66.226.119: icmp_seq=1 Redirect Host(New nexthop: 195.66.225.238)
64 bytes from 9.9.9.9: icmp_seq=1 ttl=63 time=0.720 ms
64 bytes from 9.9.9.9: icmp_seq=1 ttl=63 time=0.756 ms (DUP!)
64 bytes from 9.9.9.9: icmp_seq=1 ttl=63 time=1.47 ms (DUP!)
^C
--- 9.9.9.9 ping statistics ---
1 packets transmitted, 1 received, +2 duplicates, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.720/0.981/1.468/0.344 ms

Cool right??

What is happening here is nuts on many different levels. To start, the non existent MAC address forces this IX (LINX) to treat any packets send to as "BUM" traffic, LINX could have prevented this by using static MAC like quite a lot of the other big ones do.

That however does not explain why we got ping responses... It turns out some routers on the peering LAN don't check if the destination MAC address for a packet is their own before forwarding the traffic! in this case 3 different LINX member routers saw my unknown unicast packet and was like "sure, why not, I'll route that!", and the packet routed all the way through to 9.9.9.9, and a response came back to me.

Mental!

benjojo posted 11 Nov 2024 21:36 +0000

mmm, LHR<->SFO per flow latency graph sometimes looking like artwork

A grafana graph that suddenly splits out of it's single straight lines and goes into a large bump for 5 hours

benjojo posted 11 Nov 2024 17:54 +0000

ooh!

See some of you at my #38C3 talk about stupid uses of network optics!

A screenshot showing the 38c3 pretalx interface, it says “Going Long! Sending weird signals over long haul optical networks” Current state of your proposal: accepted

benjojo posted 11 Nov 2024 11:34 +0000

biblically accurate monitoring product (ThousandEyes)

benjojo replied 11 Nov 2024 10:59 +0000
in reply to: https://social.treehouse.systems/users/dee/statuses/113463957997199335

@dee I was going to say there isnt as much undefined behaviour in the bible, but thinking about it, the bible has just been adapted to cover a lot of the "undefined behaviour" that exists today.

The best thing about the C people is that you can pit them against each other based on the 3 compilers MSVC/GCC/LLVM, and have them debate for days like rabbis while someone writes their 4th out of bounds bug in some critical national infrastructure

benjojo replied 11 Nov 2024 10:55 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/YbsHTg3X5SqVtbg5Vx

I weirdly appreciate the accumulated amount of time humanity has put into a small(ish) set of religious books, but it's also terrifying that there are people who know this stuff down to the word in many places, and across all of the different translations!

benjojo posted 11 Nov 2024 10:53 +0000

Those "biblically accurate angels" right? How many eyes are we talking?

I tried to look it up and stumbled upon /r/AcademicBiblical with a surprisingly in depth debate thread, and this incredible comment from the mod team.

My conclusion is that, they are arguably not angels (boo!) and “full of eyes in front and behind” leaves a lot to the imagination

A reddit comment that says "So, there is a lot of great conversation happening in this thread. But there is also an incredible amount of rule violations. Please continue to be mindful of staying within the realm of academic biblical studies, and keep source requirements in mind. Thank you."

benjojo posted 10 Nov 2024 23:41 +0000

Me after learning about all of the other things iproute2 can do

A old internet advert format posing a question, "HAS SCIENCE GONE TOO FAR?", the subtitle is "is this iproute2 cmd real or fake?" and the two large "REAL" and "FAKE" buttons, the command is ip route add IPADDRESS encap bpf in obj test.o section main dev interface

benjojo posted 10 Nov 2024 22:56 +0000

hmm, the renewal for is2000slash12announcedagain.com is up again

Has 2000::/12 been announced again?
Not yet!
It has been 701 days since your RPKI alerters might have fired, A bgp.tools service

I think a 700+ day run is a good enough sign that we have successfully avoided this failure mode for the forseeable future.

I was told by one particular T1 that the existence of this site was the strongest motivation to fix everything in their setup that was+could cause them to announce a IPv6 /12. Seems like it worked! Time to let the domain lapse as it's done it's job

> Has 2000::/12 been announced again? > Not yet! > It has been 701 days since your RPKI alerters might have fired, A bgp.tools service

benjojo posted 10 Nov 2024 20:13 +0000

Me being completely unsurprised to learn that my father (a plumber) has also discovered Factorio and it has too changed/ruined everything

benjojo replied 10 Nov 2024 18:05 +0000
in reply to: https://gotosocial.i.eta.st/users/eta/statuses/01JCBK4E2589MZSM75RYQ93W9R

@eta To be fair the kodi boxes are increasingly organised crime coded, but yeah. At RIPE someone rep-ing the football rights holder had a short (and honestly, unactionable) talk about how they were annoyed that whois was not good enough to always identify the people behind such operations https://ripe89.ripe.net/archives/video/1448/

The next day was a talk about what happens when you give companies the access they want (In this case, Italy) https://ripe89.ripe.net/archives/video/1496/

benjojo posted 08 Nov 2024 12:20 +0000

"The thing that nobody tells you is that you can buy a real human skull online (shoutout to skullsunlimited.com). We did that, and then CT scanned it."

(source)

I must say, going into the business of selling real human skulls, and then deciding on skullsunlimited.com as a domain is a particular kind of person.

I want to meet this person (under the promise they wont do anything to my currently-in-use skull)

benjojo posted 07 Nov 2024 11:57 +0000

A new laptop means that some very difficult decisions need to be made, not the hostname, or the OS setup, that's all easy.

It's the stickers. (Apart from the Cyber tape that is a critical feature)

(Old laptop for comparison)

2 Lenovo thinkpads side by side, both have sideways cyber tape on them in yellow however the right one has a number of stickers on it with various amusing topics

benjojo posted 07 Nov 2024 09:10 +0000

Ah, the age old, delivery company site says " We’ll be with you in approximately 15 minutes "

Does that mean that I can take a very quick shower? Does delivery guy somehow know that the moment I get wet is the perfect time to call the door?

benjojo posted 06 Nov 2024 12:11 +0000

A very normal Wikipedia table to stumble upon

A wikipedia section that titled "List of naturally occurring incidents" and the table is divided into "occurrence" "quantity of squirrels" "location" "country" "description and outcome"

benjojo reposted 06 Nov 2024 11:30 +0000
original: rfceditor@mastodon.online

RFC 9687: Border Gateway Protocol 4 (BGP-4) Send Hold Timer, J. Snijders, et al., https://www.rfc-editor.org/info/rfc9687 #RFC This document defines the SendHoldTimer, along with the SendHoldTimer_Expires event, for the Border Gateway Protocol (BGP) Finite State Machine (FSM). Implementation of the SendHoldTimer helps overcome situations where a BGP connection is not terminated after the 1/2

benjojo posted 05 Nov 2024 12:58 +0000

Always impressed to see the Jehovah's Witnesses of all religions have a surprisingly (to me at least) large BGP network footprint. You just have to figure out all of the names JW operates under.

But like,

AS52887 (Associação Torre de Vigia de Bíblias e Tratados),
AS54235 (Watch Tower Bible and Tract Society of Canada),
AS61266 (Jehovas Zeugen in Deutschland, K.d.O.R.),
AS62244 (Watch Tower Bible and Tract Society of Britain),
AS55891 (WATCH TOWER BIBLE AND TRACT SOCIETY, Japan)
AS9454 (Watch Tower Bible and Tract Society of Korea),
AS28466 (La Torre del Vigia A.R./JW Mexico),
AS51752 (Wachttoren-, Bijbel en Traktaatgenootschap Kerkgenootschap),
AS40335 (Watchtower Bible and Tract Society of New York, Inc.),
AS327889 (Watchtower Bible and Tract Society of South Africa)

All of these have their own IP space assets, and decent-ish uplink setups, IX ports, etc

Like the dutch entity https://bgp.tools/as/51752 has it's own RIPE LIR, 2x10G IX ports, and 3x Teir 1 uplinks!

benjojo posted 05 Nov 2024 12:03 +0000

In the market to be anesthetised for 48 hours so I don't have to comprehend a in-progress election in a country I can't vote in

benjojo posted 04 Nov 2024 18:27 +0000

Weirdly the thing that is increasingly putting me off from drinking a bottle of soda every single day via the Tesco meal deal (or similar) is not the clearly bad idea of consuming that much sugar every single day, but the huge piles of plastic bottles that slowly accumulate in my flats "recycling" bin.

Especially since as far as I can understand recycling these bottles is very tricky and in practice is not really done...

benjojo replied 04 Nov 2024 17:27 +0000
in reply to: https://mastodon.social/users/purpleidea/statuses/113425674146290836

@purpleidea

How many packets are dropped during switchover?

datasheet suggests average switching time of 3ms, worst case 10ms

Does switching one way vs. the other have a different latency?

Unsure, i've yet to get this unit working

Do people still use something like this these days?

Yeah optical bypass protection still is used in some kit, though this being multimode only, is a little more limited use case (hence the reason I likely have it now)

benjojo posted 04 Nov 2024 13:39 +0000

Continuing my connoisseur-ness of weird stuff, I have been given a old OPB-SCE8K-MM to play with from a old cisco SCE8000 optical chassis.

The purpose is so that you can electrically (5 volts by the look of it) swap two (850nm in this case) optical paths, so if you were adding a interception/firewall in or something and wanted automatic redundancy or hands free control.

I need to figure out what the pin out of the connector is, so I can drive it without the rest of the SCE8000, but interesting how clean it is inside, also that the actual PCB inside the cisco branded unit doesnt seem to be made by cisco!

Pictures of a grey cisco box with a number of LC connectors in it, The unit has a CTRL port and a part number OPB-SCE8K-MM, the PCB photo shows Oplink 2x2 optical switch modules inside, with not much else inside it Pictures of a grey cisco box with a number of LC connectors in it, The unit has a CTRL port and a part number OPB-SCE8K-MM, the PCB photo shows Oplink 2x2 optical switch modules inside, with not much else inside it Pictures of a grey cisco box with a number of LC connectors in it, The unit has a CTRL port and a part number OPB-SCE8K-MM, the PCB photo shows Oplink 2x2 optical switch modules inside, with not much else inside it

benjojo posted 03 Nov 2024 13:29 +0000

I've not used snapchat in ages, but looking back I kinda do miss the goofy location based overlays they had, they were nice for "documenting" your photo roll on where you were/what the context was

For example, a random one I picked out in 2017 that gives me context that I was sailing that day