The CCIE Quest

My quest to become a Cisco Certified Network Engineer (CCIE)

elmo-fried, aka Family Life

jason.artoo.net, aka the Homepage that never gets updated thanks to Blogger
Sunday, August 05, 2001

CodeRed II showed up today. I'm tracking the infected boxes that try to contact my two servers:

http://jason.artoo.net/r2-artoo-net-codered-reportfile2.html

http://c3p0.artoo.net/c3p0-artoo-net-codered-reportfile2.html

Even some silly box at Microsoft got hacked and tried to infect my server:

207.46.117.98 - - [04/Aug/2001:18:48:37 -0700] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 404 205 "-" "-"


$ whois 207.46.117.98@whois.arin.net 
[whois.arin.net] 
Microsoft (NETBLK-MICROSOFT-GLOBAL-NET) 
One Redmond Way 
Redmond, WA 98052 
US 
Netname: MICROSOFT-GLOBAL-NET 
Netblock: 207.46.0.0 - 207.46.255.255

posted by Jason Roysdon at 2:19 AM


Friday, August 03, 2001

Only a total geek would find it funny that Cisco's links are flapping and getting them blackholed from the rest of the internet (only for about a 15 minute period, but still).

Original shot only showed one place, then later I saw more flaps (but not supressing):

   4006 7018 109, (suppressed due to dampening)
     205.215.45.50 from 205.215.45.50 (205.215.45.50)
       Origin IGP, localpref 100, valid, external 
       Community: 4006:60120 4006:64900 4006:64907
       Dampinfo: penalty 935, flapped 11 times in 00:54:02, reuse in 00:04:50

route-views.oregon-ix.net>sh ip bgp 198.133.219.3
BGP routing table entry for 198.133.219.0/24, version 659819
Paths: (42 available, best #36)
!-snip-!
  4513 701 109
    192.157.69.27 from 192.157.69.27 (209.10.12.29)
      Origin IGP, metric 3, localpref 100, valid, external
      Dampinfo: penalty 488, flapped 1 times in 00:00:33
  4513 701 109
    195.66.224.82 from 195.66.224.82 (209.10.12.222)
      Origin IGP, metric 23302, localpref 100, valid, external
      Dampinfo: penalty 496, flapped 1 times in 00:00:14
!-snip-!
  4006 7018 109
    205.215.45.50 from 205.215.45.50 (205.215.45.50)
      Origin IGP, localpref 100, valid, external
      Community: 4006:60120 4006:64900 4006:64907
      Dampinfo: penalty 685, flapped 11 times in 01:00:49
  1239 701 109
    144.228.241.81 from 144.228.241.81 (144.228.241.81)
      Origin IGP, metric 2, localpref 100, valid, external
      Community: 1239:666 1239:667 1239:1000
      Dampinfo: penalty 482, flapped 1 times in 00:00:49
  1755 701 109
    192.121.154.25 from 192.121.154.25 (213.174.64.81)
      Origin IGP, localpref 100, valid, external
      Dampinfo: penalty 484, flapped 1 times in 00:00:41
!-snip-!

posted by Jason Roysdon at 8:29 PM


Sunday, March 18, 2001
I've written a new Themestream article. Register a user account and reload the article if you enjoy it so I can get paid (a whopping $.02 per registered viewing).
posted by Jason Roysdon at 11:10 PM


Thursday, February 22, 2001
I've decided I'm going to sit for my CCIE Qualification Exam at Cisco's LA Networkers. It's free (well, free is relative as Networkers costs $1600, plus travel and hotel expenses), so might as well do it. Time to get studying. Still not sure if I'm going to try and get the CCNP Voice Access Specialization before they remove it on May 14th.
posted by Jason Roysdon at 12:20 AM


Saturday, February 10, 2001

Totally gutted my 8ft rack and put all the gear that's less likely to change on top of the rack:


  • CCIE Lab gear

    • IBM Token Ring concentrator
    • Cisco 2502
    • Cisco 2502
    • Cisco 2501
    • 3Com 100mbit-only hub
    • Cisco 4500

  • Westell ADSL modem
  • Cisco 1605-R firewall/internet router
  • Linksys 10/100mbit 5-port switch
  • Linksys 10/100mbit 5-port switch
  • 486 DX4/100MHz mini-tower, aka C3P0
  • Intel NetPort Express print server (connected to my Canon BJC-2100)

All that is powered on two 6-port power strips mounted at the top of the rack. The next thing I have to do is decide what will go in the rack. At the bottom is a Compaq 3000VA UPS, and the rest of the rack is empty except for two shelves. I'm pretty sure I'm going to put Noah's PC in the bottom of the rack on top of the UPS, and then move the shelves higher for temporary work gear.
posted by Jason Roysdon at 12:53 PM



Tuesday, February 06, 2001

Last Thursday I bought a Handspring Visor. Well, NetsWork is paying for it for my passing all these tests. Yippee! Plus, I'll get the VisorPhone attachment soon and it acts as a cell as well.


posted by Jason Roysdon at 4:56 PM



Thursday, February 01, 2001
Being sick sucks, bleh. I've passed all the AVVID tests, nailing the PBX after two tries last Friday (missing each time by a question or two, then passing by 3 questions), and then the CIPT test Tuesday. yay
posted by Jason Roysdon at 10:24 AM


HOME - ARCHIVES


Powered by Blogger™