blog.sarlok.com - Coffee!

System time:  Mon/12/17 : 09:09:28

Diplodocus

Outlook calendar events are neat. Especially when they're set for oh, Midnight or 4:00 AM with a 15 minute reminder.

In an odd kind of way, I missed Monday's like today. The sheer amount of fortuitous happenstance that the SMS made it to me, let alone that it woke me.
The entire hour I had to investigate the problems without any interruptions from the rampant panic that was about to unfold.
The barrage mixed messages and confusion that followed.
The blame storming for this one is bound to be epic. Damn, NDA's aside, I wonder how something like that would go down as a podcast...

That said, I'd like to talk about crypto maps, and how they are a lot more useful than I previously thought. Unfortunately my enthusiasm to go into any detail is quite low at the moment. ...That and it's kinda 1AM a bit. Probably best I not get started.

Hmm. Well, just in case I haven't spread this around already... (Source: http://thewebsiteisdown.com/)
Oh yeah. NSFW-ish.

I'm Bound to Pack it Up

Well over-due for a new entry I suppose.

Let's see... haven't post anything networky for a while. Found out how to abuse NVI's recently while trying to find a way to make NAT TCP hairpinning work - aka tromboning, aka RFC5382, sec 7.2 - on an IOS router. Read: NOT an ASA or Pix-based-hellbox.
After doing the standard Route-Map, NAT-via-loopback-ala-NAT-on-a-stick-based-thing, I found it's ridiculously easy to do if your router supports NAT Virtual Interfaces (NVI).
That said, I can't say I understand what's actually happening or why this works. Documentation on what happens when you use NVI in this sort of a scenario, sans-VRF, is quite slim.

The scenario:
PAT on 172.16.0.1 for some TCP ports - say 80, 110, 443 goto 192.168.0.250
192.168.0.10 needs to get to said TCP services at 192.168.0.250 via the external 172.16.0.1 address
NAT overload on fa0/0 for any other 192.168.0.0/24 hosts to the internets

Queue visual aid:

Queue pseudo code:

int fa0/0
ip address 172.16.0.1 255.255.255.0
ip nat enable
!
int fa0/1
ip address 192.168.0.254 255.255.255.0
ip nat enable
no ip redirects
!
ip nat source static tcp 192.168.0.250 80 int fa0/0 80
ip nat source static tcp 192.168.0.250 443 int fa0/0 443
!
access-list 10 permit 192.168.0.0 0.0.0.255
!
ip nat source list 10 int fa0/0 overload
!

Bam, instant hairpinning. Still need to work out exactly what's going on behind the scenes here. It makes some modicum of sense visualizing the resulting NVI interface as a fancy loopback, but there's certainly more to it than that. Either way, I'm sure it can't be good for a busy production network, but the further R&D will have to wait.
However, if your router doesn't support NVI's... yeah.

Yay, networky stuff out of the way.

Context for the following conversation: Solarwinds Orion Network Performance Monitor. Atlas is the tool provided to create said maps.

Co-Worker says:
That's some pretty fancy shit for maps
You say:
eh?
Co-Worker says:
The BULK stuff that kinda looks like the visio diagrams
You say:
oh, yeah. makes it easier to follow if they're close to same-y
could be better, but Atlas is a peach.
Co-Worker says:
A peach?
You say:
top gear reference. supposedly albanian for a word that rhymes with blunt
more accurately... piçkë
kar would also suffice

Image courtesy CampinZz... Granted I was only shooting from just shy of 20 yards.

I both love and hate this song. Also, the video reminds me too much of Survivor which I despise.

Burnout

Hmph.

Added close to two-dozen more piles of randomness to my collection of random images. Thank-you internets for a seemingly never ending supply of lunacy.

Waiting for some NIC's to arrive so I can build an Olive. The VM I have just isn't quite up to muster.
Setting up the VM however, I learned to truly appreciate the OpenBSD installer script (Read: No curses.h garbage or GUI of any sort, just yes, no, or <input>.).
Using it compared to the FreeBSD 4.x GUI thing was not pleasant by any stretch of the imagination. This may be somewhat biased based on the fact that I *irrecoverably broke the install proccess* three times running by doubling back on myself / making adjusting things before committing, etc. The fourth attempt I learned my lesson, and still produced a bricked VM that wouldn't boot. Fun.

Moving on...
Q. Your router starts automatically learning static /32 routes for hosts that should be 'knwown via connected'. What do you do?
A. ???? PROFIT!

Truthfully, a problem which leaves me perplexed. May be symptomatic of using the int-loopback-foo-ip-ospf-1-area-0-on-a-loopback-with-ip-unnumbered-loopback-foo-to-advertise-a-/32-instead-of-the-/whatever-you-put-on-the-loopback trick. Added to the list of things to test further one day, but regardless... removing said ludicrosity and the problem persists.

Also, this sums up my thoughts on XML quite nicely...

Incidentally, I may have mentioned once or twice that given I am required to use Windows at the office, my work day lacks the untold joy that is Quicksilver
A number of Power Toys and Colibri almost replicate some of the functionality, but because you're relying on the Windows indexing mechanisms, it still provides a shite user experience. Recently however, I stumbled across this little gem:
http://lunarfrog.com/taggedfrog/
Basically, a tag cloud for files.
Typically my files are relatively well-sorted. At work though, holy geeze. My "To be filed" folder never gets filed, projects spawn child projects, and unrelated projects merge frequently to create further clutter and segregation of diagrams, design specs, etc, etc.
Haven't been using it long, but I don't think I'll ever do without it ever again. My only complaint is that there doesn't seem to be any equivilent that can replace windows explorer.

Give Me Novacaine

You say:
 It's been a while since I've had a coffee I would consider undrinkable.
Co-worker says:
 Oh, do tell
You say:
 Story's not particularly exciting, but it tasted not entirely unlike I
 imagine what juiced Brussel Sprouts (from concentrate) might be like.
Co-worker says:
 Wow

Also, on Catalyst 2950's:

You say:
 Huh. apparently you can put ip helper-address on a 2950 SVI.
 that's amusingly interesting
Co-worker says:
 But does it do anything?
You say:
 dunno, that's the amusing part.
 You can debug ip dhcp server packet...
You say:
 hmm, nope. doesn't look like
You say:
 uhhh

I couldn't resist the urge to test, and...

switch#sh run int vla 11
Building configuration...

Current configuration : 116 bytes
!
interface Vlan11
ip address 10.10.10.249 255.255.255.0
ip helper-address 10.10.128.11
no ip route-cache
end
switch#debug ip dhcp server packet
switch#term mon
switch#
15w4d: DHCPD: setting giaddr to 10.10.10.249.
15w4d: DHCPD: BOOTREQUEST from 0100.1121.c03d.10 forwarded to 10.10.128.11.
switch#
switch#sh ver | incl 2950
IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA4, RELEASE SOFTWARE (fc1)
ROM: Bootstrap program is C2950 boot loader
System image file is "flash:c2950-i6k2l2q4-mz.121-22.EA4.bin"
cisco WS-C2950-24 (RC32300) processor (revision H0) with 19994K bytes of memory.
Model number: WS-C2950-24
switch#

The opportunities for abuse are astounding!

In other news...
I've had this song by Grizzly Bear on my iPod for at least three years. It spun around on random the other day causing one of those "WTF is this?" moments. About two minutes in the acoustic guitar turns into an amazing riff. If it were a cassette tape, I'd have melted it by now by the number of repeat plays it's had.
Then, whilst looking for the video on youtube, the below song by Of Monsters and Men came up for some reason, which I've now purchased. Yay.















Porcelain

One Year already. Sounds so short - One Year. Two syllables, and poof, that's it.
There are some big numbers in one year, 525600 and 31536000 for example.
Hmm... those might come in handy.

Not too sure what to make of the last three or so months, aside from the fact that they've been... well, quite simply put - shit.
My two month obligation (if you can call it that) at work ended on Victoria Day at least. Next week should be interesting.

Huh. Had a lot more on my mind when I clicked on 'new entry'... Just can't seem to get it out of my head in any sort of coherent fashion.

She loved this song.



Hurtin'

So... on Volvo XC70's - Two things I don't like so far:

  1. There's no-where convenient for my iPod until I can find a 2' auxiliary cable
  2. I occasionally bonk my head on the doorframe getting out because I sit higher up than I did in the Passat (though I've only done this twice, and that was during the first week I had it)

No complaints otherwise so far. Other than the fact that I bought it for all the wrong reasons in the first place, but oh-well.

Also, because I'm always forgetting how to enable and use the archive command on a LWAPP

debug lwapp console cli
archive download-sw /overwrite tftp://foo/bar.tar

Though that said, the version of IOS on my recently acquired LWAPP doesn't support debug lwapp console. Using the rename-your-ios-image-c1130-k9w7-tar.default-and-load-via-tftp method worked just fine in that case.

Hopefully my new Catalysts will arrive soon so I can start doing things labby again.

Yeah...

Shave It

Outlook's crashed... waiting for it to re-open which is putting some strain on the poor Lenovo on my desk. Figured I'd spell-check this unpublished post and throw it up while i'm waiting.

I don't think I'll ever fly to Calgary again any time soon.
Though I must concede, having been there, I can see absolutely no reason for Albertans to be such mindless retards when it comes to driving. It's not like their roads are poorly designed, or there's inadequate signs... it's just that everyone does stupid things all the time. Bah. I dunno. Maybe the better part of a whole day wasn't enough time to see the real reason for it.
Overall the journey was worth it though I suppose. I know this is the 2012, but for all intensive purposes the '08 looks exactly the same. The one exception being that the interior of mine is a much more appealing black and has no TV screens, but otherwise...
Got about 8.7l/100 (or ~28 MPG) on the trip back through Banff. That accounts for the hour and a half crawling out of Calgary at ~40km/h. Not bad for two-and-a-bit tonnes of Swedish sensibleness with all-wheel-drive.

Also, have I ever mentioned how much I hate D-Link routers? I think that at this stage, the very process of their creation reduces the overall worth of their components. Gah.

I know I've said it before, but I really need to do something about these youtube videos.

Kill The Noise

Allergic to cats. Huh. Who saw that coming?



Warning: The first 1 second is NSFW.

The Fool On the Hill

I think I quite seriously broke the Passat tonight.
To think, it made it to the top of the 8km mountain road no problem, but then I bin it into what was effectively a 2' berm.
Too dark to see what kind of damage I'd done by that point. Made it back down the mountain, but that feel of 'something very wrong' was there the whole way.
Not entirely certain what I was thinking - I saw the berm, but thought maybe going fast would be a good way to deal with the otherwise impossibility of making it over unimpeded. I'll blame the headache I've had since last night. Yeah... that'll work.
That said, perhaps it's poetic justice for laughing at the Jeep I passed that was getting a tow down from the peak.
Ohwell... Will know more come daylight, but I think it's well and truly Donald Ducked personally.

Ugh.

Well, added a new image. It's not particularly interesting, but may explain some things.

So here, have this:

Bleed Like Me

I tried reading this, but every paragraph gave me the impression that I was looking at some cruel mixture of SCIgen and a Markov Generator.
Maybe it's just the the bad grammar, and obscenely absent punctuation. Oh-well, no matter... wasn't what I was looking for anyway.
This however, was quite interesting.

Caution: Unrelated stuff follows...

Six Stages of Debugging

  1. That can't happen.
  2. That doesn't happen on my machine.
  3. That shouldn't happen.
  4. Why does that happen?
  5. Oh, I see.
  6. How did that ever work?

The above appeared a brief moment before the following conversation took place, but I felt it was so amazing that it should be presented in the fashion of an ordered list.

Co-worker says:
 10:56:24.716278 10.10.10.70.0 > 20.20.20.140.80: S [tcp sum ok] \
   3601732956:3601732956(0) win 8192  (DF) (ttl 124, id 18507, len 48)
 10:56:24.717652 10.10.10.70.1 > 20.20.20.140.80: S [tcp sum ok] \
   1773456162:1773456162(0) win 8192  (DF) (ttl 124, id 18508, len 48)
You say:
 buh?
Co-worker says:
 Guess what that is?
You say:
 That's one messed up looking pair of packets.
 I'm guessing (read: Guess) they're windowsy related
 but source port of 0, and 1 leads me to think the problem's coming from the router itself
Co-worker says:
 Another customer's $1K/month internet service foiled by their own $20 dlink router, which
 appears to, on reboot, start NAT sessions from port 0,1,2,3,4,...
You say:
 Pfffff

Mullet Bwoy

Om-nom-nom-o-clock tiem.

Kept my aimless driving is down to about ~280km last week. Achieved a new personal land speed record though. Kinda gets one thinking about things like what the top speed your tires are rated for is. I've come to learn this is not an easily obtainable statistic.
Otherwise, it really has been one of those days...

Co-worker says:
 Project timeframe is 12 weeks to all circuits delivered and functional
You say:
 your response dredged this relic from my mind.
 http://www.youtube.com/watch?v=2swuTc8lxrI
Co-worker says:
 Uhh
You say:
 The things you watch when you're 5 and only have three TV channels.
 that laugh is featured at least once every episode. ahh... to be 5 again....
Co-worker says:
 Heh, yeah. Not something I imaging I'd have ever seen
 Also on the reasons that the site a / site b thing sucks: Routers and
 equipment rebooting frequently
You say:
 Mmmhm. that'd be our resident expert in site b
Co-worker says:
 Also on the reasons that the site a / site b thing sucks: Local expert no
 longer considered "harmless"
You say:
 Revised to "Mostly harmless"

I feel my character is becoming more cynical in it's old age.

Episode two of unfinished london. Happy days.

Kill Everybody

This has to be one of the worst songs I've ever heard. But I can't stop listening to it.
Does the Train Wreck rule apply to sound too?

That is all.