3,981 reputation
918
bio website
location London, United Kingdom
age 43
visits member for 5 years, 7 months
seen Dec 19 at 22:28
Quite boring, really. Have faffed about with computers since the mid-80s, have worked as a network engineer, unix sysadmin and (occasionally) developer.

Mar
24
comment QoS / PBR Routing Questions
Your answer looks more like an advertisement for pfsense than an actual answer. If you add in how, at least conceptually, you would configure pfsense for this, I suspect you'll get some upvotes.
Mar
24
answered QoS / PBR Routing Questions
Mar
23
answered Crossover cable in addition to normal network connection on servers?
Mar
23
comment CHMOD To Prevent Deletion Of File Directory
Still doesn't stop someone from deleting it, as that's governed by the parent directory.
Mar
19
comment Disable STP in Opensolaris bridge
Removing them should (at worst) mean that it takes a while (up to a minute) for a newly-plugged-in cable to become active (removing "portfast"). The "bpduguard" is configuration option should always be enabled on a port with portfast, as what portfast does is disabling BPDU snooping, trusting the port to be a non-bridge. So, in this specific case, the configuration is safe.
Mar
18
answered How to Break Up Large tcpdump Files
Mar
18
answered Disable STP in Opensolaris bridge
Mar
17
comment How do ISPs/Colocation Facilities limit bandwidth for Ethernet Drops?
@Kyle: No, the idea is taht hte traffic back is probably proportional to the traffic you're sending out and by managing that, you'll end up limiting the return traffic as well. The reason for dropping instead of shaping is to (hopefully) drop the TCP window size and thus manage tre traffic levels. It may be worth asking if your provider is willing to enable WRED on their side, as that MAY be beneficial in trying to tamper the traffic before it hits the hard limit.
Mar
17
comment Ninety-Fifth Percentile Calculation for Bandwidth
OK, you want to capture IfOutOctets and IfInOctets and then diff that against the previous entry captured. That way, you can (relatively easily) get measurements for any multiple of your polling interval by ignoring any values between the start and end of the period you want an average transfer rate over.
Mar
16
answered Ninety-Fifth Percentile Calculation for Bandwidth
Mar
16
answered Cabling: What to keep in stock?
Mar
16
comment How do you block new incoming tcp connections on X port?
If, for some reason, you have attempted to initiate a connection using that port number as the local port, dropping everything would drop the returning SYNACK, dropping SYN-only packets just stops non-locally-initiated packets. Admittedly, less of a problem when you have a specified destination port, but in the general case...
Mar
11
answered Bypassing VLAN with known MAC address
Mar
11
answered Why is it a bad idea to use multiple NAT layers or is it?
Mar
10
comment How to fix the wiring mess that is my server room
The one thing I'd add is that having both "this end" and "remote end" labelled on a cable is Very Convenient.
Feb
19
awarded  Organizer
Feb
10
comment EIGRP for Failover
For typical long-haul Ethernet (at least in the UK), you have a local box with a copper Ethernet, then haul it across SDH or PDH, then convert it on the other end. Alternatively, you have switches in-between, so you tend not to have end-to-end link integrity.
Feb
9
answered Dedicated IP for SSL
Feb
9
answered I get 1 failing SSH connection attempt per second from different IP. What can i do?
Feb
3
answered Why the server is not responding?