- ripe-atlas - mailman.ripe.net

RIPE Atlas Community repository on GitHub
by Vesna Manojlovic 08 Feb '13

08 Feb '13

Hi everyone, an appropriate pastime for Friday afternoon - playing with GitHub ;-) I initially created https://github.com/RIPE-Atlas-Community/ripe-atlas-community-contrib for the contributions by you (and atlas-dev team) of the small programs, scripts, etc -- for visualizing RIPE Atlas measurements, analysing measurements data, and so on. We already had them listed here: https://atlas.ripe.net/doc/code However, GitHub seems to be *the* place for the community to exchange the code, so I am hoping that this repository will help share and maintain, and produce more code, and make it more useful for the rest of the world. First code in there is the one I inserted, created by Philip Homburg: "probes2kml.py", that shows probes on Google Earth. Please "add" more, or "link" your own contributions to this repository... ... or let me know how I can help to collect more of the RIPE Atlas specific code to this repository: from Wolfgang, Inigo, and others. Share and enjoy :) Regards, Vesna

1 0

Partial downtime over the weekend
by Robert Kisteleki 04 Feb '13

04 Feb '13

Dear all, On Friday we added the first devices of the upcoming next generation Atlas probes to our production network. Unfortunately, this triggered a bug in our controlling infrastructure, which resulted in some of the probes not being assigned any new measurements. Eventually, the affected probes ran out of measurement tasks. This bug affected about 30% of the probes approximately between Friday 23h and Sunday 12h (UTC). We apologise for any inconveniences this may cause. Regards, Robert Kisteleki RIPE Atlas team

1 0

New release in January, features you asked for...
by Vesna Manojlovic 01 Feb '13

01 Feb '13

Hi, we had a release 2 days ago, maybe you already noticed new features... * REST API -- althou in Beta! https://atlas.ripe.net/doc/rest * New costs for certain measurements: https://atlas.ripe.net/doc/credits & * 20 instead of 19 probes visualized in ping UDMs :) ... and if not, they are listed on RIPE Labs article: https://labs.ripe.net/Members/becha/ripe-atlas-january-2013-achievements ... and on the "announcements" page too: https://atlas.ripe.net/announce We are still working on "group access", and few more features are going to be announced to beta-testers soon. Share and enjoy! Regards, Vesna

4 4

2 probes down
by Jan Hugo Prins 23 Jan '13

23 Jan '13

Hello, This morning I got a notification that the probe in my datacentre is down. I checked everything and he looks just fine and is happily doing traffic. Then I noticed that the one behind my home fiber connection is also down, and that the starttime is about the same. Both of them at 6:56 this morning. Also checked that one and he is also doing traffic just fine. Houston, do we hava a problem? -- Met vriendelijke groet / Best regards, Jan Hugo Prins Infra and Isilon storage consultant E: jprins(a)betterbe.com T: +31-53-4800694 M: +31-6-26358951 S: jhaprins W: www.betterbe.com <http:///www.betterbe.com>

2 1

Thank you for making the 2012 a great year for RIPE Atlas!
by Vesna Manojlovic 16 Jan '13

16 Jan '13

Dear RIPE Atlas community, many thanks for hosting, testing & using RIPE Atlas! We have reached many milestones last year, and are looking forward to new challenges this year. Please see the story of the RIPE Atlas achievements in this RIPE Labs article: https://labs.ripe.net/Members/becha/ripe-atlas-2012-a-year-in-review Regards, Vesna -- Vesna Manojlovic BECHA(a)ripe.net Senior Community Builder @Ms_Measurements for Measurements Tools RIPE NCC http://ripe.net

1 0

Parametrization of UDM requests?
by Stephane Bortzmeyer 15 Jan '13

15 Jan '13

It seems that the parameters used for an UDM are the same for all probes. For instance, I would like to do a DNS UDM with a different question for each probe, something like "%p.mydomain.example" where %p would be replaced by the Probe ID. Is it possible? Or do you think it would be a worthwile improvment?

2 3

UI graphs
by nrw＠kaffeeschluerfer.com 10 Jan '13

10 Jan '13

On Tue Jan 8 08:15:44 CET 2013, Florian Bauhaus f.bauhaus at portrix-systems.de wrote: > On 01/07/13 22:57, Olaf Maunz wrote: > > The graphics for the pings seem to have vanished in the UI. At least for my account... > > > > If you open the ping UDM there is (at least for me) an tab that says 'RRDs' and there you have all the graphs. I think Olaf did not refer to the UI of the UDMs, but to the UI of the probes. At least for me as well, the graphs of the statistics started to show no data for a period starting sometime between Jan 5 and Jan 6, 2013. At some point, I got the message that there was some maintenance going on on the Atlas infrastructure side. However, nothing changed with respect to the graphs not showing current data once the maintenance was through. Interestingly, the graphs started showing something again for data collected starting as of about 8 AM UTC this morning. Apart from some interruptions due to my public IP address changing, my probe was considered "up" all the time, and I also saw it running its tests and getting responses to the various probe messages. However I still need to figure out (I am sure it is in the documentation, I just didn't get around to looking for the relevant parts yet) how to access the raw data for recent measurements to see whether that data not being displayed in the graphs was due to the collected data somehow not getting to the Atlas infrastructure for some reason (despite probe being considered up), or whether there was just an issue displaying the collected data. Has anyone else seen similar issues and/or some idea what might have happened? Thanks! Kind regards, Joachim

2 3

[UDM] Cannot select "recursion desired" for DNS
by Stephane Bortzmeyer 08 Jan '13

08 Jan '13

When creating a new UDM with DNS (or DNS6), the checkbox "Recursion desired" is greyed and un-selectable. I know that recursion can request more resources from the DNS servers. Is it why it is currently unavailable? It does not seem documented in <https://atlas.ripe.net/doc/udm> which just says: Recursion desired Enable recursion. This is the RD flag described in RFC1035.

4 4

UI graphs
by Olaf Maunz 08 Jan '13

08 Jan '13

The graphics for the pings seem to have vanished in the UI. At least for my account...

2 1

UDM traceroute from all probes to single destination
by Павел Веселовский 24 Dec '12

24 Dec '12

Hello, For our study seems necessary to obtain traceroutes (IPv4/v6) from all probes to single destination (probe or IP address). Is it possible to obtain such raw data? -- Thanks in advance & Best Regards -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- Pavel Veselovskiy, Samara State Aerospace University, IT engineer Email: vpv(a)ssau.ru Phone: +7 927 686 12 32

2 1

UDM "Do not visualize" button issue
by ripe＠brite.cz 22 Dec '12

22 Dec '12

Hi team, I'm not sure what I am doing wrong, but I'm not able to have visual graphs created. No matter if I check or uncheck the "Do not visualize" button, after UDM creation finished the button "Do not visualize" becomes always checked and grayed. Is it possible to get graphs drawed somehow? Thank you, Jiri, probe 2413

3 3

Atlas probes visible in RIPEstat
by Vesna Manojlovic 21 Dec '12

21 Dec '12

Dear RIPE Atlas users, this might be of interest to you too -- it is now possible to see coverage of Atlas probes in any ASN, prefix or *country* in RIPEstat! It works both as a widget and as CLI: https://stat.ripe.net/widget/atlas-probes#w.resource=212/12 or whois -h stat.ripe.net AS3333 If you decide to embed this widget somewhere on your page, please do let us know, we like to see our work being used :) More interesting RIPEstat features in the article on RIPELabs: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripestat-2012-december-… Cheers, Vesna

1 0

Updates since the previous "roadmap" announcement: November's features on RIPELabs
by Vesna Manojlovic 18 Dec '12

18 Dec '12

Dear RIPE Atlas community, here's a link to the article about what we implemented & worked on in November (and December): https://labs.ripe.net/Members/becha/ripe-atlas-roadmap-november-2012-update Highlights: - higher increase in number of probes & users - Community Pages - blogs covering Atlas (and undressing probes ;-) We are also busy making plans for 2013, and will let you know of them in January. As always, we are looking forward to your comments. Regards, Vesna

1 0

single measurement
by Pelsser Cristel 06 Dec '12

06 Dec '12

Hi, When launching measurements, we can specify a start time, end time and interval. Is it possible to specify that we want a single measurement (for example, a single traceroute from the list of probes to the destination) instead of playing with the start time, end time and interval? Cristel

2 2

IPv4/DNS entry not updated
by Daniel Gomez 04 Dec '12

04 Dec '12

Good Morning everyone, After a DSL restart from my ISP at 2:00, atlas.ripe.net has not updated the IPv4 and with it the DNS. The proble is online but it is listed as down. "dig A p4065.probes.atlas.ripe.net" is showing my IP from yesterday. There is any way to push an "update", in order for the probe to register the right IP ? Greetings, Daniel Gomez

2 1

Two users managing one probe
by Matthäus Wander 03 Dec '12

03 Dec '12

Hi, is it possible to register the same probe by two different users? I would like to give my co-worker full access to a probe in our group LAN. Kind regards, Matt -- Universität Duisburg-Essen Verteilte Systeme Bismarckstr. 90 / BC 316 47057 Duisburg

5 5

New page: RIPE Atlas Community
by Vesna Manojlovic 13 Nov '12

13 Nov '12

Good morning :) Since yesterday, we have a new page that shows the activity of the RIPE Atlas users community: https://atlas.ripe.net/atlas/community We are publishing top-ten hosts of the "Always Up" probes, top-ten UDM users: "Big Spenders" -- people who spend most credits, by doing the most measurements, and the flowing list of new arrivals, with flags of their countries. (Now you can see that there was IETF last week -- Bert gave away 55 probes!) Enjoy your additional few minutes of fame, if you name appears on one of these lists :) We are looking forward to your compliments, and to the further wishes on what else would you like to see here... We will be featuring these top-users in our communication, so expect some more attention from us... Ciao, Vesna

2 1

RIPE Atlas nominated for an ISOC Award
by Vesna Manojlovic 08 Nov '12

08 Nov '12

Hi guys, a bit of good news and publicity: RIPE Atlas has been nominated for an award by the Netherlands chapter of the Internet Society (ISOC). Please find a short announcement on RIPE Labs: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripe-atlas-nominated-fo… Makes me feel proud for being part of it :) Since RIPE Atlas if build with your help - congratulations, well done! Cheers, Vesna

2 1

Re: [atlas] "down" probe resurrection
by Artur Russu 08 Nov '12

08 Nov '12

Hi Philip, Connected it to my home network, directly to my provider, it has now a public IP address assigned by ISP's dhcp. Powered it from an USB power outlet (it has now 5 V/500 mA). Still reboots... :( What do your logs say? I will leave it like this for 24 hours. I guess that if this setup will still fail we'll have to return the probe to RIPE. Where can I find the procedure of returning a probe? Best Regards, Artur Russu PS Engineer TD / MCN / Mobile Packet Core Orange Moldova S. A. Tel.: +373 22 975381 Tel.: +373 691 98381 E-mail: artur.russu(a)orange.md

1 0

Probe sending DHCP request, not accepting?
by Michael-John Turner 07 Nov '12

07 Nov '12

Hi My probe arrived late last week and I finally hooked it up late yesterday afternoon. All was working fine until around 3:30am today when I received an automated email to say that my probe was down. I restarted it at around 7:00am when I got up but that didn't help - ever since it's been requesting a new IP every 3-5 seconds but not accepting the offered lease. From my dhcpd logs: Nov 6 07:12:02 dreamland dhcpd: DHCPDISCOVER from aa:bb:cc:dd:ee:ff via br0 Nov 6 07:12:02 dreamland dhcpd: DHCPOFFER on 192.168.1.248 to aa:bb:cc:dd:ee:ff via br0 Nov 6 07:12:05 dreamland dhcpd: DHCPDISCOVER from aa:bb:cc:dd:ee:ff via br0 Nov 6 07:12:05 dreamland dhcpd: DHCPOFFER on 192.168.1.248 to aa:bb:cc:dd:ee:ff via br0 (where aa:bb:cc:dd:ee:ff is the correct MAC, I've just redacted it). I've allocated the device a static IP based upon its MAC. Help! :) My probe ID is 3508. -mj -- Michael-John Turner mj(a)mjturner.net <> http://mjturner.net/

2 4

Question on UDMs
by Roman A. aka BasicXP 07 Nov '12

07 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! First of all, I'd like to thank RIPE for such an interesting project, allowing to study the availability of various resources online. I have a question. If I'd like to set up a UDM, that will only be designated for my probe only, will it require credits or using my own probe is "free"? Thank you in advance. _____ Best regards, Roman A. aka BasicXP x12ozmouse(a)ya.ru -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJQk7vQAAoJEBjQX5UpOG9YquQP/RptIW1NbaPdOPczWUTYvjxB ZMRNHWO/VX2RWeYMIRWcoUpqVJSV2f7Sy+55hG6kkkcnWvXb+Do9ro4/MsyXocsD y+AXzgt9zgEaQMtJsgr7gjOttRp4vl9Y9RiQ/NfAV/QMZj6YH0QuoqjhpSLDYs6H bA8rmCAx2RGOTlhEvQTBnwI/K6zO8Cp9psLyQ1hzkQeUqlZbOGtD4AGpBuLOcrGR cHyckfN3Lww83oaecBEU1wjgOgUuHzTQzoJKhU7CLr0h0EeBC60Qd9CD75CW7yUD pAZA3JUHhAsYh4Bw5NDihuRhRqDYfo+Ch63JZvdNxznWgRXPgNjm8dm9BqC3rOM2 /aYo4MnglRke7VqCw9vPkw1IW/aXCfx7OoOt4Vp17dKal5iOS/FT2u58qFkzeLRT Mn90I5EdcEbB+Nuv3GsjYBI94JrrSK2KtcoV235mSTAGYyAM665c3fVR+HkOc9Eu s/msjchT3MBlEini6HVqAqdTFDaCro+mOw53lKzCch8VQSJRTrbHz1S7RgRVK9dB 89E1ij3HhUv6Tz9y3fGvWmNwFCWxgkY0qnB8erlFDcTxBtg/ou+a5oU2Yd6Pa14n HaZfXgzSjpasDSTDzxfLzpG/w7qhAluQgo2Q+fViG8yweVWvCDT9DrvbTEuUrPFq TuxIjj0uFFzfPUZrSTrW =GYfh -----END PGP SIGNATURE-----

4 7

New RIPE Atlas features from October, and roadmap for November and beyond
by Vesna Manojlovic 01 Nov '12

01 Nov '12

Dear RIPE Atlas users, I am pleased to announce the whole lot of new things you can do with RIPE Atlas in/since October: - one new map (comparing TCP & UDM DNS measurements) - easier credits administration - and for some of you, we worked together further on Atlas Anchors There's more, with pictures, in the RIPE Labs article: https://labs.ripe.net/Members/becha/ripe-atlas-roadmap-october-2012-update We are also announcing many new features till the end of the year, and plans for few months in the future, for example: - more notifications - more APIs - promoting active users etc Please let us know if you want us to increase the priority of some of the ones listed in the article. Regards, and enjoy the measurements, Vesna

1 0

Fwd: Issues encountered with assigning .0 and .255 as usable addresses?
by Tore Anderson 24 Oct '12

24 Oct '12

Here's a suggestion for an Atlas experiment and subsequent RIPE Labs article. Do a ping measurement from all the probes to the .0 and .255 address of the same /24, plus to another control address in the same /24, and compare success rates. It's particularly interesting for me as my own personal home page is accessible at 87.238.60.0 at the moment.., Might also be worth checking it out for IPv6 at the same time (at least the case where the last 64 bits are all zeroes). Tore -------- Opprinnelig melding -------- Emne: Issues encountered with assigning .0 and .255 as usable addresses? Dato: Mon, 22 Oct 2012 22:07:50 +0000 Fra: Paul Zugnoni <paul.zugnoni(a)jivesoftware.com> Til: nanog(a)nanog.org <nanog(a)nanog.org> Curious whether it's commonplace to find systems that automatically regard .0 and .255 IP addresses (ipv4) as src/dst in packets as traffic that should be considered invalid. When you have a pool of assignable addresses, you should expect to see x.x.x.0 and x.x.x.255 in passing traffic (ie. VIP or NAT pool, or subnets larger than /24). Yet I've run into a commercial IP mgmt product and getting reports of M$ ISA proxy that is specifically blocking traffic for an IP ending in .0 or .255. Any experience or recommendations? Besides replace the ISA proxy…. Since it's not mine to replace. Also curious whether there's an RFC recommending against the use of .0 or .255 addresses for this reason.

2 1

New probe firmware released: version 4.480
by Vesna Manojlovic 24 Oct '12

24 Oct '12

Hi everyone, few days ago we have released a new version of the probe firmware: 4.480. It introduces few bug fixes, and improvements that enable us to work on new features, but that still require work on the User Interface to make it visible to users. Until now, about 1.500 probes have been upgraded to new firmware. Below are the technical details. Regards, Vesna * Fixed bug in traceroute when it has to deal with rfc4884 objects (mpls) that have a wrong size. * Delayed DNS name resolution in ping and traceroute. This feature will soon be enabled through the UI. * Fixed bug in HTTP GET where some characters where not properly escaped in generating the result JSON. * Fixed bugs in the libevent stub resolver to better handle DNS errors and timeouts (affects mostly httpget) * Limit the amount of measurement data that is sent as one unit. This prevents probes that have not connected to a controller for some time from overloading the controller. * The probe uptime is now in the DNS SOS messages that are sent by probes before they try to connect. This will allow making a distinction between various reasons for disconnects: e.g. probe reboot vs. network problems. (also published on https://atlas.ripe.net/announce )

1 0

Convert json traceroute output to normal traceroutes.
by Jan Hugo Prins 17 Oct '12

17 Oct '12

Hi, Because I'm a little more used to reading regular traceroute output instead of JSON files, I created a little python script to convert the ATLAS traceroute output to readable traceroutes. Comments are always welcome ofcourse. The whois information is gathered from Cymru using: https://github.com/JustinAzoff/python-cymruwhois -- Met vriendelijke groet / Best regards, Jan Hugo Prins Infra consultant E: jprins(a)betterbe.com T: +31-53-4800694 M: +31-6-26358951 S: jhaprins W: www.betterbe.com

4 5

Forcing https in Atlas
by Robert Kisteleki 16 Oct '12

16 Oct '12

Dear Atlas users, At the moment the Atlas UI servers allow regular, unsecured (http) connections from clients. For particular features, most notably anything that requires authenticated users, we're using secure (https) connections. Unfortunately, the potential mixing of the two schemes causes glitches and inconsistencies for some users. Therefore on 15 October we will start enforcing secure connections towards the Atlas UI servers (atlas.ripe.net and *.atlas.ripe.net). We'll do this by automatically redirecting all http queries to their https equivalents. This should not cause any changes to those of you who already use https by default, and should not cause any notable changes to anyone else. However, some clients (especially CLI based ones) may need some extra flags to deal with https connections. Regards, Robert Kisteleki

2 2

A Case Study of AAAA Filtering
by Vesna Manojlovic 15 Oct '12

15 Oct '12

Hi all, at RIPE 65, Lorenzo Colitti from Google raised the question whether Internet users would see significant filtering of AAAA DNS queries or replies, either by their ISP or by their Customer Premise Equipment (CPE). Emile & Philip used RIPE Atlas to provide an answer to this question. https://labs.ripe.net/Members/emileaben/ripe-atlas-a-case-study-of-aaaa-fil… Regards, Vesna

4 5

Atlas main database maintenance
by Andreas Strikos 15 Oct '12

15 Oct '12

Dear Atlas users, Tomorrow around 09:30 CEST we will bring down our main database for maintenance. Hopefully, the whole process will not take more than 2 hours. The majority of the web site functionalities and user interaction with the system will not be available but we don't expect any loss of data flowing in from the probes. We are sorry for any inconvenience this might cause. Regards, Andreas Strikos

1 0

traceroute via ICMP?
by Jens Weibler 10 Oct '12

10 Oct '12

Hi, how is the development of traceroute via ICMP going? My central firewall team doesn't like opening many udp-ports for traceroute :( -- Jens Weibler IT-Services Hochschule Darmstadt www.h-da.de University of Applied Sciences Fachbereich Informatik www.fbi.h-da.de Schöfferstr. 8b D-64295 Darmstadt Tel +49 6151 16-8425 Fax +49 6151 16-8935 jens.weibler(a)h-da.de

2 3

Ping does no longer visualize?
by Sebastian Wiesinger 05 Oct '12

05 Oct '12

Hi, I just noticed that the Ping probe has changed, I can now enter more options but I'm unable to visualize the results. Even if I uncheck "do not visualize" I get no graphs. Regards Sebastian -- noris network AG - Thomas-Mann-Straße 16-20 - D-90471 Nürnberg Tel +49-911-9352-0 - Fax +49-911-9352-100 http://www.noris.de - The IT-Outsourcing Company Vorstand: Ingo Kraupa (Vorsitzender), Joachim Astel, Hansjochen Klenk - Vorsitzender des Aufsichtsrats: Stefan Schnabel - AG Nürnberg HRB 17689

2 2

RIPE Atlas roadmap, September 2012 version
by Vesna Manojlovic 05 Oct '12

05 Oct '12

[apologies for duplicates] Dear colleagues, we just published a RIPE Labs article with the RIPE Atlas roadmap update for September: https://labs.ripe.net/Members/becha/ripe-atlas-roadmap-september-2012-update (the fact that is already October today is a bit confusing, but we presented this version during the RIPE 65 meeting last week...) This is the invitation to look at our plans, and let us know what you think, so that we can take that into account when making new plans, next month. Thanks, Vesna

1 0

Cannot change network configuration
by Tibor Djurica Potpara 04 Oct '12

04 Oct '12

Hello, I have recently changed the router that my Atlas probe is connected to. Since it is now in a separate subnet from my home LAN, with dedicated DHCP/RA configuration, there is no longer need for static address configuration, so I would like to revert its settings back to autoconfiguration for both IPv4 and IPv6. However, in the web interface,//"Change Probe's Network Configuration" menu is greyed out, so I cannot do anything even though the probe is up. What am I to do? Thank you, Tibor

4 3

Strange IPv6 problem with Atlas
by Max Grobecker 02 Oct '12

02 Oct '12

Hello, I got my new Atlas a few days ago and connected it to my network (in a separated VLAN). In this VLAN I'm announcing routing advertisements with autonomous IPv6 addressing enabled. Appearently the probe heard this advertisement and have chosen to communicate over IPv6 - but with a link-local IPv6 address only...?! This leads to "Beyond scope"-Messages from my router which I captured with tcpdump: fe80::280:a3ff:fe91:4070.58730 > 2a01:4f8:161:3281::43:148.443: Flags [S], seq 2585125851, win 5360, options [mss 1340,sackOK,TS val 4294950236 ecr 0,nop,wscale 1] fe80::225:90ff:fe92:2478 > fe80::280:a3ff:fe91:4070: ICMP6, destination unreachable, beyond scope 2a01:4f8:161:3281::43:148, source address fe80::280:a3ff:fe91:4070 My routing advertisements are currently looking like that: fe80::225:90ff:fe92:2478 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 64 hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0s, retrans time 0s prefix info option (3), length 32 (4): 2a02:a00:e000:b:e6::/96, Flags [onlink, auto, router], valid time 86400s, pref. time 14400s mtu option (5), length 8 (1): 1400 source link-address option (1), length 8 (1): 00:25:90:92:24:78 Is there anything I can do to make the probe communicate over IPv6? Manual IP configuration is not possible since the menu item is greyed out (althrough my probe runs on FW 4470). I disabled RA at the moment so the Atlas cube can talk to the RIPEs Atlas servers. Thank you in advance! -- Greetings from Wuppertal, Germany Max Grobecker

3 3

10/8
by Randy Bush 01 Oct '12

01 Oct '12

an external border, where an atlas probe is on the soft gooey inside, logged packets sourced from 10/8? could this have been the atlas probe? randy Sep 29 08:36:44 r0.sea.rg.net 390: Sep 29 08:36:43.966: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(53649) -> 23.63.172.166(443), 1 packet Sep 29 08:36:49 r0.sea.rg.net 391: Sep 29 08:36:48.466: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(46959) -> 23.63.205.115(443), 1 packet Sep 29 08:42:32 r0.sea.rg.net 392: Sep 29 08:42:31.363: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(53649) -> 23.63.172.166(443), 1 packet Sep 29 11:24:45 r0.sea.rg.net 393: Sep 29 11:24:44.826: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(32986) -> 64.12.235.15(443), 1 packet Sep 29 11:31:35 r0.sea.rg.net 394: Sep 29 11:31:34.644: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(53512) -> 143.225.229.137(554), 1 packet Sep 29 11:37:32 r0.sea.rg.net 395: Sep 29 11:37:31.453: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(53512) -> 143.225.229.137(554), 8 packets Sep 29 11:43:21 r0.sea.rg.net 396: Sep 29 11:43:20.339: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(59262) -> 38.102.136.104(80), 1 packet Sep 29 11:43:33 r0.sea.rg.net 397: Sep 29 11:43:32.151: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60780) -> 69.171.228.74(443), 1 packet Sep 29 11:45:23 r0.sea.rg.net 398: Sep 29 11:45:22.013: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60761) -> 69.171.228.74(443), 1 packet Sep 29 11:45:26 r0.sea.rg.net 399: Sep 29 11:45:25.017: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60759) -> 69.171.228.74(443), 1 packet Sep 29 11:48:57 r0.sea.rg.net 400: Sep 29 11:48:56.480: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(46352) -> 174.37.29.147(80), 1 packet Sep 29 11:49:32 r0.sea.rg.net 401: Sep 29 11:49:31.465: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60780) -> 69.171.228.74(443), 1 packet Sep 29 11:49:32 r0.sea.rg.net 402: Sep 29 11:49:31.465: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60781) -> 69.171.228.74(443), 2 packets Sep 29 11:50:32 r0.sea.rg.net 403: Sep 29 11:50:31.466: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60761) -> 69.171.228.74(443), 1 packet Sep 29 11:50:32 r0.sea.rg.net 404: Sep 29 11:50:31.466: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60759) -> 69.171.228.74(443), 1 packet Sep 29 11:54:32 r0.sea.rg.net 405: Sep 29 11:54:31.469: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(46352) -> 174.37.29.147(80), 1 packet Sep 29 12:10:05 r0.sea.rg.net 406: Sep 29 12:10:04.260: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60333) -> 193.0.6.139(443), 1 packet Sep 29 12:10:11 r0.sea.rg.net 407: Sep 29 12:10:10.292: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60348) -> 193.0.6.139(443), 1 packet Sep 29 12:10:24 r0.sea.rg.net 408: Sep 29 12:10:22.640: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60363) -> 193.0.6.139(443), 1 packet Sep 29 12:13:30 r0.sea.rg.net 409: Sep 29 12:13:29.535: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(33721) -> 193.0.6.133(443), 1 packet Sep 29 12:14:10 r0.sea.rg.net 410: Sep 29 12:14:09.435: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(37936) -> 178.63.78.16(80), 1 packet Sep 29 12:14:29 r0.sea.rg.net 411: Sep 29 12:14:28.256: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(33754) -> 193.0.6.133(443), 1 packet Sep 29 12:15:32 r0.sea.rg.net 412: Sep 29 12:15:31.489: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60348) -> 193.0.6.139(443), 2 packets Sep 29 12:15:32 r0.sea.rg.net 413: Sep 29 12:15:31.489: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60363) -> 193.0.6.139(443), 1 packet Sep 29 12:15:32 r0.sea.rg.net 414: Sep 29 12:15:31.489: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60364) -> 193.0.6.139(443), 2 packets Sep 29 12:15:32 r0.sea.rg.net 415: Sep 29 12:15:31.489: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(60366) -> 193.0.6.139(443), 2 packets Sep 29 12:19:32 r0.sea.rg.net 416: Sep 29 12:19:31.492: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(37936) -> 178.63.78.16(80), 2 packets Sep 29 12:19:32 r0.sea.rg.net 417: Sep 29 12:19:31.492: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(33754) -> 193.0.6.133(443), 2 packets Sep 29 12:21:00 r0.sea.rg.net 418: Sep 29 12:20:59.386: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(39687) -> 206.219.196.114(443), 1 packet Sep 29 12:21:42 r0.sea.rg.net 419: Sep 29 12:21:41.318: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(39683) -> 206.219.196.114(443), 1 packet Sep 29 12:23:57 r0.sea.rg.net 420: Sep 29 12:23:56.533: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(56161) -> 88.221.216.66(80), 1 packet Sep 29 12:24:20 r0.sea.rg.net 421: Sep 29 12:24:19.673: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(39741) -> 206.219.196.114(443), 1 packet Sep 29 12:26:32 r0.sea.rg.net 422: Sep 29 12:26:31.499: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(39687) -> 206.219.196.114(443), 2 packets Sep 29 12:27:32 r0.sea.rg.net 423: Sep 29 12:27:31.500: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(39683) -> 206.219.196.114(443), 10 packets Sep 29 12:28:53 r0.sea.rg.net 424: Sep 29 12:28:52.193: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(44361) -> 64.12.104.224(443), 1 packet Sep 29 12:29:32 r0.sea.rg.net 425: Sep 29 12:29:31.502: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(56162) -> 88.221.216.66(80), 7 packets Sep 29 12:29:32 r0.sea.rg.net 426: Sep 29 12:29:31.502: %SEC-6-IPACCESSLOGP: list serial-out4 denied tcp 10.13.0.6(56161) -> 88.221.216.66(80), 6 packets

3 4

RIPE Atlas at RIPE65
by Vesna Manojlovic 21 Sep '12

21 Sep '12

[apologies for duplicates] Dear community, we are happy to invite you to the "Atlas Bash" at the RIPE65: Tuesday, 25 September, 18:00 – 19:00 (plenary room). This has just been added to the meeting agenda, in one of the BoF slots (Birds of Feathers): https://ripe65.ripe.net/programme/meeting-plan/birds-of-a-feather/ We would like to make this an interactive session, in order to bring RIPE Atlas UDM users and beta-testers together in one room with RIPE Atlas developers and the Measurements Community Builder to discuss developments, exchange ideas and best practices, suggest improvements, etc. This is also a great opportunity to learn more about the RIPE Atlas Anchors pilot project, how to get involved, to discuss host requirements, which features do you want, and more. We will be giving various presentations at many working groups, too, about the measurements results from RIPE Atlas, and plans for the future: MAT-wg, NCC-services-wg, plenary... Detailed information will follow next week, when all agendas are finalized. Hope to see you there! If you can not take part, there will be webcasts and jabber, and we will report back on these mailing lists. Regards, Vesna

1 1

Announcing RIPE Atlas Anchors, Pilot Phase
by Vesna Manojlovic 31 Aug '12

31 Aug '12

Dear Atlas community, Please find a new article on RIPE Labs describing the details of RIPE Atlas Anchors: https://labs.ripe.net/Members/dfk/ripe-atlas-anchors Right now, we are looking for a small number of pilot hosts from the RIPE NCC membership for deployment to begin in October 2012. If you are interested, please contact me or Daniel Karrenberg before the RIPE65. We will be discussing further details at the RIPE meeting. Regards, Vesna Manojlovic -- Vesna Manojlovic BECHA(a)ripe.net Senior Community Builder +31205354444 for Measurements Tools RIPE NCC http://ripe.net

1 0

Operational issue between ~14h-16h UTC
by Robert Kisteleki 29 Aug '12

29 Aug '12

Dear Atlas users, This afternoon our developers deployed an upgrade to the Atlas controlling infrastructure. Unfortunately, the update contained a bug that we did not catch in the test environment. This bug caused all probes to suspend their running UDMs (User Defined Measurements) between approximately 14h-16h (UTC, different probes were affected at different times). After noticing the error we reverted the changes, and resumed all UDMs. Because of this, your UDMs likely have missing data points for this time frame. Obviously, more frequent measurements will have more missing results while less frequent measurements will have less (or even nothing) missing results. "Built-in" measurements (i.e. non-UDMs) have not been affected. Based on this experience, we'll enhance our testing procedure to lower the chance of these kind of errors happening again. Excuses for the inconvenience this issue may have caused. Regards, Robert Kisteleki RIPE NCC

1 0

Two new measurements types, and a new interface (wizard)
by Vesna Manojlovic 28 Aug '12

28 Aug '12

Dear Atlas community, I am happy to announce DNS & SSL certificate measurements, a new addition to the UDMs, making it in total 4 types of customized measurements you can perform! Please find out the details in the RIPE Labs article: https://labs.ripe.net/Members/becha/dns-user-defined-measurements-in-ripe-a… In order to make more types of measurements possible, we have also introduced the new web interface: so-called wizard. It has been extensively tested by the beta-testers for two months, and we hope that the rest of the Atlas UDM users will find it handy. The old interface has been deprecated, so the usual link now leads to the new wizard: https://atlas.ripe.net/atlas/udm.html Please let us know what you think, and enjoy the measurements :) If you have a success-story to share, consider giving a presentation at the RIPE65, or writing RIPE Labs article. I am willing to work on this together with you, so do let me know if you need any help. Regards, Vesna

3 2

Static configuration feedback
by Jeroen van der Ham 16 Aug '12

16 Aug '12

Hi, I've noticed that the table on the webpage which displays the status of a probe's static configuration is not working right. If the "Static Enabled" setting is ticked, the "Probe Knows" is automatically ticked as well, *even for probes which are offline*. The feedback this gives is wrong and actually counterproductive. Could this be fixed please? Jeroen.

2 1

Traceroute path consistency
by David Lebrun 15 Aug '12

15 Aug '12

Hi all, I have a suggestion regarding the udp traceroute feature: allowing the user to specify the source port. The motivation for this suggestion is to keep consistent paths between two traceroutes towards the same destination. I understand that the source port is used to discriminate concurrent traceroutes, so perhaps allocating a range for user-defined source ports would do the trick. There is of course the issue of two users selecting the same source port for the same destination but this is very unlikely. Do you think this is feasible ? David

3 4

RIPE Atlas Roadmap: monthly update: August
by Vesna Manojlovic 08 Aug '12

08 Aug '12

Dear Atlas community, (thanks, Inigo ;-) while developing RIPE Atlas, we wish to keep *you* involved and informed. We are maintaining a roadmap of the features we are working on, and with this update we are asking for feedback, so that we can use it as guidance for making further plans. You can find much more details are in the RIPE Labs article: https://labs.ripe.net/Members/becha/ripe-atlas-roadmap-august-2012-update Here I only want to copy the plans for next 4-6 weeks, and three months after that, and to repeat the questions from the article: Plans for the next month: * Users can get more flavors of customized measurements: DNS & SSL - new wizard for two new types of measurements, currently beta-tested * Making it possible to download measurements results without having to be logged in - by deploying & enabling API Keys * Making it easier to follow the rate of deployment of probes over time - by updating the graphs that show the distribution and status of probes * Atlas hosts and sponsors can meet developers during RIPE65, Amsterdam - exchange experiences, give feedback and requirements - so developers can adjust priorities Plans for Q4 2012: * Installing Atlas Anchors as new targets for pre-defined measurements - this will offer greater topological diversity for measurements - Atlas Anchors will also become powerful probes, capable of performing more measurements then small probes * In order to remind you if the probe is not plugged in or if it is down - we will add more automatic email notifications of events * We will create Internet Traffic Maps based on Atlas data - maps will illustrate the health (e.g. reachability) of measured networks Questions: - About the current functionality: what do you want us to improve? - About additions to the next release: what are the most-wanted features for each one of them? - And finally, from the less-specific planned functionalities that we will work on three-six months from now: - what do you find most important? - to which one of them shall we give most priority? Thank you for your feedback, have a great summer, and see you soon in Amsterdam, Vesna

1 0

Make more measurements
by Vesna Manojlovic 06 Aug '12

06 Aug '12

Dear Atlas users, for few weeks already it is possible to perform *more* UDMs (User Defined Measurements), since we have increased the limits, and allowed you to spend your well-earned "credits": - you can perform up to 5 measurements simultaneously, - from up to 50 probes, - and you can spend 270,000 credits per day. A reminder of documentation location: - to see your measurements, and schedule a new one: https://atlas.ripe.net/atlas/udm.html - to find out more about UDM functionality: https://atlas.ripe.net/doc/udm You can read much more about Atlas on RIPE Labs: https://labs.ripe.net/atlas Have a great summer! Vesna

2 1

HTTP UDM?
by Miles McCredie 03 Aug '12

03 Aug '12

Are there any plans to support an HTTP UDM? Thanks -Miles

2 4

Sharing Stats?
by Dan Luedtke 03 Aug '12

03 Aug '12

Hello everyone, what are your opinions on sharing stats from a probe to the public? My idea: I have a public probe and public UDMs running, and I would like to embed the "last 8 hours" graphs into a website where people can see it, even those that do not have access to RIPE Atlas. Do you think it is a good idea to ask for a feature that splits the "Public" checkbox into two ones saying "Public (ATLAS Community)" and "Public (Internet)"? best regards, Dan -- Dan Luedtke http://www.danrl.de

8 10

Port blocking statistics
by Bartsch, Rene 25 Jul '12

25 Jul '12

Hi, when charting the internet it would be useful to have an oversight about ISPs blocking ports. Especially discussions about network neutrality should be based on hard facts instead of polemic discussions. So I suggest to check the connectivity of the protocols listed in http://www.iana.org/assignments/service-names-port-numbers/service-names-po… once a week as built-in measurement. Best regards, Renne -- Sent with love from the new tine 2.0 email client ... Please visit http://tine20.org

3 3

128.0.0.1 and 128.0.24.1 measurements
by Tuomo Soini 24 Jul '12

24 Jul '12

Should these measurements be discontinued? These networks are no more visible. http://www.ris.ripe.net/dashboard/128.0.24.0/24 http://www.ris.ripe.net/dashboard/128.0.0.0/21 -- Tuomo Soini <tis(a)foobar.fi> Foobar Linux services +358 40 5240030 Foobar Oy <http://foobar.fi/>

2 1

Probe down?
by Yoann Gini 23 Jul '12

23 Jul '12

Hello, My probe is down since a while now. I’ve try to unplug and replug many time, change USB and ethernet slot and it’s still down. The green led is on and the orange is slowly flashing, my swith see the probe, bit Atlas always report it as down. I’ve the Probe ID 2199. What I’m supposed to do ? Best regards, Yoann Gini.

5 5

Fwd: [ipv6-wg] New on RIPE Labs: Test your IPv6 Reachability by Using RIPE Atlas (now visualised)
by kix 23 Jul '12

23 Jul '12

fyi. I think this mail was not sent to this mail list. Cheers, kix -------- Mensaje original -------- Asunto: [ipv6-wg] New on RIPE Labs: Test your IPv6 Reachability by Using RIPE Atlas (now visualised) Fecha: 17/07/2012 14:32 Remitente: Mirjam Kuehne <mir(a)ripe.net> Destinatario: ipv6-wg(a)ripe.net [apologies for duplicate mails] Dear colleagues, As announced in earlier, it is possible for RIPE NCC members to do IPv6-traceroutes from all RIPE Atlas probes to IPv6 destinations. In this new article on RIPE Labs we present a first experimental analysis and a prototype visualisation of the traceroute results: https://labs.ripe.net/Members/emileaben/visualise-your-ipv6-connectivity-us… Kind Regards, Mirjam Kuehne RIPE NCC -- Rodolfo García Peñas (kix) http://www.kix.es

7 7

Concurrent traceroute issues on the probes
by David Lebrun 23 Jul '12

23 Jul '12

Hi all, I was wondering whether the probes can perform multiple concurrent traceroutes toward different destinations, and if so, are they able to differentiate the replies ? I just ran into this problem with paris-traceroute, the path were completely mixed up and stderr output looking like the following messages multiple times (IP addresses redacted): [WARN](TracertImpl.cc, 368)A reply received with bad original destination address A.B.C.D, should be W.X.Y.Z [WARN](TracertImpl.cc, 326)Bad return flow id 0x4d2 from E.F.G.H [WARN](TracertImpl.cc, 331)ICMP reserved words 0 0 0 0 0 As the probes use paris-traceroute, I prefer to be sure that the results are not flawed. David

2 4

Embedd built-in measurement page into website
by Bartsch, Rene 23 Jul '12

23 Jul '12

Hi, is there any way to embedd the "Built-in Measurements"-JQuery-Frame of my probes into a publically accessible website? Thanx for any hint, Renne -- Sent with love from the new tine 2.0 email client ... Please visit http://tine20.org

2 1