a L2 switch uses the CAM table to forward frames within the same broadcast domain, typically from an host to its default gateway of between two hosts in the same subnet.
#networking
clear igloo
tame carbon
CAM table only records MAC -> Port & VLAN
if you receive a packet with destination X, from source MAC Y
destination isn't a MAC, but an IP.
peak cloak
why do no cheaper switches support ipv6
why
It'll be cheaper running additional ethernet upstairs
That's what I think I'll do
clear igloo
Yes Layer 2 switches forms cam table Actually a switch is a multi port bridge, it takes an incoming packet, and looks at the destination MAC address It decides what port to send the traffic to by looking at its CAM table (MAC to port # mapping) A switch does NOT do ARP to route ethernet frames A layer 2 switch does not even know what TCP/IP or ARP are. If it did, how would it route non IP traffic? Ethernet and TCP/IP were not designed with switches in mind, switches are supposed to be transparent. This means they do switching with no protocol support.
tame carbon
@clear igloo so what you are saying, if you want to support dualstack, you need an L3 switch?
Because this doesn't explain the behavior that @peak cloak is experiencing
In the L2 context, the sender has to know the MAC of the destination port. which it could get through ARP.
clear igloo
If you want to route L3 traffic you need an L3 capable switch or a router, if you're going on the local subnet ONLY then an L2 switch won't stop anything since it doesn't know or care about L3 addressing, the PC will send a broadcast frame to learn the MAC of the other device and keep a local ARP table. There are however "smart" L2 switches which I've seen cause issues for some stupid reason at L3 which is probably this case, I suspect they have limited L3 capabilities that aren't advertised
peak cloak
The core switch I have doesn't advertise ipv6, so maybe it's just a dumb netgear thing
It's the DGS-1210-10P if anyone is wondering and the netgear one is GS308E
tame carbon
@clear igloo that clarifies my confusion. Seems, what I've been understanding as L2 was actually just L3
all the gear i use has L3 switching
clear igloo
Yah, ARP can ride that funny layer between L2 and L3 and you can have an ARP table on an L2 switch for management stuff
thick minnow
Question do you think the HP G8 will be good for a file server?
clear igloo
@tame carbon I did need to brush up on some stuff that I've glossed over lately. Brush off some cobwebs 😄
Depends, how much do you like noise @thick minnow
or where will it live I guess is the better question, if you put it in a basement and nobody is nearby then you'll be fine
But putting it next to your bed or something is not going to be fine
thick minnow
Yeah, i have a room in my basement for it
clear igloo
Then you should be fine, you're talking about like a ProLiant server right?
thick minnow
Yes
clear igloo
Not a blade or anything, then it should do well
thick minnow
Ok thanks
clear igloo
It won't be the most power efficient thing compared to a low power QNAP using an ARM processor but it will give you room for VMs and whatnot later or beefy plex server if you want (CPU dependant of course)
peak cloak
depends on which model though, the smaller LFF models can only hold 4 3.5" drives
thick minnow
Well i am already using Windows Server 2012 R2 on VirtualBox and i hate it. Its just too slow and hard to manage. I would rather have it hardware not remote
clear igloo
@peak cloak @tame carbon The GS308E seems to have a "block unknown multicast" setting which can mess up IPv6
peak cloak
hmm, I'll check that off
clear igloo
Yah, see if that's enabled and try with it off, I'm curious now 😄
peak cloak
now if I can only get to the admin page
I'll have to do it later, right now I have school. I'll have to disconnect the switch and connect to it via the default ip
clear igloo
Sounds good, let me know later
waxen scroll
@clear igloo meow so mad
peak cloak
no
tame carbon
rip
peak cloak
this was my first switch, I got what I thought was best
tame carbon
I've jerry rigged an arduino to simulate console cable before :)
peak cloak
The D-Link switch I got for free
haughty mulch
Hey, I'm wondering what's the best network through mains plug I should get for a house that barely gets WiFi upstairs.
peak cloak
is running ethernet an option? That's always the best thing
haughty mulch
Too expensive for us atm.
peak cloak
ethernet cable is cheaper than powerline?
haughty mulch
You mean run ethernet cable all throughout house?
peak cloak
no, you can just run an ethernet cable to the area where you have bad wifi and put an access point there
idk much about powerline, can't recommend anything specific
haughty mulch
Ahh, oh well, thought about cabling the house but it's an old brick house that will be hell to do up. Thanks for answering anyway.
peak cloak
yeah, that would be a pain
topaz quarry
if you have coax you can use moca
unless you're astoudingly lucky
powerline won't work
especially in a two story house
peak cloak
for powerline, does it need to be on the same circuit?
flat lion
OK, sanity check time. I'm trying to set up my Google Domains records so that The CNAME needed to be for *.ddns.mydomain is privately resolvable inside my network and publicly to the A record associated with the bare ddns.mydomain FQDN set up with Google Domain's DDNS synthetic records. In theory, all I should need to do is create an appropriately formated CNAME record for the * subdomain right? 'cause I've done that and I can't get it to resolve from querying the ns-cloud-c[1-4].googledomains.com nameservers. (also posted on LMG networking subforum: )*.ddns to ddns.mydomain
peak cloak
finally got web access to the switch, it's such a pain
@clear igloo that setting is disabled, still no success
peak cloak
Like you said, theoretically it should work, idk what I'm doing wrong though
maybe it's something with router-advert
but my laptop got an ip
peak cloak
ok even with my desktop over wifi it's not getting an ipv6 ip
peak cloak
hmm, it was able to receive the advertised ipv6 dns server
maybe a restart will help
@clear igloo would IGMP Snooping affect it?
peak cloak
I think it's a lost cause to get it to support ipv6, some reviews say it completely block ipv6
neon escarp
didnt read the whole story but it feels like your issue might be MTU size ?
peak cloak
@neon escarp basically one problem is that my upstairs distribution switch doesn't have ipv6 support, even though theatrically it should still work, but it doesn't
neon escarp
it should work but as i said ipv6 can have slightly increased frame sizes which could be dropped by your switch. IF your switches are configurable you could try to increase mtu size to something like 2000 and see if that works.
tame carbon
IGMP is for Multicast
peak cloak
yeah ik, I was changing stuff since I thought ipv6 uses multicast right?
tame carbon
inter group messaging protocol
@peak cloak can't you go to port configuration?
MTU should be a configurable option
not seen a network device that doesnt have support for that
regular frames are 1500
peak cloak
the GS308E is very limited for a "smart" switch
I see MTU, but it doesn't seem to be able to be changed
tame carbon
yeah but as @clear igloo said, it shouldnt matter
peak cloak
I have a feeling they blocked it on purpose
peak cloak
not gonna waste my time with that lol
tame carbon
ask them, how it is, that a switch that operates on layer 2, doesnt work with v6
how much did you pay for that netgear?
peak cloak
40 bucks
tame carbon
mh
peak cloak
that, the ER-X, and the EAP225 were my first real networking purchases
no regrets with the EAP
ER-X does what I need it to, it's fine
this switch tho is a pain
tame carbon
@peak cloak Their website says though, L3 routing and ipv6 is only on select models
but you just need a switch
which is L2
idk if you have any sort of other configuration runing on that switch, that might have it run on L3 instead
Because an unmanaged switch can do v6.
peak cloak
it's all factory settings except that IGMP Snooping is disabled
not much to configure
peak cloak
no, how do I check
hollow marlin
Are you able to get a v6 directly connected to your router? Check the simple things first
peak cloak
yeah, I'm able to ping v6 google on the router
hollow marlin
From your router or PC?
tame carbon
if you set a static v6 on your local machine, can you ping from there?
using your prefix
tame carbon
thats good
hollow marlin
Connect your PC to your router and test to see if you get a v6 SLAAC address, bypass the switch
peak cloak
I'll mess with it later, I made the mistake of changing a setting right now the router is doing some weird stuff
tame carbon
wind hearth
perfectly legit 
waxen scroll
@hollow marlin this is amateur hour
waxen scroll
you cant just post a meme about how hard network issues are and not have a good story
orchid shell
if i were to get a router which the source is WAN, would the router its getting WAN from reduce ping from the WAN routers LAN ports
unborn sluice
waxen scroll
The more devices in between you and the internet the higher the ping
Unless you're a corporation and have $10k acceleration devices
💩
worthy stirrup
are there a way to make my public ip static?
unborn sluice
Ask the isp
elfin socket
you cant just post a meme about how hard network issues are and not have a good story
@waxen scroll
When I would stay at my grandmothers, I'd use an old router as an AP to boost the signal in the guest room. Used a 8 character password because she had like 4 others with wifi in the area too, and didnt want anyone getting in. Still simple enough to type out since it was a phrase with an underscore followed by digits. Figured it was simple enough for others to get. even wrote the config under the router for anyone to find.
Aunt came over, wanted to use her iPhone in the guest room.Also noticed the bad signal in the guest room. I told her about the AP and the password on the sheet under it. Told me its stupid and doesnt work.
turns out when I set it up on the iPad,-and_are visible as characters on my device, but dash and underscore were not default visisble on her iphone at the time, and instead of switch keyboards/symbols, she blamed me for setting it up wrong
does that count?
tame carbon
@waxen scroll figuring out how to set up multicast on my network
that cost me 2 days of my weekend
elfin socket
@tame carbon I had some netgear Router I bought from Costco a while back. somehow evded up with 3 of them so I set one as an AP. As I normally dont really review my network config every night, it wasnt till after a power outage that I found out that the one I set as an AP defaulted to an open network.
Me one night: Heh, look at the idiot with the open network. Netgear-170
Wait a minute, 4 bars.
-Walks to room. Oh shit.
-Connects to AP.
-Puts in local address to NAS
-NAS logon page appears
(oh shit)
hollow marlin
@tame carbon Now time to setup NG-MVPN
elfin socket
Idea: Set up a SSID with a weak password.
Then point everything inside of it at a captive portal.
unborn sluice
That's like being an ass
proud jolt
What is the min speed for playing games
Speed of internet
I have a connection of 50mbps but I have packet loss
How to fix it
In game stats
20-60
Yes
Nope
I had this issue in csgo and valorant
I will just change my isp
Hope it works
tame carbon
@proud jolt
Run this. target IP: 1.1.1.1
have it run for about ~100 packets
then send a screenshot
This should help narrow down where your network latency and loss is coming from
waxen scroll
@elfin socket @tame carbon 🍿 
Here's some of mine:
-
Massive fire alarm system for a campus. Each sub-alarm panel uses serial to communicate to the master alarm. Because it was a massive campus, you cant just run serial to multiple buildings miles away, so serial to ethernet converters (10mbit auto neg). I was called into a 911 center (but for the company only) and arrived to alarm beeping going off like crazy (its fire alarm fault indicator). They would clear it but then 10 seconds or so later it came back and started beeping again. Go through OSI model Layer 1 > 3. OK links are error-free and not flapping. Hmm looks like tons of ports on this switch are dropping frames. I configured a port on the switch in the same vlan and attached my laptop and ran wireshark. My laptop just sitting there listening was receiving close to 1Gbit/s traffic. The poor 10mbit alarm ports couldn't take all that traffic. The cause? Bug in switch code was broadcasting a servers unicast traffic.
-
Company's servers all randomly disconnected between zero and four times per day at the same time. OSI model all good. No floods seen in netflow. This company splits their datacenter up into zones. To escape the zone you need to go through a firewall. We had no ability to high speed packet capture without lots of loss, as the company had 0 budget for taps and things like that. Weeks later.... it was discovered that the ASA was running an IPS with all features enabled. What happens is the ASA has hardware ethernet paths inside it (same as outside but inside there's no cable). These inside ports were slammed because all features were on. It would disconnect the datacenter when it overflowed. The idiot who configured this quit the company before the issues started happening.
- Client complains they cant reach their server. They cant ping it. They are on the same network / vlan as me. I can ping it and reach it. Turns out the server switch ASIC was flagging that source/destination pair as bad and dropping the traffic. We couldn't figure it out without support going into debug mode on the ASIC which outputs tons of jibberish if you dont know how to read it. Code bug.
toxic citrus
Was looking up people's experiences with gigabit from a company i might go with. Some guy raging at the fact that his speeds drop to 100mbps sometimes... Anyone else experience this with their ISPs?
Also, there are very few posts with actual proof with this company so it's hard to verify if this is common with them, or maybe this is just common with any isp.
Also this is from 3 years ago and it's FTTH not FTTC
thick minnow
Can someone recommend a server for AD DS around $100-300? I have been looking at a Dell Poweredge R610 but that´s not going to work because the last os it supports is WS 2012 R2. Thanks
waxen scroll
@toxic citrus the ISP cant control the speeds from speed test servers. When they say 1Gb they mean between your house and their facility. It's possible that persons ISP doesnt have good paths to those test servers
peak cloak
Usually ISP's will host speedtest server's on their network in order to make it seem faster, but their peering may suck.
toxic citrus
Ah yes peering! That's the keyword I've been missing for months
The sales rep was saying "it's always 1gbps" and i couldn't think of that word
waxen scroll
@hollow marlin in like 2010 i had a 1gb port in a colo with a good provider... I couldnt get the full gig from most sites. It had to be usenet downloads or something like steam
i imagine its still a problem
peak cloak
Snazzy Labs made a good video about how even with a 10gig connections, most servers don't do 10 gig and how it's usually overkill
toxic citrus
But how about multiple users? Let's say 2 steam games downloading full speed each and then a 4k Netflix stream or 2 (a plausible situation in my house, should we buy giga) would there be some ping issues due to bad peering?
peak cloak
yeah, he described it more of a hose, so with more user it becomes more "worth-it"
toxic citrus
One thing's for sure; anything is better than 2mbps and 600 ping like i have for the past few weeks
peak cloak
that's worse then standard satellite internet
toxic citrus
It's 4g
I mean
"4g"
My ISP is completely screwed the past few weeks
No idea why
Can't fet through to support
peak cloak
DSL? Cable?
toxic citrus
No, my house is 4g and my phone is 4g
Phone was always bad for dropping connection every few mins
So I can't do anything on it
Dunno what to do with it haha
surely peering can't be the cause of such low speeds right?
peak cloak
do a traceroute
see where you have the most ping
actually mtr would be better
it's both ping and traceroute in one
if you have linux it's already built-in
hmm, I'm getting lost packets myself to nyiix.as13335.net
but that's after like 10 cycles
so maybe an anti-ddos thing on their end
hollow marlin
Using ping for packet loss is not a reliable method when you are hitting the hops. Control plane policing is default in Juniper (which has become the majority for SP) and typically configured in Cisco as a standard. The defaults are very low, ~100pps, and with many services randomly pinging hops its not uncommon to trigger the policing. Ex. here is one of our hops with the number of dropped/policer pings due to thresholds
waxen scroll
@hollow marlin imagine the lols if more people started dropping ping.... like 1.1.1.1
i worked at a company that would trigger internet failover if CNN, NBC, etc were unreachable as well
i use DNS checks in my internet IPSLA instead... i set it to a root server and check the root servers DNS against itself
hollow marlin
People already complain when 8.8.8.8 drops. Its the best when I get escalated from a customer running Cisco ping 8.8.8.8 repeat 10000 and are freaking the hell out when they see 3 !s.
I then explain that is not a valid way to test loss and then let them rant for a few mins how 0.0003% loss is unacceptable
waxen scroll
i know if i worked at google thats gonna happen in my first few months of working there
gonna lol when the world burns
no reason for 1000 people to be constantly pinging me
i wonder if 1.1.1.1 was on purpose just to get traffic floods
make their peering agreement in their favor
"you keep sending me shitloads of spam so i can send you more traffic than i normally would for free"
tame carbon
@peak cloak sorry for not responding earlier
I saw your wall of text
but I was in middle of meeting
wait
argh
@waxen scroll
wrong person
derp
waxen scroll
it was a high quality post too
tame carbon
I'm about to read
@waxen scroll what kind of jankware are they even using?
bugs in switching silicon sounds like jank
waxen scroll
other than the job with the ASA, its extreme gear
toxic citrus
this sums up my current isp
hollow marlin
When people think if its not 5 9s then is basically never working
tame carbon
420
unborn sluice
knotty thistle
toxic citrus
This is pretty nuts for the cheapest plan here
@knotty thistle put a decimal there and that's my speed
tame carbon
250/250 here
Also, this rule, in the top
is so stupid
in regular chat, all these gamers constantly show off their RGB
peak cloak
I mean it's to stop just constant spam speedtest. Some speed test posts are fine
Search in:networking oldest
it's just speedtests basically
toxic citrus
When is rtx bytes coming? Finna get me some raytraced packets ☺️☺️☺️
strange path
Raytraced packets are probably faster than my 6 megabits per second downloads and 0.96 megabit uploads.
peak cloak
Jumbo packets exists
strange path
I know its just a joke.
peak cloak
yeah ik
tame carbon
@strange path that line is faulty
strange path
what?
strange path
yes I get them when it rains
strange path
surprisingly the speed does not drop when it rains.
strange path
my ping is ussually around 30 to 40 when nothing is using it
tame carbon
yeah but it will spike up and down when there's linefaults
shitty ISPs not maintaining their cables is what that is
strange path
also whenever the electric jitters the crc goes up.
strange path
You can thank the old Bluebell lines that are realabled as ATT.
I know that my side of the demarc is done nicely.
tame carbon
strange path
because there is a cat5e cable running from the box to my dsl modem and the phone wires come out of the modem so the modem acts as a filter so I should not be getting any interferance from the phone wires that are spread out like an octopus around my house.
tame carbon
my home network ^
strange path
my bad, Michigan bell then ATT took over
strange path
my home network consists of a crappy motorola dsl modem and then a 1 gigabit switch because the modem only has an integrated 100 megabit switch for ethernet.
tame carbon
That spool of fiber goes to a switch elsewhere in the building
from there, there's 2nd fiber , going to the server
core router, switch and server are on 10G
If you ever need proper gear for routing
mikrotik is it
strange path
great, I only use 1 gigabit because my old hard drives will never achive over 100 megabytes in speeds.
tame carbon
mh
I have a raid 1 config
drives do about 250MB/s read
but can serve multiple clients and run virtual machines on that
strange path
well modern drives can go faster than stuff from 2008
peak cloak
Ok, I have a question about something on my home network that I'm quite puzzled about. I never configured anything on the 192.168.100.x subnet, however I can access the modem web status by going to 192.168.100.1. I want to change my home private range to 10.x.x.x eventually so I want to know how I would replicate this eventually.
rocky badge
modem & router combo? or separate @peak cloak
peak cloak
modem is seperate
rocky badge
Most modems use 192.168.100.1 as their management IP
strange path
Can't you just change the DHCP server settings on your router/modem?
rocky badge
And since your router is connected to them, they can show a web page on 192.168.100.1
peak cloak
but they are behind the router, wouldn't the router perform NAT? How does it know to not NAT the modem?
rocky badge
routing
I don't have my modem hooked up anymore, but it's routed through your default gateway then sent over your router's WAN interface
then the modem is doing some routing for 192.168.100.1
peak cloak
so I would just configure a static route for lets say 10.10.10.10 which would point to 192.168.100.1 ?
rocky badge
iirc modems are just a fancy bridge? Not entirely sure but they're just converting DOCSIS to Ethernet
Idk maybe
but you should be able to access the modem's web gui anyways
peak cloak
hmm, still confused
waxen scroll
@rocky badge rouing?
south blade
You guys know Untangle? How's the WiFi situation on it vs PFSense, also not recommended? I keep having to restart my TP-Link Archer C7 v2 more and more often, thinking I should probably just replace it but wondering if I can just buy a WiFi card for my PFSense box or maybe try Untangle if it plays better with WiFi cards.
rocky badge
@peak cloak Yeah, tracerouting to 192.168.100.1 should go through your router and to the modem
the default route should be a WAN with that connected to it
So the traffic is going through the modem
peak cloak
yeah ik that, but how does the router know not to NAT it. Is there some sort of DHCP but for routes. Is that BGP?
rocky badge
it's not in the nat table
the router doesn't just nat every private ip range
pfSense is NATing those because they're configured for NAT
I could be wrong about any of this, idk, but this seems logical to me 😂
I only really use static routes for stuff behind another NAT
but I'm learning
peak cloak
yeah me too, still don't fully understand, but thanks for explaining
rocky badge
Oops yeah it does NAT it
But it doesn't have a dedicated route for it
It falls under the default route iirc?
waxen scroll
most devices are configured to nat once it tries to leave the wan interface
rocky badge
Yeah
waxen scroll
dedicated route will nat too
waxen scroll
right
rocky badge
I wasn't saying the route doesn't nat it
It just uses the default route
Wireguard is so fucking fast
Even on my phone it's so fast
peak cloak
I need to get wireguard set up
rocky badge
With 500Mbps up my vpn doesn't suck
waxen scroll
orchid shell
can someone help me find out why my router isn't letting me log in
I'm putting the right password in
its not saying wrong password its just saying access denied
i mean its my family router
lmao
im just trying to port forward fallout 76 so I can just play it
ornate jungle
What's the make and model of router, and has the default admin password ever been changed before?
orchid shell
oh thanks
peak cloak
it worked?
peak cloak
umm, have you ever logged into the router?
rocky badge
xfinity's business routers are cusadmin/highspeed 😂 😂
if it's not highspeed then it's CantTouchThis on their routers 😂 lmao
(not your router, but xfinity's provided business one)
orchid shell
yes ive logged into the router before
tame carbon
Dutch Minister of Justice & Security has released a list of webhosters that don't fully cooperate with removing cp
that list, has only one hoster on it
NFOrce
europes largest bulletproof and bunkerbased hoster xD
unborn sluice
"list"
tame carbon
NFOrce doesn't answer to anyone
they also helped keep TBP online during the interpol raids
unborn sluice
I think I know where to host next
they also helped keep TBP online during the interpol raids
keep internet OPEN
tame carbon
@unborn sluice their solution:
which was proposed in the public parliament letter
Require ID verification.
tame carbon
@unborn sluice I don't get this whole crackdown though
All these physical servers are encrypted
and their network is tunnelled elsewhere
so even if you manage to get a warrant to get into the underground datacenter
you still end up empty handed
unborn sluice
I think in the US the gov can request for the data
tame carbon
Yeah they can try, but they cannot comply
unborn sluice
so it's better that the encryption keys are not within the data center
it should be in the customer
tame carbon
@unborn sluice I'm against CP
but this whole "Clean feed" and "Clean internet" they speak of
I want none of that.
because it sounds like censorship
as if it has to be my right to a "Clean internet"
unborn sluice
Anything that is controlled can be censored
tame carbon
I don't go on shady sites, so why.
tame carbon
protect me from "myself" lol
unborn sluice
but this whole "Clean feed" and "Clean internet" they speak of
clean is subjective
i just want internet without anyone controlling it
tame carbon
the sickkest part of this whole bs
is the fact that the government only interests itself in the distribution of illegal imagery and photography
instead of preventing this material from being made in the first place
this means, protecting immigrant children
because there's quite a handful that drop off the radar, and get abused. THIS is what needs to be prevented
this is just naming and shaming, what they are doing
call out two hosters, and expect them to solve it
but this weakness is nothing new, judiciary in the netherlands has been a shitshow for few years now
unborn sluice
This is why it's hard to support some law enforcement
imho, they are kinda attack the wrong segment in these whole puzzle of crimes
toxic citrus
"video games cause violence" except worse
tame carbon
videogames cause violence is just a bad meme
toxic citrus
for a while it wasnt, and i wished this censorship idea would blow away too but no
elfin socket
I’d love to see the “video games cause violence” 80’s meme try to get pushed into the spotlight again, especially after Covid and the fact that basically the working population right now have grown up with video games as a legitimate hobby
They should really called it”home entertainment”
unborn sluice
videogames cause violence is just a bad meme
they dont?
tame carbon
its so cringe lol
unborn sluice
there are some awkward moments lol
definitely marketing was different back then
they still have these shenanigans
misty terrace
sudo kill -p me
unborn sluice
peak cloak
About the whole video games cause violence thing, they probably don't but they defiantly do cause some sort of behavioral change, whether it be temporary or long term
unborn sluice
It's actually hard to put some merit
when they are aggressively saying videogames are to blame for the mass shooting
I ain't a parent yet, so my opinion isn't firsthand or very comprehensive
opal yew
Anyone familiar with packet sniffing or Wireshark itself?
opal yew
I'll just shoot my question then, can firewall affect packet sniffing? I'm trying to do sniff RTP packets using Wireshark on a Cisco switch where my laptop is connected via a destination span port(mirrored port) but failing to do so. It works just fine when I'm on a home network tho.
Edit: Typo
clear igloo
If the firewall is the gateway it can possibly be dropping the packets, yes
But if you're doing local span then I don't see how a firewall would stop that though since the span session would be port x to port y and not use the firewall
If you were doing ERSPAN or something where it passed through the firewall, I could see that causing issues but if you're spanning locally on the switch the firewall should play no role in that
hollow marlin
laptop is connected via a source span port(mirrored port)
@opal yew Are you connected to the source port or destination port?
opal yew
Is it possible that the switch can restrict or allow like certain mac addresses to like get the traffic?
I'm connected to the destination port. Was on a typo there my bad.
I mean I am getting traffic but not the ones I am looking for. All I get is a bunch of ARP traffics, no TCP UDP or RTP.
But when I do tcpdump on the other device that is connected on the destination port, I can see the RTP.
hollow marlin
You mind posting your config for the SPAN config and run show monitor session and the config for the interfaces. Also if you are trying to capture VLAN, which I assume be cause you are trying to capture RTP, make sure your NIC is in monitoring mode else some NICs will drop VLAN traffic. Some are odd like mine and when monitoring mode is not enable just strip the header but process the traffic anyway
topaz quarry
mikrotik switches can run router software
so they can do anything you feel like putting up with
waxen saddle
Is the RTP traffic sent over Multicast? I ran in to an issue where if Virtualbox was installed, multicast packets would not be received by the Windows host OS. Uninstalling Virtualbox or setting the Virtualbox adapter administrative distance to something like 8000 fixes the issue. Vbox developers have no idea why this occurs.
waxen scroll
@clear igloo if using laptop sometimes anyconnect installs can screw you over
i forget the details. i had issues and dont remember what I had to do to get around it
🤔
clear igloo
Do the thing with the whatnot and then it fixes the issue
waxen scroll
i havent even tried at new job yet. i know thats gonna be HELL
with that laptop its anyconnect or nothing
tame carbon
@waxen saddle what kind of tap are you using for your virtual network controller?
multicast probably wont work properly with macvtap
waxen saddle
Tap for Virtual network controller? I'm afraid I'm not familiar with the terminology.
tame carbon
Can anyone make a recommendation on what to buy if I wanted to deploy a large scale Unify network as a public hotspot?
Need to cover quite a large area, with at least 4-5 APs, backbone will be done using mikrotik p2p antennas
The goal is offer two networks on the unify devices, one private with a regular passcode, and the other a public SSID with a captive portal
I know that unify has some way to generate "wifi access" codes, for one time use (wifi vouchers)
Do I need some kind of extra device to manage that?
waxen saddle
Don't use the *-LR.
waxen saddle
So with Unifi, especially on a larger scale, you'll want a dedicated Unifi Cloud Key (It's a hardware device you'd physically buy - you maintain complete control over it. Don't want it integrated with cloud? Don't have to!) This device will manage all of your unifi devices and network. It also has a built-in Guest portal with lots of customization and ability to create vouchers. All built in to the cloud key.
I forgot to mention, the cloud-key is a flat-fee one-time payment.
tame carbon
@waxen saddle I will probably still end up using mikrotik as core routing gear
I just need an easy way to manage the APs, but thanks for the tip on the cloud key
sage flame
Does anyone know if UnRaid ever goes on sale?
peak cloak
why unraid? anything specific you want from it?
jaunty talon
why are margins low on unraid?
tame carbon
isnt unraid just ZFS with a fancy GUI ?
peak cloak
@tame carbon that's freenas
jaunty talon
I would guess the margin depends on how many employees they have :)
topaz quarry
the margins are low because of no support fees, one time payments
tame carbon
profit with unraid isnt so much the software, and more the support they offer for business customers
topaz quarry
now they've been doing slightly better thanks to rona
FreeNAS and Proxmox make their money from SLAs and support contracts
well FreeNAS just directly benefits from TrueNAS contracts
tame carbon
@topaz quarry 5/6 is experimental
peak cloak
i've been thinking of making a ZFS based storage machine, just I never relized how expensive drives are
tame carbon
I chose btrfs raid over a raid controller, mostly because btrfs is able to check for data corruption on faulty drives
SMART does not always report bad data, btrfs checksums can help identify
topaz quarry
ZFS is great
sage flame
why unraid? anything specific you want from it?
@peak cloak It's easy to use, friends use it and we're able to help eachother when stuck. It just suites my needs. I mainly run Pi hole from it, VPN host, Plex, storage server itself etc...
topaz quarry
docker on unraid is so complicated
tame carbon
topaz quarry
like running jitsi on unraid demmanded it's own set of tutorials
in normal docker installs
sage flame
unraid to run pihole, plex and whatnot
@tame carbon It's because it's there. I've used CLI's to run stuff such as that, and it bores me.
topaz quarry
it's just a single docker-compose line
peak cloak
if you really want to, you can do everything with free software
topaz quarry
portainer is amazing
tame carbon
doesn't proxmox have docker support now?
topaz quarry
yes
peak cloak
idk, I just use a debaian VM
topaz quarry
each LXC instance supports nested docker
tame carbon
@peak cloak debian host, ubuntu guests xD
topaz quarry
i do ubuntu VMs for nvidia-gpu based dockers
just because it's less annoying
oh lol hardware accelerated dockers on unraid are impossible
like cmon
sage flame
I just need something that works, with good parity backup, and can run the things I need it too well; without being too complicated
tame carbon
every ubuntu user who uses vanilla debian for the first time: -bash: sudo: command not found
topaz quarry
FreeNAS has ZFS which has better data protection than the parity system from unraid
peak cloak
@tame carbon that was me with alpine
topaz quarry
like UnRAID is great until you deviate from their intended purpose and original UI
tame carbon
@sage flame proxmox is as easy as it gets to manage VMs
with docker support, easy to set up software on the fly
topaz quarry
also using terraform with unraid is actually impossible
tame carbon
sage flame
@sage flame proxmox is as easy as it gets to manage VMs
@tame carbon I'll look into it
Any downside to it?
waxen saddle
I personally moved from Proxmox to XCP-NG. But that was more personal taste. No Docker support or management though.
topaz quarry
citrix is dying though
tame carbon
I use QEMU/KVM personally
waxen saddle
Tell that to Enterprise
topaz quarry
and they'll take xcp-ng with them
tame carbon
topaz quarry
i was on an interview call with citrix for engineering opp
tame carbon
This is great ^ if you were previously used to something like VMware
topaz quarry
they tried to tell me docker is a fad
tame carbon
^ 
topaz quarry
their management is so out of focus
topaz quarry
podman is awesome
yea rootless containers are easier on redhat based distros
because of security hardening
peak cloak
really?
peak cloak
you can use docker-compose?
topaz quarry
they have podman-compose
peak cloak
oh ok
topaz quarry
it works 99% of the time
tame carbon
except when it doesnt
topaz quarry
don't use crazy features
tame carbon
like me with every attempt @ docker
topaz quarry
it'll work
tame carbon
I flunked that test.
peak cloak
can you use docker image's or do you need to build one's for podman
tame carbon
I just run virtual machines, no docker here xD
peak cloak
cool, I'll look into it
tame carbon
yeah
waxen saddle
I'll check out virt-manager as soon as I finish several rounds of updating my BIOS. I discovered WakeOnLAN isn't working on my computer and hoping BIOS updating will fix it.
peak cloak
I like centos / fedora
tame carbon
but on my game server network, we have docker
but that also means
we have two MySQL and two Postgresql instances
which is waste of resources.
topaz quarry
you can install podman and just use it as a different runtime
like i have podman, the docker runtime, and the nvidia-runtime
i just specify the runtime in the compose file
tame carbon
@waxen saddle virt-manager is a frontend for QEMU/KVM
uses libvirt for the virtual machines
virt-manager itself is a GUI program, if you want to open that over SSH, you'll need X11 forwarding
if your client is linux, this is dead simple: ssh -X enables X11 forwarding
on windows its bit more tricky
You will need xming and PuTTY
waxen saddle
I primarily use Windows. I'm familiar with X-11 forwarding. Had to learn when setting up a Halo 1 PC server on a headless Ubuntu server. 🙂
topaz quarry
if Microsoft wants to benefit from CDI
they have to comply
CDI => Container Desktop Infastructure
tame carbon
microsoft has to begin by tossing out NT
topaz quarry
or they have make serious contributions to the microVM projects
tame carbon
and swap to linux
topaz quarry
they've already started
tame carbon
and failed
topaz quarry
parts of the kernel got moved around
tame carbon
WSL and WSL2 are terrible.
windows is slowly dying
heaps upon heaps of legacy code
peak cloak
yeah, that's what windows feels like
tame carbon
bandaids to bandaid incompetence
peak cloak
linux also needs some improvements, primary in the desktop enviroment
tame carbon
Linux has made lot of progress last few years
misty terrace
you should check hard links on windows 10. i don't know how ntfs is keeping up with the current shit show
tame carbon
most of the desktop issues on linux still comes down to graphics having sub-par support
topaz quarry
the problem is a lot of people are just used to the windows UI
and are adverse to change
tame carbon
^
that too
and terminals are scary
people think you need to be some kind of super nerd to use it
topaz quarry
there was a distro that replaced office with onlyoffice
and HR people didn't notice
tame carbon
but these are the same kind of people who click "OK OK OK OK" through an install wizard ,without reading
peak cloak
I really want to switch to linux, my last attempt was terrible since I installed it accidentally via BIOS not UEFI so I couldn't boot into windows and needed to disconnect all my other drives to force it to boot there
topaz quarry
can i use your indentitiez for world domination
yus
oh no always install all operating systems via UEFI
you can't even install macOS on BIOS systems anymore
because Apple is like no
tame carbon
I couldnt get the keys enrolled with ubuntu 16 at the tiem
peak cloak
my brother used popOS for a while since his computer was so bad
topaz quarry
pop os is great
topaz quarry
ubuntu in general is a mess
peak cloak
I mean, it works
topaz quarry
pop os is a less messy ubuntu
tame carbon
pop doesn't ask for password verification by default
topaz quarry
clearly debian itself is the best
tame carbon
anyone can just change root pw
misty terrace
pop_os forgot how to do dual boot
peak cloak
It's either Fedora or Debian for me
tame carbon
Debian or ubuntu for me
tame carbon
first distro I used was centos
peak cloak
centos is good for servers
tame carbon
I generally find it easier to find support online for debian systems
topaz quarry
centos is also good for drivers
tame carbon
DKMS has been part of Debian for a long time now
topaz quarry
or prop GPU stuff
peak cloak
I want to use Davinci Resolve, and it officially has support for centos and fedora is close to centos
tame carbon
it is true, that fedora is usually the first to adopt the shiny new stuff
topaz quarry
like immutable installs
topaz quarry
that was a neat pick-up
tame carbon
@topaz quarry I have my nvidia drivers on ubuntu with dkms
previously, had to reinstall them each time I did kernel patch
which... was stupid
thick minnow
rtx 3090 ok for call of duty 1? or is it too bad?
topaz quarry
wut
tame carbon
wat
thick minnow
wait wrong channel
tame carbon
call of wire
topaz quarry
don't troll other channels either
thick minnow
sorry wrong channel
tame carbon
part two: the disconnect
@topaz quarry so when I asked in #public-chat why there isnt a #linux
I found out, all the linux doods hang out here
xD
topaz quarry
roflmao
tame carbon
general-chat didnt take my suggestion for #linux kindly
"linux is crap"
well ok. pc gamer
peak cloak
this channel reminds me of a more laid-back r/homelab discord
unborn sluice
but I like laid back
peak cloak
same
tame carbon
laid back chat is chill
waxen saddle
Just tell them "Your game servers all run on Linux"
tame carbon
#public-chat is all stimmed up redbull kids
peak cloak
whenever a game server can't run on linux, I find it so stupid
tame carbon
^
peak cloak
like stormworks
tame carbon
@peak cloak even worse
peak cloak
and when it requires steam as well
tame carbon
is games, whose dedicated server only is installable through steam
steam on commandline is a bit of a pain
peak cloak
minecraft server is what is should be like
tame carbon
because i386 binaries
java -jar minecraft_server.jar --nogui
ezgame
@peak cloak I run mine with -XX:EnableCommericalFeatures and -XX:FlightRecorder
for passive profiling
can just connect with JMX, and download event data from last 30 minutes
find out what code is using most of CPU and memory
peak cloak
There is a post of a bunch of java flags to optimize mc, I use those
waxen saddle
We really need a Linux channel.
peak cloak
@ Anthony
tame carbon
people flip their shite when they find out their RGB doesn't work on linux
even though
its in /sys
waxen saddle
It's LTT. The PC Gamers opinions don't matter in this.
unborn sluice
I found out that my keyboard led can be turned on using the command line
tame carbon
@waxen saddle yeah but they promote linux gaming themselves, then don't offer a place where it can be celebrated
unborn sluice
in windows, it is simply pressing a button
topaz quarry
for rgb schemes
tame carbon
being able to games on linux reliably now, is a liberation
no more windows alt tab
taking 10 seconds
topaz quarry
you can just spam looking glass project
cedar igloo
we just need more AC software on linux
topaz quarry
or the geforce nvidia stream
cedar igloo
anti cheat
topaz quarry
we need to air condition linux
tame carbon
I'm fine with anti cheat. in userspace.
topaz quarry
AC software in 2020 requires kernel level access from crazy game devs
tame carbon
anti cheat should stay tf out of kernelspace
topaz quarry
which is hard no for most linux people
unborn sluice
AC with RING 0. and people use VPN for security smh
topaz quarry
it's all the funnies
unborn sluice
kinda makes me laugh tbh
tame carbon
It makes me angry.
tame carbon
Its same BS with my phone & Microsoft Exchange
peak cloak
all the VPN security stuff makes me laugh
tame carbon
I just want my school email on my phone, not sell my soul.
But you have to "Allow this organization to manage my device"
peak cloak
yeah, that. I just use the web app
tame carbon
@peak cloak work and school both use exchange
:(
can't log in to both at same time
topaz quarry
fun stuff
tame carbon
school also uses microsoft SSO for all their insite pages
so I have to log out from work email
to read school pages
or use incognito
topaz quarry
sounds like people spam microsoft auth to hard
peak cloak
yeah outlook is annoying about having two accounts
tame carbon
Cus that one afternoon, when deadlines came
Microsoft services were down.
And I couldn't login.
peak cloak
thankfully the college switched to gsuite while the HS uses exchange
topaz quarry
my Uni uses gmail
unborn sluice
Yea, also gmail for me
tame carbon
I have my private mail with gmail
waxen saddle
"People only marry 1 exchange setup, so of course it should have spouse privleges and it should be difficult to use another exchange spouse" - Microsoft probably
topaz quarry
and my uni is just less bad about it
tame carbon
Google Apps for biz
it was free at one time
up to 10 accounts
if you signed up back then, you still get free service today.
:D
tame carbon
"Join the cloud" - it'll be reliable they said
topaz quarry
it's only reliable if dumb people don't run it
waxen saddle
We've had more O365 downtime in the 6 months we've been using it than the past 5 years combined.
tame carbon
Rona
waxen saddle
Microsoft
unborn sluice
"Join the cloud" - it'll be reliable they said
When they go down, we all go down together
peak cloak
cough cough cloudflare
tame carbon
it goes against the ethos of the internet
unborn sluice
cough cough cloudflare
cough cough cloudflare downtime took a percentage of the internet down
tame carbon
even though the internet is more centralized than we'd like
topaz quarry
cloudflare went down in SF for 6 hours
tame carbon
cough AWS cough google
tame carbon
topaz quarry
my family was like why is everything else working
i was like because i self-host it
for this reason
tame carbon
hehe.
I tried helping someone recently set up next cloud
but setting up Letsencrypt from commandline was too complicated for them
so they decided against my advice, to use cloudflare
I helped them through setting up nameservers and such
topaz quarry
you don't need to do that
tame carbon
and then he ended up still needing letsencrypt -.-
topaz quarry
you just download a free cert from cloudflare
unborn sluice
use proxy
tame carbon
@topaz quarry yes but thats not full encryption
only between Client -> CF
CF -> Server still needs SSL
peak cloak
I use cloudflare for my DNS nameserver's, any other ideas
topaz quarry
nginx, traefik
tame carbon
and that does all the SSL stuff
topaz quarry
but i'm crazy i automate docker with C++
tame carbon
oof
unborn sluice
topaz quarry
it's actually easier for me to write C++ than python
i maintain my own standard C++ library
tame carbon
@topaz quarry thats me with java
I've built up a lib of utils over the years
I can quickly turnaround applications with that
topaz quarry
i can magik harder with C++ then those python hiipsters ever can
C++20 is broken af
i love it
tame carbon
I taught myself JNI for the parts where java doesnt cut it
unborn sluice
tame carbon
like for the one course I had on algos
tame carbon
had to incorporate bunch of low level code with high level software
topaz quarry
i'm almost done with my HTML5/Javascript generator from C++
getting boost beast to compile
was fun
due to conflicting documentation
unborn sluice
c++ for webdev
tame carbon
its how you develop C++ apps "the right way"
unborn sluice
create your own mod_cpp for apache smh
topaz quarry
who needs apache
unborn sluice
topaz quarry
httpd is so difficult with video and audio
tame carbon
works for RubyOnRails
topaz quarry
and granuilar control
tame carbon
_>
topaz quarry
ruby gets a -3 score
unborn sluice
works for RubyOnRails
don't you ever say ror
tame carbon
Knew it.
unborn sluice
i'd rather people use node
tame carbon
judged for using rails :( sadlyfe
topaz quarry
like no one wants to do it
tame carbon
@unborn sluice I'm new to node
topaz quarry
compile time reflection will be a game changer
serving up C++ applications to a web browser via WASM
from a C++ web server backend
tame carbon
@topaz quarry I once wrote an MVC microframework in java, loosely designed after JAX-RS APIs
topaz quarry
sooooo
tame carbon
let me get you a controller, show you how small it is :)
topaz quarry
that's what i was taught :/
tame carbon
You aren't wrong.
You can run tiny servlet engines in java standalone
I prefferably use Jetty for this
@GET
@Path("minecraft")
@RequiresLogin
public ModelAndView getMinecraftServerStatus(Request request, Response response) {
Map<String, Object> models = new HashMap<>();
ServiceAPIClient client = session(request).getClient();
ServerInfo info = client.getServerInfo(request.queryParams("server"));
models.put("server", info);
models.put("page", "Server Information");
models.put("page_desc", info.getName());
return new ModelAndView(models, "status/minecraft");
}
This is the best of webdesign I can do
I hate frontend
tame carbon
the session() is a static import to a helper function
topaz quarry
i'm literally making object to automate CSS prettifying of UI
tame carbon
it uses request context to store session data
topaz quarry
because i just don't want to be bothered in the future
tame carbon
The controller logic is all auto-wire
aka: I wrote bunch of reflective code
barf
tame carbon
Its only one off
does this during startup
it creates lambdas
that can be used for execution
also, I was hella lazy
it goes only GET and POST
@topaz quarry I've done bytecode manipulation before in java
topaz quarry
oh noes
tame carbon
but all this reflective access in java
is kinda..
"forbidden"
in the newer versions
topaz quarry
awesome
tame carbon
the jvm will spam your console with bunch of stderr messages
@Override
public void configure(Binder binder) {
binder.bind(ServicePanel.class).toInstance(this);
binder.bind(PanelProperties.class).toProvider(this::getProperties);
binder.bind(RoutingProvider.class).toProvider(this::getRoutingProvider);
binder.bind(TemplateEngine.class).toProvider(this::getTemplateEngine);
binder.bind(String.class).annotatedWith(Names.named("endpoint")).toProvider(properties::getEndpoint);
}
Learning dependency injection, enlarged my brain
makes building large applications so much easier.
boreal thistle
How hot can my intel 10900k if I overclock it with no cooler in my pc at all since I am too broke to buy a case fan4
peak cloak
wrong channel
unborn sluice
@boreal thistle what's the packet loss of your 10900k
boreal thistle
120
waxen scroll
@rocky badge how many VRFs do you have'
yeah broke people only buy AMD
@unborn sluice i'm team blue/green
waxen scroll
im on a 5-6 year lifecycle now so my wallet doesnt hurt
my X79 build or whatever it was lasted so long and had good performance
no reason to jump every other year now
hollow marlin
I have the 3950x in my cart waiting for prices to drop to finally replace my EVE-NG server for some larger labs. Sick of how heavy Juniper images are to run. 5950x would be nice but I am not going to play the guinea pig as they took months to get just the 3900/3950x to work
topaz quarry
well this is interesting