[as112-ops] Supplying data from each AS112 node in the coming months.

William F. Maton Sotomayor wmaton at ryouko.imsb.nrc.ca
Thu Jan 15 01:08:25 UTC 2009


All,

 	Over the past few months (in my copious amounts of spare time) I 
installed and got up and running ncaptool and it's surrounding glue 
scripts, which is a key component of the ISC SIE project.

 	The general idea is to obtain DNS data that can be used to analyse 
whether or not there are anomalous behaviours that can point to or predict 
something nastier happening.  Despite the time I took to install it, it 
wasn't really that much of a big deal.

 	I also have DSC, which replaced bindgraph as it was less demanding 
than the later (sorry Marco!).  I like the graphs as it gives 
non-operators a look into the AS112 operating world, at least in this 
region.

 	Now while all this is well and good, I don't think it would be 
fair to have all of you install both DSC and ncaptool when really we the 
operators could get by with one tool.  Otherwise, we'd be dealing in the 
overhead of maintaining two packages.

 	So ISC staff are going to look at getting both tools to work 
togther with the strong possibility that one will do everything both do.
When this will happen is another question...maybe in a few weeks.

 	But anyways, the point of this note is to get yourselves ready to 
start supplying data to the greater cause and when the time comes to be 
prepared to install the necessary software.

 	I will notify the list when I have posted the steps involved to 
install what is required at the AS112 project website 
(http://public.isc.org/).  Some examples plus some workarounds for those 
nodes that are only locally connected (as opposed to globally connected) 
will also be posted.  Of course all this will be done BEFORE AS112 
operators are asked to do anything.

Thanks,

wfms


More information about the as112-ops mailing list