Stopping those darn college abusers

[spidey07]

Good stuff here. How to limit abuse from filesharing/peer-2-peer, etc. Go over your alloted rate - get busted to 56K...all automagically. how to track all IP address/mac mappings and prevent students from hard coding IPs.

Stop rogue DHCP servers, access points, routers, switches, etc.

Good stuff.

http://www.cisco.com/en/US/about/ac123/ac114/ac173/Q2-04/department_techtips_penalty_box.html

 

[horhey]

Originally posted by: spidey07
Good stuff

 

[choby]

I used to work for the Purdue University network engineering group. We have been doing almost the exact same thing for over 2 years now. We have multiple levels of infraction with incremental penelties. But im glad that wasnt in effect when i was in the dorms

 

[stultus]

Originally posted by: choby
But im glad that wasnt in effect when i was in the dorms

Ah, the double standard.

 

[n0cmonkey]

Originally posted by: stultus

Originally posted by: choby
But im glad that wasnt in effect when i was in the dorms

Ah, the double standard.

Not at all. Evolution of the standard.

 

[spidey07]

you're kidding?

I graduated CS and EE in 1993. Wonder if some of the thin-net stuff I put in is still there?

Stayed at wiley and lived over by TA Toms.

You know Dr. Comer is at Purdue?

 

[AFB]

Originally posted by: n0cmonkey

Originally posted by: stultus

Originally posted by: choby
But im glad that wasnt in effect when i was in the dorms

Ah, the double standard.

Not at all. Evolution of the standard.

:beer:

 

[nightowl]

Choby, who did you work for at Purdue. I work for ITaP right now and we are in the process of upgrading all of the hardware in the dorms right now and are using some of the technologies listed in the article. Definately cool stuff.

 

[choby]

well, nightowl, take a closer look at my username and add two letters and i bet you can figure out who i worked for

how is work??

 

[choby]

spidey, i have seen reminants of the thin net in random closets around Purdue. Its like an old relic, i always get a grin when i see some. haha

 

[spidey07]

Originally posted by: choby
spidey, i have seen reminants of the thin net in random closets around Purdue. Its like an old relic, i always get a grin when i see some. haha

good, you can thank me then. Or curse me.
:beer:

 

[Rainsford]

I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

 

[AFB]

Originally posted by: Rainsford
I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

I think they are not trying to censor the traffic. They just don't want their bandwidth raped.

 

[bgroff]

Alright, what's with all the Purdue folks on this board?!? I have fond memories of stringing thinnet thru Cary Quad and multiplexing the DoV units with SLiRP on expert. Speed is 3 DoV units cranking 50Kbps!

 

[n0cmonkey]

Originally posted by: Rainsford
I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

You really think they pay for all of it and the right to peg thier connections 24/7?

 

[AFB]

Same way you pay for Comcast

 

[spidey07]

Originally posted by: Rainsford
I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

UM, HELLO JACK ASS.

Packet shapers are expensive and are best used at the edge. this approach I've linked (and has been used for a couple years) is a per port/per IP/per conversation/per hour approach.

IE, much more granular and IMHO vastly superior to trying to manange edge rate-limiting.

Now sit the fvck down and come up with a real comment.

You stupid fvck, don't you EVER DARE call somebody who shapes traffic and manages a network a "network administrator"

NEXT!

<sorry for the hostility but I tend to go off when I post some seriously good stuff and have somebody come in and say "well, gee, packet shapers can do that">

And yes, this post was for the guys trying to stop this crap. And also lure in the young'uns who think it is their right to abuse a network.

 

[spidey07]

Originally posted by: Rainsford
I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

OH!

I didn't read the "students PAY for it" bullshit.

No, you don't pay for it. You pay a small portion of the operating budget of maintaining a net. And in order to keep those costs in line with our operating budget we have to spend even more to keep fvck'tards from raping the pipes.

NEXT!

 

[spidey07]

Originally posted by: bgroff
Alright, what's with all the Purdue folks on this board?!? I have fond memories of stringing thinnet thru Cary Quad and multiplexing the DoV units with SLiRP on expert. Speed is 3 DoV units cranking 50Kbps!

then you remember all the greenies?

Ahh, da Quad. Co-ed naked winter olympics and closet rooms.

 

[n0cmonkey]

bwahahahahaha!

It's just funnier when spidey07 says it.

 

[spidey07]

Originally posted by: Rainsford
I guess the folks at Cisco have never heard of packet shapers. From where I'm sitting, a packet shaper solves the vast majority of the problems a network administrator faces much better than this system they are talking about. Packet shapers allow important traffic to stay fast without resorting to raping your network connection because you wanted to download a Linux distro with bit torrent.

And I'm I the only one who thinks a lot of college network admins need to have that stick removed from their ass? Let's not forget that the network connection isn't provided as charity, students PAY for it.

Last comment....

Those college "net admins" as you like to call them are under the pressure of the entire faculty (sp?) to make things run lickity split without spending a dime. Hence they use the embedded features in their switches/routers.

I for one think this approach and the use of perl scripts to manipulate the rich feature set of modern switches/routers is pure, automated genius.

I bow to the ability and skill needed to automate this kind of rate limiting and accounting.

 

[spidey07]

Originally posted by: n0cmonkey
bwahahahahaha!

It's just funnier when spidey07 says it.

spirited debate baby.

I'm flat in the middle of bandwidth wars (gee, we need to decrease our operating budget and OH, by the way people thing the network is too slow)

Well, no sh!t!

thank god for rate limiting, traffic shaping and the ability to stifle abusers.

That way i keep my job directing all the net engineers, keeping my budget tight, getting the abusers off the net (or limiting their ability to harm it or limiting their lame asses to 56k.)

God I love this job...let it forever bless me with bonuses based purely on my budget come in.

 

[n0cmonkey]

I don't have to deal with any of that stuff at my job, but I'll be reading the article at some point in the near future. Probably right after the YAEoBO (Yet Another Explanation of Buffer Overflows) paper I'm reading now.

 

[spidey07]

Originally posted by: n0cmonkey
I don't have to deal with any of that stuff at my job, but I'll be reading the article at some point in the near future. Probably right after the YAEoBO (Yet Another Explanation of Buffer Overflows) paper I'm reading now.

well you need to manage your traffic better if you're havin' buffer overflows.

Email me for any probs you may be having. buffer overflows ain't a good thing.....something's getting dropped.

 

[n0cmonkey]

Originally posted by: spidey07

Originally posted by: n0cmonkey
I don't have to deal with any of that stuff at my job, but I'll be reading the article at some point in the near future. Probably right after the YAEoBO (Yet Another Explanation of Buffer Overflows) paper I'm reading now.

well you need to manage your traffic better if you're havin' buffer overflows.

Email me for any probs you may be having. buffer overflows ain't a good thing.....something's getting dropped.

I'm not having problems with them, just learning. I just got interested in finally reading up on exploit techniques due to yet another security feature being added to a BSD.

I'm not responsible for the network here, just monitor network security devices. And since it's kind of boring, I have to find other things to read to keep me awake all night.

Thanks for the offer though.