Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
SubjectVerbObject
Jul 27, 2009

DigitalMocking posted:

poo poo pissing me off: Bullshit replies to a trouble ticket.

New SIP service, circuit is installed, enter IP info, ping the SIP gateway:
code:
ping mrvs.integra.net

Pinging dnvrsbc20.integra.net [67.51.82.100] with 32 bytes of data:
Reply from 67.51.82.100: bytes=32 time=1317ms TTL=59
Reply from 67.51.82.100: bytes=32 time=1544ms TTL=59
Request timed out.
Reply from 67.51.82.100: bytes=32 time=1439ms TTL=59
Escalate to level 3 tech, he and I don't get wtf is going on. Finally they call the sip gateway manufacturer (Oracle) who said, swear to god, "Ping latency isn't a good tool to use to test network speed and reliability with, our gateway is optimized for traffic other than ICMP and will often not answer or answer slowly, this is by design."

:wtf:

You see this a lot in telecom stuff. Either ping will be turned off or it will drop every 3rd packet as some sort of rudimentary DDOS protection.

Adbot
ADBOT LOVES YOU

GoatShaver
Nov 12, 2010
Yeah, to be fair i've seen that too.

I love when my boss just drops random people in my office - "oh hey these guys maintenance our racks in the building!"

Okay.

"You're going to work on zabbix with them now!"

Noooo... i'm going to work on the lovely phone system that you threw a hissy fit about and called me at like 7 am for. The phone system that required no intervention from you with the plan i'm currently carrying out.

"Oh uh... well i'm going to test some wiring"

K please do

:yotj:

Its just that mix of poor planning, rushing at the last second to save face, and promising the world to everyone that has worn thin with me. Everything is now a "absolutely we can do that!" which becomes a "absolutely goatshaver will do this!" and i'm getting pretty over it.

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

SubjectVerbObject posted:

You see this a lot in telecom stuff. Either ping will be turned off or it will drop every 3rd packet as some sort of rudimentary DDOS protection.

I've been in telecom for a long time, this is completely new to me, granted, VOIP is a sideline for my normal security/network gig, but yeah.

We have 3 other SIP gateways from this provider, none of them do this.

Judge Schnoopy
Nov 2, 2005

dont even TRY it, pal
I'm working with a very large bank back-end vendor and their IT talent is absolutely horrendous. They have grown extremely quickly and acquired new services that they have no idea how to support, to which their solution was to hire anybody that could show up on time.

We're moving from a dedicated T1 circuit to MPLS and good god these guys don't understand basic networking. We're on failure #2 to which they've admitted fault both times. Now a critical FTP service has stopped and this gem came from one of their system support guys:

"FTP is not compatible with MPLS, so we did not move that functionality during yesterday's call. It seems that maybe there was a change at your end that inadvertently swung this traffic onto the new circuit. Could be a change on your mainframe, your firewall, we're not sure."

:argh: so many things to be pissed off at here.
1) Review your OSI layers on FTP and MPLS and get back to me.
2) The change made was pointing our static route for your entire subnet from the old router to the new one. This means all services, including FTP, are routed that way. No, we cannot route FTP separately from other services going to the same IP range. We will have to create routes AROUND the one IP you want us to pass over the old connectivity, and gently caress you for that.
3) My motherfucking MainFrame? Is this a bad 1995 sci-fi movie??

Proteus Jones
Feb 28, 2013



Judge Schnoopy posted:

I'm working with a very large bank back-end vendor and their IT talent is absolutely horrendous. They have grown extremely quickly and acquired new services that they have no idea how to support, to which their solution was to hire anybody that could show up on time.

We're moving from a dedicated T1 circuit to MPLS and good god these guys don't understand basic networking. We're on failure #2 to which they've admitted fault both times. Now a critical FTP service has stopped and this gem came from one of their system support guys:

"FTP is not compatible with MPLS, so we did not move that functionality during yesterday's call. It seems that maybe there was a change at your end that inadvertently swung this traffic onto the new circuit. Could be a change on your mainframe, your firewall, we're not sure."

:argh: so many things to be pissed off at here.
1) Review your OSI layers on FTP and MPLS and get back to me.
2) The change made was pointing our static route for your entire subnet from the old router to the new one. This means all services, including FTP, are routed that way. No, we cannot route FTP separately from other services going to the same IP range. We will have to create routes AROUND the one IP you want us to pass over the old connectivity, and gently caress you for that.
3) My motherfucking MainFrame? Is this a bad 1995 sci-fi movie??

You might want to make sure the tape head on your reel-drive isn't gummed up.

SubjectVerbObject
Jul 27, 2009

DigitalMocking posted:

I've been in telecom for a long time, this is completely new to me, granted, VOIP is a sideline for my normal security/network gig, but yeah.

We have 3 other SIP gateways from this provider, none of them do this.

To be sure, it is usually devices with DSP resources that to VOIP processing. Given the real time nature of RTP, they don't like having to handle ping. The Oracle SBC is the old Acme Packet SBC, yes?

MrMoo
Sep 14, 2000

Judge Schnoopy posted:

We're moving from a dedicated T1 circuit to MPLS and good god these guys don't understand basic networking. We're on failure #2 to which they've admitted fault both times. Now a critical FTP service has stopped and this gem came from one of their system support guys:

Reuters till last year was using VAX hardware to communicate to NYSE and NASDAQ. Most circuits to clients used to be MPLS but are being replaced with various private lines such as Light Path and Verizon.

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

SubjectVerbObject posted:

To be sure, it is usually devices with DSP resources that to VOIP processing. Given the real time nature of RTP, they don't like having to handle ping. The Oracle SBC is the old Acme Packet SBC, yes?

I guess thinking about it, it does make sense now in a weird way.

And yeah, Oracle bought them and rebranded the SBC

the spyder
Feb 18, 2011

DigitalMocking posted:

poo poo pissing me off: Bullshit replies to a trouble ticket.

New SIP service, circuit is installed, enter IP info, ping the SIP gateway:
code:
ping mrvs.integra.net

Pinging dnvrsbc20.integra.net [67.51.82.100] with 32 bytes of data:
Reply from 67.51.82.100: bytes=32 time=1317ms TTL=59
Reply from 67.51.82.100: bytes=32 time=1544ms TTL=59
Request timed out.
Reply from 67.51.82.100: bytes=32 time=1439ms TTL=59
Escalate to level 3 tech, he and I don't get wtf is going on. Finally they call the sip gateway manufacturer (Oracle) who said, swear to god, "Ping latency isn't a good tool to use to test network speed and reliability with, our gateway is optimized for traffic other than ICMP and will often not answer or answer slowly, this is by design."

:wtf:

Oregon?

I'm not a fan of Integra by any means, but the previous guy was. All of our services are through them and I've had a dozen outages over the last month. Thankfully it was mainly over the holidays when no one was here, but still. I'm looking to move away from them as soon as our contracts end.

keseph
Oct 21, 2010

beep bawk boop bawk

DigitalMocking posted:

poo poo pissing me off: Bullshit replies to a trouble ticket.

New SIP service, circuit is installed, enter IP info, ping the SIP gateway:
code:
ping mrvs.integra.net

Pinging dnvrsbc20.integra.net [67.51.82.100] with 32 bytes of data:
Reply from 67.51.82.100: bytes=32 time=1317ms TTL=59
Reply from 67.51.82.100: bytes=32 time=1544ms TTL=59
Request timed out.
Reply from 67.51.82.100: bytes=32 time=1439ms TTL=59
Escalate to level 3 tech, he and I don't get wtf is going on. Finally they call the sip gateway manufacturer (Oracle) who said, swear to god, "Ping latency isn't a good tool to use to test network speed and reliability with, our gateway is optimized for traffic other than ICMP and will often not answer or answer slowly, this is by design."

:wtf:

Technically... ICMP is by definition low priority optional traffic and a device link that is oversaturated should drop ICMP traffic first (which is why TCP ECN is in the IP header), so it's a possibly bad way to check the connectivity of an overloaded device or link. But as with many subtle truths about technology, people parrot it incorrectly and build cargo cults around it like this one. Plus, it's Oracle, who would prefer you treat it as a magical block box and put in their EULA that you're not allowed to check it for bugs.

stevewm
May 10, 2005


Well... OK then.

Thanks Ants
May 21, 2004

#essereFerrari


They're supposed to say "differently abled" now anyway.

pixaal
Jan 8, 2004

All ice cream is now for all beings, no matter how many legs.


stevewm posted:



Well... OK then.

See you in 45 years

wait, is that like 5 minutes from now but if the iPad thought it was Linux time 0? I think the clock is set wrong after being locked out.

pixaal fucked around with this message at 20:53 on Jan 8, 2016

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

the spyder posted:

Oregon?

I'm not a fan of Integra by any means, but the previous guy was. All of our services are through them and I've had a dozen outages over the last month. Thankfully it was mainly over the holidays when no one was here, but still. I'm looking to move away from them as soon as our contracts end.

Yep, we're with integra for almost all of our services.

They've been pretty good tbh, but we're just transitioning to SIP and seeing some hiccups.

DigitalMocking
Jun 8, 2010

Wine is constant proof that God loves us and loves to see us happy.
Benjamin Franklin

keseph posted:

Technically... ICMP is by definition low priority optional traffic and a device link that is oversaturated should drop ICMP traffic first (which is why TCP ECN is in the IP header), so it's a possibly bad way to check the connectivity of an overloaded device or link. But as with many subtle truths about technology, people parrot it incorrectly and build cargo cults around it like this one. Plus, it's Oracle, who would prefer you treat it as a magical block box and put in their EULA that you're not allowed to check it for bugs.

Oh, that's true, but when I can ping one hop from the gateway with less than 4ms jitter, 0 loss, and 45ms trip time, I was freaked out to see 1500ms and 25% packet loss to the gateway itself.

I still don't understand why the other gateways we use through Integra don't do this, but maybe they aren't Oracle.

stevewm
May 10, 2005

pixaal posted:

See you in 45 years

wait, is that like 5 minutes from now but if the iPad thought it was Linux time 0? I think the clock is set wrong after being locked out.

Likely... this iPad was ripped from a retail display kiosk and has been sitting completely dead in a closet for some time.

Alighieri
Dec 10, 2005


:dukedog:

DigitalMocking posted:

Oh, that's true, but when I can ping one hop from the gateway with less than 4ms jitter, 0 loss, and 45ms trip time, I was freaked out to see 1500ms and 25% packet loss to the gateway itself.

I still don't understand why the other gateways we use through Integra don't do this, but maybe they aren't Oracle.

For one of the main carriers we use they explicitly have a separate device on their network to ping to/trace to, if you can reach that you can reach everything else. It's nice and has helped track down issues easily.

Other carriers will easily ignore ping/trace issues and then turn around and ping your own public IP and say you have network issues.

hoju22
May 3, 2006

Easy. You just don't lead 'em so much.

stevewm posted:



Well... OK then.

There was a bug in older versions of IOS where repeatedly entering the wrong password would add 5 minutes to the lockout cumulatively. You'd have to be dedicated to get the timer up to 45 years, but I guess bored kids in a Verizon or whatever will try anything.

You'll have to sync or wipe: https://support.apple.com/en-us/HT204306

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer

Judge Schnoopy posted:

3) My motherfucking MainFrame? Is this a bad 1995 sci-fi movie??
Banking, insurance, and government is still dominated by mainframe computing. There's a reason why the platform still makes money hand over fist for IBM: World-class reliability, world-class performance, and complete backwards compatibility to the System/360 released in 1965. Big, slow, risk averse companies love the fact that they ironed all the bugs out of their core processes in 1978 and haven't had to modify since them. Wouldn't you too, when you're a house handling billions of transactions a day worth tens of billions of dollars?

Sonic Dude
May 6, 2009

stevewm posted:



Well... OK then.

If you're willing to spend ~$30 for that iPad to work, plug it into a USB hub via the camera connector (so that it's the host), and then plug a USB Ethernet adapter into that hub. The iPad will go get the time via NTP and probably unlock.

Ynglaur
Oct 9, 2013

The Malta Conference, anyone?

Aunt Beth posted:

Banking, insurance, and government is still dominated by mainframe computing. There's a reason why the platform still makes money hand over fist for IBM: World-class reliability, world-class performance, and complete backwards compatibility to the System/360 released in 1965. Big, slow, risk averse companies love the fact that they ironed all the bugs out of their core processes in 1978 and haven't had to modify since them. Wouldn't you too, when you're a house handling billions of transactions a day worth tens of billions of dollars?

This. Mainframes are still incredibly common in business. If you haven't run into them good for you, I guess. If you feel like learning COBOL you can make good money. Lots of companies have essential processes written in COBOL, but everyone who knows it is in management or is retiring.

BurgerQuest
Mar 17, 2009

by Jeffrey of YOSPOS

Kirios posted:

Alright network dudes, what are you supposed to do when your boss is someone that worked at Cisco for 10+ years as a network engineer, acts like he knows everything, but actually knows very little and is full of terrible ideas? Meanwhile, you have to figure out how to implement said ideas and make them work while he sits at his desk, complains about being tired (you could try, oh I don't know, doing some work?) and takes all of the credit.

Edit: If I ever hear the phrase "When I was at Cisco..." ever again I'm going to stab someone.

Oh golly, does he also start every response to clarification questions with 'but it's so simple??'

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Ynglaur posted:

This. Mainframes are still incredibly common in business. If you haven't run into them good for you, I guess. If you feel like learning COBOL you can make good money. Lots of companies have essential processes written in COBOL, but everyone who knows it is in management or is retiring.

I feel like it's worth pointing out that COBOL hasn't stayed the same language since 1965 or anything, and may of the programs written in it haven't either. It's also still taught a lot more than people think, even though it's nowhere near the level Java or any other popular language gets taught at.

DigitalRaven
Oct 9, 2012




Aunt Beth posted:

Banking, insurance, and government is still dominated by mainframe computing. There's a reason why the platform still makes money hand over fist for IBM: World-class reliability, world-class performance, and complete backwards compatibility to the System/360 released in 1965. Big, slow, risk averse companies love the fact that they ironed all the bugs out of their core processes in 1978 and haven't had to modify since them. Wouldn't you too, when you're a house handling billions of transactions a day worth tens of billions of dollars?

I used to work in a bank, writing COBOL and SAS and doing hideous things to z/OS job control language to make everything work.

Goddamnit, I thought I'd drunk those memories away.

MrMoo
Sep 14, 2000

Ynglaur posted:

This. Mainframes are still incredibly common in business. If you haven't run into them good for you, I guess. If you feel like learning COBOL you can make good money. Lots of companies have essential processes written in COBOL, but everyone who knows it is in management or is retiring.

Reuters saved nearly $1 million per month turning off their VAX hardware, amazing savings. But then the HQ is in Times Square and the floor rent is $2 million per floor per year so :lol:

Danith
May 20, 2006
I've lurked here for years
Is COBAL really that bad? I wouldn't mind a chill job sitting in a dark basement somewhere programming.

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Danith posted:

Is COBAL really that bad? I wouldn't mind a chill job sitting in a dark basement somewhere programming.

It really isn't, if you were to write a brand new program using modern COBOL. But if you're going into something that requires COBOL, there tends to be a bunch of code nearly as old as your dad that you're also responsible for, and the guy who wrote it originally died in 1987!

So you're gonna need to spend a lot of time figuring out what the existing stuff does before you can coast.

fishmech fucked around with this message at 21:34 on Jan 9, 2016

Ynglaur
Oct 9, 2013

The Malta Conference, anyone?
How hard is it to learn? Are they any good virtual environments on Windows or Linux where I could teach myself? I always thought having that skill and being able to travel would be a good backup job.

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer

Danith posted:

Is COBAL really that bad? I wouldn't mind a chill job sitting in a dark basement somewhere programming.
Syntactically it's not bad at all, being the COmmon Business-Oriented Language, it was originally designed to be English-based and easily understood. I don't have any familiarity with SAS. JCL (Job Control Language) is a little dense, but roughly analagous to scripting in the open systems world. It's where you list out steps of things to run in a given job- feed program X dataset Y, output to printer Z, that sort of thing.

Here's the Wikipedia section on COBOL's hello world for a quick glimpse at syntax.

Aunt Beth fucked around with this message at 23:17 on Jan 9, 2016

ChickenWing
Jul 22, 2010

:v:

Aunt Beth posted:

Syntactically it's not bad at all, being the COmmon Business-Oriented Language, it was originally designed to be English-based and easily understood. I don't have any familiarity with SAS. JCL (Job Control Language) is a little dense, but roughly analagous to scripting in the open systems world. It's where you list out steps of things to run in a given job- feed program X dataset Y, output to printer Z, that sort of thing.

Here's the Wikipedia section on COBOL's hello world for a quick glimpse at syntax.

whhhhhhhhhhhhhhhhhhhhhh

Gucci Loafers
May 20, 2006

Ask yourself, do you really want to talk to pair of really nice gaudy shoes?


fishmech posted:

It really isn't, if you were to write a brand new program using modern COBOL. But if you're going into something that requires COBOL, there tends to be a bunch of code nearly as old as your dad that you're also responsible for, and the guy who wrote it originally died in 1987!

So you're gonna need to spend a lot of time figuring out what the existing stuff does before you can coast.

I'd be shocked if anyone developed anything new that was written in COBOL/RPG or any legacy language. Most legacy development will be spent modifying the existing code base for improvements and having it interact with modern IT Infrastructure.

Remember, this stuff has been around since the 60s and it still runs and well in TYOOL 2016. Some organizations have conversion projects but it's analogous to moving mount Everest. It's massive undertaking for any company, extraordinary expensive, a risk to the business and often easier to just integrate.

Gucci Loafers
May 20, 2006

Ask yourself, do you really want to talk to pair of really nice gaudy shoes?


Aunt Beth posted:

Banking, insurance, and government is still dominated by mainframe computing. There's a reason why the platform still makes money hand over fist for IBM: World-class reliability, world-class performance, and complete backwards compatibility to the System/360 released in 1965. Big, slow, risk averse companies love the fact that they ironed all the bugs out of their core processes in 1978 and haven't had to modify since them. Wouldn't you too, when you're a house handling billions of transactions a day worth tens of billions of dollars?

Isn't there something unique with the IBMi Hypervisor? I swear I remember reading a great article that went over virt CVEs and it went something like VMware 200, Hyper-V 300, Xen 200 and IBMi with only 2.

That's extraordinarily impressive.

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer

Tab8715 posted:

Isn't there something unique with the IBMi Hypervisor? I swear I remember reading a great article that went over virt CVEs and it went something like VMware 200, Hyper-V 300, Xen 200 and IBMi with only 2.

That's extraordinarily impressive.
I'm assuming you're talking about PHYP, the IBM Power Hypervisor that AIX and IBMi run on top of on the Power platform. I haven't looked into vulnerabilities specifically but it's not surprising.

First, it's tied specifically to one closed platform (IBM Power) and not an open one (x86), so there's some security by obscurity there. Second, PHYP itself is less often manipulated directly by a customer in the way that any of the Intel hypervisors are. Partitions are managed by the HMC through the service processor network, which very rarely is on a LAN segment that carries anything but HMC traffic, so that attack vector is minimized as long as your HMC is patched. Third, IBM has built its hypervisor from the ground up solely as a hypervisor, with security in mind, whereas the others have been bolted onto other operating systems.

If you're not talking about PHYP you're talking about PowerVM (formerly Advanced Power Virtualization) which is a product I know less about.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Tab8715 posted:

Isn't there something unique with the IBMi Hypervisor? I swear I remember reading a great article that went over virt CVEs and it went something like VMware 200, Hyper-V 300, Xen 200 and IBMi with only 2.

That's extraordinarily impressive.
The unique thing is that most greybeards don't care about security, and IBM keeps that poo poo on lock under the pretext of proprietary trade secrets or whatever bullshit. Mainframes are not magically more secure than other computers.

https://www.youtube.com/watch?v=Xfl4spvM5DI

AlphaKretin
Dec 25, 2014

A vase to face encounter.

...Vase to meet you?

...

GARVASE DAY!

I'd like to take a moment to appreciate all the cool people trapped in helldesk. 12 minutes on the phone (discounting hold but y'know) just took my internet from "we think you have a broken line and will have to come out in a week's time" to "poo poo, your speeds are faster than I thought we supported".

Kirios
Jan 26, 2010




BurgerQuest posted:

Oh golly, does he also start every response to clarification questions with 'but it's so simple??'

Are you trying to trigger me because the answer yes of course he does. Why is it so simple? gently caress if he knows, but it is!

feedmegin
Jul 30, 2008

hoju22 posted:

There was a bug in older versions of IOS where repeatedly entering the wrong password would add 5 minutes to the lockout cumulatively. You'd have to be dedicated to get the timer up to 45 years, but I guess bored kids in a Verizon or whatever will try anything.

You'll have to sync or wipe: https://support.apple.com/en-us/HT204306

Nah 45 years is exactly 1970 to now (well last year). Its lost the ipad equivalent of the cmos clock and thinks its 1st January 1970, time_t of 0.

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Tab8715 posted:

I'd be shocked if anyone developed anything new that was written in COBOL/RPG or any legacy language. Most legacy development will be spent modifying the existing code base for improvements and having it interact with modern IT Infrastructure.

Remember, this stuff has been around since the 60s and it still runs and well in TYOOL 2016. Some organizations have conversion projects but it's analogous to moving mount Everest. It's massive undertaking for any company, extraordinary expensive, a risk to the business and often easier to just integrate.

I have a friend of the family whose job is maintaining stuff on the mainframes for a bank, and they do write new programs rather than just modifying existing ones. Of course, the company's practices require the new stuff to also be in COBOL (but it's the modern version of COBOL with object oriented stuff and the like), and the new programs don't get to go live until they've been tested for months or years.

sixth and maimed
Mar 20, 2012

Fun Shoe

pixaal posted:

Printers effect production! They are the most important thing!

Everyone in a company cares the most about printers they, and IT hates the drat things so much. What the hell are you printing? I saw someone exporting files to notepad changing the font so it would take less pages and print faster then comparing the files by hand. (30 pages of size 8 font for each of the two documents, 60 total!).

I showed them a txt comparison tool and they were "No I like this way better the colors confuse me". I get that a diff check isn't the most user friendly of things but it has to be easier then highlighting it and basically do the same thing. I don't even know what the document was fully I was there for a different issue and they were explaining how bullshit their task of finding the difference between the two documents was. Hey, I tried.

I thought at first that it was because they were printing big, glossy brochures from our suppliers. But now we also have the issue with an excel that's about 360 KB, and a one-page color scan of an agenda sheet (just scanned the first thing that was at hand). The scan takes about 5 minutes to print on the Ricoh. It prints in about 10 seconds on a B/W brother.

Adbot
ADBOT LOVES YOU

sixth and maimed
Mar 20, 2012

Fun Shoe

BaseballPCHiker posted:

I vaguely remember dealing with something similar in the past. I'll double check my notes and see if I can find the fix but I'm pretty sure it involved restarting the print spooler service on the computer that was slow to print.

Thanks, I'll take any help I can get on this! poo poo's pissing me off, yo!

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply