- ripe-atlas - mailman.ripe.net

tag "system: IPv6 Works"
by Wolfgang S Rupprecht 29 Jan '18

29 Jan '18

I just joined the RIPE-Atlas fold with probe #35105 and am still learning the ropes. My public-facing internet servers are all IPv6-only. That means that the only meaningful measurements of my systems come from IPv6 capable probes. I was surprised to see that IPv4-only probes would be scheduled to send IPv6 pings, traceroutes, nslookups etc. Even when I added "system: IPv6 Works" to the include tags and "system: IPv6 Doesn't Work" to the exclude tags I still got some IPv4-only probes assigned. Are those tags for future use and not wired up yet? Are the IPv4-only probes I'm seeing in my test runs there because their status changed recently and previously they were IPv6 capable? -wolfgang

2 1

Connectivity Problems in China
by Klaus Darilion 27 Jan '18

27 Jan '18

Hi! I have probe #248 which was working fine for long time. Now I sent it to a friend in China. He connected it to his home DSL account but the probe is still disconnected. Are you aware of any firewall problems for probes in China? Should the be able to connect on a normal residental Internet access? Where does the probes tries to connect? (Hostname, IP) so I can try to telnet the IP:port from a normal PC. Thanks Klaus

2 1

New on RIPE Labs: Measurements as the Key to Transparency
by Mirjam Kuehne 25 Jan '18

25 Jan '18

Dear colleagues, In this new article on RIPE Labs Alexander Azimov describes how they built a tool to visualise network latency measured with RIPE Atlas. https://labs.ripe.net/Members/alexander_azimov/measurements-as-the-key-to-t… Kind regards, Mirjam Kühne RIPE NCC

1 0

Probe shown as offline although LEDs appear online
by Andre Heinrichs 25 Jan '18

25 Jan '18

Hi, My Probe #29384 has started being reported as offline although the LEDs show no problem. I’ve just tried switching to another USB stick without apparent success. The weird part is that the probe seems to not send any SOS requests as soon as it started running off the USB. I’m guessing that makes it offline. If I’m interpreting the connection & traffic graph correctly the probe is still able to return results. Any advice what I could do now would be appreciated. TIA, Andre Heinrichs

1 1

Query
by Informática IPYS 23 Jan '18

23 Jan '18

Hi, I'm Francisco Colmenares from IPYS Venezuela. I am writing to you because I have a conuslta. After having registered on the RIPE ATLAS page, connect the RIPE to the network, however when I search for the ID in the search engine that has the web page it gives me the ERROR: 101: no entries found. Is there a step I'm missing? Greetings. -- Francisco Colmenares Desarrollo web y Soporte técnico. IPYS Venezuela 0426-1991873

1 0

HTTP server configuration fix deployed to v3 anchors
by Stephen D. Strowes 22 Jan '18

22 Jan '18

Hi, Recently we identified a web server misconfiguration on our v3 anchors, such that those anchors would not respond as expected to requests with their IP literal in the URL. Requests to their FQDN worked as expected. In other words: * http://nl-ams-as3333-3.anchors.atlas.ripe.net:80/ would respond as expected, but * http://[2001:67c:2e8:3::c100:a4]:80/ would respond with a 404 status code. The configuration was fixed and deployed by around 0900UTC on 16 January, 2018. V3 anchors now respond correctly to requests issued with their IP literal in the URL. This affected HTTP measurements to v3 anchors as follows: * Before the fix was deployed, HTTP measurements to a v3 anchor with 'Resolve on probe' set to false will have used the IP literal, and thus logged a 404 status code. * HTTP measurements as above that were running when the fix was deployed will have started returning correct results part-way through their run. If the measurement is ongoing, no other action needs to be taken. * HTTP measurements with 'Resolve on probe' set to true always operated as expected. Cheers, Stephen Strowes RIPE NCC

1 0

Minor changes in the credits transactions API endpoint
by Viktor Naumov 17 Jan '18

17 Jan '18

Dear colleagues, We made some changes to the credits transactions API. The changes relate to the use of another storage back-end. * Transaction IDs are no longer used to retrieve the data. * There is no detail transaction endpoint anymore, all transactions are served as paged lists. * The main transaction endpoint remains /api/v2/credits/transactions/ Deprecated endpoints are as follows: * /api/v2/credits/transactions/<transaction_id> * /api/v2/credits/transactions/admin/<transaction_id> * /api/v2/credits/transactions/measurement/<transaction_id> * /api/v2/credits/transactions/probe/<transaction_id> The transactions endpoint reference is accessible at: https://atlas.ripe.net/docs/api/v2/reference/ Best regards, Viktor Naumov RIPE NCC

1 0

Probe and firewall settings?
by Tim Chown 15 Jan '18

15 Jan '18

Hi, At https://atlas.ripe.net/about/faq/#so-which-services-do-i-need-for-my-probe-… it says "The absolute minimum set is DHCP, DNS and outgoing TCP port 443 (HTTPS) in order to allow the probe to connect to the network. However, this in itself is not enough to do measurements, which is the entire focus of RIPE Atlas, so you should also allow ICMP, UDP (DNS + traceroute), TCP for traceroute and HTTP(S)." What specific ports and protocols are required for routine operation and for inbound or outbound measurements to be configured? I think the above info could be a little more detailed (having had questions asked of me). Many thanks, Tim

2 2

beta status page vs. ipv6 only network
by Bjoern Buerger 15 Jan '18

15 Jan '18

Hi, One of our probes has a warning "IPv4 Doesn't Work Properly" on the beta Status Page, along with a "IPv4 doesn't work" Tag on the main page. While this is technically correct, the cause is simple and nothing is broken. We just removed IPv4 from that specific network segment (because it's not needed anymore). Is it possible to somehow tag the probe as "single stack on purpose" in the configuration page? Thanks in advance, Bjørn

3 2

#6262 Disconnectted
by Stanish Stanishev 12 Jan '18

12 Jan '18

Hello, Yesterday i got a notification that one of the our Anchors - #6262 has disconnected from Atlas. According to its Current Status info - DNS Problem Suspected. I see the anchor is configured to use the following DNS Resolvers - 8.8.8.8 and 2620:74:1b::1:1. The anchor responds to pings and is reachable from the world. Also the resolvers 8.8.8.8 are 2620:74:1b::1:1 reachable from the anchor's uplink router. So apart from checking the anchor's connectivity and DNS resolvers I don't have much left to do in order to get the anchor connected again. Has anyone faced this situation before ? Thanks Stanish Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

3 2

Minor changes in the probe archive API
by Viktor Naumov 10 Jan '18

10 Jan '18

Dear colleagues, We made some changes to the probe archives API. The changes relate to the use of another storage back-end. In addition to the "date" URL argument, which returns the all probes dump for the given date, the new version enables ranges of dates to be specified for all or selected probes. The example below will return dumps for probes 1, 5, 81, 82, 83 for dates in the range [2018-01-03, 2018-01-06): https://atlas.ripe.net/api/v2/probes/archive?/api/v2/probes/archive?date__g… Best regards RIPE Atlas Team

1 1

RIPE Atlas CLI
by Milad Afshari 03 Jan '18

03 Jan '18

Hi Dear Colleagues; I hope you are doing well; I have an issue with creating a measurement using " --include-tag" option,As far as I check the syntax is correct but it doesn't work.Please let me know if you have any idea. cmd: *a) - ripe-atlas measure ping --from-country ir --target 79.127.127.1 --include-tag system-ipv4-works* *b) ripe-atlas measure ping --from-country ir --target 79.127.127.1 --include-tag=system-ipv4-works* Error: *ripe-atlas measure: error: argument --include-tag: "system-ipv4-works" does not appear to be valid.* Regards Milad

2 1

Probe didn't get static IP address
by Walid Ben Ali 29 Dec '17

29 Dec '17

Dear ripe Atlas support, My probe ID 26099<https://atlas.ripe.net/probes/26099/> didn't reconize the static IP adress. Knowing that it worked for days. Today I just tried to know if it is a network problem or a probe issu, I just conenct it into DHCP and the probe works., I also pluged my Laptop to the netwok with the static IP address (in order to know if it is a network issu) and also the network ork perfectly, I even surfed on the RIPE NCC web site without any pb. So please RIPE Atlas support, could you bring me some help? I returned back the probe to the nework, the static specified IP is kept, (with the DNS and submask and so on), but the probe didn't work. Looking for your support Many thanks

1 0

New on RIPE Labs: Plan of Action for RIPE Atlas Anchor VMs
by Mirjam Kuehne 27 Dec '17

27 Dec '17

Dear colleagues, Members of the RIPE Atlas community have asked us to implement RIPE Atlas vantage points as Virtual Machines (VMs). In order to address these requests, we came up with a plan of action: https://labs.ripe.net/Members/kistel/plan-of-action-for-ripe-atlas-anchor-v… Kind regards, Mirjam Kühne RIPE NCC

4 3

Probe disconnects every 2 hours
by Daniel AJ Sokolov 21 Dec '17

21 Dec '17

Hello, the logs for my probe (version 1) show that is has been disconnecting very regularly every 2 hours. The uptimes are always +/- 1 hour 50 minutes, followed by a disconnect period of 5, 8, or 11 minutes. Out of my last 25 connects, 20 are like that. 3 have double the uptime (about 3 hours and 50 minutes), only one has almost 24 hours, and the current one is 6 hours and counting. The disconnects there were, again, 5, 8, or 11 minutes. However, I to not notice similar disconnects as a user of the same network. I sometimes listen to online streams for more then 2 hours without interruption. I work on my computer for more than 2 hours and don't notice these interruptions of my internet access. It's all IPv4; no IPv6 here. The controller is ctr-fnc01. What could be the cause of these log entries? BR Daniel AJ

2 3

Any recommendations on how I can get ATLAS admins to reset my two-step verification?
by Jan Galkowski 20 Dec '17

20 Dec '17

Hi I have an ATLAS probe, long connected with a lot of credits. I have a RIPE NCC account, where the email and passcode are both recognized. Unfortunately, I apparently also have two-step verification set up. I don't recall doing that, but, then, it's probably my memory is at fault. And I do not know where, if anywhere, I put the notes for the 32 bit "emergency" code. The guidance at the site is to reach out to the ATLAS administrations in this situation for, I presume a reset. I have looked for additional information, and opened tickets. Unfortunately, the link to the FAQ describing this security facility is "404", and the tickets have gone acknowledged by the ticketing system, but not responded to. My interest is keen, because I was hoping to get some measurements research done by the start of the New Year. Alas. I have things I can do towards this, but has anyone else been in a similar situation? Advice? Thanks very much, Merry Newtonmas, and best wishes for the New Year. - Jan Galkowski, Westwood, MA.

2 2

Second Part of RIPE Atlas as IoT Devices - The RIPE Atlas Architecture
by Mirjam Kuehne 19 Dec '17

19 Dec '17

Dear colleagues, Here is the second part of the story about RIPE Atlas as IoT Devices. This time we we give some insights into the overall architecture of the RIPE Atlas network and how we manage secure communication with our probe flock. https://labs.ripe.net/Members/kistel/ripe-atlas-architecture-how-we-manage-… Kind regards, Mirjam Kühne RIPE NCC

1 0

Missing servers in DNSMON
by Chris Amin 13 Dec '17

13 Dec '17

Dear colleagues, It was recently brought to our attention that a small number of name servers were not being included in the visualisations on DNSMON. This issue has now been fixed, but you may notice a gap between mid-September and mid-December when visualising large time ranges for the affected servers. Apologies for any confusion or inconvenience caused. The affected zones and nameservers are: hk. - 203.119.87.218 xn--j6w193g. - 203.119.87.218 il. - 128.139.35.5 il. - 194.146.106.122 il. - 2001:67c:1010:31::53 mx. - 2001:13c7:7000::1 pl. - 2001:1a68:0:17::238 pl. - 2001:a10:121:1::156 pl. - 2a00:4120:8000:2::186 Kind regards, Chris Amin RIPE NCC

1 0

New on RIPE Labs: Measuring Network Behaviour with RIPE Atlas
by Mirjam Kuehne 08 Dec '17

08 Dec '17

Dear colleagues, In this article Marcel Flores and Stephen McQuistin describe how they used RIPE Atlas to understand the network behaviours their end-users are experiencing: https://labs.ripe.net/Members/verizon_digital/seeing-the-world-with-ripe-at… Kind regards, Mirjam Kühne RIPE NCC

1 0

ULA detected by probe?
by JORDI PALET MARTINEZ 06 Dec '17

06 Dec '17

Hi, I’ve two probes in two networks, with exactly the same config in both routers (which are the same, using LEDE). ULA is NOT configured in the router and no other device in the network can see the ULA. However, one of the probes, shows the TAG “IPv6 ULA” And Addresses fd3f:4830:fd21:0:220:4aff:febf:ffaf/64 2001:…. How is that possible and how to clean up it? Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

2 1

Problem with new Openipmap
by Klaus Darilion 06 Dec '17

06 Dec '17

Hi! I just noticed the new interface of Openipmap. Nice, but unfortunately not as useful as the old one: 1. clicking on the graph does not show the trace 2. it does not show 50 traces as the last one (I need plenty of traceroutes for network optimization, not only 10) 3. there should be a possibillity to mark a location as wrong. E.g. see https://atlas.ripe.net/measurements/10418213/#!openipmap Openipmap display Warsaw as target where all this traces terminate in New York as this IP address is an Anycast IP address and therefore it must no be mapped to a single location. hence, for Anycast IPs there should be feature to mark the IP as Anycast. Then the final target is usually the location of the IP address before. regards Klaus

3 2

Effect of "Resolve on Probe"-option
by Tim Wattenberg 04 Dec '17

04 Dec '17

Hi everyone, I think I don’t quite understand the effect of the „Resolve on Probe“ option when creating a measurement. The form says it forces the probe to do DNS resolution, the API reference says that it indicates that a name should be resolved (using DNS) on the probe otherwise it will be resolved on the RIPE Atlas servers. Could someone explain what this means for example if I have a simple measurement for querying the A record of a given domain via the probe’s resolvers? Thanks, Tim

4 4

map distinction between "no data yet" and "timeout"
by Ben Clifford 01 Dec '17

01 Dec '17

I was just trying to get a map view for a nameserver that appeared to not be responding to people in some geographical areas. I fired off a measurement across a load of probes and get a map back. In my particular case, the result I'm looking for is whether a response came back from the target server at all. But the map doesn't distinguish between probes that haven't measured yet, and probes that have attempted a measurement but timed out, as far as I can tell. --

1 0

dig +trace equivalency
by dikshie 29 Nov '17

29 Nov '17

Hi, I use to use +trace option in dig command. Is there any same function equivalency in Atlas's DNS measurement tool? Thank you in advance. -- -dikshie-

3 4

Trying to measure Quad9 latency
by Eduardo Duarte 29 Nov '17

29 Nov '17

Hi all, After the recent launch of the Quad9 service I try to discover if it had a best response time them my actual resolver, that is google public DNS. To do this I launch a comparing measurement using atlas that would run during one day to the same address from the probes in my ISP. The address that I was trying has a very high TTL so I was expecting to always hit the cache of the servers and them get a good comparison base. I know that there are other factors involve in server response time but to my home connection I fill that this where enough. When I got the results from the measurement they were not what I expected.... The measurements to Quad9 had high value of REFUSAL. Does any one as a clue why??? The measurement result is available at https://atlas.ripe.net/measurements/10269508 Best regards, -- Eduardo Duarte Gestão e Desenvolvimento de Projetos l Project Development Management *DNS.PT* Rua Latino Coelho, n.º 13, 5.º piso | 1050-132 Lisboa | Portugal Tel: (+351) 211 308 200 Fax: (+351) 211 312 720 dns.pt <http://www.dns.pt> | dnssec.pt <http://www.dnssec.pt> | 3em1.pt <https://www.3em1.pt> | facebook.com/dns.pt <https://www.facebook.com/dns.pt> | pt.linkedin.com/in/dnspt <http://pt.linkedin.com/in/dnspt> Aviso de Confidencialidade/Disclaimer: Este e-mail foi escrito de acordo com o novo acordo ortográfico. Esta mensagem é exclusivamente destinada ao seu destinatário, podendo conter informação CONFIDENCIAL, cuja divulgação está expressamente vedada nos termos da lei. Caso tenha recepcionado indevidamente esta mensagem, solicitamos-lhe que nos comunique esse mesmo facto por esta via devendo apagar o seu conteúdo de imediato. This message is intended exclusively for its addressee. It may contain CONFIDENTIAL information protected by law. If this message has been received by error, please notify us via e-mail and delete it immediately. [ Antes de imprimir esta mensagem pense no ambiente. Before printing this message, think about environment ]

8 9