bitplumber.net

I have run into a problem on two separate ASA’s now downloading code to them using the PumpKIN TFTP server.  It get’s part way through the download and dies (at different places each time so it’s an intermittent error).

I was running a 7.0.8 release on these devices, and then upgraded to 8.0.5 (copying the file off a PumpKIN TFTP server with no issue), but then I was reloading 8.0.5 onto the devices (while booting off 8.0.5 already) and it could not access the exact same file properly.

ciscoasa# copy tftp flash
ciscoasa# copy tftp flash

Address or name of remote host []? 10.100.99.13

Source filename []? asa805-k8.bin

Destination filename [asa805-k8.bin]? 

Accessing tftp://10.100.99.13/asa805-k8.bin...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
WARNING: TFTP download incomplete!
!
%Error reading tftp://10.100.99.13/asa805-k8.bin (Unspecified Error)
ciscoasa#

I ended up using the SolarWinds TFTP server instead and it worked like a champ.  I am not sure what the issue is here, but it looks like some kind of bug in PumpKIN or in the ASA code (or some combination thereof).

-Eric

So a few days ago Google announced their new public DNS service that will answer recursive queries for any host.  There has been a lot of coverage of this elsewhere so I did not feel compelled to post anything about it until I saw this post discussing how fast Google’s DNS servers were compared to other ISP’s servers.  I felt that I am in a somewhat unique position to provide some test data as I have direct access to an Internet connection from an ISP peered with NWAX which has Google as a member.  The end result of this is that my round trip times to many Google services are 3-4ms.

So I downloaded the same test tool as Jon Radoff and ran the test from my connection.  In the results below you can clearly see that Google is the fastest (or right there with the fastest).

A test of DNS server performance from an Internet connection close to Google

I would conclude that Google’s DNS servers are just as fast as any other out there, but the issue is that of latency.  Your ISP’s servers have an advantage over Google (in most cases) since they sit on the service providers network.  That is not to say Comcast or Verizon may not have their DNS servers on the other side of the country from you, (but that would be just dumb).

All in all, I am very happy that Google now provides this service as it may be really useful from time to time.  Most corporate environments don’t care though since they have internal DNS servers to handle their recursive requests.

-Eric