January 2000 - NANOG - lists.nanog.org

Re: Pre-Superbowl(tm) review
by Leonard, Jason M. 29 Jan '00

29 Jan '00

Nah. Our marketing department hired some crackers to gum up the works in order to increase the impact of our Superbowl{tm} advertising spots. Personally, I'm dubious about the populatity of these animated UUBOWL ads, but then that's probably why I'm not in marketing. -Jason

1 0

Re: Quest/Cerf peering
by Danny McPherson 29 Jan '00

29 Jan '00

While some may argue that Jeff's query is precisely what NANOG was created for, I'd argue that it's precisely what NOCs was created for. I'm quite certain someone from Qwest, and perhaps Cerfnet as well, will be following up with Jeff directly, if anyone else is truly concerned with this feel free to contact our NOC as well. Or, perhaps if someone from a company other than Qwest or Cerfnet has details regarding any problems that may exist directly between these networks, I'm sure our NOC would be interested in this as well. Note however, that it's noc(a)qwest.net, not noc(a)quest.net, which ^ ^ possibly may have led to at least some of the confusion ;-) -danny > Anybody seeing a problem with Quest/Cerfnet Peering? I can't hit some > servers that are colo'd at Quest when the routes pass through > Cerfnet? Routes die at what seems to be the quest/cerf peering > router. (I thought of the fact that they don't allow traceroute, and web > and dns won't get through either). Don't see any problems when going > through CWI or UUNet. > > Jeff > > -- > Jeffrey Meltzer meltzer(a)villageworld.com > Sr. Network Administrator http://www.meltzer.org > VillageWorld.com, Inc. (631) 218-9090 > >

1 0

Quest/Cerf peering
by Jeffrey Meltzer 29 Jan '00

29 Jan '00

Anybody seeing a problem with Quest/Cerfnet Peering? I can't hit some servers that are colo'd at Quest when the routes pass through Cerfnet? Routes die at what seems to be the quest/cerf peering router. (I thought of the fact that they don't allow traceroute, and web and dns won't get through either). Don't see any problems when going through CWI or UUNet. Jeff -- Jeffrey Meltzer meltzer(a)villageworld.com Sr. Network Administrator http://www.meltzer.org VillageWorld.com, Inc. (631) 218-9090

1 0

No-Op: NANOG Rave! 7th & Mission from 10pm - 4am on Sat. 5-Feb
by Lauren F. Nowlin 28 Jan '00

28 Jan '00

Hi all, NANOG Rave! 7th & Mission from 10pm - 4am on 5-Feb. Doug Humphrey & Mark Musselman from Cidera (formerly Skycache) have graciously donated time, money & goodwill to ensure a night of 'networking' San Francisco-style occurs at the coming NANOG. 3 DJs will spin dance music. Socializing is encouraged but not required <g> The venue, an art gallery in downtown San Francisco, holds around 200. Typical to raves, water will be supplied to quench the thirst of the dance crowd. Non-typical, other beverages will be on hand. Even beer for the PSU... Also, are you in for the sunset boating on the 5th? Dinner to follow? RSVP already. If you have, and you are still getting this, please add the rave details to your party plan. Thanks, -Ren Lauren F. Nowlin, ren(a)onyx.net / peering(a)onyx.net Director, Peering & Interconnects Onyx Networks, Inc., a wholly owned subsidiary of Pacific Gateway Exchange Voice: 650-558-3262, Fax: 650-558-3154, Cellphone: 650-281-6963

1 0

The Cidr Report
by Tony Bates 28 Jan '00

28 Jan '00

This is an auto-generated mail on Fri Jan 28 12:00:00 PST 2000 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 28Jan00 0) General Status Table History ------------- Date Prefixes 210100 70096 220100 70186 230100 69979 240100 69974 250100 70118 260100 70512 270100 70355 280100 70416 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 219.91.160.0/22 from AS7742 *** Bogus 219.91.164.0/23 from AS7742 AS Summary ---------- Number of ASes in routing system: 6541 Number of ASes announcing only one prefix: 3545 (1928 cidr, 1617 classful) Largest number of cidr routes: 708 announced by AS701 Largest number of classful routes: 986 announced by AS701 1) Gains by aggregating at the origin AS level --- 28Jan00 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 385 143 242 62.9% BCnet Backbone AS7046 411 269 142 34.5% UUNET-CUSTOMER AS9269 141 25 116 82.3% Hong Kong CTI AS1221 632 520 112 17.7% TELSTRA-AS AS2609 125 16 109 87.2% EUnet-TN AS2715 162 61 101 62.3% REDERIO-AS AS7657 286 186 100 35.0% The Internet Group Limited AS7545 154 61 93 60.4% TPG Internet Pty Ltd AS4293 258 166 92 35.7% Internal ASN for C&W AS6429 204 115 89 43.6% RDC-INTERNET AS9706 109 23 86 78.9% Pusan Metropolitan City Office of AS174 559 475 84 15.0% Performance Systems International AS7496 120 40 80 66.7% Power Up AS705 283 205 78 27.6% ALTERNET-AS AS577 255 178 77 30.2% Bell Nexxia Backbone AS3749 137 61 76 55.5% TECNET AS9304 95 24 71 74.7% Hutchcity AS816 367 296 71 19.3% UUNET Canada (ASN-UUNETCA-AS4) AS3602 317 248 69 21.8% Sprint Canada Inc. AS4200 168 103 65 38.7% AGIS (Apex Global Information Ser AS4740 340 282 58 17.1% Ozemail Pty Ltd (ASN-OZEMAIL) AS7260 104 47 57 54.8% NORLIGHT AS1727 117 65 52 44.4% MRMS-WEST AS209 378 327 51 13.5% Qwest Communications AS4151 95 48 47 49.5% USDA Internet Access Network AS7029 83 39 44 53.0% ALLTELNET AS11127 125 82 43 34.4% UNKNOWN AS701 986 944 42 4.3% Alternet AS684 87 45 42 48.3% Manitoba Regional Network Backbon AS7568 56 16 40 71.4% C.S. Communications Co., Ltd. For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: Fw: Administrivia: ORBS
by Barry Shein 28 Jan '00

28 Jan '00

On January 25, 2000 at 15:06 noise(a)cow.org (Christopher Neill) wrote: > Not everyone who runs an RBL is a "spam nazi" like (as some would have it) > Alan Brown and myself :) [since this was addressed to me I'll respond briefly] I'm not terribly amused by the "spam nazi" term particularly in the context of supposed humorous self-congratulation involving someone who has acted unethically. It really does smack, to me, of little egos running around so self-consumed they're going to laugh off any criticism, rather than some acknowledgement of a need to deal with the complaints which have been echoed by several here and elsewhere. It's not just me, every time I list the complaints there's a flood of assent (ok, maybe not a flood, but quite a bit.) Which of course leads to complaint number 1: If one of these lists does go rogue, as we've seen one do already and is what your remark is referring to, and starts listing jews or gypsies or me or you or whatever then there's no review other than waiting for everyone to figure it out. Since these "spam nazis" don't tend to advertise their little vendettas (or even errors), and, as I've seen first-hand, pointing out that you've been the target of one doesn't seem to get through to the community (apparently the usual "when I feel the bullet go thru my head I'll pay attention") I consider these efforts to be a hazard. They're like those property associations which can go mad, they get started on the promise of keeping up property values and before you know it they're threatening you over irrelevant things like what kind of car you buy or how your kids dress if you don't get with the program. No thank you. If I can't get the "spam nazis" replaced if they get out of line, and I don't mean cast my fate to popular assent because to be honest as attractive as that sounds it doesn't work worth shit and anyone who think otherwise is naive, then I say it's too damned dangerous to allow to flourish. So, they're free to do what they want for the time being, and I'm free to warn people off them. Complaint number two is: They don't work, they're just a distraction. Anyhow, the issue is not with Paul Vixie whom I know personally and certainly trust. It's with the general concept: Its lack of reviewability, its lack of funding (so if you're unfairly or accidentally blocked there's no front desk per se or staff, you have to accept that it's all a haphazard volunteer effort), and most of all that I really, really believe that the cost/benefit is negative. For the few spams it may block it causes far more trouble and distraction than it's worth. I guess what it comes down to is that volunteer firemen are one thing, but you don't often see volunteer police depts, certainly not anywhere there's anything to police. And there's a very good reason for that. You don't want cops you can't fire or control, or only do the job when it interests them, no matter how well-intentioned they claim to be. > > MAPS RBL, run by (I use this term very loosely, since I don't see how anyone > could see Paul Vixie as being any kind of "nazi") spam-nazi Paul Vixie is > a very reputable service that I think has been getting alot of good press > lately and making strides in improving the somewhat maligned image that > RBLs have acquired. > > The object of Paul's service is to assist operators of mail servers in > being good netizens by not having mail servers that become a nuisance. > I've never known Paul to advoccate "strong-arming" or blacklisting for > the sake of vendetta. If there is any question about this in anyone's > mind, see www.maps.org and read his policy and mission statements for > yourselves. > > RBLs attack a small part of the spam problem, and in a cooperative way, which > should be in good faith always. I agree that when an RBL is not operated in > good faith the object is lost. -- -Barry Shein Software Tool & Die | bzs(a)world.std.com | http://www.world.com Purveyors to the Trade | Voice: 617-739-0202 | Login: 617-739-WRLD The World | Public Access Internet | Since 1989 *oo*

2 1

Re: External Events (was Re: www.etrade.com has no DNS A record !)
by Sean Donelan 26 Jan '00

26 Jan '00

On Wed, 26 January 2000, John Hawkinson wrote: > I think outage notification and operational issue discussion are > different things and should go to different places. > > That worked well for the NSFnet with nsr(a)merit.edu split from > regional-techs(a)merit.edu, and the Internet has only grown since then, > and the scaling benefits would be much more sizable. > > Opinions? IMHO, the concept is great, but the implementation has been a problem. As you point out there have been numerous outage lists such as nsr, netstat, outage@dal, puck; as well as provider specific lists such as outage(a)mci.net, outage(a)sprintlink.net, @internic.net, etc. The problem is its easier to set up the address than it is to get anyone to use it. I am (or have been) subscribed to most outage lists I know about on the net. Maybe I've just fallen off most of them, but even when there are major problems affecting the domain of each list, there are rarely any reports posted on lists other than NANOG, and general news sources such as CNN, Reuters, etc. Like CNN filling the day with Showbiz Today, there seems to be a need too have a steady stream of traffic to remind people a list exists when "Breaking News" happens. Outages alone don't create the traffic necessary to sustain the viability of such a list. Even on provider lists its a problem, one of the last posts I saw on the outage(a)cw.net mailing list was a C&W NOC employee asking what the C&W outage list was for. So on "slow outage days" you might see a posting about Area 51. No I don't think a single site outage is that important. But if there is nothing else happening, it may be the top story. On the other hand, on heavy news days it might get drowned out. For example, NextLink had the misfortune to announce it bought Concentric for $2.9Billion on the same day as the AOL-Time Warner announcement.

1 0

NANOG 18
by Pam Ciesla 26 Jan '00

26 Jan '00

Reminder that NANOG 18 Registration Fee of $300 is due on 1/28/00. After 1/28 the fee goes up to $350. Payment can be made either by credit card (fax or phone) or by check (made out to The University of Michigan). Use info in my signature. We will not be able to accept walkins at this meeting. To cancel please send me e-mail or call. Credit cards have not been run at this time. Please check the Attendee List for payment status if you are not sure. The agenda will be available on the webpage this morning. Any questions please contact me. Note: if you are on the wait list and have not been contacted by me via e-mail that means I do not have availablilty at this time. Thanks NANOG Webpage http://www.nanog.org Pam Pam Ciesla Events Coordinator Merit Network,Inc. 734-936-0172 - phone 4251 Plymouth Road 734-647-3185 - fax Bldg.I, Suite 2000 pam(a)merit.edu Ann Arbor, MI 48105

1 0

Re: Napster & other bandwidth hogs
by Paul Ferguson 26 Jan '00

26 Jan '00

On Mon, 24 Jan 2000 15:35:35 -0800 (PST), "ken harris." wrote: >there was a c|net report on just this the other day. >it actually is directly related to universities. > >school's crack down on net music software napster > http://news.cnet.com/news/0-1005-200-1527930.html?tag=st.ne.1002 Apparently, Napster uses ports 4444, 5555, 6666, 7777, and 8888, for those of you looking to restrict it. More details at: http://david.weekly.org/code/napster.php3 http://news.cnet.com/news/0-1005-200-1531752.html?dtn.head - paul

1 0

Re: New form of packet attack named Stream
by Paul Vixie 26 Jan '00

26 Jan '00

A better-late-than-never followup: jamie(a)dilbert.exodus.net (Jamie Rishaw) writes: > Unless you are > Vixie > ... > A major s/w key figure > or comparable entity > > .. or someone that knows me IRL, and has for some time .. please do not > e-mail me asking for the code. I sent Jamie a request, and he sent me the code (thanks!) and I read it and indeed it's not real different from a lot of other synflooders out there (but it sure is the cleanest implementation I've seen). Someone from ISC ran it against F.ROOT-SERVERS.NET for a while, and while the gross CPU usage went up, the rate of DNS response generation did not change. Thus we concluded that a 4-CPU Alpha ES40 running Tru64 5.0 is "safe". -- Paul Vixie <vixie(a)mibh.net> SVP for Internet Services, MFNX M.I.B.H. Inc. is a wholly owned subsidiary of Metromedia Fiber Network, Inc.

2 1