August 2007 - NANOG - lists.nanog.org

RE: rv2 outage
by tariq biziou 20 Aug '07

20 Aug '07

>Although I have still NOT seen any evidence to either support >or dispell this report, I did see this report regarding some >sort of "show ip bgp regexp" DoS exploit circulating on Friday: show ip bgp regexp (.*)(_\1)+ Vendor C, please fix. -- --tariq

2 1

Re: rv2 outage
by Paul Ferguson 20 Aug '07

20 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Paul Ferguson" <fergdawg(a)netzero.net> wrote: >http://www.heise-security.co.uk/news/94526/ Re-checking this myself, I see that the report has been updated to include this acknowledgment from Cisco that they are looking into the 'problem': https://puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html Sorry for any confusion. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGyTw2q1pz9mNUZTMRAjbYAKC61wMego5fj2FsX3AKbwL98MfTvgCg9xU3 LXylChwLWVIVbrZpaFkVIV4= =Q5K+ -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: rv2 outage
by Paul Ferguson 20 Aug '07

20 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Sean Donelan <sean(a)donelan.com> wrote: >On Sun, 19 Aug 2007, Randy Bush wrote: >> did anyone else see an rv2 outage yesterday? >> from Aug 18 04:17:30 >> to Aug 18 08:21:45 >> >> are these logged so longitudinal analysis can do a bit less 'heuristic' >> guessing? > >I'm guessing you mean route-views2. > >Some folks found a command that crashed the CLI on some public route-views >or looking-glass systems this week. > Although I have still NOT seen any evidence to either support or dispell this report, I did see this report regarding some sort of "show ip bgp regexp" DoS exploit circulating on Friday: http://www.heise-security.co.uk/news/94526/ $.02, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGySROq1pz9mNUZTMRAkt7AJ98ul+Q4ghYBuAEYUsozpQlKHU5LgCfapI3 7E/+E/wmYjfsmbyscsXsVTc= =1vbd -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

rv2 outage
by Randy Bush 19 Aug '07

19 Aug '07

did anyone else see an rv2 outage yesterday? from Aug 18 04:17:30 to Aug 18 08:21:45 are these logged so longitudinal analysis can do a bit less 'heuristic' guessing? randy

2 2

Re: For want of a single ethernet card, an airport was lost ...
by Paul Ferguson 19 Aug '07

19 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Roy <r.engehausen(a)gmail.com> wrote: >Suresh Ramasubramanian wrote: >> ... >> >> Well, if it is a mess of legacy equipment in there .. there's a high >> chance that everything is connected to a hub, and the faulty network >> card was flooding the network and causing collisions. >> >> ... >> >> > >Even more horrible thought: Maybe it was token ring That is most disgusting. :-) Except for perhaps Apollo Domain over Thinnet. :-) - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGx663q1pz9mNUZTMRAhxKAJ9QV7V+X109tgUtivVxjj0rJMI67ACaAzCH 2eL+9srJxM6FwvVu/UdNDOU= =uG+n -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

For want of a single ethernet card, an airport was lost ...
by Suresh Ramasubramanian 19 Aug '07

19 Aug '07

This is rich .. LAX airport shut down for hours because of a PC with a duff network card. Now I wonder which major contractor has the contract to set up and run the network at LAX, and how much in damages and SLA costs he is looking at, when an airport gets shut down from 2 pm to midnight. http://blog.wired.com/sterling/2007/08/lax-outage-is-b.html -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

4 4

Re: Re: DNS not working - Rank High
by leeyao＠trashymail.com 17 Aug '07

17 Aug '07

On 8/17/07, Hex Star <hexstar(a)gmail.com> wrote: > > On Thu, 16 Aug 2007 > > leeyao(a)trashymail.com wrote: > > > >> > >> Hi, I try adding google.com to my dns server to get more visitors but google.com still show search engine. Please advise how to do so more visitor in return? May the Gods be with you! > > There is a special secret to getting Google to rank you highest in the > world. The first thing you have to do is get a dictionary and make one > webpage for every single word in the dictionary. You CANNOT automate > this, you have to type in every single word in the dictionary. When you > have finished this, email me and I will continue to help you dominate > the search rankings. > > See only true network ninjas and dojo webmasters will help you not those > NANOG sissies. All those guys do is drink Mountain Dew and eat Soda Pop > fizzy candy all day > (http://www.groovycandies.com/V2ProdDetail1.asp?Product_ID=8038 ) I don\'t > know why they do this must be some form of Tymnet pre Internet BBS thing > from Bolt, Beranek and Newman days. > > So when you finished making these pages in both english and spanish, > e-mail me. I can make you seriously richer then Deng Xiaoping overnight. > > > > -- > ==================================================== > J. Oquendo > \"Excusatio non petita, accusatio manifesta\" > > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xF684C42E > sil . infiltrated @ net http://www.infiltrated.net > > > Thank you oh wise wonton soop!

3 2

Do I or RR need dns clue?
by Tuc at T-B-O-H 17 Aug '07

17 Aug '07

Hi, Mail to RR users is getting refused due to PTR issues. I contacted RR and explained that yea, one of our 2 DNS servers for the IN-ADDR.ARPA is down, but the other is fine. They said that I should either get the DNS server back up (Which of course is already being worked on, was the minute it went down) or delete it from ARIN IN-ADDR.ARPA records. Isn't the whole point of multiple DNS servers that if one is down the other can still answer queries? Or am I missing something here??? Thanks, Tuc/TBOH

9 10

Road Runner / Sprint routing / DNS issues this morning?
by andrew2＠one.net 17 Aug '07

17 Aug '07

I've had a steady trickle of reachability complaints coming from Road Runner users over the course of the day today. I started seeing wackiness about 7:30AM Eastern this morning when a VPN tunnel into a Road Runner customer dropped off. It seems as if the problems have stabilized over the last hour or so, but I'm curious as to what happened. I'm hearing rumors of some type of Road Runner outage and/or DNS problems and/or general routing brokenness that may or may not have involved Sprint. (How's that for specificity?) Any truth to the rumors, or can anyone provide more detail? Thanks, Andrew Cruse

1 0

DNS not working
by leeyao＠trashymail.com 17 Aug '07

17 Aug '07

Hi, I try adding google.com to my dns server to get more visitors but google.com still show search engine. Please advise how to do so more visitor in return? May the Gods be with you!

11 11