April 2009 - NANOG - lists.nanog.org

RE: Nipper and Cisco configuration results
by Subba Rao 03 Apr '09

03 Apr '09

I did not scan the routers yet with nmap. These results are from Nipper analysis. None of the access lists are showing "port 513" as Nipper is complaining about. The IOS version is 12.4 Subba Rao --- On Thu, 4/2/09, Jo¢ <jbfixurpc(a)gmail.com> wrote: From: Jo¢ <jbfixurpc(a)gmail.com> Subject: RE: Nipper and Cisco configuration results To: castellan2004-nsm(a)yahoo.com, nanog(a)nanog.org Date: Thursday, April 2, 2009, 8:18 PM What IOS version are you using? I don't see that behavior (rlogin/rsh) by default, but I'm a few revisions behind on the latest. @ 12.2 I do see from the router: RCMD-4-RSHPORTATTEMPT Attempted to connect to RSHELL from 192.168.1.52 from nmaps, but theres no response to the SYN packet of the attempting IP. I think this has been the case since w-a-y earlier versions of IOS for logging levels but not sure at which level. Looks to only be logging an attempt, no session is made, sort of like a firewall just letting you know there was an attempt. The router gets the request but it falls on deaf ears, no one home. Unless perhaps theres some other sort of flag/bit that can be presented to open that connection(extremely doubtful) I don't believe theres any way to connect. Perhaps turning down your logging will prevent your testing program from reporting a false positive? I'd snoop/sniff the traffic and see if your router is SYN/ACK-ing the request of rlogin/rsh to be sure. <sarcasm>And make sure their not to close to one another, incase their using undocumented internal wireless units as a means to complete the connection, those Cisco guys you know..</sarcasm> Regards Joe Blanchard > -----Original Message----- > From: Subba Rao [mailto:castellan2004-nsm@yahoo.com] > Sent: Thursday, April 02, 2009 6:33 PM > To: nanog(a)nanog.org > Subject: Nipper and Cisco configuration results > > I am using Nipper for verifying my Cisco configuration. > Nipper is finding the "rlogin" service that is not in the > configuration. I have searched the access lists and do not > see it anywhere. The explanation by Nipper about this > finding, "....Telnet protocol implemented by this > service...." is confusing. Here is the Nipper's output: > > ______________________________ > Rlogin Service Settings > > The Rlogin service enables remote administrative access to a > CLI on Cisco Router Devices. The Telnet protocol implemented > by th service is simple and provides no encryption of the > network communications between client and the server. This > section details the Rlogin settings. > > Description Setting > Rlogin Service Enabled > Service TCP Port 513 > ______________________________ > > I have checked a few other routers where SSH was not enabled > with the same results. > > Can someone explain why Nipper is saying "Rlogin is enabled" > when I do not see it in the configuration file? Is there > something else that I need to be looking at? > > Thank you in advance for any help. > > Subba Rao

2 1

Time Warner NOC Contact
by Express Web Systems 02 Apr '09

02 Apr '09

Can somebody contact me off list? I have tried various contact methods over the past week but the situation persists. Issue seems to be based in Atlanta, if that matters at all. Tom Walsh Express Web Systems, Inc.

1 1

Can anyone shed some light as to what is happening with Register.com?
by Joseph Nuara 02 Apr '09

02 Apr '09

We are no longer able to resolve A records for sites that they host. The NOC has not been able to provide any color and the main lines are tied up --they were able to tell me they were having a DNS issue but that was it. Thanks in advance for any info that you can share. Joe

7 7

Cisco ASR100x
by Bill Blackford 02 Apr '09

02 Apr '09

Anyone on the list have any experience with ASR1000 series and IOS XE? From what I've read, Cisco is attempting to move to a more modular software as JUNOS has been doing for some time. I am curious about the reliability and stability of the platform. I am also interested in the differences in the IOS XE vs. IOS. Thanks -b -- Bill Blackford

4 3

AS11985 Contact Information
by Junichi Imamura 02 Apr '09

02 Apr '09

Hello All, Does anyone have a good contact infomation for the AS11985 NOC ? If you know, please send me off list. -- Junichi Imamura <imamura(a)gw.odn.ad.jp>

1 0

XO and microsoft.com
by Sergio D. 01 Apr '09

01 Apr '09

Anyone going out through XO having problems getting to microsoft.com? This seems to work out our other connections but not XO. Thanks. -- Sergio Danelli

4 4

Re: Fiber cut on Irish Sea
by isabel dias 01 Apr '09

01 Apr '09

ken, who's fiber on the ground was it after all? Roderick Beck wrote: > Probably Global Crossing. > > A very strong wager. > > -R. > ------Original Message------ > From: Ken Gilmour > To: isabeldias1(a)yahoo.com > Cc: nanog(a)nanog.org > Subject: Re: Fiber cut on Irish Sea > Sent: 29 Mar 2009 16:04 > > We received the report from Packet Exchange, however they are not the > owners of the cable. I assume they just rent spectrum. > > 2009/3/29 isabel dias <isabeldias1(a)yahoo.com>: >> >> affecting whom? and who's network? >> >> >> --- On Sun, 3/29/09, Ken Gilmour <ken.gilmour(a)gmail.com> wrote: >> >>> From: Ken Gilmour <ken.gilmour(a)gmail.com> >>> Subject: Fiber cut on Irish Sea >>> To: nanog(a)nanog.org >>> Date: Sunday, March 29, 2009, 4:55 PM >>> Hi There, >>> >>> Since we use a vendor of "the vendor" of two >>> Irish sea submarine >>> cables I am wondering if anyone has first hand information >>> on the >>> fiber cut this morning? Does anyone have a status update on >>> what is >>> happening? I am getting some Chinese whispers going on >>> here. >>> >>> Thanks! >>> >>> Ken >> >> >> >> > > > > Sent wirelessly via BlackBerry from T-Mobile.

23 31

Can you see these AS links:)
by Kai Chen 01 Apr '09

01 Apr '09

Hello folks, As part of a research project here at Northwestern, we have found quite a few unexpected AS-level links that do not appear in public available BGP tables. We really need your help in validating them; for anyone who knows links associated with any AS, if you can assist us with this please contact us off list. Thanks! - Kai

5 5

Google Over IPV6
by Robert D. Scott 01 Apr '09

01 Apr '09

http://www.google.com/intl/en/ipv6/ http://www.networkworld.com/news/2009/032509-google-ipv6-easy.html Any one making use of Google IPV6? Robert D. Scott Robert(a)ufl.edu Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Phone Tree University of Florida 352-392-9440 FAX Florida Lambda Rail 352-294-3571 FLR NOC Gainesville, FL 32611 321-663-0421 Cell

26 33