September 2014 - NANOG - lists.nanog.org

Cisco SFP
by A Mekkaoui 04 Sep '14

04 Sep '14

Hi Can you please provide me a contact of a vendor of SFP-GE-L Cisco SFP, I need it today or tomorrow morning at the lasted. Thank you A MEKKAOUI MEKTEL INC amekkaoui(a)mektel.ca

1 0

RE: Prefix hijacking, how to prevent and fix currently
by Doug Madory 04 Sep '14

04 Sep '14

Ah yes BusinessTorg (AS60937). I have also seen this one doing what you are describing. Not to MSFT or GOOG, but another major technology company that we peer with. In fact, it is going on right now but only visible if you receive routes directly from them. A while ago, I sent them a note describing what was happening and suggested they might want to stop accepting routes from that AS, but they still do. > Some seem to avoid BGP analysis by exposing their attack only to their target. > We recently saw MSFT getting our customer's more specific announcement from > 60937 originated ostensibly by 35886. No on else (~200 vantage points) was > receiving this more specific.

6 5

Re: Facebook down?
by aUser 04 Sep '14

04 Sep '14

Appears to be in Oregon, Southern Oregon. Mobile too. Sent from my iPhone 5S. > On Sep 3, 2014, at 12:45 PM, Marshall Eubanks <marshall.eubanks(a)gmail.com> wrote: > > This message has no content.

16 17

Re: Vendor cert levels
by Derek Andrew 03 Sep '14

03 Sep '14

I found the fastest way to open a sev 1 case is to open it online as sev 3, that gets all the questions out of the way, then call the 800 number and escalate to network down emergency. You then hold for the next available engineer. I am pleased with the responsiveness of this approach. d On Wed, Sep 3, 2014 at 3:34 PM, Jon Garrison <bluegill(a)freeshell.org> wrote: > On 3 Sep 2014, at 12:23, Jared Mauch wrote: > > >> On Sep 3, 2014, at 5:00 AM, Isaac Adams <isaacnanog(a)gmail.com> wrote: > >> > >> Hey Folks, > >> > >> I am trying to work out a strategy for vendor certification in our > >> company. > >> As a general rule, do you all fund employees certification and if so > >> what > >> kind of levels do you try to maintain as good practice? > >> > >> For example. NOC staff should be JNCIA and engineering JNCIP to > >> JNCIE? > >> > >> Clearly certification does not usually reflect ability but it does > >> help > >> people feel valued and to maintain a basic level of competence. > > > > Cisco discriminates against customers without certification and delays > > service and support to them as a result. (e.g.: you can’t open a > > sev 1 case online unless you are “CCIE”). > > You can however just call them and yell "Environment Down" and they will > call it whatever Sev you want. There are an unending number of issues > with their online case opening "portal" however. > > Filling out a form online to wait a call back was never my first choice. > Plus putting that Cisco hold music on speaker is a good way to improve > the mood! > > > You likely want to have someone with this access in their account to > > speed access when there are network critical issues. > > > > - Jared > -- Copyright 2014 Derek Andrew (excluding quotations) +1 306 966 4808 Information and Communications Technology University of Saskatchewan Peterson 120; 54 Innovation Boulevard Saskatoon,Saskatchewan,Canada. S7N 2V3 Timezone GMT-6 Typed but not read.

1 0

DC opinions?
by Jay Ashworth 03 Sep '14

03 Sep '14

Anyone in Centurylink Ashburn or Seattle? Do you have an opinion? Customary protocols apply. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

2 3

Facebook down?
by Marshall Eubanks 03 Sep '14

03 Sep '14

http://www.downforeveryoneorjustme.com/facebook.com It's not just you! *http://facebook.com* <http://facebook.com/> looks down from here. Relevant because of the likely increase in productiviity Regards Marshall Eubanks

11 11

old-school wiring nightmares
by John Kinsella 03 Sep '14

03 Sep '14

Wiring closet rats nests have frequently been a fun topic, so with that in mind, may I present telephone lines in Stockholm, circa late 1800s: http://www.thisiscolossal.com/2014/09/telefontornet-stockholm/ Have fun wire-tracing *that* Click through to the flickr albums - the Tekniska Museet has put some great stuff up!

4 4

Fwd: [ PRIVACY Forum ] An Iranian Grand Ayatollah Issues Fatwa Stating High Speed Internet is against Sharia
by Jay Ashworth 02 Sep '14

02 Sep '14

Cause it's a long weekend, and why shouldn't it be whackier than normal. ----- Forwarded Message ----- > From: "PRIVACY Forum mailing list" <privacy(a)vortex.com> > To: privacy-list(a)vortex.com > Sent: Sunday, August 31, 2014 11:34:16 PM > Subject: [ PRIVACY Forum ] An Iranian Grand Ayatollah Issues Fatwa Stating High Speed Internet is against Sharia > An Iranian Grand Ayatollah Issues Fatwa Stating High Speed Internet is > against Sharia > > (Iran Human Rights): > http://www.iranhumanrights.org/2014/08/makarem-internet/ > > A Grand Ayatollah in Iran has determined that access to high-speed and > 3G Internet is "against Sharia" and "against moral standards." In > answer to a question published on his website, Grand Ayatollah Nasser > Makarem Shirazi, one of the country's highest clerical authorities, > issued a fatwa, stating "All third generation [3G] and high-speed > internet services, prior to realization of the required conditions for > the National Information Network [Iran's government-controlled and > censored Internet which is under development], is against Sharia [and] > against moral and human standards." > > - - - > > Comcast, Verizon, AT&T, Time Warner Cable, and other dominant ISPs are > now in a bidding war to hire him as a consultant and board member. RUN AWAY!!! Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

6 6

Multicast Internet Route table.
by S, Somasundaram (Somasundaram) 02 Sep '14

02 Sep '14

Members I have few questions related to Multicast deployment in the internet today. 1: Does all the ISP's provide Multicast Routing by default? 2: Is there any placeholder where one can get to know the Multicast Internet Route table (usage, stability etc) just like Unicast Route table (http://bgpupdates.potaroo.net)?

12 13

RE: Prefix hijacking, how to prevent and fix currently
by Sriram, Kotikalapudi 02 Sep '14

02 Sep '14

>Please help me understand the argument. > >> Some Org. D can maliciously announce a subprefix under Org. C's >> prefix, and get away with it due to the 'Loose' mode. > >So C is advertising valid 192.0.2.0/24 >Is D advertising valid 192.0.2.0/23? > >This is unfixable problem? If D is advertising invalid or unknown, C >would still work and win, as longest prefix match is done first to the 'valid' >population, if search is found, other populations are not searched. The example that I gave was not that. In my example, C has legitimate ownership of the less specific (e.g., 192.0.2.0/23). D is malicious and attempting to hijack a subprefix (e.g., 192.0.2.0/24). Importantly, C has a created a ROA for 192.0.2.0/23 only to protect its address space, but currently *does not advertise* this prefix or any part of it. So D's more specific announcement (hijack) is 'Invalid' in this scenario, but the 'Loose' mode operation would accept/install D's route. Am I right about that? If yes, that is the side effect or CON that I was trying to highlight. >> I think, 'Loose mode', if used at all, should not be used beyond a short grace period. >We need to be pragmatic and ready to compromise. Right now deploying >RPKI puts you in competitive disadvantage, loose mode would remove the >business risk and make it easier to justify deployment. I agree about making some compromises. But we need to bear in mind the side effects such as the above in the transition period. For example, to mitigate the above stated CON, the operator (C in our example) should go ahead and announce its prefix (e.g., 192.0.2.0/23) in BGP even though he/she may not currently intend to set up any servers/services in that address space. Further, at a later/more mature stage of RPKI, when most operators have implemented the paragraph I cited from RFC 7115, then routers can drop 'Loose' mode. Sriram

3 4