March 2020 - NANOG - lists.nanog.org

GTT Contact
by Brandon Wade 18 Mar '20

18 Mar '20

We're facing an issue we've been trying to resolve with GTT, but are unable to get them to respond beyond opening a ticket regarding this issue. What is going on is GTT has two maintenance windows, the first tonight with the backup window tomorrow night. Our issue is our other carrier is also performing maintenance tonight, and if they're both performing maintenance during the same time windows, we'll be left without connectivity. Is there anyone from GTT on this list that could get in touch with the appropriate team to request they utilize their backup window instead? Brandon WadeiCastCenter

1 0

Fwd: [arin-announce] ARIN 45 Moving to Virtual Meeting Format
by John Curran 17 Mar '20

17 Mar '20

FYI - ARIN 45 will be done via remote participation only. /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] ARIN 45 Moving to Virtual Meeting Format Date: 17 March 2020 at 5:03:09 PM EDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> In light of the current circumstances related to the rapidly evolving coronavirus disease 2019 (COVID-19) outbreak and guidance from Federal and state governments, the ARIN 45 Public Policy and Members Meeting will no longer have an in-person component as originally scheduled to take place in Louisville, Kentucky. We have been closely monitoring the latest news and guidance related to the COVID-19 outbreak from the Centers for Disease Control and Prevention (CDC), the World Health Organization (WHO), and local health departments. Following the most recent guidance from the CDC, we must prioritize the health of our ARIN community members and their families, and thus, the ARIN 45 Public Policy and Members Meeting will now proceed entirely as an online-only meeting for all participants. We ask that all participants please save the original dates of Monday, 27 April and Tuesday, 28 April while we review our normal policy discussions and related meeting programming to select material to be added to the agenda. We will be publishing the agenda and how to participate in the near future. We sincerely apologize for the inconvenience, and thank you for your understanding. If you have any further questions, please reach out to meetings(a)arin.net<mailto:meetings@arin.net>. Regards, John Curran, President and CEO Paul Andersen, Chair of the ARIN Board of Trustees American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Need help removing a old/outdated/incorrect proxy route object
by Sadiq Saif 17 Mar '20

17 Mar '20

Hi all, I am looking for help with removal of a old/outdated/incorrect proxy route object for one of my prefixes, 192.195.251.0/24. The object in question: route: 192.195.251.0/24 descr: Proxy-registered route object origin: AS135091 remarks: This is a HGC customer route-object remarks: which is being exported under this origin AS. remarks: remarks: This route object was created because no existing remarks: route object with the same origin was found. remarks: remarks: Please contact radb(a)hutchcity.com if you have any remarks: questions regarding this object. notify: radb(a)hutchcity.com mnt-by: MAINT-AS9304 changed: radb(a)hutchcity.com 20171209 source: NTTCOM I reached out to the address on file already but the mail server there is not reachable. Additionally I have no recollection of ever having used services from any of the AS mentioned. The correct and only origin for that should be AS393949 as is in the ARIN IRR route object and also the ROA. Can somebody help me with this? Thanks in advance. -- Sadiq Saif/AS393949 https://sadiqsaif.com/

2 2

DDoS Attacks targeting VPN/IPSEC endpoints
by Dennis B 17 Mar '20

17 Mar '20

Any one else seeing this? Hearing some isolated events across different industry segments. If you are, can you provide any TTPs?

1 0

AT&T is suspending broadband data caps for home internet customers due to coronavirus
by Sean Donelan 17 Mar '20

17 Mar '20

The first data cap waiver I've seen due to coronavirus. I expect other ISPs to quickly follow. https://www.vice.com/en_us/article/v74qzb/atandt-suspends-broadband-usage-c… AT&T is the first major ISP to confirm that it will be suspending all broadband usage caps as millions of Americans bunker down in a bid to slow the rate of COVID-19 expansion. Consumer groups and a coalition of Senators are now pressuring other ISPs to follow suit.

14 16

Power outage LA 600 W 7th - TELX
by A. Pishdadi 17 Mar '20

17 Mar '20

Greetings, We got an email last night after some alerts from monitoring system. Power on the B UPS feed has been offline till this second and going. Apparently they can not bypass UPS and put the load on the generator. Which is crazy in itself being that it's a data center.. Luckily we have everything on redundant power. Does anyone from DRT or Telx subscribe here that can look into this more for me? Message me off list if possible. Thanks AP

1 0

Re: COVID-19 vs. our Networks
by Scott Weeks 17 Mar '20

17 Mar '20

--- alexandre.petrescu(a)gmail.com wrote: From: Alexandre Petrescu <alexandre.petrescu(a)gmail.com> That map does not show Texas, as far as I know America (USA) geography. ----------------------------------------------- <Texas is part of the US?> Being raised in Texas in a family that've been there for a buncha generations, I know that at least some folks there would challange that... :) https://en.wikipedia.org/wiki/Texas_secession_movements It was a nation unto itself for over decade: https://en.wikipedia.org/wiki/Republic_of_Texas Many old timers are a pretty independent type of people. scott ps. traffic is still normal here

2 1

backtracking forged packets?
by William Herrin 17 Mar '20

17 Mar '20

Howdy, Can anyone suggest tools, techniques and helpful contacts for backtracking spoofed packets? At the moment someone is forging TCP syns from my address block. I'm getting the syn/ack and icmp unreachable backscatter. Enough that my service provider briefly classified it a DDOS. I'd love to find the culprit. Thanks, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

10 15

sflow -> aggregated aspath visualization?
by Adam Thompson 16 Mar '20

16 Mar '20

I’m looking for product recommendations: We’ve noticed that about 20% of our traffic here lately has decamped from the free (or, at least, flat-rate) connection to CANARIE (our R&E network) and its various connected content-delivery networks, and onto our commercial provider. While this is presumptively a legitimate shift, we’d like to better understand these changes when they occur, in a way that our executive can understand at a glance. We do have sFlow (et al.) going to an Arbor PeakFlow box for analysis, but it’s lacklustre at best at understanding changes like this. I want: * Top #n ASNs by traffic volume, per router/interface, stacked chart * Some way to visualize large jumps in that dataset, e.g. if Cloudflare ditched their CANARIE connection and now that traffic all goes commercial, I don’t know what sort of graphic would be useful, maybe a stacked polar chart so you could see when an AS jumped from one sector to another? Even stacked bar charts could be useful. If anyone knows of tools capable of generating easy-to-understand reports, dashboards, including historical “what changed this week”-type data, please let me know. For that matter, if you have a technique of collecting this data and using Excel to do the reporting, that would work too. (Yes, I could theoretically build this off of existing open source tools… eventually) Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [[MERLIN LOGO]]<https://www.merlin.mb.ca/> 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

5 4

Fwd: Your message to NANOG awaits moderator approval
by Alexandre Petrescu 16 Mar '20

16 Mar '20

fyi my figure of the map was cut by mailman software at nanog -------- Message transféré -------- Sujet : Your message to NANOG awaits moderator approval Date : Mon, 16 Mar 2020 20:37:58 +0000 De : nanog-owner(a)nanog.org Pour : alexandre.petrescu(a)gmail.com Your mail to 'NANOG' with the subject Re: COVID-19 vs. our Networks Is being held until the list moderator can review it for approval. The reason it is being held: Message body is too big: 288150 bytes with a limit of 100 KB Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: https://mailman.nanog.org/mailman/confirm/nanog/546fda0d60c3e64480862eb9af6…

1 0