- NANOG - lists.nanog.org

Cisco optics in Northern Virginia
by Kevin D 13 Jun '13

13 Jun '13

Does anyone know where I could find a supplier of Cisco (or compatible) optics in Northern Virginia? We're in a pinch in Ashburn and really need to find a GLC-LH-SM locally. Thanks in advance. -Kevin Dougherty

2 2

Re: huawei (ZTE too)
by Bryan Fields 13 Jun '13

13 Jun '13

On 6/13/13 3:41 PM, Mikael Abrahamsson wrote: >> > My objection to ZTE/Hauwei when I was at a cellular telco was just this. >> > I said "there was no way I can agree with Chinese nationals having >> > unfettered access to our network". > Why would anyone outside of the US agree to have US products in their > network, using the same rationale? At least with China they don't pretend > they're not spying on our own population. /me taps nose -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

1 0

Re: huawei
by Joel M Snyder 13 Jun '13

13 Jun '13

If this hasn't been beaten to death, a longer discussion of the threat of Huawei/ZTE is discussed in this article I wrote for Information Security a few months back: http://searchsecurity.techtarget.com/feature/The-Huawei-security-risk-Facto… jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

peeringdb accuracy research
by Job Snijders 13 Jun '13

13 Jun '13

Dear fellow networkers, I need your help! For the good of PeeringDB I am researching the accuracy of the current PeeringDB data set. We plan to compare three sources of information: peeringdb itself, publicly available listings from IXP operators ... and the ultimate source of truth: user submitted information, e.g. your "show bgp sum". Why? I'd rather trust 10 sightings in the wild than one entry in PeeringDB! :-) What can you do? ---------------- We've created a webapp where you can copy + paste the output from your routers' show ip bgp sum / show bgp sum / show ipv6 bgp sum. The webapp extracts the ASN and remote IP for the sessions and store those after your confirmation. Go to the following URL and submit your BGP data now! https://research.peeringdb.com/ If you prefer, you can also submit the data in CSV format [2]. What data are we using, exactly? -------------------------------- Only the following tuples of information are used: (remote_ASN, remote_IP) All other data is purged from the data set: I don't care if you are even exchanging prefixes or how many, nor does it matter what your own ASN is. The _only_ thing that matters is that you confirm that you have a BGP session up and running with a certain remote IP and ASN. You can submit such confirmations by copying + pasting your routers' bgp summaries. Please submit your BGP summaries from all your IXP facing routers! So when will I hear back about this? ------------------------------------ I will present the findings at the upcoming NANOG meeting in New Orleans [1]. Given that the NANOG meeting is approaching rapidly, I urge you to submit your data sooner rather than later. :-) Kind regards, Job Snijders [1] - CSV format should be formatted like column 1: ASN, column 2: remote IP, separated by a comma. example: "5580,195.69.144.229" [2] - http://www.nanog.org/meetings/abstract?id=2140

2 2

Re: Prism continued
by Scott Weeks 13 Jun '13

13 Jun '13

On Jun 12, 2013, at 9:01 PM, "Scott Weeks" <surfer(a)mauigateway.com> wrote: > --- dougb(a)dougbarton.us wrote: > From: Doug Barton <dougb(a)dougbarton.us> > > On 06/12/2013 05:13 PM, Scott Weeks wrote: >> "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" > > Prototypical "useless use of cat" :) > ----------------------------------------------------- > > > What would you use and what's wrong with concatenation > of a file with nothing? 1+0=1 ;) --------------------------------------- Wow, a person gets corrected quickly here! ;-) And the answer is... "egrep -v 'term1|term2|term3' /var/log/router.log | less" All I can say is DOH! :-) scott

1 0

Re: Prism continued
by Scott Weeks 13 Jun '13

13 Jun '13

--- dougb(a)dougbarton.us wrote: From: Doug Barton <dougb(a)dougbarton.us> On 06/12/2013 05:13 PM, Scott Weeks wrote: > "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Prototypical "useless use of cat" :) ----------------------------------------------------- What would you use and what's wrong with concatenation of a file with nothing? 1+0=1 ;) scott

1 0

chargen is the new DDoS tool?
by Bernhard Schmidt 12 Jun '13

12 Jun '13

Heya everyone, we have been getting reports lately about unsecured UDP chargen servers in our network being abused for reflection attacks with spoofed sources http://en.wikipedia.org/wiki/Character_Generator_Protocol | In the UDP implementation of the protocol, the server sends a UDP | datagram containing a random number (between 0 and 512) of characters | every time it receives a datagram from the connecting host. Any data | received by the server is discarded. We are seeing up to 1500 bytes of response though. This seems to be something new. There aren't a lot of systems in our network responding to chargen, but those that do have a 15x amplification factor and generate more traffic than we have seen with abused open resolvers. Anyone else seeing that? Anyone who can think of a legitimate use of chargen/udp these days? Fortunately I can't, so we're going to drop 19/udp at the border within the next hours. Regards, Bernhard

18 27

Re: chargen is the new DDoS tool?
by Joel M Snyder 12 Jun '13

12 Jun '13

>> Do you have any actual evidence that a .edu of (say) 2K employees >> is statistically *measurably* less secure than a .com of 2K employees? >We're sorta lookin' at one now. >But seriously, how do you measure one's security? In ounces, unless it's a European university, in which case you use liters. Older systems of measuring security involving mass (pounds and kilos) have been deprecated, and you should not be using them anymore in serious evaluations, although some older CSOs will insist. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

3 2

Any Level 3 / GBLX things going on tonight?
by David Hubbard 12 Jun '13

12 Jun '13

I just got a bunch of bgpmon alerts that our prefixes were being seen as announced through GBLX 3549 from bgpmon's Finland location peer. David

1 1

Cisco ASA SME's
by Phil Fagan 11 Jun '13

11 Jun '13

Any ASA sme's out there? -- Phil Fagan Denver, CO 970-480-7618

2 2