- NANOG - lists.nanog.org

2010 Worldwide Infrastructure Security Report available for download.
by Roland Dobbins 01 Feb '11

01 Feb '11

[Apologies for any duplication if you've seen this notification on other lists.] We've just posted the 2010 Worldwide Infrastructure Security Report for download at this URL: <http://www.arbornetworks.com/report> This year's WWISR contains responses and data from the broadest cross-section of SPs to date, including mobile operators and IDC operators in all major geographical regions. The WWISR is based upon input from the global operational community, and as such, is unique in its focus on the operational security aspects of public-facing networks. Many of you contributed to the survey which forms the foundation of the report; as always, we're grateful for your insight and participation, and welcome your feedback and comments. Thanks much! ------------------------------------------------------------------------ Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com>

1 0

good night v4
by Scott Weeks 01 Feb '11

01 Feb '11

I know there're a gazillion counters out there, but one many have watched for a long time is potaroo's (http://www.potaroo.net/tools/ipv4) I was having fun watching it run out tonight. Here's a snapshot with only 1090 routes left: http://mauigateway.com/~surfer/goodnight-v4.png It turns out to be a timer counting down to midnight on the selected day, so everyone saw it goto zero at different times. However, since Hawaii is the last major population in "the world's day" (last one before the International date line) and the counter here hit zero does that mean I will wake up tomorrow to a shiny new internet? scott apologies, it's late and I just couldn't help it... >:-) -- evil grin

2 1

2011.01.31 NANOG51 day 1 afternoon session notes
by Matthew Petach 01 Feb '11

01 Feb '11

I've posted my notes from the afternoon sessions, including the lighting talks, at http://kestrel3.netflight.com/2011.01.31-NANOG51-afternoon-notes.txt for those are are following along remotely, or catching up after a good round of meetings at the bar. :) Have fun at the beer and gear--sorry I can't take any notes on the IPv6 deployment experiences panel--I'm sure it would have been interesting reading, given the amount of attention v6 has been getting on the list recently. ^_^ Matt

2 1

APNIC description: "unknown"
by Vovan 01 Feb '11

01 Feb '11

Hello, sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.: > Network Origin AS Description > 41.222.79.0/24 36938 >>UNKNOWN<< quote from: http://thyme.rand.apnic.net/current/data-add-IANA Cheers, Vladimir

7 9

IPv6: numbering of point-to-point-links
by Lasse Jarlskov 01 Feb '11

01 Feb '11

Hi all. While reading up on IPv6, I've seen numerous places that subnets are now all /64. I have even read that subnets defined as /127 are considered harmful. However while implementing IPv6 in our network, I've encountered several of our peering partners using /127 or /126 for point-to-point links. What is the Best Current Practice for this - if there is any? Would you recommend me to use /64, /126 or /127? What are the pros and cons? -- Best regards, Lasse Jarlskov Systems architect - IP Telenor DK

16 19

Collos in Memphis, TN and Louisville, KY?
by Graham Wooden 01 Feb '11

01 Feb '11

Hi folks, Can anyone recommend any collo's in both Memphis TN and Louisville, KY? Preferably in their respective downtown areas? Thanks mucho, -graham

3 3

39/8 and 106/8 allocated to APNIC
by Leo Vegoda 01 Feb '11

01 Feb '11

Hi, The IANA IPv4 registry has been updated to reflect the allocation of two IPv4 /8 blocks to APNIC in January 2011: 39/8 and 106/8. 39/8 APNIC 2011-01 whois.apnic.net ALLOCATED 106/8 APNIC 2011-01 whois.apnic.net ALLOCATED You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. Only five unallocated unicast IPv4 /8s remain. Regards, Leo Vegoda Number Resources Manager, IANA ICANN

1 0

Re: Level 3's IRR Database
by Randy Bush 31 Jan '11

31 Jan '11

> Based on this draft the recommended preference order is: > > 1) Validation ok > 2) not found > 3) Validation nok > > Suppose an operator would use local-pref to achieve this. > This intention (preferring validated routes) will break, when there's a > more specific announcement that doesn't validate. > For example the youtube incident would not have been stopped by doing this. i do not understand your logic. let's try to show the case 666.42.0.0/16 has a roa for as 777 666.42.1.0/24 has a roa for as 888 an announcement comes for 666.42.1.0/24 originating from as 999. are you implying that it should be marked valid? i sure don't want it to. an announcement for 666.42.0.0/16 from as 777 would still be valid. so i am not sure what your point is. please clarify with a concrete example. randy

8 22

Fwd: [arin-announce] ARIN Resource Certification Update
by John Curran 31 Jan '11

31 Jan '11

Copy to NANOG for those who aren't on ARIN lists but may be interested in this info. FYI. /John Begin forwarded message: From: John Curran <jcurran(a)arin.net<mailto:jcurran@arin.net>> Date: January 24, 2011 2:58:52 PM EST To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> Subject: [arin-announce] ARIN Resource Certification Update ARIN continues its preparations for offering production-grade resource certification services for Internet number resources in the region. ARIN recognizes the importance of Internet number resource certification in the region as a key element of further securing Internet routing, and plans to rollout Resource Public Key Infrastructure (RPKI) at the end of the second quarter of 2011 with support for the Up/Down protocol for those ISPs who wish to certify their subdelegations via their own RPKI infrastructure. ARIN continues to evaluate offering a Hosting Resource Certification service for this purpose (as an alternative to organizations having to run their own RPKI infrastructure), but at this time it remains under active consideration and is not committed. We look forward to discussing the need for this type of service and the organization implications atour upcoming ARIN Members Meeting in April in San Juan, PR. FYI, /John John Curran President and CEO ARIN _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

21 49

MS-SMB2
by Manu Chao 31 Jan '11

31 Jan '11

Did anybody know from when or from which Service Pack was introduced SMB2 on Windows XP? The official documentation MS-SMB2 (v20101230) say SMB2 is only supported on Vista, Seven, 2008 and 2008 R2 while it seems (i may be wrong) supported on XP SP3? Thank you

2 1