- NANOG - lists.nanog.org

MsgSent statistics question
by Zaid Ali 15 Oct '10

15 Oct '10

I am trying to troubleshoot an odd v6 peering connection issue. Does anyone know at what point is MsgSent in BGP summary or neighbor summary calculated? Does the MsgSent include initial TCP connections before establishment? Thanks, Zaid

2 1

IPv6 Stateless Configuration
by Rod James Bio 15 Oct '10

15 Oct '10

Hi, First time poster here. I would just like to ask what are the flags on router advertisement to enable a host to autoconfigure its IPv6 address. There is this device that I'm configuring that I cant get RA to work. I was able to work out the connectivity from the device to the IPv6 internet, but the problem is host behind this device is not getting its unique global ipv6 address. The device is a cyberoam UTM. Thanks! Rod Bio.

4 6

How to have open more than 65k concurrent connections?
by johndole＠hush.ai 14 Oct '10

14 Oct '10

Hi, I am somewhat new to networking. I have interest in running a Bittorrent tracker. I ran one for a bit, and my one Linux box running Opentracker gets overloaded. My connection is good, and most of it isn't being used. Just a lot of people connect, and use up all the 65k "free connections". I tried messing with the sysctls, but it didn't help too much (and just degraded the connection quality for everyone). It is not a malicious attack either as there is only a few connections per IP and they are sending proper Bittorrent tracker requests... So what can I do? How can I have have open more than 65k concurrent connections on standard GNU/Linux? Thanks for any ideas and suggestions. -John

12 12

Gmail Contact needed
by bkowalewicz＠hostopia.com 14 Oct '10

14 Oct '10

Hello, I am hoping to get in contact with a mail admin for Gmail/Google. We are having problems with spam/bulk filtering. Can someone contact me off list? Thanks, Brian Kowalewicz Abuse and Postmaster Services bkowalewicz(a)hostopia.com

1 0

Google groups outage
by andrew.wallace 14 Oct '10

14 Oct '10

500 server error for a long time. http://groups.google.com/ Andrew

4 3

Re: Google groups outage
by andrew.wallace 14 Oct '10

14 Oct '10

Issue is corrected, apologies. ----- Original Message ---- From: andrew.wallace <andrew.wallace(a)rocketmail.com> To: nanog(a)nanog.org Sent: Thu, 14 October, 2010 11:53:13 Subject: Google groups outage 500 server error for a long time. http://groups.google.com/ Andrew

1 0

Dutch Hotels Must Register As ISPs
by Hank Nussbacher 14 Oct '10

14 Oct '10

http://yro.slashdot.org/story/10/10/13/0044233/Dutch-Hotels-Must-Register-As -ISPs

7 6

Request : Yahoo contact
by Jeff Archambeau 14 Oct '10

14 Oct '10

I am having an email issue with yahoo's email blacklists and their auto-responses have been less than helpful. If there is a yahoo mail administrator on this list, would you please contact me off-list so we can discuss the issue and help me resolve this? Thanks. Jeff Archambeau Core3 Solutions LLC jarchambeau(a)core3solutions.com<mailto:jarchambeau@core3solutions.com> Technology: Undivided www.core3solutions.com<http://www.core3solutions.com/> 248.530.1001 (Ext. 108) :: Office 248.498.6098 :: Fax 248.530.1001 :: Helpdesk

2 1

Re: AS22558 - Routing apparently hijacked space
by Robert Bonomi 13 Oct '10

13 Oct '10

> From nanog-bounces+bonomi=mail.r-bonomi.com(a)nanog.org Tue Oct 12 04:00:19 2010 > To: nanog(a)nanog.org > Subject: AS22558 - Routing apparently hijacked space > Date: Tue, 12 Oct 2010 02:01:32 -0700 > From: "Ronald F. Guilmette" <rfg(a)tristatelogic.com> > > > I can't take credit for finding this one. Somebody else on another > mailing list I'm on actually found it. > > AS22558 itself _does not_ appear to be hijacked. Rather this is > a relatively new (2009) AS, but the AS itself is very odd indeed. > > It's contact phone number isn't working, it apparently has no web site > associated with its domain name (mpgnetworks.com) and although the whois > record clearly indicates that the company behind this AS is located in > California, the California Secretary of State's web site has no record > of any "MPG Networks, LLC" operating legally within California. The whois record is also suspect. A little bird tells me tht there is is no 'suite 411' at 707 Wilshire. > ===================================================================== > ASNumber: 22558 > ASName: MPGNET > ASHandle: AS22558 > RegDate: 2010-01-27 > Updated: 2010-01-27 > Ref: http://whois.arin.net/rest/asn/AS22558 > > OrgName: MPG Networks, LLC > OrgId: MPGNE > Address: 707 Wilshire, suite 411 > City: Los Angeles > StateProv: CA > PostalCode: 90017 > Country: US > RegDate: 2009-11-03 > Updated: 2009-11-03

1 0

Using crypto auth for detecting corrupted IGP packets?
by Manav Bhatia 13 Oct '10

13 Oct '10

Hi, I believe, based on what i have heard, that some operators turn on cryptographic authentication because the internet checksum that OSPF, etc use for packet sanity is quite weak and offers trifle little protection against lot of known errors like: - re-ordering of 2-byte aligned words - various bit flips that keep the 1s complement sum the same (e.g. 0x0000 to 0xffff and vice versa) So a corrupted packet could still pass the ethernet CRC checks and IP and OSPF checksums. Or it could be valid till the ethernet CRC check is done and gets corrupted after that (PCI transmission errors, DMA errors, memory issues, line card corruption and last but not the least, CRCs and internet checksums could miss wire-corrupted packets) Currently an operator can do the following: - Use the poor internet checksum OR - Turn on cryptographic authentication in the routing protocols to catch all such bit errors which could be caused by line card corruption, etc. One can go through http://portal.acm.org/citation.cfm?id=294357.294364 to understand the issues with the internet checksums. I would be interested in knowing if operators use the cryptographic authentication for detecting the errors that i just described above. You could send me a mail offline and i will consolidate the responses and send a summary on the list in a few days time. Cheers, Manav

6 11