- NANOG - lists.nanog.org

cacti -- Multiple security vulnerabilities have been discovered (fwd)
by Gadi Evron 14 Feb '08

14 Feb '08

I'm an MRTG guy, but many aren't. ---------- Forwarded message ---------- Date: Tue, 12 Feb 2008 14:42:01 -0200 From: Mario Sergio Candian <mscandian(a)freebsdbrasil.com.br> To: bugtraq(a)securityfocus.com Subject: cacti -- Multiple security vulnerabilities have been discovered Affected packages: cacti < 0.8.7b Multiple security vulnerabilities have been discovered in Cacti's web interface: * XSS vulnerabilities * Path disclosure vulnerabilities * SQL injection vulnerabilities * HTTP response splitting vulnerabilities References: http://forums.cacti.net/about25749.html -- Mario Sergio Candian - Live your dreams and face your fears

1 0

RE: IBM report reviews Internet crime
by Scott Weeks 13 Feb '08

13 Feb '08

These statements (and others in it) are very telling about the type of report this is: "...percent of Internet content was classified as unwanted..." "...hosting source of adult, socially deviant and criminal content on the Internet" take with a grain of salt... scott

2 1

Re: Level 3, again
by Edward A. Trdina III 12 Feb '08

12 Feb '08

Just got notification that Level3 will be doing maintenance early AM EST to reboot an edge router in Miami, FL. The ticket # for this is 2365443 -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Chris Ranch Sent: Tuesday, February 12, 2008 1:32 PM To: 'David Hubbard'; nanog(a)merit.edu Subject: RE: Level 3, again This affected us too, same impact. No official word from Level3, but it looks to be back up now. My normal path was SJO-LAX-DAL-MIA, now it's SJO-LAX-DEN-DAL-MIA. I can only speculate that it was related to the LAX-DAL link. It lasted about an hour. Chris > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of David Hubbard > Sent: Tuesday, February 12, 2008 10:06 AM > To: nanog(a)merit.edu > Subject: Level 3, again > > > Anyone know what's going on on their network? We opened a > ticket but haven't heard back, sounds like they may have > some kind of nationwide issue going on that started in > Atlanta. We've had customers on Time Warner, SBC Global, > AT&T and Pac Bell unable to reach us. > > David >

2 1

Re: IBM report reviews Internet crime
by Paul Ferguson 12 Feb '08

12 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Andre Gironda" <andre(a)operations.net> wrote: [lots of good stuff elided] >It's our fault for not pushing AV on your customers, and it's the AV's >fault for not providing audit data to us, and it's the software >vendors' fault for causing us to have to recommend AV and for AV to >exist. The liability should land on the software vendors. AV is simply a tool, not a panacea. In fact, what to do about the hundreds of thousands of compromised websites/servers that help facilitate this crime? What about the thousands of malicious rogue DNS servers? There's enough problem-spaces to point fingers all around... $.02, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFHshdFq1pz9mNUZTMRAhxjAJ9H8m2opz5e69X+GLhjtm50OUalyACgpRdd orMVvqPF/bdpdCV6nkn9/3g= =KwZs -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

RE: Level 3, again
by David Hubbard 12 Feb '08

12 Feb '08

Just got confirmation from them that a master ticket is being created and the transport team is looking at it. There's an issue with an EBR router in Dallas that they have already routed around but from what I can see, there are still major issues with traffic that has to traverse Dallas. Our connection to L3 in Atlanta going to the same destinations has no issue but jumps from ATL to DC to LAX. David > -----Original Message----- > From: Chris Ranch [mailto:christopher.ranch@hostway.com] > Sent: Tuesday, February 12, 2008 1:32 PM > To: David Hubbard; nanog(a)merit.edu > Subject: RE: Level 3, again > > This affected us too, same impact. No official word from > Level3, but it > looks to be back up now. > > My normal path was SJO-LAX-DAL-MIA, now it's > SJO-LAX-DEN-DAL-MIA. I can > only speculate that it was related to the LAX-DAL link. It > lasted about an > hour. > > Chris > > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > > Behalf Of David Hubbard > > Sent: Tuesday, February 12, 2008 10:06 AM > > To: nanog(a)merit.edu > > Subject: Level 3, again > > > > > > Anyone know what's going on on their network? We opened a > > ticket but haven't heard back, sounds like they may have > > some kind of nationwide issue going on that started in > > Atlanta. We've had customers on Time Warner, SBC Global, > > AT&T and Pac Bell unable to reach us. > > > > David > > > > >

1 0

Level 3, again
by David Hubbard 12 Feb '08

12 Feb '08

Anyone know what's going on on their network? We opened a ticket but haven't heard back, sounds like they may have some kind of nationwide issue going on that started in Atlanta. We've had customers on Time Warner, SBC Global, AT&T and Pac Bell unable to reach us. David

3 2

Network Notifcation - SMS via Verizon
by Gregory Boehnlein 12 Feb '08

12 Feb '08

Hello, We have been discussing adding a wireless SMS based option to our TAP and SMTP delivery systems. We are running Nagios. In looking at the list archives, I found the following thread: http://www.irbs.net/internet/nanog/0408/0039.html Lots of great suggestions.. In looking at the options, it seems that Gnokii seems to be a well used solution to integrate a GSM or GPRS based phone/modem for text messaging. However, I am trying to determine if anyone is doing this with Verizon right now. Our existing Cell contract is w/ Verizon and so we want to avoid the potential of lost SMS messages in hopping from say T-mobile or Cingular to Verizon. So.. anyone doing SMS notification to Verizon w/ a wireless GSM/GPRS or Cell Phone solution? If so, you want to share how you are doing it? Thanks in advance..

4 3

Blackberry List
by Justin Pauler - Lists 11 Feb '08

11 Feb '08

Hello everyone... I realize this isn't the right forum for this, so, does anyone have a Blackberry list that has discussions much like what we do here? Even better, that might have information or alerts for when there are issues? I'm seeing an issue right now where phones from two independant providers have not recieved updates from two independant BES servers since 2:30 PM CST (that's now about 2 1/2 hours). Justin

4 3

Re: Blackberry List
by Paul Ferguson 11 Feb '08

11 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Justin Pauler - Lists" <Lists(a)JWPauler.org> wrote: >I realize this isn't the right forum for this, so, does anyone have a >Blackberry list that has discussions much like what we do here? Even >better, that might have information or alerts for when there are issues? > >I'm seeing an issue right now where phones from two independant providers >have not recieved updates from two independant BES servers since 2:30 PM >CST (that's now about 2 1/2 hours). > For what it's worth, RIM has indicated that there is a large and "critical" BlackBerry outage in the Americas: http://www.reuters.com/article/technologyNews/idUSN1114968920080211 Also, there is the "outages" mailing list: http://isotf.org/mailman/listinfo/outages - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFHsMvmq1pz9mNUZTMRAoXrAKCep73E6cQ9X1uaE6Flo9qmJh78cQCeMB6x SbGmsmEq45bDd6Tv5j57W3I= =AFOw -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

Level3 transit issues in NE?
by Ross Vandegrift 11 Feb '08

11 Feb '08

Hey everyone, We've been seeing reachability issues to prefixes on Level3's network since early this morning. Paths that take L3 via XO seem to be displaying the same problems. Our Level3 peer is in Philadelphia, XO peer is in NYC. We have not been able to get a call back from Level3 since 5am. Has anyone heard any info regarding this? -- Ross Vandegrift ross(a)kallisti.us "The good Christian should beware of mathematicians, and all those who make empty prophecies. The danger already exists that the mathematicians have made a covenant with the devil to darken the spirit and to confine man in the bonds of Hell." --St. Augustine, De Genesi ad Litteram, Book II, xviii, 37

1 0