- NANOG - lists.nanog.org

Network Map Generator
by Joe Johnson 26 Sep '05

26 Sep '05

I'm looking for a product or script that will let us generate a network map for use in conjunction with Nagios. We have all of the parent/child dependencies defined in a SQL table, as well as the current status, but I can only find programs that will create a live map on my desktop. I also looked at the graphing Pear module, but it seems that it cannot generate an org-chart type map of the network. Anyone know of something that will generate an org-chart like network map dynamically? Sincerely, Joe Johnson joe(a)sendjoeanemail.com

5 5

RE: Address Space & ASN Allocation Process
by Reeves, Rob 26 Sep '05

26 Sep '05

> Hi, > > Just trying to get some clarity and direction regarding > obtaining address space/ASN for my client. > > Is there a minimum address space (?) an entity would need to > justify to go directly to RIR (ARIN in this case) as opposed > to the upstream provider? Is /20 the minimum allocation? Can > my client approach RIR and request for a /23? The minimum assignment from ARIN is actually a /22, which will only be given to multi-homed end-users who qualify (http://www.arin.net/policy/nrpm.html#four3) Other than that, the smallest assignment is /20. > If my client do procure a /23 how do they make make sure that > this address space will be globally routable? Regardless of where their IP's come from, all they have to do is announce them to their upstream providers using BGP. > Multihome will also be part of their network implementation, > can they apply for an ASN number? Yes, they can apply for an ASN number as long as they can show ARIN that they are in the process of bringing up connectivity with more than one ISP. ARIN's web page is actually pretty easy to navigate for finding this and all the other information you will need. I would suggest checking it out. http://www.arin.net ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Rob Reeves IP Network Engineer Arbinet 703-456-4172 rreeves(a)arbinet.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Hope this isnt a redundant question : Cisco IOS Netflow analysis mechanisms?
by Drew Weaver 26 Sep '05

26 Sep '05

We're looking for a method of actively monitoring certain metrics on our network via software or a somewhat inexpensive hardware solution (those metrics being which AS numbers are the highest destinations for our network) and information like that which will help us with capacity planning. We are looking for suggestions if anyone has any real-world knowledge of anything that would tell us for example: 8% of our traffic is destined to AS 2828 (XO communications) etc. Data such as that, Thanks.

6 5

PacSec05
by Dragos Ruiu 26 Sep '05

26 Sep '05

English url: http://pacsec.jp/index.html?LANG=ENGLISH Japanese url: http://pacsec.jp/index.html?LANG=JAPANESE Myamoto Musashi famous swordsman and author of "Go Rin No Sho" (the Book of Five Rings) wrote "Study the Way of all professions." In the way of computer networks, one must understand attacks before one can forestall them. I would like to announce the selection of the PacSec applied technical security seminar presentations. The event will be held on November 15/16 in Tokyo, Japan, at the Aoyama Diamond Hall, accessible at exit B5 of the Omotesando station, on Ginza or Hanzomon lines. PacSec/core05 The selected papers are: Andrea Barisani - Gentoo Building a modern LDAP based security framework. Cedric "Sid" Blancher - EADS WiFi traffic injection based attacks Javier Burroni - CORE SDI Using Neural Networks for remote OS identification Maximillian Dornseif - Laboratory for Dependable Distribute Systems Watching hackers hack - attack visualization van Hauser - thc Attacking the IPv6 protocol suite Adam Jacobs - Oracle Commercial Software and How Can We Fix It? Chris Jordan - Endeavor Systems Writing Better Intrusion Prevention Signatures Hiroshi Shinotsuka - Symantec Advances in Trojan Threats Feng "Sowhat" Xue - 3rd Research Institute, Ministry of Public Security, Chinese National Anti-Intrusion and Anti-virus Research Center Talking About 0day Ilja van Sprundel - Suresec Unix Kernel Auditing Window Snyder - formerly Microsoft A new perspective on internal security. Yuji Ukai - eeye Real-Time OS Based Embedded Systems Using the JTAG Emulator Marc Uemura - PWC Fault Redundant IPV6 Wireless Firewalls Christian Wieser - Oulu University Secure Programming Group VoIP: SIP robustness and RTP security All presentations are in both Japanese and English. Registration is on line at http://pacsec.jp ********************************************************** Security Masters Dojo, Tokyo ---------------------------------- The Tokyo Security Masters Dojo will be held on November 14, also at the Aoyama Diamond Hall. The following one day advanced and intermediate applied information security courses will be offered: Sinan 'noir' Eren & Nicolas Waisman - Immunity Win32 Reliable Heap Explotation Gerardo Richarte - Core Security Technologies Assembly for Exploit Writing Marty Roesch - Sourcefire Advanced IDS Deployment and Optimization Maximillian Dornseif & Thorsten Holtz - Aachen University Advanced Honeypot Tactics Philippe Biondi - EADS Mastering the Network with SCAPY As with all Dojo courses, to ensure that each student gets individual training from the instructors in the hands-on labs, class size will be limited to ten students per course. Each course is one day, and features practical exercises to help maximize knowledge retention. Dojo registration will be available shortly under the "DOJO" tab on http://pacsec/.jp along with expanded course information. CanSecWest/core06 final dates: April 5-7 2006 Early Discount Registration is on-line at: http://cansecwest.com/register.html Dojo/Vancouver dates: April 3-5 2006 Dojo/Vancouver Registration is not available yet. cheers, --dr -- World Security Pros. Cutting Edge Training, Tools, and Techniques Tokyo, Japan November 14-16 2005 http://pacsec.jp pgpkey http://dragos.com/ kyxpgp

1 0

Re: 209.68.1.140 (209.68.1.0 /24) blocked by bellsouth.net for SMTP
by Gadi Evron 26 Sep '05

26 Sep '05

Cat Okita wrote: > Could the thieving donkey be so kind as to stop cross-posting? I am not on nanog-futures, and this interests all of us as a community. If I get a reply to a mailing list I am on, cross-posted to another list. I reply to the one I am on. I don't see why people keep insisting on moving discussions of critical nature such as fergie quitting (he ******* quit! do any of you care?) to a small list most of us don't read. Apparently it helps keep things quiet enough for the regular flames to go on. With all that's going on in nanog another thread won't kill anyone (unless the mods say it's off and then I'd naturally respect their decision to self-marginalize nanog again and I'll shut up about it). nanog is where this all happens, and I don't see any reason to post anywhere but a list I am subscribed to. As to you - you are rather rude. Are we related? Gadi. -- My blog: http://blogs.securiteam.com/?author=6 "The third principle of sentient life is the capacity for self-sacrifice --- the conscious ability to override evolution and self-preservation for a cause, a friend, a loved one." -- Draal, "A Voice in the Wilderness", Babylon 5.

1 0

Cross Posting and List Development
by Malayter, Christopher 26 Sep '05

26 Sep '05

Good Afternoon, I would like to request caution when cross posting between nanog@ and nanog-futures@. Please keep discussions related to "future ideas" for the list on nanog-futures. If we decide to solicit opinions on ideas that come out of the futures list, we will introduce a new thread on nanog@. To Reiterate, please take all "developmental ideas" to the nanog-futures list. This list is reserved for operationally related content. Please see the list AUP. 1 Discussion focuses on Internet operational and technical issues as described in the charter <http://www.nanog.org/NANOG.charter.html> of NANOG. The nanog-futures list is an open list, please feel free to subscribe. Chris Malayter TDS Telecom - Network Services Data Network Engineering chris.malayter(a)tdstelecom.com Phone: (608) 664-4878 FAX: (608) 664-4644

1 0

Bell Canada contact
by J. Oquendo 26 Sep '05

26 Sep '05

Anyone at Bell Canada willing to email me offlist Bell Canada BELLNEXXIA-11 (NET-67-68-0-0-1) 67.68.0.0 - 67.71.255.255 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x97B43D89 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x97B43D89 "Just one more time for the sake of sanity tell me why explain the gravity that drove you to this..." Assemblage

1 0

Re: 209.68.1.140 (209.68.1.0 /24) blocked by bellsouth.net for SMTP
by jc dill 26 Sep '05

26 Sep '05

Hannigan, Martin wrote: >>p.s. Speaking of "unreasonable requests" - I feel it is unreasonable >>for a member of the moderating committee to whine that he >>can't filter >>out "undesired" posts due to using a lame email client, and to then >>coerce a poster into "tagging" these posts. > There are no members of the ML admins saying that. You were a member at one point. I didn't know you had left that role "back in May" as another post mentions. > We were urged by multiple SC members to make our opinion > on this issue (off topic junk) known. The post in question was NOT "off topic junk". It was a brief cite and quote from a news article discussing the status of 3 major North American Networks following an huge storm, such a post is 100% ON-topic for the North American Network Operators Group. Your position about tagging "off topic junk" may have merit but you picked an ON-TOPIC post to whine about. Shame on you. jc (cc'd to nanog to clarify my position to the whole list, replies set to nanog-futures)

1 0

Requst for tech/peering contact to Qwest, Bresnan/ATT Worldnet(?) (for Montana)
by Michael Loftis 26 Sep '05

26 Sep '05

Please reply privately, off-list... I know this is probably not the best place, but Qwest, being Qwest, if I call their main numbers and try to ask about peering, they do s/peering/transit/ and route me to sales. I need to speak to someone in Qwest about peering at NWIX in Missoula, MT -- http://www.nwix.org/ -- Modwest (my employer) has a decent number of local customers on both of these providers networks, and employees being serviced on Bresnan's network. Bresnan I know has IP gear here in the facility, I just need to get the contact of someone who has the authority to get them plugged into NWIX in Missoula and setup a BGP peering session. I have a sales contact with Bresnan, but, if Bresnan's network guys/gals are on here and listening, this could hasten the process. Qwest I know has a cabinet with an ONS15454, however, I'm not sure about IP. I'm not requesting global peering for either of them (we're just a small content/hosting provider) however I'd like to atleast have Montana customers/local customers see us via the direct link rather than having to go out one of our transit links. Thanks again everyone, I now return you to your (err.. quasi?) operational content! :) -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler

13 24

TDC in Denmark
by Dennis Dayman 26 Sep '05

26 Sep '05

Anyone have any contacts at their ISP level? tdc.com tele.dk mail.dk Offlist replies ok... -Dennis

3 3