- NANOG - lists.nanog.org

Ability to use and monitor LOCK status
by Bruce Tonkin 20 Jan '05

20 Jan '05

> However, that still looks to me like "Users can only ask that > domains be locked." Unless you are claiming that users can > send the lock request directly to the registry, and monitor > its status. Only a registrar can send commands directly the registry. Different registrars offer different services. Most are now offering the ability for customer to put a name on Lock, and remove a name from lock using the normal online maintenance tools. The status of LOCK is published in the Registry WHOIS service, although this display is not in real-time (ie believe it is updated once a day). Registrars have real-time access to the lock status of a name under their management. Regards, Bruce

1 0

Re: Graphing Peering
by andrew matthews 20 Jan '05

20 Jan '05

no i mean graph bgp sessions... it's a single interface, and i want to graph every bgp session so i can see how much traffic i'm doing between each peer. On Wed, 19 Jan 2005 22:25:37 +0000 (GMT), Stephen J. Wilcox <steve(a)telecomplete.co.uk> wrote: > On Wed, 19 Jan 2005, andrew matthews wrote: > > > Anyone have any suggestions on graphing peering on a cisco router? I'm > > using mrtg and i did mac address accounting but the numbers are off. > > do you mean how to graph traffic to each host on a lan..? > > what platform do you have? > > Steve > >

5 5

Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
by Fergie (Paul Ferguson) 20 Jan '05

20 Jan '05

...and it's not like ARIN, etc., does not announce to the Internet community when it allocates from address space which may have previously been listed in various operational places as "bogon" or "unalloacted" -- they do. I recall seeing similar announcements on the list from time to time, suggesting due diligence on ARIN's behalf to notifying people to modify their filtering. *plonk* Scanning the archives, an example: http://www.merit.edu/mail.archives/nanog/2004-01/msg00374.html - ferg -- Jared Mauch <jared(a)puck.nether.net> wrote: This hurts Ciscos reputation that they are causing pockets of the internet to not work. Next subnets to get allocated will increase the size of those pockets and so on. Then the internet will become less reliable as an end-to-end transport medium, hurting *everyone*. -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

3 2

Router-switch-router "peering module"
by Howard C. Berkowitz 20 Jan '05

20 Jan '05

I'm hunting for some presentations or papers on what I've seen called a "peering module", using a router, a L2 switch, and a router in series, rather than a single router. Unfortunately, I can't remember where I saw the detailed description, and I haven't been able to find it in the NANOG archives. IIRC, the rationale was to spread filtering and rate limiting over a set of processors, also to keep the configuations more manageable. Does anyone have any pointers to detail? I've seen the topology, but not a detailed discussion, in a couple of Cisco presentations.

1 0

Graphing Peering
by andrew matthews 20 Jan '05

20 Jan '05

Anyone have any suggestions on graphing peering on a cisco router? I'm using mrtg and i did mac address accounting but the numbers are off. Thank i appreciate it in advance. Andrew

4 3

Regarding registrar LOCK for panix.com
by Bruce Tonkin 20 Jan '05

20 Jan '05

> > On Wed, 19 Jan 2005, Darrell Greenwood wrote: > > customers' domains. Panix.com says its domain name was locked, and > > that despite this, it was still transferred. (r) > > I seem to recall someone saying it wasnt locked, now theyre > saying it was? The information we have so far, indicates that it was not on Registrar LOCK at the registry at the time of the transfer. Regards, Bruce Tonkin

7 6

Confirmation of receipt of the transfer request at Verisign for panix.com
by Bruce Tonkin 20 Jan '05

20 Jan '05

When a registrar sends a transfer request to the registry operator (and the name is not on Registrar LOCK), the registry operator sends a confirmation email to both the losing and gaining registrar. Here is the copy of the email Melbourne IT received. Regards, Bruce Tonkin From hostmaster(a)verisign-grs.com Sun Jan 9 12:40:35 2005 Return-Path: <hostmaster(a)verisign-grs.com> Received: from verisign-grs.org (snoopy.verisign-grs.net [192.153.247.4]) by galahad.inww.com (8.12.9/8.12.9) with SMTP id j091eYgt003545 for <>; Sun, 9 Jan 2005 12:40:35 +1100 (EST) Date: Sat, 8 Jan 2005 20:40:34 -0500 From: hostmaster(a)verisign-grs.com Message-Id: <200501090140.j091eXp7019959(a)verisign-grs.org> To: Melbourne IT Reply-to: hostmaster(a)verisign-grs.com Subject: Receipt of Transfer Request: PANIX.COM Transfer Request for: Domain Name: PANIX.COM Requesting Registrar: Melbourne IT, Ltd. d/b/a Internet Names Worldwide Current Registrar: Dotster, Inc. The VeriSign Global Registry Services has received your request to modify the domain name record for PANIX.COM to reflect the fact that the registrant has selected you to be its Registrar. By submitting the request using the "Transfer" command in the RRP, you have represented to the VeriSign Global Registry Services and the Current Registrar that (1) you have obtained the requisite authorization from the domain name registrant listed in the database of the Current Registrar, and (2) you have retained a copy of reliable evidence of the authorization. Pursuant to established procedures, the VeriSign Global Registry Services has notified the Current Registrar of your request. If we receive an Affirmative response to our notice within five (5) calendar days, we will make the change to the domain name record. If we receive a negative response to our notice within five (5) calendar days we will decline to transfer the domain name. If the Current Registrar takes no action within five (5) calendar days, we will make the change to the record. Sincerely, VeriSign Global Registry Services www.verisign-grs.com info(a)verisign-grs.com

4 3

Rép. : 85.68.0.0/19 Please Check Filters - BOGON Filtering IP Space
by RAMAHEFASON David FTC 20 Jan '05

20 Jan '05

oh my bad: 85.68/15 sorry for the mistake. >>> RAMAHEFASON David FTC <david.ramahefason(a)francetelecom.com> 01/20 10:44 >>> Hi, we're AS34033 and have been assigned the 85.68/19 address space from the RIPE on October 2004. But we still have some network reachability issues, due often to the use "old" BOGON filters, can you check that this supernet is not part of your bogon filters anymore. Thanks a lot David Ramahefason

1 0

Rép. : Re: Graphing Peering
by RAMAHEFASON David FTC 20 Jan '05

20 Jan '05

Hi, You can also use NetFlow/SFlow foncionalities on your Peering Interface. And then parse/treat data using tools like ntop/flowscan and such. David R. >>> Daniel Golding <dgolding(a)burtongroup.com> 01/20 12:04 >>> Andrew's issue is this - he's got an Ethernet port on a public peering switch with a bunch of peers. He can see the interface stats just fine but he's having trouble figuring out how much traffic is going to (or coming from) each peer. One interface, many peers, confusing problem. There isn't one VLAN per peer on most public peering switches - its one big Ethernet segment with each peer getting an IP out of a common subnet. Welcome to the world of broadcast multi-access peering. The classical way to do this is mac accounting. This can be pretty rough - its not really useful for anything more than a ratio, from what I've seen - the numbers tend to not add up properly. Another possibility (on Cisco) is using BGP Policy Accounting, although support can be spotty depending on hardware. For other platforms, there's some good information here: http://www.switch.ch/misc/leinen/snmp/monitoring/bucket-accounting.html The link on that page for Juniper's Destination Class Usage (DCU) is broken. Try this one instead: http://www.juniper.net/techpubs/software/junos/junos70/swconfig70-interfaces /html/interfaces-family-config25.html - Dan On 1/19/05 5:56 PM, "Bill Nash" <billn(a)billn.net> wrote: > > > If you're already using MRTG, hopefully you're at least passingly familiar > with perl and SNMP. If so, you can do some hackery to identify your BGP > peer interfaces automatically and then use it to reference existing > interface graphs. > > Take a peek in the BGP4 mib, specifically at the BgpPeerEntry subtree. You > may need to do some correlation inside the ifTable or maybe even ifX, > depending on platform and implementation, to correctly identify the > interface of your peer. > > - billn > > > On Wed, 19 Jan 2005, andrew matthews wrote: > >> >> no i mean graph bgp sessions... >> >> it's a single interface, and i want to graph every bgp session so i >> can see how much traffic i'm doing between each peer. >> >> >> On Wed, 19 Jan 2005 22:25:37 +0000 (GMT), Stephen J. Wilcox >> <steve(a)telecomplete.co.uk> wrote: >>> On Wed, 19 Jan 2005, andrew matthews wrote: >>> >>>> Anyone have any suggestions on graphing peering on a cisco router? I'm >>>> using mrtg and i did mac address accounting but the numbers are off. >>> >>> do you mean how to graph traffic to each host on a lan..? >>> >>> what platform do you have? >>> >>> Steve >>> >>> >> -- Daniel Golding Network and Telecommunications Strategies Burton Group

1 0

85.68.0.0/19 Please Check Filters - BOGON Filtering IP Space
by RAMAHEFASON David FTC 20 Jan '05

20 Jan '05

Hi, we're AS34033 and have been assigned the 85.68/19 address space from the RIPE on October 2004. But we still have some network reachability issues, due often to the use "old" BOGON filters, can you check that this supernet is not part of your bogon filters anymore. Thanks a lot David Ramahefason

1 0