- NANOG - lists.nanog.org

RE: Cisco Systems to Purchase Procket Networks...
by Burton, Chris 18 Jun '04

18 Jun '04

I was under the impression the Mr. Li had left Procket some time ago and does not work for either company currently. Chris Burton Network Engineer Walt Disney Internet Group: Network Services The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact Walt Disney Internet Group at 206-664-4000. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Wayne E. Bouchard Sent: Thursday, June 17, 2004 5:47 PM To: John Curran Cc: nanog(a)merit.edu Subject: Re: Cisco Systems to Purchase Procket Networks... So does this mean that Tony Li now works for Mr. Chambers again? :-) On Thu, Jun 17, 2004 at 05:21:58PM -0700, John Curran wrote: > > "SAN JOSE, Calif., June 17, 2004 - Cisco Systems, Inc., today > announced a definitive agreement to purchase the intellectual > property, a majority of the engineering team and select assets from > privately-held Procket Networks, Inc. of Milpitas, Calif. Procket > Networks is a developer of concurrent services routers and has > expertise in silicon and software development. This purchase will add > a rich intellectual property portfolio and a team of proven silicon > and software architects to Cisco's industry leading routing technology > and products." > > <http://newsroom.cisco.com/dlls/2004/corp_061704.html> > > FYI, > /John --- Wayne Bouchard web(a)typo.org Network Dude http://www.typo.org/~web/

1 0

RE: Yahoo mail public notice of problems ?
by Cody Lerum 17 Jun '04

17 Jun '04

Ditto- Frequent delays in sending to yahoo.com -C -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Michael Loftis Sent: Thursday, June 17, 2004 1:53 PM To: nanog(a)nanog.org Subject: Re: Yahoo mail public notice of problems ? --On Thursday, June 17, 2004 15:00 -0400 Mike Tancsa <mike(a)sentex.net> wrote: > > > Is there a notice I can point non Yahoo Mail customers to explaining why > there are delivery delays? We are seeing a lot of stalled deliveries > again, and it would be nice to point to an explanation by yahoo as to > whats up > > Stalls are both at the banner not coming up Seeing the same thing as well... apparently not isolated. As far as a notice or anything I'm not aware of any. Email Confidentiality Notice: The information contained in this transmission is confidential, proprietary or privileged and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act (HIPAA). The message is intended for the sole use of the individual or entity to whom it is addressed. If you are not the intended recipient, you are notified that any use, distribution or copying of the message is strictly prohibited and may subject you to criminal or civil penalties. If you received this transmission in error, please contact the sender immediately by replying to this email and delete the material from any computer.

1 0

Yahoo mail public notice of problems ?
by Mike Tancsa 17 Jun '04

17 Jun '04

Is there a notice I can point non Yahoo Mail customers to explaining why there are delivery delays? We are seeing a lot of stalled deliveries again, and it would be nice to point to an explanation by yahoo as to whats up Stalls are both at the banner not coming up marble% time telnet mx1.mail.yahoo.com smtp Trying 64.156.215.19... Connected to mx1.mail.yahoo.com. Escape character is '^]'. ^] telnet> close Connection closed. 0.006u 0.000s 12:07.77 0.0% 0+0k 0+0io 0pf+0w marble% Or at the application layer with temp failures mta103.mail.sc5.yahoo.com Resources temporarily unavailable. Please try again later [#4.16.3]. I checked from another network totally independent of mine and they too are seeing similar problems. ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike(a)sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike

2 1

NANOG 32 Call for Presentations
by Susan Harris 17 Jun '04

17 Jun '04

* * * * * * * * * * * * * * * * * CALL FOR PRESENTATIONS NANOG 32 GENERAL SESSION TUTORIALS CASE STUDIES OPERATIONS RESEARCH POSTER SESSION October 17-19, 2004 * * * * * * * * * * * * * * * * * The North American Network Operators' Group (NANOG) will hold its 32nd meeting October 17-19, 2004, in Reston, Virginia. This will be NANOG's third joint meeting with ARIN, the American Registry for Internet Numbers (www.arin.net) NANOG will meet from Sunday to Tuesday, and ARIN from Wednesday to Friday, October 20-22. NANOG registration opens September 1. NANOG conferences provide a forum for the coordination and dissemination of technical information related to backbone/enterprise networking technologies and operational practices. Meetings are held three times each year, and include two days of short presentations, plus afternoon/evening tutorial sessions. The meetings are informal, with an emphasis on relevance to current backbone engineering practices. NANOG conferences draw over 500 participants, mainly consisting of engineering staff from national service providers, and members of the research and education community. For more information about NANOG meetings, schedules, and logistics, see: http://www.nanog.org ------------------------------------------------------------------------------ CALL FOR PRESENTATIONS NANOG invites presentations on backbone engineering, coordination, and research topics. Presentations should highlight issues relating to technology already deployed or soon to be deployed in core Internet backbones and exchange points. Abstracts should include a concise summary of findings to be presented in the talk. Network operators are invited to present case studies detailing their experiences with network planning and design, protocol implementation, provisioning, useful tools, traffic engineering, problems solved, DoS scenarios and mitigation techniques, and troubleshooting, including automation, approaches, and techniques, Vendors are encouraged to work with operators to present deployment experiences with the vendor's products and interoperabilty. Researchers are invited to present short (10-minute) summaries of their work for operator feedback. Topics include routing, network performance, statistical measurement and analysis, and protocol development and implementation. Studies presented may be works in progress. Researchers from academia, government, and industry are encouraged to present. The community is invited to present talks or tutorials on: - Backbone traffic engineering - Experience with large-scale VoIP deployments and peering - Experience deploying metro-optical infrastructure - Freely available configuration, management, and measurement tools - Enterprise network security, management, and route control - Innovative access technologies, including metro-optical and PON - Case studies on deploying "triple play" (voice, video, data) - Routing scalability in backbone infrastructures - Security issues for the Internet core - Experience deploying L2 VPN/PW and inter-provider L3 VPN - Impact of BGP dynamics on backbone traffic patterns - Route processor architecture - OS architectures and implementations - SSM deployment experience - Inter-provider security and routing protocol authentication - Innovative network deployments supporting GRID - Circuit2Packet (C2P) experience with legacy services Tutorials have covered topics such as: - Troubleshooting BGP - Configuring IPsec - Customer-Triggered Real-Time Blackholes - BGP/MPLS Layer 3 VPNs ------------------------------------------------------------------------------ HOW TO PRESENT Submit an abstract and draft slides for the presentation in email to nanog-support(a)nanog.org. The deadline for proposals is September 7, 2004. While the majority of speaking slots will be filled by September 7, a limited number of slots may be available after that date for topics that are exceptionally timely, important, or critical to the operations of the Internet. Submissions will be reviewed by the NANOG Program Committee, and presenters will be notified of acceptance by September 20. Final drafts of presentation slides are due by October 6, and final versions October 13. NANOG also welcomes suggestions/recommendations for tutorials, panels, and other presentation topics. ---------------------------------------------------------------------------

1 0

Re: akamaie dns issue
by Curtis Maurand 17 Jun '04

17 Jun '04

This was in my mail this am. This is why there was an akamai dns issue. Curtis -- Curtis Maurand mailto:curtis@maurand.com http://www.maurand.com ---------- Forwarded message ---------- Date: Thu, 17 Jun 2004 00:49:42 -0400 From: David Kennedy CISSP <david.kennedy(a)acm.org> To: nanog(a)merit.edu Subject: Computerworld: Q&A: Tom Leighton, chief scientist at Akamai Q&A: Tom Leighton, chief scientist at Akamai He talked about the nature of yesterday's apparent DDoS attack News Story by Jaikumar Vijayan JUNE 16, 2004 (COMPUTERWORLD) - Akamai Technologies Inc. said today that the Domain Name System problems it encountered yesterday were the result of a sophisticated and targeted distributed denial-of-service attack against the company. In an interview with Computerworld, Tom Leighton, the company's chief scientist, talked about what happened. What was the nature of the yesterday's attack? It was a name server attack against four of our customers for whom we carry their name servers. Our assumption was this was an attack against Akamai and it was perpetrated by attacking our customer name service infrastructure. It is not impossible that this was a coordinated attack against those four Web sites. Akamai has a lot of key customers, and it could just be a coincidence that the four happened to be Akamai customers. [But] we are assuming it was an attack against Akamai. <snip> http://www.computerworld.com/securitytopics/security/story/0,10801,93875,00. html?SKC=security-93875

2 1

RE: Even you can be hacked
by David Schwartz 17 Jun '04

17 Jun '04

> At 7:07 PM -0700 2004-06-10, David Schwartz wrote: > > Most of the people on this list see things from the ISP's > > perspective. > > However, step back a bit and see it from the user's perspective. Do you > > expect to pay for phone calls you didn't make or do you expect > > the person > > whose deliberate conscious action caused those calls to be made? Do you > > expect to be responsible for patrolling your electric lines to > > make sure > > someone hasn't plugged into your outside outlets? > If you had a PBX in your home that was misconfigured and allowed > people to dial-in and then dial back out and get free long distance, > and your telephone company warned you about this weakness, forgives > your first month overages due to your being hacked, and yet you still > refused to fix the system, then you're toast. > > Under those circumstances, if someone makes $10M worth of long > distance calls via your PBX, then you're going to have to pay up. Of course, except in this case, the phone company can't easily tell the legitimate calls from the illegitimate ones and block only the illegitimate ones. Every analogy will break down, so don't expect to be able to convince people with analogies that seem so obviously right to you. Nothing is exactly accurate except the actual situation itself. And, again, alomst every contract has some insurance elements to it. There will be unusual cases where it's actually possible for the utility to lose money if something unusual happens. My main point is that the understanding that seems so obviously right to you may not seem so obviously right to your customers. As for all the people who talk about turning off their DSL access when they're away from home, they're missing the point. Obviously a person could do that. We could shut off our electricity when we leave home. We could have our telephone service temporarily disabled when we go on vacation too. A person could do all of these things. My point is that it's also perfectly reasonable for a person not to do these things. Because in general an ISP has more ability to control these things and it makes very little sense for a home user to insure an ISP, it makes more sense for the ISP to insure the user. In any unfortunate situation, you can find a hundred things that anyone could have done differently that would have avoided the situation. But that is not how you establish responsibility, financial or moral. You look at people who failed to use reasonable prudence. And, of course, the ISP always (or very nearly always) insures the user against the costs of inbound attack traffic that exceeds his line rate. The more demands you make of your customers, the more you decrease the value of your very own product. Frankly, if I ruled the world, obtaining Internet access would require a serious cluefulness test and you'd take a lot more responsiblity for generated traffic. I know a lot of people on this list wish things were the same way and sometimes want it so much that they're able to convince themselves that this is the way things actually are in the real world today. But they're not, and you may find that outside your group of friends, your views are found to be very odd by the majority of 'normal' (but, admittedly, inferior) people. The arguments that seem so obviously right to you may be greeted by amusement and the analogies you think work will be found unconvincing. This is because this argument is largely about other people's expectations. DS

27 78

Computerworld: Q&A: Tom Leighton, chief scientist at Akamai
by David Kennedy CISSP 17 Jun '04

17 Jun '04

Q&A: Tom Leighton, chief scientist at Akamai He talked about the nature of yesterday's apparent DDoS attack News Story by Jaikumar Vijayan JUNE 16, 2004 (COMPUTERWORLD) - Akamai Technologies Inc. said today that the Domain Name System problems it encountered yesterday were the result of a sophisticated and targeted distributed denial-of-service attack against the company. In an interview with Computerworld, Tom Leighton, the company's chief scientist, talked about what happened. What was the nature of the yesterday's attack? It was a name server attack against four of our customers for whom we carry their name servers. Our assumption was this was an attack against Akamai and it was perpetrated by attacking our customer name service infrastructure. It is not impossible that this was a coordinated attack against those four Web sites. Akamai has a lot of key customers, and it could just be a coincidence that the four happened to be Akamai customers. [But] we are assuming it was an attack against Akamai. <snip> http://www.computerworld.com/securitytopics/security/story/0,10801,93875,00. html?SKC=security-93875

1 0

RE: Akamai DNS Issue?
by Drew Weaver 17 Jun '04

17 Jun '04

Similar issues with Yahoo on and off since about 8:30am (EST). -Drew -----Original Message----- From: Leo Bicknell [mailto:bicknell@ufp.org] Sent: Tuesday, June 15, 2004 9:09 AM To: nanog(a)merit.edu Subject: Akamai DNS Issue? >From here neither www.google.com, nor www.apple.com work. Both seem to return CNAMES to akadns.net addresses (eg, www.google.akadns.net, www.apple.com.akadns.net) and from here all of the akadns.net servers listed in whois are failing to respond. Can someone confirm from another location? Comments from Akamai? -- Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - tmbg-list-request(a)tmbg.org, www.tmbg.org

7 9

Re: Travelling the backway to Google
by Tony Rall 17 Jun '04

17 Jun '04

On Wednesday, 2004-06-16 at 20:02 AST, "support services" <support(a)smsonline.net> wrote: > > On Wed, Jun 16, 2004 at 04:28:37PM -0700, Tony Rall wrote: > > > http://216.239.57.104 > > Yes, the old servers are still there but, they are out of date and not > in-sync with any other servers. They can act as mirrors but, they don't > appear as mirror. > > http://216.239.57.104 No Froogle Yes, they do appear to be somewhat backlevel, but that address (among a few others) is what www.google.com (among a few others) resolves to right now - even when doing a manual lookup starting at the gtld servers. Right now they're coming out with a short 10 minute ttl, but my local nameservers still have www.google.com cached (to those "old" servers) with more than 24 hours left on the ttl. I don't think Google has fully left emergency mode yet. And even if they have, the recovery measures they took will not age out for hours. Tony Rall

1 0

Akamai an Inside Job?
by David Kennedy CISSP 16 Jun '04

16 Jun '04

http://www.overclockersclub.com/?read=8733819 The Akamai attacks started in the morning and it was detected by Keynote Systems, a web tracking company that is able to track the load and bandwidth on the Internet. According to Keynote they saw an "Internet performance issue" this morning ... They have tracked the attacker back to person that is at the Akamai Technologies ISP. No other information has been given to us at this time. We do not know if the FBI is working on this issue right now, but we expect them to do so. [DMK: Source, beyond overclockers, unknown, reliability and accuracy unknown.] Akamai spin: http://home.businesswire.com/portal/site/google/index.jsp?ndmViewId=news_vie w&newsId=20040616005428&newsLang=en -- David Kennedy CISSP Risk Analyst TruSecure Corp. http://www.trusecure.com

7 6