- NANOG - lists.nanog.org

NANOG30 PGP Key Signing
by Majdi S. Abbas 28 Jan '04

28 Jan '04

When you stop by the registration desk at NANOG30, there will be colored stickers available for your nametag that indicate if you have an interest in signing PGP keys. If people keep trying to peer with you, you've picked up the wrong color sticker and should go back. Additionally, there will be a PGP key signing party held during NANOG30 in (hopefully) sunny Miami. We are scheduled to meet on Monday night at 10:30 or so, after the Peering BOF. If the Peering BOF is running a little late, I'll delay us and ask Bill to tell jokes until everyone leaves. :-) Those of you who plan to participate should email an ASCII extract of your public key to msa(a)latt.net by noon on Monday, February 9th. Please include 'NANOG PGP KEY' in the subject, and if possible, don't send your key as a MIME attachment. I realize that some MUAs make this difficult, and I will attempt to fix any MIME attached keys. Instructions for extracting your key to an ASCII file are below. After 5pm on the 9th, a complete key ring with all of the submitted keys will be available at http://www.latt.net/nanog30.pgp in binary form, and as an ASCII file at http://www.latt.net/nanog30.txt Handouts with the details of each key submitted will be provided. All you should need to bring with you is: * Photo ID (driver's license, passport, etc.) * Your key ID, and its fingerprint * A pen Thank you, and I'm looking forward to seeing you all in Miami! How to extract your public key to an ASCII file: ------------------------------------------------ PGP 2.x: pgp -kxa your_email_address mykey.asc PGP 5.x: pgpk -xa your_email_address > mykey.asc GnuPG: gpg --export --armor your_email_address > mykey.asc PGP on Windows: Start the PGPkeys application, select your key in the list, click on the Keys menu, select Export, name the resulting file, and make sure that Include Private Keys is NOT checked. PGP on a Mac: I assume the procedure is similar to the one for Windows, but cannot confirm this. Hopefully it's easy enough to figure out.

1 0

Re: in case nobody else noticed it, there was a mail worm released today
by Brent_OKeeffe＠asc.aon.com 28 Jan '04

28 Jan '04

>I've been wondering lately, after about 10 years of email worms spreading in >exactly the same manner with every incarnation ... why do you think people >haven't learned not to open unexpected attachments yet? It would seem to me >that even the most clueless user would modify his/her behavior after, say, >the 25th time they've been infected and had to 1) call tech support or 2) >reinstall their OS (or more likely, have someone else reinstall their OS). (Uh oh... I think I am about to start something here...) What you are really touching on here is a social issue that plagues the United States (and most other cultures) repeatedly. The people want to believe in a peaceful, harmless community so we can sleep sound at night and have fluffy dreams of puppies and flowers. Time and again, we try to forget the bad experiences and focus on the benefits we receive from the conveniences we demand. Therefore, born from those conveniences, the bad element sees opportunity and strikes. This is evidenced in many facets of our world. Email, air travel, 24 hour ATMs, and roofing contractors! Can we change this? Most likely not. But can we complain about it? What else would we do on our lunch hour? Take care, Brent

2 1

How does one reach a human being at AT&T?
by Jay Hennigan 28 Jan '04

28 Jan '04

I have an AT&T T-1 taking errors. Their trouble reporting number dumps me into the IVR from hell. It even has machines calling me back at intervals with status. The status says "A test was run..." No hint as to the results of the test. One of the choices is to say or hit "2" if you need further assistance. Doing so gets a response telling you to call their maintenance center which is the same machine that I used to generate the ticket in the first place. Furrfu! The telephone company doesn't have anyone to answer the telephone. Even "Floyd"[1] is looking pretty good at this point. Anyone have a secret number or touchtone sequence to share? Swearing at it doesn't work. This is a point-to-point circuit, not an Internet T-1. [1] http://www.sfgate.com/cgi-bin/article.cgi?file=/chronicle/archive/2003/02/2… -- Jay Hennigan - CCIE #7880 - Network Administration - jay(a)west.net WestNet: Connecting you to the planet. 805 884-6323 WB6RDV NetLojix Communications, Inc. - http://www.netlojix.com/

3 2

Not only do /24's run amuk...
by Anton L. Kapela 28 Jan '04

28 Jan '04

...They seem to come & go as they please! Inspired by RAS's prior posts regarding /16's that were hastly de-agged, I took some time this weekend to answer a few questions which came up; how many updates do I hear about a specific prefix, and does the length have any relationship? Well, several hours later, I knew pretty straight away how many updates I heard about various prefixes in the STS Telecom looking glass, at least. Consider this v0.0.1-alpa of the "Most-Heard Prefix" list, a sort of web-based and rule-less implementation of 'sh ip bgp flap-statistics.' The sorted list, updated every 60 minutes, is available here in gzip format due to excessive size (indeed, 10 peers act as a amplifier): http://eng.ststelecom.com/bgp-data/top-prefixes.txt.gz Incidently, many of the most-updated prefixes are included in the list of RAS's /16 de-aggs. Todo: ignore the effects of a peer session resets (i.e. don't consider a reload as part of the per-prefix flap count) and look at path changes with each update (is it a normal flap, or mid-day traffic-engineering session gone wrong?). Any comments or suggestions for changes are very welcome; please reply off-list. Thanks, --Tk

2 1

who tripped over the power cord at l3?
by John Kinsella 27 Jan '04

27 Jan '04

Seems like Level3 in SFO(at least) just went poof for a minute or two...

1 0

Kourou (French Guiana) seacable problem since last week, France telecom
by juan.bontje＠bt.com 27 Jan '04

27 Jan '04

Hi Anyone aware of an sea cable problem between kourou (French Guiana) and Europe? (France?), since 21jan04 Unfortunate don't have more sufficient information besides this. TIA JC

2 1

Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
by sthaug＠nethelp.no 27 Jan '04

27 Jan '04

> ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

4 4

Re: Outbound Route Optimization
by Michael.Dillon＠radianz.com 27 Jan '04

27 Jan '04

>What is broken for one provider and fixed at another may very well break >something else that was working before at the first provider, yes? Besides >the difficulties of assigning a true metric to the overall reachability of >a /8 or any aggregate for that matter ("ok we decreased rtt by 20ms to >these 3 destinations doing 15Mbps each but we increased rtt to this other >destination doing 40Mbps by 60ms so we're better right?"), do you really >want to see the problems you are supposed to be solving with optimized >routing popping up and going away again throughout the day? You hit the nail on the head. Fundametally, any route optimization technique that tries to treat an aggregate of the network as a blob which can be measured will suffer the same type of problems as an IP over ATM network. There will always be a hidden layer of complexity that will affect your traffic flow and which you cannot influence. For instance, if you look at a graph of point-to-point latency over a pure IP network it will usually be nearly flat with the occasional minor blip caused by a packet being buffered somewhere along the path. But look at the same graph for a path that includes an ATM network in the middle and it will be jumping all over the place, and sometimes you will even see wild oscillations with a regular frequency. The IP layer can do nothing about this but suffer. The same thing will happen with any measurement system that tries to classify a path through someone else's AS. You have no control over what happens in that AS and, more importantly, you have no control over the peering points bewteen ASes. Your measurements are as meaningless as measurements of an IP over ATM network. --Michael Dillon

2 1

RE: Kourou (French Guiana) seacable problem since last week, France telecom
by juan.bontje＠bt.com 27 Jan '04

27 Jan '04

Eric thanks for links information wasn't up to date as they're saying it's an satelitelink who's down, 'owned' (?) by france telecom JC -----Original Message----- From: Eric Kuhnke [mailto:eric@fnordsystems.com] Sent: Tuesday, January 27, 2004 11:07 AM To: Bontje,JC,Juan,IVYF41 C Subject: Re: Kourou (French Guiana) seacable problem since last week, France telecom Are you using capacity on the MAYA-1 or ARCOS cables? https://www.maya-1.com/stations.jsp http://www.nwncable.com/arcos_project/index.htm juan.bontje(a)bt.com wrote: > > Hi > > Anyone aware of an sea cable problem between kourou (French Guiana) and Europe? (France?), since 21jan04 > Unfortunate don't have more sufficient information besides this. > > > TIA > > JC > > > >

1 0

Re: Outbound Route Optimization
by Michael.Dillon＠radianz.com 27 Jan '04

27 Jan '04

>I am going to have to call bullshit on the MPLS fast reroute thing >there Wayne. The canonical counterexample is Sprint. To be sure, Sprint and Ebone have shown that it is possible to run a very high quality (low jitter) pure IP network, but... >Excellent engineering and ops folks top the list, followed closely >by sufficient capacity, This poses a bit of a problem. If we accept that these two things are absolutely necessary in order to run a pure IP network, i.e. no MPLS and no ATM or frame at layer 2, then that leaves out most of the world. By definition, excellent engineering and ops folks are the top minority in their field. If we assume that 10% of engineering and ops folks are "excellent", that means that 90% of network operators are unable to play this game. Also, not everyone has a facilities-based network where they can afford "sufficient" capacity. And last but not least, this whole discussion was about diversity and resilience. I would not be happy to see a network ecosystem in which every network was designed and run like Sprint's network. There is a place for MPLS and in the end, it may even prevail because of its ability to handle multiple best paths and to do fast reroute. The jury is still out on that. --Michael Dillon

1 0