- NANOG - lists.nanog.org

Yahoo Hacked?
by David McGaugh 20 Mar '02

20 Mar '02

whois -h whois.internic.net yahoo.com Whois Server Version 1.3 Domain names in the .com, .net, and .org domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. YAHOO.COM.REALLY.NEEDS.TO.GET.A.CLUE.AT.JIMPHILLIPS.ORG YAHOO.COM.IS.TRYING.TO.STEAL.YAHOO.VU.HOW.ACIDULOUS.COM YAHOO.COM.IS.NOT.CANADIAN.ORG YAHOO.COM.BR YAHOO.COM.AND.SAFESEARCH.COM.AINT.NOTHING.COMPARED.TO.SHEEPSTER.COM YAHOO.COM.AINT.NOTHIN.COMPARED.TO.SAFESEARCH.COM YAHOO.COM To single out one record, look it up with "xxx", where xxx is one of the of the records displayed above. If the records are the same, look them up with "=xxx" to receive a full display for each record. >>> Last update of whois database: Tue, 19 Mar 2002 17:10:53 EST <<< The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and Registrars.

7 7

Re: Internet Exchange Questions
by Jon Bennett 20 Mar '02

20 Mar '02

> you may want to investigate the likely impact of the > "strategic peering initative". this will surely > have an > influence on where smaller providers decide to > maintain > a presence. this, in turn, will dictate which ixp > locations/companies will survive. > Does anyone have any new information on this initiative, like who was chosen and where? Any ideas on the specific impact to the existing ixp? I have not been able to find any new information since a very lively NANOG discussion on the topic last July. __________________________________________________ Do You Yahoo!? Yahoo! Sports - live college hoops coverage http://sports.yahoo.com/

1 0

(no subject)
by Susan Hares 20 Mar '02

20 Mar '02

Still have more work on the design document. Sue

1 0

Remote hands in NY?
by Krohn, Kjell 20 Mar '02

20 Mar '02

Hi all, UPC Technology has two pops in 111 8th Avenue in NY, as well as one in 25 Broadway. We are currently trying to find a good way of organizing remote hands over there, for invasive as well as non-invasive work on our Cisco routers. Basically getting somebody who is clued up and that can help us with whatever can happen with a Cisco router, on a 24/7 basis... =) Any pointers that anybody would have to good help in this area, or how you guys have solved this, would be greatly appreciated! Thanks, Kjell ******************************************************* Kjell I. Krohn, Senior network design engineer, IP engineering department, UPC Technology, Gebouw D2, Boeing Avenue 101, NL-1119 PE Schiphol-Rijk, Amsterdam, The Netherlands. ==--==--==--==--==--==--==--==--==--==--==--==--==--==- -=I route, therefore you are=-

1 0

Typical Customer Profiles
by Curtis Owings 20 Mar '02

20 Mar '02

Has anyone published something like "Neilson Ratings" for Internet use? Something that would show how much time a customer spends using their Internet connection, how much they download and speed they commonly get/expect? I would be interested in breaking these questions out for a dialup user, cable modem user, DSL user and then home use vs. small business use. Pointers to some or all of this information would be appreciated. ~Curt

11 13

Re: Trap and Syslog Query
by Matt Duggan 20 Mar '02

20 Mar '02

Thanks for the reply Jake, most useful... [snip] MD> Q3. What do you expect the real figures to be based upon the network MD> operating normally and what, from your experience, are they likely to be MD> under fault conditions? JK>I'm not sure I can provide an accurate answer to JK>that. There are too many variables and unknowns [to JK>me] about your network. Ah, ok... I am trying to think in generic terms. I agree with your statement though, basically it's a case of 'how long is a piece of string'. It would be interesting to know if there are any consistent properties regardless of network size and content. Perhaps CAIDA/NLANR or someone have done a study? [snip] ta, Matt. _________________________________________________________________ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com

1 0

Trap and Syslog Query
by Matt Duggan 20 Mar '02

20 Mar '02

Hi Everyone, Could anyone help with the following scenario and associated questions... Imagine you have a network consisting of 10,000 elements split into 1,000 devices and 9,000 interfaces. For arguments sake assume the following:- 1. The maximum number traps that the management platform will receive is 200 per second and the typical number of traps is 10 per second. 2. For Syslog - assume we have 4 syslog servers (250 devices per server) that receive a maximum of 10 messages per second per server and a typical 1 message per second per server 3. The devices are using 'out of the box' trap and syslog settings in terms of what they send. Q1. What do you think will be the percentage of 'useful' traps from a fault management perspective? Of course it all depends upon what you are interested in and what the network is doing but some thoughts about the volume of useful traps and what those traps are would be really useful :) Q2. Same question as Q1 but for syslog. Q3. What do you expect the real figures to be based upon the network operating normally and what, from your experience, are they likely to be under fault conditions? Q4. What, again from your experience, devices send the most traps and syslog messages? - is it that a particular manufacturer are particularly trap-heavy for example? Any thoughts or advice would be most appreciated. regards, Matt. _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx

2 1

[admin@orbz.org: [ORBZ-Secondary] Shutdown]
by Len Rose 20 Mar '02

20 Mar '02

FYI ----- Forwarded message from ORBZ <admin(a)orbz.org> ----- Mailing-List: contact secondary-help(a)orbz.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:secondary@orbz.org> List-Help: <mailto:secondary-help@orbz.org> List-Unsubscribe: <mailto:secondary-unsubscribe@orbz.org> List-Subscribe: <mailto:secondary-subscribe@orbz.org> Delivered-To: mailing list secondary(a)orbz.org Date: Wed, 20 Mar 2002 03:20:25 +0000 From: ORBZ <admin(a)orbz.org> To: secondary(a)orbz.org User-Agent: Mutt/1.3.22.1i X-Operating-System: Linux zeus.penguinhosting.net 2.4.18-pre7-ac3 Subject: [ORBZ-Secondary] Shutdown Here's the email that those of you with forward sight have been fearing since the inception of ORBZ. As of this moment, ORBZ is shutting down. DNS zones are going to stop resolving, the website will disappear and mail will stop working (so furthur discussion on this list probably won't work -- use NANAE). I don't want to disappear in silence like ORBS, so I'll try for as much description as possible without compromising my own position. I received an official court notice this afternoon to turn over all information relation to ORBZ accounts. This came from the 10th Judicial District court of the State of Michigan. It appears that ORBZ may be facing criminal charges for denial of service relating to the Lotus Domino issue. I was happy to try to weather any civil issues that may have come up, and I was committed to seeing it through. However, the threat of jail time is too much; I don't believe in this fight quite that much. Thank you all for all your support. I sincerely hope that someone with the goal of carrying on the mission of ORBZ pops up in another country with a less foreboding legal system. Anyone who has copies of the current zones may do with them what they wish. For those of you stuck without good spam filtering, please consider ORDB and SpamCop; they both provide excellent free solutions. Ian Gulliver ORBZ ---------------------------------------------- This message was sent to the ORBZ secondary name server access list. If you do not want to receive these messages, please send mail to secondary-unsubscribe(a)orbz.org. ----- End forwarded message -----

1 0

[admin@orbz.org: [ORBZ-Secondary] Shutdown]
by Len Rose 20 Mar '02

20 Mar '02

FYI ----- Forwarded message from ORBZ <admin(a)orbz.org> ----- Mailing-List: contact secondary-help(a)orbz.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:secondary@orbz.org> List-Help: <mailto:secondary-help@orbz.org> List-Unsubscribe: <mailto:secondary-unsubscribe@orbz.org> List-Subscribe: <mailto:secondary-subscribe@orbz.org> Delivered-To: mailing list secondary(a)orbz.org Date: Wed, 20 Mar 2002 03:20:25 +0000 From: ORBZ <admin(a)orbz.org> To: secondary(a)orbz.org User-Agent: Mutt/1.3.22.1i X-Operating-System: Linux zeus.penguinhosting.net 2.4.18-pre7-ac3 Subject: [ORBZ-Secondary] Shutdown Here's the email that those of you with forward sight have been fearing since the inception of ORBZ. As of this moment, ORBZ is shutting down. DNS zones are going to stop resolving, the website will disappear and mail will stop working (so furthur discussion on this list probably won't work -- use NANAE). I don't want to disappear in silence like ORBS, so I'll try for as much description as possible without compromising my own position. I received an official court notice this afternoon to turn over all information relation to ORBZ accounts. This came from the 10th Judicial District court of the State of Michigan. It appears that ORBZ may be facing criminal charges for denial of service relating to the Lotus Domino issue. I was happy to try to weather any civil issues that may have come up, and I was committed to seeing it through. However, the threat of jail time is too much; I don't believe in this fight quite that much. Thank you all for all your support. I sincerely hope that someone with the goal of carrying on the mission of ORBZ pops up in another country with a less foreboding legal system. Anyone who has copies of the current zones may do with them what they wish. For those of you stuck without good spam filtering, please consider ORDB and SpamCop; they both provide excellent free solutions. Ian Gulliver ORBZ ---------------------------------------------- This message was sent to the ORBZ secondary name server access list. If you do not want to receive these messages, please send mail to secondary-unsubscribe(a)orbz.org. ----- End forwarded message -----

1 0

[mattc@guarded.net: Major DNS cache poisoning at Verisign/WorldNIC]
by Alan Clegg 20 Mar '02

20 Mar '02

----- Forwarded message from "Matthew F. Caldwell" <mattc(a)guarded.net> ----- Date: Tue, 19 Mar 2002 14:18:56 -0500 From: "Matthew F. Caldwell" <mattc(a)guarded.net> Subject: Major DNS cache poisoning at Verisign/WorldNIC To: <incidents(a)securityfocus.com> Just to let everyone know, there has been some major DNS cache poisoning going on at Verisign apparently done by some Brazilians ("Web Pirates") for web site defacements. If your parking your DNS at worldnic.com (netsol/verisign) you might want to see if you site has been redirected to 64.225.154.175 (owned by Interland of Atlanta) using random DNS servers. Don't you love UDP. Matthew F. Caldwell, CISSP Chief Security Officer GuardedNet, Inc ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----- End forwarded message -----

1 0