- NANOG - lists.nanog.org

Re: Sunday traffic curiosity
by John Kristoff 22 Mar '20

22 Mar '20

On Sun, 22 Mar 2020 19:17:59 +0000 Grant Taylor via NANOG <nanog(a)nanog.org> wrote: > What was wrong with Internet scale multicast? Why did it get abandoned? There are about 20 years of archives to weed through, and some of our friends are still trying to make this happen. I expect someone (Hi Lenny) to appear any moment and mention AMT. So my take isn't universally accepted, but it won't be too far from what you'll hear from many. Brief summary off the top of my head: 1. Complexity. Both in protocol mechanisms and the requirements in network devices (i.e. snooping, state, troubleshooting). 2. Security. Driven in part by #1, threats abound. SSM can eliminate some of this and you can design a receiver-only model that removes most of the remaining problems - congratulations you just reinvented over the air broadcast TV. Even if you don't do interdomain IP multicast, you still may be at risk: <https://ccronline.sigcomm.org/wp-content/uploads/2017/01/p27-sargent.pdf> 3. Need and business drivers. Still far from compelling to build and support all this to make it worthwhile for all but a few niche environments. Support and expertise in this area is also very thin. Your inquiry demonstrates this. I stopped teaching it to students. What remains is becoming even less well supported than it has been. There is almost no interdomain IP multicast monitoring being done anymore. There is scant actual content being delivered, all the once popular stuff is gone. The number of engineers who know this stuff are dwindling and some that do know something about it are removing at least some parts of it: <https://tools.ietf.org/html/draft-ietf-mboned-deprecate-interdomain-asm-07> John

2 1

China’s Slow Transnational Network
by Pengxiong Zhu 22 Mar '20

22 Mar '20

Hi all, We are a group of researchers at University of California, Riverside who have been working on measuring the transnational network performance (and have previously asked questions on the mailing list). Our work has now led to a publication in Sigmetrics 2020 and we are eager to share some interesting findings. We find China's transnational networks have extremely poor performance when accessing foreign sites, where the throughput is often persistently low (e.g., for the majority of the daytime). Compared to other countries we measured including both developed and developing, China's transnational network performance is among the worst (comparable and even worse than some African countries). Measuring from more than 400 pairs of mainland China and foreign nodes over more than 53 days, our result shows when data transferring from foreign nodes to China, 79% of measured connections has throughput lower than the 1Mbps, sometimes it is even much lower. The slow speed occurs only during certain times and forms a diurnal pattern that resembles congestion (irrespective of network protocol and content), please see the following figure. The diurnal pattern is fairly stable, 80% to 95% of the transnational connections have a less than 3 hours standard deviation of the slowdown hours each day over the entire duration. However, the speed rises up from 1Mbps to 4Mbps in about half an hour. We are able to confirm that high packet loss rates and delays are incurred in the foreign-to-China direction only. Moreover, the end-to-end loss rate could rise up to 40% during the slow period, with ~15% on average. There are a few things noteworthy regarding the phenomenon. First of all, all traffic types are treated equally, HTTP(S), VPN, etc., which means it is discriminating or differentiating any specific kinds of traffic. Second, we found for 71% of connections, the bottleneck is located inside China (the second hop after entering China or further), which means that it is mostly unrelated to the transnational link itself (e.g., submarine cable). Yet we never observed any such domestic traffic slowdowns within China. Assuming this is due to congestion, it is unclear why the infrastructures within China that handles transnational traffic is not even capable to handle the capacity of transnational links, e.g., submarine cable, which maybe the most expensive investment themselves. Here is the link to our paper: https://www.cs.ucr.edu/~zhiyunq/pub/sigmetrics20_slowdown.pdf We appreciate any comments or feedback. -- Best, Pengxiong Zhu Department of Computer Science and Engineering University of California, Riverside

11 25

Fwd: Re: COVID-19 vs. our Networks
by Alexandre Petrescu 21 Mar '20

21 Mar '20

(photo removed, the admins have it, dont ask me in private) -------- Message transféré -------- Sujet : Re: COVID-19 vs. our Networks Date : Sat, 21 Mar 2020 14:20:56 +0100 De : Alexandre Petrescu <alexandre.petrescu(a)gmail.com> Pour : nanog(a)nanog.org LF/HF Le 21/03/2020 à 12:28, Florian Weimer a écrit : > * Mike Hammett: > > [...] > Relaxing copyright and patent restrictions might also help, at least > in the medium term. I agree. Related to copyright and patent restrictions, is this: Currently the situation is that I cant get to see the ARN (acid rybo nucleic) sequence of this virus; the data is present on gisaid.org, situated in Germany, at MAx Planck Institute, but my request to see it did not succeed - silence. FRiends tell me that silence is normal because I am not a specialist, and those who are specialist do have access. I disagree. I want to know what it looks like. This virus with a crown might hurt me as much as it might hurt the specialists, there is no difference, we are all Sapiens. I want to know what it looks like. The only thing I could find is during a TV news report, see below. That sequence of A, T, G, C, and their particular ordering, is what makes it bad bad. That's the enemy. Alex, LF/HF 2 (it means low stress)

1 0

Fwd: Your message to NANOG awaits moderator approval
by Alexandre Petrescu 21 Mar '20

21 Mar '20

-------- Message transféré -------- Sujet : Your message to NANOG awaits moderator approval Date : Sat, 21 Mar 2020 13:21:18 +0000 De : nanog-owner(a)nanog.org Pour : alexandre.petrescu(a)gmail.com Your mail to 'NANOG' with the subject Re: COVID-19 vs. our Networks Is being held until the list moderator can review it for approval. The reason it is being held: Message body is too big: 359842 bytes with a limit of 100 KB Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: https://mailman.nanog.org/mailman/confirm/nanog/373bcb041f05344153379883b27…

1 0

Google and Coronavirus Tech Handbook
by Rob Pickering 20 Mar '20

20 Mar '20

This: https://coronavirustechhandbook.com/home is a super useful resource in my opinion. They are using Google Docs because it provides a really accessible way of doing content creation but hitting capacity issues. Are there any Google contacts here who can get them talking to the right people please? Message me offlist and I will update here when sorted. -- Rob Pickering, rob(a)pickering.org

4 16

Weekly Routing Table Report
by cscora＠apnic.net 20 Mar '20

20 Mar '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 21 Mar, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 801506 Prefixes after maximum aggregation (per Origin AS): 304658 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 391942 Total ASes present in the Internet Routing Table: 67449 Prefixes per ASN: 11.88 Origin-only ASes present in the Internet Routing Table: 57908 Origin ASes announcing only one prefix: 24286 Transit ASes present in the Internet Routing Table: 9541 Transit-only ASes present in the Internet Routing Table: 293 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 35 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 1206 Number of instances of unregistered ASNs: 1206 Number of 32-bit ASNs allocated by the RIRs: 31026 Number of 32-bit ASNs visible in the Routing Table: 25558 Prefixes from 32-bit ASNs in the Routing Table: 117712 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 0 Number of addresses announced to Internet: 2853027456 Equivalent to 170 /8s, 13 /16s and 190 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 594992 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 211614 Total APNIC prefixes after maximum aggregation: 61666 APNIC Deaggregation factor: 3.43 Prefixes being announced from the APNIC address blocks: 0 Unique aggregates announced from the APNIC address blocks: 0 APNIC Region origin ASes present in the Internet Routing Table: 10441 APNIC Prefixes per ASN: 0.00 APNIC Region origin ASes announcing only one prefix: 2890 APNIC Region transit ASes present in the Internet Routing Table: 1554 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5510 Number of APNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 234766 Total ARIN prefixes after maximum aggregation: 107906 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 0 Unique aggregates announced from the ARIN address blocks: 0 ARIN Region origin ASes present in the Internet Routing Table: 18404 ARIN Prefixes per ASN: 0.00 ARIN Region origin ASes announcing only one prefix: 6731 ARIN Region transit ASes present in the Internet Routing Table: 1908 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3190 Number of ARIN addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 227340 Total RIPE prefixes after maximum aggregation: 105346 RIPE Deaggregation factor: 2.16 Prefixes being announced from the RIPE address blocks: 0 Unique aggregates announced from the RIPE address blocks: 0 RIPE Region origin ASes present in the Internet Routing Table: 26949 RIPE Prefixes per ASN: 0.00 RIPE Region origin ASes announcing only one prefix: 11738 RIPE Region transit ASes present in the Internet Routing Table: 3835 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9020 Number of RIPE addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 104557 Total LACNIC prefixes after maximum aggregation: 24326 LACNIC Deaggregation factor: 4.30 Prefixes being announced from the LACNIC address blocks: 0 Unique aggregates announced from the LACNIC address blocks: 0 LACNIC Region origin ASes present in the Internet Routing Table: 9601 LACNIC Prefixes per ASN: 0.00 LACNIC Region origin ASes announcing only one prefix: 2441 LACNIC Region transit ASes present in the Internet Routing Table: 1817 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 7171 Number of LACNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 22022 Total AfriNIC prefixes after maximum aggregation: 4666 AfriNIC Deaggregation factor: 4.72 Prefixes being announced from the AfriNIC address blocks: 0 Unique aggregates announced from the AfriNIC address blocks: 0 AfriNIC Region origin ASes present in the Internet Routing Table: 1381 AfriNIC Prefixes per ASN: 0.00 AfriNIC Region origin ASes announcing only one prefix: 486 AfriNIC Region transit ASes present in the Internet Routing Table: 269 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 26 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 667 Number of AfriNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5364 672 634 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4624 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3367 1331 24 VIETEL-AS-AP Viettel Group, VN 45899 3139 1798 106 VNPT-AS-VN VNPT Corp, VN 7713 2706 831 505 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2549 9043 62 CMNET-GD Guangdong Mobile Communication 4766 2294 11102 562 KIXS-AS-KR Korea Telecom, KR 9498 2255 434 221 BBIL-AP BHARTI Airtel Ltd., IN 4755 2138 441 193 TATACOMM-AS TATA Communications formerl 9394 2039 4898 24 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4056 270 646 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3929 7822 1736 AMAZON-02, US 22773 3534 2969 152 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3373 1324 92 SHAW, CA 16625 2988 1566 2136 AKAMAI-AS, US 209 2393 5076 534 CENTURYLINK-US-LEGACY-QWEST, US 30036 2320 359 120 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2291 2941 1631 FRONTIER-FRTR, US 26484 2181 136 177 IKGUL-26484, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5920 1599 131 UNI2-AS, ES 31334 4099 484 13 KABELDEUTSCHLAND-AS, DE 39891 3776 203 20 ALJAWWALSTC-AS, SA 8551 3106 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2923 461 2005 AKAMAI-ASN1, US 12389 2498 2250 727 ROSTELECOM-AS, RU 9009 2081 219 1129 M247, GB 34984 2072 349 561 TELLCOM-AS, TR 9121 1922 1691 18 TTNET, TR 13188 1605 100 43 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6329 3307 599 Uninet S.A. de C.V., MX 10620 3362 532 475 Telmex Colombia S.A., CO 11830 2671 369 63 Instituto Costarricense de Electricidad 6503 1674 327 389 Axtel, S.A.B. de C.V., MX 7303 1555 1028 261 Telecom Argentina S.A., AR 28573 1364 2240 198 CLARO S.A., BR 13999 1244 477 305 Mega Cable, S.A. de C.V., MX 6147 1126 378 52 Telefonica del Peru S.A.A., PE 3816 1094 567 142 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 955 112 69 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1510 393 22 LINKdotNET-AS, EG 24835 1102 570 24 RAYA-AS, EG 36992 1082 1537 74 ETISALAT-MISR, EG 36903 880 455 88 MT-MPLS, MA 6713 591 1863 34 IAM-AS, MA 29571 590 68 11 ORANGE-COTE-IVOIRE, CI 37342 482 32 1 MOVITEL, MZ 36935 385 522 40 Vodafone-, EG 23889 379 231 15 MauritiusTelecom, MU 15399 356 45 10 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6329 3307 599 Uninet S.A. de C.V., MX 12479 5920 1599 131 UNI2-AS, ES 7545 5364 672 634 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4624 4192 73 ERX-CERNET-BKB China Education and Rese 31334 4099 484 13 KABELDEUTSCHLAND-AS, DE 11492 4056 270 646 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3929 7822 1736 AMAZON-02, US 39891 3776 203 20 ALJAWWALSTC-AS, SA 22773 3534 2969 152 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5920 5789 UNI2-AS, ES 7545 5364 4730 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4624 4551 ERX-CERNET-BKB China Education and Research Net 31334 4099 4086 KABELDEUTSCHLAND-AS, DE 7155 4034 4006 VIASAT-SP-BACKBONE, US 39891 3776 3756 ALJAWWALSTC-AS, SA 11492 4056 3410 CABLEONE, US 22773 3534 3382 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3367 3343 VIETEL-AS-AP Viettel Group, VN 6327 3373 3281 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 27205 UNALLOCATED 8.38.16.0/21 6461 ZAYO-6461, US 27205 UNALLOCATED 8.38.16.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 27205 UNALLOCATED 8.38.20.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 14109 UNALLOCATED 8.38.252.0/24 3356 LEVEL3, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:98 /12:285 /13:578 /14:1160 /15:1907 /16:13360 /17:8110 /18:13840 /19:25772 /20:40409 /21:47802 /22:99305 /23:81999 /24:465540 /25:1282 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5759 5920 UNI2-AS, ES 8151 4948 6329 Uninet S.A. de C.V., MX 31334 4088 4099 KABELDEUTSCHLAND-AS, DE 7155 3900 4034 VIASAT-SP-BACKBONE, US 11492 3878 4056 CABLEONE, US 16509 3808 3929 AMAZON-02, US 39891 3776 3776 ALJAWWALSTC-AS, SA 22773 3423 3534 ASN-CXA-ALL-CCI-22773-RDC, US 7545 3365 5364 TPG-INTERNET-AP TPG Telecom Limited, AU 6327 3282 3373 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1568 2:1110 3:30 4:19 5:3309 6:51 8:1384 9:1 11:1 12:1790 13:497 14:2256 15:73 16:9 17:294 18:79 20:78 23:3400 24:2282 25:4 27:2510 31:3031 32:103 34:1 35:40 36:931 37:3289 38:1936 39:327 40:126 41:3466 42:696 43:2111 44:195 45:13918 46:3702 47:277 49:1430 50:1213 51:86 52:1112 54:270 55:693 56:6 57:48 58:1870 59:1142 60:705 61:2221 62:2242 63:1944 64:5068 65:2318 66:4875 67:2881 68:1219 69:3795 70:1431 71:675 72:2762 74:2606 75:1437 76:667 77:2599 78:1959 79:2316 80:1888 81:1591 82:1263 83:1128 84:1208 85:2509 86:549 87:1723 88:1100 89:2696 90:313 91:7604 92:1477 93:2513 94:2634 95:3781 96:1009 97:338 98:967 99:961 100:86 101:1085 102:849 103:23394 104:3404 105:410 106:836 107:1956 108:706 109:3681 110:1791 111:2028 112:1581 113:1398 114:1537 115:1867 116:1794 117:2067 118:2132 119:1710 120:845 121:1042 122:2410 123:1900 124:1559 125:2043 128:1376 129:903 130:631 131:1807 132:762 133:301 134:1222 135:275 136:602 137:845 138:2170 139:1000 140:602 141:928 142:890 143:1203 144:975 145:330 146:1483 147:1020 148:2071 149:1151 150:817 151:1285 152:1489 153:373 154:4741 155:908 156:3405 157:1079 158:796 159:1953 160:1879 161:1018 162:3051 163:792 164:1465 165:1253 166:544 167:1628 168:3665 169:505 170:4289 171:762 172:1899 173:2396 174:1031 175:1020 176:2707 177:4210 178:2975 179:1476 180:2157 181:2460 182:3094 183:1116 184:2414 185:16269 186:3735 187:2661 188:4102 189:2171 190:8472 191:1434 192:10259 193:7386 194:6050 195:4297 196:3491 197:1922 198:6127 199:5920 200:7168 201:5103 202:10496 203:10132 204:4559 205:3089 206:3232 207:3285 208:4030 209:4380 210:4034 211:1997 212:3237 213:3054 214:1175 215:54 216:5923 217:2379 218:875 219:602 220:1996 221:909 222:998 223:1491 End of report

1 0

Anyone from Zoom video conferencing on the list?
by Mike Lyon 20 Mar '20

20 Mar '20

If so, please contact me off-list. Thank You, Mike

2 1

CISA: Guidance on the Essential Critical Infrastructure Workforce
by Sean Donelan 19 Mar '20

19 Mar '20

The U.S. Cyber and Infrastructure Security Agency (part of the U.S. Department of Homeland Security) has issued new Guidance on the Essential Critical Infrastructure Workforce. The memorandum is advisory, not presecriptive. DHS is only one of several agencies assigned some National Essential Functions so it is not exhaustive list. It looks like someone found the three-ring emergency plan binders. Sad its needed, but appreciative of the experts which helped write those planning documents over the years. https://www.cisa.gov/publication/guidance-essential-critical-infrastructure -workforce [...] The attached list identifies workers who conduct a range of operations and services that are essential to continued critical infrastructure viability, including staffing operations centers, maintaining and repairing critical infrastructure, operating call centers, working construction, and performing management functions, among others. The industries they support represent, but are not necessarily limited to, medical and healthcare, telecommunications, information technology systems, defense, food and agriculture, transportation and logistics, energy, water and wastewater, law enforcement, and public works. We recognize that State, local, tribal, and territorial governments are ultimately in charge of implementing and executing response activities in communities under their jurisdiction, while the Federal Government is in a supporting role. As State and local communities consider COVID-19-related restrictions, CISA is offering this list to assist prioritizing activities related to continuity of operations and incident response, including the appropriate movement of critical infrastructure workers within and between jurisdictions. Accordingly, this list is advisory in nature. It is not, nor should it be considered to be, a federal directive or standard in and of itself. [...]

2 1

DHS letters for fuel and facility access
by Sean Donelan 19 Mar '20

19 Mar '20

On some other mailing lists, FCC licensed operators are reporting they have received letters from the Department of Homeland Security authorizing "access" and "fuel" priority. Occasionally, DHS issues these letters after natural disasters such as hurricanes for hospitals and critical facilities. I haven't heard of them issued for pandemics.

17 28

UDP/123 policers & status
by Jared Mauch 19 Mar '20

19 Mar '20

I’m curious what people are seeing these days on the UDP/123 policers in their networks. I know while I was at NTT we rolled some out, and there are a number of variants that have occurred over the past 6-7 years. I’ve heard from people at the NTP Pool as well as having observed some issues with NTP at Akamai and time sync from time to time. Are you still seeing a lot of NTP attacks in your flows these days? Should we be looking to remove these, similar to how we did for SQL/Slammer after a time? - Jared

8 11