- NANOG - lists.nanog.org

(fwd) [Oz-ISP] USG takes control of xpnder off PAS-2
by Rachel Warren 21 Sep '01

21 Sep '01

I thought this might interest NANOG: ---------- Forwarded message ---------- Date: Fri, 21 Sep 2001 18:11:39 +1000 (EST) From: Terence <terry(a)tdce.com.au> To: aussie-isp(a)aussie.net Cc: AusBONE Members <ausbone-members(a)ausbone.tdce.com.au> Subject: [Oz-ISP] USG takes control of xpnder off PAS-2 Well, there must be a big war coming up, because the US govmint just appropriated our PAS-2 transponder, effectively shutting down our regional operations on October 15. I'm more than happy for journalists to call me. I may be sympathetic to the USG over terrorism, but they can't go around putting AUSTRALIAN REGIONAL ISP's out of business... --- Terence C. Giufre-Sweetser +---------------------------------+--------------------------+ | TereDonn Telecommunications Ltd | Phone +61-[0]7-32369366 | | 1/128 Bowen St, SPRING HILL | FAX +61-[0]7-32369930 | | PO BOX 1054, SPRING HILL 4004 | Mobile +61-[0]414-663053 | | Queensland Australia | http://www.tdce.com.au | +---------------------------------+--------------------------+ Rachel -- http://www.plur.net/~rachel/misc/stock-market-nasdaq.jpg

1 0

Nimda Scanner tool--finds infected/vulnerable hosts
by Murphy, Brennan 21 Sep '01

21 Sep '01

Hope I'm not late in the game on this one. But I found a tool advertised as able to scan for machines that are either infected or vulnerable to infection from the Nimda worm/virus. http://www.eeye.com/html/Research/Tools/nimda.html >From the website: "The Retina Nimda Scanner is a tool created by eEye Digital Security that is able to scan up to 254 IP addresses at once and determine if any are vulnerable to the "Nimda Worm". If a machine or server is found to be vulnerable to the Nimda Worm, the Retina Nimda Scanner will flag the IP address. " Hope someone finds this useful. I have no affiliation with eEye. -BM

1 0

Checking visitors entering your facility
by Sean Donelan 21 Sep '01

21 Sep '01

A major carrier has missplaced several of its service vehicles. There is some concern they may have been stolen. So you may want to double-check vendor ID's of service personnel accessing your facilities.

12 13

Disaster recovery..
by D2 21 Sep '01

21 Sep '01

Hey folks. I have been commissioned to research disaster recovery after the effects of Sept 11 on the major IP networks for an article in UK trade Magazine ISP World. Presumably any further dialog may be best kept out of NANOG lists, so please reply direct to me (unless you guys feel discussion here is relevant) at d2(a)d2consulting.co.uk I was wondering if any wizards may have some quotable comments etc as to what (if anything) occurred that day to the Internet, and what was done to rectify any problems... Any feedback would be warmly received, Thanks in advance Dom Dom Robinson : D2 Consulting ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'data in motion' ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ IP Distribution Consultancy eMail: d2(a)d2consulting.co.uk www.d2consulting.co.uk (Also for Global-MIX ltd and ISP World Magazine)

1 0

Stats/Maps of Sept 11 Backbone Traffic?
by Anthony Townsend 21 Sep '01

21 Sep '01

Hi - is anyone aware of any maps, statistics or diagrams that have been released about backbone operations on September 11. We are conducting a study of NYC's telecom system performance during and after the disaster and would love to have this kind of data if any list subscribers know of sources or can provide it. Thanks Anthony Townsend ===== Anthony Townsend Taub Urban Research Center New York University email: anthony.townsend(a)nyu.edu tel: 212-998-7502 SMS: anthony(a)voicestream.net (140 chars max) Yahoo Messenger: townsnda __________________________________________________ Terrorist Attacks on U.S. - How can you help? Donate cash, emergency relief information http://dailynews.yahoo.com/fc/US/Emergency_Information/

1 0

RE: route-map match clause for existance of a BGP session?
by Bulger, Tim 21 Sep '01

21 Sep '01

Several people have requested that I post my findings.. The idea here was to utilize multiple transit providers as backup paths for VPN connectivity between remote locations by redistributing static host routes into the IGP based on the availability of a particular peer. Initially, the route announcements for each location were not being advertised to us by our peers at each other location, which made looking for the specific announcement difficult, hence my question about looking specifically for the presence of the session. Correcting for this made it simple to implement a standard route-map that looks for the announcement itself, rather than the session. route-map VPNpath match ip address prefix-list Site1 match ip route-source 10 set metric 50 router ospf 1 redistribute static subnets route-map VPNpath When latency or packet loss or what-have-you are affecting a provider, but the announcement is still present, it is simple to go to the router with the best connectivity and tweak the metric value to prefer that path. I know that there are multiple other ways of achieving the same results, but I kinda like this one. :) Thanks again, Tim -----Original Message----- From: Bulger, Tim [mailto:TBulger@ea.com] Sent: Thursday, September 20, 2001 6:13 PM To: 'nanog(a)merit.edu' Subject: RE: route-map match clause for existance of a BGP session? Thanks all for the replies.. I managed to find a solution that works for my purpose. -----Original Message----- From: Bulger, Tim [mailto:TBulger@ea.com] Sent: Thursday, September 20, 2001 10:25 AM To: 'nanog(a)merit.edu' Subject: route-map match clause for existance of a BGP session? Sorry for the non-operational content, but looking for some Cisco advice. Does anyone happen to know a trick for a route map match clause that will only match if a BGP session is established with a given peer? The idea being to only redistribute a particular static route based on the availability of the peer through which the next hop of the static would be configured... Thanks in advance, Tim

1 0

BGP Instabilities and Worm Propagation?
by Tim Griffin 21 Sep '01

21 Sep '01

See http://www.renesys.com/projects/bgp_instability for data showing that there may be a correlation between worm propagation and BGP routing instabilities. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Timothy G. Griffin AT&T Labs Research 973 360 7238 http://www.research.att.com/~griffin ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

DS3 encapsulated in OC3c?
by Simon Lockhart 21 Sep '01

21 Sep '01

All, I'm about to bring up a transatlantic 622M circuit, and am stuck with an annoying SDH/SONET problem. We use the Cisco 15454 SONET mux on our network, and although we'd ordered a SONET OC12 circuit, we've since been told that it'll actually be an SDH STM-4 circuit. This shouldn't be a problem, as the carrier can convert from SDH to SONET at their handoff, or we can convert from SDH to SONET on the way into the 15454. However, unfortunately both solutions leave us in the situation where the smallest SONET unit we can use is an STS-3c - and we need at least one DS3 circuit running over this. So, I'm stuck trying to carry a DS3 in an STS-3c carrier (or, another similar solution). Does anyone have any suggestions for a "cheap" box that will do this - without getting into buying a full SDH mux? Thanks, Simon -- Simon Lockhart | Tel: +44 (0)1737 839676 Internet Engineering Manager | Fax: +44 (0)1737 839516 BBC Internet Services | Email: Simon.Lockhart(a)bbc.co.uk Kingswood Warren,Tadworth,Surrey,UK | URL: http://support.bbc.co.uk/

2 1

how are backups implemented?
by Ratul Mahajan 21 Sep '01

21 Sep '01

[posting this message after having looked for answers elsewhere including the archives, but found no satisfactory answers] i wanted to ask the operations community about how backups are typically implemented. i am more interested in backup implementations, in which a failure would expose a different origin AS (this would exclude prepending based backups). 1. when a network is multihomed, and one of the links fails, would you expect a smooth transition (as seen in the bgp tables of a remote AS) from one origin AS to another (modulo convergence effects)? 2. can a failure (anywhere in the network) ever expose another origin AS for some AS's while it stays the same for some? i guess it can, when the network is being persistently announced from both origins, and under normal scenario one origin could be hidden from some AS's. would this also hold for a routing table as rich as routeviews? 3. can a failure ever cause more-specifics with a different (from the origin of the less-specific) origin AS to appear (again, as seen from a remote AS)? this might depend on how backups are implemented - so what i am asking is, is this a common/possible case? thanks, -- ratul

2 2

RE: route-map match clause for existance of a BGP session?
by Bulger, Tim 21 Sep '01

21 Sep '01

Thanks all for the replies.. I managed to find a solution that works for my purpose. -----Original Message----- From: Bulger, Tim [mailto:TBulger@ea.com] Sent: Thursday, September 20, 2001 10:25 AM To: 'nanog(a)merit.edu' Subject: route-map match clause for existance of a BGP session? Sorry for the non-operational content, but looking for some Cisco advice. Does anyone happen to know a trick for a route map match clause that will only match if a BGP session is established with a given peer? The idea being to only redistribute a particular static route based on the availability of the peer through which the next hop of the static would be configured... Thanks in advance, Tim

1 0