- NANOG - lists.nanog.org

Anything special with 172.31.0.0/24?
by Pim van Riezen 09 Feb '01

09 Feb '01

This sort of stuff really gets me puzzled. Why would anyone use IANA reserved space for probes, if the path back to respond to these probes will end up in the drain anyway? And why do I see so many from 172.31.0.0/24? Is this a Wintendo doing 7 bit over ethernet thinking it is multicasting?:) I'm wondering if anyone else is seeing more strange traffic from this particular range and/or has a theory. Cheers, Pi ============================================================================ Firewall report for 172.31.0.128 ============================================================================ [whois.radb.net] % No entries found for the selected source(s). ---------------------------------------------------------------------------- History summary for the source network ---------------------------------------------------------------------------- Total incidents from BLK-172.31.0 : 14 Total hosts from BLK-172.31.0 : 9 Total matched packets : 63 Avg incidents/month : 4.77 ---------------------------------------------------------------------------- Log events recorded in CET(GMT+0100) ntp-synched ---------------------------------------------------------------------------- Feb 9 10:37:52 rot-00-border access-list 102 deny ethernet0 tcp 172.31.0.128:8080 62.250.1.2:3199 L=40 S=0x00 I=295 ---------------------------------------------------------------------------- Local network resources ---------------------------------------------------------------------------- 62.250.1.2 jones.lab.madscience.nl ---------------------------------------------------------------------------- Incident history for BLK-172.31.0 ---------------------------------------------------------------------------- 01/30/01 172.31.0.121 01/31/01 172.31.0.121 01/31/01 172.31.0.122 01/31/01 172.31.0.124 01/31/01 172.31.0.54 02/03/01 172.31.0.122 02/03/01 172.31.0.58 02/04/01 172.31.0.127 02/08/01 172.31.0.121 02/08/01 172.31.0.124 02/08/01 172.31.0.127 02/08/01 172.31.0.55 02/08/01 172.31.0.56 02/09/01 172.31.0.128

1 0

Dotted lines on carriers maps
by Sean Donelan 09 Feb '01

09 Feb '01

Time to check the DLR's again. You know that dotted line on the map for your redudandent backup. Guess what the dotted line means? >From IDG.NET The China-U.S. Cable Network began operation in January 2000 with landings in California, South Korea, Japan, Taiwan and Guam. A second leg, which will create a loop and provide backup in case of a failure, is still under construction

1 0

outages as confidential information
by Sean Donelan 09 Feb '01

09 Feb '01

Last summer, some folks may remember I commented on the practice of CAISO not saying which plant tripped off-line leading to various stages of emergency during the summer. Several folks replied it was competitve information, and it would be illegal to release the information. The State of California has now ordered the California ISO to post daily lists, including the names, of power plants off-line for scheduled or unscheduled outages. Further the Governer has ordered utlities to provide advance notice to CAISO of future scheduled power plant shutdowns.

1 0

Re: Cisco Flash help needed
by Sean Donelan 09 Feb '01

09 Feb '01

On Fri, 09 February 2001, Randy Bush wrote: > > What is the MTBF for a microdrive exposed to a carrier-grade > > environment? > > and is it as good as when exposed to a reasonable environment? True, as you know, a "carrier-grade environment" can be pretty bad. I might as well ask, What is the MTBF after being exposed to the UPS shipping environment. Historically, the reason why I've tried to keep rotating storage media out of my critical POP equipment it requires too much maintenance. I'm old enough to remember routers with evil boot floppies. For non-critical stuff, like billing and accounting servers, rotating media is fine (speaking as a network geek, not an accounting geek). But maybe these microdrives are tough enough. I'm open to changing my mind.

4 3

The Cidr Report
by Tony Bates 09 Feb '01

09 Feb '01

This is an auto-generated mail on Fri Feb 9 12:00:00 PST 2001 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 09Feb01 0) General Status Table History ------------- Date Prefixes 020201 96787 030201 96701 040201 96815 050201 96681 060201 96726 070201 96978 080201 97041 090201 97137 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 91.16.23.0/24 from AS11770 *** Bogus 103.22.7.0/24 from AS9768 AS Summary ---------- Number of ASes in routing system: 9841 Number of ASes announcing only one prefix: 5753 (3257 cidr, 2496 classful) Largest number of cidr routes: 954 announced by AS701 Largest number of classful routes: 1649 announced by AS701 1) Gains by aggregating at the origin AS level --- 09Feb01 --- ASnum NetsNow NetsCIDR NetGain % Gain Description For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: Cisco Flash help needed
by Sean Donelan 09 Feb '01

09 Feb '01

On Fri, 09 February 2001, Simon Lockhart wrote: > > And then, of course, there's the 1Gb IBM Microdrive. > What is the MTBF for a microdrive exposed to a carrier-grade environment?

3 2

news story about the fiber cut off China
by Steve Bellovin 09 Feb '01

09 Feb '01

http://www.cnn.com/2001/TECH/internet/02/09/asia.cable/index.html --Steve Bellovin, http://www.research.att.com/~smb

1 0

Hinet.net/Asia-Taiwan outage?
by Michael C . Wu 09 Feb '01

09 Feb '01

Today around 5pm Central Time, everything from *.tw stopped responding. And hinet.net, (something like Asia's Abovenet), stopped responding. Does anybody know anything about this outage? P.S. I want to say that Hinet.net is extremely clueless. We've been crying for their routers to resolve for years, and they refuse to do it. In addition, the email/usenet spams, open relays, etc. from *.hinet.net official services are at absurdly high levels.. -- +------------------------------------------------------------------+ | keichii(a)peorth.iteration.net | keichii(a)bsdconspiracy.net | | http://peorth.iteration.net/~keichii | Yes, BSD is a conspiracy. | +------------------------------------------------------------------+

2 2

Re: network equipment vendors and social responsibility
by Frank Jimenez 08 Feb '01

08 Feb '01

Just to clarify, the product mentioned in the article is Websense. Websense is not a Cisco product. (In fact, it's not even listed in Cisco's price list...) A quick glance at http://www.websense.com/ indicates that integration is offered with over 18 different firewalling products, not just Cisco's PIX. While I may or may not agree with China's politics, I think that to lay this issue at Cisco's doorstep may be a bit much. Frank Jimenez, CCIE #5738 Systems Engineer Cisco Systems, Inc. franjime(a)cisco.com

5 4

single NIC stats monitoring tool
by Andy Grosser 08 Feb '01

08 Feb '01

Hi there, I realize this is probably a little simplistic for this list, but a colleague asked me if I knew of a tool that would monitor real-time traffic going through a box's NIC card. I know there's NT's performance monitor, but that seems more useful for things like CPU utilization. I used perfmon (or something like that) on Solaris some time ago, but this person's interested in running stats on his 3C905 card on his NT box. The 3Com site wasn't very helpful. Please reply off-list. And I promise I'll cease the inane questions. :-) Thanks in advance. --- Andy Grosser andy(a)conrad.harvard.edu (The above comments are my own; Harvard University claims no responsibility for them.) ---

1 0