- NANOG - lists.nanog.org

CERT/CC reports Y2K incident
by Sean Donelan 31 Dec '99

31 Dec '99

CERT/CC has posted on their public web page, they have one report of a Y2K incident. Has anyone heard any public information what happened for it to be classified as a Y2K incident, as opposed to one of the typical CERT categories (i.e. DoS, probe, intrusion, etc). I'm asking, because as you know, CERT/CC is always very closed-mouth about the specifics of any incident. But sometimes someone knows a bit of public information about an incident. Nevertheless, I expect Randy to ask why I didn't ask CERT/CC.

1 0

[root@iran.com: servers in tehran/iran ok in y2k]
by Jim Mercer 31 Dec '99

31 Dec '99

as an indicator for iran. the facilities use satelite links via teleglobe/intelsat. internal links use facilities of the Iranian PTT. ----- Forwarded message from Superuser <root(a)iran.com> ----- Date: Sat, 1 Jan 2000 01:15:07 +0330 (IRT) From: root(a)iran.com (Superuser) To: jim(a)reptiles.org Subject: servers in tehran/iran ok in y2k links are all up. no outages or faults. routers are all up. no outages or faults. servers are all up. no outages or faults. x.25 links are working. no outages or faults. dialup links are working. no outages or faults. ----- End forwarded message ----- -- [ Jim Mercer jim(a)reptiles.org +1 416 506-0654 ] [ Reptilian Research -- Longer Life through Colder Blood ] [ Don't be fooled by cheap Finnish imitations; BSD is the One True Code. ]

1 0

The Cidr Report
by Tony Bates 31 Dec '99

31 Dec '99

This is an auto-generated mail on Fri Dec 31 12:00:00 PST 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 31Dec99 0) General Status Table History ------------- Date Prefixes 241299 69384 251299 69404 261299 69325 271299 69066 281299 69066 291299 69048 301299 69139 311299 68794 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 219.91.160.0/22 from AS7742 *** Bogus 219.91.164.0/23 from AS7742 AS Summary ---------- Number of ASes in routing system: 6346 Number of ASes announcing only one prefix: 3404 (1871 cidr, 1533 classful) Largest number of cidr routes: 676 announced by AS701 Largest number of classful routes: 957 announced by AS701 1) Gains by aggregating at the origin AS level --- 31Dec99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 383 141 242 63.2% BCnet Backbone AS7046 398 260 138 34.7% UUNET-CUSTOMER AS9269 134 21 113 84.3% Hong Kong CTI AS1221 636 525 111 17.5% TELSTRA-AS AS2609 124 20 104 83.9% EUnet-TN AS7657 281 182 99 35.2% The Internet Group Limited AS7545 153 60 93 60.8% TPG Internet Pty Ltd AS1653 129 38 91 70.5% SUNET Swedish University Network AS4293 238 150 88 37.0% Internal ASN for C&W AS6429 198 117 81 40.9% RDC-INTERNET AS174 550 469 81 14.7% Performance Systems International AS577 258 180 78 30.2% Bell Canada Backbone AS7496 111 36 75 67.6% Power Up AS9706 101 28 73 72.3% Pusan Metropolitan City Office of AS3749 128 57 71 55.5% TECNET AS705 237 171 66 27.8% ALTERNET-AS AS4200 171 105 66 38.6% AGIS (Apex Global Information Ser AS9304 82 21 61 74.4% Hutchcity AS816 233 177 56 24.0% UUNET Canada (ASN-UUNETCA-AS4) AS209 344 289 55 16.0% Qwest Communications AS4740 302 251 51 16.9% Ozemail Pty Ltd (ASN-OZEMAIL) AS684 92 46 46 50.0% Manitoba Regional Network Backbon AS4755 114 73 41 36.0% Videsh Sanchar Nigam Ltd. India AS1 519 479 40 7.7% GTE Internetworking AS1727 119 80 39 32.8% MRMS-WEST AS7568 54 16 38 70.4% C.S. Communications Co., Ltd. AS701 957 919 38 4.0% Alternet AS6528 46 8 38 82.6% WORLD-LYNX AS7029 78 41 37 47.4% ALLTELNET AS8013 128 92 36 28.1% PSINET-CA For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

need afterhours number for NSI. URGENT: multiple theft of domain requests underway
by John M. Brown 31 Dec '99

31 Dec '99

It seems someone at USA.NET is attempting to change multiple domains to them. USA.NET has gone home, Freedomains.net has also. I know that NSI runs an 7x24 shop, but I can't find the number on the web site, etc. Thanks in advance jmbrown

3 2

RE: GTEI Filtering ICMP Echo/Echo Replies?
by Martin, Christian 31 Dec '99

31 Dec '99

Thanks for the responses. Transit pings work fine, it is directed pings at router interfaces in the backbone that I'm seeing problems with. I have been contacted by someone from GTE and will handle this offline, unless someone else is seeing issues and wishes to continue the thread. Thanks again for the replies! Regards, Chris -----Original Message----- From: Howard Goldstein [mailto:hgoldste@mpcs.com] Sent: Friday, December 31, 1999 12:10 PM To: Martin, Christian Cc: nanog(a)merit.edu Subject: GTEI Filtering ICMP Echo/Echo Replies? Martin, Christian writes: > Happy Y2K to all! Looks as if GTEI has begun filtering ICMP type 0 and 8 (I > hope that's all) through their backbone. No sign of this problem pinging to or from the bits of gtei's Florida links I've got systems (via mae-e or mae-w). ping shrike.parview.com ...

1 0

Re: DNS problems
by Sean Donelan 31 Dec '99

31 Dec '99

There are domain problems everyday of the year. CI Host issued a press release yesterday, they had data problems with their nameservers related to some construction in their computer room. It is not related to Y2K. On Fri, 31 December 1999, Blake Willis wrote: > A few (perhaps 2%) of the domains I've looked up today aren't > resolving. It appears that several hosting companies have turned off their > nameservers until after this Y19100 foolishness is over. cihost.com is one > of them. I wonder if their customer SLA covers this. It seems that this > reaction is a lot like what many predict will happen to phone systems: the > date rollover doesn't break things, panic does. Has anyone on the list shut > down any equipment as preventative maintenence, and if so, how have your > customers reacted?

1 0

Y2KCC/JP Internet Operation Status Reports up
by Kuniaki Kondo 31 Dec '99

31 Dec '99

< we appreciate your posting to other lists > Now, Y2KCC/JP Internet Operation Status Reports up on our website: http://www.iaj.or.jp/y2kcc/report_e/ We have started from New Zealand, Australia, Japan, then Hong Kong, Malaysia and Thailand. So far, nothing is serious. Very quiet. It's a product of jont efforts of at least 30 people, monitoring, gathering, editing, translating etc. Please enjoy! --- kuniaki

1 0

GTEI Filtering ICMP Echo/Echo Replies?
by Martin, Christian 31 Dec '99

31 Dec '99

Happy Y2K to all! Looks as if GTEI has begun filtering ICMP type 0 and 8 (I hope that's all) through their backbone. I heard that this was because of DoS threats, but I haven't seen any other commentary on the subject. GTEIs NOC claims that they have made no changes. From some places I can get through the network, but others fail. CERFNet and others are clean. Traceroute works fine everywhere. Has anyone else seen anything similar? Regards, Christian

4 3

Re: Y2K in Japan
by Indra PRAMANA 31 Dec '99

31 Dec '99

Hi! This is RADNET's NOC from Rahajasa Media Internet in Jakarta, Indonesia. We have passed the roll-over for almost one hour ago, and seems that there is also no trouble on Y2K related issues in Indonesia. Major IX, ISPs, Telco and DNS servers are working fine. Thank you. -ip- At 01:03 01/01/00 +0900, =?iso-2022-kr?Q?Jongwon_Kim=28=D1=D1_=F1=A3=EA=AA=29?= wrote: >Hi! >This is KORnet NOC from Korea Telecom in seoul ,KOREA. >It seems there is no trouble related Y2K in Korea. >Major IX, ISPs, Teleco and DNS server working fine. > > >On Sat, 1 Jan 2000, Kunihiro Ishiguro wrote: > > > > > It seems there is no trouble related Y2K in Japan > > Major IX, ISPs and root DNS server working fine. > > > > Happy Millennium > > -- > > Kunihiro Ishiguro > > > > > -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* > KORNET Network Assistance Manager(Centural O&M Center) > - Voice : 82-2-766-5902 -Fax : 82-2-766-5901 > -E-Mail : knight(a)kix.net > ==================================================================== > >

1 0

DNS problems
by Blake Willis 31 Dec '99

31 Dec '99

A few (perhaps 2%) of the domains I've looked up today aren't resolving. It appears that several hosting companies have turned off their nameservers until after this Y19100 foolishness is over. cihost.com is one of them. I wonder if their customer SLA covers this. It seems that this reaction is a lot like what many predict will happen to phone systems: the date rollover doesn't break things, panic does. Has anyone on the list shut down any equipment as preventative maintenence, and if so, how have your customers reacted? --------------------------------------------------------------------------- Blake Willis AboveNet Communications Senior Engineer - European Operations blake(a)above.net ---------------------------------------------------------------------------

1 0