- NANOG - lists.nanog.org

Exchange Point NPA/NXX"s
by Derek Elder 05 Oct '98

05 Oct '98

Can someone forward me the NPA/NXX's that you use to provision circuits to MAE-East, MAE-West, Sprint, Ameritech, and Pac Bell? TIA D E R E K E L D E R Senior Engineer, CCIE# 4048 __________________________________________ USWeb Corporation http://www.usweb.com/ Network Solutions Practice 733 Third Avenue 7th Floor New York, NY 10017 ph: 212 301 2200 fax: 212 301 2201 mailto:delder@usweb.com USWeb - A Strategic Partner for the Information Age

2 1

Network Traffic
by danh＠comm.mot.com 04 Oct '98

04 Oct '98

Greetings, Scenario 1: Host A,B: Solaris 2.6, Informix 7.24 Engine. Router 1, 2, 3, 4 : Cisco routers 4700 and 7200 series. (I hope my drawing is accurate enough). [1] If informix database is on Host B and GUI application, which accesses the informix database on Host A, is on Host B, could we determine the traffic on the LAN that is shared by these two hosts? Without using a network analyzer, could we could run unix commands on Host A or B to determine the traffic on Subnet A? Could we determine how much traffic is dedicated to the GUI application accessing the informix database? Subnet A Subnet F | | | | |----Router 1 |----Router 4 | | | | |----Host A |----Host D | Subnet C Subnet D | | e0 e1 |-WAN-| e1 e0| |----Host B--| | | |--Host C--| | |-Router 2-| |-Router 3-| | | Subnet B Subnet E Scenario 2: Same topology as above, but Host A gets database information from Host C, assuming there exists static routes and IP forwarding information, could we run unix commands to determine traffic on Subnet A, B? Thanks in advance. Pete.

1 0

OUTAGE: Hortence GA "fiber cut"
by Sean Donelan 03 Oct '98

03 Oct '98

WorldComm has reported a fiber cut in the Hortence, GA. area. This time not a train derailment, but in the process of cleaning up the train derailment. Repair crews are en route, No ETR available. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Worldcom cut near Atlanta
by mark＠vielle.datasys.net 03 Oct '98

03 Oct '98

It appears that Worldcom has had a fiber cut near Atlanta that is affecting cities in Florida. Among others, Digex' POP in Jacksonville has lost connectivity to some of their subscribers. I never have understood that arrangement -- we have a line from South Georgia that goes through Atlanta (~250 miles north) to get to Jacksonville (~250 miles southeast). The backhoe-per-capita rating for Atlanta is significantly higher than for most cities, it appears.

1 0

NANOG 14 REMINDER
by Pam Ciesla 02 Oct '98

02 Oct '98

Hotel block ends Friday, 10/9. Marriott Marquis 404-521-0000 be sure to mention NANOG Meeting when registering. All meeting info available on the webpage http://www.nanog.org/ ---------------------------------------------------------------------- Pam Ciesla 734-936-0172 - phone Merit Network, Inc. 734-647-3185 - fax University of Michigan 4251 Plymouth Road Bldg. I, Suite C Ann Arbor, MI 48105-2785 -----------------------------------------------------------------------

1 0

Re: Is the .to (Tonga) domain completely rogue and should be removed?
by digitalunix＠altavista.net 02 Oct '98

02 Oct '98

---------- Forwarded message ---------- Date: Fri, 2 Oct 1998 11:26:29 -0700 From: digitalunix(a)altavista.net To: hostmaster(a)internic.net Subject: Rogue Domain std.com To Whom it May Concern, Over the past 48 hours I have received numerous complaints about large numbers of negative cluons eminating from the domain std.com. As a Network Solutions, Inc. customer I must request that you BORK BORK BORK FREE THE INTERNET BORK BORK BORK remove this domain from the .com TLD as soon as possible in order to avoid the possibility of Negative Cluon Proliferation, which will undoubtedly happen when the number of negative cluons on the internet exceeds the number of positive cluons by a factor of 2 or more. This situation opresses the positive cluons to the point where they no longer appear on as long as an NCP situation exists. Thank you for your expeditious actions in dealing with this problem. Sincerely, A Concerned NSI Customer ---------------------------------------------------------------- Get your free email from AltaVista at http://altavista.iname.com

1 0

Sorry -- No subject
by Bill Becker 02 Oct '98

02 Oct '98

Here you go, Randy... tonga>en Password: tonga tonga# sh running-tonga ##################### Current configuratonga: ! ! Last configuratonga change at 09:57:39 EDT Fri Oct 2 1998 ! NVRAM config last tongated at 10:00:50 EDT Fri Oct 2 1998 ! version 10.3 (tonga) service timestamps log tonga service tonga-encryption no service tcp-small-tonga ! hostname tonga ! clock tongazone EST -tonga clock tonga-time EDT recurring enable secret 5 ToNgA enable password 7 tOnGa ! ip subnet-tonga no ip source-tonga ip domain-list .to ! -- more --

1 0

. (root) zone rouge, should be removed
by Chris Cappuccio 02 Oct '98

02 Oct '98

I strongly recommend removing the root zone, for what are soon to be obvious reasons. I was recently made aware that people are using it for distribution of materials that may be inappropriate. I have also found that it has been used for illegal purposes. Please direct all future correspondence on this matter to chris(a)[12.7.96.3] --- "Microsoft is to quality software what McDonalds is to gourmet cooking"

3 2

Re: Is the .to (Tonga) domain completely rogue and should be removed?
by Dean Anderson 02 Oct '98

02 Oct '98

> > We now return you to TongaV8, in progress.. > > ^^^^^^^ > > Karl Whats this mean?? --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

Milk attack
by Steve Nash 02 Oct '98

02 Oct '98

Im curious if anyone knows of the "milk" attack. Our network was just slammed by such an attack for about an hour all aimed at one of our core routers. A "sh ip cache x.x.x.x x.x.x.x fl" on it showed this: SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts B/Pk Active Fa0/0 208.10.5.2 Local X.X.X.X 11 0498 0017 164K1028 985.3 except from 10 to 15 hosts all nailing us at the same time. The protocol as you see is "11" which I have been unable to find information about. There was no way to filter it and access-lists denying protocol "11" showed 0 matches. Anyone have any ideas? -- \\|// -(@ @)- ==oOO==(_)==OOo========================================================= Steven Nash snash(a)lightning.net l i g h t n i n g i n t e r n e t s e r v i c e s l l c Chief Backbone Engineer -- Network Engineering http://www.lightning.net

3 2