- NANOG - lists.nanog.org

Re: Suggestion for improved identD
by Sean Donelan 22 May '98

22 May '98

>The question here is 'trust'. Why bother using ident in ANY code anymore >if it can't be trusted? Yet it still is. So move the trust demarcation point >to where the user has no control over it. Remember, if its a static IP or >network client, you don't proxy ident requests - since the static IP is the >demarcation point of trust. They can change their ident, but no matter what, >their IP or network still stays the same. The problem is 'indemnification.' If you want to authenticate or postively identify the origin of a connection, well I suspect you already know the answer. I'm not going to promise just because you received a packet allegdly from my network, that it originated on my network. And there is no demarcation point in the network, outside the portion you directly control, you positively know the user has no control over. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

The Cidr Report
by Tony Bates 22 May '98

22 May '98

This is an auto-generated mail on Fri May 22 12:00:00 PDT 1998 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 22May98 0) General Status Table History ------------- Date Prefixes 150598 51370 160598 51935 170598 51899 180598 51874 190598 51446 200598 51474 210598 51210 220598 51216 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 3581 Number of ASes announcing only one prefix: 1707 (896 cidr, 811 classful) Largest number of cidr routes: 364 announced by AS3561 Largest number of classful routes: 1082 announced by AS701 1) Gains by aggregating at the origin AS level --- 22May98 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS816 800 516 284 35.5% UUNET Canada (ASN-UUNETCA-AS4) AS4293 464 240 224 48.3% IMCI AS2493 527 308 219 41.6% iSTAR Internet, Inc. AS174 809 625 184 22.7% Performance Systems International AS701 1082 904 178 16.5% Alternet AS3602 483 305 178 36.9% Sprint Canada Inc. AS2048 161 89 72 44.7% LaNet AS3248 130 60 70 53.8% VIAnet AS5668 115 46 69 60.0% Century Telephone Inc. AS3221 110 41 69 62.7% EENet Autonomous System AS7046 193 133 60 31.1% UUNET-CUSTOMER AS271 112 53 59 52.7% BCnet Backbone AS4755 88 32 56 63.6% Videsh Sanchar Nigam Ltd. India AS3804 196 140 56 28.6% Bell Solutions AS549 208 155 53 25.5% ONet Backbone AS1221 277 226 51 18.4% AARNET-AS AS72 85 37 48 56.5% Schlumberger Information Network AS4539 73 26 47 64.4% NETROPOLIS AS1239 538 491 47 8.7% SprintLink Backbone AS6335 66 23 43 65.2% NTRNET AS4740 366 323 43 11.7% ASN-OZEMAIL (Ozemail Pty Ltd) AS852 157 117 40 25.5% AGT Advance Communication AS4200 130 90 40 30.8% AGIS (Apex Global Information Ser AS10928 86 46 40 46.5% UNKNOWN AS684 94 55 39 41.5% Manitoba Regional Network Backbon AS7657 129 91 38 29.5% The Internet Group Limited AS3493 165 127 38 23.0% INTERLINK AS1591 140 102 38 27.1% SAIC DISM AS762 116 79 37 31.9% WELLFLEET-AS AS719 440 403 37 8.4% LANLINK autonomous system For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Off topic : Re: [apnic-talk] Please Moderate or close this list .... (fwd)
by Marc Hurst 22 May '98

22 May '98

I've seen it all. Apnic decides to Censor... Is Cisco sanctioning censorship too? I would think so if Mr. Greene is posting from a corporate account. Would someone from Cisco wish to comment? Marc Hurst Fastlane.Ca Toronto, Canada ---------- Forwarded message ---------- Date: Tue, 19 May 1998 16:38:36 +0800 From: David R. Conrad <davidc(a)apnic.net> To: bgreene(a)cisco.com Cc: APNIC-TALK(a)apnic.net Subject: Re: [apnic-talk] Please Moderate or close this list .... Barry, As you have seen, the APNIC Executive Council has decided to attempt to alleviate the situation by simply removing the primary cause instead of closing and/or moderating the list. While the apnic-talk list is intended to be an open discussion list where people are free to participate as much or as little as they feel appropriate, with that freedom comes a responsibility to not be disruptive and/or discourage discussion by others. As it was felt Jim Fleming had not lived up to that responsibility, the chair of the APNIC Executive Council has indicated for the first time in the history of APNIC that the rather extreme action of removal from APNIC mailing lists was appropriate. Regards, -drc ---------------- At 10:02 PM 5/18/98 +0800, Barry Raveendran Greene wrote: >To the APNIC Executive Consul, > >Please moderate and/or close this list to APNIC members only. > >I'm willing to lose personal access to the APNIC-Talk in return for the >APNIC members to have a forum were they can discuss things. > >Thanks, > >Barry > >* APNIC-TALK: General APNIC Discussion List * >* To unsubscribe: send "unsubscribe" to apnic-talk-request(a)apnic.net * > * APNIC-TALK: General APNIC Discussion List * * To unsubscribe: send "unsubscribe" to apnic-talk-request(a)apnic.net * =============================================================== - Jim Fleming Unir Corporation - http://www.unir.net/IPv8 IPv8 - Designed for the Rest of the Human Race AM Radio Stations ---> http://www.DOT.AM -- DOMAIN-POLICY administrivia should be sent to <listserv(a)lists.internic.net> To unsubscribe send a message with only one line "SIGNOFF DOMAIN-POLICY" For more help regarding Listserv commands send the one line "HELP"

2 2

NANOG 13 HOTEL INFO
by Pam Ciesla 22 May '98

22 May '98

I just found out that the Hyatt no longer has rooms available on June 8. The following are hotels near the Hyatt: Ritz-Carlton Dearborn 300 Town Center Dr (about a mile) 313-441-2000 $205 + tax per night Courtyard by Marriott 5200 Mercury Dr Dearborn, MI 313-271-1400 5 minutes by car $64-$104 + tax per night (depending on date) The Dearborn Inn (very nice old hotel) 20301 Oakwood Blvd. Dearborn, MI 313-271-2700 $109 + tax per night 10 minutes by car Quality Inn 21430 Michigan Ave Dearborn, MI 313-565-7250 1 mile $79-$99 + tax per night depending on room. ---------------------------------------------------------------------- Pam Ciesla 734-936-0172 - phone Merit Network, Inc. 734-647-3185 - fax University of Michigan 4251 Plymouth Road Bldg. I, Suite C Ann Arbor, MI 48105-2785 -----------------------------------------------------------------------

1 0

Re: apnic, censorship, and other fecal matter.
by shields＠crosslink.net 22 May '98

22 May '98

In article <Pine.LNX.3.95.980522010051.723p-100000(a)tarkin.fdt.net>, Jon Lewis <jlewis(a)inorganic5.fdt.net> wrote: > I think someone's .procmailrc is broken. Try adding the following close > to the top. I don't know how many times I've posted this. It makes naong utterly clean for me. :0: * ^Message-Id: .*(unety\.net|unir\.net)> $JUNK :0: * ^(References|In-Reply-To): .*(unety\.net|unir\.net) $JUNK :0: * ^TOJimFleming(a)(unety\.net|unir.corp) $JUNK I set $JUNK to a date-dependent file which gets rotated for ten days just i case I need to retrieve a false positive... you can set it to /dev/null if you like simpler solutions. nanog's SNR seems to me to have gone down *sharply* lately, even in the non-Fleming threads. I'd guess the Fleming threads are bad too, but not having seen them, I don't know. -- Shields, CrossLink.

1 0

cflowd and HPUX
by Brad Roldan 22 May '98

22 May '98

*** This is a programming specific question. I recently tried porting cflowd over to HPUX (10.20). Surprisingly, I only needed to change two lines of code in the daemon to get everything working. The problem is that cflowd core dumps after a few minutes of running. The following messages appear in my syslog: May 15 19:02:11 netflow cflowd[1287]: [E] ports.c:327 mmap() failed for /opt/Data/cflow/15.1.200.36.port.cur: Not enough space May 15 19:02:12 netflow cflowd[1288]: [E] cflowd.c:851 manager (proc 1287) exited. Exiting. mmap() returns ENOMEM (no more memory) even though I have plenty of memory left! If anyone has encountered this problem, I'd like to know how you got around it. (and no, I can't go out and buy a Sun box :) Thanks for 'da help Brad -- Brad Roldan Hewlett Packard Network Engineer Palo Alto, Ca broldan(a)corp.hp.com 650-236-3005

1 0

Interweather source code
by Michael Dillon 22 May '98

22 May '98

There is an article at the bottom of this page http://www.macosrumors.com/ about a distributed client system to gather standard, accurate statistics about the network. They are considering releasing the source code to this system similar to Netscape's release of Mozilla. -- Michael Dillon - Internet & ISP Consulting Memra Communications Inc. - E-mail: michael(a)memra.com http://www.memra.com - *check out the new name & new website*

1 0

RE: FW: APNIC's Censorship
by Jim Fleming 22 May '98

22 May '98

On Thursday, May 21, 1998 4:12 AM, Michael Dillon[SMTP:michael@memra.com] wrote: @On Thu, 21 May 1998, Jim Fleming wrote: @ @> Laina Raveendran Greene is currently a candidate in the Internet @> Society's political elections... @> http://www.isoc.org/members/vote/98election/98candinfo.shtml#LAINA @> REVEENDREN GREENE she has a background with the ITU and large telco @> interests which Michael Dillon falsely claims I have. @ @This sounds like you are saying that you do NOT have a background with @large telco interets. Then how do you explain your statement posted to the @IETF mailing list on Nov 1/1996 saying that you used to work for AT&T's @Bell Labs? Here is what you said: @ @ No, Bill Frezza worked primarily in Holmdel, NJ. @ @ Phil Karn and I worked together at Bell Labs Indian Hill, in @ Naperville, IL. @ @ "ihnss" was located there...if you go back that far... @ @Are you attempting to "coverup" your background? @ @Did they tell you to deny everything? @ @> > There is a different between being part of the process and raising @> > valid @> > question and the disruptive attacks Jim launched against the APNIC and @> > Asia/Pacific ISP community. While Jim was launching his attacks, solid @> > discussion was attempted by JPNIC member to clarify items from the @ @How long have you been involved in these "covert" operations in Asia? @ @You seem to spend a lot of time collecting information about Internet @organizations and writing disruptive emails. Who pays you for all this @time? @ @Have you ever had CIA "psychops" training? I hear they are very good. @ @ @-- @Michael Dillon - Internet & ISP Consulting @Memra Communications Inc. - E-mail: michael(a)memra.com @http://www.memra.com - *check out the new name & new website* @ @ @ @ @@@@ http://www.ntia.doc.gov/ntiahome/domainname/130dftmail/marchindex.htm "Comments on the Technical Management of Internet Domain Names Cumulative Index March, 1998 @@@@@@@@@@ @@@@ http://www.ntia.doc.gov/ntiahome/domainname/130dftmail/03_23_98-2.htm March 23, 1998 Part Two ... - Unir Corporation; Jim Fleming JimFleming(a)doorstep.unety.net .... @@@@@@@ - Jim Fleming Unir Corporation - http://www.unir.net/IPv8 IPv8 - Designed for the Rest of the Human Race AM Radio Stations ---> http://www.DOT.AM

3 2

Re: a little thought on exchanging traffic
by Sean Donelan 22 May '98

22 May '98

>Anyone thought about eliminating large physical exchange points and replacing >them with a more distributed architecture? Yes, lots of folks have given it lots of thought. >Multiple data centers interconnected over ATM in a single metro area run by >indepdenant entities who are free to provide any level of service or value >add they wish. The fundamental problem is there are no magic pixie dust in this business. Sure, some people like to put out press releases saying how they've solved all the worlds problems using the Magic Frambulator. But what they've usually done is ignored half the problem. The Sanfrancisco NAP is actually a distributed architecture of several ATM switches around the bay area. And although the SF-NAP is handling far less traffic than MAE-East on a daily basis, it too has suffered from the problems of congested trunk lines between the switches. There have been other proposals too. Most of the 'solutions' I've seen have had either far fewer number of interconnects, or far less total cross-connect bandwidth. It seems to be very difficult to get both. When they get close to either the number of connections, or the amount of traffic, they seem to run into the same walls. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

4 3

RE: Fwd: FW: Removal from APNIC lists
by John Fraizer - Administrator 22 May '98

22 May '98

At 12:19 PM 5/20/98 -0500, you wrote: >In other words, if someone were to block the entire 202.x.x.x >range they would be assured they would not lose any contact >with North America ? I don't know about that but when I blocked all IP's assigned to APNIC, my credit card fraud rate went down drasticly. Lil' bastards. ------- John Fraizer (tvo) | __ _ | The System Administrator | / / (_)__ __ ____ __ | The choice mailto:tvo@EnterZone.Net | / /__/ / _ \/ // /\ \/ / | of a GNU http://www.EnterZone.Net/ | /____/_/_//_/\_,_/ /_/\_\ | Generation A 486 is a terrible thing to waste...

2 1