- NANOG - lists.nanog.org

Oy. Cisco!
by Jason L. Weisberger 23 Apr '98

23 Apr '98

What happened to the access-list blahblah established command in 11.1.15? is it missing? I find some stuff about reflexive lists in 11.3 which would be nice but it disappear from 10.x to 11.1, the machine even claims I should be able to use an established parameter but doesn't offer it to me. sigh. jlw -- Jason Weisberger Chief Technology Officer SoftAware, Inc. - 310/305-0275 "Let us cross over the river, and rest under the shade of the trees." -Thomas Jonathan "Stonewall" Jackson

1 0

Re: So, Cisco?
by kbrown＠primelink.com 22 Apr '98

22 Apr '98

According to the limited information I received, the NM-1HSSI is capable of handling 45Mbps. The information I received did not disclose details of interoperability with the 2600-series. A full product data sheet should be available soon. Kevin Brown Networking Engineer kbrown(a)primelink.com Huber & Associates, Inc. http://www.primelink.com/haa Al Reuben <alex(a)nac.net> on 04/22/98 03:57:17 PM To: nanog(a)merit.edu cc: (bcc: Kevin Brown/Huber & Associates) Subject: So, Cisco? So, I saw in the Cisco price guide, under 3600 Series: NM-1HSSI Single port HSSI network module for 3640 and 3620 $6,000 First, I can't find anything about it on the website. Second, if anyone at Cisco would care to comment, how fast will this card go before the box starts to mel? And last, will it now/ever work in a 2600? Thanks! -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP! We have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

1 0

an apology re: Quoting and threading ..
by Joe Rhett 22 Apr '98

22 Apr '98

I was overly concise in my response, and a number of people have written to correct me on this. So I'm writing to apologize, and clarify what I meant here. Someone: >>> That's a feature, not a bug. It allows people to read things in >>> context. Not a problem from my perspective as long as the quoted >>> material is at the bottom of the message. Me: >> NO, see, my e-mail package has this "feature". It lets me read mail in >> threads. I don't need people to help it out. Owen (and others with similar messages): > Well, Joe, you're not everyone, and the quotations by many of the > people are of great help to some of us, me included. I have no problem with relevant and concise quotes that help us understand the issue being addressed. My response was aimed at someone who felt that the entire thread should be preserved in each and every message -- this is completely unnecessary! If someone wants to read the entire thread, they should use a threaded mail reader. The messages themselves should contain only enough quoted information to assist in understanding the response. -- Joe Rhett Systems Engineer JRhett(a)ISite.Net ISite Services PGP keys and contact information: http://www.navigist.com/Staff/JRhett

1 0

AT&T Outage cause last week.
by Rodney Joffe 22 Apr '98

22 Apr '98

According to AT&T, in a story just released, the problem was a Cisco code problem. It would be interesting to hear what the actual software cause was, if anyone from Cisco cares to let us know?.../rlj - - - AT&T's network failure AT&T Corp. reported today that last week's frame relay network failure was due to a software-based problem. Last Monday's network failure disrupted service nationally for thousands of AT&T's business customers for about a day. The cause of the outage was previously attributed to the interaction between two frame-relay switches, but AT&T now says it was a software problem. AT&T Chairman C. Michael Armstrong said today the company is working closely with Cisco Systems, which provided its switches, on ways to fix the problem. The type of network application affected by frame-relay service is "any kind of high-speed data applications where large amounts of information [are] exchanged in quick bursts," Granieri said. Querying an inventory database is one example of such an application, he said. Reuters contributed to this report

2 1

So, Cisco?
by Al Reuben 22 Apr '98

22 Apr '98

So, I saw in the Cisco price guide, under 3600 Series: NM-1HSSI Single port HSSI network module for 3640 and 3620 $6,000 First, I can't find anything about it on the website. Second, if anyone at Cisco would care to comment, how fast will this card go before the box starts to mel? And last, will it now/ever work in a 2600? Thanks! -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP! We have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

1 0

DoS tracking service
by Jeremy Porter 22 Apr '98

22 Apr '98

Just forwarding this for a friend. ------- Forwarded Message Date: Wed, 22 Apr 1998 11:16:48 -0700 From: "Steve Uurtamo" <uurtamo(a)AZStarNet.com> To: jerry(a)fc.net Subject: Re: Filtering ICMP (Was Re: SMURF amplifier block list) > Okay, so it's clear that we need to come up with some sort of sol'n > to these kinds of problems. > > Here's my two cents: > > Don't block all of ICMP. Block pings and traceroutes if you think that > it's going to make your life better, but please don't break anything else. > > We need a low-pain protocol to allow provider NOCs to check out a > few salient things on their upstream provider's/peers routers -- > e.g. which interface a particular spoofed packet is coming from, the IP > address of the remote-side interface, etc., etc., all the way back > to the source. This would allow provider NOCs to track this stuff > down themselves. No more 6 hour phone calls to people with various > degrees of clue/time/energy for a problem that may only occur for > 15 minutes at a time, every 4 hours. > > It wouldn't be hard to jimmy this protocol (in case people care) such that > you would ONLY be able to track back to a particular NOC's router if all > of the inbetween-routers had "signed off" on the fact that what you're lookin g > for (specific dst/src or packet type) had actually SHOWN UP on them as well. > It wouldn't have to continuously check this -- just check once and PK-encrypt > the timestamp into the signature on the authentication packet. Various > timeouts could be configured by individual NOCs. (Yes, each NOC could have > its own PK value -- but there would only have to be one per AS). > > Before everyone gets all hot and bothered about the suggestion that I'm > making -- I'm not talking about arbitrary packet sniffing -- I'm talking > about sniffing HEADERS on packets whose dst address (or packet type or > whatever everyone agrees is significant) is inside the domain of the dst > provider. Not a big deal. I really don't think that it's that > much to give up -- hell, digex already allows me to dump their entire BGP > table anytime I want -- i'm just talking about some very minimal tracking > ability. > > Some companies, such as sprint, who may have hundreds of customers plugged > into a single router, may not want to do this. But frankly, without this, > we're all dependent upon the clue/time/energy of some guy who's busy doing > his own thing, and we aren't guaranteed timely and accurate information. > > Actually, now that I think of it, you could almost jimmy this out of a > few hours of PGP-wrapped SNMP-calling perl scripts listening to some > fixed socket at some fixed (and published) IP address of each network > provider. No reason to dick with the router code if no need to. > > > What say ye? > > > > steve ------- End of Forwarded Message

1 0

Re: Filtering ICMP (Was Re: SMURF amplifier block list)
by shields＠crosslink.net 22 Apr '98

22 Apr '98

In article <Pine.LNX.3.95.980421001700.3979H-100000(a)devel.dbd.com>, Mark Whitis <whitis(a)dbd.com> wrote: > Even then, your netmask should have 1s on the left and right > (i.e. 255.255.0.255) for a /16 subnetted at /8. Discontiguous netmasks has been deprecated or unsupported for a very long time. -- Shields, CrossLink.

1 0

RE: AT&T Outage cause last week.
by Goldstein_William＠bns.att.com 22 Apr '98

22 Apr '98

1 0

Internet Governance: DC-ISOC Meeting on May 11
by Russ Haynal 22 Apr '98

22 Apr '98

Those of you within "driving distance" to Washington DC Metro area might be interested in our next Meeting of the DC Chapter of Internet Society. To automatically receive future meeting announcements, Join our mailing list at http://www.dcisoc.org . Russ Haynal ================================================================ [ Note: This email contains several pieces of information: ] [ 1- Meeting Announcement for DC-ISOC (May 11) ] [ 2- Reminder for ISOC Board of Directors Elections ] [ 3- Additional links from the Previous DC-ISOC Meeting ] [ 4- Netpreneur Announcement about E-commerce meeting ] Mark Your Calendar!! DC-ISOC Announces its Next Meeting: - - - - - - Internet Governance - "Who's in Charge Here?" - - - - - - - - Monday, May 11, 1998, 6:30-9:00 p.m. PRELIMINARY Meeting Agenda The Internet has continued to grow at an astonishing rate. This diverse expansion has attracted the interests of several regulating organizations and governments. Are the industry self-governing groups (e.g., ISOC, IAB, IANA, etc.) sufficient, or is there a role for governmental bodies (e.g., FCC, ITU, etc.)? Are new industry groups needed (as the White House's Green Paper suggests)? If so, how will they come about? Confirmed Speakers (so far) include: * Donald Heath - President/CEO of the Internet Society http://www.isoc.org * VINTON G. CERF - Senior Vice President, Internet Architecture and Engineering MCI Communications Corporation http://www.mci.com * Note: this is a preliminary meeting announcement. Additional Speakers will be identified in the final event announcement which will be sent during the beginning of May. Following the speaker presentations, there will be an open Q&A session with the audience. Meeting Location: Hyatt Dulles (Across Route 28 from Dulles Airport) 2300 Dulles Corner Blvd. Herndon VA 22071 USA Telephone: 1 703 713 1234 http://www.hyatt.com/pages/d/dullea.html Directions From Beltway: Take exit for Dulles Toll Road - West Take exit 10 from Dulles Toll Road Head South on Centreville Road Right on Fox Mill Road Hotel is 1 mile ahead on the right. As with all of our previous events, there is no charge to attend this event. Seating will be on a first-come, first-seated basis, though we expect that there should be room for all those interested. Please plan to arrive by 6:30 to "network", and to enjoy the refreshments (cookies & soft drinks) that are being provided by our sponsor. Speakers will begin at 7pm. ************* T H A N K S T O O U R S P O N S O R *********** * DC-ISOC wishes to thank InternetMCI for sponsoring this meeting. * * internetMCI offers Internet access options to fit every need * * and every budget. internetMCI Access Services provide * * you with a direct and reliable connection to the Internet * * through flexible options for dial-up or dedicated access. * * Please visit internetMCI at http://www.mci.com * ********************************************************************* To Sponsor a DC-ISOC Meeting, see http://www.dcisoc.org/sponsor.htm A short list of related links for this topic: * Internet Society http://www.isoc.org * Internet Architecture Board (IAB) http://www.iab.org/iab * Internet Assigned Numbers Authority http://www.iana.org/iana * Generic Top Level Domain Memorandum of Understanding http://www.gtld-mou.org/ * US Government's "green paper" on domain names http://www.ntia.doc.gov/ntiahome/domainname/022098fedreg.htm * Internet Society's web page relating to the "Green Paper" http://www.isoc.org/internet/news/greenpaper.shtml * MCI's formal response to the White House Green Paper on domain name system reform http://www.mci.com/mcisearch/aboutyou/interests/technology/ontech/DNSpaper.s html * FCC's Factsheet about ISP's and Access Charges http://www.fcc.gov/Bureaus/Common_Carrier/Factsheets/ispfact.html * International telecommunication Union http://www.itu.ch/ ========== ATTENTION ISOC MEMBERS... DON'T FORGET TO VOTE =============== Reminder - The 1998 Internet Society Board of Trustees Elections are underway. 11 candidates are running for 5 trustee Positions. As an Internet Society member, you are given 5 votes to distribute any way you choose among the candidates. For example, you could: - cast 1 vote each for 5 different candidates - cast all 5 of your votes for a specific candidate - cast 2 votes for candidate "A", 2 votes for "B", and 1 vote for "C" - etc. You should have received your ballots in the mail. You can read about the candidates and CAST YOUR VOTE ONLINE at: http://www.isoc.org/members/vote/98election/98candinfo.shtml The deadline for Voting is May 29, but why not go to the online site NOW, and influence the Future of the ISOC and Internet. ======================================================================== Membership Information.... Individuals who are interested in becoming members of DC-ISOC can do so by joining the Internet Society. See Internet Society's web site at http://www.isoc.org for more information. The Washington DC Chapter of the Internet Society maintains its own web site at: http://www.dcisoc.org Please feel free to pass this announcement message along to other interested individuals. If this message was forwarded to you, you can join the DC-ISOC announcement mailing list through our web site ( http://www.dcisoc.org ) Watch for a more detailed meeting announcement at the beginning of May. See you there. Russ Haynal ================================================================== UPDATE: From the "War on Spam" meeting held on April 2nd... Here are 2 additional websites mentioned during the presentations: The AOL Legal Department Website is: http://legal.web.aol.com MCI's Spamming Policy is located at: http://www.mci.com/aboutus/company/corporate/consumer/spam.shtml Thanks again to our speakers and sponsor for a successful event (original event details are archived at http://www.dcisoc.org . ============================================================= AN EVENING WITH THE STARS OF E-COMMERCE Presented by the Morino Institute June 3, Mayflower Hotel, Washington, D.C. 6:00 p.m. Registration & Pre-reception 7:00 pm Program 9:00 pm Post Reception To Register: http://netpreneur.org/ecommerce The Potomac KnowledgeWay Netpreneur Program invites you to spend An Evening with the Stars of E-Commerce. This is your opportunity to learn from and interact with four stellar entrepreneurs who founded some of the region's hottest electronic commerce businesses. Gary Arlen, who Advertising Age referred to as "one of the most visible and most quoted new media gurus" will moderate and lead the evening's discussion. Gary is President of Arlen Communications Inc. On June 3, find out what: John Backus, President & Chief Executive Officer of Intelidata Technologies Corporation Bill Gorog, Chairman of the Board of Directors of Intelidata Technologies Corporation (also developer of Lexis Nexis) Jack McDonnell, President & Chief Executive Officer of Transaction Network Services, Inc. Mark Walsh, President & Chief Executive Officer of VerticalNet, Inc. view as the keys to survival and success in an industry that is expected to explode in the next two years. With expertise in areas that include home banking software, vertical trade communities, data communications services for transaction-oriented applications, and the development of technologies of the caliber of Lexis Nexis, this group has the capacity to address the world of electronic commerce from all angles. The event will follow a town-hall format with brief six- to eight-minute presentations from the Stars, followed by extensive time for audience interaction. Mario Morino, Chairman of the Morino Institute, will wrap up the evening with his own views of the region and the netpreneur movement. Previous An Evening With Netpreneur events drew commutative crowds of nearly 2,000. Only 700 seats are available for the June 3 program. To be assured of your seat to star gaze, sign up now at: http://netpreneur.org/ecommerce You may also email your registration to <ecommerce(a)netpreneur.org>. Please include your name, company, email address and a brief description of your company. ____________________________________________________________________ Russ Haynal - Internet Consultant, Instructor, Speaker "Helping organizations gain the most benefit from the Internet" russ(a)navigators.com http://navigators.com 703-729-1757 -------------------------------------------------------------------- Author:"Internet; A Knowledge Odyssey" (Top-rated CD-ROM Tutorial) See MindQ Publishing- http://www.mindq.com/cdt/company/products.html

1 0

MAE-East snafu redux
by Jeremiah Kristal 22 Apr '98

22 Apr '98

Has everyone just become so used to terrible performace at MAE-East, or am I the only one seeing problems? I'm seeing perfect performance to networks connected to Gigaswitch 1 (excluding overloaded ports), but 15-20% packet loss to anyone connected to any other Gigaswitch. In the past MFS would jump on these tickets, find a frozen card on Gigaswitch 6, reset it, and clear the trouble. It has been over 24 hours since I opened a ticket, I've spoken with MFS Datanet Engineering, and I still don't think I've spoken to anyone at MFS who is aware that all traffic between Gigaswitches goes through Giga6. If anyone has time tonight, could they check performance to other providers on the same Gigaswitch and on other Gigas. If you need to know which provider is on which switch, go to http://www.mfsdatanet.com:80/MAE/east.map.html Thanks, and hopefully this is on topic, even if it doesn't contain actual router commands. :) Jeremiah Kristal Senior Network Engineer ICon CMT Corporation jeremiah(a)iconnet.net 201-319-5764 x284 internal

3 2