- NANOG - lists.nanog.org

October NANOG meeting
by Susan R. Harris 15 Jul '97

15 Jul '97

Hello everyone - we're pleased to announce that the fall '97 NANOG meeting will be hosted by Genuity and held October 27-28 at the Radisson Resort Scottsdale, near Phoenix. The meeting will run from 9:00 a.m. on Monday, October 27 (with coffee hour at 8:30 a.m.) until 4:00 p.m. Tuesday, October 28. On the Sunday evening before the conference, Avi Freedman, the founder of Net Access, will present a tutorial entitled "Raise your Routing IQ: Design and Debugging Techniques for Intermediate Users" from 7:30 - 9:00 p.m. We also wanted to let you know that as of the October meeting, NANOG will no longer receive any funding from the National Science Foundation. To compensate for the loss of NSF support, we plan to raise the registration fee from $100 to $150. The National Science Foundation has generously provided support for NANOG since the group was founded in February 1994, as part of NSF's support of the NSFNET Backbone Service and the Routing Arbiter project. NSF views NANOG as an important forum for the exchange of network operational information, and commends the ongoing success of the NANOG conferences. Since the U.S. Internet successfully transitioned in 1995 from the NSFNET to a commercial networking infrastructure, however, NSF has focused its networking support on network research and development efforts, rather than operational activities such as NANOG. We wish to thank NSF for its past support, and look forward to NANOG's continued growth and success as a self-sustaining organization. The $50 increase in the registration fee will allow us to cover meeting costs after the withdrawal of NSF funding. We hope that this will not be a hardship to attendees, and look forward to seeing you in Phoenix in October! Web registration will begin August 1; further details will be available soon. --Susan Harris and Bill Norton, Merit

1 0

Routing-Probs within BBnPlanet
by Winfried Haug 15 Jul '97

15 Jul '97

Hi ! some of our customers complain about really bad routing to www.apple.com As this traceroute shows, the problem can be somewhere at bbnplanet. Since i don have any account there, i cant see the routing from bbnplanet to us. I seems to be asymetric routing or something else... Starting from Hop 13 the times are unacceptable... Does anybody have any idea ? 1 ipgate (194.97.200.22) 5.637 ms 5.048 ms 3.847 ms 2 Stuttgart.seicom.NET (194.97.192.250) 5.589 ms 10.293 ms 5.578 ms 3 Frankfurt.seicom.NET (194.97.193.10) 10.303 ms 14.787 ms 10.394 ms 4 de-cix.seicom.NET (194.97.193.5) 10.520 ms 18.209 ms 10.508 ms 5 Frankfurt.topnet.DE (194.97.192.42) 23.773 ms 11.047 ms 20.590 ms 6 frankfurt.topnet.de (194.97.110.185) 16.412 ms 29.752 ms 22.646 ms 7 Serial3-2.GW1.FFT1.ALTER.NET (146.188.128.21) 112.821 ms 126.477 ms 136.s 8 Fddi0-0.CR2.FFT1.Alter.Net (146.188.31.226) 125.727 ms 121.155 ms 101.18s 9 512.Hssi4-0.CR2.LND1.Alter.Net (146.188.3.90) 199.711 ms 125.035 ms 146.s 10 * Fddi5-0.BR1.LND1.Alter.Net (146.188.30.225) 90.574 ms 85.898 ms 11 167.Hssi4-0.CR1.TCO1.Alter.Net (137.39.69.226) 222.667 ms * 174.701 ms 12 411.atm10-0.br2.tco1.alter.net (137.39.13.21) 186.230 ms 182.400 ms 236.s 13 C128.bbnplanet.net (137.39.250.14) 244.497 ms 205.937 ms 184.169 ms 14 * * * 15 * paloalto-br2.bbnplanet.net (4.0.1.10) 2755.807 ms * 16 paloalto-cr4.bbnplanet.net (131.119.0.204) 2721.680 ms * 2754.263 ms 17 * appl.bbnplanet.net (131.119.26.30) 2735.794 ms 2768.584 ms 18 * * tre.apple.com (205.180.175.29) 2685.547 ms 19 www.apple.com (17.254.3.28) 2697.392 ms * * Our AS is 5549, the Source IP is either 194.97.200.30 or 195.254.23.1 The first Net is announces as a /16 from our former upstream, we have 194.97.192.0/18 The second block has no super-route, but is splitted between us and another isp. We have 195.254.0.0/17 Winfried Haug

4 3

Re: Custom/Priority Queueing
by rbuchals＠hotmail.com 15 Jul '97

15 Jul '97

>From: rbenn(a)clark.net >On Mon, 14 Jul 1997, Alex Rubenstein wrote: >> Does anyone have a example of how to route packets based upon service? IE, >> if I have a slow 64kb/s Frame, and a fast DS1, I want to send >> non-interactive traffic over the 64k, like mail, etc., but www/ftp over the >> DS1. >> > >You may want to continue utilizing both links for all traffic, but >implement custom or priority queueing on them. The only other alternative >that comes to mind would be extended access lists. Not really sure how >the 2 methods would compare regarding performance or router utilization, >though. Policy routing will allow you to do this. -rb _______________________________________________________ Get Private Web-Based Email Free http://www.hotmail.com

1 0

None
by Alex Rubenstein 15 Jul '97

15 Jul '97

Does anyone have a example of how to route packets based upon service? IE, if I have a slow 64kb/s Frame, and a fast DS1, I want to send non-interactive traffic over the 64k, like mail, etc., but www/ftp over the DS1. --- "Don't go with a spineless ISP; we have more backbone." Alex Rubenstein -- alex(a)nac.net -- KC2BUO -- www.nac.net net @ccess corporation, 201-983-0725 -- 201-983-0725

2 1

No Subject
by JimTLange＠aol.com 15 Jul '97

15 Jul '97

Likewise, I've been receiving unsolicited e-mail from IEMMC. When I tried to respond, I received error messages from my ISP. Also, cannot contact IEMMC via web. Server refuses connection! Some agreement. Jim Lange

1 0

Microsoft Registered Domains
by Robert A. Pickering Jr. 14 Jul '97

14 Jul '97

I'll admit, the Operations value of this message is a bit low. But, it does clarify how the InterNIC's use of automation is allowing people to register domain names against another company, with no trace of who the culprit may have been. I thought the correct procedure was to get an ACK/NACK acknowledgement from the owner of the DNS servers BEFORE going ahead and registering the domains. There's also some humor value as well: -Rob Some domains registered to Microsoft: Start: 7/11/97 9:56:21 AM Whois user[@]: do weshallprevail.com [rs.internic.net.] Microsoft Corporation (WESHALLPREVAIL-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: WESHALLPREVAIL.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:56:40 AM * Start: 7/11/97 9:57:12 AM Whois user[@]: do RESISTANCE-IS-FUTILE.COM [rs.internic.net.] Microsoft Corporation (RESISTANCE-IS-FUTILE-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: RESISTANCE-IS-FUTILE.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:57:32 AM * Start: 7/11/97 9:57:50 AM Whois user[@]: do BILL-IS-LORD.COM [rs.internic.net.] Microsoft Corporation (BILL-IS-LORD-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: BILL-IS-LORD.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:58:08 AM * -- Robert A. Pickering Jr. Internet Services Manager Cincinnati Bell Telephone rob(a)fuse.net A Rough Whimper of Insanity (Information Superhighway) PGP key ID: 75CAFF7D 1995/05/09 PGP Fingerprint: B1 63 0C 09 D8 2E 5D 69 BB 61 A2 92 22 37 63 C3 ---------- Forwarded message ---------- Date: Fri, 11 Jul 1997 10:29:45 -0400 (EDT) From: "Robert A. Pickering Jr." <pickerin(a)Fuse.net> To: bob(a)mhmh.org Subject: Microsoft domains (fwd) -- Robert A. Pickering Jr. Internet Services Manager Cincinnati Bell Telephone rob(a)fuse.net A Rough Whimper of Insanity (Information Superhighway) PGP key ID: 75CAFF7D 1995/05/09 PGP Fingerprint: B1 63 0C 09 D8 2E 5D 69 BB 61 A2 92 22 37 63 C3 ---------- Forwarded message ---------- Date: Fri, 11 Jul 1997 10:26:39 -0400 (EDT) From: "Christopher J. Utley" <cutley(a)fuse.net> To: fusers(a)fuse.net, operations(a)fuse.net Subject: Microsoft domains Some domains registered to Microsoft: Start: 7/11/97 9:56:21 AM Whois user[@]: do weshallprevail.com [rs.internic.net.] Microsoft Corporation (WESHALLPREVAIL-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: WESHALLPREVAIL.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:56:40 AM * Start: 7/11/97 9:57:12 AM Whois user[@]: do RESISTANCE-IS-FUTILE.COM [rs.internic.net.] Microsoft Corporation (RESISTANCE-IS-FUTILE-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: RESISTANCE-IS-FUTILE.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:57:32 AM * Start: 7/11/97 9:57:50 AM Whois user[@]: do BILL-IS-LORD.COM [rs.internic.net.] Microsoft Corporation (BILL-IS-LORD-DOM) 3635 157th Avenue Redmond, WA 98052 US Domain Name: BILL-IS-LORD.COM Administrative Contact: MSN Hostmaster (MH37-ORG) msnhst(a)MICROSOFT.COM tel.: 206 882 8080 fax.: 206 703 2641 Technical Contact, Zone Contact: MSN NOC (MN5-ORG) msnnoc(a)MICROSOFT.COM 206 882 8080 Billing Contact: MSN Domain Billing (MDB-ORG) msnbill(a)MICROSOFT.COM 206 882 8080 Record last updated on 24-Jun-97. Record created on 24-Jun-97. Database last updated on 11-Jul-97 04:20:56 EDT. Domain servers in listed order: ATBD.MICROSOFT.COM 131.107.1.7 DNS1.MICROSOFT.COM 131.107.1.240 DNS3.NWNET.NET 192.220.250.7 DNS4.NWNET.NET 192.220.251.7 The InterNIC Registration Services Host contains ONLY Internet Information (Networks, ASN's, Domains, and POC's). Please use the whois server at nic.ddn.mil for MILNET Information. * Whois complete 7/11/97 9:58:08 AM * -- Christopher J. Utley Webmaster Cincinnati Bell Telephone chris(a)fuse.net

6 7

MAE West
by Rodney Joffe 14 Jul '97

14 Jul '97

Another Update from our guys... Power problems in the MFS facility caused the initial outage. Power has been restored, but the Gigaswitch has lost it's configuration causing all peers to remain down. Based on some of the mail to this list, it is GIGA 1 at MAE West, 2 and 3 are up. (Most of those complaining are on GIGA 1, Mathew at ACSI is on GIGA 2 and thinks he's up. I can't reach him directly from NASA/Ames, so my guess is that he is up, but can only see peers at GIGA 2 and 3 - see next para...) By the way, to expand the thread, I have the feeling that the three OC-3s from NASA Ames side to MFS all go to GIGA 1, which then has fddi loops to GIGA 2 and then to GIGA 3. Does anyone know if this is the case? If it is, seems that a better design would have been to route some of the OC-3s to the other GIGAs first. If 1 is down, then it can't pass traffic through to 2 and 3, so there is a single point of failure for all the switches at MFS. Rodney Joffe Chief Technology Officer Genuity Inc., a Bechtel company http://www.genuity.net

9 17

Re: default routes on Ciscos
by Srinivas Vegesna 14 Jul '97

14 Jul '97

=>> =>>> =>>> Hi there! =>>> =>>> Just curious if anyone out there knows of a way to configure default =>>> routes on a per interface basis on a Cisco. So that different interfaces =>>> had different default routes statically defined. =>> =>>Policy routing will do that at GREAT cost in CPU time. Actually, there is a clean way of doing it with the latest 11.2 code thru CSCdj14784. This is how it works: Command Syntax: router rip default-information originate [route-map <map-name>] Description: This command can be used to force a router to generate a default route via RIP even when the router does not carry a default route. The optional route-map can be used to specify the condition(s) (i.e., the match clause) under which a default route is generated, as well as to specify the interfaces (i.e., the "set interface" clause) to advertise the default route. If the optional route-map is not configured or if there is no "set interface" clause in the configured route-map, the default route is advertised to all interfaces running RIP. Here, extended access-lists can not be used in the route-map. thanks, Srinivas =>>> =>>> Any thoughts? =>>> =>>> Thanks! =>>> =>>> Nick Lauriat =>>> =>>> =>>> =>> =>>Dave Nordlund d-nordlund(a)ukans.edu =>>University of Kansas 913/864-0450 =>>Computing Services FAX 913/864-0485 =>>Lawrence, KS 66045 KANREN =>>

1 0

Intrusion Detection Systems
by Hamdi TOUNSI 14 Jul '97

14 Jul '97

Hello, I need some tools to monitor an ip network for intrusion detection. Can someone help me with this ? I tried before some public domain tools like argus but i need to know is someone has successfully constrcuted a good & complete intrusion detection solution (i.e monitoring, logging, real-time alarms, proactive monitoring, ..) I'm also interested in the developement of such a solutions, and i may coordinate the distributed developement effort with coordination with academic projects focusing the same goal. Best regards Hamdi

2 1

Re: Domain Name NASA.COM
by William Allen Simpson 14 Jul '97

14 Jul '97

> RFC_Violation: You saw it here first! > From: jamie(a)intuition.iagnet.net (Jamie Rishaw) > I've been a longstanding cheerleader for the NIC, but > That was your first mistake. Although what can one expect from someone who brags about violating RFCs? > Today, without notice, the InterNIC turned "off" the domain name NASA.COM, > a domain which had been registered now for over two years. > May I suggest that your customer sue, not the FTC or NASA, but the Internic for violation of the contract. You paid a fee, they are required to follow their own procedures. You should be able to get quite a bit for actual and punitive damages. And you would be doing all the rest of us a service, by setting a precedent. We really cannot have Internic becoming an extension of the US government, or making arbitrary actions. But enforcement of contracts generally requires a court. As far as I can see, you wouldn't even have to prove that NASA.COM was "in a manner reasonably calculated to convey the impression". That would be up to NASA and/or FTC, should Internic get them to come to the court (third party cross complaint, perhaps). Although, for curiousities sake, what did this NASA stand for, and what was their product? WSimpson(a)UMich.edu Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32 BSimpson(a)MorningStar.com Key fingerprint = 2E 07 23 03 C5 62 70 D3 59 B1 4F 5E 1D C2 C1 A2

5 4