- NANOG - lists.nanog.org

CERFnet Weekly Report for the week of Monday, March 30, 1992
by Donna Bigley 06 Apr '92

06 Apr '92

############################################################################### This is the CERFnet weekly activity report for the period of Monday, March 30th through Sunday, April 5th, 1992. This report is also available through anonymous FTP from NIC.CERF.NET [192.102.249.3] in the cerfnet/cerfnet_stats subdirectory. The filename is: 5-april-92.txt All times are in Pacific Standard Time, and in the 24-hour format. Please direct any questions or comments to: donnab(a)cerf.net or help(a)cerf.net ****************************************************************************** NETWORK OUTAGES: TICKET #: 872 SITE: EMULEX SITES AFFECTED: EMULEX TIME STARTED: MON. 3-30-92 10:04 TIME ENDED: MON. 3-30-92 13:53 TIME ELAPSED: 3 hours 49 min. (Intermittent Outages) REASON: Equipment Trouble TICKET #: 880 SITE: SPARTA SITES AFFECTED: SPARTA TIME STARTED: MON. 3-30-92 12:12 TIME ENDED: MON. 3-30-92 12:19 TIME ELAPSED: 7 min. REASON: Power Outage TICKET #: 877 SITE: DATAPRODUCTS SITES AFFECTED: DATAPRODUCTS TIME STARTED: MON. 3-30-92 12:50 TIME ENDED: MON. 3-30-92 17:28 TIME ELAPSED: 4 hours 38 min. (Intermittent Access) REASON: Link Failure TICKET #: 879 SITE: EMULEX SITES AFFECTED: EMULEX TIME STARTED: MON. 3-30-92 17:25 TIME ENDED: TUE. 3-31-92 01:24 TIME ELAPSED: 7 hours 59 min. (Intermittent Outages) REASON: Link Failure TICKET #: 881 SITE: DATAPRODUCTS SITES AFFECTED: DATAPRODUCTS TIME STARTED: TUE. 3-31-92 10:28 (Telco Testing) TIME ENDED: TUE. 3-31-92 11:42 TIME STARTED: TUE. 3-31-92 13:27 TIME ENDED: TUE. 3-31-92 15:10 TIME ELAPSED: 2 hours 57 min. (Intermittent Outages) REASON: Link Failure TICKET #: 850 SITE: SERI/KOREA SITES AFFECTED: SERI/KOREA TIME STARTED: TUE. 3-31-92 23:16 TIME ENDED: TUE. 3-31-92 23:31 TIME ELAPSED: 15 min. REASON: Link Failure TICKET #: 882 SITE: ENSS T3 SITES AFFECTED: ENSS T3 TIME STARTED: WED. 4-1-92 09:08 TIME ENDED: WED. 4-1-92 09:14 TIME ELAPSED: 6 min. REASON: Equipment Trouble (Hung FDDI Interface) TICKET #: 884 SITE: Hang10 SITES AFFECTED: SDSU, BIOSYM, AGI, SCIENCE HORIZONS, XEROX, UCR, LLUMC, and CERFnet NETBLAZER. TIME STARTED: WED. 4-1-92 11:11 TIME ENDED: WED. 4-1-92 11:30 TIME STARTED: WED. 4-1-92 12:26 TIME ENDED: WED. 4-1-92 12:30 TIME ELAPSED: 23 min. REASON: Equipment Trouble TICKET #: 885 SITE: BIOSYM SITES AFFECTED: BIOSYM TIME STARTED: THU. 4-2-92 10:47 TIME ENDED: FRI. 4-3-92 17:49 TIME ELAPSED: 1 day 7 hours 2 min. REASON: Site Scheduled Maintenance TICKET #: 893 SITE: QUOTRON SITES AFFECTED: QUOTRON TIME STARTED: FRI. 4-3-92 23:27 TIME ENDED: SAT. 4-4-92 11:16 TIME ELAPSED: 11 hours 49 min. REASON: Power Outage TICKET #: 894 SITE: CITY OF HOPE SITES AFFECTED: CITY OF HOPE TIME STARTED: SAT. 4-4-92 23:46 TIME ENDED: SUN. 4-5-92 00:20 TIME ELAPSED: 34 min. REASON: Unscheduled Site Maintenance TICKET #: 888 SITE: UCLA SITES AFFECTED: DATAPRODUCTS, ISX, SMC, QUOTRON, PEPPERDINE, UCSB, UCLA DIAL N' CERF, UCLA NETBLAZER, AND LOS NETTOS. TIME STARTED: SUN. 4-5-92 14:05 TIME ENDED: SUN. 4-5-92 17:53 TIME ELAPSED: 3 hours 48 min. REASON: Power Outage TICKET #: 890 SITE: UCLA NetBlazer SITES AFFECTED: UCLA NetBlazer TIME STARTED: SUN. 4-5-92 14:06 TIME ENDED: MON. 4-6-92 08:15 TIME ELAPSED: 18 hours 9 min. REASON: Equipment Trouble ------------------------------------------------------------------------ CERFNET TRAFFIC CAPACITY USAGE AT EACH CIRCUIT LINK LINK SPEED CAPACITY PEAK HOUR (PDT) UCI/CALTECH 45.000 mbps No Capacities for this week. (New Line) SDSC/CALTECH 1.544 mbps 11.5% 11:00 SDSC/UCI 1.544 mbps 07.5% 18:00 SDSC/UCLA 1.544 mbps 05.7% 12:00 SDSC/UCOP 1.544 mbps 03.4% 11:00 UCI/UCLA 1.544 mbps 00.3% 17:00 SDSC/UCR 512 kbps 02.1% 19:00 UCLA/UCSB 512 kbps 08.8% 13:00 SDSC/AGI 1.544 mbps 00.1% 16:00 SDSC/BIOSYM 1.544 mbps 00.2% 14:00 SDSC/GA 1.544 mbps 00.3% 12:00 SDSC/GD 1.544 mbps 02.2% 08:00 SDSC/SAIC 1.544 mbps 00.8% 12:00 SDSC/SCAQMD 1.544 mbps 00.1% 12:00 SDSC/SDSU 1.544 mbps 01.4% 19:00 UCI/CSU CO(SWRL) 1.544 mbps 02.1% 16:00 UCOP/APPLE 1.544 mbps 00.9% 19:00 UCOP/CISCO 1.544 mbps 00.8% 12:00 UCR/LLUMC 1.544 mbps 00.1% 10:00 CALTECH/CADAM 56 kbps 00.5% 18:00 CALTECH/CITY OF HOPE 56 kbps 00.2% 15:00 CALTECH/CLAREMONT 56 kbps 21.4% 15:00 CALTECH/DISNEY 56 kbps 04.3% 10:00 CALTECH/OXY 56 kbps 10.2% 10:00 SDSC/AJS 56 kbps 01.4% 10:00 SDSC/KOREA 56 kbps 09.1% 00:00 SDSC/QUALCOMM 56 kbps 09.0% 10:00 SDSC/SCIH 56 kbps No Capacities available for this week. SDSC/USD 56 kbps 07.7% 13:00 SDSC/USIU 56 kbps 00.5% 12:00 SDSC/XEROX 56 kbps 00.6% 11:00 UCI/CMD 56 kbps 03.3% 20:00 UCI/EMULEX 56 kbps 01.2% 14:00 UCI/FULLERTON 56 kbps 01.5% 13:00 UCI/HUGHES 56 kbps 09.0% 11:00 UCI/MTI 56 kbps 03.2% 08:00 UCI/SPARTA 56 kbps 03.8% 12:00 UCI/UNOCAL 56 kbps 08.1% 11:00 UCLA/ISX 56 kbps 01.2% 17:00 UCLA/PEPPERDINE 56 kbps 01.9% 11:00 UCLA/QUOTRON 56 kbps 09.3% 17:00 UCLA/SMC 56 kbps 02.2% 00:00 UCOP/FARALLON 56 kbps 05.3% 17:00 UCOP/INTEL 56 kbps No Capacities available for this week. UCOP/LSIL 56 kbps 08.1% 20:00 UCOP/NETLABS 56 kbps 13.7% 19:00 ------------------------------------------------------------------------------ SITE CISCO BOX UPTIME SINCE LAST REBOOT (as of 00:15 PST on Apr. 6th, 1992): CERFnet BACKBONE CALTECH [131.215.139.253] Up: 08 days 05 hours 41 minutes SDSC LongBoard [134.24.99.254] Up: 03 days 03 hours 35 minutes [Unknown] SDSC Drzog [132.249.16.13] Up: 17 days 07 hours 00 minutes SDSC Hang10 [132.249.16.15] Up: 04 days 10 hours 46 minutes [Equipment Trouble - See Ticket #884] SDSC Drzog [132.249.16.13] Up: 17 days 07 hours 00 minutes UCI [128.200.1.101] Up: 87 days 16 hours 07 minutes UCLA [128.97.130.10] Up: 00 days 06 hours 28 minutes [Power Outage - See Ticket #888] UCOP [134.24.52.112] Up: 12 days 16 hours 38 minutes UCR [134.24.108.105] Up: 15 days 06 hours 48 minutes CERF 1544 AGI [134.24.202.110] Up: 52 days 13 hours 54 minutes APPLE [134.24.70.200] Up: 161 days 06 hours 15 minutes BIOSYM [134.24.57.200] Up: 02 days 05 hours 27 minutes [Unknown] CISCO Systems [134.24.54.200] Up: 26 days 04 hours 20 minutes CSUCO/SWRL [130.150.102.200] Up: 03 days 18 hours 49 minutes [Unknown] GA [134.24.221.200] Up: 16 days 19 hours 56 minutes GD [134.24.60.200] Up: 35 days 13 hours 31 minutes LLUMC [134.24.208.200] Up: 138 days 12 hours 22 minutes SAIC [134.24.53.208] Up: 92 days 08 hours 34 minutes SCAQMD [134.24.234.200] Up: 108 days 14 hours 27 minutes SDSU [192.77.100.101] Up: 118 days 16 hours 31 minutes UCSB [134.24.107.107] Up: 138 days 07 hours 38 minutes CERF 56 AJS [134.24.225.101] Up: 79 days 14 hours 17 minutes CADAM [134.24.229.200] Up: 61 days 13 hours 01 minutes CLAREMONT [134.24.206.109] Up: 09 days 17 hours 39 minutes CMD [134.24.218.200] Up: 69 days 13 hours 14 minutes DATAPRODUCTS [134.24.211.104] Up: 05 days 09 hours 33 minutes [Unknown] DISNEY [134.24.207.211] Up: 67 days 00 hours 33 minutes EMULEX [134.24.209.212] Up: 113 days 15 hours 48 minutes FARALLON [134.24.56.200] Up: 07 days 02 hours 24 minutes FULLERTON [134.24.214.217] Up: 21 days 16 hours 57 minutes HUGHES [134.24.204.200] Up: 143 days 07 hours 21 minutes INTEL [134.24.55.200] Up: 08 days 11 hours 34 minutes LSIL [134.24.72.200] Up: 57 days 13 hours 08 minutes MTI [134.24.216.100] Up: 93 days 13 hours 39 minutes NETLABS [134.24.71.200] Up: 11 days 08 hours 51 minutes OXY [134.24.205.108] Up: 30 days 15 hours 26 minutes PEPPERDINE [134.24.203.218] Up: 43 days 13 hours 14 minutes QUALCOMM [134.24.200.201] Up: 03 days 13 hours 34 minutes [Equipment Trouble] QUOTRON [134.24.230.202] Up: 01 days 12 hours 00 minutes [Power Outage - See Ticket #893] SANTA MONICA [134.24.210.219] Up: 23 days 12 hours 40 minutes SCI-HOR [134.24.109.205] Up: 10 days 04 hours 27 minutes SERI/KOREA [134.24.223.200] Up: 16 days 16 hours 06 minutes SPARTA [134.24.215.200] Up: 06 days 10 hours 57 minutes [Power Outage - See Ticket #880] UNOCAL [134.24.217.200] Up: 31 days 01 hours 57 minutes USD [134.24.201.106] Up: 10 days 06 hours 12 minutes USIU [134.24.222.215] Up: 274 days 17 hours 07 minutes XEROX [134.24.51.207] Up: 158 days 23 hours 22 minutes DIAL n' CERF DNC-SDSC [134.24.1.2] Up: 27 days 05 hours 09 minutes DNC-UCI [134.24.2.2] Up: 89 days 03 hours 24 minutes DNC-UCLA [134.24.3.2] Up: 00 days 06 hours 25 minutes [Power Outage - See Ticket #888] DNC-CALTECH [134.24.4.2] Up: 08 days 05 hours 42 minutes DNC-UCOP [134.24.5.2] Up: 57 days 08 hours 58 minutes

1 0

FYI: New test version of cisco BGP
by Tony Li 03 Apr '92

03 Apr '92

I have a new test image which I believe will support multiple BGP neighbors without a problem. If you would like to try it, please pick up testtli.bgp2 and/or testtli.bgp2-igs from ftp.cisco.com. This version is based on 8.3(2.3). This code has been tested somewhat, but should be considered armed and dangerous. These changes will be incorporated into a future 8.3 build. I will also be modifying these changes to work in 9.0 in the near future. Tony

1 0

Additions to the NSFNET policy-based routing database
by Belinda Sue Blair 03 Apr '92

03 Apr '92

The following networks have been added to the NSFNET policy-based routing database: T1 Network: ----------- Net # Net Name Primary Secondary Location -------- ----------- ------- --------- -------- 138.165 REGION-CS1 184 164 NCTC, NAVTASC, Building 31, Redlind Drive, Cheltanhem, MD 20397, USA 138.160 NAVNET 184 164 Naval Air Station, Building 603, Pensacola, FL 32508, USA 142.132 UWPGNET 603 601 University of Winnipeg, Computer Services, Winnipeg, MB, R3B 2E9, CANADA 192.149.223 USPS-NET 86 279 US Postal Service, 475 L'Enfant Plaza, SW, Washington, DC 20260-6444, USA 192.147.218 REDE-PARA 293 291 Universidade Federal Do Para, Belem - Para' - BRAZIL 192.147.210 UFPA 293 291 Universidade Federal Do Para, Belem - Para' - BRAZIL 192.147.148 LON-UNIV-2 274 60 University of London, London, UNITED KINGDOM 192.146.229 GOELDI 293 291 Emilio Goeldi Museum, Belem - Para' - BRAZIL 192.102.241 SURA-NET1 86 279 SURAnet, 8400 Balt. Boulevard, College Park, MD 20740, USA 192.94.173 GLERL 233 177 Great Lakes Environmental Research Laboratory, Michigan, USA 192.54.253 TCLARINET 200 201 ClariNet Communications Corp., 1113 Lochinvar Ave, Sunnyvale, CA 94087, USA 158.222 LLOYD2 200 201 Lloyd and Associates, 3420 Sudbury Rd, Cameron Park, CA 95682, USA 155.247 TEMPLE-EDU 1206 204 Temple University, Computer Room 763, Broad & Montgomery Ave. Philadelphia, PA 19122, USA 192.150.177 MANLAN-1 274 60 University of Manchester, Computing Centre, Oxford Road, Manchester, M13 9PL, UNITED KINGDOM 192.150.122 AIXSERV-DMZ 750 756 IBM Corporation, 11400 Burnet Road, Internal Zip 2900, Building 42, Austin, TX 78758, USA 192.149.148 NGDC 209 210 National Geophysical Data Center, NOAA/NGDC, 325 Broadway EGC4, Boulder, CO 80303, USA 192.138.214 SUFFOLK-NET3 560 281 Suffolk University, 8 Ashburton Place, Boston, MA 02108, USA 192.153.23 PPLD-NET 209 210 Pikes Peak Library District, 5550 North Unios Blvd, Colorado Springs, CO 80918, USA 192.153.10 COGWHEEL-COM 209 210 COGWHEEL, INC., POB 1354, BOULDER, CO 80306-1354, USA 192.138.213 SUFFOLK-NET2 560 281 Suffolk University, 8 Ashburton Place, Boston, MA 02108, USA 158.98 TRANSARC-B 1206 204 Transarc Corporation, 707 Grant St., Pittsburgh, PA 15219, USA 137.182 PGCOM 750 756 Procter and Gamble, Procter and Gamble Plaza, P.O. Box 599, Cincinnati, OH 45201, USA 150.161 UFPE-ANPE 293 291 Universidade Federal de Pernambuco, Caixa Postal 7851 - DEP 50739, Recife - PE, BRAZIL Total NSFNET T1 announced networks: 4998 T3 network: ----------- Network IP: 137.182 Network Name: PGCOM Location: Procter and Gamble, Procter and Gamble Plaza, P.O. Box 599, Cincinnati, OH 45201, USA Country Code: US 1:600 OARNET, Cleveland, OH Network IP: 152.159 Network Name: MHP-NET Location: McGraw-Hill, Inc.,, Princeton Rd.,, Highstown, NJ 08520, USA Country Code: US 1:1324 ANS New York City - DNSS 35 Network IP: 158.98 Network Name: TRANSARC-B Location: Transarc Corporation, 707 Grant St., Pittsburgh, PA 15219, USA Country Code: US 1:1206 PSCNET Network IP: 158.222 Network Name: LLOYD2 Location: Lloyd and Associates, 3420 Sudbury Rd, Cameron Park, CA 95682, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.54.253 Network Name: TCLARINET Location: ClariNet Communications Corp., 1113 Lochinvar Ave, Sunnyvale, CA 94087, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.94.173 Network Name: GLERL Location: Great Lakes Educational Research Laboratory, Michigan, USA Country Code: US 1:237 MERIT network Network IP: 192.102.241 Network Name: SURA-NET1 Location: SURAnet, 8400 Balt. Boulevard, College Park, MD 20740, USA Country Code: US 1:86 SURANET Regional Network 2:279 Georgia Tech Network IP: 192.149.223 Network Name: USPS-NET Location: US Postal Service, 475 L'Enfant Plaza, SW, Washington, DC 20260-6444, USA Country Code: US 1:86 SURANET Regional Network 2:279 Georgia Tech Network IP: 192.150.122 Network Name: AIXSERV-DMZ Location: IBM Corporation, 11400 Burnet Road, Internal Zip 2900, Building 42, Austin, TX 78758, USA Country Code: US 1:1782 AIXSERV-AS, ENSS 174 Total T3 configured networks: 2728 ************************************************************************** The configuration reports, map information sheets, and configuration files which reflect these changes are available for anonymous ftp on nis.nsf.net as usual. nsfnet/announced.networks - configuration reports latest report for: - NSFNET T1 has the file extension .now - NSFNET T3 has the file extension 3.now nsfnet/backbone.configuration - configuration files for the routing software for each NSS latest report for: - NSFNET T1 has the file format config.nss# - NSFNET T3 has the file extension .t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line. from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files TEMPLATE.NET, TEMPLATE.GATE, and TEMPLATE.AS. ******************************* -B. Sue Blair Merit Network Operations

1 0

Re: March NSFNET T1 Usage by Service
by Olivier Martin 02 Apr '92

02 Apr '92

Merit/NSFNET.Information.Services-Interested.Parties(a)um.cc.umich.edu, Elise Gerich <epg(a)merit.edu>, Jessica Yu <jyy(a)merit.edu>, nsfnet-info(a)merit.edu, nsfnet-reports(a)merit.edu, smh(a)merit.edu, "Stefan Fassbender (GMD/EASInet)" <stf(a)easi.net> In-Reply-To: Message of Wed, 01 Apr 92 14:41:12 EST from <sgoldste(a)cise.cise.nsf.gov> On Wed, 01 Apr 92 14:41:12 EST you said: >Which just goes to illustrate that traffic-based cost-sharing models for >[intercontinental] links are complicated by things like FTP where the origin >address sends huge amounts of data for which it did not initiate the >session. Some countries/entities turn out to be (grossly) net exporters >of data. --SG Yes, but I still contend that the MERIT provided traffic figures for the incoming EASINet traffic are completely wrong by a factor 1000, sorry for looking stubborn, but wrong statistics are worse than no statistics. Olivier

1 0

Re: March NSFNET T1 Usage by Service
by Olivier Martin 02 Apr '92

02 Apr '92

Merit/NSFNET.Information.Services-Interested.Parties(a)um.cc.umich.edu, Elise Gerich <epg(a)merit.edu>, Jessica Yu <jyy(a)merit.edu>, nsfnet-info(a)merit.edu, nsfnet-reports(a)merit.edu, smh(a)merit.edu, "Stefan Fassbender (GMD/EASInet)" <stf(a)easi.net> In-Reply-To: Message of Wed, 1 Apr 92 13:36:53 EST from <jaw(a)merit.edu> On Wed, 1 Apr 92 13:36:53 EST you said: >Olivier, > >The use of NNStat for statistics collection on the T1 backbone has >not been disabled at any point of entry. Ultimately, drastically >differing in and out counts are not unusual..................... it may be, but in the case of CERN they are, as CERN is also a data source. >................................................................ >Using the net primarily for ftp will appear as a small amount of >traffic into the backbone and a significantly larger traffic >volume out. >................................................................ >We hope this information helps explain your concerns. Please let >us know if we might provide further clarification. > The reason I am very suspicious, is that we are collecting the cisco accounting frequently enough that we do not lose too much of it, and we are therefore in a good position to cross-check our results with those of MERIT. Whereas, our figures agree with the NSFNet ones regarding the traffic out of the T1 backbone, there is a complete mismatch regarding the traffic into the T1 backbone. For example, MERIT reports 358,200 bytes coming from 128.141, the main CERN network, whereas we measure 5,239 Gigabytes (factor 14,000). However, we agree for the traffic to CERN from the US, 5,212 Gigabytes (MERIT), 5,239 Gigabytes (CERN). Back to EASINet as a whole, I do not think it is realistic to believe that the real traffic patterns are as distorted as I reported yesterday, namely: >From EASINet--->NSFNet 78.73 Megabytes (which would be less than the CERN originated traffic, according to us) **** YES, this is Megabytes, NOT in Gigabytes ************ >From NSFNet---->EASINet 82.14 Gigabytes (which is probably all right, but we can only crosscheck part of it because some of the routers at CERN are not controlled by us, what we could measure is: 43.73 GBytes). To put these figures in perspective, the International Connection Manager (ICM) which is handling the lines from Cornell to Stokholm (Nordunet) and INRIA (France) would have, according to MERIT: 68.29 Gigabytes (out) and 43.42 Gigabytes (in) which is more like the 1/3 2/3 rule of thumb which we observed in 1991, and which shows that even though the USA are exporting more data than they receive, the balance is not that bad, especially considering the small number of FTP servers in Europe, Finland excepted. Olivier

1 0

March NSFNET T1 Usage by Service
by jaw 01 Apr '92

01 Apr '92

Olivier, The use of NNStat for statistics collection on the T1 backbone has not been disabled at any point of entry. Ultimately, drastically differing in and out counts are not unusual. On average, 27% of the packets and 50% of the bytes are from ftp: Jan 1992 28% packets 50% bytes Feb 1992 27% packets 50% bytes Mar 1992 29% packets 52% bytes Using the net primarily for ftp will appear as a small amount of traffic into the backbone and a significantly larger traffic volume out. Washington University at St. Louis (MO) exhibits a similar statistical measurement: Pkts (millions) Bytes (billions) IN OUT IN OUT Dec 1991 294 157 126 12 Jan 1992 332 212 139 17 Feb 1992 338 214 142 17 Perennially, they are the 1st or 2nd highest volume net on the NSFNET, apparently due to a very large PC archive accessed primarily via ftp. Similar numbers are noted with other high volume nets. It's not surprising that other nets will show the reverse of this IN/OUT volume relationship. We hope this information helps explain your concerns. Please let us know if we might provide further clarification. With sincere apologies for the delay in sending this information on to you, and thanks to Susan Horvath for her analysis and review, Jo Ann Ward Merit/NSFNET Information Services ********************************************************************************** Message: 12625724, 33 lines Imported: 12:01pm EST, Wed Apr 1/92 Subject: Re: March NSFNET T1 Usage by Service To: Merit/NSFNET Information Services-Interested Parties, Susan M. Horvath From: MARTIN%CEARN.BITNET(a)pucc.Princeton.EDU Merit/NSFNET.Information.Services-Interested.Parties(a)um.cc.umich.edu, Douglas.E.Van.Houweling(a)um.cc.umich.edu, nsfnet-reports(a)merit.edu, nsfnet-info(a)merit.edu cc: Elise Gerich <epg(a)merit.edu>, Jessica Yu <JYY(a)MERIT.EDU>, "Stefan Fassbender (GMD/EASInet)" <stf(a)easi.net> In-Reply-To: Message of Wed, 1 Apr 92 10:49:34 EST from <Susan.M.Horvath(a)um.cc.umich.edu> Thank you for your very interesting tarffic reports, there is a question which I have been trying to get answered without much success for some time, which is the following: Why is the traffic from ASN 590 (EASINet) into the T1 backbone so small whereas the traffic to ASN 590 is so high (ratio 1/1000 in february). (To be more precise: 78.736 Megabytes In, 82.14 Gigabytes Out)! My personal explanation is that you only take into account the incoming traffic and that for some reason, accounting has been disabled at the EASINET entry into the T1 backbone, therefore only the traffic coming via alternate access points (i.e. secondary or ternary) is really accounted for, however, I could never get any confirmation of this "theory". If this theory happened to be right, I would very much appreciate that adequate mention to it be made inside the files containing the traffic statistics. Olivier

3 2

Re: March NSFNET T1 Usage by Service
by Olivier Martin 01 Apr '92

01 Apr '92

Merit/NSFNET.Information.Services-Interested.Parties(a)um.cc.umich.edu, Douglas.E.Van.Houweling(a)um.cc.umich.edu, nsfnet-reports(a)merit.edu, nsfnet-info(a)merit.edu cc: Elise Gerich <epg(a)merit.edu>, Jessica Yu <JYY(a)MERIT.EDU>, "Stefan Fassbender (GMD/EASInet)" <stf(a)easi.net> In-Reply-To: Message of Wed, 1 Apr 92 10:49:34 EST from <Susan.M.Horvath(a)um.cc.umich.edu> Thank you for your very interesting tarffic reports, there is a question which I have been trying to get answered without much success for some time, which is the following: Why is the traffic from ASN 590 (EASINet) into the T1 backbone so small whereas the traffic to ASN 590 is so high (ratio 1/1000 in february). (To be more precise: 78.736 Megabytes In, 82.14 Gigabytes Out)! My personal explanation is that you only take into account the incoming traffic and that for some reason, accounting has been disabled at the EASINET entry into the T1 backbone, therefore only the traffic coming via alternate access points (i.e. secondary or ternary) is really accounted for, however, I could never get any confirmation of this "theory". If this theory happened to be right, I would very much appreciate that adequate mention to it be made inside the files containing the traffic statistics. Olivier

1 0

March NSFNET T1 Usage by Service
by Susan.M.Horvath＠um.cc.umich.edu 01 Apr '92

01 Apr '92

NSFNET T1 Usage by Service March 1992 Service Type % Packets % Bytes ============ ========= ======= File exchange 29 52 Networked mail 21 22 Interactive 14 5 Name lookup 7 4 Other TCP/UDP services 27 16 Non TCP/UDP services 2 1 --- --- 100 100 The categories above are defined as follows: File exchange ftp: data and control (tcp ports 20, 21) Networked mail smtp, nntp, vmnet, uucp (tcp ports 25, 119, 175, 540) Interactive telnet, finger, who, login (tcp ports 23, 79, 513, udp port 513) Name lookup domain name service (udp port 53, tcp port 53) Other TCP/UDP services all tcp/udp ports not included above (e.g. irc, talk, X-windows, appletalk) Non-TCP/UDP services icmp, egp, etc. More detailed information is available for anonymous FTP from NIC.MERIT.EDU (the Merit NIC Services machine) in the file "t1-9203.ports" on the nsfnet/statistics/1992 directory.

1 0

CERT ADVISORY - AIX /bin/passwd Vulnerability
by CERT Advisory 31 Mar '92

31 Mar '92

=========================================================================== CA-92:07 CERT Advisory March 31, 1992 AIX /bin/passwd Vulnerability --------------------------------------------------------------------------- The Computer Emergency Response Team/Coordination Center (CERT/CC) has received information concerning a vulnerability with the passwd command in AIX 3.2 and the 2007 update of AIX 3.1. IBM is aware of this problem, and a fix is available as apar number "ix23505". Patches are available for AIX 3.2 and the 2007 update of AIX 3.1. This fix may be ordered from Level 2 support or by anonymous ftp from software.watson.ibm.com (129.34.139.5) on the Internet. 1. To order from IBM call 1-800-237-5511 and ask that the fix be shipped. Patches may be obtained outside the U.S. by contacting your local IBM representative. 2. If you are on the Internet, use anonymous ftp to obtain the fix from software.watson.ibm.com. Patch Filename Checksum AIX 3.2 pub/aix3/pas.32.tar.Z 54431 2262 AIX 3.1 2007 pub/aix3/pas.31.tar.Z 06703 99 Patches should be retrieved using binary mode. IBM is currently incorporating the fix into the 3.2 version and 3.1 updates of AIX. Future shipments of these products should not be vulnerable to this problem. If you have any questions about products you receive, please contact your IBM representative. --------------------------------------------------------------------------- I. Description The passwd command contains a security vulnerability. II. Impact Local users can gain unauthorized root access. III. Solution A. As root, disable /bin/passwd until you obtain and install the patch. # chmod 0500 /bin/passwd B. Obtain the fix from IBM and install according to the directions provided with the patch. --------------------------------------------------------------------------- The CERT/CC would like to thank Paul Selick of the University of Toronto for bringing this security vulnerability to our attention. We would also like to thank IBM for their quick response to this problem, and for making the patches available via anonymous ftp. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact CERT/CC or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.sei.cmu.edu Telephone: 412-268-7090 (24-hour hotline) CERT/CC personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. Computer Emergency Response Team/Coordination Center (CERT/CC) Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous ftp from cert.sei.cmu.edu (192.88.209.5).

1 0

NOC Management
by Jim Williams 31 Mar '92

31 Mar '92

I am pleased to announce that John Labbe has been appointed Interim Manager of the Merit Network Operations Center. John will be responsible for those areas previously assumed by Dale Johnson who will devote his energies to managing the Merit Network Management Systems group. ------------------------------------------------------------------------------ Jim Williams Internet jimw(a)merit.edu Associate Director for National Networking Phone 313-764-6445 Merit Network, Inc. FAX 313-936-2180 ------------------------------------------------------------------------------

1 0