April 1998 - Test - lists.nanog.org

So, Cisco?
by Al Reuben 22 Apr '98

22 Apr '98

So, I saw in the Cisco price guide, under 3600 Series: NM-1HSSI Single port HSSI network module for 3640 and 3620 $6,000 First, I can't find anything about it on the website. Second, if anyone at Cisco would care to comment, how fast will this card go before the box starts to mel? And last, will it now/ever work in a 2600? Thanks! -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP! We have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

1 0

DoS tracking service
by Jeremy Porter 22 Apr '98

22 Apr '98

Just forwarding this for a friend. ------- Forwarded Message Date: Wed, 22 Apr 1998 11:16:48 -0700 From: "Steve Uurtamo" <uurtamo(a)AZStarNet.com> To: jerry(a)fc.net Subject: Re: Filtering ICMP (Was Re: SMURF amplifier block list) > Okay, so it's clear that we need to come up with some sort of sol'n > to these kinds of problems. > > Here's my two cents: > > Don't block all of ICMP. Block pings and traceroutes if you think that > it's going to make your life better, but please don't break anything else. > > We need a low-pain protocol to allow provider NOCs to check out a > few salient things on their upstream provider's/peers routers -- > e.g. which interface a particular spoofed packet is coming from, the IP > address of the remote-side interface, etc., etc., all the way back > to the source. This would allow provider NOCs to track this stuff > down themselves. No more 6 hour phone calls to people with various > degrees of clue/time/energy for a problem that may only occur for > 15 minutes at a time, every 4 hours. > > It wouldn't be hard to jimmy this protocol (in case people care) such that > you would ONLY be able to track back to a particular NOC's router if all > of the inbetween-routers had "signed off" on the fact that what you're lookin g > for (specific dst/src or packet type) had actually SHOWN UP on them as well. > It wouldn't have to continuously check this -- just check once and PK-encrypt > the timestamp into the signature on the authentication packet. Various > timeouts could be configured by individual NOCs. (Yes, each NOC could have > its own PK value -- but there would only have to be one per AS). > > Before everyone gets all hot and bothered about the suggestion that I'm > making -- I'm not talking about arbitrary packet sniffing -- I'm talking > about sniffing HEADERS on packets whose dst address (or packet type or > whatever everyone agrees is significant) is inside the domain of the dst > provider. Not a big deal. I really don't think that it's that > much to give up -- hell, digex already allows me to dump their entire BGP > table anytime I want -- i'm just talking about some very minimal tracking > ability. > > Some companies, such as sprint, who may have hundreds of customers plugged > into a single router, may not want to do this. But frankly, without this, > we're all dependent upon the clue/time/energy of some guy who's busy doing > his own thing, and we aren't guaranteed timely and accurate information. > > Actually, now that I think of it, you could almost jimmy this out of a > few hours of PGP-wrapped SNMP-calling perl scripts listening to some > fixed socket at some fixed (and published) IP address of each network > provider. No reason to dick with the router code if no need to. > > > What say ye? > > > > steve ------- End of Forwarded Message

1 0

Re: Filtering ICMP (Was Re: SMURF amplifier block list)
by shields＠crosslink.net 22 Apr '98

22 Apr '98

In article <Pine.LNX.3.95.980421001700.3979H-100000(a)devel.dbd.com>, Mark Whitis <whitis(a)dbd.com> wrote: > Even then, your netmask should have 1s on the left and right > (i.e. 255.255.0.255) for a /16 subnetted at /8. Discontiguous netmasks has been deprecated or unsupported for a very long time. -- Shields, CrossLink.

1 0

RE: AT&T Outage cause last week.
by Goldstein_William＠bns.att.com 22 Apr '98

22 Apr '98

1 0

Internet Governance: DC-ISOC Meeting on May 11
by Russ Haynal 22 Apr '98

22 Apr '98

Those of you within "driving distance" to Washington DC Metro area might be interested in our next Meeting of the DC Chapter of Internet Society. To automatically receive future meeting announcements, Join our mailing list at http://www.dcisoc.org . Russ Haynal ================================================================ [ Note: This email contains several pieces of information: ] [ 1- Meeting Announcement for DC-ISOC (May 11) ] [ 2- Reminder for ISOC Board of Directors Elections ] [ 3- Additional links from the Previous DC-ISOC Meeting ] [ 4- Netpreneur Announcement about E-commerce meeting ] Mark Your Calendar!! DC-ISOC Announces its Next Meeting: - - - - - - Internet Governance - "Who's in Charge Here?" - - - - - - - - Monday, May 11, 1998, 6:30-9:00 p.m. PRELIMINARY Meeting Agenda The Internet has continued to grow at an astonishing rate. This diverse expansion has attracted the interests of several regulating organizations and governments. Are the industry self-governing groups (e.g., ISOC, IAB, IANA, etc.) sufficient, or is there a role for governmental bodies (e.g., FCC, ITU, etc.)? Are new industry groups needed (as the White House's Green Paper suggests)? If so, how will they come about? Confirmed Speakers (so far) include: * Donald Heath - President/CEO of the Internet Society http://www.isoc.org * VINTON G. CERF - Senior Vice President, Internet Architecture and Engineering MCI Communications Corporation http://www.mci.com * Note: this is a preliminary meeting announcement. Additional Speakers will be identified in the final event announcement which will be sent during the beginning of May. Following the speaker presentations, there will be an open Q&A session with the audience. Meeting Location: Hyatt Dulles (Across Route 28 from Dulles Airport) 2300 Dulles Corner Blvd. Herndon VA 22071 USA Telephone: 1 703 713 1234 http://www.hyatt.com/pages/d/dullea.html Directions From Beltway: Take exit for Dulles Toll Road - West Take exit 10 from Dulles Toll Road Head South on Centreville Road Right on Fox Mill Road Hotel is 1 mile ahead on the right. As with all of our previous events, there is no charge to attend this event. Seating will be on a first-come, first-seated basis, though we expect that there should be room for all those interested. Please plan to arrive by 6:30 to "network", and to enjoy the refreshments (cookies & soft drinks) that are being provided by our sponsor. Speakers will begin at 7pm. ************* T H A N K S T O O U R S P O N S O R *********** * DC-ISOC wishes to thank InternetMCI for sponsoring this meeting. * * internetMCI offers Internet access options to fit every need * * and every budget. internetMCI Access Services provide * * you with a direct and reliable connection to the Internet * * through flexible options for dial-up or dedicated access. * * Please visit internetMCI at http://www.mci.com * ********************************************************************* To Sponsor a DC-ISOC Meeting, see http://www.dcisoc.org/sponsor.htm A short list of related links for this topic: * Internet Society http://www.isoc.org * Internet Architecture Board (IAB) http://www.iab.org/iab * Internet Assigned Numbers Authority http://www.iana.org/iana * Generic Top Level Domain Memorandum of Understanding http://www.gtld-mou.org/ * US Government's "green paper" on domain names http://www.ntia.doc.gov/ntiahome/domainname/022098fedreg.htm * Internet Society's web page relating to the "Green Paper" http://www.isoc.org/internet/news/greenpaper.shtml * MCI's formal response to the White House Green Paper on domain name system reform http://www.mci.com/mcisearch/aboutyou/interests/technology/ontech/DNSpaper.s html * FCC's Factsheet about ISP's and Access Charges http://www.fcc.gov/Bureaus/Common_Carrier/Factsheets/ispfact.html * International telecommunication Union http://www.itu.ch/ ========== ATTENTION ISOC MEMBERS... DON'T FORGET TO VOTE =============== Reminder - The 1998 Internet Society Board of Trustees Elections are underway. 11 candidates are running for 5 trustee Positions. As an Internet Society member, you are given 5 votes to distribute any way you choose among the candidates. For example, you could: - cast 1 vote each for 5 different candidates - cast all 5 of your votes for a specific candidate - cast 2 votes for candidate "A", 2 votes for "B", and 1 vote for "C" - etc. You should have received your ballots in the mail. You can read about the candidates and CAST YOUR VOTE ONLINE at: http://www.isoc.org/members/vote/98election/98candinfo.shtml The deadline for Voting is May 29, but why not go to the online site NOW, and influence the Future of the ISOC and Internet. ======================================================================== Membership Information.... Individuals who are interested in becoming members of DC-ISOC can do so by joining the Internet Society. See Internet Society's web site at http://www.isoc.org for more information. The Washington DC Chapter of the Internet Society maintains its own web site at: http://www.dcisoc.org Please feel free to pass this announcement message along to other interested individuals. If this message was forwarded to you, you can join the DC-ISOC announcement mailing list through our web site ( http://www.dcisoc.org ) Watch for a more detailed meeting announcement at the beginning of May. See you there. Russ Haynal ================================================================== UPDATE: From the "War on Spam" meeting held on April 2nd... Here are 2 additional websites mentioned during the presentations: The AOL Legal Department Website is: http://legal.web.aol.com MCI's Spamming Policy is located at: http://www.mci.com/aboutus/company/corporate/consumer/spam.shtml Thanks again to our speakers and sponsor for a successful event (original event details are archived at http://www.dcisoc.org . ============================================================= AN EVENING WITH THE STARS OF E-COMMERCE Presented by the Morino Institute June 3, Mayflower Hotel, Washington, D.C. 6:00 p.m. Registration & Pre-reception 7:00 pm Program 9:00 pm Post Reception To Register: http://netpreneur.org/ecommerce The Potomac KnowledgeWay Netpreneur Program invites you to spend An Evening with the Stars of E-Commerce. This is your opportunity to learn from and interact with four stellar entrepreneurs who founded some of the region's hottest electronic commerce businesses. Gary Arlen, who Advertising Age referred to as "one of the most visible and most quoted new media gurus" will moderate and lead the evening's discussion. Gary is President of Arlen Communications Inc. On June 3, find out what: John Backus, President & Chief Executive Officer of Intelidata Technologies Corporation Bill Gorog, Chairman of the Board of Directors of Intelidata Technologies Corporation (also developer of Lexis Nexis) Jack McDonnell, President & Chief Executive Officer of Transaction Network Services, Inc. Mark Walsh, President & Chief Executive Officer of VerticalNet, Inc. view as the keys to survival and success in an industry that is expected to explode in the next two years. With expertise in areas that include home banking software, vertical trade communities, data communications services for transaction-oriented applications, and the development of technologies of the caliber of Lexis Nexis, this group has the capacity to address the world of electronic commerce from all angles. The event will follow a town-hall format with brief six- to eight-minute presentations from the Stars, followed by extensive time for audience interaction. Mario Morino, Chairman of the Morino Institute, will wrap up the evening with his own views of the region and the netpreneur movement. Previous An Evening With Netpreneur events drew commutative crowds of nearly 2,000. Only 700 seats are available for the June 3 program. To be assured of your seat to star gaze, sign up now at: http://netpreneur.org/ecommerce You may also email your registration to <ecommerce(a)netpreneur.org>. Please include your name, company, email address and a brief description of your company. ____________________________________________________________________ Russ Haynal - Internet Consultant, Instructor, Speaker "Helping organizations gain the most benefit from the Internet" russ(a)navigators.com http://navigators.com 703-729-1757 -------------------------------------------------------------------- Author:"Internet; A Knowledge Odyssey" (Top-rated CD-ROM Tutorial) See MindQ Publishing- http://www.mindq.com/cdt/company/products.html

1 0

MAE-East snafu redux
by Jeremiah Kristal 22 Apr '98

22 Apr '98

Has everyone just become so used to terrible performace at MAE-East, or am I the only one seeing problems? I'm seeing perfect performance to networks connected to Gigaswitch 1 (excluding overloaded ports), but 15-20% packet loss to anyone connected to any other Gigaswitch. In the past MFS would jump on these tickets, find a frozen card on Gigaswitch 6, reset it, and clear the trouble. It has been over 24 hours since I opened a ticket, I've spoken with MFS Datanet Engineering, and I still don't think I've spoken to anyone at MFS who is aware that all traffic between Gigaswitches goes through Giga6. If anyone has time tonight, could they check performance to other providers on the same Gigaswitch and on other Gigas. If you need to know which provider is on which switch, go to http://www.mfsdatanet.com:80/MAE/east.map.html Thanks, and hopefully this is on topic, even if it doesn't contain actual router commands. :) Jeremiah Kristal Senior Network Engineer ICon CMT Corporation jeremiah(a)iconnet.net 201-319-5764 x284 internal

3 2

IEGRP v OSPF
by Geoff Hill 21 Apr '98

21 Apr '98

Subject: Case Study : EIGRP / OSPF Date: Sat, 11 Apr 1998 12:09:10 -0700 From: Geoff Hill <hillgm(a)corplink.com.au> To: nanog(a)merit.edu Gidday, I am interested in the comparison of these two protocols. Could you poin t me to a copy of the above paper please. Geoff Hill

1 0

Re: MAE-East snafu redux
by Sean Donelan 21 Apr '98

21 Apr '98

>Has everyone just become so used to terrible performace at MAE-East, or am >I the only one seeing problems? I'm seeing perfect performance to >networks connected to Gigaswitch 1 (excluding overloaded ports), but >15-20% packet loss to anyone connected to any other Gigaswitch. In the No. But the rest of us are too afraid to ask MFS to touch the switches least they start falling over every 15 minutes again, as has happened the last few times MFS jiggled something. I do wish providers and MFS could arrange trunking a bit better. For example, we on the same gigaswitch as one provider, but we end up sending traffic across the inter-switch trunks to a different gigaswitch because of the way the BGP sessions are setup with a second router the provider uses. Yes, the other provider is aware of it, and yes the other provider's senior backbone engineering staff is aware of it, and yes they have no plans to change it. I almost get the impression, they want it to have poor connectivity. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Re: Filtering ICMP (Was Re: SMURF amplifier block list)
by Eric Germann 21 Apr '98

21 Apr '98

At 08:45 PM 4/21/98 +0400, Alex P. Rudnev wrote: >1) Traceroute is not affected by this filter; Just a note that if you are using Winders, tracert does use ICMP Echo Requests, no high port numbers. FYI. >2) ICMP is really blocked at many different places of Internet; we answer >every day _no matter you can't ping www.XXX.com, it's becuase they refuse >PING's to their network_. Still don't make it right. ============================================================================ ==== Eric Germann Computer and Communications Technologies ekgermann(a)cctec.com Van Wert, OH 45891 Phone: 419 968 2640 http://www.cctec.com Fax: 419 968 2641 Network Design, Connectivity & System Integration Services A Microsoft Solution Provider

1 0

Post-mortem, One company's response to a network outage
by Sean Donelan 21 Apr '98

21 Apr '98

Its been a week since the latest provider-wide network failure, so here's a bit of post-mortem. As reported everywhere, the AT&T frame-relay network failed last Monday, April 13, 1998. Since then, AT&T has been catching up in the keeping the customer informed department. Even recognizing the substantial penalty because of the slow initial response, I have to admit that AT&T eventually surpassed most of their competitors in this area. Full disclosure, AT&T did offer me some baseball tickets. The next question is how well will Cisco/StrataCom handle their part in this incident. Was it something unique about the AT&T network, or are other providers who also use cisco/StrataCom frame-relay switches at risk of experiencing the same problem. Or had they already experienced the problem, and updated their switches prior to this event. This isn't the first frame-relay network that has collapsed. And finally, does anyone know why the cloak of secrecy over where the two initial frame-relay switches that failed? Even though the New York Times reported (which doesn't make it true, just highly probable) the switches were in Albany and Cambridge, the AT&T people seem striken by apoplexy when you mention the general location. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0