April 1998 - Test - lists.nanog.org

Hate bother anyone...
by Richard Irving 21 Apr '98

21 Apr '98

But, I couldn't find a reference to a MAC address on a piece of ethernet... The vendor code is : 00:C0:43:00...... Anyone know who's vendor code this is ? Thanks, Richard

3 2

Re: Filtering ICMP (Was Re: SMURF amplifier block list)
by Steve Uurtamo 21 Apr '98

21 Apr '98

Okay, so it's clear that we need to come up with some sort of sol'n to these kinds of problems. Here's my two cents: Don't block all of ICMP. Block pings and traceroutes if you think that it's going to make your life better, but please don't break anything else. We need a low-pain protocol to allow provider NOCs to check out a few salient things on their upstream provider's/peers routers -- e.g. which interface a particular spoofed packet is coming from, the IP address of the remote-side interface, etc., etc., all the way back to the source. This would allow provider NOCs to track this stuff down themselves. No more 6 hour phone calls to people with various degrees of clue/time/energy for a problem that may only occur for 15 minutes at a time, every 4 hours. It wouldn't be hard to jimmy this protocol (in case people care) such that you would ONLY be able to track back to a particular NOC's router if all of the inbetween-routers had "signed off" on the fact that what you're looking for (specific dst/src or packet type) had actually SHOWN UP on them as well. It wouldn't have to continuously check this -- just check once and PK-encrypt the timestamp into the signature on the authentication packet. Various timeouts could be configured by individual NOCs. (Yes, each NOC could have its own PK value -- but there would only have to be one per AS). Before everyone gets all hot and bothered about the suggestion that I'm making -- I'm not talking about arbitrary packet sniffing -- I'm talking about sniffing HEADERS on packets whose dst address (or packet type or whatever everyone agrees is significant) is inside the domain of the dst provider. Not a big deal. I really don't think that it's that much to give up -- hell, digex already allows me to dump their entire BGP table anytime I want -- i'm just talking about some very minimal tracking ability. Some companies, such as sprint, who may have hundreds of customers plugged into a single router, may not want to do this. But frankly, without this, we're all dependent upon the clue/time/energy of some guy who's busy doing his own thing, and we aren't guaranteed timely and accurate information. Actually, now that I think of it, you could almost jimmy this out of a few hours of PGP-wrapped SNMP-calling perl scripts listening to some fixed socket at some fixed (and published) IP address of each network provider. No reason to dick with the router code if no need to. What say ye? steve

1 0

Re: Digital Internet Exchange - Palo Alto
by mfw＠datamain.com 21 Apr '98

21 Apr '98

> contact at the Digital Internet Exchange David Ross Global Networking and Computing (GNAC) 999 Main Street Redwood City, CA 94063 (650) 569-4602 (425) 810-8665 ross(a)gnac.com does not work at the PIX; he has racks co-located there; David has arranged two (very worthwhile) tours for my customers. > I am looking into setting up a connection there. good choice. i hear they're full but you should still try. > Any perceived wisdom from the list as this exchange point would also be > appreciated. best I've seen.

1 0

new NANOG agenda items
by Susan Rebecca Harris 21 Apr '98

21 Apr '98

Greetings - we've added several new agenda items for the Dearborn NANOG: http://www.nanog.org/mtg-9806/topics.html Stay tuned - we'll be adding new topics often. ------------------------------------------------------------------------- Susan Rebecca Harris, Ph.D. Merit Network, Inc. Phone: 734.936.2100 srh(a)merit.edu Senior Science Writer Fax: 734.647.3185 -------------------------------------------------------------------------

1 0

RE: Digital Internet Exchange - Palo Alto
by Kamau Wanguhu 21 Apr '98

21 Apr '98

Rose This is a good place to start: http://www.ix.digital.com/contact.html If you have any trouble send me your phone number and I will track someone internally to help you. Kamau Wanguhu Digital Equipment Corp Cambridge Research Lab kamau(a)crl.dec.com +1.617.692.7613 => -----Original Message----- => From: Rose, Julian [mailto:Rose.Julian@att-unisource.com] => Sent: Tuesday, April 21, 1998 09:41 => To: 'nanog(a)merit.edu' => Subject: Digital Internet Exchange - Palo Alto => => => Can anyone give me a name of a contact at the Digital => Internet Exchange => Point in Palo Alto, I am looking into setting up a connection there. => => Any perceived wisdom from the list as this exchange point => would also be => appreciated. => => Regards => => Julian Rose =>

1 0

Digital Internet Exchange - Palo Alto
by Rose, Julian 21 Apr '98

21 Apr '98

Can anyone give me a name of a contact at the Digital Internet Exchange Point in Palo Alto, I am looking into setting up a connection there. Any perceived wisdom from the list as this exchange point would also be appreciated. Regards Julian Rose

2 1

Re: Archive of NANOG mailing list
by Eric Germann 21 Apr '98

21 Apr '98

http://www.cctec.com/maillists/nanog/index.html At 08:22 AM 4/21/98 +0700, Indra Pramana wrote: >Is this mailing list archived on the web? Where can I get the archive? > >Thanks. > >-ip- > ============================================================================ ==== Eric Germann Computer and Communications Technologies ekgermann(a)cctec.com Van Wert, OH 45891 Phone: 419 968 2640 http://www.cctec.com Fax: 419 968 2641 Network Design, Connectivity & System Integration Services A Microsoft Solution Provider

1 0

Re: Archive of NANOG mailing list
by Kyle C. Bacon 20 Apr '98

20 Apr '98

Eric Germann with CCTEC keeps a nicely indexed archive at http://www.cctec.com K On Apr 21, 8:22am, Indra Pramana wrote: > Subject: Archive of NANOG mailing list > Is this mailing list archived on the web? Where can I get the archive? > > Thanks. > > -ip- >-- End of excerpt from Indra Pramana -- | Kyle C. Bacon | kbacon(a)fnsi.net | Vice President - Operations | Fiber Network Solutions, Inc.

1 0

Archive of NANOG mailing list
by Indra Pramana 20 Apr '98

20 Apr '98

Is this mailing list archived on the web? Where can I get the archive? Thanks. -ip-

1 0

IOS Releases
by Al Reuben 20 Apr '98

20 Apr '98

Strange Q. What is the difference between 'IP Only/Plus' and 'Service Provider'? -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP! We have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

3 2