December 2001 - Test - lists.nanog.org

NIPC December Highlights
by Sean Donelan 11 Dec '01

11 Dec '01

September 11, 2001, Terrorist Incidents Lessons Learned: New Approaches Needed for Disaster Recovery and Business Continuity Planning "Survivability" is a different way of looking at normal disaster recovery plans. Domain Name System: Eliminating Single Points of Failure This concentrates on the provisioning of authoritative DNS servers, but don't forget about the other half of DNS, resolvers. http://www.nipc.gov/publications/highlights/2001/highlight-01-11.pdf

1 0

blocking peer-to-peer filesharing programs
by dani-post＠roisman.com 11 Dec '01

11 Dec '01

I realize this may be a touchy subject. For legal purposes I'll state that I'm making these inquiries as an academic excercize, as well as to enable me to block peer-to-peer programs on my own personal home network. The last thing I'd want to do is rob anyone of their free speech or "rights" to distribute illegal copies of copyrighted material. Anyway... I'm interested in developing and studying comprehensive firewall and content-filtering techniques for disabling peer-to-peer filesharing applications (e.g. those using gnutella, fasttrack, other napster-style directory and download engines or stacks). If anyone knows of a mailing list / user group that has similar interests, or if you have similar interests, please email me off-list. Thanks all. - Dani

4 3

On the Internet in A Disaster - CfP
by Craig Partridge 11 Dec '01

11 Dec '01

[NANOG participation is particularly desirable] On the Internet In a Disaster Call For Participation September 11th 2001 was an interesting day on the Internet. The collapse of the World Trade Center towers damaged communications lines. Many people turned to Web sites on the Internet for news and emergency information. For some people in New York, the Internet was used as a replacement communications system while the phone service was out. Some firms had to start providing their internet services from backup locations. What makes the events of September 11th special are not the individual events. Communications links have been severed before, and Web flash crowds have overloaded Web sites. Rather it is the combination of events that collectively represents the Internet's experience in a disaster. How the Internet does and can respond to a disaster is of great interest to relief agencies and other crisis responders, governments, national security entities, businesses, and the general public. To better understand exactly how the Internet did respond to September 11th, the National Research Council's Computer Science and Telecommunications Board is convening a workshop to be held in March 2002 in Washington, DC. This call solicits participants and written contributions for the workshop. The workshop is being organized by a small committee of Internet experts. It will draw on the workshop to produce a short, summary and synthesis report, which will be subject to a rigorous review process supervised by the National Research Council. The workshop will be small (approximately 25-35 participants) meeting. The meeting will consist of two days of a mix of presentations and discussions. The focus of the presentations will be quantitative information (measurements, analysis) of how portions of the Internet behaved on September 11th 2001. Participants should note that our definition of Internet is quite broad: beyond measurements of packet traffic or outages, we welcome data for Web sites, dialup statistics, wireless access, experiences of backup data sites, and the like. We want to assemble the broadest possible picture of data communications and how it evolved in response to the disaster. Some of the workshop participants will be invited to expand their presentations at the workshop into papers, to be included in the workshop report as reference material. This workshop will not be open to the public. It will engage only the participants and NRC/CSTB staff in the discussions. Furthermore, submissions for participation will not be distributed outside the set of workshop organizers and attendees. CSTB expects that the closed nature of the meeting will encourage the candor necessary to fully assess the data from September 11th. Parties interested in participating in the workshop are invited to submit a 3- to 6-page white paper. White papers should describe in some detail the data or analysis (or both) from September 11th or its aftermath that the participant would like to present at the workshop. Please also include a one-paragraph biography of the participant. Participants should note that our definition of Internet is quite broad: beyond measurements of packet traffic or outages, we welcome data for Web sites, dialup statistics, wireless access, experiences of backup data sites, and the like. We want to assemble the broadest possible picture of data communications and how it evolved in response to the disaster. Submissions are due January 10, 2002 and should be sent to: Mr. D.C. Drake/Internet Under Crisis Conditions Computer Science and Telecommunications Board National Research Council 2101 Constitution Avenue, NW Washington, DC 20418 ddrake(a)nas.edu 202-334-2605 Note: In light of mail difficulties in Washington arising from anthrax incidents, please call to confirm snail-mail details before mailing. An alternate address may be recommended. Participants will receive an invitation by January 24th.

1 0

Robust/feature-rich RADIUS server
by Rubens Kuhl Jr. 11 Dec '01

11 Dec '01

Any suggestions on RADIUS servers that are robust (i.e, scale to hundreds/thousand of NAS, high number of auths/s), feature-rich (proxy, L2TP, broadband and aggregated dial typical parameters), that can be taylored to business rules and overall environment ? NavisRadius and Interlink(formerly Merit AAA) are natural competitors, I was looking for other forces on the xSP market. Rubens Kuhl Jr.

7 6

FYI: New IPV4 /8 issued to APNIC
by John L Crain 11 Dec '01

11 Dec '01

Hi folks, This is to let you know that you will soon begin to see 220/8 come into use. You may wish to adjust your filters accordingly John Crain ICANN/IANA ------- Forwarded Message Date: Fri, 7 Dec 2001 10:25:55 +1000 (EST) From: George Michaelson <ggm(a)apnic.net> Sender: owner-apnic-announce(a)lists.apnic.net To: apnic-announce(a)whois.staff.apnic.net Subject: [apnic-announce] Date: Fri, 07 Dec 2001 10:25:53 +1000 [Note "reply-to:" field] - ------------------------------------------------- APOLOGIES for multiple copies. Dear colleagues APNIC received the IPv4 address range 220/8 from IANA on 2nd December 2001 and will now begin making allocations from this range. Please configure your routing filters accordingly. For more information on the resources administered by APNIC, see: http://www.apnic.net/db/ranges.html For information on the minimum allocation sizes within address ranges administered by APNIC, see: http://www.apnic.net/db/min-alloc.html - ------------------------------------------------- * APNIC-ANNOUNCE: Announcements concerning APNIC * * To unsubscribe, send "unsubscribe" to apnic-announce-request(a)apnic.net *

1 0

SUMMARY: Robust/feature-rich RADIUS server
by Rubens Kuhl Jr. 11 Dec '01

11 Dec '01

Thanks for all private and public answers. Besides the two I mentioned on the original posting (NavisRadius and Interlink), two other RADIUS servers seems to be quite popular and trusted by various NANOG readers: - Radiator (www.open.com.au/radiator) - Steel-Belted Radius (www.funk.com) The following products have received one or two mentions: - Widespan (http://www.bridgewatersys.com/) - FreeRadius (http://www.freeradius.org) - GNU RADIUS (http://www.gnu.org/software/radius/) - Navipath (no longer in business) - Cisco Access Registrar (http://www.cisco.com/go/ar) Rubens Kuhl Jr. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Rubens Kuhl Jr. Sent: Monday, December 10, 2001 7:53 PM To: Nanog(a)merit.edu Subject: Robust/feature-rich RADIUS server Any suggestions on RADIUS servers that are robust (i.e, scale to hundreds/thousand of NAS, high number of auths/s), feature-rich (proxy, L2TP, broadband and aggregated dial typical parameters), that can be taylored to business rules and overall environment ? NavisRadius and Interlink(formerly Merit AAA) are natural competitors, I was looking for other forces on the xSP market. Rubens Kuhl Jr.

1 0

Re: Open Source BGP-router?
by miquels＠cistron.nl 11 Dec '01

11 Dec '01

In article <cistron.20011211131943.A986(a)laperouse.sources.org>, Stephane Bortzmeyer <bortzmeyer(a)gitoyen.net> wrote: >I would like to see packet forwarding cards for PC (with suitable >documentation to write the Linux driver): it would allow to build >"poor man's Junipers" with only free software. It's just ethernet, and it's for a CompactPCI chassis, but: http://www.znyx.com/products/netblaster/zx4500p.htm Mike. -- I used to drive a Heisenberg mobile but every time I looked at the speedometer - I got lost!

1 0

Open Source BGP-router?
by Simon Higgs 11 Dec '01

11 Dec '01

Can someone point me to an Open Source OS which can host a BGP-capable router? Thanks. Best Regards, Simon -- The future is still out there...

10 11

"Route control" and routing table size
by Hank Nussbacher 11 Dec '01

11 Dec '01

There are many companies now in the "route control" field such as Route Science, Netvmg, Proficient Networks and many others. A recent one I spotted is Radware: http://www.radware.com/archive/pdfs/whitepapers/PeerDirectorTech.pdf See page 5: "Some peers are still overloaded, configure smaller CIDRs". Are we about to see a growth in the routing table size after seeing a slowing down in 2001: http://www.telstra.net/ops/bgp/bgp-active.html ? -Hank

1 0

Tail Drops and TCP Slow Start
by Murphy, Brennan 11 Dec '01

11 Dec '01

If I have a DS3 or OC3 handling mounds and mounds of FTP download traffic, what is the easiest way to detect if the bandwidth in use is falling into a classic Tail Drop pattern? According to a Cisco book I am reading, the bandwidth utilization should graph in a "sawtooth" pattern of gradual increases in accordance with multiple machines gradually increasing via TCP slow start and then sharp drops. Will this only happen when the utilization approaches 100%. (maybe dumb question) Should I be able to do a show buffers and see misses or is there some better way to detect other than via graphing? Also, suppose in examining my ftp traffic patterns that I noticed that it spikes at 15minutes after the type of the hour, consistently, etc. Could I create a timed access list to only kick in at that time? Anyone have experience with WRED to handle ftp congestion? I usually take these types of questions to Cisco but I thought I'd post it to this list to get any generic real world advice. sh buff Buffer elements: 499 in free list (500 max allowed) 5713661 hits, 0 misses, 0 created Public buffer pools: Small buffers, 104 bytes (total 600, permanent 600): 580 in free list (20 min, 1250 max allowed) 2225528470 hits, 6 misses, 18 trims, 18 created 0 failures (0 no memory) Middle buffers, 600 bytes (total 450, permanent 450): 448 in free list (10 min, 1000 max allowed) 68259213 hits, 7 misses, 21 trims, 21 created 0 failures (0 no memory) Big buffers, 1524 bytes (total 450, permanent 450): 449 in free list (5 min, 1500 max allowed) 6807747 hits, 0 misses, 0 trims, 0 created 0 failures (0 no memory) VeryBig buffers, 4520 bytes (total 50, permanent 50): 50 in free list (0 min, 1500 max allowed) 46167681 hits, 0 misses, 0 trims, 0 created 0 failures (0 no memory) Large buffers, 5024 bytes (total 50, permanent 50): 50 in free list (0 min, 150 max allowed) 0 hits, 0 misses, 0 trims, 0 created 0 failures (0 no memory) Huge buffers, 18024 bytes (total 5, permanent 5): 5 in free list (0 min, 65 max allowed) 34 hits, 6 misses, 12 trims, 12 created 0 failures (0 no memory) Interface buffer pools: IPC buffers, 4096 bytes (total 768, permanent 768): 768 in free list (256 min, 2560 max allowed) 769236774 hits, 0 fallbacks, 0 trims, 0 created 0 failures (0 no memory) Header pools:

4 3