August 2001 - Test - lists.nanog.org

should i publish a list of cracked machines?
by Jim Mercer 23 Aug '01

23 Aug '01

i found one of my boxes was cracked (probably due to the BSD telnetd overflow). in any case, i found a file in the cracker's directory containing what i think is a list of other servers which might be hacked. i think the list also includes the passwords for using the trojan. on my server, i found a trojan daemon, allowing ssh on an 14000 series port. i was gonna just post the list of hosts here, but then, maybe not. what is the appropriate feeling? -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ Now with more and longer words for your reading enjoyment. ]

7 7

RE: resolved Re: should i publish a list of cracked machines?
by Roeland Meyer 23 Aug '01

23 Aug '01

1 0

Re: Measuring PoP to PoP latency--tools to use?
by Grant A. Kirkwood 23 Aug '01

23 Aug '01

That's what I'm looking for. Anyone know where source to something like this is available? Grant "Polinsky, Steven" wrote: > > Check this one, which also has links to similar services: > > http://weather.nts.uci.edu/weather/ > > Steven > > Steven M. Polinsky > Goldman, Sachs & Co. > 180 Maiden Lane > New York, NY 10038 > 212-902-3669 | Fax: 212-493-0107 > > -----Original Message----- > From: E.B. Dreger [mailto:eddy+public+spam@noc.everquick.net] > Sent: Wednesday, August 22, 2001 10:40 PM > To: Grant A. Kirkwood > Cc: Sean Donelan; nanog(a)merit.edu > Subject: Re: Measuring PoP to PoP latency--tools to use? > > > There used to be a site somewhere (I think Andover or Keynote sucked up > > the domain, but it was a while ago) that had a very nice little script > > that pinged IP addresses and presented the visitor with average latency > > to those addresses. Looked something like this: > > > > UUNet (x.x.x.x) -> 38 ms (green) > > C&W (x.x.x.x) -> 68 ms (yellow) > > AOL (x.x.x.x) -> 400 ms (red) > > ratings.miq.net > www.internetweather.com ? > > Actually, the latter seems to have been borged by (was always a part > of?) the former. > > It may have also been netcopter.com, which is now dead... > > Eddy > > --------------------------------------------------------------------------- > Brotsman & Dreger, Inc. - EverQuick Internet Division > Phone: +1 (316) 794-8922 Wichita/(Inter)national > Phone: +1 (785) 865-5885 Lawrence > --------------------------------------------------------------------------- > > Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) > From: A Trap <blacklist(a)brics.com> > To: blacklist(a)brics.com > Subject: Please ignore this portion of my mail signature. > > These last few lines are a trap for address-harvesting spambots. Do NOT > send mail to <blacklist(a)brics.com>, or you are likely to be blocked.

1 0

Re: Measuring PoP to PoP latency--tools to use?
by Sean Donelan 23 Aug '01

23 Aug '01

On Wed, 22 August 2001, k claffy wrote: > On Wed, Aug 22, 2001 at 06:08:15PM +0200, Adam Obszynski wrote: > > What tools exist that will periodically log into multiple routers and run > > ping tests > > to various destinations and then record the results in graphical form? > > maybe the RTR cisco router feature for sonde-like probing ? InternetMCI(purchased by Cable & Wireless) and AT&T spent a lot of effort developing their tools. I haven't seen any commercially available systems which come close. C&W and AT&T seem to be unique among huge backbone providers in publishing their network performance. However, an alternative for measuring round-trip times with ICMP is setting up a full mesh of NTP assocations. As part of the calculations of the "time" get an ongoing measurement of network delay between the routers. You can use your favorite tool to read the NTP associations table, and generate a nice web page. I believe this is how UUNET use to do their version.

8 7

RE: Routescience?
by E.B. Dreger 23 Aug '01

23 Aug '01

Sorry to respond/add to my own post, but there is another possibility that I forgot to mention: Create subinterfaces on the border router(s). Let's say that I'm connected to three upstreams, and communicate with the LAN via f0/0. Assume single border router. I create f0/0.1, f0/0.2, and f0/0.3, each in separate /30s. When the RouteScience box (presumed to operate using WCCP) receives a packet that it wishes to test, it forwards to the appropriate border router subint. The border router sets next-hop to a specific value that correlates to the ingress f0/0.x subint. Just don't round-robin packets from the same stream over different paths. (!) Unacceptable even for a quick test. Back to lurkerland, On to dreamland, Eddy --------------------------------------------------------------------------- Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence --------------------------------------------------------------------------- Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist(a)brics.com> To: blacklist(a)brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist(a)brics.com>, or you are likely to be blocked.

1 0

RE: Routescience?
by Kavi, Prabhu 23 Aug '01

23 Aug '01

I would like to hear it too. However, in fairness to Routescience, did anyone on NANOG previously ask Cisco and Juniper to publicly talk about everything they (sometimes painfully) learned about how to create resilient IS-IS/OSPF/BGP implementations? And even if anyone would ask, are Cisco and Juniper likely to respond (thereby giving a heads up to their competitors)? Routescience may or may not have something worthwhile. However, I would respect their perogative to not say much more on the NANOG mailing list. I think the presentation at NANOG would be a great idea, especially if it is a joint presentation with an ISP evaluating the product. Prabhu ---------------------------------------------------------------------- Prabhu Kavi Phone: 1-978-264-4900 x125 Director, Adv. Prod. Planning Fax: 1-978-264-0671 Tenor Networks Email: prabhu_kavi(a)tenornetworks.com 100 Nagog Park WWW: www.tenornetworks.com Acton, MA 01720 > -----Original Message----- > From: Andy Dills [mailto:andy@xecu.net] > Sent: Wednesday, August 22, 2001 4:01 PM > To: 'nanog(a)merit.edu' > Subject: Re: Routescience? > > > > On Wed, 22 Aug 2001, Mike Lloyd wrote: > > > How precisely we've done it, what kinds of controls we > offer, how the > > reporting looks, and ultimately how much it pays off are > all things we > > love to talk about, but I'm not sure this is the forum for brick by > > brick architectural inspection. We have collected a large amount of > > data on the relevant networking effects, and come up with > analyses of > > it; some of that might be appropriate at a NANOG meeting, perhaps. > > I dunno about the rest of nanog, but I think a technical > discussion of how > you implement performance-based route selection would beat > the hell out of > the MAPS debate and Code Red discussion...I think, in fact, > after touting > your product this much (which was in response, and not > unsolicited, thus > relevant), you owe it to us to disclose as much as possible. > > Plus, I suspect that either you have something really cool > (in which case > I'd love to hear more of the details), or something that is > going to be > picked apart by the heavyweights on this list (which would be highly > entertaining). > > It's a no lose thread. Let's have it. > > Andy > > xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx > Andy Dills 301-682-9972 > Xecunet, LLC www.xecu.net > xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx > Dialup * Webhosting * E-Commerce * High-Speed Access > > >

3 2

Cable cut: Southwest Missouri
by Sean Donelan 22 Aug '01

22 Aug '01

A cable cut in Missouri disrupted some services in the southwestern part of the state, including Springfield. Its unclear what services were affected, but 500 Powerball lottery machines were out of service until 3:15 this afternoon. According to the Associated Press: "The severed line was owned by Sprint Corp., which did not immediately return a phone call."

2 1

Definition of a burstable circuit
by Stanley, Jon 22 Aug '01

22 Aug '01

Without getting into a religious debate, I need some consensus for a problem that I am having regarding the definition of a burstable circuit. In my view of the world, a burstable circuit is defined as one where the customer can send us as much data as they would like (for example, an entire DS3's worth on a consistent basis), and we would bill them for usage above the contracted amount via some method (we use 90th percentile reporting) In someone else's view inside the company, the customer should be prohibited from sending above the contracted rate for any extended period of time by policing at the ATM layer. Both views are viable, but I believe (nearly religously) that the former view is correct. Any input would be appreciated. PS. These views are my own and do not represent those of the company, even though I'm sending from my work email :)

6 6

RE: Definition of a burstable circuit
by Youse, Chuck 22 Aug '01

22 Aug '01

Jon Stanley said: > Without getting into a religious debate, I need some consensus for a problem > that I am having regarding the definition of a burstable circuit. > In my view of the world, a burstable circuit is defined as one where the customer > can send us as much data as they would like (for example, an entire DS3's worth > on a consistent basis), and we would bill them for usage above the contracted amount > via some method (we use 90th percentile reporting) > In someone else's view inside the company, the customer should be prohibited > from sending above the contracted rate for any extended period of time by policing > at the ATM layer. Both views are viable, but I believe (nearly religously) > that the former view is correct. At Ebone, 'burstable' is equivalent to your first definition. The assumption is that more bandwidth is available, and can be used by the customer, but at a premium rate. Of course, the premium rate is charged to discourage customers from continuously overstepping their committed bandwidth numbers. It effects a similar control over network utilisation as your colleague's definition, but it also affords the customer more flexibility and generates additional revenues. The latter definition would be something that I would more closely associate with frame relay services. I.e., rates above the CIR are available but not guaranteed. To artificially rate-limit a customer's bandwidth is a disservice to them, even if it does make provisioning slightly more deterministic. - C

1 0

burstable
by David Barak 22 Aug '01

22 Aug '01

Jon Stanley wrote: In my view of the world, a burstable circuit is defined as one where the customer can send us as much data as they would like (for example, an entire DS3's worth on a consistent basis), and we would bill them for usage above the contracted amount via some method (we use 90th percentile reporting) In someone else's view inside the company, the customer should be prohibited from sending above the contracted rate for any extended period of time by policing at the ATM layer. Both views are viable, but I believe (nearly religously) that the former view is correct. ------ The largest ISP with which I'm familiar uses your definition for burstable, and your co-worker's definition for a "tiered" circuit. IMO it's sales, rather than engineering. -David Barak "Quis custodes ipsos custodiet?" - Juvenal __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/

1 0