January 2002 - Test - lists.nanog.org

HS protocol analyzer
by Mike Duckett 05 Jan '02

05 Jan '02

Looking for HS protocol analyzers options that can, minimally, filter real time traffic (e.g., ports, applications, sessions/conversations, byte/bit offsets) at rates up to and exceeding OC-3/12 and GigE. Being limited to a few seconds makes troubleshooting or analysis very difficult if not impossible. Our routers are able to keep up with a decent amount of "high touch" and still maintain the pace of traffic flow by employing accelerators (e.g., ASICs). Great.. Now, how do we troubleshoot problems?

1 0

The Cidr Report
by CIDR Report 05 Jan '02

05 Jan '02

This is an auto-generated mail on Fri Jan 4 23:00:01 PST 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 04Jan02 0) General Status Table History ------------- Date Prefixes 281201 104604 291201 104688 301201 104724 311201 104773 010102 104589 020102 104745 030102 104663 040102 104733 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 9125 Number of ASes announcing only one prefix: 4154 (4154 cidr, 0 classful) Largest number of cidr routes: 759 announced by AS701 Largest number of classful routes: 0 announced by 1) Gains by aggregating at the origin AS level --- 04Jan02 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1175 901 274 23.3% Telstra Pty Ltd AS701 1363 1136 227 16.7% UUNET Technologies, Inc. AS4151 308 172 136 44.2% USDA AS577 318 194 124 39.0% Bell Advanced Communications Inc. AS16473 198 77 121 61.1% Bell South AS7018 811 695 116 14.3% AT&T AS6595 171 61 110 64.3% DoD Education Activity Network As AS705 283 183 100 35.3% UUNET Technologies, Inc. AS17557 174 84 90 51.7% Pakistan Telecom AS7046 309 223 86 27.8% UUNET Technologies, Inc. AS19632 93 10 83 89.2% Metropolis Intercom S.A. AS8010 120 38 82 68.3% PublicNet Communications, Inc. AS4755 235 153 82 34.9% Videsh Sanchar Nigam Ltd. Autonom AS2048 185 105 80 43.2% State of Louisiana AS12302 108 32 76 70.4% MobiFon S.A. AS1239 466 392 74 15.9% Sprint AS724 231 166 65 28.1% DLA Systems Automation Center AS703 282 220 62 22.0% UUNET Technologies, Inc. AS3464 160 98 62 38.8% Alabama SuperComputer Network AS4200 113 56 57 50.4% Apex Global Information Services, AS16758 63 6 57 90.5% IKON Office Solutions AS3908 319 263 56 17.6% Supernet, Inc. AS13999 70 14 56 80.0% Mega Cable S.A. de C.V. AS6471 122 67 55 45.1% ENTEL CHILE S.A. AS19834 63 8 55 87.3% NetForce, Inc. AS4323 367 313 54 14.7% Time Warner Communications, Inc. AS1 509 455 54 10.6% BBN Planet AS2149 323 270 53 16.4% Performance Systems, Inc. AS209 297 246 51 17.2% Qwest AS7303 99 49 50 50.5% Telecom Argentina Stet-France Tel For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

teleglobe broken?
by Paul Nguyen 04 Jan '02

04 Jan '02

anyone able to use any of the routes they get from teleglobe right now? like at paix? -p

1 0

RE: teleglobe broken?
by Martin, Steve 04 Jan '02

04 Jan '02

Not at PAIX...looks like BGP is broken: Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 207.45.196.77 4 6453 2355400 267091 0 0 0 00:12:44 Active But traffic did shift to AADS. Regards, Steve Steve Martin Sr. Manager; Network Engineering and Ops Conxion Corporation 4201 Burton Drive Santa Clara, CA 95054 DID: 408.566.8565 FAX: 408.988.0003 Cell: 408.309.7109 Pager: page.steve(a)conxion.net -----Original Message----- From: Paul Nguyen [mailto:paul@gotrice.com] Sent: Friday, January 04, 2002 4:16 PM To: nanog(a)merit.edu Subject: teleglobe broken? anyone able to use any of the routes they get from teleglobe right now? like at paix? -p

1 0

RE: FATPipe vs. BGP
by Lee Watterworth 04 Jan '02

04 Jan '02

F5 announced a new product which will apparently accomplish the same thing, although there are no technical documents available for it yet... http://secure.f5.com/news/releases/release121201.html <http://secure.f5.com/news/releases/release121201.html> -Lee -----Original Message----- From: James Smith [mailto:jsmith@PRESIDIO.com] Sent: January 3, 2002 5:43 PM To: nanog(a)merit.edu Subject: FATPipe vs. BGP Anyone deploy FATPipe boxes yet? Just got through a preso about it, they bill it as a highly survivable VPN solution, but also as a way of getting multiple inbound/outbound/backup pipes to work from multiple providers without having to use BGP. They actually use DNS with a short TTL (under 10 seconds) to do the failover on inbound. With failover related to TTL, I can guess which way the users want the knob to turn... My concern is the need for the box to be your primary (authoritative) DNS in this role, with no secondary DNS support (available in the 2.0 release, I was told). No need to tell me how bad of an idea this is, what I'm looking for is actual "by golly, we did it, and this is what we ran into" stories. Especially from multi-site, multi-sub-domain sites. I bet it is a pain to keep all those primary DNS servers in sync... http:\\www.fatpipeinc.com <http:\\www.fatpipeinc.com> James H. Smith II NNCDS NNCSE Systems Engineer The Presidio Corporation <include> fancy.sig

1 0

Interface error_rates question
by Holmes, Daniel 03 Jan '02

03 Jan '02

I'm looking for some real user input from network operators: To what degree would you want to be able to measure error_rates on device interfaces. Many tools currently calculate 1% and above (so if you have .9% it is displayed as 0%) but it is quite possible users may want to measure fractional percentages as well. Does anyone have any opinions/preferences based on your current experience? Does it matter the type of interface you are managing (Ethernet, serial, etc.)? Thanks - Dan Holmes

2 1

FATPipe vs. BGP
by James Smith 03 Jan '02

03 Jan '02

Anyone deploy FATPipe boxes yet? Just got through a preso about it, they bill it as a highly survivable VPN solution, but also as a way of getting multiple inbound/outbound/backup pipes to work from multiple providers without having to use BGP. They actually use DNS with a short TTL (under 10 seconds) to do the failover on inbound. With failover related to TTL, I can guess which way the users want the knob to turn... My concern is the need for the box to be your primary (authoritative) DNS in this role, with no secondary DNS support (available in the 2.0 release, I was told). No need to tell me how bad of an idea this is, what I'm looking for is actual "by golly, we did it, and this is what we ran into" stories. Especially from multi-site, multi-sub-domain sites. I bet it is a pain to keep all those primary DNS servers in sync... http:\\www.fatpipeinc.com James H. Smith II NNCDS NNCSE Systems Engineer The Presidio Corporation <include> fancy.sig

1 0

AT&T Trouble
by Ian A Finlay 03 Jan '02

03 Jan '02

Anyone know why? -Ian bash-2.04$ traceroute -I www.google.com traceroute to www.google.com (216.239.33.101), 30 hops max, 40 byte packets 1 CYH-A100-VL10.GW.CMU.NET (128.2.10.254) 0.765 ms 0.435 ms 0.422 ms 2 HYPER-VL255.GW.CMU.NET (128.2.255.7) 0.462 ms 0.466 ms 0.461 ms 3 bar-cmu-g4-0-0-0.psc.net (192.88.115.181) 0.343 ms 0.318 ms 0.315 ms 4 nss5-foo.psc.net (192.88.115.3) 4.522 ms 4.253 ms 5.003 ms 5 12.124.235.73 (12.124.235.73) 15.778 ms 14.019 ms 12.569 ms 6 gbr2-p70.wswdc.ip.att.net (12.123.9.46) 13.540 ms 13.694 ms 13.477 ms 7 12.122.11.161 (12.122.11.161) 31.691 ms 15.734 ms 16.668 ms 8 * * *

3 3

Re: AT&T Trouble
by smd＠clock.org 03 Jan '02

03 Jan '02

Cool, someone has resurrected ftpmail and now it does looking glass things. Sean.

1 0

Re: Automated DLR conflict detection
by Steven M. Bellovin 03 Jan '02

03 Jan '02

In message <Pine.GSO.4.40.0112290239530.29284-100000(a)clifden.donelan.com>, Sean Donelan writes: > > >On Sun, 23 Dec 2001, Peter Galbavy wrote: >> You misunderstand. Which operators will offer this (backed by some >> underwritten insurance) in an effort to be better than the competition ? > >Buying car insurance doesn't alter the chances of your car breaking >down on a long trip. Insurance doesn't alter the chances of something >bad happening. Driver training, seat belts, and spare tires are things >which can reduce risk. Yes, but insurance companies often move in and set certain behavioral requirements as a coverage requirement, just to cut their own payouts. To give just a couple of examples, both Underwriters' Laboratories and the National Electrical Code are spinoffs of the insurance industry. To return to your analogy, maybe you can only buy car insurance, or buy it at a reasonable rate, if you first bring your car in for a checkup and replace the bald tires. --Steve Bellovin, http://www.research.att.com/~smb Full text of "Firewalls" book now at http://www.wilyhacker.com

12 15