November 2002 - Test - lists.nanog.org

Re: [High Processor Rates on Routers.]
by Joshua Smith 06 Nov '02

06 Nov '02

"internetguy205(a)hotmail.com" <internetguy205(a)hotmail.com> wrote: > > > Ladies & Gentleman. > > > Was wondering if it is common for processor rates on higher end Crisco boxes to race from 1 or 2 % show on the 5 second processor rate interval, to anywhere from 70 to 90 %, instanteously, then drop back down to 1 or 2 % after 10 seconds. > [snip....] i notice this on my 7513s - usually it occurs when i make a bgp or acl change, but i haven't been able to track it down to something more specific cheers joshua "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

1 0

Re: [RFI Pointers to technical organisation layouts]
by Joshua Smith 06 Nov '02

06 Nov '02

"Thomas Kernen" <tkernen(a)deckpoint.ch> wrote: > > > Hi, > I'm looking for the layout of the technical organisation within service providers. Charts with role definitions, related and/or > critical processes, inter-departement communications, chain of command, breakout within major units, relation between > NOC/engineering/billing/service turnup/etc, basically anything I can get my hands on. > > Note that I'm not planning a reorg, simply wanting to compare with other service providers (big and small) and how they operate > internally. > > Thomas > i too would be interested in seeing how other organizations are put together - i would appreciate being copied, and would be glad to put together a summary for the list. cheers joshua "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

1 0

RE: RFI Pointers to technical organisation layouts
by Kris Foster 06 Nov '02

06 Nov '02

> > Carrier Scale IP: Designing and Operating Internet Networks > > by P. Willis (Editor) > > Is that Pete Willis who was in BTnet Technical Services? Appears so.. > > > > This book contained various examples of BT's organization.. > > Check out the review here: [sorry Nigel :-)] > > http://www.amazon.co.uk/exec/obidos/ASIN/0852969821/qid%3D/202 > -9691701-8052621 > Didn't say the book was good :) http://www.cisco.com/warp/public/759/ipj_5-3/ipj_5-3_reviews.html Kris

1 0

RE: RFI Pointers to technical organisation layouts
by Kris Foster 06 Nov '02

06 Nov '02

> I'm looking for the layout of the technical organisation > within service providers. Charts with role definitions, related and/or > critical processes, inter-departement communications, chain > of command, breakout within major units, relation between > NOC/engineering/billing/service turnup/etc, basically > anything I can get my hands on. http://www.amazon.com/exec/obidos/tg/detail/-/0852969821/qid=1036594290/sr=8 -1/ref=sr_8_1/002-7468082-2679216?v=glance&s=books&n=507846 Carrier Scale IP: Designing and Operating Internet Networks by P. Willis (Editor) This book contained various examples of BT's organization.. Kris

2 1

RFI Pointers to technical organisation layouts
by Thomas Kernen 06 Nov '02

06 Nov '02

Hi, I'm looking for the layout of the technical organisation within service providers. Charts with role definitions, related and/or critical processes, inter-departement communications, chain of command, breakout within major units, relation between NOC/engineering/billing/service turnup/etc, basically anything I can get my hands on. Note that I'm not planning a reorg, simply wanting to compare with other service providers (big and small) and how they operate internally. Thomas

1 0

Re: Where is the edge of the Internet?
by alok 06 Nov '02

06 Nov '02

come to think of it, it certainly makes it easier in the access...everything points to that... would help if there ws a "mandatory doc"..then even those "assymetric routing" chaps would anyways put it in their access :o) -rgds alok ----- Original Message ----- From: alok <alok.dube(a)apara.com> To: Martin <marty(a)supine.com>; <nanog(a)merit.edu> Sent: Wednesday, November 06, 2002 1:15 PM Subject: Re: Where is the edge of the Internet? heard of default routes..?.... u dont always need an iBGP full mesh u cud redistribute a bit and "default route" a bit.... okie i know now...u give me a practice doc and say "bad boy" :o)... u can redistribute im sure there is nothing bad with that.......and also u will tend to summarize a lot with default routes too.... that was my point..... the other angle being "DDoS with spoofed ips".. right? those IPs care intertnet registerd ips? now no reason that if the router B runs OSPF that u may not have an entry for the source IP... it will be there either via redistribution or via iBGP if thats the way u want it.....or covered under default.... :o) what i mean by valid is this: "registered internet IP address" in this case you may have routes to the source network anyways iva iBGP or redistribution... inspite of a "DDoS" or "assymetric cases" ....or it may be a part of the "default route"..... also agreed this default route is more on the access end most guys tend to have links between BGP routers or run iBGP etc......then the same logic applies there too.... -rgds Alok ----- Original Message ----- From: Martin <marty(a)supine.com> To: alok <alok.dube(a)apara.com> Sent: Wednesday, November 06, 2002 12:36 PM Subject: Re: Where is the edge of the Internet? $author = "alok" ; > > here is the scenario > > u have a bgp A ---ospf-B - bgpC router setup > > what will u do on ospf -B ? > > coz transit traffic can flow thru it... how does router B know where to send packets transitting the network? you'd need to run iBGP on it or be redistributing routes from BGP into OSPF, otherwise router B is not going to pass packets appropriately. > but what i was trying to say to Valdis....was that u cant just "blindly" > drop packets in the core whose source doesnt have a route...for eg ospfB is > a problem in the above that's why you don't do it blindly. :) you pick a router that has it's eyes wide open (ie. has a full table) to do RPF filtering on. marty -- Can't buy what I want because it's free. Can't be what they want because I'm me. "Corduroy" - Pearl Jam

1 0

Peerings
by Petri Helenius 06 Nov '02

06 Nov '02

Is there a "standardized" depository of information where lists of which AS´s are present in which exchange(s)? RADB does not really cut it since it only lists the participants of the interconnect, not really identifying the facility. Obviously I´m aware that most IXn list their participants on a web site but I´m looking for more machine readable data. Pete

6 5

Re: Where is the edge of the Internet?
by alok 06 Nov '02

06 Nov '02

heard of default routes..?.... u dont always need an iBGP full mesh u cud redistribute a bit and "default route" a bit.... okie i know now...u give me a practice doc and say "bad boy" :o)... u can redistribute im sure there is nothing bad with that.......and also u will tend to summarize a lot with default routes too.... that was my point..... the other angle being "DDoS with spoofed ips".. right? those IPs care intertnet registerd ips? now no reason that if the router B runs OSPF that u may not have an entry for the source IP... it will be there either via redistribution or via iBGP if thats the way u want it.....or covered under default.... :o) what i mean by valid is this: "registered internet IP address" in this case you may have routes to the source network anyways iva iBGP or redistribution... inspite of a "DDoS" or "assymetric cases" ....or it may be a part of the "default route"..... also agreed this default route is more on the access end most guys tend to have links between BGP routers or run iBGP etc......then the same logic applies there too.... -rgds Alok ----- Original Message ----- From: Martin <marty(a)supine.com> To: alok <alok.dube(a)apara.com> Sent: Wednesday, November 06, 2002 12:36 PM Subject: Re: Where is the edge of the Internet? $author = "alok" ; > > here is the scenario > > u have a bgp A ---ospf-B - bgpC router setup > > what will u do on ospf -B ? > > coz transit traffic can flow thru it... how does router B know where to send packets transitting the network? you'd need to run iBGP on it or be redistributing routes from BGP into OSPF, otherwise router B is not going to pass packets appropriately. > but what i was trying to say to Valdis....was that u cant just "blindly" > drop packets in the core whose source doesnt have a route...for eg ospfB is > a problem in the above that's why you don't do it blindly. :) you pick a router that has it's eyes wide open (ie. has a full table) to do RPF filtering on. marty -- Can't buy what I want because it's free. Can't be what they want because I'm me. "Corduroy" - Pearl Jam

1 0

Re: who are the root server operators?
by Valdis.Kletnieks＠vt.edu 06 Nov '02

06 Nov '02

On Mon, 04 Nov 2002 12:32:06 EST, Joe Baptista said: > If the roots are once again under attack - how will the root server > operators be contacted by a frustrated isp who can't resolve. The chances of a frustrated isp being unable to resolve things during a DDoS attack and the root operators not already knowing about it are a lot lower than the chances that the root operators will be deluged with mail from frustrated ISPs who can't figure out why queries originating in RFC1918 space don't get answered. And remember - Paul Vixie has shown that 10% of the inbound traffic at c.root-server.net is bogus rfc1918 sourced. Making the addresses public will serve as a DDoS vector against the root operators.... -- Valdis Kletnieks Computer Systems Senior Engineer Virginia Tech

3 2

Re: Attacker Data / Wall of Shame
by Daniel Senie 05 Nov '02

05 Nov '02

At 10:56 PM 11/5/2002, Christopher L. Morrow wrote: >On Tue, 5 Nov 2002, Daniel Senie wrote: > > > > > We have had enough regular attacks on our web farm to put together tools > > that catalogue the attacks, report them to a central database, and post > > them to a website. The data is extracted hourly for the website to cut down > > on server / database loading. > > > > You can find our display of this data at: > > > > http://www.shame.denialinfo.com/ > > > > You have the option of viewing the data by IP address, Date of attack or > > sorted by the number of attacks from a host. The attacking systems seem > > well distributed around the world, though the extent to which that's a > > result of open proxies is unclear. > >This is neat, BUT what exactly is a DoS attack in this definition? Is >this: > >web proxy probes No. >web formmail submission attempts yes. >slapper/nimda/cr/crII probes Yes. >Just curious really. Our servers are not vulnerable to the actual attacks, but the volume of the probe traffic, whether formmail, slapper or nimda and friends, constitue a denial of service in that they tie up our servers for a period of time and keep us from serving customer websites to legitimate users. That we pay for bandwidth does not help matters. We have to rate limit incoming traffic to keep bandwidth within our targets and our customers' targets. The attack traffic overwhelms the legitimate traffic, though even if we didn't rate limit we'd still wind up with overwhelmed servers.

1 0