July 2002 - Test - lists.nanog.org

Power loss in downtown manhattan
by Chrisy Luke 21 Jul '02

21 Jul '02

http://www.ny1.com/ny/TopStories/SubTopic/index.html?topicintid=1&subtopici… 60 Hudson seems to be affected. :( Chris. -- == chris(a)easynet.net T: +44 845 333 0122 == Global IP Network Engineering, Easynet Group PLC F: +44 845 333 0122

7 10

If you thought Y2K was bad, wait until cyber-security hits
by Sean Donelan 21 Jul '02

21 Jul '02

http://www.eweek.com/article2/0,3959,387377,00.asp "All the while maintaining that the government will not set IT security requirements for the private sector, top federal IT officials today said they expect such mandates will be imposed on federal agencies and that the same standards will also be used by industry." While standards are great, one-size-fits-all standards aren't. When the government's cyber-security plan is released in September, will there be 500 requirements that Internet Service Providers must meet? Should ISPs be more secure than the post office or the telephone or the bike messenger? Must Bill's Bait & Sushi Shop ISP Service meet the same security requirements as the ISP for the White House? ISPs come in all sorts of shapes and sizes. Consumers use cordless phones at home, but the NSA prohibits use of cordless phones in secure areas. Just because the government issues a security standard doesn't make it suitable for all purposes. Some people like paying $9.95 for Internet service from an ISP without a backup generator, and wouldn't want to pay $29.95 for a "certified" ISP with a backup generator. If the $9.95 ISP fails, heck they could almost afford two more for the same price as a single "certified" ISP. Sometimes a hammer is just a hammer, and you don't need a MIL-SPEC. If the Department of Homeland Security creates a new security standard for ISPs, what do you think will happen to any ISP which doesn't meet it? The security "Gold Standard" for Microsoft 2000 was written by the Critical Infrastructure Protection Board, the Center for Internet Security, the National Security Agency, the General Services Administration, the National Institute of Standards and Technology, and the SANS Institute. Do you know who is writing the security "Gold Standard" for Internet Service Providers?

7 10

Re: Power loss in downtown manhattan
by Chrisy Luke 20 Jul '02

20 Jul '02

Richard Newcomb wrote (on Jul 21): > I think there must be a fiber issues. A transformer blew and several others > burned. We have no connectivity. And as you stated, 60 Hubson does not > need ConEd to run. You forget that "60 Hudson" doesnt' have a generator. It's a collection of privately-leased spaces each of which is individually responsible for its power needs. If you wanna generator, you need to rent space for it (I believe there's no space on the roof anymore, so that means in the stret), need to get landlord wayleave for cabling to it (duct space ain't cheap, specially if you're on the higher floors) and get permits for noise, fuel storage and so on. It ain't thrown in, and adds up to something prohibitive in many cases in that particular building. Digex, ergo Intermedia, ergo whoever it is today on the 23rd floor managed to smuggle up a generator and install it within their suite. I don't know if the landlord knows yet :) It's one of 60 Hudson's worst kept secrets (or it was a few years ago, at any rate) It begs the question why quite so much depends on that site. Chris. -- == chris(a)easynet.net T: +44 845 333 0122 == Global IP Network Engineering, Easynet Group PLC F: +44 845 333 0122

1 0

Spamcop under attack....
by blitz 20 Jul '02

20 Jul '02

Interesting... SpamCop under attack SpamCop is being attacked with a Distributed Denial of Service attack (DDoS). Service will be restored as soon as possible. In the meantime, representatives of Qwest are asked to investiage reports of abuse from your network. Packets appear to be originating in Qwest IP space. Packets are destined for SpamCop ip space (64.90.162.80/28). This attack began around 8:30 am EST.

1 0

RE: Power loss in downtown manhattan
by Randy Neals 20 Jul '02

20 Jul '02

We have a leased Oc-3 circuit from 60 Hudson (19th) to NYIIX/25 Broadway down. It stopped working about 12:50(+/-) which I understand is roughly the time of the power outage. Our own equipment at each end of the circuit has not lost power, but it would seem that the local carrier maybe experiencing problems. (The circuit is leased from Univ Access/Looking Glass.) Is anyone else having a similar problem? -Randy -----Original Message----- From: Thomas Kernen To: Alex Rubenstein; Chrisy Luke Cc: nanog(a)merit.edu Sent: 7/20/2002 3:47 PM Subject: Re: Power loss in downtown manhattan FiberNet lost power but came back up (our gear restarted by power on) @ approx 13:30 EST Thomas ----- Original Message ----- From: "Alex Rubenstein" <alex(a)nac.net> To: "Chrisy Luke" <chrisy(a)flix.net> Cc: <nanog(a)merit.edu> Sent: Saturday, July 20, 2002 2:56 PM Subject: Re: Power loss in downtown manhattan > > > We appear to have lost power on 23 Tel-x and/or 19th fibernet. > > > > On Sat, 20 Jul 2002, Chrisy Luke wrote: > > > > > http://www.ny1.com/ny/TopStories/SubTopic/index.html?topicintid=1&subtop icin tid=1&contentintid=23113 > > > > 60 Hudson seems to be affected. > > > > :( > > > > Chris. > > -- > > == chris(a)easynet.net T: +44 845 333 0122 > > == Global IP Network Engineering, Easynet Group PLC F: +44 845 333 0122 > > > > -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- > -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net -- > >

1 0

The Cidr Report
by CIDR Report 20 Jul '02

20 Jul '02

This is an auto-generated mail on Fri Jul 19 23:00:00 PDT 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amount of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 19Jul02 0) General Status Table History ------------- Date Prefixes 120702 111339 130702 111268 140702 111583 150702 111941 160702 112093 170702 111866 180702 111800 190702 111736 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 88.128.0.0/17 from AS9116 *** Bogus 88.128.128.0/17 from AS9116 *** Bogus 88.129.0.0/17 from AS9116 *** Bogus 88.129.128.0/17 from AS9116 AS Summary ---------- Number of ASes in routing system: 13270 Number of ASes announcing only one prefix: 8089 (4550 cidr, 3539 classful) Largest number of cidr routes: 629 announced by AS3908 Largest number of classful routes: 1221 announced by AS701 1) Gains by aggregating at the origin AS level --- 19Jul02 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1089 841 248 22.8% Telstra Pty Ltd AS701 1221 978 243 19.9% UUNET Technologies, Inc. AS17557 293 101 192 65.5% Pakistan Telecom AS6595 221 54 167 75.6% DoD Education Activity Network As AS852 538 401 137 25.5% Telus Advanced Communications AS7018 808 681 127 15.7% AT&T AS16473 195 77 118 60.5% Bell South AS7303 171 74 97 56.7% Telecom Argentina Stet-France Tel AS5515 437 341 96 22.0% Sonera Finland Autonomous System AS4151 236 141 95 40.3% USDA AS19632 99 5 94 94.9% Metropolis Intercom S.A. AS1239 517 423 94 18.2% Sprint AS12302 119 26 93 78.2% MobiFon S.A. AS16814 105 20 85 81.0% NSS, S.A. AS226 171 88 83 48.5% Los Nettos AS7046 306 227 79 25.8% UUNET Technologies, Inc. AS4755 209 133 76 36.4% Videsh Sanchar Nigam Ltd. Autonom AS2048 180 105 75 41.7% State of Louisiana AS577 263 190 73 27.8% Bell Advanced Communications Inc. AS4323 401 333 68 17.0% Time Warner Communications, Inc. AS724 214 152 62 29.0% DLA Systems Automation Center AS3464 163 103 60 36.8% Alabama SuperComputer Network AS19834 64 4 60 93.8% NetForce, Inc. AS10620 84 24 60 71.4% TVCABLE BOGOTA AS1 444 386 58 13.1% GENUITY AS209 315 258 57 18.1% Qwest AS16758 63 6 57 90.5% IKON Office Solutions AS9051 82 26 56 68.3% INCONET Autonomous System AS3908 297 241 56 18.9% Supernet, Inc. AS9498 84 29 55 65.5% BHARTI BT INTERNET LTD. Total 55004 42386 12618 22.9% For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Terremark bozos run amok
by David Conrad 19 Jul '02

19 Jul '02

Careful downloading mail from Terremark, particularly when on travel (to, oh say, the IETF in Japan). They just sent 11 _megabytes_ of spam to my personal email address. How far we've come. In 1982, I could buy a 10MByte hard disk for my IBM PC. Now, I get more than that in a single spam. Blech. Rgds, -drc

1 0

RE: IGP metrics on WAN links
by Frank Scalzo 19 Jul '02

19 Jul '02

MPLS allows you to do the best of both worlds. You can set your TE metrics to the latency/route-miles and then build bandwidth constrained LSPs from place to place and they will take the least latent, uncongested path that they fit on. Similar things can be done with ATM routing costs, and contracts on spvcs. Both of these are considerably more work, but it gets traffic flows on good paths very well. There is at least one large ISP doing metrics in that manner. -----Original Message----- From: Daniel Golding [mailto:dgolding@sockeye.com] Sent: Fri 7/19/2002 4:43 PM To: Joe Abley; Me Cc: Sush Bhattarai; nanog(a)merit.edu; Tom Holbrook Subject: RE: IGP metrics on WAN links I suspect the approach you take depends on how your network looks. If you have many pipes of a variety of sizes, doing IGP metrics based on pipe size makes a good deal of sense, then adding twists for things like ckt latency. However, folks with uniform sized networks, and uniform traffic between coasts probably tend to set IGP metrics for latency, with pipe size being the exception that they bias for afterwards. The latter is probably more prevelent in an established network, the former in a network undergoing a large fiber build. - Dan > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Joe Abley > Sent: Friday, July 19, 2002 4:25 PM > To: Me > Cc: Sush Bhattarai; nanog(a)merit.edu; Tom Holbrook > Subject: Re: IGP metrics on WAN links > > > > On Fri, Jul 19, 2002 at 02:11:29PM -0600, Me wrote: > > I think you missed part of his comment: > > " of course there are always some "twinking" done regularly to > give higher > > priorities to the higher bandwidth, link condition etc" > > > > so fiber mileage is just the base, with modifications to make it work > > correctly, based on bandwidth, etc. > > Yeah, my (limited) experience is the opposite. At the previous large > operator at which I had enable, the IGP metrics were chosen primarily > according to circuit size, and were subsequently tweaked for other > issues (such as circuit latency, or the requirement to balance cross- > US traffic across non-parallel circuits). > > In my experience, congestion is a much more effecive killer of service > than latency due to optical distance. Hence attracting traffic to > circuits where there is more likely to be headroom seems a more > reasonable first-order approach for choosing metrics. > > That experience is all in networks where intra-AS traffic engineering > was done at the IP layer, however; in networks where there is a lower > layer of soft traffic engineering maybe other approaches would be more > appropriate. > > > Joe >

1 0

IGP metrics on WAN links
by Tom Holbrook 19 Jul '02

19 Jul '02

Just curious as to what people are using for metrics in their IGP and what their reasons are; bandwidth? geographical distance? latency? etc... Thanks -Tom __________________ Tom Holbrook Sr. Network Engineer Atlanta Earthlink

6 7

Re: IGP metrics on WAN links
by Warren Van Camp 19 Jul '02

19 Jul '02

At 12:27 PM 7/19/02 -0400, Tom Holbrook wrote: >Just curious as to what people are using for metrics in their IGP and what their reasons are; bandwidth? geographical distance? latency? etc... In the @Home backbone, we used actual fiber miles (plus a small offset per hop to break ties when a particular route had multiple paths with differing numbers of routers). This, of course, just created a "base" configuration which could be tweaked somewhat depending on what needed to happen to make the best use of circuits. Warren Van Camp (formerly @Home Network backbone engineering)

1 0