May 2004 - Test - lists.nanog.org

Question about obtaining ASN #
by Vish Yelsangikar 06 May '04

06 May '04

Hi there. We are in the middle of a major project that will be rolled out in the next 3-4 months. With this project, I will be multihoming my network. To get ready for this project, I recently applied for an AS# for my company with ARIN and I was denied because I don't have a multihomed network and dont intend to be one in the next 30 days. Is there any other way to obtain AS#? I dont want to wait until 11th hour to get the AS#. Any suggestions are appreciated. Thanks. Vish Yelsangikar.

4 3

RE: Question about obtaining ASN #
by McBurnett, Jim 06 May '04

06 May '04

->i think you only need to wait until 30 days before, not 11 ->hours before. -> ->ARIN in my experience responds with reasonable promptness to ->ASN requests, ->and assuming your paperwork is in order, you really are ->worrying unnecessarily. -> I second that.. When we multihomed, I gave the info and had my AS in about 24 hours. We had the IP's were using them, both providers in house. Went multihomed the day after the AS was given. The only thing I suggest you worry about is making sure the 2 providers give you time/date for an engineer's time. It took me more time to set that up than anything else... and even then only 2 calls at my sales support engineers staff.... Later, Jim

1 0

RE: BGP Exploit
by Smith, Donald 06 May '04

06 May '04

I don't believe it FILLED the pipe. I suspect it made the interface unusable by consuming buffer/processes/io ... Other interfaces on the system were still functional. I did NOT measure the actual through put. Donald.Smith(a)qwest.com GCIA http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAF00EDCC pgpFingerPrint:9CE4 227B B9B3 601F B500 D076 43F1 0767 AF00 EDCC kill -13 111/2 > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Christopher L. Morrow > Sent: Wednesday, May 05, 2004 5:31 PM > To: Patrick W.Gilmore > Cc: nanog(a)merit.edu > Subject: Re: BGP Exploit > > > > On Wed, 5 May 2004, Patrick W.Gilmore wrote: > > > > > On May 5, 2004, at 2:39 PM, Smith, Donald wrote: > > > > > No. The router stays up. The tool I use is very fast. It > floods the > > > GIGE to the point that that interface is basically > unusable but the > > > router itself stays up only the session is torn down. I did > > > preformed these tests in a lab and did > > > not have full bgp routing tables etc ... so your mileage may vary. > > > > That is DAMNED impressive. I've never seen a router which > can take a > > Gigabit of traffic to its CPU and stay up. What kind of router was > > this? You mentioned Juniper and Cisco before, but I know a > cisco will > > fall over long before a gigabit and a Juniper either does or drops > > packets destined for the CPU (but keeps routing). > > recieve-path acl and recieve-path-limits perhaps on a cisco > will allow survival? Though if this is 'bgp' from a valid > peer it seems likely to crunch it either way. > > > > > Perhaps it was rate limiting the # of packets which reached > the CPU, > > and the session stayed up because the "magic" packet was dropped in > > the rate limiting? > > > > That sees likely. >

1 0

Re: Network discovery tools
by sgorman1＠gmu.edu 06 May '04

06 May '04

Thanks for the suggestions. The network ferret tools reports to do layer 2 discovery as well, maybe not so wishful thinking but I could be wrong - http://www.panix.com/~logikos/ ----- Original Message ----- From: Mark Boolootian <booloo(a)ucsc.edu> Date: Thursday, May 6, 2004 11:59 am Subject: Re: Network discovery tools > > > > The best GPL tool that I've come across in a long while, as far > as > > network discovery goes, would have to be the discovery engine > inside > > Netdisco (http://www.netdisco.org) This tool is fairly Cisco- > centric, > > but Max has put a lot of work into a tool for folks who are > tired of > > CiscoWorks not working. > > netdisco does automated topology discovery for CDP-speaking devices > (where the C is Cisco and not Cabletron). That includes Cisco gear > and some HP stuff (at least the ProCurve line of switches - not sure > what else they have it in). netdisco will also do topology discovery > using Bay's discovery protocol (though this probably only exists in > old stuff and likely didn't make the cut in the move to Nortel). > There'ssome hope for using the work done by some guys at Bell Labs > to do the L2 > topology discovery relying on existing MIBs (primarily the BRIDGE > MIB),and there is proof-of-concept code, but that's mostly wishful > thinkingat this point. > >

2 1

Network discovery tools
by sgorman1＠gmu.edu 06 May '04

06 May '04

I was wondering if anyone could recommend a good shareware or demo network discovery tool. I was hoping to find something that will show vendor type during node discovery. I came across a tool called network ferret that did the job, but nothing downloadable. I'm hoping to do some more work on the effects of network diversity, and wanted to do testing on real world networks. I figured starting of with GMU would get us going, but if anyone knows of any available datasets with node-link topology and vendor type it would be great to play with them. thanks, sean

2 1

RE: Network discovery tools
by Brian Wilson 06 May '04

06 May '04

The best GPL tool that I've come across in a long while, as far as network discovery goes, would have to be the discovery engine inside Netdisco (http://www.netdisco.org) This tool is fairly Cisco-centric, but Max has put a lot of work into a tool for folks who are tired of CiscoWorks not working. -B -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of sgorman1(a)gmu.edu Sent: Thursday, May 06, 2004 11:13 AM To: nanog(a)merit.edu Subject: Network discovery tools I was wondering if anyone could recommend a good shareware or demo network discovery tool. I was hoping to find something that will show vendor type during node discovery. I came across a tool called network ferret that did the job, but nothing downloadable. I'm hoping to do some more work on the effects of network diversity, and wanted to do testing on real world networks. I figured starting of with GMU would get us going, but if anyone knows of any available datasets with node-link topology and vendor type it would be great to play with them. thanks, sean

2 1

Re: What percentage of the Internet Traffic is junk?
by Joe St Sauver 06 May '04

06 May '04

[discussing the traffic statistics reported at http://netflow.internet2.edu/ ] #Note that this is biased by a very significant factor - we're looking here at #Internet2 traffic *only*, which basically ends up meaning that email isn't seen #unless both the sender *and* recipient are at one of the 200 or so universities #that are members, or one of the 50 or so corporate/associate members. Actually, that understates the relevant population. The traffic seen on Abilene represents traffic associated with the groups you mentioned, PLUS: -- all the foreign R&E networks that peer with Internet2 (Canarie, Geant, etc, see http://abilene.internet2.edu/peernetworks/international.html ) -- the federal R&E networks that peer with Internet2 (ESNet, DREN, NREN/NISN, etc., see: http://abilene.internet2.edu/peernetworks/domestic.html) -- the 30+ state K12 networks that now connect to Abilene as "sponsored educational group participants (SEGPs)," (many of which dwarf their affiliated state university systems by a factor of ten or more in size) (see http://abilene.internet2.edu/community/segp/list.html ) -- the smaller schools, museums, hospitals, observatories, etc. that are connected as "sponsored participants" (see http://abilene.internet2.edu/community/sponsored/list.html ) -- event-related traffic associated with things like SC2003 and similar exhibitions/meetings -- intra-Abilene traffic associated with backbone performance/conformance testing, etc. #For starters, if the sender *or* recipient is at a commercial ISP, it won't #have been included in those numbers. That's true for IPv4 unicast trafifc, but Internet2's conditions of use allow it to carry IP multicast traffic and IPv6 traffic regardless of whether the source is R&E or commercial. So yes, it is true that Abilene's traffic doesn't accurately reflect the activities of the greater Internet, but it does reflect the activity of a wider base of folks than you might think. What it does not reflect is the traffic to and from popular destinations such as Google, Yahoo, MSN, CNN, eBay, etc. Regards, Joe

1 0

RE: FW: Worms versus Bots
by Rob Nelson 06 May '04

06 May '04

>The goal of this document is help new XP users survive long enough to do >their updates. >Many of them cant/wont put up acls/nat/firewalls ... but if they follow >the steps listed they have a better chance of >successfully downloading and updating their new machine then they will >have with OUT these steps. >It is not meant as a complete XP hardening document. There are lots of >documents that discuss in detail how to harden >windows (xp,nt,2k...). If the person doesn't continue to do acls/nat/firewalls, they'll just get infected after the next hole is discovered. And yes, there are plenty of holes that a firewall/nat box won't fix. Still, better than the user only doing Windows Update on the day of install and never having a firewall... Rob Nelson ronelson(a)vt.edu

3 2

Re: What percentage of the Internet Traffic is junk?
by Hank Nussbacher 06 May '04

06 May '04

> >With all the spam, infected e-mails, DOS attacks, ultimately blackholed >traffic, etc. I wonder if there has been a study that quantifies > >What percentage of the Internet traffic is junk? Record Broken: 82% of U.S. Email is Spam http://www.esecurityplanet.com/trends/article.php/3349921 -Hank

1 0

What percentage of the Internet Traffic is junk?
by William B. Norton 06 May '04

06 May '04

With all the spam, infected e-mails, DOS attacks, ultimately blackholed traffic, etc. I wonder if there has been a study that quantifies What percentage of the Internet traffic is junk? Bill

7 6