September 2005 - Test - lists.nanog.org

Cisco crapaganda
by J. Oquendo 05 Sep '05

05 Sep '05

http://www.networkworld.com/news/2005/080805-cisco-routers.html /* ARTICLE Among the developments last week: Cisco continually revised its security bulletin, adding details as to how versions of unpatched IOS software could be undermined by a "specifically crafted IPv6 packet." Sources at Cisco say testing will continue indefinitely and could include findings related to more than simply IPv6-related exploits. */ Ironic the marketing and disinformation coming out of Cisco Systems in relation to not disclosing what really occurred and labeling the vulnerability as "IPv6 based.... but" after they initially stated it as "IPv6 only!" /* ARTICLE The researcher who touched off the uproar, Michael Lynn, says he is now the subject of inquiries by FBI agents, and he continues to defend the propriety of his actions. */ Since when did the FBI decide to play "Corporation Superherosaviour" so blatantly. Mr. Lynn's disclosure while a double edged sword can possibly save the industry from a catastrophe, and while yes it can also cause one, I believe he did the right thing. /* ARTICLE Experts and users say the hole in IOS appears not to be an immediate concern based on what is public knowledge at the moment, since patches are available. But what concerns some is that Lynn's exploit techniques take router hacking to a new level, which eventually could have security implications for Cisco customers. */ This same attitude from vendors is what causes those releasing POC (proof of concept) code to release information on how things break. I recall posting here a while back information on how it would be possible to break neighbors in BGP by causing flaps. I did not post the information with the intent on anyone using that information to cause damage nor was it malicious. I did it under the impression someone in the industry would take a look at it and see what I saw and come up with a solution. To date however... It's been more or less the same: "You're an ass for doing that..." /* ARTICLE While Lynn has settled one lawsuit with Cisco and ISS, agreeing not to disclose anything he knows about the exploit, his problems don't seem to be over. The FBI is investigating him and interviewing friends and roommates, he says. */ Spin spin sugar... Looking at this current situation I'm wondering when did it become a federal offense to break a non disclosure agreement. I can look at this two possible ways now... Are the feds looking at Mr. Lynn because they have something vested in the IOS of Cisco (Carnivore, Magic Lantern), or are they going after him under the guise of "National (in)Security". If it's national (in)security, then why not go after Cisco for allowing this problem to go unresolved when they knew of it months in advance. Anyhow, sorry for the rants... The article is pseudo-worth the read if you can filter out marketing and crapaganda. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x97B43D89 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x97B43D89 To conquer the enemy without resorting to war is the most desirable. The highest form of generalship is to conquer the enemy by strategy." - Sun Tzu

9 9

Hurrican Katrina situation report
by Sean Donelan 05 Sep '05

05 Sep '05

Electric power Peak outages in Alabama, Louisiana and Mississippi: 2.7 million meters Remaining outages as of September 5: 1 million meters Alabama: 2% customer meters without power Louisiana: 56% customer meters without power Mississippi: 30% customer meters without power New Orleans: restoration to emergency, governmental and special needs customers including portions of the west bank of Jefferson Parish, including West Jefferson Hospital, Entergy's Gretna Control Center, Jefferson Parish EOC, Gretna Police Department, Gretna Fire Station, Gretna Water Works and Jefferson Parish Sewer Plant. On the east bank of Jefferson Parish, power has been restored to East Jefferson General Hospital, Ochsner Clinic Foundation and the Louis Armstrong International Airport. Natural gas (Entergy): Extensive damage to gas distribution system in New Orleans. Will need to shut off natural gas service in many areas of New Orleans to make repairs. Cellular (Verizon, Cingular): Alabama: majority of service restored with a few areas of limited service Mississippi: Gulf coast outages and spotty service. Cell on Wheels (COWs) deployed to support relief operations in several areas. Biloxi service partially restored. Louisiana: Central New Orleans wide spread outages with limited service. Outside of New Orleans, have good service with only a few areas of limited coverage. Rooftop COWs being deployed to locations in New Oreleans. Roaming service: Evacuees with cell phones with numbers from the affected areas found their service did not work elsewhere in the country because the cell phone could not register on the network. Cellular carriers have worked to re-deploy new databases and re-route registration messages to provide service to evacuees. Note: Mobile VOIP services could have the same problem in the future. Wireline (Bellsouth): Lousiana: Approximately 54% of the access lines out of service. Mississippi: Approximately 39% of the access lines out of service. Alabama: Approximately 5% of the access lines out of service. Long Distance and Internet: Sprint Nextel has rerouted long-distance traffic around New Orleans enabling customers to make long-distance calls in the Tallahassee area and in the Florida Panhandle, including Ft. Walton Beach. Sprint Nextel teams continue to work to restore dedicated Internet access to corporate customers in northern Florida. Qwest fiber optic line along the gulf coast was damaged. Services for shelters and evacuees in other states Essentially every service provider is providing emergency and free services to shelters and evacuees as new shelters are being opened througout the country.

1 0

katrina damage
by Andrew D Kirch 05 Sep '05

05 Sep '05

This isn't quite network related, though if you have facilities in New Orleans, it might be of use to assist in assessing damage in your area. http://maps.google.com/maps?q=New+Orleans&t=e has satellite images from Katrina's damage path specifically in the New Orleans Area. -- Andrew D Kirch | Abusive Hosts Blocking List | www.ahbl.org Security Admin | Summit Open Source Development Group | www.sosdg.org Key At http://www.2mbit.com/~trelane/trelane.asc Key fingerprint = 4106 3338 1F17 1E6F 8FB2 8DFA 1331 7E25 C406 C8D2

1 0

Re: Update on Wireless Katrina Response
by W.D.McKinney 05 Sep '05

05 Sep '05

>-----Original Message----- >From: Fergie (Paul Ferguson) [mailto:fergdawg@netzero.net] >Sent: Monday, September 5, 2005 08:35 AM >To: nanog(a)merit.edu >Subject: Update on Wireless Katrina Response > > >"On Friday, the FCC held a conference call with wireless >internet service providers and representatives of tech >companies including Intel, Cisco, and Vonage -- the goal >was to urgently coordinate private and public sector resources >to get communication systems up again in areas devastated by >Katrina." > >http://www.boingboing.net/2005/09/05/update_on_wireless_k.html > >- ferg > > The list at part-15.org has information on the Wisps setting up Wireless service ASAP. Also some VoIP services. -Cheers Dee

1 0

Update on Wireless Katrina Response
by Fergie (Paul Ferguson) 05 Sep '05

05 Sep '05

"On Friday, the FCC held a conference call with wireless internet service providers and representatives of tech companies including Intel, Cisco, and Vonage -- the goal was to urgently coordinate private and public sector resources to get communication systems up again in areas devastated by Katrina." http://www.boingboing.net/2005/09/05/update_on_wireless_k.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Katrina impact on US internet backbone -- analysis
by Fergie (Paul Ferguson) 05 Sep '05

05 Sep '05

I'd be interested in what the curmudgeons on the list think about this: http://www.boingboing.net/2005/09/04/katrina_impact_on_us.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

5 5

Re: Katrina impact on Internet2 backbone -- analysis
by Fergie (Paul Ferguson) 04 Sep '05

04 Sep '05

Okay, they changed it on me. Flame away. http://www.boingboing.net/2005/09/04/katrina_impact_on_ab.html - ferg -- "Fergie (Paul Ferguson)" <fergdawg(a)netzero.net> wrote: I'd be interested in what the curmudgeons on the list think about this: http://www.boingboing.net/2005/09/04/katrina_impact_on_us.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: Tidbit from DirectNIC
by Michael Greb 04 Sep '05

04 Sep '05

On Fri, Sep 02, 2005 at 11:54:10AM -0400, Steven Champeon wrote: > on Fri, Sep 02, 2005 at 04:44:49PM +0100, Michael.Dillon(a)btradianz.com wrote: > > -----snip----- > > Fox News is reporting that there is an operation underway to refill > > chillers at the Bell South building down the street to keep phone service > > available to much of the southeast United States. That is apparently where > > all the firetrucks are going to in the area, in case you were wondering. > > -----snip----- > > > > It is interesting to note that it is possible to bring in diesel and water > > to resupply BellSouth yet it is impossible to bring in water and food for > > the residents, not to mention a fleet of small boats that could have > > prevented thousands from dying trapped inside their attics. > > 1) potable water is probably somewhat different from the water used in > chillers or fire trucks > > 2) phone service is, IMHO, one helpful pre-requisite to providing > emergency care and disaster relief Last year after Ivan phone service played no roll in emergency care or disaster relief. Ham Radio operators, myself included, were stationed at each shelter, the Red Cross and Salvation Army command centers, the county EOC, hospitals, and some assigned to shadow important people such as the mayor whereever they went. Every agency participating had a presence at the county EOC. When an ambulance was needed at a shelter, it was called for via ham radio, an operator at the EOC passed the message to the ambulance dispatcher in the same room, they called the ambulance out. Those in their home and not in a shelter had no way to call for help but the city and county themselves did not rely on phone service for anything. This is why the federal government gives so much valuable radio spectrum to Ham Radio, more then any other service, the principal purpose of Ham Radio is to provide emergency communications in times of need. > 3) the pictures I've been seeing have been full of boats, many of them > thrown up on land a few hundred feet from their berths > > Not saying that the utter failure of DHS as an organization isn't on > evidence here. Just saying that it's one thing to feed and water a plant > and quite another to feed and water a human being, let alone tens of > thousands of them. Michael Greb

3 2

RE: UNITED.COM (United Airlines) has been down for days! Any info on this?
by Hannigan, Martin 04 Sep '05

04 Sep '05

> > United.COM works from everywhere I try it. MCI, AT&T, Internap, > > and Sprint. I can run tickets, check miles, and check my dining > > points. > > > > Since I started the thread a month ago... it seemed to me that the > problem(s) are intermittent and not always repeatable :( I > was able to see > some very odd things in the dns resolution area for their > site(s), which > others had confirmed being problematic over the last few > months as well. You started this? Thanks. I love IKYABWAI threads. :-) > I'd think that lastnight's 'problem' was just another > recurrence of the > same set of problems :( Maybe someone at Internap could tell them/ask them what's going on?

2 1

RE: Katrina could inundate New Orleans
by Dave Stewart 04 Sep '05

04 Sep '05

At 12:02 AM 8/29/2005, you wrote: >Some of this is on topic. Internet access is as important as the >lights or water being on. Right, get out, but it'll be good >to see reasonable updates on what's going on utilities wise >down there when the weather shifts. Y'know... I do have to wonder whether Internet access is nearly as important as power and communications (traditional comms, such as the PTSN). Granted, it'll be interesting to see how things shake out - but I just can't buy that getting the Internet working should/will be a really high priority.

7 6