September 2005 - Test - lists.nanog.org

Turkey has switched Root-Servers
by Peter Dambier 27 Sep '05

27 Sep '05

Here is the birth of a new root-server system: *.united-root.com ; <<>> DiG 9.1.3 <<>> -t any . @l.public-root.net. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11820 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;. IN ANY ;; ANSWER SECTION: . 172800 IN SOA a.united-root.com. hostmaster.united-root.com.\ 2005091400 43200 3600 1209600 14400 . 172800 IN NS g.united-root.com. . 172800 IN NS ns1.public-root.com. . 172800 IN NS tld1.public-root.com. . 172800 IN NS tld2.public-root.com. . 172800 IN NS a.united-root.com. . 172800 IN NS b.united-root.com. . 172800 IN NS c.united-root.com. . 172800 IN NS d.united-root.com. . 172800 IN NS e.united-root.com. . 172800 IN NS f.united-root.com. ;; Query time: 182 msec ;; SERVER: 195.214.191.125#53(l.public-root.net.) ;; WHEN: Mon Sep 26 16:04:25 2005 ;; MSG SIZE rcvd: 248 ; <<>> DiG 9.1.3 <<>> -t any a.united-root.com @l.public-root.net. ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37370 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;a.united-root.com. IN ANY ;; ANSWER SECTION: a.united-root.com. 86400 IN A 69.20.9.165 ;; AUTHORITY SECTION: united-root.com. 86400 IN NS ns2.solfix.com. united-root.com. 86400 IN NS ns1.solfix.net. ;; Query time: 4639 msec ;; SERVER: 195.214.191.125#53(l.public-root.net.) ;; WHEN: Mon Sep 26 16:10:33 2005 ;; MSG SIZE rcvd: 104 host_look("69.20.9.165","a.united-root.com","1158941093"). host_look("72.3.230.81","b.united-root.com","1208215121"). host_name("72.3.230.81","us2.tandtt.com"). host_look("83.138.163.17","c.united-root.com","1401594641"). host_name("83.138.163.17","uk1.tandtt.com"). host_look("203.142.18.40","e.united-root.com","3415085608"). host_look("202.157.188.44","f.united-root.com","3399334956"). host_look("202.157.179.24","g.united-root.com","3399332632"). host_look("195.214.191.125","h.united-root.com","3285630845"). look("207.228.237.52","i.united-root.com","3487886644"). host_look("209.172.35.234","j.united-root.com","3517719530"). host_name("209.172.35.234","ip-209-172-35-234.reverse.privatedns.com"). host_look("84.0.0.0","j.united-root.com","1409286144"). host_name("84.0.0.0","catv54000000.pool.t-online.hu"). host_look("46.99.111.109","j.united-root.com","778268525"). host_look("76.111.110.100","j.united-root.com","1282371172"). host_look("209.172.35.241","k.united-root.com","3517719537"). host_name("209.172.35.241","ip-209-172-35-241.reverse.privatedns.com"). host_look("84.0.0.0","k.united-root.com","1409286144"). host_name("84.0.0.0","catv54000000.pool.t-online.hu"). host_look("46.99.111.109","k.united-root.com","778268525"). host_look("76.111.110.100","k.united-root.com","1282371172"). Not all their servers are working. Some return ICANN. tld1.public-root.com. tld2.public-root.com. are nonsense. They return ICANN. Right now they seem to run old Public-Root data except for the '.' domain G.UNITED-ROOT.COM A 202.157.179.24 D.UNITED-ROOT.COM A 202.157.181.78 F.UNITED-ROOT.COM A 202.157.188.44 E.UNITED-ROOT.COM A 203.142.18.40 A.UNITED-ROOT.COM A 69.20.9.165 B.UNITED-ROOT.COM A 72.3.230.81 C.UNITED-ROOT.COM A 83.138.163.17 Kind regards, Peter and Karin Dambier -- Peter and Karin Dambier Public-Root Graeffstrasse 14 D-64646 Heppenheim +49-6252-671788 (Telekom) +49-179-108-3978 (O2 Genion) mail: peter(a)peter-dambier.de http://iason.site.voila.fr http://www.kokoom.com/iason

5 4

Program Committee candidates
by Steve Feldman 27 Sep '05

27 Sep '05

Here is the lists of candidates for the NANOG Program Committee. First, the new people: Dan Golding Shankar Rao Vish Yelsangikar Guy Tal Jennifer Rexford David Conrad Joel Jaeggli Pete Templin Christopher Quesada Ren Provo Richard Steenbergen Todd Underwood Josh Snowhorn Jeff Young Ed Kern Aaron Hughes Todd Christell Martin Hannigan And second, the current members who wish to continue: Bill Woodcock Steve Feldman Christopher Morrow Joe Abley Henry (Hank) Kilmer Bill Manning Kevin Epperson David O'Leary Ted Seely Susan Hares Elise Gerich William B. Norton (If you should be on either of these lists but are missing, please contact me directly as soon as possible.) Per the NANOG charter, the Steering Committee, in conjunction with the current Program committee, will select eight of the current members to continue for one-year terms. The eight two-year positions will be selected from the combined pool of new and incumbent candidates. We encourage comments on and discussion about the candidates. Private comments or questions may be sent to the Steering Committee (steering(a)nanog.org) the Program Committee (nanogpc(a)nanog.org) or both. Please use the nanog-futures list for public discussion of the candidates or the process. The actual selection process will begin the week of October 3, and we hope to finish and announce the results the week of October 10. Steve Feldman PC Chair

1 0

lightport.com / citicom.com (New Port Richey FL) dns / network ops contact please?
by Suresh Ramasubramanian 27 Sep '05

27 Sep '05

I'd like to talk to you about a dns reachablity issue from our servers trying to resolve a domain you host. Emailed you at your domain whois contacts a while back but haven't got a reply yet regards -srs -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

1 0

Address Space & ASN Allocation Process
by Vicky Rode 27 Sep '05

27 Sep '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Just trying to get some clarity and direction regarding obtaining address space/ASN for my client. Is there a minimum address space (?) an entity would need to justify to go directly to RIR (ARIN in this case) as opposed to the upstream provider? Is /20 the minimum allocation? Can my client approach RIR and request for a /23? If my client do procure a /23 how do they make make sure that this address space will be globally routable? Multihome will also be part of their network implementation, can they apply for an ASN number? Any insight will be appreciated. regards, /vicky -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDOHZ1pbZvCIJx1bcRAihfAJwLF026eea0TxIt5nww7/jCr4YBxQCg57M/ zTUBKD1pkuE7S3NHnjqyqPU= =lWUk -----END PGP SIGNATURE-----

5 4

What's in store for LA (so far)
by Susan Harris 27 Sep '05

27 Sep '05

Here are the topics we've come up with so far for LA. Keep an eye on www.nanog.org/mtg-0501/topics.html for additional talks as the meeting draws nigh. SUNDAY ACTIVITIES ----------------- - All-day Tutorial (9:00 a.m. - 4:30 p.m.) Getting Started with IPv6 Level: Introductory Jordi Palet, Consulintel - Afternoon Tutorials - Best Practices for Determining the Traffic Matrix in IP Networks Level: Intermediate Thomas Telkamp, Cariden - Scaling Considerations in MPLS Networks Level: Intermediate/Advanced Ina Minei, Juniper - BGP Multihoming Techniques Level: Introductory/Intermediate Philip Smith, Cisco ** Steering Committee Community Meeting, 5:00 - 7:00 p.m. ** Welcome Reception! Details to follow, 7:30 - ? GENERAL SESSION --------------- - Near-term Futures for the Industry Geoff Huston, APNIC - AS Consumption Patterns Geoff Huston, APNIC - ASNs MIA: A Comparision of RIR Statistics and RIS Reality Rene Wilhelm and Henk Uijterwaal, RIPE NCC - Stager: Web-Based Statistics Displays Arne Oslebo, Uninett - Shim6: Network Operator Concerns Jason Schiller, UUNET - BLINC: Multilevel Traffic Classification in the Dark Thomas Karagiannis, UC Riverside; Konstantina Papagiannaki, Intel Research; Michalis Faloutsos, UC Riverside - Should Internet Service Providers Fear Peer-Assisted Content? Thomas Karagiannis, UC Riverside; Pablo Rodriguez, Microsoft Research; Konstantina Papagiannaki, Intel Research - Mitigating Superfluous Multicast Data Traffic and Control State John Kristoff, Northwestern Univ. - Routers with Small Buffers Yashar Ganjali, Guido Appenzeller, Ashish Goel, Tim Roughgarden, and Nick McKeown, Stanford Univ. RESEARCH FORUM -------------- - Dynamic AS Renumbering.Research & Results on new BGP Mechanisms Sue Hares, NextHop, and Patrick Bose, Lockheed-Martin SPECIAL TUESDAY TUTORIAL ------------------------ - Getting to Know ARIN (1:00-1:30 p.m.) Ray Plzak, ARIN MONDAY AFTERNOON BOFS --------------------- - IAB IPv6 Multi-Homing BOF Dave Meyer, Cisco, moderator - BGP Data Analysis BOF Mohit Lad, UCLA - ISP Security and NSP-SEC BOF X Danny McPherson, Arbor, moderator - Peering BOF X William B. Norton, Equinix, moderator

1 0

Network Map Generator
by Joe Johnson 27 Sep '05

27 Sep '05

I'm looking for a product or script that will let us generate a network map for use in conjunction with Nagios. We have all of the parent/child dependencies defined in a SQL table, as well as the current status, but I can only find programs that will create a live map on my desktop. I also looked at the graphing Pear module, but it seems that it cannot generate an org-chart type map of the network. Anyone know of something that will generate an org-chart like network map dynamically? Sincerely, Joe Johnson joe(a)sendjoeanemail.com

5 5

RE: Address Space & ASN Allocation Process
by Reeves, Rob 27 Sep '05

27 Sep '05

> Hi, > > Just trying to get some clarity and direction regarding > obtaining address space/ASN for my client. > > Is there a minimum address space (?) an entity would need to > justify to go directly to RIR (ARIN in this case) as opposed > to the upstream provider? Is /20 the minimum allocation? Can > my client approach RIR and request for a /23? The minimum assignment from ARIN is actually a /22, which will only be given to multi-homed end-users who qualify (http://www.arin.net/policy/nrpm.html#four3) Other than that, the smallest assignment is /20. > If my client do procure a /23 how do they make make sure that > this address space will be globally routable? Regardless of where their IP's come from, all they have to do is announce them to their upstream providers using BGP. > Multihome will also be part of their network implementation, > can they apply for an ASN number? Yes, they can apply for an ASN number as long as they can show ARIN that they are in the process of bringing up connectivity with more than one ISP. ARIN's web page is actually pretty easy to navigate for finding this and all the other information you will need. I would suggest checking it out. http://www.arin.net ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Rob Reeves IP Network Engineer Arbinet 703-456-4172 rreeves(a)arbinet.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Hope this isnt a redundant question : Cisco IOS Netflow analysis mechanisms?
by Drew Weaver 27 Sep '05

27 Sep '05

We're looking for a method of actively monitoring certain metrics on our network via software or a somewhat inexpensive hardware solution (those metrics being which AS numbers are the highest destinations for our network) and information like that which will help us with capacity planning. We are looking for suggestions if anyone has any real-world knowledge of anything that would tell us for example: 8% of our traffic is destined to AS 2828 (XO communications) etc. Data such as that, Thanks.

6 5

PacSec05
by Dragos Ruiu 27 Sep '05

27 Sep '05

English url: http://pacsec.jp/index.html?LANG=ENGLISH Japanese url: http://pacsec.jp/index.html?LANG=JAPANESE Myamoto Musashi famous swordsman and author of "Go Rin No Sho" (the Book of Five Rings) wrote "Study the Way of all professions." In the way of computer networks, one must understand attacks before one can forestall them. I would like to announce the selection of the PacSec applied technical security seminar presentations. The event will be held on November 15/16 in Tokyo, Japan, at the Aoyama Diamond Hall, accessible at exit B5 of the Omotesando station, on Ginza or Hanzomon lines. PacSec/core05 The selected papers are: Andrea Barisani - Gentoo Building a modern LDAP based security framework. Cedric "Sid" Blancher - EADS WiFi traffic injection based attacks Javier Burroni - CORE SDI Using Neural Networks for remote OS identification Maximillian Dornseif - Laboratory for Dependable Distribute Systems Watching hackers hack - attack visualization van Hauser - thc Attacking the IPv6 protocol suite Adam Jacobs - Oracle Commercial Software and How Can We Fix It? Chris Jordan - Endeavor Systems Writing Better Intrusion Prevention Signatures Hiroshi Shinotsuka - Symantec Advances in Trojan Threats Feng "Sowhat" Xue - 3rd Research Institute, Ministry of Public Security, Chinese National Anti-Intrusion and Anti-virus Research Center Talking About 0day Ilja van Sprundel - Suresec Unix Kernel Auditing Window Snyder - formerly Microsoft A new perspective on internal security. Yuji Ukai - eeye Real-Time OS Based Embedded Systems Using the JTAG Emulator Marc Uemura - PWC Fault Redundant IPV6 Wireless Firewalls Christian Wieser - Oulu University Secure Programming Group VoIP: SIP robustness and RTP security All presentations are in both Japanese and English. Registration is on line at http://pacsec.jp ********************************************************** Security Masters Dojo, Tokyo ---------------------------------- The Tokyo Security Masters Dojo will be held on November 14, also at the Aoyama Diamond Hall. The following one day advanced and intermediate applied information security courses will be offered: Sinan 'noir' Eren & Nicolas Waisman - Immunity Win32 Reliable Heap Explotation Gerardo Richarte - Core Security Technologies Assembly for Exploit Writing Marty Roesch - Sourcefire Advanced IDS Deployment and Optimization Maximillian Dornseif & Thorsten Holtz - Aachen University Advanced Honeypot Tactics Philippe Biondi - EADS Mastering the Network with SCAPY As with all Dojo courses, to ensure that each student gets individual training from the instructors in the hands-on labs, class size will be limited to ten students per course. Each course is one day, and features practical exercises to help maximize knowledge retention. Dojo registration will be available shortly under the "DOJO" tab on http://pacsec/.jp along with expanded course information. CanSecWest/core06 final dates: April 5-7 2006 Early Discount Registration is on-line at: http://cansecwest.com/register.html Dojo/Vancouver dates: April 3-5 2006 Dojo/Vancouver Registration is not available yet. cheers, --dr -- World Security Pros. Cutting Edge Training, Tools, and Techniques Tokyo, Japan November 14-16 2005 http://pacsec.jp pgpkey http://dragos.com/ kyxpgp

1 0

Re: 209.68.1.140 (209.68.1.0 /24) blocked by bellsouth.net for SMTP
by Gadi Evron 26 Sep '05

26 Sep '05

Cat Okita wrote: > Could the thieving donkey be so kind as to stop cross-posting? I am not on nanog-futures, and this interests all of us as a community. If I get a reply to a mailing list I am on, cross-posted to another list. I reply to the one I am on. I don't see why people keep insisting on moving discussions of critical nature such as fergie quitting (he ******* quit! do any of you care?) to a small list most of us don't read. Apparently it helps keep things quiet enough for the regular flames to go on. With all that's going on in nanog another thread won't kill anyone (unless the mods say it's off and then I'd naturally respect their decision to self-marginalize nanog again and I'll shut up about it). nanog is where this all happens, and I don't see any reason to post anywhere but a list I am subscribed to. As to you - you are rather rude. Are we related? Gadi. -- My blog: http://blogs.securiteam.com/?author=6 "The third principle of sentient life is the capacity for self-sacrifice --- the conscious ability to override evolution and self-preservation for a cause, a friend, a loved one." -- Draal, "A Voice in the Wilderness", Babylon 5.

1 0