August 2007 - Test - lists.nanog.org

nanog list bad sub
by Randy Bush 16 Aug '07

16 Aug '07

the following post should not have come to me

2 2

Preliminary agenda for NANOG 41
by Steve Feldman 16 Aug '07

16 Aug '07

The following talks have been accepted so far for the NANOG 41 conference, to be held October 14-16 in Albuquerque, NM: General Session: Perfect Storms, Internet Economics, and the Future of the Internet - David Meyer, Cisco/Univ. of Oregon IPv6 Transition & Operational Reality - Randy Bush, IIJ From NetFlow to IPFIX: the evolution of IP flow information export - Brian Trammell, CERT/NetSA; Elisa Boschi, Hitachi Europe Resilient L2 VPNs - Ian Cowburn, Alcatel-Lucent Have We Reached 1000 Prefixes Yet?: A snapshot of the global IPv6 routing table - Gert D�ring, SpaceNet AG, presented by CJ Aronson Protection and Fault Recovery at Internet Peering Points using 802.1ag CFM - Rahul Vir, Foundry Networks Integrating Networks - Nina Bargisen and Michael Lyngb�l, TDC Research Forum: BGP Protection Without Global Cooperation - Josh Karlin, University of New Mexico and Stephanie Forrest, University of New Mexico and Jennifer Rexford, Princeton University Tutorial: BGP Multihoming Techniques - Philip Smith, Cisco Systems Layer 3 VPN for v4 & v6 in IP Core - Madhusudan Nanjanagud, Cisco Systems BOF: Peering BOF XVI - Bill Norton, Equinix On Sunday, October 14, there will also be a special one-day workshop on IPv6 implementation, jointly sponsored by NANOG and ARIN. The week continues with the ARIN XX meeting on October 17-19. A preliminary overview of the agenda looks like: SUNDAY, October 14 - Joint NANOG/ARIN IPv6 Workshop - all day - Registration - TBA - Tutorials: 1:30pm - 5:00pm - Newcomers meeting and reception - TBA - Community meeting - TBA MONDAY, October 15 - Registration - all day - Contintental beakfast - 8:00 - 9:00 - General session - 9:00 - 12:30 - Lunch (on your own) - 12:30 - 2:00 - General session and/or BOFs - 2:00 - 5:30 - Beer 'n Gear - 5:30 - 7:30 Tuesday, October 16 - Registration - all day - Contintental beakfast - 8:00 - 9:00 - General session - 9:00 - 12:00 - Lunch (on your own) - 12:00 - 1:30 - General session - 1:30 - 5:00 These times are tentative, and subject to change as the agenda firms up. Finally, a few announcements from Merit: Meeting registration <https://www.nanog.org/registration/> is open and the lower registration rate is in effect through September 24. The group room rate at the hotel <http://www.nanog.org/mtg-0710/hotel.html> expires September 24. Note: make your reservation 'early' as NANOG is meeting on the tail end of the ABQ International Balloon Fiesta. Hotel rooms will be in high demand, especially on Saturday night, Oct. 13. For additional meeting information, please see <http://www.nanog.org/>. See you in Albequerque! Steve Feldman PC Chair

1 0

DNS not working
by leeyao＠trashymail.com 16 Aug '07

16 Aug '07

Hi, I try adding google.com to my dns server to get more visitors but google.com still show search engine. Please advise how to do so more visitor in return? May the Gods be with you!

1 0

RE: Network Inventory Tool
by James Fogg 16 Aug '07

16 Aug '07

> From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Wguisa71 > Sent: Monday, August 13, 2007 11:31 PM > To: NANOG > Subject: Network Inventory Tool > > > Guys, > > Does anyone known some tool for network documentation with: > > - inventory (cards, serial numbers, manufactor...) > - documentation (configurations, software version control, etc) > - topology building (L2, L3.. connections, layer control, ...) > > All-in-one solution and It don't need to be free. I'm just looking > for some thing to control the equipments we have like routers > from some sort of suppliers, etc... > > Marcio Opsware Network Automation System does an excellent job. Not free. It also handles configuration management, software management, compliance, configuration policy management and other needs.

2 1

Re: [policy] When Tech Meets Policy...
by Paul Ferguson 16 Aug '07

16 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I was just struck by a couple of statistics: [snip] In January 2007, according to PIR five registrars deleted 1,773,910 domain names during the grace period and retained 10,862. That same month, VeriSign reported that among top ten registrars, 95% of all deleted .COM and .Net domain names were the result of domain tasting. [snip] http://www.informationweek.com/management/showArticle.jhtml?articleID=20150 0223 Having said that, Jay Westerdal mentioned on Sunday that: [snip] Today was the largest Domain Tasting day ever. We recorded over 8 Million Transactions today. This is a new high. We have never seen 8 Million transactions on one day before. That would be either an add or delete. Over 99 percent of these transactions are completely free and use the 5 day grace period to test domain names for traffic before they are purchase for a long term buy. [snip] http://blog.domaintools.com/2007/08/biggest-domain-tasting-day-ever/ Although I'm not sure all of that 8M+ were actual "tasted", it does represent an astronomical number of registrations. Just a couple of data points. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGwPUBq1pz9mNUZTMRAlumAKD6t0AQS050YRaaxCqYomMWPDP6NgCgmSFO Frvz42ZtnHXYaRQ8hgXK4LA= =bvP6 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

6 6

Re: Extreme congestion (was Re: inter-domain link recovery)
by Stephen Wilcox 16 Aug '07

16 Aug '07

On Wed, Aug 15, 2007 at 12:58:48PM -0700, Tony Li wrote: > > On Aug 15, 2007, at 9:12 AM, Stephen Wilcox wrote: > > >>Remember the end-to-end principle. IP backbones don't fail with > >>extreme > >>congestion, IP applications fail with extreme congestion. > > > >Hmm I'm not sure about that... a 100% full link dropping packets > >causes many problems: > >[...] > >L3: BGP sessions drop, OSPF hellos are lost.. routing fails > >L2: STP packets dropped.. switching fails > > > It should be noted that well designed equipment will prioritize > control data both on xmit and receive so that under extreme > congestion situations, these symptoms do not occur. Hi Tony, s/will/should/ The various bits of kit I've played with have tended not to cope under a massively maxed out circuit (I dont mean just full, I mean trying to get double the capacity into a link). This includes Cisco and Foundry kit.. not sure with other vendors such as Extreme or Juniper. Often the congestion/flaps causes high CPU, which also can cause failure of protocols on the control plane. Also, if you have something like router-switch-router it may be that the intermediate device looks after its control plane (ie STP) but for example sees BGP as just another TCP stream which it cannot differentiate. Whilst it may be that control plane priority, cpu protection are features now available.. they have not always been and I'm fairly sure are not available across all platforms and software now. And as we know, the majority of the Internet does not run the latest high end kit and software.. Steve

1 0

Domain Registration and MX Records [Was: Re: Discovering policy ]
by Paul Ferguson 15 Aug '07

15 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Douglas Otis <dotis(a)mail-abuse.org> wrote: >Do not depend upon applications not to resolve addresses for root names, even when a convention is explicit. Depending upon root answers to support a protocol feature unrelated to DNS is normally considered a design mistake isn't it? > Subject line changed to reflect reality. If this issue has strayed into the field of DNS issues, please, let's mark it as such. The initial thread started on the issue of domain tasting, and perhaps it has morphed here. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGw79vq1pz9mNUZTMRAtCnAKCW7swTGNENv2MbjTc4dogXVy5bPQCgzX4W pDXCDMmFkYTqmqJQqO5tpZA= =YDtZ -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: [policy] When Tech Meets Policy...
by Paul Ferguson 15 Aug '07

15 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Chris L. Morrow" <christopher.morrow(a)verizonbusiness.com> wrote: >On Tue, 14 Aug 2007, Douglas Otis wrote: > >> That point forward, spammers would be less able to take advantage >> of domains in flux, and policy schemes would be far less perilous for > >are spammers really doing this? do they mine the domain system for changes >and utilze those for their purposes? I ask because i don't see that in my >data, which is small admittedly... I see lots of existing well known >domains in the 'from'. Unless you have some data showing otherwise (or >someone else has data to share) I think this is a specious arguement. > More than ~85% of all spam is being generated by spambots. Spammers are gaming the domain registry system, not for MX record manipulation, but to install their own nameservers on compromised hosts, round-robin and fast-flux their ability to avoid detection, and inevitably hide behind various layers of obfuscation. They are manipulating both the (legitimate) process of obtaining IP addresses, registering domain names (and all the cruft that it brings along with it, given the loopholes in the processes), and manipulating the ability to move their nameservers around at-will. It's pretty much a mess -- these guys use the system to succeed. Honestly, I don't have any answers -- only questions at this point. :-/ - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGwpOtq1pz9mNUZTMRAgwMAJ9tANe2A4jlH5rx9WG+RddhHJwHcgCgrO2B dVaFMZF1Lp87F0vygsvbvJM= =qyM6 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

udp fragments, 1472 bytes payload
by Miguel Mata 15 Aug '07

15 Aug '07

I'm being attacked with UDP fragments having a payload 1472 bytes. Seems like a DDoS that only likes to suck bandwidth. Anyone on the same coaster? drop me a line. -- Miguel Mata Gerente de Operaciones Intercom El Salvador mmata(a)intercom.com.sv voz: ++(503) 2278-5068 fax: ++(503) 2265-7024 "Intercom, sus Telecomunicaciones en buenas manos"

3 3

Network Inventory Tool
by Wguisa71 15 Aug '07

15 Aug '07

Guys, Does anyone known some tool for network documentation with: - inventory (cards, serial numbers, manufactor...) - documentation (configurations, software version control, etc) - topology building (L2, L3.. connections, layer control, ...) All-in-one solution and It don't need to be free. I'm just looking for some thing to control the equipments we have like routers from some sort of suppliers, etc... Marcio

5 4