May 2008 - Test - lists.nanog.org

Types of packet modifications allowed for networks
by Jean-François Mezei 02 Jun '08

02 Jun '08

I would like any pointers to good documents that outline what sort of packet modifications are allowed (in terms of Internet culture/policies) by networks. Notably: For a transit network (neither sending or destination IPs belong to the network) For the sending network (originating IP belongs to that network) For the destination network (destination IP belongs to that network). Obviously, every router will change/decrement the TTL (and recalculate the header checksum) in the IP header. Are there other fields that are routinely changed at every hop ? Would it also be correct to state that any network along the way would have the right to fragment a packet in two or more pieces ? Or would that only be the destination network needing to fragment a packet to fit the last mile (PPP dialup or PPPoE ) in cases where MTU negotiations failed ? Are there sacred rules documented anywhere about not modifying anything else in the packets during transit ? Or has there never been any formal documentation on this because it was so obvious nobody was allowed to modify packets in transit ? (I an in Canada and currently participating in CRTC proceedings about the Bell throttling issue, and would like to consider the angle where the CRTC might decides Bell has the right to manage PPPoE packets as if they were TCPIP packets (by looking inside). Thanks in advance for any hints/pointers on this issue.

6 5

IOS Rookit: the sky isn't falling (yet)
by Nicolas FISCHBACH 02 Jun '08

02 Jun '08

I finally got to see Topo's presentation this week-end at PH-Neutral and discuss it with him and FX. Given that the slides aren't online yet [1], that Core hasn't published Topo's technical paper on their website [2] yet either, and that I'm done replying to direct inquiries about it [3], here's a summary of the IOS rootkit saga and its impact on the Service Provider community (from my point of view :) Topo spent a lot of time (and if you ever loaded an IOS image in IDA you know what I'm talking about) analyzing strings and functions in IOS. In his proof of concept he located the code doing the password check and adds a trampoline to his backdoor code (by saving paramaters, glueing the two codes together, doing the "new" password check and returning properly to the main code path). Nice lesson on 101 hooking on IOS. The (oversimplified) modus operandi is pretty straight forward: take an image, decompress it, have his tool locate the function and later patch it, add his code by overwriting large strings, (re)compress the image and (re)calculate/fix the checksums. Pretty neat. The fact that he doesn't do basic binary patching makes the approach portable and not architecture, version or feature set specific. This image then needs to be uploaded to the router and the device need to be reloaded. This backdoor is persistent (vs the old backdoor trick using the TCL shell [4] which wasn't - or if you want to turn it into a non-volatile one it was easy to detect as in clear text in the startup/running configuration). An alternative approach is to use gdb on the router (and combine it with a TCL script to make it easier) and patch on the fly. This is non-persistent, but some people don't wan't to leave traces as large as an IOS image behind :) Or another alternative approach: network boot the router via TFTP. At the end of the day this is nothing new from a rootkit technology point of view, but it's in the IOS/router world. He deserves credit to actually have researched this in deep and managed to make it work (it's much more difficult to achieve this on a mostly undocumented and large binary than on common OSes). Respect. What's the best way to actually test this when you don't have the HW you ask ? Dynamips [9] is the answer. As long as the rootkit isn't too advanced and e.g. also hooks the write/copy functions (e.g. an attacker could store the image diff on the system and play a "proper" memory dump or proper IOS back when you write core/copy to TFTP) then FX's CIR[7] is the forensics tool of choice. On platforms where the IOS image is stored on an external flash card forensics may be easier. Here's [8] a "screenshot" of CIR vs Topo. So what's the impact today ? Topo's proof of concept doesn't bypass ACLs (rACLs, VTY ACLs), AAA, etc [yet], requires enable rights, a new image and a reload (or enable only if you do gdb-on-the-fly patching). In summary it's "noisy" and unless you bought the router on an auction site and/or download IOS from "alternative" sources) you should notice (or probably deserve to get owned :) See the Cisco PSIRT response for best current practices on securing routers [10] and my old forensics presentation [3]. In the past FX [5] and Mike Lynn [6] proved that code execution is doable. This is a different approach. Can it be combined ? Probably. It is much more complex ? Yes. Is it going to be architecture specific ? Probably. Future developments ? I'm surprised people still focus on the IOS side of things and don't attack the bootrom code as it's smaller and usually never changed unless you bring in some new/unsupported hardware/features. IOS-XR is probably going to become a target too as it makes some of these things easier [11] but code signing may have to be broken/bypassed first. This has been done on other devices, so it's just one more layer to attack. An alternative rootkit ? Privilege level 16 used by the Lawful Intercept [12] feature could be abused to do some of this too. Or the other way around: use a "patched" IOS to keep an eye on Law Enforcement's operations on the router as privilege level 15 doesn't allow it and the only alternative is to sniff the traffic export. I've probably missed some stuff (and got some stuff wrong), but this summary became way too long already and it's late. Feedback welcome! [1] Dragos should post them soon here: http://www.eusecwest.com/ [2] Watch http://www.coresecurity.com/?module=ContentMod&action=news&id=papers [3] Google "IOS rootkit" used to return the presentation below as first hit "Cisco Router Forensics" - http://www.securite.org/presentations/secip/ [4] http://seclists.org/bugtraq/2007/Nov/0384.html [5] http://www.phenoelit-us.org/ultimaratio/index.html http://www.milw0rm.com/exploits/77 [6] http://cryptome.org/lynn-cisco.pdf [7] http://cir.recurity.com/ [8] http://www.securite.org/nico/XP/CIRvsTopo.jpg [9] http://www.ipflow.utc.fr/index.php/Cisco_7200_Simulator [10] http://www.cisco.com/en/US/products/products_security_response09186a0080997… [11] http://lists.darklab.org/pipermail/darklab/2005-August/000029.html [12] http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lawf_int.html Nico. -- Nicolas FISCHBACH Senior Manager - Network Engineering/Security - COLT Telecom e:(nico@securite.org) w:<http://www.securite.org/nico/>

18 40

Out of office
by ddrummond＠rnkcom.com 31 May '08

31 May '08

I will be out of the office from May 31 - June 4 attending the NANOG conference in NYC with limited access to email. For urgent issues, please contact Dwight Ernest (dwight(a)rnkcom.com)

1 0

Splitting ARIN assignment
by James Kelty 31 May '08

31 May '08

Hey all, I'm looking for an opinion from the group. I have an ARIN /21 assignment and a new requirement for a second data center. Rather than ask for another assignment, I would like to advertise one /22 from one location and the other /22 from the second location both with the same asn. My apps will work that way, so I don't have an issue internally, but I'm looking for a broader base opinion on that. Thanks a lot! -James

9 11

Need Infiniband card recommendation
by Jobe Bittman 30 May '08

30 May '08

Is anyone using Infiniband cards under linux? I'm trying to find a supported card other than the Cisco one. -- Jobe Bittman

3 3

cluepon irrweb.com
by Christian 30 May '08

30 May '08

anyone know whats going on with this - still a work in progress? plans/etc?

1 0

anyone have an AOL Email Engineer contact?
by Shepperd, Guy 30 May '08

30 May '08

Needing an AOL Email engineer to contact me. Thanks Guy Shepperd

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 30 May '08

30 May '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 31 May, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 256681 Prefixes after maximum aggregation: 127966 Deaggregation factor: 2.01 Unique aggregates announced to Internet: 125823 Total ASes present in the Internet Routing Table: 28326 Prefixes per ASN: 9.06 Origin-only ASes present in the Internet Routing Table: 24711 Origin ASes announcing only one prefix: 11900 Transit ASes present in the Internet Routing Table: 3615 Transit-only ASes present in the Internet Routing Table: 74 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 18 Max AS path prepend of ASN (43380) 13 Prefixes from unregistered ASNs in the Routing Table: 626 Unregistered ASNs in the Routing Table: 236 Number of 32-bit ASNs allocated by the RIRs: 49 Prefixes from 32-bit ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 782 Number of addresses announced to Internet: 1874228320 Equivalent to 111 /8s, 182 /16s and 116 /24s Percentage of available address space announced: 50.6 Percentage of allocated address space announced: 61.4 Percentage of available address space allocated: 82.3 Percentage of address space in use by end-sites: 72.0 Total number of prefixes smaller than registry allocations: 123722 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 58811 Total APNIC prefixes after maximum aggregation: 22049 APNIC Deaggregation factor: 2.67 Prefixes being announced from the APNIC address blocks: 55821 Unique aggregates announced from the APNIC address blocks: 24827 APNIC Region origin ASes present in the Internet Routing Table: 3252 APNIC Prefixes per ASN: 17.17 APNIC Region origin ASes announcing only one prefix: 854 APNIC Region transit ASes present in the Internet Routing Table: 502 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 351187872 Equivalent to 20 /8s, 238 /16s and 179 /24s Percentage of available APNIC address space announced: 74.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 117915 Total ARIN prefixes after maximum aggregation: 65206 ARIN Deaggregation factor: 1.81 Prefixes being announced from the ARIN address blocks: 87447 Unique aggregates announced from the ARIN address blocks: 34419 ARIN Region origin ASes present in the Internet Routing Table: 12183 ARIN Prefixes per ASN: 7.18 ARIN Region origin ASes announcing only one prefix: 4701 ARIN Region transit ASes present in the Internet Routing Table: 1131 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 16 Number of ARIN addresses announced to Internet: 357844480 Equivalent to 21 /8s, 84 /16s and 70 /24s Percentage of available ARIN address space announced: 73.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 55345 Total RIPE prefixes after maximum aggregation: 33873 RIPE Deaggregation factor: 1.63 Prefixes being announced from the RIPE address blocks: 50545 Unique aggregates announced from the RIPE address blocks: 33982 RIPE Region origin ASes present in the Internet Routing Table: 11397 RIPE Prefixes per ASN: 4.43 RIPE Region origin ASes announcing only one prefix: 5957 RIPE Region transit ASes present in the Internet Routing Table: 1722 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 18 Number of RIPE addresses announced to Internet: 359785600 Equivalent to 21 /8s, 113 /16s and 228 /24s Percentage of available RIPE address space announced: 82.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-48127 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 20091 Total LACNIC prefixes after maximum aggregation: 5118 LACNIC Deaggregation factor: 3.93 Prefixes being announced from the LACNIC address blocks: 18402 Unique aggregates announced from the LACNIC address blocks: 10322 LACNIC Region origin ASes present in the Internet Routing Table: 951 LACNIC Prefixes per ASN: 19.35 LACNIC Region origin ASes announcing only one prefix: 314 LACNIC Region transit ASes present in the Internet Routing Table: 157 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 15 Number of LACNIC addresses announced to Internet: 51751040 Equivalent to 3 /8s, 21 /16s and 168 /24s Percentage of available LACNIC address space announced: 51.4 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 3893 Total AfriNIC prefixes after maximum aggregation: 1197 AfriNIC Deaggregation factor: 3.25 Prefixes being announced from the AfriNIC address blocks: 4182 Unique aggregates announced from the AfriNIC address blocks: 1862 AfriNIC Region origin ASes present in the Internet Routing Table: 240 AfriNIC Prefixes per ASN: 17.43 AfriNIC Region origin ASes announcing only one prefix: 74 AfriNIC Region transit ASes present in the Internet Routing Table: 49 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 14 Number of AfriNIC addresses announced to Internet: 12279808 Equivalent to 0 /8s, 187 /16s and 96 /24s Percentage of available AfriNIC address space announced: 36.6 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1547 387 87 Videsh Sanchar Nigam Ltd. Aut 9498 1165 549 61 BHARTI BT INTERNET LTD. 9583 1101 110 410 Sify Limited 17488 1084 71 76 Hathway IP Over Cable Interne 4766 849 6006 343 Korea Telecom (KIX) 4134 825 12917 323 CHINANET-BACKBONE 23577 817 34 698 Korea Telecom (ATM-MPLS) 18101 690 150 53 Reliance Infocom Ltd Internet 9829 598 450 12 BSNL National Internet Backbo 1221 548 1919 421 Telstra Pty Ltd Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 1992 3087 178 bellsouth.net, inc. 4323 1462 1045 377 Time Warner Telecom 2386 1438 659 873 AT&T Data Communications Serv 7018 1377 5830 982 AT&T WorldNet Services 11492 1223 148 12 Cable One 7011 1076 298 603 Citizens Utilities 18566 1044 296 10 Covad Communications 1785 1022 510 105 AppliedTheory Corporation 6197 1006 597 507 BellSouth Network Solutions, 174 973 6837 806 Cogent Communications Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 409 1772 368 TDC Tele Danmark 8452 347 188 7 TEDATA 3301 339 1460 307 TeliaNet Sweden 3320 317 7044 266 Deutsche Telekom AG 8866 298 77 21 Bulgarian Telecommunication C 5462 291 666 26 Telewest Broadband 3215 285 2718 94 France Telecom Transpac 8551 283 269 38 Bezeq International 680 274 2047 264 DFN-IP service G-WiN 9155 267 46 11 QualityNet AS number Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1233 2464 227 UniNet S.A. de C.V. 11830 603 299 9 Instituto Costarricense de El 22047 565 270 14 VTR PUNTO NET S.A. 7303 464 228 69 Telecom Argentina Stet-France 16814 426 27 10 NSS, S.A. 6471 414 85 46 ENTEL CHILE S.A. 11172 411 118 69 Servicios Alestra S.A de C.V 10620 392 100 63 TVCABLE BOGOTA 14117 375 23 9 Telefonica del Sur S.A. 20299 338 23 89 NEWCOM AMERICAS Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 472 61 28 LINKdotNET AS number 3741 288 853 223 The Internet Solution 20858 224 34 3 EgyNet 2018 189 173 83 Tertiary Education Network 5713 168 575 102 Telkom SA Ltd 6713 145 136 12 Itissalat Al-MAGHRIB 33783 134 10 12 EEPAD TISP TELECOM & INTERNET 5536 121 8 16 Internet Egypt Network 29571 100 13 8 Ci Telecom Autonomous system 33776 100 6 3 Starcomms Nigeria Limited Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 1992 3087 178 bellsouth.net, inc. 4755 1547 387 87 Videsh Sanchar Nigam Ltd. Aut 4323 1462 1045 377 Time Warner Telecom 2386 1438 659 873 AT&T Data Communications Serv 7018 1377 5830 982 AT&T WorldNet Services 8151 1233 2464 227 UniNet S.A. de C.V. 11492 1223 148 12 Cable One 9498 1165 549 61 BHARTI BT INTERNET LTD. 9583 1101 110 410 Sify Limited 17488 1084 71 76 Hathway IP Over Cable Interne Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1547 1460 Videsh Sanchar Nigam Ltd. Aut 11492 1223 1211 Cable One 9498 1165 1104 BHARTI BT INTERNET LTD. 4323 1462 1085 Time Warner Telecom 18566 1044 1034 Covad Communications 17488 1084 1008 Hathway IP Over Cable Interne 8151 1233 1006 UniNet S.A. de C.V. 1785 1022 917 AppliedTheory Corporation 22773 945 883 Cox Communications, Inc. 6478 948 797 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 701 UUNET Technologies, 22492 UNALLOCATED 12.2.46.0/24 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.20.55.0/24 6517 Yipes Communications 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.31.25.0/24 6517 Yipes Communications 27220 UNALLOCATED 12.35.204.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.51.159.0/24 7843 Adelphia Corp. 24.54.224.0/19 20001 HoldCo LLC - Road Runner 24.75.160.0/19 7843 Adelphia Corp. 24.75.192.0/18 7843 Adelphia Corp. 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 63.140.213.0/24 22555 Universal Talkware Corporatio Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:9 /10:16 /11:42 /12:142 /13:280 /14:513 /15:1019 /16:9933 /17:4373 /18:7283 /19:15509 /20:17927 /21:17339 /22:21799 /23:22883 /24:135257 /25:800 /26:948 /27:490 /28:81 /29:9 /30:1 /31:0 /32:9 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 1227 1992 bellsouth.net, inc. 11492 1205 1223 Cable One 2386 1136 1438 AT&T Data Communications Serv 18566 1025 1044 Covad Communications 7011 964 1076 Citizens Utilities 9583 955 1101 Sify Limited 6478 947 948 AT&T Worldnet Services 4755 936 1547 Videsh Sanchar Nigam Ltd. Aut 17488 897 1084 Hathway IP Over Cable Interne 9498 848 1165 BHARTI BT INTERNET LTD. Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 8:108 12:2048 13:1 15:20 16:3 17:5 18:13 20:35 24:1079 25:1 32:61 33:3 38:431 40:93 41:640 43:1 44:2 47:12 52:3 55:3 56:3 57:23 58:514 59:456 60:443 61:988 62:1115 63:1946 64:3337 65:2430 66:3668 67:1205 68:685 69:2253 70:629 71:125 72:1764 73:5 74:980 75:217 76:322 77:664 78:617 79:170 80:905 81:859 82:593 83:391 84:573 85:1007 86:421 87:671 88:325 89:1214 90:12 91:1264 92:187 93:502 96:32 97:21 98:178 99:3 114:17 116:657 117:331 118:142 119:430 120:45 121:524 122:772 123:344 124:832 125:1142 128:325 129:202 130:131 131:403 132:66 133:9 134:177 135:33 136:220 137:91 138:151 139:69 140:484 141:99 142:399 143:308 144:358 145:51 146:357 147:153 148:504 149:184 150:130 151:196 152:172 153:135 154:10 155:273 156:174 157:271 158:167 159:222 160:257 161:115 162:233 163:186 164:526 165:448 166:315 167:322 168:610 169:131 170:429 171:29 172:10 189:174 190:2025 192:5789 193:4094 194:3210 195:2451 196:1082 198:3746 199:3257 200:5628 201:1432 202:7586 203:7856 204:3989 205:2069 206:2400 207:2760 208:3360 209:3433 210:2516 211:1023 212:1394 213:1644 214:470 215:49 216:4363 217:1188 218:347 219:412 220:1081 221:462 222:308 End of report

1 0

RE: Power/temperature monitoring
by Tony Patti 30 May '08

30 May '08

I agree with Chris -- we also have been using the ITWatchDogs products for years, and both the products and company have been wonderful to work with. Tony Patti CIO S. Walter Packaging Corp. -----Original Message----- From: Chris Boyd Sent: 5/30/2008 11:40 AM To: nanog(a)nanog.org Subject: Re: Power/temperature monitoring We've got a couple of the (beta test) mini goose climate monitors installed. Takes up less space than the big APC boxes we've been using. http://www.itwatchdogs.com/ --Chris

2 1

Re: Power/temperature monitoring
by Mike Tancsa 30 May '08

30 May '08

At 10:58 AM 5/30/2008, Frank Bulk wrote: >Required: >- temperature sensor >- 110 VAC power monitoring (on/off, not necessarily current) >- Ethernet interface (at least SNMP, Web GUI and We have been using "Uptime Devices". Our units have room for 3 sensors (we have 2 temp and one for humidity). Web, SNMP, ethernet, external AC power blob. Its a fairly small form factor and it has been reliable for us over the years. Alerts work as expected and havent had any false positives either over the years. ---Mike

6 5