March 2010 - Test - lists.nanog.org

BFD vs BGP timers
by Scott Weeks 05 Mar '10

05 Mar '10

We're having discussion of changing BGP timers rather than using BFD and I'd like to ask for your operational experiences on this. We have downstream BGP customers physically attaching to an L2/L3 switch that doesn't do BGP. So, we logical pipe them through MPLS to a router that can terminate the BGP session. The logical pipe never goes down, so the only thing that would cause the customer's session to go down in the event of a physical layer problem is the BGP timer. This is not acceptable, so I have been using BFD to time out the BGP session. However, we have limitations on the BFD pps and folks here are wanting to change the BGP timers instead. What're your experiences regarding this? scott

2 1

1G/10G options over 130 km of fiber
by Justin M. Streiner 05 Mar '10

05 Mar '10

A dark fiber path was recently ordered to a remote location on our network, and to my surprise, the engineering report on the path is coming back at around 130 km, which is substantially longer than I expected the span to be. While I am researching gear that will drive a signal this far without a mid-span regen, I'm also inquiring with the carrier to see if there is any way to shorten the span, but I also have to be prepared for the chance that a shorter span is not possible. I've seen some pieces from MRV and Transition that might be up to the job, though most of the options I've seen are rated to 120 km, tops. That said, I'd be interested in hearing about what people who are driving similar spans. I don't think I'm going to have the budget to go out and buy Ciena/Infinera/Cisco ONS kit just for this, since I don't have any at the present time. The link is still being built, so I haven't gotten an engineering report yet. My gut tells me that the 2-point loss on the span at 1550nm will be somewhere around 30-35 dB. jms

6 5

FreeAxez raised flooring?
by Jason Gurtz 05 Mar '10

05 Mar '10

A consultant has recommended FreeAxez for the raised floor in a new data center. I checked it out and have concerns since it says it does NOT create a plenum and cannot be used as an air handling space; it's a low-profile flooring system. How would cooling be done in this scenario? Open air (with intake/exhaust mixing) seems like a step backwards in terms of efficiency. Descriptions of any operation experience with this product will be gratefully accepted. ~JasonG

9 12

Weekly Routing Table Report
by Routing Analysis Role Account 05 Mar '10

05 Mar '10

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 06 Mar, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 313470 Prefixes after maximum aggregation: 144980 Deaggregation factor: 2.16 Unique aggregates announced to Internet: 152997 Total ASes present in the Internet Routing Table: 33474 Prefixes per ASN: 9.36 Origin-only ASes present in the Internet Routing Table: 29055 Origin ASes announcing only one prefix: 14167 Transit ASes present in the Internet Routing Table: 4419 Transit-only ASes present in the Internet Routing Table: 103 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 22 Max AS path prepend of ASN (32374) 19 Prefixes from unregistered ASNs in the Routing Table: 909 Unregistered ASNs in the Routing Table: 144 Number of 32-bit ASNs allocated by the RIRs: 455 Prefixes from 32-bit ASNs in the Routing Table: 452 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 216 Number of addresses announced to Internet: 2195830208 Equivalent to 130 /8s, 225 /16s and 181 /24s Percentage of available address space announced: 59.2 Percentage of allocated address space announced: 65.8 Percentage of available address space allocated: 90.0 Percentage of address space in use by end-sites: 81.5 Total number of prefixes smaller than registry allocations: 150774 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 75227 Total APNIC prefixes after maximum aggregation: 26054 APNIC Deaggregation factor: 2.89 Prefixes being announced from the APNIC address blocks: 71896 Unique aggregates announced from the APNIC address blocks: 31752 APNIC Region origin ASes present in the Internet Routing Table: 3979 APNIC Prefixes per ASN: 18.07 APNIC Region origin ASes announcing only one prefix: 1086 APNIC Region transit ASes present in the Internet Routing Table: 622 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 498721568 Equivalent to 29 /8s, 185 /16s and 227 /24s Percentage of available APNIC address space announced: 78.2 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 27/8, 43/8, 58/8, 59/8, 60/8, 61/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 130980 Total ARIN prefixes after maximum aggregation: 68073 ARIN Deaggregation factor: 1.92 Prefixes being announced from the ARIN address blocks: 104722 Unique aggregates announced from the ARIN address blocks: 39847 ARIN Region origin ASes present in the Internet Routing Table: 13541 ARIN Prefixes per ASN: 7.73 ARIN Region origin ASes announcing only one prefix: 5233 ARIN Region transit ASes present in the Internet Routing Table: 1339 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 740075552 Equivalent to 44 /8s, 28 /16s and 168 /24s Percentage of available ARIN address space announced: 63.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 72277 Total RIPE prefixes after maximum aggregation: 42038 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 65114 Unique aggregates announced from the RIPE address blocks: 42977 RIPE Region origin ASes present in the Internet Routing Table: 14179 RIPE Prefixes per ASN: 4.59 RIPE Region origin ASes announcing only one prefix: 7343 RIPE Region transit ASes present in the Internet Routing Table: 2129 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 21 Number of RIPE addresses announced to Internet: 416772736 Equivalent to 24 /8s, 215 /16s and 114 /24s Percentage of available RIPE address space announced: 77.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 27616 Total LACNIC prefixes after maximum aggregation: 6640 LACNIC Deaggregation factor: 4.16 Prefixes being announced from the LACNIC address blocks: 25976 Unique aggregates announced from the LACNIC address blocks: 13520 LACNIC Region origin ASes present in the Internet Routing Table: 1247 LACNIC Prefixes per ASN: 20.83 LACNIC Region origin ASes announcing only one prefix: 406 LACNIC Region transit ASes present in the Internet Routing Table: 211 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 17 Number of LACNIC addresses announced to Internet: 71116288 Equivalent to 4 /8s, 61 /16s and 38 /24s Percentage of available LACNIC address space announced: 70.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 6696 Total AfriNIC prefixes after maximum aggregation: 1770 AfriNIC Deaggregation factor: 3.78 Prefixes being announced from the AfriNIC address blocks: 5037 Unique aggregates announced from the AfriNIC address blocks: 1453 AfriNIC Region origin ASes present in the Internet Routing Table: 347 AfriNIC Prefixes per ASN: 14.52 AfriNIC Region origin ASes announcing only one prefix: 99 AfriNIC Region transit ASes present in the Internet Routing Table: 76 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 18 Number of AfriNIC addresses announced to Internet: 14840832 Equivalent to 0 /8s, 226 /16s and 116 /24s Percentage of available AfriNIC address space announced: 44.2 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1853 8533 472 Korea Telecom (KIX) 17488 1293 132 137 Hathway IP Over Cable Interne 4755 1284 287 136 TATA Communications formerly 18101 1075 221 39 Reliance Infocom Ltd Internet 4134 1018 19605 397 CHINANET-BACKBONE 9583 997 75 498 Sify Limited 7545 952 199 99 TPG Internet Pty Ltd 17974 928 282 18 PT TELEKOMUNIKASI INDONESIA 9829 841 684 22 BSNL National Internet Backbo 4808 837 1582 212 CNCGROUP IP network: China169 Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4059 3842 314 bellsouth.net, inc. 4323 3791 1084 395 Time Warner Telecom 1785 1796 698 129 PaeTec Communications, Inc. 7018 1558 5757 1003 AT&T WorldNet Services 20115 1554 1493 663 Charter Communications 2386 1318 602 936 AT&T Data Communications Serv 3356 1209 10944 419 Level 3 Communications, LLC 11492 1146 222 14 Cable One 6478 1129 242 205 AT&T Worldnet Services 22773 1128 2602 69 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 35805 585 40 5 United Telecom of Georgia 3292 452 1900 393 TDC Tele Danmark 30890 450 101 205 Evolva Telecom 702 424 1870 336 UUNET - Commercial IP service 8551 396 353 37 Bezeq International 8866 386 112 21 Bulgarian Telecommunication C 3320 363 7072 317 Deutsche Telekom AG 3301 354 1413 315 TeliaNet Sweden 3215 347 3206 103 France Telecom Transpac 12479 332 576 5 Uni2 Autonomous System Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1577 2893 236 UniNet S.A. de C.V. 10620 1010 227 156 TVCABLE BOGOTA 28573 901 698 85 NET Servicos de Comunicao S.A 7303 679 359 98 Telecom Argentina Stet-France 22047 529 310 15 VTR PUNTO NET S.A. 6503 499 167 193 AVANTEL, S.A. 7738 477 922 30 Telecomunicacoes da Bahia S.A 11830 474 308 56 Instituto Costarricense de El 3816 446 194 69 Empresa Nacional de Telecomun 11172 446 99 70 Servicios Alestra S.A de C.V Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 993 445 10 TEDATA 24863 715 144 41 LINKdotNET AS number 36992 581 131 169 Etisalat MISR 3741 275 855 234 The Internet Solution 33776 251 14 11 Starcomms Nigeria Limited 2018 210 215 121 Tertiary Education Network 6713 177 167 12 Itissalat Al-MAGHRIB 29571 171 19 9 Ci Telecom Autonomous system 24835 133 78 11 RAYA Telecom - Egypt 29975 133 506 14 Vodacom Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4059 3842 314 bellsouth.net, inc. 4323 3791 1084 395 Time Warner Telecom 4766 1853 8533 472 Korea Telecom (KIX) 1785 1796 698 129 PaeTec Communications, Inc. 8151 1577 2893 236 UniNet S.A. de C.V. 7018 1558 5757 1003 AT&T WorldNet Services 20115 1554 1493 663 Charter Communications 2386 1318 602 936 AT&T Data Communications Serv 17488 1293 132 137 Hathway IP Over Cable Interne 4755 1284 287 136 TATA Communications formerly Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 3791 3396 Time Warner Telecom 1785 1796 1667 PaeTec Communications, Inc. 4766 1853 1381 Korea Telecom (KIX) 8151 1577 1341 UniNet S.A. de C.V. 17488 1293 1156 Hathway IP Over Cable Interne 4755 1284 1148 TATA Communications formerly 11492 1146 1132 Cable One 22773 1128 1059 Cox Communications, Inc. 18566 1059 1049 Covad Communications 18101 1075 1036 Reliance Infocom Ltd Internet Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 2.0.0.0/16 12654 RIPE NCC RIS Project 2.1.0.0/21 12654 RIPE NCC RIS Project 2.1.24.0/24 12654 RIPE NCC RIS Project 41.77.236.0/22 23456 32-bit ASN transition 41.190.64.0/22 28683 Office des Postes et telecomm 41.202.96.0/19 29571 Ci Telecom Autonomous system 41.216.32.0/19 28683 Office des Postes et telecomm 41.220.144.0/20 36918 ORASCOM TELECOM ALGERIE VSAT 41.220.159.0/24 36918 ORASCOM TELECOM ALGERIE VSAT 41.222.79.0/24 36938 Amsco Telecommunications Nige Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:10 /10:25 /11:66 /12:188 /13:388 /14:661 /15:1234 /16:10950 /17:5156 /18:8716 /19:18094 /20:21993 /21:22160 /22:28483 /23:28273 /24:164098 /25:942 /26:1176 /27:584 /28:224 /29:14 /30:7 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2627 4059 bellsouth.net, inc. 4323 2351 3791 Time Warner Telecom 4766 1466 1853 Korea Telecom (KIX) 1785 1258 1796 PaeTec Communications, Inc. 11492 1058 1146 Cable One 17488 1054 1293 Hathway IP Over Cable Interne 18566 1040 1059 Covad Communications 18101 947 1075 Reliance Infocom Ltd Internet 7018 938 1558 AT&T WorldNet Services 10620 916 1010 TVCABLE BOGOTA Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2 2:1 4:12 8:240 12:1981 13:10 15:22 16:3 17:8 20:39 24:1355 27:1 32:48 38:644 40:99 41:2059 44:3 46:1 47:26 52:6 55:2 56:2 57:23 58:640 59:632 60:400 61:1098 62:1053 63:1999 64:3818 65:2360 66:4150 67:1797 68:1042 69:2846 70:694 71:237 72:1880 73:2 74:2137 75:242 76:334 77:827 78:590 79:399 80:990 81:778 82:450 83:449 84:655 85:1023 86:385 87:683 88:425 89:1529 90:77 91:2700 92:435 93:1143 94:1397 95:528 96:234 97:302 98:503 99:26 100:1 109:389 110:296 111:449 112:239 113:241 114:373 115:574 116:1022 117:630 118:390 119:940 120:148 121:842 122:1380 123:865 124:1068 125:1285 128:208 129:205 130:141 131:486 132:204 133:17 134:195 135:43 136:226 137:171 138:240 139:92 140:474 141:135 142:379 143:347 144:413 145:51 146:407 147:168 148:573 149:209 150:151 151:168 152:257 153:167 154:2 155:278 156:178 157:327 158:99 159:358 160:305 161:177 162:270 163:166 164:311 165:495 166:506 167:390 168:783 169:161 170:710 171:46 172:2 173:529 174:542 175:60 178:3 180:351 182:24 183:228 184:13 186:306 187:223 188:1415 189:702 190:3526 192:5718 193:4527 194:3358 195:2803 196:1177 198:3553 199:3380 200:5259 201:1477 202:8042 203:8296 204:4074 205:2175 206:2507 207:3074 208:3913 209:3459 210:2544 211:1198 212:1703 213:1660 214:262 215:61 216:4472 217:1513 218:488 219:426 220:1074 221:380 222:304 End of report

1 0

Redundant BGP for lower cost
by Alex Thurlow 05 Mar '10

05 Mar '10

Let me preface this by saying that I'm not a full time network admin, but we're a small company and I'm the only one handling this. Our budget is also not huge, but we're at the point where extended downtime would cost us enough money that we can spend some money to fix the problem. Here's my situation: I have two providers, each handing me gigabit ethernet. I'm getting full BGP feeds and handling them with a Linux/Quagga router. We max out at about 100kpps, as we're mostly pushing video which gives us a large packet size. It works fine, and I've been happy with it so far. But, we've gotten to the point where I want a backup router of some sort in case something happens to that one, what with the fans and disks that could fail. I see a few options. 1. Just set up another Quagga box and use keepalived or some other HA solution. 2. Buy a Cisco/Juniper/whatever and then have the Quagga box as backup. 3. I have a 6500 behind the router that's just doing switching. Could I have something switch that to static route all traffic to one of my providers if something happened to the router? The 6500 has Sup1A with MSFC2 running IOS native. On the Cisco side, I see that we could probably run a 7200VXR with NPE-G1 (about $6000 on ebay). Moving to the Sup720, even used is probably out of our price range. What do you guys think I should use here? Thanks, Alex

5 5

Re: Spamcop Blocks Facebook?
by Shon Elliott 05 Mar '10

05 Mar '10

Dean, I started the thread with the original question, and after not hearing a suitable response from either Spamcop or someone from the networking side of Facebook, I gave up on this thread when people like Michelle started chiming in their opinion. This thread wasn't meant to be an opinion-fest, but a technical issue that definitely hampers my customers, which apparently, everyone completely lost sight of. So really, my customers, and myself are victims of Spamcop's blocking of Facebook. -S Dean Anderson wrote: > What a load of BS from the "scammer/counterfeit-antispammer" crowd, > otherwise described as con-artists and frauds. > > "You're not authorized to solicit bulk email on behalf of third > parties: only they are" > > Huh? In this case, the third party (the user) authorized sending the > mail on //their// behalf to //their// contacts. This email doesn't go > out except by action of the user. The *recipients* of the email have > indeed solicited email from the user; they are the contacts of the user. > > Basically, what the (well-known) con-artists are trying to say is that > Facebook can't be authorized by its own user to send email from the user > to the contacts of that user. Finally, Linkedin, plaxo and other social > networking sites do the same thing. ISPs also send email on behalf of > their users, and have done so for many years. > > Last, just imagine if each of your contacts had to authorize which ISP > you could use to send them email. Facebook is just an ISP in the email > transaction, offering a service to the user; so that the user can send > email to their contacts. Obviously both the user and Facebook benefit, > but there is nothing wrong with that. Its not spam because its sent at > the request of the user to people the user is already in contact with. > > Blocking facebook is a scam; an effort to shakedown Facebook for > money/services/etc. > > Jim: Are you starting to see a pattern, yet? There is no point in > arguing with con-artists. > > --Dean > > On Thu, 4 Mar 2010, Rich Kulawiec wrote: > >> On Thu, Mar 04, 2010 at 03:16:25PM -0400, jim deleskie wrote: >>> If I leave all boxes checked to send mail/notices/app requests to >>> everyone in my list, or if I give FB my gmail password to pull all my >>> contacts and send them an invite, its pure @ my request, sure FB is >>> happy I do it, but it is no way spam. >> This is dead wrong. You're not authorized to solicit bulk email on behalf >> of third parties: only they are. In the absence of solicitation from >> the *recipients*, bulk email is spam -- by definition. >> >> ---Rsk >> >> >> >> >

6 6

Cisco hardware question
by Kaveh . 05 Mar '10

05 Mar '10

Hello, I apologize if this is an unusual topic but I would like to know what this expert community thinks about this issue: We have noticed that a number of Cisco appliances we have recently purchased and paid (AS NEW), are being shipped as if they have been already used/refurbished. In other words, several times we have seen brand new Cisco hardware, out of the box, that has pre-existing configuration (Interfaces with Private IP addresses, static routes, etc …) and in some cases even non-system files, like ‘crashdump.txt’ or additional IOS images. Most importantly our latest purchase; 2 'new' ASAs, contain a series of files named: FSCK0000.REC, FSCK0001.REC, FSCK0002.REC, etc ... . Based on some research it seems like that these files are 'recovery files' signaling bad/failing hard disks in these appliances. Anyone on thhis group has seen this before and if yes, are we supposed to blindly trust the vendor saying the hardware is new, safe and secure? The only way I can explain this is that the hardware has been refurbished or previously configured for reasons unknown to me. I think if customers pays for new hardware, they should get new hardware, even if refurbished hardware may be covered by Smartnet. Any thoughts or recommendations anyone? The last thing we want to do is to deploy faulty (or non secure) security appliances in production. :) Thank you Best regards _________________________________________________________________ Hotmail: Free, trusted and rich email service. http://clk.atdmt.com/GBL/go/201469228/direct/01/

14 21

Desperately Seeking APNIC
by Matthew Petach 05 Mar '10

05 Mar '10

Would anyone here know of any 24x7 contact at APNIC? The TXT records indicate they just signed the reverse zone for 203.in-addr.arpa today, and the delegations for our IP blocks disappeared when they did; and the helpdesk is currently not answering the phones: http://www.apnic.net/services/services-apnic-provides/helpdesk Trying to find someone there who can fix the delegations within the 84.203.in-addr.arpa. zone for 222 and 223 for us, and am running into dead ends. :/ Any pointers would be appreciated. Thanks! Matt

5 4

Re: Spamcop Blocks Facebook?
by Michael Holstein 04 Mar '10

04 Mar '10

> The evesdroppring reported below on csuohio.edu end-users Email is a > prima facie violation of the Electronic Communications Privacy Act. > I'm not sure why this got under your skin so badly, but aggregate statistics != eavesdropping. The SPAM appliance vendor software gathers these statistics, and actually includes the "good/bad" percentage on every junk summary that goes to the end users. Oh .. and what's up with this ? : http://www.av8.com/unauthtemplate Cheers, Michael Holstein Cleveland State University PS: I *am* abuse@.

2 1

RE: Cisco hardware question
by Scott Weeks 04 Mar '10

04 Mar '10

--- afx66(a)hotmail.com wrote: B) What Cisco reps could NOT explain was the existence of a number of FSCK000#.REC files on these appliances. To be more specific each of ASAs in question contains 4 extra files: FSCK0000.REC, FSCK0001.REC, FSCK0002.REC, FSCK0003.REC). I said 'extra' because I asked the Cisco reps on phone to provide me a complete list of files that should exist on a brand new ASA, and the 4 files above were not part of the list and I think even they got confused when I mentioned the existence of these files. I could not find much info on these files, but a simple Google search indicates that these files may be 'recovery files' of Disks operating under Unix/Linux/BSD/etc /... kernel, indicating a dying hard drive. That would be enough to freak me out! Anyone can confirm this? [...] I would greatly appreciate any input, especially on B) --------------------------------------------------------- Send the files to a *nix box and run it through "strings". scott

1 0