September 2010 - Test - lists.nanog.org

Re: facebook outrage
by Rudolph Daniel 23 Sep '10

23 Sep '10

Facebook from the Caribbean Service Unavailable - DNS failureThe server is temporarily unable to service your request. Please try again later. Reference #11.1d9c1160.1285272538.81cae85 RD On Thu, Sep 23, 2010 at 3:46 PM, <nanog-request(a)nanog.org> wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.nanog.org/mailman/listinfo/nanog > or, via email, send a message with subject or body 'help' to > nanog-request(a)nanog.org > > You can reach the person managing the list at > nanog-owner(a)nanog.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NANOG digest..." > > > Today's Topics: > > 1. RE: IDS IPS (Ryan Bradley) > 2. Re: Odd BGP AS Path (Warren Kumari) > 3. Re: Odd BGP AS Path (Randy Bush) > 4. CFP: COMSNETS 2011 (Deadline in 4 days: Sept 27, 11:59pm PDT) > (Ramana Kompella) > 5. Facebook Issues/Outage in Southeast? (Ernie Rubi) > 6. RE: Facebook Issues/Outage in Southeast? (Paul Stewart) > 7. Re: Facebook Issues/Outage in Southeast? (chaim rieger) > 8. Re: Facebook Issues/Outage in Southeast? (andrew.wallace) > 9. Facebook Issues/Outage in Southeast? (Ernie Rubi) > 10. RE: Facebook Issues/Outage in Southeast? (Justin Horstman) > 11. Re: Facebook Issues/Outage in Southeast? (Steven Bellovin) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 23 Sep 2010 09:58:40 -0400 > From: "Ryan Bradley" <rbradley(a)a1fcu.org> > Subject: RE: IDS IPS > To: "Joshua William Klubi" <joshua.klubi(a)gmail.com>, "North American > Network Operators Group" <nanog(a)nanog.org> > Message-ID: > <661FEAF65459994780CE520E3F212EE4DF51D7(a)a1server4.a1fcu.org> > Content-Type: text/plain; charset="us-ascii" > > Joshua, > > We use the Juniper 2xx series IDP; highly recommended. We are a small > financial intuition with about 200 employees and 13 branch locations. > > I'd stay far away from SecureWorks if you're looking to manage the > device yourself; if you're looking for an overpriced managed solution > then they'd be okay. > > Ryan > > -----Original Message----- > From: Joshua William Klubi [mailto:joshua.klubi@gmail.com] > Sent: Wednesday, September 22, 2010 12:12 PM > To: North American Network Operators Group > Subject: IDS IPS > > Hi, > > I have been tasked to get the best IDS and IPS for our internal LAN and > WAN > in a Banking infrastructure. > I would like ask if any one has deployed in any network with such > technology, and also if any one can recommend > a very good IDS and IPS for me to recommend to management > > Thank you. > > Joshua > > > > ------------------------------ > > Message: 2 > Date: Thu, 23 Sep 2010 10:48:43 -0400 > From: Warren Kumari <warren(a)kumari.net> > Subject: Re: Odd BGP AS Path > To: Florian Weimer <fw(a)deneb.enyo.de> > Cc: nanog(a)nanog.org > Message-ID: <303A7C18-0831-4A8E-85BA-3600F87D067D(a)kumari.net> > Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes > > > On Sep 22, 2010, at 4:15 PM, Florian Weimer wrote: > > > * Randy Bush: > > > >>> Probably a silly question, but can anyone explain to me this: > >>> 3561 3356 9031 {35821,35821,35821,35821} i > >> > >> please support draft-wkumari-deprecate-as-sets-00.txt > > > > Mere deprecation does not stop propagation of such paths. > > That's very true, but it *does* move us in the right direction -- > saying "Aggregation that results in AS_SETs is prohibited, off with > your head" isn't going to fly in the IDR WG when there are routes > that use them... > > Suggesting the people do not perform aggregation that results in the > creation of AS_SETs (and AS_CONFED_SETs), and that operators filter > such announcements will lead to a time where they just don't exist any > more [0] (and then can be removed from the protocol). > > We are also specifying that new BGP work does not need to support > AS_.*SET ;-) > > W > > -- > "Being the Fun-Police in the global Internet is a thankless - and > probably futile - task." > -- R. Whittle ("draft-whittle-sram-ip-forwarding-01.txt") > > > > > > > > > ------------------------------ > > Message: 3 > Date: Thu, 23 Sep 2010 10:59:07 -0400 > From: Randy Bush <randy(a)psg.com> > Subject: Re: Odd BGP AS Path > To: Warren Kumari <warren(a)kumari.net> > Cc: nanog(a)nanog.org > Message-ID: <m2zkv8h5fo.wl%randy(a)psg.com <m2zkv8h5fo.wl%25randy(a)psg.com>> > Content-Type: text/plain; charset=US-ASCII > > just to uncloak a bit. when we first decided to look at deprecating > as-sets et alia, we begged olaf maennel to analyse the use thereof. the > following is edited from internal email from early august. we then > begged one of our number, warren, to do the dirty, and he was kind > enough to do so. we owe him. > > --- > > using data from ripe r00 > > years total real > stable as-sets as-sets > 7 4 2 > 6 6 2 > 5 20 3 > 4 22 5 > 3 64 16 > 2 214 87 > 1 875 289 > > years stable is how many years that as-set was announced for that > prefix. > > total as-sets is the number of prefixes that had any as-set. > > real as-sets is the number of prefixes with as-sets which were not > singleton asns and were not private asns. > > olaf scanned for ten years but none were stable for more than seven. > > in ten years, 1205 different prefixes with as-sets were seen. removing > private asns and removing singletons left only 404 prefixes over the ten > years. > > he did not check for covering prefixes, i.e. two prefixes with the same > as-set where one was a sub-prefix of the other, longer, one. > > and i suspect the data are somewhat self-similar. i.e. the 289 that > were stable for the last year may have shorter term components which > were much higher. i.e. looking at data for a week or a day may give > higher values. > > a graph which should be pretty self-explanitory may be found at > > > http://archive.psg.com/fraction-and-absolute-number-of-ASsets-in-table-over… > > it is interesting that, at no time, i.e. in no single rib dump, were > there more than 23 prefixes with as-sets. while this is suspicious, it > seems to be true. > > randy > > > > ------------------------------ > > Message: 4 > Date: Thu, 23 Sep 2010 12:10:57 -0400 > From: Ramana Kompella <kompella(a)cs.purdue.edu> > Subject: CFP: COMSNETS 2011 (Deadline in 4 days: Sept 27, 11:59pm PDT) > > To: nanog(a)nanog.org > Message-ID: <20100923161057.GA7221@tirupati> > Content-Type: text/plain; charset=utf-8 > > *** APOLOGIES IF YOUR RECEIVED MULTIPLE COPIES OF THE CFP *** > > *** EXTENDED FIRM DEADLINE in exactly 4 days: Sept 27, 11:59pm PDT *** > > > COMSNETS 2011 > The THIRD International Conference on COMunication Systems and NETworks > January 4-8, 2011, Bangalore, India > http://www.comsnets.org > (In Co-operation with ACM SIGMOBILE) > (Technically Co-Sponsored by IEEE COMSOC) > > The Third International Conference on COMmunication Systems and > NETworkS (COMSNETS) will be held in Bangalore, India, from 4 January > 2011 to 8 January 2011. COMSNETS is a premier international conference > dedicated to addressing advances in Networking and Communications > Systems, and Telecommunications services. The goal of the conference > is to create a world-class gathering of researchers from academia and > industry, practitioners, business leaders, intellectual property > experts, and venture capitalists, providing a forum for discussing > cutting edge research, and directions for new innovative business and > technology. > > The conference will include a highly selective technical program > consisting of parallel tracks of submitted papers, a small set of > invited papers on important and timely topics from well-known leaders > in the field, and poster sessions of work in progress. Focused > workshops and panel discussions will be held on emerging topics to > allow for a lively exchange of ideas. International business and > government leaders will be invited to share their perspectives, thus > complementing the technical program. > > Papers describing original research work and practical > experiences/experimental results are solicited on topics including, > but not limited to: > > > > Topics of Interest > ------------------ > Internet Architecture and Protocols > Network-based Applications > Video Distribution (IPTV, Mobile Video, Video on Demand) > Network Operations and Management > Broadband and Cellular Networks (3G/4G, WiMAX/LTE) > Mesh, Sensor and PAN Networks > Communication Software (Cognitive Radios, DSA, SDR) > Wireless Operating Systems and Mobile Platforms > Peer-to-peer Networking > Cognitive Radio and White Space Networking > Optical Networks > Network Security & Cyber Security Technologies > Cloud and Utility computing > Storage Area Networks > Next Generation Web Architectures > Vehicular Networking > Energy-Efficient Networking > Network Science and Emergent Behavior in Socio-Technical Networks > Social Networking Analysis, Middleware and Applications > Networking Technologies for Smart Energy Grids > Disruption/Delay Tolerant Networking > > Conference Highlights > --------------------- > Banquet speaker: > Dr. Rajeev Rastogi, Yahoo Research, India > Keynote Speakers: > ? Prof. Don Towsley, U. Mass Amherst, USA > ? Dr. Pravin Bhagwat, AirTight Networks, India > ? Dr. Jean Bolot, Sprint, USA > Workshops > ? WISARD (4, 5 Jan) > ? NetHealth (4 Jan) > ? IAMCOM (5 Jan) > ? Mobile India 2011 (7 Jan) > Technical Paper and Poster Sessions > Ph.D Forum > Panel Discussions > Demos & Exhibits > > Important Deadlines > ------------------- > Paper submission (FIRM, ABSOLUTELY NO EXTENSIONS): September 27, 2010 at > 11:59 pm EDT (Sept 28, 9:29 am IST) > Notification of Acceptance: November 8, 2010 > Camera-Ready Submission: December 8, 2010 > > Detailed conference information and paper submission guidelines is > available on the conference web site. Please see > http://www.comsnets.org for detailed information from time to > time. The conference email address is: comsnets2011(a)gmail.com > > General Co-Chairs > ----------------- > David B. Johnson, Rice University, USA > Anurag Kumar, IISc Bangalore, India > > Technical Program Co-Chairs > --------------------------- > Jon Crowcroft, U. of Cambridge, UK > D. Manjunath, IIT Bombay, India > Archan Misra, Telcordia Tech., USA > > Steering Committee Co-Chairs > ---------------------------- > Uday Desai, IIT Hyderabad, India > Giridhar Mandyam, Qualcomm, USA > Sanjoy Paul, Infosys, India > Rajeev Shorey, NIIT University, India > G. Venkatesh, SASKEN, India > > Panel Co-Chairs > --------------- > Aditya Akella, U. of Wisconsin, USA > Venkat Padmanabhan, MSR, India > > Ph.D Forum Chair > ---------------- > Bhaskaran Raman, IIT Bombay, India > > Publications Chair > ------------------ > Varsha Apte, IIT Bombay, India > > Demos and Exhibits Co-Chairs > ---------------------------- > Aaditeshwar Seth, IIT Delhi, India > Ajay Bakre, Netapps, India > > Sponsorship Chair > ----------------- > Sudipta Maitra, Delhi, india > > Workshop Chairs > --------------- > Sharad Jaiswal, Alcatel-Lucent, India > Ravindran Kaliappa, CUNY, USA > Neelesh Mehta, IISc Bangalore, India > > Mobile India 2011 Co-Chairs > --------------------------- > Gulzar Azad, Google, India > Gene Landy, Ruperto-Israel & Weiner, USA > Rajaraghavan Setlur, SASKEN, India > Sridhar Varadharajan, SASKEN, India > > Publicity Co-Chair > ------------------ > Augustin Chaintreau, TTL, France > Kameswari Chebrolu, IIT Bombay, India > Song Chong, KAIST, Korea > Ramana Kompella, Purdue Univ, USA > Nishanth Sastry, U. of Cambridge, UK > > Web Co-Chairs > ------------- > Santhana Krishnan, IIT Bombay, India > Vinay Veerappa, SASKEN, India > > International Advisory Committee > -------------------------------- > K. K. Ramakrishnan, AT&T, USA > Victor Bahl, Microsoft Research, USA > Sunghyun Choi, Seoul National U., Korea > Sajal Das, U. Texas at Arlington, USA > B. N. Jain, IIT Delhi, India > Anurag Kumar, IISc, Bangalore, India > L. M. Patnaik, IISc, Bangalore, India > Krithi Ramamritham, IIT Bombay, India > Parmesh Ramanathan, U. Wisconsin, USA > Krishan Sabnani, Alcatel-Lucent, USA > Kang Shin, U. Michigan, USA > Nitin Vaidya, U. Illinois, USA > > University Partners: > -------------------- > IIT Bombay, IIT Delhi, IISc Bangalore, IIT Hyderabad, NIIT University, IIIT > Bangalore, BITS Pilani > > > Patrons: > -------- > Mobile Monday Bangalore, Sasken, IBM Research, Alcatel Lucent > > > > ------------------------------ > > Message: 5 > Date: Thu, 23 Sep 2010 15:39:15 -0400 > From: Ernie Rubi <ernesto(a)cs.fiu.edu> > Subject: Facebook Issues/Outage in Southeast? > To: nanog(a)nanog.org > Message-ID: <E5E97806-A338-4B41-8421-39B2D3EC34BD(a)cs.fiu.edu> > Content-Type: text/plain; charset=us-ascii > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and directly > peer with them - even though our session hasn't gone down we still can't > reach them. > > Ernesto M. Rubi > Sr. Network Engineer > AMPATH/CIARA > Florida International Univ, Miami > Reply-to: ernesto(a)cs.fiu.edu > Cell: 786-282-6783 > > > > > > > ------------------------------ > > Message: 6 > Date: Thu, 23 Sep 2010 15:40:59 -0400 > From: "Paul Stewart" <pstewart(a)nexicomgroup.net> > Subject: RE: Facebook Issues/Outage in Southeast? > To: "Ernie Rubi" <ernesto(a)cs.fiu.edu>, <nanog(a)nanog.org> > Message-ID: > <C0A98BB6DAFAAB46A78BBA2C51B98F3E01B6F80B(a)nexus.nexicomgroup.net> > Content-Type: text/plain; charset="us-ascii" > > Over on the outages list there is a lot of discussion... I believe > everyone is effected - we are peered with them in several locations and > cannot reach them. > > Paul > > > -----Original Message----- > From: Ernie Rubi [mailto:ernesto@cs.fiu.edu] > Sent: Thursday, September 23, 2010 3:39 PM > To: nanog(a)nanog.org > Subject: Facebook Issues/Outage in Southeast? > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and > directly peer with them - even though our session hasn't gone down we > still can't reach them. > > Ernesto M. Rubi > Sr. Network Engineer > AMPATH/CIARA > Florida International Univ, Miami > Reply-to: ernesto(a)cs.fiu.edu > Cell: 786-282-6783 > > > > > > > > ------------------------------ > > Message: 7 > Date: Thu, 23 Sep 2010 19:41:04 +0000 > From: "chaim rieger" <chaim.rieger(a)gmail.com> > Subject: Re: Facebook Issues/Outage in Southeast? > To: "Ernie Rubi" <ernesto(a)cs.fiu.edu>,nanog(a)nanog.org > Message-ID: > > <471277240-1285270865-cardhu_decombobulator_blackberry.rim.net-1324398093-(a)bda899.bisx.prod.on.blackberry > > > > Content-Type: text/plain > > Yes tis down. Watch productivity go up > ------Original Message------ > From: Ernie Rubi > To: nanog(a)nanog.org > Subject: Facebook Issues/Outage in Southeast? > Sent: Sep 23, 2010 12:39 > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and directly > peer with them - even though our session hasn't gone down we still can't > reach them. > > Ernesto M. Rubi > Sr. Network Engineer > AMPATH/CIARA > Florida International Univ, Miami > Reply-to: ernesto(a)cs.fiu.edu > Cell: 786-282-6783 > > > > > > > > > > ------------------------------ > > Message: 8 > Date: Thu, 23 Sep 2010 12:41:45 -0700 (PDT) > From: "andrew.wallace" <andrew.wallace(a)rocketmail.com> > Subject: Re: Facebook Issues/Outage in Southeast? > To: Ernie Rubi <ernesto(a)cs.fiu.edu> > Cc: nanog(a)nanog.org > Message-ID: <581294.59169.qm(a)web59605.mail.ac4.yahoo.com> > Content-Type: text/plain; charset=utf-8 > > Over the last 30 minutes or more (UK) > > Andrew > > > > ----- Original Message ---- > From: Ernie Rubi <ernesto(a)cs.fiu.edu> > To: nanog(a)nanog.org > Sent: Thu, 23 September, 2010 20:39:15 > Subject: Facebook Issues/Outage in Southeast? > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and directly > peer > with them - even though our session hasn't gone down we still can't reach > them. > > Ernesto M. Rubi > Sr. Network Engineer > AMPATH/CIARA > Florida International Univ, Miami > Reply-to: ernesto(a)cs.fiu.edu > Cell: 786-282-6783 > > > > > > > > ------------------------------ > > Message: 9 > Date: Thu, 23 Sep 2010 15:39:15 -0400 > From: Ernie Rubi <ernesto(a)cs.fiu.edu> > Subject: Facebook Issues/Outage in Southeast? > To: nanog(a)nanog.org > Message-ID: <E5E97806-A338-4B41-8421-39B2D3EC34BD(a)cs.fiu.edu> > Content-Type: text/plain; charset=us-ascii > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and directly > peer with them - even though our session hasn't gone down we still can't > reach them. > > Ernesto M. Rubi > Sr. Network Engineer > AMPATH/CIARA > Florida International Univ, Miami > Reply-to: ernesto(a)cs.fiu.edu > Cell: 786-282-6783 > > > > > > > ------------------------------ > > Message: 10 > Date: Thu, 23 Sep 2010 12:43:44 -0700 > From: Justin Horstman <justin.horstman(a)gorillanation.com> > Subject: RE: Facebook Issues/Outage in Southeast? > To: 'Ernie Rubi' <ernesto(a)cs.fiu.edu>, "nanog(a)nanog.org" > <nanog(a)nanog.org> > Message-ID: > > <8C164D3BAF7C7F41B9B286385037B1310D3646D683(a)lax-exch-fe-01.gorillanation.local > > > > Content-Type: text/plain; charset="us-ascii" > > Via http://downforeveryoneorjustme.com/facebook.com > > It's not just you! http://facebook.com looks down from here. > > Also down from LA, qwest has been having issues today as well, not sure if > its related. > > > > > > > -----Original Message----- > > From: Ernie Rubi [mailto:ernesto@cs.fiu.edu] > > Sent: Thursday, September 23, 2010 12:39 PM > > To: nanog(a)nanog.org > > Subject: Facebook Issues/Outage in Southeast? > > > > Anyone else having trouble? We're colo'ed at the NOTA in Miami and > > directly peer with them - even though our session hasn't gone down we > > still can't reach them. > > > > Ernesto M. Rubi > > Sr. Network Engineer > > AMPATH/CIARA > > Florida International Univ, Miami > > Reply-to: ernesto(a)cs.fiu.edu > > Cell: 786-282-6783 > > > > > > > > > > > ------------------------------ > > Message: 11 > Date: Thu, 23 Sep 2010 15:46:33 -0400 > From: Steven Bellovin <smb(a)cs.columbia.edu> > Subject: Re: Facebook Issues/Outage in Southeast? > To: Paul Stewart <pstewart(a)nexicomgroup.net> > Cc: nanog(a)nanog.org > Message-ID: <9DFEEE61-5562-4157-841A-5C1B9EEA55EF(a)cs.columbia.edu> > Content-Type: text/plain; charset=us-ascii > > > On Sep 23, 2010, at 3:40 59PM, Paul Stewart wrote: > > > Over on the outages list there is a lot of discussion... I believe > > everyone is effected - we are peered with them in several locations and > > cannot reach them. > > > > http://blogs.wsj.com/digits/2010/09/22/facebook-goes-down-for-some-users/ > > > > > --Steve Bellovin, http://www.cs.columbia.edu/~smb > > > > > > > > > ------------------------------ > > _______________________________________________ > NANOG mailing list > NANOG(a)nanog.org > https://mailman.nanog.org/mailman/listinfo/nanog > > End of NANOG Digest, Vol 32, Issue 82 > ************************************* > -- Rudi Daniel *danielcharles consulting<http://www.facebook.com/pages/Kingstown-Saint-Vincent-and-the-Grenadines/Da…> **1-784 498 8277<http://www.facebook.com/pages/Kingstown-Saint-Vincent-and-the-Grenadines/Da…> * * *

1 0

Re: Facebook Issues/Outage in Southeast?
by deleskie＠gmail.com 23 Sep '10

23 Sep '10

Having issues from the north east as well. ------Original Message------ From: Ernie Rubi To: nanog(a)nanog.org Subject: Facebook Issues/Outage in Southeast? Sent: Sep 23, 2010 4:39 PM Anyone else having trouble? We're colo'ed at the NOTA in Miami and directly peer with them - even though our session hasn't gone down we still can't reach them. Ernesto M. Rubi Sr. Network Engineer AMPATH/CIARA Florida International Univ, Miami Reply-to: ernesto(a)cs.fiu.edu Cell: 786-282-6783 Sent from my BlackBerry device on the Rogers Wireless Network

3 2

CFP: COMSNETS 2011 (Deadline in 4 days: Sept 27, 11:59pm PDT)
by Ramana Kompella 23 Sep '10

23 Sep '10

*** APOLOGIES IF YOUR RECEIVED MULTIPLE COPIES OF THE CFP *** *** EXTENDED FIRM DEADLINE in exactly 4 days: Sept 27, 11:59pm PDT *** COMSNETS 2011 The THIRD International Conference on COMunication Systems and NETworks January 4-8, 2011, Bangalore, India http://www.comsnets.org (In Co-operation with ACM SIGMOBILE) (Technically Co-Sponsored by IEEE COMSOC) The Third International Conference on COMmunication Systems and NETworkS (COMSNETS) will be held in Bangalore, India, from 4 January 2011 to 8 January 2011. COMSNETS is a premier international conference dedicated to addressing advances in Networking and Communications Systems, and Telecommunications services. The goal of the conference is to create a world-class gathering of researchers from academia and industry, practitioners, business leaders, intellectual property experts, and venture capitalists, providing a forum for discussing cutting edge research, and directions for new innovative business and technology. The conference will include a highly selective technical program consisting of parallel tracks of submitted papers, a small set of invited papers on important and timely topics from well-known leaders in the field, and poster sessions of work in progress. Focused workshops and panel discussions will be held on emerging topics to allow for a lively exchange of ideas. International business and government leaders will be invited to share their perspectives, thus complementing the technical program. Papers describing original research work and practical experiences/experimental results are solicited on topics including, but not limited to: Topics of Interest ------------------ Internet Architecture and Protocols Network-based Applications Video Distribution (IPTV, Mobile Video, Video on Demand) Network Operations and Management Broadband and Cellular Networks (3G/4G, WiMAX/LTE) Mesh, Sensor and PAN Networks Communication Software (Cognitive Radios, DSA, SDR) Wireless Operating Systems and Mobile Platforms Peer-to-peer Networking Cognitive Radio and White Space Networking Optical Networks Network Security & Cyber Security Technologies Cloud and Utility computing Storage Area Networks Next Generation Web Architectures Vehicular Networking Energy-Efficient Networking Network Science and Emergent Behavior in Socio-Technical Networks Social Networking Analysis, Middleware and Applications Networking Technologies for Smart Energy Grids Disruption/Delay Tolerant Networking Conference Highlights --------------------- Banquet speaker: Dr. Rajeev Rastogi, Yahoo Research, India Keynote Speakers: • Prof. Don Towsley, U. Mass Amherst, USA • Dr. Pravin Bhagwat, AirTight Networks, India • Dr. Jean Bolot, Sprint, USA Workshops • WISARD (4, 5 Jan) • NetHealth (4 Jan) • IAMCOM (5 Jan) • Mobile India 2011 (7 Jan) Technical Paper and Poster Sessions Ph.D Forum Panel Discussions Demos & Exhibits Important Deadlines ------------------- Paper submission (FIRM, ABSOLUTELY NO EXTENSIONS): September 27, 2010 at 11:59 pm EDT (Sept 28, 9:29 am IST) Notification of Acceptance: November 8, 2010 Camera-Ready Submission: December 8, 2010 Detailed conference information and paper submission guidelines is available on the conference web site. Please see http://www.comsnets.org for detailed information from time to time. The conference email address is: comsnets2011(a)gmail.com General Co-Chairs ----------------- David B. Johnson, Rice University, USA Anurag Kumar, IISc Bangalore, India Technical Program Co-Chairs --------------------------- Jon Crowcroft, U. of Cambridge, UK D. Manjunath, IIT Bombay, India Archan Misra, Telcordia Tech., USA Steering Committee Co-Chairs ---------------------------- Uday Desai, IIT Hyderabad, India Giridhar Mandyam, Qualcomm, USA Sanjoy Paul, Infosys, India Rajeev Shorey, NIIT University, India G. Venkatesh, SASKEN, India Panel Co-Chairs --------------- Aditya Akella, U. of Wisconsin, USA Venkat Padmanabhan, MSR, India Ph.D Forum Chair ---------------- Bhaskaran Raman, IIT Bombay, India Publications Chair ------------------ Varsha Apte, IIT Bombay, India Demos and Exhibits Co-Chairs ---------------------------- Aaditeshwar Seth, IIT Delhi, India Ajay Bakre, Netapps, India Sponsorship Chair ----------------- Sudipta Maitra, Delhi, india Workshop Chairs --------------- Sharad Jaiswal, Alcatel-Lucent, India Ravindran Kaliappa, CUNY, USA Neelesh Mehta, IISc Bangalore, India Mobile India 2011 Co-Chairs --------------------------- Gulzar Azad, Google, India Gene Landy, Ruperto-Israel & Weiner, USA Rajaraghavan Setlur, SASKEN, India Sridhar Varadharajan, SASKEN, India Publicity Co-Chair ------------------ Augustin Chaintreau, TTL, France Kameswari Chebrolu, IIT Bombay, India Song Chong, KAIST, Korea Ramana Kompella, Purdue Univ, USA Nishanth Sastry, U. of Cambridge, UK Web Co-Chairs ------------- Santhana Krishnan, IIT Bombay, India Vinay Veerappa, SASKEN, India International Advisory Committee -------------------------------- K. K. Ramakrishnan, AT&T, USA Victor Bahl, Microsoft Research, USA Sunghyun Choi, Seoul National U., Korea Sajal Das, U. Texas at Arlington, USA B. N. Jain, IIT Delhi, India Anurag Kumar, IISc, Bangalore, India L. M. Patnaik, IISc, Bangalore, India Krithi Ramamritham, IIT Bombay, India Parmesh Ramanathan, U. Wisconsin, USA Krishan Sabnani, Alcatel-Lucent, USA Kang Shin, U. Michigan, USA Nitin Vaidya, U. Illinois, USA University Partners: -------------------- IIT Bombay, IIT Delhi, IISc Bangalore, IIT Hyderabad, NIIT University, IIIT Bangalore, BITS Pilani Patrons: -------- Mobile Monday Bangalore, Sasken, IBM Research, Alcatel Lucent

1 0

Odd BGP AS Path
by Heath Jones 23 Sep '10

23 Sep '10

Hi all, Probably a silly question, but can anyone explain to me this: 3561 3356 9031 {35821,35821,35821,35821} i To explain it a bit better, I'm looking at real routing information from routeviews (#3). According to RFC 4271 (9.2.2.2 Aggregating Routing Information): > For the purpose of aggregating AS_PATH attributes, we model > each AS within the AS_PATH attribute as a tuple <type, value>, > where "type" identifies a type of the path segment the AS > belongs to (e.g., AS_SEQUENCE, AS_SET), and "value" identifies > the AS number. > ... > No tuple of type AS_SET with the same value SHALL appear > more than once in the aggregated AS_PATH. Am I misreading things, or is this path information out of spec? Cheers Heath

5 8

IDS IPS
by Joshua William Klubi 23 Sep '10

23 Sep '10

Hi, I have been tasked to get the best IDS and IPS for our internal LAN and WAN in a Banking infrastructure. I would like ask if any one has deployed in any network with such technology, and also if any one can recommend a very good IDS and IPS for me to recommend to management Thank you. Joshua

11 11

Re: IDS IPS
by Dantzig, Brian 22 Sep '10

22 Sep '10

> Hi, > > I have been tasked to get the best IDS and IPS for our internal LAN and WAN > in a Banking infrastructure. > I would like ask if any one has deployed in any network with such > technology, and also if any one can recommend > a very good IDS and IPS for me to recommend to management > > Thank you. > > Joshua > ISS (acquired by IBM) is a verry strong product and you should look at it. We ran a demo/pilot od ISS in our production network for a couple of monthes and were pleased with it. Junipers IDP is another product to look at. I am currently running IDP and it was a better fit than ISS for us.

1 0

Re: FW: Odd BGP AS Path
by Christopher Morrow 22 Sep '10

22 Sep '10

On Wed, Sep 22, 2010 at 12:42 PM, Chris Hall <chris.hall.list(a)highwayman.com> wrote: > And what about the truly, madly, deeply useless AS_CONFED_SET ? [A > carbuncle's carbuncle if ever I saw one.] AS_CONFED_SET is included in the next version of this draft...

1 0

Avaya Converged Network Analyzer
by Drew Weaver 22 Sep '10

22 Sep '10

All argument aside about whether these products are worthwhile (hopefully) I am having a very strange and random technical problem with one of these boxes and I know in the past there were folks on NANOG who used them, if possible can anyone who falls into that category contact me off-list please? thanks, -Drew

1 0

FW: Odd BGP AS Path
by Chris Hall 22 Sep '10

22 Sep '10

Randy Bush wrote (on Wed 22-Sep-2010 at 16:31 +0100): .... > > Probably a silly question, but can anyone explain to me this: > > 3561 3356 9031 {35821,35821,35821,35821} i I suppose it could be trying to convey the aggregation of four routes from 35821 ? Or perhaps an AS with multiple personality disorder ? Or an aggregator with a sssstaaammer. > please support draft-wkumari-deprecate-as-sets-00.txt It seems to me that this is really deprecating the aggregation of routes by BGP, except where the result is an existing less specific route ? That obviously means that AS_SET would not be necessary, but as an effect rather than the cause. One could also dump the AGGREGATOR and the AS4_AGGREGATOR attributes in the nearest waste bin. AND it would simplify the merging of AS_PATH and AS4_PATH attributes, which is a complete dogs breakfast... because it tries, in vain, to finesse its way out of the problem of an AS2 speaker aggregating routes with AS4_PATHs ! [Made even more galling by the sure and certain knowledge that aggregated routes are as exquisitely rare as they are useful.] And what about the truly, madly, deeply useless AS_CONFED_SET ? [A carbuncle's carbuncle if ever I saw one.] Vote early and vote often, say I. Chris

1 0

Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities
by Cisco Systems Product Security Incident Response Team 22 Sep '10

22 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100922-cucmsip http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml Revision 1.0 For Public Release 2010 September 22 1600 UTC (GMT) - --------------------------------------------------------------------- Summary ======= Cisco Unified Communications Manager contains two denial of service (DoS) vulnerabilities that affect the processing of Session Initiation Protocol (SIP) messages. Exploitation of these vulnerabilities could cause an interruption of voice services. To address these vulnerabilities, Cisco has released free software updates. There is a workaround for these vulnerabilities. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml Note: Cisco IOS Software is also affected by the vulnerabilities described in this advisory. A companion advisory for Cisco IOS software is available at: http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier: http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link: http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html Affected Products ================= Vulnerable Products +------------------ The following products are affected by the vulnerabilities that are described in this advisory: * Cisco Unified Communications Manager 6.x * Cisco Unified Communications Manager 7.x * Cisco Unified Communications Manager 8.x Administrators of systems that are running Cisco Unified Communications Manager versions 6.x, 7.x and 8.x can determine the software version by viewing the main page of the Cisco Unified Communications Manager Administration interface. The software version can also be determined by running the show version active command via the command-line interface. Products Confirmed Not Vulnerable +-------------------------------- Cisco Unified Communications Manager version 4.x is not affected by these vulnerabilities. No other Cisco products are currently known to be affected by these vulnerabilities. Details ======= Cisco Unified Communications Manager is the call processing component of the Cisco IP Telephony solution that extends enterprise telephony features and functions to packet telephony network devices such as IP phones, media processing devices, VoIP gateways, and multimedia applications. Cisco Unified Communications Manager contains two DoS vulnerabilities that involve the processing of SIP messages. Each vulnerability is triggered by a malformed SIP message that could cause a critical process to fail, which could result in the disruption of voice services. All SIP ports (TCP ports 5060 and 5061 and UDP ports 5060 and 5061) are affected. The first SIP DoS vulnerability is documented in Cisco Bug ID CSCta31358 ( registered customers only) and has been assigned the CVE identifier CVE-2010-2835. This vulnerability is fixed in Cisco Unified Communications Manager versions 6.1(5), 7.0(2a)su3, 7.1(3b) su2, 7.1(5) and 8.0(1). The corresponding IOS defect is CSCta20040. The second SIP DoS vulnerability is documented in Cisco Bug ID CSCtf14987 ( registered customers only) and has been assigned the CVE identifier CVE-2010-2834. The second vulnerability is fixed in Cisco Unified Communications Manager versions 6.1(5)SU1, 7.1(5) and 8.0(2). The corresponding IOS defect is CSCtf72678. Vulnerability Scoring Details ============================= Cisco has provided scores for the vulnerabilities in this advisory based on the Common Vulnerability Scoring System (CVSS). The CVSS scoring in this Security Advisory is done in accordance with CVSS version 2.0. CVSS is a standards-based scoring method that conveys vulnerability severity and helps determine urgency and priority of response. Cisco has provided a base and temporal score. Customers can then compute environmental scores to assist in determining the impact of the vulnerability in individual networks. Cisco has provided an FAQ to answer additional questions regarding CVSS at: http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html Cisco has also provided a CVSS calculator to help compute the environmental impact for individual networks at: http://intellishield.cisco.com/security/alertmanager/cvss CSCta31358 - c3945 GW crashes while testing REFER method with invalid Refer-To header CVSS Base Score - 7.8 Access Vector Network Access Complexity Low Authentication None Confidentiality Impact None Integrity Impact None Availability Impact Complete CVSS Temporal Score - 6.4 Exploitability Functional Remediation Level Official Fix Report Confidence Confirmed CSCtf14987 - CCM Coredump Generated During UDP SIP Registration Fuzzing CVSS Base Score - 7.8 Access Vector Network Access Complexity Low Authentication None Confidentiality Impact None Integrity Impact None Availability Impact Complete CVSS Temporal Score - 6.4 Exploitability Functional Remediation Level Official Fix Report Confidence Confirmed Impact ====== Successful exploitation of the vulnerabilities that are described in this advisory could result in the interruption of voice services. Cisco Unified Communications Manager will restart the affected processes, but repeated attacks may result in a sustained DoS Condition. Software Versions and Fixes =========================== When considering software upgrades, also consult http://www.cisco.com/go/psirt and any subsequent advisories to determine exposure and a complete upgrade solution. In all cases, customers should exercise caution to be certain the devices to be upgraded contain sufficient memory and that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, contact the Cisco Technical Assistance Center (TAC) or your contracted maintenance provider for assistance. +---------------------------------------+ | Cisco Unified | Recommended | | Communication Manager | Release | | Version | | |-------------------------+-------------| | 6.x | 6.1(5)SU1 | |-------------------------+-------------| | 7.x | 7.1(5b)SU2 | |-------------------------+-------------| | 8.x | 8.0(3a) | +---------------------------------------+ Note: The recommended releases listed in the table above are the latest Cisco Unified Communications Manager versions available at the publication of this advisory, and each release includes software fixes for all the vulnerabilities described in this advisory. Cisco Unified Communications Manager software can be downloaded at the following link: http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=268439621 Workarounds =========== For customers who do not use SIP in their environment, there is a workaround for these vulnerabilities. Cisco Unified Communication Manager versions 6.1(4), 7.1(2) and 8.0(1) introduced the ability to disable SIP processing. SIP processing is enabled by default. Use the following instructions to disable SIP processing: Step 1: Log into the Cisco Unified CM Administration web interface. Step 2: Navigate to System > Service Parameters and select the appropriate Cisco Unified Communications Manager server and the "Cisco CallManager" service. Step 3: Change the "SIP Interoperability Enabled" parameter to False, and click Save. Note: For a SIP processing change to take effect, the Cisco CallManager Service must be restarted. For information on how to restart the service, refer to the "Restarting the Cisco CallManager Service" section of the document at: http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/7_1_2/ccmcfg/b03dp… It is possible to mitigate these vulnerabilities by implementing filtering on screening devices and permitting access to TCP ports 5060 and 5061 and UDP ports 5060 and 5061 only from networks that require SIP access to Cisco Unified Communications Manager servers. Additional mitigations that can be deployed on Cisco devices in the network are available in the companion document "Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco Voice Products", which is available at the following location: http://www.cisco.com/warp/public/707/cisco-amb-20100922-voice.shtml Obtaining Fixed Software ======================== Cisco has released free software updates that address these vulnerabilities. Prior to deploying software, customers should consult their maintenance provider or check the software for feature set compatibility and known issues specific to their environment. Customers may only install and expect support for the feature sets they have purchased. By installing, downloading, accessing or otherwise using such software upgrades, customers agree to be bound by the terms of Cisco's software license terms found at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html or as otherwise set forth at Cisco.com Downloads at http://www.cisco.com/public/sw-center/sw-usingswc.shtml Do not contact psirt(a)cisco.com or security-alert(a)cisco.com for software upgrades. Customers with Service Contracts +------------------------------- Customers with contracts should obtain upgraded software through their regular update channels. For most customers, this means that upgrades should be obtained through the Software Center on Cisco's worldwide website at http://www.cisco.com Customers using Third Party Support Organizations +------------------------------------------------ Customers whose Cisco products are provided or maintained through prior or existing agreements with third-party support organizations, such as Cisco Partners, authorized resellers, or service providers should contact that support organization for guidance and assistance with the appropriate course of action in regards to this advisory. The effectiveness of any workaround or fix is dependent on specific customer situations, such as product mix, network topology, traffic behavior, and organizational mission. Due to the variety of affected products and releases, customers should consult with their service provider or support organization to ensure any applied workaround or fix is the most appropriate for use in the intended network before it is deployed. Customers without Service Contracts +---------------------------------- Customers who purchase direct from Cisco but do not hold a Cisco service contract, and customers who purchase through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should acquire upgrades by contacting the Cisco Technical Assistance Center (TAC). TAC contacts are as follows. * +1 800 553 2447 (toll free from within North America) * +1 408 526 7209 (toll call from anywhere in the world) * e-mail: tac(a)cisco.com Customers should have their product serial number available and be prepared to give the URL of this notice as evidence of entitlement to a free upgrade. Free upgrades for non-contract customers must be requested through the TAC. Refer to http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html for additional TAC contact information, including localized telephone numbers, and instructions and e-mail addresses for use in various languages. Exploitation and Public Announcements ===================================== The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities described in this advisory. All vulnerabilities described in this advisory were discovered as a result of internal testing conducted by Cisco. Status of this Notice: FINAL ============================ THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. A stand-alone copy or Paraphrase of the text of this document that omits the distribution URL in the following section is an uncontrolled copy, and may lack important information or contain factual errors. Distribution ============ This advisory is posted on Cisco's worldwide website at : http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml In addition to worldwide web posting, a text version of this notice is clear-signed with the Cisco PSIRT PGP key and is posted to the following e-mail and Usenet news recipients. * cust-security-announce(a)cisco.com * first-bulletins(a)lists.first.org * bugtraq(a)securityfocus.com * vulnwatch(a)vulnwatch.org * cisco(a)spot.colorado.edu * cisco-nsp(a)puck.nether.net * full-disclosure(a)lists.grok.org.uk * comp.dcom.sys.cisco(a)newsgate.cisco.com Future updates of this advisory, if any, will be placed on Cisco's worldwide website, but may or may not be actively announced on mailing lists or newsgroups. Users concerned about this problem are encouraged to check the above URL for any updates. Revision History ================ +----------------------------------------+ | Revision | | Initial | | 1.0 | 2010-September-22 | public | | | | release | +----------------------------------------+ Cisco Security Procedures ========================= Complete information on reporting security vulnerabilities in Cisco products, obtaining assistance with security incidents, and registering to receive security information from Cisco, is available on Cisco's worldwide website at http://www.cisco.com/en/US/products/products_security_vulnerability_policy.… This includes instructions for press inquiries regarding Cisco security notices. All Cisco security advisories are available at http://www.cisco.com/go/psirt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) iEYEARECAAYFAkyaIp0ACgkQ86n/Gc8U/uCsDQCbBrZ7ciwiNVxErJOxLLICNgXv dE0An3lej+RKwoUMMf+GKTm/BBOHmlQL =dwdr -----END PGP SIGNATURE-----

1 0