May 2011 - Test - lists.nanog.org

rwhois website
by Deric Kwok 24 May '11

24 May '11

Hi all I am trying to use http://www.rwhois.net/rwhois/prwhois.html to check my rwhois server but it is not reachable now Do you know why the websie is not in existing? and how can i check it Thank you

4 3

NANOG transition update
by Steven Feldman 24 May '11

24 May '11

A lot of progress has been made since NANOG 51, so I'd like to share this update with the community. * Association management contract We recently completed our RFP and selection process, and have contracted with Association Management Solutions (http://www.amsl.com) to provide association management and meeting support services for NANOG. We are excited to be working with AMS, as they have an excellent set of management and IT services which are very good fits to our needs. AMS might already be familiar to some of our community, as they have providing IETF secretariat services for the past several years. Representatives from AMS will be with us in Denver to observe the conference and meet the community. Over the next couple of months our meeting registration, membership, mailing list and finance systems will be migrated to AMS infrastructure. The transition has already started, and will be completed in time for the start of registration for the NANOG53 meeting. We'll share more details of the transition process as they become available. * NANOG Intellectual Property All of the NANOG intellectual property originated by Merit Network, including the name, domain, logos, mailing lists and archives, have been transferred to NewNOG. This means that we _are_ NANOG! We expect that the interim name "NewNOG" will eventually go away. * Non-profit status NewNOG, Inc. has been recognized by the IRS as a 501(c)(3) charitable organization. (See http://www.newnog.org/docs/IRSletter.pdf for the IRS determination letter.) This means that individual donations might be tax-deductible. * Future conferences Work continues on securing hosts and venues for future NANOG conferences. The current list of future events is at http://www.nanog.org/meetings/future/, and we expect to have the October 2012 meeting ready to announce in the next few weeks. And if you haven't already registered, please plan to join us at NANOG52 in Denver next month! The Program Committee has published a great agenda, and the hotel block is filling fast. The hotel group rate expires on May 29, and the conference registration fee goes up on June 4, so please register soon! More information is at http://www.nanog.org/meetings/nanog52/. We welcome any questions or comments, and we'll give another update at the community meeting in Denver. For the board, Steve Feldman, chair

1 0

Experiences with "advanced" network taps.
by Darren Bolding 24 May '11

24 May '11

We are planning on purchasing some network taps for a couple of locations in our network, and we expect to make significantly greater use of them in the next year or two. Something that is new since I last investigated taps (it has been a while) is that many of them now allow for functionality I would typically think of as far outside what a simple tap does. For example: Selective forwarding of packets based on MAC address, TCP/UDP port, IP address range etc. Selective forwarding/load balancing based on flow, so that you can distribute traffic across a cluster of devices (e.g. IDS or netflow probes) Ability to insert a device (firewall, IDS, etc) into the network flow and via software configuration bypass traffic around the device- e.g. able to quickly drop a device out of the network path. - Some have the ability to send network probes, or monitor traffic downstream of an inline device so they can automatically take the device out of line if it fails to pass traffic. - Some can filter which traffic goes through the inline device and merge it back with the traffic that was not sent to the inline device for downstream consumption. Some can be connected and automatically be managed as if one device, allowing monitor and replication ports to be used across the stack/mesh of devices. All of this is very interesting. Of course these taps cost more than your basic dumb tap. More interestingly to me is that these taps are no longer dumb, and that makes them a bit of a riskier proposition. In evaluating some we have run into issues ranging from misconfiguration/user error to what appear to be crashes (with associated loss of forwarding). I'm wondering if anyone has had significant experience deploying these more advanced taps, whether it was good or bad, general comments you might like to share regarding them, and whether you would recommend particular vendors. If people reply off-list, I will make a point of summarizing back if I get any feedback. Thanks! --D -- -- Darren Bolding -- -- darren(a)bolding.org --

2 1

NANOG 52 - Room block filling up!
by Michael K. Smith - Adhost 23 May '11

23 May '11

Hello All: NANOG 52 in Denver is fast approaching. If you're planning on attending and want to get the benefits of the NANOG room rate, you should consider signing up as soon as possible. We're at 85% of our room block capacity and the cutoff date for the NANOG rate is May 29th at 5:00 PM Denver time (GMT -6). For more information please see http://www.nanog.org/meetings/nanog52/index.php. Regards, Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksmith(a)adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9 84BB E61E 38C0 (Key ID: 0x9A96777D)

4 4

IPv6 CPE Survey - Initial Results on RIPE Labs
by Marco Hogewoning 23 May '11

23 May '11

[apologies for duplicates] Dear colleagues, Since we published the IPv6 customer premise equipment (CPE) survey during the RIPE 62 meeting, we received more than 100 responses. This new article on RIPE Labs shows some interesting initial results: http://labs.ripe.net/Members/marco/ipv6-cpe-survey-results-may-2011 The survey is still open. If you are using an IPv6 capable CPE and have not yet filled in the survey, we would like to encourage you to do so. The survey can be found here: http://labs.ripe.net/Members/marco/ipv6-cpe-survey-please-participate Kind Regards, Marco Hogewoning & Mirjam Kuehne RIPE NCC

1 0

Had an idea - looking for a math buff to tell me if it's possible with today's technology.
by Landon Stewart 23 May '11

23 May '11

Lets say you had a file that was 1,000,000,000 characters consisting of 8,000,000,000bits. What if instead of transferring that file through the interwebs you transmitted a mathematical equation to tell a computer on the other end how to *construct* that file. First you'd feed the file into a cruncher of some type to reduce the pattern of 8,000,000,000 bits into an equation somehow. Sure this would take time, I realize that. The equation would then be transmitted to the other computer where it would use its mad-math-skillz to *figure out the answer* which would theoretically be the same pattern of bits. Thus the same file would emerge on the other end. The real question here is how long would it take for a regular computer to do this kind of math? Just a weird idea I had. If it's a good idea then please consider this intellectual property. LOL -- Landon Stewart <LStewart(a)SUPERB.NET> SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more "Ahead of the Rest": http://www.superbhosting.net

37 51

blocking unwanted traffic from hitting gateway
by Rogelio 21 May '11

21 May '11

I've got about 1000 people hammering a Linux gateway with http requests, but only about 150 of them are authenticated users for the ISP. Once someone authenticates, then I want their traffic to pass through okay. But if they're not an authenticated user, I would like to ideally block those http requests (e.g. Google updater, AV scanners, etc) from ever tying up my web server. Is there some sort of box I could put in front (e.g. OpenBSD pf in transparency mode) or maybe some sort of filter on the webserver? This solution would need to be tied into the authentication services so authenticated users hit the gateway. -- Also on LinkedIn? Feel free to connect if you too are an open networker: scubacuda(a)gmail.com

4 4

Edgecast?
by Zaid Ali 21 May '11

21 May '11

Anyone from edgecast here? I am seeing peering issues to a particular CDN. Please contact me offline. Zaid

1 0

Need the perspective of a Level3 customer.
by Joe Renwick 20 May '11

20 May '11

Can anyone peering with Level3 directly tell me if they are seeing 63.210.162.0/24 coming from the Level3 peer? Thanks for the help. Cheers, -- Joe Renwick IP Network Consultant, CCIE #16465 GO NETFORWARD! Direct: 619-800-2055, Emergency Support: 800-719-0504 Is your network moving you forward?

5 6

BGP Update Report
by cidr-report＠potaroo.net 20 May '11

20 May '11

BGP Update Report Interval: 12-May-11 -to- 19-May-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9829 43670 3.4% 63.8 -- BSNL-NIB National Internet Backbone 2 - AS17974 36301 2.8% 21.2 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 3 - AS19743 31933 2.5% 5322.2 -- 4 - AS11492 27640 2.1% 27.7 -- CABLEONE - CABLE ONE, INC. 5 - AS14420 23093 1.8% 34.5 -- CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP 6 - AS32528 17146 1.3% 4286.5 -- ABBOTT Abbot Labs 7 - AS44609 13732 1.1% 4577.3 -- FNA Fars News Agency Cultural Arts Institute 8 - AS14522 13539 1.0% 30.8 -- Satnet 9 - AS45595 10585 0.8% 40.1 -- PKTELECOM-AS-PK Pakistan Telecom Company Limited 10 - AS9498 10005 0.8% 14.8 -- BBIL-AP BHARTI Airtel Ltd. 11 - AS33776 8806 0.7% 80.8 -- STARCOMMS-ASN 12 - AS25543 8678 0.7% 241.1 -- FasoNet-AS 13 - AS24560 8666 0.7% 7.7 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 14 - AS3454 8618 0.7% 1436.3 -- Universidad Autonoma de Nuevo Leon 15 - AS33475 8588 0.7% 49.4 -- RSN-1 - RockSolid Network, Inc. 16 - AS8151 8406 0.7% 8.5 -- Uninet S.A. de C.V. 17 - AS8402 7599 0.6% 13.1 -- CORBINA-AS Corbina Telecom 18 - AS23966 6636 0.5% 19.9 -- LDN-AS-PK LINKdotNET Telecom Limited 19 - AS12880 6605 0.5% 62.3 -- DCI-AS DCI Autonomous System 20 - AS28573 6209 0.5% 5.5 -- NET Servicos de Comunicao S.A. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS19743 31933 2.5% 5322.2 -- 2 - AS44609 13732 1.1% 4577.3 -- FNA Fars News Agency Cultural Arts Institute 3 - AS32528 17146 1.3% 4286.5 -- ABBOTT Abbot Labs 4 - AS17408 3473 0.3% 3473.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 5 - AS45723 2757 0.2% 2757.0 -- OMADATA-AS-ID Omadata Indonesia, PT 6 - AS35931 4728 0.4% 1576.0 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 7 - AS49367 1573 0.1% 1573.0 -- ASSEFLOW Seflow S.N.C. Di Marco Brame' & C. 8 - AS3454 8618 0.7% 1436.3 -- Universidad Autonoma de Nuevo Leon 9 - AS49600 1190 0.1% 1190.0 -- LASEDA La Seda de Barcelona, S.A 10 - AS48640 1068 0.1% 1068.0 -- MAZ-AS MAZ Mutua de Accidentes de Trabajo y Enfermedades 11 - AS27771 1982 0.1% 991.0 -- Instituto Venezolano de Investigaciones Cientificas 12 - AS38388 2486 0.2% 828.7 -- BEN-AS-KR Bukbu District Office of Education in Seoul 13 - AS44967 4603 0.3% 657.6 -- TASIO Tasio Ltd 14 - AS38004 554 0.0% 554.0 -- FASTLINK-ISP FastLink Wireless ISP, DrukCom Pvt. Enterprise. 15 - AS3 530 0.0% 735.0 -- PARTNERTELEKOM-AS PARTNER TELEKOM Jacek Kwiatkowski, Leszek Kuszka SP.J. 16 - AS21271 494 0.0% 494.0 -- SOTELMABGP 17 - AS34043 494 0.0% 494.0 -- RISS Internet Security Systems SRL 18 - AS50461 1453 0.1% 484.3 -- ALMADINAH-AS Almadinah Ltd 19 - AS33076 391 0.0% 391.0 -- ISC-TGD1 Internet Systems Consortium, Inc. 20 - AS44584 1508 0.1% 377.0 -- PTLINE-AS Progress Tehnologiya LLC TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 200.23.202.0/24 8613 0.6% AS3454 -- Universidad Autonoma de Nuevo Leon 2 - 130.36.35.0/24 8572 0.6% AS32528 -- ABBOTT Abbot Labs 3 - 130.36.34.0/24 8570 0.6% AS32528 -- ABBOTT Abbot Labs 4 - 202.92.235.0/24 8471 0.6% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 5 - 178.22.72.0/21 7049 0.5% AS44609 -- FNA Fars News Agency Cultural Arts Institute 6 - 178.22.79.0/24 6679 0.5% AS44609 -- FNA Fars News Agency Cultural Arts Institute 7 - 65.122.196.0/24 6220 0.5% AS19743 -- 8 - 72.164.144.0/24 5147 0.4% AS19743 -- 9 - 66.238.91.0/24 5142 0.4% AS19743 -- 10 - 66.89.98.0/24 5142 0.4% AS19743 -- 11 - 65.162.204.0/24 5141 0.4% AS19743 -- 12 - 65.163.182.0/24 5141 0.4% AS19743 -- 13 - 221.121.96.0/19 4035 0.3% AS7491 -- PI-PH-AS-AP PI-PHILIPINES 14 - 202.153.174.0/24 3473 0.2% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 15 - 202.1.236.0/24 2757 0.2% AS45723 -- OMADATA-AS-ID Omadata Indonesia, PT 16 - 63.211.68.0/22 2744 0.2% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 17 - 190.15.21.128/26 2569 0.2% AS27817 -- Red Nacional Académica de Tecnología Avanzada - RENATA 18 - 204.245.102.0/24 2557 0.2% AS19262 -- VZGNI-TRANSIT - Verizon Online LLC 19 - 198.140.43.0/24 1876 0.1% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 20 - 65.181.192.0/23 1752 0.1% AS11492 -- CABLEONE - CABLE ONE, INC. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0