August 2011 - Test - lists.nanog.org

Re: PuTTY alt-keys (was Re: 16-User Network)
by Jay R Ashworth 31 Aug '11

31 Aug '11

Lynda <shrdlu(a)deaddrop.org> wrote: >On 8/30/2011 10:36 PM, Jay Ashworth wrote: > >> See again the name of this list ;-) > >Oh, dear. I'll bet anything you didn't mean this to go to NANOG. > >-- >The Consultant's Curse: > When the customer has beaten up on you long enough, give him > what he asks for, instead of what he needs. This is very strong > medicine, and is normally only required once. Must. Not. Post. After. 1am. Sorry, all. --jra -- Sent from my HTC Supersonic with K-9 Mail. Please excuse my brevity.

5 5

GNS3 site
by Stefan 31 Aug '11

31 Aug '11

http://www.downforeveryoneorjustme.com/www.gns3.net <- anybody having any idea about the status of this? ***Stefan Mititelu http://twitter.com/netfortius http://www.linkedin.com/in/netfortius

1 0

New Natural Disaster! 8/27/2011 Hurricane Irene
by Andrew Kirch 31 Aug '11

31 Aug '11

The US Airforce has sent most of the fighters from the East Coast to Indiana, what are you doing to prepare for the storm of the next 2 days? Ready, Set, DISCUSS!

23 24

Re: PuTTY alt-keys (was Re: 16-User Network)
by Jay Ashworth 31 Aug '11

31 Aug '11

----- Original Message ----- > From: "Fairlight" <fairlite(a)fairlite.com> > Unless someone dumbs down and jails their environment for them, which > I'm staunchly against for anything except ftp or sftp use. This is, um, the *filePro* mailing list. Quick: who on here has ever set up a Unix user to go directly into a filePro menu? :-) > My belief is that if you can't configure a simple terminal emulator, you're > quite possibly a menace with an operating system a few hundred times as > complex. All the chmod 0777 monkeys out there haven't done anything but > reinforce my opinion over the years. There are some notable exceptions, > but I'm wary of putting non-technical people in front of an actual shell > prompt. Yup. Why I never do it. > And I've never been a fan of pseudo-jailed environments. I've yet to> find > one I can't find -some- way out of (including at a bank, who> overlooked > the fact that WordPerfect had a shell escape buried in it!), and> admins > place way too much trust in the stupidity of the users they fool into > thinking their access is limited. Sorry, changing the prompt to look > like a several-choice menu is -not- security. (Yes, I know a company that > does this.) Ha. :-) In practice, in 20 years, on well over 500 seats, I *never* had a problem. Never. > But I'd never let someone near my own box if they can't even configure > a PuTTY connection to it. Oh, -hell- no. :) Strawman. Wasn't suggesting that you should. See again the name of this list ;-) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

[NANOG-announce] Amendments to the NANOG Bylaws
by Steve Gibbard 30 Aug '11

30 Aug '11

NANOG members (and other interested people), The NANOG bylaws provide an opportunity each year to amend them, if needed. Bylaw amendments may be enacted by a majority vote of eligible voters (in other words, NANOG Members), during NANOG's annual election. The election is scheduled to take place during NANOG 53, from October 9-11, with voting open to all NANOG members (http://www.nanog.org/membership_main.html) The current bylaws are posted at http://www.nanog.org/governance/documents/By-Laws_20110104.pdf An amendment may be put on the ballot by the Board of Directors or by petition. A petition must be signed by at least 30 eligible voters, or 1 percent of eligible voters, whichever is greater. In addition, the Board had the power to make bylaw amendments during NANOG's first year as an independent corporation, subject to ratification by the voters in the next election. The Board used that procedure to amend the bylaws and institute the current membership structure, so that amendment will now need to be accepted or rejected by the membership. Accordingly, there will be a proposal on the ballot to ratify the current membership structure (Section 5 of the bylaws). The board has also discussed submitting a proposal to modify the committee structure called for in the bylaws (Section 9), to reflect that some of the committee functions are now being handled by staff. Any other changes people want to suggest may be discussed on the nanog-futures(a)nanog.org mailing list. Anybody wishing to put a bylaw amendment on the ballot without board action may do so by submitting a petition to nominations(a)nanog.org no later than September 26. Thank you, Steve Gibbard NANOG Membership Chair _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Rate Limiting and Bit Counting
by Luke Marrott 30 Aug '11

30 Aug '11

I'm looking to evaluate some solutions for Rate limiting and bit counting / metering. I am not really interested in Filtering packets by application or protocol, just delivering bandwidth at a defined service level based on endpoint IP. I would also like to have the option to track how much data is transferred per endpoint for potential metering. I already use a smaller sandvine at another location and we are satisfied with it but this would be a bigger project so I am looking for alternatives. Does anyone have any experience with hardware like this they could recommend? Thanks, :Luke

2 1

Aqua Conduit for 10G multi-mode?
by Michael J McCafferty 30 Aug '11

30 Aug '11

All, Orange innerduct/split-loom tubing for multi-mode, yellow for single-mode... Where's the aqua for the aqua OM3 fiber? I feel like the Ethernet fashion police, but it's a horrible color clash for aqua fiber dressed in yellow or orange. Where is my aqua innerduct and/or tubing? Does anyone make it? Cheers, Mike -- ************************************************************ Michael J. McCafferty M5 Hosting http://www.m5hosting.com You can have your own custom Dedicated Server up and running today ! RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more ************************************************************

6 6

RAID 2011 (Sep. 20-21, Menlo Park, CA) - Final Call for Participation
by Guofei Gu 30 Aug '11

30 Aug '11

Call for Participation 14th International Symposium on Recent Advances in Intrusion Detection (RAID'2011) September 20-21, 2011 SRI International, Menlo Park, CA http://www.raid2011.org Register online now! http://www.raid2011.org/ =========================================================== About the conference: For the fourteenth year, the intrusion detection community will converge at RAID'2011 to discuss cutting-edge research in malware, application security, anomaly detection, special environments and sandboxing, web security and social networks, and network security. You are invited to join us at RAID for two days this September at SRI International, Menlo Park, CA. The annual symposium brings together leading researchers and practitioners from academia, government, and industry to discuss issues and technologies related to intrusion detection and defense. RAID 2011 features an exciting technical program, with presentations addressing topics such as dynamic analysis of malicious shellcode, world's fastest taint tracker, anomaly detection using software defined networking, defending legacy embeded systems, web and social network security, and cross-analysis of botnet victims. A poster session during the symposium will provide lively face-to-face discussions of work in progress. =========================================================== Program this year: ******Tuesday September 20th****** 8:45 9:45 Keynote: Kevin Fu The Cutting Edge of Medical Device Security and Privacy 10:00 12:00 Session 1 (Malware) Chair: Guofei Gu 10:00 10:30 Shellzer: a tool for the dynamic analysis of malicious shellcode Yanick Fratantonio (Politecnico di Milano), Christopher Kruegel and Giovanni Vigna (University of California, Santa Barbara) 10:30 11:00 KLIMAX: Profiling Memory Write Patterns to Detect Keystroke-Harvesting Malware Stefano Ortolani and Cristiano Giuffrida (Vrije Universiteit) and Bruno Crispo (University of Trento) 11:00 11:30 Packed, Printable, and Polymorphic Return-Oriented Programming Kangjie Lu and Dabi Zou (Singapore Management University), Weiping Wen (Peking University), and Debin Gao (Singapore Management University) 11:30 12:00 On the Expressiveness of Return-into-libc Attacks Minh Tran, Mark Etheridge, Tyler Bletsch, Xuxian Jiang, Vincent Freeh, and Peng Ning (North Carolina State University) 12:00 13:30 Lunch 13:30 15:00 Session 2 (Application Security) Chair: Debin Gao 13:30 14:00 Minemu: The World's Fastest Taint Tracker Erik Bosman, Asia Slowinska, and Herbert Bos (Vrije Universiteit Amsterdam) 14:00 14:30 Dymo: Tracking Dynamic Code Identity Bob Gilbert, Richard Kemmerer, Christopher Kruegel, and Giovanni Vigna (University of California, Santa Barbara) 14:30 15:00 Automated Identification of Cryptographic Primitives in Binary Programs Felix Gröt (Ruhr-University Bochum), Carsten Willems (University of Mannheim), and Thorsten Holz (Ruhr-University Bochum) 15:00 15:30 Health Break 15:30 17:00 Session 3 (Anomaly Detection) Chair: Mathieu Couture 15:30 16:00 Cross-domain Collaborative Anomaly Detection: So Far Yet So Close Nathaniel Boggs (Columbia University), Sharath Hiremagalore and Angelos Stavrou (George Mason University), and Salvatore J. Stolfo (Columbia University) 16:00 16:30 Revisiting Traffic Anomaly Detection using Software Defined Networking Syed Akbar Mehdi, Junaid Khalid, and Syed Ali Khayam (National University of Sciences and Technology, Pakistan) 16:30 17:00 Modeling User Search Behavior for Masquerade Detection Malek Ben Salem and Salvatore J. Stolfo (Columbia University) 17:00 19:00 Poster Session (lobby) 19:30 Banquet at Oak City Restaurant (walk from conference) ******Wednesday September 21st****** 8:00 - 8:30 Continental Breakfast 8:30 10:00 Session 4 (Special Environments and Sandboxing) Chair: Angelos Stavrou 8:30 9:00 Defending Legacy Embedded Systems with Software Symbiotes Ang Cui and Salvatore J. Stolfo (Columbia University) 9:00 9:30 What if you can't trust your network card? LoïDuflot, Yves-Alexis Perez, and Benjamin Morin (ANSSI) 9:30 10:00 Detecting Environment-Sensitive Malware Martina Lindorfer, Clemens Kolbitsch, and Paolo Milani Comparetti (Vienna University of Technology) 10:00 10:15 Health Break 10:15 11:45 Panel Discussion: State and Future of Open-Source Network Intrusion Detection 11:45 13:15 Lunch 13:15 15:15 Session 5 (Web Security and Social Networks) Chair: Davide Balzarotti 13:15 13:45 Banksafe - Information Stealer Detection inside the Web Browser Armin Buescher (G Data Security Labs), Felix Leder (University of Bonn), and Thomas Siebert (G Data Security Labs) 13:45 14:15 IceShield: Detection and Mitigation of Malicious Websites with a Frozen DOM Mario Heiderich, Tilman Frosch, and Thorsten Holz (Ruhr-University Bochum) 14:15 14:45 Spam Filtering in Twitter using Sender-Receiver Relationship Jonghyuk Song, Sangho Lee, and Jong Kim (POSTECH) 14:45 15:15 Die Free or Live Hard? Empirical Evaluation and New Design for Fighting Evolving Twitter Spammers Chao Yang, Robert Harkreader, and Guofei Gu (Texas A&M University) 15:15 15:30 Health Break 15:30 17:00 Session 6 (Network Security) Chair: Phil Porras 15:30 16:00 Securing Application-Level Topology Estimation Networks: Facing the Frog-Boiling Attack Sheila Becker (University of Luxembourg), Jeff Seibert and Cristina Nita-Rotaru (Purdue University), and Radu State (University of Luxembourg) 16:00 16:30 Detecting Traffic Snooping in Tor Using Decoys Sambuddho Chakravarty, Georgios Portokalidis, Michalis Polychronakis, and Angelos D. Keromytis (Columbia University) 16:30 17:00 Cross-Analysis of Botnet Victims: New Insights and Implications Seungwon Shin, Raymond Lin, and Guofei Gu (Texas A&M University)

1 0

So Cal Verizon FIOS Issues?
by James Laszko 29 Aug '11

29 Aug '11

I was curious if anyone else is seeing huge problems from Verizon FIOS connected sites in Southern California reaching large segments of the Internet? It appears that Verizon has lost something large in Los Angeles and it's affecting hundreds of our customers. Lack of connectivity to various places around the Internet... It's really odd because sites that are located in adjacent cities can get further than their neighbors, but fail in the end (some go to LAX and die, others get routed to DFW and die). Large swaths of CDN's are not able to be connected to from any of the sites. Curious what others are seeing. Regards, James Laszko Mythos Technology Inc jamesl(a)mythostech.com<mailto:jamesl@mythostech.com>

2 2

Re: DNS BoF at NANOG 53
by Mehmet Akcin 29 Aug '11

29 Aug '11

Folks, I just want to thank you for your all questions/comments/suggestions and interest in participating this upcoming BoF. We've pretty much most of the program is set already, but there are still some time available if you have something interesting to say about port 53. (Either UDP/TCP I dont' discriminate :) Please contact me off-list if you are interested, and or have questions. Mehmet On Aug 19, 2011, at 12:05 AM, Mehmet Akcin wrote: >> From: Mehmet Akcin <mehmet(a)akcin.net> >> Subject: DNS BoF at NANOG 53 >> Date: August 19, 2011 3:01:42 AM EDT >> To: "nanog(a)nanog.org list" <nanog(a)nanog.org> >> >> Dear Colleagues, >> >> NANOG PC has accepted our submission for DNS BoF for NANOG 53. >> >> I had also organized DNS BoF at NANOG 51 in Miami, you may some information about it at the link below >> >> http://www.nanog.org/meetings/nanog51/abstracts.php?pt=MTcxNSZuYW5vZzUx&nm=… >> >> Why am I sending this email? >> >> Simply I am trying to find out what would the attendees want to see in this DNS BoF? What other recommendations those who have >> attended the DNS BoF despite the fact that the famous Peering BoF was at the same time =). My goal is to not bore anyone and simply >> provide lots of important updates regarding DNS World. >> >> How can you help? >> >> If you are somewhat interested in providing update regarding your DNS Product, your DNS Service, and / or other DNS related stuff you are working on, >> please don't hesitate to contact me off-list. I have available slots for the upcoming BoF and would love to hear from you. >> >> I will provide more updates in the future regarding DNS BoF and details of it's program. >> >> looking forward to see you all in Philly. >> >> mehmet >

1 0