June 2012 - Test - lists.nanog.org

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)
by Owen DeLong 06 Jun '12

06 Jun '12

On Jun 6, 2012, at 1:02 PM, Steve Clark wrote: > On 06/06/2012 03:05 PM, Owen DeLong wrote: >> >> It is because of IEEE EUI-64 standard. >> >> It was believed at the time of IPv6 development that EUI-48 would run out of >> numbers and IEEE had proposed going to EUI-64. While IEEE still hasn't >> quite made that change (though Firewire does appear to use EUI-64 already), >> it will likely occur prior to the EOL for IPv6. >> >> There is a simple algorithm used by IEEE for mapping EUI-48 onto the EUI-64 >> space. >> >> The 0x02 bit of the first octet of an EUI-64 address is an L-Flag, indicating that >> the address was locally generated (if it is a 1) vs. IEEE/vendor assigned (if it is a 0). >> >> The mapping process takes the EUI-48 address XX:YY:ZZ:RR:SS:TT and maps >> it as follows: >> >> let AA = XX xor 0x02. >> >> AAYY:ZZff:feRR:SSTT >> >> ff:fe above is literal. >> >> IPv6 was originally going to be a 32-bit address space, but, the developers > did you mean "originally going to be a 64-bit address space"... Uh, yeah... Sorry... Brain fart. Originally a 64-bit address space. Owen

1 0

seeking older .com / .net zone files
by Manish Karir 06 Jun '12

06 Jun '12

All, We are working on a project with the University of Michigan related with studying the evolution of .com/.net zones Does anyone have copies of .com / .net zone files around the beginning of 2011? Any help would be greatly appreciated. Thanks. -manish

2 1

RFC5549
by Aris Lambrianidis 06 Jun '12

06 Jun '12

Hello all, In light of World IPv6 Launch day, I would like to raise awareness for RFC5549, "Advertising IPv4 Network Layer Reachability Information with an IPv6 Next Hop" (http://tools.ietf.org/html/rfc5549) As far as I'm aware of, this RFC has yet to be implemented by any vendors so far but it could help massively in the increasing scenarios where IPv4 addressing is scarce. This includes many IXPs which invariably will sooner or later run into this problem. If you happen to be attending the last day of NANOG, I'd be happy to talk to you in person about this for further details (I'm the dude with "RFC5549" written on the back of his laptop). Aris Lambrianidis, AMS-IX

1 0

Trouble viewing slides for Automated Configuration and Validation of a Large Scale Network
by Smith, Courtney 06 Jun '12

06 Jun '12

I am having trouble view the slides for this morning's presentation by Vijay Gill. It appears conversion from power point to a PDF cropped the slides. Can someone else try? Is there an email for reporting issues with the slides? Thanks. http://www.nanog.org/meetings/nanog55/presentations/Tuesday/Gill_Schmidt.pdf

3 2

Re: WEBCAST: Is Asia Pacific and China doing well on IPv6 Deployment? - just started
by Joly MacFie 06 Jun '12

06 Jun '12

> > ** > > [image: isoc-hk] <http://isoc.hk>The Internet Society's Hong Kong > Chapter (ISOC HK <http://www.isoc.hk/>), continuing its pioneering series > of IPv6 events, will mark today June 6 2012 Global IPv6 Launch with a > seminar: 'Is Asia Pacific and China doing well on IPv6 Deployment?<http://www.isoc.hk/2012/04/world-ipv6-launch-x-ipv6-in-action-x-ipv6worldas…>'. > Featured speakers include Geoff Huston of APNIC who will talk about "The > Post - IPocalypse Internet", and Walter Fung of NTT who will address "IPv6 > on Cloud in Asia Pacific". Since HK is EDT+12 the live webcast has just > begun. > > *What:* Is Asia Pacific and China doing well on IPv6 Deployment? > * Where:* Cyberport Hong Kong > *When:* Weds Jun 6 2012 2pm-5.30pm HKT|0600-0930UTC|0200-0530EDT > *Webcast:* http://www.livestream.com/internetsocietychapters > *Hashtags*: #v6launch <http://twitter.com/#!/search?q=%23v6launch> | #ipv6<http://twitter.com/#!/search?q=%23ipv6>| > @isochk <https://twitter.com/#!/search/realtime/%40isochk> > * More info:* http://www.isoc.hk/ > > Comment <http://isoc-ny.org/p2/?p=3541#respond> See all comments<http://isoc-ny.org/p2/?p=3541#comments> > > > *Trouble clicking?* Copy and paste this URL into your browser: > http://isoc-ny.org/p2/?p=3541 > > > > -- > --------------------------------------------------------------- > Joly MacFie 218 565 9365 Skype:punkcast > WWWhatsup NYC - http://wwwhatsup.com > http://pinstand.com - http://punkcast.com > > VP (Admin) - ISOC-NY - http://isoc-ny.org > -------------------------------------------------------------- > - > -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- -

1 0

ATT DSL IPv6
by Grant Ridder 05 Jun '12

05 Jun '12

Hi Everyone, Does anyone know about IPv6 on ATT residential DSL circuits? About 8 or 9 months ago i ran through several IPv6 tests (http://test-ipv6.iad.vr.org/) and they all passed. With all the talk of IPv6 day over the past week i decided to run it again just out of curiosity. However to my surprise, it is returning the result of IPv4 only now. Any ideas why they would have rolled back IPv6? Thanks, Grant

2 2

Drupal-GEO maping
by James Smith 05 Jun '12

05 Jun '12

Hello, I am looking for advise on mapping data in Drupal. We are building a Portal using the Drupal core. i am looking for a way to be able to map ip addresses to countries etc. Is anyone aware of any modules available that could accomplish this task. -- Sincerely; James Smith CEO, CEH, Security Analyst Email: james(a)smithwaysecurity.com Phone: 1877-760-1953 Cell Phone:1506-650-6500 Website: www.SmithwaySecurity.com Address: 1 Yonge Street #1801, Toronto, ON, M5E 1W7 CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. - This communication is confidential to the parties it was intended to serve -

4 5

Penetration Test Assistance
by Green, Timothy 05 Jun '12

05 Jun '12

Howdy all, I'm a Security Manager of a large network, we are conducting a Pentest next month and the testers are demanding a complete network diagram of the entire network. We don't have a "complete" network diagram that shows everything and everywhere we are. At most we have a bunch of network diagrams that show what we have in various areas throughout the country. I've been asking the network engineers for over a month and they seem to be too lazy to put it together or they have no idea where everything is. I've never been in this situation before. Should I be honest to the testers and tell them here is what we have, we aren't sure if it's accurate; find everything else? How would they access those areas that we haven't identified? How can I give them access to stuff that I didn't know existed? What do you all do with your large networks? One huge network diagram, a bunch of network diagrams separated by region, or both? Any pentest horror stories? Thanks, Tim ________________________________ This e-mail and any attachments are intended only for the use of the addressee(s) named herein and may contain proprietary information. If you are not the intended recipient of this e-mail or believe that you received this email in error, please take immediate action to notify the sender of the apparent error by reply e-mail; permanently delete the e-mail and any attachments from your computer; and do not disseminate, distribute, use, or copy this message and any attachments.

18 20

rpki vs. secure dns?
by Paul Vixie 05 Jun '12

05 Jun '12

http://tech.slashdot.org/story/12/04/27/2039237/engineers-ponder-easier-fix… > "The problem: Border Gateway Protocol (BGP) enables routers to > communicate about the best path to other networks, but routers don't > verify the route 'announcements.' When routing problems erupt, 'it's > very difficult to tell if this is fat fingering on a router or > malicious > <http://www.itworld.com/security/272320/engineers-ponder-easier-fix-dangerou…>,' > said Joe Gersch, chief operating officer for Secure64, a company that > makes Domain Name System (DNS) server software. In a well-known > incident, Pakistan Telecom made an error with BGP after Pakistan's > government ordered in 2008 that ISPs block YouTube, which ended up > knocking Google's service offline > <http://slashdot.org/story/08/02/25/1322252/pakistan-youtube-block-breaks-th…>. > A solution exists, but it's complex, and deployment has been slow. Now > experts have found an easier way." this seems late, compared to the various commitments made to rpki in recent years. is anybody taking it seriously?

27 69

Fwd: [arin-announce] IPv4 Countdown Plan Update
by John Curran 05 Jun '12

05 Jun '12

NANOG Folks - Apologies for cross-posting, but this is very important information for all organizations about how requests for IPv4 address space will be handled as we approach runout in this region. FYI (& Thanks!) /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] IPv4 Countdown Plan Update Date: June 5, 2012 10:06:46 AM PDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> On 23 April 2012 during ARIN XXIX in Vancouver, Leslie Nobile, Director of Registration Services gave a presentation on ARIN's plan to manage the distribution of its remaining IPv4 address pool. You can view the presentation at: https://www.arin.net/participate/meetings/reports/ARIN_XXIX/webcast/nobile_… We received some great input and in response have made a few adjustments to the Countdown Plan. * The time window to complete payment and the RSA have been extended from 45 to 60 days. * Reinstatement of a 30 day hold period for returned, revoked and reclaimed resources during the final phase of the countdown, when ARIN supply is at or below one /8 equivalent. * The block size distribution of ARIN's remaining IPv4 inventory is now available on the page and will be updated daily. The ARIN community has worked together over the last several years in developing policy to manage how ARIN allocates and assigns IPv4 addresses. ARIN has reviewed and refined its procedures to create an IPv4 Countdown Plan explaining how IPv4 requests will be processed as the remaining IPv4 address pool is distributed. We have posted the details of the plan at: https://www.arin.net/resources/request/ipv4_countdown.html The IPv4 Countdown is a dynamic process and we will notify the community as we approach and reach the trigger points for each new phase of the plan. ARIN will be updating and adding more information to the IPv4 Countdown page as we move through this process, so we strongly encourage you to pay attention to announcements and keep track of the current IPv4 inventory by monitoring the counter on the ARIN homepage. Because the IPv4 inventory may fluctuate on a daily basis, it is not intended as a tool to guide the timing of your IPv4 resource requests. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0