July 2012 - Test - lists.nanog.org

Domain changer statistics by ASN
by Andrew Fried 05 Jul '12

05 Jul '12

As many of you probably know, the replacement nameservers operated on behalf of the FBI for the Domain Changer Working Group (DCWG) are scheduled to go down Sunday morning (GMT). Yesterday, July 4th, was a holiday in the US, and as such the US based activity hitting the DCWG nameservers was uncharacteristically low. The numbers seen in the rest of the world were normal. I'm attaching a report that shows the number of unique ip addresses that were seen hitting the DCWG nameservers from the 4th based on ASN. If you control one of the ASNs seen in the list please remind your folks that these numbers need to come down by Sunday. if you find this of use, I can regenerate new reports later this afternoon with data from the 5th. Andy -- Andrew Fried andrew.fried(a)gmail.com

3 4

cisco.com's IPv6 sites have a routing loop
by Frank Bulk 05 Jul '12

05 Jul '12

Two of Cisco's IPv6 sites, www-v6.cisco.com and www.ipv6.cisco.com, are in a routing loop: 13 10gigabitethernet11-4.core1.sjc2.he.net (2001:470:0:1b4::1) 84.519 ms 82.710 ms 81.033 ms 14 10gigabitethernet3-2.core1.pao1.he.net (2001:470:0:32::2) 81.821 ms 81.826 ms 83.413 ms 15 ciscosystems.v403.core1.pao1.he.net (2001:470:0:1ee::2) 86.730 ms 86.694 ms 110.206 ms 16 sjck-dmzbba-gw1-v6-g1-2.cisco.com (2001:420:80:6:c67d:4fff:fe8b:e2c0) 88.269 ms 88.128 ms 88.067 ms 17 sjck-ispa-gw1-v6-g0-0-2.cisco.com (2001:420:80:6:ca4c:75ff:fe34:7482) 111.224 ms 87.687 ms 87.867 ms 18 sjck-dmzbba-gw1-v6-g1-2.cisco.com (2001:420:80:6:c67d:4fff:fe8b:e2c0) 88.117 ms 87.956 ms 88.234 ms 19 sjck-ispa-gw1-v6-g0-0-2.cisco.com (2001:420:80:6:ca4c:75ff:fe34:7482) 87.879 ms 87.804 ms 103.848 ms 20 sjck-dmzbba-gw1-v6-g1-2.cisco.com (2001:420:80:6:c67d:4fff:fe8b:e2c0) 88.339 ms 88.367 ms 88.574 ms ... noc(a)cisco.com doesn't work and I can't seem find any of Cisco's NOC-related email addresses in any list that I have. Hopefully someone from Cisco is lurking. Frank Bulk

2 1

Re: job screening question
by Scott Weeks 05 Jul '12

05 Jul '12

-------------------------------------- Cc: "nanog(a)nanog.org" <nanog(a)nanog.org> Subject: Re: job screening question Date: Thu, 5 Jul 2012 15:05:01 -0600 Isn't MTU discovery on IP and not TCP? -------------------------------------- https://en.wikipedia.org/wiki/Path_MTU_discovery scott

1 0

F-ckin Leap Seconds, how do they work?
by Paul WALL 05 Jul '12

05 Jul '12

Comments? Drive Slow Paul

53 136

Re: job screening question
by Nick Olsen 05 Jul '12

05 Jul '12

+1 I have people waive the "I'm Cisco Certified" flag in my face all the time. Then proceed to ask me if we have a T1. To the point that it's no longer a valuable achievement in my eyes. I'm certified to perform CPR in the state of Florida... I should go apply for a surgeon position at the local hospital. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "James M Keller" <jmkeller(a)houseofzen.org> Sent: Thursday, July 05, 2012 1:19 PM To: "Oliver Garraux" <oliver(a)g.garraux.net>, nanog(a)nanog.org Subject: Re: job screening question On 7/5/2012 1:11 PM, Oliver Garraux wrote: > Seems fairly straightforward to me. It'll break path MTU discovery. > > I would hope someone applying for an "IP expert" position would know that. > > Could HR be mangling the question or something? > > Oliver > > ------------------------------------- > > Oliver Garraux > Check out my blog: www.GetSimpliciti.com/blog > Follow me on Twitter: twitter.com/olivergarraux > > > On Thu, Jul 5, 2012 at 1:02 PM, William Herrin <bill(a)herrin.us> wrote: >> Hi folks, >> >> I gave my HR folks a screening question to ask candidates for an IP >> expert position. I've gotten some "unexpected" answers, so I want to >> do a sanity check and make sure I'm not asking something unreasonable. >> And by "unexpected" I don't mean naively incorrect answers, I mean >> oh-my-God-how-did-you-get-that-cisco-certification answers. >> >> The question was: >> >> You implement a firewall on which you block all ICMP packets. What >> part of the TCP protocol (not IP in general, TCP specifically) >> malfunctions as a result? >> >> >> My questions for you are: >> >> 1. As an expert who follows NANOG, do you know the answer? Or is this >> question too hard? >> >> 2. Is the question too vague? Is there a clearer way to word it? >> >> 3. Is there a better screening question I could pass to HR to ask and >> check the candidate's response against the supplied answer? >> >> Thanks, >> Bill Herrin >> >> >> -- >> William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us >> 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> >> Falls Church, VA 22042-3004 >> > You would be surprised by some of the people I get off the street applying for senior network engineering positions who couldn't connect up a SOHO router and a dumb switch and make them work, let alone understand how PMTU discovery works. -- --- James M Keller

1 0

ipv6forum.com/nav6.org contacts
by Wouter Prins 05 Jul '12

05 Jul '12

hi all, Is there anyone active on this list who is actively working on/at ipv6forum.com/nav6.org? I tried to contact both administrative and technical contacts listed under the domain, but no response so far. Please unicast me in case you do. :) Thanks in advance! -- Wouter Prins wp(a)null0.nl

2 1

Re: Cisco Update
by Edward Salonia 05 Jul '12

05 Jul '12

Let's remember, this is regarding Cisco's consumer grade routers (formerly linksys) which are primarily intended for connecting small networks (homes, offices) to the internet over some type of broadband connection. Can they be used. On a network with no internet connectivity? Sure. But this, as I'm sure many will agree, is not the environment in which they were intended to be deployed. Nor do I believe are they marketed as such. - Ed ------Original Message------ From: Jon Lewis To: Sean Harlow Cc: nanog(a)nanog.org Subject: Re: Cisco Update Sent: Jul 5, 2012 12:42 PM On Thu, 5 Jul 2012, Sean Harlow wrote: > On Jul 5, 2012, at 11:24, Joe Greco wrote: > >> And what happens when your *cough* "router" isn't actually on the >> Internet? How can it be managed and upgraded on a regular old network? > > If there is no internet connection, you get a very limited page that's apparently only really good to get you back online. Routers are sometimes used on networks that don't have internet connectivity [by design]. This seems amazingly short-sighted for a company that's been around selling routing gear as long as cisco. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

1 0

IPv6 security tools released
by Fernando Gont 05 Jul '12

05 Jul '12

Folks, A bunch of IPv6 security tools I produced these last couple of years have been posted online at: <http://ipv6securitylab.org/ipv6toolbox.html>. Not sure whether this was really intended, but since a number of folks have already noted (off-list) that this "release" has been announced on a number of pages and twitter accounts, I thought it would be better to let you guys know about it (i.e., "the cat is out of the bag, already"). The tools compile & run on Linux and *BSD, and I'm planning to port them to Mac OS too (if only I had such a box... sigh :-) ). Any feedback will be welcome. P.S.: The slideware at: <http://www.si6networks.com/presentations/hip2012/fgont-hip2012-hacking-ipv6…> might give you some hints regarding how to use some of the tools. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

2012 Global IPv6 Deployment Survey - Please take a moment to complete!
by John Curran 05 Jul '12

05 Jul '12

NANOG Folks - IPv6 - You may love it (or hate it) but either way it would be good to take just a few moments to complete the Global IPv6 Deployment Survey (see attached). The survey is being conducted in cooperation with the Regional Internet Registries in order to better understand IPv6 deployment trends. Global IPv6 Deployment Survey: <https://www.surveymonkey.com/s/GlobalIPv6survey2012> Thanks! /John John Curran President and CEO ARIN === Global IPv6 Deployment Survey Extended to 13 July 2012 Our thanks to those who have completed the 2012 IPv6 Deployment Monitoring Survey. If you have not yet participated, there is still time! The survey has been extended to Friday, 13 July. If you haven¹t yet, we would appreciate if you could take a few minutes to complete the survey at: https://www.surveymonkey.com/s/GlobalIPv6survey2012 The purpose of the survey is to better understand what can be done to increase IPv6 adoption worldwide. The findings from the 2012 survey will be compared to previous years to give a perspective on progress in various regions and globally. For those interested, the results of last year's survey are available at: http://www.nro.net/wp-content/uploads/ipv6_deployment_survey.pdf. The results will be presented and discussed widely. Please provide your name and contact information on the survey form if you wish to receive the draft survey analysis when available. Please also indicate whether you are willing to share additional data with the TNO and GNKS Consult IPv6 Deployment Monitoring team. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to: info(a)gnksconsult.com<mailto:info@gnksconsult.com> Regards, Communications and Member Services American Registry for Internet Numbers (ARIN

1 0

ACTA rejected by EU Parliment
by Patrick W. Gilmore 05 Jul '12

05 Jul '12

<http://www.bbc.com/news/technology-18704192> This is very good news, IMHO. And operationally relevant, even to North American operators. -- TTFN, patrick

1 0