July 2012 - Test - lists.nanog.org

Contact from slb.com/Schlumberger Limited/Dexanet
by Nathan Eisenberg 24 Jul '12

24 Jul '12

Would a security contact from Schlumberger Limited please contact me off-list? Sorry for the noise. Nathan Eisenberg

1 0

Comcast cable modem software update push
by Dave Sotnick 24 Jul '12

24 Jul '12

Dear Nanog Users, I have recently been plagued by intermittent lockups on my Motorola BitSurfer 6121 cable modem, which I purchased based on Comcast's lists of recommended devices, and having good experience with Motorola products in the past. There's a good discussion on this topic here: http://goo.gl/SfHdh My technical question for the group is: When I finally talk to Comcast Tier 2 this week, what do I need to tell them to convince them that pushing out an update to SB6121 modems is a good idea? They seem convinced the onus is on Motorola to provide updates. This is not how DOCSIS 3.0 works! FWIW, the installed OS is 1.0.3.3 dated Aug 12 2010. The most recent I have heard of is 1.0.6.6. Apparently this fixes the lockups. Any tips greatly appreciated. -Dave

3 3

Pittsburgh IX?
by ML 23 Jul '12

23 Jul '12

I was looking for information on any IX in Pittsburgh. Found PitX [1] ..info is rather limited to say the least. Is there any information out there about participants, size, etc? Are there any other IXes in or near Pittsburgh by chance? I see 3Rox out there but seems to be a R&E network mostly. -ML [1] http://www.pitx.net/

3 2

Reminder: Call for Presentations Open for NANOG 56 in Dallas, TX
by David Temkin 23 Jul '12

23 Jul '12

NANOG Community, After a great NANOG in Vancouver, BC, the survey results are in from 55 and we are already assembling a world-class program for NANOG 56. The North American Network Operators' Group (NANOG) will hold its 56th meeting in Dallas, TX on October 21 - 23, 2012 and join with ARIN on October 24, 2012. Terremark, a Verzion company, will be our host for NANOG 56. The NANOG Program Committee is now seeking proposals for presentations, panels, tutorials, tracks sessions, and keynote materials for the NANOG 56 program. We invite presentations highlighting issues relating to technology already deployed or soon-to-be deployed in the Internet. Vendors are encouraged to work with operators to present real-world deployment experiences with the vendor's products and interoperability. NANOG 56 submissions are welcome at http://pc.nanog.org <http://pc.nanog.org/> For further information on what the Program Committee is seeking, please see http://www.nanog.org/meetings/nanog56/callforpresentations.html When considering submitting a presentation, keep these important dates in mind: Presentation Abstracts and Draft Slides Due: 06-August-2012 Final Slides Due: 27-August-2012 Draft Program Published: 17-September-2012 Final Agenda Published: 1-October-2012 Please submit your materials to http://pc.nanog.org Looking forward to seeing everyone in Dallas! -Dave Temkin (Chair, NANOG Program Committee)

1 0

msn/hotmail email admin needed
by Christian Seitz 23 Jul '12

23 Jul '12

Hello, would an email admin from msm/hotmail please contact me off-list? We have problems sending emails to msn/hotmail from several ip addresses and trying to find someone who can help. Thanks in advance. Sorry for spamming this list, but establishing a direct contact or opening tickets did not work. Regards, Christian Seitz Network Operations -- --------------------------------------------------------------------------- Telefon: +49 (0)30 - 398 02 0 E-Mail : seitz(a)strato-rz.de Website: http://www.strato.de/ --------------------------------------------------------------------------- STRATO AG Pascalstr. 10 10587 Berlin --------------------------------------------------------------------------- Vorsitzender des Aufsichtsrates: Phil Zamani Vorstand: Damian Schmidt (Vorsitz), Julien Ardisson, Christian Mueller, Christoph Steffens, Rene Wienholtz Amtsgericht Berlin-Charlottenburg HRB 79450

2 1

HE Fremont IPv6 tunnel
by Jeroen van Aart 23 Jul '12

23 Jul '12

Recently I migrated the server that's running an HE IPv6 tunnel to one of the Fremont endpoints and now the tunnel is going down for a few minutes every couple of hours or so. I haven't been able yet to find a reason for this. I made sure the old server is not running any IPv6 related things anymore (such as radvd). I am curious if anyone knows if the Fremont endpoints are experiencing some problems? I have barely ever noticed any problems with the IPv6 tunnels so I am pretty sure it's not on HE's side, but I wanted to make sure. Thanks, Jeroen -- Earthquake Magnitude: 4.6 Date: Sunday, July 22, 2012 06:32:50 UTC Location: Santa Cruz Islands region Latitude: -10.6712; Longitude: 164.7985 Depth: 37.00 km

2 3

Postini/google email admin assistance requested
by Lyle Giese 22 Jul '12

22 Jul '12

I run a smaller email filter service for clients and starting Saturday, we are experiencing heavy traffic aimed at one email account. 99% of the traffic is coming from obsmtp.com servers. In the last 24 hrs, we have been getting over 1,000 attempts per hour to this account with a couple of peaks at 4,000 per hour. Not sure if they can help but an offlist contact from them would be nice. Sorry for the noise to the rest! Lyle Giese LCR Computer Services, Inc.

3 2

Re: Attack on UDP 101
by Shahab Vahabzadeh 21 Jul '12

21 Jul '12

Dear Stefan, I have an 7206VXR Router with this design: int gig 0/1: directly connected to 3750 switch (uplink to internet) int gig 0/2: vlan termination from PSTN centers int virtual-template1: xdsl users Its about 4 days that I see near 300Mpbs outbound traffic in int gig0/1 that there is no such a traffic in none of routers interface, but the same traffic is seen in 3750 peer interface. I try to run monitor session on 3750 and monitor port traffic which I see that packet is generating from a user and its in a loop between 3750 and 7206. When I disconnect that user, I see that that packet is in loop again, because of that I am sure its making a loop but I do not know the reseaon is that packets or not. Thanks On Sat, Jul 21, 2012 at 11:02 PM, Stefan Fouant < sfouant(a)shortestpathfirst.net> wrote: > Can you give us more information? What do you mean it is causing Layer 3 > loops? > > Stefan Fouant > > Sent from my HTC on the Now Network from Sprint! > > > ----- Reply message ----- > From: "Shahab Vahabzadeh" <sh.vahabzadeh(a)gmail.com> > Date: Sat, Jul 21, 2012 10:50 am > Subject: Attack on UDP 101 > To: <nanog(a)nanog.org> > > Hi there, > Does any body know any report about attack on UDP Port 101 which make Layer > 3 Loops? > This is an example sniff: > > Source IP Address is : 76.164.199.86 > Source port: 62946 Destination port: 101 > 2012-07-21 11:11:09.646757 > > Thanks > > -- > Regards, > Shahab Vahabzadeh, Network Engineer and System Administrator > > Cell Phone: +1 (415) 871 0742 > PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90 > > > -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

3 4

Attack on UDP 101
by Shahab Vahabzadeh 21 Jul '12

21 Jul '12

Hi there, Does any body know any report about attack on UDP Port 101 which make Layer 3 Loops? This is an example sniff: Source IP Address is : 76.164.199.86 Source port: 62946 Destination port: 101 2012-07-21 11:11:09.646757 Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

2 3

Re: Attack on UDP 101
by Stefan Fouant 21 Jul '12

21 Jul '12

Can you give us more information? What do you mean it is causing Layer 3 loops? Stefan Fouant Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Shahab Vahabzadeh" <sh.vahabzadeh(a)gmail.com> Date: Sat, Jul 21, 2012 10:50 am Subject: Attack on UDP 101 To: <nanog(a)nanog.org> Hi there, Does any body know any report about attack on UDP Port 101 which make Layer 3 Loops? This is an example sniff: Source IP Address is : 76.164.199.86 Source port: 62946 Destination port: 101 2012-07-21 11:11:09.646757 Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

1 0