August 2012 - Test - lists.nanog.org

ARIN Governance - Seeking Nominations for the ARIN Board, AC, and NRO NC
by John Curran 28 Aug '12

28 Aug '12

NANOGers - There are only a few days left to nominate folks for election to the the ARIN Board of Trustees, the ARIN Advisory Council (AC), or on the Number Resource Organization (NRO) Number Council. Please see the attached message for details, and move promptly to nominate if you are aware of anyone who would do a good job serving the community in such a capacity. Thank you! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] Seeking Nominations: Board, AC, and NRO NC Date: August 28, 2012 11:23:24 AM EDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> General Members in good standing are invited to nominate candidates for two (2) seats on the Board of Trustees (Board), five (5) seats on the Advisory Council (AC), and one (1) seat on the Number Resource Organization (NRO) Number Council that become open when current terms expire on 31 December 2012. The Board of Trustees and Advisory Council elections have a Nomination Committee (NomCom) that is responsible for identifying, recruiting, and certifying a properly selected slate of candidates to be placed in nomination before the membership for election. This year's NomCom members are: Board of Trustee members Timothy Denton and Scott Bradner, Advisory Council members Chris Grundemann and Kevin Blumberg, and general member volunteers Stephen Middleton, Justin Clutter, and Peter Rocca. Timothy Denton is serving as NomCom Chair. New Board and Advisory Council terms begin 1 January 2013. Board members Paul Andersen and Scott Bradner, and Advisory Council representatives Stacy Hughes, Chris Morrow, Bill Sandiford, Robert Seastrom, and Heather Schiller will conclude their current terms on 31 December 2012. Louie Lee’s seat for the NRO NC also becomes open this year. Incumbents may be re-elected for consecutive terms. Please note: 1. You must be a Trustee or an ARIN General Member in good standing to make nominations for the Board and AC. However, those nominated do not need to be ARIN members. Self-nominations from General Members in good standing are permitted. Any individual, regardless of ARIN membership status, may nominate one or more candidates for any open NRO Number Council position. Please review the nomination instructions at: https://www.arin.net/participate/elections/instructions.html#nominate 2. All nominees must confirm that they qualify to serve and do not violate the Nomination and Appointment Conflict of Interest List at: https://www.arin.net/participate/elections/conflicts.html 3. Nominations must be received by 17:00 ET on Tuesday, 4 September 2012. In accordance with ARIN's Bylaws, each Trustee or General Member in good standing may make up to three nominations for each open seat for the Board and AC. 4. Each nominee must submit the relevant nominee questionnaire by 6 September in order to run for a position they are available at: Board and AC: https://www.arin.net/participate/elections/elec_procedures.html#botcv NRO NC: https://www.arin.net/participate/elections/nronumbercouncil.html#nccv If you are interested in nominating yourself or any other individual to become a member of the Board, AC, or NRO NC, visit ARIN Election Headquarters to fill out the nomination form: https://www.arin.net/app/election/ ARIN will contact all nominees via email and/or telephone to verify that they are willing and able to fulfill a three-year term. If ARIN cannot reach the nominee, the nomination will be rejected. You may view the initial requirements and responsibilities of Board Members at: https://www.arin.net/about_us/bot_requirements.html The Advisory Council requirements and responsibilities are available at: https://www.arin.net/about_us/ac_requirements.html The NRO NC requirements and responsibilities can be viewed at: https://www.arin.net/about_us/nronc_requirements.html Visit Election Headquarters to view the qualifications for Board of Trustees and Advisory Council positions and for further information regarding the election process and timeline. Now is also a good time for member organizations to check to make certain that they have a Designated Member Representative (DMR) eligible to vote in the upcoming election. Direct any questions to info(a)arin.net<mailto:info@arin.net>. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN)

1 0

Optical network simulator
by Walter Keen 28 Aug '12

28 Aug '12

Does anyone happen to know of an optical network simulator? I'm trying to examine the behaviour of a 3-8 node sonet ADM ring using 2-fiber UPSR when one interface has intermittent severely errored seconds.

4 4

Bizarre (.bz) abuse report - are we alone?
by Jay Hennigan 28 Aug '12

28 Aug '12

OK, we're pretty vigilant about policing abusers on our network. This just showed up from "no-reply(a)abuse.bz". Please see my responses inline. Mail origin IP is from an ISP in the Netherlands. Some information redacted to protect the guilty. Is this type of thing typical these days and we're just lucky so far and behind the curve on the futility of trying to take action on reports of network abuse? -------- Original Message -------- Subject: Re: Illegal activity from 207.71.241.252 Date: Sun, 26 Aug 2012 19:13:39 -0700 From: Jay Hennigan <jay(a)west.net> To: [redacted] CC: [redacted] Sent to RIPE WHOIS contacts for mail origin IP [redacted]. On 8/25/12 3:29 PM, no-reply(a)abuse.bz wrote: > We have noticed illegal activity from [redacted] aimed at one of our servers. > Please disable these brute force attempts, port scans and/or neighbour scanning technologies. > If you are not sure how to, please use Google to find more information about the SPT/DPT (source/destination port). > Alternatively, consult with your system administrator, forums, communities and any other sources of help. > > PLEASE NOTE: We have replaced our own IP with 127.0.0.1 for privacy and security purposes. > The destination IP address does not matter because you should solve your exploits properly instead of nullrouting our IP. > With the exact time, IP address, source port and destination port you have plenty of information to address this issue. > Our IP address is not mentioned anywhere and there are no DNS records pointed to it - hence we know your IP address is being abusive. This report isn't particularly helpful. In fact, it in itself is somewhat abusive of our time. First, I had to dig through the headers of the email to find a (hopefully) deliverable address to which I could respond. Second, these logs seem to be two attempts to visit a website within a very short period of time. Two tries each on TCP 80 and TCP 443. Hardly what most reasonable people would call a brute force attempt, port scan, etc. No typical exploit ports, no brute force hammering, just an attempt to connect to a web server, retried once for 80 and 443. Do you think it would be reasonable for us to query our customer and ask if someone there might have fat-fingered a web address on one of 70+ workstations yesterday, or that someone at any of tens of thousands of nameservers worldwide has fat-fingered the A record of some random website? This report appears to be robot-generated, and deliberately designed to make it difficult for a human to reply, being sent from a write-only mailbox. By masking the destination IP of a web request, you make it rather difficult to track it down in the event that it is indeed abusive in the first place. NOC personnel and resources are a finite resource. You appear to be robo-sending abuse reports that are: 1. Sent from a write-only mailbox 2. Containing logs deliberately modified to prevent tracking the abuse 3. Depicting activity that doesn't appear to be abusive Already, abuse departments at ISPs are generally shorthanded. This type of thing is even more likely to cause legitimate reports to be ignored. If you feel that this warrants further attention, please respond with a message that is: 1. Sent by a human being. 2. Has a deliverable reply address. 3. Demonstrates activity that indeed constitutes abuse. 4. Contains logs of the abuse sufficient for us to take action against our customer (such as the IP address being abused, or at least the subnet). > Here are our raw firewall logs, limited to 100 lines with timezone Central European Time. There is also an timestamp since epoch (UNIX time). > == > [2012-08-25 01:01:30 CET] [Timestamp: 1345849290] [11883637.767804] Firewall: *TCP_IN Blocked* IN=eth0 OUT= SRC=[redacted] DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=64182 DF PROTO=TCP SPT=56463 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 > [2012-08-25 01:01:31 CET] [Timestamp: 1345849292] [11883639.265682] Firewall: *TCP_IN Blocked* IN=eth0 OUT= SRC=[redacted] DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=44605 DF PROTO=TCP SPT=57003 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0 > [2012-08-25 01:01:38 CET] [Timestamp: 1345849299] [11883646.105990] Firewall: *TCP_IN Blocked* IN=eth0 OUT= SRC=[redacted] DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=39054 DF PROTO=TCP SPT=33537 DPT=443 WINDOW=5840 RES=0x00 SYN URGP=0 > [2012-08-25 01:01:38 CET] [Timestamp: 1345849299] [11883646.411775] Firewall: *TCP_IN Blocked* IN=eth0 OUT= SRC=[redacted] DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=37931 DF PROTO=TCP SPT=33645 DPT=443 WINDOW=5840 RES=0x00 SYN URGP=0 > -- -- Jay Hennigan - CCIE #7880 - Network Engineering - jay(a)impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV

6 8

Sprint Outage - Chicago
by John Schneider 27 Aug '12

27 Aug '12

Sprint appears to be having major network issues in the Chicago area. Confirmed by sprint as CRS down in Chicago affecting multiple customers nationwide.

6 6

stanford-biologist-computer-scientist-discover-anternet
by Andre Gironda 27 Aug '12

27 Aug '12

? http://engineering.stanford.edu/news/stanford-biologist-computer-scientist-…

3 2

AfPIF webcast
by Joly MacFie 26 Aug '12

26 Aug '12

Bill Norton is talking about the founding of nanog at the AfPIF right now Webcast http://bit.ly/isoctv -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- -

3 4

Re: In need of C6500 in Orlando later today
by Graham Wooden (Personal) 25 Aug '12

25 Aug '12

Vology got us what we needed. Kudos to all who helped!! Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Graham Wooden (Personal)" <graham(a)g-rock.net> Date: Sat, Aug 25, 2012 1:58 pm Subject: In need of C6500 in Orlando later today To: "Positively Optimistic" <positivelyoptimistic(a)gmail.com> Cc: <nanog(a)nanog.org> Thanks for the offer Joe. AL is just too far. I'll let you know if I can't find something closer to Orlando. Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Positively Optimistic" <positivelyoptimistic(a)gmail.com> Date: Sat, Aug 25, 2012 11:58 am Subject: In need of C6500 in Orlando later today To: "Graham Wooden (Personal)" <graham(a)g-rock.net> Cc: <nanog(a)nanog.org>

1 0

Re: In need of C6500 in Orlando later today
by Graham Wooden (Personal) 25 Aug '12

25 Aug '12

Thanks for the offer Joe. AL is just too far. I'll let you know if I can't find something closer to Orlando. Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Positively Optimistic" <positivelyoptimistic(a)gmail.com> Date: Sat, Aug 25, 2012 11:58 am Subject: In need of C6500 in Orlando later today To: "Graham Wooden (Personal)" <graham(a)g-rock.net> Cc: <nanog(a)nanog.org>

1 0

Re: In need of C6500 in Orlando later today
by Positively Optimistic 25 Aug '12

25 Aug '12

Have a 6513- w 2 poker supplies and fan. Call me 3345967565 On Aug 25, 2012 8:47 AM, "Graham Wooden (Personal)" <graham(a)g-rock.net> wrote: > Our grey market vendor miss-shipped a Cisco 6506 chassis that was needed > today. Very slim chance that it will make it to me this afternoon. > > Anyone in the Orlando area with a spare C6506/9 chassis that they'll be > looking to sell? Need Fan1 and (2) 1300w power supplies. I brought the Sups > with me. > > Please let me know offline. Need it this afternoon. Thanks. > > Sent from my HTC on the Now Network from Sprint!

1 1

Re: In need of C6500 in Orlando later today
by Graham Wooden (Personal) 25 Aug '12

25 Aug '12

I am driving in from the FL pan handle area. If you have a chassis to sell, please let me know asap. I'll drive to you as FedEx just called and not be delivering today so expanding the search. 228-233-0696. Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Graham Wooden (Personal)" <graham(a)g-rock.net> Date: Sat, Aug 25, 2012 9:47 am Subject: In need of C6500 in Orlando later today To: <nanog(a)nanog.org> Our grey market vendor miss-shipped a Cisco 6506 chassis that was needed today. Very slim chance that it will make it to me this afternoon. Anyone in the Orlando area with a spare C6506/9 chassis that they'll be looking to sell? Need Fan1 and (2) 1300w power supplies. I brought the Sups with me. Please let me know offline. Need it this afternoon. Thanks. Sent from my HTC on the Now Network from Sprint!

1 0