March 2013 - Test - lists.nanog.org

Cisco password implementation trubs: weakened strength?
by jamie rishaw 21 Mar '13

21 Mar '13

warning: I'm tired and this email is terse. warning: for huge nerds only. disclaimer: although I've worked with actual rocket scientists(hi Roger), I'm. not one myself..nor am I a crypto mathnerd apparently, Cisco is changing its password schemas. old: pbkdf2 by 1k, salted vs New: (type 4) unsalted sha256 .. discuss.? there is a cert and Cisco sa on this.. but I'm wondering if anyone has any opinions, yea or nay.? -j.

4 3

NYC sales contacts for AS209 and AS2914
by Jason Lixfeld 20 Mar '13

20 Mar '13

The contacts I have seem to all bounce. If anyone from NTT or CenturyLink is lurking who can quote on wholesale IPT out of 60 Hudson, please ping me. Thanks.

1 0

ILNP FTW ... Was Re: [c-nsp] DNS amplification
by cb.list6 19 Mar '13

19 Mar '13

On Mar 19, 2013 8:26 PM, "David Conrad" <drc(a)virtualized.org> wrote: > > Leo, > > On Mar 19, 2013, at 11:57 AM, Leo Bicknell <bicknell(a)ufp.org> wrote: > > In a message written on Tue, Mar 19, 2013 at 11:33:33AM -0700, David Conrad wrote: > >> LISP doesn't replace BGP. It merely adds a layer of indirection so you don't have to propagate identity information along with routing topology, allowing much greater aggregation. > > The problem with LISP is that when the complexity of the entire > > system is taken into account it is not signficantly more efficient > > than the current system. > > When was the last time you (as a network operator) cared about the efficiency of the entire system? > > LISP (and similar) system are inherently more complex because they're adding a new element to the network -- TANSTAAFL. The point is that the complexity is added at the edge where it is easy/cheap (per node or site). Yes, entire system complexity goes up. However from the perspective of the core where life is fast/expensive, complexity goes down since identity is separated from location. > As I see it, that is the fundamental problem with LISP. It wants edge investment to solve a core problem. I don't carry full routes in my core, but LISP wants me to do something to solve a problem I don't have. And, that something looks a lot like an ATM SVC (dynamic tunnels ?) That said, IMHO, ILNP is a lot more interesting in the locator / id split space.... As well as general evolution of internet architecture. LISP just has had better marketing and simpler code. Ya know, this problem would also largely be solved if everyone just switched to ipv6 and stopped using those disjointed tiny v4 blocks. Oh, but that would break Skype. Nevermind. CB > > A LISP network is a similar model, with LISP nodes caching rather than linecards. > > You're comparing the equivalent of a DNS lookup with a FIB lookup. Yes, there is a performance hit when you do the mapping of identity to location (TANSTAAFL), however this is at the edge in the millisecond DRAM-stored connection initiation world, not in the core in the nanosecond SRAM-stored packet forwarding world. > > Regards, > -drc > >

1 0

Call for Papers: Energy-Efficient HPC & Communication workshop (E2HPC2) 2013. Deadline: March 29th, 2013
by Javier Garcia Blas 19 Mar '13

19 Mar '13

Apologies for multiple posting. ===================================================================== The first Energy-Efficient High Performance Computing & Communication workshop will be co-located with EuroMPI 2013 in Madrid. Energy-awareness is now a main topic for HPC systems. The goal of this workshop is to discuss latest researches on the impact and possibles leverages of communications for such systems. E2HPC2 solicits original and non-published or under-review articles on the field of energy-aware communication in HPC environment. This workshop is co-located with EuroMPI as MPI is the main communication interface in those environments. http://www.irit.fr/~Georges.Da-Costa/e2hpc2.html E2HPC will be held on Tuesday 17th of September 2013. Submission of full papers: March 29th, 2013 Program Chair : Georges Da Costa Topics ------ Relevant topics for the conference include, but are not limited to the following: * Energy efficient MPI implementation * Performance/Energy tradeoffs in MPI programs * Energy evaluation and models of HPC applications and communication library * Energy-Aware large scale HPC runtime * Return of experience on complex applications from an energy/power point of view Time-line --------- * Submission of full papers: March 29th, 2013 * Author notification: May 11th, 2013 * Camera Ready papers due: June 15th, 2013 * Workshop: September 17th, 2013 Program Committee ----------------- * Georges Da Costa IRIT/Toulouse III * Jesus Carretero Universidad Carlos III de Madrid * Emmanuel Jeannot INRIA * Jean-Marc Pierson IRIT * Lars Dittmann Technical University of Denmark, Department of Photonics Engineering * Anne-CÃ©cile Orgerie CNRS * Ariel Oleksiak Poznan Supercomputing and Networking Center * Manuel F. Dolz Depto. de IngenierÃa y Ciencia de los Computadores, Universitat Jaume I * Laurent Lefevre INRIA * Julius Åœilinskas Vilnius University * Francisco Almeida La Laguna University * Davide Careglio Universitat PolitÃšcnica de Catalunya Submission ---------- Contributors are invited to submit a full paper as a PDF document not exceeding 6 pages in English. The title page should contain an abstract of at most 100 words and five specific, topical keywords. The paper must be formatted according to double-column ACM ICPS proceedings style. The usage of LaTeX for preparation of the contribution as well as the submission in camera ready format is strongly recommended. Style files can be found at http://www.acm.org/publications/icps-instructions/. Selected and presented during the workshop papers will be published in the digital library of ACM. All contributions will be fully peer reviewed by the program committee. Papers shall be submitted electronically via Easychair, see https://www.easychair.org/conferences/?conf=e2hpc22013.

1 0

Metasolv / Business Objects
by James Wininger 19 Mar '13

19 Mar '13

Anyone on the list have experience with Metasolv and or Business Objects (SAP)? We have Metasolv and are using it today, but its reporting mechanism seems to be an afterthought. To that end Business Objects (from SAP) seems the be "the solution", but from what I have seen so far I am less than impressed. Can anyone offer some insight? -- Jim Wininger jwininger(a)ifncom.net

1 0

using ARIN IP space outside of ARIN region
by Andy Litzinger 19 Mar '13

19 Mar '13

We're looking at building into a DC in Europe this year and I wanted to run a few questions by the community and make sure I'm not too far off course. We currently have v4 space from ARIN and operate a multihomed datacenter in the US. This thread from September 2012, though the reverse of my situation, makes it seem like I should be able to work with ARIN to satisfy all of our v4 and v6 needs regardless of where in the world I plan to advertise the space. Obviously this would be really convenient for us since we already have a relationship with ARIN. http://mailman.nanog.org/pipermail/nanog/2012-September/052137.html So my questions are: * Is it ok/recommended to advertise v4 ARIN space (say a /23) to my upstream ISPs in Europe? * Is it ok/recommended to advertise v6 ARIN space to my upstream ISPs in Europe? (I suspect we'll get a /44 block to carve up since we fit in the "more than one but less than 12 sites" category) * Should I use a single AS for both North America and European data centers? It will be the same small team managing them today but it's not like the sites are linked together to form any kind of transit network. Also, is there a European version of RADB with which I should plan to register my prefixes? thanks! - andy

8 7

Bandwidth.com SIP trunking issue
by Nanog Mailing List 19 Mar '13

19 Mar '13

Hello, I am curious if anyone else whom may use Bandwidth.com for their SIP trunks are receiving the "All circuits are busy now" error message today. This just started this morning, and nothing has changed in machine configuration since yesterday (when everything worked correctly). Thanks for the heads up. -Bret Worldlink ISP 206-361-8785

1 0

WW: Bruce Schneier on why security can't work
by Jay Ashworth 19 Mar '13

19 Mar '13

http://www.wired.com/opinion/2013/03/security-when-the-bad-guys-have-techno… Three words: "desktop gene sequencing", "ebola", "script kiddies". I dunno how to fix it either. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

13 22

Cisco Security Response: Cisco IOS and Cisco IOS XE Type 4 Passwords Issue
by Cisco Systems Product Security Incident Response Team 18 Mar '13

18 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS and Cisco IOS XE Type 4 Passwords Issue Document ID: 33464 Revision 1.0 For Public Release 2013 March 18 16:00 UTC (GMT) +--------------------------------------------------------------------- Cisco Response Summary ====================== This is the Cisco response to research performed by Mr. Philipp Schmidt and Mr. Jens Steube from the Hashcat Project on the weakness of Type 4 passwords on Cisco IOS and Cisco IOS XE devices. Mr. Schmidt and Mr. Steube reported this issue to the Cisco PSIRT on March 12, 2013. A limited number of Cisco IOS and Cisco IOS XE releases based on the Cisco IOS 15 code base include support for a new algorithm to hash user-provided plaintext passwords. This algorithm is called Type 4, and a password hashed using this algorithm is referred to as a Type 4 password. The Type 4 algorithm was designed to be a stronger alternative to the existing Type 5 and Type 7 algorithms to increase the resiliency of passwords used for the 'enable secret password' and 'username username secret password' commands against brute-force attacks. For additional information please see the full Cisco Security Response at the link below. Cisco would like to thank Mr. Schmidt and Mr. Steube for sharing their research with Cisco and working toward a coordinated disclosure of this issue. This Cisco Security Response is available at: http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org iF4EAREIAAYFAlFHFKYACgkQUddfH3/BbTpPQAD/S/gS0O+btwWu5rI7rugYeRzD m38z8zGANgZ9IlEz/OoA/RZVrhrJJ1eRTlHo0/IHuYK3AYUtT5cA8PprIJoUX1Qg =R0TE -----END PGP SIGNATURE-----

1 0

Verizon FIOS filtering?
by Harry Hoffman 18 Mar '13

18 Mar '13

Hi All, Does anyone know if Verizon automatically performs network filtering in response to scanning behavior? I'm having some weird connectivity issues to a host and trying to figure out why. Cheers, Harry

2 3