June 2013 - Test - lists.nanog.org

Re: huawei (ZTE too)
by Bryan Fields 14 Jun '13

14 Jun '13

On 6/13/13 1:35 PM, Warren Bailey wrote: > They are a state controlled company. You think the PRC's party members dont > call the shots? I've been to Beijing for work.. I can assure you the > government has a very known presence through the private community. Often > times, graduates of their state run colleges enter the "private" sector to > help their collective needs. China is an odd place, but in my opinion often > they are underestimated. Look at their stealth plane, that's a good > starting point on their ability to borrow technology and implement it > quickly. It's about numbers over there, not sense. My objection to ZTE/Hauwei when I was at a cellular telco was just this. I said "there was no way I can agree with Chinese nationals having unfettered access to our network". Sure the CLI was crap/nonexistent and full of bugs, but I never thought the product was phoning home. I assumed there was a backdoor, like every other product and this was dealt with via ACL's and bastion boxes. I did not think highly of the product, and did not want to select it. However ZTE made the offer to put 6 support engineers in our main switch office 24/7 for the first year, and open an office down the street. Our SVP creamed himself over this level of "support" and they got the contract. It's an awesome idea, build gear that's cheap enough you can't say no to, and use the support personnel as spies. It provides a perfect cover story to cycle in loads of engineers. Only one or two does the support, the rest can observe/record/share the internal details of everything they see. They are playing our love of "But Wait There's More!". Give us everything at deep discounts or for free and receive direct access to the core of every major telecom company on the planet. For a few hundred million dollars the Chinese government has intelligence on anyone or anything world wide, and their agents are welcomed with open arms. -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

8 9

Re: huawei (ZTE too)
by Keith Medcalf 14 Jun '13

14 Jun '13

There is more than just y'all's in North America . --- Sent from Samsung Mobile -------- Original message -------- From: Jeroen Massar <jeroen(a)massar.ch> Date: To: david peahi <davidpeahi(a)gmail.com> Cc: NANOG list <nanog(a)nanog.org> Subject: Re: huawei (ZTE too)

2 1

Re: huawei
by Scott Weeks 13 Jun '13

13 Jun '13

--- rsk(a)gsp.org wrote: From: Rich Kulawiec <rsk(a)gsp.org> On Thu, Jun 13, 2013 at 06:10:39PM +0200, Randy Bush wrote: > we really should not be putting huawei kit into the backbone, there > might be backdoors where they can spy on our traffic This paper may be relevant to the topic at hand (h/t to Rob Slade): http://www.scribd.com/doc/95282643/Backdoors-Embedded-in-DoD-Microchips-Fro… <snip> Unfortunately, it doesn't appear possible to download this paper without signing up for scribd. Perhaps it's available elsewhere without such onerous requirements. --------------------------------- http://www.cl.cam.ac.uk/~sps32/ches2012-backdoor.pdf scott

2 1

Re: huawei (ZTE too)
by Scott Weeks 13 Jun '13

13 Jun '13

On 2013-06-13 14:28, david peahi wrote: > > Last I heard NANOG stands for North American Network Operators Group. > Anti-American comments are not welcome here.. --------------------------------------------- Smiley? Smiley? I'm looking for the :-) but I don't see one. How about "crazy eyes"? <8-) scott

2 1

Cisco optics in Northern Virginia
by Kevin D 13 Jun '13

13 Jun '13

Does anyone know where I could find a supplier of Cisco (or compatible) optics in Northern Virginia? We're in a pinch in Ashburn and really need to find a GLC-LH-SM locally. Thanks in advance. -Kevin Dougherty

2 2

Re: huawei (ZTE too)
by Bryan Fields 13 Jun '13

13 Jun '13

On 6/13/13 3:41 PM, Mikael Abrahamsson wrote: >> > My objection to ZTE/Hauwei when I was at a cellular telco was just this. >> > I said "there was no way I can agree with Chinese nationals having >> > unfettered access to our network". > Why would anyone outside of the US agree to have US products in their > network, using the same rationale? At least with China they don't pretend > they're not spying on our own population. /me taps nose -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

1 0

Re: huawei
by Joel M Snyder 13 Jun '13

13 Jun '13

If this hasn't been beaten to death, a longer discussion of the threat of Huawei/ZTE is discussed in this article I wrote for Information Security a few months back: http://searchsecurity.techtarget.com/feature/The-Huawei-security-risk-Facto… jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

peeringdb accuracy research
by Job Snijders 13 Jun '13

13 Jun '13

Dear fellow networkers, I need your help! For the good of PeeringDB I am researching the accuracy of the current PeeringDB data set. We plan to compare three sources of information: peeringdb itself, publicly available listings from IXP operators ... and the ultimate source of truth: user submitted information, e.g. your "show bgp sum". Why? I'd rather trust 10 sightings in the wild than one entry in PeeringDB! :-) What can you do? ---------------- We've created a webapp where you can copy + paste the output from your routers' show ip bgp sum / show bgp sum / show ipv6 bgp sum. The webapp extracts the ASN and remote IP for the sessions and store those after your confirmation. Go to the following URL and submit your BGP data now! https://research.peeringdb.com/ If you prefer, you can also submit the data in CSV format [2]. What data are we using, exactly? -------------------------------- Only the following tuples of information are used: (remote_ASN, remote_IP) All other data is purged from the data set: I don't care if you are even exchanging prefixes or how many, nor does it matter what your own ASN is. The _only_ thing that matters is that you confirm that you have a BGP session up and running with a certain remote IP and ASN. You can submit such confirmations by copying + pasting your routers' bgp summaries. Please submit your BGP summaries from all your IXP facing routers! So when will I hear back about this? ------------------------------------ I will present the findings at the upcoming NANOG meeting in New Orleans [1]. Given that the NANOG meeting is approaching rapidly, I urge you to submit your data sooner rather than later. :-) Kind regards, Job Snijders [1] - CSV format should be formatted like column 1: ASN, column 2: remote IP, separated by a comma. example: "5580,195.69.144.229" [2] - http://www.nanog.org/meetings/abstract?id=2140

2 2

Re: Prism continued
by Scott Weeks 12 Jun '13

12 Jun '13

On Jun 12, 2013, at 9:01 PM, "Scott Weeks" <surfer(a)mauigateway.com> wrote: > --- dougb(a)dougbarton.us wrote: > From: Doug Barton <dougb(a)dougbarton.us> > > On 06/12/2013 05:13 PM, Scott Weeks wrote: >> "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" > > Prototypical "useless use of cat" :) > ----------------------------------------------------- > > > What would you use and what's wrong with concatenation > of a file with nothing? 1+0=1 ;) --------------------------------------- Wow, a person gets corrected quickly here! ;-) And the answer is... "egrep -v 'term1|term2|term3' /var/log/router.log | less" All I can say is DOH! :-) scott

1 0

Re: Prism continued
by Scott Weeks 12 Jun '13

12 Jun '13

--- dougb(a)dougbarton.us wrote: From: Doug Barton <dougb(a)dougbarton.us> On 06/12/2013 05:13 PM, Scott Weeks wrote: > "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Prototypical "useless use of cat" :) ----------------------------------------------------- What would you use and what's wrong with concatenation of a file with nothing? 1+0=1 ;) scott

1 0