September 2013 - Test - lists.nanog.org

Re: iOS 7 update traffic
by Nick Olsen 19 Sep '13

19 Sep '13

IOS7 was released (Yesterday?). Due to the large number of IOS devices out in the world. Some network operators experienced large spikes in traffic as each device was updated (Downloading the update). You see the same thing happen when new software is released from people like Microsoft. Or, If you're a gamer. When a new game is released on a digitally delivered platform like Steam or EA's Origin. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Paul Ferguson" <fergie(a)people.ops-trust.net> Sent: Thursday, September 19, 2013 1:58 PM To: nick(a)flhsi.com, nanog(a)nanog.org Subject: Re: iOS 7 update traffic Can someone please explain to a non-Apple person what the hell happened that started generating so much traffic? Perhaps I missed it in this thread, but I would be curious to know what iOS 7 implemented that caused this... Thanks in adavnce, - ferg On 9/19/2013 10:23 AM, Nick Olsen wrote: > We also saw a huge spike in traffic. Still pretty high today as well. > We saw a ~60% above average hit yesterday, And we're at ~20-30% above > average today as well. > Being an android user, It didn't dawn on me until some of the IOS users in > the office started jumping up and down about IOS7 > Nick Olsen > Network Operations (855) FLSPEED x106 > > ---------------------------------------- > From: "Justin M. Streiner" <streiner(a)cluebyfour.org> > Sent: Wednesday, September 18, 2013 6:19 PM > To: "NANOG" <nanog(a)nanog.org> > Subject: Re: iOS 7 update traffic > > On Wed, 18 Sep 2013, Tassos Chatzithomaoglou wrote: > >> We also noticed an interesting spike (+ ~40%), mostly in akamai. >> The same happened on previous iOS too. > > I see it here, too. At its peak, our traffic levels were roughly double > what we would see on a normal weekday. > > jms > >> Zachary McGibbon wrote on 18/9/2013 20:38: >>> So iOS 7 just came out, here's the spike in our graphs going to our ISP >>> here at McGill, anyone else noticing a big spike? >>> >>> [image: internet-sw1 - Traffic - Te0/7 - To Internet1-srp (IR Canet) - >>> TenGigabitEthernet0/7] >>> >>> Zachary McGibbon >>> >> >> >> > > > > -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington USA IID --> "Connect and Collaborate" --> www.internetidentity.com

1 0

.gov DNSSEC operational message
by Wessels, Duane 19 Sep '13

19 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please note that as of today, the .gov zone's transition from algorithm 7 to 8 is now complete. Duane W. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJSOzJ+AAoJEGyZpGmowJiNrssIAKIO9Sd/+ALFEwMDC8xMx4XH xd98ii4ZH5FdnXnWURv0oaPqz5D9lMziXiPzIYyJ9AgMSUeqBxWRCYk+1SluGUM3 U2XHGCJy53LuF4cXa6UmfWSPu7YIWnMDKNy2GtTKQB5s+SsUWjz3CdFEyh5X3idq eR6Bihww0nuJs5HZvB9l1IDH3CuDcGhpgWYsJ2x9FjmNyTpKylJ+4UNnIfz3chGk st6gK2PBZKTApCoLxgO0yHJ2iJZLXARrDCudy7dqtUdyaGqEpBWwdoexxVpHv2gj ZGilU3+LqlTt0SPzCLgNkdIHuf/0c/dVnTjjkgIa/YQRpqAY39ZiHftKISpImt0= =IWe3 -----END PGP SIGNATURE-----

1 0

Re: iOS 7 update traffic
by Nick Olsen 19 Sep '13

19 Sep '13

We also saw a huge spike in traffic. Still pretty high today as well. We saw a ~60% above average hit yesterday, And we're at ~20-30% above average today as well. Being an android user, It didn't dawn on me until some of the IOS users in the office started jumping up and down about IOS7 Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Justin M. Streiner" <streiner(a)cluebyfour.org> Sent: Wednesday, September 18, 2013 6:19 PM To: "NANOG" <nanog(a)nanog.org> Subject: Re: iOS 7 update traffic On Wed, 18 Sep 2013, Tassos Chatzithomaoglou wrote: > We also noticed an interesting spike (+ ~40%), mostly in akamai. > The same happened on previous iOS too. I see it here, too. At its peak, our traffic levels were roughly double what we would see on a normal weekday. jms > Zachary McGibbon wrote on 18/9/2013 20:38: >> So iOS 7 just came out, here's the spike in our graphs going to our ISP >> here at McGill, anyone else noticing a big spike? >> >> [image: internet-sw1 - Traffic - Te0/7 - To Internet1-srp (IR Canet) - >> TenGigabitEthernet0/7] >> >> Zachary McGibbon >> > > >

1 0

Yahoo contact
by Chu, Yi [NTK] 19 Sep '13

19 Sep '13

I have an issue with Yahoo geolocator for an IP block. Anybody from yahoo, please contact me offline. Yi Chu IP Engineering Sprint (703) 592-4850 ________________________________ This e-mail may contain Sprint proprietary information intended for the sole use of the recipient(s). Any use by others is prohibited. If you are not the intended recipient, please contact the sender and delete all copies of the message.

1 0

[NANOG-announce] NANOG 59 Reminders
by Betty Burke <betty＠nanog.org> 19 Sep '13

19 Sep '13

Colleagues: I write to share a few NANOG meeting reminders: - Routing Fundamentals<http://www.nanog.org/meetings/education/routing_fundamentals/home>, NANOGs first Education class, will take place Sunday October 6, 2013. The Class registration fee<http://www.nanog.org/meetings/education/routing_fundamentals/educationregis…> includes a one-day pass to attend NANOG 59. Be sure to pass along the information to those who may not be on the NANOG list and could benefit from our NANOG experience. - NANOG 59 <http://www.nanog.org/meetings/nanog59/home>, Oct. 7-9, 2013, is full of great content, check out the agenda<https://www.nanog.org/meetings/nanog59/preagenda>topics list posted by the NANOG Program Committee. Early next week, the PC will be posting the preliminary agenda with times and speakers. - If you have not yet secured your room, do not delay. The Sheraton Wild Horse <http://www.nanog.org/meetings/nanog59/hotelinformation> will be a fabulous place for our meeting. A free shuttle service will be available on Monday and Tuesday evenings. Thanks to our sponsors, we also have a full slate of evening socials. - Do not delay, register today<http://www.nanog.org/meetings/nanog59/registration>, and take advantage of registration fee savings. The current registration rate will expire on Friday, September 20, 2013. You can register, manage your registration, and retrieve receipts from the NANOG portal (ARO)<https://secretariat.nanog.org/login>. You can easily create a new account, or recover your password<https://secretariat.nanog.org/ibin/c5i?rid=48> . - Be sure to Join NANOG today <http://www.nanog.org/membership> and receive a $25 discount on standard registration fees for any NANOG - conference as well as have a voice in guiding future NANOG activities. - NANOGs Fall meeting also includes the important election process. If you are onsite or remote, please participate through service and voting in the 2013 NANOG Elections process<https://www.nanog.org/governance/elections/2013>. Of note, the nominations for Board Candidates<https://www.nanog.org/elections/2013/board_of_directors>also expires on Friday, September 20, 2013. - Lastly, a few NANOG 59 Sponsorship opportunities<http://www.nanog.org/sponsors/opportunities>remain. If interested send a note to marketing(a)nanog.org, or visit our online sponsorship form<http://www.nanog.org/sponsors/inquiry>. A member of the Development Committee will be sure to follow-up. We look forward to seeing many of you at NANOG 59! Should you have any questions, please send them along to nanog-support(a)nanog.org. All best. Betty -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

common method to count traffic volume on IX
by Martin T 19 Sep '13

19 Sep '13

Hi, many Internet exchange points post publicly available graphs which describe aggregated traffic volumes on IX. For example: Netnod: http://www.netnod.se/ix-stats/sums/ AMS-IX: https://www.ams-ix.net/technical/statistics LINX: https://www.linx.net/pubtools/trafficstats.html Is there a common method to count this traffic on a switch-fabric? Just read all the switch interface "packets input" counters with an interval to get the aggregated input traffic and read all the switch interfaces "packets output" counters to get the aggregated output traffic? regards, Martin

15 28

The block message is 521 DNSRBL: Blocked for abuse
by NANOG 19 Sep '13

19 Sep '13

We recently purchased new IP addresses from ARIN, with plans on using one of them for our external and internal email delivery. We set up a reverse lookup and a SPF record for the newly purchased IP to prevent being classified as spam. We tested the functionality of the PTR and SPF record successfully using varies internet tools like dnsstuff.com, mxtoolbox.com, and kitterman.com. Unfortunately, when we send emails to any AT&T or Network Solutions hosted email we are being block as a spam abuser. I checked varies spam database tools and our IP addresses are not listed, but we are still being blocked by both AT&T and Network Solution. The block message is 521 DNSRBL: Blocked for abuse. In an attempt to be proactive, I contacted Network Solution and was told that each recipient would have to request we be whitelisted, and AT&T directed me to an online form that I submitted to be removed from the blacklist. Unfortunately, we are still not able to send emails to either AT&T or Network Solutions hosted emails. Our mail server IP address is 74.112.99.25, which resolves to mail.abcsupply.com. Does anyone have any suggestions on where to turn next? Is it possible they are blocking us based on old information from the previous IP address block owner? Any help tracking this down would be appreciated. Derrick Wash Microsoft Systems Administrator ABC Supply Company Inc Office: (608)368-2214 Fax: (608)363-0214

7 6

Re: [liberationtech] Brazil Looks to Break from U.S.-Centric Internet
by Eugen Leitl 18 Sep '13

18 Sep '13

----- Forwarded message from Bill Woodcock <woody(a)pch.net> ----- Date: Wed, 18 Sep 2013 09:25:13 -0700 From: Bill Woodcock <woody(a)pch.net> To: liberationtech <liberationtech(a)lists.stanford.edu> Subject: Re: [liberationtech] Brazil Looks to Break from U.S.-Centric Internet X-Mailer: Apple Mail (2.1508) Reply-To: liberationtech <liberationtech(a)lists.stanford.edu> On Sep 18, 2013, at 8:28 AM, David Johnson <David.Johnson(a)aljazeera.net> wrote: > Interesting ... but is this even possible? > http://world.time.com/2013/09/18/brazil-looks-to-break-from-u-s-centric-int… Well, there are a bunch of different concepts being discussed. The primary one is localization of routing, which isn't just possible, it's best-practice, and something Brazil has been doing an excellent job of already for quite a few years. If you look at https://pch.net/applications/ixpdir/summary/ you'll see that they've got 23 active exchanges, which puts them second in the world after the U.S., with 77% annualized growth, compared to 10% in the U.S. If you look at the Brazil section of https://pch.net/ixpdir you'll see that almost all of that growth has been occurring since they made it an explicit policy goal in 2008, and began aggressively implementing IXP best-practices. At a governance level, Brazil is divided. The CGI, which decides and implements domestic Internet policy, is the agency responsible for all this growth and best-practices-following. As such, they've been largely aligned with OECD-country and Internet interests. The Brazilian federal government, on the other hand, sets foreign policy, interacts with the ITU, et cetera. And so although it has no appreciable influence over what happens _within_ the country, it's what's seen by other national governments in diplomatic circles. In Internet governance, Brazil tends toward this Brazil-India-South Africa axis, which doesn't particularly align with the Internet or OECD countries, unless by accident. This is the area that Internet folks are most worried about, since those three countries are second-tier thought-leaders in the ITU, and can swing a lot of developing-country votes in their respective regions. So Brazil is, in many ways, the U.S.' opposite: they do the right thing domestically, but say the wrong thing internationally. -Bill -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys(a)stanford.edu. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

2 1

mlb.com Geolocation clue/contact needed
by Heather Schiller 18 Sep '13

18 Sep '13

Anyone have a contact at mlb.com that could help resolve an ip geolocation issue? (Networking, db.. or someone who can help find the right folks) Alternatively, anyone know who mlb.com buys geolocation data from? It's related to their baseball game streaming/subscription service. Whitelisting individual users is not a scalable solution. offline answers are welcome too -- Thanks, --Heather

1 0

rr.com contact please
by goemon＠anime.net 17 Sep '13

17 Sep '13

Can someone from rr.com please contact me. Your abuse desk seems to believe this netblock does not belong to you: network:Class-Name:network network:ID:NETBLK-ISRC-24.39.128.0-17 network:Auth-Area:24.39.128.0/17 network:Org-Name:Road Runner Commercial network:Tech-Contact:ipaddreg@rr.com network:Updated:2013-09-16 10:40:06 network:IP-Network:24.39.128.0/17 network:Admin-Contact:IPADD-ARIN network:IP-Network-Range:24.39.128.0 - 24.39.255.255 -Dan

4 5