April 2015 - Test - lists.nanog.org

Re: macomnet weird dns record
by Larry Sheldon 15 Apr '15

15 Apr '15

On 4/14/2015 08:26, Colin Johnston wrote: > Because looks strange especially if the traffic is 100% bad Best > practice says avoid such info in records as does not aid debug since > mix of dec and hex Which is precisely why spammers have been doing it for years. -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their mistakes. Quis custodiet ipsos custodes

1 0

Cisco/Level3 takedown
by Sameer Khosla 14 Apr '15

14 Apr '15

Was just reading http://blogs.cisco.com/security/talos/sshpsychos then checking my routing tables. Looks like the two /23's they mention are now being advertised as /24's, and I'm also not sure why cisco published the ssh attack dictionary. It seems to me that this is something that if they want to do, they should be working with entire service provider community, not just one provider. Thanks Sameer Khosla Managing Director Neutral Data Centers Corp. Twitter: @skhoslaTO

30 49

Nonprofits - Office 365
by Ryan Finnesey 14 Apr '15

14 Apr '15

I apologize for the somewhat off topic post but I would assume some of you might get asked for tech advice from your favorite nonprofits or charity's. I am looking for nonprofits that would be able to make use of free Office 365 licenses and discounted Office 365 Pro Plus licenses at $2 each. This donation would also come with free consulting services to setup Office 365 and migrate any data. Cheers Ryan

2 2

NANOG Mailman upgrade - Saturday, April 18th
by Larry J. Blunk 14 Apr '15

14 Apr '15

The NANOG Mailman version will be upgraded on Saturday, April 18th at 7:00AM EDT. The new version supports wrapping emails which have strict DMARC enforcement set in order to prevent the emails from bouncing and causing members to be unsubscribed. We anticipate the upgrade to take no more than 15 minutes, during which time the NANOG mail server will not accept new messages. Any messages sent at this time should be queued and delivered after the server upgrade. Regards, Larry Blunk NANOG Communications Committee

1 0

About the thread "Cisco Routers Vulnerability"
by Dario Ciccarone 13 Apr '15

13 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rashed, NANOG members: Hi there. My name is Dario Ciccarone and I work as an Incident Manager on the Cisco PSIRT - the Product Security Incident Response Team. We saw your email to the NANOG list, with the subject "Cisco Routers Vulnerability". At this time, we're not aware of any attempts to exploit either a known or previously unknown vulnerability on any Cisco devices running Cisco IOS, Cisco IOS XE, Cisco IOS XR, Cisco NX-OS or any other Cisco operating systems. We invite you to follow-up with us directly by emailing the PSIRT alias, or by using any of the mechanisms listed at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy… Thanks, Dario Dario Ciccarone Incident Manager - CCIE #10395 Product Security Incident Response Team (PSIRT) Cisco Systems, Inc. PGP Key ID: 0xBA1AE0F0 http://www.cisco.com/go/psirt -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iEYEARECAAYFAlUsRjcACgkQjJUYH7oa4PD5WwCcCk0l6bxnLEuBu4q0rwb7CLMU jXQAnjgvDscnF8hHBhRWB5o8iHALDmsu =dg/d -----END PGP SIGNATURE-----

1 0

Multi-gigabit edge devices as CPE
by Daniel Rohan 12 Apr '15

12 Apr '15

I work at a state REN and we are seeking a lead for a new edge device for on prem deployment at customer sites. We currently deploy two classes of routers-- a high end and a low end. Both the high end and the low end use some of the standard edge features: MPLS-TE, MBGP, flowspec, vrf, PIM, etc. We deliver full tables over these devices to the customers that need them. We recently finished a new ethernet procurement and have a large number of sites (~200) moving from <1Gbps in bandwidth to 1-10Gb in bandwidth. Our currently deployed low-end router can't handle these speeds and we can't afford to place our high end router at 200+ sites. So, we're looking for a middle tier router to deploy. Something with 2+ SFP+ ports, software that can handle the aforementioned features, and something with an API that we can leverage for programmatic management. So far we've not found anything that checks all the boxes. Layer 3 switches seem like obvious choices, but lack some of the features and RIB/FIB we need at the edge. Other devices like the Juniper MX5/10 certainly meet the requirements, but are priced way beyond what we can afford. Any suggestions for devices we might have overlooked? Preferably in the less than 10K per unit price point. If such a magical device exists. -Dan

14 28

Netflix guessing game
by MKS 11 Apr '15

11 Apr '15

Being a network operator in a region where Netflix doesn't operate, we are still seeing significant Netflix traffic on our network. Our magic 8-ball sees about 1000 concurrent users/streams @peak hour. Does someone have an educated guess (or a more accurate answer;) how many actual subscribers we have on our network, 10k, 15k or 20k subscribers? Offline answers are also fine Regards MKS

1 0

Open Letter RE:Cyber Threat Info Sharing Bills
by Jeremy Gillula 11 Apr '15

11 Apr '15

Dear colleagues, As many of you know, the US Congress is currently considering various <https://www.eff.org/document/cisa-2015-reported-senate-floor-after-ssci-mar…> bills <https://www.eff.org/deeplinks/2015/03/congress-takes-obama-administrations-…> which some of its <http://blogs.wsj.com/washwire/2015/02/25/senate-in-break-from-past-holds-cl…> members <http://www.huffingtonpost.com/2014/12/02/burr-senate-intelligence_n_6258162…> think will help fight Internet security threats via increased information sharing between companies and the government. Unfortunately, not only are these new information sharing powers unnecessary, the bills' broad immunity clauses for companies <https://www.eff.org/deeplinks/2013/03/consequences-cispas-broad-legal-immun…>, vague definitions <https://www.eff.org/cybersecurity-bill-faq#copyright>, and aggressive spying powers <https://www.eff.org/deeplinks/2012/04/yes-cispa-could-allow-companies-filte…> essentially make them secret surveillance bills--and more government surveillance of the Internet is the last thing we need right now. I'm writing you today to ask you to sign on to an open letter to Congress, which explains the fallacy of these bills <https://www.eff.org/deeplinks/2015/03/senate-intelligence-committee-advance…> to politicians who probably don't understand the intricacies of the network security world. This is the fifth <https://www.govtrack.us/congress/bills/111/s773> time <https://beta.congress.gov/bill/113th-congress/house-bill/624> in <https://www.govtrack.us/congress/bills/112/s2105/text> as many <https://www.govtrack.us/congress/bills/113/s1353> years that Congress has tried to pass "cybersecurity" legislation. Fortunately (with the help of many of you <https://www.eff.org/deeplinks/2012/04/open-letter-academics-and-engineers-u…> on this list) we've been successful in preventing such misguided legislation in the past./*If you're willing to sign on and help today, please email me directly (off list) */and I will be happy to share a copy of the letter for you to review before you agree to sign on. The more signatures we can get, the more likely Congress is to listen. All it takes is an email. Please help us make sure politicians get the message: we don't need new legal authorities to share information that will help keep the systems and people we protect safe from future attacks. Thank you for your support, -- | Jeremy Gillula, Ph.D. | Staff Technologist | Electronic Frontier Foundation | (415) 436-9333 x158 | jeremy(a)eff.org | @the_zeroth_law | GPG Key Fingerprint: | 4DCF A726 7C7D E327 7DD6 | 863E A25B 3CE6 2CAC 7BE9

1 0

CFP: IEEE International Conference on Network Protocols (ICNP)
by Srihari Nelakuditi 10 Apr '15

10 Apr '15

Call for Papers IEEE ICNP 2015 http://icnp15.cs.ucr.edu/ ICNP, the IEEE International Conference on Network Protocols, is the premier conference on network protocols, covering all aspects of network protocol research, including design, analysis, specification, verification, implementation, and performance. Sponsored by the IEEE, ICNP 2015 is the 23rd edition of the conference, to be held in San Francisco, CA, USA from Nov. 10-13, 2015. ====================================================================== Important dates Paper Submission May 8, 2015, 7:59 PM EST (FIRM) Acceptance Notification June 30, 2015 Camera Ready Version Aug 15, 2015 ====================================================================== We invite papers with significant, original research contributions to the field of network protocols for submission. Topics of interest include, but are not limited to: * All aspects of network protocol research including design, specification, verification, implementation, measurement, testing, and analysis * Domain-specific solutions, including protocols for network security, Internet of Things, routing, user privacy, network management, and data centers * Application-layer protocols for peer-to-peer systems, social networks, and emerging systems * Contributions to network architecture, e.g., specific algorithms and protocols for software defined networks, network virtualization, or future Internet architectures ICNP 2015 will select an accepted full paper for the best paper award. Up to two of the best papers from ICNP will be fast-tracked in the IEEE/ACM Transactions on Networking, with a streamlined journal review process. Acceptance of fast-tracked papers in ToN is not guaranteed, but is more likely than a regular submission. Submission Guidelines * All papers should adhere to the IEEE Computer conference paper formatting requirements (IEEEtran.cls) and should not exceed 10 pages with font size no smaller than 10 pt (details can be found on the submission guidelines and formatting page). * ICNP uses a double-blind review process. The identity of authors and referees will not be revealed to each other. To ensure double-blind reviewing, author names and affiliations should not appear in the paper; bibliographic references should be made in such a way as to preserve author anonymity; acknowledgement with identifiable names and funding sources should be removed. Note that own work should be cited as a third person. Papers violating this double-blind review policy will be rejected without review. * Authors need to indicate on their paper’s submission page all TPC members with whom they have conflicts of interest. * Every paper MUST be presented by an author at the conference. The author list MUST remain the same as when the paper was submitted for review, and any changes in the author list or title is forbidden without prior written permission from the TPC Co-Chairs. At least one author of an accepted paper is expected to register at the full rate of the conference and to present the paper at the conference, in order for the paper to appear in the conference proceedings and be submitted to the IEEE digital library. Papers not presented by an author at the conference will not be published in the proceedings or submitted for inclusion in the IEEE digital library. Integrity Policy Submitted papers should not be previously published nor under review by another conference or journal. In some cases, the ICNP chairs may share information about submitted papers with other conference chairs and journal editors to ensure the integrity of papers under consideration. Authors are prohibited from informing any TPC member of any identifiable information (such as titles) of their submissions. Also, papers containing plagiarized material will be subject to the IEEE plagiarism policy and will be rejected without review. Organizing Committee General Co-Chairs: Srikanth V. Krishnamurthy, University of California, Riverside Prasant Mohapatra, University of California, Davis TPC Co-Chairs: Aditya Akella, University of Wisconsin, Madison Vishal Misra, Columbia University Steering Committee: Kevin Almeroth, University of California, Santa Barbara Ken Calvert, University of Kentucky Sonia Fahmy, Purdue University Mohamed Gouda, University of Texas, Austin Timothy G. Griffin, University of Cambridge Teruo Higashino, Osaka University David Lee, HP Labs K.K. Ramakrishnan (Chair), University of California, Riverside Krishan Sabnani, Bell Laboratories ======================================================================

1 0

BGP Update Report
by cidr-report＠potaroo.net 10 Apr '15

10 Apr '15

BGP Update Report Interval: 02-Apr-15 -to- 09-Apr-15 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS23752 261532 5.9% 3189.4 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 2 - AS10029 235469 5.3% 516.4 -- CITYCOMNETWORKS-AS CITYCOM NETWORKS PVT LTD,IN 3 - AS61894 173372 3.9% 43343.0 -- FreeBSD Brasil LTDA,BR 4 - AS9829 173306 3.9% 129.5 -- BSNL-NIB National Internet Backbone,IN 5 - AS22059 111920 2.5% 55960.0 -- APVIO-1 - Apvio, Inc.,US 6 - AS36947 82214 1.8% 464.5 -- ALGTEL-AS,DZ 7 - AS28573 78974 1.8% 23.0 -- NET Serviços de Comunicação S.A.,BR 8 - AS21669 76722 1.7% 19180.5 -- NJ-STATEWIDE-LIBRARY-NETWORK - New Jersey State Library,US 9 - AS3709 75043 1.7% 2779.4 -- NET-CITY-SA - City of San Antonio,US 10 - AS53563 48173 1.1% 48173.0 -- XPLUSONE - X Plus One Solutions, Inc.,US 11 - AS33529 42180 0.9% 7030.0 -- PEAK-WEB-HOSTING - Peak Web Hosting Inc.,US 12 - AS36903 41807 0.9% 102.7 -- MT-MPLS,MA 13 - AS28661 41058 0.9% 651.7 -- HOTLINK INTERNET LTDA,BR 14 - AS7303 34218 0.8% 36.8 -- Telecom Argentina S.A.,AR 15 - AS8402 30100 0.7% 44.5 -- CORBINA-AS OJSC "Vimpelcom",RU 16 - AS25563 28028 0.6% 9342.7 -- WEBLAND-AS Webland AG, Autonomous System,CH 17 - AS7713 26716 0.6% 3339.5 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 18 - AS46230 26596 0.6% 1266.5 -- DUDROP - Dignitas Technology Inc,US 19 - AS39891 20395 0.5% 10.3 -- ALJAWWALSTC-AS Saudi Telecom Company JSC,SA 20 - AS197914 19528 0.4% 19528.0 -- STOCKHO-AS Stockho Hosting SARL,FR TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS22059 111920 2.5% 55960.0 -- APVIO-1 - Apvio, Inc.,US 2 - AS53563 48173 1.1% 48173.0 -- XPLUSONE - X Plus One Solutions, Inc.,US 3 - AS61894 173372 3.9% 43343.0 -- FreeBSD Brasil LTDA,BR 4 - AS197914 19528 0.4% 19528.0 -- STOCKHO-AS Stockho Hosting SARL,FR 5 - AS21669 76722 1.7% 19180.5 -- NJ-STATEWIDE-LIBRARY-NETWORK - New Jersey State Library,US 6 - AS18135 9965 0.2% 9965.0 -- BTV BTV Cable television,JP 7 - AS393588 9523 0.2% 9523.0 -- MUBEA-FLO - Mubea,US 8 - AS201576 9399 0.2% 9399.0 -- TCBANK-AS Tver City Bank, Joint Stock Company,RU 9 - AS25563 28028 0.6% 9342.7 -- WEBLAND-AS Webland AG, Autonomous System,CH 10 - AS46336 8960 0.2% 8960.0 -- GOODVILLE - Goodville Mutual Casualty Company,US 11 - AS199121 8008 0.2% 8008.0 -- FLEXOPTIX Flexoptix GmbH,DE 12 - AS44951 7437 0.2% 7437.0 -- EFONDS-AS eFonds Solutions AG,DE 13 - AS33529 42180 0.9% 7030.0 -- PEAK-WEB-HOSTING - Peak Web Hosting Inc.,US 14 - AS60673 5374 0.1% 5374.0 -- ACTIVCOM Activcom Kft,HU 15 - AS61294 5370 0.1% 5370.0 -- STIHLHU-AS Andreas Stihl Kereskedelmi Kft,HU 16 - AS61570 18888 0.4% 4722.0 -- ENTERIW PROVEDOR DE INTERNET LTDA,BR 17 - AS20386 3360 0.1% 3360.0 -- MOVE-VAN - Move Sales, Inc.,US 18 - AS7713 26716 0.6% 3339.5 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 19 - AS23752 261532 5.9% 3189.4 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 20 - AS33440 12190 0.3% 3047.5 -- WEBRULON-NETWORK - webRulon, LLC,US TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 177.10.158.0/24 173355 3.7% AS61894 -- FreeBSD Brasil LTDA,BR 2 - 202.70.88.0/21 130756 2.8% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 3 - 202.70.64.0/21 130078 2.8% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 4 - 105.96.0.0/22 79375 1.7% AS36947 -- ALGTEL-AS,DZ 5 - 209.212.8.0/24 76674 1.6% AS21669 -- NJ-STATEWIDE-LIBRARY-NETWORK - New Jersey State Library,US 6 - 76.191.107.0/24 55992 1.2% AS22059 -- APVIO-1 - Apvio, Inc.,US 7 - 64.34.125.0/24 55928 1.2% AS22059 -- APVIO-1 - Apvio, Inc.,US 8 - 199.38.164.0/23 48173 1.0% AS53563 -- XPLUSONE - X Plus One Solutions, Inc.,US 9 - 69.194.4.0/24 42167 0.9% AS33529 -- PEAK-WEB-HOSTING - Peak Web Hosting Inc.,US 10 - 118.98.88.0/24 26724 0.6% AS64567 -- -Private Use AS-,ZZ AS7713 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 11 - 130.0.192.0/21 19528 0.4% AS197914 -- STOCKHO-AS Stockho Hosting SARL,FR 12 - 177.128.221.0/24 18759 0.4% AS61570 -- ENTERIW PROVEDOR DE INTERNET LTDA,BR 13 - 91.193.202.0/24 15126 0.3% AS42081 -- SPEEDY-NET-AS Speedy net EAD,BG 14 - 192.58.232.0/24 10115 0.2% AS6629 -- NOAA-AS - NOAA,US 15 - 134.162.82.0/24 10056 0.2% AS7303 -- Telecom Argentina S.A.,AR 16 - 134.162.83.0/24 10013 0.2% AS7303 -- Telecom Argentina S.A.,AR 17 - 134.162.84.0/24 9974 0.2% AS7303 -- Telecom Argentina S.A.,AR 18 - 42.83.48.0/20 9965 0.2% AS18135 -- BTV BTV Cable television,JP 19 - 92.43.216.0/21 9592 0.2% AS25563 -- WEBLAND-AS Webland AG, Autonomous System,CH 20 - 192.58.137.0/24 9523 0.2% AS393588 -- MUBEA-FLO - Mubea,US Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0