September 2015 - Test - lists.nanog.org

Re: Extraneous "legal" babble--and my reaction to it.
by Scott Weeks 06 Sep '15

06 Sep '15

--- larrysheldon(a)cox.net wrote: From: Larry Sheldon <larrysheldon(a)cox.net> On 9/6/2015 14:18, Scott Weeks wrote: > --- rdrake(a)direcpath.com wrote: > From: Robert Drake <rdrake(a)direcpath.com> > > Maybe people could adopt an unofficial-official > end-of-signature flag. Then you could have > procmail strip everything after the flag: > ----------------------------------------- > > It could be much easier. Folks that care about the > mailing list rules, want to be courteous to list > folks and want to use their company email, rather > than one that inserts no disclaimer, could put 15 > lines of blank as part of their signature. This > would force all the crap far enough down the page > that it wouldn't be bothersome. Since nobody uses Telebit Trailblazers anymore--that is probably not a bad idea. ------------------------------------------- https://en.wikipedia.org/wiki/The_Times_They_Are_a-Changin'_%28song%29 :-) scott

1 0

Re: Software Defined Networking
by Larry Sheldon 06 Sep '15

06 Sep '15

On 9/4/2015 09:40, Rod Beck wrote: > Can anyone provide references on this top so I can educate myself? > > This e-mail and any attachments thereto is intended only for use by > the addressee(s) named herein and may be proprietary and/or legally > privileged. If you are not the intended recipient of this e-mail, you > are hereby notified that any dissemination, distribution or copying > of this email, and any attachments thereto, without the prior written > permission of the sender is strictly prohibited. If you receive this > e-mail in error, please immediately telephone or e-mail the sender > and permanently delete the original copy and any copy of this e-mail, > and any printout thereof. All documents, contracts or agreements > referred or attached to this e-mail are SUBJECT TO CONTRACT. The > contents of an attachment to this e-mail may contain software viruses > that could damage your own computer system. While Hibernia Networks > has taken every reasonable precaution to minimize this risk, we > cannot accept liability for any damage that you sustain as a result > of software viruses. You should carry out your own virus checks > before opening any attachment. > All of that for 11 1/2 words? Ineducable. -- sed quis custodiet ipsos custodes? (Juvenal)

6 5

Re: Extraneous "legal" babble--and my reaction to it.
by Larry Sheldon 06 Sep '15

06 Sep '15

On 9/6/2015 14:18, Scott Weeks wrote: > > > --- rdrake(a)direcpath.com wrote: > From: Robert Drake <rdrake(a)direcpath.com> > > Maybe people could adopt an unofficial-official > end-of-signature flag. Then you could have > procmail strip everything after the flag: > ----------------------------------------- > > > It could be much easier. Folks that care about the > mailing list rules, want to be courteous to list > folks and want to use their company email, rather > than one that inserts no disclaimer, could put 15 > lines of blank as part of their signature. This > would force all the crap far enough down the page > that it wouldn't be bothersome. Since nobody uses Telebit Trailblazers anymore--that is probably not a bad idea. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Extraneous "legal" babble--and my reaction to it.
by Larry Sheldon 06 Sep '15

06 Sep '15

On 9/6/2015 11:46, Robert Drake wrote: > Maybe people could adopt an unofficial-official end-of-signature flag. > Then you could have procmail strip everything after the flag: > -- > This is my signature > My phone number goes here > I like dogs > -- end of signature -- > Everything below here and to the right of here was inserted by my > mailserver, which is run by lawyers who don't understand you can't > enforce contracts through emails to public mailing lists. Please delete > if you're not the intended recipient. > > > Of course, when you route around something like this it usually comes > back 10 fold, but maybe if it became worthless they might do things the > right way and put stuff like this in email headers. > > X-Optional-Flags: Delete-if-not-intended-recipient, > might-contain-secret-company-information-we-didn't-bother-to-encrypt > > Then let the email clients try to work out what that means. Please see https://en.wikipedia.org/wiki/Signature_block I thought that was in rfc 2822, but I can not find it. > -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Extraneous "legal" babble--and my reaction to it.
by Larry Sheldon 06 Sep '15

06 Sep '15

Y'all can stop thumping on me about it "because it is required by the employer". After contemplating my navel for a while, it dawned on me that my sensitivity is due to an old wound. Years ago, Faculty, Staff, Students, and myriad others more or less loosely connected with my employer complained that they could never make contact with me. As a defensive measure (among others) I crafted a .sig that contained all of the telephone numbers and email addresses by which I could be reached (included a pager number) 7 x 24 x 52 with (guaranteed) no more than 20 minute delay. It ran to 7 lines, including the dash dash space EOL protocol sentinel. I was banned from NANOG because of the excessive length. (And yes, I got banned for other things at other times as well, mostly having to to do with trying to protect the network I administered from abuse.) -- sed quis custodiet ipsos custodes? (Juvenal)

4 3

Re: internet visualization
by Larry Sheldon 05 Sep '15

05 Sep '15

On 9/5/2015 19:15, Jared Mauch wrote: > > OT: hit delete, or shameless plug disclaimer > > one of my colleagues just posted this visualiation > of the internet from the as_path view of 2914. if you are on > a mobile, you have to physically move your device around. > > http://as2914.net/ > > If you love it, send Job your accolades. If you hate it, > see above disclaimer. If in a country with a holiday on monday, > enjoy it safely. FarOUT! Outstanding. Please forward my accolades. (Is a "you are here" possible?) > > - Jared > -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

weather.gov invalid ssl cert
by Grant Ridder 05 Sep '15

05 Sep '15

If someone that works with or knows someone who works with weather.gov (National Weather Service) please take a look at this. I did a whois on weather.gov and there is no contact info. www.weather.gov is serving an akami cert weather.gov is serving a NWS SAN cert that does not cover weather.gov (includes www though) username@hostname ~ $ echo quit | openssl s_client -connect weather.gov:443 | openssl x509 -text depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority verify error:num=19:self signed certificate in certificate chain verify return:0 DONE Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:c1:cb:fa:c1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU= http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2 Validity Not Before: Nov 13 20:54:35 2014 GMT Not After : Nov 17 17:33:22 2015 GMT Subject: OU=Domain Control Validated, CN=ucc.weather.gov Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Modulus (2048 bit): 00:9d:36:e8:eb:5d:00:1d:ce:ab:f2:6a:3f:83:5a: 39:29:dd:95:e9:bd:58:d7:2b:0f:67:5a:16:20:97: 2d:4c:96:e1:3c:cc:8f:2f:16:88:ae:fe:9c:15:d0: 67:f1:c9:0d:5c:c0:ae:3f:36:32:aa:90:1d:03:bb: d2:91:73:86:74:5f:e3:41:f2:e2:77:b3:5e:1c:a9: cc:9c:68:3a:99:3a:de:7a:19:bd:6a:70:a1:9f:3f: 1f:ec:c3:63:fd:e9:f5:e6:44:14:0d:db:ae:b4:46: fe:a8:b0:d7:07:01:ea:68:10:7f:9f:c8:f7:5a:20: 05:1d:77:47:d7:13:d1:f0:b8:8f:d2:94:a0:36:29: 95:c2:fd:3e:bc:80:14:1f:22:a2:5a:d0:56:5b:e6: 51:e1:94:3c:4c:dd:63:ae:81:42:7c:5e:87:f5:0c: b8:6f:37:f4:a6:53:f6:56:5e:c8:ec:57:f8:ec:0c: 7d:e0:11:7f:3d:07:8c:37:38:4e:05:8e:cd:46:b3: 21:a3:c1:2f:96:ee:e2:d7:5f:ed:8c:1c:6d:88:d7: 17:ba:90:d8:cb:49:2e:8d:4f:ca:bf:8c:53:da:f7: 38:9c:bc:e1:6c:ac:8a:62:27:d1:ec:dc:59:a9:3b: 62:07:68:3b:bd:d0:06:35:79:26:2d:83:4d:69:00: f3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 CRL Distribution Points: URI:http://crl.godaddy.com/gdig2s1-87.crl X509v3 Certificate Policies: Policy: 2.16.840.1.114413.1.7.23.1 CPS: http://certificates.godaddy.com/repository/ Authority Information Access: OCSP - URI:http://ocsp.godaddy.com/ CA Issuers - URI: http://certificates.godaddy.com/repository/gdig2.crt X509v3 Authority Key Identifier: keyid:40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE X509v3 Subject Alternative Name: DNS:ucc.weather.gov, DNS:www.ucc.weather.gov, DNS: alerts.weather.gov, DNS:nwschat.weather.gov, DNS:vpn.weather.gov, DNS: www.weather.gov X509v3 Subject Key Identifier: 01:7D:76:D9:61:68:EB:50:F7:C4:26:02:DC:94:56:62:45:0B:5B:58 Signature Algorithm: sha256WithRSAEncryption 96:4e:70:45:46:f8:69:80:48:b8:88:86:cd:06:2b:7b:d6:f1: 6b:0b:d8:89:ab:e8:9a:c0:f1:a8:99:0c:69:45:f8:a7:fb:ef: af:b3:6b:0d:41:bd:4d:3c:76:11:10:89:fa:8f:12:a5:47:27: 50:44:e7:37:93:f3:6b:84:f2:66:34:0d:99:69:13:da:dd:08: 32:6c:30:be:2e:af:8b:25:aa:9a:40:bf:61:35:a9:d9:2d:da: 97:b0:0c:e6:98:72:54:fe:44:21:6d:ad:9a:0a:cd:0b:18:74: be:f2:58:b0:d6:10:9b:dc:b7:fe:ae:81:b3:c0:21:f9:c8:eb: d5:54:bc:9e:d6:d0:ca:12:5c:c0:0d:94:93:03:9b:54:46:b8: af:86:46:e6:e0:4b:52:97:c2:8e:16:89:3c:8d:06:f8:f9:59: d6:21:39:4c:25:82:58:49:59:07:43:db:63:8d:98:aa:04:c1: 42:f5:4f:8a:4d:35:5b:f7:79:e5:e1:31:13:72:50:87:bd:68: 3f:bd:23:e2:88:3e:cf:72:00:a7:c8:1d:40:b6:34:00:5b:7b: 73:9f:8f:17:05:53:13:a1:70:15:59:66:88:61:6a:d7:d0:bf: df:89:1a:28:af:a8:cb:c7:95:e4:f9:01:7b:c2:99:51:93:33: 8f:94:fa:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIHB6LBy/rBGDANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDExMTMyMDU0MzVaFw0x NTExMTcxNzMzMjJaMD0xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl ZDEYMBYGA1UEAxMPdWNjLndlYXRoZXIuZ292MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnTbo610AHc6r8mo/g1o5Kd2V6b1Y1ysPZ1oWIJctTJbhPMyP LxaIrv6cFdBn8ckNXMCuPzYyqpAdA7vSkXOGdF/jQfLid7NeHKnMnGg6mTreehm9 anChnz8f7MNj/en15kQUDduutEb+qLDXBwHqaBB/n8j3WiAFHXdH1xPR8LiP0pSg NimVwv0+vIAUHyKiWtBWW+ZR4ZQ8TN1jroFCfF6H9Qy4bzf0plP2Vl7I7Ff47Ax9 4BF/PQeMNzhOBY7NRrMho8Evlu7i11/tjBxtiNcXupDYy0kujU/Kv4xT2vc4nLzh bKyKYifR7NxZqTtiB2g7vdAGNXkmLYNNaQDz1wIDAQABo4ICAjCCAf4wDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/ BAQDAgWgMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20v Z2RpZzJzMS04Ny5jcmwwUwYDVR0gBEwwSjBIBgtghkgBhv1tAQcXATA5MDcGCCsG AQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRv cnkvMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29k YWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFk ZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSD MKIz1/tss/C0LIDOMHoGA1UdEQRzMHGCD3VjYy53ZWF0aGVyLmdvdoITd3d3LnVj Yy53ZWF0aGVyLmdvdoISYWxlcnRzLndlYXRoZXIuZ292ghNud3NjaGF0LndlYXRo ZXIuZ292gg92cG4ud2VhdGhlci5nb3aCD3d3dy53ZWF0aGVyLmdvdjAdBgNVHQ4E FgQUAX122WFo61D3xCYC3JRWYkULW1gwDQYJKoZIhvcNAQELBQADggEBAJZOcEVG +GmASLiIhs0GK3vW8WsL2Imr6JrA8aiZDGlF+Kf776+zaw1BvU08dhEQifqPEqVH J1BE5zeT82uE8mY0DZlpE9rdCDJsML4ur4slqppAv2E1qdkt2pewDOaYclT+RCFt rZoKzQsYdL7yWLDWEJvct/6ugbPAIfnI69VUvJ7W0MoSXMANlJMDm1RGuK+GRubg S1KXwo4WiTyNBvj5WdYhOUwlglhJWQdD22ONmKoEwUL1T4pNNVv3eeXhMRNyUIe9 aD+9I+KIPs9yAKfIHUC2NABbe3OfjxcFUxOhcBVZZohhatfQv9+JGiivqMvHleT5 AXvCmVGTM4+U+gs= -----END CERTIFICATE----- username@hostname ~ $ echo quit | openssl s_client -connect www.weather.gov:443 | openssl x509 -text depth=2 /C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root verify error:num=20:unable to get local issuer certificate verify return:0 DONE Certificate: Data: Version: 3 (0x2) Serial Number: 03:bf:3a:ef:2f:a2:7c:96:b8:ca:8f:b9:59:cd:33:2c:9d:50:11:38 Signature Algorithm: sha1WithRSAEncryption Issuer: C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1 Validity Not Before: Jun 19 16:52:07 2015 GMT Not After : Jun 19 16:52:05 2016 GMT Subject: C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN= a248.e.akamai.net Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Modulus (2048 bit): 00:d9:a2:c4:90:e0:90:c6:41:34:9d:f3:d5:95:fa: da:c3:81:bb:e4:ee:09:11:e4:a5:45:6d:73:2a:19: f9:3a:20:9e:8d:14:4f:17:b8:5a:d3:82:3c:d0:d5: f3:a4:b0:3f:b7:3a:6c:b5:7a:3a:ea:d3:14:89:b2: ac:1c:b6:08:6d:5b:41:f2:84:88:a7:1f:3a:c4:a7: aa:f0:1a:25:cb:13:78:07:7b:fb:04:2f:5f:73:5e: ed:19:d2:54:ec:f7:9b:ec:e9:14:f3:ca:53:46:15: 54:88:e4:1f:bc:8f:18:c4:c5:35:c9:cc:b1:b6:7e: 8b:ef:21:75:ad:55:e9:52:08:8c:47:dc:48:a0:c7: 8f:b6:b9:87:c2:6c:45:3e:20:63:8f:51:62:e4:37: 9a:9b:8f:80:b9:ee:17:02:1d:39:16:c9:8a:6b:69: fc:eb:2a:d5:99:17:ad:6d:3f:db:29:13:c1:7d:4b: ab:39:56:8d:59:43:bb:7f:81:71:7e:28:8a:9a:88: 3b:08:ec:bc:f0:d8:5e:e8:4b:09:4d:27:66:07:b9: 20:de:2f:90:81:cc:de:a8:c8:bb:77:c6:26:c3:5e: c8:38:35:e0:a2:b0:a5:a9:14:08:19:d4:c8:5e:73: 21:0b:ad:c2:84:a4:57:c9:c6:59:00:24:1b:54:61: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6334.1.50 CPS: https://secure.omniroot.com/repository Authority Information Access: OCSP - URI:http://vassg141.ocsp.omniroot.com CA Issuers - URI:https://cacert.a.omniroot.com/vassg141.crt CA Issuers - URI:https://cacert.a.omniroot.com/vassg141.der X509v3 Subject Alternative Name: DNS:a248.e.akamai.net, DNS:*.akamaihd.net, DNS:*. akamaihd-staging.net, DNS:*.akamaized.net, DNS:*.akamaized-staging.net X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Authority Key Identifier: keyid:DD:6C:80:7C:BA:B5:32:17:A5:84:41:40:F0:D2:04:66:13:2F:A9:90 X509v3 CRL Distribution Points: URI:http://vassg141.crl.omniroot.com/vassg141.crl X509v3 Subject Key Identifier: 03:B6:4A:9C:80:0C:60:18:88:0A:64:CD:AE:28:62:8A:7A:6C:C0:18 Signature Algorithm: sha1WithRSAEncryption 1c:64:ce:c3:76:4d:8c:29:fc:76:d1:3c:24:83:57:8e:3e:77: 21:0e:d6:83:f1:42:b9:2e:21:9d:14:96:c1:53:49:e8:16:20: 53:40:f2:e5:01:b7:df:01:07:77:49:6d:ea:53:10:c9:00:05: 0f:bb:c8:21:1d:38:9c:07:78:9c:0a:ad:e1:91:91:8b:95:f9: a8:e4:02:64:e2:15:0b:a9:7f:13:b8:03:ae:95:c5:45:47:33: fb:65:dd:30:bc:6c:cc:96:bb:c3:bc:52:77:74:03:86:ab:9d: dc:16:6f:04:49:b9:9f:8f:3c:b6:1e:5b:97:e9:f1:8e:e9:ba: 59:da:76:d4:7c:a6:7a:ce:2f:5e:d8:66:62:06:ff:c1:18:60: f8:ad:1e:31:d3:ba:ee:06:b2:75:1a:0f:05:6a:a9:61:7a:27: eb:a6:bd:f7:7c:05:c7:2c:bb:fd:ff:2d:1e:b4:b5:b4:a9:cf: 91:5b:0e:9e:e3:de:94:fa:95:b6:99:26:be:e5:7c:27:03:e9: b8:96:fa:17:6b:85:e9:1e:ed:d4:e3:41:9f:db:be:89:76:ed: e8:86:85:c1:86:1d:29:2b:17:d1:2c:0b:cf:07:cd:8a:52:89: 93:e1:72:79:c5:31:7d:f1:fa:34:ce:d9:37:94:50:0b:71:c7: 49:c8:6a:cb -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUA7867y+ifJa4yo+5Wc0zLJ1QETgwDQYJKoZIhvcNAQEF BQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoT HFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1 c3QxLjAsBgNVBAMTJVZlcml6b24gQWthbWFpIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNI QTEwHhcNMTUwNjE5MTY1MjA3WhcNMTYwNjE5MTY1MjA1WjBtMQswCQYDVQQGEwJV UzELMAkGA1UECBMCTUExEjAQBgNVBAcTCUNhbWJyaWRnZTEhMB8GA1UEChMYQWth bWFpIFRlY2hub2xvZ2llcyBJbmMuMRowGAYDVQQDExFhMjQ4LmUuYWthbWFpLm5l dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANmixJDgkMZBNJ3z1ZX6 2sOBu+TuCRHkpUVtcyoZ+Togno0UTxe4WtOCPNDV86SwP7c6bLV6OurTFImyrBy2 CG1bQfKEiKcfOsSnqvAaJcsTeAd7+wQvX3Ne7RnSVOz3m+zpFPPKU0YVVIjkH7yP GMTFNcnMsbZ+i+8hda1V6VIIjEfcSKDHj7a5h8JsRT4gY49RYuQ3mpuPgLnuFwId ORbJimtp/Osq1ZkXrW0/2ykTwX1LqzlWjVlDu3+BcX4oipqIOwjsvPDYXuhLCU0n Zge5IN4vkIHM3qjIu3fGJsNeyDg14KKwpakUCBnUyF5zIQutwoSkV8nGWQAkG1Rh TysCAwEAAaOCAjEwggItMAwGA1UdEwEB/wQCMAAwTAYDVR0gBEUwQzBBBgkrBgEE AbE+ATIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29t L3JlcG9zaXRvcnkwga8GCCsGAQUFBwEBBIGiMIGfMC0GCCsGAQUFBzABhiFodHRw Oi8vdmFzc2cxNDEub2NzcC5vbW5pcm9vdC5jb20wNgYIKwYBBQUHMAKGKmh0dHBz Oi8vY2FjZXJ0LmEub21uaXJvb3QuY29tL3Zhc3NnMTQxLmNydDA2BggrBgEFBQcw AoYqaHR0cHM6Ly9jYWNlcnQuYS5vbW5pcm9vdC5jb20vdmFzc2cxNDEuZGVyMG4G A1UdEQRnMGWCEWEyNDguZS5ha2FtYWkubmV0gg4qLmFrYW1haWhkLm5ldIIWKi5h a2FtYWloZC1zdGFnaW5nLm5ldIIPKi5ha2FtYWl6ZWQubmV0ghcqLmFrYW1haXpl ZC1zdGFnaW5nLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFN1sgHy6tTIXpYRBQPDSBGYTL6mQMD4G A1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly92YXNzZzE0MS5jcmwub21uaXJvb3QuY29t L3Zhc3NnMTQxLmNybDAdBgNVHQ4EFgQUA7ZKnIAMYBiICmTNrihiinpswBgwDQYJ KoZIhvcNAQEFBQADggEBABxkzsN2TYwp/HbRPCSDV44+dyEO1oPxQrkuIZ0UlsFT SegWIFNA8uUBt98BB3dJbepTEMkABQ+7yCEdOJwHeJwKreGRkYuV+ajkAmTiFQup fxO4A66VxUVHM/tl3TC8bMyWu8O8Und0A4arndwWbwRJuZ+PPLYeW5fp8Y7pulna dtR8pnrOL17YZmIG/8EYYPitHjHTuu4GsnUaDwVqqWF6J+umvfd8Bccsu/3/LR60 tbSpz5FbDp7j3pT6lbaZJr7lfCcD6biW+hdrheke7dTjQZ/bvol27eiGhcGGHSkr F9EsC88HzYpSiZPhcnnFMX3x+jTO2TeUUAtxx0nIass= -----END CERTIFICATE----- username@hostname ~ $ username@hostname ~ $ dig weather.gov @8.8.8.8 ; <<>> DiG 9.8.3-P1 <<>> weather.gov @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34623 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;weather.gov. IN A ;; ANSWER SECTION: weather.gov. 1 IN A 204.227.127.201 ;; Query time: 1317 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Sep 5 14:36:38 2015 ;; MSG SIZE rcvd: 45 username@hostname ~ $ dig www.weather.gov @8.8.8.8 ; <<>> DiG 9.8.3-P1 <<>> www.weather.gov @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55243 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.weather.gov. IN A ;; ANSWER SECTION: www.weather.gov. 32 IN CNAME www.weather.gov.edgesuite.net. www.weather.gov.edgesuite.net. 1193 IN CNAME a895.g.akamai.net. a895.g.akamai.net. 19 IN A 23.61.194.171 a895.g.akamai.net. 19 IN A 23.61.194.208 ;; Query time: 808 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Sep 5 14:36:45 2015 ;; MSG SIZE rcvd: 136 username@hostname ~ $ -Grant

1 0

Re: Software Defined Networking
by Scott Weeks 05 Sep '15

05 Sep '15

--- ignactro(a)gmail.com wrote: From: Ignacio de castro <ignactro(a)gmail.com> For a more academic perspective: "Software-defined networking: A comprehensive survey" http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=6994333&tag=1 ------------------------------------------ Can't read it. They suck: You have been redirected to this page for one of the following reasons: Either cookies are not enabled on your browser or Your network configuration is causing cookies to be lost or not function properly. IEEE Xplore requires cookies to maintain sessions and to access licensed content. Cookies are used temporarily to maintain sessions in IEEE Xplore and for no other purpose. The cookies will not persist after a session ends. Please change your browser settings to accept cookies before you access IEEE Xplore. scott

1 0

Re: NetFlow - path from Routers to Collector
by freedman＠freedman.net 05 Sep '15

05 Sep '15

(Jared wrote): <snip> > Most people I've seen have little data or insight into their > networks, or don't have the level that they would desire as > tools are expensive or impossible to justify due to capital costs. > Tossing in a recurring opex cost of DC XC fee + transport + XC fee + > redundant aggregation often doesn't have the ROI you infer here. > I've put together some models in this area. It seems to me the > DC/real estate companies involved could make a lot (more) money by > offering an OOB service that is 10Mb/s flat-rate for the same as an XC > fee and compete with their customers. Equinix does have a very aggressively priced 10Mb/s flat-rate OOB (single IP only but that's not that hard to work around) for essentially XC pricing. It's been stable but not something you'd rely on for 100% packet delivery to some other point on the Internet (so more for reaching a per-pop OOB than for making a coherent OOB network with a bunch of monitoring running 24x7). Still, it's a good value for what it is. <snip> > - Jared Avi Freedman CEO, Kentik avi at kentik dot com

4 3

Weekly Routing Table Report
by Routing Analysis Role Account 05 Sep '15

05 Sep '15

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 05 Sep, 2015 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 30167 Prefixes after maximum aggregation (per Origin AS): 12174 Deaggregation factor: 2.48 Unique aggregates announced (without unneeded subnets): 10608 Total ASes present in the Internet Routing Table: 4848 Prefixes per ASN: 6.22 Origin-only ASes present in the Internet Routing Table: 3304 Origin ASes announcing only one prefix: 2007 Transit ASes present in the Internet Routing Table: 1198 Transit-only ASes present in the Internet Routing Table: 707 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 36 Max AS path prepend of ASN ( 55644) 31 Prefixes from unregistered ASNs in the Routing Table: 63 Unregistered ASNs in the Routing Table: 45 Number of 32-bit ASNs allocated by the RIRs: 10864 Number of 32-bit ASNs visible in the Routing Table: 346 Prefixes from 32-bit ASNs in the Routing Table: 854 Number of bogon 32-bit ASNs visible in the Routing Table: 0 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 9 Number of addresses announced to Internet: 258338464 Equivalent to 15 /8s, 101 /16s and 238 /24s Percentage of available address space announced: 7.0 Percentage of allocated address space announced: 7.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 97.6 Total number of prefixes smaller than registry allocations: 8184 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 8544 Total APNIC prefixes after maximum aggregation: 1854 APNIC Deaggregation factor: 4.61 Prefixes being announced from the APNIC address blocks: 8266 Unique aggregates announced from the APNIC address blocks: 3049 APNIC Region origin ASes present in the Internet Routing Table: 501 APNIC Prefixes per ASN: 16.50 APNIC Region origin ASes announcing only one prefix: 125 APNIC Region transit ASes present in the Internet Routing Table: 195 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 36 Number of APNIC region 32-bit ASNs visible in the Routing Table: 27 Number of APNIC addresses announced to Internet: 45189632 Equivalent to 2 /8s, 177 /16s and 138 /24s Percentage of available APNIC address space announced: 5.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 12219 Total ARIN prefixes after maximum aggregation: 5908 ARIN Deaggregation factor: 2.07 Prefixes being announced from the ARIN address blocks: 13925 Unique aggregates announced from the ARIN address blocks: 3821 ARIN Region origin ASes present in the Internet Routing Table: 1960 ARIN Prefixes per ASN: 7.10 ARIN Region origin ASes announcing only one prefix: 1187 ARIN Region transit ASes present in the Internet Routing Table: 355 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 52 Number of ARIN addresses announced to Internet: 168019744 Equivalent to 10 /8s, 3 /16s and 199 /24s Percentage of available ARIN address space announced: 8.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-395164 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 8462 Total RIPE prefixes after maximum aggregation: 3532 RIPE Deaggregation factor: 2.40 Prefixes being announced from the RIPE address blocks: 7958 Unique aggregates announced from the RIPE address blocks: 3730 RIPE Region origin ASes present in the Internet Routing Table: 1307 RIPE Prefixes per ASN: 6.09 RIPE Region origin ASes announcing only one prefix: 688 RIPE Region transit ASes present in the Internet Routing Table: 548 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 27 Number of RIPE region 32-bit ASNs visible in the Routing Table: 265 Number of RIPE addresses announced to Internet: 45053568 Equivalent to 2 /8s, 175 /16s and 118 /24s Percentage of available RIPE address space announced: 6.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-204287 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 67 Total LACNIC prefixes after maximum aggregation: 53 LACNIC Deaggregation factor: 1.26 Prefixes being announced from the LACNIC address blocks: 9 Unique aggregates announced from the LACNIC address blocks: 1 LACNIC Region origin ASes present in the Internet Routing Table: 16 LACNIC Prefixes per ASN: 0.56 LACNIC Region origin ASes announcing only one prefix: 5 LACNIC Region transit ASes present in the Internet Routing Table: 16 Average LACNIC Region AS path length visible: 3.9 Max LACNIC Region AS path length visible: 8 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2 Number of LACNIC addresses announced to Internet: 65536 Equivalent to 0 /8s, 1 /16s and 0 /24s Percentage of available LACNIC address space announced: 0.0 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 16 Total AfriNIC prefixes after maximum aggregation: 10 AfriNIC Deaggregation factor: 1.60 Prefixes being announced from the AfriNIC address blocks: 0 Unique aggregates announced from the AfriNIC address blocks: 0 AfriNIC Region origin ASes present in the Internet Routing Table: 6 AfriNIC Prefixes per ASN: 0.00 AfriNIC Region origin ASes announcing only one prefix: 2 AfriNIC Region transit ASes present in the Internet Routing Table: 3 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 5 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 0 Number of AfriNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s Percentage of available AfriNIC address space announced: 0.0 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 979 99 7 TPG Telecom Limited 45528 578 31 32 Tikona Digital Networks Pvt L 7552 310 256 1 Viettel Corporation 9605 265 200 96 NTT DoCoMo, Inc. 24378 264 32 1 Total Access Communication PL 17488 247 61 37 Hathway IP Over Cable Interne 4755 223 64 2 TATA Communications formerly 45769 210 13 73 D-Vois Broadband Pvt Ltd 45899 198 259 24 VNNIC 17841 171 12 11 MIC E-GOVERNMENT Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3356 1310 8207 19 Level 3 Communications, Inc. 16625 485 282 347 Akamai Technologies, Inc. 20115 390 350 96 Charter Communications 11492 382 42 205 CABLE ONE, INC. 2386 325 48 282 AT&T Data Communications Serv 714 284 4096 1 Apple Inc. 22773 259 170 15 Cox Communications Inc. 62823 255 16 10 Puerto Rico Cable Acquisition 15003 179 228 27 Nobis Technology Group, LLC 10796 167 214 86 Time Warner Cable Internet LL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 20940 987 469 689 Akamai International B.V. 8402 514 64 1 OJSC "Vimpelcom" 39891 514 32 2 SaudiNet, Saudi Telecom Compa 9198 234 103 9 JSC Kazakhtelecom 48159 228 131 108 Telecommunication Infrastruct 3257 181 105 145 Tinet SpA 12586 133 42 6 GHOSTnet GmbH 51074 120 76 24 GOSTARESH-E-ERTEBATAT-E MABNA 44244 99 256 6 Iran Cell Service and Communi 35819 94 125 35 Bayanat Al-Oula For Network S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11 8 11 Uninet S.A. de C.V. 10318 9 16 1 CABLEVISION S.A. 28573 9 5 7 NET Serviços de Comunicação S 18734 6 4 5 Operbes, S.A. de C.V. 27810 5 2 5 MERCANET LTDA 6057 4 2 4 Administracion Nacional de Te 10481 4 2 4 Prima S.A. 11271 4 2 4 BT Latam Brasil Ltda 14178 4 2 3 Megacable Comunicaciones de M 27814 4 2 3 Aeprovi Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 4 1 1 Internet Solutions 5713 4 1 1 Telkom SA Ltd. 24835 4 2 4 Vodafone Data 37457 2 1 2 Telkom SA Ltd. 8452 1 1 1 TE-AS 37284 1 0 1 Aljeel Aljadeed For Technolog Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 3356 1310 8207 19 Level 3 Communications, Inc. 20940 987 469 689 Akamai International B.V. 7545 979 99 7 TPG Telecom Limited 45528 578 31 32 Tikona Digital Networks Pvt L 8402 514 64 1 OJSC "Vimpelcom" 39891 514 32 2 SaudiNet, Saudi Telecom Compa 16625 485 282 347 Akamai Technologies, Inc. 20115 390 350 96 Charter Communications 11492 382 42 205 CABLE ONE, INC. 2386 325 48 282 AT&T Data Communications Serv Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7545 979 972 TPG Telecom Limited 45528 578 546 Tikona Digital Networks Pvt L 8402 514 513 OJSC "Vimpelcom" 39891 514 512 SaudiNet, Saudi Telecom Compa 7552 310 309 Viettel Corporation 20940 987 298 Akamai International B.V. 20115 390 294 Charter Communications 714 284 283 Apple Inc. 24378 264 263 Total Access Communication PL 62823 255 245 Puerto Rico Cable Acquisition Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 47092 UNALLOCATED 8.8.204.0/24 16410 The Reynolds and Rey 53506 UNALLOCATED 8.17.102.0/23 2828 XO Communications 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 18985 UNALLOCATED 8.21.68.0/22 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser 27205 UNALLOCATED 8.38.16.0/21 6461 Abovenet Communicati 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.226.112.0/20 62788 >>UNKNOWN<< 23.249.144.0/20 40430 colo4jax, LLC 23.249.144.0/21 40430 colo4jax, LLC 23.249.152.0/21 40430 colo4jax, LLC 27.50.8.0/24 55548 Ravibhawan 27.50.9.0/24 55548 Ravibhawan 27.50.10.0/23 55548 Ravibhawan 27.100.7.0/24 56096 >>UNKNOWN<< 31.170.96.0/23 23456 32bit Transition AS Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:8 /10:0 /11:7 /12:20 /13:53 /14:67 /15:101 /16:435 /17:313 /18:632 /19:1181 /20:3313 /21:2434 /22:2977 /23:3260 /24:15338 /25:8 /26:7 /27:3 /28:2 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 39891 512 514 SaudiNet, Saudi Telecom Compa 8402 509 514 OJSC "Vimpelcom" 11492 379 382 CABLE ONE, INC. 62823 255 255 Puerto Rico Cable Acquisition 22773 212 259 Cox Communications Inc. 20115 171 390 Charter Communications 9198 144 234 JSC Kazakhtelecom 40285 128 131 NORTHLAND CABLE TELEVISION IN 48159 125 228 Telecommunication Infrastruct 12586 107 133 GHOSTnet GmbH Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1574 2:688 4:97 5:1879 6:25 8:1400 11:1 12:1809 13:19 14:1414 15:17 16:2 17:49 18:22 20:49 23:1269 24:1752 27:2080 31:1192 End of report

4 3