October 2016 - Test - lists.nanog.org

Anyone from Facebook here?
by Mark Andrews 13 Oct '16

13 Oct '16

You may want to follow up on this email thread. IPv6 vs IPv4 performance to m.facebook.com. https://www.mail-archive.com/bind-users@lists.isc.org/msg23649.html -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

3 2

A perl script to convert Cisco IOS/Nexus/ASA configurations to HTML for easier comprehension
by Jesse McGraw 13 Oct '16

13 Oct '16

Nanog, (This is me scratching an itch of my own and hoping that sharing it might be useful to others on this list. Apologies if it isn't) When I'm trying to comprehend a new or complicated Cisco router, switch or firewall configuration an old pet-peeve of mine is how needlessly difficult it is to follow deeply nested logic in route-maps, ACLs, QoS policy-maps etc etc To make this a bit simpler I’ve been working on a perl script to convert these text-based configuration files into HTML with links between the different elements (e.g. To an access-list from the interface where it’s applied, from policy-maps to class-maps etc), hopefully making it easier to to follow the chain of logic via clicking links and using the forward and back buttons in your browser to go back and forth between command and referenced list. I've put the script itself up here <https://github.com/jlmcgraw/network_configuration_navigator>: https://github.com/jlmcgraw/network_configuration_navigator See here <ttp://htmlpreview.github.com/?https://github.com/jlmcgraw/network_configura…> for output examples http://htmlpreview.github.com/?https://github.com/jlmcgraw/network_configur… Here's a quick web demo <https://hidden-waters-8218.herokuapp.com/> on Heroku https://hidden-waters-8218.herokuapp.com/ (This is just a simple web front-end to the script. I'm not a web-savvy guy so I'm sure it's poorly coded and terribly insecure. Please don't upload anything sensitive to this, it's just for testing!) I know there is a lot of stuff that could be done better so let me know if you think of anything new or notice something I’ve done wrong. One unexpected thing that has come out of this script is the ability to catch items that are defined but never actually used, whether it's due to a fat-finger or just being leftover cruft. This has proven very valuable in catching mistakes that are otherwise hard to spot. Unfortunately the script can't currently catch the inverse (things that are called but never defined) due to the way the regexes are constructed Surely this has all been done before but I couldn't find anything in a few brief moments of searching so here we are. -Jesse Notes: See the box on the right for a key and links to jump to the first line of the various types of sections or unused items There are some command-line options for reformatting (make some numbers that are hard to read into more human-readable ones, add colors to permits/denies, scrub sensitive info etc, remove some redundancy). Try and see what you like. If you run it against multiple configuration files at once it will also attempt to link between them when applicable (e.g. BGP neighbors, route next hops, interfaces on the same subnet etc). I regularly use it on a ~900 configuration files set with no problems Developed under Ubuntu Linux, somewhat tested on Windows but not at all on OS Based on configs that I work with so it doesn't cover all possible commands. Send patches!

7 16

Re: Level 3 voice outage
by Marco Teixeira 13 Oct '16

13 Oct '16

Yeap, i know, it was what i understood, as it is my opinion that a zero day would fit better... in the pure speculation world :) At the end of the day... maybe some undocumented fault int some obscure functionality that was activated/deployed a long time ago, and just revealed it self now... There are so many things that can go wrong on complex networks even with all the controls imposed on changes... On Tue, Oct 4, 2016 at 8:54 PM, Shawn Ritchie <shawnritchie(a)gmail.com> wrote: > Well, Level3 has by no means said that this was the result of a DDoS, > that's just speculation on behalf of folks who do not work at Level3 so > far. > > On Tue, Oct 4, 2016 at 2:49 PM Marco Teixeira <admin(a)marcoteixeira.com> > wrote: > >> I won't believe a company like Level3 would not deploy backplane >> protection/policing on routers. Also, 1Tb/s aggregated DDoS towards OVH >> network didn't pause or rebooted routers. And i guess both companies have >> had their share of (D)DoS in the past, so they had the time to get up to >> the challenge. Now... there where times where one malformed IP packet >> would >> cause a memory leak leading to a router reboot... :) >> >> >> >> >> On Tue, Oct 4, 2016 at 8:23 PM, Mel Beckman <mel(a)beckman.org> wrote: >> >> > 765 Gbps per second directed at a router’s interface IP might give the >> > router pause, so to speak :) >> > >> > -mel >> > >> > On Oct 4, 2016, at 12:10 PM, Marco Teixeira <admin(a)marcoteixeira.com> >> > wrote: >> > >> > Multiple reboots across several markets... Does not seem something that >> > full pipes would trigger. Had it been an approved chance it would have >> been >> > rolled back i guess... On the other hand, a zero day could apply... >> > >> > Em 04/10/2016 19:54, "Mel Beckman" <mel(a)beckman.org> escreveu: >> > >> >> Sure. The recent release of the IoT DDoS attack code in the wild. >> >> >> >> -mel >> >> >> >> > On Oct 4, 2016, at 11:42 AM, Valdis.Kletnieks(a)vt.edu wrote: >> >> > >> >> > On Tue, 04 Oct 2016 18:14:54 -0000, Mel Beckman said: >> >> > >> >> >> This could be DoS attack. >> >> > >> >> > Or a missing comma in a code update. >> >> > >> >> > Or a fumble-fingered NOC monkey. >> >> > >> >> > Or.... >> >> > >> >> > You have any reason to suspect a DoS attack rather than all the other >> >> > possibilities? >> >> >> >> >> > >> > -- > > -- > Shawn >

4 4

Just a quick question...
by Eric Tykwinski 13 Oct '16

13 Oct '16

IPv4 routes did a quick bounce to 600,949 around 9:30AM EST, than went back down to 599,241 shortly after. Seemed like a big jump so I setup an alert, just wondering if anyone else noticed anything, I’m not overly concerned, but seemed like a route leak possibly and I didn’t really see anything on bgpstream. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

3 2

Ronog livestream today
by Joly MacFie 12 Oct '16

12 Oct '16

https://youtu.be/fp3YU6hRlpc Some in English. Agenda http://ronog.ro/ ION Bucharest at 14:00 EEST | 11:00 UTC | 07:00 EDT http://www.internetsociety.org/deploy360/ion/bucharest2016/ -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast -------------------------------------------------------------- -

1 0

Re: List of US server providers?
by John Kristoff 11 Oct '16

11 Oct '16

On Tue, 11 Oct 2016 14:23:19 +0000 Carlos Kamtha <kamtha(a)ak-labs.net> wrote: > Was wondering if anyone can point me to a current list of > dedicated/VPS providers in the US. That is, if such a list exists... I'm not sure such a comprehensive and regularly maintained list is available, and I'm not sure it could be. It would be very large and difficult to keep current. You can find many providers advertised or discussed in web-based forums such as Web Hosting Talk or Low End Talk. I maintain a small subset and woefully incomplete list of providers, most of which have some U.S. presence, but not necessarily all, that I've had some recent experience with here: <https://github.com/dataplane/serverhosting> John

2 1

List of US server providers?
by Carlos Kamtha 11 Oct '16

11 Oct '16

Hello Everyone, Was wondering if anyone can point me to a current list of dedicated/VPS providers in the US. That is, if such a list exists... Any help would be greatly appreciated. Cheers. -C

1 0

Krebs on Security booted off Akamai network after DDoS attack proves pricey
by Grant Ridder 10 Oct '16

10 Oct '16

Didn't realize Akamai kicked out or disabled customers http://www.zdnet.com/article/krebs-on-security-booted-off-akamai-network-af… "Security blog Krebs on Security has been taken offline by host Akamai Technologies following a DDoS attack which reached 665 Gbps in size." -Grant

51 125

FCC: DIRS activated for providers in Florida, Georgia, South Carolina
by Sean Donelan 10 Oct '16

10 Oct '16

The U.S. Federal Communications Commission has activated its Disaster Information Reporting System (DIRS) in response to Hurricane Matthew. DIRS is a voluntary, web-based system that communications providers, including wireless, wireline, broadcast, cable and Voice over Internet Protocol providers, can use to report communications infrastructure status and situational awareness information during times of crisis. http://transition.fcc.gov/Daily_Releases/Daily_Business/2016/db1007/DA-16-1…

2 3

Important - Register for NANOG 68 by 13 October to Vote in the NRO NC Election
by John Curran 10 Oct '16

10 Oct '16

NANOGers - Meeting attendees who register for NANOG 68 by close of business on Thursday, 13 October will be eligible to vote online in the Number Resource Organization Number Council (NRO NC) election for the ARIN region. (If you are also an ARIN eligible voting contact, please note that you will be able to vote in this same election beginning 20 October when voting opens for the ARIN Board of Trustees and ARIN Advisory Council elections.) The 2016 candidates for the one open seat on the NRO NC are: Robert J. Kenney Jason Schiller You can view candidate questionnaires and see/make Statements of Support at: https://www.bigpulse.com/p42725/ You can learn more about the role of the NRO NC at: https://www.arin.net/about_us/nronc.html Note that all eligible NANOG 68 registered attendees will receive an email at 11:00 AM EDT on Monday 17 October with instructions on how to cast your ballot. The election closes at 3:00 PM EDT Friday 28 October and results will be announced the following week. Please visit the ARIN Elections Helpdesk onsite in Dallas if you have issues voting or contact us at "members(a)arin.net<mailto:members@arin.net>". Thanks for participating! /John John Curran President and CEO American Registry for Internet Numbers

1 0