May 2017 - Test - lists.nanog.org

Please run windows update now
by Ca By 17 May '17

17 May '17

This looks like a major worm that is going global Please run windows update as soon as possible and spread the word It may be worth also closing down ports 445 / 139 / 3389 http://www.npr.org/sections/thetwo-way/2017/05/12/528119808/large-cyber-att…

29 55

vFlow :: IPFIX, sFlow and Netflow collector
by Mehrdad Arshad Rad 17 May '17

17 May '17

Hi all, I just wanted to share the vFlow - IPFIX, sFlow and Netflow collector, it's scalable and reliable, written by pure Golang! It doesn't have any library dependency and works w/ Kafka and NSQ (you can write your own MQ plugin). https://github.com/VerizonDigital/vflow For more information https://www.linkedin.com/pulse/high-performance-scalable-reliable-ipfix-sfl… It can be able to integrate w/ MemSQL easy and you can have kind of below SQL query: memsql> select * from samples order by bytes desc limit 20; +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ | device | src | dst | srcASN | dstASN | proto | srcPort | dstPort | tcpFlags | bytes | datetime | +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ | 192.129.230.0 | 87.11.81.121 | 61.231.215.18 | 131780 | 21773 | 6 | 80 | 64670 | 0x10 | 342000 | 2017-04-27 22:05:55 | | 52.20.79.116 | 87.11.81.100 | 216.38.140.154 | 41171 | 7994 | 6 | 443 | 26798 | 0x18 | 283364 | 2017-04-27 22:06:00 | | 52.20.79.116 | 192.229.211.70 | 50.240.197.150 | 41171 | 33651 | 6 | 80 | 23397 | 0x10 | 216000 | 2017-04-27 22:05:55 | | 108.161.249.16 | 152.125.33.113 | 74.121.78.10 | 13768 | 9551 | 6 | 80 | 49217 | 0x18 | 196500 | 2017-04-27 22:05:59 | | 192.229.130.0 | 87.21.81.254 | 94.56.54.135 | 132780 | 21773 | 6 | 80 | 52853 | 0x18 | 165000 | 2017-04-27 22:05:55 | | 108.161.229.96 | 93.184.215.169 | 152.157.32.200 | 12768 | 11430 | 6 | 443 | 50488 | 0x18 | 86400 | 2017-04-27 22:06:01 | | 52.22.49.106 | 122.229.210.189 | 99.31.208.183 | 22171 | 8018 | 6 | 443 | 33059 | 0x18 | 73500 | 2017-04-27 22:05:55 | | 52.22.49.126 | 81.21.81.131 | 66.215.169.120 | 22171 | 20115 | 6 | 80 | 57468 | 0x10 | 66000 | 2017-04-27 22:05:59 | | 108.160.149.96 | 94.184.215.151 | 123.90.233.120 | 16768 | 14476 | 6 | 80 | 63905 | 0x18 | 65540 | 2017-04-27 22:05:57 | | 52.22.79.116 | 162.129.210.181 | 60.180.253.156 | 21271 | 31651 | 6 | 443 | 59652 | 0x18 | 64805 | 2017-04-27 22:06:00 | | 108.161.149.90 | 93.184.215.169 | 80.96.58.146 | 13868 | 22394 | 6 | 443 | 1151 | 0x18 | 59976 | 2017-04-27 22:05:54 | | 102.232.179.20 | 111.18.232.131 | 121.62.44.149 | 24658 | 4771 | 6 | 80 | 61076 | 0x10 | 59532 | 2017-04-27 22:05:54 | | 102.232.179.20 | 192.129.145.6 | 110.49.221.232 | 24658 | 4804 | 6 | 443 | 50002 | 0x10 | 58500 | 2017-04-27 22:05:55 | | 102.232.179.20 | 192.129.232.112 | 124.132.217.101 | 24658 | 43124 | 6 | 443 | 37686 | 0x10 | 57000 | 2017-04-27 22:06:00 | | 192.229.230.0 | 87.11.81.253 | 219.147.144.22 | 132380 | 2900 | 6 | 80 | 25202 | 0x18 | 56120 | 2017-04-27 22:05:58 | | 192.129.130.0 | 87.21.11.200 | 180.239.187.151 | 132380 | 8151 | 6 | 443 | 55062 | 0x18 | 52220 | 2017-04-27 22:05:59 | | 52.12.79.126 | 87.21.11.254 | 64.30.125.221 | 21071 | 14051 | 6 | 80 | 57072 | 0x10 | 51000 | 2017-04-27 22:05:54 | | 192.229.110.1 | 150.195.33.40 | 98.171.170.51 | 132980 | 28773 | 6 | 80 | 53270 | 0x18 | 51000 | 2017-04-27 22:05:57 | | 192.229.110.1 | 87.21.81.254 | 68.96.162.21 | 132980 | 28773 | 6 | 80 | 46727 | 0x18 | 49500 | 2017-04-27 22:06:01 | | 52.22.59.110 | 192.129.210.181 | 151.203.130.228 | 21271 | 12452 | 6 | 80 | 43720 | 0x18 | 49500 | 2017-04-27 22:05:55 | +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ 20 rows in set (0.06 sec) Please let me know if you have any questions. Thanks, Mehrdad -- *M*ehrdad Arshad Rad *P*rincipal Software Engineer https://www.linkedin.com/in/mehrdadrad

5 6

NCS5508 for Agg/Core/Peering router
by Will Black 17 May '17

17 May '17

Is anyone using the NCS5508 as the role of a backbone Core / Aggregation / Peering router? I understand these are generally different network models but we would be interested in hearing whether anyone is using these routers for all three roles. We flattened our network during our last refresh and are trying to do more with less (who isn’t these days?), so we’re trying to determine whether the NCS5508 would fit the bill that’s currently being served by our ASR9K’s. We would also be interested in hearing general observations and thoughts about the NCS5508 for any role. Thanks, Will Black

2 1

Yahoo mail / DNS admin on the list?
by Bryan Holloway 16 May '17

16 May '17

Having an intermittent issue where Yahoo's mail-servers keep complaining about not finding MX records for a small handful of customers (and always the same customers.) Tried submitting a ticket through the postmaster web-site but haven't gotten any response. Could someone contact me off-list? It would be greatly appreciated. Thanks! - bryan

1 1

IRNOG1 Meeting
by Shahab Vahabzadeh 16 May '17

16 May '17

Hello Hello, Proudly I want to announce that 1st IRNOG Meeting will launch at 24th of May in Tehran. In the first day of public announce we had near 90 people registered to attend the meeting. Hope to find this meeting useful in Iranian Community. It would be great to get your ideas about the experiences of coordinating such a meetings. http://ir-nog.com Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator PGP Key Fingerprint = 1C43 988E 01A8 4D95 B662 9118 CD94 9F10 4DF4 6163

2 2

Carrier classification
by Matt Hoppes 16 May '17

16 May '17

Are the terms tier-1,2,3 dead terms or still valid ways to define carriers?

9 12

RE: Please run windows update now
by Scott Weeks 15 May '17

15 May '17

--- nanog(a)incomingmta.com wrote: From: "Phillip White" <nanog(a)incomingmta.com> ...I have been on this list for many years...Today, though, I felt the need to create the mailbox just so I could reply since your posts have been the most irritating I have ever seen on this list. -------------------------------------- "the most irritating I have ever seen on this list" You can't have been on this list very long, then... ;-) scott

2 2

Question to Google
by Marco Davids (Private) 15 May '17

15 May '17

Hi, Anyone knows why coogle.com only have IPv4-adresses on their authoritative DNS? https://ip6.nl/#!google.com Are there any plans to fix this? -- Marco

9 14

Charter engineer
by Samual Carman 15 May '17

15 May '17

Can a charter engineer please contact me off list I am getting slammed from a charter ip address on a local cable node and normal support channels have been unhelpful at bet and unwilling to escalate the issue if anyone else has any suggestion please feel free to contact Contact may be delayed as I will flying back from Dubai today In addition would a charter voice /internet engineer please contact me off list or someone who specialize in fax machines on the charter network Thanks Sam Mettai Inc Yakima, Branch Sent from my home please excuse grammar and spelling issues Sent from my iPhone Get Outlook for iOS<https://aka.ms/o0ukef>

2 1

BCP for securing IPv6 Linux end node in AWS
by Eric Germann 15 May '17

15 May '17

Good morning all, I’m looking for some guidance on best practices to secure IPv6 on Linux end nodes parked in AWS. Boxes will be running various services (DNS for starters) and I’m looking to secure mainly ICMP at this point. Service filtering is fairly cut and dried. I’ve reviewed some of the stuff out there, but apparently I’m catching too many of the ICMP types in the rejection as routing eventually breaks. My guess is router discovery gets broken by too tight of filters. Thanks for any guidance. EKG

7 7